2025-09-21 03:28:27.139404 | Job console starting 2025-09-21 03:28:27.203980 | Updating git repos 2025-09-21 03:28:27.250670 | Cloning repos into workspace 2025-09-21 03:28:27.327176 | Restoring repo states 2025-09-21 03:28:27.358352 | Merging changes 2025-09-21 03:28:27.871183 | Checking out repos 2025-09-21 03:28:28.007769 | Preparing playbooks 2025-09-21 03:28:28.614209 | Running Ansible setup 2025-09-21 03:28:36.675298 | PRE-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/pre.yaml@main] 2025-09-21 03:28:37.462307 | 2025-09-21 03:28:37.462483 | PLAY [Base pre] 2025-09-21 03:28:37.482089 | 2025-09-21 03:28:37.482244 | TASK [Setup log path fact] 2025-09-21 03:28:37.511037 | centos-9-stream | ok 2025-09-21 03:28:37.524149 | 2025-09-21 03:28:37.524288 | TASK [set-zuul-log-path-fact : Set log path for a build] 2025-09-21 03:28:37.564471 | centos-9-stream | ok 2025-09-21 03:28:37.572636 | 2025-09-21 03:28:37.572782 | TASK [emit-job-header : Print job information] 2025-09-21 03:28:37.624321 | # Job Information 2025-09-21 03:28:37.624591 | Ansible Version: 2.16.14 2025-09-21 03:28:37.624650 | Job: ansible-collection-services-molecule-auditd 2025-09-21 03:28:37.624707 | Pipeline: check 2025-09-21 03:28:37.624766 | Executor: 521e9411259a 2025-09-21 03:28:37.624803 | Triggered by: https://github.com/osism/ansible-collection-services/pull/1994 2025-09-21 03:28:37.624842 | Event ID: fd67e5a0-969a-11f0-9646-b94992790657 2025-09-21 03:28:37.632889 | 2025-09-21 03:28:37.633042 | LOOP [emit-job-header : Print node information] 2025-09-21 03:28:37.728453 | centos-9-stream | ok: 2025-09-21 03:28:37.728765 | centos-9-stream | # Node Information 2025-09-21 03:28:37.728815 | centos-9-stream | Inventory Hostname: centos-9-stream 2025-09-21 03:28:37.728851 | centos-9-stream | Hostname: np0000110564 2025-09-21 03:28:37.728880 | centos-9-stream | Username: zuul 2025-09-21 03:28:37.728901 | centos-9-stream | Distro: CentOS 9 2025-09-21 03:28:37.728926 | centos-9-stream | Provider: regiocloud-a 2025-09-21 03:28:37.728947 | centos-9-stream | Region: 2025-09-21 03:28:37.728968 | centos-9-stream | Label: centos-9-stream 2025-09-21 03:28:37.728987 | centos-9-stream | Product Name: OpenStack Nova 2025-09-21 03:28:37.729006 | centos-9-stream | Interface IP: 2a13:1a81:8000:3124:f816:3eff:fe2f:4dd3 2025-09-21 03:28:37.783232 | centos-9-stream | ok: 2025-09-21 03:28:37.783353 | centos-9-stream | # Node Information 2025-09-21 03:28:37.783386 | centos-9-stream | Inventory Hostname: debian-bookworm 2025-09-21 03:28:37.783411 | centos-9-stream | Hostname: debian 2025-09-21 03:28:37.783437 | centos-9-stream | Username: zuul 2025-09-21 03:28:37.783459 | centos-9-stream | Distro: Debian 12.12 2025-09-21 03:28:37.783479 | centos-9-stream | Provider: regiocloud-a 2025-09-21 03:28:37.783499 | centos-9-stream | Region: 2025-09-21 03:28:37.783518 | centos-9-stream | Label: debian-bookworm 2025-09-21 03:28:37.783537 | centos-9-stream | Product Name: OpenStack Nova 2025-09-21 03:28:37.783555 | centos-9-stream | Interface IP: 2a13:1a81:8000:3124:f816:3eff:fec3:6eac 2025-09-21 03:28:37.835287 | centos-9-stream | ok: 2025-09-21 03:28:37.835386 | centos-9-stream | # Node Information 2025-09-21 03:28:37.835419 | centos-9-stream | Inventory Hostname: ubuntu-jammy 2025-09-21 03:28:37.835442 | centos-9-stream | Hostname: ubuntu 2025-09-21 03:28:37.835463 | centos-9-stream | Username: zuul 2025-09-21 03:28:37.835483 | centos-9-stream | Distro: Ubuntu 22.04 2025-09-21 03:28:37.835503 | centos-9-stream | Provider: regiocloud-a 2025-09-21 03:28:37.835523 | centos-9-stream | Region: 2025-09-21 03:28:37.835541 | centos-9-stream | Label: ubuntu-jammy 2025-09-21 03:28:37.835560 | centos-9-stream | Product Name: OpenStack Nova 2025-09-21 03:28:37.835578 | centos-9-stream | Interface IP: 2a13:1a81:8000:3124:f816:3eff:fe86:1444 2025-09-21 03:28:37.900675 | centos-9-stream | ok: 2025-09-21 03:28:37.900928 | centos-9-stream | # Node Information 2025-09-21 03:28:37.901024 | centos-9-stream | Inventory Hostname: ubuntu-noble 2025-09-21 03:28:37.901093 | centos-9-stream | Hostname: ubuntu 2025-09-21 03:28:37.901170 | centos-9-stream | Username: zuul 2025-09-21 03:28:37.901238 | centos-9-stream | Distro: Ubuntu 24.04 2025-09-21 03:28:37.901296 | centos-9-stream | Provider: regiocloud-a 2025-09-21 03:28:37.901353 | centos-9-stream | Region: 2025-09-21 03:28:37.901415 | centos-9-stream | Label: ubuntu-noble 2025-09-21 03:28:37.901546 | centos-9-stream | Product Name: OpenStack Nova 2025-09-21 03:28:37.901607 | centos-9-stream | Interface IP: 2a13:1a81:8000:3124:f816:3eff:fef1:b8b3 2025-09-21 03:28:37.927937 | 2025-09-21 03:28:37.928048 | TASK [log-inventory : Ensure Zuul Ansible directory exists] 2025-09-21 03:28:38.421020 | centos-9-stream -> localhost | changed 2025-09-21 03:28:38.428272 | 2025-09-21 03:28:38.428397 | TASK [log-inventory : Copy ansible inventory to logs dir] 2025-09-21 03:28:40.015315 | centos-9-stream -> localhost | changed 2025-09-21 03:28:40.098444 | debian-bookworm -> localhost | ok 2025-09-21 03:28:40.164298 | ubuntu-noble -> localhost | ok 2025-09-21 03:28:40.212993 | ubuntu-jammy -> localhost | ok 2025-09-21 03:28:40.236534 | 2025-09-21 03:28:40.236656 | TASK [add-build-sshkey : Check to see if ssh key was already created for this build] 2025-09-21 03:28:40.539912 | centos-9-stream -> localhost | ok 2025-09-21 03:28:40.559830 | 2025-09-21 03:28:40.559998 | TASK [add-build-sshkey : Create a new key in workspace based on build UUID] 2025-09-21 03:28:40.609816 | centos-9-stream | ok 2025-09-21 03:28:40.630783 | debian-bookworm | ok 2025-09-21 03:28:40.636055 | ubuntu-jammy | ok 2025-09-21 03:28:40.640569 | ubuntu-noble | ok 2025-09-21 03:28:40.668580 | centos-9-stream | included: /var/lib/zuul/builds/38e862a82de244db8f3f5816a5304fb4/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/create-key-and-replace.yaml 2025-09-21 03:28:40.668669 | debian-bookworm | included: /var/lib/zuul/builds/38e862a82de244db8f3f5816a5304fb4/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/create-key-and-replace.yaml 2025-09-21 03:28:40.668699 | ubuntu-jammy | included: /var/lib/zuul/builds/38e862a82de244db8f3f5816a5304fb4/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/create-key-and-replace.yaml 2025-09-21 03:28:40.668720 | ubuntu-noble | included: /var/lib/zuul/builds/38e862a82de244db8f3f5816a5304fb4/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/create-key-and-replace.yaml 2025-09-21 03:28:40.675645 | 2025-09-21 03:28:40.675792 | TASK [add-build-sshkey : Create Temp SSH key] 2025-09-21 03:28:41.675374 | centos-9-stream -> localhost | Generating public/private rsa key pair. 2025-09-21 03:28:41.675900 | centos-9-stream -> localhost | Your identification has been saved in /var/lib/zuul/builds/38e862a82de244db8f3f5816a5304fb4/work/38e862a82de244db8f3f5816a5304fb4_id_rsa 2025-09-21 03:28:41.676013 | centos-9-stream -> localhost | Your public key has been saved in /var/lib/zuul/builds/38e862a82de244db8f3f5816a5304fb4/work/38e862a82de244db8f3f5816a5304fb4_id_rsa.pub 2025-09-21 03:28:41.676091 | centos-9-stream -> localhost | The key fingerprint is: 2025-09-21 03:28:41.676162 | centos-9-stream -> localhost | SHA256:74hdZ2ptT9h3qvDCiVPg5+nmKq90DpgGtMsi/1PQmQE zuul-build-sshkey 2025-09-21 03:28:41.676226 | centos-9-stream -> localhost | The key's randomart image is: 2025-09-21 03:28:41.676288 | centos-9-stream -> localhost | +---[RSA 3072]----+ 2025-09-21 03:28:41.676347 | centos-9-stream -> localhost | | E. | 2025-09-21 03:28:41.676408 | centos-9-stream -> localhost | | . | 2025-09-21 03:28:41.676467 | centos-9-stream -> localhost | | . . + | 2025-09-21 03:28:41.676525 | centos-9-stream -> localhost | | . .. + . | 2025-09-21 03:28:41.676580 | centos-9-stream -> localhost | | o . .S. | 2025-09-21 03:28:41.676635 | centos-9-stream -> localhost | | . o o. ..o o | 2025-09-21 03:28:41.676690 | centos-9-stream -> localhost | |o o +.o .*+++ o o| 2025-09-21 03:28:41.676771 | centos-9-stream -> localhost | |.o ....*o+O*o. o.| 2025-09-21 03:28:41.676847 | centos-9-stream -> localhost | | ....o+*B=oooo | 2025-09-21 03:28:41.676904 | centos-9-stream -> localhost | +----[SHA256]-----+ 2025-09-21 03:28:41.677044 | centos-9-stream -> localhost | ok: Runtime: 0:00:00.511270 2025-09-21 03:28:41.689571 | 2025-09-21 03:28:41.689746 | TASK [add-build-sshkey : Remote setup ssh keys (linux)] 2025-09-21 03:28:41.714252 | centos-9-stream | ok 2025-09-21 03:28:41.746435 | debian-bookworm | ok 2025-09-21 03:28:41.751088 | ubuntu-jammy | ok 2025-09-21 03:28:41.755629 | ubuntu-noble | ok 2025-09-21 03:28:41.778861 | centos-9-stream | included: /var/lib/zuul/builds/38e862a82de244db8f3f5816a5304fb4/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/remote-linux.yaml 2025-09-21 03:28:41.778939 | debian-bookworm | included: /var/lib/zuul/builds/38e862a82de244db8f3f5816a5304fb4/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/remote-linux.yaml 2025-09-21 03:28:41.778967 | ubuntu-jammy | included: /var/lib/zuul/builds/38e862a82de244db8f3f5816a5304fb4/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/remote-linux.yaml 2025-09-21 03:28:41.778988 | ubuntu-noble | included: /var/lib/zuul/builds/38e862a82de244db8f3f5816a5304fb4/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/remote-linux.yaml 2025-09-21 03:28:41.794772 | 2025-09-21 03:28:41.794929 | TASK [add-build-sshkey : Remove previously added zuul-build-sshkey] 2025-09-21 03:28:41.826413 | centos-9-stream | skipping: Conditional result was False 2025-09-21 03:28:41.839400 | debian-bookworm | skipping: Conditional result was False 2025-09-21 03:28:41.842314 | ubuntu-jammy | skipping: Conditional result was False 2025-09-21 03:28:41.852764 | ubuntu-noble | skipping: Conditional result was False 2025-09-21 03:28:41.857916 | 2025-09-21 03:28:41.858017 | TASK [add-build-sshkey : Enable access via build key on all nodes] 2025-09-21 03:28:42.459965 | ubuntu-jammy | changed 2025-09-21 03:28:42.485358 | debian-bookworm | changed 2025-09-21 03:28:42.492997 | centos-9-stream | changed 2025-09-21 03:28:42.568371 | ubuntu-noble | changed 2025-09-21 03:28:42.572985 | 2025-09-21 03:28:42.573090 | TASK [add-build-sshkey : Make sure user has a .ssh] 2025-09-21 03:28:42.851333 | ubuntu-jammy | ok 2025-09-21 03:28:42.859451 | debian-bookworm | ok 2025-09-21 03:28:42.911352 | centos-9-stream | ok 2025-09-21 03:28:42.926270 | ubuntu-noble | ok 2025-09-21 03:28:42.935131 | 2025-09-21 03:28:42.935281 | TASK [add-build-sshkey : Install build private key as SSH key on all nodes] 2025-09-21 03:28:43.632197 | debian-bookworm | changed 2025-09-21 03:28:43.638900 | ubuntu-jammy | changed 2025-09-21 03:28:43.709938 | ubuntu-noble | changed 2025-09-21 03:28:43.979342 | centos-9-stream | changed 2025-09-21 03:28:43.994521 | 2025-09-21 03:28:43.994667 | TASK [add-build-sshkey : Install build public key as SSH key on all nodes] 2025-09-21 03:28:44.652818 | ubuntu-jammy | changed 2025-09-21 03:28:44.661824 | debian-bookworm | changed 2025-09-21 03:28:44.766649 | ubuntu-noble | changed 2025-09-21 03:28:45.032606 | centos-9-stream | changed 2025-09-21 03:28:45.041579 | 2025-09-21 03:28:45.041801 | TASK [add-build-sshkey : Remote setup ssh keys (windows)] 2025-09-21 03:28:45.094167 | centos-9-stream | skipping: Conditional result was False 2025-09-21 03:28:45.111416 | debian-bookworm | skipping: Conditional result was False 2025-09-21 03:28:45.112608 | ubuntu-jammy | skipping: Conditional result was False 2025-09-21 03:28:45.123080 | ubuntu-noble | skipping: Conditional result was False 2025-09-21 03:28:45.130161 | 2025-09-21 03:28:45.130276 | TASK [remove-zuul-sshkey : Remove master key from local agent] 2025-09-21 03:28:45.519033 | centos-9-stream -> localhost | changed 2025-09-21 03:28:45.555722 | 2025-09-21 03:28:45.555894 | TASK [add-build-sshkey : Add back temp key] 2025-09-21 03:28:45.884399 | centos-9-stream -> localhost | Identity added: /var/lib/zuul/builds/38e862a82de244db8f3f5816a5304fb4/work/38e862a82de244db8f3f5816a5304fb4_id_rsa (zuul-build-sshkey) 2025-09-21 03:28:45.884965 | centos-9-stream -> localhost | ok: Runtime: 0:00:00.020679 2025-09-21 03:28:45.895055 | 2025-09-21 03:28:45.895187 | TASK [add-build-sshkey : Verify we can still SSH to all nodes] 2025-09-21 03:28:46.318167 | debian-bookworm | ok 2025-09-21 03:28:46.323038 | ubuntu-jammy | ok 2025-09-21 03:28:46.349030 | ubuntu-noble | ok 2025-09-21 03:28:46.354321 | centos-9-stream | ok 2025-09-21 03:28:46.358722 | 2025-09-21 03:28:46.358891 | TASK [add-build-sshkey : Verify we can still SSH to all nodes (windows)] 2025-09-21 03:28:46.388925 | centos-9-stream | skipping: Conditional result was False 2025-09-21 03:28:46.416817 | debian-bookworm | skipping: Conditional result was False 2025-09-21 03:28:46.427833 | ubuntu-jammy | skipping: Conditional result was False 2025-09-21 03:28:46.428171 | ubuntu-noble | skipping: Conditional result was False 2025-09-21 03:28:46.450684 | 2025-09-21 03:28:46.450860 | TASK [start-zuul-console : Start zuul_console daemon.] 2025-09-21 03:28:46.942377 | ubuntu-jammy | ok 2025-09-21 03:28:46.949282 | debian-bookworm | ok 2025-09-21 03:28:46.985999 | centos-9-stream | ok 2025-09-21 03:28:46.992070 | ubuntu-noble | ok 2025-09-21 03:28:47.014896 | 2025-09-21 03:28:47.015007 | TASK [validate-host : Define zuul_info_dir fact] 2025-09-21 03:28:47.053086 | centos-9-stream | ok 2025-09-21 03:28:47.071774 | debian-bookworm | ok 2025-09-21 03:28:47.079478 | ubuntu-jammy | ok 2025-09-21 03:28:47.084306 | ubuntu-noble | ok 2025-09-21 03:28:47.088346 | 2025-09-21 03:28:47.088447 | TASK [validate-host : Ensure Zuul Ansible directory exists] 2025-09-21 03:28:47.381240 | centos-9-stream -> localhost | ok 2025-09-21 03:28:47.394022 | 2025-09-21 03:28:47.394198 | TASK [validate-host : Collect information about the host] 2025-09-21 03:28:48.526494 | debian-bookworm | ok 2025-09-21 03:28:48.601615 | centos-9-stream | ok 2025-09-21 03:28:48.616849 | ubuntu-jammy | ok 2025-09-21 03:28:48.657293 | ubuntu-noble | ok 2025-09-21 03:28:48.670774 | 2025-09-21 03:28:48.670927 | TASK [validate-host : Sanitize hostname] 2025-09-21 03:28:48.795664 | centos-9-stream | ok 2025-09-21 03:28:48.810625 | debian-bookworm | ok 2025-09-21 03:28:48.814954 | ubuntu-jammy | ok 2025-09-21 03:28:48.828723 | ubuntu-noble | ok 2025-09-21 03:28:48.832708 | 2025-09-21 03:28:48.832828 | TASK [validate-host : Write out all ansible variables/facts known for each host] 2025-09-21 03:28:49.602705 | ubuntu-jammy -> localhost | changed 2025-09-21 03:28:49.604212 | debian-bookworm -> localhost | changed 2025-09-21 03:28:49.665853 | ubuntu-noble -> localhost | changed 2025-09-21 03:28:49.768064 | centos-9-stream -> localhost | changed 2025-09-21 03:28:49.773486 | 2025-09-21 03:28:49.773612 | TASK [validate-host : Collect information about zuul worker] 2025-09-21 03:28:50.229348 | ubuntu-jammy | ok 2025-09-21 03:28:50.248402 | debian-bookworm | ok 2025-09-21 03:28:50.284038 | ubuntu-noble | ok 2025-09-21 03:28:50.338108 | centos-9-stream | ok 2025-09-21 03:28:50.342346 | 2025-09-21 03:28:50.342452 | TASK [validate-host : Write out all zuul information for each host] 2025-09-21 03:28:51.049531 | ubuntu-jammy -> localhost | changed 2025-09-21 03:28:51.081530 | ubuntu-noble -> localhost | changed 2025-09-21 03:28:51.183919 | debian-bookworm -> localhost | changed 2025-09-21 03:28:51.358784 | centos-9-stream -> localhost | changed 2025-09-21 03:28:51.383253 | 2025-09-21 03:28:51.383370 | TASK [prepare-workspace-log : Start zuul_console daemon.] 2025-09-21 03:28:51.670073 | ubuntu-jammy | ok 2025-09-21 03:28:51.686592 | debian-bookworm | ok 2025-09-21 03:28:51.721028 | centos-9-stream | ok 2025-09-21 03:28:51.757024 | ubuntu-noble | ok 2025-09-21 03:28:51.762407 | 2025-09-21 03:28:51.762509 | TASK [prepare-workspace-log : Synchronize src repos to workspace directory.] 2025-09-21 03:28:52.882965 | debian-bookworm | changed: 2025-09-21 03:28:52.883255 | debian-bookworm | cd+++++++++ src/ 2025-09-21 03:28:52.883292 | debian-bookworm | cd+++++++++ src/github.com/ 2025-09-21 03:28:52.883329 | debian-bookworm | cd+++++++++ src/github.com/osism/ 2025-09-21 03:28:52.883351 | debian-bookworm | cd+++++++++ src/github.com/osism/ansible-collection-services/ 2025-09-21 03:28:52.883373 | debian-bookworm | validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-09-21 03:32:01.346884 | debian-bookworm | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-09-21 03:32:01.346975 | debian-bookworm | INFO default scenario not found, disabling shared state. 2025-09-21 03:32:01.347127 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: dependency 2025-09-21 03:32:01.347182 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-09-21 03:32:01.347621 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-09-21 03:32:01.354960 | ubuntu-noble | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-09-21 03:32:01.355044 | ubuntu-noble | INFO default scenario not found, disabling shared state. 2025-09-21 03:32:01.355172 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: dependency 2025-09-21 03:32:01.355198 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-09-21 03:32:01.251860 | ubuntu-jammy | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-09-21 03:32:01.259949 | ubuntu-jammy | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-09-21 03:32:01.260033 | ubuntu-jammy | INFO default scenario not found, disabling shared state. 2025-09-21 03:32:01.260178 | ubuntu-jammy | INFO [delegated > discovery] scenario test matrix: dependency 2025-09-21 03:32:01.260224 | ubuntu-jammy | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-09-21 03:32:01.372657 | centos-9-stream | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-09-21 03:32:01.383259 | centos-9-stream | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-09-21 03:32:01.383373 | centos-9-stream | INFO default scenario not found, disabling shared state. 2025-09-21 03:32:01.383416 | centos-9-stream | INFO [delegated > discovery] scenario test matrix: dependency 2025-09-21 03:32:01.383439 | centos-9-stream | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-09-21 03:32:02.726156 | debian-bookworm | INFO [delegated > dependency] Starting 2025-09-21 03:32:02.726426 | debian-bookworm | WARNING [delegated > dependency] Skipping, missing the requirements file. 2025-09-21 03:32:02.505288 | ubuntu-jammy | INFO [delegated > dependency] Starting 2025-09-21 03:32:02.505458 | ubuntu-jammy | WARNING [delegated > dependency] Skipping, missing the requirements file. 2025-09-21 03:32:02.932682 | ubuntu-jammy | ansible-galaxy [core 2.19.2] 2025-09-21 03:32:02.933158 | ubuntu-jammy | config file = None 2025-09-21 03:32:02.933599 | ubuntu-jammy | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2025-09-21 03:32:02.934084 | ubuntu-jammy | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2025-09-21 03:32:02.934503 | ubuntu-jammy | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.11/site-packages:/home/zuul/venv/lib/python3.11/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.11/dist-packages 2025-09-21 03:32:02.934844 | ubuntu-jammy | executable location = /home/zuul/venv/bin/ansible-galaxy 2025-09-21 03:32:02.935336 | ubuntu-jammy | python version = 3.11.0rc1 (main, Aug 12 2022, 10:02:14) [GCC 11.2.0] (/home/zuul/venv/bin/python3.11) 2025-09-21 03:32:02.936029 | ubuntu-jammy | jinja version = 3.1.6 2025-09-21 03:32:02.936389 | ubuntu-jammy | pyyaml version = 6.0.2 (with libyaml v0.2.5) 2025-09-21 03:32:02.936699 | ubuntu-jammy | No config file found; using defaults 2025-09-21 03:32:02.937227 | ubuntu-jammy | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2025-09-21 03:32:02.938267 | ubuntu-jammy | Loading collection ansible._protomatter from /home/zuul/venv/lib/python3.11/site-packages/ansible/_internal/ansible_collections/ansible/_protomatter 2025-09-21 03:32:02.938645 | ubuntu-jammy | Found installed collection ansible._protomatter:2.19.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible/_internal/ansible_collections/ansible/_protomatter' 2025-09-21 03:32:02.942679 | ubuntu-jammy | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2025-09-21 03:32:02.943305 | ubuntu-jammy | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2025-09-21 03:32:02.948594 | ubuntu-jammy | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware 2025-09-21 03:32:02.949174 | ubuntu-jammy | Found installed collection vmware.vmware:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware' 2025-09-21 03:32:02.949654 | ubuntu-jammy | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud 2025-09-21 03:32:02.950148 | ubuntu-jammy | Found installed collection openstack.cloud:2.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud' 2025-09-21 03:32:02.950485 | ubuntu-jammy | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight 2025-09-21 03:32:02.950900 | ubuntu-jammy | Found installed collection cisco.intersight:2.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight' 2025-09-21 03:32:02.951280 | ubuntu-jammy | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios 2025-09-21 03:32:02.951745 | ubuntu-jammy | Found installed collection fortinet.fortios:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios' 2025-09-21 03:32:02.954585 | ubuntu-jammy | Loading collection community.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows 2025-09-21 03:32:02.955108 | ubuntu-jammy | Found installed collection community.windows:3.0.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows' 2025-09-21 03:32:02.955425 | ubuntu-jammy | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac 2025-09-21 03:32:02.955895 | ubuntu-jammy | Found installed collection cisco.dnac:6.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac' 2025-09-21 03:32:02.956398 | ubuntu-jammy | Loading collection community.proxmox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox 2025-09-21 03:32:02.956880 | ubuntu-jammy | Found installed collection community.proxmox:1.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox' 2025-09-21 03:32:02.957767 | ubuntu-jammy | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean 2025-09-21 03:32:02.958126 | ubuntu-jammy | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean' 2025-09-21 03:32:02.959558 | ubuntu-jammy | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos 2025-09-21 03:32:02.960057 | ubuntu-jammy | Found installed collection cisco.nxos:11.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos' 2025-09-21 03:32:02.960543 | ubuntu-jammy | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid 2025-09-21 03:32:02.960982 | ubuntu-jammy | Found installed collection netapp.storagegrid:21.15.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2025-09-21 03:32:02.963166 | ubuntu-jammy | Loading collection awx.awx from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx 2025-09-21 03:32:02.963579 | ubuntu-jammy | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx' 2025-09-21 03:32:02.963894 | ubuntu-jammy | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2025-09-21 03:32:02.964413 | ubuntu-jammy | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2025-09-21 03:32:02.964694 | ubuntu-jammy | Loading collection community.sops from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops 2025-09-21 03:32:02.965033 | ubuntu-jammy | Found installed collection community.sops:2.2.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops' 2025-09-21 03:32:02.965371 | ubuntu-jammy | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault 2025-09-21 03:32:02.965748 | ubuntu-jammy | Found installed collection community.hashi_vault:7.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault' 2025-09-21 03:32:02.966560 | ubuntu-jammy | Loading collection arista.eos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos 2025-09-21 03:32:02.966973 | ubuntu-jammy | Found installed collection arista.eos:12.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos' 2025-09-21 03:32:02.968567 | ubuntu-jammy | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki 2025-09-21 03:32:02.969038 | ubuntu-jammy | Found installed collection cisco.meraki:2.21.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki' 2025-09-21 03:32:02.969610 | ubuntu-jammy | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex 2025-09-21 03:32:02.970049 | ubuntu-jammy | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2025-09-21 03:32:02.970510 | ubuntu-jammy | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray 2025-09-21 03:32:02.970974 | ubuntu-jammy | Found installed collection purestorage.flasharray:1.36.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2025-09-21 03:32:02.971227 | ubuntu-jammy | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2025-09-21 03:32:02.971670 | ubuntu-jammy | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2025-09-21 03:32:02.972030 | ubuntu-jammy | Loading collection containers.podman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman 2025-09-21 03:32:02.972573 | ubuntu-jammy | Found installed collection containers.podman:1.17.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman' 2025-09-21 03:32:02.972874 | ubuntu-jammy | Loading collection community.mysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql 2025-09-21 03:32:02.973150 | ubuntu-jammy | Found installed collection community.mysql:3.15.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql' 2025-09-21 03:32:02.973694 | ubuntu-jammy | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar 2025-09-21 03:32:02.943145 | centos-9-stream | WARNING Another version of 'amazon.aws' 10.1.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 10.1.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.943307 | centos-9-stream | WARNING Another version of 'ansible.netcommon' 8.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 8.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.943421 | centos-9-stream | WARNING Another version of 'ansible.posix' 2.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.943518 | centos-9-stream | WARNING Another version of 'ansible.utils' 6.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.943606 | centos-9-stream | WARNING Another version of 'ansible.windows' 3.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.943685 | centos-9-stream | WARNING Another version of 'arista.eos' 12.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 12.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.943754 | centos-9-stream | WARNING Another version of 'awx.awx' 24.6.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 24.6.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.943829 | centos-9-stream | WARNING Another version of 'azure.azcollection' 3.8.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.8.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.943898 | centos-9-stream | WARNING Another version of 'check_point.mgmt' 6.4.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.4.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.943988 | centos-9-stream | WARNING Another version of 'chocolatey.chocolatey' 1.5.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.5.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.944055 | centos-9-stream | WARNING Another version of 'cisco.aci' 2.12.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.12.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.944121 | centos-9-stream | WARNING Another version of 'cisco.dnac' 6.39.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.39.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.944222 | centos-9-stream | WARNING Another version of 'cisco.intersight' 2.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.944307 | centos-9-stream | WARNING Another version of 'cisco.ios' 11.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 11.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.944373 | centos-9-stream | WARNING Another version of 'cisco.iosxr' 12.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 12.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.944440 | centos-9-stream | WARNING Another version of 'cisco.meraki' 2.21.4 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.21.4 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.944505 | centos-9-stream | WARNING Another version of 'cisco.mso' 2.11.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.11.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.944568 | centos-9-stream | WARNING Another version of 'cisco.nxos' 11.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 11.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.944634 | centos-9-stream | WARNING Another version of 'cisco.ucs' 1.16.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.16.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.944694 | centos-9-stream | WARNING Another version of 'cloudscale_ch.cloud' 2.5.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.944756 | centos-9-stream | WARNING Another version of 'community.aws' 10.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 10.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.944819 | centos-9-stream | WARNING Another version of 'community.ciscosmb' 1.0.11 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.11 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.944879 | centos-9-stream | WARNING Another version of 'community.crypto' 3.0.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.0.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.945017 | centos-9-stream | WARNING Another version of 'community.digitalocean' 1.27.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.27.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.945080 | centos-9-stream | WARNING Another version of 'community.dns' 3.3.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.3.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.945144 | centos-9-stream | WARNING Another version of 'community.docker' 4.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.945241 | centos-9-stream | WARNING Another version of 'community.general' 11.2.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 11.2.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.945307 | centos-9-stream | WARNING Another version of 'community.grafana' 2.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.945375 | centos-9-stream | WARNING Another version of 'community.hashi_vault' 7.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 7.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.945439 | centos-9-stream | WARNING Another version of 'community.hrobot' 2.5.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.945502 | centos-9-stream | WARNING Another version of 'community.library_inventory_filtering_v1' 1.1.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.1.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.945564 | centos-9-stream | WARNING Another version of 'community.libvirt' 2.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.945630 | centos-9-stream | WARNING Another version of 'community.mongodb' 1.7.10 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.7.10 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.945688 | centos-9-stream | WARNING Another version of 'community.mysql' 3.15.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.15.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.945750 | centos-9-stream | WARNING Another version of 'community.okd' 5.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.945811 | centos-9-stream | WARNING Another version of 'community.postgresql' 4.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.945871 | centos-9-stream | WARNING Another version of 'community.proxmox' 1.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.945947 | centos-9-stream | WARNING Another version of 'community.proxysql' 1.6.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.6.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.946002 | centos-9-stream | WARNING Another version of 'community.rabbitmq' 1.6.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.6.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.946064 | centos-9-stream | WARNING Another version of 'community.routeros' 3.10.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.10.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.946124 | centos-9-stream | WARNING Another version of 'community.sap_libs' 1.4.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.4.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.946235 | centos-9-stream | WARNING Another version of 'community.sops' 2.2.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.946299 | centos-9-stream | WARNING Another version of 'community.vmware' 5.7.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.7.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.946358 | centos-9-stream | WARNING Another version of 'community.windows' 3.0.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.0.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.946418 | centos-9-stream | WARNING Another version of 'community.zabbix' 4.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.946478 | centos-9-stream | WARNING Another version of 'containers.podman' 1.17.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.17.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.946538 | centos-9-stream | WARNING Another version of 'cyberark.conjur' 1.3.7 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.3.7 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.946599 | centos-9-stream | WARNING Another version of 'cyberark.pas' 1.0.35 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.35 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.946661 | centos-9-stream | WARNING Another version of 'dellemc.enterprise_sonic' 3.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.946717 | centos-9-stream | WARNING Another version of 'dellemc.openmanage' 9.12.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 9.12.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.946777 | centos-9-stream | WARNING Another version of 'dellemc.powerflex' 2.6.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.6.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.946839 | centos-9-stream | WARNING Another version of 'dellemc.unity' 2.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.946902 | centos-9-stream | WARNING Another version of 'f5networks.f5_modules' 1.38.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.38.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.946983 | centos-9-stream | WARNING Another version of 'fortinet.fortimanager' 2.10.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.10.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.947048 | centos-9-stream | WARNING Another version of 'fortinet.fortios' 2.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.947114 | centos-9-stream | WARNING Another version of 'google.cloud' 1.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.947200 | centos-9-stream | WARNING Another version of 'grafana.grafana' 6.0.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.0.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.947266 | centos-9-stream | WARNING Another version of 'hetzner.hcloud' 5.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.947334 | centos-9-stream | WARNING Another version of 'hitachivantara.vspone_block' 4.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.947402 | centos-9-stream | WARNING Another version of 'ibm.qradar' 4.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.947467 | centos-9-stream | WARNING Another version of 'ibm.storage_virtualize' 2.7.4 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.7.4 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.947529 | centos-9-stream | WARNING Another version of 'ieisystem.inmanage' 3.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.947591 | centos-9-stream | WARNING Another version of 'infinidat.infinibox' 1.6.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.6.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.947654 | centos-9-stream | WARNING Another version of 'infoblox.nios_modules' 1.8.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.8.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.947713 | centos-9-stream | WARNING Another version of 'inspur.ispim' 2.2.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.947774 | centos-9-stream | WARNING Another version of 'junipernetworks.junos' 11.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 11.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.947839 | centos-9-stream | WARNING Another version of 'kaytus.ksmanage' 2.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.947971 | centos-9-stream | WARNING Another version of 'kubernetes.core' 6.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.948042 | centos-9-stream | WARNING Another version of 'kubevirt.core' 2.2.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.948106 | centos-9-stream | WARNING Another version of 'lowlydba.sqlserver' 2.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.948178 | centos-9-stream | WARNING Another version of 'microsoft.ad' 1.9.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.9.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.948258 | centos-9-stream | WARNING Another version of 'microsoft.iis' 1.0.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.948320 | centos-9-stream | WARNING Another version of 'netapp.cloudmanager' 21.24.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 21.24.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.948381 | centos-9-stream | WARNING Another version of 'netapp.ontap' 23.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 23.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.948442 | centos-9-stream | WARNING Another version of 'netapp.storagegrid' 21.15.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 21.15.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.948502 | centos-9-stream | WARNING Another version of 'netapp_eseries.santricity' 1.4.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.4.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.948562 | centos-9-stream | WARNING Another version of 'netbox.netbox' 3.21.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.21.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.948625 | centos-9-stream | WARNING Another version of 'ngine_io.cloudstack' 2.5.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.948686 | centos-9-stream | WARNING Another version of 'openstack.cloud' 2.4.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.948745 | centos-9-stream | WARNING Another version of 'ovirt.ovirt' 3.2.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.2.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.948807 | centos-9-stream | WARNING Another version of 'purestorage.flasharray' 1.36.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.36.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.948867 | centos-9-stream | WARNING Another version of 'purestorage.flashblade' 1.20.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.20.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.948988 | centos-9-stream | WARNING Another version of 'splunk.es' 4.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.949055 | centos-9-stream | WARNING Another version of 'telekom_mms.icinga_director' 2.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.949120 | centos-9-stream | WARNING Another version of 'theforeman.foreman' 5.5.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.5.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.949215 | centos-9-stream | WARNING Another version of 'vmware.vmware' 2.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.949283 | centos-9-stream | WARNING Another version of 'vmware.vmware_rest' 4.9.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.9.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.949347 | centos-9-stream | WARNING Another version of 'vultr.cloud' 1.13.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.13.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.949410 | centos-9-stream | WARNING Another version of 'vyos.vyos' 6.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.949471 | centos-9-stream | WARNING Another version of 'wti.remote' 1.0.10 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.10 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:02.966303 | centos-9-stream | INFO [delegated > dependency] Starting 2025-09-21 03:32:02.966693 | centos-9-stream | WARNING [delegated > dependency] Skipping, missing the requirements file. 2025-09-21 03:32:03.202509 | debian-bookworm | ansible-galaxy [core 2.19.2] 2025-09-21 03:32:03.203108 | debian-bookworm | config file = None 2025-09-21 03:32:03.203573 | debian-bookworm | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2025-09-21 03:32:03.204058 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2025-09-21 03:32:03.204509 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.11/site-packages:/home/zuul/venv/lib/python3.11/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.11/dist-packages 2025-09-21 03:32:03.204863 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-galaxy 2025-09-21 03:32:03.205353 | debian-bookworm | python version = 3.11.2 (main, Apr 28 2025, 14:11:48) [GCC 12.2.0] (/home/zuul/venv/bin/python3) 2025-09-21 03:32:03.205767 | debian-bookworm | jinja version = 3.1.6 2025-09-21 03:32:03.206349 | debian-bookworm | pyyaml version = 6.0.2 (with libyaml v0.2.5) 2025-09-21 03:32:03.206722 | debian-bookworm | No config file found; using defaults 2025-09-21 03:32:03.207326 | debian-bookworm | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2025-09-21 03:32:03.207809 | debian-bookworm | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2025-09-21 03:32:03.208277 | debian-bookworm | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2025-09-21 03:32:03.213066 | debian-bookworm | Loading collection ansible._protomatter from /home/zuul/venv/lib/python3.11/site-packages/ansible/_internal/ansible_collections/ansible/_protomatter 2025-09-21 03:32:03.213533 | debian-bookworm | Found installed collection ansible._protomatter:2.19.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible/_internal/ansible_collections/ansible/_protomatter' 2025-09-21 03:32:03.217444 | debian-bookworm | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis 2025-09-21 03:32:03.217900 | debian-bookworm | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis' 2025-09-21 03:32:03.218386 | debian-bookworm | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2025-09-21 03:32:03.218801 | debian-bookworm | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2025-09-21 03:32:03.219383 | debian-bookworm | Loading collection community.mysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql 2025-09-21 03:32:03.219747 | debian-bookworm | Found installed collection community.mysql:3.15.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql' 2025-09-21 03:32:03.220247 | debian-bookworm | Loading collection community.zabbix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix 2025-09-21 03:32:03.220605 | debian-bookworm | Found installed collection community.zabbix:4.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix' 2025-09-21 03:32:03.221061 | debian-bookworm | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2025-09-21 03:32:03.221586 | debian-bookworm | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2025-09-21 03:32:03.222184 | debian-bookworm | Loading collection community.mongodb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb 2025-09-21 03:32:03.222593 | debian-bookworm | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb' 2025-09-21 03:32:03.222892 | debian-bookworm | Loading collection community.dns from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns 2025-09-21 03:32:03.223223 | debian-bookworm | Found installed collection community.dns:3.3.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns' 2025-09-21 03:32:03.223967 | debian-bookworm | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim 2025-09-21 03:32:03.224348 | debian-bookworm | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim' 2025-09-21 03:32:03.224604 | debian-bookworm | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios 2025-09-21 03:32:03.224948 | debian-bookworm | Found installed collection fortinet.fortios:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios' 2025-09-21 03:32:03.225233 | debian-bookworm | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2025-09-21 03:32:03.225516 | debian-bookworm | Found installed collection hitachivantara.vspone_block:4.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2025-09-21 03:32:03.226547 | debian-bookworm | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud 2025-09-21 03:32:03.226816 | debian-bookworm | Found installed collection hetzner.hcloud:5.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2025-09-21 03:32:03.227260 | debian-bookworm | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2025-09-21 03:32:03.227715 | debian-bookworm | Found installed collection f5networks.f5_modules:1.38.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2025-09-21 03:32:03.229368 | debian-bookworm | Loading collection community.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows 2025-09-21 03:32:03.229666 | debian-bookworm | Found installed collection community.windows:3.0.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows' 2025-09-21 03:32:03.232314 | debian-bookworm | Loading collection amazon.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws 2025-09-21 03:32:03.232718 | debian-bookworm | Found installed collection amazon.aws:10.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws' 2025-09-21 03:32:03.233147 | debian-bookworm | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon 2025-09-21 03:32:03.233429 | debian-bookworm | Found installed collection ansible.netcommon:8.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon' 2025-09-21 03:32:03.234136 | debian-bookworm | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos 2025-09-21 03:32:03.234507 | debian-bookworm | Found installed collection vyos.vyos:6.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos' 2025-09-21 03:32:03.235235 | debian-bookworm | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2025-09-21 03:32:03.235676 | debian-bookworm | Found installed collection dellemc.enterprise_sonic:3.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2025-09-21 03:32:03.236195 | debian-bookworm | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt 2025-09-21 03:32:03.236639 | debian-bookworm | Found installed collection check_point.mgmt:6.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt' 2025-09-21 03:32:03.236868 | debian-bookworm | Loading collection ansible.utils from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils 2025-09-21 03:32:03.237303 | debian-bookworm | Found installed collection ansible.utils:6.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils' 2025-09-21 03:32:03.237534 | debian-bookworm | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs 2025-09-21 03:32:03.237917 | debian-bookworm | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs' 2025-09-21 03:32:03.238166 | debian-bookworm | Loading collection community.routeros from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros 2025-09-21 03:32:03.238586 | debian-bookworm | Found installed collection community.routeros:3.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros' 2025-09-21 03:32:03.238882 | debian-bookworm | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs 2025-09-21 03:32:03.239316 | debian-bookworm | Found installed collection community.sap_libs:1.4.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs' 2025-09-21 03:32:03.240981 | debian-bookworm | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman 2025-09-21 03:32:03.241376 | debian-bookworm | Found installed collection theforeman.foreman:5.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman' 2025-09-21 03:32:03.243552 | debian-bookworm | Loading collection awx.awx from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx 2025-09-21 03:32:03.243985 | debian-bookworm | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx' 2025-09-21 03:32:03.245443 | debian-bookworm | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos 2025-09-21 03:32:03.245844 | debian-bookworm | Found installed collection cisco.nxos:11.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos' 2025-09-21 03:32:03.246159 | debian-bookworm | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade 2025-09-21 03:32:03.246573 | debian-bookworm | Found installed collection purestorage.flashblade:1.20.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2025-09-21 03:32:03.247256 | debian-bookworm | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2025-09-21 03:32:03.247622 | debian-bookworm | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2025-09-21 03:32:03.248271 | debian-bookworm | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud 2025-09-21 03:32:03.248643 | debian-bookworm | Found installed collection openstack.cloud:2.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud' 2025-09-21 03:32:03.249111 | debian-bookworm | Loading collection wti.remote from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote 2025-09-21 03:32:03.249511 | debian-bookworm | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote' 2025-09-21 03:32:03.249882 | debian-bookworm | Loading collection community.postgresql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql 2025-09-21 03:32:03.250720 | debian-bookworm | Found installed collection community.postgresql:4.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql' 2025-09-21 03:32:03.251116 | debian-bookworm | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2025-09-21 03:32:03.251352 | debian-bookworm | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2025-09-21 03:32:03.251747 | debian-bookworm | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr 2025-09-21 03:32:03.252155 | debian-bookworm | Found installed collection cisco.iosxr:12.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr' 2025-09-21 03:32:03.252431 | debian-bookworm | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad 2025-09-21 03:32:03.252772 | debian-bookworm | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad' 2025-09-21 03:32:03.253063 | debian-bookworm | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core 2025-09-21 03:32:03.253442 | debian-bookworm | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core' 2025-09-21 03:32:03.253714 | debian-bookworm | Loading collection community.libvirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt 2025-09-21 03:32:03.254009 | debian-bookworm | Found installed collection community.libvirt:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt' 2025-09-21 03:32:03.254320 | debian-bookworm | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac 2025-09-21 03:32:03.254610 | debian-bookworm | Found installed collection cisco.dnac:6.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac' 2025-09-21 03:32:03.254890 | debian-bookworm | Loading collection community.proxysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql 2025-09-21 03:32:03.255230 | debian-bookworm | Found installed collection community.proxysql:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql' 2025-09-21 03:32:03.255618 | debian-bookworm | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid 2025-09-21 03:32:03.256030 | debian-bookworm | Found installed collection netapp.storagegrid:21.15.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2025-09-21 03:32:03.256422 | debian-bookworm | Loading collection community.okd from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd 2025-09-21 03:32:03.256760 | debian-bookworm | Found installed collection community.okd:5.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd' 2025-09-21 03:32:03.257315 | debian-bookworm | Loading collection community.crypto from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto 2025-09-21 03:32:03.257686 | debian-bookworm | Found installed collection community.crypto:3.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto' 2025-09-21 03:32:03.258088 | debian-bookworm | Loading collection community.hrobot from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot 2025-09-21 03:32:03.258493 | debian-bookworm | Found installed collection community.hrobot:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot' 2025-09-21 03:32:03.258747 | debian-bookworm | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray 2025-09-21 03:32:03.259163 | debian-bookworm | Found installed collection purestorage.flasharray:1.36.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2025-09-21 03:32:03.260027 | debian-bookworm | Loading collection cisco.ios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios 2025-09-21 03:32:03.260409 | debian-bookworm | Found installed collection cisco.ios:11.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios' 2025-09-21 03:32:03.261061 | debian-bookworm | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core 2025-09-21 03:32:03.261462 | debian-bookworm | Found installed collection kubernetes.core:6.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core' 2025-09-21 03:32:03.262074 | debian-bookworm | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt 2025-09-21 03:32:03.262474 | debian-bookworm | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2025-09-21 03:32:03.262835 | debian-bookworm | Loading collection ansible.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows 2025-09-21 03:32:03.263219 | debian-bookworm | Found installed collection ansible.windows:3.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows' 2025-09-21 03:32:03.263503 | debian-bookworm | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox 2025-09-21 03:32:03.263908 | debian-bookworm | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2025-09-21 03:32:03.264397 | debian-bookworm | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex 2025-09-21 03:32:03.264753 | debian-bookworm | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2025-09-21 03:32:03.265494 | debian-bookworm | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity 2025-09-21 03:32:03.265878 | debian-bookworm | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity' 2025-09-21 03:32:03.266655 | debian-bookworm | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox 2025-09-21 03:32:03.267073 | debian-bookworm | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox' 2025-09-21 03:32:03.268433 | debian-bookworm | Loading collection cisco.mso from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso 2025-09-21 03:32:03.268837 | debian-bookworm | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso' 2025-09-21 03:32:03.269256 | debian-bookworm | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault 2025-09-21 03:32:03.269618 | debian-bookworm | Found installed collection community.hashi_vault:7.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault' 2025-09-21 03:32:03.269851 | debian-bookworm | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2025-09-21 03:32:03.270321 | debian-bookworm | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2025-09-21 03:32:03.273660 | debian-bookworm | Loading collection community.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws 2025-09-21 03:32:03.274083 | debian-bookworm | Found installed collection community.aws:10.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws' 2025-09-21 03:32:03.274989 | debian-bookworm | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap 2025-09-21 03:32:03.275408 | debian-bookworm | Found installed collection netapp.ontap:23.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap' 2025-09-21 03:32:03.275724 | debian-bookworm | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2025-09-21 03:32:03.276116 | debian-bookworm | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2025-09-21 03:32:03.276408 | debian-bookworm | Loading collection containers.podman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman 2025-09-21 03:32:03.276796 | debian-bookworm | Found installed collection containers.podman:1.17.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman' 2025-09-21 03:32:03.277049 | debian-bookworm | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2025-09-21 03:32:03.277504 | debian-bookworm | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2025-09-21 03:32:03.277728 | debian-bookworm | Loading collection ansible.posix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix 2025-09-21 03:32:03.278138 | debian-bookworm | Found installed collection ansible.posix:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix' 2025-09-21 03:32:03.278690 | debian-bookworm | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar 2025-09-21 03:32:03.279077 | debian-bookworm | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar' 2025-09-21 03:32:03.279276 | debian-bookworm | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight 2025-09-21 03:32:03.279677 | debian-bookworm | Found installed collection cisco.intersight:2.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight' 2025-09-21 03:32:03.279876 | debian-bookworm | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2025-09-21 03:32:03.280296 | debian-bookworm | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2025-09-21 03:32:03.282632 | debian-bookworm | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2025-09-21 03:32:03.283077 | debian-bookworm | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2025-09-21 03:32:03.283513 | debian-bookworm | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud 2025-09-21 03:32:03.283909 | debian-bookworm | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud' 2025-09-21 03:32:03.284131 | debian-bookworm | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2025-09-21 03:32:03.284576 | debian-bookworm | Found installed collection community.library_inventory_filtering_v1:1.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2025-09-21 03:32:03.286460 | debian-bookworm | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki 2025-09-21 03:32:03.286910 | debian-bookworm | Found installed collection cisco.meraki:2.21.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki' 2025-09-21 03:32:03.287131 | debian-bookworm | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2025-09-21 03:32:03.287546 | debian-bookworm | Found installed collection fortinet.fortimanager:2.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2025-09-21 03:32:03.289420 | debian-bookworm | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection 2025-09-21 03:32:03.289822 | debian-bookworm | Found installed collection azure.azcollection:3.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection' 2025-09-21 03:32:03.291281 | debian-bookworm | Loading collection community.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware 2025-09-21 03:32:03.291703 | debian-bookworm | Found installed collection community.vmware:5.7.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware' 2025-09-21 03:32:03.292063 | debian-bookworm | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas 2025-09-21 03:32:03.292459 | debian-bookworm | Found installed collection cyberark.pas:1.0.35 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas' 2025-09-21 03:32:03.292875 | debian-bookworm | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware 2025-09-21 03:32:03.293302 | debian-bookworm | Found installed collection vmware.vmware:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware' 2025-09-21 03:32:03.302447 | debian-bookworm | Loading collection community.general from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general 2025-09-21 03:32:03.302904 | debian-bookworm | Found installed collection community.general:11.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general' 2025-09-21 03:32:03.303638 | debian-bookworm | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2025-09-21 03:32:03.304103 | debian-bookworm | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2025-09-21 03:32:03.304888 | debian-bookworm | Loading collection arista.eos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos 2025-09-21 03:32:03.305304 | debian-bookworm | Found installed collection arista.eos:12.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos' 2025-09-21 03:32:03.306176 | debian-bookworm | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos 2025-09-21 03:32:03.306635 | debian-bookworm | Found installed collection junipernetworks.junos:11.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2025-09-21 03:32:03.309099 | debian-bookworm | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur 2025-09-21 03:32:03.309493 | debian-bookworm | Found installed collection cyberark.conjur:1.3.7 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur' 2025-09-21 03:32:03.309646 | debian-bookworm | Loading collection cisco.aci from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci 2025-09-21 03:32:03.309848 | debian-bookworm | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci' 2025-09-21 03:32:03.310829 | debian-bookworm | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage 2025-09-21 03:32:03.311022 | debian-bookworm | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2025-09-21 03:32:03.311202 | debian-bookworm | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb 2025-09-21 03:32:03.311552 | debian-bookworm | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb' 2025-09-21 03:32:03.311964 | debian-bookworm | Loading collection community.docker from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker 2025-09-21 03:32:03.312346 | debian-bookworm | Found installed collection community.docker:4.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker' 2025-09-21 03:32:03.312565 | debian-bookworm | Loading collection community.sops from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops 2025-09-21 03:32:03.312953 | debian-bookworm | Found installed collection community.sops:2.2.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops' 2025-09-21 03:32:03.313919 | debian-bookworm | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean 2025-09-21 03:32:03.314396 | debian-bookworm | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean' 2025-09-21 03:32:03.314913 | debian-bookworm | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2025-09-21 03:32:03.315312 | debian-bookworm | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2025-09-21 03:32:03.315602 | debian-bookworm | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana 2025-09-21 03:32:03.316024 | debian-bookworm | Found installed collection grafana.grafana:6.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana' 2025-09-21 03:32:03.316372 | debian-bookworm | Loading collection community.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana 2025-09-21 03:32:03.316762 | debian-bookworm | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana' 2025-09-21 03:32:03.317477 | debian-bookworm | Loading collection splunk.es from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es 2025-09-21 03:32:03.317863 | debian-bookworm | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es' 2025-09-21 03:32:03.318920 | debian-bookworm | Loading collection google.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud 2025-09-21 03:32:03.319320 | debian-bookworm | Found installed collection google.cloud:1.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud' 2025-09-21 03:32:03.319614 | debian-bookworm | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2025-09-21 03:32:03.320001 | debian-bookworm | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2025-09-21 03:32:03.320315 | debian-bookworm | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq 2025-09-21 03:32:03.320677 | debian-bookworm | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq' 2025-09-21 03:32:03.321017 | debian-bookworm | Loading collection community.proxmox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox 2025-09-21 03:32:03.321438 | debian-bookworm | Found installed collection community.proxmox:1.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox' 2025-09-21 03:32:03.326374 | debian-bookworm | Initial connection to galaxy_server: https://galaxy.ansible.com 2025-09-21 03:32:03.327264 | debian-bookworm | Created /home/zuul/.ansible/galaxy_token 2025-09-21 03:32:03.327373 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/ 2025-09-21 03:32:02.912180 | ubuntu-noble | INFO [delegated > dependency] Starting 2025-09-21 03:32:02.912614 | ubuntu-noble | WARNING [delegated > dependency] Skipping, missing the requirements file. 2025-09-21 03:32:02.974128 | ubuntu-jammy | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar' 2025-09-21 03:32:02.975623 | ubuntu-jammy | Loading collection amazon.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws 2025-09-21 03:32:02.976100 | ubuntu-jammy | Found installed collection amazon.aws:10.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws' 2025-09-21 03:32:02.976466 | ubuntu-jammy | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2025-09-21 03:32:02.976859 | ubuntu-jammy | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2025-09-21 03:32:02.977293 | ubuntu-jammy | Loading collection community.zabbix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix 2025-09-21 03:32:02.977709 | ubuntu-jammy | Found installed collection community.zabbix:4.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix' 2025-09-21 03:32:02.977994 | ubuntu-jammy | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox 2025-09-21 03:32:02.978977 | ubuntu-jammy | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2025-09-21 03:32:02.979997 | ubuntu-jammy | Loading collection cisco.mso from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso 2025-09-21 03:32:02.980490 | ubuntu-jammy | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso' 2025-09-21 03:32:02.980900 | ubuntu-jammy | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2025-09-21 03:32:02.981340 | ubuntu-jammy | Found installed collection community.library_inventory_filtering_v1:1.