2025-09-09 20:59:08.651412 | Job console starting 2025-09-09 20:59:08.695022 | Updating git repos 2025-09-09 20:59:08.732256 | Cloning repos into workspace 2025-09-09 20:59:08.776840 | Restoring repo states 2025-09-09 20:59:08.810744 | Merging changes 2025-09-09 20:59:09.344133 | Checking out repos 2025-09-09 20:59:09.411941 | Preparing playbooks 2025-09-09 20:59:10.028213 | Running Ansible setup 2025-09-09 20:59:17.204134 | PRE-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/pre.yaml@main] 2025-09-09 20:59:17.932547 | 2025-09-09 20:59:17.932748 | PLAY [Base pre] 2025-09-09 20:59:17.949396 | 2025-09-09 20:59:17.949523 | TASK [Setup log path fact] 2025-09-09 20:59:17.977427 | centos-9-stream | ok 2025-09-09 20:59:17.991674 | 2025-09-09 20:59:17.991842 | TASK [set-zuul-log-path-fact : Set log path for a build] 2025-09-09 20:59:18.030751 | centos-9-stream | ok 2025-09-09 20:59:18.041145 | 2025-09-09 20:59:18.041254 | TASK [emit-job-header : Print job information] 2025-09-09 20:59:18.085804 | # Job Information 2025-09-09 20:59:18.086104 | Ansible Version: 2.16.14 2025-09-09 20:59:18.086173 | Job: ansible-collection-services-molecule-auditd 2025-09-09 20:59:18.086240 | Pipeline: check 2025-09-09 20:59:18.086289 | Executor: 521e9411259a 2025-09-09 20:59:18.086331 | Triggered by: https://github.com/osism/ansible-collection-services/pull/1996 2025-09-09 20:59:18.086374 | Event ID: cd217fc0-8dbf-11f0-83f0-2d404408e489 2025-09-09 20:59:18.093210 | 2025-09-09 20:59:18.093363 | LOOP [emit-job-header : Print node information] 2025-09-09 20:59:18.183495 | centos-9-stream | ok: 2025-09-09 20:59:18.183789 | centos-9-stream | # Node Information 2025-09-09 20:59:18.183835 | centos-9-stream | Inventory Hostname: centos-9-stream 2025-09-09 20:59:18.183868 | centos-9-stream | Hostname: np0000102308 2025-09-09 20:59:18.183896 | centos-9-stream | Username: zuul 2025-09-09 20:59:18.184042 | centos-9-stream | Distro: CentOS 9 2025-09-09 20:59:18.184074 | centos-9-stream | Provider: regiocloud-a 2025-09-09 20:59:18.184096 | centos-9-stream | Region: 2025-09-09 20:59:18.184117 | centos-9-stream | Label: centos-9-stream 2025-09-09 20:59:18.184137 | centos-9-stream | Product Name: OpenStack Nova 2025-09-09 20:59:18.184156 | centos-9-stream | Interface IP: 2a13:1a81:8000:3124:f816:3eff:fe84:2456 2025-09-09 20:59:18.257924 | centos-9-stream | ok: 2025-09-09 20:59:18.258039 | centos-9-stream | # Node Information 2025-09-09 20:59:18.258070 | centos-9-stream | Inventory Hostname: debian-bookworm 2025-09-09 20:59:18.258094 | centos-9-stream | Hostname: debian 2025-09-09 20:59:18.258119 | centos-9-stream | Username: zuul 2025-09-09 20:59:18.258140 | centos-9-stream | Distro: Debian 12.12 2025-09-09 20:59:18.258161 | centos-9-stream | Provider: regiocloud-a 2025-09-09 20:59:18.258180 | centos-9-stream | Region: 2025-09-09 20:59:18.258199 | centos-9-stream | Label: debian-bookworm 2025-09-09 20:59:18.258218 | centos-9-stream | Product Name: OpenStack Nova 2025-09-09 20:59:18.258236 | centos-9-stream | Interface IP: 2a13:1a81:8000:3124:f816:3eff:fe4b:3dcc 2025-09-09 20:59:18.310041 | centos-9-stream | ok: 2025-09-09 20:59:18.310152 | centos-9-stream | # Node Information 2025-09-09 20:59:18.310184 | centos-9-stream | Inventory Hostname: ubuntu-jammy 2025-09-09 20:59:18.310207 | centos-9-stream | Hostname: ubuntu 2025-09-09 20:59:18.310227 | centos-9-stream | Username: zuul 2025-09-09 20:59:18.310247 | centos-9-stream | Distro: Ubuntu 22.04 2025-09-09 20:59:18.310266 | centos-9-stream | Provider: regiocloud-a 2025-09-09 20:59:18.310285 | centos-9-stream | Region: 2025-09-09 20:59:18.310304 | centos-9-stream | Label: ubuntu-jammy 2025-09-09 20:59:18.310321 | centos-9-stream | Product Name: OpenStack Nova 2025-09-09 20:59:18.310339 | centos-9-stream | Interface IP: 2a13:1a81:8000:3124:f816:3eff:feb1:f8eb 2025-09-09 20:59:18.378188 | centos-9-stream | ok: 2025-09-09 20:59:18.378297 | centos-9-stream | # Node Information 2025-09-09 20:59:18.378328 | centos-9-stream | Inventory Hostname: ubuntu-noble 2025-09-09 20:59:18.378352 | centos-9-stream | Hostname: ubuntu 2025-09-09 20:59:18.378390 | centos-9-stream | Username: zuul 2025-09-09 20:59:18.378417 | centos-9-stream | Distro: Ubuntu 24.04 2025-09-09 20:59:18.378438 | centos-9-stream | Provider: regiocloud-a 2025-09-09 20:59:18.378457 | centos-9-stream | Region: 2025-09-09 20:59:18.378476 | centos-9-stream | Label: ubuntu-noble 2025-09-09 20:59:18.378495 | centos-9-stream | Product Name: OpenStack Nova 2025-09-09 20:59:18.378513 | centos-9-stream | Interface IP: 2a13:1a81:8000:3124:f816:3eff:fe9b:a52b 2025-09-09 20:59:18.406015 | 2025-09-09 20:59:18.406132 | TASK [log-inventory : Ensure Zuul Ansible directory exists] 2025-09-09 20:59:18.898805 | centos-9-stream -> localhost | changed 2025-09-09 20:59:18.905184 | 2025-09-09 20:59:18.905307 | TASK [log-inventory : Copy ansible inventory to logs dir] 2025-09-09 20:59:20.496286 | ubuntu-noble -> localhost | changed 2025-09-09 20:59:20.551383 | centos-9-stream -> localhost | ok 2025-09-09 20:59:20.614959 | debian-bookworm -> localhost | ok 2025-09-09 20:59:20.636797 | ubuntu-jammy -> localhost | ok 2025-09-09 20:59:20.663782 | 2025-09-09 20:59:20.663915 | TASK [add-build-sshkey : Check to see if ssh key was already created for this build] 2025-09-09 20:59:20.961468 | centos-9-stream -> localhost | ok 2025-09-09 20:59:20.969132 | 2025-09-09 20:59:20.969265 | TASK [add-build-sshkey : Create a new key in workspace based on build UUID] 2025-09-09 20:59:21.001267 | centos-9-stream | ok 2025-09-09 20:59:21.016539 | debian-bookworm | ok 2025-09-09 20:59:21.022033 | ubuntu-jammy | ok 2025-09-09 20:59:21.026060 | ubuntu-noble | ok 2025-09-09 20:59:21.053792 | centos-9-stream | included: /var/lib/zuul/builds/6d27858d44b345c98d37aabbb4edd30d/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/create-key-and-replace.yaml 2025-09-09 20:59:21.053884 | debian-bookworm | included: /var/lib/zuul/builds/6d27858d44b345c98d37aabbb4edd30d/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/create-key-and-replace.yaml 2025-09-09 20:59:21.053912 | ubuntu-jammy | included: /var/lib/zuul/builds/6d27858d44b345c98d37aabbb4edd30d/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/create-key-and-replace.yaml 2025-09-09 20:59:21.053933 | ubuntu-noble | included: /var/lib/zuul/builds/6d27858d44b345c98d37aabbb4edd30d/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/create-key-and-replace.yaml 2025-09-09 20:59:21.060962 | 2025-09-09 20:59:21.061064 | TASK [add-build-sshkey : Create Temp SSH key] 2025-09-09 20:59:21.984115 | centos-9-stream -> localhost | Generating public/private rsa key pair. 2025-09-09 20:59:21.984464 | centos-9-stream -> localhost | Your identification has been saved in /var/lib/zuul/builds/6d27858d44b345c98d37aabbb4edd30d/work/6d27858d44b345c98d37aabbb4edd30d_id_rsa 2025-09-09 20:59:21.984535 | centos-9-stream -> localhost | Your public key has been saved in /var/lib/zuul/builds/6d27858d44b345c98d37aabbb4edd30d/work/6d27858d44b345c98d37aabbb4edd30d_id_rsa.pub 2025-09-09 20:59:21.984586 | centos-9-stream -> localhost | The key fingerprint is: 2025-09-09 20:59:21.984634 | centos-9-stream -> localhost | SHA256:/t/EAAJpMX/ig/wl+Hb9tdwmzD/la772t01EQLBo0kk zuul-build-sshkey 2025-09-09 20:59:21.984677 | centos-9-stream -> localhost | The key's randomart image is: 2025-09-09 20:59:21.984743 | centos-9-stream -> localhost | +---[RSA 3072]----+ 2025-09-09 20:59:21.984786 | centos-9-stream -> localhost | | +o E .oo | 2025-09-09 20:59:21.984848 | centos-9-stream -> localhost | | o+ o o . . | 2025-09-09 20:59:21.984910 | centos-9-stream -> localhost | | . = B . .| 2025-09-09 20:59:21.984952 | centos-9-stream -> localhost | | . + * . . | 2025-09-09 20:59:21.984991 | centos-9-stream -> localhost | | + S . . .| 2025-09-09 20:59:21.985028 | centos-9-stream -> localhost | | + + . o ..| 2025-09-09 20:59:21.985066 | centos-9-stream -> localhost | | = . .oo.+| 2025-09-09 20:59:21.985104 | centos-9-stream -> localhost | | . o +=*B| 2025-09-09 20:59:21.985157 | centos-9-stream -> localhost | | ... *@%| 2025-09-09 20:59:21.985194 | centos-9-stream -> localhost | +----[SHA256]-----+ 2025-09-09 20:59:21.985284 | centos-9-stream -> localhost | ok: Runtime: 0:00:00.423298 2025-09-09 20:59:21.995100 | 2025-09-09 20:59:21.995251 | TASK [add-build-sshkey : Remote setup ssh keys (linux)] 2025-09-09 20:59:22.021429 | centos-9-stream | ok 2025-09-09 20:59:22.040061 | debian-bookworm | ok 2025-09-09 20:59:22.054744 | ubuntu-jammy | ok 2025-09-09 20:59:22.069396 | ubuntu-noble | ok 2025-09-09 20:59:22.090726 | centos-9-stream | included: /var/lib/zuul/builds/6d27858d44b345c98d37aabbb4edd30d/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/remote-linux.yaml 2025-09-09 20:59:22.090807 | debian-bookworm | included: /var/lib/zuul/builds/6d27858d44b345c98d37aabbb4edd30d/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/remote-linux.yaml 2025-09-09 20:59:22.090864 | ubuntu-jammy | included: /var/lib/zuul/builds/6d27858d44b345c98d37aabbb4edd30d/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/remote-linux.yaml 2025-09-09 20:59:22.090888 | ubuntu-noble | included: /var/lib/zuul/builds/6d27858d44b345c98d37aabbb4edd30d/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/remote-linux.yaml 2025-09-09 20:59:22.106999 | 2025-09-09 20:59:22.107097 | TASK [add-build-sshkey : Remove previously added zuul-build-sshkey] 2025-09-09 20:59:22.132864 | centos-9-stream | skipping: Conditional result was False 2025-09-09 20:59:22.144257 | debian-bookworm | skipping: Conditional result was False 2025-09-09 20:59:22.146208 | ubuntu-jammy | skipping: Conditional result was False 2025-09-09 20:59:22.156593 | ubuntu-noble | skipping: Conditional result was False 2025-09-09 20:59:22.161248 | 2025-09-09 20:59:22.161345 | TASK [add-build-sshkey : Enable access via build key on all nodes] 2025-09-09 20:59:22.760057 | ubuntu-jammy | changed 2025-09-09 20:59:22.767108 | debian-bookworm | changed 2025-09-09 20:59:22.836873 | centos-9-stream | changed 2025-09-09 20:59:22.867732 | ubuntu-noble | changed 2025-09-09 20:59:22.874774 | 2025-09-09 20:59:22.874927 | TASK [add-build-sshkey : Make sure user has a .ssh] 2025-09-09 20:59:23.150541 | ubuntu-jammy | ok 2025-09-09 20:59:23.157832 | debian-bookworm | ok 2025-09-09 20:59:23.193187 | centos-9-stream | ok 2025-09-09 20:59:23.199865 | ubuntu-noble | ok 2025-09-09 20:59:23.205150 | 2025-09-09 20:59:23.205259 | TASK [add-build-sshkey : Install build private key as SSH key on all nodes] 2025-09-09 20:59:23.840105 | ubuntu-jammy | changed 2025-09-09 20:59:23.924527 | debian-bookworm | changed 2025-09-09 20:59:23.952728 | ubuntu-noble | changed 2025-09-09 20:59:24.188756 | centos-9-stream | changed 2025-09-09 20:59:24.195213 | 2025-09-09 20:59:24.195340 | TASK [add-build-sshkey : Install build public key as SSH key on all nodes] 2025-09-09 20:59:24.858309 | ubuntu-jammy | changed 2025-09-09 20:59:24.886659 | debian-bookworm | changed 2025-09-09 20:59:24.970732 | ubuntu-noble | changed 2025-09-09 20:59:25.186653 | centos-9-stream | changed 2025-09-09 20:59:25.195436 | 2025-09-09 20:59:25.195575 | TASK [add-build-sshkey : Remote setup ssh keys (windows)] 2025-09-09 20:59:25.227466 | centos-9-stream | skipping: Conditional result was False 2025-09-09 20:59:25.243762 | debian-bookworm | skipping: Conditional result was False 2025-09-09 20:59:25.245869 | ubuntu-jammy | skipping: Conditional result was False 2025-09-09 20:59:25.266960 | ubuntu-noble | skipping: Conditional result was False 2025-09-09 20:59:25.279373 | 2025-09-09 20:59:25.279536 | TASK [remove-zuul-sshkey : Remove master key from local agent] 2025-09-09 20:59:25.720551 | centos-9-stream -> localhost | changed 2025-09-09 20:59:25.743122 | 2025-09-09 20:59:25.743253 | TASK [add-build-sshkey : Add back temp key] 2025-09-09 20:59:26.093043 | centos-9-stream -> localhost | Identity added: /var/lib/zuul/builds/6d27858d44b345c98d37aabbb4edd30d/work/6d27858d44b345c98d37aabbb4edd30d_id_rsa (zuul-build-sshkey) 2025-09-09 20:59:26.093418 | centos-9-stream -> localhost | ok: Runtime: 0:00:00.017690 2025-09-09 20:59:26.102500 | 2025-09-09 20:59:26.102647 | TASK [add-build-sshkey : Verify we can still SSH to all nodes] 2025-09-09 20:59:26.544138 | ubuntu-jammy | ok 2025-09-09 20:59:26.551444 | debian-bookworm | ok 2025-09-09 20:59:26.577531 | centos-9-stream | ok 2025-09-09 20:59:26.583015 | ubuntu-noble | ok 2025-09-09 20:59:26.587635 | 2025-09-09 20:59:26.587783 | TASK [add-build-sshkey : Verify we can still SSH to all nodes (windows)] 2025-09-09 20:59:26.613984 | centos-9-stream | skipping: Conditional result was False 2025-09-09 20:59:26.626676 | debian-bookworm | skipping: Conditional result was False 2025-09-09 20:59:26.637976 | ubuntu-jammy | skipping: Conditional result was False 2025-09-09 20:59:26.648369 | ubuntu-noble | skipping: Conditional result was False 2025-09-09 20:59:26.669216 | 2025-09-09 20:59:26.669316 | TASK [start-zuul-console : Start zuul_console daemon.] 2025-09-09 20:59:27.107863 | ubuntu-jammy | ok 2025-09-09 20:59:27.112636 | debian-bookworm | ok 2025-09-09 20:59:27.148554 | centos-9-stream | ok 2025-09-09 20:59:27.152764 | ubuntu-noble | ok 2025-09-09 20:59:27.174438 | 2025-09-09 20:59:27.174536 | TASK [validate-host : Define zuul_info_dir fact] 2025-09-09 20:59:27.217328 | centos-9-stream | ok 2025-09-09 20:59:27.227886 | ubuntu-jammy | ok 2025-09-09 20:59:27.232030 | debian-bookworm | ok 2025-09-09 20:59:27.238343 | ubuntu-noble | ok 2025-09-09 20:59:27.242251 | 2025-09-09 20:59:27.242345 | TASK [validate-host : Ensure Zuul Ansible directory exists] 2025-09-09 20:59:27.521386 | centos-9-stream -> localhost | ok 2025-09-09 20:59:27.527138 | 2025-09-09 20:59:27.527254 | TASK [validate-host : Collect information about the host] 2025-09-09 20:59:28.725150 | ubuntu-jammy | ok 2025-09-09 20:59:28.742689 | debian-bookworm | ok 2025-09-09 20:59:28.755859 | centos-9-stream | ok 2025-09-09 20:59:28.766707 | ubuntu-noble | ok 2025-09-09 20:59:28.776427 | 2025-09-09 20:59:28.776550 | TASK [validate-host : Sanitize hostname] 2025-09-09 20:59:28.849793 | centos-9-stream | ok 2025-09-09 20:59:28.897308 | debian-bookworm | ok 2025-09-09 20:59:28.997444 | ubuntu-jammy | ok 2025-09-09 20:59:29.001133 | ubuntu-noble | ok 2025-09-09 20:59:29.005015 | 2025-09-09 20:59:29.005128 | TASK [validate-host : Write out all ansible variables/facts known for each host] 2025-09-09 20:59:29.685263 | debian-bookworm -> localhost | changed 2025-09-09 20:59:29.731368 | centos-9-stream -> localhost | changed 2025-09-09 20:59:29.733015 | ubuntu-noble -> localhost | changed 2025-09-09 20:59:29.867096 | ubuntu-jammy -> localhost | changed 2025-09-09 20:59:29.878882 | 2025-09-09 20:59:29.879051 | TASK [validate-host : Collect information about zuul worker] 2025-09-09 20:59:30.294475 | ubuntu-jammy | ok 2025-09-09 20:59:30.323880 | debian-bookworm | ok 2025-09-09 20:59:30.341931 | ubuntu-noble | ok 2025-09-09 20:59:30.379109 | centos-9-stream | ok 2025-09-09 20:59:30.386866 | 2025-09-09 20:59:30.387000 | TASK [validate-host : Write out all zuul information for each host] 2025-09-09 20:59:31.143094 | debian-bookworm -> localhost | changed 2025-09-09 20:59:31.164728 | ubuntu-noble -> localhost | changed 2025-09-09 20:59:31.328846 | centos-9-stream -> localhost | changed 2025-09-09 20:59:31.341315 | ubuntu-jammy -> localhost | changed 2025-09-09 20:59:31.370523 | 2025-09-09 20:59:31.370617 | TASK [prepare-workspace-log : Start zuul_console daemon.] 2025-09-09 20:59:31.669560 | ubuntu-jammy | ok 2025-09-09 20:59:31.672629 | centos-9-stream | ok 2025-09-09 20:59:31.678376 | debian-bookworm | ok 2025-09-09 20:59:31.742558 | ubuntu-noble | ok 2025-09-09 20:59:31.746704 | 2025-09-09 20:59:31.746790 | TASK [prepare-workspace-log : Synchronize src repos to workspace directory.] 2025-09-09 20:59:32.746231 | centos-9-stream | changed: 2025-09-09 20:59:32.746455 | centos-9-stream | cd+++++++++ src/ 2025-09-09 20:59:32.746490 | centos-9-stream | cd+++++++++ src/github.com/ 2025-09-09 20:59:32.746521 | centos-9-stream | cd+++++++++ src/github.com/osism/ 2025-09-09 20:59:32.746544 | centos-9-stream | cd+++++++++ src/github.com/osism/ansible-collection-services/ 2025-09-09 20:59:32.746565 | centos-9-stream | validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-09-09 21:02:45.369996 | ubuntu-noble | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-09-09 21:02:45.370079 | ubuntu-noble | INFO default scenario not found, disabling shared state. 2025-09-09 21:02:45.370196 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: dependency 2025-09-09 21:02:45.370223 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-09-09 21:02:45.255421 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-09-09 21:02:45.263399 | debian-bookworm | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-09-09 21:02:45.263478 | debian-bookworm | INFO default scenario not found, disabling shared state. 2025-09-09 21:02:45.263629 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: dependency 2025-09-09 21:02:45.263663 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-09-09 21:02:45.208575 | centos-9-stream | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-09-09 21:02:45.217375 | centos-9-stream | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-09-09 21:02:45.217434 | centos-9-stream | INFO default scenario not found, disabling shared state. 2025-09-09 21:02:45.217581 | centos-9-stream | INFO [delegated > discovery] scenario test matrix: dependency 2025-09-09 21:02:45.217627 | centos-9-stream | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-09-09 21:02:45.220943 | ubuntu-jammy | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-09-09 21:02:45.228254 | ubuntu-jammy | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-09-09 21:02:45.228338 | ubuntu-jammy | INFO default scenario not found, disabling shared state. 2025-09-09 21:02:45.228459 | ubuntu-jammy | INFO [delegated > discovery] scenario test matrix: dependency 2025-09-09 21:02:45.228508 | ubuntu-jammy | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-09-09 21:02:46.273683 | debian-bookworm | INFO [delegated > dependency] Starting 2025-09-09 21:02:46.274013 | debian-bookworm | WARNING [delegated > dependency] Skipping, missing the requirements file. 2025-09-09 21:02:46.307083 | centos-9-stream | WARNING Another version of 'amazon.aws' 9.5.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 9.5.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.307197 | centos-9-stream | WARNING Another version of 'ansible.netcommon' 7.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 7.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.307375 | centos-9-stream | WARNING Another version of 'ansible.posix' 1.6.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.6.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.307506 | centos-9-stream | WARNING Another version of 'ansible.utils' 5.1.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.1.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.307597 | centos-9-stream | WARNING Another version of 'ansible.windows' 2.8.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.8.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.307665 | centos-9-stream | WARNING Another version of 'arista.eos' 10.1.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 10.1.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.307734 | centos-9-stream | WARNING Another version of 'awx.awx' 24.6.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 24.6.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.307845 | centos-9-stream | WARNING Another version of 'azure.azcollection' 3.8.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.8.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.307916 | centos-9-stream | WARNING Another version of 'check_point.mgmt' 6.5.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.5.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.307979 | centos-9-stream | WARNING Another version of 'chocolatey.chocolatey' 1.5.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.5.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.308040 | centos-9-stream | WARNING Another version of 'cisco.aci' 2.12.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.12.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.308103 | centos-9-stream | WARNING Another version of 'cisco.asa' 6.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.308160 | centos-9-stream | WARNING Another version of 'cisco.dnac' 6.31.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.31.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.308223 | centos-9-stream | WARNING Another version of 'cisco.intersight' 2.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.308286 | centos-9-stream | WARNING Another version of 'cisco.ios' 9.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 9.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.308344 | centos-9-stream | WARNING Another version of 'cisco.iosxr' 10.3.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 10.3.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.308403 | centos-9-stream | WARNING Another version of 'cisco.ise' 2.10.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.10.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.308466 | centos-9-stream | WARNING Another version of 'cisco.meraki' 2.21.4 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.21.4 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.308530 | centos-9-stream | WARNING Another version of 'cisco.mso' 2.11.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.11.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.308584 | centos-9-stream | WARNING Another version of 'cisco.nxos' 9.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 9.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.308639 | centos-9-stream | WARNING Another version of 'cisco.ucs' 1.16.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.16.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.308692 | centos-9-stream | WARNING Another version of 'cloud.common' 4.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.308770 | centos-9-stream | WARNING Another version of 'cloudscale_ch.cloud' 2.5.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.308826 | centos-9-stream | WARNING Another version of 'community.aws' 9.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 9.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.308882 | centos-9-stream | WARNING Another version of 'community.ciscosmb' 1.0.11 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.11 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.308938 | centos-9-stream | WARNING Another version of 'community.crypto' 2.26.5 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.26.5 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.308996 | centos-9-stream | WARNING Another version of 'community.digitalocean' 1.27.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.27.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.309058 | centos-9-stream | WARNING Another version of 'community.dns' 3.3.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.3.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.309119 | centos-9-stream | WARNING Another version of 'community.docker' 4.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.309178 | centos-9-stream | WARNING Another version of 'community.general' 10.7.4 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 10.7.4 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.309233 | centos-9-stream | WARNING Another version of 'community.grafana' 2.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.309288 | centos-9-stream | WARNING Another version of 'community.hashi_vault' 6.2.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.2.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.309343 | centos-9-stream | WARNING Another version of 'community.hrobot' 2.5.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.309399 | centos-9-stream | WARNING Another version of 'community.library_inventory_filtering_v1' 1.1.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.1.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.309463 | centos-9-stream | WARNING Another version of 'community.libvirt' 1.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.309541 | centos-9-stream | WARNING Another version of 'community.mongodb' 1.7.10 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.7.10 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.309595 | centos-9-stream | WARNING Another version of 'community.mysql' 3.15.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.15.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.309649 | centos-9-stream | WARNING Another version of 'community.network' 5.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.309702 | centos-9-stream | WARNING Another version of 'community.okd' 4.0.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.0.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.309795 | centos-9-stream | WARNING Another version of 'community.postgresql' 3.14.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.14.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.309856 | centos-9-stream | WARNING Another version of 'community.proxmox' 1.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.309911 | centos-9-stream | WARNING Another version of 'community.proxysql' 1.6.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.6.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.309966 | centos-9-stream | WARNING Another version of 'community.rabbitmq' 1.6.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.6.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.310042 | centos-9-stream | WARNING Another version of 'community.routeros' 3.10.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.10.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.310139 | centos-9-stream | WARNING Another version of 'community.sap_libs' 1.4.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.4.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.310217 | centos-9-stream | WARNING Another version of 'community.sops' 2.2.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.310271 | centos-9-stream | WARNING Another version of 'community.vmware' 5.8.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.8.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.310325 | centos-9-stream | WARNING Another version of 'community.windows' 2.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.310379 | centos-9-stream | WARNING Another version of 'community.zabbix' 3.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.310433 | centos-9-stream | WARNING Another version of 'containers.podman' 1.17.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.17.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.310534 | centos-9-stream | WARNING Another version of 'cyberark.conjur' 1.3.7 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.3.7 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.310593 | centos-9-stream | WARNING Another version of 'cyberark.pas' 1.0.35 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.35 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.310653 | centos-9-stream | WARNING Another version of 'dellemc.enterprise_sonic' 2.5.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.310762 | centos-9-stream | WARNING Another version of 'dellemc.openmanage' 9.12.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 9.12.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.310832 | centos-9-stream | WARNING Another version of 'dellemc.powerflex' 2.6.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.6.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.310883 | centos-9-stream | WARNING Another version of 'dellemc.unity' 2.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.310939 | centos-9-stream | WARNING Another version of 'f5networks.f5_modules' 1.38.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.38.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.310999 | centos-9-stream | WARNING Another version of 'fortinet.fortimanager' 2.10.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.10.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.311057 | centos-9-stream | WARNING Another version of 'fortinet.fortios' 2.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.311120 | centos-9-stream | WARNING Another version of 'google.cloud' 1.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.311179 | centos-9-stream | WARNING Another version of 'grafana.grafana' 5.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.311237 | centos-9-stream | WARNING Another version of 'hetzner.hcloud' 4.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.311294 | centos-9-stream | WARNING Another version of 'hitachivantara.vspone_block' 3.5.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.5.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.311349 | centos-9-stream | WARNING Another version of 'ibm.qradar' 4.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.311403 | centos-9-stream | WARNING Another version of 'ibm.spectrum_virtualize' 2.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.311466 | centos-9-stream | WARNING Another version of 'ibm.storage_virtualize' 2.7.4 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.7.4 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.311543 | centos-9-stream | WARNING Another version of 'ieisystem.inmanage' 3.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.311600 | centos-9-stream | WARNING Another version of 'infinidat.infinibox' 1.6.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.6.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.311657 | centos-9-stream | WARNING Another version of 'infoblox.nios_modules' 1.8.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.8.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.311713 | centos-9-stream | WARNING Another version of 'inspur.ispim' 2.2.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.311819 | centos-9-stream | WARNING Another version of 'junipernetworks.junos' 9.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 9.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.311880 | centos-9-stream | WARNING Another version of 'kaytus.ksmanage' 2.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.311935 | centos-9-stream | WARNING Another version of 'kubernetes.core' 5.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.311990 | centos-9-stream | WARNING Another version of 'kubevirt.core' 2.2.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.312040 | centos-9-stream | WARNING Another version of 'lowlydba.sqlserver' 2.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.312090 | centos-9-stream | WARNING Another version of 'microsoft.ad' 1.9.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.9.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.312136 | centos-9-stream | WARNING Another version of 'microsoft.iis' 1.0.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.312186 | centos-9-stream | WARNING Another version of 'netapp.cloudmanager' 21.24.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 21.24.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.312236 | centos-9-stream | WARNING Another version of 'netapp.ontap' 22.14.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 22.14.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.312284 | centos-9-stream | WARNING Another version of 'netapp.storagegrid' 21.14.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 21.14.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.312333 | centos-9-stream | WARNING Another version of 'netapp_eseries.santricity' 1.4.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.4.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.312383 | centos-9-stream | WARNING Another version of 'netbox.netbox' 3.21.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.21.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.312431 | centos-9-stream | WARNING Another version of 'ngine_io.cloudstack' 2.5.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.312506 | centos-9-stream | WARNING Another version of 'openstack.cloud' 2.4.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.312558 | centos-9-stream | WARNING Another version of 'ovirt.ovirt' 3.2.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.2.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.312609 | centos-9-stream | WARNING Another version of 'purestorage.flasharray' 1.36.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.36.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.312662 | centos-9-stream | WARNING Another version of 'purestorage.flashblade' 1.21.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.21.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.312711 | centos-9-stream | WARNING Another version of 'ravendb.ravendb' 1.0.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.312773 | centos-9-stream | WARNING Another version of 'sensu.sensu_go' 1.14.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.14.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.312825 | centos-9-stream | WARNING Another version of 'splunk.es' 4.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.312874 | centos-9-stream | WARNING Another version of 'telekom_mms.icinga_director' 2.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.312923 | centos-9-stream | WARNING Another version of 'theforeman.foreman' 4.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.312972 | centos-9-stream | WARNING Another version of 'vmware.vmware' 1.11.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.11.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.313020 | centos-9-stream | WARNING Another version of 'vmware.vmware_rest' 4.9.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.9.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.313068 | centos-9-stream | WARNING Another version of 'vultr.cloud' 1.13.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.13.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.313115 | centos-9-stream | WARNING Another version of 'vyos.vyos' 5.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.313162 | centos-9-stream | WARNING Another version of 'wti.remote' 1.0.10 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.10 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:46.327705 | centos-9-stream | INFO [delegated > dependency] Starting 2025-09-09 21:02:46.328015 | centos-9-stream | WARNING [delegated > dependency] Skipping, missing the requirements file. 2025-09-09 21:02:46.406547 | ubuntu-jammy | INFO [delegated > dependency] Starting 2025-09-09 21:02:46.406939 | ubuntu-jammy | WARNING [delegated > dependency] Skipping, missing the requirements file. 2025-09-09 21:02:46.695586 | ubuntu-noble | INFO [delegated > dependency] Starting 2025-09-09 21:02:46.696306 | ubuntu-noble | WARNING [delegated > dependency] Skipping, missing the requirements file. 2025-09-09 21:02:46.620600 | debian-bookworm | ansible-galaxy [core 2.18.9] 2025-09-09 21:02:46.620672 | debian-bookworm | config file = None 2025-09-09 21:02:46.620689 | debian-bookworm | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2025-09-09 21:02:46.620702 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2025-09-09 21:02:46.620728 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.11/site-packages:/home/zuul/venv/lib/python3.11/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.11/dist-packages 2025-09-09 21:02:46.620750 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-galaxy 2025-09-09 21:02:46.620761 | debian-bookworm | python version = 3.11.2 (main, Apr 28 2025, 14:11:48) [GCC 12.2.0] (/home/zuul/venv/bin/python3) 2025-09-09 21:02:46.620772 | debian-bookworm | jinja version = 3.1.6 2025-09-09 21:02:46.620783 | debian-bookworm | libyaml = True 2025-09-09 21:02:46.620793 | debian-bookworm | No config file found; using defaults 2025-09-09 21:02:46.621439 | debian-bookworm | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2025-09-09 21:02:46.621828 | debian-bookworm | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex 2025-09-09 21:02:46.622192 | debian-bookworm | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2025-09-09 21:02:46.622495 | debian-bookworm | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize 2025-09-09 21:02:46.622882 | debian-bookworm | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize' 2025-09-09 21:02:46.623440 | debian-bookworm | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean 2025-09-09 21:02:46.623768 | debian-bookworm | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean' 2025-09-09 21:02:46.624068 | debian-bookworm | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade 2025-09-09 21:02:46.624371 | debian-bookworm | Found installed collection purestorage.flashblade:1.21.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2025-09-09 21:02:46.626290 | debian-bookworm | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki 2025-09-09 21:02:46.626674 | debian-bookworm | Found installed collection cisco.meraki:2.21.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki' 2025-09-09 21:02:46.627446 | debian-bookworm | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox 2025-09-09 21:02:46.627776 | debian-bookworm | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox' 2025-09-09 21:02:46.628437 | debian-bookworm | Loading collection splunk.es from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es 2025-09-09 21:02:46.628769 | debian-bookworm | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es' 2025-09-09 21:02:46.629161 | debian-bookworm | Loading collection ansible.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows 2025-09-09 21:02:46.629517 | debian-bookworm | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows' 2025-09-09 21:02:46.629806 | debian-bookworm | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2025-09-09 21:02:46.630091 | debian-bookworm | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2025-09-09 21:02:46.630412 | debian-bookworm | Loading collection community.sops from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops 2025-09-09 21:02:46.630706 | debian-bookworm | Found installed collection community.sops:2.2.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops' 2025-09-09 21:02:46.631021 | debian-bookworm | Loading collection community.crypto from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto 2025-09-09 21:02:46.631299 | debian-bookworm | Found installed collection community.crypto:2.26.5 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto' 2025-09-09 21:02:46.631653 | debian-bookworm | Loading collection community.dns from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns 2025-09-09 21:02:46.631916 | debian-bookworm | Found installed collection community.dns:3.3.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns' 2025-09-09 21:02:46.632198 | debian-bookworm | Loading collection community.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana 2025-09-09 21:02:46.632532 | debian-bookworm | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana' 2025-09-09 21:02:46.632904 | debian-bookworm | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid 2025-09-09 21:02:46.633137 | debian-bookworm | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2025-09-09 21:02:46.633379 | debian-bookworm | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2025-09-09 21:02:46.633679 | debian-bookworm | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2025-09-09 21:02:46.634194 | debian-bookworm | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2025-09-09 21:02:46.634492 | debian-bookworm | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2025-09-09 21:02:46.635409 | debian-bookworm | Loading collection cisco.ios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios 2025-09-09 21:02:46.635718 | debian-bookworm | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios' 2025-09-09 21:02:46.637189 | debian-bookworm | Loading collection cisco.mso from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso 2025-09-09 21:02:46.638300 | debian-bookworm | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso' 2025-09-09 21:02:46.639087 | debian-bookworm | Loading collection community.mongodb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb 2025-09-09 21:02:46.639569 | debian-bookworm | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb' 2025-09-09 21:02:46.641266 | debian-bookworm | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2025-09-09 21:02:46.641897 | debian-bookworm | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2025-09-09 21:02:46.642428 | debian-bookworm | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud 2025-09-09 21:02:46.643171 | debian-bookworm | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2025-09-09 21:02:46.643628 | debian-bookworm | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios 2025-09-09 21:02:46.644136 | debian-bookworm | Found installed collection fortinet.fortios:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios' 2025-09-09 21:02:46.644659 | debian-bookworm | Loading collection cloud.common from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common 2025-09-09 21:02:46.645024 | debian-bookworm | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common' 2025-09-09 21:02:46.645372 | debian-bookworm | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb 2025-09-09 21:02:46.645853 | debian-bookworm | Found installed collection ravendb.ravendb:1.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb' 2025-09-09 21:02:46.646282 | debian-bookworm | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection 2025-09-09 21:02:46.646641 | debian-bookworm | Found installed collection azure.azcollection:3.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection' 2025-09-09 21:02:46.647208 | debian-bookworm | Loading collection cisco.ise from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise 2025-09-09 21:02:46.647790 | debian-bookworm | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise' 2025-09-09 21:02:46.648258 | debian-bookworm | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt 2025-09-09 21:02:46.648611 | debian-bookworm | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2025-09-09 21:02:46.648890 | debian-bookworm | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2025-09-09 21:02:46.649153 | debian-bookworm | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2025-09-09 21:02:46.649554 | debian-bookworm | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon 2025-09-09 21:02:46.649864 | debian-bookworm | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon' 2025-09-09 21:02:46.650184 | debian-bookworm | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim 2025-09-09 21:02:46.650578 | debian-bookworm | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim' 2025-09-09 21:02:46.650962 | debian-bookworm | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos 2025-09-09 21:02:46.651262 | debian-bookworm | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos' 2025-09-09 21:02:46.651505 | debian-bookworm | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault 2025-09-09 21:02:46.651794 | debian-bookworm | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault' 2025-09-09 21:02:46.652017 | debian-bookworm | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud 2025-09-09 21:02:46.652417 | debian-bookworm | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud' 2025-09-09 21:02:46.652662 | debian-bookworm | Loading collection ansible.posix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix 2025-09-09 21:02:46.652927 | debian-bookworm | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix' 2025-09-09 21:02:46.653199 | debian-bookworm | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2025-09-09 21:02:46.653482 | debian-bookworm | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2025-09-09 21:02:46.653845 | debian-bookworm | Loading collection community.zabbix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix 2025-09-09 21:02:46.654224 | debian-bookworm | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix' 2025-09-09 21:02:46.693614 | debian-bookworm | Loading collection community.network from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network 2025-09-09 21:02:46.694184 | debian-bookworm | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network' 2025-09-09 21:02:46.694557 | debian-bookworm | Loading collection community.mysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql 2025-09-09 21:02:46.695025 | debian-bookworm | Found installed collection community.mysql:3.15.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql' 2025-09-09 21:02:46.695339 | debian-bookworm | Loading collection community.proxysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql 2025-09-09 21:02:46.695682 | debian-bookworm | Found installed collection community.proxysql:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql' 2025-09-09 21:02:46.695973 | debian-bookworm | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go 2025-09-09 21:02:46.696464 | debian-bookworm | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go' 2025-09-09 21:02:46.696810 | debian-bookworm | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core 2025-09-09 21:02:46.697178 | debian-bookworm | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core' 2025-09-09 21:02:46.697573 | debian-bookworm | Loading collection community.docker from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker 2025-09-09 21:02:46.698058 | debian-bookworm | Found installed collection community.docker:4.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker' 2025-09-09 21:02:46.698444 | debian-bookworm | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur 2025-09-09 21:02:46.698856 | debian-bookworm | Found installed collection cyberark.conjur:1.3.7 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur' 2025-09-09 21:02:46.699236 | debian-bookworm | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana 2025-09-09 21:02:46.699629 | debian-bookworm | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana' 2025-09-09 21:02:46.699991 | debian-bookworm | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox 2025-09-09 21:02:46.700508 | debian-bookworm | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2025-09-09 21:02:46.700836 | debian-bookworm | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2025-09-09 21:02:46.701181 | debian-bookworm | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2025-09-09 21:02:46.701524 | debian-bookworm | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2025-09-09 21:02:46.701844 | debian-bookworm | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2025-09-09 21:02:46.702535 | debian-bookworm | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2025-09-09 21:02:46.702958 | debian-bookworm | Found installed collection fortinet.fortimanager:2.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2025-09-09 21:02:46.703297 | debian-bookworm | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2025-09-09 21:02:46.703699 | debian-bookworm | Found installed collection f5networks.f5_modules:1.38.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2025-09-09 21:02:46.704054 | debian-bookworm | Loading collection google.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud 2025-09-09 21:02:46.704319 | debian-bookworm | Found installed collection google.cloud:1.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud' 2025-09-09 21:02:46.704596 | debian-bookworm | Loading collection wti.remote from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote 2025-09-09 21:02:46.704858 | debian-bookworm | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote' 2025-09-09 21:02:46.705117 | debian-bookworm | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs 2025-09-09 21:02:46.705391 | debian-bookworm | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs' 2025-09-09 21:02:46.711257 | debian-bookworm | Loading collection community.general from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general 2025-09-09 21:02:46.711694 | debian-bookworm | Found installed collection community.general:10.7.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general' 2025-09-09 21:02:46.712076 | debian-bookworm | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs 2025-09-09 21:02:46.712394 | debian-bookworm | Found installed collection community.sap_libs:1.4.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs' 2025-09-09 21:02:46.712767 | debian-bookworm | Loading collection community.libvirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt 2025-09-09 21:02:46.713072 | debian-bookworm | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt' 2025-09-09 21:02:46.713474 | debian-bookworm | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr 2025-09-09 21:02:46.713831 | debian-bookworm | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr' 2025-09-09 21:02:46.714127 | debian-bookworm | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis 2025-09-09 21:02:46.714560 | debian-bookworm | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis' 2025-09-09 21:02:46.714900 | debian-bookworm | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt 2025-09-09 21:02:46.715250 | debian-bookworm | Found installed collection check_point.mgmt:6.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt' 2025-09-09 21:02:46.715955 | debian-bookworm | Loading collection amazon.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws 2025-09-09 21:02:46.716268 | debian-bookworm | Found installed collection amazon.aws:9.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws' 2025-09-09 21:02:46.716601 | debian-bookworm | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware 2025-09-09 21:02:46.716884 | debian-bookworm | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware' 2025-09-09 21:02:46.718847 | debian-bookworm | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos 2025-09-09 21:02:46.719148 | debian-bookworm | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos' 2025-09-09 21:02:46.719457 | debian-bookworm | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray 2025-09-09 21:02:46.719747 | debian-bookworm | Found installed collection purestorage.flasharray:1.36.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2025-09-09 21:02:46.720025 | debian-bookworm | Loading collection community.postgresql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql 2025-09-09 21:02:46.720304 | debian-bookworm | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql' 2025-09-09 21:02:46.722456 | debian-bookworm | Loading collection awx.awx from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx 2025-09-09 21:02:46.722740 | debian-bookworm | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx' 2025-09-09 21:02:46.723705 | debian-bookworm | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos 2025-09-09 21:02:46.723997 | debian-bookworm | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2025-09-09 21:02:46.724651 | debian-bookworm | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity 2025-09-09 21:02:46.724937 | debian-bookworm | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity' 2025-09-09 21:02:46.725248 | debian-bookworm | Loading collection community.hrobot from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot 2025-09-09 21:02:46.725550 | debian-bookworm | Found installed collection community.hrobot:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot' 2025-09-09 21:02:46.725827 | debian-bookworm | Loading collection community.routeros from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros 2025-09-09 21:02:46.726107 | debian-bookworm | Found installed collection community.routeros:3.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros' 2025-09-09 21:02:46.726455 | debian-bookworm | Loading collection cisco.asa from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa 2025-09-09 21:02:46.726742 | debian-bookworm | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa' 2025-09-09 21:02:46.727046 | debian-bookworm | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar 2025-09-09 21:02:46.727326 | debian-bookworm | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar' 2025-09-09 21:02:46.728139 | debian-bookworm | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap 2025-09-09 21:02:46.728450 | debian-bookworm | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap' 2025-09-09 21:02:46.728739 | debian-bookworm | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2025-09-09 21:02:46.729039 | debian-bookworm | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2025-09-09 21:02:46.732092 | debian-bookworm | Loading collection community.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws 2025-09-09 21:02:46.732386 | debian-bookworm | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws' 2025-09-09 21:02:46.732654 | debian-bookworm | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2025-09-09 21:02:46.732921 | debian-bookworm | Found installed collection community.library_inventory_filtering_v1:1.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2025-09-09 21:02:46.733186 | debian-bookworm | Loading collection ansible.utils from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils 2025-09-09 21:02:46.733476 | debian-bookworm | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils' 2025-09-09 21:02:46.733687 | debian-bookworm | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2025-09-09 21:02:46.733947 | debian-bookworm | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2025-09-09 21:02:46.735461 | debian-bookworm | Loading collection cisco.aci from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci 2025-09-09 21:02:46.735787 | debian-bookworm | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci' 2025-09-09 21:02:46.736437 | debian-bookworm | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud 2025-09-09 21:02:46.736745 | debian-bookworm | Found installed collection openstack.cloud:2.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud' 2025-09-09 21:02:46.737038 | debian-bookworm | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight 2025-09-09 21:02:46.737336 | debian-bookworm | Found installed collection cisco.intersight:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight' 2025-09-09 21:02:46.737595 | debian-bookworm | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas 2025-09-09 21:02:46.737900 | debian-bookworm | Found installed collection cyberark.pas:1.0.35 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas' 2025-09-09 21:02:46.738218 | debian-bookworm | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2025-09-09 21:02:46.738532 | debian-bookworm | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2025-09-09 21:02:46.738876 | debian-bookworm | Loading collection containers.podman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman 2025-09-09 21:02:46.739124 | debian-bookworm | Found installed collection containers.podman:1.17.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman' 2025-09-09 21:02:46.739470 | debian-bookworm | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage 2025-09-09 21:02:46.739779 | debian-bookworm | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2025-09-09 21:02:46.740010 | debian-bookworm | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2025-09-09 21:02:46.740284 | debian-bookworm | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2025-09-09 21:02:46.741578 | debian-bookworm | Loading collection community.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware 2025-09-09 21:02:46.741882 | debian-bookworm | Found installed collection community.vmware:5.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware' 2025-09-09 21:02:46.742139 | debian-bookworm | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb 2025-09-09 21:02:46.742409 | debian-bookworm | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb' 2025-09-09 21:02:46.743083 | debian-bookworm | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2025-09-09 21:02:46.743365 | debian-bookworm | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2025-09-09 21:02:46.743728 | debian-bookworm | Loading collection community.okd from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd 2025-09-09 21:02:46.743990 | debian-bookworm | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd' 2025-09-09 21:02:46.744553 | debian-bookworm | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2025-09-09 21:02:46.744827 | debian-bookworm | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2025-09-09 21:02:46.745092 | debian-bookworm | Loading collection community.proxmox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox 2025-09-09 21:02:46.745361 | debian-bookworm | Found installed collection community.proxmox:1.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox' 2025-09-09 21:02:46.745620 | debian-bookworm | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad 2025-09-09 21:02:46.745875 | debian-bookworm | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad' 2025-09-09 21:02:46.746732 | debian-bookworm | Loading collection arista.eos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos 2025-09-09 21:02:46.747040 | debian-bookworm | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos' 2025-09-09 21:02:46.747552 | debian-bookworm | Loading collection community.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows 2025-09-09 21:02:46.748009 | debian-bookworm | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows' 2025-09-09 21:02:46.748448 | debian-bookworm | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq 2025-09-09 21:02:46.748785 | debian-bookworm | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq' 2025-09-09 21:02:46.749182 | debian-bookworm | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac 2025-09-09 21:02:46.749622 | debian-bookworm | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac' 2025-09-09 21:02:46.750137 | debian-bookworm | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman 2025-09-09 21:02:46.750403 | debian-bookworm | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman' 2025-09-09 21:02:46.750997 | debian-bookworm | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core 2025-09-09 21:02:46.751307 | debian-bookworm | Found installed collection kubernetes.core:5.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core' 2025-09-09 21:02:46.755478 | debian-bookworm | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2025-09-09 21:02:46.755846 | debian-bookworm | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2025-09-09 21:02:46.760470 | debian-bookworm | Initial connection to galaxy_server: https://galaxy.ansible.com 2025-09-09 21:02:46.760700 | debian-bookworm | Created /home/zuul/.ansible/galaxy_token 2025-09-09 21:02:46.760874 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/ 2025-09-09 21:02:46.659207 | centos-9-stream | ansible-galaxy [core 2.18.9] 2025-09-09 21:02:46.661819 | centos-9-stream | config file = None 2025-09-09 21:02:46.661840 | centos-9-stream | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2025-09-09 21:02:46.661847 | centos-9-stream | ansible python module location = /home/zuul/venv/lib64/python3.11/site-packages/ansible 2025-09-09 21:02:46.661852 | centos-9-stream | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib64/python3.11/site-packages:/home/zuul/venv/lib/python3.11/site-packages 2025-09-09 21:02:46.661857 | centos-9-stream | executable location = /home/zuul/venv/bin/ansible-galaxy 2025-09-09 21:02:46.661871 | centos-9-stream | python version = 3.11.13 (main, Aug 21 2025, 00:00:00) [GCC 11.5.0 20240719 (Red Hat 11.5.0-11)] (/home/zuul/venv/bin/python3.11) 2025-09-09 21:02:46.661918 | centos-9-stream | jinja version = 3.1.6 2025-09-09 21:02:46.662214 | centos-9-stream | libyaml = True 2025-09-09 21:02:46.662503 | centos-9-stream | No config file found; using defaults 2025-09-09 21:02:46.662969 | centos-9-stream | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2025-09-09 21:02:46.671170 | centos-9-stream | Loading collection cisco.asa from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/asa 2025-09-09 21:02:46.671737 | centos-9-stream | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/asa' 2025-09-09 21:02:46.673108 | centos-9-stream | Loading collection community.digitalocean from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/digitalocean 2025-09-09 21:02:46.673538 | centos-9-stream | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/digitalocean' 2025-09-09 21:02:46.673955 | centos-9-stream | Loading collection purestorage.flashblade from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/purestorage/flashblade 2025-09-09 21:02:46.674348 | centos-9-stream | Found installed collection purestorage.flashblade:1.21.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2025-09-09 21:02:46.675133 | centos-9-stream | Loading collection dellemc.openmanage from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/openmanage 2025-09-09 21:02:46.675550 | centos-9-stream | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2025-09-09 21:02:46.675941 | centos-9-stream | Loading collection cyberark.conjur from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cyberark/conjur 2025-09-09 21:02:46.676309 | centos-9-stream | Found installed collection cyberark.conjur:1.3.7 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cyberark/conjur' 2025-09-09 21:02:46.676702 | centos-9-stream | Loading collection community.zabbix from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/zabbix 2025-09-09 21:02:46.677127 | centos-9-stream | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/zabbix' 2025-09-09 21:02:46.678255 | centos-9-stream | Loading collection amazon.aws from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/amazon/aws 2025-09-09 21:02:46.678674 | centos-9-stream | Found installed collection amazon.aws:9.5.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/amazon/aws' 2025-09-09 21:02:46.679810 | centos-9-stream | Loading collection ansible.netcommon from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/netcommon 2025-09-09 21:02:46.680214 | centos-9-stream | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/netcommon' 2025-09-09 21:02:46.680547 | centos-9-stream | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2025-09-09 21:02:46.680871 | centos-9-stream | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2025-09-09 21:02:46.681991 | centos-9-stream | Loading collection netapp.ontap from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/ontap 2025-09-09 21:02:46.682294 | centos-9-stream | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/ontap' 2025-09-09 21:02:46.683001 | centos-9-stream | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2025-09-09 21:02:46.683441 | centos-9-stream | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2025-09-09 21:02:46.683785 | centos-9-stream | Loading collection ansible.utils from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/utils 2025-09-09 21:02:46.684077 | centos-9-stream | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/utils' 2025-09-09 21:02:46.684372 | centos-9-stream | Loading collection purestorage.flasharray from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/purestorage/flasharray 2025-09-09 21:02:46.684694 | centos-9-stream | Found installed collection purestorage.flasharray:1.36.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2025-09-09 21:02:46.685029 | centos-9-stream | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize 2025-09-09 21:02:46.685331 | centos-9-stream | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize' 2025-09-09 21:02:46.685660 | centos-9-stream | Loading collection f5networks.f5_modules from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2025-09-09 21:02:46.685978 | centos-9-stream | Found installed collection f5networks.f5_modules:1.38.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2025-09-09 21:02:46.686393 | centos-9-stream | Loading collection wti.remote from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/wti/remote 2025-09-09 21:02:46.686733 | centos-9-stream | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/wti/remote' 2025-09-09 21:02:46.687003 | centos-9-stream | Loading collection containers.podman from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/containers/podman 2025-09-09 21:02:46.687408 | centos-9-stream | Found installed collection containers.podman:1.17.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/containers/podman' 2025-09-09 21:02:46.687665 | centos-9-stream | Loading collection cisco.intersight from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/intersight 2025-09-09 21:02:46.687918 | centos-9-stream | Found installed collection cisco.intersight:2.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/intersight' 2025-09-09 21:02:46.688154 | centos-9-stream | Loading collection cisco.dnac from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/dnac 2025-09-09 21:02:46.688484 | centos-9-stream | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/dnac' 2025-09-09 21:02:46.688720 | centos-9-stream | Loading collection grafana.grafana from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/grafana/grafana 2025-09-09 21:02:46.689150 | centos-9-stream | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/grafana/grafana' 2025-09-09 21:02:46.692823 | centos-9-stream | Loading collection community.aws from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/aws 2025-09-09 21:02:46.693213 | centos-9-stream | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/aws' 2025-09-09 21:02:46.693528 | centos-9-stream | Loading collection kubevirt.core from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kubevirt/core 2025-09-09 21:02:46.693887 | centos-9-stream | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kubevirt/core' 2025-09-09 21:02:46.694364 | centos-9-stream | Loading collection ibm.qradar from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/qradar 2025-09-09 21:02:46.694696 | centos-9-stream | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/qradar' 2025-09-09 21:02:46.695518 | centos-9-stream | Loading collection netbox.netbox from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netbox/netbox 2025-09-09 21:02:46.695862 | centos-9-stream | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netbox/netbox' 2025-09-09 21:02:46.696557 | centos-9-stream | Loading collection splunk.es from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/splunk/es 2025-09-09 21:02:46.696942 | centos-9-stream | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/splunk/es' 2025-09-09 21:02:46.697171 | centos-9-stream | Loading collection community.libvirt from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/libvirt 2025-09-09 21:02:46.697489 | centos-9-stream | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/libvirt' 2025-09-09 21:02:46.697713 | centos-9-stream | Loading collection cisco.ise from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ise 2025-09-09 21:02:46.698049 | centos-9-stream | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ise' 2025-09-09 21:02:46.698818 | centos-9-stream | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2025-09-09 21:02:46.699150 | centos-9-stream | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2025-09-09 21:02:46.700195 | centos-9-stream | Loading collection google.cloud from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/google/cloud 2025-09-09 21:02:46.700565 | centos-9-stream | Found installed collection google.cloud:1.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/google/cloud' 2025-09-09 21:02:46.700862 | centos-9-stream | Loading collection sensu.sensu_go from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/sensu/sensu_go 2025-09-09 21:02:46.701206 | centos-9-stream | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/sensu/sensu_go' 2025-09-09 21:02:46.701423 | centos-9-stream | Loading collection cyberark.pas from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cyberark/pas 2025-09-09 21:02:46.701797 | centos-9-stream | Found installed collection cyberark.pas:1.0.35 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cyberark/pas' 2025-09-09 21:02:46.703357 | centos-9-stream | Loading collection community.vmware from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/vmware 2025-09-09 21:02:46.703695 | centos-9-stream | Found installed collection community.vmware:5.8.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/vmware' 2025-09-09 21:02:46.705592 | centos-9-stream | Loading collection azure.azcollection from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/azure/azcollection 2025-09-09 21:02:46.705980 | centos-9-stream | Found installed collection azure.azcollection:3.8.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/azure/azcollection' 2025-09-09 21:02:46.706375 | centos-9-stream | Loading collection community.hrobot from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/hrobot 2025-09-09 21:02:46.706727 | centos-9-stream | Found installed collection community.hrobot:2.5.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/hrobot' 2025-09-09 21:02:46.707120 | centos-9-stream | Loading collection community.grafana from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/grafana 2025-09-09 21:02:46.707422 | centos-9-stream | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/grafana' 2025-09-09 21:02:46.707711 | centos-9-stream | Loading collection fortinet.fortimanager from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2025-09-09 21:02:46.708082 | centos-9-stream | Found installed collection fortinet.fortimanager:2.10.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2025-09-09 21:02:46.744564 | centos-9-stream | Loading collection community.network from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/network 2025-09-09 21:02:46.745029 | centos-9-stream | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/network' 2025-09-09 21:02:46.745269 | centos-9-stream | Loading collection community.sops from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/sops 2025-09-09 21:02:46.745705 | centos-9-stream | Found installed collection community.sops:2.2.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/sops' 2025-09-09 21:02:46.746565 | centos-9-stream | Loading collection dellemc.unity from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/unity 2025-09-09 21:02:46.746944 | centos-9-stream | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/unity' 2025-09-09 21:02:46.747434 | centos-9-stream | Loading collection check_point.mgmt from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/check_point/mgmt 2025-09-09 21:02:46.747796 | centos-9-stream | Found installed collection check_point.mgmt:6.5.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/check_point/mgmt' 2025-09-09 21:02:46.748169 | centos-9-stream | Loading collection community.dns from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/dns 2025-09-09 21:02:46.748500 | centos-9-stream | Found installed collection community.dns:3.3.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/dns' 2025-09-09 21:02:46.748735 | centos-9-stream | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2025-09-09 21:02:46.749050 | centos-9-stream | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2025-09-09 21:02:46.749283 | centos-9-stream | Loading collection community.proxysql from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/proxysql 2025-09-09 21:02:46.749600 | centos-9-stream | Found installed collection community.proxysql:1.6.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/proxysql' 2025-09-09 21:02:46.749909 | centos-9-stream | Loading collection cloud.common from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cloud/common 2025-09-09 21:02:46.750265 | centos-9-stream | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cloud/common' 2025-09-09 21:02:46.750610 | centos-9-stream | Loading collection ansible.windows from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/windows 2025-09-09 21:02:46.750945 | centos-9-stream | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/windows' 2025-09-09 21:02:46.751173 | centos-9-stream | Loading collection ieisystem.inmanage from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2025-09-09 21:02:46.751529 | centos-9-stream | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2025-09-09 21:02:46.751871 | centos-9-stream | Loading collection netapp.cloudmanager from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2025-09-09 21:02:46.752203 | centos-9-stream | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2025-09-09 21:02:46.752859 | centos-9-stream | Loading collection kubernetes.core from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kubernetes/core 2025-09-09 21:02:46.753209 | centos-9-stream | Found installed collection kubernetes.core:5.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kubernetes/core' 2025-09-09 21:02:46.753651 | centos-9-stream | Loading collection fortinet.fortios from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/fortinet/fortios 2025-09-09 21:02:46.753926 | centos-9-stream | Found installed collection fortinet.fortios:2.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/fortinet/fortios' 2025-09-09 21:02:46.754286 | centos-9-stream | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2025-09-09 21:02:46.754621 | centos-9-stream | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2025-09-09 21:02:46.754887 | centos-9-stream | Loading collection ravendb.ravendb from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ravendb/ravendb 2025-09-09 21:02:46.755219 | centos-9-stream | Found installed collection ravendb.ravendb:1.0.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ravendb/ravendb' 2025-09-09 21:02:46.755479 | centos-9-stream | Loading collection inspur.ispim from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/inspur/ispim 2025-09-09 21:02:46.755801 | centos-9-stream | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/inspur/ispim' 2025-09-09 21:02:46.756544 | centos-9-stream | Loading collection ovirt.ovirt from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ovirt/ovirt 2025-09-09 21:02:46.756891 | centos-9-stream | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2025-09-09 21:02:46.757059 | centos-9-stream | Loading collection community.ciscosmb from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/ciscosmb 2025-09-09 21:02:46.757437 | centos-9-stream | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/ciscosmb' 2025-09-09 21:02:46.757818 | centos-9-stream | Loading collection netapp.storagegrid from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/storagegrid 2025-09-09 21:02:46.758161 | centos-9-stream | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2025-09-09 21:02:46.758406 | centos-9-stream | Loading collection community.mysql from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/mysql 2025-09-09 21:02:46.758775 | centos-9-stream | Found installed collection community.mysql:3.15.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/mysql' 2025-09-09 21:02:46.760804 | centos-9-stream | Loading collection cisco.nxos from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/nxos 2025-09-09 21:02:46.761153 | centos-9-stream | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/nxos' 2025-09-09 21:02:46.761446 | centos-9-stream | Loading collection kaytus.ksmanage from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2025-09-09 21:02:46.761936 | centos-9-stream | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2025-09-09 21:02:46.762335 | centos-9-stream | Loading collection community.postgresql from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/postgresql 2025-09-09 21:02:46.762696 | centos-9-stream | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/postgresql' 2025-09-09 21:02:46.763578 | centos-9-stream | Loading collection arista.eos from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/arista/eos 2025-09-09 21:02:46.763911 | centos-9-stream | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/arista/eos' 2025-09-09 21:02:46.764077 | centos-9-stream | Loading collection cisco.ucs from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ucs 2025-09-09 21:02:46.764419 | centos-9-stream | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ucs' 2025-09-09 21:02:46.773201 | centos-9-stream | Loading collection community.general from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/general 2025-09-09 21:02:46.773604 | centos-9-stream | Found installed collection community.general:10.7.4 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/general' 2025-09-09 21:02:46.773913 | centos-9-stream | Loading collection ansible.posix from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/posix 2025-09-09 21:02:46.774289 | centos-9-stream | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/posix' 2025-09-09 21:02:46.774722 | centos-9-stream | Loading collection vultr.cloud from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vultr/cloud 2025-09-09 21:02:46.775119 | centos-9-stream | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vultr/cloud' 2025-09-09 21:02:46.775599 | centos-9-stream | Loading collection community.crypto from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/crypto 2025-09-09 21:02:46.775947 | centos-9-stream | Found installed collection community.crypto:2.26.5 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/crypto' 2025-09-09 21:02:46.777067 | centos-9-stream | Loading collection junipernetworks.junos from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/junipernetworks/junos 2025-09-09 21:02:46.777407 | centos-9-stream | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2025-09-09 21:02:46.777718 | centos-9-stream | Loading collection community.rabbitmq from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/rabbitmq 2025-09-09 21:02:46.778070 | centos-9-stream | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/rabbitmq' 2025-09-09 21:02:46.780384 | centos-9-stream | Loading collection awx.awx from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/awx/awx 2025-09-09 21:02:46.780772 | centos-9-stream | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/awx/awx' 2025-09-09 21:02:46.781780 | centos-9-stream | Loading collection hetzner.hcloud from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hetzner/hcloud 2025-09-09 21:02:46.782126 | centos-9-stream | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2025-09-09 21:02:46.782937 | centos-9-stream | Loading collection vyos.vyos from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vyos/vyos 2025-09-09 21:02:46.783270 | centos-9-stream | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vyos/vyos' 2025-09-09 21:02:46.784734 | centos-9-stream | Loading collection cisco.mso from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/mso 2025-09-09 21:02:46.785085 | centos-9-stream | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/mso' 2025-09-09 21:02:46.785901 | centos-9-stream | Loading collection cisco.ios from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ios 2025-09-09 21:02:46.786261 | centos-9-stream | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ios' 2025-09-09 21:02:46.786720 | centos-9-stream | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2025-09-09 21:02:46.787061 | centos-9-stream | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2025-09-09 21:02:46.787330 | centos-9-stream | Loading collection infinidat.infinibox from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/infinidat/infinibox 2025-09-09 21:02:46.787675 | centos-9-stream | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2025-09-09 21:02:46.788162 | centos-9-stream | Loading collection vmware.vmware from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vmware/vmware 2025-09-09 21:02:46.788504 | centos-9-stream | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vmware/vmware' 2025-09-09 21:02:46.789273 | centos-9-stream | Loading collection cisco.iosxr from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/iosxr 2025-09-09 21:02:46.789639 | centos-9-stream | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/iosxr' 2025-09-09 21:02:46.789998 | centos-9-stream | Loading collection community.proxmox from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/proxmox 2025-09-09 21:02:46.790321 | centos-9-stream | Found installed collection community.proxmox:1.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/proxmox' 2025-09-09 21:02:46.790793 | centos-9-stream | Loading collection community.docker from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/docker 2025-09-09 21:02:46.791149 | centos-9-stream | Found installed collection community.docker:4.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/docker' 2025-09-09 21:02:46.791818 | centos-9-stream | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2025-09-09 21:02:46.792149 | centos-9-stream | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2025-09-09 21:02:46.792316 | centos-9-stream | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2025-09-09 21:02:46.792674 | centos-9-stream | Found installed collection community.library_inventory_filtering_v1:1.1.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2025-09-09 21:02:46.794363 | centos-9-stream | Loading collection cisco.aci from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/aci 2025-09-09 21:02:46.794730 | centos-9-stream | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/aci' 2025-09-09 21:02:46.795175 | centos-9-stream | Loading collection community.mongodb from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/mongodb 2025-09-09 21:02:46.795531 | centos-9-stream | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/mongodb' 2025-09-09 21:02:46.795884 | centos-9-stream | Loading collection microsoft.ad from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/microsoft/ad 2025-09-09 21:02:46.796215 | centos-9-stream | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/microsoft/ad' 2025-09-09 21:02:46.796846 | centos-9-stream | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2025-09-09 21:02:46.797181 | centos-9-stream | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2025-09-09 21:02:46.799916 | centos-9-stream | Loading collection vmware.vmware_rest from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2025-09-09 21:02:46.800284 | centos-9-stream | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2025-09-09 21:02:46.800761 | centos-9-stream | Loading collection community.windows from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/windows 2025-09-09 21:02:46.801107 | centos-9-stream | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/windows' 2025-09-09 21:02:46.801440 | centos-9-stream | Loading collection community.hashi_vault from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/hashi_vault 2025-09-09 21:02:46.801805 | centos-9-stream | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/hashi_vault' 2025-09-09 21:02:46.801997 | centos-9-stream | Loading collection microsoft.iis from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/microsoft/iis 2025-09-09 21:02:46.802332 | centos-9-stream | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/microsoft/iis' 2025-09-09 21:02:46.802826 | centos-9-stream | Loading collection dellemc.powerflex from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/powerflex 2025-09-09 21:02:46.803152 | centos-9-stream | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2025-09-09 21:02:46.804873 | centos-9-stream | Loading collection theforeman.foreman from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/theforeman/foreman 2025-09-09 21:02:46.805244 | centos-9-stream | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/theforeman/foreman' 2025-09-09 21:02:46.805565 | centos-9-stream | Loading collection community.routeros from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/routeros 2025-09-09 21:02:46.805923 | centos-9-stream | Found installed collection community.routeros:3.10.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/routeros' 2025-09-09 21:02:46.806207 | centos-9-stream | Loading collection infoblox.nios_modules from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2025-09-09 21:02:46.806565 | centos-9-stream | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2025-09-09 21:02:46.808364 | centos-9-stream | Loading collection cisco.meraki from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/meraki 2025-09-09 21:02:46.808731 | centos-9-stream | Found installed collection cisco.meraki:2.21.4 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/meraki' 2025-09-09 21:02:46.809281 | centos-9-stream | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2025-09-09 21:02:46.809552 | centos-9-stream | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2025-09-09 21:02:46.809792 | centos-9-stream | Loading collection community.sap_libs from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/sap_libs 2025-09-09 21:02:46.810073 | centos-9-stream | Found installed collection community.sap_libs:1.4.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/sap_libs' 2025-09-09 21:02:46.810724 | centos-9-stream | Loading collection openstack.cloud from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/openstack/cloud 2025-09-09 21:02:46.811070 | centos-9-stream | Found installed collection openstack.cloud:2.4.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/openstack/cloud' 2025-09-09 21:02:46.811493 | centos-9-stream | Loading collection community.okd from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/okd 2025-09-09 21:02:46.811854 | centos-9-stream | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/okd' 2025-09-09 21:02:46.819363 | centos-9-stream | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2025-09-09 21:02:46.819728 | centos-9-stream | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2025-09-09 21:02:46.827178 | centos-9-stream | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2025-09-09 21:02:46.827365 | centos-9-stream | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2025-09-09 21:02:46.827578 | centos-9-stream | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2025-09-09 21:02:46.827804 | centos-9-stream | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vmware/vmware' 2025-09-09 21:02:46.827982 | centos-9-stream | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cloud/common' 2025-09-09 21:02:46.828169 | centos-9-stream | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/iosxr' 2025-09-09 21:02:46.828319 | centos-9-stream | Found installed collection community.proxmox:1.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/proxmox' 2025-09-09 21:02:46.828534 | centos-9-stream | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/arista/eos' 2025-09-09 21:02:46.828684 | centos-9-stream | Found installed collection community.docker:4.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/docker' 2025-09-09 21:02:46.828894 | centos-9-stream | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vultr/cloud' 2025-09-09 21:02:46.829048 | centos-9-stream | Found installed collection community.library_inventory_filtering_v1:1.1.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2025-09-09 21:02:46.829240 | centos-9-stream | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/aci' 2025-09-09 21:02:46.829386 | centos-9-stream | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/mongodb' 2025-09-09 21:02:46.829555 | centos-9-stream | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/microsoft/iis' 2025-09-09 21:02:46.829772 | centos-9-stream | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2025-09-09 21:02:46.829911 | centos-9-stream | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/utils' 2025-09-09 21:02:46.830056 | centos-9-stream | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2025-09-09 21:02:46.830248 | centos-9-stream | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/windows' 2025-09-09 21:02:46.830396 | centos-9-stream | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/hashi_vault' 2025-09-09 21:02:46.830562 | centos-9-stream | Found installed collection community.routeros:3.10.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/routeros' 2025-09-09 21:02:46.830774 | centos-9-stream | Found installed collection cisco.meraki:2.21.4 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/meraki' 2025-09-09 21:02:46.830925 | centos-9-stream | Found installed collection community.sap_libs:1.4.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/sap_libs' 2025-09-09 21:02:46.831071 | centos-9-stream | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/okd' 2025-09-09 21:02:46.831267 | centos-9-stream | Found installed collection purestorage.flashblade:1.21.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2025-09-09 21:02:46.831414 | centos-9-stream | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/asa' 2025-09-09 21:02:46.831578 | centos-9-stream | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2025-09-09 21:02:46.831721 | centos-9-stream | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/inspur/ispim' 2025-09-09 21:02:46.831925 | centos-9-stream | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/digitalocean' 2025-09-09 21:02:46.832071 | centos-9-stream | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/microsoft/ad' 2025-09-09 21:02:46.832224 | centos-9-stream | Found installed collection cyberark.conjur:1.3.7 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cyberark/conjur' 2025-09-09 21:02:46.832368 | centos-9-stream | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/zabbix' 2025-09-09 21:02:46.832580 | centos-9-stream | Found installed collection amazon.aws:9.5.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/amazon/aws' 2025-09-09 21:02:46.832728 | centos-9-stream | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/netcommon' 2025-09-09 21:02:46.832885 | centos-9-stream | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/ontap' 2025-09-09 21:02:46.833027 | centos-9-stream | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2025-09-09 21:02:46.833223 | centos-9-stream | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/theforeman/foreman' 2025-09-09 21:02:46.833370 | centos-9-stream | Found installed collection containers.podman:1.17.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/containers/podman' 2025-09-09 21:02:46.833530 | centos-9-stream | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2025-09-09 21:02:46.833676 | centos-9-stream | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize' 2025-09-09 21:02:46.833892 | centos-9-stream | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2025-09-09 21:02:46.834049 | centos-9-stream | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2025-09-09 21:02:46.834193 | centos-9-stream | Found installed collection f5networks.f5_modules:1.38.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2025-09-09 21:02:46.834341 | centos-9-stream | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/wti/remote' 2025-09-09 21:02:46.834515 | centos-9-stream | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2025-09-09 21:02:46.834727 | centos-9-stream | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vyos/vyos' 2025-09-09 21:02:46.834890 | centos-9-stream | Found installed collection cisco.intersight:2.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/intersight' 2025-09-09 21:02:46.835036 | centos-9-stream | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/dnac' 2025-09-09 21:02:46.835187 | centos-9-stream | Found installed collection openstack.cloud:2.4.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/openstack/cloud' 2025-09-09 21:02:46.835339 | centos-9-stream | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/grafana/grafana' 2025-09-09 21:02:46.835557 | centos-9-stream | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/aws' 2025-09-09 21:02:46.835706 | centos-9-stream | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/qradar' 2025-09-09 21:02:46.835889 | centos-9-stream | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2025-09-09 21:02:46.836034 | centos-9-stream | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/libvirt' 2025-09-09 21:02:46.836184 | centos-9-stream | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ise' 2025-09-09 21:02:46.836331 | centos-9-stream | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/sensu/sensu_go' 2025-09-09 21:02:46.836543 | centos-9-stream | Found installed collection cyberark.pas:1.0.35 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cyberark/pas' 2025-09-09 21:02:46.836692 | centos-9-stream | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2025-09-09 21:02:46.836852 | centos-9-stream | Found installed collection community.vmware:5.8.