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2025-09-21 03:32:02.981667 | ubuntu-jammy | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs 2025-09-21 03:32:02.982117 | ubuntu-jammy | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs' 2025-09-21 03:32:02.982465 | ubuntu-jammy | Loading collection community.crypto from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto 2025-09-21 03:32:02.982875 | ubuntu-jammy | Found installed collection community.crypto:3.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto' 2025-09-21 03:32:02.983208 | ubuntu-jammy | Loading collection ansible.utils from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils 2025-09-21 03:32:02.983527 | ubuntu-jammy | Found installed collection ansible.utils:6.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils' 2025-09-21 03:32:02.984004 | ubuntu-jammy | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos 2025-09-21 03:32:02.984456 | ubuntu-jammy | Found installed collection vyos.vyos:6.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos' 2025-09-21 03:32:02.984822 | ubuntu-jammy | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs 2025-09-21 03:32:02.985245 | ubuntu-jammy | Found installed collection community.sap_libs:1.4.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs' 2025-09-21 03:32:02.985546 | ubuntu-jammy | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq 2025-09-21 03:32:02.985997 | ubuntu-jammy | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq' 2025-09-21 03:32:02.987055 | ubuntu-jammy | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman 2025-09-21 03:32:02.987409 | ubuntu-jammy | Found installed collection theforeman.foreman:5.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman' 2025-09-21 03:32:02.987787 | ubuntu-jammy | Loading collection ansible.posix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix 2025-09-21 03:32:02.988172 | ubuntu-jammy | Found installed collection ansible.posix:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix' 2025-09-21 03:32:02.988526 | ubuntu-jammy | Loading collection wti.remote from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote 2025-09-21 03:32:02.989005 | ubuntu-jammy | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote' 2025-09-21 03:32:02.989291 | ubuntu-jammy | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana 2025-09-21 03:32:02.989755 | ubuntu-jammy | Found installed collection grafana.grafana:6.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana' 2025-09-21 03:32:02.990140 | ubuntu-jammy | Loading collection community.mongodb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb 2025-09-21 03:32:02.990547 | ubuntu-jammy | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb' 2025-09-21 03:32:02.990832 | ubuntu-jammy | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2025-09-21 03:32:02.991180 | ubuntu-jammy | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2025-09-21 03:32:02.992250 | ubuntu-jammy | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud 2025-09-21 03:32:02.992658 | ubuntu-jammy | Found installed collection hetzner.hcloud:5.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2025-09-21 03:32:02.992900 | ubuntu-jammy | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2025-09-21 03:32:02.993355 | ubuntu-jammy | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2025-09-21 03:32:02.994056 | ubuntu-jammy | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox 2025-09-21 03:32:02.994476 | ubuntu-jammy | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox' 2025-09-21 03:32:02.994819 | ubuntu-jammy | Loading collection community.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana 2025-09-21 03:32:02.995213 | ubuntu-jammy | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana' 2025-09-21 03:32:02.996701 | ubuntu-jammy | Loading collection community.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware 2025-09-21 03:32:02.997150 | ubuntu-jammy | Found installed collection community.vmware:5.7.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware' 2025-09-21 03:32:02.997471 | ubuntu-jammy | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur 2025-09-21 03:32:02.997863 | ubuntu-jammy | Found installed collection cyberark.conjur:1.3.7 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur' 2025-09-21 03:32:02.998117 | ubuntu-jammy | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2025-09-21 03:32:02.998579 | ubuntu-jammy | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2025-09-21 03:32:02.998914 | ubuntu-jammy | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad 2025-09-21 03:32:02.999327 | ubuntu-jammy | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad' 2025-09-21 03:32:02.999683 | ubuntu-jammy | Loading collection community.hrobot from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot 2025-09-21 03:32:03.000141 | ubuntu-jammy | Found installed collection community.hrobot:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot' 2025-09-21 03:32:03.001698 | ubuntu-jammy | Loading collection cisco.aci from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci 2025-09-21 03:32:03.002138 | ubuntu-jammy | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci' 2025-09-21 03:32:03.002634 | ubuntu-jammy | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud 2025-09-21 03:32:03.003058 | ubuntu-jammy | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud' 2025-09-21 03:32:03.003508 | ubuntu-jammy | Loading collection community.okd from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd 2025-09-21 03:32:03.003950 | ubuntu-jammy | Found installed collection community.okd:5.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd' 2025-09-21 03:32:03.004617 | ubuntu-jammy | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2025-09-21 03:32:03.005030 | ubuntu-jammy | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2025-09-21 03:32:03.005735 | ubuntu-jammy | Loading collection splunk.es from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es 2025-09-21 03:32:03.006151 | ubuntu-jammy | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es' 2025-09-21 03:32:03.007134 | ubuntu-jammy | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos 2025-09-21 03:32:03.007522 | ubuntu-jammy | Found installed collection junipernetworks.junos:11.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2025-09-21 03:32:03.008039 | ubuntu-jammy | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2025-09-21 03:32:03.008490 | ubuntu-jammy | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2025-09-21 03:32:03.008713 | ubuntu-jammy | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core 2025-09-21 03:32:03.009154 | ubuntu-jammy | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core' 2025-09-21 03:32:03.009605 | ubuntu-jammy | Loading collection community.docker from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker 2025-09-21 03:32:03.009984 | ubuntu-jammy | Found installed collection community.docker:4.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker' 2025-09-21 03:32:03.010806 | ubuntu-jammy | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap 2025-09-21 03:32:03.011239 | ubuntu-jammy | Found installed collection netapp.ontap:23.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap' 2025-09-21 03:32:03.011986 | ubuntu-jammy | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr 2025-09-21 03:32:03.012382 | ubuntu-jammy | Found installed collection cisco.iosxr:12.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr' 2025-09-21 03:32:03.013308 | ubuntu-jammy | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim 2025-09-21 03:32:03.013745 | ubuntu-jammy | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim' 2025-09-21 03:32:03.021986 | ubuntu-jammy | Loading collection community.general from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general 2025-09-21 03:32:03.022381 | ubuntu-jammy | Found installed collection community.general:11.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general' 2025-09-21 03:32:03.022751 | ubuntu-jammy | Loading collection community.proxysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql 2025-09-21 03:32:03.023146 | ubuntu-jammy | Found installed collection community.proxysql:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql' 2025-09-21 03:32:03.023487 | ubuntu-jammy | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb 2025-09-21 03:32:03.023985 | ubuntu-jammy | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb' 2025-09-21 03:32:03.024364 | ubuntu-jammy | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2025-09-21 03:32:03.024720 | ubuntu-jammy | Found installed collection dellemc.enterprise_sonic:3.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2025-09-21 03:32:03.025141 | ubuntu-jammy | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2025-09-21 03:32:03.025942 | ubuntu-jammy | Found installed collection f5networks.f5_modules:1.38.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2025-09-21 03:32:03.026328 | ubuntu-jammy | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2025-09-21 03:32:03.026659 | ubuntu-jammy | Found installed collection hitachivantara.vspone_block:4.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2025-09-21 03:32:03.026977 | ubuntu-jammy | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2025-09-21 03:32:03.027308 | ubuntu-jammy | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2025-09-21 03:32:03.027625 | ubuntu-jammy | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt 2025-09-21 03:32:03.028004 | ubuntu-jammy | Found installed collection check_point.mgmt:6.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt' 2025-09-21 03:32:03.028731 | ubuntu-jammy | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity 2025-09-21 03:32:03.029143 | ubuntu-jammy | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity' 2025-09-21 03:32:03.029430 | ubuntu-jammy | Loading collection community.libvirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt 2025-09-21 03:32:03.029733 | ubuntu-jammy | Found installed collection community.libvirt:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt' 2025-09-21 03:32:03.030682 | ubuntu-jammy | Loading collection cisco.ios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios 2025-09-21 03:32:03.030991 | ubuntu-jammy | Found installed collection cisco.ios:11.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios' 2025-09-21 03:32:03.032984 | ubuntu-jammy | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection 2025-09-21 03:32:03.033423 | ubuntu-jammy | Found installed collection azure.azcollection:3.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection' 2025-09-21 03:32:03.033716 | ubuntu-jammy | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2025-09-21 03:32:03.034137 | ubuntu-jammy | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2025-09-21 03:32:03.034425 | ubuntu-jammy | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade 2025-09-21 03:32:03.034710 | ubuntu-jammy | Found installed collection purestorage.flashblade:1.20.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2025-09-21 03:32:03.035683 | ubuntu-jammy | Loading collection google.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud 2025-09-21 03:32:03.036113 | ubuntu-jammy | Found installed collection google.cloud:1.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud' 2025-09-21 03:32:03.036346 | ubuntu-jammy | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis 2025-09-21 03:32:03.036773 | ubuntu-jammy | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis' 2025-09-21 03:32:03.037285 | ubuntu-jammy | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon 2025-09-21 03:32:03.037979 | ubuntu-jammy | Found installed collection ansible.netcommon:8.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon' 2025-09-21 03:32:03.038394 | ubuntu-jammy | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core 2025-09-21 03:32:03.038762 | ubuntu-jammy | Found installed collection kubernetes.core:6.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core' 2025-09-21 03:32:03.039178 | ubuntu-jammy | Loading collection community.postgresql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql 2025-09-21 03:32:03.040067 | ubuntu-jammy | Found installed collection community.postgresql:4.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql' 2025-09-21 03:32:03.040483 | ubuntu-jammy | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2025-09-21 03:32:03.040873 | ubuntu-jammy | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2025-09-21 03:32:03.043003 | ubuntu-jammy | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2025-09-21 03:32:03.043428 | ubuntu-jammy | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2025-09-21 03:32:03.043872 | ubuntu-jammy | Loading collection community.routeros from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros 2025-09-21 03:32:03.044286 | ubuntu-jammy | Found installed collection community.routeros:3.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros' 2025-09-21 03:32:03.044680 | ubuntu-jammy | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt 2025-09-21 03:32:03.045094 | ubuntu-jammy | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2025-09-21 03:32:03.045666 | ubuntu-jammy | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage 2025-09-21 03:32:03.046048 | ubuntu-jammy | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2025-09-21 03:32:03.046441 | ubuntu-jammy | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2025-09-21 03:32:03.046994 | ubuntu-jammy | Found installed collection fortinet.fortimanager:2.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2025-09-21 03:32:03.049747 | ubuntu-jammy | Loading collection community.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws 2025-09-21 03:32:03.050156 | ubuntu-jammy | Found installed collection community.aws:10.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws' 2025-09-21 03:32:03.050505 | ubuntu-jammy | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas 2025-09-21 03:32:03.050853 | ubuntu-jammy | Found installed collection cyberark.pas:1.0.35 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas' 2025-09-21 03:32:03.051243 | ubuntu-jammy | Loading collection community.dns from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns 2025-09-21 03:32:03.051588 | ubuntu-jammy | Found installed collection community.dns:3.3.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns' 2025-09-21 03:32:03.052001 | ubuntu-jammy | Loading collection ansible.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows 2025-09-21 03:32:03.052485 | ubuntu-jammy | Found installed collection ansible.windows:3.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows' 2025-09-21 03:32:03.057349 | ubuntu-jammy | Initial connection to galaxy_server: https://galaxy.ansible.com 2025-09-21 03:32:03.057710 | ubuntu-jammy | Created /home/zuul/.ansible/galaxy_token 2025-09-21 03:32:03.058035 | ubuntu-jammy | Calling Galaxy at https://galaxy.ansible.com/api/ 2025-09-21 03:32:03.723113 | debian-bookworm | Found API version 'v3, pulp-v3, v1' with Galaxy server default (https://galaxy.ansible.com/api/) 2025-09-21 03:32:03.723285 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/ 2025-09-21 03:32:03.430228 | ubuntu-noble | ansible-galaxy [core 2.19.2] 2025-09-21 03:32:03.432377 | ubuntu-noble | config file = None 2025-09-21 03:32:03.432424 | ubuntu-noble | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2025-09-21 03:32:03.432457 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2025-09-21 03:32:03.432483 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.12/site-packages:/home/zuul/venv/lib/python3.12/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.12/dist-packages 2025-09-21 03:32:03.432494 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-galaxy 2025-09-21 03:32:03.432501 | ubuntu-noble | python version = 3.12.3 (main, Aug 14 2025, 17:47:21) [GCC 13.3.0] (/home/zuul/venv/bin/python3) 2025-09-21 03:32:03.432506 | ubuntu-noble | jinja version = 3.1.6 2025-09-21 03:32:03.432511 | ubuntu-noble | pyyaml version = 6.0.2 (with libyaml v0.2.5) 2025-09-21 03:32:03.432517 | ubuntu-noble | No config file found; using defaults 2025-09-21 03:32:03.432522 | ubuntu-noble | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2025-09-21 03:32:03.444733 | ubuntu-noble | Loading collection ansible._protomatter from /home/zuul/venv/lib/python3.12/site-packages/ansible/_internal/ansible_collections/ansible/_protomatter 2025-09-21 03:32:03.444777 | ubuntu-noble | Found installed collection ansible._protomatter:2.19.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible/_internal/ansible_collections/ansible/_protomatter' 2025-09-21 03:32:03.455603 | ubuntu-noble | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2025-09-21 03:32:03.456206 | ubuntu-noble | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2025-09-21 03:32:03.468483 | ubuntu-noble | Loading collection amazon.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws 2025-09-21 03:32:03.468526 | ubuntu-noble | Found installed collection amazon.aws:10.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws' 2025-09-21 03:32:03.468538 | ubuntu-noble | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox 2025-09-21 03:32:03.468717 | ubuntu-noble | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox' 2025-09-21 03:32:03.469214 | ubuntu-noble | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager 2025-09-21 03:32:03.469629 | ubuntu-noble | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager' 2025-09-21 03:32:03.470179 | ubuntu-noble | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud 2025-09-21 03:32:03.470683 | ubuntu-noble | Found installed collection hetzner.hcloud:5.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud' 2025-09-21 03:32:03.471186 | ubuntu-noble | Loading collection community.proxmox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox 2025-09-21 03:32:03.471753 | ubuntu-noble | Found installed collection community.proxmox:1.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox' 2025-09-21 03:32:03.472151 | ubuntu-noble | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver 2025-09-21 03:32:03.472762 | ubuntu-noble | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver' 2025-09-21 03:32:03.473213 | ubuntu-noble | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud 2025-09-21 03:32:03.473660 | ubuntu-noble | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud' 2025-09-21 03:32:03.474072 | ubuntu-noble | Loading collection community.hrobot from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot 2025-09-21 03:32:03.474476 | ubuntu-noble | Found installed collection community.hrobot:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot' 2025-09-21 03:32:03.474812 | ubuntu-noble | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity 2025-09-21 03:32:03.475095 | ubuntu-noble | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity' 2025-09-21 03:32:03.475450 | ubuntu-noble | Loading collection community.mysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql 2025-09-21 03:32:03.475770 | ubuntu-noble | Found installed collection community.mysql:3.15.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql' 2025-09-21 03:32:03.477540 | ubuntu-noble | Loading collection arista.eos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos 2025-09-21 03:32:03.478000 | ubuntu-noble | Found installed collection arista.eos:12.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos' 2025-09-21 03:32:03.479972 | ubuntu-noble | Loading collection cisco.aci from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci 2025-09-21 03:32:03.480388 | ubuntu-noble | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci' 2025-09-21 03:32:03.480801 | ubuntu-noble | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid 2025-09-21 03:32:03.481137 | ubuntu-noble | Found installed collection netapp.storagegrid:21.15.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid' 2025-09-21 03:32:03.481424 | ubuntu-noble | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey 2025-09-21 03:32:03.482035 | ubuntu-noble | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey' 2025-09-21 03:32:03.482050 | ubuntu-noble | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon 2025-09-21 03:32:03.482320 | ubuntu-noble | Found installed collection ansible.netcommon:8.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon' 2025-09-21 03:32:03.482774 | ubuntu-noble | Loading collection community.okd from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd 2025-09-21 03:32:03.483068 | ubuntu-noble | Found installed collection community.okd:5.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd' 2025-09-21 03:32:03.483329 | ubuntu-noble | Loading collection ansible.posix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix 2025-09-21 03:32:03.483615 | ubuntu-noble | Found installed collection ansible.posix:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix' 2025-09-21 03:32:03.484358 | ubuntu-noble | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr 2025-09-21 03:32:03.484668 | ubuntu-noble | Found installed collection cisco.iosxr:12.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr' 2025-09-21 03:32:03.485010 | ubuntu-noble | Loading collection community.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana 2025-09-21 03:32:03.485310 | ubuntu-noble | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana' 2025-09-21 03:32:03.486372 | ubuntu-noble | Loading collection google.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud 2025-09-21 03:32:03.486775 | ubuntu-noble | Found installed collection google.cloud:1.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud' 2025-09-21 03:32:03.487113 | ubuntu-noble | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim 2025-09-21 03:32:03.487478 | ubuntu-noble | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim' 2025-09-21 03:32:03.487743 | ubuntu-noble | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core 2025-09-21 03:32:03.488107 | ubuntu-noble | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core' 2025-09-21 03:32:03.489032 | ubuntu-noble | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos 2025-09-21 03:32:03.489622 | ubuntu-noble | Found installed collection junipernetworks.junos:11.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos' 2025-09-21 03:32:03.489640 | ubuntu-noble | Loading collection community.libvirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt 2025-09-21 03:32:03.490333 | ubuntu-noble | Found installed collection community.libvirt:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt' 2025-09-21 03:32:03.490809 | ubuntu-noble | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity 2025-09-21 03:32:03.491351 | ubuntu-noble | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity' 2025-09-21 03:32:03.491367 | ubuntu-noble | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb 2025-09-21 03:32:03.491624 | ubuntu-noble | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb' 2025-09-21 03:32:03.491964 | ubuntu-noble | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault 2025-09-21 03:32:03.492242 | ubuntu-noble | Found installed collection community.hashi_vault:7.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault' 2025-09-21 03:32:03.495890 | ubuntu-noble | Loading collection community.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws 2025-09-21 03:32:03.496276 | ubuntu-noble | Found installed collection community.aws:10.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws' 2025-09-21 03:32:03.496542 | ubuntu-noble | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage 2025-09-21 03:32:03.496905 | ubuntu-noble | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage' 2025-09-21 03:32:03.497466 | ubuntu-noble | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage 2025-09-21 03:32:03.498038 | ubuntu-noble | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage' 2025-09-21 03:32:03.498052 | ubuntu-noble | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs 2025-09-21 03:32:03.498606 | ubuntu-noble | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs' 2025-09-21 03:32:03.498623 | ubuntu-noble | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1 2025-09-21 03:32:03.498895 | ubuntu-noble | Found installed collection community.library_inventory_filtering_v1:1.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2025-09-21 03:32:03.499916 | ubuntu-noble | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean 2025-09-21 03:32:03.500262 | ubuntu-noble | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean' 2025-09-21 03:32:03.500766 | ubuntu-noble | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director 2025-09-21 03:32:03.501109 | ubuntu-noble | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director' 2025-09-21 03:32:03.501344 | ubuntu-noble | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas 2025-09-21 03:32:03.501716 | ubuntu-noble | Found installed collection cyberark.pas:1.0.35 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas' 2025-09-21 03:32:03.502378 | ubuntu-noble | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox 2025-09-21 03:32:03.502761 | ubuntu-noble | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox' 2025-09-21 03:32:03.503511 | ubuntu-noble | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios 2025-09-21 03:32:03.503540 | ubuntu-noble | Found installed collection fortinet.fortios:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios' 2025-09-21 03:32:03.505348 | ubuntu-noble | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection 2025-09-21 03:32:03.506040 | ubuntu-noble | Found installed collection azure.azcollection:3.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection' 2025-09-21 03:32:03.506062 | ubuntu-noble | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq 2025-09-21 03:32:03.506607 | ubuntu-noble | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq' 2025-09-21 03:32:03.506624 | ubuntu-noble | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur 2025-09-21 03:32:03.506877 | ubuntu-noble | Found installed collection cyberark.conjur:1.3.7 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur' 2025-09-21 03:32:03.508365 | ubuntu-noble | Loading collection community.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware 2025-09-21 03:32:03.508772 | ubuntu-noble | Found installed collection community.vmware:5.7.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware' 2025-09-21 03:32:03.510487 | ubuntu-noble | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki 2025-09-21 03:32:03.510842 | ubuntu-noble | Found installed collection cisco.meraki:2.21.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki' 2025-09-21 03:32:03.511427 | ubuntu-noble | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack 2025-09-21 03:32:03.511826 | ubuntu-noble | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack' 2025-09-21 03:32:03.512105 | ubuntu-noble | Loading collection ansible.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows 2025-09-21 03:32:03.513205 | ubuntu-noble | Found installed collection ansible.windows:3.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows' 2025-09-21 03:32:03.513230 | ubuntu-noble | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block 2025-09-21 03:32:03.513236 | ubuntu-noble | Found installed collection hitachivantara.vspone_block:4.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block' 2025-09-21 03:32:03.513994 | ubuntu-noble | Loading collection cisco.ios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios 2025-09-21 03:32:03.514332 | ubuntu-noble | Found installed collection cisco.ios:11.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios' 2025-09-21 03:32:03.523787 | ubuntu-noble | Loading collection community.general from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general 2025-09-21 03:32:03.524525 | ubuntu-noble | Found installed collection community.general:11.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general' 2025-09-21 03:32:03.524549 | ubuntu-noble | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana 2025-09-21 03:32:03.524982 | ubuntu-noble | Found installed collection grafana.grafana:6.0.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana' 2025-09-21 03:32:03.525266 | ubuntu-noble | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules 2025-09-21 03:32:03.525926 | ubuntu-noble | Found installed collection f5networks.f5_modules:1.38.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules' 2025-09-21 03:32:03.525948 | ubuntu-noble | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize 2025-09-21 03:32:03.526635 | ubuntu-noble | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize' 2025-09-21 03:32:03.527874 | ubuntu-noble | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap 2025-09-21 03:32:03.527909 | ubuntu-noble | Found installed collection netapp.ontap:23.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap' 2025-09-21 03:32:03.527916 | ubuntu-noble | Loading collection community.zabbix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix 2025-09-21 03:32:03.528214 | ubuntu-noble | Found installed collection community.zabbix:4.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix' 2025-09-21 03:32:03.528648 | ubuntu-noble | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt 2025-09-21 03:32:03.529018 | ubuntu-noble | Found installed collection check_point.mgmt:6.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt' 2025-09-21 03:32:03.529325 | ubuntu-noble | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager 2025-09-21 03:32:03.529678 | ubuntu-noble | Found installed collection fortinet.fortimanager:2.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager' 2025-09-21 03:32:03.530154 | ubuntu-noble | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core 2025-09-21 03:32:03.530464 | ubuntu-noble | Found installed collection kubernetes.core:6.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core' 2025-09-21 03:32:03.530866 | ubuntu-noble | Loading collection community.postgresql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql 2025-09-21 03:32:03.531175 | ubuntu-noble | Found installed collection community.postgresql:4.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql' 2025-09-21 03:32:03.531515 | ubuntu-noble | Loading collection community.docker from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker 2025-09-21 03:32:03.531851 | ubuntu-noble | Found installed collection community.docker:4.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker' 2025-09-21 03:32:03.532788 | ubuntu-noble | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos 2025-09-21 03:32:03.533170 | ubuntu-noble | Found installed collection vyos.vyos:6.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos' 2025-09-21 03:32:03.533468 | ubuntu-noble | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage 2025-09-21 03:32:03.533764 | ubuntu-noble | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage' 2025-09-21 03:32:03.535261 | ubuntu-noble | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos 2025-09-21 03:32:03.535638 | ubuntu-noble | Found installed collection cisco.nxos:11.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos' 2025-09-21 03:32:03.537969 | ubuntu-noble | Loading collection awx.awx from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx 2025-09-21 03:32:03.538378 | ubuntu-noble | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx' 2025-09-21 03:32:03.539759 | ubuntu-noble | Loading collection cisco.mso from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso 2025-09-21 03:32:03.540353 | ubuntu-noble | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso' 2025-09-21 03:32:03.540368 | ubuntu-noble | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac 2025-09-21 03:32:03.540658 | ubuntu-noble | Found installed collection cisco.dnac:6.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac' 2025-09-21 03:32:03.541050 | ubuntu-noble | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad 2025-09-21 03:32:03.541392 | ubuntu-noble | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad' 2025-09-21 03:32:03.541921 | ubuntu-noble | Loading collection community.crypto from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto 2025-09-21 03:32:03.542234 | ubuntu-noble | Found installed collection community.crypto:3.0.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto' 2025-09-21 03:32:03.542533 | ubuntu-noble | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade 2025-09-21 03:32:03.543092 | ubuntu-noble | Found installed collection purestorage.flashblade:1.20.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade' 2025-09-21 03:32:03.543109 | ubuntu-noble | Loading collection community.proxysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql 2025-09-21 03:32:03.543343 | ubuntu-noble | Found installed collection community.proxysql:1.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql' 2025-09-21 03:32:03.543609 | ubuntu-noble | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray 2025-09-21 03:32:03.543879 | ubuntu-noble | Found installed collection purestorage.flasharray:1.36.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray' 2025-09-21 03:32:03.544123 | ubuntu-noble | Loading collection community.routeros from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros 2025-09-21 03:32:03.544528 | ubuntu-noble | Found installed collection community.routeros:3.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros' 2025-09-21 03:32:03.545132 | ubuntu-noble | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud 2025-09-21 03:32:03.545491 | ubuntu-noble | Found installed collection openstack.cloud:2.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud' 2025-09-21 03:32:03.545781 | ubuntu-noble | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs 2025-09-21 03:32:03.546137 | ubuntu-noble | Found installed collection community.sap_libs:1.4.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs' 2025-09-21 03:32:03.546452 | ubuntu-noble | Loading collection community.dns from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns 2025-09-21 03:32:03.546950 | ubuntu-noble | Found installed collection community.dns:3.3.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns' 2025-09-21 03:32:03.546962 | ubuntu-noble | Loading collection community.sops from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops 2025-09-21 03:32:03.547228 | ubuntu-noble | Found installed collection community.sops:2.2.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops' 2025-09-21 03:32:03.547687 | ubuntu-noble | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex 2025-09-21 03:32:03.548044 | ubuntu-noble | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex' 2025-09-21 03:32:03.549737 | ubuntu-noble | Loading collection community.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows 2025-09-21 03:32:03.550156 | ubuntu-noble | Found installed collection community.windows:3.0.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows' 2025-09-21 03:32:03.550568 | ubuntu-noble | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud 2025-09-21 03:32:03.550910 | ubuntu-noble | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud' 2025-09-21 03:32:03.551339 | ubuntu-noble | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar 2025-09-21 03:32:03.551720 | ubuntu-noble | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar' 2025-09-21 03:32:03.552018 | ubuntu-noble | Loading collection containers.podman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman 2025-09-21 03:32:03.552537 | ubuntu-noble | Found installed collection containers.podman:1.17.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman' 2025-09-21 03:32:03.552551 | ubuntu-noble | Loading collection ansible.utils from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils 2025-09-21 03:32:03.552914 | ubuntu-noble | Found installed collection ansible.utils:6.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils' 2025-09-21 03:32:03.555307 | ubuntu-noble | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest 2025-09-21 03:32:03.555736 | ubuntu-noble | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest' 2025-09-21 03:32:03.555948 | ubuntu-noble | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight 2025-09-21 03:32:03.556297 | ubuntu-noble | Found installed collection cisco.intersight:2.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight' 2025-09-21 03:32:03.556920 | ubuntu-noble | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic 2025-09-21 03:32:03.557285 | ubuntu-noble | Found installed collection dellemc.enterprise_sonic:3.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic' 2025-09-21 03:32:03.558836 | ubuntu-noble | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman 2025-09-21 03:32:03.559240 | ubuntu-noble | Found installed collection theforeman.foreman:5.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman' 2025-09-21 03:32:03.559628 | ubuntu-noble | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware 2025-09-21 03:32:03.559998 | ubuntu-noble | Found installed collection vmware.vmware:2.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware' 2025-09-21 03:32:03.560169 | ubuntu-noble | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis 2025-09-21 03:32:03.560529 | ubuntu-noble | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis' 2025-09-21 03:32:03.560971 | ubuntu-noble | Loading collection wti.remote from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote 2025-09-21 03:32:03.561309 | ubuntu-noble | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote' 2025-09-21 03:32:03.561940 | ubuntu-noble | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt 2025-09-21 03:32:03.562290 | ubuntu-noble | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt' 2025-09-21 03:32:03.562685 | ubuntu-noble | Loading collection community.mongodb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb 2025-09-21 03:32:03.563064 | ubuntu-noble | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb' 2025-09-21 03:32:03.563302 | ubuntu-noble | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules 2025-09-21 03:32:03.563640 | ubuntu-noble | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules' 2025-09-21 03:32:03.564289 | ubuntu-noble | Loading collection splunk.es from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es 2025-09-21 03:32:03.564622 | ubuntu-noble | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es' 2025-09-21 03:32:03.569617 | ubuntu-noble | Initial connection to galaxy_server: https://galaxy.ansible.com 2025-09-21 03:32:03.570137 | ubuntu-noble | Created /home/zuul/.ansible/galaxy_token 2025-09-21 03:32:03.570149 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/ 2025-09-21 03:32:03.480150 | ubuntu-jammy | Found API version 'v3, pulp-v3, v1' with Galaxy server default (https://galaxy.ansible.com/api/) 2025-09-21 03:32:03.480600 | ubuntu-jammy | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/ 2025-09-21 03:32:03.509500 | centos-9-stream | ansible-galaxy [core 2.19.2] 2025-09-21 03:32:03.509841 | centos-9-stream | config file = None 2025-09-21 03:32:03.510235 | centos-9-stream | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2025-09-21 03:32:03.510581 | centos-9-stream | ansible python module location = /home/zuul/venv/lib64/python3.11/site-packages/ansible 2025-09-21 03:32:03.510874 | centos-9-stream | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib64/python3.11/site-packages:/home/zuul/venv/lib/python3.11/site-packages 2025-09-21 03:32:03.511151 | centos-9-stream | executable location = /home/zuul/venv/bin/ansible-galaxy 2025-09-21 03:32:03.511433 | centos-9-stream | python version = 3.11.13 (main, Aug 21 2025, 00:00:00) [GCC 11.5.0 20240719 (Red Hat 11.5.0-11)] (/home/zuul/venv/bin/python3.11) 2025-09-21 03:32:03.511723 | centos-9-stream | jinja version = 3.1.6 2025-09-21 03:32:03.512015 | centos-9-stream | pyyaml version = 6.0.2 (with libyaml v0.2.5) 2025-09-21 03:32:03.512283 | centos-9-stream | No config file found; using defaults 2025-09-21 03:32:03.512636 | centos-9-stream | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2025-09-21 03:32:03.519299 | centos-9-stream | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2025-09-21 03:32:03.520111 | centos-9-stream | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2025-09-21 03:32:03.528652 | centos-9-stream | Loading collection community.mysql from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/mysql 2025-09-21 03:32:03.529080 | centos-9-stream | Found installed collection community.mysql:3.15.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/mysql' 2025-09-21 03:32:03.530464 | centos-9-stream | Loading collection f5networks.f5_modules from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2025-09-21 03:32:03.530977 | centos-9-stream | Found installed collection f5networks.f5_modules:1.38.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2025-09-21 03:32:03.531399 | centos-9-stream | Loading collection ibm.qradar from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/qradar 2025-09-21 03:32:03.531800 | centos-9-stream | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/qradar' 2025-09-21 03:32:03.532528 | centos-9-stream | Loading collection netbox.netbox from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netbox/netbox 2025-09-21 03:32:03.533026 | centos-9-stream | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netbox/netbox' 2025-09-21 03:32:03.534889 | centos-9-stream | Loading collection cisco.mso from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/mso 2025-09-21 03:32:03.535289 | centos-9-stream | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/mso' 2025-09-21 03:32:03.535613 | centos-9-stream | Loading collection community.proxysql from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/proxysql 2025-09-21 03:32:03.536085 | centos-9-stream | Found installed collection community.proxysql:1.6.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/proxysql' 2025-09-21 03:32:03.536672 | centos-9-stream | Loading collection community.docker from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/docker 2025-09-21 03:32:03.537179 | centos-9-stream | Found installed collection community.docker:4.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/docker' 2025-09-21 03:32:03.548284 | centos-9-stream | Loading collection community.general from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/general 2025-09-21 03:32:03.548662 | centos-9-stream | Found installed collection community.general:11.2.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/general' 2025-09-21 03:32:03.549023 | centos-9-stream | Loading collection community.rabbitmq from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/rabbitmq 2025-09-21 03:32:03.549554 | centos-9-stream | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/rabbitmq' 2025-09-21 03:32:03.552127 | centos-9-stream | Loading collection vmware.vmware_rest from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2025-09-21 03:32:03.552569 | centos-9-stream | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2025-09-21 03:32:03.555111 | centos-9-stream | Loading collection awx.awx from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/awx/awx 2025-09-21 03:32:03.555448 | centos-9-stream | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/awx/awx' 2025-09-21 03:32:03.556243 | centos-9-stream | Loading collection dellemc.powerflex from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/powerflex 2025-09-21 03:32:03.556759 | centos-9-stream | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2025-09-21 03:32:03.557564 | centos-9-stream | Loading collection purestorage.flasharray from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/purestorage/flasharray 2025-09-21 03:32:03.558304 | centos-9-stream | Found installed collection purestorage.flasharray:1.36.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2025-09-21 03:32:03.558669 | centos-9-stream | Loading collection community.libvirt from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/libvirt 2025-09-21 03:32:03.559008 | centos-9-stream | Found installed collection community.libvirt:2.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/libvirt' 2025-09-21 03:32:03.559495 | centos-9-stream | Loading collection community.crypto from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/crypto 2025-09-21 03:32:03.560079 | centos-9-stream | Found installed collection community.crypto:3.0.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/crypto' 2025-09-21 03:32:03.560361 | centos-9-stream | Loading collection containers.podman from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/containers/podman 2025-09-21 03:32:03.560636 | centos-9-stream | Found installed collection containers.podman:1.17.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/containers/podman' 2025-09-21 03:32:03.561071 | centos-9-stream | Loading collection microsoft.ad from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/microsoft/ad 2025-09-21 03:32:03.561532 | centos-9-stream | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/microsoft/ad' 2025-09-21 03:32:03.562007 | centos-9-stream | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2025-09-21 03:32:03.562452 | centos-9-stream | Found installed collection hitachivantara.vspone_block:4.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2025-09-21 03:32:03.563529 | centos-9-stream | Loading collection arista.eos from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/arista/eos 2025-09-21 03:32:03.563965 | centos-9-stream | Found installed collection arista.eos:12.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/arista/eos' 2025-09-21 03:32:03.564395 | centos-9-stream | Loading collection community.zabbix from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/zabbix 2025-09-21 03:32:03.564827 | centos-9-stream | Found installed collection community.zabbix:4.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/zabbix' 2025-09-21 03:32:03.565224 | centos-9-stream | Loading collection community.sap_libs from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/sap_libs 2025-09-21 03:32:03.565734 | centos-9-stream | Found installed collection community.sap_libs:1.4.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/sap_libs' 2025-09-21 03:32:03.566475 | centos-9-stream | Loading collection splunk.es from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/splunk/es 2025-09-21 03:32:03.566884 | centos-9-stream | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/splunk/es' 2025-09-21 03:32:03.567567 | centos-9-stream | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2025-09-21 03:32:03.568005 | centos-9-stream | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2025-09-21 03:32:03.568412 | centos-9-stream | Loading collection community.dns from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/dns 2025-09-21 03:32:03.568843 | centos-9-stream | Found installed collection community.dns:3.3.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/dns' 2025-09-21 03:32:03.569211 | centos-9-stream | Loading collection purestorage.flashblade from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/purestorage/flashblade 2025-09-21 03:32:03.569462 | centos-9-stream | Found installed collection purestorage.flashblade:1.20.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2025-09-21 03:32:03.571463 | centos-9-stream | Loading collection community.windows from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/windows 2025-09-21 03:32:03.571805 | centos-9-stream | Found installed collection community.windows:3.0.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/windows' 2025-09-21 03:32:03.572194 | centos-9-stream | Loading collection ieisystem.inmanage from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2025-09-21 03:32:03.572653 | centos-9-stream | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2025-09-21 03:32:03.572886 | centos-9-stream | Loading collection community.sops from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/sops 2025-09-21 03:32:03.573329 | centos-9-stream | Found installed collection community.sops:2.2.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/sops' 2025-09-21 03:32:03.573779 | centos-9-stream | Loading collection ansible.windows from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/windows 2025-09-21 03:32:03.574139 | centos-9-stream | Found installed collection ansible.windows:3.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/windows' 2025-09-21 03:32:03.574621 | centos-9-stream | Loading collection community.proxmox from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/proxmox 2025-09-21 03:32:03.575036 | centos-9-stream | Found installed collection community.proxmox:1.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/proxmox' 2025-09-21 03:32:03.575701 | centos-9-stream | Loading collection community.mongodb from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/mongodb 2025-09-21 03:32:03.576044 | centos-9-stream | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/mongodb' 2025-09-21 03:32:03.576355 | centos-9-stream | Loading collection microsoft.iis from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/microsoft/iis 2025-09-21 03:32:03.576715 | centos-9-stream | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/microsoft/iis' 2025-09-21 03:32:03.577142 | centos-9-stream | Loading collection fortinet.fortimanager from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2025-09-21 03:32:03.577692 | centos-9-stream | Found installed collection fortinet.fortimanager:2.10.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2025-09-21 03:32:03.577993 | centos-9-stream | Loading collection cisco.ucs from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ucs 2025-09-21 03:32:03.578222 | centos-9-stream | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ucs' 2025-09-21 03:32:03.579518 | centos-9-stream | Loading collection community.postgresql from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/postgresql 2025-09-21 03:32:03.579757 | centos-9-stream | Found installed collection community.postgresql:4.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/postgresql' 2025-09-21 03:32:03.580006 | centos-9-stream | Loading collection netapp.cloudmanager from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2025-09-21 03:32:03.580559 | centos-9-stream | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2025-09-21 03:32:03.580854 | centos-9-stream | Loading collection community.routeros from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/routeros 2025-09-21 03:32:03.581373 | centos-9-stream | Found installed collection community.routeros:3.10.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/routeros' 2025-09-21 03:32:03.581595 | centos-9-stream | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2025-09-21 03:32:03.582049 | centos-9-stream | Found installed collection community.library_inventory_filtering_v1:1.1.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2025-09-21 03:32:03.582422 | centos-9-stream | Loading collection kaytus.ksmanage from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2025-09-21 03:32:03.582795 | centos-9-stream | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2025-09-21 03:32:03.583371 | centos-9-stream | Loading collection wti.remote from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/wti/remote 2025-09-21 03:32:03.583737 | centos-9-stream | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/wti/remote' 2025-09-21 03:32:03.584671 | centos-9-stream | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2025-09-21 03:32:03.585109 | centos-9-stream | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2025-09-21 03:32:03.585898 | centos-9-stream | Loading collection dellemc.unity from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/unity 2025-09-21 03:32:03.586364 | centos-9-stream | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/unity' 2025-09-21 03:32:03.586639 | centos-9-stream | Loading collection ansible.posix from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/posix 2025-09-21 03:32:03.587117 | centos-9-stream | Found installed collection ansible.posix:2.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/posix' 2025-09-21 03:32:03.587454 | centos-9-stream | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2025-09-21 03:32:03.587881 | centos-9-stream | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2025-09-21 03:32:03.588710 | centos-9-stream | Loading collection cisco.iosxr from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/iosxr 2025-09-21 03:32:03.589330 | centos-9-stream | Found installed collection cisco.iosxr:12.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/iosxr' 2025-09-21 03:32:03.590023 | centos-9-stream | Loading collection dellemc.openmanage from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/openmanage 2025-09-21 03:32:03.590459 | centos-9-stream | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2025-09-21 03:32:03.590729 | centos-9-stream | Loading collection kubevirt.core from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kubevirt/core 2025-09-21 03:32:03.591087 | centos-9-stream | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kubevirt/core' 2025-09-21 03:32:03.592084 | centos-9-stream | Loading collection cisco.ios from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ios 2025-09-21 03:32:03.592407 | centos-9-stream | Found installed collection cisco.ios:11.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ios' 2025-09-21 03:32:03.592777 | centos-9-stream | Loading collection infinidat.infinibox from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/infinidat/infinibox 2025-09-21 03:32:03.593262 | centos-9-stream | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2025-09-21 03:32:03.593608 | centos-9-stream | Loading collection netapp.storagegrid from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/storagegrid 2025-09-21 03:32:03.593966 | centos-9-stream | Found installed collection netapp.storagegrid:21.15.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2025-09-21 03:32:03.594238 | centos-9-stream | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2025-09-21 03:32:03.594550 | centos-9-stream | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2025-09-21 03:32:03.594845 | centos-9-stream | Loading collection community.grafana from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/grafana 2025-09-21 03:32:03.595298 | centos-9-stream | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/grafana' 2025-09-21 03:32:03.597040 | centos-9-stream | Loading collection cisco.nxos from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/nxos 2025-09-21 03:32:03.597381 | centos-9-stream | Found installed collection cisco.nxos:11.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/nxos' 2025-09-21 03:32:03.598039 | centos-9-stream | Loading collection ovirt.ovirt from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ovirt/ovirt 2025-09-21 03:32:03.598486 | centos-9-stream | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2025-09-21 03:32:03.598697 | centos-9-stream | Loading collection ansible.utils from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/utils 2025-09-21 03:32:03.599064 | centos-9-stream | Found installed collection ansible.utils:6.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/utils' 2025-09-21 03:32:03.599458 | centos-9-stream | Loading collection vultr.cloud from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vultr/cloud 2025-09-21 03:32:03.599843 | centos-9-stream | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vultr/cloud' 2025-09-21 03:32:03.600807 | centos-9-stream | Loading collection hetzner.hcloud from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hetzner/hcloud 2025-09-21 03:32:03.601214 | centos-9-stream | Found installed collection hetzner.hcloud:5.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2025-09-21 03:32:03.603612 | centos-9-stream | Loading collection theforeman.foreman from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/theforeman/foreman 2025-09-21 03:32:03.604404 | centos-9-stream | Found installed collection theforeman.foreman:5.5.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/theforeman/foreman' 2025-09-21 03:32:03.604911 | centos-9-stream | Loading collection cisco.dnac from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/dnac 2025-09-21 03:32:03.605647 | centos-9-stream | Found installed collection cisco.dnac:6.39.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/dnac' 2025-09-21 03:32:03.606496 | centos-9-stream | Loading collection kubernetes.core from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kubernetes/core 2025-09-21 03:32:03.606965 | centos-9-stream | Found installed collection kubernetes.core:6.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kubernetes/core' 2025-09-21 03:32:03.607449 | centos-9-stream | Loading collection ansible.netcommon from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/netcommon 2025-09-21 03:32:03.607819 | centos-9-stream | Found installed collection ansible.netcommon:8.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/netcommon' 2025-09-21 03:32:03.608256 | centos-9-stream | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2025-09-21 03:32:03.608827 | centos-9-stream | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2025-09-21 03:32:03.609440 | centos-9-stream | Loading collection vyos.vyos from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vyos/vyos 2025-09-21 03:32:03.609809 | centos-9-stream | Found installed collection vyos.vyos:6.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vyos/vyos' 2025-09-21 03:32:03.610227 | centos-9-stream | Loading collection vmware.vmware from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vmware/vmware 2025-09-21 03:32:03.610555 | centos-9-stream | Found installed collection vmware.vmware:2.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vmware/vmware' 2025-09-21 03:32:03.610893 | centos-9-stream | Loading collection cisco.intersight from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/intersight 2025-09-21 03:32:03.611416 | centos-9-stream | Found installed collection cisco.intersight:2.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/intersight' 2025-09-21 03:32:03.612707 | centos-9-stream | Loading collection community.aws from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/aws 2025-09-21 03:32:03.613083 | centos-9-stream | Found installed collection community.aws:10.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/aws' 2025-09-21 03:32:03.613442 | centos-9-stream | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2025-09-21 03:32:03.613748 | centos-9-stream | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2025-09-21 03:32:03.614077 | centos-9-stream | Loading collection community.ciscosmb from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/ciscosmb 2025-09-21 03:32:03.614464 | centos-9-stream | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/ciscosmb' 2025-09-21 03:32:03.614775 | centos-9-stream | Loading collection community.hashi_vault from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/hashi_vault 2025-09-21 03:32:03.615100 | centos-9-stream | Found installed collection community.hashi_vault:7.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/hashi_vault' 2025-09-21 03:32:03.615969 | centos-9-stream | Loading collection junipernetworks.junos from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/junipernetworks/junos 2025-09-21 03:32:03.616358 | centos-9-stream | Found installed collection junipernetworks.junos:11.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2025-09-21 03:32:03.618684 | centos-9-stream | Loading collection azure.azcollection from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/azure/azcollection 2025-09-21 03:32:03.619037 | centos-9-stream | Found installed collection azure.azcollection:3.8.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/azure/azcollection' 2025-09-21 03:32:03.619377 | centos-9-stream | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2025-09-21 03:32:03.619675 | centos-9-stream | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2025-09-21 03:32:03.621387 | centos-9-stream | Loading collection cisco.meraki from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/meraki 2025-09-21 03:32:03.621706 | centos-9-stream | Found installed collection cisco.meraki:2.21.4 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/meraki' 2025-09-21 03:32:03.622196 | centos-9-stream | Loading collection community.hrobot from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/hrobot 2025-09-21 03:32:03.622618 | centos-9-stream | Found installed collection community.hrobot:2.5.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/hrobot' 2025-09-21 03:32:03.624111 | centos-9-stream | Loading collection cisco.aci from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/aci 2025-09-21 03:32:03.624471 | centos-9-stream | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/aci' 2025-09-21 03:32:03.624772 | centos-9-stream | Loading collection inspur.ispim from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/inspur/ispim 2025-09-21 03:32:03.625136 | centos-9-stream | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/inspur/ispim' 2025-09-21 03:32:03.626371 | centos-9-stream | Loading collection amazon.aws from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/amazon/aws 2025-09-21 03:32:03.626692 | centos-9-stream | Found installed collection amazon.aws:10.1.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/amazon/aws' 2025-09-21 03:32:03.627073 | centos-9-stream | Loading collection community.okd from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/okd 2025-09-21 03:32:03.627452 | centos-9-stream | Found installed collection community.okd:5.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/okd' 2025-09-21 03:32:03.627754 | centos-9-stream | Loading collection grafana.grafana from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/grafana/grafana 2025-09-21 03:32:03.628074 | centos-9-stream | Found installed collection grafana.grafana:6.0.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/grafana/grafana' 2025-09-21 03:32:03.628714 | centos-9-stream | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2025-09-21 03:32:03.629094 | centos-9-stream | Found installed collection dellemc.enterprise_sonic:3.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2025-09-21 03:32:03.629484 | centos-9-stream | Loading collection fortinet.fortios from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/fortinet/fortios 2025-09-21 03:32:03.629789 | centos-9-stream | Found installed collection fortinet.fortios:2.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/fortinet/fortios' 2025-09-21 03:32:03.631082 | centos-9-stream | Loading collection community.vmware from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/vmware 2025-09-21 03:32:03.631437 | centos-9-stream | Found installed collection community.vmware:5.7.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/vmware' 2025-09-21 03:32:03.632457 | centos-9-stream | Loading collection google.cloud from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/google/cloud 2025-09-21 03:32:03.632814 | centos-9-stream | Found installed collection google.cloud:1.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/google/cloud' 2025-09-21 03:32:03.633665 | centos-9-stream | Loading collection netapp.ontap from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/ontap 2025-09-21 03:32:03.634009 | centos-9-stream | Found installed collection netapp.ontap:23.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/ontap' 2025-09-21 03:32:03.634507 | centos-9-stream | Loading collection check_point.mgmt from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/check_point/mgmt 2025-09-21 03:32:03.634815 | centos-9-stream | Found installed collection check_point.mgmt:6.4.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/check_point/mgmt' 2025-09-21 03:32:03.635600 | centos-9-stream | Loading collection openstack.cloud from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/openstack/cloud 2025-09-21 03:32:03.635916 | centos-9-stream | Found installed collection openstack.cloud:2.4.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/openstack/cloud' 2025-09-21 03:32:03.637052 | centos-9-stream | Loading collection community.digitalocean from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/digitalocean 2025-09-21 03:32:03.637436 | centos-9-stream | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/digitalocean' 2025-09-21 03:32:03.637738 | centos-9-stream | Loading collection infoblox.nios_modules from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2025-09-21 03:32:03.638063 | centos-9-stream | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2025-09-21 03:32:03.638385 | centos-9-stream | Loading collection cyberark.pas from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cyberark/pas 2025-09-21 03:32:03.638679 | centos-9-stream | Found installed collection cyberark.pas:1.0.35 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cyberark/pas' 2025-09-21 03:32:03.639036 | centos-9-stream | Loading collection cyberark.conjur from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cyberark/conjur 2025-09-21 03:32:03.639402 | centos-9-stream | Found installed collection cyberark.conjur:1.3.7 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cyberark/conjur' 2025-09-21 03:32:03.648483 | centos-9-stream | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kubevirt/core' 2025-09-21 03:32:03.648892 | centos-9-stream | Found installed collection cisco.ios:11.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ios' 2025-09-21 03:32:03.649248 | centos-9-stream | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2025-09-21 03:32:03.649521 | centos-9-stream | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/inspur/ispim' 2025-09-21 03:32:03.649859 | centos-9-stream | Found installed collection netapp.storagegrid:21.15.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2025-09-21 03:32:03.650249 | centos-9-stream | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2025-09-21 03:32:03.650518 | centos-9-stream | Found installed collection grafana.grafana:6.0.