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/vmware' 2025-09-09 21:02:46.836999 | centos-9-stream | Found installed collection community.hrobot:2.5.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/hrobot' 2025-09-09 21:02:46.837146 | centos-9-stream | Found installed collection purestorage.flasharray:1.36.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2025-09-09 21:02:46.837292 | centos-9-stream | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/grafana' 2025-09-09 21:02:46.837515 | centos-9-stream | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2025-09-09 21:02:46.837663 | centos-9-stream | Found installed collection fortinet.fortimanager:2.10.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2025-09-09 21:02:46.837820 | centos-9-stream | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/network' 2025-09-09 21:02:46.837967 | centos-9-stream | Found installed collection community.sops:2.2.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/sops' 2025-09-09 21:02:46.838142 | centos-9-stream | Found installed collection check_point.mgmt:6.5.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/check_point/mgmt' 2025-09-09 21:02:46.838291 | centos-9-stream | Found installed collection community.dns:3.3.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/dns' 2025-09-09 21:02:46.838493 | centos-9-stream | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kubevirt/core' 2025-09-09 21:02:46.838695 | centos-9-stream | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netbox/netbox' 2025-09-09 21:02:46.838858 | centos-9-stream | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2025-09-09 21:02:46.839001 | centos-9-stream | Found installed collection community.proxysql:1.6.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/proxysql' 2025-09-09 21:02:46.839144 | centos-9-stream | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/windows' 2025-09-09 21:02:46.839288 | centos-9-stream | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2025-09-09 21:02:46.839434 | centos-9-stream | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2025-09-09 21:02:46.839596 | centos-9-stream | Found installed collection kubernetes.core:5.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kubernetes/core' 2025-09-09 21:02:46.839818 | centos-9-stream | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2025-09-09 21:02:46.839969 | centos-9-stream | Found installed collection fortinet.fortios:2.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/fortinet/fortios' 2025-09-09 21:02:46.840114 | centos-9-stream | Found installed collection ravendb.ravendb:1.0.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ravendb/ravendb' 2025-09-09 21:02:46.840260 | centos-9-stream | Found installed collection google.cloud:1.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/google/cloud' 2025-09-09 21:02:46.840412 | centos-9-stream | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/ciscosmb' 2025-09-09 21:02:46.840575 | centos-9-stream | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/splunk/es' 2025-09-09 21:02:46.840722 | centos-9-stream | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2025-09-09 21:02:46.840922 | centos-9-stream | Found installed collection community.mysql:3.15.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/mysql' 2025-09-09 21:02:46.841068 | centos-9-stream | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/nxos' 2025-09-09 21:02:46.841211 | centos-9-stream | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/postgresql' 2025-09-09 21:02:46.841357 | centos-9-stream | Found installed collection azure.azcollection:3.8.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/azure/azcollection' 2025-09-09 21:02:46.841519 | centos-9-stream | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ucs' 2025-09-09 21:02:46.841664 | centos-9-stream | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2025-09-09 21:02:46.841822 | centos-9-stream | Found installed collection community.general:10.7.4 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/general' 2025-09-09 21:02:46.841965 | centos-9-stream | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/posix' 2025-09-09 21:02:46.842159 | centos-9-stream | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2025-09-09 21:02:46.842306 | centos-9-stream | Found installed collection community.crypto:2.26.5 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/crypto' 2025-09-09 21:02:46.842468 | centos-9-stream | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/rabbitmq' 2025-09-09 21:02:46.842611 | centos-9-stream | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/awx/awx' 2025-09-09 21:02:46.842781 | centos-9-stream | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/mso' 2025-09-09 21:02:46.842930 | centos-9-stream | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/unity' 2025-09-09 21:02:46.843072 | centos-9-stream | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ios' 2025-09-09 21:02:46.847093 | centos-9-stream | Initial connection to galaxy_server: https://galaxy.ansible.com 2025-09-09 21:02:46.847403 | centos-9-stream | Created /home/zuul/.ansible/galaxy_token 2025-09-09 21:02:46.847557 | centos-9-stream | Calling Galaxy at https://galaxy.ansible.com/api/ 2025-09-09 21:02:46.750344 | ubuntu-jammy | ansible-galaxy [core 2.18.9] 2025-09-09 21:02:46.750935 | ubuntu-jammy | config file = None 2025-09-09 21:02:46.751571 | ubuntu-jammy | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2025-09-09 21:02:46.752067 | ubuntu-jammy | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2025-09-09 21:02:46.752553 | ubuntu-jammy | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.11/site-packages:/home/zuul/venv/lib/python3.11/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.11/dist-packages 2025-09-09 21:02:46.752917 | ubuntu-jammy | executable location = /home/zuul/venv/bin/ansible-galaxy 2025-09-09 21:02:46.753272 | ubuntu-jammy | python version = 3.11.0rc1 (main, Aug 12 2022, 10:02:14) [GCC 11.2.0] (/home/zuul/venv/bin/python3.11) 2025-09-09 21:02:46.753694 | ubuntu-jammy | jinja version = 3.1.6 2025-09-09 21:02:46.754023 | ubuntu-jammy | libyaml = True 2025-09-09 21:02:46.754331 | ubuntu-jammy | No config file found; using defaults 2025-09-09 21:02:46.754887 | ubuntu-jammy | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2025-09-09 21:02:46.755654 | ubuntu-jammy | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2025-09-09 21:02:46.756034 | ubuntu-jammy | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2025-09-09 21:02:46.761037 | ubuntu-jammy | Loading collection wti.remote from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote 2025-09-09 21:02:46.761674 | ubuntu-jammy | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote' 2025-09-09 21:02:46.762205 | ubuntu-jammy | Loading collection community.docker from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker 2025-09-09 21:02:46.762841 | ubuntu-jammy | Found installed collection community.docker:4.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker' 2025-09-09 21:02:46.763348 | ubuntu-jammy | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr 2025-09-09 21:02:46.763877 | ubuntu-jammy | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr' 2025-09-09 21:02:46.764248 | ubuntu-jammy | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt 2025-09-09 21:02:46.764792 | ubuntu-jammy | Found installed collection check_point.mgmt:6.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt' 2025-09-09 21:02:46.765098 | ubuntu-jammy | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb 2025-09-09 21:02:46.765394 | ubuntu-jammy | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb' 2025-09-09 21:02:46.765692 | ubuntu-jammy | Loading collection cloud.common from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common 2025-09-09 21:02:46.766158 | ubuntu-jammy | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common' 2025-09-09 21:02:46.766983 | ubuntu-jammy | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage 2025-09-09 21:02:46.767409 | ubuntu-jammy | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2025-09-09 21:02:46.767930 | ubuntu-jammy | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware 2025-09-09 21:02:46.768381 | ubuntu-jammy | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware' 2025-09-09 21:02:46.768640 | ubuntu-jammy | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs 2025-09-09 21:02:46.769091 | ubuntu-jammy | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs' 2025-09-09 21:02:46.771634 | ubuntu-jammy | Loading collection awx.awx from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx 2025-09-09 21:02:46.772076 | ubuntu-jammy | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx' 2025-09-09 21:02:46.772309 | ubuntu-jammy | Loading collection community.proxysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql 2025-09-09 21:02:46.772728 | ubuntu-jammy | Found installed collection community.proxysql:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql' 2025-09-09 21:02:46.773127 | ubuntu-jammy | Loading collection community.zabbix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix 2025-09-09 21:02:46.773528 | ubuntu-jammy | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix' 2025-09-09 21:02:46.773870 | ubuntu-jammy | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault 2025-09-09 21:02:46.774237 | ubuntu-jammy | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault' 2025-09-09 21:02:46.774971 | ubuntu-jammy | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2025-09-09 21:02:46.775396 | ubuntu-jammy | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2025-09-09 21:02:46.775917 | ubuntu-jammy | Loading collection community.hrobot from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot 2025-09-09 21:02:46.776250 | ubuntu-jammy | Found installed collection community.hrobot:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot' 2025-09-09 21:02:46.777035 | ubuntu-jammy | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox 2025-09-09 21:02:46.777385 | ubuntu-jammy | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox' 2025-09-09 21:02:46.777760 | ubuntu-jammy | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2025-09-09 21:02:46.778164 | ubuntu-jammy | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2025-09-09 21:02:46.778397 | ubuntu-jammy | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade 2025-09-09 21:02:46.778853 | ubuntu-jammy | Found installed collection purestorage.flashblade:1.21.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2025-09-09 21:02:46.779325 | ubuntu-jammy | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2025-09-09 21:02:46.779651 | ubuntu-jammy | Found installed collection f5networks.f5_modules:1.38.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2025-09-09 21:02:46.780132 | ubuntu-jammy | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq 2025-09-09 21:02:46.780498 | ubuntu-jammy | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq' 2025-09-09 21:02:46.783988 | ubuntu-jammy | Loading collection community.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws 2025-09-09 21:02:46.784336 | ubuntu-jammy | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws' 2025-09-09 21:02:46.784566 | ubuntu-jammy | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac 2025-09-09 21:02:46.785057 | ubuntu-jammy | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac' 2025-09-09 21:02:46.785366 | ubuntu-jammy | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2025-09-09 21:02:46.785786 | ubuntu-jammy | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2025-09-09 21:02:46.786122 | ubuntu-jammy | Loading collection ansible.utils from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils 2025-09-09 21:02:46.786496 | ubuntu-jammy | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils' 2025-09-09 21:02:46.786886 | ubuntu-jammy | Loading collection ansible.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows 2025-09-09 21:02:46.787284 | ubuntu-jammy | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows' 2025-09-09 21:02:46.787635 | ubuntu-jammy | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox 2025-09-09 21:02:46.788029 | ubuntu-jammy | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2025-09-09 21:02:46.788254 | ubuntu-jammy | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight 2025-09-09 21:02:46.788625 | ubuntu-jammy | Found installed collection cisco.intersight:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight' 2025-09-09 21:02:46.789071 | ubuntu-jammy | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid 2025-09-09 21:02:46.789432 | ubuntu-jammy | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2025-09-09 21:02:46.789763 | ubuntu-jammy | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim 2025-09-09 21:02:46.790149 | ubuntu-jammy | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim' 2025-09-09 21:02:46.790506 | ubuntu-jammy | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2025-09-09 21:02:46.790842 | ubuntu-jammy | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2025-09-09 21:02:46.792334 | ubuntu-jammy | Loading collection cisco.mso from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso 2025-09-09 21:02:46.792732 | ubuntu-jammy | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso' 2025-09-09 21:02:46.793059 | ubuntu-jammy | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2025-09-09 21:02:46.793504 | ubuntu-jammy | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2025-09-09 21:02:46.793996 | ubuntu-jammy | Loading collection community.mongodb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb 2025-09-09 21:02:46.794355 | ubuntu-jammy | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb' 2025-09-09 21:02:46.794669 | ubuntu-jammy | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core 2025-09-09 21:02:46.795022 | ubuntu-jammy | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core' 2025-09-09 21:02:46.795283 | ubuntu-jammy | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2025-09-09 21:02:46.795736 | ubuntu-jammy | Found installed collection community.library_inventory_filtering_v1:1.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2025-09-09 21:02:46.796731 | ubuntu-jammy | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud 2025-09-09 21:02:46.797195 | ubuntu-jammy | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2025-09-09 21:02:46.799776 | ubuntu-jammy | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2025-09-09 21:02:46.800106 | ubuntu-jammy | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2025-09-09 21:02:46.800323 | ubuntu-jammy | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize 2025-09-09 21:02:46.800712 | ubuntu-jammy | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize' 2025-09-09 21:02:46.801137 | ubuntu-jammy | Loading collection community.postgresql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql 2025-09-09 21:02:46.801532 | ubuntu-jammy | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql' 2025-09-09 21:02:46.801826 | ubuntu-jammy | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2025-09-09 21:02:46.802169 | ubuntu-jammy | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2025-09-09 21:02:46.802511 | ubuntu-jammy | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2025-09-09 21:02:46.802928 | ubuntu-jammy | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2025-09-09 21:02:46.803307 | ubuntu-jammy | Loading collection community.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana 2025-09-09 21:02:46.803745 | ubuntu-jammy | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana' 2025-09-09 21:02:46.804025 | ubuntu-jammy | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios 2025-09-09 21:02:46.804389 | ubuntu-jammy | Found installed collection fortinet.fortios:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios' 2025-09-09 21:02:46.806328 | ubuntu-jammy | Loading collection community.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware 2025-09-09 21:02:46.806755 | ubuntu-jammy | Found installed collection community.vmware:5.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware' 2025-09-09 21:02:46.807375 | ubuntu-jammy | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2025-09-09 21:02:46.807820 | ubuntu-jammy | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2025-09-09 21:02:46.808505 | ubuntu-jammy | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2025-09-09 21:02:46.808895 | ubuntu-jammy | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2025-09-09 21:02:46.809618 | ubuntu-jammy | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity 2025-09-09 21:02:46.810015 | ubuntu-jammy | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity' 2025-09-09 21:02:46.810457 | ubuntu-jammy | Loading collection community.okd from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd 2025-09-09 21:02:46.811140 | ubuntu-jammy | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd' 2025-09-09 21:02:46.811389 | ubuntu-jammy | Loading collection community.routeros from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros 2025-09-09 21:02:46.811599 | ubuntu-jammy | Found installed collection community.routeros:3.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros' 2025-09-09 21:02:46.811914 | ubuntu-jammy | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray 2025-09-09 21:02:46.812277 | ubuntu-jammy | Found installed collection purestorage.flasharray:1.36.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2025-09-09 21:02:46.812586 | ubuntu-jammy | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas 2025-09-09 21:02:46.812957 | ubuntu-jammy | Found installed collection cyberark.pas:1.0.35 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas' 2025-09-09 21:02:46.813991 | ubuntu-jammy | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap 2025-09-09 21:02:46.814375 | ubuntu-jammy | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap' 2025-09-09 21:02:46.814883 | ubuntu-jammy | Loading collection community.crypto from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto 2025-09-09 21:02:46.815342 | ubuntu-jammy | Found installed collection community.crypto:2.26.5 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto' 2025-09-09 21:02:46.816939 | ubuntu-jammy | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman 2025-09-09 21:02:46.817411 | ubuntu-jammy | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman' 2025-09-09 21:02:46.817752 | ubuntu-jammy | Loading collection cisco.asa from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa 2025-09-09 21:02:46.818142 | ubuntu-jammy | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa' 2025-09-09 21:02:46.818974 | ubuntu-jammy | Loading collection arista.eos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos 2025-09-09 21:02:46.819361 | ubuntu-jammy | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos' 2025-09-09 21:02:46.820110 | ubuntu-jammy | Loading collection splunk.es from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es 2025-09-09 21:02:46.820512 | ubuntu-jammy | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es' 2025-09-09 21:02:46.822344 | ubuntu-jammy | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki 2025-09-09 21:02:46.822757 | ubuntu-jammy | Found installed collection cisco.meraki:2.21.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki' 2025-09-09 21:02:46.824083 | ubuntu-jammy | Loading collection amazon.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws 2025-09-09 21:02:46.824531 | ubuntu-jammy | Found installed collection amazon.aws:9.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws' 2025-09-09 21:02:46.825158 | ubuntu-jammy | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt 2025-09-09 21:02:46.825561 | ubuntu-jammy | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2025-09-09 21:02:46.825845 | ubuntu-jammy | Loading collection community.mysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql 2025-09-09 21:02:46.826216 | ubuntu-jammy | Found installed collection community.mysql:3.15.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql' 2025-09-09 21:02:46.827182 | ubuntu-jammy | Loading collection google.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud 2025-09-09 21:02:46.827655 | ubuntu-jammy | Found installed collection google.cloud:1.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud' 2025-09-09 21:02:46.829489 | ubuntu-jammy | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection 2025-09-09 21:02:46.829877 | ubuntu-jammy | Found installed collection azure.azcollection:3.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection' 2025-09-09 21:02:46.830133 | ubuntu-jammy | Loading collection community.libvirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt 2025-09-09 21:02:46.830521 | ubuntu-jammy | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt' 2025-09-09 21:02:46.830775 | ubuntu-jammy | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur 2025-09-09 21:02:46.831169 | ubuntu-jammy | Found installed collection cyberark.conjur:1.3.7 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur' 2025-09-09 21:02:46.866116 | ubuntu-jammy | Loading collection community.network from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network 2025-09-09 21:02:46.866618 | ubuntu-jammy | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network' 2025-09-09 21:02:46.867341 | ubuntu-jammy | Loading collection community.proxmox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox 2025-09-09 21:02:46.867849 | ubuntu-jammy | Found installed collection community.proxmox:1.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox' 2025-09-09 21:02:46.869551 | ubuntu-jammy | Loading collection cisco.aci from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci 2025-09-09 21:02:46.869947 | ubuntu-jammy | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci' 2025-09-09 21:02:46.870331 | ubuntu-jammy | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana 2025-09-09 21:02:46.870772 | ubuntu-jammy | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana' 2025-09-09 21:02:46.871171 | ubuntu-jammy | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex 2025-09-09 21:02:46.871618 | ubuntu-jammy | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2025-09-09 21:02:46.872595 | ubuntu-jammy | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean 2025-09-09 21:02:46.872948 | ubuntu-jammy | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean' 2025-09-09 21:02:46.873289 | ubuntu-jammy | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2025-09-09 21:02:46.873667 | ubuntu-jammy | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2025-09-09 21:02:46.874205 | ubuntu-jammy | Loading collection ansible.posix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix 2025-09-09 21:02:46.874572 | ubuntu-jammy | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix' 2025-09-09 21:02:46.874917 | ubuntu-jammy | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad 2025-09-09 21:02:46.875317 | ubuntu-jammy | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad' 2025-09-09 21:02:46.875689 | ubuntu-jammy | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis 2025-09-09 21:02:46.876028 | ubuntu-jammy | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis' 2025-09-09 21:02:46.884307 | ubuntu-jammy | Loading collection community.general from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general 2025-09-09 21:02:46.884670 | ubuntu-jammy | Found installed collection community.general:10.7.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general' 2025-09-09 21:02:46.885538 | ubuntu-jammy | Loading collection cisco.ios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios 2025-09-09 21:02:46.885876 | ubuntu-jammy | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios' 2025-09-09 21:02:46.886215 | ubuntu-jammy | Loading collection community.sops from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops 2025-09-09 21:02:46.886582 | ubuntu-jammy | Found installed collection community.sops:2.2.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops' 2025-09-09 21:02:46.886925 | ubuntu-jammy | Loading collection containers.podman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman 2025-09-09 21:02:46.887391 | ubuntu-jammy | Found installed collection containers.podman:1.17.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman' 2025-09-09 21:02:46.888172 | ubuntu-jammy | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos 2025-09-09 21:02:46.888723 | ubuntu-jammy | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos' 2025-09-09 21:02:46.889139 | ubuntu-jammy | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2025-09-09 21:02:46.889554 | ubuntu-jammy | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2025-09-09 21:02:46.889958 | ubuntu-jammy | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb 2025-09-09 21:02:46.890408 | ubuntu-jammy | Found installed collection ravendb.ravendb:1.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb' 2025-09-09 21:02:46.890868 | ubuntu-jammy | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar 2025-09-09 21:02:46.891173 | ubuntu-jammy | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar' 2025-09-09 21:02:46.891687 | ubuntu-jammy | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud 2025-09-09 21:02:46.892047 | ubuntu-jammy | Found installed collection openstack.cloud:2.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud' 2025-09-09 21:02:46.892391 | ubuntu-jammy | Loading collection community.dns from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns 2025-09-09 21:02:46.892746 | ubuntu-jammy | Found installed collection community.dns:3.3.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns' 2025-09-09 21:02:46.893417 | ubuntu-jammy | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2025-09-09 21:02:46.893715 | ubuntu-jammy | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2025-09-09 21:02:46.893988 | ubuntu-jammy | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2025-09-09 21:02:46.894406 | ubuntu-jammy | Found installed collection fortinet.fortimanager:2.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2025-09-09 21:02:46.895274 | ubuntu-jammy | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core 2025-09-09 21:02:46.895675 | ubuntu-jammy | Found installed collection kubernetes.core:5.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core' 2025-09-09 21:02:46.896737 | ubuntu-jammy | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon 2025-09-09 21:02:46.897014 | ubuntu-jammy | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon' 2025-09-09 21:02:46.898187 | ubuntu-jammy | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos 2025-09-09 21:02:46.898527 | ubuntu-jammy | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2025-09-09 21:02:46.899109 | ubuntu-jammy | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud 2025-09-09 21:02:46.899457 | ubuntu-jammy | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud' 2025-09-09 21:02:46.899842 | ubuntu-jammy | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2025-09-09 21:02:46.900140 | ubuntu-jammy | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2025-09-09 21:02:46.902185 | ubuntu-jammy | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos 2025-09-09 21:02:46.902551 | ubuntu-jammy | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos' 2025-09-09 21:02:46.902842 | ubuntu-jammy | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go 2025-09-09 21:02:46.903127 | ubuntu-jammy | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go' 2025-09-09 21:02:46.903722 | ubuntu-jammy | Loading collection community.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows 2025-09-09 21:02:46.904108 | ubuntu-jammy | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows' 2025-09-09 21:02:46.904387 | ubuntu-jammy | Loading collection cisco.ise from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise 2025-09-09 21:02:46.904707 | ubuntu-jammy | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise' 2025-09-09 21:02:46.904989 | ubuntu-jammy | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs 2025-09-09 21:02:46.905393 | ubuntu-jammy | Found installed collection community.sap_libs:1.4.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs' 2025-09-09 21:02:46.910514 | ubuntu-jammy | Initial connection to galaxy_server: https://galaxy.ansible.com 2025-09-09 21:02:46.910735 | ubuntu-jammy | Created /home/zuul/.ansible/galaxy_token 2025-09-09 21:02:46.910912 | ubuntu-jammy | Calling Galaxy at https://galaxy.ansible.com/api/ 2025-09-09 21:02:47.127865 | ubuntu-noble | ansible-galaxy [core 2.18.9] 2025-09-09 21:02:47.128018 | ubuntu-noble | config file = None 2025-09-09 21:02:47.128645 | ubuntu-noble | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2025-09-09 21:02:47.129160 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2025-09-09 21:02:47.129651 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.12/site-packages:/home/zuul/venv/lib/python3.12/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.12/dist-packages 2025-09-09 21:02:47.130122 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-galaxy 2025-09-09 21:02:47.130528 | ubuntu-noble | python version = 3.12.3 (main, Aug 14 2025, 17:47:21) [GCC 13.3.0] (/home/zuul/venv/bin/python3) 2025-09-09 21:02:47.130928 | ubuntu-noble | jinja version = 3.1.6 2025-09-09 21:02:47.131291 | ubuntu-noble | libyaml = True 2025-09-09 21:02:47.131644 | ubuntu-noble | No config file found; using defaults 2025-09-09 21:02:47.132327 | ubuntu-noble | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2025-09-09 21:02:47.141293 | ubuntu-noble | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2025-09-09 21:02:47.141364 | ubuntu-noble | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2025-09-09 21:02:47.152846 | ubuntu-noble | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud 2025-09-09 21:02:47.152935 | ubuntu-noble | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud' 2025-09-09 21:02:47.153101 | ubuntu-noble | Loading collection community.hrobot from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot 2025-09-09 21:02:47.153607 | ubuntu-noble | Found installed collection community.hrobot:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot' 2025-09-09 21:02:47.154058 | ubuntu-noble | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage 2025-09-09 21:02:47.154452 | ubuntu-noble | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage' 2025-09-09 21:02:47.154983 | ubuntu-noble | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic 2025-09-09 21:02:47.155572 | ubuntu-noble | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic' 2025-09-09 21:02:47.156205 | ubuntu-noble | Loading collection splunk.es from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es 2025-09-09 21:02:47.156645 | ubuntu-noble | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es' 2025-09-09 21:02:47.157191 | ubuntu-noble | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs 2025-09-09 21:02:47.157530 | ubuntu-noble | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs' 2025-09-09 21:02:47.157936 | ubuntu-noble | Loading collection community.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana 2025-09-09 21:02:47.158543 | ubuntu-noble | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana' 2025-09-09 21:02:47.158948 | ubuntu-noble | Loading collection community.postgresql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql 2025-09-09 21:02:47.159300 | ubuntu-noble | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql' 2025-09-09 21:02:47.159758 | ubuntu-noble | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos 2025-09-09 21:02:47.160205 | ubuntu-noble | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos' 2025-09-09 21:02:47.160597 | ubuntu-noble | Loading collection community.mongodb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb 2025-09-09 21:02:47.160909 | ubuntu-noble | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb' 2025-09-09 21:02:47.161185 | ubuntu-noble | Loading collection cisco.asa from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa 2025-09-09 21:02:47.161518 | ubuntu-noble | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa' 2025-09-09 21:02:47.162807 | ubuntu-noble | Loading collection community.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows 2025-09-09 21:02:47.162834 | ubuntu-noble | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows' 2025-09-09 21:02:47.162842 | ubuntu-noble | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity 2025-09-09 21:02:47.162862 | ubuntu-noble | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity' 2025-09-09 21:02:47.163069 | ubuntu-noble | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey 2025-09-09 21:02:47.163422 | ubuntu-noble | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey' 2025-09-09 21:02:47.163720 | ubuntu-noble | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar 2025-09-09 21:02:47.164069 | ubuntu-noble | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar' 2025-09-09 21:02:47.164304 | ubuntu-noble | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight 2025-09-09 21:02:47.164586 | ubuntu-noble | Found installed collection cisco.intersight:2.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight' 2025-09-09 21:02:47.164829 | ubuntu-noble | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac 2025-09-09 21:02:47.165183 | ubuntu-noble | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac' 2025-09-09 21:02:47.165409 | ubuntu-noble | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim 2025-09-09 21:02:47.165682 | ubuntu-noble | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim' 2025-09-09 21:02:47.165996 | ubuntu-noble | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core 2025-09-09 21:02:47.166301 | ubuntu-noble | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core' 2025-09-09 21:02:47.168737 | ubuntu-noble | Loading collection awx.awx from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx 2025-09-09 21:02:47.169087 | ubuntu-noble | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx' 2025-09-09 21:02:47.169709 | ubuntu-noble | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage 2025-09-09 21:02:47.170108 | ubuntu-noble | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage' 2025-09-09 21:02:47.170385 | ubuntu-noble | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq 2025-09-09 21:02:47.170738 | ubuntu-noble | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq' 2025-09-09 21:02:47.171325 | ubuntu-noble | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block 2025-09-09 21:02:47.171608 | ubuntu-noble | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block' 2025-09-09 21:02:47.173150 | ubuntu-noble | Loading collection arista.eos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos 2025-09-09 21:02:47.173709 | ubuntu-noble | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos' 2025-09-09 21:02:47.174634 | ubuntu-noble | Loading collection cisco.mso from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso 2025-09-09 21:02:47.175074 | ubuntu-noble | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso' 2025-09-09 21:02:47.176062 | ubuntu-noble | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core 2025-09-09 21:02:47.176092 | ubuntu-noble | Found installed collection kubernetes.core:5.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core' 2025-09-09 21:02:47.177810 | ubuntu-noble | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud 2025-09-09 21:02:47.177853 | ubuntu-noble | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud' 2025-09-09 21:02:47.177862 | ubuntu-noble | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb 2025-09-09 21:02:47.177869 | ubuntu-noble | Found installed collection ravendb.ravendb:1.0.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb' 2025-09-09 21:02:47.179813 | ubuntu-noble | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt 2025-09-09 21:02:47.179847 | ubuntu-noble | Found installed collection check_point.mgmt:6.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt' 2025-09-09 21:02:47.179855 | ubuntu-noble | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox 2025-09-09 21:02:47.179863 | ubuntu-noble | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox' 2025-09-09 21:02:47.179871 | ubuntu-noble | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize 2025-09-09 21:02:47.180170 | ubuntu-noble | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize' 2025-09-09 21:02:47.183748 | ubuntu-noble | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki 2025-09-09 21:02:47.184602 | ubuntu-noble | Found installed collection cisco.meraki:2.21.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki' 2025-09-09 21:02:47.185221 | ubuntu-noble | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox 2025-09-09 21:02:47.185738 | ubuntu-noble | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox' 2025-09-09 21:02:47.186177 | ubuntu-noble | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director 2025-09-09 21:02:47.186636 | ubuntu-noble | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director' 2025-09-09 21:02:47.187271 | ubuntu-noble | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage 2025-09-09 21:02:47.187934 | ubuntu-noble | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage' 2025-09-09 21:02:47.188556 | ubuntu-noble | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray 2025-09-09 21:02:47.189096 | ubuntu-noble | Found installed collection purestorage.flasharray:1.36.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray' 2025-09-09 21:02:47.189689 | ubuntu-noble | Loading collection cloud.common from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common 2025-09-09 21:02:47.190492 | ubuntu-noble | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common' 2025-09-09 21:02:47.207440 | ubuntu-noble | Loading collection community.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware 2025-09-09 21:02:47.208285 | ubuntu-noble | Found installed collection community.vmware:5.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware' 2025-09-09 21:02:47.208826 | ubuntu-noble | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana 2025-09-09 21:02:47.210830 | ubuntu-noble | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana' 2025-09-09 21:02:47.210875 | ubuntu-noble | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos 2025-09-09 21:02:47.210914 | ubuntu-noble | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos' 2025-09-09 21:02:47.211234 | ubuntu-noble | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go 2025-09-09 21:02:47.211573 | ubuntu-noble | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go' 2025-09-09 21:02:47.211985 | ubuntu-noble | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware 2025-09-09 21:02:47.212367 | ubuntu-noble | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware' 2025-09-09 21:02:47.212863 | ubuntu-noble | Loading collection containers.podman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman 2025-09-09 21:02:47.213314 | ubuntu-noble | Found installed collection containers.podman:1.17.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman' 2025-09-09 21:02:47.213681 | ubuntu-noble | Loading collection community.mysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql 2025-09-09 21:02:47.214006 | ubuntu-noble | Found installed collection community.mysql:3.15.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql' 2025-09-09 21:02:47.214322 | ubuntu-noble | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules 2025-09-09 21:02:47.214829 | ubuntu-noble | Found installed collection f5networks.f5_modules:1.38.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules' 2025-09-09 21:02:47.215397 | ubuntu-noble | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity 2025-09-09 21:02:47.215879 | ubuntu-noble | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity' 2025-09-09 21:02:47.216479 | ubuntu-noble | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud 2025-09-09 21:02:47.217055 | ubuntu-noble | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud' 2025-09-09 21:02:47.217500 | ubuntu-noble | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault 2025-09-09 21:02:47.218100 | ubuntu-noble | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault' 2025-09-09 21:02:47.227335 | ubuntu-noble | Loading collection community.general from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general 2025-09-09 21:02:47.227594 | ubuntu-noble | Found installed collection community.general:10.7.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general' 2025-09-09 21:02:47.227957 | ubuntu-noble | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs 2025-09-09 21:02:47.228350 | ubuntu-noble | Found installed collection community.sap_libs:1.4.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs' 2025-09-09 21:02:47.228702 | ubuntu-noble | Loading collection community.routeros from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros 2025-09-09 21:02:47.228997 | ubuntu-noble | Found installed collection community.routeros:3.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros' 2025-09-09 21:02:47.229369 | ubuntu-noble | Loading collection community.zabbix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix 2025-09-09 21:02:47.229687 | ubuntu-noble | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix' 2025-09-09 21:02:47.230072 | ubuntu-noble | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad 2025-09-09 21:02:47.230462 | ubuntu-noble | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad' 2025-09-09 21:02:47.231550 | ubuntu-noble | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap 2025-09-09 21:02:47.231918 | ubuntu-noble | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap' 2025-09-09 21:02:47.232154 | ubuntu-noble | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis 2025-09-09 21:02:47.232444 | ubuntu-noble | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis' 2025-09-09 21:02:47.273546 | ubuntu-noble | Loading collection community.network from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network 2025-09-09 21:02:47.273963 | ubuntu-noble | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network' 2025-09-09 21:02:47.275145 | ubuntu-noble | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean 2025-09-09 21:02:47.275567 | ubuntu-noble | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean' 2025-09-09 21:02:47.277328 | ubuntu-noble | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman 2025-09-09 21:02:47.277763 | ubuntu-noble | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman' 2025-09-09 21:02:47.278613 | ubuntu-noble | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr 2025-09-09 21:02:47.279217 | ubuntu-noble | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr' 2025-09-09 21:02:47.279236 | ubuntu-noble | Loading collection community.proxysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql 2025-09-09 21:02:47.279563 | ubuntu-noble | Found installed collection community.proxysql:1.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql' 2025-09-09 21:02:47.280576 | ubuntu-noble | Loading collection ansible.utils from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils 2025-09-09 21:02:47.280601 | ubuntu-noble | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils' 2025-09-09 21:02:47.280607 | ubuntu-noble | Loading collection community.dns from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns 2025-09-09 21:02:47.280970 | ubuntu-noble | Found installed collection community.dns:3.3.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns' 2025-09-09 21:02:47.281575 | ubuntu-noble | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt 2025-09-09 21:02:47.281973 | ubuntu-noble | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt' 2025-09-09 21:02:47.282410 | ubuntu-noble | Loading collection community.docker from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker 2025-09-09 21:02:47.282726 | ubuntu-noble | Found installed collection community.docker:4.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker' 2025-09-09 21:02:47.283108 | ubuntu-noble | Loading collection ansible.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows 2025-09-09 21:02:47.283402 | ubuntu-noble | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows' 2025-09-09 21:02:47.285620 | ubuntu-noble | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos 2025-09-09 21:02:47.286061 | ubuntu-noble | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos' 2025-09-09 21:02:47.286491 | ubuntu-noble | Loading collection community.okd from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd 2025-09-09 21:02:47.286845 | ubuntu-noble | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd' 2025-09-09 21:02:47.288823 | ubuntu-noble | Loading collection community.proxmox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox 2025-09-09 21:02:47.288874 | ubuntu-noble | Found installed collection community.proxmox:1.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox' 2025-09-09 21:02:47.288909 | ubuntu-noble | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas 2025-09-09 21:02:47.289275 | ubuntu-noble | Found installed collection cyberark.pas:1.0.35 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas' 2025-09-09 21:02:47.289622 | ubuntu-noble | Loading collection cisco.ise from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise 2025-09-09 21:02:47.290015 | ubuntu-noble | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise' 2025-09-09 21:02:47.290362 | ubuntu-noble | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade 2025-09-09 21:02:47.290855 | ubuntu-noble | Found installed collection purestorage.flashblade:1.21.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade' 2025-09-09 21:02:47.294027 | ubuntu-noble | Loading collection community.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws 2025-09-09 21:02:47.294658 | ubuntu-noble | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws' 2025-09-09 21:02:47.295248 | ubuntu-noble | Loading collection google.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud 2025-09-09 21:02:47.295746 | ubuntu-noble | Found installed collection google.cloud:1.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud' 2025-09-09 21:02:47.296261 | ubuntu-noble | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb 2025-09-09 21:02:47.296662 | ubuntu-noble | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb' 2025-09-09 21:02:47.297259 | ubuntu-noble | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize 2025-09-09 21:02:47.297657 | ubuntu-noble | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize' 2025-09-09 21:02:47.299309 | ubuntu-noble | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest 2025-09-09 21:02:47.299742 | ubuntu-noble | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest' 2025-09-09 21:02:47.301677 | ubuntu-noble | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection 2025-09-09 21:02:47.303812 | ubuntu-noble | Found installed collection azure.azcollection:3.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection' 2025-09-09 21:02:47.303842 | ubuntu-noble | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur 2025-09-09 21:02:47.303853 | ubuntu-noble | Found installed collection cyberark.conjur:1.3.7 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur' 2025-09-09 21:02:47.303862 | ubuntu-noble | Loading collection ansible.posix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix 2025-09-09 21:02:47.303870 | ubuntu-noble | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix' 2025-09-09 21:02:47.304046 | ubuntu-noble | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios 2025-09-09 21:02:47.304470 | ubuntu-noble | Found installed collection fortinet.fortios:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios' 2025-09-09 21:02:47.304861 | ubuntu-noble | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager 2025-09-09 21:02:47.305230 | ubuntu-noble | Found installed collection fortinet.fortimanager:2.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager' 2025-09-09 21:02:47.305659 | ubuntu-noble | Loading collection wti.remote from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote 2025-09-09 21:02:47.306095 | ubuntu-noble | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote' 2025-09-09 21:02:47.306426 | ubuntu-noble | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules 2025-09-09 21:02:47.306753 | ubuntu-noble | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules' 2025-09-09 21:02:47.307137 | ubuntu-noble | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon 2025-09-09 21:02:47.307503 | ubuntu-noble | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon' 2025-09-09 21:02:47.307809 | ubuntu-noble | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager 2025-09-09 21:02:47.308188 | ubuntu-noble | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager' 2025-09-09 21:02:47.308525 | ubuntu-noble | Loading collection community.crypto from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto 2025-09-09 21:02:47.308936 | ubuntu-noble | Found installed collection community.crypto:2.26.5 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto' 2025-09-09 21:02:47.310014 | ubuntu-noble | Loading collection amazon.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws 2025-09-09 21:02:47.310315 | ubuntu-noble | Found installed collection amazon.aws:9.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws' 2025-09-09 21:02:47.310822 | ubuntu-noble | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex 2025-09-09 21:02:47.311164 | ubuntu-noble | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex' 2025-09-09 21:02:47.312025 | ubuntu-noble | Loading collection cisco.ios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios 2025-09-09 21:02:47.312411 | ubuntu-noble | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios' 2025-09-09 21:02:47.312716 | ubuntu-noble | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1 2025-09-09 21:02:47.313158 | ubuntu-noble | Found installed collection community.library_inventory_filtering_v1:1.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2025-09-09 21:02:47.313657 | ubuntu-noble | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud 2025-09-09 21:02:47.314015 | ubuntu-noble | Found installed collection openstack.cloud:2.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud' 2025-09-09 21:02:47.314313 | ubuntu-noble | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver 2025-09-09 21:02:47.314594 | ubuntu-noble | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver' 2025-09-09 21:02:47.315237 | ubuntu-noble | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack 2025-09-09 21:02:47.315566 | ubuntu-noble | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack' 2025-09-09 21:02:47.316040 | ubuntu-noble | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid 2025-09-09 21:02:47.316342 | ubuntu-noble | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid' 2025-09-09 21:02:47.316611 | ubuntu-noble | Loading collection community.sops from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops 2025-09-09 21:02:47.316905 | ubuntu-noble | Found installed collection community.sops:2.2.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops' 2025-09-09 21:02:47.317176 | ubuntu-noble | Loading collection community.libvirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt 2025-09-09 21:02:47.317449 | ubuntu-noble | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt' 2025-09-09 21:02:47.319207 | ubuntu-noble | Loading collection cisco.aci from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci 2025-09-09 21:02:47.319570 | ubuntu-noble | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci' 2025-09-09 21:02:47.325646 | ubuntu-noble | Initial connection to galaxy_server: https://galaxy.ansible.com 2025-09-09 21:02:47.326005 | ubuntu-noble | Created /home/zuul/.ansible/galaxy_token 2025-09-09 21:02:47.326223 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/ 2025-09-09 21:02:47.042696 | debian-bookworm | Found API version 'v3, pulp-v3, v1' with Galaxy server default (https://galaxy.ansible.com/api/) 2025-09-09 21:02:47.043374 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/ 2025-09-09 21:02:47.090785 | centos-9-stream | Found API version 'v3, pulp-v3, v1' with Galaxy server default (https://galaxy.ansible.com/api/) 2025-09-09 21:02:47.091123 | centos-9-stream | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/ 2025-09-09 21:02:47.134359 | ubuntu-jammy | Found API version 'v3, pulp-v3, v1' with Galaxy server default (https://galaxy.ansible.com/api/) 2025-09-09 21:02:47.134758 | ubuntu-jammy | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/ 2025-09-09 21:02:47.616823 | ubuntu-noble | Found API version 'v3, pulp-v3, v1' with Galaxy server default (https://galaxy.ansible.com/api/) 2025-09-09 21:02:47.616942 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/ 2025-09-09 21:02:47.600800 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/?limit=100 2025-09-09 21:02:47.661838 | centos-9-stream | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/?limit=100 2025-09-09 21:02:47.873665 | ubuntu-jammy | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/?limit=100 2025-09-09 21:02:48.142687 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/?limit=100 2025-09-09 21:02:48.172735 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/0.20250824.0/ 2025-09-09 21:02:48.396398 | centos-9-stream | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/0.20250824.0/ 2025-09-09 21:02:48.511148 | ubuntu-jammy | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/0.20250824.0/ 2025-09-09 21:02:48.770760 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/0.20250824.0/ 2025-09-09 21:02:48.762966 | debian-bookworm | Server https://galaxy.ansible.com/api/ has not signed osism.commons:0.20250824.0 2025-09-09 21:02:48.763516 | debian-bookworm | Fetching a collection tarball for 'osism.commons:0.20250824.0' from Ansible Galaxy 2025-09-09 21:02:48.998518 | ubuntu-jammy | Server https://galaxy.ansible.com/api/ has not signed osism.commons:0.20250824.0 2025-09-09 21:02:48.998861 | ubuntu-jammy | Fetching a collection tarball for 'osism.commons:0.20250824.0' from Ansible Galaxy 2025-09-09 21:02:49.427260 | ubuntu-noble | Server https://galaxy.ansible.com/api/ has not signed osism.commons:0.20250824.0 2025-09-09 21:02:49.427325 | ubuntu-noble | Fetching a collection tarball for 'osism.commons:0.20250824.0' from Ansible Galaxy 2025-09-09 21:02:49.057450 | centos-9-stream | Server https://galaxy.ansible.com/api/ has not signed osism.commons:0.20250824.0 2025-09-09 21:02:49.057891 | centos-9-stream | Fetching a collection tarball for 'osism.commons:0.20250824.0' from Ansible Galaxy 2025-09-09 21:02:50.279983 | debian-bookworm | Validating downloaded file hash 951c48bcb57a59d1e3b533f9f0c7b1abb25a22f54ef5e8fe013e5aa481f42918 with expected hash 951c48bcb57a59d1e3b533f9f0c7b1abb25a22f54ef5e8fe013e5aa481f42918 2025-09-09 21:02:50.280574 | debian-bookworm | Collection 'osism.commons:0.20250824.0' obtained from server default https://galaxy.ansible.com/api/ 2025-09-09 21:02:50.436730 | debian-bookworm | Starting galaxy collection install process 2025-09-09 21:02:50.437209 | debian-bookworm | Process install dependency map 2025-09-09 21:02:50.437663 | debian-bookworm | Starting collection install process 2025-09-09 21:02:50.438042 | debian-bookworm | 'ansible.posix:1.6.2' is already installed, skipping. 2025-09-09 21:02:50.438429 | debian-bookworm | 'community.docker:4.7.0' is already installed, skipping. 2025-09-09 21:02:50.438831 | debian-bookworm | 'community.general:10.7.4' is already installed, skipping. 2025-09-09 21:02:50.439210 | debian-bookworm | 'community.library_inventory_filtering_v1:1.1.1' is already installed, skipping. 2025-09-09 21:02:50.439634 | debian-bookworm | Downloading https://galaxy.ansible.com/api/v3/plugin/ansible/content/published/collections/artifacts/osism-commons-0.20250824.0.tar.gz to /home/zuul/.ansible/tmp/ansible-local-2034k3cwvkdb/tmpa4ct6inm/osism-commons-0.20250824.0-n89ht8cb 2025-09-09 21:02:50.440025 | debian-bookworm | Installing 'osism.commons:0.20250824.0' to '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2025-09-09 21:02:50.440414 | debian-bookworm | osism.commons:0.20250824.0 was installed successfully 2025-09-09 21:02:50.497323 | debian-bookworm | INFO [delegated > dependency] Dependency completed successfully. 2025-09-09 21:02:50.497557 | debian-bookworm | INFO [delegated > dependency] Completed 2025-09-09 21:02:50.453972 | centos-9-stream | Validating downloaded file hash 951c48bcb57a59d1e3b533f9f0c7b1abb25a22f54ef5e8fe013e5aa481f42918 with expected hash 951c48bcb57a59d1e3b533f9f0c7b1abb25a22f54ef5e8fe013e5aa481f42918 2025-09-09 21:02:50.454675 | centos-9-stream | Collection 'osism.commons:0.20250824.0' obtained from server default https://galaxy.ansible.com/api/ 2025-09-09 21:02:50.582881 | ubuntu-jammy | Validating downloaded file hash 951c48bcb57a59d1e3b533f9f0c7b1abb25a22f54ef5e8fe013e5aa481f42918 with expected hash 951c48bcb57a59d1e3b533f9f0c7b1abb25a22f54ef5e8fe013e5aa481f42918 2025-09-09 21:02:50.583007 | ubuntu-jammy | Collection 'osism.commons:0.20250824.0' obtained from server default https://galaxy.ansible.com/api/ 2025-09-09 21:02:50.712904 | ubuntu-noble | Validating downloaded file hash 951c48bcb57a59d1e3b533f9f0c7b1abb25a22f54ef5e8fe013e5aa481f42918 with expected hash 951c48bcb57a59d1e3b533f9f0c7b1abb25a22f54ef5e8fe013e5aa481f42918 2025-09-09 21:02:50.712978 | ubuntu-noble | Collection 'osism.commons:0.20250824.0' obtained from server default https://galaxy.ansible.com/api/ 2025-09-09 21:02:50.891514 | ubuntu-noble | Starting galaxy collection install process 2025-09-09 21:02:50.892102 | ubuntu-noble | Process install dependency map 2025-09-09 21:02:50.892486 | ubuntu-noble | Starting collection install process 2025-09-09 21:02:50.892894 | ubuntu-noble | 'ansible.posix:1.6.2' is already installed, skipping. 2025-09-09 21:02:50.894814 | ubuntu-noble | 'community.docker:4.7.0' is already installed, skipping. 2025-09-09 21:02:50.894848 | ubuntu-noble | 'community.general:10.7.4' is already installed, skipping. 2025-09-09 21:02:50.894858 | ubuntu-noble | 'community.library_inventory_filtering_v1:1.1.1' is already installed, skipping. 2025-09-09 21:02:50.894899 | ubuntu-noble | Downloading https://galaxy.ansible.com/api/v3/plugin/ansible/content/published/collections/artifacts/osism-commons-0.20250824.0.tar.gz to /home/zuul/.ansible/tmp/ansible-local-161104ydmju0/tmp01a6veae/osism-commons-0.20250824.0-5217jg51 2025-09-09 21:02:50.894913 | ubuntu-noble | Installing 'osism.commons:0.20250824.0' to '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2025-09-09 21:02:50.894922 | ubuntu-noble | osism.commons:0.20250824.0 was installed successfully 2025-09-09 21:02:50.973861 | ubuntu-noble | INFO [delegated > dependency] Dependency completed successfully. 2025-09-09 21:02:50.973992 | ubuntu-noble | INFO [delegated > dependency] Completed 2025-09-09 21:02:50.642322 | centos-9-stream | Starting galaxy collection install process 2025-09-09 21:02:50.642700 | centos-9-stream | Process install dependency map 2025-09-09 21:02:50.643046 | centos-9-stream | Starting collection install process 2025-09-09 21:02:50.643354 | centos-9-stream | 'ansible.posix:1.6.2' is already installed, skipping. 2025-09-09 21:02:50.643691 | centos-9-stream | 'community.docker:4.7.0' is already installed, skipping. 2025-09-09 21:02:50.644010 | centos-9-stream | 'community.general:10.7.4' is already installed, skipping. 2025-09-09 21:02:50.644307 | centos-9-stream | 'community.library_inventory_filtering_v1:1.1.1' is already installed, skipping. 2025-09-09 21:02:50.644710 | centos-9-stream | Downloading https://galaxy.ansible.com/api/v3/plugin/ansible/content/published/collections/artifacts/osism-commons-0.20250824.0.tar.gz to /home/zuul/.ansible/tmp/ansible-local-1752_pr146rt/tmpp_bsshz4/osism-commons-0.20250824.0-2v4t54a5 2025-09-09 21:02:50.645081 | centos-9-stream | Installing 'osism.commons:0.20250824.0' to '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2025-09-09 21:02:50.645383 | centos-9-stream | osism.commons:0.20250824.0 was installed successfully 2025-09-09 21:02:50.731172 | centos-9-stream | INFO [delegated > dependency] Dependency completed successfully. 2025-09-09 21:02:50.731276 | centos-9-stream | INFO [delegated > dependency] Completed 2025-09-09 21:02:50.791924 | ubuntu-jammy | Starting galaxy collection install process 2025-09-09 21:02:50.792024 | ubuntu-jammy | Process install dependency map 2025-09-09 21:02:50.792043 | ubuntu-jammy | Starting collection install process 2025-09-09 21:02:50.792147 | ubuntu-jammy | 'ansible.posix:1.6.2' is already installed, skipping. 2025-09-09 21:02:50.792251 | ubuntu-jammy | 'community.docker:4.7.0' is already installed, skipping. 2025-09-09 21:02:50.792360 | ubuntu-jammy | 'community.general:10.7.4' is already installed, skipping. 2025-09-09 21:02:50.792517 | ubuntu-jammy | 'community.library_inventory_filtering_v1:1.1.1' is already installed, skipping. 2025-09-09 21:02:50.792646 | ubuntu-jammy | Downloading https://galaxy.ansible.com/api/v3/plugin/ansible/content/published/collections/artifacts/osism-commons-0.20250824.0.tar.gz to /home/zuul/.ansible/tmp/ansible-local-12469nzrl093/tmp61fcjm1t/osism-commons-0.20250824.0-z369w3kz 2025-09-09 21:02:50.792754 | ubuntu-jammy | Installing 'osism.commons:0.20250824.0' to '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2025-09-09 21:02:50.792857 | ubuntu-jammy | osism.commons:0.20250824.0 was installed successfully 2025-09-09 21:02:50.896300 | ubuntu-jammy | INFO [delegated > dependency] Dependency completed successfully. 2025-09-09 21:02:50.896428 | ubuntu-jammy | INFO [delegated > dependency] Completed 2025-09-09 21:02:51.126901 | debian-bookworm | ok: Runtime: 0:00:06.199201 2025-09-09 21:02:51.139981 | centos-9-stream | ok: Runtime: 0:00:06.456041 2025-09-09 21:02:51.152055 | ubuntu-jammy | ok: Runtime: 0:00:06.591615 2025-09-09 21:02:51.158868 | ubuntu-noble | ok: Runtime: 0:00:06.631772 2025-09-09 21:02:51.165387 | 2025-09-09 21:02:51.165495 | TASK [ansible-molecule : Run molecule create action with scenario delegated] 2025-09-09 21:02:51.757560 | centos-9-stream | skipping: Conditional result was False 2025-09-09 21:02:51.758200 | debian-bookworm | skipping: Conditional result was False 2025-09-09 21:02:51.758408 | ubuntu-jammy | skipping: Conditional result was False 2025-09-09 21:02:51.758589 | ubuntu-noble | skipping: Conditional result was False 2025-09-09 21:02:51.763705 | 2025-09-09 21:02:51.763832 | TASK [ansible-molecule : Run molecule prepare action with scenario delegated] 2025-09-09 21:02:52.850238 | ubuntu-jammy | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-09-09 21:02:53.066846 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-09-09 21:02:53.073316 | ubuntu-noble | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-09-09 21:02:53.073434 | ubuntu-noble | INFO default scenario not found, disabling shared state. 2025-09-09 21:02:53.073661 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: prepare 2025-09-09 21:02:53.073740 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-09-09 21:02:52.827925 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-09-09 21:02:52.834939 | debian-bookworm | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-09-09 21:02:52.835013 | debian-bookworm | INFO default scenario not found, disabling shared state. 2025-09-09 21:02:52.835146 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: prepare 2025-09-09 21:02:52.835197 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-09-09 21:02:52.996617 | centos-9-stream | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-09-09 21:02:53.006412 | centos-9-stream | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-09-09 21:02:53.006629 | centos-9-stream | INFO default scenario not found, disabling shared state. 2025-09-09 21:02:53.007198 | centos-9-stream | INFO [delegated > discovery] scenario test matrix: prepare 2025-09-09 21:02:53.007368 | centos-9-stream | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-09-09 21:02:52.858284 | ubuntu-jammy | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-09-09 21:02:52.858442 | ubuntu-jammy | INFO default scenario not found, disabling shared state. 2025-09-09 21:02:52.858721 | ubuntu-jammy | INFO [delegated > discovery] scenario test matrix: prepare 2025-09-09 21:02:52.858811 | ubuntu-jammy | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-09-09 21:02:53.885203 | debian-bookworm | INFO [delegated > prepare] Starting 2025-09-09 21:02:54.163727 | debian-bookworm | INFO [delegated > prepare] ansible-playbook version: ansible-playbook 2025-09-09 21:02:54.163794 | debian-bookworm | config file = None 2025-09-09 21:02:54.163804 | debian-bookworm | configured module search path = 2025-09-09 21:02:54.163810 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2025-09-09 21:02:54.163817 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2025-09-09 21:02:54.163822 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-playbook 2025-09-09 21:02:54.163827 | debian-bookworm | python version = 3.11.2 (main, Apr 28 2025, 14:11:48) (/home/zuul/venv/bin/python3) 2025-09-09 21:02:54.163831 | debian-bookworm | jinja version = 3.1.6 2025-09-09 21:02:54.163836 | debian-bookworm | libyaml = True 2025-09-09 21:02:54.172158 | debian-bookworm | DEBUG: ANSIBLE ENVIRONMENT: 2025-09-09 21:02:54.172173 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2025-09-09 21:02:54.172179 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2025-09-09 21:02:54.172184 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2025-09-09 21:02:54.172189 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2025-09-09 21:02:54.172194 | debian-bookworm | ANSIBLE_ROLE: auditd 2025-09-09 21:02:54.172198 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2025-09-09 21:02:54.172202 | debian-bookworm | ANSIBLE_VERBOSITY: '1' 2025-09-09 21:02:54.172206 | debian-bookworm | 2025-09-09 21:02:54.176321 | debian-bookworm | DEBUG: MOLECULE ENVIRONMENT: 2025-09-09 21:02:54.176330 | debian-bookworm | MOLECULE_DEBUG: 'True' 2025-09-09 21:02:54.176335 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2025-09-09 21:02:54.176340 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2025-09-09 21:02:54.176352 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2025-09-09 21:02:54.176357 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2025-09-09 21:02:54.176361 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2025-09-09 21:02:54.176365 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2025-09-09 21:02:54.176369 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2025-09-09 21:02:54.176374 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2025-09-09 21:02:54.176378 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2025-09-09 21:02:54.176382 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2025-09-09 21:02:54.176386 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2025-09-09 21:02:54.176391 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2025-09-09 21:02:54.176394 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2025-09-09 21:02:54.176398 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-09 21:02:54.176403 | debian-bookworm | 2025-09-09 21:02:54.178859 | debian-bookworm | DEBUG: SHELL REPLAY: 2025-09-09 21:02:54.178872 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-09 21:02:54.283216 | centos-9-stream | WARNING Another version of 'amazon.aws' 9.5.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 9.5.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.283311 | centos-9-stream | WARNING Another version of 'ansible.netcommon' 7.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 7.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.283480 | centos-9-stream | WARNING Another version of 'ansible.posix' 1.6.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.6.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.283616 | centos-9-stream | WARNING Another version of 'ansible.utils' 5.1.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.1.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.283701 | centos-9-stream | WARNING Another version of 'ansible.windows' 2.8.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.8.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.283795 | centos-9-stream | WARNING Another version of 'arista.eos' 10.1.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 10.1.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.283856 | centos-9-stream | WARNING Another version of 'awx.awx' 24.6.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 24.6.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.283925 | centos-9-stream | WARNING Another version of 'azure.azcollection' 3.8.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.8.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.283990 | centos-9-stream | WARNING Another version of 'check_point.mgmt' 6.5.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.5.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.284053 | centos-9-stream | WARNING Another version of 'chocolatey.chocolatey' 1.5.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.5.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.284114 | centos-9-stream | WARNING Another version of 'cisco.aci' 2.12.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.12.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.284173 | centos-9-stream | WARNING Another version of 'cisco.asa' 6.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.284231 | centos-9-stream | WARNING Another version of 'cisco.dnac' 6.31.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.31.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.284297 | centos-9-stream | WARNING Another version of 'cisco.intersight' 2.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.284358 | centos-9-stream | WARNING Another version of 'cisco.ios' 9.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 9.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.284415 | centos-9-stream | WARNING Another version of 'cisco.iosxr' 10.3.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 10.3.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.284513 | centos-9-stream | WARNING Another version of 'cisco.ise' 2.10.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.10.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.284576 | centos-9-stream | WARNING Another version of 'cisco.meraki' 2.21.4 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.21.4 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.284635 | centos-9-stream | WARNING Another version of 'cisco.mso' 2.11.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.11.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.284687 | centos-9-stream | WARNING Another version of 'cisco.nxos' 9.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 9.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.284764 | centos-9-stream | WARNING Another version of 'cisco.ucs' 1.16.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.16.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.284858 | centos-9-stream | WARNING Another version of 'cloud.common' 4.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.284914 | centos-9-stream | WARNING Another version of 'cloudscale_ch.cloud' 2.5.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.284971 | centos-9-stream | WARNING Another version of 'community.aws' 9.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 9.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.285028 | centos-9-stream | WARNING Another version of 'community.ciscosmb' 1.0.11 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.11 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.285084 | centos-9-stream | WARNING Another version of 'community.crypto' 2.26.5 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.26.5 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.285143 | centos-9-stream | WARNING Another version of 'community.digitalocean' 1.27.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.27.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.285206 | centos-9-stream | WARNING Another version of 'community.dns' 3.3.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.3.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.285267 | centos-9-stream | WARNING Another version of 'community.docker' 4.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.285325 | centos-9-stream | WARNING Another version of 'community.general' 10.7.4 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 10.7.4 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.285381 | centos-9-stream | WARNING Another version of 'community.grafana' 2.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.285436 | centos-9-stream | WARNING Another version of 'community.hashi_vault' 6.2.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.2.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.285543 | centos-9-stream | WARNING Another version of 'community.hrobot' 2.5.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.285600 | centos-9-stream | WARNING Another version of 'community.library_inventory_filtering_v1' 1.1.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.1.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.285658 | centos-9-stream | WARNING Another version of 'community.libvirt' 1.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.285715 | centos-9-stream | WARNING Another version of 'community.mongodb' 1.7.10 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.7.10 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.285830 | centos-9-stream | WARNING Another version of 'community.mysql' 3.15.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.15.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.285886 | centos-9-stream | WARNING Another version of 'community.network' 5.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.285942 | centos-9-stream | WARNING Another version of 'community.okd' 4.0.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.0.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.285998 | centos-9-stream | WARNING Another version of 'community.postgresql' 3.14.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.14.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.286055 | centos-9-stream | WARNING Another version of 'community.proxmox' 1.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.286111 | centos-9-stream | WARNING Another version of 'community.proxysql' 1.6.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.6.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.286166 | centos-9-stream | WARNING Another version of 'community.rabbitmq' 1.6.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.6.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.286220 | centos-9-stream | WARNING Another version of 'community.routeros' 3.10.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.10.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.286274 | centos-9-stream | WARNING Another version of 'community.sap_libs' 1.4.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.4.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.286323 | centos-9-stream | WARNING Another version of 'community.sops' 2.2.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.286370 | centos-9-stream | WARNING Another version of 'community.vmware' 5.8.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.8.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.286418 | centos-9-stream | WARNING Another version of 'community.windows' 2.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.286506 | centos-9-stream | WARNING Another version of 'community.zabbix' 3.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.286554 | centos-9-stream | WARNING Another version of 'containers.podman' 1.17.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.17.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.286604 | centos-9-stream | WARNING Another version of 'cyberark.conjur' 1.3.7 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.3.7 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.286657 | centos-9-stream | WARNING Another version of 'cyberark.pas' 1.0.35 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.35 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.286709 | centos-9-stream | WARNING Another version of 'dellemc.enterprise_sonic' 2.5.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.286906 | centos-9-stream | WARNING Another version of 'dellemc.openmanage' 9.12.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 9.12.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.286996 | centos-9-stream | WARNING Another version of 'dellemc.powerflex' 2.6.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.6.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.287026 | centos-9-stream | WARNING Another version of 'dellemc.unity' 2.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.287043 | centos-9-stream | WARNING Another version of 'f5networks.f5_modules' 1.38.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.38.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.287080 | centos-9-stream | WARNING Another version of 'fortinet.fortimanager' 2.10.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.10.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.287095 | centos-9-stream | WARNING Another version of 'fortinet.fortios' 2.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.287113 | centos-9-stream | WARNING Another version of 'google.cloud' 1.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.287126 | centos-9-stream | WARNING Another version of 'grafana.grafana' 5.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.287143 | centos-9-stream | WARNING Another version of 'hetzner.hcloud' 4.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.287193 | centos-9-stream | WARNING Another version of 'hitachivantara.vspone_block' 3.5.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.5.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.287248 | centos-9-stream | WARNING Another version of 'ibm.qradar' 4.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.287269 | centos-9-stream | WARNING Another version of 'ibm.spectrum_virtualize' 2.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.287325 | centos-9-stream | WARNING Another version of 'ibm.storage_virtualize' 2.7.4 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.7.4 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.287375 | centos-9-stream | WARNING Another version of 'ieisystem.inmanage' 3.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.287426 | centos-9-stream | WARNING Another version of 'infinidat.infinibox' 1.6.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.6.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.287498 | centos-9-stream | WARNING Another version of 'infoblox.nios_modules' 1.8.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.8.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.287548 | centos-9-stream | WARNING Another version of 'inspur.ispim' 2.2.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.287598 | centos-9-stream | WARNING Another version of 'junipernetworks.junos' 9.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 9.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.287647 | centos-9-stream | WARNING Another version of 'kaytus.ksmanage' 2.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.287697 | centos-9-stream | WARNING Another version of 'kubernetes.core' 5.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.287777 | centos-9-stream | WARNING Another version of 'kubevirt.core' 2.2.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.287816 | centos-9-stream | WARNING Another version of 'lowlydba.sqlserver' 2.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.287866 | centos-9-stream | WARNING Another version of 'microsoft.ad' 1.9.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.9.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.287914 | centos-9-stream | WARNING Another version of 'microsoft.iis' 1.0.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.287965 | centos-9-stream | WARNING Another version of 'netapp.cloudmanager' 21.24.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 21.24.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.288015 | centos-9-stream | WARNING Another version of 'netapp.ontap' 22.14.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 22.14.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.288064 | centos-9-stream | WARNING Another version of 'netapp.storagegrid' 21.14.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 21.14.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.288115 | centos-9-stream | WARNING Another version of 'netapp_eseries.santricity' 1.4.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.4.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.288164 | centos-9-stream | WARNING Another version of 'netbox.netbox' 3.21.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.21.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.288218 | centos-9-stream | WARNING Another version of 'ngine_io.cloudstack' 2.5.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.288261 | centos-9-stream | WARNING Another version of 'openstack.cloud' 2.4.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.288310 | centos-9-stream | WARNING Another version of 'ovirt.ovirt' 3.2.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.2.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.288359 | centos-9-stream | WARNING Another version of 'purestorage.flasharray' 1.36.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.36.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.288410 | centos-9-stream | WARNING Another version of 'purestorage.flashblade' 1.21.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.21.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.288492 | centos-9-stream | WARNING Another version of 'ravendb.ravendb' 1.0.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.288539 | centos-9-stream | WARNING Another version of 'sensu.sensu_go' 1.14.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.14.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.288592 | centos-9-stream | WARNING Another version of 'splunk.es' 4.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.288644 | centos-9-stream | WARNING Another version of 'telekom_mms.icinga_director' 2.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.288693 | centos-9-stream | WARNING Another version of 'theforeman.foreman' 4.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.288759 | centos-9-stream | WARNING Another version of 'vmware.vmware' 1.11.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.11.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.288843 | centos-9-stream | WARNING Another version of 'vmware.vmware_rest' 4.9.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.9.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.288888 | centos-9-stream | WARNING Another version of 'vultr.cloud' 1.13.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.13.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.288937 | centos-9-stream | WARNING Another version of 'vyos.vyos' 5.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.288986 | centos-9-stream | WARNING Another version of 'wti.remote' 1.0.10 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.10 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:02:54.304528 | centos-9-stream | INFO [delegated > prepare] Starting 2025-09-09 21:02:53.998645 | ubuntu-jammy | INFO [delegated > prepare] Starting 2025-09-09 21:02:54.303327 | ubuntu-jammy | INFO [delegated > prepare] ansible-playbook version: ansible-playbook 2025-09-09 21:02:54.303425 | ubuntu-jammy | config file = None 2025-09-09 21:02:54.303433 | ubuntu-jammy | configured module search path = 2025-09-09 21:02:54.303439 | ubuntu-jammy | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2025-09-09 21:02:54.303463 | ubuntu-jammy | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2025-09-09 21:02:54.303468 | ubuntu-jammy | executable location = /home/zuul/venv/bin/ansible-playbook 2025-09-09 21:02:54.303473 | ubuntu-jammy | python version = 3.11.0rc1 (main, Aug 12 2022, 10:02:14) (/home/zuul/venv/bin/python3.11) 2025-09-09 21:02:54.303478 | ubuntu-jammy | jinja version = 3.1.6 2025-09-09 21:02:54.303483 | ubuntu-jammy | libyaml = True 2025-09-09 21:02:54.310540 | ubuntu-jammy | DEBUG: ANSIBLE ENVIRONMENT: 2025-09-09 21:02:54.310558 | ubuntu-jammy | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2025-09-09 21:02:54.310564 | ubuntu-jammy | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2025-09-09 21:02:54.310569 | ubuntu-jammy | ANSIBLE_LIBRARY: ../../plugins 2025-09-09 21:02:54.310574 | ubuntu-jammy | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2025-09-09 21:02:54.310579 | ubuntu-jammy | ANSIBLE_ROLE: auditd 2025-09-09 21:02:54.310583 | ubuntu-jammy | ANSIBLE_ROLES_PATH: ../../roles 2025-09-09 21:02:54.310588 | ubuntu-jammy | ANSIBLE_VERBOSITY: '1' 2025-09-09 21:02:54.310593 | ubuntu-jammy | 2025-09-09 21:02:54.315307 | ubuntu-jammy | DEBUG: MOLECULE ENVIRONMENT: 2025-09-09 21:02:54.315316 | ubuntu-jammy | MOLECULE_DEBUG: 'True' 2025-09-09 21:02:54.315321 | ubuntu-jammy | MOLECULE_DEPENDENCY_NAME: galaxy 2025-09-09 21:02:54.315326 | ubuntu-jammy | MOLECULE_DRIVER_NAME: default 2025-09-09 21:02:54.315332 | ubuntu-jammy | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2025-09-09 21:02:54.315337 | ubuntu-jammy | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2025-09-09 21:02:54.315342 | ubuntu-jammy | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2025-09-09 21:02:54.315347 | ubuntu-jammy | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2025-09-09 21:02:54.315353 | ubuntu-jammy | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2025-09-09 21:02:54.315359 | ubuntu-jammy | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2025-09-09 21:02:54.315363 | ubuntu-jammy | MOLECULE_PROVISIONER_NAME: ansible 2025-09-09 21:02:54.315368 | ubuntu-jammy | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2025-09-09 21:02:54.315373 | ubuntu-jammy | MOLECULE_SCENARIO_NAME: delegated 2025-09-09 21:02:54.315377 | ubuntu-jammy | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2025-09-09 21:02:54.315382 | ubuntu-jammy | MOLECULE_VERIFIER_NAME: testinfra 2025-09-09 21:02:54.315386 | ubuntu-jammy | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-09 21:02:54.315391 | ubuntu-jammy | 2025-09-09 21:02:54.318219 | ubuntu-jammy | DEBUG: SHELL REPLAY: 2025-09-09 21:02:54.318233 | ubuntu-jammy | ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-09 21:02:54.393089 | ubuntu-noble | INFO [delegated > prepare] Starting 2025-09-09 21:02:54.765106 | ubuntu-noble | INFO [delegated > prepare] ansible-playbook version: ansible-playbook 2025-09-09 21:02:54.765179 | ubuntu-noble | config file = None 2025-09-09 21:02:54.765192 | ubuntu-noble | configured module search path = 2025-09-09 21:02:54.765202 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2025-09-09 21:02:54.765210 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2025-09-09 21:02:54.765220 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-playbook 2025-09-09 21:02:54.765229 | ubuntu-noble | python version = 3.12.3 (main, Aug 14 2025, 17:47:21) (/home/zuul/venv/bin/python3) 2025-09-09 21:02:54.765237 | ubuntu-noble | jinja version = 3.1.6 2025-09-09 21:02:54.765244 | ubuntu-noble | libyaml = True 2025-09-09 21:02:54.771003 | ubuntu-noble | DEBUG: ANSIBLE ENVIRONMENT: 2025-09-09 21:02:54.771058 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2025-09-09 21:02:54.771066 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2025-09-09 21:02:54.771071 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2025-09-09 21:02:54.771075 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2025-09-09 21:02:54.771080 | ubuntu-noble | ANSIBLE_ROLE: auditd 2025-09-09 21:02:54.771084 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2025-09-09 21:02:54.771088 | ubuntu-noble | ANSIBLE_VERBOSITY: '1' 2025-09-09 21:02:54.771093 | ubuntu-noble | 2025-09-09 21:02:54.775249 | ubuntu-noble | DEBUG: MOLECULE ENVIRONMENT: 2025-09-09 21:02:54.775284 | ubuntu-noble | MOLECULE_DEBUG: 'True' 2025-09-09 21:02:54.775291 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2025-09-09 21:02:54.775296 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2025-09-09 21:02:54.775301 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2025-09-09 21:02:54.775306 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2025-09-09 21:02:54.775311 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2025-09-09 21:02:54.775316 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2025-09-09 21:02:54.775320 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2025-09-09 21:02:54.775324 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2025-09-09 21:02:54.775329 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2025-09-09 21:02:54.775333 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2025-09-09 21:02:54.775337 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2025-09-09 21:02:54.775341 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2025-09-09 21:02:54.775345 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2025-09-09 21:02:54.775349 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-09 21:02:54.775353 | ubuntu-noble | 2025-09-09 21:02:54.779530 | ubuntu-noble | DEBUG: SHELL REPLAY: 2025-09-09 21:02:54.779590 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-09 21:02:54.425044 | debian-bookworm | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2025-09-09 21:02:54.670714 | debian-bookworm | 2025-09-09 21:02:54.671140 | debian-bookworm | PLAY [Prepare] ***************************************************************** 2025-09-09 21:02:54.671453 | debian-bookworm | 2025-09-09 21:02:54.671793 | debian-bookworm | TASK [Gathering Facts] ********************************************************* 2025-09-09 21:02:54.666528 | centos-9-stream | INFO [delegated > prepare] ansible-playbook version: ansible-playbook 2025-09-09 21:02:54.666599 | centos-9-stream | config file = None 2025-09-09 21:02:54.666608 | centos-9-stream | configured module search path = 2025-09-09 21:02:54.666614 | centos-9-stream | ansible python module location = /home/zuul/venv/lib64/python3.11/site-packages/ansible 2025-09-09 21:02:54.666621 | centos-9-stream | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2025-09-09 21:02:54.666627 | centos-9-stream | executable location = /home/zuul/venv/bin/ansible-playbook 2025-09-09 21:02:54.666632 | centos-9-stream | python version = 3.11.13 (main, Aug 21 2025, 00:00:00) (/home/zuul/venv/bin/python3.11) 2025-09-09 21:02:54.666638 | centos-9-stream | jinja version = 3.1.6 2025-09-09 21:02:54.666643 | centos-9-stream | libyaml = True 2025-09-09 21:02:54.670722 | centos-9-stream | DEBUG: ANSIBLE ENVIRONMENT: 2025-09-09 21:02:54.670736 | centos-9-stream | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2025-09-09 21:02:54.670765 | centos-9-stream | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2025-09-09 21:02:54.670771 | centos-9-stream | ANSIBLE_LIBRARY: ../../plugins 2025-09-09 21:02:54.670776 | centos-9-stream | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2025-09-09 21:02:54.670781 | centos-9-stream | ANSIBLE_ROLE: auditd 2025-09-09 21:02:54.670786 | centos-9-stream | ANSIBLE_ROLES_PATH: ../../roles 2025-09-09 21:02:54.670790 | centos-9-stream | ANSIBLE_VERBOSITY: '1' 2025-09-09 21:02:54.670795 | centos-9-stream | 2025-09-09 21:02:54.673390 | centos-9-stream | DEBUG: MOLECULE ENVIRONMENT: 2025-09-09 21:02:54.673399 | centos-9-stream | MOLECULE_DEBUG: 'True' 2025-09-09 21:02:54.673404 | centos-9-stream | MOLECULE_DEPENDENCY_NAME: galaxy 2025-09-09 21:02:54.673409 | centos-9-stream | MOLECULE_DRIVER_NAME: default 2025-09-09 21:02:54.673415 | centos-9-stream | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2025-09-09 21:02:54.673420 | centos-9-stream | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2025-09-09 21:02:54.673431 | centos-9-stream | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2025-09-09 21:02:54.673435 | centos-9-stream | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2025-09-09 21:02:54.673440 | centos-9-stream | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2025-09-09 21:02:54.673445 | centos-9-stream | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2025-09-09 21:02:54.673460 | centos-9-stream | MOLECULE_PROVISIONER_NAME: ansible 2025-09-09 21:02:54.673473 | centos-9-stream | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2025-09-09 21:02:54.673478 | centos-9-stream | MOLECULE_SCENARIO_NAME: delegated 2025-09-09 21:02:54.673482 | centos-9-stream | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2025-09-09 21:02:54.673487 | centos-9-stream | MOLECULE_VERIFIER_NAME: testinfra 2025-09-09 21:02:54.673492 | centos-9-stream | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-09 21:02:54.673497 | centos-9-stream | 2025-09-09 21:02:54.675340 | centos-9-stream | DEBUG: SHELL REPLAY: 2025-09-09 21:02:54.675381 | centos-9-stream | ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-09 21:02:54.581178 | ubuntu-jammy | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2025-09-09 21:02:54.801572 | ubuntu-jammy | 2025-09-09 21:02:54.801992 | ubuntu-jammy | PLAY [Prepare] ***************************************************************** 2025-09-09 21:02:54.802332 | ubuntu-jammy | 2025-09-09 21:02:54.802789 | ubuntu-jammy | TASK [Gathering Facts] ********************************************************* 2025-09-09 21:02:55.089182 | ubuntu-noble | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2025-09-09 21:02:54.975726 | centos-9-stream | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2025-09-09 21:02:55.226994 | centos-9-stream | 2025-09-09 21:02:55.227429 | centos-9-stream | PLAY [Prepare] ***************************************************************** 2025-09-09 21:02:55.227903 | centos-9-stream | 2025-09-09 21:02:55.228348 | centos-9-stream | TASK [Gathering Facts] ********************************************************* 2025-09-09 21:02:55.366693 | ubuntu-noble | 2025-09-09 21:02:55.367386 | ubuntu-noble | PLAY [Prepare] ***************************************************************** 2025-09-09 21:02:55.368649 | ubuntu-noble | 2025-09-09 21:02:55.368815 | ubuntu-noble | TASK [Gathering Facts] ********************************************************* 2025-09-09 21:02:55.723851 | debian-bookworm | ok: [molecule-auditd] 2025-09-09 21:02:55.723934 | debian-bookworm | 2025-09-09 21:02:55.724070 | debian-bookworm | TASK [Install packages in venv] ************************************************ 2025-09-09 21:02:56.339695 | centos-9-stream | ok: [molecule-auditd] 2025-09-09 21:02:56.339835 | centos-9-stream | 2025-09-09 21:02:56.339905 | centos-9-stream | TASK [Install packages in venv] ************************************************ 2025-09-09 21:02:55.952745 | ubuntu-jammy | ok: [molecule-auditd] 2025-09-09 21:02:55.952815 | ubuntu-jammy | 2025-09-09 21:02:55.952930 | ubuntu-jammy | TASK [Install packages in venv] ************************************************ 2025-09-09 21:02:56.600313 | ubuntu-noble | ok: [molecule-auditd] 2025-09-09 21:02:56.600379 | ubuntu-noble | 2025-09-09 21:02:56.601831 | ubuntu-noble | TASK [Install packages in venv] ************************************************ 2025-09-09 21:03:00.173957 | debian-bookworm | changed: [molecule-auditd] => (item=docker) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "docker"], "item": "docker", "name": ["docker"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting docker\n Downloading docker-7.1.0-py3-none-any.whl (147 kB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 4.8 MB/s eta 0:00:00\nRequirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.32.5)\nRequirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.5.0)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.3)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.10)\nRequirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (2025.8.3)\nInstalling collected packages: docker\nSuccessfully installed docker-7.1.0\n", "stdout_lines": ["Collecting docker", " Downloading docker-7.1.0-py3-none-any.whl (147 kB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 4.8 MB/s eta 0:00:00", "Requirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.32.5)", "Requirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.5.0)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.3)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.10)", "Requirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (2025.8.3)", "Installing collected packages: docker", "Successfully installed docker-7.1.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2025-09-09 21:03:00.174159 | debian-bookworm | changed: [molecule-auditd] => (item=netaddr) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "netaddr"], "item": "netaddr", "name": ["netaddr"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting netaddr\n Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 16.1 MB/s eta 0:00:00\nInstalling collected packages: netaddr\nSuccessfully installed netaddr-1.3.0\n", "stdout_lines": ["Collecting netaddr", " Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 16.1 MB/s eta 0:00:00", "Installing collected packages: netaddr", "Successfully installed netaddr-1.3.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2025-09-09 21:03:00.174328 | debian-bookworm | ok: [molecule-auditd] => (item=requests) => {"ansible_loop_var": "item", "changed": false, "cmd": ["/home/zuul/venv/bin/pip3", "install", "requests"], "item": "requests", "name": ["requests"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Requirement already satisfied: requests in /home/zuul/venv/lib/python3.11/site-packages (2.32.5)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.4.3)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.10)\nRequirement already satisfied: urllib3<3,>=1.21.1 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2.5.0)\nRequirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2025.8.3)\n", "stdout_lines": ["Requirement already satisfied: requests in /home/zuul/venv/lib/python3.11/site-packages (2.32.5)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.4.3)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.10)", "Requirement already satisfied: urllib3<3,>=1.21.1 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2.5.0)", "Requirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2025.8.3)"], "version": null, "virtualenv": "/home/zuul/venv"} 2025-09-09 21:03:00.174448 | debian-bookworm | 2025-09-09 21:03:00.174566 | debian-bookworm | TASK [Include required prepare tasks] ****************************************** 2025-09-09 21:03:00.197330 | debian-bookworm | included: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/prepare/auditd.yml for molecule-auditd 2025-09-09 21:03:00.197470 | debian-bookworm | 2025-09-09 21:03:00.197488 | debian-bookworm | PLAY RECAP ********************************************************************* 2025-09-09 21:03:00.197592 | debian-bookworm | molecule-auditd : ok=3 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2025-09-09 21:03:00.197686 | debian-bookworm | 2025-09-09 21:03:00.317087 | debian-bookworm | INFO [delegated > prepare] Completed 2025-09-09 21:03:00.915911 | centos-9-stream | changed: [molecule-auditd] => (item=docker) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "docker"], "item": "docker", "name": ["docker"], "requirements": null, "state": "present", "stderr": "\n[notice] A new release of pip available: 22.3.1 -> 25.2\n[notice] To update, run: pip install --upgrade pip\n", "stderr_lines": ["", "[notice] A new release of pip available: 22.3.1 -> 25.2", "[notice] To update, run: pip install --upgrade pip"], "stdout": "Collecting docker\n Downloading docker-7.1.0-py3-none-any.whl (147 kB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 9.0 MB/s eta 0:00:00\nRequirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib64/python3.11/site-packages (from docker) (2.32.5)\nRequirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib64/python3.11/site-packages (from docker) (2.5.0)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib64/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.3)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib64/python3.11/site-packages (from requests>=2.26.0->docker) (3.10)\nRequirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib64/python3.11/site-packages (from requests>=2.26.0->docker) (2025.8.3)\nInstalling collected packages: docker\nSuccessfully installed docker-7.1.0\n", "stdout_lines": ["Collecting docker", " Downloading docker-7.1.0-py3-none-any.whl (147 kB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 9.0 MB/s eta 0:00:00", "Requirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib64/python3.11/site-packages (from docker) (2.32.5)", "Requirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib64/python3.11/site-packages (from docker) (2.5.0)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib64/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.3)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib64/python3.11/site-packages (from requests>=2.26.0->docker) (3.10)", "Requirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib64/python3.11/site-packages (from requests>=2.26.0->docker) (2025.8.3)", "Installing collected packages: docker", "Successfully installed docker-7.1.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2025-09-09 21:03:00.916201 | centos-9-stream | changed: [molecule-auditd] => (item=netaddr) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "netaddr"], "item": "netaddr", "name": ["netaddr"], "requirements": null, "state": "present", "stderr": "\n[notice] A new release of pip available: 22.3.1 -> 25.2\n[notice] To update, run: pip install --upgrade pip\n", "stderr_lines": ["", "[notice] A new release of pip available: 22.3.1 -> 25.2", "[notice] To update, run: pip install --upgrade pip"], "stdout": "Collecting netaddr\n Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 27.7 MB/s eta 0:00:00\nInstalling collected packages: netaddr\nSuccessfully installed netaddr-1.3.0\n", "stdout_lines": ["Collecting netaddr", " Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 27.7 MB/s eta 0:00:00", "Installing collected packages: netaddr", "Successfully installed netaddr-1.3.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2025-09-09 21:03:00.916377 | centos-9-stream | ok: [molecule-auditd] => (item=requests) => {"ansible_loop_var": "item", "changed": false, "cmd": ["/home/zuul/venv/bin/pip3", "install", "requests"], "item": "requests", "name": ["requests"], "requirements": null, "state": "present", "stderr": "\n[notice] A new release of pip available: 22.3.1 -> 25.2\n[notice] To update, run: pip install --upgrade pip\n", "stderr_lines": ["", "[notice] A new release of pip available: 22.3.1 -> 25.2", "[notice] To update, run: pip install --upgrade pip"], "stdout": "Requirement already satisfied: requests in /home/zuul/venv/lib64/python3.11/site-packages (2.32.5)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib64/python3.11/site-packages (from requests) (3.4.3)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib64/python3.11/site-packages (from requests) (3.10)\nRequirement already satisfied: urllib3<3,>=1.21.1 in /home/zuul/venv/lib64/python3.11/site-packages (from requests) (2.5.0)\nRequirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib64/python3.11/site-packages (from requests) (2025.8.3)\n", "stdout_lines": ["Requirement already satisfied: requests in /home/zuul/venv/lib64/python3.11/site-packages (2.32.5)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib64/python3.11/site-packages (from requests) (3.4.3)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib64/python3.11/site-packages (from requests) (3.10)", "Requirement already satisfied: urllib3<3,>=1.21.1 in /home/zuul/venv/lib64/python3.11/site-packages (from requests) (2.5.0)", "Requirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib64/python3.11/site-packages (from requests) (2025.8.3)"], "version": null, "virtualenv": "/home/zuul/venv"} 2025-09-09 21:03:00.916505 | centos-9-stream | 2025-09-09 21:03:00.916619 | centos-9-stream | TASK [Include required prepare tasks] ****************************************** 2025-09-09 21:03:00.934877 | centos-9-stream | included: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/prepare/auditd.yml for molecule-auditd 2025-09-09 21:03:00.935055 | centos-9-stream | 2025-09-09 21:03:00.935079 | centos-9-stream | PLAY RECAP ********************************************************************* 2025-09-09 21:03:00.935100 | centos-9-stream | molecule-auditd : ok=3 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2025-09-09 21:03:00.935214 | centos-9-stream | 2025-09-09 21:03:01.031635 | centos-9-stream | INFO [delegated > prepare] Completed 2025-09-09 21:03:01.136868 | ubuntu-jammy | changed: [molecule-auditd] => (item=docker) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "docker"], "item": "docker", "name": ["docker"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting docker\n Downloading docker-7.1.0-py3-none-any.whl (147 kB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 KB 3.4 MB/s eta 0:00:00\nRequirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.5.0)\nRequirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.32.5)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.10)\nRequirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (2025.8.3)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.3)\nInstalling collected packages: docker\nSuccessfully installed docker-7.1.0\n", "stdout_lines": ["Collecting docker", " Downloading docker-7.1.0-py3-none-any.whl (147 kB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 KB 3.4 MB/s eta 0:00:00", "Requirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.5.0)", "Requirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.32.5)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.10)", "Requirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (2025.8.3)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.3)", "Installing collected packages: docker", "Successfully installed docker-7.1.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2025-09-09 21:03:01.137694 | ubuntu-jammy | changed: [molecule-auditd] => (item=netaddr) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "netaddr"], "item": "netaddr", "name": ["netaddr"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting netaddr\n Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 11.8 MB/s eta 0:00:00\nInstalling collected packages: netaddr\nSuccessfully installed netaddr-1.3.0\n", "stdout_lines": ["Collecting netaddr", " Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 11.8 MB/s eta 0:00:00", "Installing collected packages: netaddr", "Successfully installed netaddr-1.3.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2025-09-09 21:03:01.138093 | ubuntu-jammy | ok: [molecule-auditd] => (item=requests) => {"ansible_loop_var": "item", "changed": false, "cmd": ["/home/zuul/venv/bin/pip3", "install", "requests"], "item": "requests", "name": ["requests"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Requirement already satisfied: requests in /home/zuul/venv/lib/python3.11/site-packages (2.32.5)\nRequirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2025.8.3)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.10)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.4.3)\nRequirement already satisfied: urllib3<3,>=1.21.1 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2.5.0)\n", "stdout_lines": ["Requirement already satisfied: requests in /home/zuul/venv/lib/python3.11/site-packages (2.32.5)", "Requirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2025.8.3)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.10)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.4.3)", "Requirement already satisfied: urllib3<3,>=1.21.1 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2.5.0)"], "version": null, "virtualenv": "/home/zuul/venv"} 2025-09-09 21:03:01.138367 | ubuntu-jammy | 2025-09-09 21:03:01.138719 | ubuntu-jammy | TASK [Include required prepare tasks] ****************************************** 2025-09-09 21:03:01.156322 | ubuntu-jammy | included: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/prepare/auditd.yml for molecule-auditd 2025-09-09 21:03:01.156619 | ubuntu-jammy | 2025-09-09 21:03:01.156901 | ubuntu-jammy | PLAY RECAP ********************************************************************* 2025-09-09 21:03:01.157217 | ubuntu-jammy | molecule-auditd : ok=3 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2025-09-09 21:03:01.157499 | ubuntu-jammy | 2025-09-09 21:03:01.245956 | ubuntu-jammy | INFO [delegated > prepare] Completed 2025-09-09 21:03:01.367495 | debian-bookworm | ok: Runtime: 0:00:08.283039 2025-09-09 21:03:01.377861 | centos-9-stream | ok: Runtime: 0:00:08.954309 2025-09-09 21:03:01.389571 | ubuntu-jammy | ok: Runtime: 0:00:09.213379 2025-09-09 21:03:01.577630 | ubuntu-noble | changed: [molecule-auditd] => (item=docker) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "docker"], "item": "docker", "name": ["docker"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting docker\n Downloading docker-7.1.0-py3-none-any.whl.metadata (3.8 kB)\nRequirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.32.5)\nRequirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.5.0)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.4.3)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.10)\nRequirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (2025.8.3)\nDownloading docker-7.1.0-py3-none-any.whl (147 kB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 5.7 MB/s eta 0:00:00\nInstalling collected packages: docker\nSuccessfully installed docker-7.1.0\n", "stdout_lines": ["Collecting docker", " Downloading docker-7.1.0-py3-none-any.whl.metadata (3.8 kB)", "Requirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.32.5)", "Requirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.5.0)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.4.3)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.10)", "Requirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (2025.8.3)", "Downloading docker-7.1.0-py3-none-any.whl (147 kB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 5.7 MB/s eta 0:00:00", "Installing collected packages: docker", "Successfully installed docker-7.1.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2025-09-09 21:03:01.577684 | ubuntu-noble | changed: [molecule-auditd] => (item=netaddr) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "netaddr"], "item": "netaddr", "name": ["netaddr"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting netaddr\n Downloading netaddr-1.3.0-py3-none-any.whl.metadata (5.0 kB)\nDownloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 13.3 MB/s eta 0:00:00\nInstalling collected packages: netaddr\nSuccessfully installed netaddr-1.3.0\n", "stdout_lines": ["Collecting netaddr", " Downloading netaddr-1.3.0-py3-none-any.whl.metadata (5.0 kB)", "Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 13.3 MB/s eta 0:00:00", "Installing collected packages: netaddr", "Successfully installed netaddr-1.3.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2025-09-09 21:03:01.577719 | ubuntu-noble | ok: [molecule-auditd] => (item=requests) => {"ansible_loop_var": "item", "changed": false, "cmd": ["/home/zuul/venv/bin/pip3", "install", "requests"], "item": "requests", "name": ["requests"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Requirement already satisfied: requests in /home/zuul/venv/lib/python3.12/site-packages (2.32.5)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.4.3)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.10)\nRequirement already satisfied: urllib3<3,>=1.21.1 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2.5.0)\nRequirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2025.8.3)\n", "stdout_lines": ["Requirement already satisfied: requests in /home/zuul/venv/lib/python3.12/site-packages (2.32.5)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.4.3)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.10)", "Requirement already satisfied: urllib3<3,>=1.21.1 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2.5.0)", "Requirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2025.8.3)"], "version": null, "virtualenv": "/home/zuul/venv"} 2025-09-09 21:03:01.577725 | ubuntu-noble | 2025-09-09 21:03:01.577731 | ubuntu-noble | TASK [Include required prepare tasks] ****************************************** 2025-09-09 21:03:01.615066 | ubuntu-noble | included: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/prepare/auditd.yml for molecule-auditd 2025-09-09 21:03:01.615117 | ubuntu-noble | 2025-09-09 21:03:01.615126 | ubuntu-noble | PLAY RECAP ********************************************************************* 2025-09-09 21:03:01.615133 | ubuntu-noble | molecule-auditd : ok=3 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2025-09-09 21:03:01.615138 | ubuntu-noble | 2025-09-09 21:03:01.705636 | ubuntu-noble | INFO [delegated > prepare] Completed 2025-09-09 21:03:01.839597 | ubuntu-noble | ok: Runtime: 0:00:09.611922 2025-09-09 21:03:01.848552 | 2025-09-09 21:03:01.848754 | TASK [ansible-molecule : Reset connection] 2025-09-09 21:03:01.892115 | 2025-09-09 21:03:01.892291 | TASK [ansible-molecule : Reset connection] 2025-09-09 21:03:01.925778 | 2025-09-09 21:03:01.925925 | TASK [ansible-molecule : Reset connection] 2025-09-09 21:03:01.959496 | 2025-09-09 21:03:01.959729 | TASK [ansible-molecule : Reset connection] 2025-09-09 21:03:01.986355 | 2025-09-09 21:03:01.986493 | TASK [ansible-molecule : Run molecule converge action with scenario delegated] 2025-09-09 21:03:03.476568 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-09-09 21:03:03.484904 | debian-bookworm | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-09-09 21:03:03.484990 | debian-bookworm | INFO default scenario not found, disabling shared state. 2025-09-09 21:03:03.485356 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: dependency, create, prepare, converge 2025-09-09 21:03:03.485512 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-09-09 21:03:03.447498 | centos-9-stream | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-09-09 21:03:03.457383 | centos-9-stream | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-09-09 21:03:03.457507 | centos-9-stream | INFO default scenario not found, disabling shared state. 2025-09-09 21:03:03.457613 | centos-9-stream | INFO [delegated > discovery] scenario test matrix: dependency, create, prepare, converge 2025-09-09 21:03:03.457654 | centos-9-stream | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-09-09 21:03:03.319031 | ubuntu-jammy | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-09-09 21:03:03.326510 | ubuntu-jammy | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-09-09 21:03:03.326589 | ubuntu-jammy | INFO default scenario not found, disabling shared state. 2025-09-09 21:03:03.326707 | ubuntu-jammy | INFO [delegated > discovery] scenario test matrix: dependency, create, prepare, converge 2025-09-09 21:03:03.326755 | ubuntu-jammy | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-09-09 21:03:03.569701 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-09-09 21:03:03.577554 | ubuntu-noble | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-09-09 21:03:03.577633 | ubuntu-noble | INFO default scenario not found, disabling shared state. 2025-09-09 21:03:03.577753 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: dependency, create, prepare, converge 2025-09-09 21:03:03.577849 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-09-09 21:03:04.489133 | ubuntu-jammy | INFO [delegated > dependency] Starting 2025-09-09 21:03:04.489450 | ubuntu-jammy | WARNING [delegated > dependency] Skipping, missing the requirements file. 2025-09-09 21:03:04.891589 | ubuntu-noble | INFO [delegated > dependency] Starting 2025-09-09 21:03:04.891928 | ubuntu-noble | WARNING [delegated > dependency] Skipping, missing the requirements file. 2025-09-09 21:03:04.728777 | debian-bookworm | INFO [delegated > dependency] Starting 2025-09-09 21:03:04.728879 | debian-bookworm | WARNING [delegated > dependency] Skipping, missing the requirements file. 2025-09-09 21:03:04.801890 | centos-9-stream | WARNING Another version of 'amazon.aws' 9.5.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 9.5.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802080 | centos-9-stream | WARNING Another version of 'ansible.netcommon' 7.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 7.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802121 | centos-9-stream | WARNING Another version of 'ansible.posix' 1.6.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.6.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802137 | centos-9-stream | WARNING Another version of 'ansible.utils' 5.1.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.1.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802151 | centos-9-stream | WARNING Another version of 'ansible.windows' 2.8.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.8.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802164 | centos-9-stream | WARNING Another version of 'arista.eos' 10.1.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 10.1.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802177 | centos-9-stream | WARNING Another version of 'awx.awx' 24.6.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 24.6.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802191 | centos-9-stream | WARNING Another version of 'azure.azcollection' 3.8.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.8.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802204 | centos-9-stream | WARNING Another version of 'check_point.mgmt' 6.5.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.5.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802218 | centos-9-stream | WARNING Another version of 'chocolatey.chocolatey' 1.5.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.5.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802237 | centos-9-stream | WARNING Another version of 'cisco.aci' 2.12.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.12.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802251 | centos-9-stream | WARNING Another version of 'cisco.asa' 6.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802264 | centos-9-stream | WARNING Another version of 'cisco.dnac' 6.31.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.31.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802306 | centos-9-stream | WARNING Another version of 'cisco.intersight' 2.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802320 | centos-9-stream | WARNING Another version of 'cisco.ios' 9.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 9.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802333 | centos-9-stream | WARNING Another version of 'cisco.iosxr' 10.3.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 10.3.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802352 | centos-9-stream | WARNING Another version of 'cisco.ise' 2.10.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.10.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802365 | centos-9-stream | WARNING Another version of 'cisco.meraki' 2.21.4 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.21.4 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802378 | centos-9-stream | WARNING Another version of 'cisco.mso' 2.11.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.11.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802392 | centos-9-stream | WARNING Another version of 'cisco.nxos' 9.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 9.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802412 | centos-9-stream | WARNING Another version of 'cisco.ucs' 1.16.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.16.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802425 | centos-9-stream | WARNING Another version of 'cloud.common' 4.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802438 | centos-9-stream | WARNING Another version of 'cloudscale_ch.cloud' 2.5.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802507 | centos-9-stream | WARNING Another version of 'community.aws' 9.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 9.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802526 | centos-9-stream | WARNING Another version of 'community.ciscosmb' 1.0.11 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.11 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802539 | centos-9-stream | WARNING Another version of 'community.crypto' 2.26.5 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.26.5 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802555 | centos-9-stream | WARNING Another version of 'community.digitalocean' 1.27.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.27.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802572 | centos-9-stream | WARNING Another version of 'community.dns' 3.3.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.3.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802595 | centos-9-stream | WARNING Another version of 'community.docker' 4.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802609 | centos-9-stream | WARNING Another version of 'community.general' 10.7.4 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 10.7.4 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802630 | centos-9-stream | WARNING Another version of 'community.grafana' 2.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802643 | centos-9-stream | WARNING Another version of 'community.hashi_vault' 6.2.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.2.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802656 | centos-9-stream | WARNING Another version of 'community.hrobot' 2.5.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802670 | centos-9-stream | WARNING Another version of 'community.library_inventory_filtering_v1' 1.1.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.1.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802698 | centos-9-stream | WARNING Another version of 'community.libvirt' 1.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802711 | centos-9-stream | WARNING Another version of 'community.mongodb' 1.7.10 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.7.10 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802725 | centos-9-stream | WARNING Another version of 'community.mysql' 3.15.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.15.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802762 | centos-9-stream | WARNING Another version of 'community.network' 5.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802776 | centos-9-stream | WARNING Another version of 'community.okd' 4.0.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.0.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802790 | centos-9-stream | WARNING Another version of 'community.postgresql' 3.14.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.14.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802803 | centos-9-stream | WARNING Another version of 'community.proxmox' 1.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802823 | centos-9-stream | WARNING Another version of 'community.proxysql' 1.6.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.6.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802844 | centos-9-stream | WARNING Another version of 'community.rabbitmq' 1.6.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.6.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802857 | centos-9-stream | WARNING Another version of 'community.routeros' 3.10.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.10.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802870 | centos-9-stream | WARNING Another version of 'community.sap_libs' 1.4.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.4.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802888 | centos-9-stream | WARNING Another version of 'community.sops' 2.2.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802902 | centos-9-stream | WARNING Another version of 'community.vmware' 5.8.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.8.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802915 | centos-9-stream | WARNING Another version of 'community.windows' 2.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802928 | centos-9-stream | WARNING Another version of 'community.zabbix' 3.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802941 | centos-9-stream | WARNING Another version of 'containers.podman' 1.17.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.17.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802954 | centos-9-stream | WARNING Another version of 'cyberark.conjur' 1.3.7 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.3.7 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802967 | centos-9-stream | WARNING Another version of 'cyberark.pas' 1.0.35 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.35 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.802986 | centos-9-stream | WARNING Another version of 'dellemc.enterprise_sonic' 2.5.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803000 | centos-9-stream | WARNING Another version of 'dellemc.openmanage' 9.12.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 9.12.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803013 | centos-9-stream | WARNING Another version of 'dellemc.powerflex' 2.6.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.6.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803026 | centos-9-stream | WARNING Another version of 'dellemc.unity' 2.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803039 | centos-9-stream | WARNING Another version of 'f5networks.f5_modules' 1.38.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.38.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803060 | centos-9-stream | WARNING Another version of 'fortinet.fortimanager' 2.10.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.10.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803073 | centos-9-stream | WARNING Another version of 'fortinet.fortios' 2.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803086 | centos-9-stream | WARNING Another version of 'google.cloud' 1.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803099 | centos-9-stream | WARNING Another version of 'grafana.grafana' 5.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803117 | centos-9-stream | WARNING Another version of 'hetzner.hcloud' 4.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803131 | centos-9-stream | WARNING Another version of 'hitachivantara.vspone_block' 3.5.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.5.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803144 | centos-9-stream | WARNING Another version of 'ibm.qradar' 4.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803157 | centos-9-stream | WARNING Another version of 'ibm.spectrum_virtualize' 2.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803170 | centos-9-stream | WARNING Another version of 'ibm.storage_virtualize' 2.7.4 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.7.4 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803188 | centos-9-stream | WARNING Another version of 'ieisystem.inmanage' 3.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803202 | centos-9-stream | WARNING Another version of 'infinidat.infinibox' 1.6.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.6.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803215 | centos-9-stream | WARNING Another version of 'infoblox.nios_modules' 1.8.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.8.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803233 | centos-9-stream | WARNING Another version of 'inspur.ispim' 2.2.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803246 | centos-9-stream | WARNING Another version of 'junipernetworks.junos' 9.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 9.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803279 | centos-9-stream | WARNING Another version of 'kaytus.ksmanage' 2.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803292 | centos-9-stream | WARNING Another version of 'kubernetes.core' 5.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803305 | centos-9-stream | WARNING Another version of 'kubevirt.core' 2.2.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803318 | centos-9-stream | WARNING Another version of 'lowlydba.sqlserver' 2.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803337 | centos-9-stream | WARNING Another version of 'microsoft.ad' 1.9.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.9.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803350 | centos-9-stream | WARNING Another version of 'microsoft.iis' 1.0.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803369 | centos-9-stream | WARNING Another version of 'netapp.cloudmanager' 21.24.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 21.24.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803382 | centos-9-stream | WARNING Another version of 'netapp.ontap' 22.14.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 22.14.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803395 | centos-9-stream | WARNING Another version of 'netapp.storagegrid' 21.14.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 21.14.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803408 | centos-9-stream | WARNING Another version of 'netapp_eseries.santricity' 1.4.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.4.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803421 | centos-9-stream | WARNING Another version of 'netbox.netbox' 3.21.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.21.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803434 | centos-9-stream | WARNING Another version of 'ngine_io.cloudstack' 2.5.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803447 | centos-9-stream | WARNING Another version of 'openstack.cloud' 2.4.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803489 | centos-9-stream | WARNING Another version of 'ovirt.ovirt' 3.2.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.2.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803509 | centos-9-stream | WARNING Another version of 'purestorage.flasharray' 1.36.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.36.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803546 | centos-9-stream | WARNING Another version of 'purestorage.flashblade' 1.21.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.21.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803570 | centos-9-stream | WARNING Another version of 'ravendb.ravendb' 1.0.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803584 | centos-9-stream | WARNING Another version of 'sensu.sensu_go' 1.14.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.14.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803597 | centos-9-stream | WARNING Another version of 'splunk.es' 4.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803610 | centos-9-stream | WARNING Another version of 'telekom_mms.icinga_director' 2.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803623 | centos-9-stream | WARNING Another version of 'theforeman.foreman' 4.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803636 | centos-9-stream | WARNING Another version of 'vmware.vmware' 1.11.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.11.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803655 | centos-9-stream | WARNING Another version of 'vmware.vmware_rest' 4.9.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.9.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803668 | centos-9-stream | WARNING Another version of 'vultr.cloud' 1.13.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.13.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803681 | centos-9-stream | WARNING Another version of 'vyos.vyos' 5.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.803694 | centos-9-stream | WARNING Another version of 'wti.remote' 1.0.10 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.10 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:04.814358 | centos-9-stream | INFO [delegated > dependency] Starting 2025-09-09 21:03:04.814678 | centos-9-stream | WARNING [delegated > dependency] Skipping, missing the requirements file. 2025-09-09 21:03:04.835472 | ubuntu-jammy | ansible-galaxy [core 2.18.9] 2025-09-09 21:03:04.835954 | ubuntu-jammy | config file = None 2025-09-09 21:03:04.836391 | ubuntu-jammy | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2025-09-09 21:03:04.836865 | ubuntu-jammy | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2025-09-09 21:03:04.837272 | ubuntu-jammy | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.11/site-packages:/home/zuul/venv/lib/python3.11/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.11/dist-packages 2025-09-09 21:03:04.837670 | ubuntu-jammy | executable location = /home/zuul/venv/bin/ansible-galaxy 2025-09-09 21:03:04.838016 | ubuntu-jammy | python version = 3.11.0rc1 (main, Aug 12 2022, 10:02:14) [GCC 11.2.0] (/home/zuul/venv/bin/python3.11) 2025-09-09 21:03:04.838401 | ubuntu-jammy | jinja version = 3.1.6 2025-09-09 21:03:04.838729 | ubuntu-jammy | libyaml = True 2025-09-09 21:03:04.839030 | ubuntu-jammy | No config file found; using defaults 2025-09-09 21:03:04.839592 | ubuntu-jammy | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2025-09-09 21:03:04.841826 | ubuntu-jammy | Loading collection osism.commons from /home/zuul/.ansible/collections/ansible_collections/osism/commons 2025-09-09 21:03:04.843838 | ubuntu-jammy | Found installed collection osism.commons:0.20250824.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2025-09-09 21:03:04.845218 | ubuntu-jammy | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2025-09-09 21:03:04.845722 | ubuntu-jammy | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2025-09-09 21:03:04.850661 | ubuntu-jammy | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity 2025-09-09 21:03:04.851049 | ubuntu-jammy | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity' 2025-09-09 21:03:04.852928 | ubuntu-jammy | Loading collection cisco.aci from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci 2025-09-09 21:03:04.853953 | ubuntu-jammy | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci' 2025-09-09 21:03:04.854646 | ubuntu-jammy | Loading collection ansible.utils from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils 2025-09-09 21:03:04.855025 | ubuntu-jammy | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils' 2025-09-09 21:03:04.855565 | ubuntu-jammy | Loading collection community.routeros from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros 2025-09-09 21:03:04.855903 | ubuntu-jammy | Found installed collection community.routeros:3.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros' 2025-09-09 21:03:04.856208 | ubuntu-jammy | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac 2025-09-09 21:03:04.856696 | ubuntu-jammy | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac' 2025-09-09 21:03:04.856963 | ubuntu-jammy | Loading collection ansible.posix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix 2025-09-09 21:03:04.857230 | ubuntu-jammy | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix' 2025-09-09 21:03:04.857619 | ubuntu-jammy | Loading collection community.okd from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd 2025-09-09 21:03:04.857890 | ubuntu-jammy | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd' 2025-09-09 21:03:04.858167 | ubuntu-jammy | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight 2025-09-09 21:03:04.858601 | ubuntu-jammy | Found installed collection cisco.intersight:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight' 2025-09-09 21:03:04.858869 | ubuntu-jammy | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2025-09-09 21:03:04.859150 | ubuntu-jammy | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2025-09-09 21:03:04.859614 | ubuntu-jammy | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2025-09-09 21:03:04.859884 | ubuntu-jammy | Found installed collection community.library_inventory_filtering_v1:1.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2025-09-09 21:03:04.860155 | ubuntu-jammy | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2025-09-09 21:03:04.860557 | ubuntu-jammy | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2025-09-09 21:03:04.862346 | ubuntu-jammy | Loading collection awx.awx from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx 2025-09-09 21:03:04.862784 | ubuntu-jammy | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx' 2025-09-09 21:03:04.863696 | ubuntu-jammy | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr 2025-09-09 21:03:04.864088 | ubuntu-jammy | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr' 2025-09-09 21:03:04.864634 | ubuntu-jammy | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar 2025-09-09 21:03:04.865020 | ubuntu-jammy | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar' 2025-09-09 21:03:04.865724 | ubuntu-jammy | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core 2025-09-09 21:03:04.866104 | ubuntu-jammy | Found installed collection kubernetes.core:5.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core' 2025-09-09 21:03:04.866401 | ubuntu-jammy | Loading collection community.sops from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops 2025-09-09 21:03:04.866714 | ubuntu-jammy | Found installed collection community.sops:2.2.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops' 2025-09-09 21:03:04.867449 | ubuntu-jammy | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2025-09-09 21:03:04.867752 | ubuntu-jammy | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2025-09-09 21:03:04.868035 | ubuntu-jammy | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb 2025-09-09 21:03:04.868315 | ubuntu-jammy | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb' 2025-09-09 21:03:04.868812 | ubuntu-jammy | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware 2025-09-09 21:03:04.869136 | ubuntu-jammy | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware' 2025-09-09 21:03:04.869375 | ubuntu-jammy | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana 2025-09-09 21:03:04.869870 | ubuntu-jammy | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana' 2025-09-09 21:03:04.870629 | ubuntu-jammy | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2025-09-09 21:03:04.871122 | ubuntu-jammy | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2025-09-09 21:03:04.872260 | ubuntu-jammy | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap 2025-09-09 21:03:04.872627 | ubuntu-jammy | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap' 2025-09-09 21:03:04.873529 | ubuntu-jammy | Loading collection cisco.ios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios 2025-09-09 21:03:04.873767 | ubuntu-jammy | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios' 2025-09-09 21:03:04.874559 | ubuntu-jammy | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage 2025-09-09 21:03:04.874848 | ubuntu-jammy | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2025-09-09 21:03:04.876220 | ubuntu-jammy | Loading collection amazon.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws 2025-09-09 21:03:04.876651 | ubuntu-jammy | Found installed collection amazon.aws:9.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws' 2025-09-09 21:03:04.877600 | ubuntu-jammy | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2025-09-09 21:03:04.877959 | ubuntu-jammy | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2025-09-09 21:03:04.878273 | ubuntu-jammy | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2025-09-09 21:03:04.878528 | ubuntu-jammy | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2025-09-09 21:03:04.881282 | ubuntu-jammy | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2025-09-09 21:03:04.881547 | ubuntu-jammy | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2025-09-09 21:03:04.881922 | ubuntu-jammy | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go 2025-09-09 21:03:04.882294 | ubuntu-jammy | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go' 2025-09-09 21:03:04.882608 | ubuntu-jammy | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2025-09-09 21:03:04.882983 | ubuntu-jammy | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2025-09-09 21:03:04.883522 | ubuntu-jammy | Loading collection community.hrobot from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot 2025-09-09 21:03:04.883957 | ubuntu-jammy | Found installed collection community.hrobot:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot' 2025-09-09 21:03:04.884178 | ubuntu-jammy | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs 2025-09-09 21:03:04.884587 | ubuntu-jammy | Found installed collection community.sap_libs:1.4.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs' 2025-09-09 21:03:04.884924 | ubuntu-jammy | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur 2025-09-09 21:03:04.885223 | ubuntu-jammy | Found installed collection cyberark.conjur:1.3.7 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur' 2025-09-09 21:03:04.886357 | ubuntu-jammy | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean 2025-09-09 21:03:04.886782 | ubuntu-jammy | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean' 2025-09-09 21:03:04.887563 | ubuntu-jammy | Loading collection splunk.es from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es 2025-09-09 21:03:04.887940 | ubuntu-jammy | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es' 2025-09-09 21:03:04.890654 | ubuntu-jammy | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos 2025-09-09 21:03:04.891104 | ubuntu-jammy | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos' 2025-09-09 21:03:04.893013 | ubuntu-jammy | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki 2025-09-09 21:03:04.893341 | ubuntu-jammy | Found installed collection cisco.meraki:2.21.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki' 2025-09-09 21:03:04.893551 | ubuntu-jammy | Loading collection community.libvirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt 2025-09-09 21:03:04.893981 | ubuntu-jammy | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt' 2025-09-09 21:03:04.894313 | ubuntu-jammy | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2025-09-09 21:03:04.894664 | ubuntu-jammy | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2025-09-09 21:03:04.895172 | ubuntu-jammy | Loading collection community.docker from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker 2025-09-09 21:03:04.895613 | ubuntu-jammy | Found installed collection community.docker:4.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker' 2025-09-09 21:03:04.895903 | ubuntu-jammy | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios 2025-09-09 21:03:04.896289 | ubuntu-jammy | Found installed collection fortinet.fortios:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios' 2025-09-09 21:03:04.897159 | ubuntu-jammy | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox 2025-09-09 21:03:04.897559 | ubuntu-jammy | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox' 2025-09-09 21:03:04.906573 | ubuntu-jammy | Loading collection community.general from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general 2025-09-09 21:03:04.906864 | ubuntu-jammy | Found installed collection community.general:10.7.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general' 2025-09-09 21:03:04.907899 | ubuntu-jammy | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade 2025-09-09 21:03:04.908378 | ubuntu-jammy | Found installed collection purestorage.flashblade:1.21.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2025-09-09 21:03:04.908723 | ubuntu-jammy | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid 2025-09-09 21:03:04.909158 | ubuntu-jammy | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2025-09-09 21:03:04.909518 | ubuntu-jammy | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb 2025-09-09 21:03:04.909924 | ubuntu-jammy | Found installed collection ravendb.ravendb:1.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb' 2025-09-09 21:03:04.910682 | ubuntu-jammy | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2025-09-09 21:03:04.911099 | ubuntu-jammy | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2025-09-09 21:03:04.911624 | ubuntu-jammy | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos 2025-09-09 21:03:04.912049 | ubuntu-jammy | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2025-09-09 21:03:04.912361 | ubuntu-jammy | Loading collection cisco.asa from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa 2025-09-09 21:03:04.912782 | ubuntu-jammy | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa' 2025-09-09 21:03:04.913326 | ubuntu-jammy | Loading collection arista.eos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos 2025-09-09 21:03:04.913713 | ubuntu-jammy | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos' 2025-09-09 21:03:04.914068 | ubuntu-jammy | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas 2025-09-09 21:03:04.914416 | ubuntu-jammy | Found installed collection cyberark.pas:1.0.35 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas' 2025-09-09 21:03:04.915862 | ubuntu-jammy | Loading collection cisco.mso from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso 2025-09-09 21:03:04.916213 | ubuntu-jammy | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso' 2025-09-09 21:03:04.916586 | ubuntu-jammy | Loading collection community.postgresql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql 2025-09-09 21:03:04.917046 | ubuntu-jammy | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql' 2025-09-09 21:03:04.917788 | ubuntu-jammy | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud 2025-09-09 21:03:04.918118 | ubuntu-jammy | Found installed collection openstack.cloud:2.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud' 2025-09-09 21:03:04.918410 | ubuntu-jammy | Loading collection community.mysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql 2025-09-09 21:03:04.918828 | ubuntu-jammy | Found installed collection community.mysql:3.15.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql' 2025-09-09 21:03:04.919253 | ubuntu-jammy | Loading collection community.dns from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns 2025-09-09 21:03:04.919646 | ubuntu-jammy | Found installed collection community.dns:3.3.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns' 2025-09-09 21:03:04.920116 | ubuntu-jammy | Loading collection community.proxmox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox 2025-09-09 21:03:04.920490 | ubuntu-jammy | Found installed collection community.proxmox:1.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox' 2025-09-09 21:03:04.920798 | ubuntu-jammy | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox 2025-09-09 21:03:04.921193 | ubuntu-jammy | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2025-09-09 21:03:04.922068 | ubuntu-jammy | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos 2025-09-09 21:03:04.922486 | ubuntu-jammy | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos' 2025-09-09 21:03:04.922949 | ubuntu-jammy | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud 2025-09-09 21:03:04.923383 | ubuntu-jammy | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud' 2025-09-09 21:03:04.924916 | ubuntu-jammy | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud 2025-09-09 21:03:04.925331 | ubuntu-jammy | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2025-09-09 21:03:04.926964 | ubuntu-jammy | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman 2025-09-09 21:03:04.927452 | ubuntu-jammy | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman' 2025-09-09 21:03:04.927695 | ubuntu-jammy | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2025-09-09 21:03:04.928080 | ubuntu-jammy | Found installed collection fortinet.fortimanager:2.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2025-09-09 21:03:04.928570 | ubuntu-jammy | Loading collection community.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows 2025-09-09 21:03:04.928951 | ubuntu-jammy | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows' 2025-09-09 21:03:04.929187 | ubuntu-jammy | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim 2025-09-09 21:03:04.929627 | ubuntu-jammy | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim' 2025-09-09 21:03:04.930181 | ubuntu-jammy | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2025-09-09 21:03:04.930574 | ubuntu-jammy | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2025-09-09 21:03:04.931072 | ubuntu-jammy | Loading collection community.crypto from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto 2025-09-09 21:03:04.931550 | ubuntu-jammy | Found installed collection community.crypto:2.26.5 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto' 2025-09-09 21:03:04.933086 | ubuntu-jammy | Loading collection community.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware 2025-09-09 21:03:04.933546 | ubuntu-jammy | Found installed collection community.vmware:5.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware' 2025-09-09 21:03:04.933767 | ubuntu-jammy | Loading collection community.proxysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql 2025-09-09 21:03:04.934165 | ubuntu-jammy | Found installed collection community.proxysql:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql' 2025-09-09 21:03:04.936024 | ubuntu-jammy | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection 2025-09-09 21:03:04.936479 | ubuntu-jammy | Found installed collection azure.azcollection:3.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection' 2025-09-09 21:03:04.937011 | ubuntu-jammy | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex 2025-09-09 21:03:04.937413 | ubuntu-jammy | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2025-09-09 21:03:04.937656 | ubuntu-jammy | Loading collection cisco.ise from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise 2025-09-09 21:03:04.938030 | ubuntu-jammy | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise' 2025-09-09 21:03:04.938249 | ubuntu-jammy | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs 2025-09-09 21:03:04.938636 | ubuntu-jammy | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs' 2025-09-09 21:03:04.939737 | ubuntu-jammy | Loading collection community.mongodb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb 2025-09-09 21:03:04.940186 | ubuntu-jammy | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb' 2025-09-09 21:03:04.940522 | ubuntu-jammy | Loading collection containers.podman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman 2025-09-09 21:03:04.940827 | ubuntu-jammy | Found installed collection containers.podman:1.17.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman' 2025-09-09 21:03:04.941228 | ubuntu-jammy | Loading collection cloud.common from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common 2025-09-09 21:03:04.941554 | ubuntu-jammy | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common' 2025-09-09 21:03:04.941901 | ubuntu-jammy | Loading collection ansible.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows 2025-09-09 21:03:04.942318 | ubuntu-jammy | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows' 2025-09-09 21:03:04.942663 | ubuntu-jammy | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis 2025-09-09 21:03:04.942962 | ubuntu-jammy | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis' 2025-09-09 21:03:04.943413 | ubuntu-jammy | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2025-09-09 21:03:04.943760 | ubuntu-jammy | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2025-09-09 21:03:04.946668 | ubuntu-jammy | Loading collection community.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws 2025-09-09 21:03:04.947062 | ubuntu-jammy | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws' 2025-09-09 21:03:04.947563 | ubuntu-jammy | Loading collection wti.remote from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote 2025-09-09 21:03:04.947965 | ubuntu-jammy | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote' 2025-09-09 21:03:04.948365 | ubuntu-jammy | Loading collection community.zabbix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix 2025-09-09 21:03:04.948793 | ubuntu-jammy | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix' 2025-09-09 21:03:04.949351 | ubuntu-jammy | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray 2025-09-09 21:03:04.949863 | ubuntu-jammy | Found installed collection purestorage.flasharray:1.36.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2025-09-09 21:03:04.950203 | ubuntu-jammy | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core 2025-09-09 21:03:04.950632 | ubuntu-jammy | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core' 2025-09-09 21:03:04.951255 | ubuntu-jammy | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon 2025-09-09 21:03:04.951777 | ubuntu-jammy | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon' 2025-09-09 21:03:04.952263 | ubuntu-jammy | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize 2025-09-09 21:03:04.952669 | ubuntu-jammy | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize' 2025-09-09 21:03:04.953088 | ubuntu-jammy | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq 2025-09-09 21:03:04.953475 | ubuntu-jammy | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq' 2025-09-09 21:03:04.953918 | ubuntu-jammy | Loading collection community.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana 2025-09-09 21:03:04.954269 | ubuntu-jammy | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana' 2025-09-09 21:03:04.990735 | ubuntu-jammy | Loading collection community.network from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network 2025-09-09 21:03:04.991178 | ubuntu-jammy | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network' 2025-09-09 21:03:04.991926 | ubuntu-jammy | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault 2025-09-09 21:03:04.992334 | ubuntu-jammy | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault' 2025-09-09 21:03:04.992752 | ubuntu-jammy | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2025-09-09 21:03:04.993150 | ubuntu-jammy | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2025-09-09 21:03:04.993566 | ubuntu-jammy | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2025-09-09 21:03:04.993958 | ubuntu-jammy | Found installed collection f5networks.f5_modules:1.38.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2025-09-09 21:03:04.994353 | ubuntu-jammy | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt 2025-09-09 21:03:04.994773 | ubuntu-jammy | Found installed collection check_point.mgmt:6.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt' 2025-09-09 21:03:04.995165 | ubuntu-jammy | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad 2025-09-09 21:03:04.995633 | ubuntu-jammy | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad' 2025-09-09 21:03:04.996156 | ubuntu-jammy | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt 2025-09-09 21:03:04.996541 | ubuntu-jammy | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2025-09-09 21:03:04.997298 | ubuntu-jammy | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2025-09-09 21:03:04.997717 | ubuntu-jammy | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2025-09-09 21:03:04.998762 | ubuntu-jammy | Loading collection google.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud 2025-09-09 21:03:04.999168 | ubuntu-jammy | Found installed collection google.cloud:1.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud' 2025-09-09 21:03:05.000139 | ubuntu-jammy | Starting galaxy collection install process 2025-09-09 21:03:05.000360 | ubuntu-jammy | Nothing to do. All requested collections are already installed. If you want to reinstall them, consider using `--force`. 2025-09-09 21:03:05.068670 | ubuntu-jammy | INFO [delegated > dependency] Dependency completed successfully. 2025-09-09 21:03:05.068806 | ubuntu-jammy | INFO [delegated > dependency] Completed 2025-09-09 21:03:05.077318 | ubuntu-jammy | INFO [delegated > create] Starting 2025-09-09 21:03:05.078653 | ubuntu-jammy | WARNING [delegated > create] Skipping, create action has no playbook. 2025-09-09 21:03:05.079448 | ubuntu-jammy | INFO [delegated > create] Completed 2025-09-09 21:03:05.087134 | ubuntu-jammy | INFO [delegated > prepare] Starting 2025-09-09 21:03:05.087271 | ubuntu-jammy | WARNING [delegated > prepare] Skipping, instances already prepared. 2025-09-09 21:03:05.087328 | ubuntu-jammy | INFO [delegated > prepare] Completed 2025-09-09 21:03:05.094911 | ubuntu-jammy | INFO [delegated > converge] Starting 2025-09-09 21:03:05.278840 | ubuntu-noble | ansible-galaxy [core 2.18.9] 2025-09-09 21:03:05.278879 | ubuntu-noble | config file = None 2025-09-09 21:03:05.279251 | ubuntu-noble | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2025-09-09 21:03:05.279636 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2025-09-09 21:03:05.280120 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.12/site-packages:/home/zuul/venv/lib/python3.12/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.12/dist-packages 2025-09-09 21:03:05.280433 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-galaxy 2025-09-09 21:03:05.280761 | ubuntu-noble | python version = 3.12.3 (main, Aug 14 2025, 17:47:21) [GCC 13.3.0] (/home/zuul/venv/bin/python3) 2025-09-09 21:03:05.281303 | ubuntu-noble | jinja version = 3.1.6 2025-09-09 21:03:05.281637 | ubuntu-noble | libyaml = True 2025-09-09 21:03:05.282012 | ubuntu-noble | No config file found; using defaults 2025-09-09 21:03:05.282580 | ubuntu-noble | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2025-09-09 21:03:05.290797 | ubuntu-noble | Loading collection community.proxmox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox 2025-09-09 21:03:05.291416 | ubuntu-noble | Found installed collection community.proxmox:1.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox' 2025-09-09 21:03:05.292724 | ubuntu-noble | Loading collection google.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud 2025-09-09 21:03:05.293370 | ubuntu-noble | Found installed collection google.cloud:1.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud' 2025-09-09 21:03:05.293887 | ubuntu-noble | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block 2025-09-09 21:03:05.294298 | ubuntu-noble | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block' 2025-09-09 21:03:05.294685 | ubuntu-noble | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager 2025-09-09 21:03:05.295126 | ubuntu-noble | Found installed collection fortinet.fortimanager:2.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager' 2025-09-09 21:03:05.296886 | ubuntu-noble | Loading collection cisco.aci from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci 2025-09-09 21:03:05.298050 | ubuntu-noble | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci' 2025-09-09 21:03:05.300804 | ubuntu-noble | Loading collection community.libvirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt 2025-09-09 21:03:05.300868 | ubuntu-noble | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt' 2025-09-09 21:03:05.300875 | ubuntu-noble | Loading collection community.docker from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker 2025-09-09 21:03:05.300895 | ubuntu-noble | Found installed collection community.docker:4.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker' 2025-09-09 21:03:05.300899 | ubuntu-noble | Loading collection community.proxysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql 2025-09-09 21:03:05.300903 | ubuntu-noble | Found installed collection community.proxysql:1.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql' 2025-09-09 21:03:05.301203 | ubuntu-noble | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core 2025-09-09 21:03:05.301507 | ubuntu-noble | Found installed collection kubernetes.core:5.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core' 2025-09-09 21:03:05.301838 | ubuntu-noble | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur 2025-09-09 21:03:05.302125 | ubuntu-noble | Found installed collection cyberark.conjur:1.3.7 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur' 2025-09-09 21:03:05.303929 | ubuntu-noble | Loading collection awx.awx from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx 2025-09-09 21:03:05.304297 | ubuntu-noble | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx' 2025-09-09 21:03:05.327430 | ubuntu-noble | Loading collection community.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws 2025-09-09 21:03:05.327914 | ubuntu-noble | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws' 2025-09-09 21:03:05.328342 | ubuntu-noble | Loading collection community.mysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql 2025-09-09 21:03:05.328721 | ubuntu-noble | Found installed collection community.mysql:3.15.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql' 2025-09-09 21:03:05.329127 | ubuntu-noble | Loading collection community.hrobot from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot 2025-09-09 21:03:05.329492 | ubuntu-noble | Found installed collection community.hrobot:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot' 2025-09-09 21:03:05.329999 | ubuntu-noble | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar 2025-09-09 21:03:05.330371 | ubuntu-noble | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar' 2025-09-09 21:03:05.330739 | ubuntu-noble | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1 2025-09-09 21:03:05.331159 | ubuntu-noble | Found installed collection community.library_inventory_filtering_v1:1.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2025-09-09 21:03:05.331443 | ubuntu-noble | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas 2025-09-09 21:03:05.331870 | ubuntu-noble | Found installed collection cyberark.pas:1.0.35 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas' 2025-09-09 21:03:05.332241 | ubuntu-noble | Loading collection community.postgresql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql 2025-09-09 21:03:05.332607 | ubuntu-noble | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql' 2025-09-09 21:03:05.333012 | ubuntu-noble | Loading collection wti.remote from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote 2025-09-09 21:03:05.333372 | ubuntu-noble | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote' 2025-09-09 21:03:05.334234 | ubuntu-noble | Loading collection ansible.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows 2025-09-09 21:03:05.334606 | ubuntu-noble | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows' 2025-09-09 21:03:05.334913 | ubuntu-noble | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey 2025-09-09 21:03:05.335241 | ubuntu-noble | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey' 2025-09-09 21:03:05.335949 | ubuntu-noble | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity 2025-09-09 21:03:05.336500 | ubuntu-noble | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity' 2025-09-09 21:03:05.336894 | ubuntu-noble | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs 2025-09-09 21:03:05.337227 | ubuntu-noble | Found installed collection community.sap_libs:1.4.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs' 2025-09-09 21:03:05.337589 | ubuntu-noble | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize 2025-09-09 21:03:05.337987 | ubuntu-noble | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize' 2025-09-09 21:03:05.340863 | ubuntu-noble | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest 2025-09-09 21:03:05.341241 | ubuntu-noble | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest' 2025-09-09 21:03:05.341722 | ubuntu-noble | Loading collection community.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows 2025-09-09 21:03:05.342114 | ubuntu-noble | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows' 2025-09-09 21:03:05.343153 | ubuntu-noble | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos 2025-09-09 21:03:05.343492 | ubuntu-noble | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos' 2025-09-09 21:03:05.344074 | ubuntu-noble | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt 2025-09-09 21:03:05.344376 | ubuntu-noble | Found installed collection check_point.mgmt:6.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt' 2025-09-09 21:03:05.344677 | ubuntu-noble | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go 2025-09-09 21:03:05.345124 | ubuntu-noble | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go' 2025-09-09 21:03:05.345423 | ubuntu-noble | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver 2025-09-09 21:03:05.345883 | ubuntu-noble | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver' 2025-09-09 21:03:05.346181 | ubuntu-noble | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim 2025-09-09 21:03:05.346479 | ubuntu-noble | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim' 2025-09-09 21:03:05.347028 | ubuntu-noble | Loading collection community.okd from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd 2025-09-09 21:03:05.347359 | ubuntu-noble | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd' 2025-09-09 21:03:05.347661 | ubuntu-noble | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox 2025-09-09 21:03:05.348063 | ubuntu-noble | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox' 2025-09-09 21:03:05.348497 | ubuntu-noble | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault 2025-09-09 21:03:05.348904 | ubuntu-noble | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault' 2025-09-09 21:03:05.350148 | ubuntu-noble | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos 2025-09-09 21:03:05.350575 | ubuntu-noble | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos' 2025-09-09 21:03:05.350863 | ubuntu-noble | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios 2025-09-09 21:03:05.351285 | ubuntu-noble | Found installed collection fortinet.fortios:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios' 2025-09-09 21:03:05.351521 | ubuntu-noble | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis 2025-09-09 21:03:05.351944 | ubuntu-noble | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis' 2025-09-09 21:03:05.352237 | ubuntu-noble | Loading collection ansible.posix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix 2025-09-09 21:03:05.352616 | ubuntu-noble | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix' 2025-09-09 21:03:05.353903 | ubuntu-noble | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon 2025-09-09 21:03:05.354327 | ubuntu-noble | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon' 2025-09-09 21:03:05.354887 | ubuntu-noble | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director 2025-09-09 21:03:05.355275 | ubuntu-noble | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director' 2025-09-09 21:03:05.356134 | ubuntu-noble | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr 2025-09-09 21:03:05.356532 | ubuntu-noble | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr' 2025-09-09 21:03:05.356952 | ubuntu-noble | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager 2025-09-09 21:03:05.357366 | ubuntu-noble | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager' 2025-09-09 21:03:05.358289 | ubuntu-noble | Loading collection cisco.ios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios 2025-09-09 21:03:05.359179 | ubuntu-noble | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios' 2025-09-09 21:03:05.359231 | ubuntu-noble | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud 2025-09-09 21:03:05.360504 | ubuntu-noble | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud' 2025-09-09 21:03:05.360532 | ubuntu-noble | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb 2025-09-09 21:03:05.360538 | ubuntu-noble | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb' 2025-09-09 21:03:05.360571 | ubuntu-noble | Loading collection community.routeros from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros 2025-09-09 21:03:05.360578 | ubuntu-noble | Found installed collection community.routeros:3.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros' 2025-09-09 21:03:05.360950 | ubuntu-noble | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core 2025-09-09 21:03:05.361239 | ubuntu-noble | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core' 2025-09-09 21:03:05.361857 | ubuntu-noble | Loading collection splunk.es from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es 2025-09-09 21:03:05.362138 | ubuntu-noble | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es' 2025-09-09 21:03:05.362392 | ubuntu-noble | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs 2025-09-09 21:03:05.362659 | ubuntu-noble | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs' 2025-09-09 21:03:05.362955 | ubuntu-noble | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana 2025-09-09 21:03:05.363226 | ubuntu-noble | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana' 2025-09-09 21:03:05.364144 | ubuntu-noble | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid 2025-09-09 21:03:05.364687 | ubuntu-noble | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid' 2025-09-09 21:03:05.365105 | ubuntu-noble | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware 2025-09-09 21:03:05.365533 | ubuntu-noble | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware' 2025-09-09 21:03:05.365923 | ubuntu-noble | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq 2025-09-09 21:03:05.366246 | ubuntu-noble | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq' 2025-09-09 21:03:05.367797 | ubuntu-noble | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos 2025-09-09 21:03:05.368244 | ubuntu-noble | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos' 2025-09-09 21:03:05.368925 | ubuntu-noble | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox 2025-09-09 21:03:05.369341 | ubuntu-noble | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox' 2025-09-09 21:03:05.369802 | ubuntu-noble | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage 2025-09-09 21:03:05.372623 | ubuntu-noble | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage' 2025-09-09 21:03:05.372655 | ubuntu-noble | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight 2025-09-09 21:03:05.372664 | ubuntu-noble | Found installed collection cisco.intersight:2.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight' 2025-09-09 21:03:05.372673 | ubuntu-noble | Loading collection containers.podman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman 2025-09-09 21:03:05.372682 | ubuntu-noble | Found installed collection containers.podman:1.17.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman' 2025-09-09 21:03:05.372691 | ubuntu-noble | Loading collection amazon.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws 2025-09-09 21:03:05.372718 | ubuntu-noble | Found installed collection amazon.aws:9.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws' 2025-09-09 21:03:05.414876 | ubuntu-noble | Loading collection community.network from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network 2025-09-09 21:03:05.414968 | ubuntu-noble | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network' 2025-09-09 21:03:05.415184 | ubuntu-noble | Loading collection cisco.ise from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise 2025-09-09 21:03:05.416175 | ubuntu-noble | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise' 2025-09-09 21:03:05.416723 | ubuntu-noble | Loading collection arista.eos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos 2025-09-09 21:03:05.417342 | ubuntu-noble | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos' 2025-09-09 21:03:05.417855 | ubuntu-noble | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex 2025-09-09 21:03:05.418404 | ubuntu-noble | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex' 2025-09-09 21:03:05.419011 | ubuntu-noble | Loading collection cisco.mso from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso 2025-09-09 21:03:05.419408 | ubuntu-noble | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso' 2025-09-09 21:03:05.419926 | ubuntu-noble | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt 2025-09-09 21:03:05.420315 | ubuntu-noble | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt' 2025-09-09 21:03:05.421347 | ubuntu-noble | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean 2025-09-09 21:03:05.421375 | ubuntu-noble | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean' 2025-09-09 21:03:05.431079 | ubuntu-noble | Loading collection community.general from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general 2025-09-09 21:03:05.431116 | ubuntu-noble | Found installed collection community.general:10.7.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general' 2025-09-09 21:03:05.432333 | ubuntu-noble | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud 2025-09-09 21:03:05.432364 | ubuntu-noble | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud' 2025-09-09 21:03:05.434340 | ubuntu-noble | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki 2025-09-09 21:03:05.434732 | ubuntu-noble | Found installed collection cisco.meraki:2.21.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki' 2025-09-09 21:03:05.435474 | ubuntu-noble | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules 2025-09-09 21:03:05.435498 | ubuntu-noble | Found installed collection f5networks.f5_modules:1.38.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules' 2025-09-09 21:03:05.438507 | ubuntu-noble | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection 2025-09-09 21:03:05.438538 | ubuntu-noble | Found installed collection azure.azcollection:3.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection' 2025-09-09 21:03:05.438547 | ubuntu-noble | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade 2025-09-09 21:03:05.438575 | ubuntu-noble | Found installed collection purestorage.flashblade:1.21.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade' 2025-09-09 21:03:05.440079 | ubuntu-noble | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud 2025-09-09 21:03:05.440104 | ubuntu-noble | Found installed collection openstack.cloud:2.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud' 2025-09-09 21:03:05.440111 | ubuntu-noble | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize 2025-09-09 21:03:05.440117 | ubuntu-noble | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize' 2025-09-09 21:03:05.440983 | ubuntu-noble | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud 2025-09-09 21:03:05.441292 | ubuntu-noble | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud' 2025-09-09 21:03:05.442307 | ubuntu-noble | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage 2025-09-09 21:03:05.442334 | ubuntu-noble | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage' 2025-09-09 21:03:05.443268 | ubuntu-noble | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic 2025-09-09 21:03:05.443291 | ubuntu-noble | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic' 2025-09-09 21:03:05.443794 | ubuntu-noble | Loading collection community.crypto from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto 2025-09-09 21:03:05.444127 | ubuntu-noble | Found installed collection community.crypto:2.26.5 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto' 2025-09-09 21:03:05.444549 | ubuntu-noble | Loading collection community.mongodb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb 2025-09-09 21:03:05.444908 | ubuntu-noble | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb' 2025-09-09 21:03:05.445677 | ubuntu-noble | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb 2025-09-09 21:03:05.445690 | ubuntu-noble | Found installed collection ravendb.ravendb:1.0.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb' 2025-09-09 21:03:05.445697 | ubuntu-noble | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray 2025-09-09 21:03:05.446031 | ubuntu-noble | Found installed collection purestorage.flasharray:1.36.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray' 2025-09-09 21:03:05.447117 | ubuntu-noble | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap 2025-09-09 21:03:05.447517 | ubuntu-noble | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap' 2025-09-09 21:03:05.447806 | ubuntu-noble | Loading collection community.dns from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns 2025-09-09 21:03:05.448161 | ubuntu-noble | Found installed collection community.dns:3.3.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns' 2025-09-09 21:03:05.449316 | ubuntu-noble | Loading collection community.zabbix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix 2025-09-09 21:03:05.449342 | ubuntu-noble | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix' 2025-09-09 21:03:05.449364 | ubuntu-noble | Loading collection community.sops from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops 2025-09-09 21:03:05.449377 | ubuntu-noble | Found installed collection community.sops:2.2.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops' 2025-09-09 21:03:05.449699 | ubuntu-noble | Loading collection cisco.asa from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa 2025-09-09 21:03:05.450024 | ubuntu-noble | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa' 2025-09-09 21:03:05.450295 | ubuntu-noble | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage 2025-09-09 21:03:05.450555 | ubuntu-noble | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage' 2025-09-09 21:03:05.450869 | ubuntu-noble | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad 2025-09-09 21:03:05.451145 | ubuntu-noble | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad' 2025-09-09 21:03:05.452689 | ubuntu-noble | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman 2025-09-09 21:03:05.453140 | ubuntu-noble | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman' 2025-09-09 21:03:05.453363 | ubuntu-noble | Loading collection ansible.utils from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils 2025-09-09 21:03:05.453567 | ubuntu-noble | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils' 2025-09-09 21:03:05.454262 | ubuntu-noble | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack 2025-09-09 21:03:05.454588 | ubuntu-noble | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack' 2025-09-09 21:03:05.454862 | ubuntu-noble | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity 2025-09-09 21:03:05.455203 | ubuntu-noble | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity' 2025-09-09 21:03:05.455414 | ubuntu-noble | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules 2025-09-09 21:03:05.455730 | ubuntu-noble | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules' 2025-09-09 21:03:05.457498 | ubuntu-noble | Loading collection community.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware 2025-09-09 21:03:05.457801 | ubuntu-noble | Found installed collection community.vmware:5.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware' 2025-09-09 21:03:05.458040 | ubuntu-noble | Loading collection cloud.common from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common 2025-09-09 21:03:05.458361 | ubuntu-noble | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common' 2025-09-09 21:03:05.458679 | ubuntu-noble | Loading collection community.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana 2025-09-09 21:03:05.459021 | ubuntu-noble | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana' 2025-09-09 21:03:05.459234 | ubuntu-noble | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac 2025-09-09 21:03:05.459484 | ubuntu-noble | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac' 2025-09-09 21:03:05.471750 | ubuntu-noble | Loading collection osism.commons from /home/zuul/.ansible/collections/ansible_collections/osism/commons 2025-09-09 21:03:05.473420 | ubuntu-noble | Found installed collection osism.commons:0.20250824.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2025-09-09 21:03:05.474695 | ubuntu-noble | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2025-09-09 21:03:05.475050 | ubuntu-noble | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2025-09-09 21:03:05.475844 | ubuntu-noble | Starting galaxy collection install process 2025-09-09 21:03:05.476028 | ubuntu-noble | Nothing to do. All requested collections are already installed. If you want to reinstall them, consider using `--force`. 2025-09-09 21:03:05.091792 | debian-bookworm | ansible-galaxy [core 2.18.9] 2025-09-09 21:03:05.092267 | debian-bookworm | config file = None 2025-09-09 21:03:05.092913 | debian-bookworm | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2025-09-09 21:03:05.093494 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2025-09-09 21:03:05.093928 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.11/site-packages:/home/zuul/venv/lib/python3.11/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.11/dist-packages 2025-09-09 21:03:05.094273 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-galaxy 2025-09-09 21:03:05.094643 | debian-bookworm | python version = 3.11.2 (main, Apr 28 2025, 14:11:48) [GCC 12.2.0] (/home/zuul/venv/bin/python3) 2025-09-09 21:03:05.095180 | debian-bookworm | jinja version = 3.1.6 2025-09-09 21:03:05.095645 | debian-bookworm | libyaml = True 2025-09-09 21:03:05.096058 | debian-bookworm | No config file found; using defaults 2025-09-09 21:03:05.096627 | debian-bookworm | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2025-09-09 21:03:05.098709 | debian-bookworm | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr 2025-09-09 21:03:05.099335 | debian-bookworm | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr' 2025-09-09 21:03:05.100100 | debian-bookworm | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt 2025-09-09 21:03:05.100587 | debian-bookworm | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2025-09-09 21:03:05.101176 | debian-bookworm | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar 2025-09-09 21:03:05.101687 | debian-bookworm | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar' 2025-09-09 21:03:05.101985 | debian-bookworm | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2025-09-09 21:03:05.102394 | debian-bookworm | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2025-09-09 21:03:05.102685 | debian-bookworm | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb 2025-09-09 21:03:05.103144 | debian-bookworm | Found installed collection ravendb.ravendb:1.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb' 2025-09-09 21:03:05.104894 | debian-bookworm | Loading collection cisco.aci from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci 2025-09-09 21:03:05.105330 | debian-bookworm | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci' 2025-09-09 21:03:05.107985 | debian-bookworm | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2025-09-09 21:03:05.108445 | debian-bookworm | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2025-09-09 21:03:05.109083 | debian-bookworm | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2025-09-09 21:03:05.109557 | debian-bookworm | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2025-09-09 21:03:05.110261 | debian-bookworm | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core 2025-09-09 21:03:05.110609 | debian-bookworm | Found installed collection kubernetes.core:5.