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/grafana/grafana' 2025-09-21 03:32:03.650777 | centos-9-stream | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/grafana' 2025-09-21 03:32:03.651097 | centos-9-stream | Found installed collection cisco.nxos:11.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/nxos' 2025-09-21 03:32:03.651421 | centos-9-stream | Found installed collection ansible.utils:6.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/utils' 2025-09-21 03:32:03.651681 | centos-9-stream | Found installed collection netapp.ontap:23.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/ontap' 2025-09-21 03:32:03.652060 | centos-9-stream | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vultr/cloud' 2025-09-21 03:32:03.652436 | centos-9-stream | Found installed collection cisco.dnac:6.39.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/dnac' 2025-09-21 03:32:03.652701 | centos-9-stream | Found installed collection ansible.netcommon:8.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/netcommon' 2025-09-21 03:32:03.653059 | centos-9-stream | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2025-09-21 03:32:03.653396 | centos-9-stream | Found installed collection vmware.vmware:2.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vmware/vmware' 2025-09-21 03:32:03.653663 | centos-9-stream | Found installed collection cisco.intersight:2.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/intersight' 2025-09-21 03:32:03.653919 | centos-9-stream | Found installed collection community.aws:10.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/aws' 2025-09-21 03:32:03.654276 | centos-9-stream | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2025-09-21 03:32:03.654534 | centos-9-stream | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netbox/netbox' 2025-09-21 03:32:03.654789 | centos-9-stream | Found installed collection theforeman.foreman:5.5.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/theforeman/foreman' 2025-09-21 03:32:03.655213 | centos-9-stream | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/ciscosmb' 2025-09-21 03:32:03.655491 | centos-9-stream | Found installed collection community.hashi_vault:7.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/hashi_vault' 2025-09-21 03:32:03.655768 | centos-9-stream | Found installed collection cisco.meraki:2.21.4 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/meraki' 2025-09-21 03:32:03.656079 | centos-9-stream | Found installed collection community.hrobot:2.5.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/hrobot' 2025-09-21 03:32:03.656371 | centos-9-stream | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/aci' 2025-09-21 03:32:03.656615 | centos-9-stream | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2025-09-21 03:32:03.656840 | centos-9-stream | Found installed collection community.okd:5.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/okd' 2025-09-21 03:32:03.657136 | centos-9-stream | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2025-09-21 03:32:03.657394 | centos-9-stream | Found installed collection fortinet.fortios:2.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/fortinet/fortios' 2025-09-21 03:32:03.657645 | centos-9-stream | Found installed collection community.vmware:5.7.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/vmware' 2025-09-21 03:32:03.657863 | centos-9-stream | Found installed collection google.cloud:1.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/google/cloud' 2025-09-21 03:32:03.658111 | centos-9-stream | Found installed collection hitachivantara.vspone_block:4.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2025-09-21 03:32:03.658348 | centos-9-stream | Found installed collection openstack.cloud:2.4.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/openstack/cloud' 2025-09-21 03:32:03.658565 | centos-9-stream | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/digitalocean' 2025-09-21 03:32:03.658777 | centos-9-stream | Found installed collection cyberark.pas:1.0.35 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cyberark/pas' 2025-09-21 03:32:03.659153 | centos-9-stream | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/microsoft/ad' 2025-09-21 03:32:03.659446 | centos-9-stream | Found installed collection cyberark.conjur:1.3.7 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cyberark/conjur' 2025-09-21 03:32:03.659645 | centos-9-stream | Found installed collection hetzner.hcloud:5.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2025-09-21 03:32:03.659832 | centos-9-stream | Found installed collection community.mysql:3.15.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/mysql' 2025-09-21 03:32:03.660058 | centos-9-stream | Found installed collection kubernetes.core:6.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kubernetes/core' 2025-09-21 03:32:03.660391 | centos-9-stream | Found installed collection f5networks.f5_modules:1.38.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2025-09-21 03:32:03.660596 | centos-9-stream | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/qradar' 2025-09-21 03:32:03.660784 | centos-9-stream | Found installed collection vyos.vyos:6.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vyos/vyos' 2025-09-21 03:32:03.661011 | centos-9-stream | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/mso' 2025-09-21 03:32:03.661338 | centos-9-stream | Found installed collection junipernetworks.junos:11.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2025-09-21 03:32:03.661637 | centos-9-stream | Found installed collection community.proxysql:1.6.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/proxysql' 2025-09-21 03:32:03.661993 | centos-9-stream | Found installed collection community.docker:4.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/docker' 2025-09-21 03:32:03.662335 | centos-9-stream | Found installed collection azure.azcollection:3.8.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/azure/azcollection' 2025-09-21 03:32:03.662644 | centos-9-stream | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/unity' 2025-09-21 03:32:03.663007 | centos-9-stream | Found installed collection community.general:11.2.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/general' 2025-09-21 03:32:03.663343 | centos-9-stream | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2025-09-21 03:32:03.663626 | centos-9-stream | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/rabbitmq' 2025-09-21 03:32:03.663903 | centos-9-stream | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/awx/awx' 2025-09-21 03:32:03.664201 | centos-9-stream | Found installed collection dellemc.enterprise_sonic:3.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2025-09-21 03:32:03.664403 | centos-9-stream | Found installed collection purestorage.flasharray:1.36.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2025-09-21 03:32:03.664595 | centos-9-stream | Found installed collection community.libvirt:2.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/libvirt' 2025-09-21 03:32:03.664783 | centos-9-stream | Found installed collection community.crypto:3.0.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/crypto' 2025-09-21 03:32:03.665041 | centos-9-stream | Found installed collection containers.podman:1.17.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/containers/podman' 2025-09-21 03:32:03.665269 | centos-9-stream | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/microsoft/iis' 2025-09-21 03:32:03.665461 | centos-9-stream | Found installed collection community.zabbix:4.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/zabbix' 2025-09-21 03:32:03.665652 | centos-9-stream | Found installed collection check_point.mgmt:6.4.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/check_point/mgmt' 2025-09-21 03:32:03.665852 | centos-9-stream | Found installed collection community.sap_libs:1.4.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/sap_libs' 2025-09-21 03:32:03.666074 | centos-9-stream | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2025-09-21 03:32:03.666305 | centos-9-stream | Found installed collection ansible.posix:2.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/posix' 2025-09-21 03:32:03.666500 | centos-9-stream | Found installed collection cisco.iosxr:12.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/iosxr' 2025-09-21 03:32:03.666705 | centos-9-stream | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/splunk/es' 2025-09-21 03:32:03.666899 | centos-9-stream | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/wti/remote' 2025-09-21 03:32:03.667122 | centos-9-stream | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2025-09-21 03:32:03.667368 | centos-9-stream | Found installed collection community.dns:3.3.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/dns' 2025-09-21 03:32:03.667571 | centos-9-stream | Found installed collection purestorage.flashblade:1.20.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2025-09-21 03:32:03.667763 | centos-9-stream | Found installed collection community.windows:3.0.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/windows' 2025-09-21 03:32:03.667993 | centos-9-stream | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2025-09-21 03:32:03.668225 | centos-9-stream | Found installed collection community.sops:2.2.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/sops' 2025-09-21 03:32:03.668439 | centos-9-stream | Found installed collection ansible.windows:3.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/windows' 2025-09-21 03:32:03.668645 | centos-9-stream | Found installed collection community.proxmox:1.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/proxmox' 2025-09-21 03:32:03.668848 | centos-9-stream | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/mongodb' 2025-09-21 03:32:03.669114 | centos-9-stream | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2025-09-21 03:32:03.669358 | centos-9-stream | Found installed collection fortinet.fortimanager:2.10.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2025-09-21 03:32:03.669688 | centos-9-stream | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2025-09-21 03:32:03.669894 | centos-9-stream | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ucs' 2025-09-21 03:32:03.670130 | centos-9-stream | Found installed collection community.postgresql:4.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/postgresql' 2025-09-21 03:32:03.670360 | centos-9-stream | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2025-09-21 03:32:03.670566 | centos-9-stream | Found installed collection community.routeros:3.10.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/routeros' 2025-09-21 03:32:03.670771 | centos-9-stream | Found installed collection community.library_inventory_filtering_v1:1.1.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2025-09-21 03:32:03.670992 | centos-9-stream | Found installed collection arista.eos:12.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/arista/eos' 2025-09-21 03:32:03.671225 | centos-9-stream | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2025-09-21 03:32:03.671431 | centos-9-stream | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2025-09-21 03:32:03.671635 | centos-9-stream | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2025-09-21 03:32:03.671836 | centos-9-stream | Found installed collection amazon.aws:10.1.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/amazon/aws' 2025-09-21 03:32:03.672144 | centos-9-stream | Loading collection ansible._protomatter from /home/zuul/venv/lib64/python3.11/site-packages/ansible/_internal/ansible_collections/ansible/_protomatter 2025-09-21 03:32:03.672437 | centos-9-stream | Found installed collection ansible._protomatter:2.19.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible/_internal/ansible_collections/ansible/_protomatter' 2025-09-21 03:32:03.679981 | centos-9-stream | Initial connection to galaxy_server: https://galaxy.ansible.com 2025-09-21 03:32:03.680643 | centos-9-stream | Created /home/zuul/.ansible/galaxy_token 2025-09-21 03:32:03.681063 | centos-9-stream | Calling Galaxy at https://galaxy.ansible.com/api/ 2025-09-21 03:32:03.956990 | centos-9-stream | Found API version 'v3, pulp-v3, v1' with Galaxy server default (https://galaxy.ansible.com/api/) 2025-09-21 03:32:03.957782 | centos-9-stream | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/ 2025-09-21 03:32:04.195074 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/?limit=100 2025-09-21 03:32:04.107992 | ubuntu-noble | Found API version 'v3, pulp-v3, v1' with Galaxy server default (https://galaxy.ansible.com/api/) 2025-09-21 03:32:04.108070 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/ 2025-09-21 03:32:04.200370 | ubuntu-jammy | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/?limit=100 2025-09-21 03:32:04.419993 | centos-9-stream | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/?limit=100 2025-09-21 03:32:04.783747 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/?limit=100 2025-09-21 03:32:04.782714 | ubuntu-jammy | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/0.20250824.0/ 2025-09-21 03:32:05.036499 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/0.20250824.0/ 2025-09-21 03:32:05.253221 | ubuntu-jammy | Server https://galaxy.ansible.com/api/ has not signed osism.commons:0.20250824.0 2025-09-21 03:32:05.253547 | ubuntu-jammy | Fetching a collection tarball for 'osism.commons:0.20250824.0' from Ansible Galaxy 2025-09-21 03:32:04.997108 | centos-9-stream | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/0.20250824.0/ 2025-09-21 03:32:05.544405 | debian-bookworm | Server https://galaxy.ansible.com/api/ has not signed osism.commons:0.20250824.0 2025-09-21 03:32:05.544715 | debian-bookworm | Fetching a collection tarball for 'osism.commons:0.20250824.0' from Ansible Galaxy 2025-09-21 03:32:05.523260 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/0.20250824.0/ 2025-09-21 03:32:05.944453 | centos-9-stream | Server https://galaxy.ansible.com/api/ has not signed osism.commons:0.20250824.0 2025-09-21 03:32:05.945321 | centos-9-stream | Fetching a collection tarball for 'osism.commons:0.20250824.0' from Ansible Galaxy 2025-09-21 03:32:06.039230 | ubuntu-noble | Server https://galaxy.ansible.com/api/ has not signed osism.commons:0.20250824.0 2025-09-21 03:32:06.039873 | ubuntu-noble | Fetching a collection tarball for 'osism.commons:0.20250824.0' from Ansible Galaxy 2025-09-21 03:32:06.418844 | ubuntu-jammy | Validating downloaded file hash 951c48bcb57a59d1e3b533f9f0c7b1abb25a22f54ef5e8fe013e5aa481f42918 with expected hash 951c48bcb57a59d1e3b533f9f0c7b1abb25a22f54ef5e8fe013e5aa481f42918 2025-09-21 03:32:06.419535 | ubuntu-jammy | Collection 'osism.commons:0.20250824.0' obtained from server default https://galaxy.ansible.com/api/ 2025-09-21 03:32:06.765562 | debian-bookworm | Validating downloaded file hash 951c48bcb57a59d1e3b533f9f0c7b1abb25a22f54ef5e8fe013e5aa481f42918 with expected hash 951c48bcb57a59d1e3b533f9f0c7b1abb25a22f54ef5e8fe013e5aa481f42918 2025-09-21 03:32:06.765885 | debian-bookworm | Collection 'osism.commons:0.20250824.0' obtained from server default https://galaxy.ansible.com/api/ 2025-09-21 03:32:06.588812 | ubuntu-jammy | Starting galaxy collection install process 2025-09-21 03:32:06.588919 | ubuntu-jammy | Process install dependency map 2025-09-21 03:32:06.588996 | ubuntu-jammy | Starting collection install process 2025-09-21 03:32:06.589068 | ubuntu-jammy | 'ansible.posix:2.1.0' is already installed, skipping. 2025-09-21 03:32:06.589172 | ubuntu-jammy | 'community.docker:4.7.0' is already installed, skipping. 2025-09-21 03:32:06.589275 | ubuntu-jammy | 'community.general:11.2.1' is already installed, skipping. 2025-09-21 03:32:06.589394 | ubuntu-jammy | 'community.library_inventory_filtering_v1:1.1.1' is already installed, skipping. 2025-09-21 03:32:06.589545 | ubuntu-jammy | Downloading https://galaxy.ansible.com/api/v3/plugin/ansible/content/published/collections/artifacts/osism-commons-0.20250824.0.tar.gz to /home/zuul/.ansible/tmp/ansible-local-1238r44qiz02/tmp44ho9suq/osism-commons-0.20250824.0-p4tomsv7 2025-09-21 03:32:06.589649 | ubuntu-jammy | Installing 'osism.commons:0.20250824.0' to '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2025-09-21 03:32:06.589784 | ubuntu-jammy | osism.commons:0.20250824.0 was installed successfully 2025-09-21 03:32:06.671912 | ubuntu-jammy | INFO [delegated > dependency] Dependency completed successfully. 2025-09-21 03:32:06.672092 | ubuntu-jammy | INFO [delegated > dependency] Completed 2025-09-21 03:32:06.985352 | centos-9-stream | Validating downloaded file hash 951c48bcb57a59d1e3b533f9f0c7b1abb25a22f54ef5e8fe013e5aa481f42918 with expected hash 951c48bcb57a59d1e3b533f9f0c7b1abb25a22f54ef5e8fe013e5aa481f42918 2025-09-21 03:32:06.986119 | centos-9-stream | Collection 'osism.commons:0.20250824.0' obtained from server default https://galaxy.ansible.com/api/ 2025-09-21 03:32:06.927448 | debian-bookworm | Starting galaxy collection install process 2025-09-21 03:32:06.927781 | debian-bookworm | Process install dependency map 2025-09-21 03:32:06.928153 | debian-bookworm | Starting collection install process 2025-09-21 03:32:06.928467 | debian-bookworm | 'ansible.posix:2.1.0' is already installed, skipping. 2025-09-21 03:32:06.928780 | debian-bookworm | 'community.docker:4.7.0' is already installed, skipping. 2025-09-21 03:32:06.929107 | debian-bookworm | 'community.general:11.2.1' is already installed, skipping. 2025-09-21 03:32:06.929409 | debian-bookworm | 'community.library_inventory_filtering_v1:1.1.1' is already installed, skipping. 2025-09-21 03:32:06.929749 | debian-bookworm | Downloading https://galaxy.ansible.com/api/v3/plugin/ansible/content/published/collections/artifacts/osism-commons-0.20250824.0.tar.gz to /home/zuul/.ansible/tmp/ansible-local-1867lpn7bjle/tmpi2qj8omh/osism-commons-0.20250824.0-x0i60k6h 2025-09-21 03:32:06.930093 | debian-bookworm | Installing 'osism.commons:0.20250824.0' to '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2025-09-21 03:32:06.930444 | debian-bookworm | osism.commons:0.20250824.0 was installed successfully 2025-09-21 03:32:07.026513 | debian-bookworm | INFO [delegated > dependency] Dependency completed successfully. 2025-09-21 03:32:07.026608 | debian-bookworm | INFO [delegated > dependency] Completed 2025-09-21 03:32:07.175577 | centos-9-stream | Starting galaxy collection install process 2025-09-21 03:32:07.176344 | centos-9-stream | Process install dependency map 2025-09-21 03:32:07.176799 | centos-9-stream | Starting collection install process 2025-09-21 03:32:07.177378 | centos-9-stream | 'ansible.posix:2.1.0' is already installed, skipping. 2025-09-21 03:32:07.177825 | centos-9-stream | 'community.docker:4.7.0' is already installed, skipping. 2025-09-21 03:32:07.178364 | centos-9-stream | 'community.general:11.2.1' is already installed, skipping. 2025-09-21 03:32:07.178824 | centos-9-stream | 'community.library_inventory_filtering_v1:1.1.1' is already installed, skipping. 2025-09-21 03:32:07.179331 | centos-9-stream | Downloading https://galaxy.ansible.com/api/v3/plugin/ansible/content/published/collections/artifacts/osism-commons-0.20250824.0.tar.gz to /home/zuul/.ansible/tmp/ansible-local-17387c371246/tmp2psmnwro/osism-commons-0.20250824.0-a1ecnkmh 2025-09-21 03:32:07.179744 | centos-9-stream | Installing 'osism.commons:0.20250824.0' to '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2025-09-21 03:32:07.180149 | centos-9-stream | osism.commons:0.20250824.0 was installed successfully 2025-09-21 03:32:07.316280 | centos-9-stream | INFO [delegated > dependency] Dependency completed successfully. 2025-09-21 03:32:07.316606 | centos-9-stream | INFO [delegated > dependency] Completed 2025-09-21 03:32:07.501020 | ubuntu-jammy | ok: Runtime: 0:00:06.494650 2025-09-21 03:32:07.530461 | debian-bookworm | ok: Runtime: 0:00:06.851773 2025-09-21 03:32:07.540917 | centos-9-stream | ok: Runtime: 0:00:07.132197 2025-09-21 03:32:07.826059 | ubuntu-noble | ok: Runtime: 0:00:07.479158 2025-09-21 03:32:07.836037 | 2025-09-21 03:32:07.836162 | TASK [ansible-molecule : Run molecule create action with scenario delegated] 2025-09-21 03:32:07.419362 | ubuntu-noble | Validating downloaded file hash 951c48bcb57a59d1e3b533f9f0c7b1abb25a22f54ef5e8fe013e5aa481f42918 with expected hash 951c48bcb57a59d1e3b533f9f0c7b1abb25a22f54ef5e8fe013e5aa481f42918 2025-09-21 03:32:07.419500 | ubuntu-noble | Collection 'osism.commons:0.20250824.0' obtained from server default https://galaxy.ansible.com/api/ 2025-09-21 03:32:07.587529 | ubuntu-noble | Starting galaxy collection install process 2025-09-21 03:32:07.587600 | ubuntu-noble | Process install dependency map 2025-09-21 03:32:07.587639 | ubuntu-noble | Starting collection install process 2025-09-21 03:32:07.588019 | ubuntu-noble | 'ansible.posix:2.1.0' is already installed, skipping. 2025-09-21 03:32:07.588413 | ubuntu-noble | 'community.docker:4.7.0' is already installed, skipping. 2025-09-21 03:32:07.588902 | ubuntu-noble | 'community.general:11.2.1' is already installed, skipping. 2025-09-21 03:32:07.589291 | ubuntu-noble | 'community.library_inventory_filtering_v1:1.1.1' is already installed, skipping. 2025-09-21 03:32:07.589811 | ubuntu-noble | Downloading https://galaxy.ansible.com/api/v3/plugin/ansible/content/published/collections/artifacts/osism-commons-0.20250824.0.tar.gz to /home/zuul/.ansible/tmp/ansible-local-1603hmvtkgtv/tmp1lo775vs/osism-commons-0.20250824.0-ioc0qh05 2025-09-21 03:32:07.590216 | ubuntu-noble | Installing 'osism.commons:0.20250824.0' to '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2025-09-21 03:32:07.590615 | ubuntu-noble | osism.commons:0.20250824.0 was installed successfully 2025-09-21 03:32:07.682862 | ubuntu-noble | INFO [delegated > dependency] Dependency completed successfully. 2025-09-21 03:32:07.682953 | ubuntu-noble | INFO [delegated > dependency] Completed 2025-09-21 03:32:08.450431 | centos-9-stream | skipping: Conditional result was False 2025-09-21 03:32:08.451940 | debian-bookworm | skipping: Conditional result was False 2025-09-21 03:32:08.452462 | ubuntu-jammy | skipping: Conditional result was False 2025-09-21 03:32:08.452928 | ubuntu-noble | skipping: Conditional result was False 2025-09-21 03:32:08.461915 | 2025-09-21 03:32:08.462116 | TASK [ansible-molecule : Run molecule prepare action with scenario delegated] 2025-09-21 03:32:09.769213 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-09-21 03:32:09.776838 | debian-bookworm | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-09-21 03:32:09.776931 | debian-bookworm | INFO default scenario not found, disabling shared state. 2025-09-21 03:32:09.777079 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: prepare 2025-09-21 03:32:09.777112 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-09-21 03:32:09.885514 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-09-21 03:32:09.891979 | ubuntu-noble | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-09-21 03:32:09.892099 | ubuntu-noble | INFO default scenario not found, disabling shared state. 2025-09-21 03:32:09.892325 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: prepare 2025-09-21 03:32:09.892407 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-09-21 03:32:09.706623 | ubuntu-jammy | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-09-21 03:32:09.714039 | ubuntu-jammy | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-09-21 03:32:09.714114 | ubuntu-jammy | INFO default scenario not found, disabling shared state. 2025-09-21 03:32:09.714254 | ubuntu-jammy | INFO [delegated > discovery] scenario test matrix: prepare 2025-09-21 03:32:09.714298 | ubuntu-jammy | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-09-21 03:32:09.962632 | centos-9-stream | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-09-21 03:32:09.972881 | centos-9-stream | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-09-21 03:32:09.973029 | centos-9-stream | INFO default scenario not found, disabling shared state. 2025-09-21 03:32:09.973200 | centos-9-stream | INFO [delegated > discovery] scenario test matrix: prepare 2025-09-21 03:32:09.973251 | centos-9-stream | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-09-21 03:32:10.963793 | ubuntu-jammy | INFO [delegated > prepare] Starting 2025-09-21 03:32:11.167851 | debian-bookworm | INFO [delegated > prepare] Starting 2025-09-21 03:32:11.389629 | ubuntu-noble | INFO [delegated > prepare] Starting 2025-09-21 03:32:11.374730 | ubuntu-jammy | INFO [delegated > prepare] ansible-playbook version: ansible-playbook 2025-09-21 03:32:11.374794 | ubuntu-jammy | config file = None 2025-09-21 03:32:11.374802 | ubuntu-jammy | configured module search path = 2025-09-21 03:32:11.374809 | ubuntu-jammy | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2025-09-21 03:32:11.374819 | ubuntu-jammy | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2025-09-21 03:32:11.374824 | ubuntu-jammy | executable location = /home/zuul/venv/bin/ansible-playbook 2025-09-21 03:32:11.374829 | ubuntu-jammy | python version = 3.11.0rc1 (main, Aug 12 2022, 10:02:14) (/home/zuul/venv/bin/python3.11) 2025-09-21 03:32:11.374834 | ubuntu-jammy | jinja version = 3.1.6 2025-09-21 03:32:11.374839 | ubuntu-jammy | pyyaml version = 6.0.2 (with libyaml v0.2.5) 2025-09-21 03:32:11.383392 | ubuntu-jammy | DEBUG: ANSIBLE ENVIRONMENT: 2025-09-21 03:32:11.383507 | ubuntu-jammy | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2025-09-21 03:32:11.383529 | ubuntu-jammy | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2025-09-21 03:32:11.383544 | ubuntu-jammy | ANSIBLE_LIBRARY: ../../plugins 2025-09-21 03:32:11.383559 | ubuntu-jammy | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2025-09-21 03:32:11.383573 | ubuntu-jammy | ANSIBLE_ROLE: auditd 2025-09-21 03:32:11.383587 | ubuntu-jammy | ANSIBLE_ROLES_PATH: ../../roles 2025-09-21 03:32:11.383600 | ubuntu-jammy | ANSIBLE_VERBOSITY: '1' 2025-09-21 03:32:11.383614 | ubuntu-jammy | 2025-09-21 03:32:11.387920 | ubuntu-jammy | DEBUG: MOLECULE ENVIRONMENT: 2025-09-21 03:32:11.387986 | ubuntu-jammy | MOLECULE_DEBUG: 'True' 2025-09-21 03:32:11.388004 | ubuntu-jammy | MOLECULE_DEPENDENCY_NAME: galaxy 2025-09-21 03:32:11.388020 | ubuntu-jammy | MOLECULE_DRIVER_NAME: default 2025-09-21 03:32:11.388034 | ubuntu-jammy | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2025-09-21 03:32:11.388049 | ubuntu-jammy | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2025-09-21 03:32:11.388063 | ubuntu-jammy | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2025-09-21 03:32:11.388076 | ubuntu-jammy | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2025-09-21 03:32:11.388090 | ubuntu-jammy | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2025-09-21 03:32:11.388104 | ubuntu-jammy | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2025-09-21 03:32:11.388118 | ubuntu-jammy | MOLECULE_PROVISIONER_NAME: ansible 2025-09-21 03:32:11.388132 | ubuntu-jammy | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2025-09-21 03:32:11.388145 | ubuntu-jammy | MOLECULE_SCENARIO_NAME: delegated 2025-09-21 03:32:11.388159 | ubuntu-jammy | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2025-09-21 03:32:11.388172 | ubuntu-jammy | MOLECULE_VERIFIER_NAME: testinfra 2025-09-21 03:32:11.388186 | ubuntu-jammy | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-21 03:32:11.388200 | ubuntu-jammy | 2025-09-21 03:32:11.390720 | ubuntu-jammy | DEBUG: SHELL REPLAY: 2025-09-21 03:32:11.390780 | ubuntu-jammy | ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-21 03:32:11.636178 | debian-bookworm | INFO [delegated > prepare] ansible-playbook version: ansible-playbook 2025-09-21 03:32:11.636266 | debian-bookworm | config file = None 2025-09-21 03:32:11.636276 | debian-bookworm | configured module search path = 2025-09-21 03:32:11.636282 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2025-09-21 03:32:11.636290 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2025-09-21 03:32:11.636295 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-playbook 2025-09-21 03:32:11.636300 | debian-bookworm | python version = 3.11.2 (main, Apr 28 2025, 14:11:48) (/home/zuul/venv/bin/python3) 2025-09-21 03:32:11.636304 | debian-bookworm | jinja version = 3.1.6 2025-09-21 03:32:11.636308 | debian-bookworm | pyyaml version = 6.0.2 (with libyaml v0.2.5) 2025-09-21 03:32:11.645738 | debian-bookworm | DEBUG: ANSIBLE ENVIRONMENT: 2025-09-21 03:32:11.645764 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2025-09-21 03:32:11.645769 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2025-09-21 03:32:11.645775 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2025-09-21 03:32:11.645779 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2025-09-21 03:32:11.645783 | debian-bookworm | ANSIBLE_ROLE: auditd 2025-09-21 03:32:11.645787 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2025-09-21 03:32:11.645792 | debian-bookworm | ANSIBLE_VERBOSITY: '1' 2025-09-21 03:32:11.645796 | debian-bookworm | 2025-09-21 03:32:11.650150 | debian-bookworm | DEBUG: MOLECULE ENVIRONMENT: 2025-09-21 03:32:11.650182 | debian-bookworm | MOLECULE_DEBUG: 'True' 2025-09-21 03:32:11.650187 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2025-09-21 03:32:11.650192 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2025-09-21 03:32:11.650196 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2025-09-21 03:32:11.650202 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2025-09-21 03:32:11.650208 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2025-09-21 03:32:11.650212 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2025-09-21 03:32:11.650216 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2025-09-21 03:32:11.650223 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2025-09-21 03:32:11.650227 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2025-09-21 03:32:11.650232 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2025-09-21 03:32:11.650236 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2025-09-21 03:32:11.650240 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2025-09-21 03:32:11.650244 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2025-09-21 03:32:11.650248 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-21 03:32:11.650252 | debian-bookworm | 2025-09-21 03:32:11.652536 | debian-bookworm | DEBUG: SHELL REPLAY: 2025-09-21 03:32:11.652631 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-21 03:32:11.879050 | debian-bookworm | [WARNING]: Deprecation warnings can be disabled by setting `deprecation_warnings=False` in ansible.cfg. 2025-09-21 03:32:11.879469 | debian-bookworm | [DEPRECATION WARNING]: DEFAULT_MANAGED_STR option. Reason: The `ansible_managed` variable can be set just like any other variable, or a different variable can be used. 2025-09-21 03:32:11.879863 | debian-bookworm | Alternatives: Set the `ansible_managed` variable, or use any custom variable in templates. This feature will be removed from ansible-core version 2.23. 2025-09-21 03:32:11.880219 | debian-bookworm | 2025-09-21 03:32:11.865837 | ubuntu-noble | INFO [delegated > prepare] ansible-playbook version: ansible-playbook 2025-09-21 03:32:11.865915 | ubuntu-noble | config file = None 2025-09-21 03:32:11.865930 | ubuntu-noble | configured module search path = 2025-09-21 03:32:11.865942 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2025-09-21 03:32:11.865952 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2025-09-21 03:32:11.865965 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-playbook 2025-09-21 03:32:11.865976 | ubuntu-noble | python version = 3.12.3 (main, Aug 14 2025, 17:47:21) (/home/zuul/venv/bin/python3) 2025-09-21 03:32:11.865986 | ubuntu-noble | jinja version = 3.1.6 2025-09-21 03:32:11.865996 | ubuntu-noble | pyyaml version = 6.0.2 (with libyaml v0.2.5) 2025-09-21 03:32:11.875747 | ubuntu-noble | DEBUG: ANSIBLE ENVIRONMENT: 2025-09-21 03:32:11.875812 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2025-09-21 03:32:11.875822 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2025-09-21 03:32:11.875830 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2025-09-21 03:32:11.875838 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2025-09-21 03:32:11.875845 | ubuntu-noble | ANSIBLE_ROLE: auditd 2025-09-21 03:32:11.875852 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2025-09-21 03:32:11.875859 | ubuntu-noble | ANSIBLE_VERBOSITY: '1' 2025-09-21 03:32:11.875867 | ubuntu-noble | 2025-09-21 03:32:11.880532 | ubuntu-noble | DEBUG: MOLECULE ENVIRONMENT: 2025-09-21 03:32:11.880578 | ubuntu-noble | MOLECULE_DEBUG: 'True' 2025-09-21 03:32:11.880585 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2025-09-21 03:32:11.880590 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2025-09-21 03:32:11.880594 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2025-09-21 03:32:11.880598 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2025-09-21 03:32:11.880602 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2025-09-21 03:32:11.880606 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2025-09-21 03:32:11.880610 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2025-09-21 03:32:11.880613 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2025-09-21 03:32:11.880617 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2025-09-21 03:32:11.880620 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2025-09-21 03:32:11.880623 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2025-09-21 03:32:11.880626 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2025-09-21 03:32:11.880630 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2025-09-21 03:32:11.880633 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-21 03:32:11.880637 | ubuntu-noble | 2025-09-21 03:32:11.883331 | ubuntu-noble | DEBUG: SHELL REPLAY: 2025-09-21 03:32:11.883350 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-21 03:32:11.609031 | ubuntu-jammy | [WARNING]: Deprecation warnings can be disabled by setting `deprecation_warnings=False` in ansible.cfg. 2025-09-21 03:32:11.609462 | ubuntu-jammy | [DEPRECATION WARNING]: DEFAULT_MANAGED_STR option. Reason: The `ansible_managed` variable can be set just like any other variable, or a different variable can be used. 2025-09-21 03:32:11.609890 | ubuntu-jammy | Alternatives: Set the `ansible_managed` variable, or use any custom variable in templates. This feature will be removed from ansible-core version 2.23. 2025-09-21 03:32:11.610260 | ubuntu-jammy | 2025-09-21 03:32:11.749460 | ubuntu-jammy | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2025-09-21 03:32:11.982815 | ubuntu-jammy | 2025-09-21 03:32:11.983099 | ubuntu-jammy | PLAY [Prepare] ***************************************************************** 2025-09-21 03:32:11.983332 | ubuntu-jammy | 2025-09-21 03:32:11.983565 | ubuntu-jammy | TASK [Gathering Facts] ********************************************************* 2025-09-21 03:32:11.615008 | centos-9-stream | WARNING Another version of 'amazon.aws' 10.1.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 10.1.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.615120 | centos-9-stream | WARNING Another version of 'ansible.netcommon' 8.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 8.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.615189 | centos-9-stream | WARNING Another version of 'ansible.posix' 2.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.615265 | centos-9-stream | WARNING Another version of 'ansible.utils' 6.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.615347 | centos-9-stream | WARNING Another version of 'ansible.windows' 3.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.615421 | centos-9-stream | WARNING Another version of 'arista.eos' 12.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 12.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.615499 | centos-9-stream | WARNING Another version of 'awx.awx' 24.6.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 24.6.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.615580 | centos-9-stream | WARNING Another version of 'azure.azcollection' 3.8.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.8.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.615638 | centos-9-stream | WARNING Another version of 'check_point.mgmt' 6.4.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.4.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.615688 | centos-9-stream | WARNING Another version of 'chocolatey.chocolatey' 1.5.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.5.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.615770 | centos-9-stream | WARNING Another version of 'cisco.aci' 2.12.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.12.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.615779 | centos-9-stream | WARNING Another version of 'cisco.dnac' 6.39.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.39.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.615818 | centos-9-stream | WARNING Another version of 'cisco.intersight' 2.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.615867 | centos-9-stream | WARNING Another version of 'cisco.ios' 11.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 11.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.615914 | centos-9-stream | WARNING Another version of 'cisco.iosxr' 12.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 12.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.615980 | centos-9-stream | WARNING Another version of 'cisco.meraki' 2.21.4 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.21.4 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.616024 | centos-9-stream | WARNING Another version of 'cisco.mso' 2.11.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.11.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.616068 | centos-9-stream | WARNING Another version of 'cisco.nxos' 11.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 11.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.616114 | centos-9-stream | WARNING Another version of 'cisco.ucs' 1.16.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.16.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.616153 | centos-9-stream | WARNING Another version of 'cloudscale_ch.cloud' 2.5.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.616266 | centos-9-stream | WARNING Another version of 'community.aws' 10.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 10.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.616348 | centos-9-stream | WARNING Another version of 'community.ciscosmb' 1.0.11 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.11 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.616397 | centos-9-stream | WARNING Another version of 'community.crypto' 3.0.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.0.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.616443 | centos-9-stream | WARNING Another version of 'community.digitalocean' 1.27.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.27.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.616489 | centos-9-stream | WARNING Another version of 'community.dns' 3.3.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.3.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.616532 | centos-9-stream | WARNING Another version of 'community.docker' 4.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.616577 | centos-9-stream | WARNING Another version of 'community.general' 11.2.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 11.2.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.616621 | centos-9-stream | WARNING Another version of 'community.grafana' 2.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.616668 | centos-9-stream | WARNING Another version of 'community.hashi_vault' 7.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 7.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.616712 | centos-9-stream | WARNING Another version of 'community.hrobot' 2.5.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.616757 | centos-9-stream | WARNING Another version of 'community.library_inventory_filtering_v1' 1.1.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.1.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.616799 | centos-9-stream | WARNING Another version of 'community.libvirt' 2.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.616845 | centos-9-stream | WARNING Another version of 'community.mongodb' 1.7.10 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.7.10 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.616884 | centos-9-stream | WARNING Another version of 'community.mysql' 3.15.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.15.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.616926 | centos-9-stream | WARNING Another version of 'community.okd' 5.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.617034 | centos-9-stream | WARNING Another version of 'community.postgresql' 4.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.617078 | centos-9-stream | WARNING Another version of 'community.proxmox' 1.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.617120 | centos-9-stream | WARNING Another version of 'community.proxysql' 1.6.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.6.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.617216 | centos-9-stream | WARNING Another version of 'community.rabbitmq' 1.6.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.6.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.617247 | centos-9-stream | WARNING Another version of 'community.routeros' 3.10.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.10.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.617291 | centos-9-stream | WARNING Another version of 'community.sap_libs' 1.4.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.4.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.617335 | centos-9-stream | WARNING Another version of 'community.sops' 2.2.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.617377 | centos-9-stream | WARNING Another version of 'community.vmware' 5.7.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.7.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.617417 | centos-9-stream | WARNING Another version of 'community.windows' 3.0.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.0.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.617458 | centos-9-stream | WARNING Another version of 'community.zabbix' 4.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.617540 | centos-9-stream | WARNING Another version of 'containers.podman' 1.17.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.17.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.617617 | centos-9-stream | WARNING Another version of 'cyberark.conjur' 1.3.7 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.3.7 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.617691 | centos-9-stream | WARNING Another version of 'cyberark.pas' 1.0.35 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.35 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.617765 | centos-9-stream | WARNING Another version of 'dellemc.enterprise_sonic' 3.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.617833 | centos-9-stream | WARNING Another version of 'dellemc.openmanage' 9.12.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 9.12.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.617908 | centos-9-stream | WARNING Another version of 'dellemc.powerflex' 2.6.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.6.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.618073 | centos-9-stream | WARNING Another version of 'dellemc.unity' 2.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.618137 | centos-9-stream | WARNING Another version of 'f5networks.f5_modules' 1.38.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.38.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.618222 | centos-9-stream | WARNING Another version of 'fortinet.fortimanager' 2.10.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.10.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.618269 | centos-9-stream | WARNING Another version of 'fortinet.fortios' 2.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.618314 | centos-9-stream | WARNING Another version of 'google.cloud' 1.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.618358 | centos-9-stream | WARNING Another version of 'grafana.grafana' 6.0.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.0.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.618403 | centos-9-stream | WARNING Another version of 'hetzner.hcloud' 5.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.618446 | centos-9-stream | WARNING Another version of 'hitachivantara.vspone_block' 4.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.618490 | centos-9-stream | WARNING Another version of 'ibm.qradar' 4.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.618531 | centos-9-stream | WARNING Another version of 'ibm.storage_virtualize' 2.7.4 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.7.4 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.618570 | centos-9-stream | WARNING Another version of 'ieisystem.inmanage' 3.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.618608 | centos-9-stream | WARNING Another version of 'infinidat.infinibox' 1.6.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.6.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.618650 | centos-9-stream | WARNING Another version of 'infoblox.nios_modules' 1.8.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.8.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.618684 | centos-9-stream | WARNING Another version of 'inspur.ispim' 2.2.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.618723 | centos-9-stream | WARNING Another version of 'junipernetworks.junos' 11.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 11.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.618763 | centos-9-stream | WARNING Another version of 'kaytus.ksmanage' 2.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.618803 | centos-9-stream | WARNING Another version of 'kubernetes.core' 6.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.618844 | centos-9-stream | WARNING Another version of 'kubevirt.core' 2.2.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.618883 | centos-9-stream | WARNING Another version of 'lowlydba.sqlserver' 2.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.618922 | centos-9-stream | WARNING Another version of 'microsoft.ad' 1.9.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.9.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.618985 | centos-9-stream | WARNING Another version of 'microsoft.iis' 1.0.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.619018 | centos-9-stream | WARNING Another version of 'netapp.cloudmanager' 21.24.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 21.24.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.619056 | centos-9-stream | WARNING Another version of 'netapp.ontap' 23.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 23.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.619093 | centos-9-stream | WARNING Another version of 'netapp.storagegrid' 21.15.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 21.15.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.619133 | centos-9-stream | WARNING Another version of 'netapp_eseries.santricity' 1.4.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.4.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.619193 | centos-9-stream | WARNING Another version of 'netbox.netbox' 3.21.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.21.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.619235 | centos-9-stream | WARNING Another version of 'ngine_io.cloudstack' 2.5.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.619273 | centos-9-stream | WARNING Another version of 'openstack.cloud' 2.4.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.619312 | centos-9-stream | WARNING Another version of 'ovirt.ovirt' 3.2.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.2.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.619351 | centos-9-stream | WARNING Another version of 'purestorage.flasharray' 1.36.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.36.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.619392 | centos-9-stream | WARNING Another version of 'purestorage.flashblade' 1.20.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.20.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.619433 | centos-9-stream | WARNING Another version of 'splunk.es' 4.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.619468 | centos-9-stream | WARNING Another version of 'telekom_mms.icinga_director' 2.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.619507 | centos-9-stream | WARNING Another version of 'theforeman.foreman' 5.5.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.5.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.619562 | centos-9-stream | WARNING Another version of 'vmware.vmware' 2.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.619632 | centos-9-stream | WARNING Another version of 'vmware.vmware_rest' 4.9.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.9.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.619702 | centos-9-stream | WARNING Another version of 'vultr.cloud' 1.13.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.13.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.619770 | centos-9-stream | WARNING Another version of 'vyos.vyos' 6.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.619838 | centos-9-stream | WARNING Another version of 'wti.remote' 1.0.10 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.10 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:11.634397 | centos-9-stream | INFO [delegated > prepare] Starting 2025-09-21 03:32:12.054632 | debian-bookworm | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2025-09-21 03:32:12.297095 | debian-bookworm | 2025-09-21 03:32:12.297525 | debian-bookworm | PLAY [Prepare] ***************************************************************** 2025-09-21 03:32:12.297861 | debian-bookworm | 2025-09-21 03:32:12.298238 | debian-bookworm | TASK [Gathering Facts] ********************************************************* 2025-09-21 03:32:12.117331 | ubuntu-noble | [WARNING]: Deprecation warnings can be disabled by setting `deprecation_warnings=False` in ansible.cfg. 2025-09-21 03:32:12.118574 | ubuntu-noble | [DEPRECATION WARNING]: DEFAULT_MANAGED_STR option. Reason: The `ansible_managed` variable can be set just like any other variable, or a different variable can be used. 2025-09-21 03:32:12.118629 | ubuntu-noble | Alternatives: Set the `ansible_managed` variable, or use any custom variable in templates. This feature will be removed from ansible-core version 2.23. 2025-09-21 03:32:12.118661 | ubuntu-noble | 2025-09-21 03:32:12.294506 | ubuntu-noble | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2025-09-21 03:32:12.151188 | centos-9-stream | INFO [delegated > prepare] ansible-playbook version: ansible-playbook 2025-09-21 03:32:12.151273 | centos-9-stream | config file = None 2025-09-21 03:32:12.151284 | centos-9-stream | configured module search path = 2025-09-21 03:32:12.151294 | centos-9-stream | ansible python module location = /home/zuul/venv/lib64/python3.11/site-packages/ansible 2025-09-21 03:32:12.151305 | centos-9-stream | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2025-09-21 03:32:12.151314 | centos-9-stream | executable location = /home/zuul/venv/bin/ansible-playbook 2025-09-21 03:32:12.151320 | centos-9-stream | python version = 3.11.13 (main, Aug 21 2025, 00:00:00) (/home/zuul/venv/bin/python3.11) 2025-09-21 03:32:12.151325 | centos-9-stream | jinja version = 3.1.6 2025-09-21 03:32:12.151329 | centos-9-stream | pyyaml version = 6.0.2 (with libyaml v0.2.5) 2025-09-21 03:32:12.162960 | centos-9-stream | DEBUG: ANSIBLE ENVIRONMENT: 2025-09-21 03:32:12.162989 | centos-9-stream | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2025-09-21 03:32:12.162994 | centos-9-stream | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2025-09-21 03:32:12.163000 | centos-9-stream | ANSIBLE_LIBRARY: ../../plugins 2025-09-21 03:32:12.163005 | centos-9-stream | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2025-09-21 03:32:12.163010 | centos-9-stream | ANSIBLE_ROLE: auditd 2025-09-21 03:32:12.163028 | centos-9-stream | ANSIBLE_ROLES_PATH: ../../roles 2025-09-21 03:32:12.163032 | centos-9-stream | ANSIBLE_VERBOSITY: '1' 2025-09-21 03:32:12.163037 | centos-9-stream | 2025-09-21 03:32:12.169263 | centos-9-stream | DEBUG: MOLECULE ENVIRONMENT: 2025-09-21 03:32:12.169297 | centos-9-stream | MOLECULE_DEBUG: 'True' 2025-09-21 03:32:12.169304 | centos-9-stream | MOLECULE_DEPENDENCY_NAME: galaxy 2025-09-21 03:32:12.169309 | centos-9-stream | MOLECULE_DRIVER_NAME: default 2025-09-21 03:32:12.169315 | centos-9-stream | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2025-09-21 03:32:12.169320 | centos-9-stream | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2025-09-21 03:32:12.169333 | centos-9-stream | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2025-09-21 03:32:12.169338 | centos-9-stream | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2025-09-21 03:32:12.169343 | centos-9-stream | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2025-09-21 03:32:12.169347 | centos-9-stream | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2025-09-21 03:32:12.169352 | centos-9-stream | MOLECULE_PROVISIONER_NAME: ansible 2025-09-21 03:32:12.169357 | centos-9-stream | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2025-09-21 03:32:12.169361 | centos-9-stream | MOLECULE_SCENARIO_NAME: delegated 2025-09-21 03:32:12.169366 | centos-9-stream | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2025-09-21 03:32:12.169370 | centos-9-stream | MOLECULE_VERIFIER_NAME: testinfra 2025-09-21 03:32:12.169393 | centos-9-stream | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-21 03:32:12.169398 | centos-9-stream | 2025-09-21 03:32:12.172549 | centos-9-stream | DEBUG: SHELL REPLAY: 2025-09-21 03:32:12.172577 | centos-9-stream | ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-21 03:32:12.411869 | centos-9-stream | [WARNING]: Deprecation warnings can be disabled by setting `deprecation_warnings=False` in ansible.cfg. 2025-09-21 03:32:12.412473 | centos-9-stream | [DEPRECATION WARNING]: DEFAULT_MANAGED_STR option. Reason: The `ansible_managed` variable can be set just like any other variable, or a different variable can be used. 2025-09-21 03:32:12.412928 | centos-9-stream | Alternatives: Set the `ansible_managed` variable, or use any custom variable in templates. This feature will be removed from ansible-core version 2.23. 2025-09-21 03:32:12.413335 | centos-9-stream | 2025-09-21 03:32:12.580137 | ubuntu-noble | 2025-09-21 03:32:12.580231 | ubuntu-noble | PLAY [Prepare] ***************************************************************** 2025-09-21 03:32:12.580246 | ubuntu-noble | 2025-09-21 03:32:12.581604 | ubuntu-noble | TASK [Gathering Facts] ********************************************************* 2025-09-21 03:32:12.607836 | centos-9-stream | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2025-09-21 03:32:12.851884 | centos-9-stream | 2025-09-21 03:32:12.852300 | centos-9-stream | PLAY [Prepare] ***************************************************************** 2025-09-21 03:32:12.852603 | centos-9-stream | 2025-09-21 03:32:12.852923 | centos-9-stream | TASK [Gathering Facts] ********************************************************* 2025-09-21 03:32:13.263712 | ubuntu-jammy | ok: [molecule-auditd] 2025-09-21 03:32:13.263843 | ubuntu-jammy | 2025-09-21 03:32:13.264001 | ubuntu-jammy | TASK [Install packages in venv] ************************************************ 2025-09-21 03:32:13.543818 | debian-bookworm | ok: [molecule-auditd] 2025-09-21 03:32:13.543919 | debian-bookworm | 2025-09-21 03:32:13.543936 | debian-bookworm | TASK [Install packages in venv] ************************************************ 2025-09-21 03:32:13.896715 | ubuntu-noble | ok: [molecule-auditd] 2025-09-21 03:32:13.896844 | ubuntu-noble | 2025-09-21 03:32:13.897038 | ubuntu-noble | TASK [Install packages in venv] ************************************************ 2025-09-21 03:32:14.107633 | centos-9-stream | ok: [molecule-auditd] 2025-09-21 03:32:14.107744 | centos-9-stream | 2025-09-21 03:32:14.107820 | centos-9-stream | TASK [Install packages in venv] ************************************************ 2025-09-21 03:32:18.552717 | debian-bookworm | changed: [molecule-auditd] => (item=docker) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "docker"], "item": "docker", "name": ["docker"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting docker\n Downloading docker-7.1.0-py3-none-any.whl (147 kB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 5.1 MB/s eta 0:00:00\nRequirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.32.5)\nRequirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.5.0)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.3)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.10)\nRequirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (2025.8.3)\nInstalling collected packages: docker\nSuccessfully installed docker-7.1.0\n", "stdout_lines": ["Collecting docker", " Downloading docker-7.1.0-py3-none-any.whl (147 kB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 5.1 MB/s eta 0:00:00", "Requirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.32.5)", "Requirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.5.0)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.3)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.10)", "Requirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (2025.8.3)", "Installing collected packages: docker", "Successfully installed docker-7.1.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2025-09-21 03:32:18.553115 | debian-bookworm | changed: [molecule-auditd] => (item=netaddr) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "netaddr"], "item": "netaddr", "name": ["netaddr"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting netaddr\n Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 16.0 MB/s eta 0:00:00\nInstalling collected packages: netaddr\nSuccessfully installed netaddr-1.3.0\n", "stdout_lines": ["Collecting netaddr", " Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 16.0 MB/s eta 0:00:00", "Installing collected packages: netaddr", "Successfully installed netaddr-1.3.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2025-09-21 03:32:18.553360 | debian-bookworm | ok: [molecule-auditd] => (item=requests) => {"ansible_loop_var": "item", "changed": false, "cmd": ["/home/zuul/venv/bin/pip3", "install", "requests"], "item": "requests", "name": ["requests"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Requirement already satisfied: requests in /home/zuul/venv/lib/python3.11/site-packages (2.32.5)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.4.3)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.10)\nRequirement already satisfied: urllib3<3,>=1.21.1 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2.5.0)\nRequirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2025.8.3)\n", "stdout_lines": ["Requirement already satisfied: requests in /home/zuul/venv/lib/python3.11/site-packages (2.32.5)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.4.3)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.10)", "Requirement already satisfied: urllib3<3,>=1.21.1 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2.5.0)", "Requirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2025.8.3)"], "version": null, "virtualenv": "/home/zuul/venv"} 2025-09-21 03:32:18.553530 | debian-bookworm | 2025-09-21 03:32:18.553716 | debian-bookworm | TASK [Include required prepare tasks] ****************************************** 2025-09-21 03:32:18.581099 | debian-bookworm | included: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/prepare/auditd.yml for molecule-auditd 2025-09-21 03:32:18.581198 | debian-bookworm | 2025-09-21 03:32:18.581302 | debian-bookworm | PLAY RECAP ********************************************************************* 2025-09-21 03:32:18.581461 | debian-bookworm | molecule-auditd : ok=3 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2025-09-21 03:32:18.581604 | debian-bookworm | 2025-09-21 03:32:18.702537 | debian-bookworm | INFO [delegated > prepare] Completed 2025-09-21 03:32:19.007850 | ubuntu-noble | changed: [molecule-auditd] => (item=docker) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "docker"], "item": "docker", "name": ["docker"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting docker\n Downloading docker-7.1.0-py3-none-any.whl.metadata (3.8 kB)\nRequirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.32.5)\nRequirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.5.0)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.4.3)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.10)\nRequirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (2025.8.3)\nDownloading docker-7.1.0-py3-none-any.whl (147 kB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 5.1 MB/s eta 0:00:00\nInstalling collected packages: docker\nSuccessfully installed docker-7.1.0\n", "stdout_lines": ["Collecting docker", " Downloading docker-7.1.0-py3-none-any.whl.metadata (3.8 kB)", "Requirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.32.5)", "Requirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.5.0)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.4.3)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.10)", "Requirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (2025.8.3)", "Downloading docker-7.1.0-py3-none-any.whl (147 kB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 5.1 MB/s eta 0:00:00", "Installing collected packages: docker", "Successfully installed docker-7.1.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2025-09-21 03:32:19.008975 | ubuntu-noble | changed: [molecule-auditd] => (item=netaddr) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "netaddr"], "item": "netaddr", "name": ["netaddr"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting netaddr\n Downloading netaddr-1.3.0-py3-none-any.whl.metadata (5.0 kB)\nDownloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 17.6 MB/s eta 0:00:00\nInstalling collected packages: netaddr\nSuccessfully installed netaddr-1.3.0\n", "stdout_lines": ["Collecting netaddr", " Downloading netaddr-1.3.0-py3-none-any.whl.metadata (5.0 kB)", "Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 17.6 MB/s eta 0:00:00", "Installing collected packages: netaddr", "Successfully installed netaddr-1.3.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2025-09-21 03:32:19.009895 | ubuntu-noble | ok: [molecule-auditd] => (item=requests) => {"ansible_loop_var": "item", "changed": false, "cmd": ["/home/zuul/venv/bin/pip3", "install", "requests"], "item": "requests", "name": ["requests"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Requirement already satisfied: requests in /home/zuul/venv/lib/python3.12/site-packages (2.32.5)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.4.3)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.10)\nRequirement already satisfied: urllib3<3,>=1.21.1 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2.5.0)\nRequirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2025.8.3)\n", "stdout_lines": ["Requirement already satisfied: requests in /home/zuul/venv/lib/python3.12/site-packages (2.32.5)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.4.3)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.10)", "Requirement already satisfied: urllib3<3,>=1.21.1 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2.5.0)", "Requirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2025.8.3)"], "version": null, "virtualenv": "/home/zuul/venv"} 2025-09-21 03:32:19.009927 | ubuntu-noble | 2025-09-21 03:32:19.009936 | ubuntu-noble | TASK [Include required prepare tasks] ****************************************** 2025-09-21 03:32:18.623801 | ubuntu-jammy | changed: [molecule-auditd] => (item=docker) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "docker"], "item": "docker", "name": ["docker"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting docker\n Downloading docker-7.1.0-py3-none-any.whl (147 kB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 KB 3.6 MB/s eta 0:00:00\nRequirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.32.5)\nRequirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.5.0)\nRequirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (2025.8.3)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.10)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.3)\nInstalling collected packages: docker\nSuccessfully installed docker-7.1.0\n", "stdout_lines": ["Collecting docker", " Downloading docker-7.1.0-py3-none-any.whl (147 kB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 KB 3.6 MB/s eta 0:00:00", "Requirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.32.5)", "Requirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.5.0)", "Requirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (2025.8.3)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.10)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.3)", "Installing collected packages: docker", "Successfully installed docker-7.1.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2025-09-21 03:32:18.624493 | ubuntu-jammy | changed: [molecule-auditd] => (item=netaddr) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "netaddr"], "item": "netaddr", "name": ["netaddr"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting netaddr\n Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 11.9 MB/s eta 0:00:00\nInstalling collected packages: netaddr\nSuccessfully installed netaddr-1.3.0\n", "stdout_lines": ["Collecting netaddr", " Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 11.9 MB/s eta 0:00:00", "Installing collected packages: netaddr", "Successfully installed netaddr-1.3.