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core' 2025-09-09 21:03:05.111206 | debian-bookworm | Loading collection community.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows 2025-09-09 21:03:05.111520 | debian-bookworm | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows' 2025-09-09 21:03:05.111883 | debian-bookworm | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2025-09-09 21:03:05.112322 | debian-bookworm | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2025-09-09 21:03:05.112637 | debian-bookworm | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2025-09-09 21:03:05.112879 | debian-bookworm | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2025-09-09 21:03:05.113620 | debian-bookworm | Loading collection splunk.es from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es 2025-09-09 21:03:05.113989 | debian-bookworm | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es' 2025-09-09 21:03:05.114458 | debian-bookworm | Loading collection wti.remote from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote 2025-09-09 21:03:05.114853 | debian-bookworm | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote' 2025-09-09 21:03:05.115262 | debian-bookworm | Loading collection community.hrobot from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot 2025-09-09 21:03:05.115649 | debian-bookworm | Found installed collection community.hrobot:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot' 2025-09-09 21:03:05.115937 | debian-bookworm | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2025-09-09 21:03:05.116297 | debian-bookworm | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2025-09-09 21:03:05.116664 | debian-bookworm | Loading collection ansible.posix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix 2025-09-09 21:03:05.117041 | debian-bookworm | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix' 2025-09-09 21:03:05.117419 | debian-bookworm | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad 2025-09-09 21:03:05.117758 | debian-bookworm | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad' 2025-09-09 21:03:05.117971 | debian-bookworm | Loading collection ansible.utils from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils 2025-09-09 21:03:05.118291 | debian-bookworm | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils' 2025-09-09 21:03:05.118722 | debian-bookworm | Loading collection community.dns from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns 2025-09-09 21:03:05.119114 | debian-bookworm | Found installed collection community.dns:3.3.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns' 2025-09-09 21:03:05.121575 | debian-bookworm | Loading collection awx.awx from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx 2025-09-09 21:03:05.121986 | debian-bookworm | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx' 2025-09-09 21:03:05.122887 | debian-bookworm | Loading collection cisco.ios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios 2025-09-09 21:03:05.123276 | debian-bookworm | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios' 2025-09-09 21:03:05.123593 | debian-bookworm | Loading collection community.mysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql 2025-09-09 21:03:05.123963 | debian-bookworm | Found installed collection community.mysql:3.15.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql' 2025-09-09 21:03:05.133197 | debian-bookworm | Loading collection community.general from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general 2025-09-09 21:03:05.133413 | debian-bookworm | Found installed collection community.general:10.7.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general' 2025-09-09 21:03:05.133845 | debian-bookworm | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2025-09-09 21:03:05.134249 | debian-bookworm | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2025-09-09 21:03:05.135005 | debian-bookworm | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud 2025-09-09 21:03:05.135375 | debian-bookworm | Found installed collection openstack.cloud:2.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud' 2025-09-09 21:03:05.137404 | debian-bookworm | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection 2025-09-09 21:03:05.137610 | debian-bookworm | Found installed collection azure.azcollection:3.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection' 2025-09-09 21:03:05.137939 | debian-bookworm | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb 2025-09-09 21:03:05.138283 | debian-bookworm | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb' 2025-09-09 21:03:05.138807 | debian-bookworm | Loading collection community.crypto from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto 2025-09-09 21:03:05.139178 | debian-bookworm | Found installed collection community.crypto:2.26.5 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto' 2025-09-09 21:03:05.139663 | debian-bookworm | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt 2025-09-09 21:03:05.140055 | debian-bookworm | Found installed collection check_point.mgmt:6.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt' 2025-09-09 21:03:05.142071 | debian-bookworm | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos 2025-09-09 21:03:05.142517 | debian-bookworm | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos' 2025-09-09 21:03:05.142895 | debian-bookworm | Loading collection cisco.asa from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa 2025-09-09 21:03:05.143282 | debian-bookworm | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa' 2025-09-09 21:03:05.143758 | debian-bookworm | Loading collection community.docker from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker 2025-09-09 21:03:05.144176 | debian-bookworm | Found installed collection community.docker:4.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker' 2025-09-09 21:03:05.144927 | debian-bookworm | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2025-09-09 21:03:05.145286 | debian-bookworm | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2025-09-09 21:03:05.148902 | debian-bookworm | Loading collection community.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws 2025-09-09 21:03:05.149251 | debian-bookworm | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws' 2025-09-09 21:03:05.150541 | debian-bookworm | Loading collection amazon.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws 2025-09-09 21:03:05.150981 | debian-bookworm | Found installed collection amazon.aws:9.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws' 2025-09-09 21:03:05.151513 | debian-bookworm | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid 2025-09-09 21:03:05.151887 | debian-bookworm | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2025-09-09 21:03:05.152869 | debian-bookworm | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap 2025-09-09 21:03:05.153169 | debian-bookworm | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap' 2025-09-09 21:03:05.153941 | debian-bookworm | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox 2025-09-09 21:03:05.155117 | debian-bookworm | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox' 2025-09-09 21:03:05.155623 | debian-bookworm | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox 2025-09-09 21:03:05.156130 | debian-bookworm | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2025-09-09 21:03:05.156532 | debian-bookworm | Loading collection community.postgresql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql 2025-09-09 21:03:05.156861 | debian-bookworm | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql' 2025-09-09 21:03:05.157258 | debian-bookworm | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade 2025-09-09 21:03:05.157870 | debian-bookworm | Found installed collection purestorage.flashblade:1.21.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2025-09-09 21:03:05.158174 | debian-bookworm | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud 2025-09-09 21:03:05.158573 | debian-bookworm | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud' 2025-09-09 21:03:05.158947 | debian-bookworm | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac 2025-09-09 21:03:05.159239 | debian-bookworm | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac' 2025-09-09 21:03:05.159762 | debian-bookworm | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq 2025-09-09 21:03:05.160054 | debian-bookworm | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq' 2025-09-09 21:03:05.160333 | debian-bookworm | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas 2025-09-09 21:03:05.160703 | debian-bookworm | Found installed collection cyberark.pas:1.0.35 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas' 2025-09-09 21:03:05.161066 | debian-bookworm | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman 2025-09-09 21:03:05.161303 | debian-bookworm | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman' 2025-09-09 21:03:05.162124 | debian-bookworm | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis 2025-09-09 21:03:05.162493 | debian-bookworm | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis' 2025-09-09 21:03:05.162865 | debian-bookworm | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos 2025-09-09 21:03:05.163163 | debian-bookworm | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos' 2025-09-09 21:03:05.163553 | debian-bookworm | Loading collection community.zabbix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix 2025-09-09 21:03:05.163801 | debian-bookworm | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix' 2025-09-09 21:03:05.164054 | debian-bookworm | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware 2025-09-09 21:03:05.164389 | debian-bookworm | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware' 2025-09-09 21:03:05.164655 | debian-bookworm | Loading collection containers.podman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman 2025-09-09 21:03:05.164959 | debian-bookworm | Found installed collection containers.podman:1.17.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman' 2025-09-09 21:03:05.165540 | debian-bookworm | Loading collection community.mongodb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb 2025-09-09 21:03:05.165848 | debian-bookworm | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb' 2025-09-09 21:03:05.166217 | debian-bookworm | Loading collection community.okd from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd 2025-09-09 21:03:05.166652 | debian-bookworm | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd' 2025-09-09 21:03:05.167135 | debian-bookworm | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex 2025-09-09 21:03:05.167530 | debian-bookworm | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2025-09-09 21:03:05.167833 | debian-bookworm | Loading collection community.sops from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops 2025-09-09 21:03:05.168070 | debian-bookworm | Found installed collection community.sops:2.2.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops' 2025-09-09 21:03:05.168450 | debian-bookworm | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs 2025-09-09 21:03:05.168933 | debian-bookworm | Found installed collection community.sap_libs:1.4.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs' 2025-09-09 21:03:05.169169 | debian-bookworm | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana 2025-09-09 21:03:05.169505 | debian-bookworm | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana' 2025-09-09 21:03:05.169732 | debian-bookworm | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2025-09-09 21:03:05.170111 | debian-bookworm | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2025-09-09 21:03:05.176519 | debian-bookworm | Loading collection community.routeros from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros 2025-09-09 21:03:05.176755 | debian-bookworm | Found installed collection community.routeros:3.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros' 2025-09-09 21:03:05.176893 | debian-bookworm | Loading collection community.proxmox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox 2025-09-09 21:03:05.177026 | debian-bookworm | Found installed collection community.proxmox:1.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox' 2025-09-09 21:03:05.177150 | debian-bookworm | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki 2025-09-09 21:03:05.177277 | debian-bookworm | Found installed collection cisco.meraki:2.21.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki' 2025-09-09 21:03:05.177417 | debian-bookworm | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault 2025-09-09 21:03:05.177541 | debian-bookworm | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault' 2025-09-09 21:03:05.177660 | debian-bookworm | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray 2025-09-09 21:03:05.177780 | debian-bookworm | Found installed collection purestorage.flasharray:1.36.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2025-09-09 21:03:05.177905 | debian-bookworm | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2025-09-09 21:03:05.178028 | debian-bookworm | Found installed collection community.library_inventory_filtering_v1:1.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2025-09-09 21:03:05.178152 | debian-bookworm | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight 2025-09-09 21:03:05.178274 | debian-bookworm | Found installed collection cisco.intersight:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight' 2025-09-09 21:03:05.178461 | debian-bookworm | Loading collection cisco.mso from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso 2025-09-09 21:03:05.178582 | debian-bookworm | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso' 2025-09-09 21:03:05.178714 | debian-bookworm | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2025-09-09 21:03:05.178862 | debian-bookworm | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2025-09-09 21:03:05.179025 | debian-bookworm | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2025-09-09 21:03:05.179402 | debian-bookworm | Found installed collection f5networks.f5_modules:1.38.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2025-09-09 21:03:05.179571 | debian-bookworm | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs 2025-09-09 21:03:05.179770 | debian-bookworm | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs' 2025-09-09 21:03:05.179986 | debian-bookworm | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize 2025-09-09 21:03:05.180387 | debian-bookworm | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize' 2025-09-09 21:03:05.181555 | debian-bookworm | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity 2025-09-09 21:03:05.181884 | debian-bookworm | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity' 2025-09-09 21:03:05.182903 | debian-bookworm | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos 2025-09-09 21:03:05.183262 | debian-bookworm | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2025-09-09 21:03:05.184222 | debian-bookworm | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud 2025-09-09 21:03:05.184599 | debian-bookworm | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2025-09-09 21:03:05.184873 | debian-bookworm | Loading collection cloud.common from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common 2025-09-09 21:03:05.185289 | debian-bookworm | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common' 2025-09-09 21:03:05.185898 | debian-bookworm | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2025-09-09 21:03:05.186277 | debian-bookworm | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2025-09-09 21:03:05.186580 | debian-bookworm | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go 2025-09-09 21:03:05.187238 | debian-bookworm | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go' 2025-09-09 21:03:05.187493 | debian-bookworm | Loading collection community.libvirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt 2025-09-09 21:03:05.187718 | debian-bookworm | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt' 2025-09-09 21:03:05.187963 | debian-bookworm | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2025-09-09 21:03:05.188195 | debian-bookworm | Found installed collection fortinet.fortimanager:2.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2025-09-09 21:03:05.189750 | debian-bookworm | Loading collection community.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware 2025-09-09 21:03:05.190140 | debian-bookworm | Found installed collection community.vmware:5.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware' 2025-09-09 21:03:05.191239 | debian-bookworm | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean 2025-09-09 21:03:05.191602 | debian-bookworm | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean' 2025-09-09 21:03:05.192174 | debian-bookworm | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2025-09-09 21:03:05.192501 | debian-bookworm | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2025-09-09 21:03:05.192747 | debian-bookworm | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur 2025-09-09 21:03:05.193094 | debian-bookworm | Found installed collection cyberark.conjur:1.3.7 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur' 2025-09-09 21:03:05.193332 | debian-bookworm | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2025-09-09 21:03:05.193742 | debian-bookworm | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2025-09-09 21:03:05.194096 | debian-bookworm | Loading collection community.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana 2025-09-09 21:03:05.194474 | debian-bookworm | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana' 2025-09-09 21:03:05.194728 | debian-bookworm | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core 2025-09-09 21:03:05.195331 | debian-bookworm | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core' 2025-09-09 21:03:05.195932 | debian-bookworm | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2025-09-09 21:03:05.196290 | debian-bookworm | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2025-09-09 21:03:05.197295 | debian-bookworm | Loading collection arista.eos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos 2025-09-09 21:03:05.197677 | debian-bookworm | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos' 2025-09-09 21:03:05.197876 | debian-bookworm | Loading collection community.proxysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql 2025-09-09 21:03:05.198264 | debian-bookworm | Found installed collection community.proxysql:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql' 2025-09-09 21:03:05.198674 | debian-bookworm | Loading collection ansible.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows 2025-09-09 21:03:05.199073 | debian-bookworm | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows' 2025-09-09 21:03:05.200051 | debian-bookworm | Loading collection google.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud 2025-09-09 21:03:05.200417 | debian-bookworm | Found installed collection google.cloud:1.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud' 2025-09-09 21:03:05.200609 | debian-bookworm | Loading collection cisco.ise from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise 2025-09-09 21:03:05.201047 | debian-bookworm | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise' 2025-09-09 21:03:05.201224 | debian-bookworm | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios 2025-09-09 21:03:05.201651 | debian-bookworm | Found installed collection fortinet.fortios:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios' 2025-09-09 21:03:05.201896 | debian-bookworm | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim 2025-09-09 21:03:05.202281 | debian-bookworm | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim' 2025-09-09 21:03:05.202978 | debian-bookworm | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage 2025-09-09 21:03:05.203367 | debian-bookworm | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2025-09-09 21:03:05.204472 | debian-bookworm | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon 2025-09-09 21:03:05.204867 | debian-bookworm | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon' 2025-09-09 21:03:05.242989 | debian-bookworm | Loading collection community.network from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network 2025-09-09 21:03:05.243678 | debian-bookworm | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network' 2025-09-09 21:03:05.247487 | debian-bookworm | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2025-09-09 21:03:05.247928 | debian-bookworm | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2025-09-09 21:03:05.248248 | debian-bookworm | Loading collection osism.commons from /home/zuul/.ansible/collections/ansible_collections/osism/commons 2025-09-09 21:03:05.249681 | debian-bookworm | Found installed collection osism.commons:0.20250824.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2025-09-09 21:03:05.251293 | debian-bookworm | Starting galaxy collection install process 2025-09-09 21:03:05.251658 | debian-bookworm | Nothing to do. All requested collections are already installed. If you want to reinstall them, consider using `--force`. 2025-09-09 21:03:05.320819 | debian-bookworm | INFO [delegated > dependency] Dependency completed successfully. 2025-09-09 21:03:05.320902 | debian-bookworm | INFO [delegated > dependency] Completed 2025-09-09 21:03:05.337040 | debian-bookworm | INFO [delegated > create] Starting 2025-09-09 21:03:05.338857 | debian-bookworm | WARNING [delegated > create] Skipping, create action has no playbook. 2025-09-09 21:03:05.339691 | debian-bookworm | INFO [delegated > create] Completed 2025-09-09 21:03:05.348715 | debian-bookworm | INFO [delegated > prepare] Starting 2025-09-09 21:03:05.348750 | debian-bookworm | WARNING [delegated > prepare] Skipping, instances already prepared. 2025-09-09 21:03:05.348809 | debian-bookworm | INFO [delegated > prepare] Completed 2025-09-09 21:03:05.356718 | debian-bookworm | INFO [delegated > converge] Starting 2025-09-09 21:03:05.207175 | centos-9-stream | ansible-galaxy [core 2.18.9] 2025-09-09 21:03:05.207807 | centos-9-stream | config file = None 2025-09-09 21:03:05.208570 | centos-9-stream | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2025-09-09 21:03:05.209231 | centos-9-stream | ansible python module location = /home/zuul/venv/lib64/python3.11/site-packages/ansible 2025-09-09 21:03:05.209715 | centos-9-stream | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib64/python3.11/site-packages:/home/zuul/venv/lib/python3.11/site-packages 2025-09-09 21:03:05.210131 | centos-9-stream | executable location = /home/zuul/venv/bin/ansible-galaxy 2025-09-09 21:03:05.210467 | centos-9-stream | python version = 3.11.13 (main, Aug 21 2025, 00:00:00) [GCC 11.5.0 20240719 (Red Hat 11.5.0-11)] (/home/zuul/venv/bin/python3.11) 2025-09-09 21:03:05.210856 | centos-9-stream | jinja version = 3.1.6 2025-09-09 21:03:05.211142 | centos-9-stream | libyaml = True 2025-09-09 21:03:05.211420 | centos-9-stream | No config file found; using defaults 2025-09-09 21:03:05.211973 | centos-9-stream | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2025-09-09 21:03:05.217976 | centos-9-stream | Loading collection infinidat.infinibox from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/infinidat/infinibox 2025-09-09 21:03:05.218598 | centos-9-stream | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2025-09-09 21:03:05.219349 | centos-9-stream | Loading collection community.okd from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/okd 2025-09-09 21:03:05.219940 | centos-9-stream | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/okd' 2025-09-09 21:03:05.220507 | centos-9-stream | Loading collection community.crypto from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/crypto 2025-09-09 21:03:05.221028 | centos-9-stream | Found installed collection community.crypto:2.26.5 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/crypto' 2025-09-09 21:03:05.221519 | centos-9-stream | Loading collection netapp.storagegrid from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/storagegrid 2025-09-09 21:03:05.221974 | centos-9-stream | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2025-09-09 21:03:05.222269 | centos-9-stream | Loading collection fortinet.fortimanager from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2025-09-09 21:03:05.222851 | centos-9-stream | Found installed collection fortinet.fortimanager:2.10.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2025-09-09 21:03:05.224531 | centos-9-stream | Loading collection community.vmware from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/vmware 2025-09-09 21:03:05.225033 | centos-9-stream | Found installed collection community.vmware:5.8.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/vmware' 2025-09-09 21:03:05.225404 | centos-9-stream | Loading collection kaytus.ksmanage from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2025-09-09 21:03:05.225903 | centos-9-stream | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2025-09-09 21:03:05.227302 | centos-9-stream | Loading collection amazon.aws from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/amazon/aws 2025-09-09 21:03:05.227845 | centos-9-stream | Found installed collection amazon.aws:9.5.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/amazon/aws' 2025-09-09 21:03:05.228523 | centos-9-stream | Loading collection ibm.qradar from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/qradar 2025-09-09 21:03:05.228988 | centos-9-stream | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/qradar' 2025-09-09 21:03:05.229870 | centos-9-stream | Loading collection netbox.netbox from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netbox/netbox 2025-09-09 21:03:05.230295 | centos-9-stream | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netbox/netbox' 2025-09-09 21:03:05.230728 | centos-9-stream | Loading collection community.zabbix from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/zabbix 2025-09-09 21:03:05.231175 | centos-9-stream | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/zabbix' 2025-09-09 21:03:05.233263 | centos-9-stream | Loading collection cisco.meraki from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/meraki 2025-09-09 21:03:05.233787 | centos-9-stream | Found installed collection cisco.meraki:2.21.4 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/meraki' 2025-09-09 21:03:05.234168 | centos-9-stream | Loading collection infoblox.nios_modules from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2025-09-09 21:03:05.234634 | centos-9-stream | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2025-09-09 21:03:05.235165 | centos-9-stream | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2025-09-09 21:03:05.235591 | centos-9-stream | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2025-09-09 21:03:05.236086 | centos-9-stream | Loading collection wti.remote from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/wti/remote 2025-09-09 21:03:05.236500 | centos-9-stream | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/wti/remote' 2025-09-09 21:03:05.237562 | centos-9-stream | Loading collection netapp.ontap from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/ontap 2025-09-09 21:03:05.237961 | centos-9-stream | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/ontap' 2025-09-09 21:03:05.238363 | centos-9-stream | Loading collection community.dns from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/dns 2025-09-09 21:03:05.238822 | centos-9-stream | Found installed collection community.dns:3.3.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/dns' 2025-09-09 21:03:05.239138 | centos-9-stream | Loading collection community.mysql from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/mysql 2025-09-09 21:03:05.239585 | centos-9-stream | Found installed collection community.mysql:3.15.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/mysql' 2025-09-09 21:03:05.239858 | centos-9-stream | Loading collection cyberark.conjur from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cyberark/conjur 2025-09-09 21:03:05.240350 | centos-9-stream | Found installed collection cyberark.conjur:1.3.7 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cyberark/conjur' 2025-09-09 21:03:05.240621 | centos-9-stream | Loading collection ansible.utils from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/utils 2025-09-09 21:03:05.241044 | centos-9-stream | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/utils' 2025-09-09 21:03:05.241501 | centos-9-stream | Loading collection vultr.cloud from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vultr/cloud 2025-09-09 21:03:05.241909 | centos-9-stream | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vultr/cloud' 2025-09-09 21:03:05.245595 | centos-9-stream | Loading collection community.aws from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/aws 2025-09-09 21:03:05.246073 | centos-9-stream | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/aws' 2025-09-09 21:03:05.247155 | centos-9-stream | Loading collection ansible.netcommon from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/netcommon 2025-09-09 21:03:05.247618 | centos-9-stream | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/netcommon' 2025-09-09 21:03:05.250774 | centos-9-stream | Loading collection vmware.vmware_rest from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2025-09-09 21:03:05.251262 | centos-9-stream | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2025-09-09 21:03:05.251903 | centos-9-stream | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2025-09-09 21:03:05.252481 | centos-9-stream | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2025-09-09 21:03:05.252758 | centos-9-stream | Loading collection containers.podman from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/containers/podman 2025-09-09 21:03:05.253233 | centos-9-stream | Found installed collection containers.podman:1.17.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/containers/podman' 2025-09-09 21:03:05.253509 | centos-9-stream | Loading collection community.ciscosmb from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/ciscosmb 2025-09-09 21:03:05.253919 | centos-9-stream | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/ciscosmb' 2025-09-09 21:03:05.254263 | centos-9-stream | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2025-09-09 21:03:05.254695 | centos-9-stream | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2025-09-09 21:03:05.255489 | centos-9-stream | Loading collection dellemc.openmanage from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/openmanage 2025-09-09 21:03:05.255933 | centos-9-stream | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2025-09-09 21:03:05.256161 | centos-9-stream | Loading collection cyberark.pas from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cyberark/pas 2025-09-09 21:03:05.256577 | centos-9-stream | Found installed collection cyberark.pas:1.0.35 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cyberark/pas' 2025-09-09 21:03:05.256827 | centos-9-stream | Loading collection community.proxysql from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/proxysql 2025-09-09 21:03:05.257230 | centos-9-stream | Found installed collection community.proxysql:1.6.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/proxysql' 2025-09-09 21:03:05.258784 | centos-9-stream | Loading collection cisco.mso from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/mso 2025-09-09 21:03:05.259255 | centos-9-stream | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/mso' 2025-09-09 21:03:05.260016 | centos-9-stream | Loading collection kubernetes.core from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kubernetes/core 2025-09-09 21:03:05.260474 | centos-9-stream | Found installed collection kubernetes.core:5.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kubernetes/core' 2025-09-09 21:03:05.260971 | centos-9-stream | Loading collection vmware.vmware from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vmware/vmware 2025-09-09 21:03:05.261351 | centos-9-stream | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vmware/vmware' 2025-09-09 21:03:05.262085 | centos-9-stream | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2025-09-09 21:03:05.262525 | centos-9-stream | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2025-09-09 21:03:05.262881 | centos-9-stream | Loading collection sensu.sensu_go from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/sensu/sensu_go 2025-09-09 21:03:05.263308 | centos-9-stream | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/sensu/sensu_go' 2025-09-09 21:03:05.263709 | centos-9-stream | Loading collection community.grafana from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/grafana 2025-09-09 21:03:05.264152 | centos-9-stream | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/grafana' 2025-09-09 21:03:05.264546 | centos-9-stream | Loading collection community.sap_libs from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/sap_libs 2025-09-09 21:03:05.264999 | centos-9-stream | Found installed collection community.sap_libs:1.4.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/sap_libs' 2025-09-09 21:03:05.265904 | centos-9-stream | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2025-09-09 21:03:05.266298 | centos-9-stream | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2025-09-09 21:03:05.266671 | centos-9-stream | Loading collection cisco.asa from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/asa 2025-09-09 21:03:05.267103 | centos-9-stream | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/asa' 2025-09-09 21:03:05.267551 | centos-9-stream | Loading collection community.postgresql from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/postgresql 2025-09-09 21:03:05.267970 | centos-9-stream | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/postgresql' 2025-09-09 21:03:05.268166 | centos-9-stream | Loading collection community.sops from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/sops 2025-09-09 21:03:05.268638 | centos-9-stream | Found installed collection community.sops:2.2.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/sops' 2025-09-09 21:03:05.269642 | centos-9-stream | Loading collection vyos.vyos from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vyos/vyos 2025-09-09 21:03:05.270102 | centos-9-stream | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vyos/vyos' 2025-09-09 21:03:05.271783 | centos-9-stream | Loading collection theforeman.foreman from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/theforeman/foreman 2025-09-09 21:03:05.272250 | centos-9-stream | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/theforeman/foreman' 2025-09-09 21:03:05.272609 | centos-9-stream | Loading collection community.rabbitmq from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/rabbitmq 2025-09-09 21:03:05.273078 | centos-9-stream | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/rabbitmq' 2025-09-09 21:03:05.273599 | centos-9-stream | Loading collection community.windows from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/windows 2025-09-09 21:03:05.274046 | centos-9-stream | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/windows' 2025-09-09 21:03:05.274408 | centos-9-stream | Loading collection community.hashi_vault from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/hashi_vault 2025-09-09 21:03:05.274951 | centos-9-stream | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/hashi_vault' 2025-09-09 21:03:05.276037 | centos-9-stream | Loading collection arista.eos from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/arista/eos 2025-09-09 21:03:05.276506 | centos-9-stream | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/arista/eos' 2025-09-09 21:03:05.277296 | centos-9-stream | Loading collection check_point.mgmt from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/check_point/mgmt 2025-09-09 21:03:05.277536 | centos-9-stream | Found installed collection check_point.mgmt:6.5.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/check_point/mgmt' 2025-09-09 21:03:05.277922 | centos-9-stream | Loading collection community.proxmox from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/proxmox 2025-09-09 21:03:05.278327 | centos-9-stream | Found installed collection community.proxmox:1.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/proxmox' 2025-09-09 21:03:05.279306 | centos-9-stream | Loading collection cisco.ios from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ios 2025-09-09 21:03:05.279800 | centos-9-stream | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ios' 2025-09-09 21:03:05.280173 | centos-9-stream | Loading collection microsoft.ad from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/microsoft/ad 2025-09-09 21:03:05.280583 | centos-9-stream | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/microsoft/ad' 2025-09-09 21:03:05.280921 | centos-9-stream | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2025-09-09 21:03:05.281311 | centos-9-stream | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2025-09-09 21:03:05.282064 | centos-9-stream | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2025-09-09 21:03:05.282493 | centos-9-stream | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2025-09-09 21:03:05.284714 | centos-9-stream | Loading collection cisco.nxos from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/nxos 2025-09-09 21:03:05.285178 | centos-9-stream | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/nxos' 2025-09-09 21:03:05.285660 | centos-9-stream | Loading collection community.docker from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/docker 2025-09-09 21:03:05.286378 | centos-9-stream | Found installed collection community.docker:4.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/docker' 2025-09-09 21:03:05.287942 | centos-9-stream | Loading collection cisco.aci from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/aci 2025-09-09 21:03:05.288469 | centos-9-stream | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/aci' 2025-09-09 21:03:05.288725 | centos-9-stream | Loading collection cloud.common from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cloud/common 2025-09-09 21:03:05.289155 | centos-9-stream | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cloud/common' 2025-09-09 21:03:05.289479 | centos-9-stream | Loading collection inspur.ispim from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/inspur/ispim 2025-09-09 21:03:05.289920 | centos-9-stream | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/inspur/ispim' 2025-09-09 21:03:05.290198 | centos-9-stream | Loading collection cisco.dnac from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/dnac 2025-09-09 21:03:05.290619 | centos-9-stream | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/dnac' 2025-09-09 21:03:05.290946 | centos-9-stream | Loading collection purestorage.flashblade from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/purestorage/flashblade 2025-09-09 21:03:05.291369 | centos-9-stream | Found installed collection purestorage.flashblade:1.21.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2025-09-09 21:03:05.291567 | centos-9-stream | Loading collection microsoft.iis from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/microsoft/iis 2025-09-09 21:03:05.292065 | centos-9-stream | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/microsoft/iis' 2025-09-09 21:03:05.292224 | centos-9-stream | Loading collection cisco.ucs from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ucs 2025-09-09 21:03:05.292726 | centos-9-stream | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ucs' 2025-09-09 21:03:05.293873 | centos-9-stream | Loading collection hetzner.hcloud from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hetzner/hcloud 2025-09-09 21:03:05.294293 | centos-9-stream | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2025-09-09 21:03:05.295195 | centos-9-stream | Loading collection cisco.iosxr from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/iosxr 2025-09-09 21:03:05.295626 | centos-9-stream | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/iosxr' 2025-09-09 21:03:05.296466 | centos-9-stream | Loading collection dellemc.unity from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/unity 2025-09-09 21:03:05.296918 | centos-9-stream | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/unity' 2025-09-09 21:03:05.297147 | centos-9-stream | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize 2025-09-09 21:03:05.297553 | centos-9-stream | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize' 2025-09-09 21:03:05.297907 | centos-9-stream | Loading collection ravendb.ravendb from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ravendb/ravendb 2025-09-09 21:03:05.298284 | centos-9-stream | Found installed collection ravendb.ravendb:1.0.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ravendb/ravendb' 2025-09-09 21:03:05.298541 | centos-9-stream | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2025-09-09 21:03:05.299017 | centos-9-stream | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2025-09-09 21:03:05.299268 | centos-9-stream | Loading collection cisco.intersight from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/intersight 2025-09-09 21:03:05.299695 | centos-9-stream | Found installed collection cisco.intersight:2.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/intersight' 2025-09-09 21:03:05.299984 | centos-9-stream | Loading collection community.libvirt from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/libvirt 2025-09-09 21:03:05.300398 | centos-9-stream | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/libvirt' 2025-09-09 21:03:05.300883 | centos-9-stream | Loading collection f5networks.f5_modules from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2025-09-09 21:03:05.301483 | centos-9-stream | Found installed collection f5networks.f5_modules:1.38.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2025-09-09 21:03:05.301688 | centos-9-stream | Loading collection ieisystem.inmanage from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2025-09-09 21:03:05.302066 | centos-9-stream | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2025-09-09 21:03:05.302373 | centos-9-stream | Loading collection purestorage.flasharray from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/purestorage/flasharray 2025-09-09 21:03:05.302858 | centos-9-stream | Found installed collection purestorage.flasharray:1.36.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2025-09-09 21:03:05.303194 | centos-9-stream | Loading collection kubevirt.core from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kubevirt/core 2025-09-09 21:03:05.303654 | centos-9-stream | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kubevirt/core' 2025-09-09 21:03:05.303937 | centos-9-stream | Loading collection cisco.ise from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ise 2025-09-09 21:03:05.304329 | centos-9-stream | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ise' 2025-09-09 21:03:05.305194 | centos-9-stream | Loading collection openstack.cloud from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/openstack/cloud 2025-09-09 21:03:05.305651 | centos-9-stream | Found installed collection openstack.cloud:2.4.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/openstack/cloud' 2025-09-09 21:03:05.306032 | centos-9-stream | Loading collection netapp.cloudmanager from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2025-09-09 21:03:05.306433 | centos-9-stream | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2025-09-09 21:03:05.307641 | centos-9-stream | Loading collection junipernetworks.junos from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/junipernetworks/junos 2025-09-09 21:03:05.308117 | centos-9-stream | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2025-09-09 21:03:05.308443 | centos-9-stream | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2025-09-09 21:03:05.308922 | centos-9-stream | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2025-09-09 21:03:05.347394 | centos-9-stream | Loading collection community.network from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/network 2025-09-09 21:03:05.348243 | centos-9-stream | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/network' 2025-09-09 21:03:05.348848 | centos-9-stream | Loading collection dellemc.powerflex from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/powerflex 2025-09-09 21:03:05.349230 | centos-9-stream | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2025-09-09 21:03:05.349968 | centos-9-stream | Loading collection community.routeros from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/routeros 2025-09-09 21:03:05.350734 | centos-9-stream | Found installed collection community.routeros:3.10.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/routeros' 2025-09-09 21:03:05.351730 | centos-9-stream | Loading collection community.digitalocean from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/digitalocean 2025-09-09 21:03:05.352501 | centos-9-stream | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/digitalocean' 2025-09-09 21:03:05.360626 | centos-9-stream | Loading collection community.general from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/general 2025-09-09 21:03:05.361251 | centos-9-stream | Found installed collection community.general:10.7.4 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/general' 2025-09-09 21:03:05.361664 | centos-9-stream | Loading collection community.mongodb from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/mongodb 2025-09-09 21:03:05.362171 | centos-9-stream | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/mongodb' 2025-09-09 21:03:05.362568 | centos-9-stream | Loading collection grafana.grafana from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/grafana/grafana 2025-09-09 21:03:05.362988 | centos-9-stream | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/grafana/grafana' 2025-09-09 21:03:05.363429 | centos-9-stream | Loading collection google.cloud from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/google/cloud 2025-09-09 21:03:05.363794 | centos-9-stream | Found installed collection google.cloud:1.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/google/cloud' 2025-09-09 21:03:05.364157 | centos-9-stream | Loading collection fortinet.fortios from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/fortinet/fortios 2025-09-09 21:03:05.364433 | centos-9-stream | Found installed collection fortinet.fortios:2.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/fortinet/fortios' 2025-09-09 21:03:05.364801 | centos-9-stream | Loading collection ansible.posix from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/posix 2025-09-09 21:03:05.365186 | centos-9-stream | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/posix' 2025-09-09 21:03:05.366898 | centos-9-stream | Loading collection awx.awx from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/awx/awx 2025-09-09 21:03:05.367218 | centos-9-stream | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/awx/awx' 2025-09-09 21:03:05.369227 | centos-9-stream | Loading collection azure.azcollection from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/azure/azcollection 2025-09-09 21:03:05.369581 | centos-9-stream | Found installed collection azure.azcollection:3.8.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/azure/azcollection' 2025-09-09 21:03:05.370261 | centos-9-stream | Loading collection ovirt.ovirt from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ovirt/ovirt 2025-09-09 21:03:05.370609 | centos-9-stream | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2025-09-09 21:03:05.371272 | centos-9-stream | Loading collection splunk.es from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/splunk/es 2025-09-09 21:03:05.371627 | centos-9-stream | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/splunk/es' 2025-09-09 21:03:05.371955 | centos-9-stream | Loading collection ansible.windows from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/windows 2025-09-09 21:03:05.372305 | centos-9-stream | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/windows' 2025-09-09 21:03:05.372633 | centos-9-stream | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2025-09-09 21:03:05.372988 | centos-9-stream | Found installed collection community.library_inventory_filtering_v1:1.1.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2025-09-09 21:03:05.373288 | centos-9-stream | Loading collection community.hrobot from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/hrobot 2025-09-09 21:03:05.373620 | centos-9-stream | Found installed collection community.hrobot:2.5.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/hrobot' 2025-09-09 21:03:05.381674 | centos-9-stream | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2025-09-09 21:03:05.382015 | centos-9-stream | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2025-09-09 21:03:05.382289 | centos-9-stream | Loading collection osism.commons from /home/zuul/.ansible/collections/ansible_collections/osism/commons 2025-09-09 21:03:05.384058 | centos-9-stream | Found installed collection osism.commons:0.20250824.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2025-09-09 21:03:05.393080 | centos-9-stream | Found installed collection community.proxysql:1.6.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/proxysql' 2025-09-09 21:03:05.393587 | centos-9-stream | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2025-09-09 21:03:05.393946 | centos-9-stream | Found installed collection purestorage.flashblade:1.21.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2025-09-09 21:03:05.394282 | centos-9-stream | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cloud/common' 2025-09-09 21:03:05.394616 | centos-9-stream | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2025-09-09 21:03:05.395052 | centos-9-stream | Found installed collection cyberark.pas:1.0.35 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cyberark/pas' 2025-09-09 21:03:05.395360 | centos-9-stream | Found installed collection fortinet.fortimanager:2.10.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2025-09-09 21:03:05.395700 | centos-9-stream | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netbox/netbox' 2025-09-09 21:03:05.396040 | centos-9-stream | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/grafana' 2025-09-09 21:03:05.396339 | centos-9-stream | Found installed collection community.sap_libs:1.4.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/sap_libs' 2025-09-09 21:03:05.396665 | centos-9-stream | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/postgresql' 2025-09-09 21:03:05.396999 | centos-9-stream | Found installed collection community.sops:2.2.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/sops' 2025-09-09 21:03:05.397306 | centos-9-stream | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2025-09-09 21:03:05.397667 | centos-9-stream | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/rabbitmq' 2025-09-09 21:03:05.398010 | centos-9-stream | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/wti/remote' 2025-09-09 21:03:05.398316 | centos-9-stream | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/windows' 2025-09-09 21:03:05.398833 | centos-9-stream | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/hashi_vault' 2025-09-09 21:03:05.399156 | centos-9-stream | Found installed collection community.proxmox:1.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/proxmox' 2025-09-09 21:03:05.399434 | centos-9-stream | Found installed collection f5networks.f5_modules:1.38.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2025-09-09 21:03:05.399736 | centos-9-stream | Found installed collection openstack.cloud:2.4.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/openstack/cloud' 2025-09-09 21:03:05.400181 | centos-9-stream | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2025-09-09 21:03:05.400562 | centos-9-stream | Found installed collection community.docker:4.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/docker' 2025-09-09 21:03:05.400846 | centos-9-stream | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2025-09-09 21:03:05.401096 | centos-9-stream | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ios' 2025-09-09 21:03:05.401329 | centos-9-stream | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2025-09-09 21:03:05.401585 | centos-9-stream | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/digitalocean' 2025-09-09 21:03:05.401836 | centos-9-stream | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/microsoft/ad' 2025-09-09 21:03:05.402090 | centos-9-stream | Found installed collection community.general:10.7.4 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/general' 2025-09-09 21:03:05.402316 | centos-9-stream | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2025-09-09 21:03:05.402564 | centos-9-stream | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2025-09-09 21:03:05.402853 | centos-9-stream | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/nxos' 2025-09-09 21:03:05.403079 | centos-9-stream | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/aci' 2025-09-09 21:03:05.403320 | centos-9-stream | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize' 2025-09-09 21:03:05.403624 | centos-9-stream | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/dnac' 2025-09-09 21:03:05.403874 | centos-9-stream | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/mso' 2025-09-09 21:03:05.404094 | centos-9-stream | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vmware/vmware' 2025-09-09 21:03:05.404308 | centos-9-stream | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ucs' 2025-09-09 21:03:05.404553 | centos-9-stream | Found installed collection google.cloud:1.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/google/cloud' 2025-09-09 21:03:05.404829 | centos-9-stream | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2025-09-09 21:03:05.405058 | centos-9-stream | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2025-09-09 21:03:05.405275 | centos-9-stream | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/iosxr' 2025-09-09 21:03:05.405493 | centos-9-stream | Found installed collection ravendb.ravendb:1.0.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ravendb/ravendb' 2025-09-09 21:03:05.405695 | centos-9-stream | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/unity' 2025-09-09 21:03:05.405968 | centos-9-stream | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2025-09-09 21:03:05.406238 | centos-9-stream | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/libvirt' 2025-09-09 21:03:05.406443 | centos-9-stream | Found installed collection purestorage.flasharray:1.36.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2025-09-09 21:03:05.406770 | centos-9-stream | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2025-09-09 21:03:05.407065 | centos-9-stream | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/asa' 2025-09-09 21:03:05.407280 | centos-9-stream | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/arista/eos' 2025-09-09 21:03:05.407495 | centos-9-stream | Found installed collection check_point.mgmt:6.5.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/check_point/mgmt' 2025-09-09 21:03:05.407691 | centos-9-stream | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vyos/vyos' 2025-09-09 21:03:05.407922 | centos-9-stream | Found installed collection cisco.intersight:2.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/intersight' 2025-09-09 21:03:05.408136 | centos-9-stream | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2025-09-09 21:03:05.408332 | centos-9-stream | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2025-09-09 21:03:05.408627 | centos-9-stream | Found installed collection community.vmware:5.8.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/vmware' 2025-09-09 21:03:05.408927 | centos-9-stream | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kubevirt/core' 2025-09-09 21:03:05.409152 | centos-9-stream | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ise' 2025-09-09 21:03:05.409352 | centos-9-stream | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/network' 2025-09-09 21:03:05.409583 | centos-9-stream | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2025-09-09 21:03:05.409863 | centos-9-stream | Found installed collection community.routeros:3.10.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/routeros' 2025-09-09 21:03:05.410090 | centos-9-stream | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2025-09-09 21:03:05.410268 | centos-9-stream | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2025-09-09 21:03:05.410435 | centos-9-stream | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/mongodb' 2025-09-09 21:03:05.410634 | centos-9-stream | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2025-09-09 21:03:05.410888 | centos-9-stream | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/inspur/ispim' 2025-09-09 21:03:05.411080 | centos-9-stream | Found installed collection amazon.aws:9.5.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/amazon/aws' 2025-09-09 21:03:05.411248 | centos-9-stream | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/posix' 2025-09-09 21:03:05.411411 | centos-9-stream | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/microsoft/iis' 2025-09-09 21:03:05.411596 | centos-9-stream | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2025-09-09 21:03:05.411783 | centos-9-stream | Found installed collection azure.azcollection:3.8.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/azure/azcollection' 2025-09-09 21:03:05.411955 | centos-9-stream | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/grafana/grafana' 2025-09-09 21:03:05.412114 | centos-9-stream | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/ontap' 2025-09-09 21:03:05.412275 | centos-9-stream | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vultr/cloud' 2025-09-09 21:03:05.412450 | centos-9-stream | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/windows' 2025-09-09 21:03:05.412644 | centos-9-stream | Found installed collection community.library_inventory_filtering_v1:1.1.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2025-09-09 21:03:05.412864 | centos-9-stream | Found installed collection community.hrobot:2.5.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/hrobot' 2025-09-09 21:03:05.413051 | centos-9-stream | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2025-09-09 21:03:05.413209 | centos-9-stream | Found installed collection containers.podman:1.17.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/containers/podman' 2025-09-09 21:03:05.413363 | centos-9-stream | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/okd' 2025-09-09 21:03:05.413539 | centos-9-stream | Found installed collection community.crypto:2.26.5 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/crypto' 2025-09-09 21:03:05.413700 | centos-9-stream | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/splunk/es' 2025-09-09 21:03:05.413878 | centos-9-stream | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/qradar' 2025-09-09 21:03:05.414036 | centos-9-stream | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/zabbix' 2025-09-09 21:03:05.414194 | centos-9-stream | Found installed collection kubernetes.core:5.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kubernetes/core' 2025-09-09 21:03:05.414348 | centos-9-stream | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2025-09-09 21:03:05.414520 | centos-9-stream | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/sensu/sensu_go' 2025-09-09 21:03:05.414685 | centos-9-stream | Found installed collection cisco.meraki:2.21.4 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/meraki' 2025-09-09 21:03:05.414857 | centos-9-stream | Found installed collection community.dns:3.3.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/dns' 2025-09-09 21:03:05.415014 | centos-9-stream | Found installed collection community.mysql:3.15.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/mysql' 2025-09-09 21:03:05.415165 | centos-9-stream | Found installed collection fortinet.fortios:2.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/fortinet/fortios' 2025-09-09 21:03:05.415318 | centos-9-stream | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/awx/awx' 2025-09-09 21:03:05.415490 | centos-9-stream | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/utils' 2025-09-09 21:03:05.415650 | centos-9-stream | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/theforeman/foreman' 2025-09-09 21:03:05.415857 | centos-9-stream | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/aws' 2025-09-09 21:03:05.416043 | centos-9-stream | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/netcommon' 2025-09-09 21:03:05.416196 | centos-9-stream | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/ciscosmb' 2025-09-09 21:03:05.416338 | centos-9-stream | Found installed collection cyberark.conjur:1.3.7 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cyberark/conjur' 2025-09-09 21:03:05.416597 | centos-9-stream | Starting galaxy collection install process 2025-09-09 21:03:05.416775 | centos-9-stream | Nothing to do. All requested collections are already installed. If you want to reinstall them, consider using `--force`. 2025-09-09 21:03:05.480803 | centos-9-stream | INFO [delegated > dependency] Dependency completed successfully. 2025-09-09 21:03:05.481015 | centos-9-stream | INFO [delegated > dependency] Completed 2025-09-09 21:03:05.494111 | centos-9-stream | INFO [delegated > create] Starting 2025-09-09 21:03:05.495903 | centos-9-stream | WARNING [delegated > create] Skipping, create action has no playbook. 2025-09-09 21:03:05.496899 | centos-9-stream | INFO [delegated > create] Completed 2025-09-09 21:03:05.505524 | centos-9-stream | INFO [delegated > prepare] Starting 2025-09-09 21:03:05.505627 | centos-9-stream | WARNING [delegated > prepare] Skipping, instances already prepared. 2025-09-09 21:03:05.505680 | centos-9-stream | INFO [delegated > prepare] Completed 2025-09-09 21:03:05.513677 | centos-9-stream | INFO [delegated > converge] Starting 2025-09-09 21:03:05.419348 | ubuntu-jammy | INFO [delegated > converge] ansible-playbook version: ansible-playbook 2025-09-09 21:03:05.419415 | ubuntu-jammy | config file = None 2025-09-09 21:03:05.419445 | ubuntu-jammy | configured module search path = 2025-09-09 21:03:05.419453 | ubuntu-jammy | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2025-09-09 21:03:05.419460 | ubuntu-jammy | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2025-09-09 21:03:05.419465 | ubuntu-jammy | executable location = /home/zuul/venv/bin/ansible-playbook 2025-09-09 21:03:05.419470 | ubuntu-jammy | python version = 3.11.0rc1 (main, Aug 12 2022, 10:02:14) (/home/zuul/venv/bin/python3.11) 2025-09-09 21:03:05.419475 | ubuntu-jammy | jinja version = 3.1.6 2025-09-09 21:03:05.419480 | ubuntu-jammy | libyaml = True 2025-09-09 21:03:05.426864 | ubuntu-jammy | DEBUG: ANSIBLE ENVIRONMENT: 2025-09-09 21:03:05.426880 | ubuntu-jammy | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2025-09-09 21:03:05.426886 | ubuntu-jammy | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2025-09-09 21:03:05.426892 | ubuntu-jammy | ANSIBLE_LIBRARY: ../../plugins 2025-09-09 21:03:05.426897 | ubuntu-jammy | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2025-09-09 21:03:05.426902 | ubuntu-jammy | ANSIBLE_ROLE: auditd 2025-09-09 21:03:05.426906 | ubuntu-jammy | ANSIBLE_ROLES_PATH: ../../roles 2025-09-09 21:03:05.426911 | ubuntu-jammy | ANSIBLE_VERBOSITY: '1' 2025-09-09 21:03:05.426916 | ubuntu-jammy | 2025-09-09 21:03:05.432458 | ubuntu-jammy | DEBUG: MOLECULE ENVIRONMENT: 2025-09-09 21:03:05.432524 | ubuntu-jammy | MOLECULE_DEBUG: 'True' 2025-09-09 21:03:05.432533 | ubuntu-jammy | MOLECULE_DEPENDENCY_NAME: galaxy 2025-09-09 21:03:05.432542 | ubuntu-jammy | MOLECULE_DRIVER_NAME: default 2025-09-09 21:03:05.432549 | ubuntu-jammy | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2025-09-09 21:03:05.432557 | ubuntu-jammy | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2025-09-09 21:03:05.432565 | ubuntu-jammy | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2025-09-09 21:03:05.432572 | ubuntu-jammy | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2025-09-09 21:03:05.432578 | ubuntu-jammy | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2025-09-09 21:03:05.432585 | ubuntu-jammy | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2025-09-09 21:03:05.432592 | ubuntu-jammy | MOLECULE_PROVISIONER_NAME: ansible 2025-09-09 21:03:05.432599 | ubuntu-jammy | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2025-09-09 21:03:05.432623 | ubuntu-jammy | MOLECULE_SCENARIO_NAME: delegated 2025-09-09 21:03:05.432631 | ubuntu-jammy | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2025-09-09 21:03:05.432637 | ubuntu-jammy | MOLECULE_VERIFIER_NAME: testinfra 2025-09-09 21:03:05.432644 | ubuntu-jammy | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-09 21:03:05.432651 | ubuntu-jammy | 2025-09-09 21:03:05.435700 | ubuntu-jammy | DEBUG: SHELL REPLAY: 2025-09-09 21:03:05.435722 | ubuntu-jammy | ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-09 21:03:05.547498 | ubuntu-noble | INFO [delegated > dependency] Dependency completed successfully. 2025-09-09 21:03:05.549862 | ubuntu-noble | INFO [delegated > dependency] Completed 2025-09-09 21:03:05.563561 | ubuntu-noble | INFO [delegated > create] Starting 2025-09-09 21:03:05.565210 | ubuntu-noble | WARNING [delegated > create] Skipping, create action has no playbook. 2025-09-09 21:03:05.566169 | ubuntu-noble | INFO [delegated > create] Completed 2025-09-09 21:03:05.576039 | ubuntu-noble | INFO [delegated > prepare] Starting 2025-09-09 21:03:05.576069 | ubuntu-noble | WARNING [delegated > prepare] Skipping, instances already prepared. 2025-09-09 21:03:05.576143 | ubuntu-noble | INFO [delegated > prepare] Completed 2025-09-09 21:03:05.584300 | ubuntu-noble | INFO [delegated > converge] Starting 2025-09-09 21:03:05.953388 | ubuntu-noble | INFO [delegated > converge] ansible-playbook version: ansible-playbook 2025-09-09 21:03:05.953449 | ubuntu-noble | config file = None 2025-09-09 21:03:05.953456 | ubuntu-noble | configured module search path = 2025-09-09 21:03:05.953460 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2025-09-09 21:03:05.953465 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2025-09-09 21:03:05.953468 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-playbook 2025-09-09 21:03:05.953473 | ubuntu-noble | python version = 3.12.3 (main, Aug 14 2025, 17:47:21) (/home/zuul/venv/bin/python3) 2025-09-09 21:03:05.953476 | ubuntu-noble | jinja version = 3.1.6 2025-09-09 21:03:05.953480 | ubuntu-noble | libyaml = True 2025-09-09 21:03:05.966005 | ubuntu-noble | DEBUG: ANSIBLE ENVIRONMENT: 2025-09-09 21:03:05.966100 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2025-09-09 21:03:05.966117 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2025-09-09 21:03:05.966129 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2025-09-09 21:03:05.966139 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2025-09-09 21:03:05.966149 | ubuntu-noble | ANSIBLE_ROLE: auditd 2025-09-09 21:03:05.966160 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2025-09-09 21:03:05.966169 | ubuntu-noble | ANSIBLE_VERBOSITY: '1' 2025-09-09 21:03:05.966181 | ubuntu-noble | 2025-09-09 21:03:05.970887 | ubuntu-noble | DEBUG: MOLECULE ENVIRONMENT: 2025-09-09 21:03:05.970957 | ubuntu-noble | MOLECULE_DEBUG: 'True' 2025-09-09 21:03:05.970974 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2025-09-09 21:03:05.970988 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2025-09-09 21:03:05.971000 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2025-09-09 21:03:05.971011 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2025-09-09 21:03:05.971022 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2025-09-09 21:03:05.971032 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2025-09-09 21:03:05.971042 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2025-09-09 21:03:05.971052 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2025-09-09 21:03:05.971062 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2025-09-09 21:03:05.971072 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2025-09-09 21:03:05.971111 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2025-09-09 21:03:05.971121 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2025-09-09 21:03:05.971131 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2025-09-09 21:03:05.971140 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-09 21:03:05.971152 | ubuntu-noble | 2025-09-09 21:03:05.974562 | ubuntu-noble | DEBUG: SHELL REPLAY: 2025-09-09 21:03:05.974637 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-09 21:03:05.688212 | debian-bookworm | INFO [delegated > converge] ansible-playbook version: ansible-playbook 2025-09-09 21:03:05.688333 | debian-bookworm | config file = None 2025-09-09 21:03:05.688368 | debian-bookworm | configured module search path = 2025-09-09 21:03:05.688374 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2025-09-09 21:03:05.688381 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2025-09-09 21:03:05.688386 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-playbook 2025-09-09 21:03:05.688390 | debian-bookworm | python version = 3.11.2 (main, Apr 28 2025, 14:11:48) (/home/zuul/venv/bin/python3) 2025-09-09 21:03:05.688395 | debian-bookworm | jinja version = 3.1.6 2025-09-09 21:03:05.688400 | debian-bookworm | libyaml = True 2025-09-09 21:03:05.697675 | debian-bookworm | DEBUG: ANSIBLE ENVIRONMENT: 2025-09-09 21:03:05.697688 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2025-09-09 21:03:05.697693 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2025-09-09 21:03:05.697698 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2025-09-09 21:03:05.697704 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2025-09-09 21:03:05.697726 | debian-bookworm | ANSIBLE_ROLE: auditd 2025-09-09 21:03:05.697731 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2025-09-09 21:03:05.697735 | debian-bookworm | ANSIBLE_VERBOSITY: '1' 2025-09-09 21:03:05.697739 | debian-bookworm | 2025-09-09 21:03:05.702208 | debian-bookworm | DEBUG: MOLECULE ENVIRONMENT: 2025-09-09 21:03:05.702219 | debian-bookworm | MOLECULE_DEBUG: 'True' 2025-09-09 21:03:05.702224 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2025-09-09 21:03:05.702229 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2025-09-09 21:03:05.702234 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2025-09-09 21:03:05.702240 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2025-09-09 21:03:05.702244 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2025-09-09 21:03:05.702249 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2025-09-09 21:03:05.702253 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2025-09-09 21:03:05.702262 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2025-09-09 21:03:05.702266 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2025-09-09 21:03:05.702270 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2025-09-09 21:03:05.702289 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2025-09-09 21:03:05.702293 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2025-09-09 21:03:05.702297 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2025-09-09 21:03:05.702301 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-09 21:03:05.702305 | debian-bookworm | 2025-09-09 21:03:05.705196 | debian-bookworm | DEBUG: SHELL REPLAY: 2025-09-09 21:03:05.705209 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-09 21:03:05.984195 | debian-bookworm | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2025-09-09 21:03:05.872553 | centos-9-stream | INFO [delegated > converge] ansible-playbook version: ansible-playbook 2025-09-09 21:03:05.872622 | centos-9-stream | config file = None 2025-09-09 21:03:05.872631 | centos-9-stream | configured module search path = 2025-09-09 21:03:05.872637 | centos-9-stream | ansible python module location = /home/zuul/venv/lib64/python3.11/site-packages/ansible 2025-09-09 21:03:05.872643 | centos-9-stream | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2025-09-09 21:03:05.872649 | centos-9-stream | executable location = /home/zuul/venv/bin/ansible-playbook 2025-09-09 21:03:05.872655 | centos-9-stream | python version = 3.11.13 (main, Aug 21 2025, 00:00:00) (/home/zuul/venv/bin/python3.11) 2025-09-09 21:03:05.872659 | centos-9-stream | jinja version = 3.1.6 2025-09-09 21:03:05.872664 | centos-9-stream | libyaml = True 2025-09-09 21:03:05.882980 | centos-9-stream | DEBUG: ANSIBLE ENVIRONMENT: 2025-09-09 21:03:05.883007 | centos-9-stream | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2025-09-09 21:03:05.883013 | centos-9-stream | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2025-09-09 21:03:05.883018 | centos-9-stream | ANSIBLE_LIBRARY: ../../plugins 2025-09-09 21:03:05.883023 | centos-9-stream | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2025-09-09 21:03:05.883028 | centos-9-stream | ANSIBLE_ROLE: auditd 2025-09-09 21:03:05.883033 | centos-9-stream | ANSIBLE_ROLES_PATH: ../../roles 2025-09-09 21:03:05.883037 | centos-9-stream | ANSIBLE_VERBOSITY: '1' 2025-09-09 21:03:05.883042 | centos-9-stream | 2025-09-09 21:03:05.887855 | centos-9-stream | DEBUG: MOLECULE ENVIRONMENT: 2025-09-09 21:03:05.887865 | centos-9-stream | MOLECULE_DEBUG: 'True' 2025-09-09 21:03:05.887870 | centos-9-stream | MOLECULE_DEPENDENCY_NAME: galaxy 2025-09-09 21:03:05.887875 | centos-9-stream | MOLECULE_DRIVER_NAME: default 2025-09-09 21:03:05.887881 | centos-9-stream | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2025-09-09 21:03:05.887886 | centos-9-stream | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2025-09-09 21:03:05.887894 | centos-9-stream | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2025-09-09 21:03:05.887899 | centos-9-stream | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2025-09-09 21:03:05.887904 | centos-9-stream | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2025-09-09 21:03:05.887909 | centos-9-stream | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2025-09-09 21:03:05.887913 | centos-9-stream | MOLECULE_PROVISIONER_NAME: ansible 2025-09-09 21:03:05.887918 | centos-9-stream | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2025-09-09 21:03:05.887923 | centos-9-stream | MOLECULE_SCENARIO_NAME: delegated 2025-09-09 21:03:05.887927 | centos-9-stream | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2025-09-09 21:03:05.887932 | centos-9-stream | MOLECULE_VERIFIER_NAME: testinfra 2025-09-09 21:03:05.887937 | centos-9-stream | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-09 21:03:05.887941 | centos-9-stream | 2025-09-09 21:03:05.890651 | centos-9-stream | DEBUG: SHELL REPLAY: 2025-09-09 21:03:05.890664 | centos-9-stream | ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-09 21:03:05.708769 | ubuntu-jammy | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2025-09-09 21:03:05.933008 | ubuntu-jammy | 2025-09-09 21:03:05.933282 | ubuntu-jammy | PLAY [Converge] **************************************************************** 2025-09-09 21:03:05.933571 | ubuntu-jammy | 2025-09-09 21:03:05.933839 | ubuntu-jammy | TASK [Gathering Facts] ********************************************************* 2025-09-09 21:03:06.289474 | ubuntu-noble | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2025-09-09 21:03:06.219607 | debian-bookworm | 2025-09-09 21:03:06.219790 | debian-bookworm | PLAY [Converge] **************************************************************** 2025-09-09 21:03:06.219910 | debian-bookworm | 2025-09-09 21:03:06.220048 | debian-bookworm | TASK [Gathering Facts] ********************************************************* 2025-09-09 21:03:06.182094 | centos-9-stream | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2025-09-09 21:03:06.429272 | centos-9-stream | 2025-09-09 21:03:06.429642 | centos-9-stream | PLAY [Converge] **************************************************************** 2025-09-09 21:03:06.429962 | centos-9-stream | 2025-09-09 21:03:06.430279 | centos-9-stream | TASK [Gathering Facts] ********************************************************* 2025-09-09 21:03:06.533041 | ubuntu-noble | 2025-09-09 21:03:06.533107 | ubuntu-noble | PLAY [Converge] **************************************************************** 2025-09-09 21:03:06.533119 | ubuntu-noble | 2025-09-09 21:03:06.533127 | ubuntu-noble | TASK [Gathering Facts] ********************************************************* 2025-09-09 21:03:07.424273 | debian-bookworm | ok: [molecule-auditd] 2025-09-09 21:03:07.424406 | debian-bookworm | 2025-09-09 21:03:07.424518 | debian-bookworm | TASK [Include required variables] ********************************************** 2025-09-09 21:03:07.470324 | debian-bookworm | ok: [molecule-auditd] => {"ansible_facts": {}, "ansible_included_var_files": ["/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/vars/auditd.yml"], "changed": false} 2025-09-09 21:03:07.470655 | debian-bookworm | 2025-09-09 21:03:07.471052 | debian-bookworm | TASK [Include role auditd] ***************************************************** 2025-09-09 21:03:07.515767 | debian-bookworm | included: auditd for molecule-auditd 2025-09-09 21:03:07.515855 | debian-bookworm | 2025-09-09 21:03:07.515924 | debian-bookworm | TASK [auditd : Include distribution specific install tasks] ******************** 2025-09-09 21:03:07.547777 | debian-bookworm | included: /home/zuul/src/github.com/osism/ansible-collection-services/roles/auditd/tasks/install-Debian-family.yml for molecule-auditd 2025-09-09 21:03:07.547849 | debian-bookworm | 2025-09-09 21:03:07.547868 | debian-bookworm | TASK [auditd : Install auditd package] ***************************************** 2025-09-09 21:03:07.546055 | centos-9-stream | ok: [molecule-auditd] 2025-09-09 21:03:07.546172 | centos-9-stream | 2025-09-09 21:03:07.546333 | centos-9-stream | TASK [Include required variables] ********************************************** 2025-09-09 21:03:07.580811 | centos-9-stream | ok: [molecule-auditd] => {"ansible_facts": {}, "ansible_included_var_files": ["/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/vars/auditd.yml"], "changed": false} 2025-09-09 21:03:07.580962 | centos-9-stream | 2025-09-09 21:03:07.581108 | centos-9-stream | TASK [Include role auditd] ***************************************************** 2025-09-09 21:03:07.108358 | ubuntu-jammy | ok: [molecule-auditd] 2025-09-09 21:03:07.108463 | ubuntu-jammy | 2025-09-09 21:03:07.108547 | ubuntu-jammy | TASK [Include required variables] ********************************************** 2025-09-09 21:03:07.141792 | ubuntu-jammy | ok: [molecule-auditd] => {"ansible_facts": {}, "ansible_included_var_files": ["/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/vars/auditd.yml"], "changed": false} 2025-09-09 21:03:07.141874 | ubuntu-jammy | 2025-09-09 21:03:07.141961 | ubuntu-jammy | TASK [Include role auditd] ***************************************************** 2025-09-09 21:03:07.178553 | ubuntu-jammy | included: auditd for molecule-auditd 2025-09-09 21:03:07.178723 | ubuntu-jammy | 2025-09-09 21:03:07.178938 | ubuntu-jammy | TASK [auditd : Include distribution specific install tasks] ******************** 2025-09-09 21:03:07.208641 | ubuntu-jammy | included: /home/zuul/src/github.com/osism/ansible-collection-services/roles/auditd/tasks/install-Debian-family.yml for molecule-auditd 2025-09-09 21:03:07.208750 | ubuntu-jammy | 2025-09-09 21:03:07.208774 | ubuntu-jammy | TASK [auditd : Install auditd package] ***************************************** 2025-09-09 21:03:07.771936 | ubuntu-noble | ok: [molecule-auditd] 2025-09-09 21:03:07.772016 | ubuntu-noble | 2025-09-09 21:03:07.772031 | ubuntu-noble | TASK [Include required variables] ********************************************** 2025-09-09 21:03:07.809725 | ubuntu-noble | ok: [molecule-auditd] => {"ansible_facts": {}, "ansible_included_var_files": ["/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/vars/auditd.yml"], "changed": false} 2025-09-09 21:03:07.809799 | ubuntu-noble | 2025-09-09 21:03:07.809827 | ubuntu-noble | TASK [Include role auditd] ***************************************************** 2025-09-09 21:03:07.872563 | ubuntu-noble | included: auditd for molecule-auditd 2025-09-09 21:03:07.873753 | ubuntu-noble | 2025-09-09 21:03:07.873828 | ubuntu-noble | TASK [auditd : Include distribution specific install tasks] ******************** 2025-09-09 21:03:07.903613 | ubuntu-noble | included: /home/zuul/src/github.com/osism/ansible-collection-services/roles/auditd/tasks/install-Debian-family.yml for molecule-auditd 2025-09-09 21:03:07.903697 | ubuntu-noble | 2025-09-09 21:03:07.903710 | ubuntu-noble | TASK [auditd : Install auditd package] ***************************************** 2025-09-09 21:03:07.622138 | centos-9-stream | included: auditd for molecule-auditd 2025-09-09 21:03:07.622592 | centos-9-stream | 2025-09-09 21:03:07.622973 | centos-9-stream | TASK [auditd : Include distribution specific install tasks] ******************** 2025-09-09 21:03:07.656865 | centos-9-stream | included: /home/zuul/src/github.com/osism/ansible-collection-services/roles/auditd/tasks/install-RedHat-family.yml for molecule-auditd 2025-09-09 21:03:07.657040 | centos-9-stream | 2025-09-09 21:03:07.657331 | centos-9-stream | TASK [auditd : Install auditd package] ***************************************** 2025-09-09 21:03:09.753957 | centos-9-stream | ok: [molecule-auditd] => {"changed": false, "msg": "Nothing to do", "rc": 0, "results": []} 2025-09-09 21:03:09.754025 | centos-9-stream | 2025-09-09 21:03:09.754133 | centos-9-stream | TASK [auditd : Install audispd-plugins package] ******************************** 2025-09-09 21:03:11.585864 | ubuntu-jammy | The following additional packages will be installed: 2025-09-09 21:03:11.585996 | ubuntu-jammy | libauparse0 2025-09-09 21:03:11.586012 | ubuntu-jammy | Suggested packages: 2025-09-09 21:03:11.586106 | ubuntu-jammy | audispd-plugins 2025-09-09 21:03:11.586211 | ubuntu-jammy | The following NEW packages will be installed: 2025-09-09 21:03:11.586309 | ubuntu-jammy | auditd libauparse0 2025-09-09 21:03:11.586444 | ubuntu-jammy | 0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded. 2025-09-09 21:03:11.587374 | ubuntu-jammy | changed: [molecule-auditd] => {"cache_update_time": 1757451628, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following additional packages will be installed:\n libauparse0\nSuggested packages:\n audispd-plugins\nThe following NEW packages will be installed:\n auditd libauparse0\n0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 270 kB of archives.\nAfter this operation, 876 kB of additional disk space will be used.\nGet:1 http://archive.ubuntu.com/ubuntu jammy/main amd64 libauparse0 amd64 1:3.0.7-1build1 [58.0 kB]\nGet:2 http://archive.ubuntu.com/ubuntu jammy/main amd64 auditd amd64 1:3.0.7-1build1 [212 kB]\nFetched 270 kB in 0s (1813 kB/s)\nSelecting previously unselected package libauparse0:amd64.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 31961 files and directories currently installed.)\r\nPreparing to unpack .../libauparse0_1%3a3.0.7-1build1_amd64.deb ...\r\nUnpacking libauparse0:amd64 (1:3.0.7-1build1) ...\r\nSelecting previously unselected package auditd.\r\nPreparing to unpack .../auditd_1%3a3.0.7-1build1_amd64.deb ...\r\nUnpacking auditd (1:3.0.7-1build1) ...\r\nSetting up libauparse0:amd64 (1:3.0.7-1build1) ...\r\nSetting up auditd (1:3.0.7-1build1) ...\r\nCreated symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /lib/systemd/system/auditd.service.\r\nProcessing triggers for libc-bin (2.35-0ubuntu3.10) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following additional packages will be installed:", " libauparse0", "Suggested packages:", " audispd-plugins", "The following NEW packages will be installed:", " auditd libauparse0", "0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.", "Need to get 270 kB of archives.", "After this operation, 876 kB of additional disk space will be used.", "Get:1 http://archive.ubuntu.com/ubuntu jammy/main amd64 libauparse0 amd64 1:3.0.7-1build1 [58.0 kB]", "Get:2 http://archive.ubuntu.com/ubuntu jammy/main amd64 auditd amd64 1:3.0.7-1build1 [212 kB]", "Fetched 270 kB in 0s (1813 kB/s)", "Selecting previously unselected package libauparse0:amd64.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 31961 files and directories currently installed.)", "Preparing to unpack .../libauparse0_1%3a3.0.7-1build1_amd64.deb ...", "Unpacking libauparse0:amd64 (1:3.0.7-1build1) ...", "Selecting previously unselected package auditd.", "Preparing to unpack .../auditd_1%3a3.0.7-1build1_amd64.deb ...", "Unpacking auditd (1:3.0.7-1build1) ...", "Setting up libauparse0:amd64 (1:3.0.7-1build1) ...", "Setting up auditd (1:3.0.7-1build1) ...", "Created symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /lib/systemd/system/auditd.service.", "Processing triggers for libc-bin (2.35-0ubuntu3.10) ..."]} 2025-09-09 21:03:11.587438 | ubuntu-jammy | 2025-09-09 21:03:11.587516 | ubuntu-jammy | TASK [auditd : Install audispd-plugins package] ******************************** 2025-09-09 21:03:11.942839 | debian-bookworm | The following additional packages will be installed: 2025-09-09 21:03:11.942942 | debian-bookworm | libauparse0 2025-09-09 21:03:11.942959 | debian-bookworm | Suggested packages: 2025-09-09 21:03:11.942965 | debian-bookworm | audispd-plugins 2025-09-09 21:03:11.943101 | debian-bookworm | The following NEW packages will be installed: 2025-09-09 21:03:11.943231 | debian-bookworm | auditd libauparse0 2025-09-09 21:03:11.943377 | debian-bookworm | 0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded. 2025-09-09 21:03:11.944465 | debian-bookworm | changed: [molecule-auditd] => {"cache_update_time": 1757451625, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following additional packages will be installed:\n libauparse0\nSuggested packages:\n audispd-plugins\nThe following NEW packages will be installed:\n auditd libauparse0\n0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 279 kB of archives.\nAfter this operation, 934 kB of additional disk space will be used.\nGet:1 http://deb.debian.org/debian bookworm/main amd64 libauparse0 amd64 1:3.0.9-1 [61.9 kB]\nGet:2 http://deb.debian.org/debian bookworm/main amd64 auditd amd64 1:3.0.9-1 [218 kB]\nFetched 279 kB in 0s (3870 kB/s)\nSelecting previously unselected package libauparse0:amd64.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 28681 files and directories currently installed.)\r\nPreparing to unpack .../libauparse0_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking libauparse0:amd64 (1:3.0.9-1) ...\r\nSelecting previously unselected package auditd.\r\nPreparing to unpack .../auditd_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking auditd (1:3.0.9-1) ...\r\nSetting up libauparse0:amd64 (1:3.0.9-1) ...\r\nSetting up auditd (1:3.0.9-1) ...\r\nCreated symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /lib/systemd/system/auditd.service.\r\r\nProcessing triggers for libc-bin (2.36-9+deb12u13) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following additional packages will be installed:", " libauparse0", "Suggested packages:", " audispd-plugins", "The following NEW packages will be installed:", " auditd libauparse0", "0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.", "Need to get 279 kB of archives.", "After this operation, 934 kB of additional disk space will be used.", "Get:1 http://deb.debian.org/debian bookworm/main amd64 libauparse0 amd64 1:3.0.9-1 [61.9 kB]", "Get:2 http://deb.debian.org/debian bookworm/main amd64 auditd amd64 1:3.0.9-1 [218 kB]", "Fetched 279 kB in 0s (3870 kB/s)", "Selecting previously unselected package libauparse0:amd64.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 28681 files and directories currently installed.)", "Preparing to unpack .../libauparse0_1%3a3.0.9-1_amd64.deb ...", "Unpacking libauparse0:amd64 (1:3.0.9-1) ...", "Selecting previously unselected package auditd.", "Preparing to unpack .../auditd_1%3a3.0.9-1_amd64.deb ...", "Unpacking auditd (1:3.0.9-1) ...", "Setting up libauparse0:amd64 (1:3.0.9-1) ...", "Setting up auditd (1:3.0.9-1) ...", "Created symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /lib/systemd/system/auditd.service.", "", "Processing triggers for libc-bin (2.36-9+deb12u13) ..."]} 2025-09-09 21:03:11.944528 | debian-bookworm | 2025-09-09 21:03:11.944662 | debian-bookworm | TASK [auditd : Install audispd-plugins package] ******************************** 2025-09-09 21:03:12.505544 | centos-9-stream | changed: [molecule-auditd] => {"changed": true, "msg": "", "rc": 0, "results": ["Installed: audispd-plugins-3.1.5-7.el9.x86_64"]} 2025-09-09 21:03:12.505644 | centos-9-stream | 2025-09-09 21:03:12.505712 | centos-9-stream | TASK [auditd : Allow manual restart of auditd service] ************************* 2025-09-09 21:03:12.539853 | ubuntu-noble | The following additional packages will be installed: 2025-09-09 21:03:12.539916 | ubuntu-noble | libauparse0t64 2025-09-09 21:03:12.539924 | ubuntu-noble | Suggested packages: 2025-09-09 21:03:12.539930 | ubuntu-noble | audispd-plugins 2025-09-09 21:03:12.539936 | ubuntu-noble | The following NEW packages will be installed: 2025-09-09 21:03:12.539943 | ubuntu-noble | auditd libauparse0t64 2025-09-09 21:03:12.539949 | ubuntu-noble | 0 upgraded, 2 newly installed, 0 to remove and 4 not upgraded. 2025-09-09 21:03:12.542896 | ubuntu-noble | changed: [molecule-auditd] => {"cache_update_time": 1757451628, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following additional packages will be installed:\n libauparse0t64\nSuggested packages:\n audispd-plugins\nThe following NEW packages will be installed:\n auditd libauparse0t64\n0 upgraded, 2 newly installed, 0 to remove and 4 not upgraded.\nNeed to get 274 kB of archives.\nAfter this operation, 893 kB of additional disk space will be used.\nGet:1 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 libauparse0t64 amd64 1:3.1.2-2.1build1.1 [58.9 kB]\nGet:2 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 auditd amd64 1:3.1.2-2.1build1.1 [215 kB]\nFetched 274 kB in 0s (1846 kB/s)\nSelecting previously unselected package libauparse0t64:amd64.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 34780 files and directories currently installed.)\r\nPreparing to unpack .../libauparse0t64_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nAdding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0 to /lib/x86_64-linux-gnu/libauparse.so.0.usr-is-merged by libauparse0t64'\r\nAdding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0.0.0 to /lib/x86_64-linux-gnu/libauparse.so.0.0.0.usr-is-merged by libauparse0t64'\r\nUnpacking libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...\r\nSelecting previously unselected package auditd.\r\nPreparing to unpack .../auditd_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nUnpacking auditd (1:3.1.2-2.1build1.1) ...\r\nSetting up libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...\r\nSetting up auditd (1:3.1.2-2.1build1.1) ...\r\nCreated symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /usr/lib/systemd/system/auditd.service.\r\r\nProcessing triggers for libc-bin (2.39-0ubuntu8.5) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following additional packages will be installed:", " libauparse0t64", "Suggested packages:", " audispd-plugins", "The following NEW packages will be installed:", " auditd libauparse0t64", "0 upgraded, 2 newly installed, 0 to remove and 4 not upgraded.", "Need to get 274 kB of archives.", "After this operation, 893 kB of additional disk space will be used.", "Get:1 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 libauparse0t64 amd64 1:3.1.2-2.1build1.1 [58.9 kB]", "Get:2 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 auditd amd64 1:3.1.2-2.1build1.1 [215 kB]", "Fetched 274 kB in 0s (1846 kB/s)", "Selecting previously unselected package libauparse0t64:amd64.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 34780 files and directories currently installed.)", "Preparing to unpack .../libauparse0t64_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Adding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0 to /lib/x86_64-linux-gnu/libauparse.so.0.usr-is-merged by libauparse0t64'", "Adding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0.0.0 to /lib/x86_64-linux-gnu/libauparse.so.0.0.0.usr-is-merged by libauparse0t64'", "Unpacking libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...", "Selecting previously unselected package auditd.", "Preparing to unpack .../auditd_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Unpacking auditd (1:3.1.2-2.1build1.1) ...", "Setting up libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...", "Setting up auditd (1:3.1.2-2.1build1.1) ...", "Created symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /usr/lib/systemd/system/auditd.service.", "", "Processing triggers for libc-bin (2.39-0ubuntu8.5) ..."]} 2025-09-09 21:03:12.543154 | ubuntu-noble | 2025-09-09 21:03:12.543371 | ubuntu-noble | TASK [auditd : Install audispd-plugins package] ******************************** 2025-09-09 21:03:12.925507 | centos-9-stream | --- before: /usr/lib/systemd/system/auditd.service (content) 2025-09-09 21:03:12.925600 | centos-9-stream | +++ after: /usr/lib/systemd/system/auditd.service (content) 2025-09-09 21:03:12.925705 | centos-9-stream | @@ -14,7 +14,7 @@ 2025-09-09 21:03:12.925865 | centos-9-stream | Before=sysinit.target shutdown.target 2025-09-09 21:03:12.925982 | centos-9-stream | ##Before=shutdown.target 2025-09-09 21:03:12.926099 | centos-9-stream | Conflicts=shutdown.target 2025-09-09 21:03:12.926219 | centos-9-stream | -RefuseManualStop=yes 2025-09-09 21:03:12.926334 | centos-9-stream | +#RefuseManualStop=yes 2025-09-09 21:03:12.926485 | centos-9-stream | ConditionKernelCommandLine=!audit=0 2025-09-09 21:03:12.926605 | centos-9-stream | ConditionKernelCommandLine=!audit=off 2025-09-09 21:03:12.926718 | centos-9-stream | 2025-09-09 21:03:12.926838 | centos-9-stream | 2025-09-09 21:03:12.926967 | centos-9-stream | changed: [molecule-auditd] => {"backup": "", "changed": true, "msg": "line replaced"} 2025-09-09 21:03:12.927074 | centos-9-stream | 2025-09-09 21:03:12.927193 | centos-9-stream | TASK [auditd : Reload systemd daemon] ****************************************** 2025-09-09 21:03:13.899915 | centos-9-stream | ok: [molecule-auditd] => {"changed": false, "name": null, "status": {}} 2025-09-09 21:03:13.900003 | centos-9-stream | 2025-09-09 21:03:13.900092 | centos-9-stream | TASK [auditd : Copy auditd.conf configuration files] *************************** 2025-09-09 21:03:14.591786 | ubuntu-jammy | The following NEW packages will be installed: 2025-09-09 21:03:14.591879 | ubuntu-jammy | audispd-plugins 2025-09-09 21:03:14.591943 | ubuntu-jammy | 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. 2025-09-09 21:03:14.592152 | ubuntu-jammy | changed: [molecule-auditd] => {"cache_update_time": 1757451628, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following NEW packages will be installed:\n audispd-plugins\n0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 39.1 kB of archives.\nAfter this operation, 137 kB of additional disk space will be used.\nGet:1 http://archive.ubuntu.com/ubuntu jammy/universe amd64 audispd-plugins amd64 1:3.0.7-1build1 [39.1 kB]\nFetched 39.1 kB in 0s (508 kB/s)\nSelecting previously unselected package audispd-plugins.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 32050 files and directories currently installed.)\r\nPreparing to unpack .../audispd-plugins_1%3a3.0.7-1build1_amd64.deb ...\r\nUnpacking audispd-plugins (1:3.0.7-1build1) ...\r\nSetting up audispd-plugins (1:3.0.7-1build1) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following NEW packages will be installed:", " audispd-plugins", "0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.", "Need to get 39.1 kB of archives.", "After this operation, 137 kB of additional disk space will be used.", "Get:1 http://archive.ubuntu.com/ubuntu jammy/universe amd64 audispd-plugins amd64 1:3.0.7-1build1 [39.1 kB]", "Fetched 39.1 kB in 0s (508 kB/s)", "Selecting previously unselected package audispd-plugins.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 32050 files and directories currently installed.)", "Preparing to unpack .../audispd-plugins_1%3a3.0.7-1build1_amd64.deb ...", "Unpacking audispd-plugins (1:3.0.7-1build1) ...", "Setting up audispd-plugins (1:3.0.7-1build1) ..."]} 2025-09-09 21:03:14.592245 | ubuntu-jammy | 2025-09-09 21:03:14.592350 | ubuntu-jammy | TASK [auditd : Copy auditd.conf configuration files] *************************** 2025-09-09 21:03:14.806805 | debian-bookworm | The following NEW packages will be installed: 2025-09-09 21:03:14.807024 | debian-bookworm | audispd-plugins 2025-09-09 21:03:14.807235 | debian-bookworm | 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. 2025-09-09 21:03:14.807636 | debian-bookworm | changed: [molecule-auditd] => {"cache_update_time": 1757451625, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following NEW packages will be installed:\n audispd-plugins\n0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 45.6 kB of archives.\nAfter this operation, 132 kB of additional disk space will be used.\nGet:1 http://deb.debian.org/debian bookworm/main amd64 audispd-plugins amd64 1:3.0.9-1 [45.6 kB]\nFetched 45.6 kB in 0s (1200 kB/s)\nSelecting previously unselected package audispd-plugins.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 28772 files and directories currently installed.)\r\nPreparing to unpack .../audispd-plugins_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking audispd-plugins (1:3.0.9-1) ...\r\nSetting up audispd-plugins (1:3.0.9-1) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following NEW packages will be installed:", " audispd-plugins", "0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.", "Need to get 45.6 kB of archives.", "After this operation, 132 kB of additional disk space will be used.", "Get:1 http://deb.debian.org/debian bookworm/main amd64 audispd-plugins amd64 1:3.0.9-1 [45.6 kB]", "Fetched 45.6 kB in 0s (1200 kB/s)", "Selecting previously unselected package audispd-plugins.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 28772 files and directories currently installed.)", "Preparing to unpack .../audispd-plugins_1%3a3.0.9-1_amd64.deb ...", "Unpacking audispd-plugins (1:3.0.9-1) ...", "Setting up audispd-plugins (1:3.0.9-1) ..."]} 2025-09-09 21:03:14.807813 | debian-bookworm | 2025-09-09 21:03:14.808018 | debian-bookworm | TASK [auditd : Copy auditd.conf configuration files] *************************** 2025-09-09 21:03:15.098160 | centos-9-stream | --- before 2025-09-09 21:03:15.098338 | centos-9-stream | +++ after: /home/zuul/.ansible/tmp/ansible-local-1934sfmn6ivv/tmpkf1xfgnv/auditd.conf.j2 2025-09-09 21:03:15.098537 | centos-9-stream | @@ -0,0 +1,37 @@ 2025-09-09 21:03:15.098702 | centos-9-stream | +# 2025-09-09 21:03:15.098894 | centos-9-stream | +# This file controls the configuration of the audit daemon 2025-09-09 21:03:15.099047 | centos-9-stream | +# 2025-09-09 21:03:15.099204 | centos-9-stream | + 2025-09-09 21:03:15.099367 | centos-9-stream | +local_events = yes 2025-09-09 21:03:15.099556 | centos-9-stream | +write_logs = yes 2025-09-09 21:03:15.099722 | centos-9-stream | +log_file = /var/log/audit/audit.log 2025-09-09 21:03:15.099936 | centos-9-stream | +log_group = adm 2025-09-09 21:03:15.100086 | centos-9-stream | +log_format = RAW 2025-09-09 21:03:15.100230 | centos-9-stream | +flush = INCREMENTAL_ASYNC 2025-09-09 21:03:15.100370 | centos-9-stream | +freq = 50 2025-09-09 21:03:15.100534 | centos-9-stream | +max_log_file = 8 2025-09-09 21:03:15.100705 | centos-9-stream | +num_logs = 5 2025-09-09 21:03:15.100832 | centos-9-stream | +priority_boost = 4 2025-09-09 21:03:15.100976 | centos-9-stream | +disp_qos = lossy 2025-09-09 21:03:15.101118 | centos-9-stream | +dispatcher = /sbin/audispd 2025-09-09 21:03:15.101262 | centos-9-stream | +name_format = NONE 2025-09-09 21:03:15.101406 | centos-9-stream | +##name = mydomain 2025-09-09 21:03:15.101564 | centos-9-stream | +max_log_file_action = ROTATE 2025-09-09 21:03:15.101705 | centos-9-stream | +space_left = 12361 2025-09-09 21:03:15.101862 | centos-9-stream | +space_left_action = email 2025-09-09 21:03:15.102002 | centos-9-stream | +verify_email = yes 2025-09-09 21:03:15.102144 | centos-9-stream | +action_mail_acct = root 2025-09-09 21:03:15.102283 | centos-9-stream | +admin_space_left = 50 2025-09-09 21:03:15.102424 | centos-9-stream | +admin_space_left_action = SUSPEND 2025-09-09 21:03:15.102589 | centos-9-stream | +disk_full_action = SUSPEND 2025-09-09 21:03:15.102733 | centos-9-stream | +disk_error_action = SUSPEND 2025-09-09 21:03:15.102886 | centos-9-stream | +use_libwrap = yes 2025-09-09 21:03:15.103031 | centos-9-stream | +##tcp_listen_port = 60 2025-09-09 21:03:15.103171 | centos-9-stream | +tcp_listen_queue = 5 2025-09-09 21:03:15.103311 | centos-9-stream | +tcp_max_per_addr = 1 2025-09-09 21:03:15.103473 | centos-9-stream | +##tcp_client_ports = 1024-65535 2025-09-09 21:03:15.103615 | centos-9-stream | +tcp_client_max_idle = 0 2025-09-09 21:03:15.103777 | centos-9-stream | +enable_krb5 = no 2025-09-09 21:03:15.103926 | centos-9-stream | +krb5_principal = auditd 2025-09-09 21:03:15.104341 | centos-9-stream | +##krb5_key_file = /etc/audit/audit.key 2025-09-09 21:03:15.104517 | centos-9-stream | +distribute_network = no 2025-09-09 21:03:15.104652 | centos-9-stream | 2025-09-09 21:03:15.104872 | centos-9-stream | changed: [molecule-auditd] => {"changed": true, "checksum": "e902cc6bebf86c17087d153e359a2cc1231672e0", "dest": "/etc/audit/audit.conf", "gid": 0, "group": "root", "md5sum": "69dfd768317bae876a6a78c8aeb5cce1", "mode": "0640", "owner": "root", "secontext": "system_u:object_r:auditd_etc_t:s0", "size": 806, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1757451793.92123-2075-132071749451629/.source.conf", "state": "file", "uid": 0} 2025-09-09 21:03:15.105003 | centos-9-stream | 2025-09-09 21:03:15.105196 | centos-9-stream | TASK [auditd : Adjust auditd/audispd configurations] *************************** 2025-09-09 21:03:15.479418 | centos-9-stream | ok: [molecule-auditd] => (item={'parameter': 'active', 'value': 'no', 'config': '/etc/audit/plugins.d/syslog.conf'}) => {"ansible_loop_var": "item", "backup": "", "changed": false, "item": {"config": "/etc/audit/plugins.d/syslog.conf", "parameter": "active", "value": "no"}, "msg": ""} 2025-09-09 21:03:15.479580 | centos-9-stream | 2025-09-09 21:03:15.479852 | centos-9-stream | TASK [auditd : Deploy rules for auditd] **************************************** 2025-09-09 21:03:15.990203 | ubuntu-noble | The following NEW packages will be installed: 2025-09-09 21:03:15.990669 | ubuntu-noble | audispd-plugins 2025-09-09 21:03:15.991112 | ubuntu-noble | 0 upgraded, 1 newly installed, 0 to remove and 4 not upgraded. 2025-09-09 21:03:15.991753 | ubuntu-noble | changed: [molecule-auditd] => {"cache_update_time": 1757451628, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following NEW packages will be installed:\n audispd-plugins\n0 upgraded, 1 newly installed, 0 to remove and 4 not upgraded.\nNeed to get 38.8 kB of archives.\nAfter this operation, 131 kB of additional disk space will be used.\nGet:1 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 audispd-plugins amd64 1:3.1.2-2.1build1.1 [38.8 kB]\nFetched 38.8 kB in 0s (494 kB/s)\nSelecting previously unselected package audispd-plugins.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 34876 files and directories currently installed.)\r\nPreparing to unpack .../audispd-plugins_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nUnpacking audispd-plugins (1:3.1.2-2.1build1.1) ...\r\nSetting up audispd-plugins (1:3.1.2-2.1build1.1) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following NEW packages will be installed:", " audispd-plugins", "0 upgraded, 1 newly installed, 0 to remove and 4 not upgraded.", "Need to get 38.8 kB of archives.", "After this operation, 131 kB of additional disk space will be used.", "Get:1 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 audispd-plugins amd64 1:3.1.2-2.1build1.1 [38.8 kB]", "Fetched 38.8 kB in 0s (494 kB/s)", "Selecting previously unselected package audispd-plugins.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 34876 files and directories currently installed.)", "Preparing to unpack .../audispd-plugins_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Unpacking audispd-plugins (1:3.1.2-2.1build1.1) ...", "Setting up audispd-plugins (1:3.1.2-2.1build1.1) ..."]} 2025-09-09 21:03:15.992171 | ubuntu-noble | 2025-09-09 21:03:15.992509 | ubuntu-noble | TASK [auditd : Copy auditd.conf configuration files] *************************** 2025-09-09 21:03:16.000315 | debian-bookworm | --- before 2025-09-09 21:03:16.000527 | debian-bookworm | +++ after: /home/zuul/.ansible/tmp/ansible-local-2302fi5_syez/tmpgh0z41rs/auditd.conf.j2 2025-09-09 21:03:16.000719 | debian-bookworm | @@ -0,0 +1,37 @@ 2025-09-09 21:03:16.000904 | debian-bookworm | +# 2025-09-09 21:03:16.001093 | debian-bookworm | +# This file controls the configuration of the audit daemon 2025-09-09 21:03:16.001267 | debian-bookworm | +# 2025-09-09 21:03:16.001488 | debian-bookworm | + 2025-09-09 21:03:16.001675 | debian-bookworm | +local_events = yes 2025-09-09 21:03:16.001859 | debian-bookworm | +write_logs = yes 2025-09-09 21:03:16.002039 | debian-bookworm | +log_file = /var/log/audit/audit.log 2025-09-09 21:03:16.002220 | debian-bookworm | +log_group = adm 2025-09-09 21:03:16.002405 | debian-bookworm | +log_format = RAW 2025-09-09 21:03:16.002585 | debian-bookworm | +flush = INCREMENTAL_ASYNC 2025-09-09 21:03:16.002905 | debian-bookworm | +freq = 50 2025-09-09 21:03:16.003029 | debian-bookworm | +max_log_file = 8 2025-09-09 21:03:16.003205 | debian-bookworm | +num_logs = 5 2025-09-09 21:03:16.003400 | debian-bookworm | +priority_boost = 4 2025-09-09 21:03:16.003579 | debian-bookworm | +disp_qos = lossy 2025-09-09 21:03:16.003758 | debian-bookworm | +dispatcher = /sbin/audispd 2025-09-09 21:03:16.003933 | debian-bookworm | +name_format = NONE 2025-09-09 21:03:16.004111 | debian-bookworm | +##name = mydomain 2025-09-09 21:03:16.004287 | debian-bookworm | +max_log_file_action = ROTATE 2025-09-09 21:03:16.004477 | debian-bookworm | +space_left = 12361 2025-09-09 21:03:16.004652 | debian-bookworm | +space_left_action = email 2025-09-09 21:03:16.004830 | debian-bookworm | +verify_email = yes 2025-09-09 21:03:16.005010 | debian-bookworm | +action_mail_acct = root 2025-09-09 21:03:16.005179 | debian-bookworm | +admin_space_left = 50 2025-09-09 21:03:16.005374 | debian-bookworm | +admin_space_left_action = SUSPEND 2025-09-09 21:03:16.005558 | debian-bookworm | +disk_full_action = SUSPEND 2025-09-09 21:03:16.005736 | debian-bookworm | +disk_error_action = SUSPEND 2025-09-09 21:03:16.005921 | debian-bookworm | +use_libwrap = yes 2025-09-09 21:03:16.006092 | debian-bookworm | +##tcp_listen_port = 60 2025-09-09 21:03:16.006269 | debian-bookworm | +tcp_listen_queue = 5 2025-09-09 21:03:16.006461 | debian-bookworm | +tcp_max_per_addr = 1 2025-09-09 21:03:16.006643 | debian-bookworm | +##tcp_client_ports = 1024-65535 2025-09-09 21:03:16.006892 | debian-bookworm | +tcp_client_max_idle = 0 2025-09-09 21:03:16.007073 | debian-bookworm | +enable_krb5 = no 2025-09-09 21:03:16.007250 | debian-bookworm | +krb5_principal = auditd 2025-09-09 21:03:16.007449 | debian-bookworm | +##krb5_key_file = /etc/audit/audit.key 2025-09-09 21:03:16.007641 | debian-bookworm | +distribute_network = no 2025-09-09 21:03:16.007795 | debian-bookworm | 2025-09-09 21:03:16.008026 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "checksum": "e902cc6bebf86c17087d153e359a2cc1231672e0", "dest": "/etc/audit/audit.conf", "gid": 0, "group": "root", "md5sum": "69dfd768317bae876a6a78c8aeb5cce1", "mode": "0640", "owner": "root", "size": 806, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1757451794.8317595-2676-59921093354045/.source.conf", "state": "file", "uid": 0} 2025-09-09 21:03:16.008177 | debian-bookworm | 2025-09-09 21:03:16.008376 | debian-bookworm | TASK [auditd : Adjust auditd/audispd configurations] *************************** 2025-09-09 21:03:15.716610 | ubuntu-jammy | --- before 2025-09-09 21:03:15.716766 | ubuntu-jammy | +++ after: /home/zuul/.ansible/tmp/ansible-local-1441_egy92os/tmpftr05q97/auditd.conf.j2 2025-09-09 21:03:15.716939 | ubuntu-jammy | @@ -0,0 +1,37 @@ 2025-09-09 21:03:15.717115 | ubuntu-jammy | +# 2025-09-09 21:03:15.717286 | ubuntu-jammy | +# This file controls the configuration of the audit daemon 2025-09-09 21:03:15.717490 | ubuntu-jammy | +# 2025-09-09 21:03:15.717650 | ubuntu-jammy | + 2025-09-09 21:03:15.717826 | ubuntu-jammy | +local_events = yes 2025-09-09 21:03:15.717993 | ubuntu-jammy | +write_logs = yes 2025-09-09 21:03:15.718161 | ubuntu-jammy | +log_file = /var/log/audit/audit.log 2025-09-09 21:03:15.718323 | ubuntu-jammy | +log_group = adm 2025-09-09 21:03:15.718503 | ubuntu-jammy | +log_format = RAW 2025-09-09 21:03:15.718667 | ubuntu-jammy | +flush = INCREMENTAL_ASYNC 2025-09-09 21:03:15.718828 | ubuntu-jammy | +freq = 50 2025-09-09 21:03:15.718990 | ubuntu-jammy | +max_log_file = 8 2025-09-09 21:03:15.719152 | ubuntu-jammy | +num_logs = 5 2025-09-09 21:03:15.719365 | ubuntu-jammy | +priority_boost = 4 2025-09-09 21:03:15.719563 | ubuntu-jammy | +disp_qos = lossy 2025-09-09 21:03:15.719724 | ubuntu-jammy | +dispatcher = /sbin/audispd 2025-09-09 21:03:15.719887 | ubuntu-jammy | +name_format = NONE 2025-09-09 21:03:15.720049 | ubuntu-jammy | +##name = mydomain 2025-09-09 21:03:15.720219 | ubuntu-jammy | +max_log_file_action = ROTATE 2025-09-09 21:03:15.720381 | ubuntu-jammy | +space_left = 12361 2025-09-09 21:03:15.720558 | ubuntu-jammy | +space_left_action = email 2025-09-09 21:03:15.720718 | ubuntu-jammy | +verify_email = yes 2025-09-09 21:03:15.720877 | ubuntu-jammy | +action_mail_acct = root 2025-09-09 21:03:15.721078 | ubuntu-jammy | +admin_space_left = 50 2025-09-09 21:03:15.721205 | ubuntu-jammy | +admin_space_left_action = SUSPEND 2025-09-09 21:03:15.721371 | ubuntu-jammy | +disk_full_action = SUSPEND 2025-09-09 21:03:15.721546 | ubuntu-jammy | +disk_error_action = SUSPEND 2025-09-09 21:03:15.721710 | ubuntu-jammy | +use_libwrap = yes 2025-09-09 21:03:15.721873 | ubuntu-jammy | +##tcp_listen_port = 60 2025-09-09 21:03:15.722036 | ubuntu-jammy | +tcp_listen_queue = 5 2025-09-09 21:03:15.722197 | ubuntu-jammy | +tcp_max_per_addr = 1 2025-09-09 21:03:15.722364 | ubuntu-jammy | +##tcp_client_ports = 1024-65535 2025-09-09 21:03:15.722570 | ubuntu-jammy | +tcp_client_max_idle = 0 2025-09-09 21:03:15.722735 | ubuntu-jammy | +enable_krb5 = no 2025-09-09 21:03:15.722886 | ubuntu-jammy | +krb5_principal = auditd 2025-09-09 21:03:15.723031 | ubuntu-jammy | +##krb5_key_file = /etc/audit/audit.key 2025-09-09 21:03:15.723175 | ubuntu-jammy | +distribute_network = no 2025-09-09 21:03:15.723454 | ubuntu-jammy | 2025-09-09 21:03:15.723636 | ubuntu-jammy | changed: [molecule-auditd] => {"changed": true, "checksum": "e902cc6bebf86c17087d153e359a2cc1231672e0", "dest": "/etc/audit/audit.conf", "gid": 0, "group": "root", "md5sum": "69dfd768317bae876a6a78c8aeb5cce1", "mode": "0640", "owner": "root", "size": 806, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1757451794.608631-1790-91414719402143/.source.conf", "state": "file", "uid": 0} 2025-09-09 21:03:15.723752 | ubuntu-jammy | 2025-09-09 21:03:15.723885 | ubuntu-jammy | TASK [auditd : Adjust auditd/audispd configurations] *************************** 2025-09-09 21:03:16.418617 | debian-bookworm | ok: [molecule-auditd] => (item={'parameter': 'active', 'value': 'no', 'config': '/etc/audit/plugins.d/syslog.conf'}) => {"ansible_loop_var": "item", "backup": "", "changed": false, "item": {"config": "/etc/audit/plugins.d/syslog.conf", "parameter": "active", "value": "no"}, "msg": ""} 2025-09-09 21:03:16.418703 | debian-bookworm | 2025-09-09 21:03:16.418793 | debian-bookworm | TASK [auditd : Deploy rules for auditd] **************************************** 2025-09-09 21:03:16.389423 | centos-9-stream | --- before 2025-09-09 21:03:16.389562 | centos-9-stream | +++ after: /home/zuul/.ansible/tmp/ansible-local-1934sfmn6ivv/tmp1678sbyl/20-neo23x0.rules.j2 2025-09-09 21:03:16.389621 | centos-9-stream | @@ -0,0 +1,750 @@ 2025-09-09 21:03:16.389722 | centos-9-stream | +# ___ ___ __ __ 2025-09-09 21:03:16.389852 | centos-9-stream | +# / | __ ______/ (_) /_____/ / 2025-09-09 21:03:16.389937 | centos-9-stream | +# / /| |/ / / / __ / / __/ __ / 2025-09-09 21:03:16.390035 | centos-9-stream | +# / ___ / /_/ / /_/ / / /_/ /_/ / 2025-09-09 21:03:16.390133 | centos-9-stream | +# /_/ |_\__,_/\__,_/_/\__/\__,_/ 2025-09-09 21:03:16.390234 | centos-9-stream | +# 2025-09-09 21:03:16.390335 | centos-9-stream | +# Linux Audit Daemon - Best Practice Configuration 2025-09-09 21:03:16.390432 | centos-9-stream | +# /etc/audit/audit.rules 2025-09-09 21:03:16.390573 | centos-9-stream | +# 2025-09-09 21:03:16.390671 | centos-9-stream | +# Compiled by Florian Roth 2025-09-09 21:03:16.390821 | centos-9-stream | +# 2025-09-09 21:03:16.390916 | centos-9-stream | +# Created : 2017/12/05 2025-09-09 21:03:16.391016 | centos-9-stream | +# Modified : 2023/01/25 2025-09-09 21:03:16.391111 | centos-9-stream | +# 2025-09-09 21:03:16.391213 | centos-9-stream | +# Based on rules published here: 2025-09-09 21:03:16.391309 | centos-9-stream | +# Gov.uk auditd rules 2025-09-09 21:03:16.391590 | centos-9-stream | +# https://github.com/gds-operations/puppet-auditd/pull/1 2025-09-09 21:03:16.391767 | centos-9-stream | +# CentOS 7 hardening 2025-09-09 21:03:16.393518 | centos-9-stream | +# https://highon.coffee/blog/security-harden-centos-7/#auditd---audit-daemon 2025-09-09 21:03:16.393561 | centos-9-stream | +# Linux audit repo 2025-09-09 21:03:16.393572 | centos-9-stream | +# https://github.com/linux-audit/audit-userspace/tree/master/rules 2025-09-09 21:03:16.393583 | centos-9-stream | +# Auditd high performance linux auditing 2025-09-09 21:03:16.393592 | centos-9-stream | +# https://linux-audit.com/tuning-auditd-high-performance-linux-auditing/ 2025-09-09 21:03:16.393601 | centos-9-stream | +# 2025-09-09 21:03:16.393610 | centos-9-stream | +# Further rules 2025-09-09 21:03:16.393619 | centos-9-stream | +# For PCI DSS compliance see: 2025-09-09 21:03:16.393628 | centos-9-stream | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-pci-dss-v31.rules 2025-09-09 21:03:16.393637 | centos-9-stream | +# For NISPOM compliance see: 2025-09-09 21:03:16.393646 | centos-9-stream | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-nispom.rules 2025-09-09 21:03:16.393663 | centos-9-stream | + 2025-09-09 21:03:16.393672 | centos-9-stream | +# Remove any existing rules 2025-09-09 21:03:16.395511 | centos-9-stream | +-D 2025-09-09 21:03:16.395553 | centos-9-stream | + 2025-09-09 21:03:16.395564 | centos-9-stream | +# Buffer Size 2025-09-09 21:03:16.395573 | centos-9-stream | +## Feel free to increase this if the machine panic's 2025-09-09 21:03:16.395582 | centos-9-stream | +-b 8192 2025-09-09 21:03:16.395590 | centos-9-stream | + 2025-09-09 21:03:16.395598 | centos-9-stream | +# Failure Mode 2025-09-09 21:03:16.395607 | centos-9-stream | +## Possible values: 0 (silent), 1 (printk, print a failure message), 2 (panic, halt the system) 2025-09-09 21:03:16.395615 | centos-9-stream | +-f 1 2025-09-09 21:03:16.395623 | centos-9-stream | + 2025-09-09 21:03:16.395630 | centos-9-stream | +# Ignore errors 2025-09-09 21:03:16.395639 | centos-9-stream | +## e.g. caused by users or files not found in the local environment 2025-09-09 21:03:16.395646 | centos-9-stream | +-i 2025-09-09 21:03:16.395654 | centos-9-stream | + 2025-09-09 21:03:16.395662 | centos-9-stream | +# Self Auditing --------------------------------------------------------------- 2025-09-09 21:03:16.395670 | centos-9-stream | + 2025-09-09 21:03:16.395678 | centos-9-stream | +## Audit the audit logs 2025-09-09 21:03:16.395685 | centos-9-stream | +### Successful and unsuccessful attempts to read information from the audit records 2025-09-09 21:03:16.395693 | centos-9-stream | +-w /var/log/audit/ -p wra -k auditlog 2025-09-09 21:03:16.395708 | centos-9-stream | +-w /var/audit/ -p wra -k auditlog 2025-09-09 21:03:16.395715 | centos-9-stream | + 2025-09-09 21:03:16.395792 | centos-9-stream | +## Auditd configuration 2025-09-09 21:03:16.395887 | centos-9-stream | +### Modifications to audit configuration that occur while the audit collection functions are operating 2025-09-09 21:03:16.395984 | centos-9-stream | +-w /etc/audit/ -p wa -k auditconfig 2025-09-09 21:03:16.396086 | centos-9-stream | +-w /etc/libaudit.conf -p wa -k auditconfig 2025-09-09 21:03:16.396187 | centos-9-stream | +-w /etc/audisp/ -p wa -k audispconfig 2025-09-09 21:03:16.396314 | centos-9-stream | + 2025-09-09 21:03:16.396387 | centos-9-stream | +## Monitor for use of audit management tools 2025-09-09 21:03:16.396500 | centos-9-stream | +-w /sbin/auditctl -p x -k audittools 2025-09-09 21:03:16.396643 | centos-9-stream | +-w /sbin/auditd -p x -k audittools 2025-09-09 21:03:16.396804 | centos-9-stream | +-w /usr/sbin/auditd -p x -k audittools 2025-09-09 21:03:16.396909 | centos-9-stream | +-w /usr/sbin/augenrules -p x -k audittools 2025-09-09 21:03:16.397028 | centos-9-stream | + 2025-09-09 21:03:16.397151 | centos-9-stream | +## Access to all audit trails 2025-09-09 21:03:16.397248 | centos-9-stream | + 2025-09-09 21:03:16.397351 | centos-9-stream | +-a always,exit -F path=/usr/sbin/ausearch -F perm=x -k audittools 2025-09-09 21:03:16.397472 | centos-9-stream | +-a always,exit -F path=/usr/sbin/aureport -F perm=x -k audittools 2025-09-09 21:03:16.397571 | centos-9-stream | +-a always,exit -F path=/usr/sbin/aulast -F perm=x -k audittools 2025-09-09 21:03:16.397671 | centos-9-stream | +-a always,exit -F path=/usr/sbin/aulastlogin -F perm=x -k audittools 2025-09-09 21:03:16.397799 | centos-9-stream | +-a always,exit -F path=/usr/sbin/auvirt -F perm=x -k audittools 2025-09-09 21:03:16.397898 | centos-9-stream | + 2025-09-09 21:03:16.397999 | centos-9-stream | +# Filters --------------------------------------------------------------------- 2025-09-09 21:03:16.398095 | centos-9-stream | + 2025-09-09 21:03:16.398199 | centos-9-stream | +### We put these early because audit is a first match wins system. 2025-09-09 21:03:16.398297 | centos-9-stream | + 2025-09-09 21:03:16.398398 | centos-9-stream | +## Ignore SELinux AVC records 2025-09-09 21:03:16.398522 | centos-9-stream | +-a always,exclude -F msgtype=AVC 2025-09-09 21:03:16.398618 | centos-9-stream | + 2025-09-09 21:03:16.398718 | centos-9-stream | +## Ignore current working directory records 2025-09-09 21:03:16.398836 | centos-9-stream | +-a always,exclude -F msgtype=CWD 2025-09-09 21:03:16.398929 | centos-9-stream | + 2025-09-09 21:03:16.399039 | centos-9-stream | +## Cron jobs fill the logs with stuff we normally don't want (works with SELinux) 2025-09-09 21:03:16.399142 | centos-9-stream | +-a never,user -F subj_type=crond_t 2025-09-09 21:03:16.399241 | centos-9-stream | +-a never,exit -F subj_type=crond_t 2025-09-09 21:03:16.399338 | centos-9-stream | + 2025-09-09 21:03:16.399437 | centos-9-stream | +## This prevents chrony from overwhelming the logs 2025-09-09 21:03:16.399557 | centos-9-stream | +-a never,exit -F arch=b64 -S adjtimex -F auid=-1 -F uid=chrony -F subj_type=chronyd_t 2025-09-09 21:03:16.399653 | centos-9-stream | + 2025-09-09 21:03:16.399773 | centos-9-stream | +## This is not very interesting and wastes a lot of space if the server is public facing 2025-09-09 21:03:16.399877 | centos-9-stream | +-a always,exclude -F msgtype=CRYPTO_KEY_USER 2025-09-09 21:03:16.399977 | centos-9-stream | + 2025-09-09 21:03:16.400078 | centos-9-stream | +## Open VM Tools 2025-09-09 21:03:16.400182 | centos-9-stream | +-a exit,never -F arch=b64 -S all -F exe=/usr/bin/vmtoolsd 2025-09-09 21:03:16.400279 | centos-9-stream | + 2025-09-09 21:03:16.400381 | centos-9-stream | +## High Volume Event Filter (especially on Linux Workstations) 2025-09-09 21:03:16.400499 | centos-9-stream | +-a never,exit -F arch=b64 -F dir=/dev/shm -k sharedmemaccess 2025-09-09 21:03:16.400602 | centos-9-stream | +-a never,exit -F arch=b64 -F dir=/var/lock/lvm -k locklvm 2025-09-09 21:03:16.400697 | centos-9-stream | + 2025-09-09 21:03:16.400830 | centos-9-stream | +## FileBeat 2025-09-09 21:03:16.400928 | centos-9-stream | +-a never,exit -F arch=b64 -F path=/opt/filebeat -k filebeat 2025-09-09 21:03:16.401026 | centos-9-stream | + 2025-09-09 21:03:16.401126 | centos-9-stream | +## More information on how to filter events 2025-09-09 21:03:16.401227 | centos-9-stream | +### https://access.redhat.com/solutions/2482221 2025-09-09 21:03:16.401323 | centos-9-stream | + 2025-09-09 21:03:16.401423 | centos-9-stream | +# Rules ----------------------------------------------------------------------- 2025-09-09 21:03:16.401535 | centos-9-stream | + 2025-09-09 21:03:16.401640 | centos-9-stream | +## Kernel parameters 2025-09-09 21:03:16.401790 | centos-9-stream | +-w /etc/sysctl.conf -p wa -k sysctl 2025-09-09 21:03:16.401856 | centos-9-stream | +-w /etc/sysctl.d -p wa -k sysctl 2025-09-09 21:03:16.401955 | centos-9-stream | + 2025-09-09 21:03:16.402053 | centos-9-stream | +## Kernel module loading and unloading 2025-09-09 21:03:16.402156 | centos-9-stream | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/insmod -k modules 2025-09-09 21:03:16.402259 | centos-9-stream | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/modprobe -k modules 2025-09-09 21:03:16.402358 | centos-9-stream | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/rmmod -k modules 2025-09-09 21:03:16.402488 | centos-9-stream | +-a always,exit -F arch=b64 -S finit_module -S init_module -S delete_module -F auid!=-1 -k modules 2025-09-09 21:03:16.402575 | centos-9-stream | + 2025-09-09 21:03:16.402674 | centos-9-stream | +## Modprobe configuration 2025-09-09 21:03:16.402788 | centos-9-stream | +-w /etc/modprobe.conf -p wa -k modprobe 2025-09-09 21:03:16.402886 | centos-9-stream | +-w /etc/modprobe.d -p wa -k modprobe 2025-09-09 21:03:16.402984 | centos-9-stream | + 2025-09-09 21:03:16.403082 | centos-9-stream | +## KExec usage (all actions) 2025-09-09 21:03:16.403184 | centos-9-stream | +-a always,exit -F arch=b64 -S kexec_load -k KEXEC 2025-09-09 21:03:16.403278 | centos-9-stream | + 2025-09-09 21:03:16.403380 | centos-9-stream | +## Special files 2025-09-09 21:03:16.403494 | centos-9-stream | +-a always,exit -F arch=b64 -S mknod -S mknodat -k specialfiles 2025-09-09 21:03:16.403594 | centos-9-stream | + 2025-09-09 21:03:16.403691 | centos-9-stream | +## Mount operations (only attributable) 2025-09-09 21:03:16.403823 | centos-9-stream | +-a always,exit -F arch=b64 -S mount -S umount2 -F auid!=-1 -k mount 2025-09-09 21:03:16.403913 | centos-9-stream | + 2025-09-09 21:03:16.404016 | centos-9-stream | +### NFS mount 2025-09-09 21:03:16.404127 | centos-9-stream | +-a always,exit -F path=/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-09 21:03:16.404237 | centos-9-stream | +-a always,exit -F path=/usr/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-09 21:03:16.404334 | centos-9-stream | + 2025-09-09 21:03:16.404435 | centos-9-stream | +## Change swap (only attributable) 2025-09-09 21:03:16.404553 | centos-9-stream | +-a always,exit -F arch=b64 -S swapon -S swapoff -F auid!=-1 -k swap 2025-09-09 21:03:16.404649 | centos-9-stream | + 2025-09-09 21:03:16.404764 | centos-9-stream | +## Time 2025-09-09 21:03:16.404864 | centos-9-stream | +-a always,exit -F arch=b64 -F uid!=ntp -S adjtimex -S settimeofday -S clock_settime -k time 2025-09-09 21:03:16.404962 | centos-9-stream | +### Local time zone 2025-09-09 21:03:16.405062 | centos-9-stream | +-w /etc/localtime -p wa -k localtime 2025-09-09 21:03:16.405158 | centos-9-stream | + 2025-09-09 21:03:16.405258 | centos-9-stream | +## Stunnel 2025-09-09 21:03:16.405359 | centos-9-stream | +-w /usr/sbin/stunnel -p x -k stunnel 2025-09-09 21:03:16.405488 | centos-9-stream | +-w /usr/bin/stunnel -p x -k stunnel 2025-09-09 21:03:16.405571 | centos-9-stream | + 2025-09-09 21:03:16.405673 | centos-9-stream | +## Cron configuration & scheduled jobs 2025-09-09 21:03:16.405789 | centos-9-stream | +-w /etc/cron.allow -p wa -k cron 2025-09-09 21:03:16.405884 | centos-9-stream | +-w /etc/cron.deny -p wa -k cron 2025-09-09 21:03:16.405985 | centos-9-stream | +-w /etc/cron.d/ -p wa -k cron 2025-09-09 21:03:16.406085 | centos-9-stream | +-w /etc/cron.daily/ -p wa -k cron 2025-09-09 21:03:16.406185 | centos-9-stream | +-w /etc/cron.hourly/ -p wa -k cron 2025-09-09 21:03:16.406284 | centos-9-stream | +-w /etc/cron.monthly/ -p wa -k cron 2025-09-09 21:03:16.406383 | centos-9-stream | +-w /etc/cron.weekly/ -p wa -k cron 2025-09-09 21:03:16.406510 | centos-9-stream | +-w /etc/crontab -p wa -k cron 2025-09-09 21:03:16.406599 | centos-9-stream | +-w /var/spool/cron/ -p wa -k cron 2025-09-09 21:03:16.406695 | centos-9-stream | + 2025-09-09 21:03:16.406829 | centos-9-stream | +## User, group, password databases 2025-09-09 21:03:16.406928 | centos-9-stream | +-w /etc/group -p wa -k etcgroup 2025-09-09 21:03:16.407028 | centos-9-stream | +-w /etc/passwd -p wa -k etcpasswd 2025-09-09 21:03:16.407129 | centos-9-stream | +-w /etc/gshadow -k etcgroup 2025-09-09 21:03:16.407230 | centos-9-stream | +-w /etc/shadow -k etcpasswd 2025-09-09 21:03:16.407331 | centos-9-stream | +-w /etc/security/opasswd -k opasswd 2025-09-09 21:03:16.407429 | centos-9-stream | + 2025-09-09 21:03:16.407540 | centos-9-stream | +## Sudoers file changes 2025-09-09 21:03:16.407638 | centos-9-stream | +-w /etc/sudoers -p wa -k actions 2025-09-09 21:03:16.407791 | centos-9-stream | +-w /etc/sudoers.d/ -p wa -k actions 2025-09-09 21:03:16.407918 | centos-9-stream | + 2025-09-09 21:03:16.408012 | centos-9-stream | +## Passwd 2025-09-09 21:03:16.408114 | centos-9-stream | +-w /usr/bin/passwd -p x -k passwd_modification 2025-09-09 21:03:16.408208 | centos-9-stream | + 2025-09-09 21:03:16.408312 | centos-9-stream | +## Tools to change group identifiers 2025-09-09 21:03:16.408415 | centos-9-stream | +-w /usr/sbin/groupadd -p x -k group_modification 2025-09-09 21:03:16.408531 | centos-9-stream | +-w /usr/sbin/groupmod -p x -k group_modification 2025-09-09 21:03:16.408632 | centos-9-stream | +-w /usr/sbin/addgroup -p x -k group_modification 2025-09-09 21:03:16.408732 | centos-9-stream | +-w /usr/sbin/useradd -p x -k user_modification 2025-09-09 21:03:16.408856 | centos-9-stream | +-w /usr/sbin/userdel -p x -k user_modification 2025-09-09 21:03:16.408957 | centos-9-stream | +-w /usr/sbin/usermod -p x -k user_modification 2025-09-09 21:03:16.409057 | centos-9-stream | +-w /usr/sbin/adduser -p x -k user_modification 2025-09-09 21:03:16.409152 | centos-9-stream | + 2025-09-09 21:03:16.409255 | centos-9-stream | +## Login configuration and information 2025-09-09 21:03:16.409356 | centos-9-stream | +-w /etc/login.defs -p wa -k login 2025-09-09 21:03:16.409480 | centos-9-stream | +-w /etc/securetty -p wa -k login 2025-09-09 21:03:16.409566 | centos-9-stream | +-w /var/log/faillog -p wa -k login 2025-09-09 21:03:16.409668 | centos-9-stream | +-w /var/log/lastlog -p wa -k login 2025-09-09 21:03:16.409797 | centos-9-stream | +-w /var/log/tallylog -p wa -k login 2025-09-09 21:03:16.409891 | centos-9-stream | + 2025-09-09 21:03:16.409975 | centos-9-stream | +## Network Environment 2025-09-09 21:03:16.410073 | centos-9-stream | +### Changes to hostname 2025-09-09 21:03:16.410184 | centos-9-stream | +-a always,exit -F arch=b64 -S sethostname -S setdomainname -k network_modifications 2025-09-09 21:03:16.410283 | centos-9-stream | + 2025-09-09 21:03:16.410384 | centos-9-stream | +### Detect Remote Shell Use 2025-09-09 21:03:16.410502 | centos-9-stream | +-a always,exit -F arch=b64 -F exe=/bin/bash -F success=1 -S connect -k "remote_shell" 2025-09-09 21:03:16.410607 | centos-9-stream | +-a always,exit -F arch=b64 -F exe=/usr/bin/bash -F success=1 -S connect -k "remote_shell" 2025-09-09 21:03:16.410702 | centos-9-stream | + 2025-09-09 21:03:16.410829 | centos-9-stream | +### Successful IPv4 Connections 2025-09-09 21:03:16.410938 | centos-9-stream | +-a always,exit -F arch=b64 -S connect -F a2=16 -F success=1 -F key=network_connect_4 2025-09-09 21:03:16.411054 | centos-9-stream | + 2025-09-09 21:03:16.411136 | centos-9-stream | +### Successful IPv6 Connections 2025-09-09 21:03:16.411243 | centos-9-stream | +-a always,exit -F arch=b64 -S connect -F a2=28 -F success=1 -F key=network_connect_6 2025-09-09 21:03:16.411338 | centos-9-stream | + 2025-09-09 21:03:16.411439 | centos-9-stream | +### Changes to other files 2025-09-09 21:03:16.411550 | centos-9-stream | +-w /etc/hosts -p wa -k network_modifications 2025-09-09 21:03:16.411649 | centos-9-stream | +-w /etc/sysconfig/network -p wa -k network_modifications 2025-09-09 21:03:16.411765 | centos-9-stream | +-w /etc/sysconfig/network-scripts -p w -k network_modifications 2025-09-09 21:03:16.411862 | centos-9-stream | +-w /etc/network/ -p wa -k network 2025-09-09 21:03:16.411967 | centos-9-stream | +-a always,exit -F dir=/etc/NetworkManager/ -F perm=wa -k network_modifications 2025-09-09 21:03:16.412061 | centos-9-stream | + 2025-09-09 21:03:16.412163 | centos-9-stream | +### Changes to issue 2025-09-09 21:03:16.412260 | centos-9-stream | +-w /etc/issue -p wa -k etcissue 2025-09-09 21:03:16.412359 | centos-9-stream | +-w /etc/issue.net -p wa -k etcissue 2025-09-09 21:03:16.412481 | centos-9-stream | + 2025-09-09 21:03:16.412568 | centos-9-stream | +## System startup scripts 2025-09-09 21:03:16.412668 | centos-9-stream | +-w /etc/inittab -p wa -k init 2025-09-09 21:03:16.412793 | centos-9-stream | +-w /etc/init.d/ -p wa -k init 2025-09-09 21:03:16.412892 | centos-9-stream | +-w /etc/init/ -p wa -k init 2025-09-09 21:03:16.412989 | centos-9-stream | + 2025-09-09 21:03:16.413087 | centos-9-stream | +## Library search paths 2025-09-09 21:03:16.413187 | centos-9-stream | +-w /etc/ld.so.conf -p wa -k libpath 2025-09-09 21:03:16.413287 | centos-9-stream | +-w /etc/ld.so.conf.d -p wa -k libpath 2025-09-09 21:03:16.413384 | centos-9-stream | + 2025-09-09 21:03:16.413501 | centos-9-stream | +## Systemwide library preloads (LD_PRELOAD) 2025-09-09 21:03:16.413598 | centos-9-stream | +-w /etc/ld.so.preload -p wa -k systemwide_preloads 2025-09-09 21:03:16.413694 | centos-9-stream | + 2025-09-09 21:03:16.413807 | centos-9-stream | +## Pam configuration 2025-09-09 21:03:16.413901 | centos-9-stream | +-w /etc/pam.d/ -p wa -k pam 2025-09-09 21:03:16.414006 | centos-9-stream | +-w /etc/security/limits.conf -p wa -k pam 2025-09-09 21:03:16.414107 | centos-9-stream | +-w /etc/security/limits.d -p wa -k pam 2025-09-09 21:03:16.414207 | centos-9-stream | +-w /etc/security/pam_env.conf -p wa -k pam 2025-09-09 21:03:16.414327 | centos-9-stream | +-w /etc/security/namespace.conf -p wa -k pam 2025-09-09 21:03:16.414409 | centos-9-stream | +-w /etc/security/namespace.d -p wa -k pam 2025-09-09 21:03:16.414521 | centos-9-stream | +-w /etc/security/namespace.init -p wa -k pam 2025-09-09 21:03:16.414615 | centos-9-stream | + 2025-09-09 21:03:16.414715 | centos-9-stream | +## Mail configuration 2025-09-09 21:03:16.414829 | centos-9-stream | +-w /etc/aliases -p wa -k mail 2025-09-09 21:03:16.414927 | centos-9-stream | +-w /etc/postfix/ -p wa -k mail 2025-09-09 21:03:16.415026 | centos-9-stream | +-w /etc/exim4/ -p wa -k mail 2025-09-09 21:03:16.415124 | centos-9-stream | + 2025-09-09 21:03:16.415225 | centos-9-stream | +## SSH configuration 2025-09-09 21:03:16.415325 | centos-9-stream | +-w /etc/ssh/sshd_config -k sshd 2025-09-09 21:03:16.415447 | centos-9-stream | +-w /etc/ssh/sshd_config.d -k sshd 2025-09-09 21:03:16.415535 | centos-9-stream | + 2025-09-09 21:03:16.415634 | centos-9-stream | +## root ssh key tampering 2025-09-09 21:03:16.415731 | centos-9-stream | +-w /root/.ssh -p wa -k rootkey 2025-09-09 21:03:16.415870 | centos-9-stream | + 2025-09-09 21:03:16.415969 | centos-9-stream | +# Systemd 2025-09-09 21:03:16.416074 | centos-9-stream | +-w /bin/systemctl -p x -k systemd 2025-09-09 21:03:16.416170 | centos-9-stream | +-w /etc/systemd/ -p wa -k systemd 2025-09-09 21:03:16.416267 | centos-9-stream | +-w /usr/lib/systemd -p wa -k systemd 2025-09-09 21:03:16.416363 | centos-9-stream | + 2025-09-09 21:03:16.416488 | centos-9-stream | +## https://systemd.network/systemd.generator.html 2025-09-09 21:03:16.416588 | centos-9-stream | +-w /etc/systemd/system-generators/ -p wa -k systemd_generator 2025-09-09 21:03:16.416675 | centos-9-stream | +-w /usr/local/lib/systemd/system-generators/ -p wa -k systemd_generator 2025-09-09 21:03:16.416793 | centos-9-stream | +-w /usr/lib/systemd/system-generators -p wa -k systemd_generator 2025-09-09 21:03:16.416888 | centos-9-stream | + 2025-09-09 21:03:16.416992 | centos-9-stream | +-w /etc/systemd/user-generators/ -p wa -k systemd_generator 2025-09-09 21:03:16.417089 | centos-9-stream | +-w /usr/local/lib/systemd/user-generators/ -p wa -k systemd_generator 2025-09-09 21:03:16.417186 | centos-9-stream | +-w /lib/systemd/system-generators/ -p wa -k systemd_generator 2025-09-09 21:03:16.417282 | centos-9-stream | + 2025-09-09 21:03:16.417391 | centos-9-stream | +## SELinux events that modify the system's Mandatory Access Controls (MAC) 2025-09-09 21:03:16.417498 | centos-9-stream | +-w /etc/selinux/ -p wa -k mac_policy 2025-09-09 21:03:16.417592 | centos-9-stream | + 2025-09-09 21:03:16.417703 | centos-9-stream | +## Critical elements access failures 2025-09-09 21:03:16.417831 | centos-9-stream | +-a always,exit -F arch=b64 -S open -F dir=/etc -F success=0 -k unauthedfileaccess 2025-09-09 21:03:16.417934 | centos-9-stream | +-a always,exit -F arch=b64 -S open -F dir=/bin -F success=0 -k unauthedfileaccess 2025-09-09 21:03:16.418040 | centos-9-stream | +-a always,exit -F arch=b64 -S open -F dir=/sbin -F success=0 -k unauthedfileaccess 2025-09-09 21:03:16.418142 | centos-9-stream | +-a always,exit -F arch=b64 -S open -F dir=/usr/bin -F success=0 -k unauthedfileaccess 2025-09-09 21:03:16.418245 | centos-9-stream | +-a always,exit -F arch=b64 -S open -F dir=/usr/sbin -F success=0 -k unauthedfileaccess 2025-09-09 21:03:16.418351 | centos-9-stream | +-a always,exit -F arch=b64 -S open -F dir=/var -F success=0 -k unauthedfileaccess 2025-09-09 21:03:16.418482 | centos-9-stream | +-a always,exit -F arch=b64 -S open -F dir=/home -F success=0 -k unauthedfileaccess 2025-09-09 21:03:16.418570 | centos-9-stream | +-a always,exit -F arch=b64 -S open -F dir=/srv -F success=0 -k unauthedfileaccess 2025-09-09 21:03:16.418675 | centos-9-stream | + 2025-09-09 21:03:16.418781 | centos-9-stream | +## Process ID change (switching accounts) applications 2025-09-09 21:03:16.418907 | centos-9-stream | +-w /bin/su -p x -k priv_esc 2025-09-09 21:03:16.418984 | centos-9-stream | +-w /usr/bin/sudo -p x -k priv_esc 2025-09-09 21:03:16.419080 | centos-9-stream | + 2025-09-09 21:03:16.419177 | centos-9-stream | +## Power state 2025-09-09 21:03:16.419278 | centos-9-stream | +-w /sbin/shutdown -p x -k power 2025-09-09 21:03:16.419378 | centos-9-stream | +-w /sbin/poweroff -p x -k power 2025-09-09 21:03:16.419491 | centos-9-stream | +-w /sbin/reboot -p x -k power 2025-09-09 21:03:16.419588 | centos-9-stream | +-w /sbin/halt -p x -k power 2025-09-09 21:03:16.419683 | centos-9-stream | + 2025-09-09 21:03:16.419796 | centos-9-stream | +## Session initiation information 2025-09-09 21:03:16.419896 | centos-9-stream | +-w /var/run/utmp -p wa -k session 2025-09-09 21:03:16.420005 | centos-9-stream | +-w /var/log/btmp -p wa -k session 2025-09-09 21:03:16.420098 | centos-9-stream | +-w /var/log/wtmp -p wa -k session 2025-09-09 21:03:16.420195 | centos-9-stream | + 2025-09-09 21:03:16.420299 | centos-9-stream | +## Discretionary Access Control (DAC) modifications 2025-09-09 21:03:16.420401 | centos-9-stream | +-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:16.420517 | centos-9-stream | +-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:16.420619 | centos-9-stream | +-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:16.420720 | centos-9-stream | +-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:16.420835 | centos-9-stream | +-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:16.420938 | centos-9-stream | +-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:16.421061 | centos-9-stream | +-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:16.421148 | centos-9-stream | +-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:16.421248 | centos-9-stream | +-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:16.421352 | centos-9-stream | +-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:16.421475 | centos-9-stream | +-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:16.421567 | centos-9-stream | +-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:16.421675 | centos-9-stream | +-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:16.421793 | centos-9-stream | + 2025-09-09 21:03:16.421892 | centos-9-stream | +# Special Rules --------------------------------------------------------------- 2025-09-09 21:03:16.421990 | centos-9-stream | + 2025-09-09 21:03:16.422086 | centos-9-stream | +## Reconnaissance 2025-09-09 21:03:16.422211 | centos-9-stream | +-w /usr/bin/whoami -p x -k recon 2025-09-09 21:03:16.422291 | centos-9-stream | +-w /usr/bin/id -p x -k recon 2025-09-09 21:03:16.422400 | centos-9-stream | +-w /bin/hostname -p x -k recon 2025-09-09 21:03:16.422506 | centos-9-stream | +-w /bin/uname -p x -k recon 2025-09-09 21:03:16.422604 | centos-9-stream | +-w /etc/issue -p r -k recon 2025-09-09 21:03:16.422706 | centos-9-stream | +-w /etc/hostname -p r -k recon 2025-09-09 21:03:16.422813 | centos-9-stream | + 2025-09-09 21:03:16.422910 | centos-9-stream | +## Suspicious activity 2025-09-09 21:03:16.423012 | centos-9-stream | +-w /usr/bin/wget -p x -k susp_activity 2025-09-09 21:03:16.423112 | centos-9-stream | +-w /usr/bin/curl -p x -k susp_activity 2025-09-09 21:03:16.423211 | centos-9-stream | +-w /usr/bin/base64 -p x -k susp_activity 2025-09-09 21:03:16.423313 | centos-9-stream | +-w /bin/nc -p x -k susp_activity 2025-09-09 21:03:16.423411 | centos-9-stream | +-w /bin/netcat -p x -k susp_activity 2025-09-09 21:03:16.423522 | centos-9-stream | +-w /usr/bin/ncat -p x -k susp_activity 2025-09-09 21:03:16.423622 | centos-9-stream | +-w /usr/bin/ss -p x -k susp_activity 2025-09-09 21:03:16.423721 | centos-9-stream | +-w /usr/bin/netstat -p x -k susp_activity 2025-09-09 21:03:16.423834 | centos-9-stream | +-w /usr/bin/ssh -p x -k susp_activity 2025-09-09 21:03:16.423929 | centos-9-stream | +-w /usr/bin/scp -p x -k susp_activity 2025-09-09 21:03:16.424029 | centos-9-stream | +-w /usr/bin/sftp -p x -k susp_activity 2025-09-09 21:03:16.424127 | centos-9-stream | +-w /usr/bin/ftp -p x -k susp_activity 2025-09-09 21:03:16.424226 | centos-9-stream | +-w /usr/bin/socat -p x -k susp_activity 2025-09-09 21:03:16.424323 | centos-9-stream | +-w /usr/bin/wireshark -p x -k susp_activity 2025-09-09 21:03:16.424423 | centos-9-stream | +-w /usr/bin/tshark -p x -k susp_activity 2025-09-09 21:03:16.424535 | centos-9-stream | +-w /usr/bin/rawshark -p x -k susp_activity 2025-09-09 21:03:16.424639 | centos-9-stream | +-w /usr/bin/rdesktop -p x -k susp_activity 2025-09-09 21:03:16.424762 | centos-9-stream | +-w /usr/local/bin/rdesktop -p x -k susp_activity 2025-09-09 21:03:16.424852 | centos-9-stream | +-w /usr/bin/wlfreerdp -p x -k susp_activity 2025-09-09 21:03:16.424953 | centos-9-stream | +-w /usr/bin/xfreerdp -p x -k susp_activity 2025-09-09 21:03:16.425057 | centos-9-stream | +-w /usr/local/bin/xfreerdp -p x -k susp_activity 2025-09-09 21:03:16.425155 | centos-9-stream | +-w /usr/bin/nmap -p x -k susp_activity 2025-09-09 21:03:16.425251 | centos-9-stream | + 2025-09-09 21:03:16.425353 | centos-9-stream | +## sssd 2025-09-09 21:03:16.425531 | centos-9-stream | +-a always,exit -F path=/usr/libexec/sssd/p11_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-09 21:03:16.425590 | centos-9-stream | +-a always,exit -F path=/usr/libexec/sssd/krb5_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-09 21:03:16.425699 | centos-9-stream | +-a always,exit -F path=/usr/libexec/sssd/ldap_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-09 21:03:16.425839 | centos-9-stream | +-a always,exit -F path=/usr/libexec/sssd/selinux_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-09 21:03:16.425946 | centos-9-stream | +-a always,exit -F path=/usr/libexec/sssd/proxy_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-09 21:03:16.426044 | centos-9-stream | + 2025-09-09 21:03:16.121075 | ubuntu-jammy | ok: [molecule-auditd] => (item={'parameter': 'active', 'value': 'no', 'config': '/etc/audit/plugins.d/syslog.conf'}) => {"ansible_loop_var": "item", "backup": "", "changed": false, "item": {"config": "/etc/audit/plugins.d/syslog.conf", "parameter": "active", "value": "no"}, "msg": ""} 2025-09-09 21:03:16.426145 | centos-9-stream | +## T1002 Data Compressed 2025-09-09 21:03:16.121384 | ubuntu-jammy | 2025-09-09 21:03:16.426242 | centos-9-stream | + 2025-09-09 21:03:16.121740 | ubuntu-jammy | TASK [auditd : Deploy rules for auditd] **************************************** 2025-09-09 21:03:16.426345 | centos-9-stream | +-w /usr/bin/zip -p x -k Data_Compressed 2025-09-09 21:03:16.426483 | centos-9-stream | +-w /usr/bin/gzip -p x -k Data_Compressed 2025-09-09 21:03:16.426559 | centos-9-stream | +-w /usr/bin/tar -p x -k Data_Compressed 2025-09-09 21:03:16.426659 | centos-9-stream | +-w /usr/bin/bzip2 -p x -k Data_Compressed 2025-09-09 21:03:16.426765 | centos-9-stream | + 2025-09-09 21:03:16.426863 | centos-9-stream | +-w /usr/bin/lzip -p x -k Data_Compressed 2025-09-09 21:03:16.426966 | centos-9-stream | +-w /usr/local/bin/lzip -p x -k Data_Compressed 2025-09-09 21:03:16.427061 | centos-9-stream | + 2025-09-09 21:03:16.427161 | centos-9-stream | +-w /usr/bin/lz4 -p x -k Data_Compressed 2025-09-09 21:03:16.427258 | centos-9-stream | +-w /usr/local/bin/lz4 -p x -k Data_Compressed 2025-09-09 21:03:16.427351 | centos-9-stream | + 2025-09-09 21:03:16.427476 | centos-9-stream | +-w /usr/bin/lzop -p x -k Data_Compressed 2025-09-09 21:03:16.427566 | centos-9-stream | +-w /usr/local/bin/lzop -p x -k Data_Compressed 2025-09-09 21:03:16.427661 | centos-9-stream | + 2025-09-09 21:03:16.427771 | centos-9-stream | +-w /usr/bin/plzip -p x -k Data_Compressed 2025-09-09 21:03:16.427873 | centos-9-stream | +-w /usr/local/bin/plzip -p x -k Data_Compressed 2025-09-09 21:03:16.428039 | centos-9-stream | + 2025-09-09 21:03:16.428141 | centos-9-stream | +-w /usr/bin/pbzip2 -p x -k Data_Compressed 2025-09-09 21:03:16.428249 | centos-9-stream | +-w /usr/local/bin/pbzip2 -p x -k Data_Compressed 2025-09-09 21:03:16.428338 | centos-9-stream | + 2025-09-09 21:03:16.428435 | centos-9-stream | +-w /usr/bin/lbzip2 -p x -k Data_Compressed 2025-09-09 21:03:16.428556 | centos-9-stream | +-w /usr/local/bin/lbzip2 -p x -k Data_Compressed 2025-09-09 21:03:16.428651 | centos-9-stream | + 2025-09-09 21:03:16.428810 | centos-9-stream | +-w /usr/bin/pixz -p x -k Data_Compressed 2025-09-09 21:03:16.428878 | centos-9-stream | +-w /usr/local/bin/pixz -p x -k Data_Compressed 2025-09-09 21:03:16.428975 | centos-9-stream | + 2025-09-09 21:03:16.429080 | centos-9-stream | +-w /usr/bin/pigz -p x -k Data_Compressed 2025-09-09 21:03:16.429178 | centos-9-stream | +-w /usr/local/bin/pigz -p x -k Data_Compressed 2025-09-09 21:03:16.429280 | centos-9-stream | +-w /usr/bin/unpigz -p x -k Data_Compressed 2025-09-09 21:03:16.429381 | centos-9-stream | +-w /usr/local/bin/unpigz -p x -k Data_Compressed 2025-09-09 21:03:16.429491 | centos-9-stream | + 2025-09-09 21:03:16.429590 | centos-9-stream | +-w /usr/bin/zstd -p x -k Data_Compressed 2025-09-09 21:03:16.429690 | centos-9-stream | +-w /usr/local/bin/zstd -p x -k Data_Compressed 2025-09-09 21:03:16.429802 | centos-9-stream | + 2025-09-09 21:03:16.429900 | centos-9-stream | +## Added to catch netcat on Ubuntu 2025-09-09 21:03:16.430003 | centos-9-stream | +-w /bin/nc.openbsd -p x -k susp_activity 2025-09-09 21:03:16.430101 | centos-9-stream | +-w /bin/nc.traditional -p x -k susp_activity 2025-09-09 21:03:16.430195 | centos-9-stream | + 2025-09-09 21:03:16.430296 | centos-9-stream | +## Sbin suspicious activity 2025-09-09 21:03:16.430397 | centos-9-stream | +-w /sbin/iptables -p x -k sbin_susp 2025-09-09 21:03:16.430512 | centos-9-stream | +-w /sbin/ip6tables -p x -k sbin_susp 2025-09-09 21:03:16.430611 | centos-9-stream | +-w /sbin/ifconfig -p x -k sbin_susp 2025-09-09 21:03:16.430711 | centos-9-stream | +-w /usr/sbin/arptables -p x -k sbin_susp 2025-09-09 21:03:16.430820 | centos-9-stream | +-w /usr/sbin/ebtables -p x -k sbin_susp 2025-09-09 21:03:16.430920 | centos-9-stream | +-w /sbin/xtables-nft-multi -p x -k sbin_susp 2025-09-09 21:03:16.431034 | centos-9-stream | +-w /usr/sbin/nft -p x -k sbin_susp 2025-09-09 21:03:16.431118 | centos-9-stream | +-w /usr/sbin/tcpdump -p x -k sbin_susp 2025-09-09 21:03:16.431217 | centos-9-stream | +-w /usr/sbin/traceroute -p x -k sbin_susp 2025-09-09 21:03:16.431314 | centos-9-stream | +-w /usr/sbin/ufw -p x -k sbin_susp 2025-09-09 21:03:16.431407 | centos-9-stream | + 2025-09-09 21:03:16.431545 | centos-9-stream | +### kde4 2025-09-09 21:03:16.431659 | centos-9-stream | +-a always,exit -F path=/usr/libexec/kde4/kpac_dhcp_helper -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-09 21:03:16.431789 | centos-9-stream | +-a always,exit -F path=/usr/libexec/kde4/kdesud -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-09 21:03:16.431876 | centos-9-stream | + 2025-09-09 21:03:16.431974 | centos-9-stream | +## dbus-send invocation 2025-09-09 21:03:16.432076 | centos-9-stream | +### may indicate privilege escalation CVE-2021-3560 2025-09-09 21:03:16.432188 | centos-9-stream | +-w /usr/bin/dbus-send -p x -k dbus_send 2025-09-09 21:03:16.432274 | centos-9-stream | +-w /usr/bin/gdbus -p x -k gdubs_call 2025-09-09 21:03:16.432369 | centos-9-stream | + 2025-09-09 21:03:16.432487 | centos-9-stream | +## pkexec invocation 2025-09-09 21:03:16.432587 | centos-9-stream | +### may indicate privilege escalation CVE-2021-4034 2025-09-09 21:03:16.432687 | centos-9-stream | +-w /usr/bin/pkexec -p x -k pkexec 2025-09-09 21:03:16.432808 | centos-9-stream | + 2025-09-09 21:03:16.432906 | centos-9-stream | +## Suspicious shells 2025-09-09 21:03:16.433006 | centos-9-stream | +-w /bin/ash -p x -k susp_shell 2025-09-09 21:03:16.433108 | centos-9-stream | +-w /bin/csh -p x -k susp_shell 2025-09-09 21:03:16.433206 | centos-9-stream | +-w /bin/fish -p x -k susp_shell 2025-09-09 21:03:16.433307 | centos-9-stream | +-w /bin/tcsh -p x -k susp_shell 2025-09-09 21:03:16.433405 | centos-9-stream | +-w /bin/tclsh -p x -k susp_shell 2025-09-09 21:03:16.433520 | centos-9-stream | +-w /bin/xonsh -p x -k susp_shell 2025-09-09 21:03:16.433620 | centos-9-stream | +-w /usr/local/bin/xonsh -p x -k susp_shell 2025-09-09 21:03:16.433717 | centos-9-stream | +-w /bin/open -p x -k susp_shell 2025-09-09 21:03:16.433825 | centos-9-stream | +-w /bin/rbash -p x -k susp_shell 2025-09-09 21:03:16.433920 | centos-9-stream | + 2025-09-09 21:03:16.434022 | centos-9-stream | +# Web Server Actvity 2025-09-09 21:03:16.434128 | centos-9-stream | +## Change the number "33" to the ID of your WebServer user. Default: www-data:x:33:33 2025-09-09 21:03:16.434230 | centos-9-stream | +-a always,exit -F arch=b64 -S execve -F euid=33 -k detect_execve_www 2025-09-09 21:03:16.434324 | centos-9-stream | + 2025-09-09 21:03:16.434427 | centos-9-stream | +### https://clustershell.readthedocs.io/ 2025-09-09 21:03:16.434545 | centos-9-stream | +-w /bin/clush -p x -k susp_shell 2025-09-09 21:03:16.434642 | centos-9-stream | +-w /usr/local/bin/clush -p x -k susp_shell 2025-09-09 21:03:16.434765 | centos-9-stream | +-w /etc/clustershell/clush.conf -p x -k susp_shell 2025-09-09 21:03:16.434848 | centos-9-stream | + 2025-09-09 21:03:16.434945 | centos-9-stream | +### https://github.com/tmux/tmux 2025-09-09 21:03:16.435043 | centos-9-stream | +-w /bin/tmux -p x -k susp_shell 2025-09-09 21:03:16.435142 | centos-9-stream | +-w /usr/local/bin/tmux -p x -k susp_shell 2025-09-09 21:03:16.435235 | centos-9-stream | + 2025-09-09 21:03:16.435335 | centos-9-stream | +## Shell/profile configurations 2025-09-09 21:03:16.435435 | centos-9-stream | +-w /etc/profile.d/ -p wa -k shell_profiles 2025-09-09 21:03:16.435549 | centos-9-stream | +-w /etc/profile -p wa -k shell_profiles 2025-09-09 21:03:16.435646 | centos-9-stream | +-w /etc/shells -p wa -k shell_profiles 2025-09-09 21:03:16.435763 | centos-9-stream | +-w /etc/bashrc -p wa -k shell_profiles 2025-09-09 21:03:16.435852 | centos-9-stream | +-w /etc/csh.cshrc -p wa -k shell_profiles 2025-09-09 21:03:16.435954 | centos-9-stream | +-w /etc/csh.login -p wa -k shell_profiles 2025-09-09 21:03:16.436052 | centos-9-stream | +-w /etc/fish/ -p wa -k shell_profiles 2025-09-09 21:03:16.436149 | centos-9-stream | +-w /etc/zsh/ -p wa -k shell_profiles 2025-09-09 21:03:16.436246 | centos-9-stream | + 2025-09-09 21:03:16.436346 | centos-9-stream | +### https://github.com/xxh/xxh 2025-09-09 21:03:16.436446 | centos-9-stream | +-w /usr/local/bin/xxh.bash -p x -k susp_shell 2025-09-09 21:03:16.436557 | centos-9-stream | +-w /usr/local/bin/xxh.xsh -p x -k susp_shell 2025-09-09 21:03:16.436658 | centos-9-stream | +-w /usr/local/bin/xxh.zsh -p x -k susp_shell 2025-09-09 21:03:16.436787 | centos-9-stream | + 2025-09-09 21:03:16.436876 | centos-9-stream | +## Injection 2025-09-09 21:03:16.436977 | centos-9-stream | +### These rules watch for code injection by the ptrace facility. 2025-09-09 21:03:16.437079 | centos-9-stream | +### This could indicate someone trying to do something bad or just debugging 2025-09-09 21:03:16.437179 | centos-9-stream | +-a always,exit -F arch=b64 -S ptrace -F a0=0x4 -k code_injection 2025-09-09 21:03:16.437283 | centos-9-stream | +-a always,exit -F arch=b64 -S ptrace -F a0=0x5 -k data_injection 2025-09-09 21:03:16.437382 | centos-9-stream | +-a always,exit -F arch=b64 -S ptrace -F a0=0x6 -k register_injection 2025-09-09 21:03:16.437492 | centos-9-stream | +-a always,exit -F arch=b64 -S ptrace -k tracing 2025-09-09 21:03:16.437589 | centos-9-stream | + 2025-09-09 21:03:16.437699 | centos-9-stream | +## Anonymous File Creation 2025-09-09 21:03:16.437801 | centos-9-stream | +### These rules watch the use of memfd_create 2025-09-09 21:03:16.437911 | centos-9-stream | +### "memfd_create" creates anonymous file and returns a file descriptor to access it 2025-09-09 21:03:16.438015 | centos-9-stream | +### When combined with "fexecve" can be used to stealthily run binaries in memory without touching disk 2025-09-09 21:03:16.438115 | centos-9-stream | +-a always,exit -F arch=b64 -S memfd_create -F key=anon_file_create 2025-09-09 21:03:16.438207 | centos-9-stream | + 2025-09-09 21:03:16.438305 | centos-9-stream | +## Privilege Abuse 2025-09-09 21:03:16.438410 | centos-9-stream | +### The purpose of this rule is to detect when an admin may be abusing power by looking in user's home dir. 2025-09-09 21:03:16.438528 | centos-9-stream | +-a always,exit -F dir=/home -F uid=0 -F auid>=1000 -F auid!=-1 -C auid!=obj_uid -k power_abuse 2025-09-09 21:03:16.438623 | centos-9-stream | + 2025-09-09 21:03:16.438719 | centos-9-stream | +# Socket Creations 2025-09-09 21:03:16.438878 | centos-9-stream | +# will catch both IPv4 and IPv6 2025-09-09 21:03:16.438941 | centos-9-stream | + 2025-09-09 21:03:16.439041 | centos-9-stream | +-a always,exit -F arch=b32 -S socket -F a0=2 -k network_socket_created 2025-09-09 21:03:16.439144 | centos-9-stream | +-a always,exit -F arch=b64 -S socket -F a0=2 -k network_socket_created 2025-09-09 21:03:16.439241 | centos-9-stream | + 2025-09-09 21:03:16.439342 | centos-9-stream | +-a always,exit -F arch=b32 -S socket -F a0=10 -k network_socket_created 2025-09-09 21:03:16.439443 | centos-9-stream | +-a always,exit -F arch=b64 -S socket -F a0=10 -k network_socket_created 2025-09-09 21:03:16.439570 | centos-9-stream | + 2025-09-09 21:03:16.439673 | centos-9-stream | +# Software Management --------------------------------------------------------- 2025-09-09 21:03:16.439788 | centos-9-stream | + 2025-09-09 21:03:16.439878 | centos-9-stream | +# RPM (Redhat/CentOS) 2025-09-09 21:03:16.439981 | centos-9-stream | +-w /usr/bin/rpm -p x -k software_mgmt 2025-09-09 21:03:16.440081 | centos-9-stream | +-w /usr/bin/yum -p x -k software_mgmt 2025-09-09 21:03:16.440175 | centos-9-stream | + 2025-09-09 21:03:16.440273 | centos-9-stream | +# DNF (Fedora/RedHat 8/CentOS 8) 2025-09-09 21:03:16.440370 | centos-9-stream | +-w /usr/bin/dnf -p x -k software_mgmt 2025-09-09 21:03:16.440484 | centos-9-stream | + 2025-09-09 21:03:16.440575 | centos-9-stream | +# YAST/Zypper/RPM (SuSE) 2025-09-09 21:03:16.440675 | centos-9-stream | +-w /sbin/yast -p x -k software_mgmt 2025-09-09 21:03:16.440786 | centos-9-stream | +-w /sbin/yast2 -p x -k software_mgmt 2025-09-09 21:03:16.440883 | centos-9-stream | +-w /bin/rpm -p x -k software_mgmt 2025-09-09 21:03:16.440983 | centos-9-stream | +-w /usr/bin/zypper -k software_mgmt 2025-09-09 21:03:16.441080 | centos-9-stream | + 2025-09-09 21:03:16.441200 | centos-9-stream | +# DPKG / APT-GET (Debian/Ubuntu) 2025-09-09 21:03:16.441278 | centos-9-stream | +-w /usr/bin/dpkg -p x -k software_mgmt 2025-09-09 21:03:16.441377 | centos-9-stream | +-w /usr/bin/apt -p x -k software_mgmt 2025-09-09 21:03:16.441493 | centos-9-stream | +-w /usr/bin/apt-add-repository -p x -k software_mgmt 2025-09-09 21:03:16.441593 | centos-9-stream | +-w /usr/bin/apt-get -p x -k software_mgmt 2025-09-09 21:03:16.441698 | centos-9-stream | +-w /usr/bin/aptitude -p x -k software_mgmt 2025-09-09 21:03:16.441823 | centos-9-stream | +-w /usr/bin/wajig -p x -k software_mgmt 2025-09-09 21:03:16.441923 | centos-9-stream | +-w /usr/bin/snap -p x -k software_mgmt 2025-09-09 21:03:16.442020 | centos-9-stream | + 2025-09-09 21:03:16.442134 | centos-9-stream | +# PIP(3) (Python installs) 2025-09-09 21:03:16.442227 | centos-9-stream | +-w /usr/bin/pip -p x -k third_party_software_mgmt 2025-09-09 21:03:16.442329 | centos-9-stream | +-w /usr/local/bin/pip -p x -k third_party_software_mgmt 2025-09-09 21:03:16.442432 | centos-9-stream | +-w /usr/bin/pip3 -p x -k third_party_software_mgmt 2025-09-09 21:03:16.442546 | centos-9-stream | +-w /usr/local/bin/pip3 -p x -k third_party_software_mgmt 2025-09-09 21:03:16.442647 | centos-9-stream | +-w /usr/bin/pipx -p x -k third_party_software_mgmt 2025-09-09 21:03:16.442787 | centos-9-stream | +-w /usr/local/bin/pipx -p x -k third_party_software_mgmt 2025-09-09 21:03:16.442850 | centos-9-stream | + 2025-09-09 21:03:16.442949 | centos-9-stream | +# npm 2025-09-09 21:03:16.443048 | centos-9-stream | +## T1072 third party software 2025-09-09 21:03:16.443184 | centos-9-stream | +## https://www.npmjs.com 2025-09-09 21:03:16.443291 | centos-9-stream | +## https://docs.npmjs.com/cli/v6/commands/npm-audit 2025-09-09 21:03:16.443370 | centos-9-stream | +-w /usr/bin/npm -p x -k third_party_software_mgmt 2025-09-09 21:03:16.443467 | centos-9-stream | + 2025-09-09 21:03:16.443581 | centos-9-stream | +# Comprehensive Perl Archive Network (CPAN) (CPAN installs) 2025-09-09 21:03:16.443671 | centos-9-stream | +## T1072 third party software 2025-09-09 21:03:16.443782 | centos-9-stream | +## https://www.cpan.org 2025-09-09 21:03:16.443883 | centos-9-stream | +-w /usr/bin/cpan -p x -k third_party_software_mgmt 2025-09-09 21:03:16.443979 | centos-9-stream | + 2025-09-09 21:03:16.444077 | centos-9-stream | +# Ruby (RubyGems installs) 2025-09-09 21:03:16.444174 | centos-9-stream | +## T1072 third party software 2025-09-09 21:03:16.444271 | centos-9-stream | +## https://rubygems.org 2025-09-09 21:03:16.444397 | centos-9-stream | +-w /usr/bin/gem -p x -k third_party_software_mgmt 2025-09-09 21:03:16.444486 | centos-9-stream | + 2025-09-09 21:03:16.444584 | centos-9-stream | +# LuaRocks (Lua installs) 2025-09-09 21:03:16.444693 | centos-9-stream | +## T1072 third party software 2025-09-09 21:03:16.444958 | centos-9-stream | +## https://luarocks.org 2025-09-09 21:03:16.444983 | centos-9-stream | +-w /usr/bin/luarocks -p x -k third_party_software_mgmt 2025-09-09 21:03:16.444995 | centos-9-stream | + 2025-09-09 21:03:16.445095 | centos-9-stream | +# Pacman (Arch Linux) 2025-09-09 21:03:16.445491 | centos-9-stream | +## https://wiki.archlinux.org/title/Pacman 2025-09-09 21:03:16.445521 | centos-9-stream | +## T1072 third party software 2025-09-09 21:03:16.445530 | centos-9-stream | +-w /etc/pacman.conf -p x -k third_party_software_mgmt 2025-09-09 21:03:16.445543 | centos-9-stream | +-w /etc/pacman.d -p x -k third_party_software_mgmt 2025-09-09 21:03:16.445596 | centos-9-stream | + 2025-09-09 21:03:16.445693 | centos-9-stream | +# Special Software ------------------------------------------------------------ 2025-09-09 21:03:16.445804 | centos-9-stream | + 2025-09-09 21:03:16.445901 | centos-9-stream | +## GDS specific secrets 2025-09-09 21:03:16.446002 | centos-9-stream | +-w /etc/puppet/ssl -p wa -k puppet_ssl 2025-09-09 21:03:16.446097 | centos-9-stream | + 2025-09-09 21:03:16.446204 | centos-9-stream | +## IBM Bigfix BESClient 2025-09-09 21:03:16.446307 | centos-9-stream | +-a always,exit -F arch=b64 -S open -F dir=/opt/BESClient -F success=0 -k soft_besclient 2025-09-09 21:03:16.446409 | centos-9-stream | +-w /var/opt/BESClient/ -p wa -k soft_besclient 2025-09-09 21:03:16.446521 | centos-9-stream | + 2025-09-09 21:03:16.446619 | centos-9-stream | +## CHEF https://www.chef.io/chef/ 2025-09-09 21:03:16.446720 | centos-9-stream | +-w /etc/chef -p wa -k soft_chef 2025-09-09 21:03:16.446824 | centos-9-stream | + 2025-09-09 21:03:16.446920 | centos-9-stream | +## Salt 2025-09-09 21:03:16.447022 | centos-9-stream | +## https://saltproject.io/ 2025-09-09 21:03:16.447123 | centos-9-stream | +## https://docs.saltproject.io/en/latest/ref/configuration/master.html 2025-09-09 21:03:16.447219 | centos-9-stream | +-w /etc/salt -p wa -k soft_salt 2025-09-09 21:03:16.447323 | centos-9-stream | +-w /usr/local/etc/salt -p wa -k soft_salt 2025-09-09 21:03:16.447414 | centos-9-stream | + 2025-09-09 21:03:16.447532 | centos-9-stream | +## Otter 2025-09-09 21:03:16.447630 | centos-9-stream | +## https://inedo.com/otter 2025-09-09 21:03:16.447730 | centos-9-stream | +-w /etc/otter -p wa -k soft_otter 2025-09-09 21:03:16.447853 | centos-9-stream | + 2025-09-09 21:03:16.447958 | centos-9-stream | +## T1081 Credentials In Files 2025-09-09 21:03:16.448052 | centos-9-stream | +-w /usr/bin/grep -p x -k string_search 2025-09-09 21:03:16.448152 | centos-9-stream | +-w /usr/bin/egrep -p x -k string_search 2025-09-09 21:03:16.448251 | centos-9-stream | +-w /usr/bin/ugrep -p x -k string_search 2025-09-09 21:03:16.448348 | centos-9-stream | +### macOS 2025-09-09 21:03:16.448446 | centos-9-stream | +-w /usr/local/bin/grep -p x -k string_search 2025-09-09 21:03:16.448559 | centos-9-stream | +-w /usr/local/bin/egrep -p x -k string_search 2025-09-09 21:03:16.448658 | centos-9-stream | +-w /usr/local/bin/ugrep -p x -k string_search 2025-09-09 21:03:16.448765 | centos-9-stream | + 2025-09-09 21:03:16.448863 | centos-9-stream | +### https://github.com/tmbinc/bgrep 2025-09-09 21:03:16.448964 | centos-9-stream | +-w /usr/bin/bgrep -p x -k string_search 2025-09-09 21:03:16.449076 | centos-9-stream | +### macOS 2025-09-09 21:03:16.449161 | centos-9-stream | +-w /usr/local/bin/bgrep -p x -k string_search 2025-09-09 21:03:16.449261 | centos-9-stream | + 2025-09-09 21:03:16.449363 | centos-9-stream | +### https://github.com/BurntSushi/ripgrep 2025-09-09 21:03:16.449483 | centos-9-stream | +-w /usr/bin/rg -p x -k string_search 2025-09-09 21:03:16.449578 | centos-9-stream | +### macOS 2025-09-09 21:03:16.449682 | centos-9-stream | +-w /usr/local/bin/rg -p x -k string_search 2025-09-09 21:03:16.449805 | centos-9-stream | + 2025-09-09 21:03:16.449905 | centos-9-stream | +### https://github.com/awgn/cgrep 2025-09-09 21:03:16.450043 | centos-9-stream | + 2025-09-09 21:03:16.450101 | centos-9-stream | +-w /usr/bin/cgrep -p x -k string_search 2025-09-09 21:03:16.450201 | centos-9-stream | +### macOS 2025-09-09 21:03:16.450299 | centos-9-stream | +-w /usr/local/bin/cgrep -p x -k string_search 2025-09-09 21:03:16.450393 | centos-9-stream | + 2025-09-09 21:03:16.450515 | centos-9-stream | +### https://github.com/jpr5/ngrep 2025-09-09 21:03:16.450616 | centos-9-stream | +-w /usr/bin/ngrep -p x -k string_search 2025-09-09 21:03:16.450716 | centos-9-stream | +### macOS 2025-09-09 21:03:16.450830 | centos-9-stream | +-w /usr/local/bin/ngrep -p x -k string_search 2025-09-09 21:03:16.450925 | centos-9-stream | + 2025-09-09 21:03:16.451025 | centos-9-stream | +### https://github.com/vrothberg/vgrep 2025-09-09 21:03:16.451143 | centos-9-stream | +-w /usr/bin/vgrep -p x -k string_search 2025-09-09 21:03:16.451220 | centos-9-stream | +### macOS 2025-09-09 21:03:16.451323 | centos-9-stream | +-w /usr/local/bin/vgrep -p x -k string_search 2025-09-09 21:03:16.451418 | centos-9-stream | + 2025-09-09 21:03:16.451538 | centos-9-stream | +### https://github.com/monochromegane/the_platinum_searcher 2025-09-09 21:03:16.451637 | centos-9-stream | +-w /usr/bin/pt -p x -k string_search 2025-09-09 21:03:16.451776 | centos-9-stream | +### macOS 2025-09-09 21:03:16.451899 | centos-9-stream | +-w /usr/local/bin/pt -p x -k string_search 2025-09-09 21:03:16.451943 | centos-9-stream | + 2025-09-09 21:03:16.452044 | centos-9-stream | +### https://github.com/gvansickle/ucg 2025-09-09 21:03:16.452144 | centos-9-stream | +-w /usr/bin/ucg -p x -k string_search 2025-09-09 21:03:16.452245 | centos-9-stream | +### macOS 2025-09-09 21:03:16.452340 | centos-9-stream | +-w /usr/local/bin/ucg -p x -k string_search 2025-09-09 21:03:16.452437 | centos-9-stream | + 2025-09-09 21:03:16.452554 | centos-9-stream | +### https://github.com/ggreer/the_silver_searcher 2025-09-09 21:03:16.452655 | centos-9-stream | +-w /usr/bin/ag -p x -k string_search 2025-09-09 21:03:16.452775 | centos-9-stream | +### macOS 2025-09-09 21:03:16.452879 | centos-9-stream | +-w /usr/local/bin/ag -p x -k string_search 2025-09-09 21:03:16.452974 | centos-9-stream | + 2025-09-09 21:03:16.453075 | centos-9-stream | +### https://github.com/beyondgrep/ack3 2025-09-09 21:03:16.453175 | centos-9-stream | +### https://beyondgrep.com 2025-09-09 21:03:16.453293 | centos-9-stream | +-w /usr/bin/ack -p x -k string_search 2025-09-09 21:03:16.453376 | centos-9-stream | +-w /usr/local/bin/ack -p x -k string_search 2025-09-09 21:03:16.453496 | centos-9-stream | +-w /usr/bin/semgrep -p x -k string_search 2025-09-09 21:03:16.453650 | centos-9-stream | +### macOS 2025-09-09 21:03:16.453786 | centos-9-stream | +-w /usr/local/bin/semgrep -p x -k string_search 2025-09-09 21:03:16.453803 | centos-9-stream | + 2025-09-09 21:03:16.453900 | centos-9-stream | +## Docker 2025-09-09 21:03:16.454782 | centos-9-stream | +-w /usr/bin/dockerd -k docker 2025-09-09 21:03:16.454818 | centos-9-stream | +-w /usr/bin/docker -k docker 2025-09-09 21:03:16.454828 | centos-9-stream | +-w /usr/bin/docker-containerd -k docker 2025-09-09 21:03:16.454837 | centos-9-stream | +-w /usr/bin/docker-runc -k docker 2025-09-09 21:03:16.454845 | centos-9-stream | +-w /var/lib/docker -p wa -k docker 2025-09-09 21:03:16.454854 | centos-9-stream | +-w /etc/docker -k docker 2025-09-09 21:03:16.454862 | centos-9-stream | +-w /etc/sysconfig/docker -k docker 2025-09-09 21:03:16.454871 | centos-9-stream | +-w /etc/sysconfig/docker-storage -k docker 2025-09-09 21:03:16.454884 | centos-9-stream | +-w /usr/lib/systemd/system/docker.service -k docker 2025-09-09 21:03:16.454896 | centos-9-stream | +-w /usr/lib/systemd/system/docker.socket -k docker 2025-09-09 21:03:16.454993 | centos-9-stream | + 2025-09-09 21:03:16.455091 | centos-9-stream | +## Virtualization stuff 2025-09-09 21:03:16.455196 | centos-9-stream | +-w /usr/bin/qemu-system-x86_64 -p x -k qemu-system-x86_64 2025-09-09 21:03:16.455291 | centos-9-stream | +-w /usr/bin/qemu-img -p x -k qemu-img 2025-09-09 21:03:16.455426 | centos-9-stream | +-w /usr/bin/qemu-kvm -p x -k qemu-kvm 2025-09-09 21:03:16.455505 | centos-9-stream | +-w /usr/bin/qemu -p x -k qemu 2025-09-09 21:03:16.455609 | centos-9-stream | +-w /usr/bin/virtualbox -p x -k virtualbox 2025-09-09 21:03:16.455707 | centos-9-stream | +-w /usr/bin/virt-manager -p x -k virt-manager 2025-09-09 21:03:16.455822 | centos-9-stream | +-w /usr/bin/VBoxManage -p x -k VBoxManage 2025-09-09 21:03:16.455919 | centos-9-stream | + 2025-09-09 21:03:16.456054 | centos-9-stream | +#### VirtualBox on macOS 2025-09-09 21:03:16.456112 | centos-9-stream | + 2025-09-09 21:03:16.456217 | centos-9-stream | +-w /usr/local/bin/VirtualBox -p x -k virt_tool 2025-09-09 21:03:16.456313 | centos-9-stream | +-w /usr/local/bin/VirtualBoxVM -p x -k virt_tool 2025-09-09 21:03:16.456411 | centos-9-stream | +-w /usr/local/bin/VBoxManage -p x -k virt_tool 2025-09-09 21:03:16.456533 | centos-9-stream | +-w /usr/local/bin/VBoxVRDP -p x -k virt_tool 2025-09-09 21:03:16.456626 | centos-9-stream | +-w /usr/local/bin/VBoxHeadless -p x -k virt_tool 2025-09-09 21:03:16.456725 | centos-9-stream | +-w /usr/local/bin/vboxwebsrv -p x -k virt_tool 2025-09-09 21:03:16.456903 | centos-9-stream | +-w /usr/local/bin/VBoxBugReport -p x -k virt_tool 2025-09-09 21:03:16.456973 | centos-9-stream | +-w /usr/local/bin/VBoxBalloonCtrl -p x -k virt_tool 2025-09-09 21:03:16.457034 | centos-9-stream | +-w /usr/local/bin/VBoxAutostart -p x -k virt_tool 2025-09-09 21:03:16.457197 | centos-9-stream | +-w /usr/local/bin/VBoxDTrace -p x -k virt_tool 2025-09-09 21:03:16.457221 | centos-9-stream | +-w /usr/local/bin/vbox-img -p x -k virt_tool 2025-09-09 21:03:16.457327 | centos-9-stream | +-w /Library/LaunchDaemons/org.virtualbox.startup.plist -p x -k virt_tool 2025-09-09 21:03:16.457429 | centos-9-stream | +-w /Library/Application Support/VirtualBox/LaunchDaemons/ -p x -k virt_tool 2025-09-09 21:03:16.457548 | centos-9-stream | +-w /Library/Application Support/VirtualBox/VBoxDrv.kext/ -p x -k virt_tool 2025-09-09 21:03:16.457648 | centos-9-stream | +-w /Library/Application Support/VirtualBox/VBoxUSB.kext/ -p x -k virt_tool 2025-09-09 21:03:16.457780 | centos-9-stream | +-w /Library/Application Support/VirtualBox/VBoxNetFlt.kext/ -p x -k virt_tool 2025-09-09 21:03:16.457865 | centos-9-stream | +-w /Library/Application Support/VirtualBox/VBoxNetAdp.kext/ -p x -k virt_tool 2025-09-09 21:03:16.457965 | centos-9-stream | + 2025-09-09 21:03:16.458067 | centos-9-stream | +### Parallels Desktop on macOS 2025-09-09 21:03:16.458161 | centos-9-stream | + 2025-09-09 21:03:16.458302 | centos-9-stream | +-w /usr/local/bin/prl_convert -p x -k virt_tool 2025-09-09 21:03:16.458357 | centos-9-stream | +-w /usr/local/bin/prl_disk_tool -p x -k virt_tool 2025-09-09 21:03:16.458517 | centos-9-stream | +-w /usr/local/bin/prl_perf_ctl -p x -k virt_tool 2025-09-09 21:03:16.458573 | centos-9-stream | +-w /usr/local/bin/prlcore2dmp -p x -k virt_tool 2025-09-09 21:03:16.458674 | centos-9-stream | +-w /usr/local/bin/prlctl -p x -k virt_tool 2025-09-09 21:03:16.458801 | centos-9-stream | +-w /usr/local/bin/prlexec -p x -k virt_tool 2025-09-09 21:03:16.458900 | centos-9-stream | +-w /usr/local/bin/prlsrvctl -p x -k virt_tool 2025-09-09 21:03:16.459000 | centos-9-stream | +-w /Library/Preferences/Parallels -p x -k virt_tool 2025-09-09 21:03:16.459093 | centos-9-stream | + 2025-09-09 21:03:16.459192 | centos-9-stream | +### qemu on macOS 2025-09-09 21:03:16.459286 | centos-9-stream | + 2025-09-09 21:03:16.459409 | centos-9-stream | +-w /usr/local/bin/qemu-edid -p x -k virt_tool 2025-09-09 21:03:16.459504 | centos-9-stream | +-w /usr/local/bin/qemu-img -p x -k virt_tool 2025-09-09 21:03:16.459607 | centos-9-stream | +-w /usr/local/bin/qemu-io -p x -k virt_tool 2025-09-09 21:03:16.459710 | centos-9-stream | +-w /usr/local/bin/qemu-nbd -p x -k virt_tool 2025-09-09 21:03:16.459820 | centos-9-stream | +-w /usr/local/bin/qemu-system-x86_64 -p x -k virt_tool 2025-09-09 21:03:16.459916 | centos-9-stream | + 2025-09-09 21:03:16.460020 | centos-9-stream | +## Kubelet 2025-09-09 21:03:16.460122 | centos-9-stream | +-w /usr/bin/kubelet -k kubelet 2025-09-09 21:03:16.460212 | centos-9-stream | + 2025-09-09 21:03:16.460306 | centos-9-stream | +# ipc system call 2025-09-09 21:03:16.460399 | centos-9-stream | +# /usr/include/linux/ipc.h 2025-09-09 21:03:16.460562 | centos-9-stream | + 2025-09-09 21:03:16.460607 | centos-9-stream | +## msgctl 2025-09-09 21:03:16.460710 | centos-9-stream | +#-a always,exit -S ipc -F a0=14 -k Inter-Process_Communication 2025-09-09 21:03:16.460833 | centos-9-stream | +## msgget 2025-09-09 21:03:16.460940 | centos-9-stream | +#-a always,exit -S ipc -F a0=13 -k Inter-Process_Communication 2025-09-09 21:03:16.461038 | centos-9-stream | +## Use these lines on x86_64, ia64 instead 2025-09-09 21:03:16.461138 | centos-9-stream | +-a always,exit -F arch=b64 -S msgctl -k Inter-Process_Communication 2025-09-09 21:03:16.461242 | centos-9-stream | +-a always,exit -F arch=b64 -S msgget -k Inter-Process_Communication 2025-09-09 21:03:16.461334 | centos-9-stream | + 2025-09-09 21:03:16.461434 | centos-9-stream | +## semctl 2025-09-09 21:03:16.461552 | centos-9-stream | +#-a always,exit -S ipc -F a0=3 -k Inter-Process_Communication 2025-09-09 21:03:16.461654 | centos-9-stream | +## semget 2025-09-09 21:03:16.461772 | centos-9-stream | +#-a always,exit -S ipc -F a0=2 -k Inter-Process_Communication 2025-09-09 21:03:16.461864 | centos-9-stream | +## semop 2025-09-09 21:03:16.461965 | centos-9-stream | +#-a always,exit -S ipc -F a0=1 -k Inter-Process_Communication 2025-09-09 21:03:16.462060 | centos-9-stream | +## semtimedop 2025-09-09 21:03:16.462227 | centos-9-stream | +#-a always,exit -S ipc -F a0=4 -k Inter-Process_Communication 2025-09-09 21:03:16.462330 | centos-9-stream | +## Use these lines on x86_64, ia64 instead 2025-09-09 21:03:16.462431 | centos-9-stream | +-a always,exit -F arch=b64 -S semctl -k Inter-Process_Communication 2025-09-09 21:03:16.462549 | centos-9-stream | +-a always,exit -F arch=b64 -S semget -k Inter-Process_Communication 2025-09-09 21:03:16.462653 | centos-9-stream | +-a always,exit -F arch=b64 -S semop -k Inter-Process_Communication 2025-09-09 21:03:16.462771 | centos-9-stream | +-a always,exit -F arch=b64 -S semtimedop -k Inter-Process_Communication 2025-09-09 21:03:16.462866 | centos-9-stream | + 2025-09-09 21:03:16.462965 | centos-9-stream | +## shmctl 2025-09-09 21:03:16.463068 | centos-9-stream | +#-a always,exit -S ipc -F a0=24 -k Inter-Process_Communication 2025-09-09 21:03:16.463167 | centos-9-stream | +## shmget 2025-09-09 21:03:16.463269 | centos-9-stream | +#-a always,exit -S ipc -F a0=23 -k Inter-Process_Communication 2025-09-09 21:03:16.463367 | centos-9-stream | +## Use these lines on x86_64, ia64 instead 2025-09-09 21:03:16.463492 | centos-9-stream | +-a always,exit -F arch=b64 -S shmctl -k Inter-Process_Communication 2025-09-09 21:03:16.463586 | centos-9-stream | +-a always,exit -F arch=b64 -S shmget -k Inter-Process_Communication 2025-09-09 21:03:16.463682 | centos-9-stream | + 2025-09-09 21:03:16.463823 | centos-9-stream | +# High Volume Events ---------------------------------------------------------- 2025-09-09 21:03:16.463905 | centos-9-stream | + 2025-09-09 21:03:16.464004 | centos-9-stream | +## Disable these rules if they create too many events in your environment 2025-09-09 21:03:16.464100 | centos-9-stream | + 2025-09-09 21:03:16.464227 | centos-9-stream | +## Common Shells 2025-09-09 21:03:16.464305 | centos-9-stream | +-w /bin/bash -p x -k susp_shell 2025-09-09 21:03:16.464403 | centos-9-stream | +-w /bin/dash -p x -k susp_shell 2025-09-09 21:03:16.464523 | centos-9-stream | +-w /bin/busybox -p x -k susp_shell 2025-09-09 21:03:16.464623 | centos-9-stream | +-w /bin/zsh -p x -k susp_shell 2025-09-09 21:03:16.464721 | centos-9-stream | +-w /bin/sh -p x -k susp_shell 2025-09-09 21:03:16.464837 | centos-9-stream | +-w /bin/ksh -p x -k susp_shell 2025-09-09 21:03:16.464945 | centos-9-stream | + 2025-09-09 21:03:16.465030 | centos-9-stream | +## Root command executions 2025-09-09 21:03:16.465143 | centos-9-stream | +-a always,exit -F arch=b64 -F euid=0 -F auid>=1000 -F auid!=-1 -S execve -k rootcmd 2025-09-09 21:03:16.465237 | centos-9-stream | + 2025-09-09 21:03:16.465341 | centos-9-stream | +## File Deletion Events by User 2025-09-09 21:03:16.465446 | centos-9-stream | +-a always,exit -F arch=b64 -S rmdir -S unlink -S unlinkat -S rename -S renameat -F auid>=1000 -F auid!=-1 -k delete 2025-09-09 21:03:16.465560 | centos-9-stream | + 2025-09-09 21:03:16.465659 | centos-9-stream | +## File Access 2025-09-09 21:03:16.465773 | centos-9-stream | +### Unauthorized Access (unsuccessful) 2025-09-09 21:03:16.465885 | centos-9-stream | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k file_access 2025-09-09 21:03:16.465994 | centos-9-stream | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k file_access 2025-09-09 21:03:16.466112 | centos-9-stream | + 2025-09-09 21:03:16.466430 | centos-9-stream | +### Unsuccessful Creation 2025-09-09 21:03:16.466488 | centos-9-stream | +-a always,exit -F arch=b64 -S mkdir,creat,link,symlink,mknod,mknodat,linkat,symlinkat -F exit=-EACCES -k file_creation 2025-09-09 21:03:16.466500 | centos-9-stream | +-a always,exit -F arch=b64 -S mkdir,link,symlink,mkdirat -F exit=-EPERM -k file_creation 2025-09-09 21:03:16.466513 | centos-9-stream | + 2025-09-09 21:03:16.466607 | centos-9-stream | +### Unsuccessful Modification 2025-09-09 21:03:16.466720 | centos-9-stream | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EACCES -k file_modification 2025-09-09 21:03:16.466856 | centos-9-stream | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EPERM -k file_modification 2025-09-09 21:03:16.466952 | centos-9-stream | + 2025-09-09 21:03:16.467049 | centos-9-stream | +## 32bit API Exploitation 2025-09-09 21:03:16.467166 | centos-9-stream | +### If you are on a 64 bit platform, everything _should_ be running 2025-09-09 21:03:16.467260 | centos-9-stream | +### in 64 bit mode. This rule will detect any use of the 32 bit syscalls 2025-09-09 21:03:16.467358 | centos-9-stream | +### because this might be a sign of someone exploiting a hole in the 32 2025-09-09 21:03:16.467489 | centos-9-stream | +### bit API. 2025-09-09 21:03:16.467578 | centos-9-stream | +-a always,exit -F arch=b32 -S all -k 32bit_api 2025-09-09 21:03:16.467674 | centos-9-stream | + 2025-09-09 21:03:16.467800 | centos-9-stream | +# Make The Configuration Immutable -------------------------------------------- 2025-09-09 21:03:16.467881 | centos-9-stream | + 2025-09-09 21:03:16.467977 | centos-9-stream | +##-e 2 2025-09-09 21:03:16.468068 | centos-9-stream | 2025-09-09 21:03:16.468324 | centos-9-stream | changed: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": true, "checksum": "9f99ce5c4f891fbf3e2bce06ed4cb97fb9e01f41", "dest": "/etc/audit/rules.d/20-neo23x0.rules", "gid": 0, "group": "root", "item": "20-neo23x0.rules", "md5sum": "6ac57206fd77de34805c3f4d50ef8b1d", "mode": "0644", "owner": "root", "secontext": "system_u:object_r:auditd_etc_t:s0", "size": 27367, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1757451795.5235205-2123-11534946993636/.source.rules", "state": "file", "uid": 0} 2025-09-09 21:03:16.468417 | centos-9-stream | 2025-09-09 21:03:16.468536 | centos-9-stream | TASK [auditd : Manage auditd service] ****************************************** 2025-09-09 21:03:16.981129 | centos-9-stream | ok: [molecule-auditd] => {"changed": false, "enabled": true, "name": "auditd", "state": "started", "status": {"AccessSELinuxContext": "system_u:object_r:auditd_unit_file_t:s0", "ActiveEnterTimestamp": "Tue 2025-09-09 20:37:25 UTC", "ActiveEnterTimestampMonotonic": "4356324", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "systemd-journald.socket local-fs.target systemd-tmpfiles-setup.service system.slice", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2025-09-09 20:37:25 UTC", "AssertTimestampMonotonic": "4253585", "Before": "crond.service sysinit.target shutdown.target systemd-update-utmp.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "90501000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2025-09-09 20:37:25 UTC", "ConditionTimestampMonotonic": "4253548", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "2300", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "513", "ExecMainStartTimestamp": "Tue 2025-09-09 20:37:25 UTC", "ExecMainStartTimestampMonotonic": "4279162", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2025-09-09 20:37:25 UTC", "InactiveExitTimestampMonotonic": "4258103", "InvocationID": "526cfdb1be31462fb5c82634bcb3b420", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "infinity", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15466", "LimitNPROCSoft": "15466", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15466", "LimitSIGPENDINGSoft": "15466", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "513", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "3928064", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "6643712", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Tue 2025-09-09 20:37:25 UTC", "StateChangeTimestampMonotonic": "4356324", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "24745", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2025-09-09 21:03:16.984502 | centos-9-stream | 2025-09-09 21:03:16.984553 | centos-9-stream | TASK [auditd : List existing rules files] ************************************** 2025-09-09 21:03:16.923931 | ubuntu-jammy | --- before 2025-09-09 21:03:16.924135 | ubuntu-jammy | +++ after: /home/zuul/.ansible/tmp/ansible-local-1441_egy92os/tmpaur86eqt/20-neo23x0.rules.j2 2025-09-09 21:03:16.927127 | ubuntu-jammy | @@ -0,0 +1,750 @@ 2025-09-09 21:03:16.927182 | ubuntu-jammy | +# ___ ___ __ __ 2025-09-09 21:03:16.927199 | ubuntu-jammy | +# / | __ ______/ (_) /_____/ / 2025-09-09 21:03:16.927211 | ubuntu-jammy | +# / /| |/ / / / __ / / __/ __ / 2025-09-09 21:03:16.927302 | ubuntu-jammy | +# / ___ / /_/ / /_/ / / /_/ /_/ / 2025-09-09 21:03:16.927315 | ubuntu-jammy | +# /_/ |_\__,_/\__,_/_/\__/\__,_/ 2025-09-09 21:03:16.927327 | ubuntu-jammy | +# 2025-09-09 21:03:16.927340 | ubuntu-jammy | +# Linux Audit Daemon - Best Practice Configuration 2025-09-09 21:03:16.927352 | ubuntu-jammy | +# /etc/audit/audit.rules 2025-09-09 21:03:16.927364 | ubuntu-jammy | +# 2025-09-09 21:03:16.927376 | ubuntu-jammy | +# Compiled by Florian Roth 2025-09-09 21:03:16.927387 | ubuntu-jammy | +# 2025-09-09 21:03:16.927421 | ubuntu-jammy | +# Created : 2017/12/05 2025-09-09 21:03:16.927433 | ubuntu-jammy | +# Modified : 2023/01/25 2025-09-09 21:03:16.927444 | ubuntu-jammy | +# 2025-09-09 21:03:16.927456 | ubuntu-jammy | +# Based on rules published here: 2025-09-09 21:03:16.927468 | ubuntu-jammy | +# Gov.uk auditd rules 2025-09-09 21:03:16.927488 | ubuntu-jammy | +# https://github.com/gds-operations/puppet-auditd/pull/1 2025-09-09 21:03:16.927704 | ubuntu-jammy | +# CentOS 7 hardening 2025-09-09 21:03:16.928088 | ubuntu-jammy | +# https://highon.coffee/blog/security-harden-centos-7/#auditd---audit-daemon 2025-09-09 21:03:16.928337 | ubuntu-jammy | +# Linux audit repo 2025-09-09 21:03:16.928627 | ubuntu-jammy | +# https://github.com/linux-audit/audit-userspace/tree/master/rules 2025-09-09 21:03:16.928881 | ubuntu-jammy | +# Auditd high performance linux auditing 2025-09-09 21:03:16.929137 | ubuntu-jammy | +# https://linux-audit.com/tuning-auditd-high-performance-linux-auditing/ 2025-09-09 21:03:16.929348 | ubuntu-jammy | +# 2025-09-09 21:03:16.929582 | ubuntu-jammy | +# Further rules 2025-09-09 21:03:16.929796 | ubuntu-jammy | +# For PCI DSS compliance see: 2025-09-09 21:03:16.930025 | ubuntu-jammy | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-pci-dss-v31.rules 2025-09-09 21:03:16.930231 | ubuntu-jammy | +# For NISPOM compliance see: 2025-09-09 21:03:16.930465 | ubuntu-jammy | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-nispom.rules 2025-09-09 21:03:16.930626 | ubuntu-jammy | + 2025-09-09 21:03:16.930783 | ubuntu-jammy | +# Remove any existing rules 2025-09-09 21:03:16.930934 | ubuntu-jammy | +-D 2025-09-09 21:03:16.931084 | ubuntu-jammy | + 2025-09-09 21:03:16.931277 | ubuntu-jammy | +# Buffer Size 2025-09-09 21:03:16.931463 | ubuntu-jammy | +## Feel free to increase this if the machine panic's 2025-09-09 21:03:16.931619 | ubuntu-jammy | +-b 8192 2025-09-09 21:03:16.931768 | ubuntu-jammy | + 2025-09-09 21:03:16.931921 | ubuntu-jammy | +# Failure Mode 2025-09-09 21:03:16.932086 | ubuntu-jammy | +## Possible values: 0 (silent), 1 (printk, print a failure message), 2 (panic, halt the system) 2025-09-09 21:03:16.932236 | ubuntu-jammy | +-f 1 2025-09-09 21:03:16.932383 | ubuntu-jammy | + 2025-09-09 21:03:16.932587 | ubuntu-jammy | +# Ignore errors 2025-09-09 21:03:16.932746 | ubuntu-jammy | +## e.g. caused by users or files not found in the local environment 2025-09-09 21:03:16.932894 | ubuntu-jammy | +-i 2025-09-09 21:03:16.933041 | ubuntu-jammy | + 2025-09-09 21:03:16.933191 | ubuntu-jammy | +# Self Auditing --------------------------------------------------------------- 2025-09-09 21:03:16.933339 | ubuntu-jammy | + 2025-09-09 21:03:16.933510 | ubuntu-jammy | +## Audit the audit logs 2025-09-09 21:03:16.933669 | ubuntu-jammy | +### Successful and unsuccessful attempts to read information from the audit records 2025-09-09 21:03:16.933816 | ubuntu-jammy | +-w /var/log/audit/ -p wra -k auditlog 2025-09-09 21:03:16.933964 | ubuntu-jammy | +-w /var/audit/ -p wra -k auditlog 2025-09-09 21:03:16.934106 | ubuntu-jammy | + 2025-09-09 21:03:16.934253 | ubuntu-jammy | +## Auditd configuration 2025-09-09 21:03:16.934421 | ubuntu-jammy | +### Modifications to audit configuration that occur while the audit collection functions are operating 2025-09-09 21:03:16.934572 | ubuntu-jammy | +-w /etc/audit/ -p wa -k auditconfig 2025-09-09 21:03:16.934717 | ubuntu-jammy | +-w /etc/libaudit.conf -p wa -k auditconfig 2025-09-09 21:03:16.934860 | ubuntu-jammy | +-w /etc/audisp/ -p wa -k audispconfig 2025-09-09 21:03:16.934998 | ubuntu-jammy | + 2025-09-09 21:03:16.935139 | ubuntu-jammy | +## Monitor for use of audit management tools 2025-09-09 21:03:16.935320 | ubuntu-jammy | +-w /sbin/auditctl -p x -k audittools 2025-09-09 21:03:16.935489 | ubuntu-jammy | +-w /sbin/auditd -p x -k audittools 2025-09-09 21:03:16.935637 | ubuntu-jammy | +-w /usr/sbin/auditd -p x -k audittools 2025-09-09 21:03:16.935786 | ubuntu-jammy | +-w /usr/sbin/augenrules -p x -k audittools 2025-09-09 21:03:16.935927 | ubuntu-jammy | + 2025-09-09 21:03:16.936070 | ubuntu-jammy | +## Access to all audit trails 2025-09-09 21:03:16.936211 | ubuntu-jammy | + 2025-09-09 21:03:16.936360 | ubuntu-jammy | +-a always,exit -F path=/usr/sbin/ausearch -F perm=x -k audittools 2025-09-09 21:03:16.936555 | ubuntu-jammy | +-a always,exit -F path=/usr/sbin/aureport -F perm=x -k audittools 2025-09-09 21:03:16.936709 | ubuntu-jammy | +-a always,exit -F path=/usr/sbin/aulast -F perm=x -k audittools 2025-09-09 21:03:16.936852 | ubuntu-jammy | +-a always,exit -F path=/usr/sbin/aulastlogin -F perm=x -k audittools 2025-09-09 21:03:16.936982 | ubuntu-jammy | +-a always,exit -F path=/usr/sbin/auvirt -F perm=x -k audittools 2025-09-09 21:03:16.937109 | ubuntu-jammy | + 2025-09-09 21:03:16.937238 | ubuntu-jammy | +# Filters --------------------------------------------------------------------- 2025-09-09 21:03:16.937365 | ubuntu-jammy | + 2025-09-09 21:03:16.937518 | ubuntu-jammy | +### We put these early because audit is a first match wins system. 