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2025-09-21 03:32:18.624871 | ubuntu-jammy | ok: [molecule-auditd] => (item=requests) => {"ansible_loop_var": "item", "changed": false, "cmd": ["/home/zuul/venv/bin/pip3", "install", "requests"], "item": "requests", "name": ["requests"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Requirement already satisfied: requests in /home/zuul/venv/lib/python3.11/site-packages (2.32.5)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.10)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.4.3)\nRequirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2025.8.3)\nRequirement already satisfied: urllib3<3,>=1.21.1 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2.5.0)\n", "stdout_lines": ["Requirement already satisfied: requests in /home/zuul/venv/lib/python3.11/site-packages (2.32.5)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.10)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.4.3)", "Requirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2025.8.3)", "Requirement already satisfied: urllib3<3,>=1.21.1 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2.5.0)"], "version": null, "virtualenv": "/home/zuul/venv"} 2025-09-21 03:32:18.625133 | ubuntu-jammy | 2025-09-21 03:32:18.625386 | ubuntu-jammy | TASK [Include required prepare tasks] ****************************************** 2025-09-21 03:32:18.652775 | ubuntu-jammy | included: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/prepare/auditd.yml for molecule-auditd 2025-09-21 03:32:18.653187 | ubuntu-jammy | 2025-09-21 03:32:18.653522 | ubuntu-jammy | PLAY RECAP ********************************************************************* 2025-09-21 03:32:18.653850 | ubuntu-jammy | molecule-auditd : ok=3 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2025-09-21 03:32:18.654294 | ubuntu-jammy | 2025-09-21 03:32:18.751661 | ubuntu-jammy | INFO [delegated > prepare] Completed 2025-09-21 03:32:19.030555 | ubuntu-noble | included: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/prepare/auditd.yml for molecule-auditd 2025-09-21 03:32:19.030638 | ubuntu-noble | 2025-09-21 03:32:19.030654 | ubuntu-noble | PLAY RECAP ********************************************************************* 2025-09-21 03:32:19.030665 | ubuntu-noble | molecule-auditd : ok=3 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2025-09-21 03:32:19.030849 | ubuntu-noble | 2025-09-21 03:32:19.128950 | ubuntu-noble | INFO [delegated > prepare] Completed 2025-09-21 03:32:19.411014 | centos-9-stream | changed: [molecule-auditd] => (item=docker) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "docker"], "item": "docker", "name": ["docker"], "requirements": null, "state": "present", "stderr": "\n[notice] A new release of pip available: 22.3.1 -> 25.2\n[notice] To update, run: pip install --upgrade pip\n", "stderr_lines": ["", "[notice] A new release of pip available: 22.3.1 -> 25.2", "[notice] To update, run: pip install --upgrade pip"], "stdout": "Collecting docker\n Downloading docker-7.1.0-py3-none-any.whl (147 kB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 7.4 MB/s eta 0:00:00\nRequirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib64/python3.11/site-packages (from docker) (2.32.5)\nRequirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib64/python3.11/site-packages (from docker) (2.5.0)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib64/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.3)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib64/python3.11/site-packages (from requests>=2.26.0->docker) (3.10)\nRequirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib64/python3.11/site-packages (from requests>=2.26.0->docker) (2025.8.3)\nInstalling collected packages: docker\nSuccessfully installed docker-7.1.0\n", "stdout_lines": ["Collecting docker", " Downloading docker-7.1.0-py3-none-any.whl (147 kB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 7.4 MB/s eta 0:00:00", "Requirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib64/python3.11/site-packages (from docker) (2.32.5)", "Requirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib64/python3.11/site-packages (from docker) (2.5.0)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib64/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.3)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib64/python3.11/site-packages (from requests>=2.26.0->docker) (3.10)", "Requirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib64/python3.11/site-packages (from requests>=2.26.0->docker) (2025.8.3)", "Installing collected packages: docker", "Successfully installed docker-7.1.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2025-09-21 03:32:19.411620 | centos-9-stream | changed: [molecule-auditd] => (item=netaddr) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "netaddr"], "item": "netaddr", "name": ["netaddr"], "requirements": null, "state": "present", "stderr": "\n[notice] A new release of pip available: 22.3.1 -> 25.2\n[notice] To update, run: pip install --upgrade pip\n", "stderr_lines": ["", "[notice] A new release of pip available: 22.3.1 -> 25.2", "[notice] To update, run: pip install --upgrade pip"], "stdout": "Collecting netaddr\n Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 20.7 MB/s eta 0:00:00\nInstalling collected packages: netaddr\nSuccessfully installed netaddr-1.3.0\n", "stdout_lines": ["Collecting netaddr", " Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 20.7 MB/s eta 0:00:00", "Installing collected packages: netaddr", "Successfully installed netaddr-1.3.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2025-09-21 03:32:19.411865 | centos-9-stream | ok: [molecule-auditd] => (item=requests) => {"ansible_loop_var": "item", "changed": false, "cmd": ["/home/zuul/venv/bin/pip3", "install", "requests"], "item": "requests", "name": ["requests"], "requirements": null, "state": "present", "stderr": "\n[notice] A new release of pip available: 22.3.1 -> 25.2\n[notice] To update, run: pip install --upgrade pip\n", "stderr_lines": ["", "[notice] A new release of pip available: 22.3.1 -> 25.2", "[notice] To update, run: pip install --upgrade pip"], "stdout": "Requirement already satisfied: requests in /home/zuul/venv/lib64/python3.11/site-packages (2.32.5)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib64/python3.11/site-packages (from requests) (3.4.3)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib64/python3.11/site-packages (from requests) (3.10)\nRequirement already satisfied: urllib3<3,>=1.21.1 in /home/zuul/venv/lib64/python3.11/site-packages (from requests) (2.5.0)\nRequirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib64/python3.11/site-packages (from requests) (2025.8.3)\n", "stdout_lines": ["Requirement already satisfied: requests in /home/zuul/venv/lib64/python3.11/site-packages (2.32.5)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib64/python3.11/site-packages (from requests) (3.4.3)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib64/python3.11/site-packages (from requests) (3.10)", "Requirement already satisfied: urllib3<3,>=1.21.1 in /home/zuul/venv/lib64/python3.11/site-packages (from requests) (2.5.0)", "Requirement already satisfied: certifi>=2017.4.17 in /home/zuul/venv/lib64/python3.11/site-packages (from requests) (2025.8.3)"], "version": null, "virtualenv": "/home/zuul/venv"} 2025-09-21 03:32:19.412061 | centos-9-stream | 2025-09-21 03:32:19.412270 | centos-9-stream | TASK [Include required prepare tasks] ****************************************** 2025-09-21 03:32:19.441543 | centos-9-stream | included: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/prepare/auditd.yml for molecule-auditd 2025-09-21 03:32:19.441620 | centos-9-stream | 2025-09-21 03:32:19.441720 | centos-9-stream | PLAY RECAP ********************************************************************* 2025-09-21 03:32:19.441837 | centos-9-stream | molecule-auditd : ok=3 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2025-09-21 03:32:19.441932 | centos-9-stream | 2025-09-21 03:32:19.576665 | centos-9-stream | INFO [delegated > prepare] Completed 2025-09-21 03:32:20.077737 | debian-bookworm | ok: Runtime: 0:00:09.963711 2025-09-21 03:32:20.091636 | ubuntu-jammy | ok: Runtime: 0:00:09.995469 2025-09-21 03:32:20.099603 | ubuntu-noble | ok: Runtime: 0:00:10.345215 2025-09-21 03:32:20.106163 | centos-9-stream | ok: Runtime: 0:00:10.814342 2025-09-21 03:32:20.112543 | 2025-09-21 03:32:20.112643 | TASK [ansible-molecule : Reset connection] 2025-09-21 03:32:20.149307 | 2025-09-21 03:32:20.149453 | TASK [ansible-molecule : Reset connection] 2025-09-21 03:32:20.184420 | 2025-09-21 03:32:20.184587 | TASK [ansible-molecule : Reset connection] 2025-09-21 03:32:20.220493 | 2025-09-21 03:32:20.220639 | TASK [ansible-molecule : Reset connection] 2025-09-21 03:32:20.263883 | 2025-09-21 03:32:20.264061 | TASK [ansible-molecule : Run molecule converge action with scenario delegated] 2025-09-21 03:32:21.780542 | ubuntu-jammy | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-09-21 03:32:21.788329 | ubuntu-jammy | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-09-21 03:32:21.788730 | ubuntu-jammy | INFO default scenario not found, disabling shared state. 2025-09-21 03:32:21.789056 | ubuntu-jammy | INFO [delegated > discovery] scenario test matrix: dependency, create, prepare, converge 2025-09-21 03:32:21.789223 | ubuntu-jammy | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-09-21 03:32:21.820820 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-09-21 03:32:21.828586 | debian-bookworm | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-09-21 03:32:21.828680 | debian-bookworm | INFO default scenario not found, disabling shared state. 2025-09-21 03:32:21.828806 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: dependency, create, prepare, converge 2025-09-21 03:32:21.828845 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-09-21 03:32:21.941010 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-09-21 03:32:21.948243 | ubuntu-noble | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-09-21 03:32:21.948316 | ubuntu-noble | INFO default scenario not found, disabling shared state. 2025-09-21 03:32:21.948485 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: dependency, create, prepare, converge 2025-09-21 03:32:21.948517 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-09-21 03:32:21.969099 | centos-9-stream | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-09-21 03:32:21.979227 | centos-9-stream | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-09-21 03:32:21.979344 | centos-9-stream | INFO default scenario not found, disabling shared state. 2025-09-21 03:32:21.979475 | centos-9-stream | INFO [delegated > discovery] scenario test matrix: dependency, create, prepare, converge 2025-09-21 03:32:21.979499 | centos-9-stream | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-09-21 03:32:23.202351 | debian-bookworm | INFO [delegated > dependency] Starting 2025-09-21 03:32:23.202473 | debian-bookworm | WARNING [delegated > dependency] Skipping, missing the requirements file. 2025-09-21 03:32:23.047508 | ubuntu-jammy | INFO [delegated > dependency] Starting 2025-09-21 03:32:23.047800 | ubuntu-jammy | WARNING [delegated > dependency] Skipping, missing the requirements file. 2025-09-21 03:32:23.657678 | debian-bookworm | ansible-galaxy [core 2.19.2] 2025-09-21 03:32:23.658172 | debian-bookworm | config file = None 2025-09-21 03:32:23.658698 | debian-bookworm | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2025-09-21 03:32:23.659221 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2025-09-21 03:32:23.659678 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.11/site-packages:/home/zuul/venv/lib/python3.11/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.11/dist-packages 2025-09-21 03:32:23.660044 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-galaxy 2025-09-21 03:32:23.660462 | debian-bookworm | python version = 3.11.2 (main, Apr 28 2025, 14:11:48) [GCC 12.2.0] (/home/zuul/venv/bin/python3) 2025-09-21 03:32:23.660849 | debian-bookworm | jinja version = 3.1.6 2025-09-21 03:32:23.661173 | debian-bookworm | pyyaml version = 6.0.2 (with libyaml v0.2.5) 2025-09-21 03:32:23.661456 | debian-bookworm | No config file found; using defaults 2025-09-21 03:32:23.661926 | debian-bookworm | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2025-09-21 03:32:23.664261 | debian-bookworm | Loading collection ansible._protomatter from /home/zuul/venv/lib/python3.11/site-packages/ansible/_internal/ansible_collections/ansible/_protomatter 2025-09-21 03:32:23.664576 | debian-bookworm | Found installed collection ansible._protomatter:2.19.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible/_internal/ansible_collections/ansible/_protomatter' 2025-09-21 03:32:23.668747 | debian-bookworm | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2025-09-21 03:32:23.669417 | debian-bookworm | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2025-09-21 03:32:23.670157 | debian-bookworm | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core 2025-09-21 03:32:23.670665 | debian-bookworm | Found installed collection kubernetes.core:6.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core' 2025-09-21 03:32:23.670964 | debian-bookworm | Loading collection community.proxysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql 2025-09-21 03:32:23.671442 | debian-bookworm | Found installed collection community.proxysql:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql' 2025-09-21 03:32:23.671739 | debian-bookworm | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2025-09-21 03:32:23.672179 | debian-bookworm | Found installed collection fortinet.fortimanager:2.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2025-09-21 03:32:23.672677 | debian-bookworm | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt 2025-09-21 03:32:23.673068 | debian-bookworm | Found installed collection check_point.mgmt:6.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt' 2025-09-21 03:32:23.673904 | debian-bookworm | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr 2025-09-21 03:32:23.674375 | debian-bookworm | Found installed collection cisco.iosxr:12.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr' 2025-09-21 03:32:23.674766 | debian-bookworm | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault 2025-09-21 03:32:23.675209 | debian-bookworm | Found installed collection community.hashi_vault:7.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault' 2025-09-21 03:32:23.675634 | debian-bookworm | Loading collection community.mongodb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb 2025-09-21 03:32:23.676059 | debian-bookworm | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb' 2025-09-21 03:32:23.677433 | debian-bookworm | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean 2025-09-21 03:32:23.677769 | debian-bookworm | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean' 2025-09-21 03:32:23.700045 | debian-bookworm | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos 2025-09-21 03:32:23.701427 | debian-bookworm | Found installed collection cisco.nxos:11.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos' 2025-09-21 03:32:23.701948 | debian-bookworm | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2025-09-21 03:32:23.702378 | debian-bookworm | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2025-09-21 03:32:23.702878 | debian-bookworm | Loading collection community.mysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql 2025-09-21 03:32:23.703239 | debian-bookworm | Found installed collection community.mysql:3.15.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql' 2025-09-21 03:32:23.703628 | debian-bookworm | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2025-09-21 03:32:23.704070 | debian-bookworm | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2025-09-21 03:32:23.704507 | debian-bookworm | Loading collection community.okd from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd 2025-09-21 03:32:23.704945 | debian-bookworm | Found installed collection community.okd:5.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd' 2025-09-21 03:32:23.705855 | debian-bookworm | Loading collection cisco.aci from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci 2025-09-21 03:32:23.706475 | debian-bookworm | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci' 2025-09-21 03:32:23.706866 | debian-bookworm | Loading collection community.sops from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops 2025-09-21 03:32:23.707172 | debian-bookworm | Found installed collection community.sops:2.2.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops' 2025-09-21 03:32:23.707888 | debian-bookworm | Loading collection google.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud 2025-09-21 03:32:23.708391 | debian-bookworm | Found installed collection google.cloud:1.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud' 2025-09-21 03:32:23.708945 | debian-bookworm | Loading collection community.dns from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns 2025-09-21 03:32:23.709461 | debian-bookworm | Found installed collection community.dns:3.3.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns' 2025-09-21 03:32:23.709759 | debian-bookworm | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid 2025-09-21 03:32:23.710345 | debian-bookworm | Found installed collection netapp.storagegrid:21.15.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2025-09-21 03:32:23.710798 | debian-bookworm | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon 2025-09-21 03:32:23.711390 | debian-bookworm | Found installed collection ansible.netcommon:8.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon' 2025-09-21 03:32:23.711809 | debian-bookworm | Loading collection community.postgresql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql 2025-09-21 03:32:23.712272 | debian-bookworm | Found installed collection community.postgresql:4.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql' 2025-09-21 03:32:23.712678 | debian-bookworm | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2025-09-21 03:32:23.712984 | debian-bookworm | Found installed collection hitachivantara.vspone_block:4.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2025-09-21 03:32:23.713297 | debian-bookworm | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight 2025-09-21 03:32:23.713608 | debian-bookworm | Found installed collection cisco.intersight:2.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight' 2025-09-21 03:32:23.714032 | debian-bookworm | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud 2025-09-21 03:32:23.714434 | debian-bookworm | Found installed collection openstack.cloud:2.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud' 2025-09-21 03:32:23.714716 | debian-bookworm | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex 2025-09-21 03:32:23.715089 | debian-bookworm | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2025-09-21 03:32:23.715344 | debian-bookworm | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray 2025-09-21 03:32:23.715594 | debian-bookworm | Found installed collection purestorage.flasharray:1.36.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2025-09-21 03:32:23.715881 | debian-bookworm | Loading collection community.libvirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt 2025-09-21 03:32:23.716260 | debian-bookworm | Found installed collection community.libvirt:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt' 2025-09-21 03:32:23.716553 | debian-bookworm | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2025-09-21 03:32:23.716923 | debian-bookworm | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2025-09-21 03:32:23.717207 | debian-bookworm | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs 2025-09-21 03:32:23.717440 | debian-bookworm | Found installed collection community.sap_libs:1.4.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs' 2025-09-21 03:32:23.717597 | debian-bookworm | Loading collection containers.podman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman 2025-09-21 03:32:23.465420 | ubuntu-noble | INFO [delegated > dependency] Starting 2025-09-21 03:32:23.465882 | ubuntu-noble | WARNING [delegated > dependency] Skipping, missing the requirements file. 2025-09-21 03:32:23.717828 | debian-bookworm | Found installed collection containers.podman:1.17.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman' 2025-09-21 03:32:23.726857 | debian-bookworm | Loading collection community.general from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general 2025-09-21 03:32:23.727300 | debian-bookworm | Found installed collection community.general:11.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general' 2025-09-21 03:32:23.727779 | debian-bookworm | Loading collection community.docker from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker 2025-09-21 03:32:23.728175 | debian-bookworm | Found installed collection community.docker:4.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker' 2025-09-21 03:32:23.728466 | debian-bookworm | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs 2025-09-21 03:32:23.728756 | debian-bookworm | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs' 2025-09-21 03:32:23.729240 | debian-bookworm | Loading collection wti.remote from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote 2025-09-21 03:32:23.729485 | debian-bookworm | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote' 2025-09-21 03:32:23.729728 | debian-bookworm | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac 2025-09-21 03:32:23.730060 | debian-bookworm | Found installed collection cisco.dnac:6.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac' 2025-09-21 03:32:23.730792 | debian-bookworm | Loading collection splunk.es from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es 2025-09-21 03:32:23.731175 | debian-bookworm | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es' 2025-09-21 03:32:23.734302 | debian-bookworm | Loading collection community.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws 2025-09-21 03:32:23.735004 | debian-bookworm | Found installed collection community.aws:10.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws' 2025-09-21 03:32:23.735443 | debian-bookworm | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2025-09-21 03:32:23.735751 | debian-bookworm | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2025-09-21 03:32:23.735950 | debian-bookworm | Loading collection ansible.utils from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils 2025-09-21 03:32:23.736377 | debian-bookworm | Found installed collection ansible.utils:6.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils' 2025-09-21 03:32:23.736672 | debian-bookworm | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2025-09-21 03:32:23.737040 | debian-bookworm | Found installed collection community.library_inventory_filtering_v1:1.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2025-09-21 03:32:23.737414 | debian-bookworm | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar 2025-09-21 03:32:23.737724 | debian-bookworm | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar' 2025-09-21 03:32:23.738002 | debian-bookworm | Loading collection community.proxmox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox 2025-09-21 03:32:23.738343 | debian-bookworm | Found installed collection community.proxmox:1.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox' 2025-09-21 03:32:23.738600 | debian-bookworm | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2025-09-21 03:32:23.739690 | debian-bookworm | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2025-09-21 03:32:23.740286 | debian-bookworm | Loading collection community.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana 2025-09-21 03:32:23.740664 | debian-bookworm | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana' 2025-09-21 03:32:23.741212 | debian-bookworm | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity 2025-09-21 03:32:23.741573 | debian-bookworm | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity' 2025-09-21 03:32:23.741873 | debian-bookworm | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios 2025-09-21 03:32:23.742368 | debian-bookworm | Found installed collection fortinet.fortios:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios' 2025-09-21 03:32:23.742656 | debian-bookworm | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2025-09-21 03:32:23.742991 | debian-bookworm | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2025-09-21 03:32:23.743968 | debian-bookworm | Loading collection cisco.mso from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso 2025-09-21 03:32:23.744421 | debian-bookworm | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso' 2025-09-21 03:32:23.744699 | debian-bookworm | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq 2025-09-21 03:32:23.745089 | debian-bookworm | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq' 2025-09-21 03:32:23.745606 | debian-bookworm | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware 2025-09-21 03:32:23.745997 | debian-bookworm | Found installed collection vmware.vmware:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware' 2025-09-21 03:32:23.746535 | debian-bookworm | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap 2025-09-21 03:32:23.746907 | debian-bookworm | Found installed collection netapp.ontap:23.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap' 2025-09-21 03:32:23.747421 | debian-bookworm | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis 2025-09-21 03:32:23.747739 | debian-bookworm | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis' 2025-09-21 03:32:23.748037 | debian-bookworm | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2025-09-21 03:32:23.748735 | debian-bookworm | Found installed collection dellemc.enterprise_sonic:3.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2025-09-21 03:32:23.749130 | debian-bookworm | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core 2025-09-21 03:32:23.749457 | debian-bookworm | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core' 2025-09-21 03:32:23.749825 | debian-bookworm | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb 2025-09-21 03:32:23.750084 | debian-bookworm | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb' 2025-09-21 03:32:23.751466 | debian-bookworm | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki 2025-09-21 03:32:23.751858 | debian-bookworm | Found installed collection cisco.meraki:2.21.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki' 2025-09-21 03:32:23.753277 | debian-bookworm | Loading collection community.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware 2025-09-21 03:32:23.753647 | debian-bookworm | Found installed collection community.vmware:5.7.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware' 2025-09-21 03:32:23.755257 | debian-bookworm | Loading collection community.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows 2025-09-21 03:32:23.755627 | debian-bookworm | Found installed collection community.windows:3.0.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows' 2025-09-21 03:32:23.755961 | debian-bookworm | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2025-09-21 03:32:23.756582 | debian-bookworm | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2025-09-21 03:32:23.757217 | debian-bookworm | Loading collection arista.eos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos 2025-09-21 03:32:23.757637 | debian-bookworm | Found installed collection arista.eos:12.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos' 2025-09-21 03:32:23.757950 | debian-bookworm | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox 2025-09-21 03:32:23.758409 | debian-bookworm | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2025-09-21 03:32:23.758695 | debian-bookworm | Loading collection ansible.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows 2025-09-21 03:32:23.759068 | debian-bookworm | Found installed collection ansible.windows:3.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows' 2025-09-21 03:32:23.761027 | debian-bookworm | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2025-09-21 03:32:23.761468 | debian-bookworm | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2025-09-21 03:32:23.762412 | debian-bookworm | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos 2025-09-21 03:32:23.762842 | debian-bookworm | Found installed collection junipernetworks.junos:11.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2025-09-21 03:32:23.763279 | debian-bookworm | Loading collection community.zabbix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix 2025-09-21 03:32:23.763683 | debian-bookworm | Found installed collection community.zabbix:4.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix' 2025-09-21 03:32:23.764003 | debian-bookworm | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2025-09-21 03:32:23.764436 | debian-bookworm | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2025-09-21 03:32:23.764747 | debian-bookworm | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud 2025-09-21 03:32:23.765170 | debian-bookworm | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud' 2025-09-21 03:32:23.765571 | debian-bookworm | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2025-09-21 03:32:23.765978 | debian-bookworm | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2025-09-21 03:32:23.768158 | debian-bookworm | Loading collection awx.awx from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx 2025-09-21 03:32:23.768520 | debian-bookworm | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx' 2025-09-21 03:32:23.768876 | debian-bookworm | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade 2025-09-21 03:32:23.769293 | debian-bookworm | Found installed collection purestorage.flashblade:1.20.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2025-09-21 03:32:23.770154 | debian-bookworm | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud 2025-09-21 03:32:23.770525 | debian-bookworm | Found installed collection hetzner.hcloud:5.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2025-09-21 03:32:23.771167 | debian-bookworm | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage 2025-09-21 03:32:23.771526 | debian-bookworm | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2025-09-21 03:32:23.772235 | debian-bookworm | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox 2025-09-21 03:32:23.772592 | debian-bookworm | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox' 2025-09-21 03:32:23.773370 | debian-bookworm | Loading collection cisco.ios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios 2025-09-21 03:32:23.773730 | debian-bookworm | Found installed collection cisco.ios:11.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios' 2025-09-21 03:32:23.774091 | debian-bookworm | Loading collection community.hrobot from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot 2025-09-21 03:32:23.774517 | debian-bookworm | Found installed collection community.hrobot:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot' 2025-09-21 03:32:23.775129 | debian-bookworm | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2025-09-21 03:32:23.775454 | debian-bookworm | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2025-09-21 03:32:23.776031 | debian-bookworm | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt 2025-09-21 03:32:23.776426 | debian-bookworm | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2025-09-21 03:32:23.776720 | debian-bookworm | Loading collection community.routeros from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros 2025-09-21 03:32:23.777016 | debian-bookworm | Found installed collection community.routeros:3.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros' 2025-09-21 03:32:23.777323 | debian-bookworm | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad 2025-09-21 03:32:23.777615 | debian-bookworm | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad' 2025-09-21 03:32:23.777910 | debian-bookworm | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur 2025-09-21 03:32:23.778360 | debian-bookworm | Found installed collection cyberark.conjur:1.3.7 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur' 2025-09-21 03:32:23.779239 | debian-bookworm | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos 2025-09-21 03:32:23.779635 | debian-bookworm | Found installed collection vyos.vyos:6.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos' 2025-09-21 03:32:23.781080 | debian-bookworm | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman 2025-09-21 03:32:23.781548 | debian-bookworm | Found installed collection theforeman.foreman:5.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman' 2025-09-21 03:32:23.781800 | debian-bookworm | Loading collection ansible.posix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix 2025-09-21 03:32:23.782183 | debian-bookworm | Found installed collection ansible.posix:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix' 2025-09-21 03:32:23.782453 | debian-bookworm | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana 2025-09-21 03:32:23.782915 | debian-bookworm | Found installed collection grafana.grafana:6.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana' 2025-09-21 03:32:23.783183 | debian-bookworm | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim 2025-09-21 03:32:23.783553 | debian-bookworm | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim' 2025-09-21 03:32:23.785379 | debian-bookworm | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection 2025-09-21 03:32:23.785777 | debian-bookworm | Found installed collection azure.azcollection:3.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection' 2025-09-21 03:32:23.787031 | debian-bookworm | Loading collection amazon.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws 2025-09-21 03:32:23.787485 | debian-bookworm | Found installed collection amazon.aws:10.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws' 2025-09-21 03:32:23.787713 | debian-bookworm | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas 2025-09-21 03:32:23.788052 | debian-bookworm | Found installed collection cyberark.pas:1.0.35 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas' 2025-09-21 03:32:23.788444 | debian-bookworm | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2025-09-21 03:32:23.788785 | debian-bookworm | Found installed collection f5networks.f5_modules:1.38.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2025-09-21 03:32:23.789273 | debian-bookworm | Loading collection community.crypto from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto 2025-09-21 03:32:23.789641 | debian-bookworm | Found installed collection community.crypto:3.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto' 2025-09-21 03:32:23.794050 | debian-bookworm | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2025-09-21 03:32:23.794513 | debian-bookworm | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2025-09-21 03:32:23.794720 | debian-bookworm | Loading collection osism.commons from /home/zuul/.ansible/collections/ansible_collections/osism/commons 2025-09-21 03:32:23.796514 | debian-bookworm | Found installed collection osism.commons:0.20250824.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2025-09-21 03:32:23.798039 | debian-bookworm | Starting galaxy collection install process 2025-09-21 03:32:23.798222 | debian-bookworm | Nothing to do. All requested collections are already installed. If you want to reinstall them, consider using `--force`. 2025-09-21 03:32:23.458727 | ubuntu-jammy | ansible-galaxy [core 2.19.2] 2025-09-21 03:32:23.459205 | ubuntu-jammy | config file = None 2025-09-21 03:32:23.459653 | ubuntu-jammy | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2025-09-21 03:32:23.460182 | ubuntu-jammy | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2025-09-21 03:32:23.460592 | ubuntu-jammy | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.11/site-packages:/home/zuul/venv/lib/python3.11/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.11/dist-packages 2025-09-21 03:32:23.460929 | ubuntu-jammy | executable location = /home/zuul/venv/bin/ansible-galaxy 2025-09-21 03:32:23.461342 | ubuntu-jammy | python version = 3.11.0rc1 (main, Aug 12 2022, 10:02:14) [GCC 11.2.0] (/home/zuul/venv/bin/python3.11) 2025-09-21 03:32:23.461719 | ubuntu-jammy | jinja version = 3.1.6 2025-09-21 03:32:23.462096 | ubuntu-jammy | pyyaml version = 6.0.2 (with libyaml v0.2.5) 2025-09-21 03:32:23.462377 | ubuntu-jammy | No config file found; using defaults 2025-09-21 03:32:23.462809 | ubuntu-jammy | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2025-09-21 03:32:23.465324 | ubuntu-jammy | Loading collection ansible._protomatter from /home/zuul/venv/lib/python3.11/site-packages/ansible/_internal/ansible_collections/ansible/_protomatter 2025-09-21 03:32:23.465689 | ubuntu-jammy | Found installed collection ansible._protomatter:2.19.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible/_internal/ansible_collections/ansible/_protomatter' 2025-09-21 03:32:23.471061 | ubuntu-jammy | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq 2025-09-21 03:32:23.472203 | ubuntu-jammy | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq' 2025-09-21 03:32:23.473261 | ubuntu-jammy | Loading collection community.hrobot from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot 2025-09-21 03:32:23.473687 | ubuntu-jammy | Found installed collection community.hrobot:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot' 2025-09-21 03:32:23.474244 | ubuntu-jammy | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2025-09-21 03:32:23.474578 | ubuntu-jammy | Found installed collection f5networks.f5_modules:1.38.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2025-09-21 03:32:23.474900 | ubuntu-jammy | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox 2025-09-21 03:32:23.475358 | ubuntu-jammy | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox' 2025-09-21 03:32:23.475703 | ubuntu-jammy | Loading collection containers.podman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman 2025-09-21 03:32:23.476089 | ubuntu-jammy | Found installed collection containers.podman:1.17.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman' 2025-09-21 03:32:23.476505 | ubuntu-jammy | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight 2025-09-21 03:32:23.476820 | ubuntu-jammy | Found installed collection cisco.intersight:2.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight' 2025-09-21 03:32:23.477557 | ubuntu-jammy | Loading collection community.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware 2025-09-21 03:32:23.477927 | ubuntu-jammy | Found installed collection community.vmware:5.7.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware' 2025-09-21 03:32:23.478604 | ubuntu-jammy | Loading collection splunk.es from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es 2025-09-21 03:32:23.479025 | ubuntu-jammy | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es' 2025-09-21 03:32:23.479395 | ubuntu-jammy | Loading collection community.sops from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops 2025-09-21 03:32:23.479711 | ubuntu-jammy | Found installed collection community.sops:2.2.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops' 2025-09-21 03:32:23.481412 | ubuntu-jammy | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection 2025-09-21 03:32:23.482230 | ubuntu-jammy | Found installed collection azure.azcollection:3.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection' 2025-09-21 03:32:23.482632 | ubuntu-jammy | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios 2025-09-21 03:32:23.482919 | ubuntu-jammy | Found installed collection fortinet.fortios:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios' 2025-09-21 03:32:23.483299 | ubuntu-jammy | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud 2025-09-21 03:32:23.483575 | ubuntu-jammy | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud' 2025-09-21 03:32:23.483998 | ubuntu-jammy | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt 2025-09-21 03:32:23.484344 | ubuntu-jammy | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2025-09-21 03:32:23.484696 | ubuntu-jammy | Loading collection ansible.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows 2025-09-21 03:32:23.485058 | ubuntu-jammy | Found installed collection ansible.windows:3.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows' 2025-09-21 03:32:23.485711 | ubuntu-jammy | Loading collection cisco.ios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios 2025-09-21 03:32:23.486122 | ubuntu-jammy | Found installed collection cisco.ios:11.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios' 2025-09-21 03:32:23.486998 | ubuntu-jammy | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos 2025-09-21 03:32:23.487285 | ubuntu-jammy | Found installed collection junipernetworks.junos:11.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2025-09-21 03:32:23.487715 | ubuntu-jammy | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault 2025-09-21 03:32:23.488063 | ubuntu-jammy | Found installed collection community.hashi_vault:7.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault' 2025-09-21 03:32:23.488415 | ubuntu-jammy | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray 2025-09-21 03:32:23.488809 | ubuntu-jammy | Found installed collection purestorage.flasharray:1.36.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2025-09-21 03:32:23.489114 | ubuntu-jammy | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur 2025-09-21 03:32:23.489496 | ubuntu-jammy | Found installed collection cyberark.conjur:1.3.7 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur' 2025-09-21 03:32:23.491056 | ubuntu-jammy | Loading collection community.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows 2025-09-21 03:32:23.491465 | ubuntu-jammy | Found installed collection community.windows:3.0.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows' 2025-09-21 03:32:23.491782 | ubuntu-jammy | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis 2025-09-21 03:32:23.492209 | ubuntu-jammy | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis' 2025-09-21 03:32:23.492724 | ubuntu-jammy | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar 2025-09-21 03:32:23.493146 | ubuntu-jammy | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar' 2025-09-21 03:32:23.493676 | ubuntu-jammy | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2025-09-21 03:32:23.494089 | ubuntu-jammy | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2025-09-21 03:32:23.494330 | ubuntu-jammy | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon 2025-09-21 03:32:23.494729 | ubuntu-jammy | Found installed collection ansible.netcommon:8.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon' 2025-09-21 03:32:23.494998 | ubuntu-jammy | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade 2025-09-21 03:32:23.495243 | ubuntu-jammy | Found installed collection purestorage.flashblade:1.20.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2025-09-21 03:32:23.495616 | ubuntu-jammy | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs 2025-09-21 03:32:23.496021 | ubuntu-jammy | Found installed collection community.sap_libs:1.4.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs' 2025-09-21 03:32:23.496245 | ubuntu-jammy | Loading collection ansible.utils from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils 2025-09-21 03:32:23.496621 | ubuntu-jammy | Found installed collection ansible.utils:6.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils' 2025-09-21 03:32:23.497638 | ubuntu-jammy | Loading collection google.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud 2025-09-21 03:32:23.498050 | ubuntu-jammy | Found installed collection google.cloud:1.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud' 2025-09-21 03:32:23.498767 | ubuntu-jammy | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr 2025-09-21 03:32:23.499163 | ubuntu-jammy | Found installed collection cisco.iosxr:12.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr' 2025-09-21 03:32:23.499469 | ubuntu-jammy | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim 2025-09-21 03:32:23.499853 | ubuntu-jammy | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim' 2025-09-21 03:32:23.500255 | ubuntu-jammy | Loading collection community.proxmox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox 2025-09-21 03:32:23.500623 | ubuntu-jammy | Found installed collection community.proxmox:1.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox' 2025-09-21 03:32:23.500845 | ubuntu-jammy | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb 2025-09-21 03:32:23.501214 | ubuntu-jammy | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb' 2025-09-21 03:32:23.501431 | ubuntu-jammy | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas 2025-09-21 03:32:23.501789 | ubuntu-jammy | Found installed collection cyberark.pas:1.0.35 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas' 2025-09-21 03:32:23.502087 | ubuntu-jammy | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2025-09-21 03:32:23.502460 | ubuntu-jammy | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2025-09-21 03:32:23.502858 | ubuntu-jammy | Loading collection community.okd from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd 2025-09-21 03:32:23.503256 | ubuntu-jammy | Found installed collection community.okd:5.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd' 2025-09-21 03:32:23.505461 | ubuntu-jammy | Loading collection awx.awx from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx 2025-09-21 03:32:23.505866 | ubuntu-jammy | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx' 2025-09-21 03:32:23.506506 | ubuntu-jammy | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud 2025-09-21 03:32:23.506884 | ubuntu-jammy | Found installed collection openstack.cloud:2.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud' 2025-09-21 03:32:23.507108 | ubuntu-jammy | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2025-09-21 03:32:23.507534 | ubuntu-jammy | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2025-09-21 03:32:23.508263 | ubuntu-jammy | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2025-09-21 03:32:23.508633 | ubuntu-jammy | Found installed collection dellemc.enterprise_sonic:3.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2025-09-21 03:32:23.509827 | ubuntu-jammy | Loading collection amazon.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws 2025-09-21 03:32:23.510228 | ubuntu-jammy | Found installed collection amazon.aws:10.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws' 2025-09-21 03:32:23.510646 | ubuntu-jammy | Loading collection community.docker from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker 2025-09-21 03:32:23.511053 | ubuntu-jammy | Found installed collection community.docker:4.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker' 2025-09-21 03:32:23.511473 | ubuntu-jammy | Loading collection wti.remote from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote 2025-09-21 03:32:23.511870 | ubuntu-jammy | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote' 2025-09-21 03:32:23.512164 | ubuntu-jammy | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2025-09-21 03:32:23.512572 | ubuntu-jammy | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2025-09-21 03:32:23.512782 | ubuntu-jammy | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad 2025-09-21 03:32:23.513199 | ubuntu-jammy | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad' 2025-09-21 03:32:23.513389 | ubuntu-jammy | Loading collection community.mysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql 2025-09-21 03:32:23.513780 | ubuntu-jammy | Found installed collection community.mysql:3.15.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql' 2025-09-21 03:32:23.514465 | ubuntu-jammy | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity 2025-09-21 03:32:23.514827 | ubuntu-jammy | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity' 2025-09-21 03:32:23.515131 | ubuntu-jammy | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2025-09-21 03:32:23.515524 | ubuntu-jammy | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2025-09-21 03:32:23.515712 | ubuntu-jammy | Loading collection community.proxysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql 2025-09-21 03:32:23.516080 | ubuntu-jammy | Found installed collection community.proxysql:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql' 2025-09-21 03:32:23.517038 | ubuntu-jammy | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap 2025-09-21 03:32:23.517429 | ubuntu-jammy | Found installed collection netapp.ontap:23.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap' 2025-09-21 03:32:23.518076 | ubuntu-jammy | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2025-09-21 03:32:23.518458 | ubuntu-jammy | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2025-09-21 03:32:23.519905 | ubuntu-jammy | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman 2025-09-21 03:32:23.520365 | ubuntu-jammy | Found installed collection theforeman.foreman:5.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman' 2025-09-21 03:32:23.528949 | ubuntu-jammy | Loading collection community.general from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general 2025-09-21 03:32:23.529385 | ubuntu-jammy | Found installed collection community.general:11.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general' 2025-09-21 03:32:23.530660 | ubuntu-jammy | Loading collection cisco.mso from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso 2025-09-21 03:32:23.531105 | ubuntu-jammy | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso' 2025-09-21 03:32:23.531357 | ubuntu-jammy | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2025-09-21 03:32:23.531786 | ubuntu-jammy | Found installed collection fortinet.fortimanager:2.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2025-09-21 03:32:23.531972 | ubuntu-jammy | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2025-09-21 03:32:23.532413 | ubuntu-jammy | Found installed collection community.library_inventory_filtering_v1:1.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2025-09-21 03:32:23.532777 | ubuntu-jammy | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2025-09-21 03:32:23.533165 | ubuntu-jammy | Found installed collection hitachivantara.vspone_block:4.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2025-09-21 03:32:23.534657 | ubuntu-jammy | Loading collection cisco.aci from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci 2025-09-21 03:32:23.535078 | ubuntu-jammy | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci' 2025-09-21 03:32:23.535615 | ubuntu-jammy | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware 2025-09-21 03:32:23.536051 | ubuntu-jammy | Found installed collection vmware.vmware:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware' 2025-09-21 03:32:23.536400 | ubuntu-jammy | Loading collection community.zabbix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix 2025-09-21 03:32:23.536781 | ubuntu-jammy | Found installed collection community.zabbix:4.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix' 2025-09-21 03:32:23.537073 | ubuntu-jammy | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core 2025-09-21 03:32:23.537471 | ubuntu-jammy | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core' 2025-09-21 03:32:23.537806 | ubuntu-jammy | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid 2025-09-21 03:32:23.538204 | ubuntu-jammy | Found installed collection netapp.storagegrid:21.15.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2025-09-21 03:32:23.538374 | ubuntu-jammy | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac 2025-09-21 03:32:23.538744 | ubuntu-jammy | Found installed collection cisco.dnac:6.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac' 2025-09-21 03:32:23.539548 | ubuntu-jammy | Loading collection arista.eos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos 2025-09-21 03:32:23.540015 | ubuntu-jammy | Found installed collection arista.eos:12.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos' 2025-09-21 03:32:23.542269 | ubuntu-jammy | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2025-09-21 03:32:23.542659 | ubuntu-jammy | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2025-09-21 03:32:23.542976 | ubuntu-jammy | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox 2025-09-21 03:32:23.543349 | ubuntu-jammy | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2025-09-21 03:32:23.543634 | ubuntu-jammy | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2025-09-21 03:32:23.544046 | ubuntu-jammy | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2025-09-21 03:32:23.544606 | ubuntu-jammy | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage 2025-09-21 03:32:23.545049 | ubuntu-jammy | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2025-09-21 03:32:23.545505 | ubuntu-jammy | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex 2025-09-21 03:32:23.545898 | ubuntu-jammy | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2025-09-21 03:32:23.534626 | centos-9-stream | WARNING Another version of 'amazon.aws' 10.1.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 10.1.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.534744 | centos-9-stream | WARNING Another version of 'ansible.netcommon' 8.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 8.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.534923 | centos-9-stream | WARNING Another version of 'ansible.posix' 2.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.535069 | centos-9-stream | WARNING Another version of 'ansible.utils' 6.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.535258 | centos-9-stream | WARNING Another version of 'ansible.windows' 3.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.535376 | centos-9-stream | WARNING Another version of 'arista.eos' 12.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 12.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.535457 | centos-9-stream | WARNING Another version of 'awx.awx' 24.6.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 24.6.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.535566 | centos-9-stream | WARNING Another version of 'azure.azcollection' 3.8.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.8.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.535637 | centos-9-stream | WARNING Another version of 'check_point.mgmt' 6.4.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.4.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.535702 | centos-9-stream | WARNING Another version of 'chocolatey.chocolatey' 1.5.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.5.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.535762 | centos-9-stream | WARNING Another version of 'cisco.aci' 2.12.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.12.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.535825 | centos-9-stream | WARNING Another version of 'cisco.dnac' 6.39.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.39.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.535883 | centos-9-stream | WARNING Another version of 'cisco.intersight' 2.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.535947 | centos-9-stream | WARNING Another version of 'cisco.ios' 11.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 11.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.536039 | centos-9-stream | WARNING Another version of 'cisco.iosxr' 12.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 12.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.536097 | centos-9-stream | WARNING Another version of 'cisco.meraki' 2.21.4 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.21.4 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.536152 | centos-9-stream | WARNING Another version of 'cisco.mso' 2.11.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.11.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.536257 | centos-9-stream | WARNING Another version of 'cisco.nxos' 11.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 11.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.536317 | centos-9-stream | WARNING Another version of 'cisco.ucs' 1.16.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.16.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.536367 | centos-9-stream | WARNING Another version of 'cloudscale_ch.cloud' 2.5.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.536422 | centos-9-stream | WARNING Another version of 'community.aws' 10.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 10.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.536478 | centos-9-stream | WARNING Another version of 'community.ciscosmb' 1.0.11 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.11 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.536534 | centos-9-stream | WARNING Another version of 'community.crypto' 3.0.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.0.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.536592 | centos-9-stream | WARNING Another version of 'community.digitalocean' 1.27.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.27.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.536651 | centos-9-stream | WARNING Another version of 'community.dns' 3.3.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.3.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.536708 | centos-9-stream | WARNING Another version of 'community.docker' 4.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.536765 | centos-9-stream | WARNING Another version of 'community.general' 11.2.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 11.2.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.536823 | centos-9-stream | WARNING Another version of 'community.grafana' 2.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.536886 | centos-9-stream | WARNING Another version of 'community.hashi_vault' 7.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 7.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.536944 | centos-9-stream | WARNING Another version of 'community.hrobot' 2.5.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.537020 | centos-9-stream | WARNING Another version of 'community.library_inventory_filtering_v1' 1.1.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.1.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.537079 | centos-9-stream | WARNING Another version of 'community.libvirt' 2.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.537140 | centos-9-stream | WARNING Another version of 'community.mongodb' 1.7.10 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.7.10 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.537254 | centos-9-stream | WARNING Another version of 'community.mysql' 3.15.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.15.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.546982 | ubuntu-jammy | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud 2025-09-21 03:32:23.537350 | centos-9-stream | WARNING Another version of 'community.okd' 5.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.537434 | centos-9-stream | WARNING Another version of 'community.postgresql' 4.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.547343 | ubuntu-jammy | Found installed collection hetzner.hcloud:5.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2025-09-21 03:32:23.537493 | centos-9-stream | WARNING Another version of 'community.proxmox' 1.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.550416 | ubuntu-jammy | Loading collection community.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws 2025-09-21 03:32:23.537552 | centos-9-stream | WARNING Another version of 'community.proxysql' 1.6.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.6.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.550824 | ubuntu-jammy | Found installed collection community.aws:10.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws' 2025-09-21 03:32:23.537607 | centos-9-stream | WARNING Another version of 'community.rabbitmq' 1.6.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.6.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.551298 | ubuntu-jammy | Loading collection community.mongodb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb 2025-09-21 03:32:23.537663 | centos-9-stream | WARNING Another version of 'community.routeros' 3.10.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.10.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.551690 | ubuntu-jammy | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb' 2025-09-21 03:32:23.537719 | centos-9-stream | WARNING Another version of 'community.sap_libs' 1.4.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.4.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.552700 | ubuntu-jammy | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean 2025-09-21 03:32:23.537773 | centos-9-stream | WARNING Another version of 'community.sops' 2.2.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.553106 | ubuntu-jammy | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean' 2025-09-21 03:32:23.537860 | centos-9-stream | WARNING Another version of 'community.vmware' 5.7.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.7.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.553265 | ubuntu-jammy | Loading collection ansible.posix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix 2025-09-21 03:32:23.537929 | centos-9-stream | WARNING Another version of 'community.windows' 3.0.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.0.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.553693 | ubuntu-jammy | Found installed collection ansible.posix:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix' 2025-09-21 03:32:23.538021 | centos-9-stream | WARNING Another version of 'community.zabbix' 4.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.553915 | ubuntu-jammy | Loading collection community.libvirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt 2025-09-21 03:32:23.538078 | centos-9-stream | WARNING Another version of 'containers.podman' 1.17.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.17.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.554357 | ubuntu-jammy | Found installed collection community.libvirt:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt' 2025-09-21 03:32:23.538218 | centos-9-stream | WARNING Another version of 'cyberark.conjur' 1.3.7 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.3.7 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.556015 | ubuntu-jammy | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki 2025-09-21 03:32:23.538280 | centos-9-stream | WARNING Another version of 'cyberark.pas' 1.0.35 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.35 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.556362 | ubuntu-jammy | Found installed collection cisco.meraki:2.21.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki' 2025-09-21 03:32:23.538349 | centos-9-stream | WARNING Another version of 'dellemc.enterprise_sonic' 3.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.556889 | ubuntu-jammy | Loading collection community.crypto from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto 2025-09-21 03:32:23.538441 | centos-9-stream | WARNING Another version of 'dellemc.openmanage' 9.12.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 9.12.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.557271 | ubuntu-jammy | Found installed collection community.crypto:3.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto' 2025-09-21 03:32:23.538545 | centos-9-stream | WARNING Another version of 'dellemc.powerflex' 2.6.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.6.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.557732 | ubuntu-jammy | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt 2025-09-21 03:32:23.538639 | centos-9-stream | WARNING Another version of 'dellemc.unity' 2.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.558124 | ubuntu-jammy | Found installed collection check_point.mgmt:6.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt' 2025-09-21 03:32:23.538708 | centos-9-stream | WARNING Another version of 'f5networks.f5_modules' 1.38.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.38.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.538775 | centos-9-stream | WARNING Another version of 'fortinet.fortimanager' 2.10.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.10.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.538842 | centos-9-stream | WARNING Another version of 'fortinet.fortios' 2.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.558402 | ubuntu-jammy | Loading collection community.routeros from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros 2025-09-21 03:32:23.538907 | centos-9-stream | WARNING Another version of 'google.cloud' 1.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.558780 | ubuntu-jammy | Found installed collection community.routeros:3.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros' 2025-09-21 03:32:23.539013 | centos-9-stream | WARNING Another version of 'grafana.grafana' 6.0.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.0.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.559145 | ubuntu-jammy | Loading collection community.dns from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns 2025-09-21 03:32:23.539125 | centos-9-stream | WARNING Another version of 'hetzner.hcloud' 5.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.559530 | ubuntu-jammy | Found installed collection community.dns:3.3.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns' 2025-09-21 03:32:23.539250 | centos-9-stream | WARNING Another version of 'hitachivantara.vspone_block' 4.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.559814 | ubuntu-jammy | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2025-09-21 03:32:23.539369 | centos-9-stream | WARNING Another version of 'ibm.qradar' 4.