2025-09-09 21:03:16.937644 | ubuntu-jammy | + 2025-09-09 21:03:16.937773 | ubuntu-jammy | +## Ignore SELinux AVC records 2025-09-09 21:03:16.937904 | ubuntu-jammy | +-a always,exclude -F msgtype=AVC 2025-09-09 21:03:16.938028 | ubuntu-jammy | + 2025-09-09 21:03:16.938157 | ubuntu-jammy | +## Ignore current working directory records 2025-09-09 21:03:16.938286 | ubuntu-jammy | +-a always,exclude -F msgtype=CWD 2025-09-09 21:03:16.938429 | ubuntu-jammy | + 2025-09-09 21:03:16.938575 | ubuntu-jammy | +## Cron jobs fill the logs with stuff we normally don't want (works with SELinux) 2025-09-09 21:03:16.938707 | ubuntu-jammy | +-a never,user -F subj_type=crond_t 2025-09-09 21:03:16.938840 | ubuntu-jammy | +-a never,exit -F subj_type=crond_t 2025-09-09 21:03:16.938968 | ubuntu-jammy | + 2025-09-09 21:03:16.939101 | ubuntu-jammy | +## This prevents chrony from overwhelming the logs 2025-09-09 21:03:16.939292 | ubuntu-jammy | +-a never,exit -F arch=b64 -S adjtimex -F auid=-1 -F uid=chrony -F subj_type=chronyd_t 2025-09-09 21:03:16.939531 | ubuntu-jammy | + 2025-09-09 21:03:16.939684 | ubuntu-jammy | +## This is not very interesting and wastes a lot of space if the server is public facing 2025-09-09 21:03:16.939821 | ubuntu-jammy | +-a always,exclude -F msgtype=CRYPTO_KEY_USER 2025-09-09 21:03:16.939949 | ubuntu-jammy | + 2025-09-09 21:03:16.940072 | ubuntu-jammy | +## Open VM Tools 2025-09-09 21:03:16.940196 | ubuntu-jammy | +-a exit,never -F arch=b64 -S all -F exe=/usr/bin/vmtoolsd 2025-09-09 21:03:16.940315 | ubuntu-jammy | + 2025-09-09 21:03:16.940454 | ubuntu-jammy | +## High Volume Event Filter (especially on Linux Workstations) 2025-09-09 21:03:16.940576 | ubuntu-jammy | +-a never,exit -F arch=b64 -F dir=/dev/shm -k sharedmemaccess 2025-09-09 21:03:16.940698 | ubuntu-jammy | +-a never,exit -F arch=b64 -F dir=/var/lock/lvm -k locklvm 2025-09-09 21:03:16.940814 | ubuntu-jammy | + 2025-09-09 21:03:16.940932 | ubuntu-jammy | +## FileBeat 2025-09-09 21:03:16.941050 | ubuntu-jammy | +-a never,exit -F arch=b64 -F path=/opt/filebeat -k filebeat 2025-09-09 21:03:16.941167 | ubuntu-jammy | + 2025-09-09 21:03:16.941286 | ubuntu-jammy | +## More information on how to filter events 2025-09-09 21:03:16.941423 | ubuntu-jammy | +### https://access.redhat.com/solutions/2482221 2025-09-09 21:03:16.941544 | ubuntu-jammy | + 2025-09-09 21:03:16.941661 | ubuntu-jammy | +# Rules ----------------------------------------------------------------------- 2025-09-09 21:03:16.941773 | ubuntu-jammy | + 2025-09-09 21:03:16.941889 | ubuntu-jammy | +## Kernel parameters 2025-09-09 21:03:16.942006 | ubuntu-jammy | +-w /etc/sysctl.conf -p wa -k sysctl 2025-09-09 21:03:16.942125 | ubuntu-jammy | +-w /etc/sysctl.d -p wa -k sysctl 2025-09-09 21:03:16.942239 | ubuntu-jammy | + 2025-09-09 21:03:16.942356 | ubuntu-jammy | +## Kernel module loading and unloading 2025-09-09 21:03:16.942519 | ubuntu-jammy | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/insmod -k modules 2025-09-09 21:03:16.942646 | ubuntu-jammy | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/modprobe -k modules 2025-09-09 21:03:16.942766 | ubuntu-jammy | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/rmmod -k modules 2025-09-09 21:03:16.942894 | ubuntu-jammy | +-a always,exit -F arch=b64 -S finit_module -S init_module -S delete_module -F auid!=-1 -k modules 2025-09-09 21:03:16.943011 | ubuntu-jammy | + 2025-09-09 21:03:16.943130 | ubuntu-jammy | +## Modprobe configuration 2025-09-09 21:03:16.943293 | ubuntu-jammy | +-w /etc/modprobe.conf -p wa -k modprobe 2025-09-09 21:03:16.943431 | ubuntu-jammy | +-w /etc/modprobe.d -p wa -k modprobe 2025-09-09 21:03:16.943550 | ubuntu-jammy | + 2025-09-09 21:03:16.943669 | ubuntu-jammy | +## KExec usage (all actions) 2025-09-09 21:03:16.943790 | ubuntu-jammy | +-a always,exit -F arch=b64 -S kexec_load -k KEXEC 2025-09-09 21:03:16.943904 | ubuntu-jammy | + 2025-09-09 21:03:16.944020 | ubuntu-jammy | +## Special files 2025-09-09 21:03:16.944140 | ubuntu-jammy | +-a always,exit -F arch=b64 -S mknod -S mknodat -k specialfiles 2025-09-09 21:03:16.944257 | ubuntu-jammy | + 2025-09-09 21:03:16.944375 | ubuntu-jammy | +## Mount operations (only attributable) 2025-09-09 21:03:16.944546 | ubuntu-jammy | +-a always,exit -F arch=b64 -S mount -S umount2 -F auid!=-1 -k mount 2025-09-09 21:03:16.944670 | ubuntu-jammy | + 2025-09-09 21:03:16.944790 | ubuntu-jammy | +### NFS mount 2025-09-09 21:03:16.944921 | ubuntu-jammy | +-a always,exit -F path=/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-09 21:03:16.945048 | ubuntu-jammy | +-a always,exit -F path=/usr/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-09 21:03:16.945163 | ubuntu-jammy | + 2025-09-09 21:03:16.945282 | ubuntu-jammy | +## Change swap (only attributable) 2025-09-09 21:03:16.945415 | ubuntu-jammy | +-a always,exit -F arch=b64 -S swapon -S swapoff -F auid!=-1 -k swap 2025-09-09 21:03:16.945535 | ubuntu-jammy | + 2025-09-09 21:03:16.945651 | ubuntu-jammy | +## Time 2025-09-09 21:03:16.945779 | ubuntu-jammy | +-a always,exit -F arch=b64 -F uid!=ntp -S adjtimex -S settimeofday -S clock_settime -k time 2025-09-09 21:03:16.945897 | ubuntu-jammy | +### Local time zone 2025-09-09 21:03:16.946016 | ubuntu-jammy | +-w /etc/localtime -p wa -k localtime 2025-09-09 21:03:16.946130 | ubuntu-jammy | + 2025-09-09 21:03:16.946246 | ubuntu-jammy | +## Stunnel 2025-09-09 21:03:16.946364 | ubuntu-jammy | +-w /usr/sbin/stunnel -p x -k stunnel 2025-09-09 21:03:16.946523 | ubuntu-jammy | +-w /usr/bin/stunnel -p x -k stunnel 2025-09-09 21:03:16.946667 | ubuntu-jammy | + 2025-09-09 21:03:16.946795 | ubuntu-jammy | +## Cron configuration & scheduled jobs 2025-09-09 21:03:16.946914 | ubuntu-jammy | +-w /etc/cron.allow -p wa -k cron 2025-09-09 21:03:16.947032 | ubuntu-jammy | +-w /etc/cron.deny -p wa -k cron 2025-09-09 21:03:16.947165 | ubuntu-jammy | +-w /etc/cron.d/ -p wa -k cron 2025-09-09 21:03:16.947320 | ubuntu-jammy | +-w /etc/cron.daily/ -p wa -k cron 2025-09-09 21:03:16.947497 | ubuntu-jammy | +-w /etc/cron.hourly/ -p wa -k cron 2025-09-09 21:03:16.947624 | ubuntu-jammy | +-w /etc/cron.monthly/ -p wa -k cron 2025-09-09 21:03:16.947740 | ubuntu-jammy | +-w /etc/cron.weekly/ -p wa -k cron 2025-09-09 21:03:16.947858 | ubuntu-jammy | +-w /etc/crontab -p wa -k cron 2025-09-09 21:03:16.947976 | ubuntu-jammy | +-w /var/spool/cron/ -p wa -k cron 2025-09-09 21:03:16.948090 | ubuntu-jammy | + 2025-09-09 21:03:16.948207 | ubuntu-jammy | +## User, group, password databases 2025-09-09 21:03:16.948324 | ubuntu-jammy | +-w /etc/group -p wa -k etcgroup 2025-09-09 21:03:16.948456 | ubuntu-jammy | +-w /etc/passwd -p wa -k etcpasswd 2025-09-09 21:03:16.948577 | ubuntu-jammy | +-w /etc/gshadow -k etcgroup 2025-09-09 21:03:16.948696 | ubuntu-jammy | +-w /etc/shadow -k etcpasswd 2025-09-09 21:03:16.948814 | ubuntu-jammy | +-w /etc/security/opasswd -k opasswd 2025-09-09 21:03:16.948929 | ubuntu-jammy | + 2025-09-09 21:03:16.949045 | ubuntu-jammy | +## Sudoers file changes 2025-09-09 21:03:16.949164 | ubuntu-jammy | +-w /etc/sudoers -p wa -k actions 2025-09-09 21:03:16.949281 | ubuntu-jammy | +-w /etc/sudoers.d/ -p wa -k actions 2025-09-09 21:03:16.949411 | ubuntu-jammy | + 2025-09-09 21:03:16.949534 | ubuntu-jammy | +## Passwd 2025-09-09 21:03:16.949663 | ubuntu-jammy | +-w /usr/bin/passwd -p x -k passwd_modification 2025-09-09 21:03:16.949781 | ubuntu-jammy | + 2025-09-09 21:03:16.949902 | ubuntu-jammy | +## Tools to change group identifiers 2025-09-09 21:03:16.950020 | ubuntu-jammy | +-w /usr/sbin/groupadd -p x -k group_modification 2025-09-09 21:03:16.950139 | ubuntu-jammy | +-w /usr/sbin/groupmod -p x -k group_modification 2025-09-09 21:03:16.950258 | ubuntu-jammy | +-w /usr/sbin/addgroup -p x -k group_modification 2025-09-09 21:03:16.950377 | ubuntu-jammy | +-w /usr/sbin/useradd -p x -k user_modification 2025-09-09 21:03:16.950540 | ubuntu-jammy | +-w /usr/sbin/userdel -p x -k user_modification 2025-09-09 21:03:16.950664 | ubuntu-jammy | +-w /usr/sbin/usermod -p x -k user_modification 2025-09-09 21:03:16.950785 | ubuntu-jammy | +-w /usr/sbin/adduser -p x -k user_modification 2025-09-09 21:03:16.950900 | ubuntu-jammy | + 2025-09-09 21:03:16.951019 | ubuntu-jammy | +## Login configuration and information 2025-09-09 21:03:16.951316 | ubuntu-jammy | +-w /etc/login.defs -p wa -k login 2025-09-09 21:03:16.951488 | ubuntu-jammy | +-w /etc/securetty -p wa -k login 2025-09-09 21:03:16.951617 | ubuntu-jammy | +-w /var/log/faillog -p wa -k login 2025-09-09 21:03:16.951734 | ubuntu-jammy | +-w /var/log/lastlog -p wa -k login 2025-09-09 21:03:16.951853 | ubuntu-jammy | +-w /var/log/tallylog -p wa -k login 2025-09-09 21:03:16.951973 | ubuntu-jammy | + 2025-09-09 21:03:16.952093 | ubuntu-jammy | +## Network Environment 2025-09-09 21:03:16.952211 | ubuntu-jammy | +### Changes to hostname 2025-09-09 21:03:16.952338 | ubuntu-jammy | +-a always,exit -F arch=b64 -S sethostname -S setdomainname -k network_modifications 2025-09-09 21:03:16.952475 | ubuntu-jammy | + 2025-09-09 21:03:16.952598 | ubuntu-jammy | +### Detect Remote Shell Use 2025-09-09 21:03:16.952725 | ubuntu-jammy | +-a always,exit -F arch=b64 -F exe=/bin/bash -F success=1 -S connect -k "remote_shell" 2025-09-09 21:03:16.952852 | ubuntu-jammy | +-a always,exit -F arch=b64 -F exe=/usr/bin/bash -F success=1 -S connect -k "remote_shell" 2025-09-09 21:03:16.952968 | ubuntu-jammy | + 2025-09-09 21:03:16.953085 | ubuntu-jammy | +### Successful IPv4 Connections 2025-09-09 21:03:16.953211 | ubuntu-jammy | +-a always,exit -F arch=b64 -S connect -F a2=16 -F success=1 -F key=network_connect_4 2025-09-09 21:03:16.953329 | ubuntu-jammy | + 2025-09-09 21:03:16.953493 | ubuntu-jammy | +### Successful IPv6 Connections 2025-09-09 21:03:16.953626 | ubuntu-jammy | +-a always,exit -F arch=b64 -S connect -F a2=28 -F success=1 -F key=network_connect_6 2025-09-09 21:03:16.953744 | ubuntu-jammy | + 2025-09-09 21:03:16.953864 | ubuntu-jammy | +### Changes to other files 2025-09-09 21:03:16.953987 | ubuntu-jammy | +-w /etc/hosts -p wa -k network_modifications 2025-09-09 21:03:16.954108 | ubuntu-jammy | +-w /etc/sysconfig/network -p wa -k network_modifications 2025-09-09 21:03:16.954230 | ubuntu-jammy | +-w /etc/sysconfig/network-scripts -p w -k network_modifications 2025-09-09 21:03:16.954349 | ubuntu-jammy | +-w /etc/network/ -p wa -k network 2025-09-09 21:03:16.954487 | ubuntu-jammy | +-a always,exit -F dir=/etc/NetworkManager/ -F perm=wa -k network_modifications 2025-09-09 21:03:16.954604 | ubuntu-jammy | + 2025-09-09 21:03:16.954725 | ubuntu-jammy | +### Changes to issue 2025-09-09 21:03:16.954844 | ubuntu-jammy | +-w /etc/issue -p wa -k etcissue 2025-09-09 21:03:16.954961 | ubuntu-jammy | +-w /etc/issue.net -p wa -k etcissue 2025-09-09 21:03:16.955079 | ubuntu-jammy | + 2025-09-09 21:03:16.955199 | ubuntu-jammy | +## System startup scripts 2025-09-09 21:03:16.955356 | ubuntu-jammy | +-w /etc/inittab -p wa -k init 2025-09-09 21:03:16.955496 | ubuntu-jammy | +-w /etc/init.d/ -p wa -k init 2025-09-09 21:03:16.955615 | ubuntu-jammy | +-w /etc/init/ -p wa -k init 2025-09-09 21:03:16.955730 | ubuntu-jammy | + 2025-09-09 21:03:16.955848 | ubuntu-jammy | +## Library search paths 2025-09-09 21:03:16.955968 | ubuntu-jammy | +-w /etc/ld.so.conf -p wa -k libpath 2025-09-09 21:03:16.956086 | ubuntu-jammy | +-w /etc/ld.so.conf.d -p wa -k libpath 2025-09-09 21:03:16.956205 | ubuntu-jammy | + 2025-09-09 21:03:16.956325 | ubuntu-jammy | +## Systemwide library preloads (LD_PRELOAD) 2025-09-09 21:03:16.956458 | ubuntu-jammy | +-w /etc/ld.so.preload -p wa -k systemwide_preloads 2025-09-09 21:03:16.956576 | ubuntu-jammy | + 2025-09-09 21:03:16.956694 | ubuntu-jammy | +## Pam configuration 2025-09-09 21:03:16.956810 | ubuntu-jammy | +-w /etc/pam.d/ -p wa -k pam 2025-09-09 21:03:16.956929 | ubuntu-jammy | +-w /etc/security/limits.conf -p wa -k pam 2025-09-09 21:03:16.957058 | ubuntu-jammy | +-w /etc/security/limits.d -p wa -k pam 2025-09-09 21:03:16.957179 | ubuntu-jammy | +-w /etc/security/pam_env.conf -p wa -k pam 2025-09-09 21:03:16.957302 | ubuntu-jammy | +-w /etc/security/namespace.conf -p wa -k pam 2025-09-09 21:03:16.957459 | ubuntu-jammy | +-w /etc/security/namespace.d -p wa -k pam 2025-09-09 21:03:16.957588 | ubuntu-jammy | +-w /etc/security/namespace.init -p wa -k pam 2025-09-09 21:03:16.957705 | ubuntu-jammy | + 2025-09-09 21:03:16.957823 | ubuntu-jammy | +## Mail configuration 2025-09-09 21:03:16.957944 | ubuntu-jammy | +-w /etc/aliases -p wa -k mail 2025-09-09 21:03:16.958062 | ubuntu-jammy | +-w /etc/postfix/ -p wa -k mail 2025-09-09 21:03:16.958182 | ubuntu-jammy | +-w /etc/exim4/ -p wa -k mail 2025-09-09 21:03:16.958306 | ubuntu-jammy | + 2025-09-09 21:03:16.958437 | ubuntu-jammy | +## SSH configuration 2025-09-09 21:03:16.958556 | ubuntu-jammy | +-w /etc/ssh/sshd_config -k sshd 2025-09-09 21:03:16.958672 | ubuntu-jammy | +-w /etc/ssh/sshd_config.d -k sshd 2025-09-09 21:03:16.958787 | ubuntu-jammy | + 2025-09-09 21:03:16.958905 | ubuntu-jammy | +## root ssh key tampering 2025-09-09 21:03:16.959022 | ubuntu-jammy | +-w /root/.ssh -p wa -k rootkey 2025-09-09 21:03:16.959139 | ubuntu-jammy | + 2025-09-09 21:03:16.959280 | ubuntu-jammy | +# Systemd 2025-09-09 21:03:16.959418 | ubuntu-jammy | +-w /bin/systemctl -p x -k systemd 2025-09-09 21:03:16.959540 | ubuntu-jammy | +-w /etc/systemd/ -p wa -k systemd 2025-09-09 21:03:16.959659 | ubuntu-jammy | +-w /usr/lib/systemd -p wa -k systemd 2025-09-09 21:03:16.959775 | ubuntu-jammy | + 2025-09-09 21:03:16.959896 | ubuntu-jammy | +## https://systemd.network/systemd.generator.html 2025-09-09 21:03:16.960015 | ubuntu-jammy | +-w /etc/systemd/system-generators/ -p wa -k systemd_generator 2025-09-09 21:03:16.960137 | ubuntu-jammy | +-w /usr/local/lib/systemd/system-generators/ -p wa -k systemd_generator 2025-09-09 21:03:16.960258 | ubuntu-jammy | +-w /usr/lib/systemd/system-generators -p wa -k systemd_generator 2025-09-09 21:03:16.960376 | ubuntu-jammy | + 2025-09-09 21:03:16.960512 | ubuntu-jammy | +-w /etc/systemd/user-generators/ -p wa -k systemd_generator 2025-09-09 21:03:16.960633 | ubuntu-jammy | +-w /usr/local/lib/systemd/user-generators/ -p wa -k systemd_generator 2025-09-09 21:03:16.960752 | ubuntu-jammy | +-w /lib/systemd/system-generators/ -p wa -k systemd_generator 2025-09-09 21:03:16.960869 | ubuntu-jammy | + 2025-09-09 21:03:16.960989 | ubuntu-jammy | +## SELinux events that modify the system's Mandatory Access Controls (MAC) 2025-09-09 21:03:16.961110 | ubuntu-jammy | +-w /etc/selinux/ -p wa -k mac_policy 2025-09-09 21:03:16.961225 | ubuntu-jammy | + 2025-09-09 21:03:16.961346 | ubuntu-jammy | +## Critical elements access failures 2025-09-09 21:03:16.961514 | ubuntu-jammy | +-a always,exit -F arch=b64 -S open -F dir=/etc -F success=0 -k unauthedfileaccess 2025-09-09 21:03:16.961645 | ubuntu-jammy | +-a always,exit -F arch=b64 -S open -F dir=/bin -F success=0 -k unauthedfileaccess 2025-09-09 21:03:16.961770 | ubuntu-jammy | +-a always,exit -F arch=b64 -S open -F dir=/sbin -F success=0 -k unauthedfileaccess 2025-09-09 21:03:16.961893 | ubuntu-jammy | +-a always,exit -F arch=b64 -S open -F dir=/usr/bin -F success=0 -k unauthedfileaccess 2025-09-09 21:03:16.962018 | ubuntu-jammy | +-a always,exit -F arch=b64 -S open -F dir=/usr/sbin -F success=0 -k unauthedfileaccess 2025-09-09 21:03:16.962145 | ubuntu-jammy | +-a always,exit -F arch=b64 -S open -F dir=/var -F success=0 -k unauthedfileaccess 2025-09-09 21:03:16.962268 | ubuntu-jammy | +-a always,exit -F arch=b64 -S open -F dir=/home -F success=0 -k unauthedfileaccess 2025-09-09 21:03:16.962392 | ubuntu-jammy | +-a always,exit -F arch=b64 -S open -F dir=/srv -F success=0 -k unauthedfileaccess 2025-09-09 21:03:16.962528 | ubuntu-jammy | + 2025-09-09 21:03:16.962647 | ubuntu-jammy | +## Process ID change (switching accounts) applications 2025-09-09 21:03:16.962776 | ubuntu-jammy | +-w /bin/su -p x -k priv_esc 2025-09-09 21:03:16.962893 | ubuntu-jammy | +-w /usr/bin/sudo -p x -k priv_esc 2025-09-09 21:03:16.963009 | ubuntu-jammy | + 2025-09-09 21:03:16.963127 | ubuntu-jammy | +## Power state 2025-09-09 21:03:16.963272 | ubuntu-jammy | +-w /sbin/shutdown -p x -k power 2025-09-09 21:03:16.963405 | ubuntu-jammy | +-w /sbin/poweroff -p x -k power 2025-09-09 21:03:16.963525 | ubuntu-jammy | +-w /sbin/reboot -p x -k power 2025-09-09 21:03:16.963645 | ubuntu-jammy | +-w /sbin/halt -p x -k power 2025-09-09 21:03:16.963760 | ubuntu-jammy | + 2025-09-09 21:03:16.963877 | ubuntu-jammy | +## Session initiation information 2025-09-09 21:03:16.963995 | ubuntu-jammy | +-w /var/run/utmp -p wa -k session 2025-09-09 21:03:16.964111 | ubuntu-jammy | +-w /var/log/btmp -p wa -k session 2025-09-09 21:03:16.964227 | ubuntu-jammy | +-w /var/log/wtmp -p wa -k session 2025-09-09 21:03:16.964340 | ubuntu-jammy | + 2025-09-09 21:03:16.964494 | ubuntu-jammy | +## Discretionary Access Control (DAC) modifications 2025-09-09 21:03:16.964619 | ubuntu-jammy | +-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:16.964748 | ubuntu-jammy | +-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:16.964869 | ubuntu-jammy | +-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:16.964988 | ubuntu-jammy | +-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:16.965108 | ubuntu-jammy | +-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:16.965227 | ubuntu-jammy | +-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:16.965353 | ubuntu-jammy | +-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:16.965489 | ubuntu-jammy | +-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:16.965610 | ubuntu-jammy | +-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:16.965734 | ubuntu-jammy | +-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:16.965855 | ubuntu-jammy | +-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:16.965974 | ubuntu-jammy | +-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:16.966091 | ubuntu-jammy | +-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:16.966205 | ubuntu-jammy | + 2025-09-09 21:03:16.966322 | ubuntu-jammy | +# Special Rules --------------------------------------------------------------- 2025-09-09 21:03:16.966467 | ubuntu-jammy | + 2025-09-09 21:03:16.966591 | ubuntu-jammy | +## Reconnaissance 2025-09-09 21:03:16.966713 | ubuntu-jammy | +-w /usr/bin/whoami -p x -k recon 2025-09-09 21:03:16.966833 | ubuntu-jammy | +-w /usr/bin/id -p x -k recon 2025-09-09 21:03:16.966953 | ubuntu-jammy | +-w /bin/hostname -p x -k recon 2025-09-09 21:03:16.967072 | ubuntu-jammy | +-w /bin/uname -p x -k recon 2025-09-09 21:03:16.967190 | ubuntu-jammy | +-w /etc/issue -p r -k recon 2025-09-09 21:03:16.967329 | ubuntu-jammy | +-w /etc/hostname -p r -k recon 2025-09-09 21:03:16.967463 | ubuntu-jammy | + 2025-09-09 21:03:16.967584 | ubuntu-jammy | +## Suspicious activity 2025-09-09 21:03:16.967702 | ubuntu-jammy | +-w /usr/bin/wget -p x -k susp_activity 2025-09-09 21:03:16.967829 | ubuntu-jammy | +-w /usr/bin/curl -p x -k susp_activity 2025-09-09 21:03:16.967948 | ubuntu-jammy | +-w /usr/bin/base64 -p x -k susp_activity 2025-09-09 21:03:16.968065 | ubuntu-jammy | +-w /bin/nc -p x -k susp_activity 2025-09-09 21:03:16.968184 | ubuntu-jammy | +-w /bin/netcat -p x -k susp_activity 2025-09-09 21:03:16.968304 | ubuntu-jammy | +-w /usr/bin/ncat -p x -k susp_activity 2025-09-09 21:03:16.968452 | ubuntu-jammy | +-w /usr/bin/ss -p x -k susp_activity 2025-09-09 21:03:16.968581 | ubuntu-jammy | +-w /usr/bin/netstat -p x -k susp_activity 2025-09-09 21:03:16.968723 | ubuntu-jammy | +-w /usr/bin/ssh -p x -k susp_activity 2025-09-09 21:03:16.968845 | ubuntu-jammy | +-w /usr/bin/scp -p x -k susp_activity 2025-09-09 21:03:16.968963 | ubuntu-jammy | +-w /usr/bin/sftp -p x -k susp_activity 2025-09-09 21:03:16.969081 | ubuntu-jammy | +-w /usr/bin/ftp -p x -k susp_activity 2025-09-09 21:03:16.969201 | ubuntu-jammy | +-w /usr/bin/socat -p x -k susp_activity 2025-09-09 21:03:16.969318 | ubuntu-jammy | +-w /usr/bin/wireshark -p x -k susp_activity 2025-09-09 21:03:16.969453 | ubuntu-jammy | +-w /usr/bin/tshark -p x -k susp_activity 2025-09-09 21:03:16.969574 | ubuntu-jammy | +-w /usr/bin/rawshark -p x -k susp_activity 2025-09-09 21:03:16.969693 | ubuntu-jammy | +-w /usr/bin/rdesktop -p x -k susp_activity 2025-09-09 21:03:16.969824 | ubuntu-jammy | +-w /usr/local/bin/rdesktop -p x -k susp_activity 2025-09-09 21:03:16.969942 | ubuntu-jammy | +-w /usr/bin/wlfreerdp -p x -k susp_activity 2025-09-09 21:03:16.970059 | ubuntu-jammy | +-w /usr/bin/xfreerdp -p x -k susp_activity 2025-09-09 21:03:16.970178 | ubuntu-jammy | +-w /usr/local/bin/xfreerdp -p x -k susp_activity 2025-09-09 21:03:16.970294 | ubuntu-jammy | +-w /usr/bin/nmap -p x -k susp_activity 2025-09-09 21:03:16.970443 | ubuntu-jammy | + 2025-09-09 21:03:16.970567 | ubuntu-jammy | +## sssd 2025-09-09 21:03:16.970697 | ubuntu-jammy | +-a always,exit -F path=/usr/libexec/sssd/p11_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-09 21:03:16.970827 | ubuntu-jammy | +-a always,exit -F path=/usr/libexec/sssd/krb5_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-09 21:03:16.970955 | ubuntu-jammy | +-a always,exit -F path=/usr/libexec/sssd/ldap_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-09 21:03:16.971084 | ubuntu-jammy | +-a always,exit -F path=/usr/libexec/sssd/selinux_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-09 21:03:16.971237 | ubuntu-jammy | +-a always,exit -F path=/usr/libexec/sssd/proxy_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-09 21:03:16.971360 | ubuntu-jammy | + 2025-09-09 21:03:16.971493 | ubuntu-jammy | +## T1002 Data Compressed 2025-09-09 21:03:16.971609 | ubuntu-jammy | + 2025-09-09 21:03:16.971730 | ubuntu-jammy | +-w /usr/bin/zip -p x -k Data_Compressed 2025-09-09 21:03:16.971849 | ubuntu-jammy | +-w /usr/bin/gzip -p x -k Data_Compressed 2025-09-09 21:03:16.971976 | ubuntu-jammy | +-w /usr/bin/tar -p x -k Data_Compressed 2025-09-09 21:03:16.972096 | ubuntu-jammy | +-w /usr/bin/bzip2 -p x -k Data_Compressed 2025-09-09 21:03:16.972210 | ubuntu-jammy | + 2025-09-09 21:03:16.972326 | ubuntu-jammy | +-w /usr/bin/lzip -p x -k Data_Compressed 2025-09-09 21:03:16.972458 | ubuntu-jammy | +-w /usr/local/bin/lzip -p x -k Data_Compressed 2025-09-09 21:03:16.972574 | ubuntu-jammy | + 2025-09-09 21:03:16.972694 | ubuntu-jammy | +-w /usr/bin/lz4 -p x -k Data_Compressed 2025-09-09 21:03:16.972815 | ubuntu-jammy | +-w /usr/local/bin/lz4 -p x -k Data_Compressed 2025-09-09 21:03:16.972932 | ubuntu-jammy | + 2025-09-09 21:03:16.973049 | ubuntu-jammy | +-w /usr/bin/lzop -p x -k Data_Compressed 2025-09-09 21:03:16.973169 | ubuntu-jammy | +-w /usr/local/bin/lzop -p x -k Data_Compressed 2025-09-09 21:03:16.973285 | ubuntu-jammy | + 2025-09-09 21:03:16.973435 | ubuntu-jammy | +-w /usr/bin/plzip -p x -k Data_Compressed 2025-09-09 21:03:16.973568 | ubuntu-jammy | +-w /usr/local/bin/plzip -p x -k Data_Compressed 2025-09-09 21:03:16.973684 | ubuntu-jammy | + 2025-09-09 21:03:16.973803 | ubuntu-jammy | +-w /usr/bin/pbzip2 -p x -k Data_Compressed 2025-09-09 21:03:16.973921 | ubuntu-jammy | +-w /usr/local/bin/pbzip2 -p x -k Data_Compressed 2025-09-09 21:03:16.974034 | ubuntu-jammy | + 2025-09-09 21:03:16.974152 | ubuntu-jammy | +-w /usr/bin/lbzip2 -p x -k Data_Compressed 2025-09-09 21:03:16.974270 | ubuntu-jammy | +-w /usr/local/bin/lbzip2 -p x -k Data_Compressed 2025-09-09 21:03:16.974385 | ubuntu-jammy | + 2025-09-09 21:03:16.974531 | ubuntu-jammy | +-w /usr/bin/pixz -p x -k Data_Compressed 2025-09-09 21:03:16.974651 | ubuntu-jammy | +-w /usr/local/bin/pixz -p x -k Data_Compressed 2025-09-09 21:03:16.974766 | ubuntu-jammy | + 2025-09-09 21:03:16.974890 | ubuntu-jammy | +-w /usr/bin/pigz -p x -k Data_Compressed 2025-09-09 21:03:16.975007 | ubuntu-jammy | +-w /usr/local/bin/pigz -p x -k Data_Compressed 2025-09-09 21:03:16.975124 | ubuntu-jammy | +-w /usr/bin/unpigz -p x -k Data_Compressed 2025-09-09 21:03:16.975265 | ubuntu-jammy | +-w /usr/local/bin/unpigz -p x -k Data_Compressed 2025-09-09 21:03:16.975383 | ubuntu-jammy | + 2025-09-09 21:03:16.975518 | ubuntu-jammy | +-w /usr/bin/zstd -p x -k Data_Compressed 2025-09-09 21:03:16.975635 | ubuntu-jammy | +-w /usr/local/bin/zstd -p x -k Data_Compressed 2025-09-09 21:03:16.975751 | ubuntu-jammy | + 2025-09-09 21:03:16.975869 | ubuntu-jammy | +## Added to catch netcat on Ubuntu 2025-09-09 21:03:16.975989 | ubuntu-jammy | +-w /bin/nc.openbsd -p x -k susp_activity 2025-09-09 21:03:16.976107 | ubuntu-jammy | +-w /bin/nc.traditional -p x -k susp_activity 2025-09-09 21:03:16.976222 | ubuntu-jammy | + 2025-09-09 21:03:16.976340 | ubuntu-jammy | +## Sbin suspicious activity 2025-09-09 21:03:16.976508 | ubuntu-jammy | +-w /sbin/iptables -p x -k sbin_susp 2025-09-09 21:03:16.976634 | ubuntu-jammy | +-w /sbin/ip6tables -p x -k sbin_susp 2025-09-09 21:03:16.976753 | ubuntu-jammy | +-w /sbin/ifconfig -p x -k sbin_susp 2025-09-09 21:03:16.976871 | ubuntu-jammy | +-w /usr/sbin/arptables -p x -k sbin_susp 2025-09-09 21:03:16.976988 | ubuntu-jammy | +-w /usr/sbin/ebtables -p x -k sbin_susp 2025-09-09 21:03:16.977107 | ubuntu-jammy | +-w /sbin/xtables-nft-multi -p x -k sbin_susp 2025-09-09 21:03:16.977240 | ubuntu-jammy | +-w /usr/sbin/nft -p x -k sbin_susp 2025-09-09 21:03:16.977356 | ubuntu-jammy | +-w /usr/sbin/tcpdump -p x -k sbin_susp 2025-09-09 21:03:16.977489 | ubuntu-jammy | +-w /usr/sbin/traceroute -p x -k sbin_susp 2025-09-09 21:03:16.977605 | ubuntu-jammy | +-w /usr/sbin/ufw -p x -k sbin_susp 2025-09-09 21:03:16.977722 | ubuntu-jammy | + 2025-09-09 21:03:16.977837 | ubuntu-jammy | +### kde4 2025-09-09 21:03:16.977967 | ubuntu-jammy | +-a always,exit -F path=/usr/libexec/kde4/kpac_dhcp_helper -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-09 21:03:16.978092 | ubuntu-jammy | +-a always,exit -F path=/usr/libexec/kde4/kdesud -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-09 21:03:16.978206 | ubuntu-jammy | + 2025-09-09 21:03:16.978324 | ubuntu-jammy | +## dbus-send invocation 2025-09-09 21:03:16.978458 | ubuntu-jammy | +### may indicate privilege escalation CVE-2021-3560 2025-09-09 21:03:16.978579 | ubuntu-jammy | +-w /usr/bin/dbus-send -p x -k dbus_send 2025-09-09 21:03:16.978696 | ubuntu-jammy | +-w /usr/bin/gdbus -p x -k gdubs_call 2025-09-09 21:03:16.978810 | ubuntu-jammy | + 2025-09-09 21:03:16.978926 | ubuntu-jammy | +## pkexec invocation 2025-09-09 21:03:16.979046 | ubuntu-jammy | +### may indicate privilege escalation CVE-2021-4034 2025-09-09 21:03:16.979166 | ubuntu-jammy | +-w /usr/bin/pkexec -p x -k pkexec 2025-09-09 21:03:16.979311 | ubuntu-jammy | + 2025-09-09 21:03:16.979462 | ubuntu-jammy | +## Suspicious shells 2025-09-09 21:03:16.979583 | ubuntu-jammy | +-w /bin/ash -p x -k susp_shell 2025-09-09 21:03:16.979701 | ubuntu-jammy | +-w /bin/csh -p x -k susp_shell 2025-09-09 21:03:16.979819 | ubuntu-jammy | +-w /bin/fish -p x -k susp_shell 2025-09-09 21:03:16.979935 | ubuntu-jammy | +-w /bin/tcsh -p x -k susp_shell 2025-09-09 21:03:16.980053 | ubuntu-jammy | +-w /bin/tclsh -p x -k susp_shell 2025-09-09 21:03:16.980172 | ubuntu-jammy | +-w /bin/xonsh -p x -k susp_shell 2025-09-09 21:03:16.980290 | ubuntu-jammy | +-w /usr/local/bin/xonsh -p x -k susp_shell 2025-09-09 21:03:16.980422 | ubuntu-jammy | +-w /bin/open -p x -k susp_shell 2025-09-09 21:03:16.980543 | ubuntu-jammy | +-w /bin/rbash -p x -k susp_shell 2025-09-09 21:03:16.980658 | ubuntu-jammy | + 2025-09-09 21:03:16.980775 | ubuntu-jammy | +# Web Server Actvity 2025-09-09 21:03:16.980901 | ubuntu-jammy | +## Change the number "33" to the ID of your WebServer user. Default: www-data:x:33:33 2025-09-09 21:03:16.981022 | ubuntu-jammy | +-a always,exit -F arch=b64 -S execve -F euid=33 -k detect_execve_www 2025-09-09 21:03:16.981136 | ubuntu-jammy | + 2025-09-09 21:03:16.981252 | ubuntu-jammy | +### https://clustershell.readthedocs.io/ 2025-09-09 21:03:16.981370 | ubuntu-jammy | +-w /bin/clush -p x -k susp_shell 2025-09-09 21:03:16.981530 | ubuntu-jammy | +-w /usr/local/bin/clush -p x -k susp_shell 2025-09-09 21:03:16.981654 | ubuntu-jammy | +-w /etc/clustershell/clush.conf -p x -k susp_shell 2025-09-09 21:03:16.981767 | ubuntu-jammy | + 2025-09-09 21:03:16.981883 | ubuntu-jammy | +### https://github.com/tmux/tmux 2025-09-09 21:03:16.982001 | ubuntu-jammy | +-w /bin/tmux -p x -k susp_shell 2025-09-09 21:03:16.982117 | ubuntu-jammy | +-w /usr/local/bin/tmux -p x -k susp_shell 2025-09-09 21:03:16.982230 | ubuntu-jammy | + 2025-09-09 21:03:16.982346 | ubuntu-jammy | +## Shell/profile configurations 2025-09-09 21:03:16.982480 | ubuntu-jammy | +-w /etc/profile.d/ -p wa -k shell_profiles 2025-09-09 21:03:16.982599 | ubuntu-jammy | +-w /etc/profile -p wa -k shell_profiles 2025-09-09 21:03:16.982717 | ubuntu-jammy | +-w /etc/shells -p wa -k shell_profiles 2025-09-09 21:03:16.982835 | ubuntu-jammy | +-w /etc/bashrc -p wa -k shell_profiles 2025-09-09 21:03:16.982954 | ubuntu-jammy | +-w /etc/csh.cshrc -p wa -k shell_profiles 2025-09-09 21:03:16.983071 | ubuntu-jammy | +-w /etc/csh.login -p wa -k shell_profiles 2025-09-09 21:03:16.983190 | ubuntu-jammy | +-w /etc/fish/ -p wa -k shell_profiles 2025-09-09 21:03:16.983327 | ubuntu-jammy | +-w /etc/zsh/ -p wa -k shell_profiles 2025-09-09 21:03:16.983456 | ubuntu-jammy | + 2025-09-09 21:03:16.983579 | ubuntu-jammy | +### https://github.com/xxh/xxh 2025-09-09 21:03:16.983699 | ubuntu-jammy | +-w /usr/local/bin/xxh.bash -p x -k susp_shell 2025-09-09 21:03:16.983820 | ubuntu-jammy | +-w /usr/local/bin/xxh.xsh -p x -k susp_shell 2025-09-09 21:03:16.983938 | ubuntu-jammy | +-w /usr/local/bin/xxh.zsh -p x -k susp_shell 2025-09-09 21:03:16.984054 | ubuntu-jammy | + 2025-09-09 21:03:16.984173 | ubuntu-jammy | +## Injection 2025-09-09 21:03:16.984293 | ubuntu-jammy | +### These rules watch for code injection by the ptrace facility. 2025-09-09 21:03:16.984446 | ubuntu-jammy | +### This could indicate someone trying to do something bad or just debugging 2025-09-09 21:03:16.984574 | ubuntu-jammy | +-a always,exit -F arch=b64 -S ptrace -F a0=0x4 -k code_injection 2025-09-09 21:03:16.984704 | ubuntu-jammy | +-a always,exit -F arch=b64 -S ptrace -F a0=0x5 -k data_injection 2025-09-09 21:03:16.984834 | ubuntu-jammy | +-a always,exit -F arch=b64 -S ptrace -F a0=0x6 -k register_injection 2025-09-09 21:03:16.984954 | ubuntu-jammy | +-a always,exit -F arch=b64 -S ptrace -k tracing 2025-09-09 21:03:16.985069 | ubuntu-jammy | + 2025-09-09 21:03:16.985188 | ubuntu-jammy | +## Anonymous File Creation 2025-09-09 21:03:16.985305 | ubuntu-jammy | +### These rules watch the use of memfd_create 2025-09-09 21:03:16.985452 | ubuntu-jammy | +### "memfd_create" creates anonymous file and returns a file descriptor to access it 2025-09-09 21:03:16.985582 | ubuntu-jammy | +### When combined with "fexecve" can be used to stealthily run binaries in memory without touching disk 2025-09-09 21:03:16.985703 | ubuntu-jammy | +-a always,exit -F arch=b64 -S memfd_create -F key=anon_file_create 2025-09-09 21:03:16.985817 | ubuntu-jammy | + 2025-09-09 21:03:16.985934 | ubuntu-jammy | +## Privilege Abuse 2025-09-09 21:03:16.986059 | ubuntu-jammy | +### The purpose of this rule is to detect when an admin may be abusing power by looking in user's home dir. 2025-09-09 21:03:16.986190 | ubuntu-jammy | +-a always,exit -F dir=/home -F uid=0 -F auid>=1000 -F auid!=-1 -C auid!=obj_uid -k power_abuse 2025-09-09 21:03:16.986306 | ubuntu-jammy | + 2025-09-09 21:03:16.986438 | ubuntu-jammy | +# Socket Creations 2025-09-09 21:03:16.986559 | ubuntu-jammy | +# will catch both IPv4 and IPv6 2025-09-09 21:03:16.986675 | ubuntu-jammy | + 2025-09-09 21:03:16.986794 | ubuntu-jammy | +-a always,exit -F arch=b32 -S socket -F a0=2 -k network_socket_created 2025-09-09 21:03:16.986913 | ubuntu-jammy | +-a always,exit -F arch=b64 -S socket -F a0=2 -k network_socket_created 2025-09-09 21:03:16.987026 | ubuntu-jammy | + 2025-09-09 21:03:16.987146 | ubuntu-jammy | +-a always,exit -F arch=b32 -S socket -F a0=10 -k network_socket_created 2025-09-09 21:03:16.987302 | ubuntu-jammy | +-a always,exit -F arch=b64 -S socket -F a0=10 -k network_socket_created 2025-09-09 21:03:16.987451 | ubuntu-jammy | + 2025-09-09 21:03:16.987575 | ubuntu-jammy | +# Software Management --------------------------------------------------------- 2025-09-09 21:03:16.987692 | ubuntu-jammy | + 2025-09-09 21:03:16.987810 | ubuntu-jammy | +# RPM (Redhat/CentOS) 2025-09-09 21:03:16.987928 | ubuntu-jammy | +-w /usr/bin/rpm -p x -k software_mgmt 2025-09-09 21:03:16.988048 | ubuntu-jammy | +-w /usr/bin/yum -p x -k software_mgmt 2025-09-09 21:03:16.988163 | ubuntu-jammy | + 2025-09-09 21:03:16.988282 | ubuntu-jammy | +# DNF (Fedora/RedHat 8/CentOS 8) 2025-09-09 21:03:16.988425 | ubuntu-jammy | +-w /usr/bin/dnf -p x -k software_mgmt 2025-09-09 21:03:16.988544 | ubuntu-jammy | + 2025-09-09 21:03:16.988665 | ubuntu-jammy | +# YAST/Zypper/RPM (SuSE) 2025-09-09 21:03:16.988785 | ubuntu-jammy | +-w /sbin/yast -p x -k software_mgmt 2025-09-09 21:03:16.988905 | ubuntu-jammy | +-w /sbin/yast2 -p x -k software_mgmt 2025-09-09 21:03:16.989024 | ubuntu-jammy | +-w /bin/rpm -p x -k software_mgmt 2025-09-09 21:03:16.989145 | ubuntu-jammy | +-w /usr/bin/zypper -k software_mgmt 2025-09-09 21:03:16.989259 | ubuntu-jammy | + 2025-09-09 21:03:16.989377 | ubuntu-jammy | +# DPKG / APT-GET (Debian/Ubuntu) 2025-09-09 21:03:16.989532 | ubuntu-jammy | +-w /usr/bin/dpkg -p x -k software_mgmt 2025-09-09 21:03:16.989655 | ubuntu-jammy | +-w /usr/bin/apt -p x -k software_mgmt 2025-09-09 21:03:16.989775 | ubuntu-jammy | +-w /usr/bin/apt-add-repository -p x -k software_mgmt 2025-09-09 21:03:16.989893 | ubuntu-jammy | +-w /usr/bin/apt-get -p x -k software_mgmt 2025-09-09 21:03:16.990012 | ubuntu-jammy | +-w /usr/bin/aptitude -p x -k software_mgmt 2025-09-09 21:03:16.990131 | ubuntu-jammy | +-w /usr/bin/wajig -p x -k software_mgmt 2025-09-09 21:03:16.990250 | ubuntu-jammy | +-w /usr/bin/snap -p x -k software_mgmt 2025-09-09 21:03:16.990365 | ubuntu-jammy | + 2025-09-09 21:03:16.990501 | ubuntu-jammy | +# PIP(3) (Python installs) 2025-09-09 21:03:16.990621 | ubuntu-jammy | +-w /usr/bin/pip -p x -k third_party_software_mgmt 2025-09-09 21:03:16.990739 | ubuntu-jammy | +-w /usr/local/bin/pip -p x -k third_party_software_mgmt 2025-09-09 21:03:16.990860 | ubuntu-jammy | +-w /usr/bin/pip3 -p x -k third_party_software_mgmt 2025-09-09 21:03:16.990981 | ubuntu-jammy | +-w /usr/local/bin/pip3 -p x -k third_party_software_mgmt 2025-09-09 21:03:16.991100 | ubuntu-jammy | +-w /usr/bin/pipx -p x -k third_party_software_mgmt 2025-09-09 21:03:16.991236 | ubuntu-jammy | +-w /usr/local/bin/pipx -p x -k third_party_software_mgmt 2025-09-09 21:03:16.991357 | ubuntu-jammy | + 2025-09-09 21:03:16.991488 | ubuntu-jammy | +# npm 2025-09-09 21:03:16.991609 | ubuntu-jammy | +## T1072 third party software 2025-09-09 21:03:16.991725 | ubuntu-jammy | +## https://www.npmjs.com 2025-09-09 21:03:16.991847 | ubuntu-jammy | +## https://docs.npmjs.com/cli/v6/commands/npm-audit 2025-09-09 21:03:16.991969 | ubuntu-jammy | +-w /usr/bin/npm -p x -k third_party_software_mgmt 2025-09-09 21:03:16.992084 | ubuntu-jammy | + 2025-09-09 21:03:16.992217 | ubuntu-jammy | +# Comprehensive Perl Archive Network (CPAN) (CPAN installs) 2025-09-09 21:03:16.992336 | ubuntu-jammy | +## T1072 third party software 2025-09-09 21:03:16.992565 | ubuntu-jammy | +## https://www.cpan.org 2025-09-09 21:03:16.992699 | ubuntu-jammy | +-w /usr/bin/cpan -p x -k third_party_software_mgmt 2025-09-09 21:03:16.992817 | ubuntu-jammy | + 2025-09-09 21:03:16.992937 | ubuntu-jammy | +# Ruby (RubyGems installs) 2025-09-09 21:03:16.993056 | ubuntu-jammy | +## T1072 third party software 2025-09-09 21:03:16.993174 | ubuntu-jammy | +## https://rubygems.org 2025-09-09 21:03:16.993292 | ubuntu-jammy | +-w /usr/bin/gem -p x -k third_party_software_mgmt 2025-09-09 21:03:16.993426 | ubuntu-jammy | + 2025-09-09 21:03:16.993550 | ubuntu-jammy | +# LuaRocks (Lua installs) 2025-09-09 21:03:16.993667 | ubuntu-jammy | +## T1072 third party software 2025-09-09 21:03:16.993785 | ubuntu-jammy | +## https://luarocks.org 2025-09-09 21:03:16.993905 | ubuntu-jammy | +-w /usr/bin/luarocks -p x -k third_party_software_mgmt 2025-09-09 21:03:16.994020 | ubuntu-jammy | + 2025-09-09 21:03:16.994139 | ubuntu-jammy | +# Pacman (Arch Linux) 2025-09-09 21:03:16.994259 | ubuntu-jammy | +## https://wiki.archlinux.org/title/Pacman 2025-09-09 21:03:16.994376 | ubuntu-jammy | +## T1072 third party software 2025-09-09 21:03:16.994510 | ubuntu-jammy | +-w /etc/pacman.conf -p x -k third_party_software_mgmt 2025-09-09 21:03:16.994630 | ubuntu-jammy | +-w /etc/pacman.d -p x -k third_party_software_mgmt 2025-09-09 21:03:16.994743 | ubuntu-jammy | + 2025-09-09 21:03:16.994860 | ubuntu-jammy | +# Special Software ------------------------------------------------------------ 2025-09-09 21:03:16.994974 | ubuntu-jammy | + 2025-09-09 21:03:16.995091 | ubuntu-jammy | +## GDS specific secrets 2025-09-09 21:03:16.995205 | ubuntu-jammy | +-w /etc/puppet/ssl -p wa -k puppet_ssl 2025-09-09 21:03:16.995349 | ubuntu-jammy | + 2025-09-09 21:03:16.995497 | ubuntu-jammy | +## IBM Bigfix BESClient 2025-09-09 21:03:16.995629 | ubuntu-jammy | +-a always,exit -F arch=b64 -S open -F dir=/opt/BESClient -F success=0 -k soft_besclient 2025-09-09 21:03:16.995749 | ubuntu-jammy | +-w /var/opt/BESClient/ -p wa -k soft_besclient 2025-09-09 21:03:16.995863 | ubuntu-jammy | + 2025-09-09 21:03:16.995982 | ubuntu-jammy | +## CHEF https://www.chef.io/chef/ 2025-09-09 21:03:16.996101 | ubuntu-jammy | +-w /etc/chef -p wa -k soft_chef 2025-09-09 21:03:16.996215 | ubuntu-jammy | + 2025-09-09 21:03:16.996329 | ubuntu-jammy | +## Salt 2025-09-09 21:03:16.996463 | ubuntu-jammy | +## https://saltproject.io/ 2025-09-09 21:03:16.996587 | ubuntu-jammy | +## https://docs.saltproject.io/en/latest/ref/configuration/master.html 2025-09-09 21:03:16.996704 | ubuntu-jammy | +-w /etc/salt -p wa -k soft_salt 2025-09-09 21:03:16.996820 | ubuntu-jammy | +-w /usr/local/etc/salt -p wa -k soft_salt 2025-09-09 21:03:16.996934 | ubuntu-jammy | + 2025-09-09 21:03:16.997049 | ubuntu-jammy | +## Otter 2025-09-09 21:03:16.997166 | ubuntu-jammy | +## https://inedo.com/otter 2025-09-09 21:03:16.997285 | ubuntu-jammy | +-w /etc/otter -p wa -k soft_otter 2025-09-09 21:03:16.997411 | ubuntu-jammy | + 2025-09-09 21:03:16.997531 | ubuntu-jammy | +## T1081 Credentials In Files 2025-09-09 21:03:16.997649 | ubuntu-jammy | +-w /usr/bin/grep -p x -k string_search 2025-09-09 21:03:16.997777 | ubuntu-jammy | +-w /usr/bin/egrep -p x -k string_search 2025-09-09 21:03:16.997896 | ubuntu-jammy | +-w /usr/bin/ugrep -p x -k string_search 2025-09-09 21:03:16.998012 | ubuntu-jammy | +### macOS 2025-09-09 21:03:16.998133 | ubuntu-jammy | +-w /usr/local/bin/grep -p x -k string_search 2025-09-09 21:03:16.998251 | ubuntu-jammy | +-w /usr/local/bin/egrep -p x -k string_search 2025-09-09 21:03:16.998370 | ubuntu-jammy | +-w /usr/local/bin/ugrep -p x -k string_search 2025-09-09 21:03:16.998521 | ubuntu-jammy | + 2025-09-09 21:03:16.998643 | ubuntu-jammy | +### https://github.com/tmbinc/bgrep 2025-09-09 21:03:16.998759 | ubuntu-jammy | +-w /usr/bin/bgrep -p x -k string_search 2025-09-09 21:03:16.998875 | ubuntu-jammy | +### macOS 2025-09-09 21:03:16.998992 | ubuntu-jammy | +-w /usr/local/bin/bgrep -p x -k string_search 2025-09-09 21:03:16.999106 | ubuntu-jammy | + 2025-09-09 21:03:16.999249 | ubuntu-jammy | +### https://github.com/BurntSushi/ripgrep 2025-09-09 21:03:16.999371 | ubuntu-jammy | +-w /usr/bin/rg -p x -k string_search 2025-09-09 21:03:16.999504 | ubuntu-jammy | +### macOS 2025-09-09 21:03:16.999625 | ubuntu-jammy | +-w /usr/local/bin/rg -p x -k string_search 2025-09-09 21:03:16.999742 | ubuntu-jammy | + 2025-09-09 21:03:16.999859 | ubuntu-jammy | +### https://github.com/awgn/cgrep 2025-09-09 21:03:16.999973 | ubuntu-jammy | + 2025-09-09 21:03:17.000090 | ubuntu-jammy | +-w /usr/bin/cgrep -p x -k string_search 2025-09-09 21:03:17.000205 | ubuntu-jammy | +### macOS 2025-09-09 21:03:17.000352 | ubuntu-jammy | +-w /usr/local/bin/cgrep -p x -k string_search 2025-09-09 21:03:17.000508 | ubuntu-jammy | + 2025-09-09 21:03:17.000633 | ubuntu-jammy | +### https://github.com/jpr5/ngrep 2025-09-09 21:03:17.000755 | ubuntu-jammy | +-w /usr/bin/ngrep -p x -k string_search 2025-09-09 21:03:17.000883 | ubuntu-jammy | +### macOS 2025-09-09 21:03:17.001002 | ubuntu-jammy | +-w /usr/local/bin/ngrep -p x -k string_search 2025-09-09 21:03:17.001117 | ubuntu-jammy | + 2025-09-09 21:03:17.001237 | ubuntu-jammy | +### https://github.com/vrothberg/vgrep 2025-09-09 21:03:17.001356 | ubuntu-jammy | +-w /usr/bin/vgrep -p x -k string_search 2025-09-09 21:03:17.001496 | ubuntu-jammy | +### macOS 2025-09-09 21:03:17.001616 | ubuntu-jammy | +-w /usr/local/bin/vgrep -p x -k string_search 2025-09-09 21:03:17.001730 | ubuntu-jammy | + 2025-09-09 21:03:17.001853 | ubuntu-jammy | +### https://github.com/monochromegane/the_platinum_searcher 2025-09-09 21:03:17.001972 | ubuntu-jammy | +-w /usr/bin/pt -p x -k string_search 2025-09-09 21:03:17.002090 | ubuntu-jammy | +### macOS 2025-09-09 21:03:17.002216 | ubuntu-jammy | +-w /usr/local/bin/pt -p x -k string_search 2025-09-09 21:03:17.002334 | ubuntu-jammy | + 2025-09-09 21:03:17.002497 | ubuntu-jammy | +### https://github.com/gvansickle/ucg 2025-09-09 21:03:17.002625 | ubuntu-jammy | +-w /usr/bin/ucg -p x -k string_search 2025-09-09 21:03:17.002742 | ubuntu-jammy | +### macOS 2025-09-09 21:03:17.002862 | ubuntu-jammy | +-w /usr/local/bin/ucg -p x -k string_search 2025-09-09 21:03:17.002979 | ubuntu-jammy | + 2025-09-09 21:03:17.003098 | ubuntu-jammy | +### https://github.com/ggreer/the_silver_searcher 2025-09-09 21:03:17.003237 | ubuntu-jammy | +-w /usr/bin/ag -p x -k string_search 2025-09-09 21:03:17.003359 | ubuntu-jammy | +### macOS 2025-09-09 21:03:17.003498 | ubuntu-jammy | +-w /usr/local/bin/ag -p x -k string_search 2025-09-09 21:03:17.003615 | ubuntu-jammy | + 2025-09-09 21:03:17.003734 | ubuntu-jammy | +### https://github.com/beyondgrep/ack3 2025-09-09 21:03:17.003853 | ubuntu-jammy | +### https://beyondgrep.com 2025-09-09 21:03:17.003970 | ubuntu-jammy | +-w /usr/bin/ack -p x -k string_search 2025-09-09 21:03:17.004089 | ubuntu-jammy | +-w /usr/local/bin/ack -p x -k string_search 2025-09-09 21:03:17.004207 | ubuntu-jammy | +-w /usr/bin/semgrep -p x -k string_search 2025-09-09 21:03:17.004324 | ubuntu-jammy | +### macOS 2025-09-09 21:03:17.004460 | ubuntu-jammy | +-w /usr/local/bin/semgrep -p x -k string_search 2025-09-09 21:03:17.004577 | ubuntu-jammy | + 2025-09-09 21:03:17.004692 | ubuntu-jammy | +## Docker 2025-09-09 21:03:17.004809 | ubuntu-jammy | +-w /usr/bin/dockerd -k docker 2025-09-09 21:03:17.004926 | ubuntu-jammy | +-w /usr/bin/docker -k docker 2025-09-09 21:03:17.005043 | ubuntu-jammy | +-w /usr/bin/docker-containerd -k docker 2025-09-09 21:03:17.005159 | ubuntu-jammy | +-w /usr/bin/docker-runc -k docker 2025-09-09 21:03:17.005275 | ubuntu-jammy | +-w /var/lib/docker -p wa -k docker 2025-09-09 21:03:17.005391 | ubuntu-jammy | +-w /etc/docker -k docker 2025-09-09 21:03:17.005550 | ubuntu-jammy | +-w /etc/sysconfig/docker -k docker 2025-09-09 21:03:17.005667 | ubuntu-jammy | +-w /etc/sysconfig/docker-storage -k docker 2025-09-09 21:03:17.005787 | ubuntu-jammy | +-w /usr/lib/systemd/system/docker.service -k docker 2025-09-09 21:03:17.005906 | ubuntu-jammy | +-w /usr/lib/systemd/system/docker.socket -k docker 2025-09-09 21:03:17.006022 | ubuntu-jammy | + 2025-09-09 21:03:17.006139 | ubuntu-jammy | +## Virtualization stuff 2025-09-09 21:03:17.006259 | ubuntu-jammy | +-w /usr/bin/qemu-system-x86_64 -p x -k qemu-system-x86_64 2025-09-09 21:03:17.006376 | ubuntu-jammy | +-w /usr/bin/qemu-img -p x -k qemu-img 2025-09-09 21:03:17.006510 | ubuntu-jammy | +-w /usr/bin/qemu-kvm -p x -k qemu-kvm 2025-09-09 21:03:17.006630 | ubuntu-jammy | +-w /usr/bin/qemu -p x -k qemu 2025-09-09 21:03:17.006747 | ubuntu-jammy | +-w /usr/bin/virtualbox -p x -k virtualbox 2025-09-09 21:03:17.006864 | ubuntu-jammy | +-w /usr/bin/virt-manager -p x -k virt-manager 2025-09-09 21:03:17.006983 | ubuntu-jammy | +-w /usr/bin/VBoxManage -p x -k VBoxManage 2025-09-09 21:03:17.007097 | ubuntu-jammy | + 2025-09-09 21:03:17.007232 | ubuntu-jammy | +#### VirtualBox on macOS 2025-09-09 21:03:17.007354 | ubuntu-jammy | + 2025-09-09 21:03:17.007505 | ubuntu-jammy | +-w /usr/local/bin/VirtualBox -p x -k virt_tool 2025-09-09 21:03:17.007631 | ubuntu-jammy | +-w /usr/local/bin/VirtualBoxVM -p x -k virt_tool 2025-09-09 21:03:17.007758 | ubuntu-jammy | +-w /usr/local/bin/VBoxManage -p x -k virt_tool 2025-09-09 21:03:17.007880 | ubuntu-jammy | +-w /usr/local/bin/VBoxVRDP -p x -k virt_tool 2025-09-09 21:03:17.008000 | ubuntu-jammy | +-w /usr/local/bin/VBoxHeadless -p x -k virt_tool 2025-09-09 21:03:17.008119 | ubuntu-jammy | +-w /usr/local/bin/vboxwebsrv -p x -k virt_tool 2025-09-09 21:03:17.008236 | ubuntu-jammy | +-w /usr/local/bin/VBoxBugReport -p x -k virt_tool 2025-09-09 21:03:17.008357 | ubuntu-jammy | +-w /usr/local/bin/VBoxBalloonCtrl -p x -k virt_tool 2025-09-09 21:03:17.008493 | ubuntu-jammy | +-w /usr/local/bin/VBoxAutostart -p x -k virt_tool 2025-09-09 21:03:17.008616 | ubuntu-jammy | +-w /usr/local/bin/VBoxDTrace -p x -k virt_tool 2025-09-09 21:03:17.008736 | ubuntu-jammy | +-w /usr/local/bin/vbox-img -p x -k virt_tool 2025-09-09 21:03:17.008868 | ubuntu-jammy | +-w /Library/LaunchDaemons/org.virtualbox.startup.plist -p x -k virt_tool 2025-09-09 21:03:17.008991 | ubuntu-jammy | +-w /Library/Application Support/VirtualBox/LaunchDaemons/ -p x -k virt_tool 2025-09-09 21:03:17.009111 | ubuntu-jammy | +-w /Library/Application Support/VirtualBox/VBoxDrv.kext/ -p x -k virt_tool 2025-09-09 21:03:17.009230 | ubuntu-jammy | +-w /Library/Application Support/VirtualBox/VBoxUSB.kext/ -p x -k virt_tool 2025-09-09 21:03:17.009350 | ubuntu-jammy | +-w /Library/Application Support/VirtualBox/VBoxNetFlt.kext/ -p x -k virt_tool 2025-09-09 21:03:17.009486 | ubuntu-jammy | +-w /Library/Application Support/VirtualBox/VBoxNetAdp.kext/ -p x -k virt_tool 2025-09-09 21:03:17.009604 | ubuntu-jammy | + 2025-09-09 21:03:17.009722 | ubuntu-jammy | +### Parallels Desktop on macOS 2025-09-09 21:03:17.009837 | ubuntu-jammy | + 2025-09-09 21:03:17.009954 | ubuntu-jammy | +-w /usr/local/bin/prl_convert -p x -k virt_tool 2025-09-09 21:03:17.010072 | ubuntu-jammy | +-w /usr/local/bin/prl_disk_tool -p x -k virt_tool 2025-09-09 21:03:17.010189 | ubuntu-jammy | +-w /usr/local/bin/prl_perf_ctl -p x -k virt_tool 2025-09-09 21:03:17.010305 | ubuntu-jammy | +-w /usr/local/bin/prlcore2dmp -p x -k virt_tool 2025-09-09 21:03:17.010464 | ubuntu-jammy | +-w /usr/local/bin/prlctl -p x -k virt_tool 2025-09-09 21:03:17.010592 | ubuntu-jammy | +-w /usr/local/bin/prlexec -p x -k virt_tool 2025-09-09 21:03:17.010710 | ubuntu-jammy | +-w /usr/local/bin/prlsrvctl -p x -k virt_tool 2025-09-09 21:03:17.010828 | ubuntu-jammy | +-w /Library/Preferences/Parallels -p x -k virt_tool 2025-09-09 21:03:17.010942 | ubuntu-jammy | + 2025-09-09 21:03:17.011058 | ubuntu-jammy | +### qemu on macOS 2025-09-09 21:03:17.011171 | ubuntu-jammy | + 2025-09-09 21:03:17.011309 | ubuntu-jammy | +-w /usr/local/bin/qemu-edid -p x -k virt_tool 2025-09-09 21:03:17.011442 | ubuntu-jammy | +-w /usr/local/bin/qemu-img -p x -k virt_tool 2025-09-09 21:03:17.011565 | ubuntu-jammy | +-w /usr/local/bin/qemu-io -p x -k virt_tool 2025-09-09 21:03:17.011681 | ubuntu-jammy | +-w /usr/local/bin/qemu-nbd -p x -k virt_tool 2025-09-09 21:03:17.011801 | ubuntu-jammy | +-w /usr/local/bin/qemu-system-x86_64 -p x -k virt_tool 2025-09-09 21:03:17.011915 | ubuntu-jammy | + 2025-09-09 21:03:17.012032 | ubuntu-jammy | +## Kubelet 2025-09-09 21:03:17.012150 | ubuntu-jammy | +-w /usr/bin/kubelet -k kubelet 2025-09-09 21:03:17.012266 | ubuntu-jammy | + 2025-09-09 21:03:17.012384 | ubuntu-jammy | +# ipc system call 2025-09-09 21:03:17.012518 | ubuntu-jammy | +# /usr/include/linux/ipc.h 2025-09-09 21:03:17.012636 | ubuntu-jammy | + 2025-09-09 21:03:17.012750 | ubuntu-jammy | +## msgctl 2025-09-09 21:03:17.012870 | ubuntu-jammy | +#-a always,exit -S ipc -F a0=14 -k Inter-Process_Communication 2025-09-09 21:03:17.012985 | ubuntu-jammy | +## msgget 2025-09-09 21:03:17.013102 | ubuntu-jammy | +#-a always,exit -S ipc -F a0=13 -k Inter-Process_Communication 2025-09-09 21:03:17.013220 | ubuntu-jammy | +## Use these lines on x86_64, ia64 instead 2025-09-09 21:03:17.013339 | ubuntu-jammy | +-a always,exit -F arch=b64 -S msgctl -k Inter-Process_Communication 2025-09-09 21:03:17.013498 | ubuntu-jammy | +-a always,exit -F arch=b64 -S msgget -k Inter-Process_Communication 2025-09-09 21:03:17.013618 | ubuntu-jammy | + 2025-09-09 21:03:17.013734 | ubuntu-jammy | +## semctl 2025-09-09 21:03:17.013854 | ubuntu-jammy | +#-a always,exit -S ipc -F a0=3 -k Inter-Process_Communication 2025-09-09 21:03:17.013969 | ubuntu-jammy | +## semget 2025-09-09 21:03:17.014088 | ubuntu-jammy | +#-a always,exit -S ipc -F a0=2 -k Inter-Process_Communication 2025-09-09 21:03:17.014203 | ubuntu-jammy | +## semop 2025-09-09 21:03:17.014321 | ubuntu-jammy | +#-a always,exit -S ipc -F a0=1 -k Inter-Process_Communication 2025-09-09 21:03:17.014454 | ubuntu-jammy | +## semtimedop 2025-09-09 21:03:17.014573 | ubuntu-jammy | +#-a always,exit -S ipc -F a0=4 -k Inter-Process_Communication 2025-09-09 21:03:17.014691 | ubuntu-jammy | +## Use these lines on x86_64, ia64 instead 2025-09-09 21:03:17.014809 | ubuntu-jammy | +-a always,exit -F arch=b64 -S semctl -k Inter-Process_Communication 2025-09-09 21:03:17.014928 | ubuntu-jammy | +-a always,exit -F arch=b64 -S semget -k Inter-Process_Communication 2025-09-09 21:03:17.015045 | ubuntu-jammy | +-a always,exit -F arch=b64 -S semop -k Inter-Process_Communication 2025-09-09 21:03:17.015161 | ubuntu-jammy | +-a always,exit -F arch=b64 -S semtimedop -k Inter-Process_Communication 2025-09-09 21:03:17.015328 | ubuntu-jammy | + 2025-09-09 21:03:17.015487 | ubuntu-jammy | +## shmctl 2025-09-09 21:03:17.015617 | ubuntu-jammy | +#-a always,exit -S ipc -F a0=24 -k Inter-Process_Communication 2025-09-09 21:03:17.015733 | ubuntu-jammy | +## shmget 2025-09-09 21:03:17.015850 | ubuntu-jammy | +#-a always,exit -S ipc -F a0=23 -k Inter-Process_Communication 2025-09-09 21:03:17.015968 | ubuntu-jammy | +## Use these lines on x86_64, ia64 instead 2025-09-09 21:03:17.016102 | ubuntu-jammy | +-a always,exit -F arch=b64 -S shmctl -k Inter-Process_Communication 2025-09-09 21:03:17.016221 | ubuntu-jammy | +-a always,exit -F arch=b64 -S shmget -k Inter-Process_Communication 2025-09-09 21:03:17.016336 | ubuntu-jammy | + 2025-09-09 21:03:17.016473 | ubuntu-jammy | +# High Volume Events ---------------------------------------------------------- 2025-09-09 21:03:17.016589 | ubuntu-jammy | + 2025-09-09 21:03:17.016710 | ubuntu-jammy | +## Disable these rules if they create too many events in your environment 2025-09-09 21:03:17.016822 | ubuntu-jammy | + 2025-09-09 21:03:17.016938 | ubuntu-jammy | +## Common Shells 2025-09-09 21:03:17.017058 | ubuntu-jammy | +-w /bin/bash -p x -k susp_shell 2025-09-09 21:03:17.017177 | ubuntu-jammy | +-w /bin/dash -p x -k susp_shell 2025-09-09 21:03:17.017298 | ubuntu-jammy | +-w /bin/busybox -p x -k susp_shell 2025-09-09 21:03:17.017432 | ubuntu-jammy | +-w /bin/zsh -p x -k susp_shell 2025-09-09 21:03:17.017555 | ubuntu-jammy | +-w /bin/sh -p x -k susp_shell 2025-09-09 21:03:17.017672 | ubuntu-jammy | +-w /bin/ksh -p x -k susp_shell 2025-09-09 21:03:17.017788 | ubuntu-jammy | + 2025-09-09 21:03:17.017904 | ubuntu-jammy | +## Root command executions 2025-09-09 21:03:17.018032 | ubuntu-jammy | +-a always,exit -F arch=b64 -F euid=0 -F auid>=1000 -F auid!=-1 -S execve -k rootcmd 2025-09-09 21:03:17.018150 | ubuntu-jammy | + 2025-09-09 21:03:17.018268 | ubuntu-jammy | +## File Deletion Events by User 2025-09-09 21:03:17.018424 | ubuntu-jammy | +-a always,exit -F arch=b64 -S rmdir -S unlink -S unlinkat -S rename -S renameat -F auid>=1000 -F auid!=-1 -k delete 2025-09-09 21:03:17.018553 | ubuntu-jammy | + 2025-09-09 21:03:17.018669 | ubuntu-jammy | +## File Access 2025-09-09 21:03:17.018787 | ubuntu-jammy | +### Unauthorized Access (unsuccessful) 2025-09-09 21:03:17.018917 | ubuntu-jammy | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k file_access 2025-09-09 21:03:17.019046 | ubuntu-jammy | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k file_access 2025-09-09 21:03:17.019160 | ubuntu-jammy | + 2025-09-09 21:03:17.019296 | ubuntu-jammy | +### Unsuccessful Creation 2025-09-09 21:03:17.019437 | ubuntu-jammy | +-a always,exit -F arch=b64 -S mkdir,creat,link,symlink,mknod,mknodat,linkat,symlinkat -F exit=-EACCES -k file_creation 2025-09-09 21:03:17.019564 | ubuntu-jammy | +-a always,exit -F arch=b64 -S mkdir,link,symlink,mkdirat -F exit=-EPERM -k file_creation 2025-09-09 21:03:17.019677 | ubuntu-jammy | + 2025-09-09 21:03:17.019791 | ubuntu-jammy | +### Unsuccessful Modification 2025-09-09 21:03:17.019916 | ubuntu-jammy | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EACCES -k file_modification 2025-09-09 21:03:17.020046 | ubuntu-jammy | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EPERM -k file_modification 2025-09-09 21:03:17.020160 | ubuntu-jammy | + 2025-09-09 21:03:17.020276 | ubuntu-jammy | +## 32bit API Exploitation 2025-09-09 21:03:17.020421 | ubuntu-jammy | +### If you are on a 64 bit platform, everything _should_ be running 2025-09-09 21:03:17.020551 | ubuntu-jammy | +### in 64 bit mode. This rule will detect any use of the 32 bit syscalls 2025-09-09 21:03:17.020669 | ubuntu-jammy | +### because this might be a sign of someone exploiting a hole in the 32 2025-09-09 21:03:17.020786 | ubuntu-jammy | +### bit API. 2025-09-09 21:03:17.020906 | ubuntu-jammy | +-a always,exit -F arch=b32 -S all -k 32bit_api 2025-09-09 21:03:17.021019 | ubuntu-jammy | + 2025-09-09 21:03:17.021138 | ubuntu-jammy | +# Make The Configuration Immutable -------------------------------------------- 2025-09-09 21:03:17.021251 | ubuntu-jammy | + 2025-09-09 21:03:17.021365 | ubuntu-jammy | +##-e 2 2025-09-09 21:03:17.021490 | ubuntu-jammy | 2025-09-09 21:03:17.021755 | ubuntu-jammy | changed: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": true, "checksum": "9f99ce5c4f891fbf3e2bce06ed4cb97fb9e01f41", "dest": "/etc/audit/rules.d/20-neo23x0.rules", "gid": 0, "group": "root", "item": "20-neo23x0.rules", "md5sum": "6ac57206fd77de34805c3f4d50ef8b1d", "mode": "0644", "owner": "root", "size": 27367, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1757451796.153725-1868-218446031475505/.source.rules", "state": "file", "uid": 0} 2025-09-09 21:03:17.021878 | ubuntu-jammy | 2025-09-09 21:03:17.022001 | ubuntu-jammy | TASK [auditd : Manage auditd service] ****************************************** 2025-09-09 21:03:17.272196 | ubuntu-noble | --- before 2025-09-09 21:03:17.272525 | ubuntu-noble | +++ after: /home/zuul/.ansible/tmp/ansible-local-1878jxy9w9h2/tmp2gwwwqbr/auditd.conf.j2 2025-09-09 21:03:17.272743 | ubuntu-noble | @@ -0,0 +1,37 @@ 2025-09-09 21:03:17.273030 | ubuntu-noble | +# 2025-09-09 21:03:17.273319 | ubuntu-noble | +# This file controls the configuration of the audit daemon 2025-09-09 21:03:17.273516 | ubuntu-noble | +# 2025-09-09 21:03:17.273723 | ubuntu-noble | + 2025-09-09 21:03:17.274102 | ubuntu-noble | +local_events = yes 2025-09-09 21:03:17.274359 | ubuntu-noble | +write_logs = yes 2025-09-09 21:03:17.274581 | ubuntu-noble | +log_file = /var/log/audit/audit.log 2025-09-09 21:03:17.274845 | ubuntu-noble | +log_group = adm 2025-09-09 21:03:17.275059 | ubuntu-noble | +log_format = RAW 2025-09-09 21:03:17.275311 | ubuntu-noble | +flush = INCREMENTAL_ASYNC 2025-09-09 21:03:17.275866 | ubuntu-noble | +freq = 50 2025-09-09 21:03:17.275886 | ubuntu-noble | +max_log_file = 8 2025-09-09 21:03:17.275958 | ubuntu-noble | +num_logs = 5 2025-09-09 21:03:17.276159 | ubuntu-noble | +priority_boost = 4 2025-09-09 21:03:17.276355 | ubuntu-noble | +disp_qos = lossy 2025-09-09 21:03:17.276551 | ubuntu-noble | +dispatcher = /sbin/audispd 2025-09-09 21:03:17.276746 | ubuntu-noble | +name_format = NONE 2025-09-09 21:03:17.276978 | ubuntu-noble | +##name = mydomain 2025-09-09 21:03:17.277175 | ubuntu-noble | +max_log_file_action = ROTATE 2025-09-09 21:03:17.277365 | ubuntu-noble | +space_left = 12361 2025-09-09 21:03:17.277553 | ubuntu-noble | +space_left_action = email 2025-09-09 21:03:17.277742 | ubuntu-noble | +verify_email = yes 2025-09-09 21:03:17.277974 | ubuntu-noble | +action_mail_acct = root 2025-09-09 21:03:17.278176 | ubuntu-noble | +admin_space_left = 50 2025-09-09 21:03:17.278373 | ubuntu-noble | +admin_space_left_action = SUSPEND 2025-09-09 21:03:17.280805 | ubuntu-noble | +disk_full_action = SUSPEND 2025-09-09 21:03:17.280825 | ubuntu-noble | +disk_error_action = SUSPEND 2025-09-09 21:03:17.280830 | ubuntu-noble | +use_libwrap = yes 2025-09-09 21:03:17.280835 | ubuntu-noble | +##tcp_listen_port = 60 2025-09-09 21:03:17.280840 | ubuntu-noble | +tcp_listen_queue = 5 2025-09-09 21:03:17.280845 | ubuntu-noble | +tcp_max_per_addr = 1 2025-09-09 21:03:17.280850 | ubuntu-noble | +##tcp_client_ports = 1024-65535 2025-09-09 21:03:17.280855 | ubuntu-noble | +tcp_client_max_idle = 0 2025-09-09 21:03:17.280860 | ubuntu-noble | +enable_krb5 = no 2025-09-09 21:03:17.280865 | ubuntu-noble | +krb5_principal = auditd 2025-09-09 21:03:17.280869 | ubuntu-noble | +##krb5_key_file = /etc/audit/audit.key 2025-09-09 21:03:17.280874 | ubuntu-noble | +distribute_network = no 2025-09-09 21:03:17.280880 | ubuntu-noble | 2025-09-09 21:03:17.280907 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "checksum": "e902cc6bebf86c17087d153e359a2cc1231672e0", "dest": "/etc/audit/audit.conf", "gid": 0, "group": "root", "md5sum": "69dfd768317bae876a6a78c8aeb5cce1", "mode": "0640", "owner": "root", "size": 806, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1757451796.0068278-2277-276848344847302/.source.conf", "state": "file", "uid": 0} 2025-09-09 21:03:17.281027 | ubuntu-noble | 2025-09-09 21:03:17.281209 | ubuntu-noble | TASK [auditd : Adjust auditd/audispd configurations] *************************** 2025-09-09 21:03:17.250725 | debian-bookworm | --- before 2025-09-09 21:03:17.250930 | debian-bookworm | +++ after: /home/zuul/.ansible/tmp/ansible-local-2302fi5_syez/tmpv2xrn0lf/20-neo23x0.rules.j2 2025-09-09 21:03:17.251004 | debian-bookworm | @@ -0,0 +1,750 @@ 2025-09-09 21:03:17.251111 | debian-bookworm | +# ___ ___ __ __ 2025-09-09 21:03:17.251216 | debian-bookworm | +# / | __ ______/ (_) /_____/ / 2025-09-09 21:03:17.251317 | debian-bookworm | +# / /| |/ / / / __ / / __/ __ / 2025-09-09 21:03:17.251434 | debian-bookworm | +# / ___ / /_/ / /_/ / / /_/ /_/ / 2025-09-09 21:03:17.251534 | debian-bookworm | +# /_/ |_\__,_/\__,_/_/\__/\__,_/ 2025-09-09 21:03:17.251636 | debian-bookworm | +# 2025-09-09 21:03:17.251740 | debian-bookworm | +# Linux Audit Daemon - Best Practice Configuration 2025-09-09 21:03:17.251842 | debian-bookworm | +# /etc/audit/audit.rules 2025-09-09 21:03:17.251941 | debian-bookworm | +# 2025-09-09 21:03:17.252068 | debian-bookworm | +# Compiled by Florian Roth 2025-09-09 21:03:17.252163 | debian-bookworm | +# 2025-09-09 21:03:17.258853 | debian-bookworm | +# Created : 2017/12/05 2025-09-09 21:03:17.258888 | debian-bookworm | +# Modified : 2023/01/25 2025-09-09 21:03:17.258894 | debian-bookworm | +# 2025-09-09 21:03:17.258899 | debian-bookworm | +# Based on rules published here: 2025-09-09 21:03:17.258904 | debian-bookworm | +# Gov.uk auditd rules 2025-09-09 21:03:17.258909 | debian-bookworm | +# https://github.com/gds-operations/puppet-auditd/pull/1 2025-09-09 21:03:17.258914 | debian-bookworm | +# CentOS 7 hardening 2025-09-09 21:03:17.258919 | debian-bookworm | +# https://highon.coffee/blog/security-harden-centos-7/#auditd---audit-daemon 2025-09-09 21:03:17.258924 | debian-bookworm | +# Linux audit repo 2025-09-09 21:03:17.258929 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/tree/master/rules 2025-09-09 21:03:17.258934 | debian-bookworm | +# Auditd high performance linux auditing 2025-09-09 21:03:17.258940 | debian-bookworm | +# https://linux-audit.com/tuning-auditd-high-performance-linux-auditing/ 2025-09-09 21:03:17.258945 | debian-bookworm | +# 2025-09-09 21:03:17.258949 | debian-bookworm | +# Further rules 2025-09-09 21:03:17.258968 | debian-bookworm | +# For PCI DSS compliance see: 2025-09-09 21:03:17.258973 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-pci-dss-v31.rules 2025-09-09 21:03:17.258978 | debian-bookworm | +# For NISPOM compliance see: 2025-09-09 21:03:17.258983 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-nispom.rules 2025-09-09 21:03:17.258987 | debian-bookworm | + 2025-09-09 21:03:17.258992 | debian-bookworm | +# Remove any existing rules 2025-09-09 21:03:17.258997 | debian-bookworm | +-D 2025-09-09 21:03:17.259001 | debian-bookworm | + 2025-09-09 21:03:17.259006 | debian-bookworm | +# Buffer Size 2025-09-09 21:03:17.259011 | debian-bookworm | +## Feel free to increase this if the machine panic's 2025-09-09 21:03:17.259015 | debian-bookworm | +-b 8192 2025-09-09 21:03:17.259019 | debian-bookworm | + 2025-09-09 21:03:17.259023 | debian-bookworm | +# Failure Mode 2025-09-09 21:03:17.259028 | debian-bookworm | +## Possible values: 0 (silent), 1 (printk, print a failure message), 2 (panic, halt the system) 2025-09-09 21:03:17.259032 | debian-bookworm | +-f 1 2025-09-09 21:03:17.259036 | debian-bookworm | + 2025-09-09 21:03:17.259040 | debian-bookworm | +# Ignore errors 2025-09-09 21:03:17.259045 | debian-bookworm | +## e.g. caused by users or files not found in the local environment 2025-09-09 21:03:17.259049 | debian-bookworm | +-i 2025-09-09 21:03:17.259053 | debian-bookworm | + 2025-09-09 21:03:17.259057 | debian-bookworm | +# Self Auditing --------------------------------------------------------------- 2025-09-09 21:03:17.259061 | debian-bookworm | + 2025-09-09 21:03:17.259066 | debian-bookworm | +## Audit the audit logs 2025-09-09 21:03:17.259070 | debian-bookworm | +### Successful and unsuccessful attempts to read information from the audit records 2025-09-09 21:03:17.259074 | debian-bookworm | +-w /var/log/audit/ -p wra -k auditlog 2025-09-09 21:03:17.259079 | debian-bookworm | +-w /var/audit/ -p wra -k auditlog 2025-09-09 21:03:17.259083 | debian-bookworm | + 2025-09-09 21:03:17.259087 | debian-bookworm | +## Auditd configuration 2025-09-09 21:03:17.259091 | debian-bookworm | +### Modifications to audit configuration that occur while the audit collection functions are operating 2025-09-09 21:03:17.259095 | debian-bookworm | +-w /etc/audit/ -p wa -k auditconfig 2025-09-09 21:03:17.259100 | debian-bookworm | +-w /etc/libaudit.conf -p wa -k auditconfig 2025-09-09 21:03:17.259104 | debian-bookworm | +-w /etc/audisp/ -p wa -k audispconfig 2025-09-09 21:03:17.259108 | debian-bookworm | + 2025-09-09 21:03:17.259112 | debian-bookworm | +## Monitor for use of audit management tools 2025-09-09 21:03:17.259116 | debian-bookworm | +-w /sbin/auditctl -p x -k audittools 2025-09-09 21:03:17.259120 | debian-bookworm | +-w /sbin/auditd -p x -k audittools 2025-09-09 21:03:17.259124 | debian-bookworm | +-w /usr/sbin/auditd -p x -k audittools 2025-09-09 21:03:17.259129 | debian-bookworm | +-w /usr/sbin/augenrules -p x -k audittools 2025-09-09 21:03:17.259133 | debian-bookworm | + 2025-09-09 21:03:17.259137 | debian-bookworm | +## Access to all audit trails 2025-09-09 21:03:17.259141 | debian-bookworm | + 2025-09-09 21:03:17.259145 | debian-bookworm | +-a always,exit -F path=/usr/sbin/ausearch -F perm=x -k audittools 2025-09-09 21:03:17.259150 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aureport -F perm=x -k audittools 2025-09-09 21:03:17.259154 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aulast -F perm=x -k audittools 2025-09-09 21:03:17.259158 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aulastlogin -F perm=x -k audittools 2025-09-09 21:03:17.259162 | debian-bookworm | +-a always,exit -F path=/usr/sbin/auvirt -F perm=x -k audittools 2025-09-09 21:03:17.259166 | debian-bookworm | + 2025-09-09 21:03:17.259176 | debian-bookworm | +# Filters --------------------------------------------------------------------- 2025-09-09 21:03:17.259180 | debian-bookworm | + 2025-09-09 21:03:17.259185 | debian-bookworm | +### We put these early because audit is a first match wins system. 2025-09-09 21:03:17.259189 | debian-bookworm | + 2025-09-09 21:03:17.259267 | debian-bookworm | +## Ignore SELinux AVC records 2025-09-09 21:03:17.259387 | debian-bookworm | +-a always,exclude -F msgtype=AVC 2025-09-09 21:03:17.259514 | debian-bookworm | + 2025-09-09 21:03:17.259624 | debian-bookworm | +## Ignore current working directory records 2025-09-09 21:03:17.259730 | debian-bookworm | +-a always,exclude -F msgtype=CWD 2025-09-09 21:03:17.259828 | debian-bookworm | + 2025-09-09 21:03:17.259938 | debian-bookworm | +## Cron jobs fill the logs with stuff we normally don't want (works with SELinux) 2025-09-09 21:03:17.260048 | debian-bookworm | +-a never,user -F subj_type=crond_t 2025-09-09 21:03:17.260141 | debian-bookworm | +-a never,exit -F subj_type=crond_t 2025-09-09 21:03:17.260239 | debian-bookworm | + 2025-09-09 21:03:17.260397 | debian-bookworm | +## This prevents chrony from overwhelming the logs 2025-09-09 21:03:17.260464 | debian-bookworm | +-a never,exit -F arch=b64 -S adjtimex -F auid=-1 -F uid=chrony -F subj_type=chronyd_t 2025-09-09 21:03:17.260563 | debian-bookworm | + 2025-09-09 21:03:17.260669 | debian-bookworm | +## This is not very interesting and wastes a lot of space if the server is public facing 2025-09-09 21:03:17.260774 | debian-bookworm | +-a always,exclude -F msgtype=CRYPTO_KEY_USER 2025-09-09 21:03:17.260872 | debian-bookworm | + 2025-09-09 21:03:17.260971 | debian-bookworm | +## Open VM Tools 2025-09-09 21:03:17.261075 | debian-bookworm | +-a exit,never -F arch=b64 -S all -F exe=/usr/bin/vmtoolsd 2025-09-09 21:03:17.261176 | debian-bookworm | + 2025-09-09 21:03:17.261277 | debian-bookworm | +## High Volume Event Filter (especially on Linux Workstations) 2025-09-09 21:03:17.261416 | debian-bookworm | +-a never,exit -F arch=b64 -F dir=/dev/shm -k sharedmemaccess 2025-09-09 21:03:17.261523 | debian-bookworm | +-a never,exit -F arch=b64 -F dir=/var/lock/lvm -k locklvm 2025-09-09 21:03:17.261624 | debian-bookworm | + 2025-09-09 21:03:17.261727 | debian-bookworm | +## FileBeat 2025-09-09 21:03:17.261828 | debian-bookworm | +-a never,exit -F arch=b64 -F path=/opt/filebeat -k filebeat 2025-09-09 21:03:17.261924 | debian-bookworm | + 2025-09-09 21:03:17.262027 | debian-bookworm | +## More information on how to filter events 2025-09-09 21:03:17.262127 | debian-bookworm | +### https://access.redhat.com/solutions/2482221 2025-09-09 21:03:17.262228 | debian-bookworm | + 2025-09-09 21:03:17.262327 | debian-bookworm | +# Rules ----------------------------------------------------------------------- 2025-09-09 21:03:17.262456 | debian-bookworm | + 2025-09-09 21:03:17.262560 | debian-bookworm | +## Kernel parameters 2025-09-09 21:03:17.262662 | debian-bookworm | +-w /etc/sysctl.conf -p wa -k sysctl 2025-09-09 21:03:17.262795 | debian-bookworm | +-w /etc/sysctl.d -p wa -k sysctl 2025-09-09 21:03:17.262903 | debian-bookworm | + 2025-09-09 21:03:17.263005 | debian-bookworm | +## Kernel module loading and unloading 2025-09-09 21:03:17.263109 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/insmod -k modules 2025-09-09 21:03:17.263216 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/modprobe -k modules 2025-09-09 21:03:17.263314 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/rmmod -k modules 2025-09-09 21:03:17.263435 | debian-bookworm | +-a always,exit -F arch=b64 -S finit_module -S init_module -S delete_module -F auid!=-1 -k modules 2025-09-09 21:03:17.263530 | debian-bookworm | + 2025-09-09 21:03:17.263632 | debian-bookworm | +## Modprobe configuration 2025-09-09 21:03:17.263734 | debian-bookworm | +-w /etc/modprobe.conf -p wa -k modprobe 2025-09-09 21:03:17.263832 | debian-bookworm | +-w /etc/modprobe.d -p wa -k modprobe 2025-09-09 21:03:17.263928 | debian-bookworm | + 2025-09-09 21:03:17.264028 | debian-bookworm | +## KExec usage (all actions) 2025-09-09 21:03:17.264130 | debian-bookworm | +-a always,exit -F arch=b64 -S kexec_load -k KEXEC 2025-09-09 21:03:17.264263 | debian-bookworm | + 2025-09-09 21:03:17.264324 | debian-bookworm | +## Special files 2025-09-09 21:03:17.264443 | debian-bookworm | +-a always,exit -F arch=b64 -S mknod -S mknodat -k specialfiles 2025-09-09 21:03:17.264542 | debian-bookworm | + 2025-09-09 21:03:17.264650 | debian-bookworm | +## Mount operations (only attributable) 2025-09-09 21:03:17.264745 | debian-bookworm | +-a always,exit -F arch=b64 -S mount -S umount2 -F auid!=-1 -k mount 2025-09-09 21:03:17.264848 | debian-bookworm | + 2025-09-09 21:03:17.264948 | debian-bookworm | +### NFS mount 2025-09-09 21:03:17.265059 | debian-bookworm | +-a always,exit -F path=/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-09 21:03:17.265172 | debian-bookworm | +-a always,exit -F path=/usr/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-09 21:03:17.265268 | debian-bookworm | + 2025-09-09 21:03:17.265394 | debian-bookworm | +## Change swap (only attributable) 2025-09-09 21:03:17.265501 | debian-bookworm | +-a always,exit -F arch=b64 -S swapon -S swapoff -F auid!=-1 -k swap 2025-09-09 21:03:17.265601 | debian-bookworm | + 2025-09-09 21:03:17.265705 | debian-bookworm | +## Time 2025-09-09 21:03:17.265812 | debian-bookworm | +-a always,exit -F arch=b64 -F uid!=ntp -S adjtimex -S settimeofday -S clock_settime -k time 2025-09-09 21:03:17.265914 | debian-bookworm | +### Local time zone 2025-09-09 21:03:17.266015 | debian-bookworm | +-w /etc/localtime -p wa -k localtime 2025-09-09 21:03:17.266113 | debian-bookworm | + 2025-09-09 21:03:17.266213 | debian-bookworm | +## Stunnel 2025-09-09 21:03:17.266315 | debian-bookworm | +-w /usr/sbin/stunnel -p x -k stunnel 2025-09-09 21:03:17.266445 | debian-bookworm | +-w /usr/bin/stunnel -p x -k stunnel 2025-09-09 21:03:17.266546 | debian-bookworm | + 2025-09-09 21:03:17.266648 | debian-bookworm | +## Cron configuration & scheduled jobs 2025-09-09 21:03:17.266749 | debian-bookworm | +-w /etc/cron.allow -p wa -k cron 2025-09-09 21:03:17.266885 | debian-bookworm | +-w /etc/cron.deny -p wa -k cron 2025-09-09 21:03:17.266987 | debian-bookworm | +-w /etc/cron.d/ -p wa -k cron 2025-09-09 21:03:17.267092 | debian-bookworm | +-w /etc/cron.daily/ -p wa -k cron 2025-09-09 21:03:17.267194 | debian-bookworm | +-w /etc/cron.hourly/ -p wa -k cron 2025-09-09 21:03:17.267291 | debian-bookworm | +-w /etc/cron.monthly/ -p wa -k cron 2025-09-09 21:03:17.267408 | debian-bookworm | +-w /etc/cron.weekly/ -p wa -k cron 2025-09-09 21:03:17.267524 | debian-bookworm | +-w /etc/crontab -p wa -k cron 2025-09-09 21:03:17.267609 | debian-bookworm | +-w /var/spool/cron/ -p wa -k cron 2025-09-09 21:03:17.267708 | debian-bookworm | + 2025-09-09 21:03:17.267809 | debian-bookworm | +## User, group, password databases 2025-09-09 21:03:17.267912 | debian-bookworm | +-w /etc/group -p wa -k etcgroup 2025-09-09 21:03:17.268007 | debian-bookworm | +-w /etc/passwd -p wa -k etcpasswd 2025-09-09 21:03:17.268111 | debian-bookworm | +-w /etc/gshadow -k etcgroup 2025-09-09 21:03:17.268213 | debian-bookworm | +-w /etc/shadow -k etcpasswd 2025-09-09 21:03:17.268316 | debian-bookworm | +-w /etc/security/opasswd -k opasswd 2025-09-09 21:03:17.268441 | debian-bookworm | + 2025-09-09 21:03:17.268541 | debian-bookworm | +## Sudoers file changes 2025-09-09 21:03:17.268645 | debian-bookworm | +-w /etc/sudoers -p wa -k actions 2025-09-09 21:03:17.268748 | debian-bookworm | +-w /etc/sudoers.d/ -p wa -k actions 2025-09-09 21:03:17.268843 | debian-bookworm | + 2025-09-09 21:03:17.268944 | debian-bookworm | +## Passwd 2025-09-09 21:03:17.269046 | debian-bookworm | +-w /usr/bin/passwd -p x -k passwd_modification 2025-09-09 21:03:17.269143 | debian-bookworm | + 2025-09-09 21:03:17.269243 | debian-bookworm | +## Tools to change group identifiers 2025-09-09 21:03:17.269367 | debian-bookworm | +-w /usr/sbin/groupadd -p x -k group_modification 2025-09-09 21:03:17.269460 | debian-bookworm | +-w /usr/sbin/groupmod -p x -k group_modification 2025-09-09 21:03:17.269563 | debian-bookworm | +-w /usr/sbin/addgroup -p x -k group_modification 2025-09-09 21:03:17.269672 | debian-bookworm | +-w /usr/sbin/useradd -p x -k user_modification 2025-09-09 21:03:17.269763 | debian-bookworm | +-w /usr/sbin/userdel -p x -k user_modification 2025-09-09 21:03:17.269863 | debian-bookworm | +-w /usr/sbin/usermod -p x -k user_modification 2025-09-09 21:03:17.269990 | debian-bookworm | +-w /usr/sbin/adduser -p x -k user_modification 2025-09-09 21:03:17.270088 | debian-bookworm | + 2025-09-09 21:03:17.270188 | debian-bookworm | +## Login configuration and information 2025-09-09 21:03:17.270483 | debian-bookworm | +-w /etc/login.defs -p wa -k login 2025-09-09 21:03:17.270599 | debian-bookworm | +-w /etc/securetty -p wa -k login 2025-09-09 21:03:17.270701 | debian-bookworm | +-w /var/log/faillog -p wa -k login 2025-09-09 21:03:17.270840 | debian-bookworm | +-w /var/log/lastlog -p wa -k login 2025-09-09 21:03:17.270945 | debian-bookworm | +-w /var/log/tallylog -p wa -k login 2025-09-09 21:03:17.271042 | debian-bookworm | + 2025-09-09 21:03:17.271144 | debian-bookworm | +## Network Environment 2025-09-09 21:03:17.271245 | debian-bookworm | +### Changes to hostname 2025-09-09 21:03:17.271394 | debian-bookworm | +-a always,exit -F arch=b64 -S sethostname -S setdomainname -k network_modifications 2025-09-09 21:03:17.271464 | debian-bookworm | + 2025-09-09 21:03:17.271565 | debian-bookworm | +### Detect Remote Shell Use 2025-09-09 21:03:17.271672 | debian-bookworm | +-a always,exit -F arch=b64 -F exe=/bin/bash -F success=1 -S connect -k "remote_shell" 2025-09-09 21:03:17.271779 | debian-bookworm | +-a always,exit -F arch=b64 -F exe=/usr/bin/bash -F success=1 -S connect -k "remote_shell" 2025-09-09 21:03:17.271889 | debian-bookworm | + 2025-09-09 21:03:17.271980 | debian-bookworm | +### Successful IPv4 Connections 2025-09-09 21:03:17.272083 | debian-bookworm | +-a always,exit -F arch=b64 -S connect -F a2=16 -F success=1 -F key=network_connect_4 2025-09-09 21:03:17.272182 | debian-bookworm | + 2025-09-09 21:03:17.272282 | debian-bookworm | +### Successful IPv6 Connections 2025-09-09 21:03:17.272418 | debian-bookworm | +-a always,exit -F arch=b64 -S connect -F a2=28 -F success=1 -F key=network_connect_6 2025-09-09 21:03:17.272519 | debian-bookworm | + 2025-09-09 21:03:17.272618 | debian-bookworm | +### Changes to other files 2025-09-09 21:03:17.272719 | debian-bookworm | +-w /etc/hosts -p wa -k network_modifications 2025-09-09 21:03:17.272824 | debian-bookworm | +-w /etc/sysconfig/network -p wa -k network_modifications 2025-09-09 21:03:17.272924 | debian-bookworm | +-w /etc/sysconfig/network-scripts -p w -k network_modifications 2025-09-09 21:03:17.273024 | debian-bookworm | +-w /etc/network/ -p wa -k network 2025-09-09 21:03:17.273128 | debian-bookworm | +-a always,exit -F dir=/etc/NetworkManager/ -F perm=wa -k network_modifications 2025-09-09 21:03:17.273226 | debian-bookworm | + 2025-09-09 21:03:17.273327 | debian-bookworm | +### Changes to issue 2025-09-09 21:03:17.273439 | debian-bookworm | +-w /etc/issue -p wa -k etcissue 2025-09-09 21:03:17.273541 | debian-bookworm | +-w /etc/issue.net -p wa -k etcissue 2025-09-09 21:03:17.273638 | debian-bookworm | + 2025-09-09 21:03:17.273742 | debian-bookworm | +## System startup scripts 2025-09-09 21:03:17.273854 | debian-bookworm | +-w /etc/inittab -p wa -k init 2025-09-09 21:03:17.273949 | debian-bookworm | +-w /etc/init.d/ -p wa -k init 2025-09-09 21:03:17.274049 | debian-bookworm | +-w /etc/init/ -p wa -k init 2025-09-09 21:03:17.274147 | debian-bookworm | + 2025-09-09 21:03:17.274247 | debian-bookworm | +## Library search paths 2025-09-09 21:03:17.274367 | debian-bookworm | +-w /etc/ld.so.conf -p wa -k libpath 2025-09-09 21:03:17.274458 | debian-bookworm | +-w /etc/ld.so.conf.d -p wa -k libpath 2025-09-09 21:03:17.274556 | debian-bookworm | + 2025-09-09 21:03:17.274658 | debian-bookworm | +## Systemwide library preloads (LD_PRELOAD) 2025-09-09 21:03:17.274794 | debian-bookworm | +-w /etc/ld.so.preload -p wa -k systemwide_preloads 2025-09-09 21:03:17.274881 | debian-bookworm | + 2025-09-09 21:03:17.274981 | debian-bookworm | +## Pam configuration 2025-09-09 21:03:17.275081 | debian-bookworm | +-w /etc/pam.d/ -p wa -k pam 2025-09-09 21:03:17.275205 | debian-bookworm | +-w /etc/security/limits.conf -p wa -k pam 2025-09-09 21:03:17.275289 | debian-bookworm | +-w /etc/security/limits.d -p wa -k pam 2025-09-09 21:03:17.275402 | debian-bookworm | +-w /etc/security/pam_env.conf -p wa -k pam 2025-09-09 21:03:17.275506 | debian-bookworm | +-w /etc/security/namespace.conf -p wa -k pam 2025-09-09 21:03:17.275607 | debian-bookworm | +-w /etc/security/namespace.d -p wa -k pam 2025-09-09 21:03:17.275706 | debian-bookworm | +-w /etc/security/namespace.init -p wa -k pam 2025-09-09 21:03:17.275806 | debian-bookworm | + 2025-09-09 21:03:17.275909 | debian-bookworm | +## Mail configuration 2025-09-09 21:03:17.276007 | debian-bookworm | +-w /etc/aliases -p wa -k mail 2025-09-09 21:03:17.276111 | debian-bookworm | +-w /etc/postfix/ -p wa -k mail 2025-09-09 21:03:17.276209 | debian-bookworm | +-w /etc/exim4/ -p wa -k mail 2025-09-09 21:03:17.276305 | debian-bookworm | + 2025-09-09 21:03:17.276432 | debian-bookworm | +## SSH configuration 2025-09-09 21:03:17.276544 | debian-bookworm | +-w /etc/ssh/sshd_config -k sshd 2025-09-09 21:03:17.276647 | debian-bookworm | +-w /etc/ssh/sshd_config.d -k sshd 2025-09-09 21:03:17.276745 | debian-bookworm | + 2025-09-09 21:03:17.276845 | debian-bookworm | +## root ssh key tampering 2025-09-09 21:03:17.276948 | debian-bookworm | +-w /root/.ssh -p wa -k rootkey 2025-09-09 21:03:17.277050 | debian-bookworm | + 2025-09-09 21:03:17.277149 | debian-bookworm | +# Systemd 2025-09-09 21:03:17.277250 | debian-bookworm | +-w /bin/systemctl -p x -k systemd 2025-09-09 21:03:17.277407 | debian-bookworm | +-w /etc/systemd/ -p wa -k systemd 2025-09-09 21:03:17.277460 | debian-bookworm | +-w /usr/lib/systemd -p wa -k systemd 2025-09-09 21:03:17.277556 | debian-bookworm | + 2025-09-09 21:03:17.277660 | debian-bookworm | +## https://systemd.network/systemd.generator.html 2025-09-09 21:03:17.277760 | debian-bookworm | +-w /etc/systemd/system-generators/ -p wa -k systemd_generator 2025-09-09 21:03:17.277863 | debian-bookworm | +-w /usr/local/lib/systemd/system-generators/ -p wa -k systemd_generator 2025-09-09 21:03:17.277966 | debian-bookworm | +-w /usr/lib/systemd/system-generators -p wa -k systemd_generator 2025-09-09 21:03:17.278065 | debian-bookworm | + 2025-09-09 21:03:17.278166 | debian-bookworm | +-w /etc/systemd/user-generators/ -p wa -k systemd_generator 2025-09-09 21:03:17.278268 | debian-bookworm | +-w /usr/local/lib/systemd/user-generators/ -p wa -k systemd_generator 2025-09-09 21:03:17.278390 | debian-bookworm | +-w /lib/systemd/system-generators/ -p wa -k systemd_generator 2025-09-09 21:03:17.278498 | debian-bookworm | + 2025-09-09 21:03:17.278593 | debian-bookworm | +## SELinux events that modify the system's Mandatory Access Controls (MAC) 2025-09-09 21:03:17.278696 | debian-bookworm | +-w /etc/selinux/ -p wa -k mac_policy 2025-09-09 21:03:17.278828 | debian-bookworm | + 2025-09-09 21:03:17.278937 | debian-bookworm | +## Critical elements access failures 2025-09-09 21:03:17.279045 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/etc -F success=0 -k unauthedfileaccess 2025-09-09 21:03:17.279154 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/bin -F success=0 -k unauthedfileaccess 2025-09-09 21:03:17.279257 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/sbin -F success=0 -k unauthedfileaccess 2025-09-09 21:03:17.279400 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/usr/bin -F success=0 -k unauthedfileaccess 2025-09-09 21:03:17.279479 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/usr/sbin -F success=0 -k unauthedfileaccess 2025-09-09 21:03:17.279595 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/var -F success=0 -k unauthedfileaccess 2025-09-09 21:03:17.279693 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/home -F success=0 -k unauthedfileaccess 2025-09-09 21:03:17.279798 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/srv -F success=0 -k unauthedfileaccess 2025-09-09 21:03:17.279895 | debian-bookworm | + 2025-09-09 21:03:17.279995 | debian-bookworm | +## Process ID change (switching accounts) applications 2025-09-09 21:03:17.280096 | debian-bookworm | +-w /bin/su -p x -k priv_esc 2025-09-09 21:03:17.280196 | debian-bookworm | +-w /usr/bin/sudo -p x -k priv_esc 2025-09-09 21:03:17.280295 | debian-bookworm | + 2025-09-09 21:03:17.280419 | debian-bookworm | +## Power state 2025-09-09 21:03:17.280521 | debian-bookworm | +-w /sbin/shutdown -p x -k power 2025-09-09 21:03:17.280622 | debian-bookworm | +-w /sbin/poweroff -p x -k power 2025-09-09 21:03:17.280721 | debian-bookworm | +-w /sbin/reboot -p x -k power 2025-09-09 21:03:17.280822 | debian-bookworm | +-w /sbin/halt -p x -k power 2025-09-09 21:03:17.280918 | debian-bookworm | + 2025-09-09 21:03:17.281018 | debian-bookworm | +## Session initiation information 2025-09-09 21:03:17.281121 | debian-bookworm | +-w /var/run/utmp -p wa -k session 2025-09-09 21:03:17.281221 | debian-bookworm | +-w /var/log/btmp -p wa -k session 2025-09-09 21:03:17.281319 | debian-bookworm | +-w /var/log/wtmp -p wa -k session 2025-09-09 21:03:17.281427 | debian-bookworm | + 2025-09-09 21:03:17.281529 | debian-bookworm | +## Discretionary Access Control (DAC) modifications 2025-09-09 21:03:17.281643 | debian-bookworm | +-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:17.281748 | debian-bookworm | +-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:17.281832 | debian-bookworm | +-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:17.281933 | debian-bookworm | +-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:17.282034 | debian-bookworm | +-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:17.282138 | debian-bookworm | +-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:17.282243 | debian-bookworm | +-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:17.282398 | debian-bookworm | +-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:17.282464 | debian-bookworm | +-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:17.282570 | debian-bookworm | +-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:17.282673 | debian-bookworm | +-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:17.282794 | debian-bookworm | +-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:17.282900 | debian-bookworm | +-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:17.282999 | debian-bookworm | + 2025-09-09 21:03:17.283100 | debian-bookworm | +# Special Rules --------------------------------------------------------------- 2025-09-09 21:03:17.283200 | debian-bookworm | + 2025-09-09 21:03:17.283301 | debian-bookworm | +## Reconnaissance 2025-09-09 21:03:17.283426 | debian-bookworm | +-w /usr/bin/whoami -p x -k recon 2025-09-09 21:03:17.283530 | debian-bookworm | +-w /usr/bin/id -p x -k recon 2025-09-09 21:03:17.283633 | debian-bookworm | +-w /bin/hostname -p x -k recon 2025-09-09 21:03:17.283732 | debian-bookworm | +-w /bin/uname -p x -k recon 2025-09-09 21:03:17.283834 | debian-bookworm | +-w /etc/issue -p r -k recon 2025-09-09 21:03:17.283967 | debian-bookworm | +-w /etc/hostname -p r -k recon 2025-09-09 21:03:17.284033 | debian-bookworm | + 2025-09-09 21:03:17.284131 | debian-bookworm | +## Suspicious activity 2025-09-09 21:03:17.284233 | debian-bookworm | +-w /usr/bin/wget -p x -k susp_activity 2025-09-09 21:03:17.284335 | debian-bookworm | +-w /usr/bin/curl -p x -k susp_activity 2025-09-09 21:03:17.284449 | debian-bookworm | +-w /usr/bin/base64 -p x -k susp_activity 2025-09-09 21:03:17.284549 | debian-bookworm | +-w /bin/nc -p x -k susp_activity 2025-09-09 21:03:17.284651 | debian-bookworm | +-w /bin/netcat -p x -k susp_activity 2025-09-09 21:03:17.284755 | debian-bookworm | +-w /usr/bin/ncat -p x -k susp_activity 2025-09-09 21:03:17.284865 | debian-bookworm | +-w /usr/bin/ss -p x -k susp_activity 2025-09-09 21:03:17.284966 | debian-bookworm | +-w /usr/bin/netstat -p x -k susp_activity 2025-09-09 21:03:17.285065 | debian-bookworm | +-w /usr/bin/ssh -p x -k susp_activity 2025-09-09 21:03:17.285167 | debian-bookworm | +-w /usr/bin/scp -p x -k susp_activity 2025-09-09 21:03:17.285269 | debian-bookworm | +-w /usr/bin/sftp -p x -k susp_activity 2025-09-09 21:03:17.285384 | debian-bookworm | +-w /usr/bin/ftp -p x -k susp_activity 2025-09-09 21:03:17.285484 | debian-bookworm | +-w /usr/bin/socat -p x -k susp_activity 2025-09-09 21:03:17.285587 | debian-bookworm | +-w /usr/bin/wireshark -p x -k susp_activity 2025-09-09 21:03:17.285687 | debian-bookworm | +-w /usr/bin/tshark -p x -k susp_activity 2025-09-09 21:03:17.285787 | debian-bookworm | +-w /usr/bin/rawshark -p x -k susp_activity 2025-09-09 21:03:17.285888 | debian-bookworm | +-w /usr/bin/rdesktop -p x -k susp_activity 2025-09-09 21:03:17.285994 | debian-bookworm | +-w /usr/local/bin/rdesktop -p x -k susp_activity 2025-09-09 21:03:17.286107 | debian-bookworm | +-w /usr/bin/wlfreerdp -p x -k susp_activity 2025-09-09 21:03:17.286196 | debian-bookworm | +-w /usr/bin/xfreerdp -p x -k susp_activity 2025-09-09 21:03:17.286401 | debian-bookworm | +-w /usr/local/bin/xfreerdp -p x -k susp_activity 2025-09-09 21:03:17.286411 | debian-bookworm | +-w /usr/bin/nmap -p x -k susp_activity 2025-09-09 21:03:17.286502 | debian-bookworm | + 2025-09-09 21:03:17.286815 | debian-bookworm | +## sssd 2025-09-09 21:03:17.286827 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/p11_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-09 21:03:17.286839 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/krb5_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-09 21:03:17.286951 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/ldap_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-09 21:03:17.287057 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/selinux_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-09 21:03:17.287167 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/proxy_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-09 21:03:17.287265 | debian-bookworm | + 2025-09-09 21:03:17.287389 | debian-bookworm | +## T1002 Data Compressed 2025-09-09 21:03:17.287491 | debian-bookworm | + 2025-09-09 21:03:17.287590 | debian-bookworm | +-w /usr/bin/zip -p x -k Data_Compressed 2025-09-09 21:03:17.287691 | debian-bookworm | +-w /usr/bin/gzip -p x -k Data_Compressed 2025-09-09 21:03:17.287797 | debian-bookworm | +-w /usr/bin/tar -p x -k Data_Compressed 2025-09-09 21:03:17.287901 | debian-bookworm | +-w /usr/bin/bzip2 -p x -k Data_Compressed 2025-09-09 21:03:17.287995 | debian-bookworm | + 2025-09-09 21:03:17.288101 | debian-bookworm | +-w /usr/bin/lzip -p x -k Data_Compressed 2025-09-09 21:03:17.288200 | debian-bookworm | +-w /usr/local/bin/lzip -p x -k Data_Compressed 2025-09-09 21:03:17.288309 | debian-bookworm | + 2025-09-09 21:03:17.288412 | debian-bookworm | +-w /usr/bin/lz4 -p x -k Data_Compressed 2025-09-09 21:03:17.288510 | debian-bookworm | +-w /usr/local/bin/lz4 -p x -k Data_Compressed 2025-09-09 21:03:17.288608 | debian-bookworm | + 2025-09-09 21:03:17.288725 | debian-bookworm | +-w /usr/bin/lzop -p x -k Data_Compressed 2025-09-09 21:03:17.288817 | debian-bookworm | +-w /usr/local/bin/lzop -p x -k Data_Compressed 2025-09-09 21:03:17.288917 | debian-bookworm | + 2025-09-09 21:03:17.289027 | debian-bookworm | +-w /usr/bin/plzip -p x -k Data_Compressed 2025-09-09 21:03:17.289119 | debian-bookworm | +-w /usr/local/bin/plzip -p x -k Data_Compressed 2025-09-09 21:03:17.289221 | debian-bookworm | + 2025-09-09 21:03:17.289318 | debian-bookworm | +-w /usr/bin/pbzip2 -p x -k Data_Compressed 2025-09-09 21:03:17.289475 | debian-bookworm | +-w /usr/local/bin/pbzip2 -p x -k Data_Compressed 2025-09-09 21:03:17.289531 | debian-bookworm | + 2025-09-09 21:03:17.289631 | debian-bookworm | +-w /usr/bin/lbzip2 -p x -k Data_Compressed 2025-09-09 21:03:17.289730 | debian-bookworm | +-w /usr/local/bin/lbzip2 -p x -k Data_Compressed 2025-09-09 21:03:17.289827 | debian-bookworm | + 2025-09-09 21:03:17.289945 | debian-bookworm | +-w /usr/bin/pixz -p x -k Data_Compressed 2025-09-09 21:03:17.290034 | debian-bookworm | +-w /usr/local/bin/pixz -p x -k Data_Compressed 2025-09-09 21:03:17.290167 | debian-bookworm | + 2025-09-09 21:03:17.290956 | debian-bookworm | +-w /usr/bin/pigz -p x -k Data_Compressed 2025-09-09 21:03:17.290982 | debian-bookworm | +-w /usr/local/bin/pigz -p x -k Data_Compressed 2025-09-09 21:03:17.290986 | debian-bookworm | +-w /usr/bin/unpigz -p x -k Data_Compressed 2025-09-09 21:03:17.290990 | debian-bookworm | +-w /usr/local/bin/unpigz -p x -k Data_Compressed 2025-09-09 21:03:17.290994 | debian-bookworm | + 2025-09-09 21:03:17.290998 | debian-bookworm | +-w /usr/bin/zstd -p x -k Data_Compressed 2025-09-09 21:03:17.291002 | debian-bookworm | +-w /usr/local/bin/zstd -p x -k Data_Compressed 2025-09-09 21:03:17.291006 | debian-bookworm | + 2025-09-09 21:03:17.291028 | debian-bookworm | +## Added to catch netcat on Ubuntu 2025-09-09 21:03:17.291166 | debian-bookworm | +-w /bin/nc.openbsd -p x -k susp_activity 2025-09-09 21:03:17.291237 | debian-bookworm | +-w /bin/nc.traditional -p x -k susp_activity 2025-09-09 21:03:17.291375 | debian-bookworm | + 2025-09-09 21:03:17.291459 | debian-bookworm | +## Sbin suspicious activity 2025-09-09 21:03:17.291562 | debian-bookworm | +-w /sbin/iptables -p x -k sbin_susp 2025-09-09 21:03:17.291663 | debian-bookworm | +-w /sbin/ip6tables -p x -k sbin_susp 2025-09-09 21:03:17.291765 | debian-bookworm | +-w /sbin/ifconfig -p x -k sbin_susp 2025-09-09 21:03:17.291865 | debian-bookworm | +-w /usr/sbin/arptables -p x -k sbin_susp 2025-09-09 21:03:17.291968 | debian-bookworm | +-w /usr/sbin/ebtables -p x -k sbin_susp 2025-09-09 21:03:17.292066 | debian-bookworm | +-w /sbin/xtables-nft-multi -p x -k sbin_susp 2025-09-09 21:03:17.292177 | debian-bookworm | +-w /usr/sbin/nft -p x -k sbin_susp 2025-09-09 21:03:17.292280 | debian-bookworm | +-w /usr/sbin/tcpdump -p x -k sbin_susp 2025-09-09 21:03:17.292396 | debian-bookworm | +-w /usr/sbin/traceroute -p x -k sbin_susp 2025-09-09 21:03:17.292495 | debian-bookworm | +-w /usr/sbin/ufw -p x -k sbin_susp 2025-09-09 21:03:17.292593 | debian-bookworm | + 2025-09-09 21:03:17.292692 | debian-bookworm | +### kde4 2025-09-09 21:03:17.292806 | debian-bookworm | +-a always,exit -F path=/usr/libexec/kde4/kpac_dhcp_helper -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-09 21:03:17.292915 | debian-bookworm | +-a always,exit -F path=/usr/libexec/kde4/kdesud -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-09 21:03:17.293010 | debian-bookworm | + 2025-09-09 21:03:17.293144 | debian-bookworm | +## dbus-send invocation 2025-09-09 21:03:17.293227 | debian-bookworm | +### may indicate privilege escalation CVE-2021-3560 2025-09-09 21:03:17.293323 | debian-bookworm | +-w /usr/bin/dbus-send -p x -k dbus_send 2025-09-09 21:03:17.293443 | debian-bookworm | +-w /usr/bin/gdbus -p x -k gdubs_call 2025-09-09 21:03:17.293546 | debian-bookworm | + 2025-09-09 21:03:17.293638 | debian-bookworm | +## pkexec invocation 2025-09-09 21:03:17.293740 | debian-bookworm | +### may indicate privilege escalation CVE-2021-4034 2025-09-09 21:03:17.293843 | debian-bookworm | +-w /usr/bin/pkexec -p x -k pkexec 2025-09-09 21:03:17.293940 | debian-bookworm | + 2025-09-09 21:03:17.294039 | debian-bookworm | +## Suspicious shells 2025-09-09 21:03:17.294137 | debian-bookworm | +-w /bin/ash -p x -k susp_shell 2025-09-09 21:03:17.294240 | debian-bookworm | +-w /bin/csh -p x -k susp_shell 2025-09-09 21:03:17.294356 | debian-bookworm | +-w /bin/fish -p x -k susp_shell 2025-09-09 21:03:17.294464 | debian-bookworm | +-w /bin/tcsh -p x -k susp_shell 2025-09-09 21:03:17.294567 | debian-bookworm | +-w /bin/tclsh -p x -k susp_shell 2025-09-09 21:03:17.294665 | debian-bookworm | +-w /bin/xonsh -p x -k susp_shell 2025-09-09 21:03:17.294787 | debian-bookworm | +-w /usr/local/bin/xonsh -p x -k susp_shell 2025-09-09 21:03:17.294900 | debian-bookworm | +-w /bin/open -p x -k susp_shell 2025-09-09 21:03:17.295005 | debian-bookworm | +-w /bin/rbash -p x -k susp_shell 2025-09-09 21:03:17.295203 | debian-bookworm | + 2025-09-09 21:03:17.295212 | debian-bookworm | +# Web Server Actvity 2025-09-09 21:03:17.295324 | debian-bookworm | +## Change the number "33" to the ID of your WebServer user. Default: www-data:x:33:33 2025-09-09 21:03:17.295419 | debian-bookworm | +-a always,exit -F arch=b64 -S execve -F euid=33 -k detect_execve_www 2025-09-09 21:03:17.295521 | debian-bookworm | + 2025-09-09 21:03:17.295623 | debian-bookworm | +### https://clustershell.readthedocs.io/ 2025-09-09 21:03:17.295724 | debian-bookworm | +-w /bin/clush -p x -k susp_shell 2025-09-09 21:03:17.295823 | debian-bookworm | +-w /usr/local/bin/clush -p x -k susp_shell 2025-09-09 21:03:17.295924 | debian-bookworm | +-w /etc/clustershell/clush.conf -p x -k susp_shell 2025-09-09 21:03:17.296024 | debian-bookworm | + 2025-09-09 21:03:17.296121 | debian-bookworm | +### https://github.com/tmux/tmux 2025-09-09 21:03:17.296224 | debian-bookworm | +-w /bin/tmux -p x -k susp_shell 2025-09-09 21:03:17.434016 | centos-9-stream | ok: [molecule-auditd] => {"changed": false, "cmd": ["find", "/etc/audit/rules.d", "-type", "f", "-printf", "%f\n"], "delta": "0:00:00.007588", "end": "2025-09-09 21:03:17.385757", "msg": "", "rc": 0, "start": "2025-09-09 21:03:17.378169", "stderr": "", "stderr_lines": [], "stdout": "20-neo23x0.rules\naudit.rules", "stdout_lines": ["20-neo23x0.rules", "audit.rules"]} 2025-09-09 21:03:17.296322 | debian-bookworm | +-w /usr/local/bin/tmux -p x -k susp_shell 2025-09-09 21:03:17.434084 | centos-9-stream | 2025-09-09 21:03:17.296430 | debian-bookworm | + 2025-09-09 21:03:17.434096 | centos-9-stream | TASK [auditd : Remove unmanaged rules files] *********************************** 2025-09-09 21:03:17.296531 | debian-bookworm | +## Shell/profile configurations 2025-09-09 21:03:17.296638 | debian-bookworm | +-w /etc/profile.d/ -p wa -k shell_profiles 2025-09-09 21:03:17.296739 | debian-bookworm | +-w /etc/profile -p wa -k shell_profiles 2025-09-09 21:03:17.296843 | debian-bookworm | +-w /etc/shells -p wa -k shell_profiles 2025-09-09 21:03:17.296944 | debian-bookworm | +-w /etc/bashrc -p wa -k shell_profiles 2025-09-09 21:03:17.297113 | debian-bookworm | +-w /etc/csh.cshrc -p wa -k shell_profiles 2025-09-09 21:03:17.297152 | debian-bookworm | +-w /etc/csh.login -p wa -k shell_profiles 2025-09-09 21:03:17.297251 | debian-bookworm | +-w /etc/fish/ -p wa -k shell_profiles 2025-09-09 21:03:17.297480 | debian-bookworm | +-w /etc/zsh/ -p wa -k shell_profiles 2025-09-09 21:03:17.297492 | debian-bookworm | + 2025-09-09 21:03:17.297601 | debian-bookworm | +### https://github.com/xxh/xxh 2025-09-09 21:03:17.297660 | debian-bookworm | +-w /usr/local/bin/xxh.bash -p x -k susp_shell 2025-09-09 21:03:17.297764 | debian-bookworm | +-w /usr/local/bin/xxh.xsh -p x -k susp_shell 2025-09-09 21:03:17.297865 | debian-bookworm | +-w /usr/local/bin/xxh.zsh -p x -k susp_shell 2025-09-09 21:03:17.297963 | debian-bookworm | + 2025-09-09 21:03:17.298066 | debian-bookworm | +## Injection 2025-09-09 21:03:17.298165 | debian-bookworm | +### These rules watch for code injection by the ptrace facility. 2025-09-09 21:03:17.298268 | debian-bookworm | +### This could indicate someone trying to do something bad or just debugging 2025-09-09 21:03:17.298407 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x4 -k code_injection 2025-09-09 21:03:17.298526 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x5 -k data_injection 2025-09-09 21:03:17.298638 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x6 -k register_injection 2025-09-09 21:03:17.298736 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -k tracing 2025-09-09 21:03:17.298879 | debian-bookworm | + 2025-09-09 21:03:17.307059 | debian-bookworm | +## Anonymous File Creation 2025-09-09 21:03:17.307090 | debian-bookworm | +### These rules watch the use of memfd_create 2025-09-09 21:03:17.307102 | debian-bookworm | +### "memfd_create" creates anonymous file and returns a file descriptor to access it 2025-09-09 21:03:17.307107 | debian-bookworm | +### When combined with "fexecve" can be used to stealthily run binaries in memory without touching disk 2025-09-09 21:03:17.307111 | debian-bookworm | +-a always,exit -F arch=b64 -S memfd_create -F key=anon_file_create 2025-09-09 21:03:17.307115 | debian-bookworm | + 2025-09-09 21:03:17.307119 | debian-bookworm | +## Privilege Abuse 2025-09-09 21:03:17.307123 | debian-bookworm | +### The purpose of this rule is to detect when an admin may be abusing power by looking in user's home dir. 2025-09-09 21:03:17.307128 | debian-bookworm | +-a always,exit -F dir=/home -F uid=0 -F auid>=1000 -F auid!=-1 -C auid!=obj_uid -k power_abuse 2025-09-09 21:03:17.307132 | debian-bookworm | + 2025-09-09 21:03:17.307135 | debian-bookworm | +# Socket Creations 2025-09-09 21:03:17.307139 | debian-bookworm | +# will catch both IPv4 and IPv6 2025-09-09 21:03:17.307143 | debian-bookworm | + 2025-09-09 21:03:17.307147 | debian-bookworm | +-a always,exit -F arch=b32 -S socket -F a0=2 -k network_socket_created 2025-09-09 21:03:17.307151 | debian-bookworm | +-a always,exit -F arch=b64 -S socket -F a0=2 -k network_socket_created 2025-09-09 21:03:17.307155 | debian-bookworm | + 2025-09-09 21:03:17.307159 | debian-bookworm | +-a always,exit -F arch=b32 -S socket -F a0=10 -k network_socket_created 2025-09-09 21:03:17.307162 | debian-bookworm | +-a always,exit -F arch=b64 -S socket -F a0=10 -k network_socket_created 2025-09-09 21:03:17.307166 | debian-bookworm | + 2025-09-09 21:03:17.307170 | debian-bookworm | +# Software Management --------------------------------------------------------- 2025-09-09 21:03:17.307174 | debian-bookworm | + 2025-09-09 21:03:17.307178 | debian-bookworm | +# RPM (Redhat/CentOS) 2025-09-09 21:03:17.307182 | debian-bookworm | +-w /usr/bin/rpm -p x -k software_mgmt 2025-09-09 21:03:17.307185 | debian-bookworm | +-w /usr/bin/yum -p x -k software_mgmt 2025-09-09 21:03:17.307189 | debian-bookworm | + 2025-09-09 21:03:17.307193 | debian-bookworm | +# DNF (Fedora/RedHat 8/CentOS 8) 2025-09-09 21:03:17.307197 | debian-bookworm | +-w /usr/bin/dnf -p x -k software_mgmt 2025-09-09 21:03:17.307201 | debian-bookworm | + 2025-09-09 21:03:17.307204 | debian-bookworm | +# YAST/Zypper/RPM (SuSE) 2025-09-09 21:03:17.307208 | debian-bookworm | +-w /sbin/yast -p x -k software_mgmt 2025-09-09 21:03:17.307212 | debian-bookworm | +-w /sbin/yast2 -p x -k software_mgmt 2025-09-09 21:03:17.307216 | debian-bookworm | +-w /bin/rpm -p x -k software_mgmt 2025-09-09 21:03:17.307220 | debian-bookworm | +-w /usr/bin/zypper -k software_mgmt 2025-09-09 21:03:17.307224 | debian-bookworm | + 2025-09-09 21:03:17.307227 | debian-bookworm | +# DPKG / APT-GET (Debian/Ubuntu) 2025-09-09 21:03:17.307231 | debian-bookworm | +-w /usr/bin/dpkg -p x -k software_mgmt 2025-09-09 21:03:17.307235 | debian-bookworm | +-w /usr/bin/apt -p x -k software_mgmt 2025-09-09 21:03:17.307239 | debian-bookworm | +-w /usr/bin/apt-add-repository -p x -k software_mgmt 2025-09-09 21:03:17.307243 | debian-bookworm | +-w /usr/bin/apt-get -p x -k software_mgmt 2025-09-09 21:03:17.307246 | debian-bookworm | +-w /usr/bin/aptitude -p x -k software_mgmt 2025-09-09 21:03:17.307250 | debian-bookworm | +-w /usr/bin/wajig -p x -k software_mgmt 2025-09-09 21:03:17.307254 | debian-bookworm | +-w /usr/bin/snap -p x -k software_mgmt 2025-09-09 21:03:17.307258 | debian-bookworm | + 2025-09-09 21:03:17.307262 | debian-bookworm | +# PIP(3) (Python installs) 2025-09-09 21:03:17.307266 | debian-bookworm | +-w /usr/bin/pip -p x -k third_party_software_mgmt 2025-09-09 21:03:17.307270 | debian-bookworm | +-w /usr/local/bin/pip -p x -k third_party_software_mgmt 2025-09-09 21:03:17.307274 | debian-bookworm | +-w /usr/bin/pip3 -p x -k third_party_software_mgmt 2025-09-09 21:03:17.307277 | debian-bookworm | +-w /usr/local/bin/pip3 -p x -k third_party_software_mgmt 2025-09-09 21:03:17.307281 | debian-bookworm | +-w /usr/bin/pipx -p x -k third_party_software_mgmt 2025-09-09 21:03:17.307285 | debian-bookworm | +-w /usr/local/bin/pipx -p x -k third_party_software_mgmt 2025-09-09 21:03:17.307289 | debian-bookworm | + 2025-09-09 21:03:17.307293 | debian-bookworm | +# npm 2025-09-09 21:03:17.307297 | debian-bookworm | +## T1072 third party software 2025-09-09 21:03:17.307301 | debian-bookworm | +## https://www.npmjs.com 2025-09-09 21:03:17.307305 | debian-bookworm | +## https://docs.npmjs.com/cli/v6/commands/npm-audit 2025-09-09 21:03:17.307308 | debian-bookworm | +-w /usr/bin/npm -p x -k third_party_software_mgmt 2025-09-09 21:03:17.307312 | debian-bookworm | + 2025-09-09 21:03:17.307316 | debian-bookworm | +# Comprehensive Perl Archive Network (CPAN) (CPAN installs) 2025-09-09 21:03:17.307320 | debian-bookworm | +## T1072 third party software 2025-09-09 21:03:17.307332 | debian-bookworm | +## https://www.cpan.org 2025-09-09 21:03:17.307337 | debian-bookworm | +-w /usr/bin/cpan -p x -k third_party_software_mgmt 2025-09-09 21:03:17.307357 | debian-bookworm | + 2025-09-09 21:03:17.307361 | debian-bookworm | +# Ruby (RubyGems installs) 2025-09-09 21:03:17.307365 | debian-bookworm | +## T1072 third party software 2025-09-09 21:03:17.307368 | debian-bookworm | +## https://rubygems.org 2025-09-09 21:03:17.307372 | debian-bookworm | +-w /usr/bin/gem -p x -k third_party_software_mgmt 2025-09-09 21:03:17.307376 | debian-bookworm | + 2025-09-09 21:03:17.307380 | debian-bookworm | +# LuaRocks (Lua installs) 2025-09-09 21:03:17.307383 | debian-bookworm | +## T1072 third party software 2025-09-09 21:03:17.307387 | debian-bookworm | +## https://luarocks.org 2025-09-09 21:03:17.307391 | debian-bookworm | +-w /usr/bin/luarocks -p x -k third_party_software_mgmt 2025-09-09 21:03:17.307395 | debian-bookworm | + 2025-09-09 21:03:17.307399 | debian-bookworm | +# Pacman (Arch Linux) 2025-09-09 21:03:17.307403 | debian-bookworm | +## https://wiki.archlinux.org/title/Pacman 2025-09-09 21:03:17.307406 | debian-bookworm | +## T1072 third party software 2025-09-09 21:03:17.307410 | debian-bookworm | +-w /etc/pacman.conf -p x -k third_party_software_mgmt 2025-09-09 21:03:17.307414 | debian-bookworm | +-w /etc/pacman.d -p x -k third_party_software_mgmt 2025-09-09 21:03:17.307418 | debian-bookworm | + 2025-09-09 21:03:17.307422 | debian-bookworm | +# Special Software ------------------------------------------------------------ 2025-09-09 21:03:17.307426 | debian-bookworm | + 2025-09-09 21:03:17.307429 | debian-bookworm | +## GDS specific secrets 2025-09-09 21:03:17.307433 | debian-bookworm | +-w /etc/puppet/ssl -p wa -k puppet_ssl 2025-09-09 21:03:17.307442 | debian-bookworm | + 2025-09-09 21:03:17.307446 | debian-bookworm | +## IBM Bigfix BESClient 2025-09-09 21:03:17.307450 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/opt/BESClient -F success=0 -k soft_besclient 2025-09-09 21:03:17.307454 | debian-bookworm | +-w /var/opt/BESClient/ -p wa -k soft_besclient 2025-09-09 21:03:17.307547 | debian-bookworm | + 2025-09-09 21:03:17.307650 | debian-bookworm | +## CHEF https://www.chef.io/chef/ 2025-09-09 21:03:17.307750 | debian-bookworm | +-w /etc/chef -p wa -k soft_chef 2025-09-09 21:03:17.307847 | debian-bookworm | + 2025-09-09 21:03:17.307948 | debian-bookworm | +## Salt 2025-09-09 21:03:17.308049 | debian-bookworm | +## https://saltproject.io/ 2025-09-09 21:03:17.308155 | debian-bookworm | +## https://docs.saltproject.io/en/latest/ref/configuration/master.html 2025-09-09 21:03:17.308255 | debian-bookworm | +-w /etc/salt -p wa -k soft_salt 2025-09-09 21:03:17.308392 | debian-bookworm | +-w /usr/local/etc/salt -p wa -k soft_salt 2025-09-09 21:03:17.308467 | debian-bookworm | + 2025-09-09 21:03:17.308570 | debian-bookworm | +## Otter 2025-09-09 21:03:17.308671 | debian-bookworm | +## https://inedo.com/otter 2025-09-09 21:03:17.308775 | debian-bookworm | +-w /etc/otter -p wa -k soft_otter 2025-09-09 21:03:17.308871 | debian-bookworm | + 2025-09-09 21:03:17.308973 | debian-bookworm | +## T1081 Credentials In Files 2025-09-09 21:03:17.309075 | debian-bookworm | +-w /usr/bin/grep -p x -k string_search 2025-09-09 21:03:17.309189 | debian-bookworm | +-w /usr/bin/egrep -p x -k string_search 2025-09-09 21:03:17.309278 | debian-bookworm | +-w /usr/bin/ugrep -p x -k string_search 2025-09-09 21:03:17.309391 | debian-bookworm | +### macOS 2025-09-09 21:03:17.309492 | debian-bookworm | +-w /usr/local/bin/grep -p x -k string_search 2025-09-09 21:03:17.309594 | debian-bookworm | +-w /usr/local/bin/egrep -p x -k string_search 2025-09-09 21:03:17.309696 | debian-bookworm | +-w /usr/local/bin/ugrep -p x -k string_search 2025-09-09 21:03:17.309796 | debian-bookworm | + 2025-09-09 21:03:17.309898 | debian-bookworm | +### https://github.com/tmbinc/bgrep 2025-09-09 21:03:17.310006 | debian-bookworm | +-w /usr/bin/bgrep -p x -k string_search 2025-09-09 21:03:17.310106 | debian-bookworm | +### macOS 2025-09-09 21:03:17.310208 | debian-bookworm | +-w /usr/local/bin/bgrep -p x -k string_search 2025-09-09 21:03:17.310318 | debian-bookworm | + 2025-09-09 21:03:17.310440 | debian-bookworm | +### https://github.com/BurntSushi/ripgrep 2025-09-09 21:03:17.310544 | debian-bookworm | +-w /usr/bin/rg -p x -k string_search 2025-09-09 21:03:17.310647 | debian-bookworm | +### macOS 2025-09-09 21:03:17.310747 | debian-bookworm | +-w /usr/local/bin/rg -p x -k string_search 2025-09-09 21:03:17.310878 | debian-bookworm | + 2025-09-09 21:03:17.310983 | debian-bookworm | +### https://github.com/awgn/cgrep 2025-09-09 21:03:17.311081 | debian-bookworm | + 2025-09-09 21:03:17.311183 | debian-bookworm | +-w /usr/bin/cgrep -p x -k string_search 2025-09-09 21:03:17.311283 | debian-bookworm | +### macOS 2025-09-09 21:03:17.311406 | debian-bookworm | +-w /usr/local/bin/cgrep -p x -k string_search 2025-09-09 21:03:17.311496 | debian-bookworm | + 2025-09-09 21:03:17.311599 | debian-bookworm | +### https://github.com/jpr5/ngrep 2025-09-09 21:03:17.311701 | debian-bookworm | +-w /usr/bin/ngrep -p x -k string_search 2025-09-09 21:03:17.311801 | debian-bookworm | +### macOS 2025-09-09 21:03:17.311903 | debian-bookworm | +-w /usr/local/bin/ngrep -p x -k string_search 2025-09-09 21:03:17.312003 | debian-bookworm | + 2025-09-09 21:03:17.312101 | debian-bookworm | +### https://github.com/vrothberg/vgrep 2025-09-09 21:03:17.312199 | debian-bookworm | +-w /usr/bin/vgrep -p x -k string_search 2025-09-09 21:03:17.312300 | debian-bookworm | +### macOS 2025-09-09 21:03:17.312417 | debian-bookworm | +-w /usr/local/bin/vgrep -p x -k string_search 2025-09-09 21:03:17.312513 | debian-bookworm | + 2025-09-09 21:03:17.312618 | debian-bookworm | +### https://github.com/monochromegane/the_platinum_searcher 2025-09-09 21:03:17.312721 | debian-bookworm | +-w /usr/bin/pt -p x -k string_search 2025-09-09 21:03:17.312822 | debian-bookworm | +### macOS 2025-09-09 21:03:17.312921 | debian-bookworm | +-w /usr/local/bin/pt -p x -k string_search 2025-09-09 21:03:17.313020 | debian-bookworm | + 2025-09-09 21:03:17.313123 | debian-bookworm | +### https://github.com/gvansickle/ucg 2025-09-09 21:03:17.313222 | debian-bookworm | +-w /usr/bin/ucg -p x -k string_search 2025-09-09 21:03:17.313321 | debian-bookworm | +### macOS 2025-09-09 21:03:17.313445 | debian-bookworm | +-w /usr/local/bin/ucg -p x -k string_search 2025-09-09 21:03:17.313573 | debian-bookworm | + 2025-09-09 21:03:17.313647 | debian-bookworm | +### https://github.com/ggreer/the_silver_searcher 2025-09-09 21:03:17.313750 | debian-bookworm | +-w /usr/bin/ag -p x -k string_search 2025-09-09 21:03:17.313851 | debian-bookworm | +### macOS 2025-09-09 21:03:17.313952 | debian-bookworm | +-w /usr/local/bin/ag -p x -k string_search 2025-09-09 21:03:17.314051 | debian-bookworm | + 2025-09-09 21:03:17.314161 | debian-bookworm | +### https://github.com/beyondgrep/ack3 2025-09-09 21:03:17.314262 | debian-bookworm | +### https://beyondgrep.com 2025-09-09 21:03:17.314376 | debian-bookworm | +-w /usr/bin/ack -p x -k string_search 2025-09-09 21:03:17.314481 | debian-bookworm | +-w /usr/local/bin/ack -p x -k string_search 2025-09-09 21:03:17.314577 | debian-bookworm | +-w /usr/bin/semgrep -p x -k string_search 2025-09-09 21:03:17.314676 | debian-bookworm | +### macOS 2025-09-09 21:03:17.314812 | debian-bookworm | +-w /usr/local/bin/semgrep -p x -k string_search 2025-09-09 21:03:17.314913 | debian-bookworm | + 2025-09-09 21:03:17.315014 | debian-bookworm | +## Docker 2025-09-09 21:03:17.315114 | debian-bookworm | +-w /usr/bin/dockerd -k docker 2025-09-09 21:03:17.315215 | debian-bookworm | +-w /usr/bin/docker -k docker 2025-09-09 21:03:17.315317 | debian-bookworm | +-w /usr/bin/docker-containerd -k docker 2025-09-09 21:03:17.315425 | debian-bookworm | +-w /usr/bin/docker-runc -k docker 2025-09-09 21:03:17.315529 | debian-bookworm | +-w /var/lib/docker -p wa -k docker 2025-09-09 21:03:17.315630 | debian-bookworm | +-w /etc/docker -k docker 2025-09-09 21:03:17.315737 | debian-bookworm | +-w /etc/sysconfig/docker -k docker 2025-09-09 21:03:17.315834 | debian-bookworm | +-w /etc/sysconfig/docker-storage -k docker 2025-09-09 21:03:17.315936 | debian-bookworm | +-w /usr/lib/systemd/system/docker.service -k docker 2025-09-09 21:03:17.316036 | debian-bookworm | +-w /usr/lib/systemd/system/docker.socket -k docker 2025-09-09 21:03:17.316137 | debian-bookworm | + 2025-09-09 21:03:17.316237 | debian-bookworm | +## Virtualization stuff 2025-09-09 21:03:17.316377 | debian-bookworm | +-w /usr/bin/qemu-system-x86_64 -p x -k qemu-system-x86_64 2025-09-09 21:03:17.316455 | debian-bookworm | +-w /usr/bin/qemu-img -p x -k qemu-img 2025-09-09 21:03:17.316554 | debian-bookworm | +-w /usr/bin/qemu-kvm -p x -k qemu-kvm 2025-09-09 21:03:17.316657 | debian-bookworm | +-w /usr/bin/qemu -p x -k qemu 2025-09-09 21:03:17.316757 | debian-bookworm | +-w /usr/bin/virtualbox -p x -k virtualbox 2025-09-09 21:03:17.316859 | debian-bookworm | +-w /usr/bin/virt-manager -p x -k virt-manager 2025-09-09 21:03:17.316957 | debian-bookworm | +-w /usr/bin/VBoxManage -p x -k VBoxManage 2025-09-09 21:03:17.317055 | debian-bookworm | + 2025-09-09 21:03:17.317154 | debian-bookworm | +#### VirtualBox on macOS 2025-09-09 21:03:17.317252 | debian-bookworm | + 2025-09-09 21:03:17.317380 | debian-bookworm | +-w /usr/local/bin/VirtualBox -p x -k virt_tool 2025-09-09 21:03:17.317484 | debian-bookworm | +-w /usr/local/bin/VirtualBoxVM -p x -k virt_tool 2025-09-09 21:03:17.317589 | debian-bookworm | +-w /usr/local/bin/VBoxManage -p x -k virt_tool 2025-09-09 21:03:17.317686 | debian-bookworm | +-w /usr/local/bin/VBoxVRDP -p x -k virt_tool 2025-09-09 21:03:17.317787 | debian-bookworm | +-w /usr/local/bin/VBoxHeadless -p x -k virt_tool 2025-09-09 21:03:17.317897 | debian-bookworm | +-w /usr/local/bin/vboxwebsrv -p x -k virt_tool 2025-09-09 21:03:17.317988 | debian-bookworm | +-w /usr/local/bin/VBoxBugReport -p x -k virt_tool 2025-09-09 21:03:17.318089 | debian-bookworm | +-w /usr/local/bin/VBoxBalloonCtrl -p x -k virt_tool 2025-09-09 21:03:17.318191 | debian-bookworm | +-w /usr/local/bin/VBoxAutostart -p x -k virt_tool 2025-09-09 21:03:17.318292 | debian-bookworm | +-w /usr/local/bin/VBoxDTrace -p x -k virt_tool 2025-09-09 21:03:17.318405 | debian-bookworm | +-w /usr/local/bin/vbox-img -p x -k virt_tool 2025-09-09 21:03:17.318509 | debian-bookworm | +-w /Library/LaunchDaemons/org.virtualbox.startup.plist -p x -k virt_tool 2025-09-09 21:03:17.318613 | debian-bookworm | +-w /Library/Application Support/VirtualBox/LaunchDaemons/ -p x -k virt_tool 2025-09-09 21:03:17.318717 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxDrv.kext/ -p x -k virt_tool 2025-09-09 21:03:17.318840 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxUSB.kext/ -p x -k virt_tool 2025-09-09 21:03:17.318954 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxNetFlt.kext/ -p x -k virt_tool 2025-09-09 21:03:17.319046 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxNetAdp.kext/ -p x -k virt_tool 2025-09-09 21:03:17.319145 | debian-bookworm | + 2025-09-09 21:03:17.319246 | debian-bookworm | +### Parallels Desktop on macOS 2025-09-09 21:03:17.319362 | debian-bookworm | + 2025-09-09 21:03:17.319463 | debian-bookworm | +-w /usr/local/bin/prl_convert -p x -k virt_tool 2025-09-09 21:03:17.319565 | debian-bookworm | +-w /usr/local/bin/prl_disk_tool -p x -k virt_tool 2025-09-09 21:03:17.319669 | debian-bookworm | +-w /usr/local/bin/prl_perf_ctl -p x -k virt_tool 2025-09-09 21:03:17.319763 | debian-bookworm | +-w /usr/local/bin/prlcore2dmp -p x -k virt_tool 2025-09-09 21:03:17.319863 | debian-bookworm | +-w /usr/local/bin/prlctl -p x -k virt_tool 2025-09-09 21:03:17.319967 | debian-bookworm | +-w /usr/local/bin/prlexec -p x -k virt_tool 2025-09-09 21:03:17.320079 | debian-bookworm | +-w /usr/local/bin/prlsrvctl -p x -k virt_tool 2025-09-09 21:03:17.320167 | debian-bookworm | +-w /Library/Preferences/Parallels -p x -k virt_tool 2025-09-09 21:03:17.320265 | debian-bookworm | + 2025-09-09 21:03:17.320390 | debian-bookworm | +### qemu on macOS 2025-09-09 21:03:17.320486 | debian-bookworm | + 2025-09-09 21:03:17.320587 | debian-bookworm | +-w /usr/local/bin/qemu-edid -p x -k virt_tool 2025-09-09 21:03:17.320688 | debian-bookworm | +-w /usr/local/bin/qemu-img -p x -k virt_tool 2025-09-09 21:03:17.320790 | debian-bookworm | +-w /usr/local/bin/qemu-io -p x -k virt_tool 2025-09-09 21:03:17.320889 | debian-bookworm | +-w /usr/local/bin/qemu-nbd -p x -k virt_tool 2025-09-09 21:03:17.320991 | debian-bookworm | +-w /usr/local/bin/qemu-system-x86_64 -p x -k virt_tool 2025-09-09 21:03:17.321091 | debian-bookworm | + 2025-09-09 21:03:17.321193 | debian-bookworm | +## Kubelet 2025-09-09 21:03:17.321291 | debian-bookworm | +-w /usr/bin/kubelet -k kubelet 2025-09-09 21:03:17.321399 | debian-bookworm | + 2025-09-09 21:03:17.321504 | debian-bookworm | +# ipc system call 2025-09-09 21:03:17.321603 | debian-bookworm | +# /usr/include/linux/ipc.h 2025-09-09 21:03:17.321703 | debian-bookworm | + 2025-09-09 21:03:17.321802 | debian-bookworm | +## msgctl 2025-09-09 21:03:17.321908 | debian-bookworm | +#-a always,exit -S ipc -F a0=14 -k Inter-Process_Communication 2025-09-09 21:03:17.322006 | debian-bookworm | +## msgget 2025-09-09 21:03:17.322108 | debian-bookworm | +#-a always,exit -S ipc -F a0=13 -k Inter-Process_Communication 2025-09-09 21:03:17.322250 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2025-09-09 21:03:17.322314 | debian-bookworm | +-a always,exit -F arch=b64 -S msgctl -k Inter-Process_Communication 2025-09-09 21:03:17.322437 | debian-bookworm | +-a always,exit -F arch=b64 -S msgget -k Inter-Process_Communication 2025-09-09 21:03:17.322536 | debian-bookworm | + 2025-09-09 21:03:17.322636 | debian-bookworm | +## semctl 2025-09-09 21:03:17.322740 | debian-bookworm | +#-a always,exit -S ipc -F a0=3 -k Inter-Process_Communication 2025-09-09 21:03:17.322879 | debian-bookworm | +## semget 2025-09-09 21:03:17.322982 | debian-bookworm | +#-a always,exit -S ipc -F a0=2 -k Inter-Process_Communication 2025-09-09 21:03:17.323084 | debian-bookworm | +## semop 2025-09-09 21:03:17.323188 | debian-bookworm | +#-a always,exit -S ipc -F a0=1 -k Inter-Process_Communication 2025-09-09 21:03:17.323300 | debian-bookworm | +## semtimedop 2025-09-09 21:03:17.323407 | debian-bookworm | +#-a always,exit -S ipc -F a0=4 -k Inter-Process_Communication 2025-09-09 21:03:17.323505 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2025-09-09 21:03:17.323611 | debian-bookworm | +-a always,exit -F arch=b64 -S semctl -k Inter-Process_Communication 2025-09-09 21:03:17.323712 | debian-bookworm | +-a always,exit -F arch=b64 -S semget -k Inter-Process_Communication 2025-09-09 21:03:17.323815 | debian-bookworm | +-a always,exit -F arch=b64 -S semop -k Inter-Process_Communication 2025-09-09 21:03:17.323916 | debian-bookworm | +-a always,exit -F arch=b64 -S semtimedop -k Inter-Process_Communication 2025-09-09 21:03:17.324017 | debian-bookworm | + 2025-09-09 21:03:17.324118 | debian-bookworm | +## shmctl 2025-09-09 21:03:17.324221 | debian-bookworm | +#-a always,exit -S ipc -F a0=24 -k Inter-Process_Communication 2025-09-09 21:03:17.324319 | debian-bookworm | +## shmget 2025-09-09 21:03:17.324435 | debian-bookworm | +#-a always,exit -S ipc -F a0=23 -k Inter-Process_Communication 2025-09-09 21:03:17.324533 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2025-09-09 21:03:17.324634 | debian-bookworm | +-a always,exit -F arch=b64 -S shmctl -k Inter-Process_Communication 2025-09-09 21:03:17.324735 | debian-bookworm | +-a always,exit -F arch=b64 -S shmget -k Inter-Process_Communication 2025-09-09 21:03:17.324834 | debian-bookworm | + 2025-09-09 21:03:17.324931 | debian-bookworm | +# High Volume Events ---------------------------------------------------------- 2025-09-09 21:03:17.325026 | debian-bookworm | + 2025-09-09 21:03:17.325128 | debian-bookworm | +## Disable these rules if they create too many events in your environment 2025-09-09 21:03:17.325225 | debian-bookworm | + 2025-09-09 21:03:17.325326 | debian-bookworm | +## Common Shells 2025-09-09 21:03:17.325452 | debian-bookworm | +-w /bin/bash -p x -k susp_shell 2025-09-09 21:03:17.325559 | debian-bookworm | +-w /bin/dash -p x -k susp_shell 2025-09-09 21:03:17.325662 | debian-bookworm | +-w /bin/busybox -p x -k susp_shell 2025-09-09 21:03:17.325765 | debian-bookworm | +-w /bin/zsh -p x -k susp_shell 2025-09-09 21:03:17.325869 | debian-bookworm | +-w /bin/sh -p x -k susp_shell 2025-09-09 21:03:17.325972 | debian-bookworm | +-w /bin/ksh -p x -k susp_shell 2025-09-09 21:03:17.326072 | debian-bookworm | + 2025-09-09 21:03:17.326172 | debian-bookworm | +## Root command executions 2025-09-09 21:03:17.326283 | debian-bookworm | +-a always,exit -F arch=b64 -F euid=0 -F auid>=1000 -F auid!=-1 -S execve -k rootcmd 2025-09-09 21:03:17.326394 | debian-bookworm | + 2025-09-09 21:03:17.326499 | debian-bookworm | +## File Deletion Events by User 2025-09-09 21:03:17.326607 | debian-bookworm | +-a always,exit -F arch=b64 -S rmdir -S unlink -S unlinkat -S rename -S renameat -F auid>=1000 -F auid!=-1 -k delete 2025-09-09 21:03:17.326703 | debian-bookworm | + 2025-09-09 21:03:17.326822 | debian-bookworm | +## File Access 2025-09-09 21:03:17.326927 | debian-bookworm | +### Unauthorized Access (unsuccessful) 2025-09-09 21:03:17.327039 | debian-bookworm | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k file_access 2025-09-09 21:03:17.327147 | debian-bookworm | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k file_access 2025-09-09 21:03:17.327246 | debian-bookworm | + 2025-09-09 21:03:17.327388 | debian-bookworm | +### Unsuccessful Creation 2025-09-09 21:03:17.327467 | debian-bookworm | +-a always,exit -F arch=b64 -S mkdir,creat,link,symlink,mknod,mknodat,linkat,symlinkat -F exit=-EACCES -k file_creation 2025-09-09 21:03:17.327572 | debian-bookworm | +-a always,exit -F arch=b64 -S mkdir,link,symlink,mkdirat -F exit=-EPERM -k file_creation 2025-09-09 21:03:17.327672 | debian-bookworm | + 2025-09-09 21:03:17.327770 | debian-bookworm | +### Unsuccessful Modification 2025-09-09 21:03:17.327882 | debian-bookworm | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EACCES -k file_modification 2025-09-09 21:03:17.327992 | debian-bookworm | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EPERM -k file_modification 2025-09-09 21:03:17.328090 | debian-bookworm | + 2025-09-09 21:03:17.328192 | debian-bookworm | +## 32bit API Exploitation 2025-09-09 21:03:17.328298 | debian-bookworm | +### If you are on a 64 bit platform, everything _should_ be running 2025-09-09 21:03:17.328425 | debian-bookworm | +### in 64 bit mode. This rule will detect any use of the 32 bit syscalls 2025-09-09 21:03:17.328525 | debian-bookworm | +### because this might be a sign of someone exploiting a hole in the 32 2025-09-09 21:03:17.328627 | debian-bookworm | +### bit API. 2025-09-09 21:03:17.328750 | debian-bookworm | +-a always,exit -F arch=b32 -S all -k 32bit_api 2025-09-09 21:03:17.328827 | debian-bookworm | + 2025-09-09 21:03:17.328931 | debian-bookworm | +# Make The Configuration Immutable -------------------------------------------- 2025-09-09 21:03:17.329029 | debian-bookworm | + 2025-09-09 21:03:17.329128 | debian-bookworm | +##-e 2 2025-09-09 21:03:17.329224 | debian-bookworm | 2025-09-09 21:03:17.329507 | debian-bookworm | changed: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": true, "checksum": "9f99ce5c4f891fbf3e2bce06ed4cb97fb9e01f41", "dest": "/etc/audit/rules.d/20-neo23x0.rules", "gid": 0, "group": "root", "item": "20-neo23x0.rules", "md5sum": "6ac57206fd77de34805c3f4d50ef8b1d", "mode": "0644", "owner": "root", "size": 27367, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1757451796.4439054-2754-231796454723406/.source.rules", "state": "file", "uid": 0} 2025-09-09 21:03:17.329610 | debian-bookworm | 2025-09-09 21:03:17.329714 | debian-bookworm | TASK [auditd : Manage auditd service] ****************************************** 2025-09-09 21:03:17.740577 | ubuntu-noble | ok: [molecule-auditd] => (item={'parameter': 'active', 'value': 'no', 'config': '/etc/audit/plugins.d/syslog.conf'}) => {"ansible_loop_var": "item", "backup": "", "changed": false, "item": {"config": "/etc/audit/plugins.d/syslog.conf", "parameter": "active", "value": "no"}, "msg": ""} 2025-09-09 21:03:17.741128 | ubuntu-noble | 2025-09-09 21:03:17.741556 | ubuntu-noble | TASK [auditd : Deploy rules for auditd] **************************************** 2025-09-09 21:03:17.772006 | centos-9-stream | skipping: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": false, "false_condition": "item not in auditd_rules_files", "item": "20-neo23x0.rules", "skip_reason": "Conditional result was False"} 2025-09-09 21:03:17.772089 | centos-9-stream | --- before 2025-09-09 21:03:17.772103 | centos-9-stream | +++ after 2025-09-09 21:03:17.772115 | centos-9-stream | @@ -1,4 +1,4 @@ 2025-09-09 21:03:17.772126 | centos-9-stream | { 2025-09-09 21:03:17.772136 | centos-9-stream | "path": "/etc/audit/rules.d/audit.rules", 2025-09-09 21:03:17.772148 | centos-9-stream | - "state": "file" 2025-09-09 21:03:17.772159 | centos-9-stream | + "state": "absent" 2025-09-09 21:03:17.772169 | centos-9-stream | } 2025-09-09 21:03:17.772179 | centos-9-stream | 2025-09-09 21:03:17.772191 | centos-9-stream | changed: [molecule-auditd] => (item=audit.rules) => {"ansible_loop_var": "item", "changed": true, "item": "audit.rules", "path": "/etc/audit/rules.d/audit.rules", "state": "absent"} 2025-09-09 21:03:17.772202 | centos-9-stream | 2025-09-09 21:03:17.772213 | centos-9-stream | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2025-09-09 21:03:17.706719 | ubuntu-jammy | ok: [molecule-auditd] => {"changed": false, "enabled": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2025-09-09 21:03:10 UTC", "ActiveEnterTimestampMonotonic": "1512023263", "ActiveExitTimestamp": "n/a", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "system.slice local-fs.target systemd-tmpfiles-setup.service systemd-journald.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2025-09-09 21:03:10 UTC", "AssertTimestampMonotonic": "1511968236", "Before": "sysinit.target ssh.service systemd-update-utmp.service shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "52345000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2025-09-09 21:03:10 UTC", "ConditionTimestampMonotonic": "1511968161", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestamp": "n/a", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "1642", "ExecMainStartTimestamp": "Tue 2025-09-09 21:03:10 UTC", "ExecMainStartTimestampMonotonic": "1511994412", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2025-09-09 21:03:10 UTC] ; stop_time=[Tue 2025-09-09 21:03:10 UTC] ; pid=1641 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2025-09-09 21:03:10 UTC] ; stop_time=[Tue 2025-09-09 21:03:10 UTC] ; pid=1641 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2025-09-09 21:03:10 UTC] ; stop_time=[Tue 2025-09-09 21:03:10 UTC] ; pid=1645 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2025-09-09 21:03:10 UTC] ; stop_time=[Tue 2025-09-09 21:03:10 UTC] ; pid=1645 ; code=exited ; status=0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "n/a", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2025-09-09 21:03:10 UTC", "InactiveExitTimestampMonotonic": "1511970150", "InvocationID": "fe1115bc3c4f41b4a521dc1ff6e23ad8", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15337", "LimitNPROCSoft": "15337", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15337", "LimitSIGPENDINGSoft": "15337", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "1642", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "512000", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "yes", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Tue 2025-09-09 21:03:10 UTC", "StateChangeTimestampMonotonic": "1512023263", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4601", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestamp": "n/a", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2025-09-09 21:03:17.707705 | ubuntu-jammy | 2025-09-09 21:03:17.707733 | ubuntu-jammy | TASK [auditd : List existing rules files] ************************************** 2025-09-09 21:03:18.090614 | ubuntu-jammy | ok: [molecule-auditd] => {"changed": false, "cmd": ["find", "/etc/audit/rules.d", "-type", "f", "-printf", "%f\n"], "delta": "0:00:00.008994", "end": "2025-09-09 21:03:18.048635", "msg": "", "rc": 0, "start": "2025-09-09 21:03:18.039641", "stderr": "", "stderr_lines": [], "stdout": "20-neo23x0.rules\naudit.rules", "stdout_lines": ["20-neo23x0.rules", "audit.rules"]} 2025-09-09 21:03:18.090682 | ubuntu-jammy | 2025-09-09 21:03:18.090692 | ubuntu-jammy | TASK [auditd : Remove unmanaged rules files] *********************************** 2025-09-09 21:03:18.152712 | debian-bookworm | ok: [molecule-auditd] => {"changed": false, "enabled": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2025-09-09 21:03:11 UTC", "ActiveEnterTimestampMonotonic": "1060036843", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "systemd-tmpfiles-setup.service systemd-journald.socket system.slice local-fs.target", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2025-09-09 21:03:11 UTC", "AssertTimestampMonotonic": "1059959477", "Before": "systemd-update-utmp.service sysinit.target shutdown.target ssh.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "54564000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2025-09-09 21:03:11 UTC", "ConditionTimestampMonotonic": "1059959388", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3367", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2524", "ExecMainStartTimestamp": "Tue 2025-09-09 21:03:11 UTC", "ExecMainStartTimestampMonotonic": "1060006754", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2025-09-09 21:03:11 UTC] ; stop_time=[Tue 2025-09-09 21:03:11 UTC] ; pid=2523 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2025-09-09 21:03:11 UTC] ; stop_time=[Tue 2025-09-09 21:03:11 UTC] ; pid=2523 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2025-09-09 21:03:11 UTC] ; stop_time=[Tue 2025-09-09 21:03:11 UTC] ; pid=2527 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2025-09-09 21:03:11 UTC] ; stop_time=[Tue 2025-09-09 21:03:11 UTC] ; pid=2527 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2025-09-09 21:03:11 UTC", "InactiveExitTimestampMonotonic": "1059985948", "InvocationID": "8b0a2055c51b45e7b79d5831f2cf4626", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15481", "LimitNPROCSoft": "15481", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15481", "LimitSIGPENDINGSoft": "15481", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2524", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "720896", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Tue 2025-09-09 21:03:11 UTC", "StateChangeTimestampMonotonic": "1060036843", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2025-09-09 21:03:18.154741 | debian-bookworm | 2025-09-09 21:03:18.154824 | debian-bookworm | TASK [auditd : List existing rules files] ************************************** 2025-09-09 21:03:18.569058 | debian-bookworm | ok: [molecule-auditd] => {"changed": false, "cmd": ["find", "/etc/audit/rules.d", "-type", "f", "-printf", "%f\n"], "delta": "0:00:00.008705", "end": "2025-09-09 21:03:18.510931", "msg": "", "rc": 0, "start": "2025-09-09 21:03:18.502226", "stderr": "", "stderr_lines": [], "stdout": "20-neo23x0.rules\naudit.rules", "stdout_lines": ["20-neo23x0.rules", "audit.rules"]} 2025-09-09 21:03:18.569182 | debian-bookworm | 2025-09-09 21:03:18.569200 | debian-bookworm | TASK [auditd : Remove unmanaged rules files] *********************************** 2025-09-09 21:03:18.505345 | centos-9-stream | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"AccessSELinuxContext": "system_u:object_r:auditd_unit_file_t:s0", "ActiveEnterTimestamp": "Tue 2025-09-09 20:37:25 UTC", "ActiveEnterTimestampMonotonic": "4356324", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "systemd-journald.socket local-fs.target systemd-tmpfiles-setup.service system.slice", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2025-09-09 20:37:25 UTC", "AssertTimestampMonotonic": "4253585", "Before": "crond.service sysinit.target shutdown.target systemd-update-utmp.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "91668000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2025-09-09 20:37:25 UTC", "ConditionTimestampMonotonic": "4253548", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "2300", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "513", "ExecMainStartTimestamp": "Tue 2025-09-09 20:37:25 UTC", "ExecMainStartTimestampMonotonic": "4279162", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2025-09-09 20:37:25 UTC", "InactiveExitTimestampMonotonic": "4258103", "InvocationID": "526cfdb1be31462fb5c82634bcb3b420", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "infinity", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15466", "LimitNPROCSoft": "15466", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15466", "LimitSIGPENDINGSoft": "15466", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "513", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "3928064", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "6643712", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Tue 2025-09-09 20:37:25 UTC", "StateChangeTimestampMonotonic": "4356324", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "24745", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2025-09-09 21:03:18.509552 | centos-9-stream | 2025-09-09 21:03:18.509589 | centos-9-stream | RUNNING HANDLER [auditd : Generate auditd rules] ******************************* 2025-09-09 21:03:18.387360 | ubuntu-jammy | skipping: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": false, "false_condition": "item not in auditd_rules_files", "item": "20-neo23x0.rules", "skip_reason": "Conditional result was False"} 2025-09-09 21:03:18.387475 | ubuntu-jammy | --- before 2025-09-09 21:03:18.387495 | ubuntu-jammy | +++ after 2025-09-09 21:03:18.387508 | ubuntu-jammy | @@ -1,4 +1,4 @@ 2025-09-09 21:03:18.387522 | ubuntu-jammy | { 2025-09-09 21:03:18.387548 | ubuntu-jammy | "path": "/etc/audit/rules.d/audit.rules", 2025-09-09 21:03:18.387565 | ubuntu-jammy | - "state": "file" 2025-09-09 21:03:18.387579 | ubuntu-jammy | + "state": "absent" 2025-09-09 21:03:18.387592 | ubuntu-jammy | } 2025-09-09 21:03:18.387606 | ubuntu-jammy | 2025-09-09 21:03:18.387620 | ubuntu-jammy | changed: [molecule-auditd] => (item=audit.rules) => {"ansible_loop_var": "item", "changed": true, "item": "audit.rules", "path": "/etc/audit/rules.d/audit.rules", "state": "absent"} 2025-09-09 21:03:18.387635 | ubuntu-jammy | 2025-09-09 21:03:18.387648 | ubuntu-jammy | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2025-09-09 21:03:18.662273 | ubuntu-noble | --- before 2025-09-09 21:03:18.662508 | ubuntu-noble | +++ after: /home/zuul/.ansible/tmp/ansible-local-1878jxy9w9h2/tmpyv85ipua/20-neo23x0.rules.j2 2025-09-09 21:03:18.663034 | ubuntu-noble | @@ -0,0 +1,750 @@ 2025-09-09 21:03:18.663183 | ubuntu-noble | +# ___ ___ __ __ 2025-09-09 21:03:18.663409 | ubuntu-noble | +# / | __ ______/ (_) /_____/ / 2025-09-09 21:03:18.664133 | ubuntu-noble | +# / /| |/ / / / __ / / __/ __ / 2025-09-09 21:03:18.664271 | ubuntu-noble | +# / ___ / /_/ / /_/ / / /_/ /_/ / 2025-09-09 21:03:18.664388 | ubuntu-noble | +# /_/ |_\__,_/\__,_/_/\__/\__,_/ 2025-09-09 21:03:18.664518 | ubuntu-noble | +# 2025-09-09 21:03:18.667042 | ubuntu-noble | +# Linux Audit Daemon - Best Practice Configuration 2025-09-09 21:03:18.667207 | ubuntu-noble | +# /etc/audit/audit.rules 2025-09-09 21:03:18.667334 | ubuntu-noble | +# 2025-09-09 21:03:18.667458 | ubuntu-noble | +# Compiled by Florian Roth 2025-09-09 21:03:18.667574 | ubuntu-noble | +# 2025-09-09 21:03:18.667692 | ubuntu-noble | +# Created : 2017/12/05 2025-09-09 21:03:18.667875 | ubuntu-noble | +# Modified : 2023/01/25 2025-09-09 21:03:18.667995 | ubuntu-noble | +# 2025-09-09 21:03:18.668117 | ubuntu-noble | +# Based on rules published here: 2025-09-09 21:03:18.668236 | ubuntu-noble | +# Gov.uk auditd rules 2025-09-09 21:03:18.668529 | ubuntu-noble | +# https://github.com/gds-operations/puppet-auditd/pull/1 2025-09-09 21:03:18.668710 | ubuntu-noble | +# CentOS 7 hardening 2025-09-09 21:03:18.668988 | ubuntu-noble | +# https://highon.coffee/blog/security-harden-centos-7/#auditd---audit-daemon 2025-09-09 21:03:18.669165 | ubuntu-noble | +# Linux audit repo 2025-09-09 21:03:18.669340 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/tree/master/rules 2025-09-09 21:03:18.669505 | ubuntu-noble | +# Auditd high performance linux auditing 2025-09-09 21:03:18.669683 | ubuntu-noble | +# https://linux-audit.com/tuning-auditd-high-performance-linux-auditing/ 2025-09-09 21:03:18.669846 | ubuntu-noble | +# 2025-09-09 21:03:18.669971 | ubuntu-noble | +# Further rules 2025-09-09 21:03:18.670135 | ubuntu-noble | +# For PCI DSS compliance see: 2025-09-09 21:03:18.670314 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-pci-dss-v31.rules 2025-09-09 21:03:18.670473 | ubuntu-noble | +# For NISPOM compliance see: 2025-09-09 21:03:18.670646 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-nispom.rules 2025-09-09 21:03:18.670799 | ubuntu-noble | + 2025-09-09 21:03:18.670933 | ubuntu-noble | +# Remove any existing rules 2025-09-09 21:03:18.671048 | ubuntu-noble | +-D 2025-09-09 21:03:18.671162 | ubuntu-noble | + 2025-09-09 21:03:18.671280 | ubuntu-noble | +# Buffer Size 2025-09-09 21:03:18.671399 | ubuntu-noble | +## Feel free to increase this if the machine panic's 2025-09-09 21:03:18.671513 | ubuntu-noble | +-b 8192 2025-09-09 21:03:18.671822 | ubuntu-noble | + 2025-09-09 21:03:18.671834 | ubuntu-noble | +# Failure Mode 2025-09-09 21:03:18.671926 | ubuntu-noble | +## Possible values: 0 (silent), 1 (printk, print a failure message), 2 (panic, halt the system) 2025-09-09 21:03:18.672044 | ubuntu-noble | +-f 1 2025-09-09 21:03:18.672157 | ubuntu-noble | + 2025-09-09 21:03:18.672272 | ubuntu-noble | +# Ignore errors 2025-09-09 21:03:18.672390 | ubuntu-noble | +## e.g. caused by users or files not found in the local environment 2025-09-09 21:03:18.672503 | ubuntu-noble | +-i 2025-09-09 21:03:18.672612 | ubuntu-noble | + 2025-09-09 21:03:18.672729 | ubuntu-noble | +# Self Auditing --------------------------------------------------------------- 2025-09-09 21:03:18.672938 | ubuntu-noble | + 2025-09-09 21:03:18.673070 | ubuntu-noble | +## Audit the audit logs 2025-09-09 21:03:18.673196 | ubuntu-noble | +### Successful and unsuccessful attempts to read information from the audit records 2025-09-09 21:03:18.673313 | ubuntu-noble | +-w /var/log/audit/ -p wra -k auditlog 2025-09-09 21:03:18.673818 | ubuntu-noble | +-w /var/audit/ -p wra -k auditlog 2025-09-09 21:03:18.673830 | ubuntu-noble | + 2025-09-09 21:03:18.673834 | ubuntu-noble | +## Auditd configuration 2025-09-09 21:03:18.673838 | ubuntu-noble | +### Modifications to audit configuration that occur while the audit collection functions are operating 2025-09-09 21:03:18.673919 | ubuntu-noble | +-w /etc/audit/ -p wa -k auditconfig 2025-09-09 21:03:18.674040 | ubuntu-noble | +-w /etc/libaudit.conf -p wa -k auditconfig 2025-09-09 21:03:18.674157 | ubuntu-noble | +-w /etc/audisp/ -p wa -k audispconfig 2025-09-09 21:03:18.674267 | ubuntu-noble | + 2025-09-09 21:03:18.674383 | ubuntu-noble | +## Monitor for use of audit management tools 2025-09-09 21:03:18.674500 | ubuntu-noble | +-w /sbin/auditctl -p x -k audittools 2025-09-09 21:03:18.674617 | ubuntu-noble | +-w /sbin/auditd -p x -k audittools 2025-09-09 21:03:18.674734 | ubuntu-noble | +-w /usr/sbin/auditd -p x -k audittools 2025-09-09 21:03:18.674891 | ubuntu-noble | +-w /usr/sbin/augenrules -p x -k audittools 2025-09-09 21:03:18.675008 | ubuntu-noble | + 2025-09-09 21:03:18.675125 | ubuntu-noble | +## Access to all audit trails 2025-09-09 21:03:18.675235 | ubuntu-noble | + 2025-09-09 21:03:18.675356 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/ausearch -F perm=x -k audittools 2025-09-09 21:03:18.675475 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aureport -F perm=x -k audittools 2025-09-09 21:03:18.675597 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aulast -F perm=x -k audittools 2025-09-09 21:03:18.675718 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aulastlogin -F perm=x -k audittools 2025-09-09 21:03:18.675870 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/auvirt -F perm=x -k audittools 2025-09-09 21:03:18.675989 | ubuntu-noble | + 2025-09-09 21:03:18.676106 | ubuntu-noble | +# Filters --------------------------------------------------------------------- 2025-09-09 21:03:18.676218 | ubuntu-noble | + 2025-09-09 21:03:18.676358 | ubuntu-noble | +### We put these early because audit is a first match wins system. 2025-09-09 21:03:18.676469 | ubuntu-noble | + 2025-09-09 21:03:18.676587 | ubuntu-noble | +## Ignore SELinux AVC records 2025-09-09 21:03:18.676705 | ubuntu-noble | +-a always,exclude -F msgtype=AVC 2025-09-09 21:03:18.676879 | ubuntu-noble | + 2025-09-09 21:03:18.677791 | ubuntu-noble | +## Ignore current working directory records 2025-09-09 21:03:18.677805 | ubuntu-noble | +-a always,exclude -F msgtype=CWD 2025-09-09 21:03:18.677809 | ubuntu-noble | + 2025-09-09 21:03:18.677813 | ubuntu-noble | +## Cron jobs fill the logs with stuff we normally don't want (works with SELinux) 2025-09-09 21:03:18.677817 | ubuntu-noble | +-a never,user -F subj_type=crond_t 2025-09-09 21:03:18.677821 | ubuntu-noble | +-a never,exit -F subj_type=crond_t 2025-09-09 21:03:18.677824 | ubuntu-noble | + 2025-09-09 21:03:18.677827 | ubuntu-noble | +## This prevents chrony from overwhelming the logs 2025-09-09 21:03:18.677900 | ubuntu-noble | +-a never,exit -F arch=b64 -S adjtimex -F auid=-1 -F uid=chrony -F subj_type=chronyd_t 2025-09-09 21:03:18.678015 | ubuntu-noble | + 2025-09-09 21:03:18.678147 | ubuntu-noble | +## This is not very interesting and wastes a lot of space if the server is public facing 2025-09-09 21:03:18.678271 | ubuntu-noble | +-a always,exclude -F msgtype=CRYPTO_KEY_USER 2025-09-09 21:03:18.678382 | ubuntu-noble | + 2025-09-09 21:03:18.678500 | ubuntu-noble | +## Open VM Tools 2025-09-09 21:03:18.678621 | ubuntu-noble | +-a exit,never -F arch=b64 -S all -F exe=/usr/bin/vmtoolsd 2025-09-09 21:03:18.678731 | ubuntu-noble | + 2025-09-09 21:03:18.678882 | ubuntu-noble | +## High Volume Event Filter (especially on Linux Workstations) 2025-09-09 21:03:18.679012 | ubuntu-noble | +-a never,exit -F arch=b64 -F dir=/dev/shm -k sharedmemaccess 2025-09-09 21:03:18.679135 | ubuntu-noble | +-a never,exit -F arch=b64 -F dir=/var/lock/lvm -k locklvm 2025-09-09 21:03:18.679246 | ubuntu-noble | + 2025-09-09 21:03:18.679360 | ubuntu-noble | +## FileBeat 2025-09-09 21:03:18.679480 | ubuntu-noble | +-a never,exit -F arch=b64 -F path=/opt/filebeat -k filebeat 2025-09-09 21:03:18.679592 | ubuntu-noble | + 2025-09-09 21:03:18.679710 | ubuntu-noble | +## More information on how to filter events 2025-09-09 21:03:18.679880 | ubuntu-noble | +### https://access.redhat.com/solutions/2482221 2025-09-09 21:03:18.679999 | ubuntu-noble | + 2025-09-09 21:03:18.680119 | ubuntu-noble | +# Rules ----------------------------------------------------------------------- 2025-09-09 21:03:18.680230 | ubuntu-noble | + 2025-09-09 21:03:18.680349 | ubuntu-noble | +## Kernel parameters 2025-09-09 21:03:18.680468 | ubuntu-noble | +-w /etc/sysctl.conf -p wa -k sysctl 2025-09-09 21:03:18.680583 | ubuntu-noble | +-w /etc/sysctl.d -p wa -k sysctl 2025-09-09 21:03:18.680693 | ubuntu-noble | + 2025-09-09 21:03:18.680834 | ubuntu-noble | +## Kernel module loading and unloading 2025-09-09 21:03:18.680963 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/insmod -k modules 2025-09-09 21:03:18.681086 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/modprobe -k modules 2025-09-09 21:03:18.681207 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/rmmod -k modules 2025-09-09 21:03:18.681333 | ubuntu-noble | +-a always,exit -F arch=b64 -S finit_module -S init_module -S delete_module -F auid!=-1 -k modules 2025-09-09 21:03:18.681445 | ubuntu-noble | + 2025-09-09 21:03:18.681562 | ubuntu-noble | +## Modprobe configuration 2025-09-09 21:03:18.681680 | ubuntu-noble | +-w /etc/modprobe.conf -p wa -k modprobe 2025-09-09 21:03:18.681845 | ubuntu-noble | +-w /etc/modprobe.d -p wa -k modprobe 2025-09-09 21:03:18.681964 | ubuntu-noble | + 2025-09-09 21:03:18.682082 | ubuntu-noble | +## KExec usage (all actions) 2025-09-09 21:03:18.682204 | ubuntu-noble | +-a always,exit -F arch=b64 -S kexec_load -k KEXEC 2025-09-09 21:03:18.682314 | ubuntu-noble | + 2025-09-09 21:03:18.682428 | ubuntu-noble | +## Special files 2025-09-09 21:03:18.682548 | ubuntu-noble | +-a always,exit -F arch=b64 -S mknod -S mknodat -k specialfiles 2025-09-09 21:03:18.682660 | ubuntu-noble | + 2025-09-09 21:03:18.682810 | ubuntu-noble | +## Mount operations (only attributable) 2025-09-09 21:03:18.682943 | ubuntu-noble | +-a always,exit -F arch=b64 -S mount -S umount2 -F auid!=-1 -k mount 2025-09-09 21:03:18.683058 | ubuntu-noble | + 2025-09-09 21:03:18.683195 | ubuntu-noble | +### NFS mount 2025-09-09 21:03:18.683345 | ubuntu-noble | +-a always,exit -F path=/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-09 21:03:18.683483 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-09 21:03:18.683606 | ubuntu-noble | + 2025-09-09 21:03:18.683750 | ubuntu-noble | +## Change swap (only attributable) 2025-09-09 21:03:18.684822 | ubuntu-noble | +-a always,exit -F arch=b64 -S swapon -S swapoff -F auid!=-1 -k swap 2025-09-09 21:03:18.684872 | ubuntu-noble | + 2025-09-09 21:03:18.684878 | ubuntu-noble | +## Time 2025-09-09 21:03:18.684882 | ubuntu-noble | +-a always,exit -F arch=b64 -F uid!=ntp -S adjtimex -S settimeofday -S clock_settime -k time 2025-09-09 21:03:18.684886 | ubuntu-noble | +### Local time zone 2025-09-09 21:03:18.685034 | ubuntu-noble | +-w /etc/localtime -p wa -k localtime 2025-09-09 21:03:18.685163 | ubuntu-noble | + 2025-09-09 21:03:18.685301 | ubuntu-noble | +## Stunnel 2025-09-09 21:03:18.685461 | ubuntu-noble | +-w /usr/sbin/stunnel -p x -k stunnel 2025-09-09 21:03:18.685614 | ubuntu-noble | +-w /usr/bin/stunnel -p x -k stunnel 2025-09-09 21:03:18.685827 | ubuntu-noble | + 2025-09-09 21:03:18.685981 | ubuntu-noble | +## Cron configuration & scheduled jobs 2025-09-09 21:03:18.686125 | ubuntu-noble | +-w /etc/cron.allow -p wa -k cron 2025-09-09 21:03:18.686260 | ubuntu-noble | +-w /etc/cron.deny -p wa -k cron 2025-09-09 21:03:18.686382 | ubuntu-noble | +-w /etc/cron.d/ -p wa -k cron 2025-09-09 21:03:18.686503 | ubuntu-noble | +-w /etc/cron.daily/ -p wa -k cron 2025-09-09 21:03:18.686673 | ubuntu-noble | +-w /etc/cron.hourly/ -p wa -k cron 2025-09-09 21:03:18.686895 | ubuntu-noble | +-w /etc/cron.monthly/ -p wa -k cron 2025-09-09 21:03:18.687027 | ubuntu-noble | +-w /etc/cron.weekly/ -p wa -k cron 2025-09-09 21:03:18.687147 | ubuntu-noble | +-w /etc/crontab -p wa -k cron 2025-09-09 21:03:18.687269 | ubuntu-noble | +-w /var/spool/cron/ -p wa -k cron 2025-09-09 21:03:18.687387 | ubuntu-noble | + 2025-09-09 21:03:18.687535 | ubuntu-noble | +## User, group, password databases 2025-09-09 21:03:18.687663 | ubuntu-noble | +-w /etc/group -p wa -k etcgroup 2025-09-09 21:03:18.687817 | ubuntu-noble | +-w /etc/passwd -p wa -k etcpasswd 2025-09-09 21:03:18.687945 | ubuntu-noble | +-w /etc/gshadow -k etcgroup 2025-09-09 21:03:18.688062 | ubuntu-noble | +-w /etc/shadow -k etcpasswd 2025-09-09 21:03:18.688181 | ubuntu-noble | +-w /etc/security/opasswd -k opasswd 2025-09-09 21:03:18.688294 | ubuntu-noble | + 2025-09-09 21:03:18.688414 | ubuntu-noble | +## Sudoers file changes 2025-09-09 21:03:18.688533 | ubuntu-noble | +-w /etc/sudoers -p wa -k actions 2025-09-09 21:03:18.688652 | ubuntu-noble | +-w /etc/sudoers.d/ -p wa -k actions 2025-09-09 21:03:18.688791 | ubuntu-noble | + 2025-09-09 21:03:18.688916 | ubuntu-noble | +## Passwd 2025-09-09 21:03:18.689042 | ubuntu-noble | +-w /usr/bin/passwd -p x -k passwd_modification 2025-09-09 21:03:18.689157 | ubuntu-noble | + 2025-09-09 21:03:18.689278 | ubuntu-noble | +## Tools to change group identifiers 2025-09-09 21:03:18.689400 | ubuntu-noble | +-w /usr/sbin/groupadd -p x -k group_modification 2025-09-09 21:03:18.689524 | ubuntu-noble | +-w /usr/sbin/groupmod -p x -k group_modification 2025-09-09 21:03:18.689645 | ubuntu-noble | +-w /usr/sbin/addgroup -p x -k group_modification 2025-09-09 21:03:18.689825 | ubuntu-noble | +-w /usr/sbin/useradd -p x -k user_modification 2025-09-09 21:03:18.689961 | ubuntu-noble | +-w /usr/sbin/userdel -p x -k user_modification 2025-09-09 21:03:18.690082 | ubuntu-noble | +-w /usr/sbin/usermod -p x -k user_modification 2025-09-09 21:03:18.690201 | ubuntu-noble | +-w /usr/sbin/adduser -p x -k user_modification 2025-09-09 21:03:18.690314 | ubuntu-noble | + 2025-09-09 21:03:18.690437 | ubuntu-noble | +## Login configuration and information 2025-09-09 21:03:18.690559 | ubuntu-noble | +-w /etc/login.defs -p wa -k login 2025-09-09 21:03:18.690684 | ubuntu-noble | +-w /etc/securetty -p wa -k login 2025-09-09 21:03:18.691805 | ubuntu-noble | +-w /var/log/faillog -p wa -k login 2025-09-09 21:03:18.691825 | ubuntu-noble | +-w /var/log/lastlog -p wa -k login 2025-09-09 21:03:18.691829 | ubuntu-noble | +-w /var/log/tallylog -p wa -k login 2025-09-09 21:03:18.691832 | ubuntu-noble | + 2025-09-09 21:03:18.691836 | ubuntu-noble | +## Network Environment 2025-09-09 21:03:18.691839 | ubuntu-noble | +### Changes to hostname 2025-09-09 21:03:18.691843 | ubuntu-noble | +-a always,exit -F arch=b64 -S sethostname -S setdomainname -k network_modifications 2025-09-09 21:03:18.691847 | ubuntu-noble | + 2025-09-09 21:03:18.691950 | ubuntu-noble | +### Detect Remote Shell Use 2025-09-09 21:03:18.692093 | ubuntu-noble | +-a always,exit -F arch=b64 -F exe=/bin/bash -F success=1 -S connect -k "remote_shell" 2025-09-09 21:03:18.692240 | ubuntu-noble | +-a always,exit -F arch=b64 -F exe=/usr/bin/bash -F success=1 -S connect -k "remote_shell" 2025-09-09 21:03:18.692358 | ubuntu-noble | + 2025-09-09 21:03:18.692479 | ubuntu-noble | +### Successful IPv4 Connections 2025-09-09 21:03:18.692607 | ubuntu-noble | +-a always,exit -F arch=b64 -S connect -F a2=16 -F success=1 -F key=network_connect_4 2025-09-09 21:03:18.692724 | ubuntu-noble | + 2025-09-09 21:03:18.692907 | ubuntu-noble | +### Successful IPv6 Connections 2025-09-09 21:03:18.693067 | ubuntu-noble | +-a always,exit -F arch=b64 -S connect -F a2=28 -F success=1 -F key=network_connect_6 2025-09-09 21:03:18.693183 | ubuntu-noble | + 2025-09-09 21:03:18.693316 | ubuntu-noble | +### Changes to other files 2025-09-09 21:03:18.693436 | ubuntu-noble | +-w /etc/hosts -p wa -k network_modifications 2025-09-09 21:03:18.693558 | ubuntu-noble | +-w /etc/sysconfig/network -p wa -k network_modifications 2025-09-09 21:03:18.693677 | ubuntu-noble | +-w /etc/sysconfig/network-scripts -p w -k network_modifications 2025-09-09 21:03:18.693836 | ubuntu-noble | +-w /etc/network/ -p wa -k network 2025-09-09 21:03:18.693965 | ubuntu-noble | +-a always,exit -F dir=/etc/NetworkManager/ -F perm=wa -k network_modifications 2025-09-09 21:03:18.694077 | ubuntu-noble | + 2025-09-09 21:03:18.694196 | ubuntu-noble | +### Changes to issue 2025-09-09 21:03:18.694316 | ubuntu-noble | +-w /etc/issue -p wa -k etcissue 2025-09-09 21:03:18.694434 | ubuntu-noble | +-w /etc/issue.net -p wa -k etcissue 2025-09-09 21:03:18.694547 | ubuntu-noble | + 2025-09-09 21:03:18.694666 | ubuntu-noble | +## System startup scripts 2025-09-09 21:03:18.694809 | ubuntu-noble | +-w /etc/inittab -p wa -k init 2025-09-09 21:03:18.694931 | ubuntu-noble | +-w /etc/init.d/ -p wa -k init 2025-09-09 21:03:18.695048 | ubuntu-noble | +-w /etc/init/ -p wa -k init 2025-09-09 21:03:18.695162 | ubuntu-noble | + 2025-09-09 21:03:18.695283 | ubuntu-noble | +## Library search paths 2025-09-09 21:03:18.695402 | ubuntu-noble | +-w /etc/ld.so.conf -p wa -k libpath 2025-09-09 21:03:18.695548 | ubuntu-noble | +-w /etc/ld.so.conf.d -p wa -k libpath 2025-09-09 21:03:18.695664 | ubuntu-noble | + 2025-09-09 21:03:18.695838 | ubuntu-noble | +## Systemwide library preloads (LD_PRELOAD) 2025-09-09 21:03:18.695967 | ubuntu-noble | +-w /etc/ld.so.preload -p wa -k systemwide_preloads 2025-09-09 21:03:18.696079 | ubuntu-noble | + 2025-09-09 21:03:18.696200 | ubuntu-noble | +## Pam configuration 2025-09-09 21:03:18.696348 | ubuntu-noble | +-w /etc/pam.d/ -p wa -k pam 2025-09-09 21:03:18.696478 | ubuntu-noble | +-w /etc/security/limits.conf -p wa -k pam 2025-09-09 21:03:18.696598 | ubuntu-noble | +-w /etc/security/limits.d -p wa -k pam 2025-09-09 21:03:18.696729 | ubuntu-noble | +-w /etc/security/pam_env.conf -p wa -k pam 2025-09-09 21:03:18.696882 | ubuntu-noble | +-w /etc/security/namespace.conf -p wa -k pam 2025-09-09 21:03:18.697006 | ubuntu-noble | +-w /etc/security/namespace.d -p wa -k pam 2025-09-09 21:03:18.697125 | ubuntu-noble | +-w /etc/security/namespace.init -p wa -k pam 2025-09-09 21:03:18.697239 | ubuntu-noble | + 2025-09-09 21:03:18.697358 | ubuntu-noble | +## Mail configuration 2025-09-09 21:03:18.697476 | ubuntu-noble | +-w /etc/aliases -p wa -k mail 2025-09-09 21:03:18.697595 | ubuntu-noble | +-w /etc/postfix/ -p wa -k mail 2025-09-09 21:03:18.697710 | ubuntu-noble | +-w /etc/exim4/ -p wa -k mail 2025-09-09 21:03:18.697853 | ubuntu-noble | + 2025-09-09 21:03:18.697978 | ubuntu-noble | +## SSH configuration 2025-09-09 21:03:18.698120 | ubuntu-noble | +-w /etc/ssh/sshd_config -k sshd 2025-09-09 21:03:18.698243 | ubuntu-noble | +-w /etc/ssh/sshd_config.d -k sshd 2025-09-09 21:03:18.698358 | ubuntu-noble | + 2025-09-09 21:03:18.698478 | ubuntu-noble | +## root ssh key tampering 2025-09-09 21:03:18.698595 | ubuntu-noble | +-w /root/.ssh -p wa -k rootkey 2025-09-09 21:03:18.698707 | ubuntu-noble | + 2025-09-09 21:03:18.698883 | ubuntu-noble | +# Systemd 2025-09-09 21:03:18.699036 | ubuntu-noble | +-w /bin/systemctl -p x -k systemd 2025-09-09 21:03:18.699156 | ubuntu-noble | +-w /etc/systemd/ -p wa -k systemd 2025-09-09 21:03:18.699274 | ubuntu-noble | +-w /usr/lib/systemd -p wa -k systemd 2025-09-09 21:03:18.699389 | ubuntu-noble | + 2025-09-09 21:03:18.700795 | ubuntu-noble | +## https://systemd.network/systemd.generator.html 2025-09-09 21:03:18.700813 | ubuntu-noble | +-w /etc/systemd/system-generators/ -p wa -k systemd_generator 2025-09-09 21:03:18.700818 | ubuntu-noble | +-w /usr/local/lib/systemd/system-generators/ -p wa -k systemd_generator 2025-09-09 21:03:18.700822 | ubuntu-noble | +-w /usr/lib/systemd/system-generators -p wa -k systemd_generator 2025-09-09 21:03:18.700826 | ubuntu-noble | + 2025-09-09 21:03:18.700830 | ubuntu-noble | +-w /etc/systemd/user-generators/ -p wa -k systemd_generator 2025-09-09 21:03:18.700834 | ubuntu-noble | +-w /usr/local/lib/systemd/user-generators/ -p wa -k systemd_generator 2025-09-09 21:03:18.700837 | ubuntu-noble | +-w /lib/systemd/system-generators/ -p wa -k systemd_generator 2025-09-09 21:03:18.700841 | ubuntu-noble | + 2025-09-09 21:03:18.700844 | ubuntu-noble | +## SELinux events that modify the system's Mandatory Access Controls (MAC) 2025-09-09 21:03:18.700848 | ubuntu-noble | +-w /etc/selinux/ -p wa -k mac_policy 2025-09-09 21:03:18.700851 | ubuntu-noble | + 2025-09-09 21:03:18.700854 | ubuntu-noble | +## Critical elements access failures 2025-09-09 21:03:18.700956 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/etc -F success=0 -k unauthedfileaccess 2025-09-09 21:03:18.701084 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/bin -F success=0 -k unauthedfileaccess 2025-09-09 21:03:18.701209 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/sbin -F success=0 -k unauthedfileaccess 2025-09-09 21:03:18.701358 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/usr/bin -F success=0 -k unauthedfileaccess 2025-09-09 21:03:18.701485 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/usr/sbin -F success=0 -k unauthedfileaccess 2025-09-09 21:03:18.701610 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/var -F success=0 -k unauthedfileaccess 2025-09-09 21:03:18.701736 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/home -F success=0 -k unauthedfileaccess 2025-09-09 21:03:18.701939 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/srv -F success=0 -k unauthedfileaccess 2025-09-09 21:03:18.702063 | ubuntu-noble | + 2025-09-09 21:03:18.702187 | ubuntu-noble | +## Process ID change (switching accounts) applications 2025-09-09 21:03:18.702307 | ubuntu-noble | +-w /bin/su -p x -k priv_esc 2025-09-09 21:03:18.702428 | ubuntu-noble | +-w /usr/bin/sudo -p x -k priv_esc 2025-09-09 21:03:18.702545 | ubuntu-noble | + 2025-09-09 21:03:18.702663 | ubuntu-noble | +## Power state 2025-09-09 21:03:18.702810 | ubuntu-noble | +-w /sbin/shutdown -p x -k power 2025-09-09 21:03:18.702933 | ubuntu-noble | +-w /sbin/poweroff -p x -k power 2025-09-09 21:03:18.703052 | ubuntu-noble | +-w /sbin/reboot -p x -k power 2025-09-09 21:03:18.703171 | ubuntu-noble | +-w /sbin/halt -p x -k power 2025-09-09 21:03:18.703283 | ubuntu-noble | + 2025-09-09 21:03:18.703400 | ubuntu-noble | +## Session initiation information 2025-09-09 21:03:18.704603 | ubuntu-noble | +-w /var/run/utmp -p wa -k session 2025-09-09 21:03:18.704751 | ubuntu-noble | +-w /var/log/btmp -p wa -k session 2025-09-09 21:03:18.704909 | ubuntu-noble | +-w /var/log/wtmp -p wa -k session 2025-09-09 21:03:18.705030 | ubuntu-noble | + 2025-09-09 21:03:18.705362 | ubuntu-noble | +## Discretionary Access Control (DAC) modifications 2025-09-09 21:03:18.705494 | ubuntu-noble | +-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:18.705618 | ubuntu-noble | +-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:18.705743 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:18.705915 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:18.706051 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:18.706177 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:18.706308 | ubuntu-noble | +-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:18.706430 | ubuntu-noble | +-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:18.706552 | ubuntu-noble | +-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:18.706678 | ubuntu-noble | +-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:18.706864 | ubuntu-noble | +-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:18.707885 | ubuntu-noble | +-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:18.708291 | ubuntu-noble | +-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-09 21:03:18.708509 | ubuntu-noble | + 2025-09-09 21:03:18.708638 | ubuntu-noble | +# Special Rules --------------------------------------------------------------- 2025-09-09 21:03:18.708752 | ubuntu-noble | + 2025-09-09 21:03:18.708941 | ubuntu-noble | +## Reconnaissance 2025-09-09 21:03:18.709070 | ubuntu-noble | +-w /usr/bin/whoami -p x -k recon 2025-09-09 21:03:18.709188 | ubuntu-noble | +-w /usr/bin/id -p x -k recon 2025-09-09 21:03:18.709306 | ubuntu-noble | +-w /bin/hostname -p x -k recon 2025-09-09 21:03:18.709426 | ubuntu-noble | +-w /bin/uname -p x -k recon 2025-09-09 21:03:18.709542 | ubuntu-noble | +-w /etc/issue -p r -k recon 2025-09-09 21:03:18.709659 | ubuntu-noble | +-w /etc/hostname -p r -k recon 2025-09-09 21:03:18.710065 | ubuntu-noble | + 2025-09-09 21:03:18.710239 | ubuntu-noble | +## Suspicious activity 2025-09-09 21:03:18.710368 | ubuntu-noble | +-w /usr/bin/wget -p x -k susp_activity 2025-09-09 21:03:18.710488 | ubuntu-noble | +-w /usr/bin/curl -p x -k susp_activity 2025-09-09 21:03:18.710607 | ubuntu-noble | +-w /usr/bin/base64 -p x -k susp_activity 2025-09-09 21:03:18.710726 | ubuntu-noble | +-w /bin/nc -p x -k susp_activity 2025-09-09 21:03:18.710893 | ubuntu-noble | +-w /bin/netcat -p x -k susp_activity 2025-09-09 21:03:18.711018 | ubuntu-noble | +-w /usr/bin/ncat -p x -k susp_activity 2025-09-09 21:03:18.711135 | ubuntu-noble | +-w /usr/bin/ss -p x -k susp_activity 2025-09-09 21:03:18.711270 | ubuntu-noble | +-w /usr/bin/netstat -p x -k susp_activity 2025-09-09 21:03:18.711392 | ubuntu-noble | +-w /usr/bin/ssh -p x -k susp_activity 2025-09-09 21:03:18.712823 | ubuntu-noble | +-w /usr/bin/scp -p x -k susp_activity 2025-09-09 21:03:18.712845 | ubuntu-noble | +-w /usr/bin/sftp -p x -k susp_activity 2025-09-09 21:03:18.712849 | ubuntu-noble | +-w /usr/bin/ftp -p x -k susp_activity 2025-09-09 21:03:18.712858 | ubuntu-noble | +-w /usr/bin/socat -p x -k susp_activity 2025-09-09 21:03:18.712862 | ubuntu-noble | +-w /usr/bin/wireshark -p x -k susp_activity 2025-09-09 21:03:18.712865 | ubuntu-noble | +-w /usr/bin/tshark -p x -k susp_activity 2025-09-09 21:03:18.712868 | ubuntu-noble | +-w /usr/bin/rawshark -p x -k susp_activity 2025-09-09 21:03:18.712872 | ubuntu-noble | +-w /usr/bin/rdesktop -p x -k susp_activity 2025-09-09 21:03:18.712875 | ubuntu-noble | +-w /usr/local/bin/rdesktop -p x -k susp_activity 2025-09-09 21:03:18.712879 | ubuntu-noble | +-w /usr/bin/wlfreerdp -p x -k susp_activity 2025-09-09 21:03:18.713047 | ubuntu-noble | +-w /usr/bin/xfreerdp -p x -k susp_activity 2025-09-09 21:03:18.713199 | ubuntu-noble | +-w /usr/local/bin/xfreerdp -p x -k susp_activity 2025-09-09 21:03:18.713319 | ubuntu-noble | +-w /usr/bin/nmap -p x -k susp_activity 2025-09-09 21:03:18.713437 | ubuntu-noble | + 2025-09-09 21:03:18.713553 | ubuntu-noble | +## sssd 2025-09-09 21:03:18.713691 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/p11_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-09 21:03:18.713875 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/krb5_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-09 21:03:18.714016 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/ldap_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-09 21:03:18.714146 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/selinux_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-09 21:03:18.714276 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/proxy_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-09 21:03:18.714388 | ubuntu-noble | + 2025-09-09 21:03:18.714505 | ubuntu-noble | +## T1002 Data Compressed 2025-09-09 21:03:18.714620 | ubuntu-noble | + 2025-09-09 21:03:18.714745 | ubuntu-noble | +-w /usr/bin/zip -p x -k Data_Compressed 2025-09-09 21:03:18.714953 | ubuntu-noble | +-w /usr/bin/gzip -p x -k Data_Compressed 2025-09-09 21:03:18.715083 | ubuntu-noble | +-w /usr/bin/tar -p x -k Data_Compressed 2025-09-09 21:03:18.715211 | ubuntu-noble | +-w /usr/bin/bzip2 -p x -k Data_Compressed 2025-09-09 21:03:18.715326 | ubuntu-noble | + 2025-09-09 21:03:18.715443 | ubuntu-noble | +-w /usr/bin/lzip -p x -k Data_Compressed 2025-09-09 21:03:18.715563 | ubuntu-noble | +-w /usr/local/bin/lzip -p x -k Data_Compressed 2025-09-09 21:03:18.715675 | ubuntu-noble | + 2025-09-09 21:03:18.715834 | ubuntu-noble | +-w /usr/bin/lz4 -p x -k Data_Compressed 2025-09-09 21:03:18.715964 | ubuntu-noble | +-w /usr/local/bin/lz4 -p x -k Data_Compressed 2025-09-09 21:03:18.716077 | ubuntu-noble | + 2025-09-09 21:03:18.716198 | ubuntu-noble | +-w /usr/bin/lzop -p x -k Data_Compressed 2025-09-09 21:03:18.716318 | ubuntu-noble | +-w /usr/local/bin/lzop -p x -k Data_Compressed 2025-09-09 21:03:18.716429 | ubuntu-noble | + 2025-09-09 21:03:18.716550 | ubuntu-noble | +-w /usr/bin/plzip -p x -k Data_Compressed 2025-09-09 21:03:18.716670 | ubuntu-noble | +-w /usr/local/bin/plzip -p x -k Data_Compressed 2025-09-09 21:03:18.716839 | ubuntu-noble | + 2025-09-09 21:03:18.716971 | ubuntu-noble | +-w /usr/bin/pbzip2 -p x -k Data_Compressed 2025-09-09 21:03:18.717094 | ubuntu-noble | +-w /usr/local/bin/pbzip2 -p x -k Data_Compressed 2025-09-09 21:03:18.717208 | ubuntu-noble | + 2025-09-09 21:03:18.717331 | ubuntu-noble | +-w /usr/bin/lbzip2 -p x -k Data_Compressed 2025-09-09 21:03:18.717451 | ubuntu-noble | +-w /usr/local/bin/lbzip2 -p x -k Data_Compressed 2025-09-09 21:03:18.717561 | ubuntu-noble | + 2025-09-09 21:03:18.717682 | ubuntu-noble | +-w /usr/bin/pixz -p x -k Data_Compressed 2025-09-09 21:03:18.717834 | ubuntu-noble | +-w /usr/local/bin/pixz -p x -k Data_Compressed 2025-09-09 21:03:18.717953 | ubuntu-noble | + 2025-09-09 21:03:18.718079 | ubuntu-noble | +-w /usr/bin/pigz -p x -k Data_Compressed 2025-09-09 21:03:18.718199 | ubuntu-noble | +-w /usr/local/bin/pigz -p x -k Data_Compressed 2025-09-09 21:03:18.718319 | ubuntu-noble | +-w /usr/bin/unpigz -p x -k Data_Compressed 2025-09-09 21:03:18.718443 | ubuntu-noble | +-w /usr/local/bin/unpigz -p x -k Data_Compressed 2025-09-09 21:03:18.718556 | ubuntu-noble | + 2025-09-09 21:03:18.718675 | ubuntu-noble | +-w /usr/bin/zstd -p x -k Data_Compressed 2025-09-09 21:03:18.718831 | ubuntu-noble | +-w /usr/local/bin/zstd -p x -k Data_Compressed 2025-09-09 21:03:18.718963 | ubuntu-noble | + 2025-09-09 21:03:18.719083 | ubuntu-noble | +## Added to catch netcat on Ubuntu 2025-09-09 21:03:18.720810 | ubuntu-noble | +-w /bin/nc.openbsd -p x -k susp_activity 2025-09-09 21:03:18.720828 | ubuntu-noble | +-w /bin/nc.traditional -p x -k susp_activity 2025-09-09 21:03:18.720832 | ubuntu-noble | + 2025-09-09 21:03:18.720835 | ubuntu-noble | +## Sbin suspicious activity 2025-09-09 21:03:18.720839 | ubuntu-noble | +-w /sbin/iptables -p x -k sbin_susp 2025-09-09 21:03:18.720842 | ubuntu-noble | +-w /sbin/ip6tables -p x -k sbin_susp 2025-09-09 21:03:18.720846 | ubuntu-noble | +-w /sbin/ifconfig -p x -k sbin_susp 2025-09-09 21:03:18.720849 | ubuntu-noble | +-w /usr/sbin/arptables -p x -k sbin_susp 2025-09-09 21:03:18.720852 | ubuntu-noble | +-w /usr/sbin/ebtables -p x -k sbin_susp 2025-09-09 21:03:18.720855 | ubuntu-noble | +-w /sbin/xtables-nft-multi -p x -k sbin_susp 2025-09-09 21:03:18.720859 | ubuntu-noble | +-w /usr/sbin/nft -p x -k sbin_susp 2025-09-09 21:03:18.720862 | ubuntu-noble | +-w /usr/sbin/tcpdump -p x -k sbin_susp 2025-09-09 21:03:18.720865 | ubuntu-noble | +-w /usr/sbin/traceroute -p x -k sbin_susp 2025-09-09 21:03:18.720869 | ubuntu-noble | +-w /usr/sbin/ufw -p x -k sbin_susp 2025-09-09 21:03:18.720872 | ubuntu-noble | + 2025-09-09 21:03:18.720875 | ubuntu-noble | +### kde4 2025-09-09 21:03:18.720955 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/kde4/kpac_dhcp_helper -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-09 21:03:18.721094 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/kde4/kdesud -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-09 21:03:18.721209 | ubuntu-noble | + 2025-09-09 21:03:18.721331 | ubuntu-noble | +## dbus-send invocation 2025-09-09 21:03:18.721454 | ubuntu-noble | +### may indicate privilege escalation CVE-2021-3560 2025-09-09 21:03:18.721573 | ubuntu-noble | +-w /usr/bin/dbus-send -p x -k dbus_send 2025-09-09 21:03:18.721691 | ubuntu-noble | +-w /usr/bin/gdbus -p x -k gdubs_call 2025-09-09 21:03:18.721829 | ubuntu-noble | + 2025-09-09 21:03:18.721956 | ubuntu-noble | +## pkexec invocation 2025-09-09 21:03:18.722079 | ubuntu-noble | +### may indicate privilege escalation CVE-2021-4034 2025-09-09 21:03:18.722196 | ubuntu-noble | +-w /usr/bin/pkexec -p x -k pkexec 2025-09-09 21:03:18.722309 | ubuntu-noble | + 2025-09-09 21:03:18.722427 | ubuntu-noble | +## Suspicious shells 2025-09-09 21:03:18.722543 | ubuntu-noble | +-w /bin/ash -p x -k susp_shell 2025-09-09 21:03:18.722665 | ubuntu-noble | +-w /bin/csh -p x -k susp_shell 2025-09-09 21:03:18.722824 | ubuntu-noble | +-w /bin/fish -p x -k susp_shell 2025-09-09 21:03:18.722950 | ubuntu-noble | +-w /bin/tcsh -p x -k susp_shell 2025-09-09 21:03:18.723068 | ubuntu-noble | +-w /bin/tclsh -p x -k susp_shell 2025-09-09 21:03:18.723185 | ubuntu-noble | +-w /bin/xonsh -p x -k susp_shell 2025-09-09 21:03:18.723305 | ubuntu-noble | +-w /usr/local/bin/xonsh -p x -k susp_shell 2025-09-09 21:03:18.723422 | ubuntu-noble | +-w /bin/open -p x -k susp_shell 2025-09-09 21:03:18.723540 | ubuntu-noble | +-w /bin/rbash -p x -k susp_shell 2025-09-09 21:03:18.723653 | ubuntu-noble | + 2025-09-09 21:03:18.723801 | ubuntu-noble | +# Web Server Actvity 2025-09-09 21:03:18.723940 | ubuntu-noble | +## Change the number "33" to the ID of your WebServer user. Default: www-data:x:33:33 2025-09-09 21:03:18.724071 | ubuntu-noble | +-a always,exit -F arch=b64 -S execve -F euid=33 -k detect_execve_www 2025-09-09 21:03:18.724186 | ubuntu-noble | + 2025-09-09 21:03:18.724306 | ubuntu-noble | +### https://clustershell.readthedocs.io/ 2025-09-09 21:03:18.724426 | ubuntu-noble | +-w /bin/clush -p x -k susp_shell 2025-09-09 21:03:18.724544 | ubuntu-noble | +-w /usr/local/bin/clush -p x -k susp_shell 2025-09-09 21:03:18.724664 | ubuntu-noble | +-w /etc/clustershell/clush.conf -p x -k susp_shell 2025-09-09 21:03:18.724804 | ubuntu-noble | + 2025-09-09 21:03:18.724927 | ubuntu-noble | +### https://github.com/tmux/tmux 2025-09-09 21:03:18.725045 | ubuntu-noble | +-w /bin/tmux -p x -k susp_shell 2025-09-09 21:03:18.725162 | ubuntu-noble | +-w /usr/local/bin/tmux -p x -k susp_shell 2025-09-09 21:03:18.725273 | ubuntu-noble | + 2025-09-09 21:03:18.725392 | ubuntu-noble | +## Shell/profile configurations 2025-09-09 21:03:18.725510 | ubuntu-noble | +-w /etc/profile.d/ -p wa -k shell_profiles 2025-09-09 21:03:18.725627 | ubuntu-noble | +-w /etc/profile -p wa -k shell_profiles 2025-09-09 21:03:18.725747 | ubuntu-noble | +-w /etc/shells -p wa -k shell_profiles 2025-09-09 21:03:18.725910 | ubuntu-noble | +-w /etc/bashrc -p wa -k shell_profiles 2025-09-09 21:03:18.726035 | ubuntu-noble | +-w /etc/csh.cshrc -p wa -k shell_profiles 2025-09-09 21:03:18.726154 | ubuntu-noble | +-w /etc/csh.login -p wa -k shell_profiles 2025-09-09 21:03:18.726272 | ubuntu-noble | +-w /etc/fish/ -p wa -k shell_profiles 2025-09-09 21:03:18.726390 | ubuntu-noble | +-w /etc/zsh/ -p wa -k shell_profiles 2025-09-09 21:03:18.726515 | ubuntu-noble | + 2025-09-09 21:03:18.726635 | ubuntu-noble | +### https://github.com/xxh/xxh 2025-09-09 21:03:18.726755 | ubuntu-noble | +-w /usr/local/bin/xxh.bash -p x -k susp_shell 2025-09-09 21:03:18.726941 | ubuntu-noble | +-w /usr/local/bin/xxh.xsh -p x -k susp_shell 2025-09-09 21:03:18.727065 | ubuntu-noble | +-w /usr/local/bin/xxh.zsh -p x -k susp_shell 2025-09-09 21:03:18.727178 | ubuntu-noble | + 2025-09-09 21:03:18.727297 | ubuntu-noble | +## Injection 2025-09-09 21:03:18.727419 | ubuntu-noble | +### These rules watch for code injection by the ptrace facility. 2025-09-09 21:03:18.727544 | ubuntu-noble | +### This could indicate someone trying to do something bad or just debugging 2025-09-09 21:03:18.727667 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x4 -k code_injection 2025-09-09 21:03:18.727836 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x5 -k data_injection 2025-09-09 21:03:18.727966 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x6 -k register_injection 2025-09-09 21:03:18.728096 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -k tracing 2025-09-09 21:03:18.728210 | ubuntu-noble | + 2025-09-09 21:03:18.728331 | ubuntu-noble | +## Anonymous File Creation 2025-09-09 21:03:18.728454 | ubuntu-noble | +### These rules watch the use of memfd_create 2025-09-09 21:03:18.728579 | ubuntu-noble | +### "memfd_create" creates anonymous file and returns a file descriptor to access it 2025-09-09 21:03:18.728713 | ubuntu-noble | +### When combined with "fexecve" can be used to stealthily run binaries in memory without touching disk 2025-09-09 21:03:18.728868 | ubuntu-noble | +-a always,exit -F arch=b64 -S memfd_create -F key=anon_file_create 2025-09-09 21:03:18.728987 | ubuntu-noble | + 2025-09-09 21:03:18.729103 | ubuntu-noble | +## Privilege Abuse 2025-09-09 21:03:18.729228 | ubuntu-noble | +### The purpose of this rule is to detect when an admin may be abusing power by looking in user's home dir. 2025-09-09 21:03:18.729355 | ubuntu-noble | +-a always,exit -F dir=/home -F uid=0 -F auid>=1000 -F auid!=-1 -C auid!=obj_uid -k power_abuse 2025-09-09 21:03:18.729467 | ubuntu-noble | + 2025-09-09 21:03:18.729585 | ubuntu-noble | +# Socket Creations 2025-09-09 21:03:18.729702 | ubuntu-noble | +# will catch both IPv4 and IPv6 2025-09-09 21:03:18.729844 | ubuntu-noble | + 2025-09-09 21:03:18.729973 | ubuntu-noble | +-a always,exit -F arch=b32 -S socket -F a0=2 -k network_socket_created 2025-09-09 21:03:18.730094 | ubuntu-noble | +-a always,exit -F arch=b64 -S socket -F a0=2 -k network_socket_created 2025-09-09 21:03:18.730207 | ubuntu-noble | + 2025-09-09 21:03:18.730329 | ubuntu-noble | +-a always,exit -F arch=b32 -S socket -F a0=10 -k network_socket_created 2025-09-09 21:03:18.730451 | ubuntu-noble | +-a always,exit -F arch=b64 -S socket -F a0=10 -k network_socket_created 2025-09-09 21:03:18.730565 | ubuntu-noble | + 2025-09-09 21:03:18.730685 | ubuntu-noble | +# Software Management --------------------------------------------------------- 2025-09-09 21:03:18.730823 | ubuntu-noble | + 2025-09-09 21:03:18.730948 | ubuntu-noble | +# RPM (Redhat/CentOS) 2025-09-09 21:03:18.731070 | ubuntu-noble | +-w /usr/bin/rpm -p x -k software_mgmt 2025-09-09 21:03:18.731191 | ubuntu-noble | +-w /usr/bin/yum -p x -k software_mgmt 2025-09-09 21:03:18.731304 | ubuntu-noble | + 2025-09-09 21:03:18.731423 | ubuntu-noble | +# DNF (Fedora/RedHat 8/CentOS 8) 2025-09-09 21:03:18.731546 | ubuntu-noble | +-w /usr/bin/dnf -p x -k software_mgmt 2025-09-09 21:03:18.731659 | ubuntu-noble | + 2025-09-09 21:03:18.731825 | ubuntu-noble | +# YAST/Zypper/RPM (SuSE) 2025-09-09 21:03:18.731955 | ubuntu-noble | +-w /sbin/yast -p x -k software_mgmt 2025-09-09 21:03:18.732076 | ubuntu-noble | +-w /sbin/yast2 -p x -k software_mgmt 2025-09-09 21:03:18.732194 | ubuntu-noble | +-w /bin/rpm -p x -k software_mgmt 2025-09-09 21:03:18.732313 | ubuntu-noble | +-w /usr/bin/zypper -k software_mgmt 2025-09-09 21:03:18.732427 | ubuntu-noble | + 2025-09-09 21:03:18.732547 | ubuntu-noble | +# DPKG / APT-GET (Debian/Ubuntu) 2025-09-09 21:03:18.732666 | ubuntu-noble | +-w /usr/bin/dpkg -p x -k software_mgmt 2025-09-09 21:03:18.732811 | ubuntu-noble | +-w /usr/bin/apt -p x -k software_mgmt 2025-09-09 21:03:18.732937 | ubuntu-noble | +-w /usr/bin/apt-add-repository -p x -k software_mgmt 2025-09-09 21:03:18.733058 | ubuntu-noble | +-w /usr/bin/apt-get -p x -k software_mgmt 2025-09-09 21:03:18.733178 | ubuntu-noble | +-w /usr/bin/aptitude -p x -k software_mgmt 2025-09-09 21:03:18.733298 | ubuntu-noble | +-w /usr/bin/wajig -p x -k software_mgmt 2025-09-09 21:03:18.733420 | ubuntu-noble | +-w /usr/bin/snap -p x -k software_mgmt 2025-09-09 21:03:18.733533 | ubuntu-noble | + 2025-09-09 21:03:18.733653 | ubuntu-noble | +# PIP(3) (Python installs) 2025-09-09 21:03:18.734791 | ubuntu-noble | +-w /usr/bin/pip -p x -k third_party_software_mgmt 2025-09-09 21:03:18.734805 | ubuntu-noble | +-w /usr/local/bin/pip -p x -k third_party_software_mgmt 2025-09-09 21:03:18.734819 | ubuntu-noble | +-w /usr/bin/pip3 -p x -k third_party_software_mgmt 2025-09-09 21:03:18.734823 | ubuntu-noble | +-w /usr/local/bin/pip3 -p x -k third_party_software_mgmt 2025-09-09 21:03:18.734826 | ubuntu-noble | +-w /usr/bin/pipx -p x -k third_party_software_mgmt 2025-09-09 21:03:18.734829 | ubuntu-noble | +-w /usr/local/bin/pipx -p x -k third_party_software_mgmt 2025-09-09 21:03:18.734832 | ubuntu-noble | + 2025-09-09 21:03:18.734836 | ubuntu-noble | +# npm 2025-09-09 21:03:18.734839 | ubuntu-noble | +## T1072 third party software 2025-09-09 21:03:18.734843 | ubuntu-noble | +## https://www.npmjs.com 2025-09-09 21:03:18.734919 | ubuntu-noble | +## https://docs.npmjs.com/cli/v6/commands/npm-audit 2025-09-09 21:03:18.735043 | ubuntu-noble | +-w /usr/bin/npm -p x -k third_party_software_mgmt 2025-09-09 21:03:18.735156 | ubuntu-noble | + 2025-09-09 21:03:18.735279 | ubuntu-noble | +# Comprehensive Perl Archive Network (CPAN) (CPAN installs) 2025-09-09 21:03:18.735397 | ubuntu-noble | +## T1072 third party software 2025-09-09 21:03:18.735514 | ubuntu-noble | +## https://www.cpan.org 2025-09-09 21:03:18.735632 | ubuntu-noble | +-w /usr/bin/cpan -p x -k third_party_software_mgmt 2025-09-09 21:03:18.735745 | ubuntu-noble | + 2025-09-09 21:03:18.735921 | ubuntu-noble | +# Ruby (RubyGems installs) 2025-09-09 21:03:18.736047 | ubuntu-noble | +## T1072 third party software 2025-09-09 21:03:18.736166 | ubuntu-noble | +## https://rubygems.org 2025-09-09 21:03:18.736287 | ubuntu-noble | +-w /usr/bin/gem -p x -k third_party_software_mgmt 2025-09-09 21:03:18.736400 | ubuntu-noble | + 2025-09-09 21:03:18.736591 | ubuntu-noble | +# LuaRocks (Lua installs) 2025-09-09 21:03:18.736718 | ubuntu-noble | +## T1072 third party software 2025-09-09 21:03:18.736870 | ubuntu-noble | +## https://luarocks.org 2025-09-09 21:03:18.736998 | ubuntu-noble | +-w /usr/bin/luarocks -p x -k third_party_software_mgmt 2025-09-09 21:03:18.737111 | ubuntu-noble | + 2025-09-09 21:03:18.737230 | ubuntu-noble | +# Pacman (Arch Linux) 2025-09-09 21:03:18.737351 | ubuntu-noble | +## https://wiki.archlinux.org/title/Pacman 2025-09-09 21:03:18.737471 | ubuntu-noble | +## T1072 third party software 2025-09-09 21:03:18.737592 | ubuntu-noble | +-w /etc/pacman.conf -p x -k third_party_software_mgmt 2025-09-09 21:03:18.737715 | ubuntu-noble | +-w /etc/pacman.d -p x -k third_party_software_mgmt 2025-09-09 21:03:18.737857 | ubuntu-noble | + 2025-09-09 21:03:18.737982 | ubuntu-noble | +# Special Software ------------------------------------------------------------ 2025-09-09 21:03:18.738096 | ubuntu-noble | + 2025-09-09 21:03:18.738211 | ubuntu-noble | +## GDS specific secrets 2025-09-09 21:03:18.738331 | ubuntu-noble | +-w /etc/puppet/ssl -p wa -k puppet_ssl 2025-09-09 21:03:18.738444 | ubuntu-noble | + 2025-09-09 21:03:18.738561 | ubuntu-noble | +## IBM Bigfix BESClient 2025-09-09 21:03:18.738694 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/opt/BESClient -F success=0 -k soft_besclient 2025-09-09 21:03:18.738862 | ubuntu-noble | +-w /var/opt/BESClient/ -p wa -k soft_besclient 2025-09-09 21:03:18.738982 | ubuntu-noble | + 2025-09-09 21:03:18.739110 | ubuntu-noble | +## CHEF https://www.chef.io/chef/ 2025-09-09 21:03:18.739230 | ubuntu-noble | +-w /etc/chef -p wa -k soft_chef 2025-09-09 21:03:18.739341 | ubuntu-noble | + 2025-09-09 21:03:18.739456 | ubuntu-noble | +## Salt 2025-09-09 21:03:18.739573 | ubuntu-noble | +## https://saltproject.io/ 2025-09-09 21:03:18.739696 | ubuntu-noble | +## https://docs.saltproject.io/en/latest/ref/configuration/master.html 2025-09-09 21:03:18.739843 | ubuntu-noble | +-w /etc/salt -p wa -k soft_salt 2025-09-09 21:03:18.739968 | ubuntu-noble | +-w /usr/local/etc/salt -p wa -k soft_salt 2025-09-09 21:03:18.740081 | ubuntu-noble | + 2025-09-09 21:03:18.740196 | ubuntu-noble | +## Otter 2025-09-09 21:03:18.740315 | ubuntu-noble | +## https://inedo.com/otter 2025-09-09 21:03:18.740433 | ubuntu-noble | +-w /etc/otter -p wa -k soft_otter 2025-09-09 21:03:18.740544 | ubuntu-noble | + 2025-09-09 21:03:18.740665 | ubuntu-noble | +## T1081 Credentials In Files 2025-09-09 21:03:18.740810 | ubuntu-noble | +-w /usr/bin/grep -p x -k string_search 2025-09-09 21:03:18.740938 | ubuntu-noble | +-w /usr/bin/egrep -p x -k string_search 2025-09-09 21:03:18.741058 | ubuntu-noble | +-w /usr/bin/ugrep -p x -k string_search 2025-09-09 21:03:18.741173 | ubuntu-noble | +### macOS 2025-09-09 21:03:18.741294 | ubuntu-noble | +-w /usr/local/bin/grep -p x -k string_search 2025-09-09 21:03:18.741421 | ubuntu-noble | +-w /usr/local/bin/egrep -p x -k string_search 2025-09-09 21:03:18.741539 | ubuntu-noble | +-w /usr/local/bin/ugrep -p x -k string_search 2025-09-09 21:03:18.741652 | ubuntu-noble | + 2025-09-09 21:03:18.741794 | ubuntu-noble | +### https://github.com/tmbinc/bgrep 2025-09-09 21:03:18.741919 | ubuntu-noble | +-w /usr/bin/bgrep -p x -k string_search 2025-09-09 21:03:18.742036 | ubuntu-noble | +### macOS 2025-09-09 21:03:18.742156 | ubuntu-noble | +-w /usr/local/bin/bgrep -p x -k string_search 2025-09-09 21:03:18.742281 | ubuntu-noble | + 2025-09-09 21:03:18.742404 | ubuntu-noble | +### https://github.com/BurntSushi/ripgrep 2025-09-09 21:03:18.742524 | ubuntu-noble | +-w /usr/bin/rg -p x -k string_search 2025-09-09 21:03:18.742639 | ubuntu-noble | +### macOS 2025-09-09 21:03:18.743789 | ubuntu-noble | +-w /usr/local/bin/rg -p x -k string_search 2025-09-09 21:03:18.743803 | ubuntu-noble | + 2025-09-09 21:03:18.743807 | ubuntu-noble | +### https://github.com/awgn/cgrep 2025-09-09 21:03:18.743810 | ubuntu-noble | + 2025-09-09 21:03:18.743813 | ubuntu-noble | +-w /usr/bin/cgrep -p x -k string_search 2025-09-09 21:03:18.743817 | ubuntu-noble | +### macOS 2025-09-09 21:03:18.743832 | ubuntu-noble | +-w /usr/local/bin/cgrep -p x -k string_search 2025-09-09 21:03:18.743835 | ubuntu-noble | + 2025-09-09 21:03:18.743839 | ubuntu-noble | +### https://github.com/jpr5/ngrep 2025-09-09 21:03:18.743842 | ubuntu-noble | +-w /usr/bin/ngrep -p x -k string_search 2025-09-09 21:03:18.743871 | ubuntu-noble | +### macOS 2025-09-09 21:03:18.743997 | ubuntu-noble | +-w /usr/local/bin/ngrep -p x -k string_search 2025-09-09 21:03:18.744110 | ubuntu-noble | + 2025-09-09 21:03:18.744228 | ubuntu-noble | +### https://github.com/vrothberg/vgrep 2025-09-09 21:03:18.744347 | ubuntu-noble | +-w /usr/bin/vgrep -p x -k string_search 2025-09-09 21:03:18.744460 | ubuntu-noble | +### macOS 2025-09-09 21:03:18.744582 | ubuntu-noble | +-w /usr/local/bin/vgrep -p x -k string_search 2025-09-09 21:03:18.744694 | ubuntu-noble | + 2025-09-09 21:03:18.744863 | ubuntu-noble | +### https://github.com/monochromegane/the_platinum_searcher 2025-09-09 21:03:18.744992 | ubuntu-noble | +-w /usr/bin/pt -p x -k string_search 2025-09-09 21:03:18.745107 | ubuntu-noble | +### macOS 2025-09-09 21:03:18.745226 | ubuntu-noble | +-w /usr/local/bin/pt -p x -k string_search 2025-09-09 21:03:18.745340 | ubuntu-noble | + 2025-09-09 21:03:18.745459 | ubuntu-noble | +### https://github.com/gvansickle/ucg 2025-09-09 21:03:18.745579 | ubuntu-noble | +-w /usr/bin/ucg -p x -k string_search 2025-09-09 21:03:18.745692 | ubuntu-noble | +### macOS 2025-09-09 21:03:18.745845 | ubuntu-noble | +-w /usr/local/bin/ucg -p x -k string_search 2025-09-09 21:03:18.745967 | ubuntu-noble | + 2025-09-09 21:03:18.746087 | ubuntu-noble | +### https://github.com/ggreer/the_silver_searcher 2025-09-09 21:03:18.746206 | ubuntu-noble | +-w /usr/bin/ag -p x -k string_search 2025-09-09 21:03:18.746319 | ubuntu-noble | +### macOS 2025-09-09 21:03:18.746437 | ubuntu-noble | +-w /usr/local/bin/ag -p x -k string_search 2025-09-09 21:03:18.746548 | ubuntu-noble | + 2025-09-09 21:03:18.746668 | ubuntu-noble | +### https://github.com/beyondgrep/ack3 2025-09-09 21:03:18.746815 | ubuntu-noble | +### https://beyondgrep.com 2025-09-09 21:03:18.746939 | ubuntu-noble | +-w /usr/bin/ack -p x -k string_search 2025-09-09 21:03:18.747058 | ubuntu-noble | +-w /usr/local/bin/ack -p x -k string_search 2025-09-09 21:03:18.747178 | ubuntu-noble | +-w /usr/bin/semgrep -p x -k string_search 2025-09-09 21:03:18.747295 | ubuntu-noble | +### macOS 2025-09-09 21:03:18.747417 | ubuntu-noble | +-w /usr/local/bin/semgrep -p x -k string_search 2025-09-09 21:03:18.747528 | ubuntu-noble | + 2025-09-09 21:03:18.747644 | ubuntu-noble | +## Docker 2025-09-09 21:03:18.747803 | ubuntu-noble | +-w /usr/bin/dockerd -k docker 2025-09-09 21:03:18.747936 | ubuntu-noble | +-w /usr/bin/docker -k docker 2025-09-09 21:03:18.748055 | ubuntu-noble | +-w /usr/bin/docker-containerd -k docker 2025-09-09 21:03:18.748171 | ubuntu-noble | +-w /usr/bin/docker-runc -k docker 2025-09-09 21:03:18.748290 | ubuntu-noble | +-w /var/lib/docker -p wa -k docker 2025-09-09 21:03:18.748407 | ubuntu-noble | +-w /etc/docker -k docker 2025-09-09 21:03:18.748525 | ubuntu-noble | +-w /etc/sysconfig/docker -k docker 2025-09-09 21:03:18.748645 | ubuntu-noble | +-w /etc/sysconfig/docker-storage -k docker 2025-09-09 21:03:18.748802 | ubuntu-noble | +-w /usr/lib/systemd/system/docker.service -k docker 2025-09-09 21:03:18.748930 | ubuntu-noble | +-w /usr/lib/systemd/system/docker.socket -k docker 2025-09-09 21:03:18.749045 | ubuntu-noble | + 2025-09-09 21:03:18.749161 | ubuntu-noble | +## Virtualization stuff 2025-09-09 21:03:18.749281 | ubuntu-noble | +-w /usr/bin/qemu-system-x86_64 -p x -k qemu-system-x86_64 2025-09-09 21:03:18.749401 | ubuntu-noble | +-w /usr/bin/qemu-img -p x -k qemu-img 2025-09-09 21:03:18.749518 | ubuntu-noble | +-w /usr/bin/qemu-kvm -p x -k qemu-kvm 2025-09-09 21:03:18.749635 | ubuntu-noble | +-w /usr/bin/qemu -p x -k qemu 2025-09-09 21:03:18.749753 | ubuntu-noble | +-w /usr/bin/virtualbox -p x -k virtualbox 2025-09-09 21:03:18.749906 | ubuntu-noble | +-w /usr/bin/virt-manager -p x -k virt-manager 2025-09-09 21:03:18.750031 | ubuntu-noble | +-w /usr/bin/VBoxManage -p x -k VBoxManage 2025-09-09 21:03:18.750144 | ubuntu-noble | + 2025-09-09 21:03:18.750264 | ubuntu-noble | +#### VirtualBox on macOS 2025-09-09 21:03:18.750376 | ubuntu-noble | + 2025-09-09 21:03:18.750496 | ubuntu-noble | +-w /usr/local/bin/VirtualBox -p x -k virt_tool 2025-09-09 21:03:18.750615 | ubuntu-noble | +-w /usr/local/bin/VirtualBoxVM -p x -k virt_tool 2025-09-09 21:03:18.750748 | ubuntu-noble | +-w /usr/local/bin/VBoxManage -p x -k virt_tool 2025-09-09 21:03:18.750915 | ubuntu-noble | +-w /usr/local/bin/VBoxVRDP -p x -k virt_tool 2025-09-09 21:03:18.751040 | ubuntu-noble | +-w /usr/local/bin/VBoxHeadless -p x -k virt_tool 2025-09-09 21:03:18.751159 | ubuntu-noble | +-w /usr/local/bin/vboxwebsrv -p x -k virt_tool 2025-09-09 21:03:18.751277 | ubuntu-noble | +-w /usr/local/bin/VBoxBugReport -p x -k virt_tool 2025-09-09 21:03:18.751396 | ubuntu-noble | +-w /usr/local/bin/VBoxBalloonCtrl -p x -k virt_tool 2025-09-09 21:03:18.751513 | ubuntu-noble | +-w /usr/local/bin/VBoxAutostart -p x -k virt_tool 2025-09-09 21:03:18.751631 | ubuntu-noble | +-w /usr/local/bin/VBoxDTrace -p x -k virt_tool 2025-09-09 21:03:18.752817 | ubuntu-noble | +-w /usr/local/bin/vbox-img -p x -k virt_tool 2025-09-09 21:03:18.752831 | ubuntu-noble | +-w /Library/LaunchDaemons/org.virtualbox.startup.plist -p x -k virt_tool 2025-09-09 21:03:18.752835 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/LaunchDaemons/ -p x -k virt_tool 2025-09-09 21:03:18.752839 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxDrv.kext/ -p x -k virt_tool 2025-09-09 21:03:18.752842 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxUSB.kext/ -p x -k virt_tool 2025-09-09 21:03:18.752846 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxNetFlt.kext/ -p x -k virt_tool 2025-09-09 21:03:18.752850 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxNetAdp.kext/ -p x -k virt_tool 2025-09-09 21:03:18.752853 | ubuntu-noble | + 2025-09-09 21:03:18.752857 | ubuntu-noble | +### Parallels Desktop on macOS 2025-09-09 21:03:18.752860 | ubuntu-noble | + 2025-09-09 21:03:18.752872 | ubuntu-noble | +-w /usr/local/bin/prl_convert -p x -k virt_tool 2025-09-09 21:03:18.753000 | ubuntu-noble | +-w /usr/local/bin/prl_disk_tool -p x -k virt_tool 2025-09-09 21:03:18.753121 | ubuntu-noble | +-w /usr/local/bin/prl_perf_ctl -p x -k virt_tool 2025-09-09 21:03:18.753243 | ubuntu-noble | +-w /usr/local/bin/prlcore2dmp -p x -k virt_tool 2025-09-09 21:03:18.753362 | ubuntu-noble | +-w /usr/local/bin/prlctl -p x -k virt_tool 2025-09-09 21:03:18.753495 | ubuntu-noble | +-w /usr/local/bin/prlexec -p x -k virt_tool 2025-09-09 21:03:18.753614 | ubuntu-noble | +-w /usr/local/bin/prlsrvctl -p x -k virt_tool 2025-09-09 21:03:18.753735 | ubuntu-noble | +-w /Library/Preferences/Parallels -p x -k virt_tool 2025-09-09 21:03:18.753875 | ubuntu-noble | + 2025-09-09 21:03:18.754000 | ubuntu-noble | +### qemu on macOS 2025-09-09 21:03:18.754114 | ubuntu-noble | + 2025-09-09 21:03:18.754237 | ubuntu-noble | +-w /usr/local/bin/qemu-edid -p x -k virt_tool 2025-09-09 21:03:18.754357 | ubuntu-noble | +-w /usr/local/bin/qemu-img -p x -k virt_tool 2025-09-09 21:03:18.754478 | ubuntu-noble | +-w /usr/local/bin/qemu-io -p x -k virt_tool 2025-09-09 21:03:18.754597 | ubuntu-noble | +-w /usr/local/bin/qemu-nbd -p x -k virt_tool 2025-09-09 21:03:18.754716 | ubuntu-noble | +-w /usr/local/bin/qemu-system-x86_64 -p x -k virt_tool 2025-09-09 21:03:18.754851 | ubuntu-noble | + 2025-09-09 21:03:18.754972 | ubuntu-noble | +## Kubelet 2025-09-09 21:03:18.755089 | ubuntu-noble | +-w /usr/bin/kubelet -k kubelet 2025-09-09 21:03:18.755199 | ubuntu-noble | + 2025-09-09 21:03:18.755317 | ubuntu-noble | +# ipc system call 2025-09-09 21:03:18.755435 | ubuntu-noble | +# /usr/include/linux/ipc.h 2025-09-09 21:03:18.755546 | ubuntu-noble | + 2025-09-09 21:03:18.755662 | ubuntu-noble | +## msgctl 2025-09-09 21:03:18.755840 | ubuntu-noble | +#-a always,exit -S ipc -F a0=14 -k Inter-Process_Communication 2025-09-09 21:03:18.755977 | ubuntu-noble | +## msgget 2025-09-09 21:03:18.756102 | ubuntu-noble | +#-a always,exit -S ipc -F a0=13 -k Inter-Process_Communication 2025-09-09 21:03:18.756223 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2025-09-09 21:03:18.756345 | ubuntu-noble | +-a always,exit -F arch=b64 -S msgctl -k Inter-Process_Communication 2025-09-09 21:03:18.756468 | ubuntu-noble | +-a always,exit -F arch=b64 -S msgget -k Inter-Process_Communication 2025-09-09 21:03:18.756580 | ubuntu-noble | + 2025-09-09 21:03:18.756693 | ubuntu-noble | +## semctl 2025-09-09 21:03:18.756845 | ubuntu-noble | +#-a always,exit -S ipc -F a0=3 -k Inter-Process_Communication 2025-09-09 21:03:18.756966 | ubuntu-noble | +## semget 2025-09-09 21:03:18.757095 | ubuntu-noble | +#-a always,exit -S ipc -F a0=2 -k Inter-Process_Communication 2025-09-09 21:03:18.757210 | ubuntu-noble | +## semop 2025-09-09 21:03:18.757331 | ubuntu-noble | +#-a always,exit -S ipc -F a0=1 -k Inter-Process_Communication 2025-09-09 21:03:18.757448 | ubuntu-noble | +## semtimedop 2025-09-09 21:03:18.757570 | ubuntu-noble | +#-a always,exit -S ipc -F a0=4 -k Inter-Process_Communication 2025-09-09 21:03:18.757688 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2025-09-09 21:03:18.757871 | ubuntu-noble | +-a always,exit -F arch=b64 -S semctl -k Inter-Process_Communication 2025-09-09 21:03:18.758002 | ubuntu-noble | +-a always,exit -F arch=b64 -S semget -k Inter-Process_Communication 2025-09-09 21:03:18.758123 | ubuntu-noble | +-a always,exit -F arch=b64 -S semop -k Inter-Process_Communication 2025-09-09 21:03:18.758247 | ubuntu-noble | +-a always,exit -F arch=b64 -S semtimedop -k Inter-Process_Communication 2025-09-09 21:03:18.758358 | ubuntu-noble | + 2025-09-09 21:03:18.758471 | ubuntu-noble | +## shmctl 2025-09-09 21:03:18.758593 | ubuntu-noble | +#-a always,exit -S ipc -F a0=24 -k Inter-Process_Communication 2025-09-09 21:03:18.758707 | ubuntu-noble | +## shmget 2025-09-09 21:03:18.758854 | ubuntu-noble | +#-a always,exit -S ipc -F a0=23 -k Inter-Process_Communication 2025-09-09 21:03:18.758978 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2025-09-09 21:03:18.759100 | ubuntu-noble | +-a always,exit -F arch=b64 -S shmctl -k Inter-Process_Communication 2025-09-09 21:03:18.759222 | ubuntu-noble | +-a always,exit -F arch=b64 -S shmget -k Inter-Process_Communication 2025-09-09 21:03:18.759333 | ubuntu-noble | + 2025-09-09 21:03:18.759453 | ubuntu-noble | +# High Volume Events ---------------------------------------------------------- 2025-09-09 21:03:18.759563 | ubuntu-noble | + 2025-09-09 21:03:18.759682 | ubuntu-noble | +## Disable these rules if they create too many events in your environment 2025-09-09 21:03:18.759818 | ubuntu-noble | + 2025-09-09 21:03:18.759939 | ubuntu-noble | +## Common Shells 2025-09-09 21:03:18.760055 | ubuntu-noble | +-w /bin/bash -p x -k susp_shell 2025-09-09 21:03:18.760172 | ubuntu-noble | +-w /bin/dash -p x -k susp_shell 2025-09-09 21:03:18.760297 | ubuntu-noble | +-w /bin/busybox -p x -k susp_shell 2025-09-09 21:03:18.760414 | ubuntu-noble | +-w /bin/zsh -p x -k susp_shell 2025-09-09 21:03:18.760529 | ubuntu-noble | +-w /bin/sh -p x -k susp_shell 2025-09-09 21:03:18.760648 | ubuntu-noble | +-w /bin/ksh -p x -k susp_shell 2025-09-09 21:03:18.760780 | ubuntu-noble | + 2025-09-09 21:03:18.760906 | ubuntu-noble | +## Root command executions 2025-09-09 21:03:18.761038 | ubuntu-noble | +-a always,exit -F arch=b64 -F euid=0 -F auid>=1000 -F auid!