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.560247 | ubuntu-jammy | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2025-09-21 03:32:23.539485 | centos-9-stream | WARNING Another version of 'ibm.storage_virtualize' 2.7.4 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.7.4 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.560536 | ubuntu-jammy | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2025-09-21 03:32:23.539578 | centos-9-stream | WARNING Another version of 'ieisystem.inmanage' 3.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.561629 | ubuntu-jammy | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2025-09-21 03:32:23.539646 | centos-9-stream | WARNING Another version of 'infinidat.infinibox' 1.6.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.6.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.562119 | ubuntu-jammy | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs 2025-09-21 03:32:23.539718 | centos-9-stream | WARNING Another version of 'infoblox.nios_modules' 1.8.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.8.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.562551 | ubuntu-jammy | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs' 2025-09-21 03:32:23.539779 | centos-9-stream | WARNING Another version of 'inspur.ispim' 2.2.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.562910 | ubuntu-jammy | Loading collection community.postgresql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql 2025-09-21 03:32:23.539846 | centos-9-stream | WARNING Another version of 'junipernetworks.junos' 11.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 11.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.563248 | ubuntu-jammy | Found installed collection community.postgresql:4.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql' 2025-09-21 03:32:23.563692 | ubuntu-jammy | Loading collection community.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana 2025-09-21 03:32:23.539908 | centos-9-stream | WARNING Another version of 'kaytus.ksmanage' 2.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.564095 | ubuntu-jammy | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana' 2025-09-21 03:32:23.540067 | centos-9-stream | WARNING Another version of 'kubernetes.core' 6.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.564440 | ubuntu-jammy | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana 2025-09-21 03:32:23.540133 | centos-9-stream | WARNING Another version of 'kubevirt.core' 2.2.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.540239 | centos-9-stream | WARNING Another version of 'lowlydba.sqlserver' 2.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.540324 | centos-9-stream | WARNING Another version of 'microsoft.ad' 1.9.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.9.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.540422 | centos-9-stream | WARNING Another version of 'microsoft.iis' 1.0.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.564823 | ubuntu-jammy | Found installed collection grafana.grafana:6.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana' 2025-09-21 03:32:23.540485 | centos-9-stream | WARNING Another version of 'netapp.cloudmanager' 21.24.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 21.24.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.565292 | ubuntu-jammy | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core 2025-09-21 03:32:23.540541 | centos-9-stream | WARNING Another version of 'netapp.ontap' 23.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 23.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.565599 | ubuntu-jammy | Found installed collection kubernetes.core:6.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core' 2025-09-21 03:32:23.540598 | centos-9-stream | WARNING Another version of 'netapp.storagegrid' 21.15.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 21.15.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.565901 | ubuntu-jammy | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2025-09-21 03:32:23.540662 | centos-9-stream | WARNING Another version of 'netapp_eseries.santricity' 1.4.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.4.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.566335 | ubuntu-jammy | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2025-09-21 03:32:23.540709 | centos-9-stream | WARNING Another version of 'netbox.netbox' 3.21.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.21.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.566635 | ubuntu-jammy | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2025-09-21 03:32:23.540765 | centos-9-stream | WARNING Another version of 'ngine_io.cloudstack' 2.5.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.566961 | ubuntu-jammy | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2025-09-21 03:32:23.540819 | centos-9-stream | WARNING Another version of 'openstack.cloud' 2.4.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.567704 | ubuntu-jammy | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos 2025-09-21 03:32:23.540874 | centos-9-stream | WARNING Another version of 'ovirt.ovirt' 3.2.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.2.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.568536 | ubuntu-jammy | Found installed collection cisco.nxos:11.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos' 2025-09-21 03:32:23.540925 | centos-9-stream | WARNING Another version of 'purestorage.flasharray' 1.36.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.36.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.569209 | ubuntu-jammy | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos 2025-09-21 03:32:23.541005 | centos-9-stream | WARNING Another version of 'purestorage.flashblade' 1.20.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.20.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.569577 | ubuntu-jammy | Found installed collection vyos.vyos:6.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos' 2025-09-21 03:32:23.541102 | centos-9-stream | WARNING Another version of 'splunk.es' 4.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.574097 | ubuntu-jammy | Loading collection osism.commons from /home/zuul/.ansible/collections/ansible_collections/osism/commons 2025-09-21 03:32:23.541178 | centos-9-stream | WARNING Another version of 'telekom_mms.icinga_director' 2.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.575710 | ubuntu-jammy | Found installed collection osism.commons:0.20250824.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2025-09-21 03:32:23.541255 | centos-9-stream | WARNING Another version of 'theforeman.foreman' 5.5.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.5.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.577035 | ubuntu-jammy | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2025-09-21 03:32:23.541312 | centos-9-stream | WARNING Another version of 'vmware.vmware' 2.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.577386 | ubuntu-jammy | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2025-09-21 03:32:23.541371 | centos-9-stream | WARNING Another version of 'vmware.vmware_rest' 4.9.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.9.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.541452 | centos-9-stream | WARNING Another version of 'vultr.cloud' 1.13.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.13.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.541550 | centos-9-stream | WARNING Another version of 'vyos.vyos' 6.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.541617 | centos-9-stream | WARNING Another version of 'wti.remote' 1.0.10 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.10 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:23.563561 | centos-9-stream | INFO [delegated > dependency] Starting 2025-09-21 03:32:23.563968 | centos-9-stream | WARNING [delegated > dependency] Skipping, missing the requirements file. 2025-09-21 03:32:23.577984 | ubuntu-jammy | Starting galaxy collection install process 2025-09-21 03:32:23.578290 | ubuntu-jammy | Nothing to do. All requested collections are already installed. If you want to reinstall them, consider using `--force`. 2025-09-21 03:32:23.650533 | ubuntu-jammy | INFO [delegated > dependency] Dependency completed successfully. 2025-09-21 03:32:23.650631 | ubuntu-jammy | INFO [delegated > dependency] Completed 2025-09-21 03:32:23.665655 | ubuntu-jammy | INFO [delegated > create] Starting 2025-09-21 03:32:23.667297 | ubuntu-jammy | WARNING [delegated > create] Skipping, create action has no playbook. 2025-09-21 03:32:23.668157 | ubuntu-jammy | INFO [delegated > create] Completed 2025-09-21 03:32:23.677014 | ubuntu-jammy | INFO [delegated > prepare] Starting 2025-09-21 03:32:23.677067 | ubuntu-jammy | WARNING [delegated > prepare] Skipping, instances already prepared. 2025-09-21 03:32:23.677098 | ubuntu-jammy | INFO [delegated > prepare] Completed 2025-09-21 03:32:23.684745 | ubuntu-jammy | INFO [delegated > converge] Starting 2025-09-21 03:32:23.886001 | debian-bookworm | INFO [delegated > dependency] Dependency completed successfully. 2025-09-21 03:32:23.886066 | debian-bookworm | INFO [delegated > dependency] Completed 2025-09-21 03:32:23.901065 | debian-bookworm | INFO [delegated > create] Starting 2025-09-21 03:32:23.904053 | debian-bookworm | WARNING [delegated > create] Skipping, create action has no playbook. 2025-09-21 03:32:23.904953 | debian-bookworm | INFO [delegated > create] Completed 2025-09-21 03:32:23.913783 | debian-bookworm | INFO [delegated > prepare] Starting 2025-09-21 03:32:23.913829 | debian-bookworm | WARNING [delegated > prepare] Skipping, instances already prepared. 2025-09-21 03:32:23.914010 | debian-bookworm | INFO [delegated > prepare] Completed 2025-09-21 03:32:23.921578 | debian-bookworm | INFO [delegated > converge] Starting 2025-09-21 03:32:23.971356 | ubuntu-noble | ansible-galaxy [core 2.19.2] 2025-09-21 03:32:23.973477 | ubuntu-noble | config file = None 2025-09-21 03:32:23.973507 | ubuntu-noble | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2025-09-21 03:32:23.973514 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2025-09-21 03:32:23.973532 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.12/site-packages:/home/zuul/venv/lib/python3.12/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.12/dist-packages 2025-09-21 03:32:23.973540 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-galaxy 2025-09-21 03:32:23.973812 | ubuntu-noble | python version = 3.12.3 (main, Aug 14 2025, 17:47:21) [GCC 13.3.0] (/home/zuul/venv/bin/python3) 2025-09-21 03:32:23.974108 | ubuntu-noble | jinja version = 3.1.6 2025-09-21 03:32:23.974420 | ubuntu-noble | pyyaml version = 6.0.2 (with libyaml v0.2.5) 2025-09-21 03:32:23.974803 | ubuntu-noble | No config file found; using defaults 2025-09-21 03:32:23.975312 | ubuntu-noble | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2025-09-21 03:32:23.985309 | ubuntu-noble | Loading collection osism.commons from /home/zuul/.ansible/collections/ansible_collections/osism/commons 2025-09-21 03:32:23.987246 | ubuntu-noble | Found installed collection osism.commons:0.20250824.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2025-09-21 03:32:23.988687 | ubuntu-noble | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2025-09-21 03:32:23.989167 | ubuntu-noble | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2025-09-21 03:32:24.001842 | ubuntu-noble | Loading collection ansible._protomatter from /home/zuul/venv/lib/python3.12/site-packages/ansible/_internal/ansible_collections/ansible/_protomatter 2025-09-21 03:32:24.002210 | ubuntu-noble | Found installed collection ansible._protomatter:2.19.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible/_internal/ansible_collections/ansible/_protomatter' 2025-09-21 03:32:24.011707 | ubuntu-noble | Loading collection community.hrobot from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot 2025-09-21 03:32:24.012081 | ubuntu-noble | Found installed collection community.hrobot:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot' 2025-09-21 03:32:24.012466 | ubuntu-noble | Loading collection containers.podman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman 2025-09-21 03:32:24.013531 | ubuntu-noble | Found installed collection containers.podman:1.17.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman' 2025-09-21 03:32:24.014049 | ubuntu-noble | Loading collection ansible.utils from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils 2025-09-21 03:32:24.014385 | ubuntu-noble | Found installed collection ansible.utils:6.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils' 2025-09-21 03:32:24.016540 | ubuntu-noble | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos 2025-09-21 03:32:24.016968 | ubuntu-noble | Found installed collection junipernetworks.junos:11.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos' 2025-09-21 03:32:24.017771 | ubuntu-noble | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage 2025-09-21 03:32:24.018172 | ubuntu-noble | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage' 2025-09-21 03:32:24.018988 | ubuntu-noble | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox 2025-09-21 03:32:24.019361 | ubuntu-noble | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox' 2025-09-21 03:32:24.019781 | ubuntu-noble | Loading collection community.zabbix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix 2025-09-21 03:32:24.020152 | ubuntu-noble | Found installed collection community.zabbix:4.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix' 2025-09-21 03:32:24.020544 | ubuntu-noble | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas 2025-09-21 03:32:24.020977 | ubuntu-noble | Found installed collection cyberark.pas:1.0.35 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas' 2025-09-21 03:32:24.021815 | ubuntu-noble | Loading collection arista.eos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos 2025-09-21 03:32:24.022182 | ubuntu-noble | Found installed collection arista.eos:12.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos' 2025-09-21 03:32:24.022609 | ubuntu-noble | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules 2025-09-21 03:32:24.022977 | ubuntu-noble | Found installed collection f5networks.f5_modules:1.38.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules' 2025-09-21 03:32:24.023338 | ubuntu-noble | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize 2025-09-21 03:32:24.023747 | ubuntu-noble | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize' 2025-09-21 03:32:24.024216 | ubuntu-noble | Loading collection community.mongodb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb 2025-09-21 03:32:24.024634 | ubuntu-noble | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb' 2025-09-21 03:32:24.024999 | ubuntu-noble | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage 2025-09-21 03:32:24.025367 | ubuntu-noble | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage' 2025-09-21 03:32:24.025773 | ubuntu-noble | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core 2025-09-21 03:32:24.026140 | ubuntu-noble | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core' 2025-09-21 03:32:24.026672 | ubuntu-noble | Loading collection splunk.es from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es 2025-09-21 03:32:24.027099 | ubuntu-noble | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es' 2025-09-21 03:32:24.027568 | ubuntu-noble | Loading collection community.docker from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker 2025-09-21 03:32:24.027973 | ubuntu-noble | Found installed collection community.docker:4.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker' 2025-09-21 03:32:24.029688 | ubuntu-noble | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos 2025-09-21 03:32:24.030330 | ubuntu-noble | Found installed collection cisco.nxos:11.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos' 2025-09-21 03:32:24.030355 | ubuntu-noble | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim 2025-09-21 03:32:24.030681 | ubuntu-noble | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim' 2025-09-21 03:32:24.031408 | ubuntu-noble | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos 2025-09-21 03:32:24.031740 | ubuntu-noble | Found installed collection vyos.vyos:6.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos' 2025-09-21 03:32:24.032029 | ubuntu-noble | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana 2025-09-21 03:32:24.032461 | ubuntu-noble | Found installed collection grafana.grafana:6.0.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana' 2025-09-21 03:32:24.032835 | ubuntu-noble | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1 2025-09-21 03:32:24.033135 | ubuntu-noble | Found installed collection community.library_inventory_filtering_v1:1.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2025-09-21 03:32:24.033416 | ubuntu-noble | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq 2025-09-21 03:32:24.033774 | ubuntu-noble | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq' 2025-09-21 03:32:24.035118 | ubuntu-noble | Loading collection cisco.mso from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso 2025-09-21 03:32:24.035804 | ubuntu-noble | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso' 2025-09-21 03:32:24.035826 | ubuntu-noble | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager 2025-09-21 03:32:24.036120 | ubuntu-noble | Found installed collection fortinet.fortimanager:2.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager' 2025-09-21 03:32:24.036450 | ubuntu-noble | Loading collection community.dns from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns 2025-09-21 03:32:24.036793 | ubuntu-noble | Found installed collection community.dns:3.3.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns' 2025-09-21 03:32:24.039686 | ubuntu-noble | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest 2025-09-21 03:32:24.039731 | ubuntu-noble | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest' 2025-09-21 03:32:24.039987 | ubuntu-noble | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey 2025-09-21 03:32:24.040330 | ubuntu-noble | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey' 2025-09-21 03:32:24.041217 | ubuntu-noble | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean 2025-09-21 03:32:24.041611 | ubuntu-noble | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean' 2025-09-21 03:32:24.042015 | ubuntu-noble | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid 2025-09-21 03:32:24.042331 | ubuntu-noble | Found installed collection netapp.storagegrid:21.15.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid' 2025-09-21 03:32:24.043451 | ubuntu-noble | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud 2025-09-21 03:32:24.043826 | ubuntu-noble | Found installed collection hetzner.hcloud:5.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud' 2025-09-21 03:32:24.044268 | ubuntu-noble | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar 2025-09-21 03:32:24.044881 | ubuntu-noble | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar' 2025-09-21 03:32:24.044909 | ubuntu-noble | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade 2025-09-21 03:32:24.045162 | ubuntu-noble | Found installed collection purestorage.flashblade:1.20.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade' 2025-09-21 03:32:24.045422 | ubuntu-noble | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray 2025-09-21 03:32:24.045731 | ubuntu-noble | Found installed collection purestorage.flasharray:1.36.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray' 2025-09-21 03:32:24.047384 | ubuntu-noble | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki 2025-09-21 03:32:24.047790 | ubuntu-noble | Found installed collection cisco.meraki:2.21.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki' 2025-09-21 03:32:24.048061 | ubuntu-noble | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon 2025-09-21 03:32:24.048321 | ubuntu-noble | Found installed collection ansible.netcommon:8.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon' 2025-09-21 03:32:24.048874 | ubuntu-noble | Loading collection community.crypto from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto 2025-09-21 03:32:24.049739 | ubuntu-noble | Found installed collection community.crypto:3.0.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto' 2025-09-21 03:32:24.049760 | ubuntu-noble | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac 2025-09-21 03:32:24.049767 | ubuntu-noble | Found installed collection cisco.dnac:6.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac' 2025-09-21 03:32:24.050040 | ubuntu-noble | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault 2025-09-21 03:32:24.050339 | ubuntu-noble | Found installed collection community.hashi_vault:7.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault' 2025-09-21 03:32:24.051941 | ubuntu-noble | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman 2025-09-21 03:32:24.052353 | ubuntu-noble | Found installed collection theforeman.foreman:5.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman' 2025-09-21 03:32:24.054307 | ubuntu-noble | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection 2025-09-21 03:32:24.054726 | ubuntu-noble | Found installed collection azure.azcollection:3.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection' 2025-09-21 03:32:24.055169 | ubuntu-noble | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex 2025-09-21 03:32:24.055505 | ubuntu-noble | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex' 2025-09-21 03:32:24.055854 | ubuntu-noble | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules 2025-09-21 03:32:24.056168 | ubuntu-noble | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules' 2025-09-21 03:32:24.056507 | ubuntu-noble | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight 2025-09-21 03:32:24.057154 | ubuntu-noble | Found installed collection cisco.intersight:2.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight' 2025-09-21 03:32:24.066291 | ubuntu-noble | Loading collection community.general from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general 2025-09-21 03:32:24.066836 | ubuntu-noble | Found installed collection community.general:11.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general' 2025-09-21 03:32:24.067721 | ubuntu-noble | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap 2025-09-21 03:32:24.067747 | ubuntu-noble | Found installed collection netapp.ontap:23.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap' 2025-09-21 03:32:24.068144 | ubuntu-noble | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud 2025-09-21 03:32:24.068509 | ubuntu-noble | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud' 2025-09-21 03:32:24.070310 | ubuntu-noble | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad 2025-09-21 03:32:24.070342 | ubuntu-noble | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad' 2025-09-21 03:32:24.070350 | ubuntu-noble | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware 2025-09-21 03:32:24.070356 | ubuntu-noble | Found installed collection vmware.vmware:2.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware' 2025-09-21 03:32:24.070365 | ubuntu-noble | Loading collection community.routeros from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros 2025-09-21 03:32:24.070372 | ubuntu-noble | Found installed collection community.routeros:3.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros' 2025-09-21 03:32:24.070690 | ubuntu-noble | Loading collection ansible.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows 2025-09-21 03:32:24.070987 | ubuntu-noble | Found installed collection ansible.windows:3.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows' 2025-09-21 03:32:24.072220 | ubuntu-noble | Loading collection amazon.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws 2025-09-21 03:32:24.072603 | ubuntu-noble | Found installed collection amazon.aws:10.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws' 2025-09-21 03:32:24.072883 | ubuntu-noble | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs 2025-09-21 03:32:24.073268 | ubuntu-noble | Found installed collection community.sap_libs:1.4.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs' 2025-09-21 03:32:24.074690 | ubuntu-noble | Loading collection community.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware 2025-09-21 03:32:24.075086 | ubuntu-noble | Found installed collection community.vmware:5.7.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware' 2025-09-21 03:32:24.075694 | ubuntu-noble | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack 2025-09-21 03:32:24.076063 | ubuntu-noble | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack' 2025-09-21 03:32:24.076662 | ubuntu-noble | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core 2025-09-21 03:32:24.077037 | ubuntu-noble | Found installed collection kubernetes.core:6.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core' 2025-09-21 03:32:24.077327 | ubuntu-noble | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs 2025-09-21 03:32:24.077648 | ubuntu-noble | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs' 2025-09-21 03:32:24.077929 | ubuntu-noble | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block 2025-09-21 03:32:24.078200 | ubuntu-noble | Found installed collection hitachivantara.vspone_block:4.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block' 2025-09-21 03:32:24.078667 | ubuntu-noble | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt 2025-09-21 03:32:24.078967 | ubuntu-noble | Found installed collection check_point.mgmt:6.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt' 2025-09-21 03:32:24.079374 | ubuntu-noble | Loading collection wti.remote from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote 2025-09-21 03:32:24.079662 | ubuntu-noble | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote' 2025-09-21 03:32:24.081569 | ubuntu-noble | Loading collection community.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows 2025-09-21 03:32:24.081995 | ubuntu-noble | Found installed collection community.windows:3.0.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows' 2025-09-21 03:32:24.084258 | ubuntu-noble | Loading collection awx.awx from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx 2025-09-21 03:32:24.084668 | ubuntu-noble | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx' 2025-09-21 03:32:24.085424 | ubuntu-noble | Loading collection cisco.ios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios 2025-09-21 03:32:24.085811 | ubuntu-noble | Found installed collection cisco.ios:11.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios' 2025-09-21 03:32:24.086066 | ubuntu-noble | Loading collection community.mysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql 2025-09-21 03:32:24.086410 | ubuntu-noble | Found installed collection community.mysql:3.15.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql' 2025-09-21 03:32:24.086666 | ubuntu-noble | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur 2025-09-21 03:32:24.087382 | ubuntu-noble | Found installed collection cyberark.conjur:1.3.7 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur' 2025-09-21 03:32:24.087917 | ubuntu-noble | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic 2025-09-21 03:32:24.088359 | ubuntu-noble | Found installed collection dellemc.enterprise_sonic:3.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic' 2025-09-21 03:32:24.088825 | ubuntu-noble | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity 2025-09-21 03:32:24.089251 | ubuntu-noble | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity' 2025-09-21 03:32:24.089709 | ubuntu-noble | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity 2025-09-21 03:32:24.090051 | ubuntu-noble | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity' 2025-09-21 03:32:24.090484 | ubuntu-noble | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage 2025-09-21 03:32:24.092474 | ubuntu-noble | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage' 2025-09-21 03:32:24.092520 | ubuntu-noble | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb 2025-09-21 03:32:24.092530 | ubuntu-noble | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb' 2025-09-21 03:32:24.092539 | ubuntu-noble | Loading collection google.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud 2025-09-21 03:32:24.092548 | ubuntu-noble | Found installed collection google.cloud:1.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud' 2025-09-21 03:32:24.092826 | ubuntu-noble | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox 2025-09-21 03:32:24.093163 | ubuntu-noble | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox' 2025-09-21 03:32:24.093625 | ubuntu-noble | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director 2025-09-21 03:32:24.093968 | ubuntu-noble | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director' 2025-09-21 03:32:24.094376 | ubuntu-noble | Loading collection community.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana 2025-09-21 03:32:24.094800 | ubuntu-noble | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana' 2025-09-21 03:32:24.095128 | ubuntu-noble | Loading collection community.sops from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops 2025-09-21 03:32:24.095490 | ubuntu-noble | Found installed collection community.sops:2.2.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops' 2025-09-21 03:32:24.095788 | ubuntu-noble | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver 2025-09-21 03:32:24.096061 | ubuntu-noble | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver' 2025-09-21 03:32:24.096408 | ubuntu-noble | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud 2025-09-21 03:32:24.096721 | ubuntu-noble | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud' 2025-09-21 03:32:24.099557 | ubuntu-noble | Loading collection community.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws 2025-09-21 03:32:24.099911 | ubuntu-noble | Found installed collection community.aws:10.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws' 2025-09-21 03:32:24.100513 | ubuntu-noble | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt 2025-09-21 03:32:24.100857 | ubuntu-noble | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt' 2025-09-21 03:32:24.101162 | ubuntu-noble | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager 2025-09-21 03:32:24.101486 | ubuntu-noble | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager' 2025-09-21 03:32:24.101820 | ubuntu-noble | Loading collection community.libvirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt 2025-09-21 03:32:24.102125 | ubuntu-noble | Found installed collection community.libvirt:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt' 2025-09-21 03:32:24.102369 | ubuntu-noble | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis 2025-09-21 03:32:24.102731 | ubuntu-noble | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis' 2025-09-21 03:32:24.102996 | ubuntu-noble | Loading collection community.proxysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql 2025-09-21 03:32:24.103303 | ubuntu-noble | Found installed collection community.proxysql:1.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql' 2025-09-21 03:32:24.103688 | ubuntu-noble | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr 2025-09-21 03:32:24.104004 | ubuntu-noble | Found installed collection cisco.iosxr:12.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr' 2025-09-21 03:32:24.104283 | ubuntu-noble | Loading collection community.postgresql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql 2025-09-21 03:32:24.104607 | ubuntu-noble | Found installed collection community.postgresql:4.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql' 2025-09-21 03:32:24.105077 | ubuntu-noble | Loading collection community.okd from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd 2025-09-21 03:32:24.105313 | ubuntu-noble | Found installed collection community.okd:5.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd' 2025-09-21 03:32:24.106974 | ubuntu-noble | Loading collection cisco.aci from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci 2025-09-21 03:32:24.107327 | ubuntu-noble | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci' 2025-09-21 03:32:24.107712 | ubuntu-noble | Loading collection ansible.posix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix 2025-09-21 03:32:24.108033 | ubuntu-noble | Found installed collection ansible.posix:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix' 2025-09-21 03:32:24.108341 | ubuntu-noble | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios 2025-09-21 03:32:24.108681 | ubuntu-noble | Found installed collection fortinet.fortios:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios' 2025-09-21 03:32:24.108987 | ubuntu-noble | Loading collection community.proxmox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox 2025-09-21 03:32:24.109281 | ubuntu-noble | Found installed collection community.proxmox:1.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox' 2025-09-21 03:32:24.109622 | ubuntu-noble | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud 2025-09-21 03:32:24.109972 | ubuntu-noble | Found installed collection openstack.cloud:2.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud' 2025-09-21 03:32:24.110666 | ubuntu-noble | Starting galaxy collection install process 2025-09-21 03:32:24.110936 | ubuntu-noble | Nothing to do. All requested collections are already installed. If you want to reinstall them, consider using `--force`. 2025-09-21 03:32:24.191237 | ubuntu-noble | INFO [delegated > dependency] Dependency completed successfully. 2025-09-21 03:32:24.193477 | ubuntu-noble | INFO [delegated > dependency] Completed 2025-09-21 03:32:24.207908 | ubuntu-noble | INFO [delegated > create] Starting 2025-09-21 03:32:24.209861 | ubuntu-noble | WARNING [delegated > create] Skipping, create action has no playbook. 2025-09-21 03:32:24.210875 | ubuntu-noble | INFO [delegated > create] Completed 2025-09-21 03:32:24.220528 | ubuntu-noble | INFO [delegated > prepare] Starting 2025-09-21 03:32:24.220694 | ubuntu-noble | WARNING [delegated > prepare] Skipping, instances already prepared. 2025-09-21 03:32:24.220761 | ubuntu-noble | INFO [delegated > prepare] Completed 2025-09-21 03:32:24.228533 | ubuntu-noble | INFO [delegated > converge] Starting 2025-09-21 03:32:24.088288 | ubuntu-jammy | INFO [delegated > converge] ansible-playbook version: ansible-playbook 2025-09-21 03:32:24.088354 | ubuntu-jammy | config file = None 2025-09-21 03:32:24.088362 | ubuntu-jammy | configured module search path = 2025-09-21 03:32:24.088380 | ubuntu-jammy | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2025-09-21 03:32:24.088386 | ubuntu-jammy | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2025-09-21 03:32:24.088391 | ubuntu-jammy | executable location = /home/zuul/venv/bin/ansible-playbook 2025-09-21 03:32:24.088396 | ubuntu-jammy | python version = 3.11.0rc1 (main, Aug 12 2022, 10:02:14) (/home/zuul/venv/bin/python3.11) 2025-09-21 03:32:24.088401 | ubuntu-jammy | jinja version = 3.1.6 2025-09-21 03:32:24.088406 | ubuntu-jammy | pyyaml version = 6.0.2 (with libyaml v0.2.5) 2025-09-21 03:32:24.097932 | ubuntu-jammy | DEBUG: ANSIBLE ENVIRONMENT: 2025-09-21 03:32:24.097954 | ubuntu-jammy | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2025-09-21 03:32:24.097960 | ubuntu-jammy | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2025-09-21 03:32:24.097966 | ubuntu-jammy | ANSIBLE_LIBRARY: ../../plugins 2025-09-21 03:32:24.097971 | ubuntu-jammy | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2025-09-21 03:32:24.097976 | ubuntu-jammy | ANSIBLE_ROLE: auditd 2025-09-21 03:32:24.097980 | ubuntu-jammy | ANSIBLE_ROLES_PATH: ../../roles 2025-09-21 03:32:24.097985 | ubuntu-jammy | ANSIBLE_VERBOSITY: '1' 2025-09-21 03:32:24.097990 | ubuntu-jammy | 2025-09-21 03:32:24.102797 | ubuntu-jammy | DEBUG: MOLECULE ENVIRONMENT: 2025-09-21 03:32:24.102807 | ubuntu-jammy | MOLECULE_DEBUG: 'True' 2025-09-21 03:32:24.102811 | ubuntu-jammy | MOLECULE_DEPENDENCY_NAME: galaxy 2025-09-21 03:32:24.102816 | ubuntu-jammy | MOLECULE_DRIVER_NAME: default 2025-09-21 03:32:24.102821 | ubuntu-jammy | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2025-09-21 03:32:24.102827 | ubuntu-jammy | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2025-09-21 03:32:24.102831 | ubuntu-jammy | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2025-09-21 03:32:24.102836 | ubuntu-jammy | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2025-09-21 03:32:24.102841 | ubuntu-jammy | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2025-09-21 03:32:24.102847 | ubuntu-jammy | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2025-09-21 03:32:24.102852 | ubuntu-jammy | MOLECULE_PROVISIONER_NAME: ansible 2025-09-21 03:32:24.102856 | ubuntu-jammy | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2025-09-21 03:32:24.102861 | ubuntu-jammy | MOLECULE_SCENARIO_NAME: delegated 2025-09-21 03:32:24.102866 | ubuntu-jammy | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2025-09-21 03:32:24.102870 | ubuntu-jammy | MOLECULE_VERIFIER_NAME: testinfra 2025-09-21 03:32:24.102875 | ubuntu-jammy | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-21 03:32:24.102879 | ubuntu-jammy | 2025-09-21 03:32:24.105640 | ubuntu-jammy | DEBUG: SHELL REPLAY: 2025-09-21 03:32:24.105682 | ubuntu-jammy | ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-21 03:32:24.309934 | ubuntu-jammy | [WARNING]: Deprecation warnings can be disabled by setting `deprecation_warnings=False` in ansible.cfg. 2025-09-21 03:32:24.310429 | ubuntu-jammy | [DEPRECATION WARNING]: DEFAULT_MANAGED_STR option. Reason: The `ansible_managed` variable can be set just like any other variable, or a different variable can be used. 2025-09-21 03:32:24.310872 | ubuntu-jammy | Alternatives: Set the `ansible_managed` variable, or use any custom variable in templates. This feature will be removed from ansible-core version 2.23. 2025-09-21 03:32:24.311310 | ubuntu-jammy | 2025-09-21 03:32:24.076782 | centos-9-stream | ansible-galaxy [core 2.19.2] 2025-09-21 03:32:24.077332 | centos-9-stream | config file = None 2025-09-21 03:32:24.077812 | centos-9-stream | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2025-09-21 03:32:24.078351 | centos-9-stream | ansible python module location = /home/zuul/venv/lib64/python3.11/site-packages/ansible 2025-09-21 03:32:24.078801 | centos-9-stream | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib64/python3.11/site-packages:/home/zuul/venv/lib/python3.11/site-packages 2025-09-21 03:32:24.079270 | centos-9-stream | executable location = /home/zuul/venv/bin/ansible-galaxy 2025-09-21 03:32:24.079651 | centos-9-stream | python version = 3.11.13 (main, Aug 21 2025, 00:00:00) [GCC 11.5.0 20240719 (Red Hat 11.5.0-11)] (/home/zuul/venv/bin/python3.11) 2025-09-21 03:32:24.080088 | centos-9-stream | jinja version = 3.1.6 2025-09-21 03:32:24.080454 | centos-9-stream | pyyaml version = 6.0.2 (with libyaml v0.2.5) 2025-09-21 03:32:24.080776 | centos-9-stream | No config file found; using defaults 2025-09-21 03:32:24.081365 | centos-9-stream | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2025-09-21 03:32:24.088638 | centos-9-stream | Loading collection community.mongodb from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/mongodb 2025-09-21 03:32:24.089526 | centos-9-stream | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/mongodb' 2025-09-21 03:32:24.090208 | centos-9-stream | Loading collection dellemc.openmanage from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/openmanage 2025-09-21 03:32:24.090657 | centos-9-stream | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2025-09-21 03:32:24.092713 | centos-9-stream | Loading collection cisco.mso from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/mso 2025-09-21 03:32:24.093601 | centos-9-stream | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/mso' 2025-09-21 03:32:24.094268 | centos-9-stream | Loading collection purestorage.flashblade from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/purestorage/flashblade 2025-09-21 03:32:24.094709 | centos-9-stream | Found installed collection purestorage.flashblade:1.20.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2025-09-21 03:32:24.095345 | centos-9-stream | Loading collection junipernetworks.junos from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/junipernetworks/junos 2025-09-21 03:32:24.095828 | centos-9-stream | Found installed collection junipernetworks.junos:11.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2025-09-21 03:32:24.098115 | centos-9-stream | Loading collection azure.azcollection from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/azure/azcollection 2025-09-21 03:32:24.098548 | centos-9-stream | Found installed collection azure.azcollection:3.8.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/azure/azcollection' 2025-09-21 03:32:24.100321 | centos-9-stream | Loading collection cisco.meraki from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/meraki 2025-09-21 03:32:24.100815 | centos-9-stream | Found installed collection cisco.meraki:2.21.4 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/meraki' 2025-09-21 03:32:24.101354 | centos-9-stream | Loading collection wti.remote from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/wti/remote 2025-09-21 03:32:24.101885 | centos-9-stream | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/wti/remote' 2025-09-21 03:32:24.103630 | centos-9-stream | Loading collection cisco.aci from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/aci 2025-09-21 03:32:24.103939 | centos-9-stream | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/aci' 2025-09-21 03:32:24.104577 | centos-9-stream | Loading collection dellemc.powerflex from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/powerflex 2025-09-21 03:32:24.105039 | centos-9-stream | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2025-09-21 03:32:24.105379 | centos-9-stream | Loading collection cisco.ucs from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ucs 2025-09-21 03:32:24.105689 | centos-9-stream | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ucs' 2025-09-21 03:32:24.106031 | centos-9-stream | Loading collection fortinet.fortimanager from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2025-09-21 03:32:24.106544 | centos-9-stream | Found installed collection fortinet.fortimanager:2.10.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2025-09-21 03:32:24.106830 | centos-9-stream | Loading collection grafana.grafana from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/grafana/grafana 2025-09-21 03:32:24.107428 | centos-9-stream | Found installed collection grafana.grafana:6.0.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/grafana/grafana' 2025-09-21 03:32:24.109713 | centos-9-stream | Loading collection awx.awx from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/awx/awx 2025-09-21 03:32:24.110197 | centos-9-stream | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/awx/awx' 2025-09-21 03:32:24.110462 | centos-9-stream | Loading collection community.libvirt from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/libvirt 2025-09-21 03:32:24.110865 | centos-9-stream | Found installed collection community.libvirt:2.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/libvirt' 2025-09-21 03:32:24.111264 | centos-9-stream | Loading collection inspur.ispim from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/inspur/ispim 2025-09-21 03:32:24.111739 | centos-9-stream | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/inspur/ispim' 2025-09-21 03:32:24.113451 | centos-9-stream | Loading collection community.windows from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/windows 2025-09-21 03:32:24.113877 | centos-9-stream | Found installed collection community.windows:3.0.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/windows' 2025-09-21 03:32:24.114320 | centos-9-stream | Loading collection community.grafana from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/grafana 2025-09-21 03:32:24.114743 | centos-9-stream | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/grafana' 2025-09-21 03:32:24.115073 | centos-9-stream | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2025-09-21 03:32:24.115556 | centos-9-stream | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2025-09-21 03:32:24.115788 | centos-9-stream | Loading collection community.sops from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/sops 2025-09-21 03:32:24.116271 | centos-9-stream | Found installed collection community.sops:2.2.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/sops' 2025-09-21 03:32:24.117014 | centos-9-stream | Loading collection dellemc.unity from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/unity 2025-09-21 03:32:24.117447 | centos-9-stream | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/unity' 2025-09-21 03:32:24.117948 | centos-9-stream | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2025-09-21 03:32:24.118406 | centos-9-stream | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2025-09-21 03:32:24.118820 | centos-9-stream | Loading collection netapp.cloudmanager from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2025-09-21 03:32:24.119260 | centos-9-stream | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2025-09-21 03:32:24.120024 | centos-9-stream | Loading collection netbox.netbox from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netbox/netbox 2025-09-21 03:32:24.120489 | centos-9-stream | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netbox/netbox' 2025-09-21 03:32:24.125070 | centos-9-stream | Loading collection community.aws from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/aws 2025-09-21 03:32:24.125788 | centos-9-stream | Found installed collection community.aws:10.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/aws' 2025-09-21 03:32:24.126253 | centos-9-stream | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2025-09-21 03:32:24.126606 | centos-9-stream | Found installed collection hitachivantara.vspone_block:4.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2025-09-21 03:32:24.127123 | centos-9-stream | Loading collection netapp.ontap from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/ontap 2025-09-21 03:32:24.127655 | centos-9-stream | Found installed collection netapp.ontap:23.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/ontap' 2025-09-21 03:32:24.128264 | centos-9-stream | Loading collection check_point.mgmt from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/check_point/mgmt 2025-09-21 03:32:24.128668 | centos-9-stream | Found installed collection check_point.mgmt:6.4.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/check_point/mgmt' 2025-09-21 03:32:24.129352 | centos-9-stream | Loading collection community.vmware from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/vmware 2025-09-21 03:32:24.129784 | centos-9-stream | Found installed collection community.vmware:5.7.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/vmware' 2025-09-21 03:32:24.130592 | centos-9-stream | Loading collection community.digitalocean from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/digitalocean 2025-09-21 03:32:24.131010 | centos-9-stream | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/digitalocean' 2025-09-21 03:32:24.131483 | centos-9-stream | Loading collection community.proxmox from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/proxmox 2025-09-21 03:32:24.131828 | centos-9-stream | Found installed collection community.proxmox:1.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/proxmox' 2025-09-21 03:32:24.132316 | centos-9-stream | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2025-09-21 03:32:24.132619 | centos-9-stream | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2025-09-21 03:32:24.132878 | centos-9-stream | Loading collection cyberark.conjur from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cyberark/conjur 2025-09-21 03:32:24.133174 | centos-9-stream | Found installed collection cyberark.conjur:1.3.7 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cyberark/conjur' 2025-09-21 03:32:24.133619 | centos-9-stream | Loading collection community.dns from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/dns 2025-09-21 03:32:24.134055 | centos-9-stream | Found installed collection community.dns:3.3.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/dns' 2025-09-21 03:32:24.134374 | centos-9-stream | Loading collection community.routeros from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/routeros 2025-09-21 03:32:24.134792 | centos-9-stream | Found installed collection community.routeros:3.10.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/routeros' 2025-09-21 03:32:24.135254 | centos-9-stream | Loading collection community.hashi_vault from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/hashi_vault 2025-09-21 03:32:24.135625 | centos-9-stream | Found installed collection community.hashi_vault:7.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/hashi_vault' 2025-09-21 03:32:24.135971 | centos-9-stream | Loading collection microsoft.ad from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/microsoft/ad 2025-09-21 03:32:24.136449 | centos-9-stream | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/microsoft/ad' 2025-09-21 03:32:24.136679 | centos-9-stream | Loading collection cisco.dnac from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/dnac 2025-09-21 03:32:24.137034 | centos-9-stream | Found installed collection cisco.dnac:6.39.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/dnac' 2025-09-21 03:32:24.137583 | centos-9-stream | Loading collection ansible.windows from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/windows 2025-09-21 03:32:24.137908 | centos-9-stream | Found installed collection ansible.windows:3.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/windows' 2025-09-21 03:32:24.138252 | centos-9-stream | Loading collection purestorage.flasharray from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/purestorage/flasharray 2025-09-21 03:32:24.138673 | centos-9-stream | Found installed collection purestorage.flasharray:1.36.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2025-09-21 03:32:24.138988 | centos-9-stream | Loading collection kubevirt.core from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kubevirt/core 2025-09-21 03:32:24.139405 | centos-9-stream | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kubevirt/core' 2025-09-21 03:32:24.140358 | centos-9-stream | Loading collection arista.eos from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/arista/eos 2025-09-21 03:32:24.140874 | centos-9-stream | Found installed collection arista.eos:12.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/arista/eos' 2025-09-21 03:32:24.141176 | centos-9-stream | Loading collection microsoft.iis from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/microsoft/iis 2025-09-21 03:32:24.141555 | centos-9-stream | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/microsoft/iis' 2025-09-21 03:32:24.141820 | centos-9-stream | Loading collection fortinet.fortios from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/fortinet/fortios 2025-09-21 03:32:24.142247 | centos-9-stream | Found installed collection fortinet.fortios:2.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/fortinet/fortios' 2025-09-21 03:32:24.143066 | centos-9-stream | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2025-09-21 03:32:24.143371 | centos-9-stream | Found installed collection dellemc.enterprise_sonic:3.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2025-09-21 03:32:24.143636 | centos-9-stream | Loading collection ansible.netcommon from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/netcommon 2025-09-21 03:32:24.144115 | centos-9-stream | Found installed collection ansible.netcommon:8.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/netcommon' 2025-09-21 03:32:24.144563 | centos-9-stream | Loading collection community.docker from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/docker 2025-09-21 03:32:24.144863 | centos-9-stream | Found installed collection community.docker:4.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/docker' 2025-09-21 03:32:24.145463 | centos-9-stream | Loading collection community.crypto from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/crypto 2025-09-21 03:32:24.145890 | centos-9-stream | Found installed collection community.crypto:3.0.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/crypto' 2025-09-21 03:32:24.146694 | centos-9-stream | Loading collection cisco.iosxr from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/iosxr 2025-09-21 03:32:24.147063 | centos-9-stream | Found installed collection cisco.iosxr:12.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/iosxr' 2025-09-21 03:32:24.148229 | centos-9-stream | Loading collection vyos.vyos from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vyos/vyos 2025-09-21 03:32:24.148677 | centos-9-stream | Found installed collection vyos.vyos:6.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vyos/vyos' 2025-09-21 03:32:24.149009 | centos-9-stream | Loading collection infoblox.nios_modules from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2025-09-21 03:32:24.149483 | centos-9-stream | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2025-09-21 03:32:24.149747 | centos-9-stream | Loading collection community.ciscosmb from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/ciscosmb 2025-09-21 03:32:24.150196 | centos-9-stream | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/ciscosmb' 2025-09-21 03:32:24.150904 | centos-9-stream | Loading collection splunk.es from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/splunk/es 2025-09-21 03:32:24.151378 | centos-9-stream | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/splunk/es' 2025-09-21 03:32:24.151853 | centos-9-stream | Loading collection vmware.vmware from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vmware/vmware 2025-09-21 03:32:24.152318 | centos-9-stream | Found installed collection vmware.vmware:2.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vmware/vmware' 2025-09-21 03:32:24.152746 | centos-9-stream | Loading collection f5networks.f5_modules from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2025-09-21 03:32:24.153152 | centos-9-stream | Found installed collection f5networks.f5_modules:1.38.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2025-09-21 03:32:24.154275 | centos-9-stream | Loading collection google.cloud from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/google/cloud 2025-09-21 03:32:24.154723 | centos-9-stream | Found installed collection google.cloud:1.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/google/cloud' 2025-09-21 03:32:24.154895 | centos-9-stream | Loading collection cyberark.pas from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cyberark/pas 2025-09-21 03:32:24.155436 | centos-9-stream | Found installed collection cyberark.pas:1.0.35 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cyberark/pas' 2025-09-21 03:32:24.157012 | centos-9-stream | Loading collection theforeman.foreman from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/theforeman/foreman 2025-09-21 03:32:24.157538 | centos-9-stream | Found installed collection theforeman.foreman:5.5.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/theforeman/foreman' 2025-09-21 03:32:24.158189 | centos-9-stream | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2025-09-21 03:32:24.158773 | centos-9-stream | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2025-09-21 03:32:24.159014 | centos-9-stream | Loading collection ansible.posix from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/posix 2025-09-21 03:32:24.159232 | centos-9-stream | Found installed collection ansible.posix:2.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/posix' 2025-09-21 03:32:24.160010 | centos-9-stream | Loading collection openstack.cloud from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/openstack/cloud 2025-09-21 03:32:24.160390 | centos-9-stream | Found installed collection openstack.cloud:2.4.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/openstack/cloud' 2025-09-21 03:32:24.160789 | centos-9-stream | Loading collection netapp.storagegrid from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/storagegrid 2025-09-21 03:32:24.161213 | centos-9-stream | Found installed collection netapp.storagegrid:21.15.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2025-09-21 03:32:24.161629 | centos-9-stream | Loading collection community.zabbix from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/zabbix 2025-09-21 03:32:24.162032 | centos-9-stream | Found installed collection community.zabbix:4.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/zabbix' 2025-09-21 03:32:24.162721 | centos-9-stream | Loading collection kubernetes.core from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kubernetes/core 2025-09-21 03:32:24.163246 | centos-9-stream | Found installed collection kubernetes.core:6.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kubernetes/core' 2025-09-21 03:32:24.163808 | centos-9-stream | Loading collection community.postgresql from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/postgresql 2025-09-21 03:32:24.164040 | centos-9-stream | Found installed collection community.postgresql:4.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/postgresql' 2025-09-21 03:32:24.164427 | centos-9-stream | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2025-09-21 03:32:24.164854 | centos-9-stream | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2025-09-21 03:32:24.165198 | centos-9-stream | Loading collection infinidat.infinibox from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/infinidat/infinibox 2025-09-21 03:32:24.165629 | centos-9-stream | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2025-09-21 03:32:24.166027 | centos-9-stream | Loading collection community.sap_libs from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/sap_libs 2025-09-21 03:32:24.166417 | centos-9-stream | Found installed collection community.sap_libs:1.4.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/sap_libs' 2025-09-21 03:32:24.166853 | centos-9-stream | Loading collection vultr.cloud from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vultr/cloud 2025-09-21 03:32:24.167370 | centos-9-stream | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vultr/cloud' 2025-09-21 03:32:24.167529 | centos-9-stream | Loading collection ansible.utils from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/utils 2025-09-21 03:32:24.167985 | centos-9-stream | Found installed collection ansible.utils:6.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/utils' 2025-09-21 03:32:24.169611 | centos-9-stream | Loading collection cisco.nxos from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/nxos 2025-09-21 03:32:24.170094 | centos-9-stream | Found installed collection cisco.nxos:11.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/nxos' 2025-09-21 03:32:24.170667 | centos-9-stream | Loading collection ibm.qradar from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/qradar 2025-09-21 03:32:24.171823 | centos-9-stream | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/qradar' 2025-09-21 03:32:24.172388 | centos-9-stream | Loading collection community.proxysql from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/proxysql 2025-09-21 03:32:24.172847 | centos-9-stream | Found installed collection community.proxysql:1.6.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/proxysql' 2025-09-21 03:32:24.174468 | centos-9-stream | Loading collection vmware.vmware_rest from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2025-09-21 03:32:24.174857 | centos-9-stream | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2025-09-21 03:32:24.175646 | centos-9-stream | Loading collection ovirt.ovirt from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ovirt/ovirt 2025-09-21 03:32:24.176052 | centos-9-stream | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2025-09-21 03:32:24.176459 | centos-9-stream | Loading collection community.hrobot from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/hrobot 2025-09-21 03:32:24.176835 | centos-9-stream | Found installed collection community.hrobot:2.5.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/hrobot' 2025-09-21 03:32:24.177273 | centos-9-stream | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2025-09-21 03:32:24.177652 | centos-9-stream | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2025-09-21 03:32:24.178044 | centos-9-stream | Loading collection community.rabbitmq from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/rabbitmq 2025-09-21 03:32:24.178451 | centos-9-stream | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/rabbitmq' 2025-09-21 03:32:24.179185 | centos-9-stream | Loading collection cisco.ios from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ios 2025-09-21 03:32:24.179578 | centos-9-stream | Found installed collection cisco.ios:11.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ios' 2025-09-21 03:32:24.180667 | centos-9-stream | Loading collection hetzner.hcloud from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hetzner/hcloud 2025-09-21 03:32:24.180995 | centos-9-stream | Found installed collection hetzner.hcloud:5.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2025-09-21 03:32:24.181334 | centos-9-stream | Loading collection kaytus.ksmanage from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2025-09-21 03:32:24.181778 | centos-9-stream | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2025-09-21 03:32:24.182094 | centos-9-stream | Loading collection community.mysql from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/mysql 2025-09-21 03:32:24.182424 | centos-9-stream | Found installed collection community.mysql:3.15.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/mysql' 2025-09-21 03:32:24.183242 | centos-9-stream | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2025-09-21 03:32:24.183658 | centos-9-stream | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2025-09-21 03:32:24.183993 | centos-9-stream | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2025-09-21 03:32:24.184342 | centos-9-stream | Found installed collection community.library_inventory_filtering_v1:1.1.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2025-09-21 03:32:24.193621 | centos-9-stream | Loading collection community.general from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/general 2025-09-21 03:32:24.194061 | centos-9-stream | Found installed collection community.general:11.2.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/general' 2025-09-21 03:32:24.194601 | centos-9-stream | Loading collection community.okd from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/okd 2025-09-21 03:32:24.195048 | centos-9-stream | Found installed collection community.okd:5.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/okd' 2025-09-21 03:32:24.195505 | centos-9-stream | Loading collection containers.podman from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/containers/podman 2025-09-21 03:32:24.195928 | centos-9-stream | Found installed collection containers.podman:1.17.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/containers/podman' 2025-09-21 03:32:24.196432 | centos-9-stream | Loading collection cisco.intersight from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/intersight 2025-09-21 03:32:24.196790 | centos-9-stream | Found installed collection cisco.intersight:2.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/intersight' 2025-09-21 03:32:24.197112 | centos-9-stream | Loading collection ieisystem.inmanage from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2025-09-21 03:32:24.197522 | centos-9-stream | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2025-09-21 03:32:24.198584 | centos-9-stream | Loading collection amazon.aws from /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/amazon/aws 2025-09-21 03:32:24.198884 | centos-9-stream | Found installed collection amazon.aws:10.1.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/amazon/aws' 2025-09-21 03:32:24.207150 | centos-9-stream | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2025-09-21 03:32:24.207559 | centos-9-stream | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2025-09-21 03:32:24.207913 | centos-9-stream | Loading collection osism.commons from /home/zuul/.ansible/collections/ansible_collections/osism/commons 2025-09-21 03:32:24.209780 | centos-9-stream | Found installed collection osism.commons:0.20250824.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2025-09-21 03:32:24.219197 | centos-9-stream | Loading collection ansible._protomatter from /home/zuul/venv/lib64/python3.11/site-packages/ansible/_internal/ansible_collections/ansible/_protomatter 2025-09-21 03:32:24.219686 | centos-9-stream | Found installed collection ansible._protomatter:2.19.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible/_internal/ansible_collections/ansible/_protomatter' 2025-09-21 03:32:24.227290 | centos-9-stream | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2025-09-21 03:32:24.227819 | centos-9-stream | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/qradar' 2025-09-21 03:32:24.228421 | centos-9-stream | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2025-09-21 03:32:24.228853 | centos-9-stream | Found installed collection community.aws:10.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/aws' 2025-09-21 03:32:24.229382 | centos-9-stream | Found installed collection google.cloud:1.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/google/cloud' 2025-09-21 03:32:24.229809 | centos-9-stream | Found installed collection netapp.ontap:23.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/ontap' 2025-09-21 03:32:24.230281 | centos-9-stream | Found installed collection theforeman.foreman:5.5.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/theforeman/foreman' 2025-09-21 03:32:24.230627 | centos-9-stream | Found installed collection community.vmware:5.7.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/vmware' 2025-09-21 03:32:24.230994 | centos-9-stream | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/digitalocean' 2025-09-21 03:32:24.231366 | centos-9-stream | Found installed collection community.proxmox:1.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/proxmox' 2025-09-21 03:32:24.231847 | centos-9-stream | Found installed collection openstack.cloud:2.4.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/openstack/cloud' 2025-09-21 03:32:24.232265 | centos-9-stream | Found installed collection cyberark.conjur:1.3.7 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cyberark/conjur' 2025-09-21 03:32:24.232520 | centos-9-stream | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2025-09-21 03:32:24.232768 | centos-9-stream | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2025-09-21 03:32:24.233039 | centos-9-stream | Found installed collection community.dns:3.3.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/dns' 2025-09-21 03:32:24.233272 | centos-9-stream | Found installed collection community.routeros:3.10.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/routeros' 2025-09-21 03:32:24.233475 | centos-9-stream | Found installed collection amazon.aws:10.1.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/amazon/aws' 2025-09-21 03:32:24.233705 | centos-9-stream | Found installed collection cisco.dnac:6.39.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/dnac' 2025-09-21 03:32:24.233996 | centos-9-stream | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2025-09-21 03:32:24.234212 | centos-9-stream | Found installed collection community.docker:4.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/docker' 2025-09-21 03:32:24.234490 | centos-9-stream | Found installed collection community.crypto:3.0.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/crypto' 2025-09-21 03:32:24.234765 | centos-9-stream | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vultr/cloud' 2025-09-21 03:32:24.235017 | centos-9-stream | Found installed collection cisco.iosxr:12.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/iosxr' 2025-09-21 03:32:24.235245 | centos-9-stream | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/wti/remote' 2025-09-21 03:32:24.235459 | centos-9-stream | Found installed collection f5networks.f5_modules:1.38.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2025-09-21 03:32:24.235689 | centos-9-stream | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/ciscosmb' 2025-09-21 03:32:24.235891 | centos-9-stream | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2025-09-21 03:32:24.236117 | centos-9-stream | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2025-09-21 03:32:24.236336 | centos-9-stream | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2025-09-21 03:32:24.236532 | centos-9-stream | Found installed collection fortinet.fortimanager:2.10.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2025-09-21 03:32:24.236751 | centos-9-stream | Found installed collection hetzner.hcloud:5.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2025-09-21 03:32:24.237050 | centos-9-stream | Found installed collection cyberark.pas:1.0.35 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cyberark/pas' 2025-09-21 03:32:24.237354 | centos-9-stream | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/awx/awx' 2025-09-21 03:32:24.237670 | centos-9-stream | Found installed collection netapp.storagegrid:21.15.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2025-09-21 03:32:24.237886 | centos-9-stream | Found installed collection containers.podman:1.17.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/containers/podman' 2025-09-21 03:32:24.238117 | centos-9-stream | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2025-09-21 03:32:24.238335 | centos-9-stream | Found installed collection community.zabbix:4.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/zabbix' 2025-09-21 03:32:24.238532 | centos-9-stream | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2025-09-21 03:32:24.238769 | centos-9-stream | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2025-09-21 03:32:24.238991 | centos-9-stream | Found installed collection kubernetes.core:6.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kubernetes/core' 2025-09-21 03:32:24.239204 | centos-9-stream | Found installed collection community.postgresql:4.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/postgresql' 2025-09-21 03:32:24.239421 | centos-9-stream | Found installed collection purestorage.flashblade:1.20.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2025-09-21 03:32:24.239669 | centos-9-stream | Found installed collection azure.azcollection:3.8.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/azure/azcollection' 2025-09-21 03:32:24.239889 | centos-9-stream | Found installed collection junipernetworks.junos:11.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2025-09-21 03:32:24.240201 | centos-9-stream | Found installed collection community.sap_libs:1.4.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/sap_libs' 2025-09-21 03:32:24.240407 | centos-9-stream | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2025-09-21 03:32:24.240626 | centos-9-stream | Found installed collection cisco.nxos:11.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/nxos' 2025-09-21 03:32:24.240842 | centos-9-stream | Found installed collection community.proxysql:1.6.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/proxysql' 2025-09-21 03:32:24.241049 | centos-9-stream | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/microsoft/ad' 2025-09-21 03:32:24.241267 | centos-9-stream | Found installed collection community.hrobot:2.5.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/hrobot' 2025-09-21 03:32:24.241481 | centos-9-stream | Found installed collection grafana.grafana:6.0.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/grafana/grafana' 2025-09-21 03:32:24.241716 | centos-9-stream | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/kubevirt/core' 2025-09-21 03:32:24.241914 | centos-9-stream | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/rabbitmq' 2025-09-21 03:32:24.242294 | centos-9-stream | Found installed collection cisco.ios:11.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ios' 2025-09-21 03:32:24.242494 | centos-9-stream | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/inspur/ispim' 2025-09-21 03:32:24.242679 | centos-9-stream | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/microsoft/iis' 2025-09-21 03:32:24.242863 | centos-9-stream | Found installed collection community.mysql:3.15.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/mysql' 2025-09-21 03:32:24.243084 | centos-9-stream | Found installed collection community.library_inventory_filtering_v1:1.1.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2025-09-21 03:32:24.243360 | centos-9-stream | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2025-09-21 03:32:24.243558 | centos-9-stream | Found installed collection community.general:11.2.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/general' 2025-09-21 03:32:24.243743 | centos-9-stream | Found installed collection community.okd:5.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/okd' 2025-09-21 03:32:24.243923 | centos-9-stream | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/unity' 2025-09-21 03:32:24.244125 | centos-9-stream | Found installed collection cisco.intersight:2.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/intersight' 2025-09-21 03:32:24.244338 | centos-9-stream | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/mongodb' 2025-09-21 03:32:24.244526 | centos-9-stream | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/netbox/netbox' 2025-09-21 03:32:24.244707 | centos-9-stream | Found installed collection vmware.vmware:2.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vmware/vmware' 2025-09-21 03:32:24.244894 | centos-9-stream | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/mso' 2025-09-21 03:32:24.245126 | centos-9-stream | Found installed collection hitachivantara.vspone_block:4.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2025-09-21 03:32:24.245335 | centos-9-stream | Found installed collection cisco.meraki:2.21.4 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/meraki' 2025-09-21 03:32:24.245621 | centos-9-stream | Found installed collection check_point.mgmt:6.4.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/check_point/mgmt' 2025-09-21 03:32:24.245909 | centos-9-stream | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2025-09-21 03:32:24.246105 | centos-9-stream | Found installed collection ansible.posix:2.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/posix' 2025-09-21 03:32:24.246303 | centos-9-stream | Found installed collection community.hashi_vault:7.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/hashi_vault' 2025-09-21 03:32:24.246536 | centos-9-stream | Found installed collection purestorage.flasharray:1.36.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2025-09-21 03:32:24.246707 | centos-9-stream | Found installed collection ansible.windows:3.2.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/windows' 2025-09-21 03:32:24.246870 | centos-9-stream | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/aci' 2025-09-21 03:32:24.247079 | centos-9-stream | Found installed collection arista.eos:12.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/arista/eos' 2025-09-21 03:32:24.247264 | centos-9-stream | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/cisco/ucs' 2025-09-21 03:32:24.247428 | centos-9-stream | Found installed collection fortinet.fortios:2.4.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/fortinet/fortios' 2025-09-21 03:32:24.247575 | centos-9-stream | Found installed collection community.libvirt:2.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/libvirt' 2025-09-21 03:32:24.247724 | centos-9-stream | Found installed collection dellemc.enterprise_sonic:3.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2025-09-21 03:32:24.247872 | centos-9-stream | Found installed collection ansible.netcommon:8.1.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/netcommon' 2025-09-21 03:32:24.248027 | centos-9-stream | Found installed collection community.windows:3.0.1 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/windows' 2025-09-21 03:32:24.248197 | centos-9-stream | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/grafana' 2025-09-21 03:32:24.248345 | centos-9-stream | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2025-09-21 03:32:24.248492 | centos-9-stream | Found installed collection community.sops:2.2.2 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/community/sops' 2025-09-21 03:32:24.248636 | centos-9-stream | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/splunk/es' 2025-09-21 03:32:24.248778 | centos-9-stream | Found installed collection ansible.utils:6.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/ansible/utils' 2025-09-21 03:32:24.248924 | centos-9-stream | Found installed collection vyos.vyos:6.0.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/vyos/vyos' 2025-09-21 03:32:24.249085 | centos-9-stream | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib64/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2025-09-21 03:32:24.249264 | centos-9-stream | Starting galaxy collection install process 2025-09-21 03:32:24.249412 | centos-9-stream | Nothing to do. All requested collections are already installed. If you want to reinstall them, consider using `--force`. 2025-09-21 03:32:24.350800 | centos-9-stream | INFO [delegated > dependency] Dependency completed successfully. 2025-09-21 03:32:24.350998 | centos-9-stream | INFO [delegated > dependency] Completed 2025-09-21 03:32:24.361044 | centos-9-stream | INFO [delegated > create] Starting 2025-09-21 03:32:24.362720 | centos-9-stream | WARNING [delegated > create] Skipping, create action has no playbook. 2025-09-21 03:32:24.363584 | centos-9-stream | INFO [delegated > create] Completed 2025-09-21 03:32:24.372196 | centos-9-stream | INFO [delegated > prepare] Starting 2025-09-21 03:32:24.372325 | centos-9-stream | WARNING [delegated > prepare] Skipping, instances already prepared. 2025-09-21 03:32:24.372382 | centos-9-stream | INFO [delegated > prepare] Completed 2025-09-21 03:32:24.381118 | centos-9-stream | INFO [delegated > converge] Starting 2025-09-21 03:32:24.388645 | debian-bookworm | INFO [delegated > converge] ansible-playbook version: ansible-playbook 2025-09-21 03:32:24.388708 | debian-bookworm | config file = None 2025-09-21 03:32:24.388714 | debian-bookworm | configured module search path = 2025-09-21 03:32:24.388734 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2025-09-21 03:32:24.388740 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2025-09-21 03:32:24.388744 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-playbook 2025-09-21 03:32:24.388748 | debian-bookworm | python version = 3.11.2 (main, Apr 28 2025, 14:11:48) (/home/zuul/venv/bin/python3) 2025-09-21 03:32:24.388752 | debian-bookworm | jinja version = 3.1.6 2025-09-21 03:32:24.388757 | debian-bookworm | pyyaml version = 6.0.2 (with libyaml v0.2.5) 2025-09-21 03:32:24.398912 | debian-bookworm | DEBUG: ANSIBLE ENVIRONMENT: 2025-09-21 03:32:24.398986 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2025-09-21 03:32:24.399000 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2025-09-21 03:32:24.399011 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2025-09-21 03:32:24.399040 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2025-09-21 03:32:24.399050 | debian-bookworm | ANSIBLE_ROLE: auditd 2025-09-21 03:32:24.399060 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2025-09-21 03:32:24.399070 | debian-bookworm | ANSIBLE_VERBOSITY: '1' 2025-09-21 03:32:24.399079 | debian-bookworm | 2025-09-21 03:32:24.403986 | debian-bookworm | DEBUG: MOLECULE ENVIRONMENT: 2025-09-21 03:32:24.404020 | debian-bookworm | MOLECULE_DEBUG: 'True' 2025-09-21 03:32:24.404032 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2025-09-21 03:32:24.404042 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2025-09-21 03:32:24.404051 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2025-09-21 03:32:24.404061 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2025-09-21 03:32:24.404071 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2025-09-21 03:32:24.404080 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2025-09-21 03:32:24.404088 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2025-09-21 03:32:24.404098 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2025-09-21 03:32:24.404107 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2025-09-21 03:32:24.404142 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2025-09-21 03:32:24.404152 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2025-09-21 03:32:24.404161 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2025-09-21 03:32:24.404170 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2025-09-21 03:32:24.404179 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-21 03:32:24.404188 | debian-bookworm | 2025-09-21 03:32:24.406852 | debian-bookworm | DEBUG: SHELL REPLAY: 2025-09-21 03:32:24.406886 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-21 03:32:24.631405 | debian-bookworm | [WARNING]: Deprecation warnings can be disabled by setting `deprecation_warnings=False` in ansible.cfg. 2025-09-21 03:32:24.631800 | debian-bookworm | [DEPRECATION WARNING]: DEFAULT_MANAGED_STR option. Reason: The `ansible_managed` variable can be set just like any other variable, or a different variable can be used. 2025-09-21 03:32:24.632163 | debian-bookworm | Alternatives: Set the `ansible_managed` variable, or use any custom variable in templates. This feature will be removed from ansible-core version 2.23. 2025-09-21 03:32:24.632457 | debian-bookworm | 2025-09-21 03:32:24.808931 | debian-bookworm | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2025-09-21 03:32:24.712225 | ubuntu-noble | INFO [delegated > converge] ansible-playbook version: ansible-playbook 2025-09-21 03:32:24.712296 | ubuntu-noble | config file = None 2025-09-21 03:32:24.712309 | ubuntu-noble | configured module search path = 2025-09-21 03:32:24.712344 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2025-09-21 03:32:24.712355 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2025-09-21 03:32:24.712365 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-playbook 2025-09-21 03:32:24.712374 | ubuntu-noble | python version = 3.12.3 (main, Aug 14 2025, 17:47:21) (/home/zuul/venv/bin/python3) 2025-09-21 03:32:24.712384 | ubuntu-noble | jinja version = 3.1.6 2025-09-21 03:32:24.712393 | ubuntu-noble | pyyaml version = 6.0.2 (with libyaml v0.2.5) 2025-09-21 03:32:24.722233 | ubuntu-noble | DEBUG: ANSIBLE ENVIRONMENT: 2025-09-21 03:32:24.722278 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2025-09-21 03:32:24.722288 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2025-09-21 03:32:24.722296 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2025-09-21 03:32:24.722304 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2025-09-21 03:32:24.722311 | ubuntu-noble | ANSIBLE_ROLE: auditd 2025-09-21 03:32:24.722319 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2025-09-21 03:32:24.722326 | ubuntu-noble | ANSIBLE_VERBOSITY: '1' 2025-09-21 03:32:24.722334 | ubuntu-noble | 2025-09-21 03:32:24.726925 | ubuntu-noble | DEBUG: MOLECULE ENVIRONMENT: 2025-09-21 03:32:24.726954 | ubuntu-noble | MOLECULE_DEBUG: 'True' 2025-09-21 03:32:24.726961 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2025-09-21 03:32:24.726967 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2025-09-21 03:32:24.726972 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2025-09-21 03:32:24.726978 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2025-09-21 03:32:24.726984 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2025-09-21 03:32:24.726990 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2025-09-21 03:32:24.726995 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2025-09-21 03:32:24.727001 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2025-09-21 03:32:24.727006 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2025-09-21 03:32:24.727011 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2025-09-21 03:32:24.727017 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2025-09-21 03:32:24.727022 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2025-09-21 03:32:24.727029 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2025-09-21 03:32:24.727035 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-21 03:32:24.727041 | ubuntu-noble | 2025-09-21 03:32:24.729885 | ubuntu-noble | DEBUG: SHELL REPLAY: 2025-09-21 03:32:24.729912 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-21 03:32:24.450334 | ubuntu-jammy | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2025-09-21 03:32:24.674290 | ubuntu-jammy | 2025-09-21 03:32:24.674609 | ubuntu-jammy | PLAY [Converge] **************************************************************** 2025-09-21 03:32:24.674901 | ubuntu-jammy | 2025-09-21 03:32:24.675232 | ubuntu-jammy | TASK [Gathering Facts] ********************************************************* 2025-09-21 03:32:25.033283 | debian-bookworm | 2025-09-21 03:32:25.033625 | debian-bookworm | PLAY [Converge] **************************************************************** 2025-09-21 03:32:25.033928 | debian-bookworm | 2025-09-21 03:32:25.034308 | debian-bookworm | TASK [Gathering Facts] ********************************************************* 2025-09-21 03:32:24.965945 | ubuntu-noble | [WARNING]: Deprecation warnings can be disabled by setting `deprecation_warnings=False` in ansible.cfg. 2025-09-21 03:32:24.966472 | ubuntu-noble | [DEPRECATION WARNING]: DEFAULT_MANAGED_STR option. Reason: The `ansible_managed` variable can be set just like any other variable, or a different variable can be used. 2025-09-21 03:32:24.966885 | ubuntu-noble | Alternatives: Set the `ansible_managed` variable, or use any custom variable in templates. This feature will be removed from ansible-core version 2.23. 2025-09-21 03:32:24.967190 | ubuntu-noble | 2025-09-21 03:32:25.146253 | ubuntu-noble | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2025-09-21 03:32:24.914254 | centos-9-stream | INFO [delegated > converge] ansible-playbook version: ansible-playbook 2025-09-21 03:32:24.914327 | centos-9-stream | config file = None 2025-09-21 03:32:24.914336 | centos-9-stream | configured module search path = 2025-09-21 03:32:24.914342 | centos-9-stream | ansible python module location = /home/zuul/venv/lib64/python3.11/site-packages/ansible 2025-09-21 03:32:24.914349 | centos-9-stream | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2025-09-21 03:32:24.914375 | centos-9-stream | executable location = /home/zuul/venv/bin/ansible-playbook 2025-09-21 03:32:24.914380 | centos-9-stream | python version = 3.11.13 (main, Aug 21 2025, 00:00:00) (/home/zuul/venv/bin/python3.11) 2025-09-21 03:32:24.914385 | centos-9-stream | jinja version = 3.1.6 2025-09-21 03:32:24.914399 | centos-9-stream | pyyaml version = 6.0.2 (with libyaml v0.2.5) 2025-09-21 03:32:24.921820 | centos-9-stream | DEBUG: ANSIBLE ENVIRONMENT: 2025-09-21 03:32:24.921849 | centos-9-stream | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2025-09-21 03:32:24.921862 | centos-9-stream | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2025-09-21 03:32:24.921868 | centos-9-stream | ANSIBLE_LIBRARY: ../../plugins 2025-09-21 03:32:24.921873 | centos-9-stream | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2025-09-21 03:32:24.921878 | centos-9-stream | ANSIBLE_ROLE: auditd 2025-09-21 03:32:24.921883 | centos-9-stream | ANSIBLE_ROLES_PATH: ../../roles 2025-09-21 03:32:24.921888 | centos-9-stream | ANSIBLE_VERBOSITY: '1' 2025-09-21 03:32:24.921893 | centos-9-stream | 2025-09-21 03:32:24.928462 | centos-9-stream | DEBUG: MOLECULE ENVIRONMENT: 2025-09-21 03:32:24.928475 | centos-9-stream | MOLECULE_DEBUG: 'True' 2025-09-21 03:32:24.928480 | centos-9-stream | MOLECULE_DEPENDENCY_NAME: galaxy 2025-09-21 03:32:24.928485 | centos-9-stream | MOLECULE_DRIVER_NAME: default 2025-09-21 03:32:24.928491 | centos-9-stream | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2025-09-21 03:32:24.928496 | centos-9-stream | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2025-09-21 03:32:24.928505 | centos-9-stream | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2025-09-21 03:32:24.928510 | centos-9-stream | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2025-09-21 03:32:24.928515 | centos-9-stream | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2025-09-21 03:32:24.928521 | centos-9-stream | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2025-09-21 03:32:24.928525 | centos-9-stream | MOLECULE_PROVISIONER_NAME: ansible 2025-09-21 03:32:24.928530 | centos-9-stream | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2025-09-21 03:32:24.928534 | centos-9-stream | MOLECULE_SCENARIO_NAME: delegated 2025-09-21 03:32:24.928539 | centos-9-stream | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2025-09-21 03:32:24.928543 | centos-9-stream | MOLECULE_VERIFIER_NAME: testinfra 2025-09-21 03:32:24.928548 | centos-9-stream | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-21 03:32:24.928553 | centos-9-stream | 2025-09-21 03:32:24.931177 | centos-9-stream | DEBUG: SHELL REPLAY: 2025-09-21 03:32:24.931195 | centos-9-stream | ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-21 03:32:25.170039 | centos-9-stream | [WARNING]: Deprecation warnings can be disabled by setting `deprecation_warnings=False` in ansible.cfg. 2025-09-21 03:32:25.170336 | centos-9-stream | [DEPRECATION WARNING]: DEFAULT_MANAGED_STR option. Reason: The `ansible_managed` variable can be set just like any other variable, or a different variable can be used. 2025-09-21 03:32:25.170542 | centos-9-stream | Alternatives: Set the `ansible_managed` variable, or use any custom variable in templates. This feature will be removed from ansible-core version 2.23. 2025-09-21 03:32:25.170709 | centos-9-stream | 2025-09-21 03:32:25.370554 | centos-9-stream | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2025-09-21 03:32:25.396957 | ubuntu-noble | 2025-09-21 03:32:25.397546 | ubuntu-noble | PLAY [Converge] **************************************************************** 2025-09-21 03:32:25.398978 | ubuntu-noble | 2025-09-21 03:32:25.399100 | ubuntu-noble | TASK [Gathering Facts] ********************************************************* 2025-09-21 03:32:25.613855 | centos-9-stream | 2025-09-21 03:32:25.614061 | centos-9-stream | PLAY [Converge] **************************************************************** 2025-09-21 03:32:25.614246 | centos-9-stream | 2025-09-21 03:32:25.614429 | centos-9-stream | TASK [Gathering Facts] ********************************************************* 2025-09-21 03:32:26.295986 | debian-bookworm | ok: [molecule-auditd] 2025-09-21 03:32:26.296208 | debian-bookworm | 2025-09-21 03:32:26.296485 | debian-bookworm | TASK [Include required variables] ********************************************** 2025-09-21 03:32:26.005072 | ubuntu-jammy | ok: [molecule-auditd] 2025-09-21 03:32:26.005290 | ubuntu-jammy | 2025-09-21 03:32:26.005552 | ubuntu-jammy | TASK [Include required variables] ********************************************** 2025-09-21 03:32:26.041153 | ubuntu-jammy | ok: [molecule-auditd] => {"ansible_facts": {}, "ansible_included_var_files": ["/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/vars/auditd.yml"], "changed": false} 2025-09-21 03:32:26.041457 | ubuntu-jammy | 2025-09-21 03:32:26.041797 | ubuntu-jammy | TASK [Include role auditd] ***************************************************** 2025-09-21 03:32:26.095994 | ubuntu-jammy | included: auditd for molecule-auditd 2025-09-21 03:32:26.096116 | ubuntu-jammy | 2025-09-21 03:32:26.096143 | ubuntu-jammy | TASK [auditd : Include distribution specific install tasks] ******************** 2025-09-21 03:32:26.130064 | ubuntu-jammy | included: /home/zuul/src/github.com/osism/ansible-collection-services/roles/auditd/tasks/install-Debian-family.yml for molecule-auditd 2025-09-21 03:32:26.130135 | ubuntu-jammy | 2025-09-21 03:32:26.130226 | ubuntu-jammy | TASK [auditd : Install auditd package] ***************************************** 2025-09-21 03:32:26.665505 | ubuntu-noble | ok: [molecule-auditd] 2025-09-21 03:32:26.665617 | ubuntu-noble | 2025-09-21 03:32:26.666849 | ubuntu-noble | TASK [Include required variables] ********************************************** 2025-09-21 03:32:26.689162 | ubuntu-noble | ok: [molecule-auditd] => {"ansible_facts": {}, "ansible_included_var_files": ["/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/vars/auditd.yml"], "changed": false} 2025-09-21 03:32:26.689189 | ubuntu-noble | 2025-09-21 03:32:26.689203 | ubuntu-noble | TASK [Include role auditd] ***************************************************** 2025-09-21 03:32:26.733772 | ubuntu-noble | included: auditd for molecule-auditd 2025-09-21 03:32:26.733819 | ubuntu-noble | 2025-09-21 03:32:26.733830 | ubuntu-noble | TASK [auditd : Include distribution specific install tasks] ******************** 2025-09-21 03:32:26.762887 | ubuntu-noble | included: /home/zuul/src/github.com/osism/ansible-collection-services/roles/auditd/tasks/install-Debian-family.yml for molecule-auditd 2025-09-21 03:32:26.762924 | ubuntu-noble | 2025-09-21 03:32:26.762932 | ubuntu-noble | TASK [auditd : Install auditd package] ***************************************** 2025-09-21 03:32:26.335912 | debian-bookworm | ok: [molecule-auditd] => {"ansible_facts": {}, "ansible_included_var_files": ["/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/vars/auditd.yml"], "changed": false} 2025-09-21 03:32:26.336050 | debian-bookworm | 2025-09-21 03:32:26.336251 | debian-bookworm | TASK [Include role auditd] ***************************************************** 2025-09-21 03:32:26.392848 | debian-bookworm | included: auditd for molecule-auditd 2025-09-21 03:32:26.392956 | debian-bookworm | 2025-09-21 03:32:26.393096 | debian-bookworm | TASK [auditd : Include distribution specific install tasks] ******************** 2025-09-21 03:32:26.420549 | debian-bookworm | included: /home/zuul/src/github.com/osism/ansible-collection-services/roles/auditd/tasks/install-Debian-family.yml for molecule-auditd 2025-09-21 03:32:26.420633 | debian-bookworm | 2025-09-21 03:32:26.420748 | debian-bookworm | TASK [auditd : Install auditd package] ***************************************** 2025-09-21 03:32:26.878674 | centos-9-stream | ok: [molecule-auditd] 2025-09-21 03:32:26.878791 | centos-9-stream | 2025-09-21 03:32:26.878927 | centos-9-stream | TASK [Include required variables] ********************************************** 2025-09-21 03:32:26.915936 | centos-9-stream | ok: [molecule-auditd] => {"ansible_facts": {}, "ansible_included_var_files": ["/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/vars/auditd.yml"], "changed": false} 2025-09-21 03:32:26.916354 | centos-9-stream | 2025-09-21 03:32:26.916715 | centos-9-stream | TASK [Include role auditd] ***************************************************** 2025-09-21 03:32:26.978120 | centos-9-stream | included: auditd for molecule-auditd 2025-09-21 03:32:26.978304 | centos-9-stream | 2025-09-21 03:32:26.978341 | centos-9-stream | TASK [auditd : Include distribution specific install tasks] ******************** 2025-09-21 03:32:27.027760 | centos-9-stream | included: /home/zuul/src/github.com/osism/ansible-collection-services/roles/auditd/tasks/install-RedHat-family.yml for molecule-auditd 2025-09-21 03:32:27.027848 | centos-9-stream | 2025-09-21 03:32:27.027904 | centos-9-stream | TASK [auditd : Install auditd package] ***************************************** 2025-09-21 03:32:29.643353 | centos-9-stream | ok: [molecule-auditd] => {"changed": false, "msg": "Nothing to do", "rc": 0, "results": []} 2025-09-21 03:32:29.643497 | centos-9-stream | 2025-09-21 03:32:29.643673 | centos-9-stream | TASK [auditd : Install audispd-plugins package] ******************************** 2025-09-21 03:32:30.821778 | ubuntu-jammy | The following additional packages will be installed: 2025-09-21 03:32:30.821922 | ubuntu-jammy | libauparse0 2025-09-21 03:32:30.822120 | ubuntu-jammy | Suggested packages: 2025-09-21 03:32:30.822279 | ubuntu-jammy | audispd-plugins 2025-09-21 03:32:30.822441 | ubuntu-jammy | The following NEW packages will be installed: 2025-09-21 03:32:30.822595 | ubuntu-jammy | auditd libauparse0 2025-09-21 03:32:30.822752 | ubuntu-jammy | 0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded. 2025-09-21 03:32:30.824079 | ubuntu-jammy | changed: [molecule-auditd] => {"cache_update_time": 1758425387, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following additional packages will be installed:\n libauparse0\nSuggested packages:\n audispd-plugins\nThe following NEW packages will be installed:\n auditd libauparse0\n0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 270 kB of archives.\nAfter this operation, 876 kB of additional disk space will be used.\nGet:1 http://archive.ubuntu.com/ubuntu jammy/main amd64 libauparse0 amd64 1:3.0.7-1build1 [58.0 kB]\nGet:2 http://archive.ubuntu.com/ubuntu jammy/main amd64 auditd amd64 1:3.0.7-1build1 [212 kB]\nFetched 270 kB in 0s (1897 kB/s)\nSelecting previously unselected package libauparse0:amd64.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 31961 files and directories currently installed.)\r\nPreparing to unpack .../libauparse0_1%3a3.0.7-1build1_amd64.deb ...\r\nUnpacking libauparse0:amd64 (1:3.0.7-1build1) ...\r\nSelecting previously unselected package auditd.\r\nPreparing to unpack .../auditd_1%3a3.0.7-1build1_amd64.deb ...\r\nUnpacking auditd (1:3.0.7-1build1) ...\r\nSetting up libauparse0:amd64 (1:3.0.7-1build1) ...\r\nSetting up auditd (1:3.0.7-1build1) ...\r\nCreated symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /lib/systemd/system/auditd.service.\r\nProcessing triggers for libc-bin (2.35-0ubuntu3.10) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following additional packages will be installed:", " libauparse0", "Suggested packages:", " audispd-plugins", "The following NEW packages will be installed:", " auditd libauparse0", "0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.", "Need to get 270 kB of archives.", "After this operation, 876 kB of additional disk space will be used.", "Get:1 http://archive.ubuntu.com/ubuntu jammy/main amd64 libauparse0 amd64 1:3.0.7-1build1 [58.0 kB]", "Get:2 http://archive.ubuntu.com/ubuntu jammy/main amd64 auditd amd64 1:3.0.7-1build1 [212 kB]", "Fetched 270 kB in 0s (1897 kB/s)", "Selecting previously unselected package libauparse0:amd64.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 31961 files and directories currently installed.)", "Preparing to unpack .../libauparse0_1%3a3.0.7-1build1_amd64.deb ...", "Unpacking libauparse0:amd64 (1:3.0.7-1build1) ...", "Selecting previously unselected package auditd.", "Preparing to unpack .../auditd_1%3a3.0.7-1build1_amd64.deb ...", "Unpacking auditd (1:3.0.7-1build1) ...", "Setting up libauparse0:amd64 (1:3.0.7-1build1) ...", "Setting up auditd (1:3.0.7-1build1) ...", "Created symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /lib/systemd/system/auditd.service.", "Processing triggers for libc-bin (2.35-0ubuntu3.10) ..."]} 2025-09-21 03:32:30.824196 | ubuntu-jammy | 2025-09-21 03:32:30.824355 | ubuntu-jammy | TASK [auditd : Install audispd-plugins package] ******************************** 2025-09-21 03:32:30.844601 | debian-bookworm | The following additional packages will be installed: 2025-09-21 03:32:30.844868 | debian-bookworm | libauparse0 2025-09-21 03:32:30.845143 | debian-bookworm | Suggested packages: 2025-09-21 03:32:30.845427 | debian-bookworm | audispd-plugins 2025-09-21 03:32:30.845690 | debian-bookworm | The following NEW packages will be installed: 2025-09-21 03:32:30.845950 | debian-bookworm | auditd libauparse0 2025-09-21 03:32:30.846252 | debian-bookworm | 0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded. 2025-09-21 03:32:30.848377 | debian-bookworm | changed: [molecule-auditd] => {"cache_update_time": 1758425384, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following additional packages will be installed:\n libauparse0\nSuggested packages:\n audispd-plugins\nThe following NEW packages will be installed:\n auditd libauparse0\n0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 279 kB of archives.\nAfter this operation, 934 kB of additional disk space will be used.\nGet:1 http://deb.debian.org/debian bookworm/main amd64 libauparse0 amd64 1:3.0.9-1 [61.9 kB]\nGet:2 http://deb.debian.org/debian bookworm/main amd64 auditd amd64 1:3.0.9-1 [218 kB]\nFetched 279 kB in 0s (3562 kB/s)\nSelecting previously unselected package libauparse0:amd64.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 28681 files and directories currently installed.)\r\nPreparing to unpack .../libauparse0_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking libauparse0:amd64 (1:3.0.9-1) ...\r\nSelecting previously unselected package auditd.\r\nPreparing to unpack .../auditd_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking auditd (1:3.0.9-1) ...\r\nSetting up libauparse0:amd64 (1:3.0.9-1) ...\r\nSetting up auditd (1:3.0.9-1) ...\r\nCreated symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /lib/systemd/system/auditd.service.\r\r\nProcessing triggers for libc-bin (2.36-9+deb12u13) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following additional packages will be installed:", " libauparse0", "Suggested packages:", " audispd-plugins", "The following NEW packages will be installed:", " auditd libauparse0", "0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.", "Need to get 279 kB of archives.", "After this operation, 934 kB of additional disk space will be used.", "Get:1 http://deb.debian.org/debian bookworm/main amd64 libauparse0 amd64 1:3.0.9-1 [61.9 kB]", "Get:2 http://deb.debian.org/debian bookworm/main amd64 auditd amd64 1:3.0.9-1 [218 kB]", "Fetched 279 kB in 0s (3562 kB/s)", "Selecting previously unselected package libauparse0:amd64.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 28681 files and directories currently installed.)", "Preparing to unpack .../libauparse0_1%3a3.0.9-1_amd64.deb ...", "Unpacking libauparse0:amd64 (1:3.0.9-1) ...", "Selecting previously unselected package auditd.", "Preparing to unpack .../auditd_1%3a3.0.9-1_amd64.deb ...", "Unpacking auditd (1:3.0.9-1) ...", "Setting up libauparse0:amd64 (1:3.0.9-1) ...", "Setting up auditd (1:3.0.9-1) ...", "Created symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /lib/systemd/system/auditd.service.", "", "Processing triggers for libc-bin (2.36-9+deb12u13) ..."]} 2025-09-21 03:32:30.848544 | debian-bookworm | 2025-09-21 03:32:30.848765 | debian-bookworm | TASK [auditd : Install audispd-plugins package] ******************************** 2025-09-21 03:32:31.399483 | ubuntu-noble | The following additional packages will be installed: 2025-09-21 03:32:31.399539 | ubuntu-noble | libauparse0t64 2025-09-21 03:32:31.399545 | ubuntu-noble | Suggested packages: 2025-09-21 03:32:31.399549 | ubuntu-noble | audispd-plugins 2025-09-21 03:32:31.399552 | ubuntu-noble | The following NEW packages will be installed: 2025-09-21 03:32:31.399557 | ubuntu-noble | auditd libauparse0t64 2025-09-21 03:32:31.399561 | ubuntu-noble | 0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded. 2025-09-21 03:32:31.400742 | ubuntu-noble | changed: [molecule-auditd] => {"cache_update_time": 1758425387, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following additional packages will be installed:\n libauparse0t64\nSuggested packages:\n audispd-plugins\nThe following NEW packages will be installed:\n auditd libauparse0t64\n0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 274 kB of archives.\nAfter this operation, 893 kB of additional disk space will be used.\nGet:1 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 libauparse0t64 amd64 1:3.1.2-2.1build1.1 [58.9 kB]\nGet:2 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 auditd amd64 1:3.1.2-2.1build1.1 [215 kB]\nFetched 274 kB in 0s (2008 kB/s)\nSelecting previously unselected package libauparse0t64:amd64.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 34780 files and directories currently installed.)\r\nPreparing to unpack .../libauparse0t64_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nAdding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0 to /lib/x86_64-linux-gnu/libauparse.so.0.usr-is-merged by libauparse0t64'\r\nAdding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0.0.0 to /lib/x86_64-linux-gnu/libauparse.so.0.0.0.usr-is-merged by libauparse0t64'\r\nUnpacking libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...\r\nSelecting previously unselected package auditd.\r\nPreparing to unpack .../auditd_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nUnpacking auditd (1:3.1.2-2.1build1.1) ...\r\nSetting up libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...\r\nSetting up auditd (1:3.1.2-2.1build1.1) ...\r\nCreated symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /usr/lib/systemd/system/auditd.service.\r\r\nProcessing triggers for libc-bin (2.39-0ubuntu8.5) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following additional packages will be installed:", " libauparse0t64", "Suggested packages:", " audispd-plugins", "The following NEW packages will be installed:", " auditd libauparse0t64", "0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.", "Need to get 274 kB of archives.", "After this operation, 893 kB of additional disk space will be used.", "Get:1 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 libauparse0t64 amd64 1:3.1.2-2.1build1.1 [58.9 kB]", "Get:2 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 auditd amd64 1:3.1.2-2.1build1.1 [215 kB]", "Fetched 274 kB in 0s (2008 kB/s)", "Selecting previously unselected package libauparse0t64:amd64.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 34780 files and directories currently installed.)", "Preparing to unpack .../libauparse0t64_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Adding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0 to /lib/x86_64-linux-gnu/libauparse.so.0.usr-is-merged by libauparse0t64'", "Adding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0.0.0 to /lib/x86_64-linux-gnu/libauparse.so.0.0.0.usr-is-merged by libauparse0t64'", "Unpacking libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...", "Selecting previously unselected package auditd.", "Preparing to unpack .../auditd_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Unpacking auditd (1:3.1.2-2.1build1.1) ...", "Setting up libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...", "Setting up auditd (1:3.1.2-2.1build1.1) ...", "Created symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /usr/lib/systemd/system/auditd.service.", "", "Processing triggers for libc-bin (2.39-0ubuntu8.5) ..."]} 2025-09-21 03:32:31.400917 | ubuntu-noble | 2025-09-21 03:32:31.401055 | ubuntu-noble | TASK [auditd : Install audispd-plugins package] ******************************** 2025-09-21 03:32:32.867319 | centos-9-stream | changed: [molecule-auditd] => {"changed": true, "msg": "", "rc": 0, "results": ["Installed: audispd-plugins-3.1.5-7.el9.x86_64"]} 2025-09-21 03:32:32.867405 | centos-9-stream | 2025-09-21 03:32:32.867530 | centos-9-stream | TASK [auditd : Allow manual restart of auditd service] ************************* 2025-09-21 03:32:33.742557 | debian-bookworm | The following NEW packages will be installed: 2025-09-21 03:32:33.742670 | debian-bookworm | audispd-plugins 2025-09-21 03:32:33.742686 | debian-bookworm | 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. 2025-09-21 03:32:33.742714 | debian-bookworm | changed: [molecule-auditd] => {"cache_update_time": 1758425384, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following NEW packages will be installed:\n audispd-plugins\n0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 45.6 kB of archives.\nAfter this operation, 132 kB of additional disk space will be used.\nGet:1 http://deb.debian.org/debian bookworm/main amd64 audispd-plugins amd64 1:3.0.9-1 [45.6 kB]\nFetched 45.6 kB in 0s (920 kB/s)\nSelecting previously unselected package audispd-plugins.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 28772 files and directories currently installed.)\r\nPreparing to unpack .../audispd-plugins_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking audispd-plugins (1:3.0.9-1) ...\r\nSetting up audispd-plugins (1:3.0.9-1) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following NEW packages will be installed:", " audispd-plugins", "0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.", "Need to get 45.6 kB of archives.", "After this operation, 132 kB of additional disk space will be used.", "Get:1 http://deb.debian.org/debian bookworm/main amd64 audispd-plugins amd64 1:3.0.9-1 [45.6 kB]", "Fetched 45.6 kB in 0s (920 kB/s)", "Selecting previously unselected package audispd-plugins.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 28772 files and directories currently installed.)", "Preparing to unpack .../audispd-plugins_1%3a3.0.9-1_amd64.deb ...", "Unpacking audispd-plugins (1:3.0.9-1) ...", "Setting up audispd-plugins (1:3.0.9-1) ..."]} 2025-09-21 03:32:33.742810 | debian-bookworm | 2025-09-21 03:32:33.742918 | debian-bookworm | TASK [auditd : Copy auditd.conf configuration files] *************************** 2025-09-21 03:32:33.872749 | ubuntu-jammy | The following NEW packages will be installed: 2025-09-21 03:32:33.873074 | ubuntu-jammy | audispd-plugins 2025-09-21 03:32:33.873384 | ubuntu-jammy | 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. 2025-09-21 03:32:33.873983 | ubuntu-jammy | changed: [molecule-auditd] => {"cache_update_time": 1758425387, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following NEW packages will be installed:\n audispd-plugins\n0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 39.1 kB of archives.\nAfter this operation, 137 kB of additional disk space will be used.\nGet:1 http://archive.ubuntu.com/ubuntu jammy/universe amd64 audispd-plugins amd64 1:3.0.7-1build1 [39.1 kB]\nFetched 39.1 kB in 0s (484 kB/s)\nSelecting previously unselected package audispd-plugins.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 32050 files and directories currently installed.)\r\nPreparing to unpack .../audispd-plugins_1%3a3.0.7-1build1_amd64.deb ...\r\nUnpacking audispd-plugins (1:3.0.7-1build1) ...\r\nSetting up audispd-plugins (1:3.0.7-1build1) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following NEW packages will be installed:", " audispd-plugins", "0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.", "Need to get 39.1 kB of archives.", "After this operation, 137 kB of additional disk space will be used.", "Get:1 http://archive.ubuntu.com/ubuntu jammy/universe amd64 audispd-plugins amd64 1:3.0.7-1build1 [39.1 kB]", "Fetched 39.1 kB in 0s (484 kB/s)", "Selecting previously unselected package audispd-plugins.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 32050 files and directories currently installed.)", "Preparing to unpack .../audispd-plugins_1%3a3.0.7-1build1_amd64.deb ...", "Unpacking audispd-plugins (1:3.0.7-1build1) ...", "Setting up audispd-plugins (1:3.0.7-1build1) ..."]} 2025-09-21 03:32:33.874250 | ubuntu-jammy | 2025-09-21 03:32:33.874553 | ubuntu-jammy | TASK [auditd : Copy auditd.conf configuration files] *************************** 2025-09-21 03:32:33.514121 | centos-9-stream | --- before: /usr/lib/systemd/system/auditd.service (content) 2025-09-21 03:32:33.514266 | centos-9-stream | +++ after: /usr/lib/systemd/system/auditd.service (content) 2025-09-21 03:32:33.514405 | centos-9-stream | @@ -14,7 +14,7 @@ 2025-09-21 03:32:33.514554 | centos-9-stream | Before=sysinit.target shutdown.target 2025-09-21 03:32:33.514702 | centos-9-stream | ##Before=shutdown.target 2025-09-21 03:32:33.514849 | centos-9-stream | Conflicts=shutdown.target 2025-09-21 03:32:33.515016 | centos-9-stream | -RefuseManualStop=yes 2025-09-21 03:32:33.515208 | centos-9-stream | +#RefuseManualStop=yes 2025-09-21 03:32:33.515341 | centos-9-stream | ConditionKernelCommandLine=!audit=0 2025-09-21 03:32:33.515490 | centos-9-stream | ConditionKernelCommandLine=!audit=off 2025-09-21 03:32:33.515629 | centos-9-stream | 2025-09-21 03:32:33.515764 | centos-9-stream | 2025-09-21 03:32:33.515940 | centos-9-stream | changed: [molecule-auditd] => {"backup": "", "changed": true, "msg": "line replaced"} 2025-09-21 03:32:33.516227 | centos-9-stream | 2025-09-21 03:32:33.516393 | centos-9-stream | TASK [auditd : Reload systemd daemon] ****************************************** 2025-09-21 03:32:34.693187 | centos-9-stream | ok: [molecule-auditd] => {"changed": false, "name": null, "status": {}} 2025-09-21 03:32:34.693391 | centos-9-stream | 2025-09-21 03:32:34.693624 | centos-9-stream | TASK [auditd : Copy auditd.conf configuration files] *************************** 2025-09-21 03:32:34.933495 | ubuntu-noble | The following NEW packages will be installed: 2025-09-21 03:32:34.933716 | ubuntu-noble | audispd-plugins 2025-09-21 03:32:34.933854 | ubuntu-noble | 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. 2025-09-21 03:32:34.934096 | ubuntu-noble | changed: [molecule-auditd] => {"cache_update_time": 1758425387, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following NEW packages will be installed:\n audispd-plugins\n0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 38.8 kB of archives.\nAfter this operation, 131 kB of additional disk space will be used.\nGet:1 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 audispd-plugins amd64 1:3.1.2-2.1build1.1 [38.8 kB]\nFetched 38.8 kB in 0s (492 kB/s)\nSelecting previously unselected package audispd-plugins.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 34876 files and directories currently installed.)\r\nPreparing to unpack .../audispd-plugins_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nUnpacking audispd-plugins (1:3.1.2-2.1build1.1) ...\r\nSetting up audispd-plugins (1:3.1.2-2.1build1.1) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following NEW packages will be installed:", " audispd-plugins", "0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.", "Need to get 38.8 kB of archives.", "After this operation, 131 kB of additional disk space will be used.", "Get:1 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 audispd-plugins amd64 1:3.1.2-2.1build1.1 [38.8 kB]", "Fetched 38.8 kB in 0s (492 kB/s)", "Selecting previously unselected package audispd-plugins.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 34876 files and directories currently installed.)", "Preparing to unpack .../audispd-plugins_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Unpacking audispd-plugins (1:3.1.2-2.1build1.1) ...", "Setting up audispd-plugins (1:3.1.2-2.1build1.1) ..."]} 2025-09-21 03:32:34.934236 | ubuntu-noble | 2025-09-21 03:32:34.934366 | ubuntu-noble | TASK [auditd : Copy auditd.conf configuration files] *************************** 2025-09-21 03:32:35.368624 | debian-bookworm | --- before 2025-09-21 03:32:35.368709 | debian-bookworm | +++ after: /home/zuul/.ansible/tmp/ansible-local-2122ha2thqee/tmps4coo4q7/auditd.conf.j2 2025-09-21 03:32:35.368820 | debian-bookworm | @@ -0,0 +1,37 @@ 2025-09-21 03:32:35.368919 | debian-bookworm | +# 2025-09-21 03:32:35.369024 | debian-bookworm | +# This file controls the configuration of the audit daemon 2025-09-21 03:32:35.369124 | debian-bookworm | +# 2025-09-21 03:32:35.369250 | debian-bookworm | + 2025-09-21 03:32:35.369357 | debian-bookworm | +local_events = yes 2025-09-21 03:32:35.369457 | debian-bookworm | +write_logs = yes 2025-09-21 03:32:35.369564 | debian-bookworm | +log_file = /var/log/audit/audit.log 2025-09-21 03:32:35.369666 | debian-bookworm | +log_group = adm 2025-09-21 03:32:35.369771 | debian-bookworm | +log_format = RAW 2025-09-21 03:32:35.369875 | debian-bookworm | +flush = INCREMENTAL_ASYNC 2025-09-21 03:32:35.369976 | debian-bookworm | +freq = 50 2025-09-21 03:32:35.370078 | debian-bookworm | +max_log_file = 8 2025-09-21 03:32:35.370182 | debian-bookworm | +num_logs = 5 2025-09-21 03:32:35.370338 | debian-bookworm | +priority_boost = 4 2025-09-21 03:32:35.370443 | debian-bookworm | +disp_qos = lossy 2025-09-21 03:32:35.370548 | debian-bookworm | +dispatcher = /sbin/audispd 2025-09-21 03:32:35.370653 | debian-bookworm | +name_format = NONE 2025-09-21 03:32:35.370756 | debian-bookworm | +##name = mydomain 2025-09-21 03:32:35.370860 | debian-bookworm | +max_log_file_action = ROTATE 2025-09-21 03:32:35.370964 | debian-bookworm | +space_left = 12361 2025-09-21 03:32:35.371066 | debian-bookworm | +space_left_action = email 2025-09-21 03:32:35.371168 | debian-bookworm | +verify_email = yes 2025-09-21 03:32:35.371300 | debian-bookworm | +action_mail_acct = root 2025-09-21 03:32:35.371401 | debian-bookworm | +admin_space_left = 50 2025-09-21 03:32:35.371506 | debian-bookworm | +admin_space_left_action = SUSPEND 2025-09-21 03:32:35.371607 | debian-bookworm | +disk_full_action = SUSPEND 2025-09-21 03:32:35.371708 | debian-bookworm | +disk_error_action = SUSPEND 2025-09-21 03:32:35.371811 | debian-bookworm | +use_libwrap = yes 2025-09-21 03:32:35.371912 | debian-bookworm | +##tcp_listen_port = 60 2025-09-21 03:32:35.372016 | debian-bookworm | +tcp_listen_queue = 5 2025-09-21 03:32:35.372114 | debian-bookworm | +tcp_max_per_addr = 1 2025-09-21 03:32:35.372234 | debian-bookworm | +##tcp_client_ports = 1024-65535 2025-09-21 03:32:35.372329 | debian-bookworm | +tcp_client_max_idle = 0 2025-09-21 03:32:35.372431 | debian-bookworm | +enable_krb5 = no 2025-09-21 03:32:35.372533 | debian-bookworm | +krb5_principal = auditd 2025-09-21 03:32:35.372640 | debian-bookworm | +##krb5_key_file = /etc/audit/audit.key 2025-09-21 03:32:35.372740 | debian-bookworm | +distribute_network = no 2025-09-21 03:32:35.372838 | debian-bookworm | 2025-09-21 03:32:35.373007 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "checksum": "e902cc6bebf86c17087d153e359a2cc1231672e0", "dest": "/etc/audit/audit.conf", "gid": 0, "group": "root", "md5sum": "69dfd768317bae876a6a78c8aeb5cce1", "mode": "0640", "owner": "root", "size": 806, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1758425553.7632818-2492-197632389247466/.source.conf", "state": "file", "uid": 0} 2025-09-21 03:32:35.373075 | debian-bookworm | 2025-09-21 03:32:35.373178 | debian-bookworm | TASK [auditd : Adjust auditd/audispd configurations] *************************** 2025-09-21 03:32:35.403922 | ubuntu-jammy | --- before 2025-09-21 03:32:35.404082 | ubuntu-jammy | +++ after: /home/zuul/.ansible/tmp/ansible-local-1432jsy_g9c8/tmpnfuw8hki/auditd.conf.j2 2025-09-21 03:32:35.404155 | ubuntu-jammy | @@ -0,0 +1,37 @@ 2025-09-21 03:32:35.404259 | ubuntu-jammy | +# 2025-09-21 03:32:35.404364 | ubuntu-jammy | +# This file controls the configuration of the audit daemon 2025-09-21 03:32:35.404463 | ubuntu-jammy | +# 2025-09-21 03:32:35.404562 | ubuntu-jammy | + 2025-09-21 03:32:35.404665 | ubuntu-jammy | +local_events = yes 2025-09-21 03:32:35.404763 | ubuntu-jammy | +write_logs = yes 2025-09-21 03:32:35.404864 | ubuntu-jammy | +log_file = /var/log/audit/audit.log 2025-09-21 03:32:35.404981 | ubuntu-jammy | +log_group = adm 2025-09-21 03:32:35.405077 | ubuntu-jammy | +log_format = RAW 2025-09-21 03:32:35.405180 | ubuntu-jammy | +flush = INCREMENTAL_ASYNC 2025-09-21 03:32:35.405281 | ubuntu-jammy | +freq = 50 2025-09-21 03:32:35.405385 | ubuntu-jammy | +max_log_file = 8 2025-09-21 03:32:35.405485 | ubuntu-jammy | +num_logs = 5 2025-09-21 03:32:35.405587 | ubuntu-jammy | +priority_boost = 4 2025-09-21 03:32:35.405687 | ubuntu-jammy | +disp_qos = lossy 2025-09-21 03:32:35.405788 | ubuntu-jammy | +dispatcher = /sbin/audispd 2025-09-21 03:32:35.405891 | ubuntu-jammy | +name_format = NONE 2025-09-21 03:32:35.406008 | ubuntu-jammy | +##name = mydomain 2025-09-21 03:32:35.406102 | ubuntu-jammy | +max_log_file_action = ROTATE 2025-09-21 03:32:35.406206 | ubuntu-jammy | +space_left = 12361 2025-09-21 03:32:35.406303 | ubuntu-jammy | +space_left_action = email 2025-09-21 03:32:35.406403 | ubuntu-jammy | +verify_email = yes 2025-09-21 03:32:35.406518 | ubuntu-jammy | +action_mail_acct = root 2025-09-21 03:32:35.406616 | ubuntu-jammy | +admin_space_left = 50 2025-09-21 03:32:35.406719 | ubuntu-jammy | +admin_space_left_action = SUSPEND 2025-09-21 03:32:35.406823 | ubuntu-jammy | +disk_full_action = SUSPEND 2025-09-21 03:32:35.406922 | ubuntu-jammy | +disk_error_action = SUSPEND 2025-09-21 03:32:35.407032 | ubuntu-jammy | +use_libwrap = yes 2025-09-21 03:32:35.407137 | ubuntu-jammy | +##tcp_listen_port = 60 2025-09-21 03:32:35.407237 | ubuntu-jammy | +tcp_listen_queue = 5 2025-09-21 03:32:35.407347 | ubuntu-jammy | +tcp_max_per_addr = 1 2025-09-21 03:32:35.407445 | ubuntu-jammy | +##tcp_client_ports = 1024-65535 2025-09-21 03:32:35.407545 | ubuntu-jammy | +tcp_client_max_idle = 0 2025-09-21 03:32:35.407651 | ubuntu-jammy | +enable_krb5 = no 2025-09-21 03:32:35.407750 | ubuntu-jammy | +krb5_principal = auditd 2025-09-21 03:32:35.407895 | ubuntu-jammy | +##krb5_key_file = /etc/audit/audit.key 2025-09-21 03:32:35.408014 | ubuntu-jammy | +distribute_network = no 2025-09-21 03:32:35.408111 | ubuntu-jammy | 2025-09-21 03:32:35.408250 | ubuntu-jammy | changed: [molecule-auditd] => {"changed": true, "checksum": "e902cc6bebf86c17087d153e359a2cc1231672e0", "dest": "/etc/audit/audit.conf", "gid": 0, "group": "root", "md5sum": "69dfd768317bae876a6a78c8aeb5cce1", "mode": "0640", "owner": "root", "size": 806, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1758425553.8979142-1781-173404270229837/.source.conf", "state": "file", "uid": 0} 2025-09-21 03:32:35.408333 | ubuntu-jammy | 2025-09-21 03:32:35.408439 | ubuntu-jammy | TASK [auditd : Adjust auditd/audispd configurations] *************************** 2025-09-21 03:32:35.947414 | debian-bookworm | ok: [molecule-auditd] => (item={'parameter': 'active', 'value': 'no', 'config': '/etc/audit/plugins.d/syslog.conf'}) => {"ansible_loop_var": "item", "backup": "", "changed": false, "item": {"config": "/etc/audit/plugins.d/syslog.conf", "parameter": "active", "value": "no"}, "msg": ""} 2025-09-21 03:32:35.947484 | debian-bookworm | 2025-09-21 03:32:35.947600 | debian-bookworm | TASK [auditd : Deploy rules for auditd] **************************************** 2025-09-21 03:32:35.941534 | ubuntu-jammy | ok: [molecule-auditd] => (item={'parameter': 'active', 'value': 'no', 'config': '/etc/audit/plugins.d/syslog.conf'}) => {"ansible_loop_var": "item", "backup": "", "changed": false, "item": {"config": "/etc/audit/plugins.d/syslog.conf", "parameter": "active", "value": "no"}, "msg": ""} 2025-09-21 03:32:35.941608 | ubuntu-jammy | 2025-09-21 03:32:35.941684 | ubuntu-jammy | TASK [auditd : Deploy rules for auditd] **************************************** 2025-09-21 03:32:36.646764 | ubuntu-noble | --- before 2025-09-21 03:32:36.647224 | ubuntu-noble | +++ after: /home/zuul/.ansible/tmp/ansible-local-1870yjqauc5_/tmp35ai5q07/auditd.conf.j2 2025-09-21 03:32:36.647619 | ubuntu-noble | @@ -0,0 +1,37 @@ 2025-09-21 03:32:36.647930 | ubuntu-noble | +# 2025-09-21 03:32:36.648223 | ubuntu-noble | +# This file controls the configuration of the audit daemon 2025-09-21 03:32:36.648565 | ubuntu-noble | +# 2025-09-21 03:32:36.648870 | ubuntu-noble | + 2025-09-21 03:32:36.649155 | ubuntu-noble | +local_events = yes 2025-09-21 03:32:36.649475 | ubuntu-noble | +write_logs = yes 2025-09-21 03:32:36.649834 | ubuntu-noble | +log_file = /var/log/audit/audit.log 2025-09-21 03:32:36.650104 | ubuntu-noble | +log_group = adm 2025-09-21 03:32:36.650358 | ubuntu-noble | +log_format = RAW 2025-09-21 03:32:36.650747 | ubuntu-noble | +flush = INCREMENTAL_ASYNC 2025-09-21 03:32:36.651022 | ubuntu-noble | +freq = 50 2025-09-21 03:32:36.651274 | ubuntu-noble | +max_log_file = 8 2025-09-21 03:32:36.651607 | ubuntu-noble | +num_logs = 5 2025-09-21 03:32:36.651877 | ubuntu-noble | +priority_boost = 4 2025-09-21 03:32:36.652112 | ubuntu-noble | +disp_qos = lossy 2025-09-21 03:32:36.652321 | ubuntu-noble | +dispatcher = /sbin/audispd 2025-09-21 03:32:36.652585 | ubuntu-noble | +name_format = NONE 2025-09-21 03:32:36.652801 | ubuntu-noble | +##name = mydomain 2025-09-21 03:32:36.653012 | ubuntu-noble | +max_log_file_action = ROTATE 2025-09-21 03:32:36.653456 | ubuntu-noble | +space_left = 12361 2025-09-21 03:32:36.653472 | ubuntu-noble | +space_left_action = email 2025-09-21 03:32:36.653716 | ubuntu-noble | +verify_email = yes 2025-09-21 03:32:36.653927 | ubuntu-noble | +action_mail_acct = root 2025-09-21 03:32:36.654133 | ubuntu-noble | +admin_space_left = 50 2025-09-21 03:32:36.654332 | ubuntu-noble | +admin_space_left_action = SUSPEND 2025-09-21 03:32:36.654577 | ubuntu-noble | +disk_full_action = SUSPEND 2025-09-21 03:32:36.654780 | ubuntu-noble | +disk_error_action = SUSPEND 2025-09-21 03:32:36.654972 | ubuntu-noble | +use_libwrap = yes 2025-09-21 03:32:36.655167 | ubuntu-noble | +##tcp_listen_port = 60 2025-09-21 03:32:36.657282 | ubuntu-noble | +tcp_listen_queue = 5 2025-09-21 03:32:36.657301 | ubuntu-noble | +tcp_max_per_addr = 1 2025-09-21 03:32:36.657306 | ubuntu-noble | +##tcp_client_ports = 1024-65535 2025-09-21 03:32:36.657311 | ubuntu-noble | +tcp_client_max_idle = 0 2025-09-21 03:32:36.657316 | ubuntu-noble | +enable_krb5 = no 2025-09-21 03:32:36.657321 | ubuntu-noble | +krb5_principal = auditd 2025-09-21 03:32:36.657325 | ubuntu-noble | +##krb5_key_file = /etc/audit/audit.key 2025-09-21 03:32:36.657330 | ubuntu-noble | +distribute_network = no 2025-09-21 03:32:36.657336 | ubuntu-noble | 2025-09-21 03:32:36.657363 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "checksum": "e902cc6bebf86c17087d153e359a2cc1231672e0", "dest": "/etc/audit/audit.conf", "gid": 0, "group": "root", "md5sum": "69dfd768317bae876a6a78c8aeb5cce1", "mode": "0640", "owner": "root", "size": 806, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1758425554.951829-2268-212575468789190/.source.conf", "state": "file", "uid": 0} 2025-09-21 03:32:36.657371 | ubuntu-noble | 2025-09-21 03:32:36.657376 | ubuntu-noble | TASK [auditd : Adjust auditd/audispd configurations] *************************** 2025-09-21 03:32:36.554583 | centos-9-stream | --- before 2025-09-21 03:32:36.554726 | centos-9-stream | +++ after: /home/zuul/.ansible/tmp/ansible-local-1921k107b29r/tmpfd3mt8uc/auditd.conf.j2 2025-09-21 03:32:36.554916 | centos-9-stream | @@ -0,0 +1,37 @@ 2025-09-21 03:32:36.555102 | centos-9-stream | +# 2025-09-21 03:32:36.555312 | centos-9-stream | +# This file controls the configuration of the audit daemon 2025-09-21 03:32:36.555482 | centos-9-stream | +# 2025-09-21 03:32:36.555650 | centos-9-stream | + 2025-09-21 03:32:36.555819 | centos-9-stream | +local_events = yes 2025-09-21 03:32:36.555999 | centos-9-stream | +write_logs = yes 2025-09-21 03:32:36.556200 | centos-9-stream | +log_file = /var/log/audit/audit.log 2025-09-21 03:32:36.556365 | centos-9-stream | +log_group = adm 2025-09-21 03:32:36.556534 | centos-9-stream | +log_format = RAW 2025-09-21 03:32:36.556707 | centos-9-stream | +flush = INCREMENTAL_ASYNC 2025-09-21 03:32:36.556876 | centos-9-stream | +freq = 50 2025-09-21 03:32:36.557095 | centos-9-stream | +max_log_file = 8 2025-09-21 03:32:36.557304 | centos-9-stream | +num_logs = 5 2025-09-21 03:32:36.557452 | centos-9-stream | +priority_boost = 4 2025-09-21 03:32:36.557595 | centos-9-stream | +disp_qos = lossy 2025-09-21 03:32:36.557739 | centos-9-stream | +dispatcher = /sbin/audispd 2025-09-21 03:32:36.557885 | centos-9-stream | +name_format = NONE 2025-09-21 03:32:36.558046 | centos-9-stream | +##name = mydomain 2025-09-21 03:32:36.558209 | centos-9-stream | +max_log_file_action = ROTATE 2025-09-21 03:32:36.558355 | centos-9-stream | +space_left = 12361 2025-09-21 03:32:36.558502 | centos-9-stream | +space_left_action = email 2025-09-21 03:32:36.558649 | centos-9-stream | +verify_email = yes 2025-09-21 03:32:36.558793 | centos-9-stream | +action_mail_acct = root 2025-09-21 03:32:36.558942 | centos-9-stream | +admin_space_left = 50 2025-09-21 03:32:36.559130 | centos-9-stream | +admin_space_left_action = SUSPEND 2025-09-21 03:32:36.559287 | centos-9-stream | +disk_full_action = SUSPEND 2025-09-21 03:32:36.559419 | centos-9-stream | +disk_error_action = SUSPEND 2025-09-21 03:32:36.559553 | centos-9-stream | +use_libwrap = yes 2025-09-21 03:32:36.559682 | centos-9-stream | +##tcp_listen_port = 60 2025-09-21 03:32:36.559813 | centos-9-stream | +tcp_listen_queue = 5 2025-09-21 03:32:36.559942 | centos-9-stream | +tcp_max_per_addr = 1 2025-09-21 03:32:36.560090 | centos-9-stream | +##tcp_client_ports = 1024-65535 2025-09-21 03:32:36.560240 | centos-9-stream | +tcp_client_max_idle = 0 2025-09-21 03:32:36.560369 | centos-9-stream | +enable_krb5 = no 2025-09-21 03:32:36.560499 | centos-9-stream | +krb5_principal = auditd 2025-09-21 03:32:36.560632 | centos-9-stream | +##krb5_key_file = /etc/audit/audit.key 2025-09-21 03:32:36.560761 | centos-9-stream | +distribute_network = no 2025-09-21 03:32:36.560888 | centos-9-stream | 2025-09-21 03:32:36.561093 | centos-9-stream | changed: [molecule-auditd] => {"changed": true, "checksum": "e902cc6bebf86c17087d153e359a2cc1231672e0", "dest": "/etc/audit/audit.conf", "gid": 0, "group": "root", "md5sum": "69dfd768317bae876a6a78c8aeb5cce1", "mode": "0640", "owner": "root", "secontext": "system_u:object_r:auditd_etc_t:s0", "size": 806, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1758425554.7157695-2061-50048743849452/.source.conf", "state": "file", "uid": 0} 2025-09-21 03:32:36.561206 | centos-9-stream | 2025-09-21 03:32:36.561340 | centos-9-stream | TASK [auditd : Adjust auditd/audispd configurations] *************************** 2025-09-21 03:32:37.024078 | debian-bookworm | --- before 2025-09-21 03:32:37.024310 | debian-bookworm | +++ after: /home/zuul/.ansible/tmp/ansible-local-2122ha2thqee/tmpuswbxq7a/20-neo23x0.rules.j2 2025-09-21 03:32:37.024506 | debian-bookworm | @@ -0,0 +1,750 @@ 2025-09-21 03:32:37.024698 | debian-bookworm | +# ___ ___ __ __ 2025-09-21 03:32:37.024880 | debian-bookworm | +# / | __ ______/ (_) /_____/ / 2025-09-21 03:32:37.025058 | debian-bookworm | +# / /| |/ / / / __ / / __/ __ / 2025-09-21 03:32:37.025305 | debian-bookworm | +# / ___ / /_/ / /_/ / / /_/ /_/ / 2025-09-21 03:32:37.025462 | debian-bookworm | +# /_/ |_\__,_/\__,_/_/\__/\__,_/ 2025-09-21 03:32:37.025641 | debian-bookworm | +# 2025-09-21 03:32:37.025822 | debian-bookworm | +# Linux Audit Daemon - Best Practice Configuration 2025-09-21 03:32:37.025999 | debian-bookworm | +# /etc/audit/audit.rules 2025-09-21 03:32:37.026175 | debian-bookworm | +# 2025-09-21 03:32:37.026399 | debian-bookworm | +# Compiled by Florian Roth 2025-09-21 03:32:37.026582 | debian-bookworm | +# 2025-09-21 03:32:37.026758 | debian-bookworm | +# Created : 2017/12/05 2025-09-21 03:32:37.026937 | debian-bookworm | +# Modified : 2023/01/25 2025-09-21 03:32:37.027113 | debian-bookworm | +# 2025-09-21 03:32:37.027346 | debian-bookworm | +# Based on rules published here: 2025-09-21 03:32:37.027635 | debian-bookworm | +# Gov.uk auditd rules 2025-09-21 03:32:37.034367 | debian-bookworm | +# https://github.com/gds-operations/puppet-auditd/pull/1 2025-09-21 03:32:37.034441 | debian-bookworm | +# CentOS 7 hardening 2025-09-21 03:32:37.034456 | debian-bookworm | +# https://highon.coffee/blog/security-harden-centos-7/#auditd---audit-daemon 2025-09-21 03:32:37.034468 | debian-bookworm | +# Linux audit repo 2025-09-21 03:32:37.034480 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/tree/master/rules 2025-09-21 03:32:37.034492 | debian-bookworm | +# Auditd high performance linux auditing 2025-09-21 03:32:37.034504 | debian-bookworm | +# https://linux-audit.com/tuning-auditd-high-performance-linux-auditing/ 2025-09-21 03:32:37.034515 | debian-bookworm | +# 2025-09-21 03:32:37.034527 | debian-bookworm | +# Further rules 2025-09-21 03:32:37.034538 | debian-bookworm | +# For PCI DSS compliance see: 2025-09-21 03:32:37.034549 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-pci-dss-v31.rules 2025-09-21 03:32:37.034561 | debian-bookworm | +# For NISPOM compliance see: 2025-09-21 03:32:37.034572 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-nispom.rules 2025-09-21 03:32:37.034583 | debian-bookworm | + 2025-09-21 03:32:37.034594 | debian-bookworm | +# Remove any existing rules 2025-09-21 03:32:37.034606 | debian-bookworm | +-D 2025-09-21 03:32:37.034617 | debian-bookworm | + 2025-09-21 03:32:37.034629 | debian-bookworm | +# Buffer Size 2025-09-21 03:32:37.034640 | debian-bookworm | +## Feel free to increase this if the machine panic's 2025-09-21 03:32:37.034651 | debian-bookworm | +-b 8192 2025-09-21 03:32:37.034662 | debian-bookworm | + 2025-09-21 03:32:37.034673 | debian-bookworm | +# Failure Mode 2025-09-21 03:32:37.034684 | debian-bookworm | +## Possible values: 0 (silent), 1 (printk, print a failure message), 2 (panic, halt the system) 2025-09-21 03:32:37.034696 | debian-bookworm | +-f 1 2025-09-21 03:32:37.034707 | debian-bookworm | + 2025-09-21 03:32:37.034718 | debian-bookworm | +# Ignore errors 2025-09-21 03:32:37.034729 | debian-bookworm | +## e.g. caused by users or files not found in the local environment 2025-09-21 03:32:37.034740 | debian-bookworm | +-i 2025-09-21 03:32:37.034751 | debian-bookworm | + 2025-09-21 03:32:37.034762 | debian-bookworm | +# Self Auditing --------------------------------------------------------------- 2025-09-21 03:32:37.034795 | debian-bookworm | + 2025-09-21 03:32:37.034807 | debian-bookworm | +## Audit the audit logs 2025-09-21 03:32:37.034818 | debian-bookworm | +### Successful and unsuccessful attempts to read information from the audit records 2025-09-21 03:32:37.034830 | debian-bookworm | +-w /var/log/audit/ -p wra -k auditlog 2025-09-21 03:32:37.034841 | debian-bookworm | +-w /var/audit/ -p wra -k auditlog 2025-09-21 03:32:37.034852 | debian-bookworm | + 2025-09-21 03:32:37.034874 | debian-bookworm | +## Auditd configuration 2025-09-21 03:32:37.034886 | debian-bookworm | +### Modifications to audit configuration that occur while the audit collection functions are operating 2025-09-21 03:32:37.034897 | debian-bookworm | +-w /etc/audit/ -p wa -k auditconfig 2025-09-21 03:32:37.034908 | debian-bookworm | +-w /etc/libaudit.conf -p wa -k auditconfig 2025-09-21 03:32:37.034989 | debian-bookworm | +-w /etc/audisp/ -p wa -k audispconfig 2025-09-21 03:32:37.035127 | debian-bookworm | + 2025-09-21 03:32:37.035314 | debian-bookworm | +## Monitor for use of audit management tools 2025-09-21 03:32:37.035443 | debian-bookworm | +-w /sbin/auditctl -p x -k audittools 2025-09-21 03:32:37.035572 | debian-bookworm | +-w /sbin/auditd -p x -k audittools 2025-09-21 03:32:37.035703 | debian-bookworm | +-w /usr/sbin/auditd -p x -k audittools 2025-09-21 03:32:37.035831 | debian-bookworm | +-w /usr/sbin/augenrules -p x -k audittools 2025-09-21 03:32:37.035958 | debian-bookworm | + 2025-09-21 03:32:37.036088 | debian-bookworm | +## Access to all audit trails 2025-09-21 03:32:37.036213 | debian-bookworm | + 2025-09-21 03:32:37.036358 | debian-bookworm | +-a always,exit -F path=/usr/sbin/ausearch -F perm=x -k audittools 2025-09-21 03:32:37.036486 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aureport -F perm=x -k audittools 2025-09-21 03:32:37.265532 | ubuntu-noble | ok: [molecule-auditd] => (item={'parameter': 'active', 'value': 'no', 'config': '/etc/audit/plugins.d/syslog.conf'}) => {"ansible_loop_var": "item", "backup": "", "changed": false, "item": {"config": "/etc/audit/plugins.d/syslog.conf", "parameter": "active", "value": "no"}, "msg": ""} 2025-09-21 03:32:37.265585 | ubuntu-noble | 2025-09-21 03:32:37.266653 | ubuntu-noble | TASK [auditd : Deploy rules for auditd] **************************************** 2025-09-21 03:32:37.036615 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aulast -F perm=x -k audittools 2025-09-21 03:32:37.036745 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aulastlogin -F perm=x -k audittools 2025-09-21 03:32:37.036874 | debian-bookworm | +-a always,exit -F path=/usr/sbin/auvirt -F perm=x -k audittools 2025-09-21 03:32:37.037000 | debian-bookworm | + 2025-09-21 03:32:37.037129 | debian-bookworm | +# Filters --------------------------------------------------------------------- 2025-09-21 03:32:37.037268 | debian-bookworm | + 2025-09-21 03:32:37.037398 | debian-bookworm | +### We put these early because audit is a first match wins system. 