=-1 -S execve -k rootcmd 2025-09-09 21:03:18.761151 | ubuntu-noble | + 2025-09-09 21:03:18.761272 | ubuntu-noble | +## File Deletion Events by User 2025-09-09 21:03:18.761398 | ubuntu-noble | +-a always,exit -F arch=b64 -S rmdir -S unlink -S unlinkat -S rename -S renameat -F auid>=1000 -F auid!=-1 -k delete 2025-09-09 21:03:18.761807 | ubuntu-noble | + 2025-09-09 21:03:18.761819 | ubuntu-noble | +## File Access 2025-09-09 21:03:18.761823 | ubuntu-noble | +### Unauthorized Access (unsuccessful) 2025-09-09 21:03:18.761901 | ubuntu-noble | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k file_access 2025-09-09 21:03:18.762037 | ubuntu-noble | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k file_access 2025-09-09 21:03:18.762152 | ubuntu-noble | + 2025-09-09 21:03:18.762273 | ubuntu-noble | +### Unsuccessful Creation 2025-09-09 21:03:18.762402 | ubuntu-noble | +-a always,exit -F arch=b64 -S mkdir,creat,link,symlink,mknod,mknodat,linkat,symlinkat -F exit=-EACCES -k file_creation 2025-09-09 21:03:18.762530 | ubuntu-noble | +-a always,exit -F arch=b64 -S mkdir,link,symlink,mkdirat -F exit=-EPERM -k file_creation 2025-09-09 21:03:18.762646 | ubuntu-noble | + 2025-09-09 21:03:18.762796 | ubuntu-noble | +### Unsuccessful Modification 2025-09-09 21:03:18.762947 | ubuntu-noble | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EACCES -k file_modification 2025-09-09 21:03:18.763081 | ubuntu-noble | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EPERM -k file_modification 2025-09-09 21:03:18.763195 | ubuntu-noble | + 2025-09-09 21:03:18.763315 | ubuntu-noble | +## 32bit API Exploitation 2025-09-09 21:03:18.763434 | ubuntu-noble | +### If you are on a 64 bit platform, everything _should_ be running 2025-09-09 21:03:18.763555 | ubuntu-noble | +### in 64 bit mode. This rule will detect any use of the 32 bit syscalls 2025-09-09 21:03:18.763676 | ubuntu-noble | +### because this might be a sign of someone exploiting a hole in the 32 2025-09-09 21:03:18.763819 | ubuntu-noble | +### bit API. 2025-09-09 21:03:18.763946 | ubuntu-noble | +-a always,exit -F arch=b32 -S all -k 32bit_api 2025-09-09 21:03:18.764060 | ubuntu-noble | + 2025-09-09 21:03:18.764830 | ubuntu-noble | +# Make The Configuration Immutable -------------------------------------------- 2025-09-09 21:03:18.764859 | ubuntu-noble | + 2025-09-09 21:03:18.764863 | ubuntu-noble | +##-e 2 2025-09-09 21:03:18.764867 | ubuntu-noble | 2025-09-09 21:03:18.764879 | ubuntu-noble | changed: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": true, "checksum": "9f99ce5c4f891fbf3e2bce06ed4cb97fb9e01f41", "dest": "/etc/audit/rules.d/20-neo23x0.rules", "gid": 0, "group": "root", "item": "20-neo23x0.rules", "md5sum": "6ac57206fd77de34805c3f4d50ef8b1d", "mode": "0644", "owner": "root", "size": 27367, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1757451797.7715592-2355-74001877045359/.source.rules", "state": "file", "uid": 0} 2025-09-09 21:03:18.764974 | ubuntu-noble | 2025-09-09 21:03:18.765106 | ubuntu-noble | TASK [auditd : Manage auditd service] ****************************************** 2025-09-09 21:03:18.931498 | debian-bookworm | skipping: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": false, "false_condition": "item not in auditd_rules_files", "item": "20-neo23x0.rules", "skip_reason": "Conditional result was False"} 2025-09-09 21:03:18.931575 | debian-bookworm | --- before 2025-09-09 21:03:18.931587 | debian-bookworm | +++ after 2025-09-09 21:03:18.931596 | debian-bookworm | @@ -1,4 +1,4 @@ 2025-09-09 21:03:18.931606 | debian-bookworm | { 2025-09-09 21:03:18.931615 | debian-bookworm | "path": "/etc/audit/rules.d/audit.rules", 2025-09-09 21:03:18.931626 | debian-bookworm | - "state": "file" 2025-09-09 21:03:18.931636 | debian-bookworm | + "state": "absent" 2025-09-09 21:03:18.931645 | debian-bookworm | } 2025-09-09 21:03:18.931653 | debian-bookworm | 2025-09-09 21:03:18.931664 | debian-bookworm | changed: [molecule-auditd] => (item=audit.rules) => {"ansible_loop_var": "item", "changed": true, "item": "audit.rules", "path": "/etc/audit/rules.d/audit.rules", "state": "absent"} 2025-09-09 21:03:18.931674 | debian-bookworm | 2025-09-09 21:03:18.931683 | debian-bookworm | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2025-09-09 21:03:18.913994 | centos-9-stream | changed: [molecule-auditd] => {"changed": true, "cmd": ["augenrules", "--load"], "delta": "0:00:00.088004", "end": "2025-09-09 21:03:18.861572", "msg": "", "rc": 0, "start": "2025-09-09 21:03:18.773568", "stderr": "Old style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nperm used without an arch is slower\nperm used without an arch is slower\nperm used without an arch is slower\nperm used without an arch is slower\nperm used without an arch is slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 28 of /etc/audit/audit.rules\nOld style watch rules are slower\nOld style watch rules are slower\nperm used without an arch is slower\nperm used without an arch is slower\nperm used without an arch is slower\nOld style watch rules are slower\nOld style watch rules are slower\nperm used without an arch is slower\nperm used without an arch is slower\nUnknown user: ntp\nThere was an error in line 44 of /etc/audit/audit.rules\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nperm used without an arch is slower\nperm used without an arch is slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 112 of /etc/audit/audit.rules\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 115 of /etc/audit/audit.rules\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nperm used without an arch is slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 176 of /etc/audit/audit.rules\nperm used without an arch is slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 177 of /etc/audit/audit.rules\nperm used without an arch is slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 178 of /etc/audit/audit.rules\nperm used without an arch is slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 179 of /etc/audit/audit.rules\nperm used without an arch is slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 180 of /etc/audit/audit.rules\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nperm used without an arch is slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 217 of /etc/audit/audit.rules\nperm used without an arch is slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 218 of /etc/audit/audit.rules\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 234 of /etc/audit/audit.rules\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 285 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 286 of /etc/audit/audit.rules\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 346 of /etc/audit/audit.rules\nOld style watch rules are slower\nparameter passed without an option given\nThere was an error in line 347 of /etc/audit/audit.rules\nOld style watch rules are slower\nparameter passed without an option given\nThere was an error in line 348 of /etc/audit/audit.rules\nOld style watch rules are slower\nparameter passed without an option given\nThere was an error in line 349 of /etc/audit/audit.rules\nOld style watch rules are slower\nparameter passed without an option given\nThere was an error in line 350 of /etc/audit/audit.rules\nOld style watch rules are slower\nparameter passed without an option given\nThere was an error in line 351 of /etc/audit/audit.rules\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 359 of /etc/audit/audit.rules\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower", "stderr_lines": ["Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "perm used without an arch is slower", "perm used without an arch is slower", "perm used without an arch is slower", "perm used without an arch is slower", "perm used without an arch is slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 28 of /etc/audit/audit.rules", "Old style watch rules are slower", "Old style watch rules are slower", "perm used without an arch is slower", "perm used without an arch is slower", "perm used without an arch is slower", "Old style watch rules are slower", "Old style watch rules are slower", "perm used without an arch is slower", "perm used without an arch is slower", "Unknown user: ntp", "There was an error in line 44 of /etc/audit/audit.rules", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "perm used without an arch is slower", "perm used without an arch is slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 112 of /etc/audit/audit.rules", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 115 of /etc/audit/audit.rules", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "perm used without an arch is slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 176 of /etc/audit/audit.rules", "perm used without an arch is slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 177 of /etc/audit/audit.rules", "perm used without an arch is slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 178 of /etc/audit/audit.rules", "perm used without an arch is slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 179 of /etc/audit/audit.rules", "perm used without an arch is slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 180 of /etc/audit/audit.rules", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "perm used without an arch is slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 217 of /etc/audit/audit.rules", "perm used without an arch is slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 218 of /etc/audit/audit.rules", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 234 of /etc/audit/audit.rules", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 285 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 286 of /etc/audit/audit.rules", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 346 of /etc/audit/audit.rules", "Old style watch rules are slower", "parameter passed without an option given", "There was an error in line 347 of /etc/audit/audit.rules", "Old style watch rules are slower", "parameter passed without an option given", "There was an error in line 348 of /etc/audit/audit.rules", "Old style watch rules are slower", "parameter passed without an option given", "There was an error in line 349 of /etc/audit/audit.rules", "Old style watch rules are slower", "parameter passed without an option given", "There was an error in line 350 of /etc/audit/audit.rules", "Old style watch rules are slower", "parameter passed without an option given", "There was an error in line 351 of /etc/audit/audit.rules", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 359 of /etc/audit/audit.rules", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower"], "stdout": "/sbin/augenrules: No change\nNo rules\nenabled 1\nfailure 1\npid 2228\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 4\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0\nenabled 1\nfailure 1\npid 2228\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 4\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0", "stdout_lines": ["/sbin/augenrules: No change", "No rules", "enabled 1", "failure 1", "pid 2228", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 4", "backlog_wait_time 60000", "backlog_wait_time_actual 0", "enabled 1", "failure 1", "pid 2228", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 4", "backlog_wait_time 60000", "backlog_wait_time_actual 0"]} 2025-09-09 21:03:18.920359 | centos-9-stream | 2025-09-09 21:03:18.920481 | centos-9-stream | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2025-09-09 21:03:19.012624 | ubuntu-jammy | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2025-09-09 21:03:10 UTC", "ActiveEnterTimestampMonotonic": "1512023263", "ActiveExitTimestamp": "n/a", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "system.slice local-fs.target systemd-tmpfiles-setup.service systemd-journald.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2025-09-09 21:03:10 UTC", "AssertTimestampMonotonic": "1511968236", "Before": "sysinit.target ssh.service systemd-update-utmp.service shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "53485000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2025-09-09 21:03:10 UTC", "ConditionTimestampMonotonic": "1511968161", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestamp": "n/a", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "1642", "ExecMainStartTimestamp": "Tue 2025-09-09 21:03:10 UTC", "ExecMainStartTimestampMonotonic": "1511994412", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2025-09-09 21:03:10 UTC] ; stop_time=[Tue 2025-09-09 21:03:10 UTC] ; pid=1641 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2025-09-09 21:03:10 UTC] ; stop_time=[Tue 2025-09-09 21:03:10 UTC] ; pid=1641 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2025-09-09 21:03:10 UTC] ; stop_time=[Tue 2025-09-09 21:03:10 UTC] ; pid=1645 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2025-09-09 21:03:10 UTC] ; stop_time=[Tue 2025-09-09 21:03:10 UTC] ; pid=1645 ; code=exited ; status=0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "n/a", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2025-09-09 21:03:10 UTC", "InactiveExitTimestampMonotonic": "1511970150", "InvocationID": "fe1115bc3c4f41b4a521dc1ff6e23ad8", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15337", "LimitNPROCSoft": "15337", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15337", "LimitSIGPENDINGSoft": "15337", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "1642", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "520192", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "yes", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Tue 2025-09-09 21:03:10 UTC", "StateChangeTimestampMonotonic": "1512023263", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4601", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestamp": "n/a", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2025-09-09 21:03:19.023670 | ubuntu-jammy | 2025-09-09 21:03:19.023721 | ubuntu-jammy | RUNNING HANDLER [auditd : Generate auditd rules] ******************************* 2025-09-09 21:03:19.442789 | ubuntu-jammy | changed: [molecule-auditd] => {"changed": true, "cmd": ["augenrules", "--load"], "delta": "0:00:00.105482", "end": "2025-09-09 21:03:19.389213", "msg": "", "rc": 0, "start": "2025-09-09 21:03:19.283731", "stderr": "Unknown user: chrony\nThere was an error in line 24 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 28 of /etc/audit/audit.rules\nUnknown user: ntp\nThere was an error in line 44 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 83 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 84 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 86 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 112 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 115 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 176 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 177 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 178 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 179 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 180 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 217 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 218 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 234 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 285 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 286 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 324 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 325 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 346 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 347 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 348 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 349 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 350 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 351 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 359 of /etc/audit/audit.rules", "stderr_lines": ["Unknown user: chrony", "There was an error in line 24 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 28 of /etc/audit/audit.rules", "Unknown user: ntp", "There was an error in line 44 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 83 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 84 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 86 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 112 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 115 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 176 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 177 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 178 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 179 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 180 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 217 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 218 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 234 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 285 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 286 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 324 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 325 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 346 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 347 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 348 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 349 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 350 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 351 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 359 of /etc/audit/audit.rules"], "stdout": "/usr/sbin/augenrules: No change\nNo rules\nenabled 1\nfailure 1\npid 2029\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 3\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0\nenabled 1\nfailure 1\npid 2029\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 4\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0", "stdout_lines": ["/usr/sbin/augenrules: No change", "No rules", "enabled 1", "failure 1", "pid 2029", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 3", "backlog_wait_time 60000", "backlog_wait_time_actual 0", "enabled 1", "failure 1", "pid 2029", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 4", "backlog_wait_time 60000", "backlog_wait_time_actual 0"]} 2025-09-09 21:03:19.442860 | ubuntu-jammy | 2025-09-09 21:03:19.442869 | ubuntu-jammy | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2025-09-09 21:03:19.553917 | ubuntu-noble | ok: [molecule-auditd] => {"changed": false, "enabled": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2025-09-09 21:03:11 UTC", "ActiveEnterTimestampMonotonic": "1511015716", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "systemd-tmpfiles-setup.service local-fs.target systemd-journald.socket system.slice", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2025-09-09 21:03:11 UTC", "AssertTimestampMonotonic": "1510967987", "Before": "ssh.service shutdown.target systemd-update-utmp.service sysinit.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "37294000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2025-09-09 21:03:11 UTC", "ConditionTimestampMonotonic": "1510967942", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3910", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2124", "ExecMainStartTimestamp": "Tue 2025-09-09 21:03:11 UTC", "ExecMainStartTimestampMonotonic": "1510985343", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2025-09-09 21:03:11 UTC] ; stop_time=[Tue 2025-09-09 21:03:11 UTC] ; pid=2123 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2025-09-09 21:03:11 UTC] ; stop_time=[Tue 2025-09-09 21:03:11 UTC] ; pid=2123 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2025-09-09 21:03:11 UTC] ; stop_time=[Tue 2025-09-09 21:03:11 UTC] ; pid=2128 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2025-09-09 21:03:11 UTC] ; stop_time=[Tue 2025-09-09 21:03:11 UTC] ; pid=2128 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2025-09-09 21:03:11 UTC", "InactiveExitTimestampMonotonic": "1510976306", "InvocationID": "35157d1938e3429385036bc91991cc48", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15387", "LimitNPROCSoft": "15387", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15387", "LimitSIGPENDINGSoft": "15387", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2124", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3489333248", "MemoryCurrent": "507904", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2158592", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Tue 2025-09-09 21:03:11 UTC", "StateChangeTimestampMonotonic": "1511015716", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4616", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2025-09-09 21:03:19.558915 | ubuntu-noble | 2025-09-09 21:03:19.559196 | ubuntu-noble | TASK [auditd : List existing rules files] ************************************** 2025-09-09 21:03:20.013701 | ubuntu-noble | ok: [molecule-auditd] => {"changed": false, "cmd": ["find", "/etc/audit/rules.d", "-type", "f", "-printf", "%f\n"], "delta": "0:00:00.007901", "end": "2025-09-09 21:03:19.969624", "msg": "", "rc": 0, "start": "2025-09-09 21:03:19.961723", "stderr": "", "stderr_lines": [], "stdout": "audit.rules\n20-neo23x0.rules", "stdout_lines": ["audit.rules", "20-neo23x0.rules"]} 2025-09-09 21:03:20.014966 | ubuntu-noble | 2025-09-09 21:03:20.015015 | ubuntu-noble | TASK [auditd : Remove unmanaged rules files] *********************************** 2025-09-09 21:03:19.658060 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2025-09-09 21:03:11 UTC", "ActiveEnterTimestampMonotonic": "1060036843", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "systemd-tmpfiles-setup.service systemd-journald.socket system.slice local-fs.target", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2025-09-09 21:03:11 UTC", "AssertTimestampMonotonic": "1059959477", "Before": "systemd-update-utmp.service sysinit.target shutdown.target ssh.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "55812000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2025-09-09 21:03:11 UTC", "ConditionTimestampMonotonic": "1059959388", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3367", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2524", "ExecMainStartTimestamp": "Tue 2025-09-09 21:03:11 UTC", "ExecMainStartTimestampMonotonic": "1060006754", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2025-09-09 21:03:11 UTC] ; stop_time=[Tue 2025-09-09 21:03:11 UTC] ; pid=2523 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2025-09-09 21:03:11 UTC] ; stop_time=[Tue 2025-09-09 21:03:11 UTC] ; pid=2523 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2025-09-09 21:03:11 UTC] ; stop_time=[Tue 2025-09-09 21:03:11 UTC] ; pid=2527 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2025-09-09 21:03:11 UTC] ; stop_time=[Tue 2025-09-09 21:03:11 UTC] ; pid=2527 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2025-09-09 21:03:11 UTC", "InactiveExitTimestampMonotonic": "1059985948", "InvocationID": "8b0a2055c51b45e7b79d5831f2cf4626", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15481", "LimitNPROCSoft": "15481", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15481", "LimitSIGPENDINGSoft": "15481", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2524", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "729088", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Tue 2025-09-09 21:03:11 UTC", "StateChangeTimestampMonotonic": "1060036843", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2025-09-09 21:03:19.662448 | debian-bookworm | 2025-09-09 21:03:19.662597 | debian-bookworm | RUNNING HANDLER [auditd : Generate auditd rules] ******************************* 2025-09-09 21:03:19.634372 | centos-9-stream | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"AccessSELinuxContext": "system_u:object_r:auditd_unit_file_t:s0", "ActiveEnterTimestamp": "Tue 2025-09-09 21:03:18 UTC", "ActiveEnterTimestampMonotonic": "1555467471", "ActiveExitTimestamp": "Tue 2025-09-09 21:03:18 UTC", "ActiveExitTimestampMonotonic": "1555262137", "ActiveState": "active", "After": "systemd-journald.socket local-fs.target systemd-tmpfiles-setup.service system.slice", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2025-09-09 21:03:18 UTC", "AssertTimestampMonotonic": "1555302795", "Before": "crond.service sysinit.target shutdown.target systemd-update-utmp.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "177179000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2025-09-09 21:03:18 UTC", "ConditionTimestampMonotonic": "1555302708", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "4108", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2228", "ExecMainStartTimestamp": "Tue 2025-09-09 21:03:18 UTC", "ExecMainStartTimestampMonotonic": "1555341848", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2025-09-09 21:03:18 UTC] ; stop_time=[Tue 2025-09-09 21:03:18 UTC] ; pid=2226 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2025-09-09 21:03:18 UTC] ; stop_time=[Tue 2025-09-09 21:03:18 UTC] ; pid=2226 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2025-09-09 21:03:18 UTC] ; stop_time=[Tue 2025-09-09 21:03:18 UTC] ; pid=2231 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2025-09-09 21:03:18 UTC] ; stop_time=[Tue 2025-09-09 21:03:18 UTC] ; pid=2231 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "Tue 2025-09-09 21:03:18 UTC", "InactiveEnterTimestampMonotonic": "1555301254", "InactiveExitTimestamp": "Tue 2025-09-09 21:03:18 UTC", "InactiveExitTimestampMonotonic": "1555317937", "InvocationID": "e1623a1f03524322a74bafe4ef653ef6", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "infinity", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15466", "LimitNPROCSoft": "15466", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15466", "LimitSIGPENDINGSoft": "15466", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2228", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "2646016", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "4489216", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Tue 2025-09-09 21:03:18 UTC", "StateChangeTimestampMonotonic": "1555467471", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "24745", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2025-09-09 21:03:19.634918 | centos-9-stream | 2025-09-09 21:03:19.635118 | centos-9-stream | PLAY RECAP ********************************************************************* 2025-09-09 21:03:19.635302 | centos-9-stream | molecule-auditd : ok=17 changed=8 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2025-09-09 21:03:19.635479 | centos-9-stream | 2025-09-09 21:03:19.726877 | centos-9-stream | INFO [delegated > converge] Completed 2025-09-09 21:03:20.388857 | ubuntu-noble | --- before 2025-09-09 21:03:20.388932 | ubuntu-noble | +++ after 2025-09-09 21:03:20.388945 | ubuntu-noble | @@ -1,4 +1,4 @@ 2025-09-09 21:03:20.388957 | ubuntu-noble | { 2025-09-09 21:03:20.388967 | ubuntu-noble | "path": "/etc/audit/rules.d/audit.rules", 2025-09-09 21:03:20.389337 | ubuntu-noble | - "state": "file" 2025-09-09 21:03:20.389682 | ubuntu-noble | + "state": "absent" 2025-09-09 21:03:20.390106 | ubuntu-noble | } 2025-09-09 21:03:20.390446 | ubuntu-noble | 2025-09-09 21:03:20.391078 | ubuntu-noble | changed: [molecule-auditd] => (item=audit.rules) => {"ansible_loop_var": "item", "changed": true, "item": "audit.rules", "path": "/etc/audit/rules.d/audit.rules", "state": "absent"} 2025-09-09 21:03:20.391488 | ubuntu-noble | skipping: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": false, "false_condition": "item not in auditd_rules_files", "item": "20-neo23x0.rules", "skip_reason": "Conditional result was False"} 2025-09-09 21:03:20.391885 | ubuntu-noble | 2025-09-09 21:03:20.392333 | ubuntu-noble | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2025-09-09 21:03:20.098434 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "cmd": ["augenrules", "--load"], "delta": "0:00:00.108482", "end": "2025-09-09 21:03:20.047410", "msg": "", "rc": 0, "start": "2025-09-09 21:03:19.938928", "stderr": "Unknown user: chrony\nThere was an error in line 24 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 28 of /etc/audit/audit.rules\nUnknown user: ntp\nThere was an error in line 44 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 83 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 84 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 112 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 115 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 176 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 177 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 178 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 179 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 180 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 217 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 218 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 234 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 285 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 286 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 324 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 325 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 346 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 347 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 348 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 349 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 350 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 351 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 359 of /etc/audit/audit.rules", "stderr_lines": ["Unknown user: chrony", "There was an error in line 24 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 28 of /etc/audit/audit.rules", "Unknown user: ntp", "There was an error in line 44 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 83 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 84 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 112 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 115 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 176 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 177 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 178 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 179 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 180 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 217 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 218 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 234 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 285 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 286 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 324 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 325 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 346 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 347 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 348 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 349 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 350 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 351 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 359 of /etc/audit/audit.rules"], "stdout": "/usr/sbin/augenrules: No change\nNo rules\nenabled 1\nfailure 1\npid 2916\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 0\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0\nenabled 1\nfailure 1\npid 2916\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 0\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0", "stdout_lines": ["/usr/sbin/augenrules: No change", "No rules", "enabled 1", "failure 1", "pid 2916", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 0", "backlog_wait_time 60000", "backlog_wait_time_actual 0", "enabled 1", "failure 1", "pid 2916", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 0", "backlog_wait_time 60000", "backlog_wait_time_actual 0"]} 2025-09-09 21:03:20.098505 | debian-bookworm | 2025-09-09 21:03:20.098588 | debian-bookworm | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2025-09-09 21:03:20.130487 | ubuntu-jammy | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2025-09-09 21:03:18 UTC", "ActiveEnterTimestampMonotonic": "1520123791", "ActiveExitTimestamp": "Tue 2025-09-09 21:03:18 UTC", "ActiveExitTimestampMonotonic": "1519965730", "ActiveState": "active", "After": "system.slice local-fs.target systemd-tmpfiles-setup.service systemd-journald.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2025-09-09 21:03:18 UTC", "AssertTimestampMonotonic": "1520008092", "Before": "sysinit.target ssh.service systemd-update-utmp.service shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "153619000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2025-09-09 21:03:18 UTC", "ConditionTimestampMonotonic": "1520007958", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestamp": "n/a", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2029", "ExecMainStartTimestamp": "Tue 2025-09-09 21:03:18 UTC", "ExecMainStartTimestampMonotonic": "1520032717", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2025-09-09 21:03:18 UTC] ; stop_time=[Tue 2025-09-09 21:03:18 UTC] ; pid=2028 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2025-09-09 21:03:18 UTC] ; stop_time=[Tue 2025-09-09 21:03:18 UTC] ; pid=2028 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2025-09-09 21:03:18 UTC] ; stop_time=[Tue 2025-09-09 21:03:18 UTC] ; pid=2032 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2025-09-09 21:03:18 UTC] ; stop_time=[Tue 2025-09-09 21:03:18 UTC] ; pid=2032 ; code=exited ; status=0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "Tue 2025-09-09 21:03:18 UTC", "InactiveEnterTimestampMonotonic": "1520005956", "InactiveExitTimestamp": "Tue 2025-09-09 21:03:18 UTC", "InactiveExitTimestampMonotonic": "1520010878", "InvocationID": "4d28d948435a4876be056737857fd65e", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15337", "LimitNPROCSoft": "15337", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15337", "LimitSIGPENDINGSoft": "15337", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2029", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "1880064", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "yes", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Tue 2025-09-09 21:03:18 UTC", "StateChangeTimestampMonotonic": "1520123791", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4601", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestamp": "n/a", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2025-09-09 21:03:20.131508 | ubuntu-jammy | 2025-09-09 21:03:20.131540 | ubuntu-jammy | PLAY RECAP ********************************************************************* 2025-09-09 21:03:20.131548 | ubuntu-jammy | molecule-auditd : ok=15 changed=8 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2025-09-09 21:03:20.131553 | ubuntu-jammy | 2025-09-09 21:03:20.224364 | ubuntu-jammy | INFO [delegated > converge] Completed 2025-09-09 21:03:20.632277 | centos-9-stream | ok: Runtime: 0:00:17.184230 2025-09-09 21:03:20.654533 | ubuntu-jammy | ok: Runtime: 0:00:17.736951 2025-09-09 21:03:20.836509 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2025-09-09 21:03:19 UTC", "ActiveEnterTimestampMonotonic": "1068536365", "ActiveExitTimestamp": "Tue 2025-09-09 21:03:19 UTC", "ActiveExitTimestampMonotonic": "1068334738", "ActiveState": "active", "After": "systemd-tmpfiles-setup.service systemd-journald.socket system.slice local-fs.target", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2025-09-09 21:03:19 UTC", "AssertTimestampMonotonic": "1068377061", "Before": "systemd-update-utmp.service sysinit.target shutdown.target ssh.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "177552000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2025-09-09 21:03:19 UTC", "ConditionTimestampMonotonic": "1068377009", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3406", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2916", "ExecMainStartTimestamp": "Tue 2025-09-09 21:03:19 UTC", "ExecMainStartTimestampMonotonic": "1068421975", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2025-09-09 21:03:19 UTC] ; stop_time=[Tue 2025-09-09 21:03:19 UTC] ; pid=2914 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2025-09-09 21:03:19 UTC] ; stop_time=[Tue 2025-09-09 21:03:19 UTC] ; pid=2914 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2025-09-09 21:03:19 UTC] ; stop_time=[Tue 2025-09-09 21:03:19 UTC] ; pid=2919 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2025-09-09 21:03:19 UTC] ; stop_time=[Tue 2025-09-09 21:03:19 UTC] ; pid=2919 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "Tue 2025-09-09 21:03:19 UTC", "InactiveEnterTimestampMonotonic": "1068376243", "InactiveExitTimestamp": "Tue 2025-09-09 21:03:19 UTC", "InactiveExitTimestampMonotonic": "1068393259", "InvocationID": "1ae249f83d634e9dbf3c87c6ff6d9f31", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15481", "LimitNPROCSoft": "15481", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15481", "LimitSIGPENDINGSoft": "15481", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2916", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "2076672", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Tue 2025-09-09 21:03:19 UTC", "StateChangeTimestampMonotonic": "1068536365", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2025-09-09 21:03:20.837433 | debian-bookworm | 2025-09-09 21:03:20.837549 | debian-bookworm | PLAY RECAP ********************************************************************* 2025-09-09 21:03:20.837671 | debian-bookworm | molecule-auditd : ok=15 changed=8 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2025-09-09 21:03:20.837763 | debian-bookworm | 2025-09-09 21:03:20.946106 | debian-bookworm | INFO [delegated > converge] Completed 2025-09-09 21:03:21.103197 | debian-bookworm | ok: Runtime: 0:00:18.428340 2025-09-09 21:03:21.139508 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2025-09-09 21:03:11 UTC", "ActiveEnterTimestampMonotonic": "1511015716", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "systemd-tmpfiles-setup.service local-fs.target systemd-journald.socket system.slice", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2025-09-09 21:03:11 UTC", "AssertTimestampMonotonic": "1510967987", "Before": "ssh.service shutdown.target systemd-update-utmp.service sysinit.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "39035000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2025-09-09 21:03:11 UTC", "ConditionTimestampMonotonic": "1510967942", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3910", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2124", "ExecMainStartTimestamp": "Tue 2025-09-09 21:03:11 UTC", "ExecMainStartTimestampMonotonic": "1510985343", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2025-09-09 21:03:11 UTC] ; stop_time=[Tue 2025-09-09 21:03:11 UTC] ; pid=2123 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2025-09-09 21:03:11 UTC] ; stop_time=[Tue 2025-09-09 21:03:11 UTC] ; pid=2123 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2025-09-09 21:03:11 UTC] ; stop_time=[Tue 2025-09-09 21:03:11 UTC] ; pid=2128 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2025-09-09 21:03:11 UTC] ; stop_time=[Tue 2025-09-09 21:03:11 UTC] ; pid=2128 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2025-09-09 21:03:11 UTC", "InactiveExitTimestampMonotonic": "1510976306", "InvocationID": "35157d1938e3429385036bc91991cc48", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15387", "LimitNPROCSoft": "15387", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15387", "LimitSIGPENDINGSoft": "15387", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2124", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3490095104", "MemoryCurrent": "516096", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2158592", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Tue 2025-09-09 21:03:11 UTC", "StateChangeTimestampMonotonic": "1511015716", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4616", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2025-09-09 21:03:21.144901 | ubuntu-noble | 2025-09-09 21:03:21.144948 | ubuntu-noble | RUNNING HANDLER [auditd : Generate auditd rules] ******************************* 2025-09-09 21:03:21.549946 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "cmd": ["augenrules", "--load"], "delta": "0:00:00.060890", "end": "2025-09-09 21:03:21.479561", "msg": "", "rc": 0, "start": "2025-09-09 21:03:21.418671", "stderr": "Unknown user: chrony\nThere was an error in line 24 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 28 of /etc/audit/audit.rules\nUnknown user: ntp\nThere was an error in line 44 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 83 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 84 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 86 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 112 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 115 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 176 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 177 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 178 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 179 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 180 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 217 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 218 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 234 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 285 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 286 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 324 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 325 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 346 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 347 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 348 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 349 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 350 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 351 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 359 of /etc/audit/audit.rules", "stderr_lines": ["Unknown user: chrony", "There was an error in line 24 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 28 of /etc/audit/audit.rules", "Unknown user: ntp", "There was an error in line 44 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 83 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 84 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 86 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 112 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 115 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 176 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 177 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 178 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 179 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 180 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 217 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 218 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 234 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 285 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 286 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 324 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 325 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 346 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 347 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 348 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 349 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 350 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 351 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 359 of /etc/audit/audit.rules"], "stdout": "/usr/sbin/augenrules: No change\nNo rules\nenabled 1\nfailure 1\npid 2516\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 1279\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0\nenabled 1\nfailure 1\npid 2516\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 1282\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0", "stdout_lines": ["/usr/sbin/augenrules: No change", "No rules", "enabled 1", "failure 1", "pid 2516", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 1279", "backlog_wait_time 60000", "backlog_wait_time_actual 0", "enabled 1", "failure 1", "pid 2516", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 1282", "backlog_wait_time 60000", "backlog_wait_time_actual 0"]} 2025-09-09 21:03:21.550010 | ubuntu-noble | 2025-09-09 21:03:21.550018 | ubuntu-noble | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2025-09-09 21:03:22.281642 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2025-09-09 21:03:21 UTC", "ActiveEnterTimestampMonotonic": "1520323933", "ActiveExitTimestamp": "Tue 2025-09-09 21:03:20 UTC", "ActiveExitTimestampMonotonic": "1520150769", "ActiveState": "active", "After": "systemd-tmpfiles-setup.service local-fs.target systemd-journald.socket system.slice", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2025-09-09 21:03:20 UTC", "AssertTimestampMonotonic": "1520194091", "Before": "ssh.service shutdown.target systemd-update-utmp.service sysinit.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "165676000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2025-09-09 21:03:20 UTC", "ConditionTimestampMonotonic": "1520193936", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3952", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2516", "ExecMainStartTimestamp": "Tue 2025-09-09 21:03:20 UTC", "ExecMainStartTimestampMonotonic": "1520231236", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2025-09-09 21:03:20 UTC] ; stop_time=[Tue 2025-09-09 21:03:20 UTC] ; pid=2515 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2025-09-09 21:03:20 UTC] ; stop_time=[Tue 2025-09-09 21:03:20 UTC] ; pid=2515 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2025-09-09 21:03:20 UTC] ; stop_time=[Tue 2025-09-09 21:03:21 UTC] ; pid=2519 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2025-09-09 21:03:20 UTC] ; stop_time=[Tue 2025-09-09 21:03:21 UTC] ; pid=2519 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "Tue 2025-09-09 21:03:20 UTC", "InactiveEnterTimestampMonotonic": "1520191659", "InactiveExitTimestamp": "Tue 2025-09-09 21:03:20 UTC", "InactiveExitTimestampMonotonic": "1520203604", "InvocationID": "2e206d800b3f4f0ea584bdc851bc0778", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15387", "LimitNPROCSoft": "15387", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15387", "LimitSIGPENDINGSoft": "15387", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2516", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3525869568", "MemoryCurrent": "1863680", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2121728", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Tue 2025-09-09 21:03:21 UTC", "StateChangeTimestampMonotonic": "1520323933", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4616", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2025-09-09 21:03:22.283173 | ubuntu-noble | 2025-09-09 21:03:22.283201 | ubuntu-noble | PLAY RECAP ********************************************************************* 2025-09-09 21:03:22.283207 | ubuntu-noble | molecule-auditd : ok=15 changed=8 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2025-09-09 21:03:22.283211 | ubuntu-noble | 2025-09-09 21:03:22.382842 | ubuntu-noble | INFO [delegated > converge] Completed 2025-09-09 21:03:22.555390 | ubuntu-noble | ok: Runtime: 0:00:19.843077 2025-09-09 21:03:22.583007 | 2025-09-09 21:03:22.583164 | TASK [ansible-molecule : Run molecule verify action with scenario delegated] 2025-09-09 21:03:23.893221 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-09-09 21:03:23.900316 | ubuntu-noble | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-09-09 21:03:23.900378 | ubuntu-noble | INFO default scenario not found, disabling shared state. 2025-09-09 21:03:23.900538 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: verify 2025-09-09 21:03:23.900599 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-09-09 21:03:23.853900 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-09-09 21:03:23.864090 | debian-bookworm | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-09-09 21:03:23.864294 | debian-bookworm | INFO default scenario not found, disabling shared state. 2025-09-09 21:03:23.864639 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: verify 2025-09-09 21:03:23.864754 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-09-09 21:03:23.737815 | ubuntu-jammy | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-09-09 21:03:23.743835 | ubuntu-jammy | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-09-09 21:03:23.743882 | ubuntu-jammy | INFO default scenario not found, disabling shared state. 2025-09-09 21:03:23.744065 | ubuntu-jammy | INFO [delegated > discovery] scenario test matrix: verify 2025-09-09 21:03:23.744125 | ubuntu-jammy | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-09-09 21:03:24.159956 | centos-9-stream | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-09-09 21:03:24.172525 | centos-9-stream | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-09-09 21:03:24.172718 | centos-9-stream | INFO default scenario not found, disabling shared state. 2025-09-09 21:03:24.173019 | centos-9-stream | INFO [delegated > discovery] scenario test matrix: verify 2025-09-09 21:03:24.173120 | centos-9-stream | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-09-09 21:03:25.528365 | ubuntu-noble | INFO [delegated > verify] Starting 2025-09-09 21:03:25.530010 | ubuntu-noble | INFO [delegated > verify] Executing Testinfra tests found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests/... 2025-09-09 21:03:25.535979 | ubuntu-noble | DEBUG: ANSIBLE ENVIRONMENT: 2025-09-09 21:03:25.536013 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2025-09-09 21:03:25.536021 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2025-09-09 21:03:25.536029 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2025-09-09 21:03:25.536038 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2025-09-09 21:03:25.536045 | ubuntu-noble | ANSIBLE_ROLE: auditd 2025-09-09 21:03:25.536052 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2025-09-09 21:03:25.536068 | ubuntu-noble | ANSIBLE_VERBOSITY: '1' 2025-09-09 21:03:25.536075 | ubuntu-noble | 2025-09-09 21:03:25.539290 | ubuntu-noble | DEBUG: MOLECULE ENVIRONMENT: 2025-09-09 21:03:25.539313 | ubuntu-noble | MOLECULE_DEBUG: 'True' 2025-09-09 21:03:25.539323 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2025-09-09 21:03:25.539332 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2025-09-09 21:03:25.539341 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2025-09-09 21:03:25.539348 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2025-09-09 21:03:25.539355 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2025-09-09 21:03:25.539361 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2025-09-09 21:03:25.539367 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2025-09-09 21:03:25.539374 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2025-09-09 21:03:25.539381 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2025-09-09 21:03:25.539388 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2025-09-09 21:03:25.539395 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2025-09-09 21:03:25.539401 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2025-09-09 21:03:25.539407 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2025-09-09 21:03:25.539413 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-09 21:03:25.539420 | ubuntu-noble | 2025-09-09 21:03:25.541341 | ubuntu-noble | DEBUG: SHELL REPLAY: 2025-09-09 21:03:25.541366 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-09 21:03:25.379666 | debian-bookworm | INFO [delegated > verify] Starting 2025-09-09 21:03:25.381627 | debian-bookworm | INFO [delegated > verify] Executing Testinfra tests found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests/... 2025-09-09 21:03:25.387189 | debian-bookworm | DEBUG: ANSIBLE ENVIRONMENT: 2025-09-09 21:03:25.387227 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2025-09-09 21:03:25.387238 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2025-09-09 21:03:25.387246 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2025-09-09 21:03:25.387252 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2025-09-09 21:03:25.387258 | debian-bookworm | ANSIBLE_ROLE: auditd 2025-09-09 21:03:25.387264 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2025-09-09 21:03:25.387276 | debian-bookworm | ANSIBLE_VERBOSITY: '1' 2025-09-09 21:03:25.387282 | debian-bookworm | 2025-09-09 21:03:25.389905 | debian-bookworm | DEBUG: MOLECULE ENVIRONMENT: 2025-09-09 21:03:25.389931 | debian-bookworm | MOLECULE_DEBUG: 'True' 2025-09-09 21:03:25.389938 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2025-09-09 21:03:25.389944 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2025-09-09 21:03:25.389951 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2025-09-09 21:03:25.389957 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2025-09-09 21:03:25.389963 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2025-09-09 21:03:25.389968 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2025-09-09 21:03:25.389973 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2025-09-09 21:03:25.389979 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2025-09-09 21:03:25.389984 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2025-09-09 21:03:25.389989 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2025-09-09 21:03:25.389994 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2025-09-09 21:03:25.389999 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2025-09-09 21:03:25.390004 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2025-09-09 21:03:25.390009 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-09 21:03:25.390014 | debian-bookworm | 2025-09-09 21:03:25.391903 | debian-bookworm | DEBUG: SHELL REPLAY: 2025-09-09 21:03:25.391938 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-09 21:03:25.250539 | ubuntu-jammy | INFO [delegated > verify] Starting 2025-09-09 21:03:25.251980 | ubuntu-jammy | INFO [delegated > verify] Executing Testinfra tests found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests/... 2025-09-09 21:03:25.257186 | ubuntu-jammy | DEBUG: ANSIBLE ENVIRONMENT: 2025-09-09 21:03:25.257202 | ubuntu-jammy | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2025-09-09 21:03:25.257211 | ubuntu-jammy | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2025-09-09 21:03:25.257219 | ubuntu-jammy | ANSIBLE_LIBRARY: ../../plugins 2025-09-09 21:03:25.257225 | ubuntu-jammy | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2025-09-09 21:03:25.257232 | ubuntu-jammy | ANSIBLE_ROLE: auditd 2025-09-09 21:03:25.257238 | ubuntu-jammy | ANSIBLE_ROLES_PATH: ../../roles 2025-09-09 21:03:25.257251 | ubuntu-jammy | ANSIBLE_VERBOSITY: '1' 2025-09-09 21:03:25.257257 | ubuntu-jammy | 2025-09-09 21:03:25.259992 | ubuntu-jammy | DEBUG: MOLECULE ENVIRONMENT: 2025-09-09 21:03:25.260006 | ubuntu-jammy | MOLECULE_DEBUG: 'True' 2025-09-09 21:03:25.260012 | ubuntu-jammy | MOLECULE_DEPENDENCY_NAME: galaxy 2025-09-09 21:03:25.260019 | ubuntu-jammy | MOLECULE_DRIVER_NAME: default 2025-09-09 21:03:25.260025 | ubuntu-jammy | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2025-09-09 21:03:25.260031 | ubuntu-jammy | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2025-09-09 21:03:25.260038 | ubuntu-jammy | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2025-09-09 21:03:25.260043 | ubuntu-jammy | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2025-09-09 21:03:25.260049 | ubuntu-jammy | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2025-09-09 21:03:25.260056 | ubuntu-jammy | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2025-09-09 21:03:25.260062 | ubuntu-jammy | MOLECULE_PROVISIONER_NAME: ansible 2025-09-09 21:03:25.260068 | ubuntu-jammy | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2025-09-09 21:03:25.260073 | ubuntu-jammy | MOLECULE_SCENARIO_NAME: delegated 2025-09-09 21:03:25.260079 | ubuntu-jammy | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2025-09-09 21:03:25.260085 | ubuntu-jammy | MOLECULE_VERIFIER_NAME: testinfra 2025-09-09 21:03:25.260091 | ubuntu-jammy | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-09 21:03:25.260097 | ubuntu-jammy | 2025-09-09 21:03:25.261862 | ubuntu-jammy | DEBUG: SHELL REPLAY: 2025-09-09 21:03:25.261877 | ubuntu-jammy | ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-09 21:03:25.514762 | ubuntu-jammy | writing pytest debug information to pytestdebug.log 2025-09-09 21:03:25.527311 | ubuntu-jammy | ============================= test session starts ============================== 2025-09-09 21:03:25.527908 | ubuntu-jammy | platform linux -- Python 3.11.0rc1, pytest-8.4.2, pluggy-1.6.0 -- /home/zuul/venv/bin/python3.11 2025-09-09 21:03:25.528446 | ubuntu-jammy | using: pytest-8.4.2 2025-09-09 21:03:25.528909 | ubuntu-jammy | registered third-party plugins: 2025-09-09 21:03:25.529396 | ubuntu-jammy | pytest-testinfra-10.2.2 at /home/zuul/venv/lib/python3.11/site-packages/testinfra/plugin.py 2025-09-09 21:03:25.529852 | ubuntu-jammy | rootdir: /home/zuul 2025-09-09 21:03:25.530243 | ubuntu-jammy | plugins: testinfra-10.2.2 2025-09-09 21:03:25.823963 | ubuntu-noble | writing pytest debug information to pytestdebug.log 2025-09-09 21:03:25.841844 | ubuntu-noble | ============================= test session starts ============================== 2025-09-09 21:03:25.841909 | ubuntu-noble | platform linux -- Python 3.12.3, pytest-8.4.2, pluggy-1.6.0 -- /home/zuul/venv/bin/python3 2025-09-09 21:03:25.841926 | ubuntu-noble | using: pytest-8.4.2 2025-09-09 21:03:25.841939 | ubuntu-noble | registered third-party plugins: 2025-09-09 21:03:25.842050 | ubuntu-noble | pytest-testinfra-10.2.2 at /home/zuul/venv/lib/python3.12/site-packages/testinfra/plugin.py 2025-09-09 21:03:25.842442 | ubuntu-noble | rootdir: /home/zuul 2025-09-09 21:03:25.842899 | ubuntu-noble | plugins: testinfra-10.2.2 2025-09-09 21:03:25.646213 | debian-bookworm | writing pytest debug information to pytestdebug.log 2025-09-09 21:03:25.661272 | debian-bookworm | ============================= test session starts ============================== 2025-09-09 21:03:25.661895 | debian-bookworm | platform linux -- Python 3.11.2, pytest-8.4.2, pluggy-1.6.0 -- /home/zuul/venv/bin/python3 2025-09-09 21:03:25.662375 | debian-bookworm | using: pytest-8.4.2 2025-09-09 21:03:25.662917 | debian-bookworm | registered third-party plugins: 2025-09-09 21:03:25.663578 | debian-bookworm | pytest-testinfra-10.2.2 at /home/zuul/venv/lib/python3.11/site-packages/testinfra/plugin.py 2025-09-09 21:03:25.664021 | debian-bookworm | rootdir: /home/zuul 2025-09-09 21:03:25.664486 | debian-bookworm | plugins: testinfra-10.2.2 2025-09-09 21:03:25.839603 | centos-9-stream | WARNING Another version of 'amazon.aws' 9.5.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 9.5.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.839690 | centos-9-stream | WARNING Another version of 'ansible.netcommon' 7.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 7.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.839704 | centos-9-stream | WARNING Another version of 'ansible.posix' 1.6.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.6.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.839711 | centos-9-stream | WARNING Another version of 'ansible.utils' 5.1.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.1.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.839717 | centos-9-stream | WARNING Another version of 'ansible.windows' 2.8.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.8.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.839723 | centos-9-stream | WARNING Another version of 'arista.eos' 10.1.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 10.1.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.839728 | centos-9-stream | WARNING Another version of 'awx.awx' 24.6.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 24.6.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.839748 | centos-9-stream | WARNING Another version of 'azure.azcollection' 3.8.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.8.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.839754 | centos-9-stream | WARNING Another version of 'check_point.mgmt' 6.5.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.5.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.839761 | centos-9-stream | WARNING Another version of 'chocolatey.chocolatey' 1.5.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.5.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.839766 | centos-9-stream | WARNING Another version of 'cisco.aci' 2.12.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.12.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.839772 | centos-9-stream | WARNING Another version of 'cisco.asa' 6.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.839778 | centos-9-stream | WARNING Another version of 'cisco.dnac' 6.31.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.31.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.839811 | centos-9-stream | WARNING Another version of 'cisco.intersight' 2.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.839817 | centos-9-stream | WARNING Another version of 'cisco.ios' 9.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 9.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.839824 | centos-9-stream | WARNING Another version of 'cisco.iosxr' 10.3.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 10.3.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.839842 | centos-9-stream | WARNING Another version of 'cisco.ise' 2.10.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.10.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.839848 | centos-9-stream | WARNING Another version of 'cisco.meraki' 2.21.4 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.21.4 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.839857 | centos-9-stream | WARNING Another version of 'cisco.mso' 2.11.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.11.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.839863 | centos-9-stream | WARNING Another version of 'cisco.nxos' 9.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 9.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.839868 | centos-9-stream | WARNING Another version of 'cisco.ucs' 1.16.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.16.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.839874 | centos-9-stream | WARNING Another version of 'cloud.common' 4.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.839880 | centos-9-stream | WARNING Another version of 'cloudscale_ch.cloud' 2.5.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.839885 | centos-9-stream | WARNING Another version of 'community.aws' 9.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 9.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.839891 | centos-9-stream | WARNING Another version of 'community.ciscosmb' 1.0.11 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.11 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.839897 | centos-9-stream | WARNING Another version of 'community.crypto' 2.26.5 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.26.5 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.839903 | centos-9-stream | WARNING Another version of 'community.digitalocean' 1.27.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.27.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.839910 | centos-9-stream | WARNING Another version of 'community.dns' 3.3.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.3.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.839920 | centos-9-stream | WARNING Another version of 'community.docker' 4.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.839926 | centos-9-stream | WARNING Another version of 'community.general' 10.7.4 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 10.7.4 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.839932 | centos-9-stream | WARNING Another version of 'community.grafana' 2.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.839941 | centos-9-stream | WARNING Another version of 'community.hashi_vault' 6.2.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.2.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.839949 | centos-9-stream | WARNING Another version of 'community.hrobot' 2.5.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.840009 | centos-9-stream | WARNING Another version of 'community.library_inventory_filtering_v1' 1.1.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.1.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.840076 | centos-9-stream | WARNING Another version of 'community.libvirt' 1.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.840130 | centos-9-stream | WARNING Another version of 'community.mongodb' 1.7.10 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.7.10 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.840200 | centos-9-stream | WARNING Another version of 'community.mysql' 3.15.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.15.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.840256 | centos-9-stream | WARNING Another version of 'community.network' 5.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.840317 | centos-9-stream | WARNING Another version of 'community.okd' 4.0.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.0.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.840381 | centos-9-stream | WARNING Another version of 'community.postgresql' 3.14.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.14.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.840498 | centos-9-stream | WARNING Another version of 'community.proxmox' 1.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.840564 | centos-9-stream | WARNING Another version of 'community.proxysql' 1.6.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.6.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.840630 | centos-9-stream | WARNING Another version of 'community.rabbitmq' 1.6.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.6.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.840693 | centos-9-stream | WARNING Another version of 'community.routeros' 3.10.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.10.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.840819 | centos-9-stream | WARNING Another version of 'community.sap_libs' 1.4.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.4.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.840878 | centos-9-stream | WARNING Another version of 'community.sops' 2.2.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.840939 | centos-9-stream | WARNING Another version of 'community.vmware' 5.8.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.8.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.840996 | centos-9-stream | WARNING Another version of 'community.windows' 2.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.841058 | centos-9-stream | WARNING Another version of 'community.zabbix' 3.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.841112 | centos-9-stream | WARNING Another version of 'containers.podman' 1.17.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.17.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.841168 | centos-9-stream | WARNING Another version of 'cyberark.conjur' 1.3.7 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.3.7 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.841229 | centos-9-stream | WARNING Another version of 'cyberark.pas' 1.0.35 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.35 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.841289 | centos-9-stream | WARNING Another version of 'dellemc.enterprise_sonic' 2.5.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.841348 | centos-9-stream | WARNING Another version of 'dellemc.openmanage' 9.12.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 9.12.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.841407 | centos-9-stream | WARNING Another version of 'dellemc.powerflex' 2.6.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.6.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.841494 | centos-9-stream | WARNING Another version of 'dellemc.unity' 2.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.841556 | centos-9-stream | WARNING Another version of 'f5networks.f5_modules' 1.38.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.38.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.841616 | centos-9-stream | WARNING Another version of 'fortinet.fortimanager' 2.10.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.10.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.841674 | centos-9-stream | WARNING Another version of 'fortinet.fortios' 2.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.841752 | centos-9-stream | WARNING Another version of 'google.cloud' 1.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.841821 | centos-9-stream | WARNING Another version of 'grafana.grafana' 5.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.841870 | centos-9-stream | WARNING Another version of 'hetzner.hcloud' 4.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.841927 | centos-9-stream | WARNING Another version of 'hitachivantara.vspone_block' 3.5.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.5.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.841986 | centos-9-stream | WARNING Another version of 'ibm.qradar' 4.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.842041 | centos-9-stream | WARNING Another version of 'ibm.spectrum_virtualize' 2.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.842099 | centos-9-stream | WARNING Another version of 'ibm.storage_virtualize' 2.7.4 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.7.4 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.842156 | centos-9-stream | WARNING Another version of 'ieisystem.inmanage' 3.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.842215 | centos-9-stream | WARNING Another version of 'infinidat.infinibox' 1.6.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.6.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.842272 | centos-9-stream | WARNING Another version of 'infoblox.nios_modules' 1.8.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.8.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.842329 | centos-9-stream | WARNING Another version of 'inspur.ispim' 2.2.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.842385 | centos-9-stream | WARNING Another version of 'junipernetworks.junos' 9.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 9.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.842439 | centos-9-stream | WARNING Another version of 'kaytus.ksmanage' 2.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.842515 | centos-9-stream | WARNING Another version of 'kubernetes.core' 5.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.842571 | centos-9-stream | WARNING Another version of 'kubevirt.core' 2.2.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.842627 | centos-9-stream | WARNING Another version of 'lowlydba.sqlserver' 2.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.842683 | centos-9-stream | WARNING Another version of 'microsoft.ad' 1.9.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.9.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.842754 | centos-9-stream | WARNING Another version of 'microsoft.iis' 1.0.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.842810 | centos-9-stream | WARNING Another version of 'netapp.cloudmanager' 21.24.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 21.24.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.842866 | centos-9-stream | WARNING Another version of 'netapp.ontap' 22.14.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 22.14.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.842922 | centos-9-stream | WARNING Another version of 'netapp.storagegrid' 21.14.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 21.14.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.842977 | centos-9-stream | WARNING Another version of 'netapp_eseries.santricity' 1.4.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.4.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.843031 | centos-9-stream | WARNING Another version of 'netbox.netbox' 3.21.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.21.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.843088 | centos-9-stream | WARNING Another version of 'ngine_io.cloudstack' 2.5.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.843141 | centos-9-stream | WARNING Another version of 'openstack.cloud' 2.4.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.843195 | centos-9-stream | WARNING Another version of 'ovirt.ovirt' 3.2.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.2.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.843252 | centos-9-stream | WARNING Another version of 'purestorage.flasharray' 1.36.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.36.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.843308 | centos-9-stream | WARNING Another version of 'purestorage.flashblade' 1.21.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.21.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.843364 | centos-9-stream | WARNING Another version of 'ravendb.ravendb' 1.0.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.843421 | centos-9-stream | WARNING Another version of 'sensu.sensu_go' 1.14.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.14.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.843503 | centos-9-stream | WARNING Another version of 'splunk.es' 4.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.843560 | centos-9-stream | WARNING Another version of 'telekom_mms.icinga_director' 2.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.843616 | centos-9-stream | WARNING Another version of 'theforeman.foreman' 4.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.843671 | centos-9-stream | WARNING Another version of 'vmware.vmware' 1.11.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.11.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.843728 | centos-9-stream | WARNING Another version of 'vmware.vmware_rest' 4.9.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.9.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.843822 | centos-9-stream | WARNING Another version of 'vultr.cloud' 1.13.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.13.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.843879 | centos-9-stream | WARNING Another version of 'vyos.vyos' 5.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.843933 | centos-9-stream | WARNING Another version of 'wti.remote' 1.0.10 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.10 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-09 21:03:25.859628 | centos-9-stream | INFO [delegated > verify] Starting 2025-09-09 21:03:25.861223 | centos-9-stream | INFO [delegated > verify] Executing Testinfra tests found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests/... 2025-09-09 21:03:25.866618 | centos-9-stream | DEBUG: ANSIBLE ENVIRONMENT: 2025-09-09 21:03:25.866633 | centos-9-stream | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2025-09-09 21:03:25.866642 | centos-9-stream | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2025-09-09 21:03:25.866650 | centos-9-stream | ANSIBLE_LIBRARY: ../../plugins 2025-09-09 21:03:25.866657 | centos-9-stream | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2025-09-09 21:03:25.866663 | centos-9-stream | ANSIBLE_ROLE: auditd 2025-09-09 21:03:25.866669 | centos-9-stream | ANSIBLE_ROLES_PATH: ../../roles 2025-09-09 21:03:25.866675 | centos-9-stream | ANSIBLE_VERBOSITY: '1' 2025-09-09 21:03:25.866681 | centos-9-stream | 2025-09-09 21:03:25.869411 | centos-9-stream | DEBUG: MOLECULE ENVIRONMENT: 2025-09-09 21:03:25.869436 | centos-9-stream | MOLECULE_DEBUG: 'True' 2025-09-09 21:03:25.869443 | centos-9-stream | MOLECULE_DEPENDENCY_NAME: galaxy 2025-09-09 21:03:25.869461 | centos-9-stream | MOLECULE_DRIVER_NAME: default 2025-09-09 21:03:25.869468 | centos-9-stream | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2025-09-09 21:03:25.869474 | centos-9-stream | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2025-09-09 21:03:25.869485 | centos-9-stream | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2025-09-09 21:03:25.869491 | centos-9-stream | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2025-09-09 21:03:25.869497 | centos-9-stream | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2025-09-09 21:03:25.869504 | centos-9-stream | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2025-09-09 21:03:25.869510 | centos-9-stream | MOLECULE_PROVISIONER_NAME: ansible 2025-09-09 21:03:25.869516 | centos-9-stream | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2025-09-09 21:03:25.869522 | centos-9-stream | MOLECULE_SCENARIO_NAME: delegated 2025-09-09 21:03:25.869528 | centos-9-stream | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2025-09-09 21:03:25.869533 | centos-9-stream | MOLECULE_VERIFIER_NAME: testinfra 2025-09-09 21:03:25.869540 | centos-9-stream | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-09 21:03:25.869546 | centos-9-stream | 2025-09-09 21:03:25.871390 | centos-9-stream | DEBUG: SHELL REPLAY: 2025-09-09 21:03:25.871432 | centos-9-stream | ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-09 21:03:26.131373 | centos-9-stream | writing pytest debug information to pytestdebug.log 2025-09-09 21:03:26.145274 | centos-9-stream | ============================= test session starts ============================== 2025-09-09 21:03:26.145778 | centos-9-stream | platform linux -- Python 3.11.13, pytest-8.4.2, pluggy-1.6.0 -- /home/zuul/venv/bin/python3.11 2025-09-09 21:03:26.146187 | centos-9-stream | using: pytest-8.4.2 2025-09-09 21:03:26.146651 | centos-9-stream | registered third-party plugins: 2025-09-09 21:03:26.147580 | centos-9-stream | pytest-testinfra-10.2.2 at /home/zuul/venv/lib64/python3.11/site-packages/testinfra/plugin.py 2025-09-09 21:03:26.147940 | centos-9-stream | rootdir: /home/zuul 2025-09-09 21:03:26.148289 | centos-9-stream | plugins: testinfra-10.2.2 2025-09-09 21:03:26.516104 | ubuntu-jammy | collecting ... collected 6 items 2025-09-09 21:03:26.516226 | ubuntu-jammy | 2025-09-09 21:03:26.983109 | ubuntu-noble | collecting ... collected 6 items 2025-09-09 21:03:26.983533 | ubuntu-noble | 2025-09-09 21:03:26.740733 | debian-bookworm | collecting ... collected 6 items 2025-09-09 21:03:26.740829 | debian-bookworm | 2025-09-09 21:03:27.303291 | centos-9-stream | collecting ... collected 6 items 2025-09-09 21:03:27.303386 | centos-9-stream | 2025-09-09 21:03:30.819836 | ubuntu-jammy | tests/auditd.py::test_pkg[ansible://molecule-auditd] PASSED [ 16%] 2025-09-09 21:03:30.855808 | ubuntu-jammy | tests/auditd.py::test_conffile[ansible://molecule-auditd] PASSED [ 33%] 2025-09-09 21:03:31.352620 | debian-bookworm | tests/auditd.py::test_pkg[ansible://molecule-auditd] PASSED [ 16%] 2025-09-09 21:03:31.396110 | debian-bookworm | tests/auditd.py::test_conffile[ansible://molecule-auditd] PASSED [ 33%] 2025-09-09 21:03:31.712856 | ubuntu-noble | tests/auditd.py::test_pkg[ansible://molecule-auditd] PASSED [ 16%] 2025-09-09 21:03:31.761578 | ubuntu-noble | tests/auditd.py::test_conffile[ansible://molecule-auditd] PASSED [ 33%] 2025-09-09 21:03:33.249480 | ubuntu-jammy | tests/auditd.py::test_adjustment[ansible://molecule-auditd] PASSED [ 50%] 2025-09-09 21:03:33.951477 | debian-bookworm | tests/auditd.py::test_adjustment[ansible://molecule-auditd] PASSED [ 50%] 2025-09-09 21:03:33.781246 | centos-9-stream | tests/auditd.py::test_pkg[ansible://molecule-auditd] PASSED [ 16%] 2025-09-09 21:03:33.831357 | centos-9-stream | tests/auditd.py::test_conffile[ansible://molecule-auditd] PASSED [ 33%] 2025-09-09 21:03:34.479447 | ubuntu-noble | tests/auditd.py::test_adjustment[ansible://molecule-auditd] PASSED [ 50%] 2025-09-09 21:03:36.553345 | centos-9-stream | tests/auditd.py::test_adjustment[ansible://molecule-auditd] PASSED [ 50%] 2025-09-09 21:03:38.005837 | ubuntu-jammy | tests/auditd.py::test_rulefiles[ansible://molecule-auditd] PASSED [ 66%] 2025-09-09 21:03:38.926050 | debian-bookworm | tests/auditd.py::test_rulefiles[ansible://molecule-auditd] PASSED [ 66%] 2025-09-09 21:03:39.197844 | ubuntu-jammy | tests/auditd.py::test_srv[ansible://molecule-auditd] PASSED [ 83%] 2025-09-09 21:03:39.275634 | ubuntu-jammy | wrote pytest debug information to pytestdebug.log 2025-09-09 21:03:39.276312 | ubuntu-jammy | tests/auditd.py::test_function[ansible://molecule-auditd] PASSED [100%] 2025-09-09 21:03:39.276450 | ubuntu-jammy | 2025-09-09 21:03:39.276543 | ubuntu-jammy | ============================== 6 passed in 13.70s ============================== 2025-09-09 21:03:39.329955 | ubuntu-jammy | INFO [delegated > verify] Verifier completed successfully. 2025-09-09 21:03:39.330077 | ubuntu-jammy | INFO [delegated > verify] Completed 2025-09-09 21:03:39.705692 | ubuntu-jammy | ok: Runtime: 0:00:16.467363 2025-09-09 21:03:39.938921 | ubuntu-noble | tests/auditd.py::test_rulefiles[ansible://molecule-auditd] PASSED [ 66%] 2025-09-09 21:03:40.441750 | debian-bookworm | ok: Runtime: 0:00:17.442619 2025-09-09 21:03:40.193405 | debian-bookworm | tests/auditd.py::test_srv[ansible://molecule-auditd] PASSED [ 83%] 2025-09-09 21:03:40.266872 | debian-bookworm | wrote pytest debug information to pytestdebug.log 2025-09-09 21:03:40.266956 | debian-bookworm | tests/auditd.py::test_function[ansible://molecule-auditd] PASSED [100%] 2025-09-09 21:03:40.267522 | debian-bookworm | 2025-09-09 21:03:40.267556 | debian-bookworm | ============================== 6 passed in 14.56s ============================== 2025-09-09 21:03:40.308592 | debian-bookworm | INFO [delegated > verify] Verifier completed successfully. 2025-09-09 21:03:40.308903 | debian-bookworm | INFO [delegated > verify] Completed 2025-09-09 21:03:41.596640 | ubuntu-noble | ok: Runtime: 0:00:18.562553 2025-09-09 21:03:41.342605 | ubuntu-noble | tests/auditd.py::test_srv[ansible://molecule-auditd] PASSED [ 83%] 2025-09-09 21:03:41.415610 | ubuntu-noble | wrote pytest debug information to pytestdebug.log 2025-09-09 21:03:41.417265 | ubuntu-noble | tests/auditd.py::test_function[ansible://molecule-auditd] PASSED [100%] 2025-09-09 21:03:41.417501 | ubuntu-noble | 2025-09-09 21:03:41.417531 | ubuntu-noble | ============================== 6 passed in 15.53s ============================== 2025-09-09 21:03:41.471867 | ubuntu-noble | INFO [delegated > verify] Verifier completed successfully. 2025-09-09 21:03:41.471914 | ubuntu-noble | INFO [delegated > verify] Completed 2025-09-09 21:03:42.057881 | centos-9-stream | tests/auditd.py::test_rulefiles[ansible://molecule-auditd] PASSED [ 66%] 2025-09-09 21:03:43.465885 | centos-9-stream | tests/auditd.py::test_srv[ansible://molecule-auditd] PASSED [ 83%] 2025-09-09 21:03:43.554971 | centos-9-stream | wrote pytest debug information to pytestdebug.log 2025-09-09 21:03:43.555136 | centos-9-stream | tests/auditd.py::test_function[ansible://molecule-auditd] PASSED [100%] 2025-09-09 21:03:43.555252 | centos-9-stream | 2025-09-09 21:03:43.555370 | centos-9-stream | ============================== 6 passed in 17.37s ============================== 2025-09-09 21:03:43.600774 | centos-9-stream | INFO [delegated > verify] Verifier completed successfully. 2025-09-09 21:03:43.600880 | centos-9-stream | INFO [delegated > verify] Completed 2025-09-09 21:03:43.733546 | centos-9-stream | ok: Runtime: 0:00:20.669969 2025-09-09 21:03:43.744901 | 2025-09-09 21:03:43.745146 | TASK [ansible-molecule : Run molecule destroy action with scenario delegated] 2025-09-09 21:03:44.345123 | centos-9-stream | skipping: Conditional result was False 2025-09-09 21:03:44.346508 | debian-bookworm | skipping: Conditional result was False 2025-09-09 21:03:44.347194 | ubuntu-jammy | skipping: Conditional result was False 2025-09-09 21:03:44.347732 | ubuntu-noble | skipping: Conditional result was False 2025-09-09 21:03:44.381459 | 2025-09-09 21:03:44.381572 | PLAY RECAP 2025-09-09 21:03:44.381638 | centos-9-stream | ok: 9 changed: 8 unreachable: 0 failed: 0 skipped: 2 rescued: 0 ignored: 0 2025-09-09 21:03:44.381714 | debian-bookworm | ok: 17 changed: 12 unreachable: 0 failed: 0 skipped: 16 rescued: 0 ignored: 0 2025-09-09 21:03:44.381748 | ubuntu-jammy | ok: 13 changed: 10 unreachable: 0 failed: 0 skipped: 9 rescued: 0 ignored: 0 2025-09-09 21:03:44.381777 | ubuntu-noble | ok: 17 changed: 12 unreachable: 0 failed: 0 skipped: 16 rescued: 0 ignored: 0 2025-09-09 21:03:44.381798 | 2025-09-09 21:03:44.540117 | RUN END RESULT_NORMAL: [untrusted : github.com/osism/zuul-jobs/playbooks/ansible-molecule/run.yaml@main] 2025-09-09 21:03:44.544797 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post.yaml@main] 2025-09-09 21:03:45.340721 | 2025-09-09 21:03:45.340871 | PLAY [Base post] 2025-09-09 21:03:45.353817 | 2025-09-09 21:03:45.353945 | TASK [remove-build-sshkey : Remove the build SSH key from all nodes] 2025-09-09 21:03:46.160344 | ubuntu-jammy | changed 2025-09-09 21:03:46.175991 | debian-bookworm | changed 2025-09-09 21:03:46.190525 | centos-9-stream | changed 2025-09-09 21:03:46.246003 | ubuntu-noble | changed 2025-09-09 21:03:46.264422 | 2025-09-09 21:03:46.264509 | PLAY RECAP 2025-09-09 21:03:46.264564 | centos-9-stream | ok: 1 changed: 1 unreachable: 0 failed: 0 skipped: 0 rescued: 0 ignored: 0 2025-09-09 21:03:46.264596 | debian-bookworm | ok: 1 changed: 1 unreachable: 0 failed: 0 skipped: 0 rescued: 0 ignored: 0 2025-09-09 21:03:46.264625 | ubuntu-jammy | ok: 1 changed: 1 unreachable: 0 failed: 0 skipped: 0 rescued: 0 ignored: 0 2025-09-09 21:03:46.264669 | ubuntu-noble | ok: 1 changed: 1 unreachable: 0 failed: 0 skipped: 0 rescued: 0 ignored: 0 2025-09-09 21:03:46.264691 | 2025-09-09 21:03:46.377256 | POST-RUN END RESULT_NORMAL: [trusted : github.com/osism/zuul-config/playbooks/base/post.yaml@main] 2025-09-09 21:03:46.379542 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post-logs.yaml@main] 2025-09-09 21:03:47.189353 | 2025-09-09 21:03:47.189535 | PLAY [Base post-logs] 2025-09-09 21:03:47.201513 | 2025-09-09 21:03:47.201664 | TASK [generate-zuul-manifest : Generate Zuul manifest] 2025-09-09 21:03:47.652415 | localhost | changed 2025-09-09 21:03:47.669204 | 2025-09-09 21:03:47.669371 | TASK [generate-zuul-manifest : Return Zuul manifest URL to Zuul] 2025-09-09 21:03:47.708001 | localhost | ok 2025-09-09 21:03:47.716907 | 2025-09-09 21:03:47.717143 | TASK [Set zuul-log-path fact] 2025-09-09 21:03:47.738607 | localhost | ok 2025-09-09 21:03:47.754991 | 2025-09-09 21:03:47.755121 | TASK [set-zuul-log-path-fact : Set log path for a build] 2025-09-09 21:03:47.792049 | localhost | ok 2025-09-09 21:03:47.797427 | 2025-09-09 21:03:47.797585 | TASK [upload-logs : Create log directories] 2025-09-09 21:03:48.284772 | localhost | changed 2025-09-09 21:03:48.291662 | 2025-09-09 21:03:48.291966 | TASK [upload-logs : Ensure logs are readable before uploading] 2025-09-09 21:03:48.785591 | localhost -> localhost | ok: Runtime: 0:00:00.007029 2025-09-09 21:03:48.789750 | 2025-09-09 21:03:48.789877 | TASK [upload-logs : Upload logs to log server] 2025-09-09 21:03:49.363280 | localhost | Output suppressed because no_log was given 2025-09-09 21:03:49.365698 | 2025-09-09 21:03:49.365826 | LOOP [upload-logs : Compress console log and json output] 2025-09-09 21:03:49.423775 | localhost | skipping: Conditional result was False 2025-09-09 21:03:49.429028 | localhost | skipping: Conditional result was False 2025-09-09 21:03:49.437051 | 2025-09-09 21:03:49.437280 | LOOP [upload-logs : Upload compressed console log and json output] 2025-09-09 21:03:49.487417 | localhost | skipping: Conditional result was False 2025-09-09 21:03:49.488215 | 2025-09-09 21:03:49.492105 | localhost | skipping: Conditional result was False 2025-09-09 21:03:49.500127 | 2025-09-09 21:03:49.500358 | LOOP [upload-logs : Upload console log and json output]