2025-09-21 03:32:37.037530 | debian-bookworm | + 2025-09-21 03:32:37.037655 | debian-bookworm | +## Ignore SELinux AVC records 2025-09-21 03:32:37.037785 | debian-bookworm | +-a always,exclude -F msgtype=AVC 2025-09-21 03:32:37.037909 | debian-bookworm | + 2025-09-21 03:32:37.038039 | debian-bookworm | +## Ignore current working directory records 2025-09-21 03:32:37.038165 | debian-bookworm | +-a always,exclude -F msgtype=CWD 2025-09-21 03:32:37.038401 | debian-bookworm | + 2025-09-21 03:32:37.038539 | debian-bookworm | +## Cron jobs fill the logs with stuff we normally don't want (works with SELinux) 2025-09-21 03:32:37.038664 | debian-bookworm | +-a never,user -F subj_type=crond_t 2025-09-21 03:32:37.038787 | debian-bookworm | +-a never,exit -F subj_type=crond_t 2025-09-21 03:32:37.038906 | debian-bookworm | + 2025-09-21 03:32:37.039031 | debian-bookworm | +## This prevents chrony from overwhelming the logs 2025-09-21 03:32:37.039158 | debian-bookworm | +-a never,exit -F arch=b64 -S adjtimex -F auid=-1 -F uid=chrony -F subj_type=chronyd_t 2025-09-21 03:32:37.039292 | debian-bookworm | + 2025-09-21 03:32:37.039419 | debian-bookworm | +## This is not very interesting and wastes a lot of space if the server is public facing 2025-09-21 03:32:37.039547 | debian-bookworm | +-a always,exclude -F msgtype=CRYPTO_KEY_USER 2025-09-21 03:32:37.039666 | debian-bookworm | + 2025-09-21 03:32:37.039787 | debian-bookworm | +## Open VM Tools 2025-09-21 03:32:37.039913 | debian-bookworm | +-a exit,never -F arch=b64 -S all -F exe=/usr/bin/vmtoolsd 2025-09-21 03:32:37.040033 | debian-bookworm | + 2025-09-21 03:32:37.040162 | debian-bookworm | +## High Volume Event Filter (especially on Linux Workstations) 2025-09-21 03:32:37.040298 | debian-bookworm | +-a never,exit -F arch=b64 -F dir=/dev/shm -k sharedmemaccess 2025-09-21 03:32:37.040422 | debian-bookworm | +-a never,exit -F arch=b64 -F dir=/var/lock/lvm -k locklvm 2025-09-21 03:32:37.040541 | debian-bookworm | + 2025-09-21 03:32:37.040665 | debian-bookworm | +## FileBeat 2025-09-21 03:32:37.040787 | debian-bookworm | +-a never,exit -F arch=b64 -F path=/opt/filebeat -k filebeat 2025-09-21 03:32:37.040903 | debian-bookworm | + 2025-09-21 03:32:37.041025 | debian-bookworm | +## More information on how to filter events 2025-09-21 03:32:37.041156 | debian-bookworm | +### https://access.redhat.com/solutions/2482221 2025-09-21 03:32:37.041284 | debian-bookworm | + 2025-09-21 03:32:37.041405 | debian-bookworm | +# Rules ----------------------------------------------------------------------- 2025-09-21 03:32:37.041525 | debian-bookworm | + 2025-09-21 03:32:37.041645 | debian-bookworm | +## Kernel parameters 2025-09-21 03:32:37.041767 | debian-bookworm | +-w /etc/sysctl.conf -p wa -k sysctl 2025-09-21 03:32:37.041891 | debian-bookworm | +-w /etc/sysctl.d -p wa -k sysctl 2025-09-21 03:32:37.042006 | debian-bookworm | + 2025-09-21 03:32:37.042126 | debian-bookworm | +## Kernel module loading and unloading 2025-09-21 03:32:37.042313 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/insmod -k modules 2025-09-21 03:32:37.042441 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/modprobe -k modules 2025-09-21 03:32:37.042558 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/rmmod -k modules 2025-09-21 03:32:37.042677 | debian-bookworm | +-a always,exit -F arch=b64 -S finit_module -S init_module -S delete_module -F auid!=-1 -k modules 2025-09-21 03:32:37.042784 | debian-bookworm | + 2025-09-21 03:32:37.042895 | debian-bookworm | +## Modprobe configuration 2025-09-21 03:32:37.043008 | debian-bookworm | +-w /etc/modprobe.conf -p wa -k modprobe 2025-09-21 03:32:37.043123 | debian-bookworm | +-w /etc/modprobe.d -p wa -k modprobe 2025-09-21 03:32:37.043252 | debian-bookworm | + 2025-09-21 03:32:37.043353 | debian-bookworm | +## KExec usage (all actions) 2025-09-21 03:32:37.043475 | debian-bookworm | +-a always,exit -F arch=b64 -S kexec_load -k KEXEC 2025-09-21 03:32:37.043576 | debian-bookworm | + 2025-09-21 03:32:37.043687 | debian-bookworm | +## Special files 2025-09-21 03:32:37.043804 | debian-bookworm | +-a always,exit -F arch=b64 -S mknod -S mknodat -k specialfiles 2025-09-21 03:32:37.043908 | debian-bookworm | + 2025-09-21 03:32:37.044019 | debian-bookworm | +## Mount operations (only attributable) 2025-09-21 03:32:37.044131 | debian-bookworm | +-a always,exit -F arch=b64 -S mount -S umount2 -F auid!=-1 -k mount 2025-09-21 03:32:37.044282 | debian-bookworm | + 2025-09-21 03:32:37.044361 | debian-bookworm | +### NFS mount 2025-09-21 03:32:37.044483 | debian-bookworm | +-a always,exit -F path=/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-21 03:32:37.044605 | debian-bookworm | +-a always,exit -F path=/usr/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-21 03:32:37.044713 | debian-bookworm | + 2025-09-21 03:32:37.044822 | debian-bookworm | +## Change swap (only attributable) 2025-09-21 03:32:37.044935 | debian-bookworm | +-a always,exit -F arch=b64 -S swapon -S swapoff -F auid!=-1 -k swap 2025-09-21 03:32:37.045041 | debian-bookworm | + 2025-09-21 03:32:37.045162 | debian-bookworm | +## Time 2025-09-21 03:32:37.045304 | debian-bookworm | +-a always,exit -F arch=b64 -F uid!=ntp -S adjtimex -S settimeofday -S clock_settime -k time 2025-09-21 03:32:37.045419 | debian-bookworm | +### Local time zone 2025-09-21 03:32:37.045554 | debian-bookworm | +-w /etc/localtime -p wa -k localtime 2025-09-21 03:32:37.045686 | debian-bookworm | + 2025-09-21 03:32:37.045799 | debian-bookworm | +## Stunnel 2025-09-21 03:32:37.045908 | debian-bookworm | +-w /usr/sbin/stunnel -p x -k stunnel 2025-09-21 03:32:37.046011 | debian-bookworm | +-w /usr/bin/stunnel -p x -k stunnel 2025-09-21 03:32:37.046110 | debian-bookworm | + 2025-09-21 03:32:37.046265 | debian-bookworm | +## Cron configuration & scheduled jobs 2025-09-21 03:32:37.046378 | debian-bookworm | +-w /etc/cron.allow -p wa -k cron 2025-09-21 03:32:37.046476 | debian-bookworm | +-w /etc/cron.deny -p wa -k cron 2025-09-21 03:32:37.046606 | debian-bookworm | +-w /etc/cron.d/ -p wa -k cron 2025-09-21 03:32:37.046724 | debian-bookworm | +-w /etc/cron.daily/ -p wa -k cron 2025-09-21 03:32:37.046823 | debian-bookworm | +-w /etc/cron.hourly/ -p wa -k cron 2025-09-21 03:32:37.046963 | debian-bookworm | +-w /etc/cron.monthly/ -p wa -k cron 2025-09-21 03:32:37.047105 | debian-bookworm | +-w /etc/cron.weekly/ -p wa -k cron 2025-09-21 03:32:37.047210 | debian-bookworm | +-w /etc/crontab -p wa -k cron 2025-09-21 03:32:37.047364 | debian-bookworm | +-w /var/spool/cron/ -p wa -k cron 2025-09-21 03:32:37.047433 | debian-bookworm | + 2025-09-21 03:32:37.047535 | debian-bookworm | +## User, group, password databases 2025-09-21 03:32:37.047864 | debian-bookworm | +-w /etc/group -p wa -k etcgroup 2025-09-21 03:32:37.048031 | debian-bookworm | +-w /etc/passwd -p wa -k etcpasswd 2025-09-21 03:32:37.048195 | debian-bookworm | +-w /etc/gshadow -k etcgroup 2025-09-21 03:32:37.048428 | debian-bookworm | +-w /etc/shadow -k etcpasswd 2025-09-21 03:32:37.048572 | debian-bookworm | +-w /etc/security/opasswd -k opasswd 2025-09-21 03:32:37.048676 | debian-bookworm | + 2025-09-21 03:32:37.048779 | debian-bookworm | +## Sudoers file changes 2025-09-21 03:32:37.048916 | debian-bookworm | +-w /etc/sudoers -p wa -k actions 2025-09-21 03:32:37.049070 | debian-bookworm | +-w /etc/sudoers.d/ -p wa -k actions 2025-09-21 03:32:37.049251 | debian-bookworm | + 2025-09-21 03:32:37.049367 | debian-bookworm | +## Passwd 2025-09-21 03:32:37.049484 | debian-bookworm | +-w /usr/bin/passwd -p x -k passwd_modification 2025-09-21 03:32:37.049629 | debian-bookworm | + 2025-09-21 03:32:37.049763 | debian-bookworm | +## Tools to change group identifiers 2025-09-21 03:32:37.049871 | debian-bookworm | +-w /usr/sbin/groupadd -p x -k group_modification 2025-09-21 03:32:37.050005 | debian-bookworm | +-w /usr/sbin/groupmod -p x -k group_modification 2025-09-21 03:32:37.050110 | debian-bookworm | +-w /usr/sbin/addgroup -p x -k group_modification 2025-09-21 03:32:37.050247 | debian-bookworm | +-w /usr/sbin/useradd -p x -k user_modification 2025-09-21 03:32:37.050476 | debian-bookworm | +-w /usr/sbin/userdel -p x -k user_modification 2025-09-21 03:32:37.050601 | debian-bookworm | +-w /usr/sbin/usermod -p x -k user_modification 2025-09-21 03:32:37.050707 | debian-bookworm | +-w /usr/sbin/adduser -p x -k user_modification 2025-09-21 03:32:37.050816 | debian-bookworm | + 2025-09-21 03:32:37.050940 | debian-bookworm | +## Login configuration and information 2025-09-21 03:32:37.051074 | debian-bookworm | +-w /etc/login.defs -p wa -k login 2025-09-21 03:32:37.051185 | debian-bookworm | +-w /etc/securetty -p wa -k login 2025-09-21 03:32:37.051302 | debian-bookworm | +-w /var/log/faillog -p wa -k login 2025-09-21 03:32:37.051403 | debian-bookworm | +-w /var/log/lastlog -p wa -k login 2025-09-21 03:32:37.051506 | debian-bookworm | +-w /var/log/tallylog -p wa -k login 2025-09-21 03:32:37.051640 | debian-bookworm | + 2025-09-21 03:32:37.051775 | debian-bookworm | +## Network Environment 2025-09-21 03:32:37.051877 | debian-bookworm | +### Changes to hostname 2025-09-21 03:32:37.051990 | debian-bookworm | +-a always,exit -F arch=b64 -S sethostname -S setdomainname -k network_modifications 2025-09-21 03:32:37.052105 | debian-bookworm | + 2025-09-21 03:32:37.052275 | debian-bookworm | +### Detect Remote Shell Use 2025-09-21 03:32:37.052391 | debian-bookworm | +-a always,exit -F arch=b64 -F exe=/bin/bash -F success=1 -S connect -k "remote_shell" 2025-09-21 03:32:37.052500 | debian-bookworm | +-a always,exit -F arch=b64 -F exe=/usr/bin/bash -F success=1 -S connect -k "remote_shell" 2025-09-21 03:32:37.052626 | debian-bookworm | + 2025-09-21 03:32:37.052779 | debian-bookworm | +### Successful IPv4 Connections 2025-09-21 03:32:37.052943 | debian-bookworm | +-a always,exit -F arch=b64 -S connect -F a2=16 -F success=1 -F key=network_connect_4 2025-09-21 03:32:37.053102 | debian-bookworm | + 2025-09-21 03:32:37.053272 | debian-bookworm | +### Successful IPv6 Connections 2025-09-21 03:32:37.053446 | debian-bookworm | +-a always,exit -F arch=b64 -S connect -F a2=28 -F success=1 -F key=network_connect_6 2025-09-21 03:32:37.053565 | debian-bookworm | + 2025-09-21 03:32:37.053710 | debian-bookworm | +### Changes to other files 2025-09-21 03:32:37.053859 | debian-bookworm | +-w /etc/hosts -p wa -k network_modifications 2025-09-21 03:32:37.053994 | debian-bookworm | +-w /etc/sysconfig/network -p wa -k network_modifications 2025-09-21 03:32:37.054147 | debian-bookworm | +-w /etc/sysconfig/network-scripts -p w -k network_modifications 2025-09-21 03:32:37.054337 | debian-bookworm | +-w /etc/network/ -p wa -k network 2025-09-21 03:32:37.054481 | debian-bookworm | +-a always,exit -F dir=/etc/NetworkManager/ -F perm=wa -k network_modifications 2025-09-21 03:32:37.054623 | debian-bookworm | + 2025-09-21 03:32:37.054774 | debian-bookworm | +### Changes to issue 2025-09-21 03:32:37.054920 | debian-bookworm | +-w /etc/issue -p wa -k etcissue 2025-09-21 03:32:37.055074 | debian-bookworm | +-w /etc/issue.net -p wa -k etcissue 2025-09-21 03:32:37.055220 | debian-bookworm | + 2025-09-21 03:32:37.055367 | debian-bookworm | +## System startup scripts 2025-09-21 03:32:37.055468 | debian-bookworm | +-w /etc/inittab -p wa -k init 2025-09-21 03:32:37.055569 | debian-bookworm | +-w /etc/init.d/ -p wa -k init 2025-09-21 03:32:37.055704 | debian-bookworm | +-w /etc/init/ -p wa -k init 2025-09-21 03:32:37.055822 | debian-bookworm | + 2025-09-21 03:32:37.055928 | debian-bookworm | +## Library search paths 2025-09-21 03:32:37.056033 | debian-bookworm | +-w /etc/ld.so.conf -p wa -k libpath 2025-09-21 03:32:37.056163 | debian-bookworm | +-w /etc/ld.so.conf.d -p wa -k libpath 2025-09-21 03:32:37.056397 | debian-bookworm | + 2025-09-21 03:32:37.056515 | debian-bookworm | +## Systemwide library preloads (LD_PRELOAD) 2025-09-21 03:32:37.056631 | debian-bookworm | +-w /etc/ld.so.preload -p wa -k systemwide_preloads 2025-09-21 03:32:37.056730 | debian-bookworm | + 2025-09-21 03:32:37.056837 | debian-bookworm | +## Pam configuration 2025-09-21 03:32:37.056939 | debian-bookworm | +-w /etc/pam.d/ -p wa -k pam 2025-09-21 03:32:37.057044 | debian-bookworm | +-w /etc/security/limits.conf -p wa -k pam 2025-09-21 03:32:37.057187 | debian-bookworm | +-w /etc/security/limits.d -p wa -k pam 2025-09-21 03:32:37.057273 | debian-bookworm | +-w /etc/security/pam_env.conf -p wa -k pam 2025-09-21 03:32:37.057376 | debian-bookworm | +-w /etc/security/namespace.conf -p wa -k pam 2025-09-21 03:32:37.057480 | debian-bookworm | +-w /etc/security/namespace.d -p wa -k pam 2025-09-21 03:32:37.057593 | debian-bookworm | +-w /etc/security/namespace.init -p wa -k pam 2025-09-21 03:32:37.057694 | debian-bookworm | + 2025-09-21 03:32:37.057793 | debian-bookworm | +## Mail configuration 2025-09-21 03:32:37.057899 | debian-bookworm | +-w /etc/aliases -p wa -k mail 2025-09-21 03:32:37.057998 | debian-bookworm | +-w /etc/postfix/ -p wa -k mail 2025-09-21 03:32:37.058098 | debian-bookworm | +-w /etc/exim4/ -p wa -k mail 2025-09-21 03:32:37.058197 | debian-bookworm | + 2025-09-21 03:32:37.058346 | debian-bookworm | +## SSH configuration 2025-09-21 03:32:37.058448 | debian-bookworm | +-w /etc/ssh/sshd_config -k sshd 2025-09-21 03:32:37.058551 | debian-bookworm | +-w /etc/ssh/sshd_config.d -k sshd 2025-09-21 03:32:37.058649 | debian-bookworm | + 2025-09-21 03:32:37.058752 | debian-bookworm | +## root ssh key tampering 2025-09-21 03:32:37.058855 | debian-bookworm | +-w /root/.ssh -p wa -k rootkey 2025-09-21 03:32:37.058955 | debian-bookworm | + 2025-09-21 03:32:37.059054 | debian-bookworm | +# Systemd 2025-09-21 03:32:37.059158 | debian-bookworm | +-w /bin/systemctl -p x -k systemd 2025-09-21 03:32:37.059277 | debian-bookworm | +-w /etc/systemd/ -p wa -k systemd 2025-09-21 03:32:37.059412 | debian-bookworm | +-w /usr/lib/systemd -p wa -k systemd 2025-09-21 03:32:37.059480 | debian-bookworm | + 2025-09-21 03:32:37.059582 | debian-bookworm | +## https://systemd.network/systemd.generator.html 2025-09-21 03:32:37.059685 | debian-bookworm | +-w /etc/systemd/system-generators/ -p wa -k systemd_generator 2025-09-21 03:32:37.059789 | debian-bookworm | +-w /usr/local/lib/systemd/system-generators/ -p wa -k systemd_generator 2025-09-21 03:32:37.059890 | debian-bookworm | +-w /usr/lib/systemd/system-generators -p wa -k systemd_generator 2025-09-21 03:32:37.059992 | debian-bookworm | + 2025-09-21 03:32:37.060095 | debian-bookworm | +-w /etc/systemd/user-generators/ -p wa -k systemd_generator 2025-09-21 03:32:37.060199 | debian-bookworm | +-w /usr/local/lib/systemd/user-generators/ -p wa -k systemd_generator 2025-09-21 03:32:37.060314 | debian-bookworm | +-w /lib/systemd/system-generators/ -p wa -k systemd_generator 2025-09-21 03:32:37.060415 | debian-bookworm | + 2025-09-21 03:32:37.060522 | debian-bookworm | +## SELinux events that modify the system's Mandatory Access Controls (MAC) 2025-09-21 03:32:37.060625 | debian-bookworm | +-w /etc/selinux/ -p wa -k mac_policy 2025-09-21 03:32:37.060725 | debian-bookworm | + 2025-09-21 03:32:37.060829 | debian-bookworm | +## Critical elements access failures 2025-09-21 03:32:37.060941 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/etc -F success=0 -k unauthedfileaccess 2025-09-21 03:32:37.061048 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/bin -F success=0 -k unauthedfileaccess 2025-09-21 03:32:37.061156 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/sbin -F success=0 -k unauthedfileaccess 2025-09-21 03:32:37.061279 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/usr/bin -F success=0 -k unauthedfileaccess 2025-09-21 03:32:37.061386 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/usr/sbin -F success=0 -k unauthedfileaccess 2025-09-21 03:32:37.061494 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/var -F success=0 -k unauthedfileaccess 2025-09-21 03:32:37.061600 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/home -F success=0 -k unauthedfileaccess 2025-09-21 03:32:37.061709 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/srv -F success=0 -k unauthedfileaccess 2025-09-21 03:32:37.061809 | debian-bookworm | + 2025-09-21 03:32:37.061913 | debian-bookworm | +## Process ID change (switching accounts) applications 2025-09-21 03:32:37.062016 | debian-bookworm | +-w /bin/su -p x -k priv_esc 2025-09-21 03:32:37.062121 | debian-bookworm | +-w /usr/bin/sudo -p x -k priv_esc 2025-09-21 03:32:37.062220 | debian-bookworm | + 2025-09-21 03:32:37.062364 | debian-bookworm | +## Power state 2025-09-21 03:32:37.062468 | debian-bookworm | +-w /sbin/shutdown -p x -k power 2025-09-21 03:32:37.062571 | debian-bookworm | +-w /sbin/poweroff -p x -k power 2025-09-21 03:32:37.062681 | debian-bookworm | +-w /sbin/reboot -p x -k power 2025-09-21 03:32:37.062775 | debian-bookworm | +-w /sbin/halt -p x -k power 2025-09-21 03:32:37.062875 | debian-bookworm | + 2025-09-21 03:32:37.062978 | debian-bookworm | +## Session initiation information 2025-09-21 03:32:37.063079 | debian-bookworm | +-w /var/run/utmp -p wa -k session 2025-09-21 03:32:37.063179 | debian-bookworm | +-w /var/log/btmp -p wa -k session 2025-09-21 03:32:37.063295 | debian-bookworm | +-w /var/log/wtmp -p wa -k session 2025-09-21 03:32:37.063392 | debian-bookworm | + 2025-09-21 03:32:37.063498 | debian-bookworm | +## Discretionary Access Control (DAC) modifications 2025-09-21 03:32:37.063602 | debian-bookworm | +-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:37.063721 | debian-bookworm | +-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:37.063810 | debian-bookworm | +-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:37.063914 | debian-bookworm | +-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:37.064016 | debian-bookworm | +-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:37.064120 | debian-bookworm | +-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:37.064273 | debian-bookworm | +-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:37.064341 | debian-bookworm | +-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:37.064444 | debian-bookworm | +-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:37.064549 | debian-bookworm | +-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:37.064652 | debian-bookworm | +-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:37.064754 | debian-bookworm | +-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:37.064859 | debian-bookworm | +-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:37.064954 | debian-bookworm | + 2025-09-21 03:32:37.065062 | debian-bookworm | +# Special Rules --------------------------------------------------------------- 2025-09-21 03:32:37.065160 | debian-bookworm | + 2025-09-21 03:32:37.065276 | debian-bookworm | +## Reconnaissance 2025-09-21 03:32:37.065377 | debian-bookworm | +-w /usr/bin/whoami -p x -k recon 2025-09-21 03:32:37.065479 | debian-bookworm | +-w /usr/bin/id -p x -k recon 2025-09-21 03:32:37.065581 | debian-bookworm | +-w /bin/hostname -p x -k recon 2025-09-21 03:32:37.065683 | debian-bookworm | +-w /bin/uname -p x -k recon 2025-09-21 03:32:37.065785 | debian-bookworm | +-w /etc/issue -p r -k recon 2025-09-21 03:32:37.065886 | debian-bookworm | +-w /etc/hostname -p r -k recon 2025-09-21 03:32:37.065985 | debian-bookworm | + 2025-09-21 03:32:37.066085 | debian-bookworm | +## Suspicious activity 2025-09-21 03:32:37.066186 | debian-bookworm | +-w /usr/bin/wget -p x -k susp_activity 2025-09-21 03:32:37.066317 | debian-bookworm | +-w /usr/bin/curl -p x -k susp_activity 2025-09-21 03:32:37.066421 | debian-bookworm | +-w /usr/bin/base64 -p x -k susp_activity 2025-09-21 03:32:37.066522 | debian-bookworm | +-w /bin/nc -p x -k susp_activity 2025-09-21 03:32:37.066627 | debian-bookworm | +-w /bin/netcat -p x -k susp_activity 2025-09-21 03:32:37.066731 | debian-bookworm | +-w /usr/bin/ncat -p x -k susp_activity 2025-09-21 03:32:37.066829 | debian-bookworm | +-w /usr/bin/ss -p x -k susp_activity 2025-09-21 03:32:37.066931 | debian-bookworm | +-w /usr/bin/netstat -p x -k susp_activity 2025-09-21 03:32:37.067039 | debian-bookworm | +-w /usr/bin/ssh -p x -k susp_activity 2025-09-21 03:32:37.067135 | debian-bookworm | +-w /usr/bin/scp -p x -k susp_activity 2025-09-21 03:32:37.067246 | debian-bookworm | +-w /usr/bin/sftp -p x -k susp_activity 2025-09-21 03:32:37.067349 | debian-bookworm | +-w /usr/bin/ftp -p x -k susp_activity 2025-09-21 03:32:37.067452 | debian-bookworm | +-w /usr/bin/socat -p x -k susp_activity 2025-09-21 03:32:37.067554 | debian-bookworm | +-w /usr/bin/wireshark -p x -k susp_activity 2025-09-21 03:32:37.067655 | debian-bookworm | +-w /usr/bin/tshark -p x -k susp_activity 2025-09-21 03:32:37.067759 | debian-bookworm | +-w /usr/bin/rawshark -p x -k susp_activity 2025-09-21 03:32:37.067863 | debian-bookworm | +-w /usr/bin/rdesktop -p x -k susp_activity 2025-09-21 03:32:37.067967 | debian-bookworm | +-w /usr/local/bin/rdesktop -p x -k susp_activity 2025-09-21 03:32:37.068071 | debian-bookworm | +-w /usr/bin/wlfreerdp -p x -k susp_activity 2025-09-21 03:32:37.068174 | debian-bookworm | +-w /usr/bin/xfreerdp -p x -k susp_activity 2025-09-21 03:32:37.068290 | debian-bookworm | +-w /usr/local/bin/xfreerdp -p x -k susp_activity 2025-09-21 03:32:37.068391 | debian-bookworm | +-w /usr/bin/nmap -p x -k susp_activity 2025-09-21 03:32:37.068491 | debian-bookworm | + 2025-09-21 03:32:37.068592 | debian-bookworm | +## sssd 2025-09-21 03:32:37.068707 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/p11_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-21 03:32:37.068820 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/krb5_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-21 03:32:37.068929 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/ldap_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-21 03:32:37.069038 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/selinux_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-21 03:32:37.069145 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/proxy_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-21 03:32:37.069254 | debian-bookworm | + 2025-09-21 03:32:37.069357 | debian-bookworm | +## T1002 Data Compressed 2025-09-21 03:32:37.069457 | debian-bookworm | + 2025-09-21 03:32:37.069563 | debian-bookworm | +-w /usr/bin/zip -p x -k Data_Compressed 2025-09-21 03:32:37.069665 | debian-bookworm | +-w /usr/bin/gzip -p x -k Data_Compressed 2025-09-21 03:32:37.069766 | debian-bookworm | +-w /usr/bin/tar -p x -k Data_Compressed 2025-09-21 03:32:37.069869 | debian-bookworm | +-w /usr/bin/bzip2 -p x -k Data_Compressed 2025-09-21 03:32:37.069967 | debian-bookworm | + 2025-09-21 03:32:37.070071 | debian-bookworm | +-w /usr/bin/lzip -p x -k Data_Compressed 2025-09-21 03:32:37.070186 | debian-bookworm | +-w /usr/local/bin/lzip -p x -k Data_Compressed 2025-09-21 03:32:37.070331 | debian-bookworm | + 2025-09-21 03:32:37.070429 | debian-bookworm | +-w /usr/bin/lz4 -p x -k Data_Compressed 2025-09-21 03:32:37.070534 | debian-bookworm | +-w /usr/local/bin/lz4 -p x -k Data_Compressed 2025-09-21 03:32:37.070632 | debian-bookworm | + 2025-09-21 03:32:37.070735 | debian-bookworm | +-w /usr/bin/lzop -p x -k Data_Compressed 2025-09-21 03:32:37.070834 | debian-bookworm | +-w /usr/local/bin/lzop -p x -k Data_Compressed 2025-09-21 03:32:37.070933 | debian-bookworm | + 2025-09-21 03:32:37.071035 | debian-bookworm | +-w /usr/bin/plzip -p x -k Data_Compressed 2025-09-21 03:32:37.071138 | debian-bookworm | +-w /usr/local/bin/plzip -p x -k Data_Compressed 2025-09-21 03:32:37.071250 | debian-bookworm | + 2025-09-21 03:32:37.071354 | debian-bookworm | +-w /usr/bin/pbzip2 -p x -k Data_Compressed 2025-09-21 03:32:37.071461 | debian-bookworm | +-w /usr/local/bin/pbzip2 -p x -k Data_Compressed 2025-09-21 03:32:37.071558 | debian-bookworm | + 2025-09-21 03:32:37.071658 | debian-bookworm | +-w /usr/bin/lbzip2 -p x -k Data_Compressed 2025-09-21 03:32:37.071762 | debian-bookworm | +-w /usr/local/bin/lbzip2 -p x -k Data_Compressed 2025-09-21 03:32:37.071859 | debian-bookworm | + 2025-09-21 03:32:37.071962 | debian-bookworm | +-w /usr/bin/pixz -p x -k Data_Compressed 2025-09-21 03:32:37.072066 | debian-bookworm | +-w /usr/local/bin/pixz -p x -k Data_Compressed 2025-09-21 03:32:37.072163 | debian-bookworm | + 2025-09-21 03:32:37.072280 | debian-bookworm | +-w /usr/bin/pigz -p x -k Data_Compressed 2025-09-21 03:32:37.072382 | debian-bookworm | +-w /usr/local/bin/pigz -p x -k Data_Compressed 2025-09-21 03:32:37.072496 | debian-bookworm | +-w /usr/bin/unpigz -p x -k Data_Compressed 2025-09-21 03:32:37.072589 | debian-bookworm | +-w /usr/local/bin/unpigz -p x -k Data_Compressed 2025-09-21 03:32:37.072685 | debian-bookworm | + 2025-09-21 03:32:37.072788 | debian-bookworm | +-w /usr/bin/zstd -p x -k Data_Compressed 2025-09-21 03:32:37.072890 | debian-bookworm | +-w /usr/local/bin/zstd -p x -k Data_Compressed 2025-09-21 03:32:37.072988 | debian-bookworm | + 2025-09-21 03:32:37.073153 | debian-bookworm | +## Added to catch netcat on Ubuntu 2025-09-21 03:32:37.073200 | debian-bookworm | +-w /bin/nc.openbsd -p x -k susp_activity 2025-09-21 03:32:37.073310 | debian-bookworm | +-w /bin/nc.traditional -p x -k susp_activity 2025-09-21 03:32:37.073573 | debian-bookworm | + 2025-09-21 03:32:37.073584 | debian-bookworm | +## Sbin suspicious activity 2025-09-21 03:32:37.073626 | debian-bookworm | +-w /sbin/iptables -p x -k sbin_susp 2025-09-21 03:32:37.073709 | debian-bookworm | +-w /sbin/ip6tables -p x -k sbin_susp 2025-09-21 03:32:37.073817 | debian-bookworm | +-w /sbin/ifconfig -p x -k sbin_susp 2025-09-21 03:32:37.073918 | debian-bookworm | +-w /usr/sbin/arptables -p x -k sbin_susp 2025-09-21 03:32:37.074025 | debian-bookworm | +-w /usr/sbin/ebtables -p x -k sbin_susp 2025-09-21 03:32:37.074125 | debian-bookworm | +-w /sbin/xtables-nft-multi -p x -k sbin_susp 2025-09-21 03:32:37.074248 | debian-bookworm | +-w /usr/sbin/nft -p x -k sbin_susp 2025-09-21 03:32:37.074373 | debian-bookworm | +-w /usr/sbin/tcpdump -p x -k sbin_susp 2025-09-21 03:32:37.074476 | debian-bookworm | +-w /usr/sbin/traceroute -p x -k sbin_susp 2025-09-21 03:32:37.074575 | debian-bookworm | +-w /usr/sbin/ufw -p x -k sbin_susp 2025-09-21 03:32:37.074684 | debian-bookworm | + 2025-09-21 03:32:37.074779 | debian-bookworm | +### kde4 2025-09-21 03:32:37.074892 | debian-bookworm | +-a always,exit -F path=/usr/libexec/kde4/kpac_dhcp_helper -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-21 03:32:37.075000 | debian-bookworm | +-a always,exit -F path=/usr/libexec/kde4/kdesud -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-21 03:32:37.075097 | debian-bookworm | + 2025-09-21 03:32:37.075199 | debian-bookworm | +## dbus-send invocation 2025-09-21 03:32:37.075317 | debian-bookworm | +### may indicate privilege escalation CVE-2021-3560 2025-09-21 03:32:37.075421 | debian-bookworm | +-w /usr/bin/dbus-send -p x -k dbus_send 2025-09-21 03:32:37.075524 | debian-bookworm | +-w /usr/bin/gdbus -p x -k gdubs_call 2025-09-21 03:32:37.075623 | debian-bookworm | + 2025-09-21 03:32:37.075728 | debian-bookworm | +## pkexec invocation 2025-09-21 03:32:37.075834 | debian-bookworm | +### may indicate privilege escalation CVE-2021-4034 2025-09-21 03:32:37.075934 | debian-bookworm | +-w /usr/bin/pkexec -p x -k pkexec 2025-09-21 03:32:37.076035 | debian-bookworm | + 2025-09-21 03:32:37.076137 | debian-bookworm | +## Suspicious shells 2025-09-21 03:32:37.076278 | debian-bookworm | +-w /bin/ash -p x -k susp_shell 2025-09-21 03:32:37.076355 | debian-bookworm | +-w /bin/csh -p x -k susp_shell 2025-09-21 03:32:37.076459 | debian-bookworm | +-w /bin/fish -p x -k susp_shell 2025-09-21 03:32:37.076570 | debian-bookworm | +-w /bin/tcsh -p x -k susp_shell 2025-09-21 03:32:37.076666 | debian-bookworm | +-w /bin/tclsh -p x -k susp_shell 2025-09-21 03:32:37.076874 | debian-bookworm | +-w /bin/xonsh -p x -k susp_shell 2025-09-21 03:32:37.076887 | debian-bookworm | +-w /usr/local/bin/xonsh -p x -k susp_shell 2025-09-21 03:32:37.077772 | debian-bookworm | +-w /bin/open -p x -k susp_shell 2025-09-21 03:32:37.077804 | debian-bookworm | +-w /bin/rbash -p x -k susp_shell 2025-09-21 03:32:37.077811 | debian-bookworm | + 2025-09-21 03:32:37.077818 | debian-bookworm | +# Web Server Actvity 2025-09-21 03:32:37.077825 | debian-bookworm | +## Change the number "33" to the ID of your WebServer user. Default: www-data:x:33:33 2025-09-21 03:32:37.077831 | debian-bookworm | +-a always,exit -F arch=b64 -S execve -F euid=33 -k detect_execve_www 2025-09-21 03:32:37.077838 | debian-bookworm | + 2025-09-21 03:32:37.077844 | debian-bookworm | +### https://clustershell.readthedocs.io/ 2025-09-21 03:32:37.077851 | debian-bookworm | +-w /bin/clush -p x -k susp_shell 2025-09-21 03:32:37.077863 | debian-bookworm | +-w /usr/local/bin/clush -p x -k susp_shell 2025-09-21 03:32:37.077955 | debian-bookworm | +-w /etc/clustershell/clush.conf -p x -k susp_shell 2025-09-21 03:32:37.078050 | debian-bookworm | + 2025-09-21 03:32:37.078153 | debian-bookworm | +### https://github.com/tmux/tmux 2025-09-21 03:32:37.078324 | debian-bookworm | +-w /bin/tmux -p x -k susp_shell 2025-09-21 03:32:37.078393 | debian-bookworm | +-w /usr/local/bin/tmux -p x -k susp_shell 2025-09-21 03:32:37.078491 | debian-bookworm | + 2025-09-21 03:32:37.078595 | debian-bookworm | +## Shell/profile configurations 2025-09-21 03:32:37.078699 | debian-bookworm | +-w /etc/profile.d/ -p wa -k shell_profiles 2025-09-21 03:32:37.078803 | debian-bookworm | +-w /etc/profile -p wa -k shell_profiles 2025-09-21 03:32:37.078908 | debian-bookworm | +-w /etc/shells -p wa -k shell_profiles 2025-09-21 03:32:37.079011 | debian-bookworm | +-w /etc/bashrc -p wa -k shell_profiles 2025-09-21 03:32:37.079133 | debian-bookworm | +-w /etc/csh.cshrc -p wa -k shell_profiles 2025-09-21 03:32:37.079217 | debian-bookworm | +-w /etc/csh.login -p wa -k shell_profiles 2025-09-21 03:32:37.079335 | debian-bookworm | +-w /etc/fish/ -p wa -k shell_profiles 2025-09-21 03:32:37.079437 | debian-bookworm | +-w /etc/zsh/ -p wa -k shell_profiles 2025-09-21 03:32:37.079534 | debian-bookworm | + 2025-09-21 03:32:37.079637 | debian-bookworm | +### https://github.com/xxh/xxh 2025-09-21 03:32:37.079739 | debian-bookworm | +-w /usr/local/bin/xxh.bash -p x -k susp_shell 2025-09-21 03:32:37.079841 | debian-bookworm | +-w /usr/local/bin/xxh.xsh -p x -k susp_shell 2025-09-21 03:32:37.079942 | debian-bookworm | +-w /usr/local/bin/xxh.zsh -p x -k susp_shell 2025-09-21 03:32:37.080038 | debian-bookworm | + 2025-09-21 03:32:37.080140 | debian-bookworm | +## Injection 2025-09-21 03:32:37.080257 | debian-bookworm | +### These rules watch for code injection by the ptrace facility. 2025-09-21 03:32:37.080364 | debian-bookworm | +### This could indicate someone trying to do something bad or just debugging 2025-09-21 03:32:37.080468 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x4 -k code_injection 2025-09-21 03:32:37.080572 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x5 -k data_injection 2025-09-21 03:32:37.080679 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x6 -k register_injection 2025-09-21 03:32:37.080784 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -k tracing 2025-09-21 03:32:37.080880 | debian-bookworm | + 2025-09-21 03:32:37.080986 | debian-bookworm | +## Anonymous File Creation 2025-09-21 03:32:37.081090 | debian-bookworm | +### These rules watch the use of memfd_create 2025-09-21 03:32:37.081209 | debian-bookworm | +### "memfd_create" creates anonymous file and returns a file descriptor to access it 2025-09-21 03:32:37.081321 | debian-bookworm | +### When combined with "fexecve" can be used to stealthily run binaries in memory without touching disk 2025-09-21 03:32:37.081421 | debian-bookworm | +-a always,exit -F arch=b64 -S memfd_create -F key=anon_file_create 2025-09-21 03:32:37.081521 | debian-bookworm | + 2025-09-21 03:32:37.081625 | debian-bookworm | +## Privilege Abuse 2025-09-21 03:32:37.081735 | debian-bookworm | +### The purpose of this rule is to detect when an admin may be abusing power by looking in user's home dir. 2025-09-21 03:32:37.081843 | debian-bookworm | +-a always,exit -F dir=/home -F uid=0 -F auid>=1000 -F auid!=-1 -C auid!=obj_uid -k power_abuse 2025-09-21 03:32:37.081938 | debian-bookworm | + 2025-09-21 03:32:37.082040 | debian-bookworm | +# Socket Creations 2025-09-21 03:32:37.082143 | debian-bookworm | +# will catch both IPv4 and IPv6 2025-09-21 03:32:37.082250 | debian-bookworm | + 2025-09-21 03:32:37.082463 | debian-bookworm | +-a always,exit -F arch=b32 -S socket -F a0=2 -k network_socket_created 2025-09-21 03:32:37.082477 | debian-bookworm | +-a always,exit -F arch=b64 -S socket -F a0=2 -k network_socket_created 2025-09-21 03:32:37.082580 | debian-bookworm | + 2025-09-21 03:32:37.082693 | debian-bookworm | +-a always,exit -F arch=b32 -S socket -F a0=10 -k network_socket_created 2025-09-21 03:32:37.082785 | debian-bookworm | +-a always,exit -F arch=b64 -S socket -F a0=10 -k network_socket_created 2025-09-21 03:32:37.082879 | debian-bookworm | + 2025-09-21 03:32:37.082979 | debian-bookworm | +# Software Management --------------------------------------------------------- 2025-09-21 03:32:37.083080 | debian-bookworm | + 2025-09-21 03:32:37.083186 | debian-bookworm | +# RPM (Redhat/CentOS) 2025-09-21 03:32:37.083298 | debian-bookworm | +-w /usr/bin/rpm -p x -k software_mgmt 2025-09-21 03:32:37.083400 | debian-bookworm | +-w /usr/bin/yum -p x -k software_mgmt 2025-09-21 03:32:37.083514 | debian-bookworm | + 2025-09-21 03:32:37.083606 | debian-bookworm | +# DNF (Fedora/RedHat 8/CentOS 8) 2025-09-21 03:32:37.083706 | debian-bookworm | +-w /usr/bin/dnf -p x -k software_mgmt 2025-09-21 03:32:37.083806 | debian-bookworm | + 2025-09-21 03:32:37.083908 | debian-bookworm | +# YAST/Zypper/RPM (SuSE) 2025-09-21 03:32:37.084013 | debian-bookworm | +-w /sbin/yast -p x -k software_mgmt 2025-09-21 03:32:37.084192 | debian-bookworm | +-w /sbin/yast2 -p x -k software_mgmt 2025-09-21 03:32:37.084218 | debian-bookworm | +-w /bin/rpm -p x -k software_mgmt 2025-09-21 03:32:37.084338 | debian-bookworm | +-w /usr/bin/zypper -k software_mgmt 2025-09-21 03:32:37.084501 | debian-bookworm | + 2025-09-21 03:32:37.084562 | debian-bookworm | +# DPKG / APT-GET (Debian/Ubuntu) 2025-09-21 03:32:37.084651 | debian-bookworm | +-w /usr/bin/dpkg -p x -k software_mgmt 2025-09-21 03:32:37.084817 | debian-bookworm | +-w /usr/bin/apt -p x -k software_mgmt 2025-09-21 03:32:37.084921 | debian-bookworm | +-w /usr/bin/apt-add-repository -p x -k software_mgmt 2025-09-21 03:32:37.085023 | debian-bookworm | +-w /usr/bin/apt-get -p x -k software_mgmt 2025-09-21 03:32:37.085126 | debian-bookworm | +-w /usr/bin/aptitude -p x -k software_mgmt 2025-09-21 03:32:37.085250 | debian-bookworm | +-w /usr/bin/wajig -p x -k software_mgmt 2025-09-21 03:32:37.085344 | debian-bookworm | +-w /usr/bin/snap -p x -k software_mgmt 2025-09-21 03:32:37.085441 | debian-bookworm | + 2025-09-21 03:32:37.085578 | debian-bookworm | +# PIP(3) (Python installs) 2025-09-21 03:32:37.085649 | debian-bookworm | +-w /usr/bin/pip -p x -k third_party_software_mgmt 2025-09-21 03:32:37.085815 | debian-bookworm | +-w /usr/local/bin/pip -p x -k third_party_software_mgmt 2025-09-21 03:32:37.090526 | debian-bookworm | +-w /usr/bin/pip3 -p x -k third_party_software_mgmt 2025-09-21 03:32:37.090559 | debian-bookworm | +-w /usr/local/bin/pip3 -p x -k third_party_software_mgmt 2025-09-21 03:32:37.090564 | debian-bookworm | +-w /usr/bin/pipx -p x -k third_party_software_mgmt 2025-09-21 03:32:37.090568 | debian-bookworm | +-w /usr/local/bin/pipx -p x -k third_party_software_mgmt 2025-09-21 03:32:37.090572 | debian-bookworm | + 2025-09-21 03:32:37.090577 | debian-bookworm | +# npm 2025-09-21 03:32:37.090581 | debian-bookworm | +## T1072 third party software 2025-09-21 03:32:37.090585 | debian-bookworm | +## https://www.npmjs.com 2025-09-21 03:32:37.090589 | debian-bookworm | +## https://docs.npmjs.com/cli/v6/commands/npm-audit 2025-09-21 03:32:37.090593 | debian-bookworm | +-w /usr/bin/npm -p x -k third_party_software_mgmt 2025-09-21 03:32:37.090597 | debian-bookworm | + 2025-09-21 03:32:37.090601 | debian-bookworm | +# Comprehensive Perl Archive Network (CPAN) (CPAN installs) 2025-09-21 03:32:37.090605 | debian-bookworm | +## T1072 third party software 2025-09-21 03:32:37.090609 | debian-bookworm | +## https://www.cpan.org 2025-09-21 03:32:37.090613 | debian-bookworm | +-w /usr/bin/cpan -p x -k third_party_software_mgmt 2025-09-21 03:32:37.090617 | debian-bookworm | + 2025-09-21 03:32:37.090621 | debian-bookworm | +# Ruby (RubyGems installs) 2025-09-21 03:32:37.090624 | debian-bookworm | +## T1072 third party software 2025-09-21 03:32:37.090628 | debian-bookworm | +## https://rubygems.org 2025-09-21 03:32:37.090632 | debian-bookworm | +-w /usr/bin/gem -p x -k third_party_software_mgmt 2025-09-21 03:32:37.090635 | debian-bookworm | + 2025-09-21 03:32:37.090639 | debian-bookworm | +# LuaRocks (Lua installs) 2025-09-21 03:32:37.090643 | debian-bookworm | +## T1072 third party software 2025-09-21 03:32:37.090647 | debian-bookworm | +## https://luarocks.org 2025-09-21 03:32:37.090650 | debian-bookworm | +-w /usr/bin/luarocks -p x -k third_party_software_mgmt 2025-09-21 03:32:37.090654 | debian-bookworm | + 2025-09-21 03:32:37.090658 | debian-bookworm | +# Pacman (Arch Linux) 2025-09-21 03:32:37.090662 | debian-bookworm | +## https://wiki.archlinux.org/title/Pacman 2025-09-21 03:32:37.090666 | debian-bookworm | +## T1072 third party software 2025-09-21 03:32:37.090670 | debian-bookworm | +-w /etc/pacman.conf -p x -k third_party_software_mgmt 2025-09-21 03:32:37.090674 | debian-bookworm | +-w /etc/pacman.d -p x -k third_party_software_mgmt 2025-09-21 03:32:37.090678 | debian-bookworm | + 2025-09-21 03:32:37.090681 | debian-bookworm | +# Special Software ------------------------------------------------------------ 2025-09-21 03:32:37.090693 | debian-bookworm | + 2025-09-21 03:32:37.090697 | debian-bookworm | +## GDS specific secrets 2025-09-21 03:32:37.090701 | debian-bookworm | +-w /etc/puppet/ssl -p wa -k puppet_ssl 2025-09-21 03:32:37.090705 | debian-bookworm | + 2025-09-21 03:32:37.090709 | debian-bookworm | +## IBM Bigfix BESClient 2025-09-21 03:32:37.090712 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/opt/BESClient -F success=0 -k soft_besclient 2025-09-21 03:32:37.090716 | debian-bookworm | +-w /var/opt/BESClient/ -p wa -k soft_besclient 2025-09-21 03:32:37.090720 | debian-bookworm | + 2025-09-21 03:32:37.090724 | debian-bookworm | +## CHEF https://www.chef.io/chef/ 2025-09-21 03:32:37.090728 | debian-bookworm | +-w /etc/chef -p wa -k soft_chef 2025-09-21 03:32:37.090732 | debian-bookworm | + 2025-09-21 03:32:37.090735 | debian-bookworm | +## Salt 2025-09-21 03:32:37.090739 | debian-bookworm | +## https://saltproject.io/ 2025-09-21 03:32:37.090743 | debian-bookworm | +## https://docs.saltproject.io/en/latest/ref/configuration/master.html 2025-09-21 03:32:37.090752 | debian-bookworm | +-w /etc/salt -p wa -k soft_salt 2025-09-21 03:32:37.090756 | debian-bookworm | +-w /usr/local/etc/salt -p wa -k soft_salt 2025-09-21 03:32:37.090811 | debian-bookworm | + 2025-09-21 03:32:37.090885 | debian-bookworm | +## Otter 2025-09-21 03:32:37.090983 | debian-bookworm | +## https://inedo.com/otter 2025-09-21 03:32:37.091088 | debian-bookworm | +-w /etc/otter -p wa -k soft_otter 2025-09-21 03:32:37.091186 | debian-bookworm | + 2025-09-21 03:32:37.091329 | debian-bookworm | +## T1081 Credentials In Files 2025-09-21 03:32:37.091432 | debian-bookworm | +-w /usr/bin/grep -p x -k string_search 2025-09-21 03:32:37.091536 | debian-bookworm | +-w /usr/bin/egrep -p x -k string_search 2025-09-21 03:32:37.091717 | debian-bookworm | +-w /usr/bin/ugrep -p x -k string_search 2025-09-21 03:32:37.091914 | debian-bookworm | +### macOS 2025-09-21 03:32:37.092070 | debian-bookworm | +-w /usr/local/bin/grep -p x -k string_search 2025-09-21 03:32:37.092273 | debian-bookworm | +-w /usr/local/bin/egrep -p x -k string_search 2025-09-21 03:32:37.092464 | debian-bookworm | +-w /usr/local/bin/ugrep -p x -k string_search 2025-09-21 03:32:37.092637 | debian-bookworm | + 2025-09-21 03:32:37.092816 | debian-bookworm | +### https://github.com/tmbinc/bgrep 2025-09-21 03:32:37.092998 | debian-bookworm | +-w /usr/bin/bgrep -p x -k string_search 2025-09-21 03:32:37.093175 | debian-bookworm | +### macOS 2025-09-21 03:32:37.093369 | debian-bookworm | +-w /usr/local/bin/bgrep -p x -k string_search 2025-09-21 03:32:37.093541 | debian-bookworm | + 2025-09-21 03:32:37.093722 | debian-bookworm | +### https://github.com/BurntSushi/ripgrep 2025-09-21 03:32:37.093898 | debian-bookworm | +-w /usr/bin/rg -p x -k string_search 2025-09-21 03:32:37.094081 | debian-bookworm | +### macOS 2025-09-21 03:32:37.094266 | debian-bookworm | +-w /usr/local/bin/rg -p x -k string_search 2025-09-21 03:32:37.094473 | debian-bookworm | + 2025-09-21 03:32:37.094652 | debian-bookworm | +### https://github.com/awgn/cgrep 2025-09-21 03:32:37.094823 | debian-bookworm | + 2025-09-21 03:32:37.095003 | debian-bookworm | +-w /usr/bin/cgrep -p x -k string_search 2025-09-21 03:32:37.095180 | debian-bookworm | +### macOS 2025-09-21 03:32:37.095379 | debian-bookworm | +-w /usr/local/bin/cgrep -p x -k string_search 2025-09-21 03:32:37.095554 | debian-bookworm | + 2025-09-21 03:32:37.095736 | debian-bookworm | +### https://github.com/jpr5/ngrep 2025-09-21 03:32:37.095910 | debian-bookworm | +-w /usr/bin/ngrep -p x -k string_search 2025-09-21 03:32:37.096087 | debian-bookworm | +### macOS 2025-09-21 03:32:37.096310 | debian-bookworm | +-w /usr/local/bin/ngrep -p x -k string_search 2025-09-21 03:32:37.096455 | debian-bookworm | + 2025-09-21 03:32:37.096633 | debian-bookworm | +### https://github.com/vrothberg/vgrep 2025-09-21 03:32:37.096814 | debian-bookworm | +-w /usr/bin/vgrep -p x -k string_search 2025-09-21 03:32:37.096986 | debian-bookworm | +### macOS 2025-09-21 03:32:37.097167 | debian-bookworm | +-w /usr/local/bin/vgrep -p x -k string_search 2025-09-21 03:32:37.097405 | debian-bookworm | + 2025-09-21 03:32:37.097555 | debian-bookworm | +### https://github.com/monochromegane/the_platinum_searcher 2025-09-21 03:32:37.097734 | debian-bookworm | +-w /usr/bin/pt -p x -k string_search 2025-09-21 03:32:37.097912 | debian-bookworm | +### macOS 2025-09-21 03:32:37.098093 | debian-bookworm | +-w /usr/local/bin/pt -p x -k string_search 2025-09-21 03:32:37.098310 | debian-bookworm | + 2025-09-21 03:32:37.098497 | debian-bookworm | +### https://github.com/gvansickle/ucg 2025-09-21 03:32:37.098672 | debian-bookworm | +-w /usr/bin/ucg -p x -k string_search 2025-09-21 03:32:37.098854 | debian-bookworm | +### macOS 2025-09-21 03:32:37.099036 | debian-bookworm | +-w /usr/local/bin/ucg -p x -k string_search 2025-09-21 03:32:37.099205 | debian-bookworm | + 2025-09-21 03:32:37.099435 | debian-bookworm | +### https://github.com/ggreer/the_silver_searcher 2025-09-21 03:32:37.099615 | debian-bookworm | +-w /usr/bin/ag -p x -k string_search 2025-09-21 03:32:37.099790 | debian-bookworm | +### macOS 2025-09-21 03:32:37.099974 | debian-bookworm | +-w /usr/local/bin/ag -p x -k string_search 2025-09-21 03:32:37.100145 | debian-bookworm | + 2025-09-21 03:32:37.100341 | debian-bookworm | +### https://github.com/beyondgrep/ack3 2025-09-21 03:32:37.100524 | debian-bookworm | +### https://beyondgrep.com 2025-09-21 03:32:37.100699 | debian-bookworm | +-w /usr/bin/ack -p x -k string_search 2025-09-21 03:32:37.100881 | debian-bookworm | +-w /usr/local/bin/ack -p x -k string_search 2025-09-21 03:32:37.101057 | debian-bookworm | +-w /usr/bin/semgrep -p x -k string_search 2025-09-21 03:32:37.101265 | debian-bookworm | +### macOS 2025-09-21 03:32:37.101422 | debian-bookworm | +-w /usr/local/bin/semgrep -p x -k string_search 2025-09-21 03:32:37.101593 | debian-bookworm | + 2025-09-21 03:32:37.101785 | debian-bookworm | +## Docker 2025-09-21 03:32:37.101939 | debian-bookworm | +-w /usr/bin/dockerd -k docker 2025-09-21 03:32:37.102113 | debian-bookworm | +-w /usr/bin/docker -k docker 2025-09-21 03:32:37.102347 | debian-bookworm | +-w /usr/bin/docker-containerd -k docker 2025-09-21 03:32:37.102524 | debian-bookworm | +-w /usr/bin/docker-runc -k docker 2025-09-21 03:32:37.102700 | debian-bookworm | +-w /var/lib/docker -p wa -k docker 2025-09-21 03:32:37.102869 | debian-bookworm | +-w /etc/docker -k docker 2025-09-21 03:32:37.103032 | debian-bookworm | +-w /etc/sysconfig/docker -k docker 2025-09-21 03:32:37.103197 | debian-bookworm | +-w /etc/sysconfig/docker-storage -k docker 2025-09-21 03:32:37.103371 | debian-bookworm | +-w /usr/lib/systemd/system/docker.service -k docker 2025-09-21 03:32:37.103535 | debian-bookworm | +-w /usr/lib/systemd/system/docker.socket -k docker 2025-09-21 03:32:37.103696 | debian-bookworm | + 2025-09-21 03:32:37.103859 | debian-bookworm | +## Virtualization stuff 2025-09-21 03:32:37.104027 | debian-bookworm | +-w /usr/bin/qemu-system-x86_64 -p x -k qemu-system-x86_64 2025-09-21 03:32:37.104189 | debian-bookworm | +-w /usr/bin/qemu-img -p x -k qemu-img 2025-09-21 03:32:37.104370 | debian-bookworm | +-w /usr/bin/qemu-kvm -p x -k qemu-kvm 2025-09-21 03:32:37.104603 | debian-bookworm | +-w /usr/bin/qemu -p x -k qemu 2025-09-21 03:32:37.104772 | debian-bookworm | +-w /usr/bin/virtualbox -p x -k virtualbox 2025-09-21 03:32:37.104940 | debian-bookworm | +-w /usr/bin/virt-manager -p x -k virt-manager 2025-09-21 03:32:37.105111 | debian-bookworm | +-w /usr/bin/VBoxManage -p x -k VBoxManage 2025-09-21 03:32:37.105288 | debian-bookworm | + 2025-09-21 03:32:37.105450 | debian-bookworm | +#### VirtualBox on macOS 2025-09-21 03:32:37.105607 | debian-bookworm | + 2025-09-21 03:32:37.105770 | debian-bookworm | +-w /usr/local/bin/VirtualBox -p x -k virt_tool 2025-09-21 03:32:37.105935 | debian-bookworm | +-w /usr/local/bin/VirtualBoxVM -p x -k virt_tool 2025-09-21 03:32:37.106130 | debian-bookworm | +-w /usr/local/bin/VBoxManage -p x -k virt_tool 2025-09-21 03:32:37.106338 | debian-bookworm | +-w /usr/local/bin/VBoxVRDP -p x -k virt_tool 2025-09-21 03:32:37.106498 | debian-bookworm | +-w /usr/local/bin/VBoxHeadless -p x -k virt_tool 2025-09-21 03:32:37.106644 | debian-bookworm | +-w /usr/local/bin/vboxwebsrv -p x -k virt_tool 2025-09-21 03:32:37.106792 | debian-bookworm | +-w /usr/local/bin/VBoxBugReport -p x -k virt_tool 2025-09-21 03:32:37.106938 | debian-bookworm | +-w /usr/local/bin/VBoxBalloonCtrl -p x -k virt_tool 2025-09-21 03:32:37.107080 | debian-bookworm | +-w /usr/local/bin/VBoxAutostart -p x -k virt_tool 2025-09-21 03:32:37.107240 | debian-bookworm | +-w /usr/local/bin/VBoxDTrace -p x -k virt_tool 2025-09-21 03:32:37.107391 | debian-bookworm | +-w /usr/local/bin/vbox-img -p x -k virt_tool 2025-09-21 03:32:37.107539 | debian-bookworm | +-w /Library/LaunchDaemons/org.virtualbox.startup.plist -p x -k virt_tool 2025-09-21 03:32:37.107692 | debian-bookworm | +-w /Library/Application Support/VirtualBox/LaunchDaemons/ -p x -k virt_tool 2025-09-21 03:32:37.107840 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxDrv.kext/ -p x -k virt_tool 2025-09-21 03:32:37.107991 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxUSB.kext/ -p x -k virt_tool 2025-09-21 03:32:37.108133 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxNetFlt.kext/ -p x -k virt_tool 2025-09-21 03:32:37.108313 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxNetAdp.kext/ -p x -k virt_tool 2025-09-21 03:32:37.108436 | debian-bookworm | + 2025-09-21 03:32:37.108591 | debian-bookworm | +### Parallels Desktop on macOS 2025-09-21 03:32:37.108729 | debian-bookworm | + 2025-09-21 03:32:37.108875 | debian-bookworm | +-w /usr/local/bin/prl_convert -p x -k virt_tool 2025-09-21 03:32:37.109025 | debian-bookworm | +-w /usr/local/bin/prl_disk_tool -p x -k virt_tool 2025-09-21 03:32:37.109166 | debian-bookworm | +-w /usr/local/bin/prl_perf_ctl -p x -k virt_tool 2025-09-21 03:32:37.109329 | debian-bookworm | +-w /usr/local/bin/prlcore2dmp -p x -k virt_tool 2025-09-21 03:32:37.109481 | debian-bookworm | +-w /usr/local/bin/prlctl -p x -k virt_tool 2025-09-21 03:32:37.109629 | debian-bookworm | +-w /usr/local/bin/prlexec -p x -k virt_tool 2025-09-21 03:32:37.109774 | debian-bookworm | +-w /usr/local/bin/prlsrvctl -p x -k virt_tool 2025-09-21 03:32:37.109923 | debian-bookworm | +-w /Library/Preferences/Parallels -p x -k virt_tool 2025-09-21 03:32:37.110061 | debian-bookworm | + 2025-09-21 03:32:37.110203 | debian-bookworm | +### qemu on macOS 2025-09-21 03:32:37.110403 | debian-bookworm | + 2025-09-21 03:32:37.110545 | debian-bookworm | +-w /usr/local/bin/qemu-edid -p x -k virt_tool 2025-09-21 03:32:37.110693 | debian-bookworm | +-w /usr/local/bin/qemu-img -p x -k virt_tool 2025-09-21 03:32:37.110823 | debian-bookworm | +-w /usr/local/bin/qemu-io -p x -k virt_tool 2025-09-21 03:32:37.110951 | debian-bookworm | +-w /usr/local/bin/qemu-nbd -p x -k virt_tool 2025-09-21 03:32:37.111083 | debian-bookworm | +-w /usr/local/bin/qemu-system-x86_64 -p x -k virt_tool 2025-09-21 03:32:37.111209 | debian-bookworm | + 2025-09-21 03:32:37.111350 | debian-bookworm | +## Kubelet 2025-09-21 03:32:37.111474 | debian-bookworm | +-w /usr/bin/kubelet -k kubelet 2025-09-21 03:32:37.111602 | debian-bookworm | + 2025-09-21 03:32:37.111731 | debian-bookworm | +# ipc system call 2025-09-21 03:32:37.111859 | debian-bookworm | +# /usr/include/linux/ipc.h 2025-09-21 03:32:37.111985 | debian-bookworm | + 2025-09-21 03:32:37.112115 | debian-bookworm | +## msgctl 2025-09-21 03:32:37.112276 | debian-bookworm | +#-a always,exit -S ipc -F a0=14 -k Inter-Process_Communication 2025-09-21 03:32:37.112410 | debian-bookworm | +## msgget 2025-09-21 03:32:37.112541 | debian-bookworm | +#-a always,exit -S ipc -F a0=13 -k Inter-Process_Communication 2025-09-21 03:32:37.112673 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2025-09-21 03:32:37.112806 | debian-bookworm | +-a always,exit -F arch=b64 -S msgctl -k Inter-Process_Communication 2025-09-21 03:32:37.112931 | debian-bookworm | +-a always,exit -F arch=b64 -S msgget -k Inter-Process_Communication 2025-09-21 03:32:37.113051 | debian-bookworm | + 2025-09-21 03:32:37.113172 | debian-bookworm | +## semctl 2025-09-21 03:32:37.113320 | debian-bookworm | +#-a always,exit -S ipc -F a0=3 -k Inter-Process_Communication 2025-09-21 03:32:37.113441 | debian-bookworm | +## semget 2025-09-21 03:32:37.113568 | debian-bookworm | +#-a always,exit -S ipc -F a0=2 -k Inter-Process_Communication 2025-09-21 03:32:37.113688 | debian-bookworm | +## semop 2025-09-21 03:32:37.113813 | debian-bookworm | +#-a always,exit -S ipc -F a0=1 -k Inter-Process_Communication 2025-09-21 03:32:37.113937 | debian-bookworm | +## semtimedop 2025-09-21 03:32:37.114062 | debian-bookworm | +#-a always,exit -S ipc -F a0=4 -k Inter-Process_Communication 2025-09-21 03:32:37.114187 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2025-09-21 03:32:37.114355 | debian-bookworm | +-a always,exit -F arch=b64 -S semctl -k Inter-Process_Communication 2025-09-21 03:32:37.114482 | debian-bookworm | +-a always,exit -F arch=b64 -S semget -k Inter-Process_Communication 2025-09-21 03:32:37.114610 | debian-bookworm | +-a always,exit -F arch=b64 -S semop -k Inter-Process_Communication 2025-09-21 03:32:37.114736 | debian-bookworm | +-a always,exit -F arch=b64 -S semtimedop -k Inter-Process_Communication 2025-09-21 03:32:37.114855 | debian-bookworm | + 2025-09-21 03:32:37.114977 | debian-bookworm | +## shmctl 2025-09-21 03:32:37.115101 | debian-bookworm | +#-a always,exit -S ipc -F a0=24 -k Inter-Process_Communication 2025-09-21 03:32:37.115263 | debian-bookworm | +## shmget 2025-09-21 03:32:37.115360 | debian-bookworm | +#-a always,exit -S ipc -F a0=23 -k Inter-Process_Communication 2025-09-21 03:32:37.115484 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2025-09-21 03:32:37.115611 | debian-bookworm | +-a always,exit -F arch=b64 -S shmctl -k Inter-Process_Communication 2025-09-21 03:32:37.115734 | debian-bookworm | +-a always,exit -F arch=b64 -S shmget -k Inter-Process_Communication 2025-09-21 03:32:37.115853 | debian-bookworm | + 2025-09-21 03:32:37.115980 | debian-bookworm | +# High Volume Events ---------------------------------------------------------- 2025-09-21 03:32:37.116098 | debian-bookworm | + 2025-09-21 03:32:37.116241 | debian-bookworm | +## Disable these rules if they create too many events in your environment 2025-09-21 03:32:37.116378 | debian-bookworm | + 2025-09-21 03:32:37.116503 | debian-bookworm | +## Common Shells 2025-09-21 03:32:37.116627 | debian-bookworm | +-w /bin/bash -p x -k susp_shell 2025-09-21 03:32:37.116751 | debian-bookworm | +-w /bin/dash -p x -k susp_shell 2025-09-21 03:32:37.116862 | debian-bookworm | +-w /bin/busybox -p x -k susp_shell 2025-09-21 03:32:37.116995 | debian-bookworm | +-w /bin/zsh -p x -k susp_shell 2025-09-21 03:32:37.117082 | debian-bookworm | +-w /bin/sh -p x -k susp_shell 2025-09-21 03:32:37.117196 | debian-bookworm | +-w /bin/ksh -p x -k susp_shell 2025-09-21 03:32:37.117314 | debian-bookworm | + 2025-09-21 03:32:37.117426 | debian-bookworm | +## Root command executions 2025-09-21 03:32:37.117548 | debian-bookworm | +-a always,exit -F arch=b64 -F euid=0 -F auid>=1000 -F auid!=-1 -S execve -k rootcmd 2025-09-21 03:32:37.117656 | debian-bookworm | + 2025-09-21 03:32:37.117765 | debian-bookworm | +## File Deletion Events by User 2025-09-21 03:32:37.117885 | debian-bookworm | +-a always,exit -F arch=b64 -S rmdir -S unlink -S unlinkat -S rename -S renameat -F auid>=1000 -F auid!=-1 -k delete 2025-09-21 03:32:37.117993 | debian-bookworm | + 2025-09-21 03:32:37.118105 | debian-bookworm | +## File Access 2025-09-21 03:32:37.118215 | debian-bookworm | +### Unauthorized Access (unsuccessful) 2025-09-21 03:32:37.118366 | debian-bookworm | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k file_access 2025-09-21 03:32:37.118486 | debian-bookworm | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k file_access 2025-09-21 03:32:37.118597 | debian-bookworm | + 2025-09-21 03:32:37.118712 | debian-bookworm | +### Unsuccessful Creation 2025-09-21 03:32:37.118830 | debian-bookworm | +-a always,exit -F arch=b64 -S mkdir,creat,link,symlink,mknod,mknodat,linkat,symlinkat -F exit=-EACCES -k file_creation 2025-09-21 03:32:37.118946 | debian-bookworm | +-a always,exit -F arch=b64 -S mkdir,link,symlink,mkdirat -F exit=-EPERM -k file_creation 2025-09-21 03:32:37.119055 | debian-bookworm | + 2025-09-21 03:32:37.119187 | debian-bookworm | +### Unsuccessful Modification 2025-09-21 03:32:37.119315 | debian-bookworm | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EACCES -k file_modification 2025-09-21 03:32:37.119433 | debian-bookworm | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EPERM -k file_modification 2025-09-21 03:32:37.119535 | debian-bookworm | + 2025-09-21 03:32:37.119636 | debian-bookworm | +## 32bit API Exploitation 2025-09-21 03:32:37.119740 | debian-bookworm | +### If you are on a 64 bit platform, everything _should_ be running 2025-09-21 03:32:37.119842 | debian-bookworm | +### in 64 bit mode. This rule will detect any use of the 32 bit syscalls 2025-09-21 03:32:37.119948 | debian-bookworm | +### because this might be a sign of someone exploiting a hole in the 32 2025-09-21 03:32:37.120049 | debian-bookworm | +### bit API. 2025-09-21 03:32:37.120151 | debian-bookworm | +-a always,exit -F arch=b32 -S all -k 32bit_api 2025-09-21 03:32:37.120288 | debian-bookworm | + 2025-09-21 03:32:37.120364 | debian-bookworm | +# Make The Configuration Immutable -------------------------------------------- 2025-09-21 03:32:37.120464 | debian-bookworm | + 2025-09-21 03:32:37.120563 | debian-bookworm | +##-e 2 2025-09-21 03:32:37.120660 | debian-bookworm | 2025-09-21 03:32:37.120918 | debian-bookworm | changed: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": true, "checksum": "9f99ce5c4f891fbf3e2bce06ed4cb97fb9e01f41", "dest": "/etc/audit/rules.d/20-neo23x0.rules", "gid": 0, "group": "root", "item": "20-neo23x0.rules", "md5sum": "6ac57206fd77de34805c3f4d50ef8b1d", "mode": "0644", "owner": "root", "size": 27367, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1758425555.9729936-2570-55302754973090/.source.rules", "state": "file", "uid": 0} 2025-09-21 03:32:37.121007 | debian-bookworm | 2025-09-21 03:32:37.121113 | debian-bookworm | TASK [auditd : Manage auditd service] ****************************************** 2025-09-21 03:32:36.971042 | ubuntu-jammy | --- before 2025-09-21 03:32:36.971095 | ubuntu-jammy | +++ after: /home/zuul/.ansible/tmp/ansible-local-1432jsy_g9c8/tmpdtyan6xg/20-neo23x0.rules.j2 2025-09-21 03:32:36.971108 | ubuntu-jammy | @@ -0,0 +1,750 @@ 2025-09-21 03:32:36.971215 | ubuntu-jammy | +# ___ ___ __ __ 2025-09-21 03:32:36.971391 | ubuntu-jammy | +# / | __ ______/ (_) /_____/ / 2025-09-21 03:32:36.971571 | ubuntu-jammy | +# / /| |/ / / / __ / / __/ __ / 2025-09-21 03:32:36.971743 | ubuntu-jammy | +# / ___ / /_/ / /_/ / / /_/ /_/ / 2025-09-21 03:32:36.972026 | ubuntu-jammy | +# /_/ |_\__,_/\__,_/_/\__/\__,_/ 2025-09-21 03:32:36.972144 | ubuntu-jammy | +# 2025-09-21 03:32:36.972324 | ubuntu-jammy | +# Linux Audit Daemon - Best Practice Configuration 2025-09-21 03:32:36.972498 | ubuntu-jammy | +# /etc/audit/audit.rules 2025-09-21 03:32:36.972673 | ubuntu-jammy | +# 2025-09-21 03:32:36.972852 | ubuntu-jammy | +# Compiled by Florian Roth 2025-09-21 03:32:36.973074 | ubuntu-jammy | +# 2025-09-21 03:32:36.973241 | ubuntu-jammy | +# Created : 2017/12/05 2025-09-21 03:32:36.973405 | ubuntu-jammy | +# Modified : 2023/01/25 2025-09-21 03:32:36.973562 | ubuntu-jammy | +# 2025-09-21 03:32:36.973726 | ubuntu-jammy | +# Based on rules published here: 2025-09-21 03:32:36.973889 | ubuntu-jammy | +# Gov.uk auditd rules 2025-09-21 03:32:36.974288 | ubuntu-jammy | +# https://github.com/gds-operations/puppet-auditd/pull/1 2025-09-21 03:32:36.974527 | ubuntu-jammy | +# CentOS 7 hardening 2025-09-21 03:32:36.974803 | ubuntu-jammy | +# https://highon.coffee/blog/security-harden-centos-7/#auditd---audit-daemon 2025-09-21 03:32:36.975076 | ubuntu-jammy | +# Linux audit repo 2025-09-21 03:32:36.975311 | ubuntu-jammy | +# https://github.com/linux-audit/audit-userspace/tree/master/rules 2025-09-21 03:32:36.975515 | ubuntu-jammy | +# Auditd high performance linux auditing 2025-09-21 03:32:36.975728 | ubuntu-jammy | +# https://linux-audit.com/tuning-auditd-high-performance-linux-auditing/ 2025-09-21 03:32:36.975924 | ubuntu-jammy | +# 2025-09-21 03:32:36.976083 | ubuntu-jammy | +# Further rules 2025-09-21 03:32:36.976281 | ubuntu-jammy | +# For PCI DSS compliance see: 2025-09-21 03:32:36.976507 | ubuntu-jammy | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-pci-dss-v31.rules 2025-09-21 03:32:36.976701 | ubuntu-jammy | +# For NISPOM compliance see: 2025-09-21 03:32:36.976940 | ubuntu-jammy | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-nispom.rules 2025-09-21 03:32:36.977126 | ubuntu-jammy | + 2025-09-21 03:32:36.977255 | ubuntu-jammy | +# Remove any existing rules 2025-09-21 03:32:36.977379 | ubuntu-jammy | +-D 2025-09-21 03:32:36.977503 | ubuntu-jammy | + 2025-09-21 03:32:36.977627 | ubuntu-jammy | +# Buffer Size 2025-09-21 03:32:36.977755 | ubuntu-jammy | +## Feel free to increase this if the machine panic's 2025-09-21 03:32:36.977884 | ubuntu-jammy | +-b 8192 2025-09-21 03:32:36.978017 | ubuntu-jammy | + 2025-09-21 03:32:36.978288 | ubuntu-jammy | +# Failure Mode 2025-09-21 03:32:36.978434 | ubuntu-jammy | +## Possible values: 0 (silent), 1 (printk, print a failure message), 2 (panic, halt the system) 2025-09-21 03:32:36.978560 | ubuntu-jammy | +-f 1 2025-09-21 03:32:36.978681 | ubuntu-jammy | + 2025-09-21 03:32:36.978806 | ubuntu-jammy | +# Ignore errors 2025-09-21 03:32:36.978935 | ubuntu-jammy | +## e.g. caused by users or files not found in the local environment 2025-09-21 03:32:36.979068 | ubuntu-jammy | +-i 2025-09-21 03:32:36.979187 | ubuntu-jammy | + 2025-09-21 03:32:36.979312 | ubuntu-jammy | +# Self Auditing --------------------------------------------------------------- 2025-09-21 03:32:36.979434 | ubuntu-jammy | + 2025-09-21 03:32:36.979562 | ubuntu-jammy | +## Audit the audit logs 2025-09-21 03:32:36.979693 | ubuntu-jammy | +### Successful and unsuccessful attempts to read information from the audit records 2025-09-21 03:32:36.979850 | ubuntu-jammy | +-w /var/log/audit/ -p wra -k auditlog 2025-09-21 03:32:36.979993 | ubuntu-jammy | +-w /var/audit/ -p wra -k auditlog 2025-09-21 03:32:36.980116 | ubuntu-jammy | + 2025-09-21 03:32:36.980243 | ubuntu-jammy | +## Auditd configuration 2025-09-21 03:32:36.980379 | ubuntu-jammy | +### Modifications to audit configuration that occur while the audit collection functions are operating 2025-09-21 03:32:36.980506 | ubuntu-jammy | +-w /etc/audit/ -p wa -k auditconfig 2025-09-21 03:32:36.980633 | ubuntu-jammy | +-w /etc/libaudit.conf -p wa -k auditconfig 2025-09-21 03:32:36.980760 | ubuntu-jammy | +-w /etc/audisp/ -p wa -k audispconfig 2025-09-21 03:32:36.980882 | ubuntu-jammy | + 2025-09-21 03:32:36.981048 | ubuntu-jammy | +## Monitor for use of audit management tools 2025-09-21 03:32:36.981167 | ubuntu-jammy | +-w /sbin/auditctl -p x -k audittools 2025-09-21 03:32:36.981286 | ubuntu-jammy | +-w /sbin/auditd -p x -k audittools 2025-09-21 03:32:36.981408 | ubuntu-jammy | +-w /usr/sbin/auditd -p x -k audittools 2025-09-21 03:32:36.981528 | ubuntu-jammy | +-w /usr/sbin/augenrules -p x -k audittools 2025-09-21 03:32:36.981643 | ubuntu-jammy | + 2025-09-21 03:32:36.981763 | ubuntu-jammy | +## Access to all audit trails 2025-09-21 03:32:36.981877 | ubuntu-jammy | + 2025-09-21 03:32:36.982014 | ubuntu-jammy | +-a always,exit -F path=/usr/sbin/ausearch -F perm=x -k audittools 2025-09-21 03:32:36.982137 | ubuntu-jammy | +-a always,exit -F path=/usr/sbin/aureport -F perm=x -k audittools 2025-09-21 03:32:36.982258 | ubuntu-jammy | +-a always,exit -F path=/usr/sbin/aulast -F perm=x -k audittools 2025-09-21 03:32:36.982380 | ubuntu-jammy | +-a always,exit -F path=/usr/sbin/aulastlogin -F perm=x -k audittools 2025-09-21 03:32:36.982501 | ubuntu-jammy | +-a always,exit -F path=/usr/sbin/auvirt -F perm=x -k audittools 2025-09-21 03:32:36.982618 | ubuntu-jammy | + 2025-09-21 03:32:36.982738 | ubuntu-jammy | +# Filters --------------------------------------------------------------------- 2025-09-21 03:32:36.982853 | ubuntu-jammy | + 2025-09-21 03:32:36.982988 | ubuntu-jammy | +### We put these early because audit is a first match wins system. 2025-09-21 03:32:36.983108 | ubuntu-jammy | + 2025-09-21 03:32:36.983229 | ubuntu-jammy | +## Ignore SELinux AVC records 2025-09-21 03:32:36.983348 | ubuntu-jammy | +-a always,exclude -F msgtype=AVC 2025-09-21 03:32:36.983468 | ubuntu-jammy | + 2025-09-21 03:32:36.983589 | ubuntu-jammy | +## Ignore current working directory records 2025-09-21 03:32:36.991820 | ubuntu-jammy | +-a always,exclude -F msgtype=CWD 2025-09-21 03:32:36.991862 | ubuntu-jammy | + 2025-09-21 03:32:36.991868 | ubuntu-jammy | +## Cron jobs fill the logs with stuff we normally don't want (works with SELinux) 2025-09-21 03:32:36.991874 | ubuntu-jammy | +-a never,user -F subj_type=crond_t 2025-09-21 03:32:36.991879 | ubuntu-jammy | +-a never,exit -F subj_type=crond_t 2025-09-21 03:32:36.991883 | ubuntu-jammy | + 2025-09-21 03:32:36.991889 | ubuntu-jammy | +## This prevents chrony from overwhelming the logs 2025-09-21 03:32:36.991894 | ubuntu-jammy | +-a never,exit -F arch=b64 -S adjtimex -F auid=-1 -F uid=chrony -F subj_type=chronyd_t 2025-09-21 03:32:36.991898 | ubuntu-jammy | + 2025-09-21 03:32:36.991903 | ubuntu-jammy | +## This is not very interesting and wastes a lot of space if the server is public facing 2025-09-21 03:32:36.991908 | ubuntu-jammy | +-a always,exclude -F msgtype=CRYPTO_KEY_USER 2025-09-21 03:32:36.991912 | ubuntu-jammy | + 2025-09-21 03:32:36.991917 | ubuntu-jammy | +## Open VM Tools 2025-09-21 03:32:36.991922 | ubuntu-jammy | +-a exit,never -F arch=b64 -S all -F exe=/usr/bin/vmtoolsd 2025-09-21 03:32:36.991927 | ubuntu-jammy | + 2025-09-21 03:32:36.991931 | ubuntu-jammy | +## High Volume Event Filter (especially on Linux Workstations) 2025-09-21 03:32:36.991936 | ubuntu-jammy | +-a never,exit -F arch=b64 -F dir=/dev/shm -k sharedmemaccess 2025-09-21 03:32:36.991941 | ubuntu-jammy | +-a never,exit -F arch=b64 -F dir=/var/lock/lvm -k locklvm 2025-09-21 03:32:36.991945 | ubuntu-jammy | + 2025-09-21 03:32:36.991967 | ubuntu-jammy | +## FileBeat 2025-09-21 03:32:36.991972 | ubuntu-jammy | +-a never,exit -F arch=b64 -F path=/opt/filebeat -k filebeat 2025-09-21 03:32:36.991976 | ubuntu-jammy | + 2025-09-21 03:32:36.991981 | ubuntu-jammy | +## More information on how to filter events 2025-09-21 03:32:36.991986 | ubuntu-jammy | +### https://access.redhat.com/solutions/2482221 2025-09-21 03:32:36.992001 | ubuntu-jammy | + 2025-09-21 03:32:36.992006 | ubuntu-jammy | +# Rules ----------------------------------------------------------------------- 2025-09-21 03:32:36.992011 | ubuntu-jammy | + 2025-09-21 03:32:36.992015 | ubuntu-jammy | +## Kernel parameters 2025-09-21 03:32:36.992020 | ubuntu-jammy | +-w /etc/sysctl.conf -p wa -k sysctl 2025-09-21 03:32:36.992025 | ubuntu-jammy | +-w /etc/sysctl.d -p wa -k sysctl 2025-09-21 03:32:36.992030 | ubuntu-jammy | + 2025-09-21 03:32:36.992034 | ubuntu-jammy | +## Kernel module loading and unloading 2025-09-21 03:32:36.992039 | ubuntu-jammy | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/insmod -k modules 2025-09-21 03:32:36.992044 | ubuntu-jammy | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/modprobe -k modules 2025-09-21 03:32:36.992049 | ubuntu-jammy | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/rmmod -k modules 2025-09-21 03:32:36.992053 | ubuntu-jammy | +-a always,exit -F arch=b64 -S finit_module -S init_module -S delete_module -F auid!=-1 -k modules 2025-09-21 03:32:36.992058 | ubuntu-jammy | + 2025-09-21 03:32:36.992063 | ubuntu-jammy | +## Modprobe configuration 2025-09-21 03:32:36.992068 | ubuntu-jammy | +-w /etc/modprobe.conf -p wa -k modprobe 2025-09-21 03:32:36.992072 | ubuntu-jammy | +-w /etc/modprobe.d -p wa -k modprobe 2025-09-21 03:32:36.992077 | ubuntu-jammy | + 2025-09-21 03:32:36.992081 | ubuntu-jammy | +## KExec usage (all actions) 2025-09-21 03:32:36.992086 | ubuntu-jammy | +-a always,exit -F arch=b64 -S kexec_load -k KEXEC 2025-09-21 03:32:36.992091 | ubuntu-jammy | + 2025-09-21 03:32:36.992100 | ubuntu-jammy | +## Special files 2025-09-21 03:32:36.992105 | ubuntu-jammy | +-a always,exit -F arch=b64 -S mknod -S mknodat -k specialfiles 2025-09-21 03:32:36.992110 | ubuntu-jammy | + 2025-09-21 03:32:36.992114 | ubuntu-jammy | +## Mount operations (only attributable) 2025-09-21 03:32:36.992119 | ubuntu-jammy | +-a always,exit -F arch=b64 -S mount -S umount2 -F auid!=-1 -k mount 2025-09-21 03:32:36.992124 | ubuntu-jammy | + 2025-09-21 03:32:36.992128 | ubuntu-jammy | +### NFS mount 2025-09-21 03:32:36.992133 | ubuntu-jammy | +-a always,exit -F path=/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-21 03:32:36.992138 | ubuntu-jammy | +-a always,exit -F path=/usr/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-21 03:32:36.992142 | ubuntu-jammy | + 2025-09-21 03:32:36.992147 | ubuntu-jammy | +## Change swap (only attributable) 2025-09-21 03:32:36.992151 | ubuntu-jammy | +-a always,exit -F arch=b64 -S swapon -S swapoff -F auid!=-1 -k swap 2025-09-21 03:32:36.992156 | ubuntu-jammy | + 2025-09-21 03:32:36.992161 | ubuntu-jammy | +## Time 2025-09-21 03:32:36.992165 | ubuntu-jammy | +-a always,exit -F arch=b64 -F uid!=ntp -S adjtimex -S settimeofday -S clock_settime -k time 2025-09-21 03:32:36.992170 | ubuntu-jammy | +### Local time zone 2025-09-21 03:32:36.992174 | ubuntu-jammy | +-w /etc/localtime -p wa -k localtime 2025-09-21 03:32:36.992179 | ubuntu-jammy | + 2025-09-21 03:32:36.992184 | ubuntu-jammy | +## Stunnel 2025-09-21 03:32:36.992188 | ubuntu-jammy | +-w /usr/sbin/stunnel -p x -k stunnel 2025-09-21 03:32:36.992193 | ubuntu-jammy | +-w /usr/bin/stunnel -p x -k stunnel 2025-09-21 03:32:36.992197 | ubuntu-jammy | + 2025-09-21 03:32:36.992202 | ubuntu-jammy | +## Cron configuration & scheduled jobs 2025-09-21 03:32:36.992206 | ubuntu-jammy | +-w /etc/cron.allow -p wa -k cron 2025-09-21 03:32:36.992211 | ubuntu-jammy | +-w /etc/cron.deny -p wa -k cron 2025-09-21 03:32:36.992216 | ubuntu-jammy | +-w /etc/cron.d/ -p wa -k cron 2025-09-21 03:32:36.992220 | ubuntu-jammy | +-w /etc/cron.daily/ -p wa -k cron 2025-09-21 03:32:36.992225 | ubuntu-jammy | +-w /etc/cron.hourly/ -p wa -k cron 2025-09-21 03:32:36.992229 | ubuntu-jammy | +-w /etc/cron.monthly/ -p wa -k cron 2025-09-21 03:32:36.992234 | ubuntu-jammy | +-w /etc/cron.weekly/ -p wa -k cron 2025-09-21 03:32:36.992238 | ubuntu-jammy | +-w /etc/crontab -p wa -k cron 2025-09-21 03:32:36.992243 | ubuntu-jammy | +-w /var/spool/cron/ -p wa -k cron 2025-09-21 03:32:36.992248 | ubuntu-jammy | + 2025-09-21 03:32:36.992252 | ubuntu-jammy | +## User, group, password databases 2025-09-21 03:32:36.992257 | ubuntu-jammy | +-w /etc/group -p wa -k etcgroup 2025-09-21 03:32:36.992261 | ubuntu-jammy | +-w /etc/passwd -p wa -k etcpasswd 2025-09-21 03:32:36.992271 | ubuntu-jammy | +-w /etc/gshadow -k etcgroup 2025-09-21 03:32:36.992275 | ubuntu-jammy | +-w /etc/shadow -k etcpasswd 2025-09-21 03:32:36.992280 | ubuntu-jammy | +-w /etc/security/opasswd -k opasswd 2025-09-21 03:32:36.992284 | ubuntu-jammy | + 2025-09-21 03:32:36.992289 | ubuntu-jammy | +## Sudoers file changes 2025-09-21 03:32:36.992295 | ubuntu-jammy | +-w /etc/sudoers -p wa -k actions 2025-09-21 03:32:36.993463 | ubuntu-jammy | +-w /etc/sudoers.d/ -p wa -k actions 2025-09-21 03:32:36.993492 | ubuntu-jammy | + 2025-09-21 03:32:36.993498 | ubuntu-jammy | +## Passwd 2025-09-21 03:32:36.993503 | ubuntu-jammy | +-w /usr/bin/passwd -p x -k passwd_modification 2025-09-21 03:32:36.993515 | ubuntu-jammy | + 2025-09-21 03:32:36.993520 | ubuntu-jammy | +## Tools to change group identifiers 2025-09-21 03:32:36.993525 | ubuntu-jammy | +-w /usr/sbin/groupadd -p x -k group_modification 2025-09-21 03:32:36.993529 | ubuntu-jammy | +-w /usr/sbin/groupmod -p x -k group_modification 2025-09-21 03:32:36.993534 | ubuntu-jammy | +-w /usr/sbin/addgroup -p x -k group_modification 2025-09-21 03:32:36.993539 | ubuntu-jammy | +-w /usr/sbin/useradd -p x -k user_modification 2025-09-21 03:32:36.993543 | ubuntu-jammy | +-w /usr/sbin/userdel -p x -k user_modification 2025-09-21 03:32:36.993552 | ubuntu-jammy | +-w /usr/sbin/usermod -p x -k user_modification 2025-09-21 03:32:36.993556 | ubuntu-jammy | +-w /usr/sbin/adduser -p x -k user_modification 2025-09-21 03:32:36.994555 | ubuntu-jammy | + 2025-09-21 03:32:36.994583 | ubuntu-jammy | +## Login configuration and information 2025-09-21 03:32:36.994589 | ubuntu-jammy | +-w /etc/login.defs -p wa -k login 2025-09-21 03:32:36.994594 | ubuntu-jammy | +-w /etc/securetty -p wa -k login 2025-09-21 03:32:36.994598 | ubuntu-jammy | +-w /var/log/faillog -p wa -k login 2025-09-21 03:32:36.994603 | ubuntu-jammy | +-w /var/log/lastlog -p wa -k login 2025-09-21 03:32:36.994607 | ubuntu-jammy | +-w /var/log/tallylog -p wa -k login 2025-09-21 03:32:36.994612 | ubuntu-jammy | + 2025-09-21 03:32:36.994617 | ubuntu-jammy | +## Network Environment 2025-09-21 03:32:36.994621 | ubuntu-jammy | +### Changes to hostname 2025-09-21 03:32:36.994630 | ubuntu-jammy | +-a always,exit -F arch=b64 -S sethostname -S setdomainname -k network_modifications 2025-09-21 03:32:36.994715 | ubuntu-jammy | + 2025-09-21 03:32:36.994841 | ubuntu-jammy | +### Detect Remote Shell Use 2025-09-21 03:32:36.995010 | ubuntu-jammy | +-a always,exit -F arch=b64 -F exe=/bin/bash -F success=1 -S connect -k "remote_shell" 2025-09-21 03:32:36.995118 | ubuntu-jammy | +-a always,exit -F arch=b64 -F exe=/usr/bin/bash -F success=1 -S connect -k "remote_shell" 2025-09-21 03:32:36.995213 | ubuntu-jammy | + 2025-09-21 03:32:36.995314 | ubuntu-jammy | +### Successful IPv4 Connections 2025-09-21 03:32:36.995417 | ubuntu-jammy | +-a always,exit -F arch=b64 -S connect -F a2=16 -F success=1 -F key=network_connect_4 2025-09-21 03:32:36.995515 | ubuntu-jammy | + 2025-09-21 03:32:36.995628 | ubuntu-jammy | +### Successful IPv6 Connections 2025-09-21 03:32:36.995728 | ubuntu-jammy | +-a always,exit -F arch=b64 -S connect -F a2=28 -F success=1 -F key=network_connect_6 2025-09-21 03:32:36.995845 | ubuntu-jammy | + 2025-09-21 03:32:36.995967 | ubuntu-jammy | +### Changes to other files 2025-09-21 03:32:36.996065 | ubuntu-jammy | +-w /etc/hosts -p wa -k network_modifications 2025-09-21 03:32:36.996166 | ubuntu-jammy | +-w /etc/sysconfig/network -p wa -k network_modifications 2025-09-21 03:32:36.996266 | ubuntu-jammy | +-w /etc/sysconfig/network-scripts -p w -k network_modifications 2025-09-21 03:32:36.996367 | ubuntu-jammy | +-w /etc/network/ -p wa -k network 2025-09-21 03:32:36.996470 | ubuntu-jammy | +-a always,exit -F dir=/etc/NetworkManager/ -F perm=wa -k network_modifications 2025-09-21 03:32:36.996565 | ubuntu-jammy | + 2025-09-21 03:32:36.996664 | ubuntu-jammy | +### Changes to issue 2025-09-21 03:32:36.996762 | ubuntu-jammy | +-w /etc/issue -p wa -k etcissue 2025-09-21 03:32:36.996864 | ubuntu-jammy | +-w /etc/issue.net -p wa -k etcissue 2025-09-21 03:32:36.996974 | ubuntu-jammy | + 2025-09-21 03:32:36.997072 | ubuntu-jammy | +## System startup scripts 2025-09-21 03:32:36.997171 | ubuntu-jammy | +-w /etc/inittab -p wa -k init 2025-09-21 03:32:36.997270 | ubuntu-jammy | +-w /etc/init.d/ -p wa -k init 2025-09-21 03:32:36.997376 | ubuntu-jammy | +-w /etc/init/ -p wa -k init 2025-09-21 03:32:36.997464 | ubuntu-jammy | + 2025-09-21 03:32:36.997563 | ubuntu-jammy | +## Library search paths 2025-09-21 03:32:36.997662 | ubuntu-jammy | +-w /etc/ld.so.conf -p wa -k libpath 2025-09-21 03:32:36.997780 | ubuntu-jammy | +-w /etc/ld.so.conf.d -p wa -k libpath 2025-09-21 03:32:36.997862 | ubuntu-jammy | + 2025-09-21 03:32:36.997994 | ubuntu-jammy | +## Systemwide library preloads (LD_PRELOAD) 2025-09-21 03:32:36.998105 | ubuntu-jammy | +-w /etc/ld.so.preload -p wa -k systemwide_preloads 2025-09-21 03:32:36.998202 | ubuntu-jammy | + 2025-09-21 03:32:36.998304 | ubuntu-jammy | +## Pam configuration 2025-09-21 03:32:36.998404 | ubuntu-jammy | +-w /etc/pam.d/ -p wa -k pam 2025-09-21 03:32:36.998506 | ubuntu-jammy | +-w /etc/security/limits.conf -p wa -k pam 2025-09-21 03:32:36.998606 | ubuntu-jammy | +-w /etc/security/limits.d -p wa -k pam 2025-09-21 03:32:36.998711 | ubuntu-jammy | +-w /etc/security/pam_env.conf -p wa -k pam 2025-09-21 03:32:36.998813 | ubuntu-jammy | +-w /etc/security/namespace.conf -p wa -k pam 2025-09-21 03:32:36.998914 | ubuntu-jammy | +-w /etc/security/namespace.d -p wa -k pam 2025-09-21 03:32:36.999039 | ubuntu-jammy | +-w /etc/security/namespace.init -p wa -k pam 2025-09-21 03:32:36.999139 | ubuntu-jammy | + 2025-09-21 03:32:36.999240 | ubuntu-jammy | +## Mail configuration 2025-09-21 03:32:36.999340 | ubuntu-jammy | +-w /etc/aliases -p wa -k mail 2025-09-21 03:32:36.999440 | ubuntu-jammy | +-w /etc/postfix/ -p wa -k mail 2025-09-21 03:32:36.999540 | ubuntu-jammy | +-w /etc/exim4/ -p wa -k mail 2025-09-21 03:32:36.999638 | ubuntu-jammy | + 2025-09-21 03:32:36.999736 | ubuntu-jammy | +## SSH configuration 2025-09-21 03:32:36.999866 | ubuntu-jammy | +-w /etc/ssh/sshd_config -k sshd 2025-09-21 03:32:37.000010 | ubuntu-jammy | +-w /etc/ssh/sshd_config.d -k sshd 2025-09-21 03:32:37.000081 | ubuntu-jammy | + 2025-09-21 03:32:37.000180 | ubuntu-jammy | +## root ssh key tampering 2025-09-21 03:32:37.000281 | ubuntu-jammy | +-w /root/.ssh -p wa -k rootkey 2025-09-21 03:32:37.000378 | ubuntu-jammy | + 2025-09-21 03:32:37.000477 | ubuntu-jammy | +# Systemd 2025-09-21 03:32:37.000577 | ubuntu-jammy | +-w /bin/systemctl -p x -k systemd 2025-09-21 03:32:37.000677 | ubuntu-jammy | +-w /etc/systemd/ -p wa -k systemd 2025-09-21 03:32:37.000776 | ubuntu-jammy | +-w /usr/lib/systemd -p wa -k systemd 2025-09-21 03:32:37.000872 | ubuntu-jammy | + 2025-09-21 03:32:37.001004 | ubuntu-jammy | +## https://systemd.network/systemd.generator.html 2025-09-21 03:32:37.001121 | ubuntu-jammy | +-w /etc/systemd/system-generators/ -p wa -k systemd_generator 2025-09-21 03:32:37.001263 | ubuntu-jammy | +-w /usr/local/lib/systemd/system-generators/ -p wa -k systemd_generator 2025-09-21 03:32:37.001375 | ubuntu-jammy | +-w /usr/lib/systemd/system-generators -p wa -k systemd_generator 2025-09-21 03:32:37.001502 | ubuntu-jammy | + 2025-09-21 03:32:37.001641 | ubuntu-jammy | +-w /etc/systemd/user-generators/ -p wa -k systemd_generator 2025-09-21 03:32:37.001762 | ubuntu-jammy | +-w /usr/local/lib/systemd/user-generators/ -p wa -k systemd_generator 2025-09-21 03:32:37.001871 | ubuntu-jammy | +-w /lib/systemd/system-generators/ -p wa -k systemd_generator 2025-09-21 03:32:37.002001 | ubuntu-jammy | + 2025-09-21 03:32:37.002941 | ubuntu-jammy | +## SELinux events that modify the system's Mandatory Access Controls (MAC) 2025-09-21 03:32:37.003080 | ubuntu-jammy | +-w /etc/selinux/ -p wa -k mac_policy 2025-09-21 03:32:37.003180 | ubuntu-jammy | + 2025-09-21 03:32:37.003282 | ubuntu-jammy | +## Critical elements access failures 2025-09-21 03:32:37.003394 | ubuntu-jammy | +-a always,exit -F arch=b64 -S open -F dir=/etc -F success=0 -k unauthedfileaccess 2025-09-21 03:32:37.003499 | ubuntu-jammy | +-a always,exit -F arch=b64 -S open -F dir=/bin -F success=0 -k unauthedfileaccess 2025-09-21 03:32:37.003602 | ubuntu-jammy | +-a always,exit -F arch=b64 -S open -F dir=/sbin -F success=0 -k unauthedfileaccess 2025-09-21 03:32:37.003707 | ubuntu-jammy | +-a always,exit -F arch=b64 -S open -F dir=/usr/bin -F success=0 -k unauthedfileaccess 2025-09-21 03:32:37.003830 | ubuntu-jammy | +-a always,exit -F arch=b64 -S open -F dir=/usr/sbin -F success=0 -k unauthedfileaccess 2025-09-21 03:32:37.003939 | ubuntu-jammy | +-a always,exit -F arch=b64 -S open -F dir=/var -F success=0 -k unauthedfileaccess 2025-09-21 03:32:37.004087 | ubuntu-jammy | +-a always,exit -F arch=b64 -S open -F dir=/home -F success=0 -k unauthedfileaccess 2025-09-21 03:32:37.004194 | ubuntu-jammy | +-a always,exit -F arch=b64 -S open -F dir=/srv -F success=0 -k unauthedfileaccess 2025-09-21 03:32:37.004292 | ubuntu-jammy | + 2025-09-21 03:32:37.004399 | ubuntu-jammy | +## Process ID change (switching accounts) applications 2025-09-21 03:32:37.004496 | ubuntu-jammy | +-w /bin/su -p x -k priv_esc 2025-09-21 03:32:37.004595 | ubuntu-jammy | +-w /usr/bin/sudo -p x -k priv_esc 2025-09-21 03:32:37.004725 | ubuntu-jammy | + 2025-09-21 03:32:37.004794 | ubuntu-jammy | +## Power state 2025-09-21 03:32:37.004896 | ubuntu-jammy | +-w /sbin/shutdown -p x -k power 2025-09-21 03:32:37.005015 | ubuntu-jammy | +-w /sbin/poweroff -p x -k power 2025-09-21 03:32:37.005113 | ubuntu-jammy | +-w /sbin/reboot -p x -k power 2025-09-21 03:32:37.005214 | ubuntu-jammy | +-w /sbin/halt -p x -k power 2025-09-21 03:32:37.005311 | ubuntu-jammy | + 2025-09-21 03:32:37.005455 | ubuntu-jammy | +## Session initiation information 2025-09-21 03:32:37.005507 | ubuntu-jammy | +-w /var/run/utmp -p wa -k session 2025-09-21 03:32:37.005608 | ubuntu-jammy | +-w /var/log/btmp -p wa -k session 2025-09-21 03:32:37.005707 | ubuntu-jammy | +-w /var/log/wtmp -p wa -k session 2025-09-21 03:32:37.005922 | ubuntu-jammy | + 2025-09-21 03:32:37.006077 | ubuntu-jammy | +## Discretionary Access Control (DAC) modifications 2025-09-21 03:32:37.006180 | ubuntu-jammy | +-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:37.006279 | ubuntu-jammy | +-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:37.006382 | ubuntu-jammy | +-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:37.006484 | ubuntu-jammy | +-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:37.006587 | ubuntu-jammy | +-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:37.006685 | ubuntu-jammy | +-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:37.006870 | ubuntu-jammy | +-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:37.006999 | ubuntu-jammy | +-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:37.007107 | ubuntu-jammy | +-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:37.007211 | ubuntu-jammy | +-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:37.007312 | ubuntu-jammy | +-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:37.007411 | ubuntu-jammy | +-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:37.007518 | ubuntu-jammy | +-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:37.007657 | ubuntu-jammy | + 2025-09-21 03:32:37.007711 | ubuntu-jammy | +# Special Rules --------------------------------------------------------------- 2025-09-21 03:32:37.007838 | ubuntu-jammy | + 2025-09-21 03:32:37.007938 | ubuntu-jammy | +## Reconnaissance 2025-09-21 03:32:37.008061 | ubuntu-jammy | +-w /usr/bin/whoami -p x -k recon 2025-09-21 03:32:37.008157 | ubuntu-jammy | +-w /usr/bin/id -p x -k recon 2025-09-21 03:32:37.008258 | ubuntu-jammy | +-w /bin/hostname -p x -k recon 2025-09-21 03:32:37.008360 | ubuntu-jammy | +-w /bin/uname -p x -k recon 2025-09-21 03:32:37.008458 | ubuntu-jammy | +-w /etc/issue -p r -k recon 2025-09-21 03:32:37.008556 | ubuntu-jammy | +-w /etc/hostname -p r -k recon 2025-09-21 03:32:37.008652 | ubuntu-jammy | + 2025-09-21 03:32:37.008753 | ubuntu-jammy | +## Suspicious activity 2025-09-21 03:32:37.008854 | ubuntu-jammy | +-w /usr/bin/wget -p x -k susp_activity 2025-09-21 03:32:37.008974 | ubuntu-jammy | +-w /usr/bin/curl -p x -k susp_activity 2025-09-21 03:32:37.009085 | ubuntu-jammy | +-w /usr/bin/base64 -p x -k susp_activity 2025-09-21 03:32:37.009185 | ubuntu-jammy | +-w /bin/nc -p x -k susp_activity 2025-09-21 03:32:37.009284 | ubuntu-jammy | +-w /bin/netcat -p x -k susp_activity 2025-09-21 03:32:37.009384 | ubuntu-jammy | +-w /usr/bin/ncat -p x -k susp_activity 2025-09-21 03:32:37.009486 | ubuntu-jammy | +-w /usr/bin/ss -p x -k susp_activity 2025-09-21 03:32:37.009583 | ubuntu-jammy | +-w /usr/bin/netstat -p x -k susp_activity 2025-09-21 03:32:37.009687 | ubuntu-jammy | +-w /usr/bin/ssh -p x -k susp_activity 2025-09-21 03:32:37.009779 | ubuntu-jammy | +-w /usr/bin/scp -p x -k susp_activity 2025-09-21 03:32:37.009880 | ubuntu-jammy | +-w /usr/bin/sftp -p x -k susp_activity 2025-09-21 03:32:37.010005 | ubuntu-jammy | +-w /usr/bin/ftp -p x -k susp_activity 2025-09-21 03:32:37.010091 | ubuntu-jammy | +-w /usr/bin/socat -p x -k susp_activity 2025-09-21 03:32:37.010190 | ubuntu-jammy | +-w /usr/bin/wireshark -p x -k susp_activity 2025-09-21 03:32:37.010289 | ubuntu-jammy | +-w /usr/bin/tshark -p x -k susp_activity 2025-09-21 03:32:37.010389 | ubuntu-jammy | +-w /usr/bin/rawshark -p x -k susp_activity 2025-09-21 03:32:37.010488 | ubuntu-jammy | +-w /usr/bin/rdesktop -p x -k susp_activity 2025-09-21 03:32:37.010589 | ubuntu-jammy | +-w /usr/local/bin/rdesktop -p x -k susp_activity 2025-09-21 03:32:37.010694 | ubuntu-jammy | +-w /usr/bin/wlfreerdp -p x -k susp_activity 2025-09-21 03:32:37.010794 | ubuntu-jammy | +-w /usr/bin/xfreerdp -p x -k susp_activity 2025-09-21 03:32:37.010932 | ubuntu-jammy | +-w /usr/local/bin/xfreerdp -p x -k susp_activity 2025-09-21 03:32:37.011018 | ubuntu-jammy | +-w /usr/bin/nmap -p x -k susp_activity 2025-09-21 03:32:37.011112 | ubuntu-jammy | + 2025-09-21 03:32:37.011211 | ubuntu-jammy | +## sssd 2025-09-21 03:32:37.011321 | ubuntu-jammy | +-a always,exit -F path=/usr/libexec/sssd/p11_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-21 03:32:37.011429 | ubuntu-jammy | +-a always,exit -F path=/usr/libexec/sssd/krb5_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-21 03:32:37.011533 | ubuntu-jammy | +-a always,exit -F path=/usr/libexec/sssd/ldap_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-21 03:32:37.011638 | ubuntu-jammy | +-a always,exit -F path=/usr/libexec/sssd/selinux_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-21 03:32:37.011744 | ubuntu-jammy | +-a always,exit -F path=/usr/libexec/sssd/proxy_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-21 03:32:37.011867 | ubuntu-jammy | + 2025-09-21 03:32:37.012044 | ubuntu-jammy | +## T1002 Data Compressed 2025-09-21 03:32:37.012096 | ubuntu-jammy | + 2025-09-21 03:32:37.012198 | ubuntu-jammy | +-w /usr/bin/zip -p x -k Data_Compressed 2025-09-21 03:32:37.012300 | ubuntu-jammy | +-w /usr/bin/gzip -p x -k Data_Compressed 2025-09-21 03:32:37.012396 | ubuntu-jammy | +-w /usr/bin/tar -p x -k Data_Compressed 2025-09-21 03:32:37.012498 | ubuntu-jammy | +-w /usr/bin/bzip2 -p x -k Data_Compressed 2025-09-21 03:32:37.012593 | ubuntu-jammy | + 2025-09-21 03:32:37.012702 | ubuntu-jammy | +-w /usr/bin/lzip -p x -k Data_Compressed 2025-09-21 03:32:37.012803 | ubuntu-jammy | +-w /usr/local/bin/lzip -p x -k Data_Compressed 2025-09-21 03:32:37.012902 | ubuntu-jammy | + 2025-09-21 03:32:37.013032 | ubuntu-jammy | +-w /usr/bin/lz4 -p x -k Data_Compressed 2025-09-21 03:32:37.013134 | ubuntu-jammy | +-w /usr/local/bin/lz4 -p x -k Data_Compressed 2025-09-21 03:32:37.013231 | ubuntu-jammy | + 2025-09-21 03:32:37.013331 | ubuntu-jammy | +-w /usr/bin/lzop -p x -k Data_Compressed 2025-09-21 03:32:37.013430 | ubuntu-jammy | +-w /usr/local/bin/lzop -p x -k Data_Compressed 2025-09-21 03:32:37.013528 | ubuntu-jammy | + 2025-09-21 03:32:37.013628 | ubuntu-jammy | +-w /usr/bin/plzip -p x -k Data_Compressed 2025-09-21 03:32:37.013729 | ubuntu-jammy | +-w /usr/local/bin/plzip -p x -k Data_Compressed 2025-09-21 03:32:37.013828 | ubuntu-jammy | + 2025-09-21 03:32:37.013928 | ubuntu-jammy | +-w /usr/bin/pbzip2 -p x -k Data_Compressed 2025-09-21 03:32:37.014043 | ubuntu-jammy | +-w /usr/local/bin/pbzip2 -p x -k Data_Compressed 2025-09-21 03:32:37.014139 | ubuntu-jammy | + 2025-09-21 03:32:37.014241 | ubuntu-jammy | +-w /usr/bin/lbzip2 -p x -k Data_Compressed 2025-09-21 03:32:37.014340 | ubuntu-jammy | +-w /usr/local/bin/lbzip2 -p x -k Data_Compressed 2025-09-21 03:32:37.014436 | ubuntu-jammy | + 2025-09-21 03:32:37.014535 | ubuntu-jammy | +-w /usr/bin/pixz -p x -k Data_Compressed 2025-09-21 03:32:37.014641 | ubuntu-jammy | +-w /usr/local/bin/pixz -p x -k Data_Compressed 2025-09-21 03:32:37.014790 | ubuntu-jammy | + 2025-09-21 03:32:37.014898 | ubuntu-jammy | +-w /usr/bin/pigz -p x -k Data_Compressed 2025-09-21 03:32:37.015024 | ubuntu-jammy | +-w /usr/local/bin/pigz -p x -k Data_Compressed 2025-09-21 03:32:37.015126 | ubuntu-jammy | +-w /usr/bin/unpigz -p x -k Data_Compressed 2025-09-21 03:32:37.015228 | ubuntu-jammy | +-w /usr/local/bin/unpigz -p x -k Data_Compressed 2025-09-21 03:32:37.015325 | ubuntu-jammy | + 2025-09-21 03:32:37.015426 | ubuntu-jammy | +-w /usr/bin/zstd -p x -k Data_Compressed 2025-09-21 03:32:37.015527 | ubuntu-jammy | +-w /usr/local/bin/zstd -p x -k Data_Compressed 2025-09-21 03:32:37.015624 | ubuntu-jammy | + 2025-09-21 03:32:37.015724 | ubuntu-jammy | +## Added to catch netcat on Ubuntu 2025-09-21 03:32:37.015857 | ubuntu-jammy | +-w /bin/nc.openbsd -p x -k susp_activity 2025-09-21 03:32:37.015993 | ubuntu-jammy | +-w /bin/nc.traditional -p x -k susp_activity 2025-09-21 03:32:37.016090 | ubuntu-jammy | + 2025-09-21 03:32:37.016191 | ubuntu-jammy | +## Sbin suspicious activity 2025-09-21 03:32:37.016289 | ubuntu-jammy | +-w /sbin/iptables -p x -k sbin_susp 2025-09-21 03:32:37.016390 | ubuntu-jammy | +-w /sbin/ip6tables -p x -k sbin_susp 2025-09-21 03:32:37.016496 | ubuntu-jammy | +-w /sbin/ifconfig -p x -k sbin_susp 2025-09-21 03:32:37.016595 | ubuntu-jammy | +-w /usr/sbin/arptables -p x -k sbin_susp 2025-09-21 03:32:37.016696 | ubuntu-jammy | +-w /usr/sbin/ebtables -p x -k sbin_susp 2025-09-21 03:32:37.016796 | ubuntu-jammy | +-w /sbin/xtables-nft-multi -p x -k sbin_susp 2025-09-21 03:32:37.016898 | ubuntu-jammy | +-w /usr/sbin/nft -p x -k sbin_susp 2025-09-21 03:32:37.017012 | ubuntu-jammy | +-w /usr/sbin/tcpdump -p x -k sbin_susp 2025-09-21 03:32:37.017111 | ubuntu-jammy | +-w /usr/sbin/traceroute -p x -k sbin_susp 2025-09-21 03:32:37.017212 | ubuntu-jammy | +-w /usr/sbin/ufw -p x -k sbin_susp 2025-09-21 03:32:37.017310 | ubuntu-jammy | + 2025-09-21 03:32:37.017408 | ubuntu-jammy | +### kde4 2025-09-21 03:32:37.017519 | ubuntu-jammy | +-a always,exit -F path=/usr/libexec/kde4/kpac_dhcp_helper -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-21 03:32:37.017628 | ubuntu-jammy | +-a always,exit -F path=/usr/libexec/kde4/kdesud -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-21 03:32:37.017725 | ubuntu-jammy | + 2025-09-21 03:32:37.017825 | ubuntu-jammy | +## dbus-send invocation 2025-09-21 03:32:37.017927 | ubuntu-jammy | +### may indicate privilege escalation CVE-2021-3560 2025-09-21 03:32:37.018041 | ubuntu-jammy | +-w /usr/bin/dbus-send -p x -k dbus_send 2025-09-21 03:32:37.018140 | ubuntu-jammy | +-w /usr/bin/gdbus -p x -k gdubs_call 2025-09-21 03:32:37.018235 | ubuntu-jammy | + 2025-09-21 03:32:37.018334 | ubuntu-jammy | +## pkexec invocation 2025-09-21 03:32:37.018434 | ubuntu-jammy | +### may indicate privilege escalation CVE-2021-4034 2025-09-21 03:32:37.018547 | ubuntu-jammy | +-w /usr/bin/pkexec -p x -k pkexec 2025-09-21 03:32:37.018633 | ubuntu-jammy | + 2025-09-21 03:32:37.018732 | ubuntu-jammy | +## Suspicious shells 2025-09-21 03:32:37.018832 | ubuntu-jammy | +-w /bin/ash -p x -k susp_shell 2025-09-21 03:32:37.018934 | ubuntu-jammy | +-w /bin/csh -p x -k susp_shell 2025-09-21 03:32:37.019071 | ubuntu-jammy | +-w /bin/fish -p x -k susp_shell 2025-09-21 03:32:37.019172 | ubuntu-jammy | +-w /bin/tcsh -p x -k susp_shell 2025-09-21 03:32:37.019272 | ubuntu-jammy | +-w /bin/tclsh -p x -k susp_shell 2025-09-21 03:32:37.019371 | ubuntu-jammy | +-w /bin/xonsh -p x -k susp_shell 2025-09-21 03:32:37.019472 | ubuntu-jammy | +-w /usr/local/bin/xonsh -p x -k susp_shell 2025-09-21 03:32:37.019569 | ubuntu-jammy | +-w /bin/open -p x -k susp_shell 2025-09-21 03:32:37.019671 | ubuntu-jammy | +-w /bin/rbash -p x -k susp_shell 2025-09-21 03:32:37.019791 | ubuntu-jammy | + 2025-09-21 03:32:37.019901 | ubuntu-jammy | +# Web Server Actvity 2025-09-21 03:32:37.020028 | ubuntu-jammy | +## Change the number "33" to the ID of your WebServer user. Default: www-data:x:33:33 2025-09-21 03:32:37.020128 | ubuntu-jammy | +-a always,exit -F arch=b64 -S execve -F euid=33 -k detect_execve_www 2025-09-21 03:32:37.020223 | ubuntu-jammy | + 2025-09-21 03:32:37.020321 | ubuntu-jammy | +### https://clustershell.readthedocs.io/ 2025-09-21 03:32:37.020421 | ubuntu-jammy | +-w /bin/clush -p x -k susp_shell 2025-09-21 03:32:37.020520 | ubuntu-jammy | +-w /usr/local/bin/clush -p x -k susp_shell 2025-09-21 03:32:37.020622 | ubuntu-jammy | +-w /etc/clustershell/clush.conf -p x -k susp_shell 2025-09-21 03:32:37.020724 | ubuntu-jammy | + 2025-09-21 03:32:37.020827 | ubuntu-jammy | +### https://github.com/tmux/tmux 2025-09-21 03:32:37.020928 | ubuntu-jammy | +-w /bin/tmux -p x -k susp_shell 2025-09-21 03:32:37.021064 | ubuntu-jammy | +-w /usr/local/bin/tmux -p x -k susp_shell 2025-09-21 03:32:37.021161 | ubuntu-jammy | + 2025-09-21 03:32:37.021261 | ubuntu-jammy | +## Shell/profile configurations 2025-09-21 03:32:37.021359 | ubuntu-jammy | +-w /etc/profile.d/ -p wa -k shell_profiles 2025-09-21 03:32:37.021459 | ubuntu-jammy | +-w /etc/profile -p wa -k shell_profiles 2025-09-21 03:32:37.021559 | ubuntu-jammy | +-w /etc/shells -p wa -k shell_profiles 2025-09-21 03:32:37.021660 | ubuntu-jammy | +-w /etc/bashrc -p wa -k shell_profiles 2025-09-21 03:32:37.021758 | ubuntu-jammy | +-w /etc/csh.cshrc -p wa -k shell_profiles 2025-09-21 03:32:37.021858 | ubuntu-jammy | +-w /etc/csh.login -p wa -k shell_profiles 2025-09-21 03:32:37.021972 | ubuntu-jammy | +-w /etc/fish/ -p wa -k shell_profiles 2025-09-21 03:32:37.022076 | ubuntu-jammy | +-w /etc/zsh/ -p wa -k shell_profiles 2025-09-21 03:32:37.022169 | ubuntu-jammy | + 2025-09-21 03:32:37.022269 | ubuntu-jammy | +### https://github.com/xxh/xxh 2025-09-21 03:32:37.022369 | ubuntu-jammy | +-w /usr/local/bin/xxh.bash -p x -k susp_shell 2025-09-21 03:32:37.022467 | ubuntu-jammy | +-w /usr/local/bin/xxh.xsh -p x -k susp_shell 2025-09-21 03:32:37.022565 | ubuntu-jammy | +-w /usr/local/bin/xxh.zsh -p x -k susp_shell 2025-09-21 03:32:37.022664 | ubuntu-jammy | + 2025-09-21 03:32:37.022762 | ubuntu-jammy | +## Injection 2025-09-21 03:32:37.022901 | ubuntu-jammy | +### These rules watch for code injection by the ptrace facility. 2025-09-21 03:32:37.022979 | ubuntu-jammy | +### This could indicate someone trying to do something bad or just debugging 2025-09-21 03:32:37.023079 | ubuntu-jammy | +-a always,exit -F arch=b64 -S ptrace -F a0=0x4 -k code_injection 2025-09-21 03:32:37.023178 | ubuntu-jammy | +-a always,exit -F arch=b64 -S ptrace -F a0=0x5 -k data_injection 2025-09-21 03:32:37.023281 | ubuntu-jammy | +-a always,exit -F arch=b64 -S ptrace -F a0=0x6 -k register_injection 2025-09-21 03:32:37.023381 | ubuntu-jammy | +-a always,exit -F arch=b64 -S ptrace -k tracing 2025-09-21 03:32:37.023478 | ubuntu-jammy | + 2025-09-21 03:32:37.023579 | ubuntu-jammy | +## Anonymous File Creation 2025-09-21 03:32:37.023678 | ubuntu-jammy | +### These rules watch the use of memfd_create 2025-09-21 03:32:37.023813 | ubuntu-jammy | +### "memfd_create" creates anonymous file and returns a file descriptor to access it 2025-09-21 03:32:37.023921 | ubuntu-jammy | +### When combined with "fexecve" can be used to stealthily run binaries in memory without touching disk 2025-09-21 03:32:37.024061 | ubuntu-jammy | +-a always,exit -F arch=b64 -S memfd_create -F key=anon_file_create 2025-09-21 03:32:37.024159 | ubuntu-jammy | + 2025-09-21 03:32:37.024260 | ubuntu-jammy | +## Privilege Abuse 2025-09-21 03:32:37.024368 | ubuntu-jammy | +### The purpose of this rule is to detect when an admin may be abusing power by looking in user's home dir. 2025-09-21 03:32:37.024474 | ubuntu-jammy | +-a always,exit -F dir=/home -F uid=0 -F auid>=1000 -F auid!=-1 -C auid!=obj_uid -k power_abuse 2025-09-21 03:32:37.024572 | ubuntu-jammy | + 2025-09-21 03:32:37.024672 | ubuntu-jammy | +# Socket Creations 2025-09-21 03:32:37.024771 | ubuntu-jammy | +# will catch both IPv4 and IPv6 2025-09-21 03:32:37.024868 | ubuntu-jammy | + 2025-09-21 03:32:37.024984 | ubuntu-jammy | +-a always,exit -F arch=b32 -S socket -F a0=2 -k network_socket_created 2025-09-21 03:32:37.025118 | ubuntu-jammy | +-a always,exit -F arch=b64 -S socket -F a0=2 -k network_socket_created 2025-09-21 03:32:37.025184 | ubuntu-jammy | + 2025-09-21 03:32:37.025287 | ubuntu-jammy | +-a always,exit -F arch=b32 -S socket -F a0=10 -k network_socket_created 2025-09-21 03:32:37.025389 | ubuntu-jammy | +-a always,exit -F arch=b64 -S socket -F a0=10 -k network_socket_created 2025-09-21 03:32:37.025485 | ubuntu-jammy | + 2025-09-21 03:32:37.025588 | ubuntu-jammy | +# Software Management --------------------------------------------------------- 2025-09-21 03:32:37.025684 | ubuntu-jammy | + 2025-09-21 03:32:37.025785 | ubuntu-jammy | +# RPM (Redhat/CentOS) 2025-09-21 03:32:37.025885 | ubuntu-jammy | +-w /usr/bin/rpm -p x -k software_mgmt 2025-09-21 03:32:37.025998 | ubuntu-jammy | +-w /usr/bin/yum -p x -k software_mgmt 2025-09-21 03:32:37.026099 | ubuntu-jammy | + 2025-09-21 03:32:37.026205 | ubuntu-jammy | +# DNF (Fedora/RedHat 8/CentOS 8) 2025-09-21 03:32:37.026302 | ubuntu-jammy | +-w /usr/bin/dnf -p x -k software_mgmt 2025-09-21 03:32:37.026397 | ubuntu-jammy | + 2025-09-21 03:32:37.026498 | ubuntu-jammy | +# YAST/Zypper/RPM (SuSE) 2025-09-21 03:32:37.026601 | ubuntu-jammy | +-w /sbin/yast -p x -k software_mgmt 2025-09-21 03:32:37.026700 | ubuntu-jammy | +-w /sbin/yast2 -p x -k software_mgmt 2025-09-21 03:32:37.026800 | ubuntu-jammy | +-w /bin/rpm -p x -k software_mgmt 2025-09-21 03:32:37.026898 | ubuntu-jammy | +-w /usr/bin/zypper -k software_mgmt 2025-09-21 03:32:37.027025 | ubuntu-jammy | + 2025-09-21 03:32:37.027127 | ubuntu-jammy | +# DPKG / APT-GET (Debian/Ubuntu) 2025-09-21 03:32:37.027229 | ubuntu-jammy | +-w /usr/bin/dpkg -p x -k software_mgmt 2025-09-21 03:32:37.027333 | ubuntu-jammy | +-w /usr/bin/apt -p x -k software_mgmt 2025-09-21 03:32:37.027434 | ubuntu-jammy | +-w /usr/bin/apt-add-repository -p x -k software_mgmt 2025-09-21 03:32:37.027536 | ubuntu-jammy | +-w /usr/bin/apt-get -p x -k software_mgmt 2025-09-21 03:32:37.027636 | ubuntu-jammy | +-w /usr/bin/aptitude -p x -k software_mgmt 2025-09-21 03:32:37.027735 | ubuntu-jammy | +-w /usr/bin/wajig -p x -k software_mgmt 2025-09-21 03:32:37.027859 | ubuntu-jammy | +-w /usr/bin/snap -p x -k software_mgmt 2025-09-21 03:32:37.027972 | ubuntu-jammy | + 2025-09-21 03:32:37.028078 | ubuntu-jammy | +# PIP(3) (Python installs) 2025-09-21 03:32:37.028184 | ubuntu-jammy | +-w /usr/bin/pip -p x -k third_party_software_mgmt 2025-09-21 03:32:37.028288 | ubuntu-jammy | +-w /usr/local/bin/pip -p x -k third_party_software_mgmt 2025-09-21 03:32:37.028389 | ubuntu-jammy | +-w /usr/bin/pip3 -p x -k third_party_software_mgmt 2025-09-21 03:32:37.096577 | centos-9-stream | ok: [molecule-auditd] => (item={'parameter': 'active', 'value': 'no', 'config': '/etc/audit/plugins.d/syslog.conf'}) => {"ansible_loop_var": "item", "backup": "", "changed": false, "item": {"config": "/etc/audit/plugins.d/syslog.conf", "parameter": "active", "value": "no"}, "msg": ""} 2025-09-21 03:32:37.028492 | ubuntu-jammy | +-w /usr/local/bin/pip3 -p x -k third_party_software_mgmt 2025-09-21 03:32:37.096744 | centos-9-stream | 2025-09-21 03:32:37.028603 | ubuntu-jammy | +-w /usr/bin/pipx -p x -k third_party_software_mgmt 2025-09-21 03:32:37.097002 | centos-9-stream | TASK [auditd : Deploy rules for auditd] **************************************** 2025-09-21 03:32:37.028695 | ubuntu-jammy | +-w /usr/local/bin/pipx -p x -k third_party_software_mgmt 2025-09-21 03:32:37.028793 | ubuntu-jammy | + 2025-09-21 03:32:37.028891 | ubuntu-jammy | +# npm 2025-09-21 03:32:37.029005 | ubuntu-jammy | +## T1072 third party software 2025-09-21 03:32:37.029104 | ubuntu-jammy | +## https://www.npmjs.com 2025-09-21 03:32:37.029205 | ubuntu-jammy | +## https://docs.npmjs.com/cli/v6/commands/npm-audit 2025-09-21 03:32:37.029310 | ubuntu-jammy | +-w /usr/bin/npm -p x -k third_party_software_mgmt 2025-09-21 03:32:37.029408 | ubuntu-jammy | + 2025-09-21 03:32:37.029509 | ubuntu-jammy | +# Comprehensive Perl Archive Network (CPAN) (CPAN installs) 2025-09-21 03:32:37.029609 | ubuntu-jammy | +## T1072 third party software 2025-09-21 03:32:37.029709 | ubuntu-jammy | +## https://www.cpan.org 2025-09-21 03:32:37.029810 | ubuntu-jammy | +-w /usr/bin/cpan -p x -k third_party_software_mgmt 2025-09-21 03:32:37.029905 | ubuntu-jammy | + 2025-09-21 03:32:37.030037 | ubuntu-jammy | +# Ruby (RubyGems installs) 2025-09-21 03:32:37.030138 | ubuntu-jammy | +## T1072 third party software 2025-09-21 03:32:37.030235 | ubuntu-jammy | +## https://rubygems.org 2025-09-21 03:32:37.030333 | ubuntu-jammy | +-w /usr/bin/gem -p x -k third_party_software_mgmt 2025-09-21 03:32:37.030431 | ubuntu-jammy | + 2025-09-21 03:32:37.030548 | ubuntu-jammy | +# LuaRocks (Lua installs) 2025-09-21 03:32:37.030631 | ubuntu-jammy | +## T1072 third party software 2025-09-21 03:32:37.030730 | ubuntu-jammy | +## https://luarocks.org 2025-09-21 03:32:37.030832 | ubuntu-jammy | +-w /usr/bin/luarocks -p x -k third_party_software_mgmt 2025-09-21 03:32:37.030927 | ubuntu-jammy | + 2025-09-21 03:32:37.031038 | ubuntu-jammy | +# Pacman (Arch Linux) 2025-09-21 03:32:37.031140 | ubuntu-jammy | +## https://wiki.archlinux.org/title/Pacman 2025-09-21 03:32:37.031238 | ubuntu-jammy | +## T1072 third party software 2025-09-21 03:32:37.031339 | ubuntu-jammy | +-w /etc/pacman.conf -p x -k third_party_software_mgmt 2025-09-21 03:32:37.031439 | ubuntu-jammy | +-w /etc/pacman.d -p x -k third_party_software_mgmt 2025-09-21 03:32:37.031537 | ubuntu-jammy | + 2025-09-21 03:32:37.031639 | ubuntu-jammy | +# Special Software ------------------------------------------------------------ 2025-09-21 03:32:37.031771 | ubuntu-jammy | + 2025-09-21 03:32:37.031881 | ubuntu-jammy | +## GDS specific secrets 2025-09-21 03:32:37.031996 | ubuntu-jammy | +-w /etc/puppet/ssl -p wa -k puppet_ssl 2025-09-21 03:32:37.032092 | ubuntu-jammy | + 2025-09-21 03:32:37.032193 | ubuntu-jammy | +## IBM Bigfix BESClient 2025-09-21 03:32:37.032301 | ubuntu-jammy | +-a always,exit -F arch=b64 -S open -F dir=/opt/BESClient -F success=0 -k soft_besclient 2025-09-21 03:32:37.032403 | ubuntu-jammy | +-w /var/opt/BESClient/ -p wa -k soft_besclient 2025-09-21 03:32:37.032497 | ubuntu-jammy | + 2025-09-21 03:32:37.032596 | ubuntu-jammy | +## CHEF https://www.chef.io/chef/ 2025-09-21 03:32:37.032721 | ubuntu-jammy | +-w /etc/chef -p wa -k soft_chef 2025-09-21 03:32:37.032793 | ubuntu-jammy | + 2025-09-21 03:32:37.032891 | ubuntu-jammy | +## Salt 2025-09-21 03:32:37.033002 | ubuntu-jammy | +## https://saltproject.io/ 2025-09-21 03:32:37.033105 | ubuntu-jammy | +## https://docs.saltproject.io/en/latest/ref/configuration/master.html 2025-09-21 03:32:37.033204 | ubuntu-jammy | +-w /etc/salt -p wa -k soft_salt 2025-09-21 03:32:37.033304 | ubuntu-jammy | +-w /usr/local/etc/salt -p wa -k soft_salt 2025-09-21 03:32:37.033402 | ubuntu-jammy | + 2025-09-21 03:32:37.033502 | ubuntu-jammy | +## Otter 2025-09-21 03:32:37.033601 | ubuntu-jammy | +## https://inedo.com/otter 2025-09-21 03:32:37.033702 | ubuntu-jammy | +-w /etc/otter -p wa -k soft_otter 2025-09-21 03:32:37.033803 | ubuntu-jammy | + 2025-09-21 03:32:37.033902 | ubuntu-jammy | +## T1081 Credentials In Files 2025-09-21 03:32:37.034028 | ubuntu-jammy | +-w /usr/bin/grep -p x -k string_search 2025-09-21 03:32:37.034127 | ubuntu-jammy | +-w /usr/bin/egrep -p x -k string_search 2025-09-21 03:32:37.034228 | ubuntu-jammy | +-w /usr/bin/ugrep -p x -k string_search 2025-09-21 03:32:37.034328 | ubuntu-jammy | +### macOS 2025-09-21 03:32:37.034435 | ubuntu-jammy | +-w /usr/local/bin/grep -p x -k string_search 2025-09-21 03:32:37.034536 | ubuntu-jammy | +-w /usr/local/bin/egrep -p x -k string_search 2025-09-21 03:32:37.034635 | ubuntu-jammy | +-w /usr/local/bin/ugrep -p x -k string_search 2025-09-21 03:32:37.034731 | ubuntu-jammy | + 2025-09-21 03:32:37.034831 | ubuntu-jammy | +### https://github.com/tmbinc/bgrep 2025-09-21 03:32:37.034931 | ubuntu-jammy | +-w /usr/bin/bgrep -p x -k string_search 2025-09-21 03:32:37.035043 | ubuntu-jammy | +### macOS 2025-09-21 03:32:37.035142 | ubuntu-jammy | +-w /usr/local/bin/bgrep -p x -k string_search 2025-09-21 03:32:37.035238 | ubuntu-jammy | + 2025-09-21 03:32:37.035342 | ubuntu-jammy | +### https://github.com/BurntSushi/ripgrep 2025-09-21 03:32:37.035442 | ubuntu-jammy | +-w /usr/bin/rg -p x -k string_search 2025-09-21 03:32:37.035542 | ubuntu-jammy | +### macOS 2025-09-21 03:32:37.035642 | ubuntu-jammy | +-w /usr/local/bin/rg -p x -k string_search 2025-09-21 03:32:37.035775 | ubuntu-jammy | + 2025-09-21 03:32:37.035857 | ubuntu-jammy | +### https://github.com/awgn/cgrep 2025-09-21 03:32:37.035978 | ubuntu-jammy | + 2025-09-21 03:32:37.036079 | ubuntu-jammy | +-w /usr/bin/cgrep -p x -k string_search 2025-09-21 03:32:37.036176 | ubuntu-jammy | +### macOS 2025-09-21 03:32:37.036276 | ubuntu-jammy | +-w /usr/local/bin/cgrep -p x -k string_search 2025-09-21 03:32:37.036372 | ubuntu-jammy | + 2025-09-21 03:32:37.036472 | ubuntu-jammy | +### https://github.com/jpr5/ngrep 2025-09-21 03:32:37.036572 | ubuntu-jammy | +-w /usr/bin/ngrep -p x -k string_search 2025-09-21 03:32:37.036669 | ubuntu-jammy | +### macOS 2025-09-21 03:32:37.036766 | ubuntu-jammy | +-w /usr/local/bin/ngrep -p x -k string_search 2025-09-21 03:32:37.036862 | ubuntu-jammy | + 2025-09-21 03:32:37.036974 | ubuntu-jammy | +### https://github.com/vrothberg/vgrep 2025-09-21 03:32:37.037074 | ubuntu-jammy | +-w /usr/bin/vgrep -p x -k string_search 2025-09-21 03:32:37.037171 | ubuntu-jammy | +### macOS 2025-09-21 03:32:37.037270 | ubuntu-jammy | +-w /usr/local/bin/vgrep -p x -k string_search 2025-09-21 03:32:37.037368 | ubuntu-jammy | + 2025-09-21 03:32:37.037469 | ubuntu-jammy | +### https://github.com/monochromegane/the_platinum_searcher 2025-09-21 03:32:37.037569 | ubuntu-jammy | +-w /usr/bin/pt -p x -k string_search 2025-09-21 03:32:37.037669 | ubuntu-jammy | +### macOS 2025-09-21 03:32:37.037768 | ubuntu-jammy | +-w /usr/local/bin/pt -p x -k string_search 2025-09-21 03:32:37.037868 | ubuntu-jammy | + 2025-09-21 03:32:37.037992 | ubuntu-jammy | +### https://github.com/gvansickle/ucg 2025-09-21 03:32:37.038082 | ubuntu-jammy | +-w /usr/bin/ucg -p x -k string_search 2025-09-21 03:32:37.038188 | ubuntu-jammy | +### macOS 2025-09-21 03:32:37.038281 | ubuntu-jammy | +-w /usr/local/bin/ucg -p x -k string_search 2025-09-21 03:32:37.038378 | ubuntu-jammy | + 2025-09-21 03:32:37.038481 | ubuntu-jammy | +### https://github.com/ggreer/the_silver_searcher 2025-09-21 03:32:37.038578 | ubuntu-jammy | +-w /usr/bin/ag -p x -k string_search 2025-09-21 03:32:37.038675 | ubuntu-jammy | +### macOS 2025-09-21 03:32:37.038775 | ubuntu-jammy | +-w /usr/local/bin/ag -p x -k string_search 2025-09-21 03:32:37.038870 | ubuntu-jammy | + 2025-09-21 03:32:37.038993 | ubuntu-jammy | +### https://github.com/beyondgrep/ack3 2025-09-21 03:32:37.039095 | ubuntu-jammy | +### https://beyondgrep.com 2025-09-21 03:32:37.039221 | ubuntu-jammy | +-w /usr/bin/ack -p x -k string_search 2025-09-21 03:32:37.039292 | ubuntu-jammy | +-w /usr/local/bin/ack -p x -k string_search 2025-09-21 03:32:37.039390 | ubuntu-jammy | +-w /usr/bin/semgrep -p x -k string_search 2025-09-21 03:32:37.039489 | ubuntu-jammy | +### macOS 2025-09-21 03:32:37.039589 | ubuntu-jammy | +-w /usr/local/bin/semgrep -p x -k string_search 2025-09-21 03:32:37.039687 | ubuntu-jammy | + 2025-09-21 03:32:37.039818 | ubuntu-jammy | +## Docker 2025-09-21 03:32:37.039917 | ubuntu-jammy | +-w /usr/bin/dockerd -k docker 2025-09-21 03:32:37.040028 | ubuntu-jammy | +-w /usr/bin/docker -k docker 2025-09-21 03:32:37.040129 | ubuntu-jammy | +-w /usr/bin/docker-containerd -k docker 2025-09-21 03:32:37.040227 | ubuntu-jammy | +-w /usr/bin/docker-runc -k docker 2025-09-21 03:32:37.040326 | ubuntu-jammy | +-w /var/lib/docker -p wa -k docker 2025-09-21 03:32:37.040425 | ubuntu-jammy | +-w /etc/docker -k docker 2025-09-21 03:32:37.040524 | ubuntu-jammy | +-w /etc/sysconfig/docker -k docker 2025-09-21 03:32:37.040622 | ubuntu-jammy | +-w /etc/sysconfig/docker-storage -k docker 2025-09-21 03:32:37.040721 | ubuntu-jammy | +-w /usr/lib/systemd/system/docker.service -k docker 2025-09-21 03:32:37.040830 | ubuntu-jammy | +-w /usr/lib/systemd/system/docker.socket -k docker 2025-09-21 03:32:37.040927 | ubuntu-jammy | + 2025-09-21 03:32:37.041037 | ubuntu-jammy | +## Virtualization stuff 2025-09-21 03:32:37.041138 | ubuntu-jammy | +-w /usr/bin/qemu-system-x86_64 -p x -k qemu-system-x86_64 2025-09-21 03:32:37.041236 | ubuntu-jammy | +-w /usr/bin/qemu-img -p x -k qemu-img 2025-09-21 03:32:37.041335 | ubuntu-jammy | +-w /usr/bin/qemu-kvm -p x -k qemu-kvm 2025-09-21 03:32:37.041434 | ubuntu-jammy | +-w /usr/bin/qemu -p x -k qemu 2025-09-21 03:32:37.041532 | ubuntu-jammy | +-w /usr/bin/virtualbox -p x -k virtualbox 2025-09-21 03:32:37.041631 | ubuntu-jammy | +-w /usr/bin/virt-manager -p x -k virt-manager 2025-09-21 03:32:37.041728 | ubuntu-jammy | +-w /usr/bin/VBoxManage -p x -k VBoxManage 2025-09-21 03:32:37.041824 | ubuntu-jammy | + 2025-09-21 03:32:37.041921 | ubuntu-jammy | +#### VirtualBox on macOS 2025-09-21 03:32:37.042042 | ubuntu-jammy | + 2025-09-21 03:32:37.042142 | ubuntu-jammy | +-w /usr/local/bin/VirtualBox -p x -k virt_tool 2025-09-21 03:32:37.042241 | ubuntu-jammy | +-w /usr/local/bin/VirtualBoxVM -p x -k virt_tool 2025-09-21 03:32:37.042340 | ubuntu-jammy | +-w /usr/local/bin/VBoxManage -p x -k virt_tool 2025-09-21 03:32:37.042466 | ubuntu-jammy | +-w /usr/local/bin/VBoxVRDP -p x -k virt_tool 2025-09-21 03:32:37.042541 | ubuntu-jammy | +-w /usr/local/bin/VBoxHeadless -p x -k virt_tool 2025-09-21 03:32:37.042646 | ubuntu-jammy | +-w /usr/local/bin/vboxwebsrv -p x -k virt_tool 2025-09-21 03:32:37.042747 | ubuntu-jammy | +-w /usr/local/bin/VBoxBugReport -p x -k virt_tool 2025-09-21 03:32:37.042846 | ubuntu-jammy | +-w /usr/local/bin/VBoxBalloonCtrl -p x -k virt_tool 2025-09-21 03:32:37.042961 | ubuntu-jammy | +-w /usr/local/bin/VBoxAutostart -p x -k virt_tool 2025-09-21 03:32:37.043057 | ubuntu-jammy | +-w /usr/local/bin/VBoxDTrace -p x -k virt_tool 2025-09-21 03:32:37.043156 | ubuntu-jammy | +-w /usr/local/bin/vbox-img -p x -k virt_tool 2025-09-21 03:32:37.043259 | ubuntu-jammy | +-w /Library/LaunchDaemons/org.virtualbox.startup.plist -p x -k virt_tool 2025-09-21 03:32:37.043368 | ubuntu-jammy | +-w /Library/Application Support/VirtualBox/LaunchDaemons/ -p x -k virt_tool 2025-09-21 03:32:37.043463 | ubuntu-jammy | +-w /Library/Application Support/VirtualBox/VBoxDrv.kext/ -p x -k virt_tool 2025-09-21 03:32:37.043562 | ubuntu-jammy | +-w /Library/Application Support/VirtualBox/VBoxUSB.kext/ -p x -k virt_tool 2025-09-21 03:32:37.043662 | ubuntu-jammy | +-w /Library/Application Support/VirtualBox/VBoxNetFlt.kext/ -p x -k virt_tool 2025-09-21 03:32:37.043780 | ubuntu-jammy | +-w /Library/Application Support/VirtualBox/VBoxNetAdp.kext/ -p x -k virt_tool 2025-09-21 03:32:37.043874 | ubuntu-jammy | + 2025-09-21 03:32:37.043989 | ubuntu-jammy | +### Parallels Desktop on macOS 2025-09-21 03:32:37.044082 | ubuntu-jammy | + 2025-09-21 03:32:37.044182 | ubuntu-jammy | +-w /usr/local/bin/prl_convert -p x -k virt_tool 2025-09-21 03:32:37.044280 | ubuntu-jammy | +-w /usr/local/bin/prl_disk_tool -p x -k virt_tool 2025-09-21 03:32:37.044378 | ubuntu-jammy | +-w /usr/local/bin/prl_perf_ctl -p x -k virt_tool 2025-09-21 03:32:37.044475 | ubuntu-jammy | +-w /usr/local/bin/prlcore2dmp -p x -k virt_tool 2025-09-21 03:32:37.044572 | ubuntu-jammy | +-w /usr/local/bin/prlctl -p x -k virt_tool 2025-09-21 03:32:37.044671 | ubuntu-jammy | +-w /usr/local/bin/prlexec -p x -k virt_tool 2025-09-21 03:32:37.044769 | ubuntu-jammy | +-w /usr/local/bin/prlsrvctl -p x -k virt_tool 2025-09-21 03:32:37.044868 | ubuntu-jammy | +-w /Library/Preferences/Parallels -p x -k virt_tool 2025-09-21 03:32:37.044987 | ubuntu-jammy | + 2025-09-21 03:32:37.045086 | ubuntu-jammy | +### qemu on macOS 2025-09-21 03:32:37.045183 | ubuntu-jammy | + 2025-09-21 03:32:37.045282 | ubuntu-jammy | +-w /usr/local/bin/qemu-edid -p x -k virt_tool 2025-09-21 03:32:37.045383 | ubuntu-jammy | +-w /usr/local/bin/qemu-img -p x -k virt_tool 2025-09-21 03:32:37.045484 | ubuntu-jammy | +-w /usr/local/bin/qemu-io -p x -k virt_tool 2025-09-21 03:32:37.045584 | ubuntu-jammy | +-w /usr/local/bin/qemu-nbd -p x -k virt_tool 2025-09-21 03:32:37.045717 | ubuntu-jammy | +-w /usr/local/bin/qemu-system-x86_64 -p x -k virt_tool 2025-09-21 03:32:37.045779 | ubuntu-jammy | + 2025-09-21 03:32:37.045877 | ubuntu-jammy | +## Kubelet 2025-09-21 03:32:37.045991 | ubuntu-jammy | +-w /usr/bin/kubelet -k kubelet 2025-09-21 03:32:37.046084 | ubuntu-jammy | + 2025-09-21 03:32:37.046183 | ubuntu-jammy | +# ipc system call 2025-09-21 03:32:37.046282 | ubuntu-jammy | +# /usr/include/linux/ipc.h 2025-09-21 03:32:37.046380 | ubuntu-jammy | + 2025-09-21 03:32:37.046480 | ubuntu-jammy | +## msgctl 2025-09-21 03:32:37.046582 | ubuntu-jammy | +#-a always,exit -S ipc -F a0=14 -k Inter-Process_Communication 2025-09-21 03:32:37.046678 | ubuntu-jammy | +## msgget 2025-09-21 03:32:37.046799 | ubuntu-jammy | +#-a always,exit -S ipc -F a0=13 -k Inter-Process_Communication 2025-09-21 03:32:37.046879 | ubuntu-jammy | +## Use these lines on x86_64, ia64 instead 2025-09-21 03:32:37.047006 | ubuntu-jammy | +-a always,exit -F arch=b64 -S msgctl -k Inter-Process_Communication 2025-09-21 03:32:37.047107 | ubuntu-jammy | +-a always,exit -F arch=b64 -S msgget -k Inter-Process_Communication 2025-09-21 03:32:37.047204 | ubuntu-jammy | + 2025-09-21 03:32:37.047302 | ubuntu-jammy | +## semctl 2025-09-21 03:32:37.047404 | ubuntu-jammy | +#-a always,exit -S ipc -F a0=3 -k Inter-Process_Communication 2025-09-21 03:32:37.047502 | ubuntu-jammy | +## semget 2025-09-21 03:32:37.047601 | ubuntu-jammy | +#-a always,exit -S ipc -F a0=2 -k Inter-Process_Communication 2025-09-21 03:32:37.047699 | ubuntu-jammy | +## semop 2025-09-21 03:32:37.047814 | ubuntu-jammy | +#-a always,exit -S ipc -F a0=1 -k Inter-Process_Communication 2025-09-21 03:32:37.047913 | ubuntu-jammy | +## semtimedop 2025-09-21 03:32:37.048028 | ubuntu-jammy | +#-a always,exit -S ipc -F a0=4 -k Inter-Process_Communication 2025-09-21 03:32:37.048128 | ubuntu-jammy | +## Use these lines on x86_64, ia64 instead 2025-09-21 03:32:37.048230 | ubuntu-jammy | +-a always,exit -F arch=b64 -S semctl -k Inter-Process_Communication 2025-09-21 03:32:37.048333 | ubuntu-jammy | +-a always,exit -F arch=b64 -S semget -k Inter-Process_Communication 2025-09-21 03:32:37.048435 | ubuntu-jammy | +-a always,exit -F arch=b64 -S semop -k Inter-Process_Communication 2025-09-21 03:32:37.048538 | ubuntu-jammy | +-a always,exit -F arch=b64 -S semtimedop -k Inter-Process_Communication 2025-09-21 03:32:37.048635 | ubuntu-jammy | + 2025-09-21 03:32:37.048733 | ubuntu-jammy | +## shmctl 2025-09-21 03:32:37.048833 | ubuntu-jammy | +#-a always,exit -S ipc -F a0=24 -k Inter-Process_Communication 2025-09-21 03:32:37.049003 | ubuntu-jammy | +## shmget 2025-09-21 03:32:37.049113 | ubuntu-jammy | +#-a always,exit -S ipc -F a0=23 -k Inter-Process_Communication 2025-09-21 03:32:37.049215 | ubuntu-jammy | +## Use these lines on x86_64, ia64 instead 2025-09-21 03:32:37.049319 | ubuntu-jammy | +-a always,exit -F arch=b64 -S shmctl -k Inter-Process_Communication 2025-09-21 03:32:37.049420 | ubuntu-jammy | +-a always,exit -F arch=b64 -S shmget -k Inter-Process_Communication 2025-09-21 03:32:37.049518 | ubuntu-jammy | + 2025-09-21 03:32:37.049621 | ubuntu-jammy | +# High Volume Events ---------------------------------------------------------- 2025-09-21 03:32:37.049718 | ubuntu-jammy | + 2025-09-21 03:32:37.049819 | ubuntu-jammy | +## Disable these rules if they create too many events in your environment 2025-09-21 03:32:37.049918 | ubuntu-jammy | + 2025-09-21 03:32:37.050081 | ubuntu-jammy | +## Common Shells 2025-09-21 03:32:37.050142 | ubuntu-jammy | +-w /bin/bash -p x -k susp_shell 2025-09-21 03:32:37.050241 | ubuntu-jammy | +-w /bin/dash -p x -k susp_shell 2025-09-21 03:32:37.050342 | ubuntu-jammy | +-w /bin/busybox -p x -k susp_shell 2025-09-21 03:32:37.050440 | ubuntu-jammy | +-w /bin/zsh -p x -k susp_shell 2025-09-21 03:32:37.050540 | ubuntu-jammy | +-w /bin/sh -p x -k susp_shell 2025-09-21 03:32:37.050641 | ubuntu-jammy | +-w /bin/ksh -p x -k susp_shell 2025-09-21 03:32:37.050737 | ubuntu-jammy | + 2025-09-21 03:32:37.050837 | ubuntu-jammy | +## Root command executions 2025-09-21 03:32:37.050944 | ubuntu-jammy | +-a always,exit -F arch=b64 -F euid=0 -F auid>=1000 -F auid!=-1 -S execve -k rootcmd 2025-09-21 03:32:37.051054 | ubuntu-jammy | + 2025-09-21 03:32:37.051167 | ubuntu-jammy | +## File Deletion Events by User 2025-09-21 03:32:37.051262 | ubuntu-jammy | +-a always,exit -F arch=b64 -S rmdir -S unlink -S unlinkat -S rename -S renameat -F auid>=1000 -F auid!=-1 -k delete 2025-09-21 03:32:37.051361 | ubuntu-jammy | + 2025-09-21 03:32:37.051460 | ubuntu-jammy | +## File Access 2025-09-21 03:32:37.051560 | ubuntu-jammy | +### Unauthorized Access (unsuccessful) 2025-09-21 03:32:37.051673 | ubuntu-jammy | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k file_access 2025-09-21 03:32:37.051803 | ubuntu-jammy | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k file_access 2025-09-21 03:32:37.051902 | ubuntu-jammy | + 2025-09-21 03:32:37.052017 | ubuntu-jammy | +### Unsuccessful Creation 2025-09-21 03:32:37.052124 | ubuntu-jammy | +-a always,exit -F arch=b64 -S mkdir,creat,link,symlink,mknod,mknodat,linkat,symlinkat -F exit=-EACCES -k file_creation 2025-09-21 03:32:37.052257 | ubuntu-jammy | +-a always,exit -F arch=b64 -S mkdir,link,symlink,mkdirat -F exit=-EPERM -k file_creation 2025-09-21 03:32:37.052325 | ubuntu-jammy | + 2025-09-21 03:32:37.052427 | ubuntu-jammy | +### Unsuccessful Modification 2025-09-21 03:32:37.052535 | ubuntu-jammy | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EACCES -k file_modification 2025-09-21 03:32:37.052643 | ubuntu-jammy | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EPERM -k file_modification 2025-09-21 03:32:37.052739 | ubuntu-jammy | + 2025-09-21 03:32:37.052836 | ubuntu-jammy | +## 32bit API Exploitation 2025-09-21 03:32:37.052937 | ubuntu-jammy | +### If you are on a 64 bit platform, everything _should_ be running 2025-09-21 03:32:37.053062 | ubuntu-jammy | +### in 64 bit mode. This rule will detect any use of the 32 bit syscalls 2025-09-21 03:32:37.053163 | ubuntu-jammy | +### because this might be a sign of someone exploiting a hole in the 32 2025-09-21 03:32:37.053260 | ubuntu-jammy | +### bit API. 2025-09-21 03:32:37.053363 | ubuntu-jammy | +-a always,exit -F arch=b32 -S all -k 32bit_api 2025-09-21 03:32:37.053457 | ubuntu-jammy | + 2025-09-21 03:32:37.053559 | ubuntu-jammy | +# Make The Configuration Immutable -------------------------------------------- 2025-09-21 03:32:37.053655 | ubuntu-jammy | + 2025-09-21 03:32:37.053754 | ubuntu-jammy | +##-e 2 2025-09-21 03:32:37.053848 | ubuntu-jammy | 2025-09-21 03:32:37.054106 | ubuntu-jammy | changed: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": true, "checksum": "9f99ce5c4f891fbf3e2bce06ed4cb97fb9e01f41", "dest": "/etc/audit/rules.d/20-neo23x0.rules", "gid": 0, "group": "root", "item": "20-neo23x0.rules", "md5sum": "6ac57206fd77de34805c3f4d50ef8b1d", "mode": "0644", "owner": "root", "size": 27367, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1758425555.9657006-1859-77978792990229/.source.rules", "state": "file", "uid": 0} 2025-09-21 03:32:37.054194 | ubuntu-jammy | 2025-09-21 03:32:37.054294 | ubuntu-jammy | TASK [auditd : Manage auditd service] ****************************************** 2025-09-21 03:32:37.874783 | ubuntu-jammy | ok: [molecule-auditd] => {"changed": false, "enabled": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Sun 2025-09-21 03:32:30 UTC", "ActiveEnterTimestampMonotonic": "761352503", "ActiveExitTimestamp": "n/a", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "system.slice local-fs.target systemd-tmpfiles-setup.service systemd-journald.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Sun 2025-09-21 03:32:30 UTC", "AssertTimestampMonotonic": "761292100", "Before": "sysinit.target ssh.service systemd-update-utmp.service shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "62104000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Sun 2025-09-21 03:32:30 UTC", "ConditionTimestampMonotonic": "761292066", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestamp": "n/a", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "1633", "ExecMainStartTimestamp": "Sun 2025-09-21 03:32:30 UTC", "ExecMainStartTimestampMonotonic": "761315407", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Sun 2025-09-21 03:32:30 UTC] ; stop_time=[Sun 2025-09-21 03:32:30 UTC] ; pid=1632 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Sun 2025-09-21 03:32:30 UTC] ; stop_time=[Sun 2025-09-21 03:32:30 UTC] ; pid=1632 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Sun 2025-09-21 03:32:30 UTC] ; stop_time=[Sun 2025-09-21 03:32:30 UTC] ; pid=1636 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Sun 2025-09-21 03:32:30 UTC] ; stop_time=[Sun 2025-09-21 03:32:30 UTC] ; pid=1636 ; code=exited ; status=0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "n/a", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Sun 2025-09-21 03:32:30 UTC", "InactiveExitTimestampMonotonic": "761293482", "InvocationID": "86f1b0bc0a0c4619b5c282e62fbac4fd", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15337", "LimitNPROCSoft": "15337", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15337", "LimitSIGPENDINGSoft": "15337", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "1633", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "503808", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "yes", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Sun 2025-09-21 03:32:30 UTC", "StateChangeTimestampMonotonic": "761352503", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4601", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestamp": "n/a", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2025-09-21 03:32:37.879154 | ubuntu-jammy | 2025-09-21 03:32:37.879255 | ubuntu-jammy | TASK [auditd : List existing rules files] ************************************** 2025-09-21 03:32:37.973067 | debian-bookworm | ok: [molecule-auditd] => {"changed": false, "enabled": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Sun 2025-09-21 03:32:30 UTC", "ActiveEnterTimestampMonotonic": "764349977", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "system.slice local-fs.target systemd-journald.socket systemd-tmpfiles-setup.service", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Sun 2025-09-21 03:32:30 UTC", "AssertTimestampMonotonic": "764277624", "Before": "ssh.service sysinit.target systemd-update-utmp.service shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "47864000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Sun 2025-09-21 03:32:30 UTC", "ConditionTimestampMonotonic": "764277574", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3367", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2342", "ExecMainStartTimestamp": "Sun 2025-09-21 03:32:30 UTC", "ExecMainStartTimestampMonotonic": "764322820", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Sun 2025-09-21 03:32:30 UTC] ; stop_time=[Sun 2025-09-21 03:32:30 UTC] ; pid=2341 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Sun 2025-09-21 03:32:30 UTC] ; stop_time=[Sun 2025-09-21 03:32:30 UTC] ; pid=2341 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Sun 2025-09-21 03:32:30 UTC] ; stop_time=[Sun 2025-09-21 03:32:30 UTC] ; pid=2345 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Sun 2025-09-21 03:32:30 UTC] ; stop_time=[Sun 2025-09-21 03:32:30 UTC] ; pid=2345 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Sun 2025-09-21 03:32:30 UTC", "InactiveExitTimestampMonotonic": "764305596", "InvocationID": "6e3b8a5661064709931437ee34c3ad5b", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15481", "LimitNPROCSoft": "15481", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15481", "LimitSIGPENDINGSoft": "15481", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2342", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "712704", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Sun 2025-09-21 03:32:30 UTC", "StateChangeTimestampMonotonic": "764349977", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2025-09-21 03:32:37.977992 | debian-bookworm | 2025-09-21 03:32:37.978119 | debian-bookworm | TASK [auditd : List existing rules files] ************************************** 2025-09-21 03:32:38.320959 | centos-9-stream | --- before 2025-09-21 03:32:38.321113 | centos-9-stream | +++ after: /home/zuul/.ansible/tmp/ansible-local-1921k107b29r/tmp2olk6w6e/20-neo23x0.rules.j2 2025-09-21 03:32:38.321234 | centos-9-stream | @@ -0,0 +1,750 @@ 2025-09-21 03:32:38.321343 | centos-9-stream | +# ___ ___ __ __ 2025-09-21 03:32:38.321450 | centos-9-stream | +# / | __ ______/ (_) /_____/ / 2025-09-21 03:32:38.321557 | centos-9-stream | +# / /| |/ / / / __ / / __/ __ / 2025-09-21 03:32:38.321662 | centos-9-stream | +# / ___ / /_/ / /_/ / / /_/ /_/ / 2025-09-21 03:32:38.321763 | centos-9-stream | +# /_/ |_\__,_/\__,_/_/\__/\__,_/ 2025-09-21 03:32:38.321884 | centos-9-stream | +# 2025-09-21 03:32:38.322071 | centos-9-stream | +# Linux Audit Daemon - Best Practice Configuration 2025-09-21 03:32:38.322088 | centos-9-stream | +# /etc/audit/audit.rules 2025-09-21 03:32:38.322274 | centos-9-stream | +# 2025-09-21 03:32:38.322461 | centos-9-stream | +# Compiled by Florian Roth 2025-09-21 03:32:38.322471 | centos-9-stream | +# 2025-09-21 03:32:38.322535 | centos-9-stream | +# Created : 2017/12/05 2025-09-21 03:32:38.322690 | centos-9-stream | +# Modified : 2023/01/25 2025-09-21 03:32:38.322701 | centos-9-stream | +# 2025-09-21 03:32:38.322843 | centos-9-stream | +# Based on rules published here: 2025-09-21 03:32:38.322957 | centos-9-stream | +# Gov.uk auditd rules 2025-09-21 03:32:38.323331 | centos-9-stream | +# https://github.com/gds-operations/puppet-auditd/pull/1 2025-09-21 03:32:38.323475 | centos-9-stream | +# CentOS 7 hardening 2025-09-21 03:32:38.323649 | centos-9-stream | +# https://highon.coffee/blog/security-harden-centos-7/#auditd---audit-daemon 2025-09-21 03:32:38.323750 | centos-9-stream | +# Linux audit repo 2025-09-21 03:32:38.323913 | centos-9-stream | +# https://github.com/linux-audit/audit-userspace/tree/master/rules 2025-09-21 03:32:38.324090 | centos-9-stream | +# Auditd high performance linux auditing 2025-09-21 03:32:38.324273 | centos-9-stream | +# https://linux-audit.com/tuning-auditd-high-performance-linux-auditing/ 2025-09-21 03:32:38.324377 | centos-9-stream | +# 2025-09-21 03:32:38.324477 | centos-9-stream | +# Further rules 2025-09-21 03:32:38.324645 | centos-9-stream | +# For PCI DSS compliance see: 2025-09-21 03:32:38.324775 | centos-9-stream | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-pci-dss-v31.rules 2025-09-21 03:32:38.324930 | centos-9-stream | +# For NISPOM compliance see: 2025-09-21 03:32:38.325086 | centos-9-stream | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-nispom.rules 2025-09-21 03:32:38.325207 | centos-9-stream | + 2025-09-21 03:32:38.325314 | centos-9-stream | +# Remove any existing rules 2025-09-21 03:32:38.325414 | centos-9-stream | +-D 2025-09-21 03:32:38.325513 | centos-9-stream | + 2025-09-21 03:32:38.325618 | centos-9-stream | +# Buffer Size 2025-09-21 03:32:38.325721 | centos-9-stream | +## Feel free to increase this if the machine panic's 2025-09-21 03:32:38.325842 | centos-9-stream | +-b 8192 2025-09-21 03:32:38.325922 | centos-9-stream | + 2025-09-21 03:32:38.326051 | centos-9-stream | +# Failure Mode 2025-09-21 03:32:38.326189 | centos-9-stream | +## Possible values: 0 (silent), 1 (printk, print a failure message), 2 (panic, halt the system) 2025-09-21 03:32:38.326282 | centos-9-stream | +-f 1 2025-09-21 03:32:38.326383 | centos-9-stream | + 2025-09-21 03:32:38.326491 | centos-9-stream | +# Ignore errors 2025-09-21 03:32:38.326590 | centos-9-stream | +## e.g. caused by users or files not found in the local environment 2025-09-21 03:32:38.326692 | centos-9-stream | +-i 2025-09-21 03:32:38.326790 | centos-9-stream | + 2025-09-21 03:32:38.326895 | centos-9-stream | +# Self Auditing --------------------------------------------------------------- 2025-09-21 03:32:38.327018 | centos-9-stream | + 2025-09-21 03:32:38.327120 | centos-9-stream | +## Audit the audit logs 2025-09-21 03:32:38.327270 | centos-9-stream | +### Successful and unsuccessful attempts to read information from the audit records 2025-09-21 03:32:38.327373 | centos-9-stream | +-w /var/log/audit/ -p wra -k auditlog 2025-09-21 03:32:38.327475 | centos-9-stream | +-w /var/audit/ -p wra -k auditlog 2025-09-21 03:32:38.327579 | centos-9-stream | + 2025-09-21 03:32:38.327681 | centos-9-stream | +## Auditd configuration 2025-09-21 03:32:38.327793 | centos-9-stream | +### Modifications to audit configuration that occur while the audit collection functions are operating 2025-09-21 03:32:38.327897 | centos-9-stream | +-w /etc/audit/ -p wa -k auditconfig 2025-09-21 03:32:38.328043 | centos-9-stream | +-w /etc/libaudit.conf -p wa -k auditconfig 2025-09-21 03:32:38.328119 | centos-9-stream | +-w /etc/audisp/ -p wa -k audispconfig 2025-09-21 03:32:38.328244 | centos-9-stream | + 2025-09-21 03:32:38.328359 | centos-9-stream | +## Monitor for use of audit management tools 2025-09-21 03:32:38.328461 | centos-9-stream | +-w /sbin/auditctl -p x -k audittools 2025-09-21 03:32:38.328583 | centos-9-stream | +-w /sbin/auditd -p x -k audittools 2025-09-21 03:32:38.328667 | centos-9-stream | +-w /usr/sbin/auditd -p x -k audittools 2025-09-21 03:32:38.328770 | centos-9-stream | +-w /usr/sbin/augenrules -p x -k audittools 2025-09-21 03:32:38.328872 | centos-9-stream | + 2025-09-21 03:32:38.328993 | centos-9-stream | +## Access to all audit trails 2025-09-21 03:32:38.329091 | centos-9-stream | + 2025-09-21 03:32:38.329235 | centos-9-stream | +-a always,exit -F path=/usr/sbin/ausearch -F perm=x -k audittools 2025-09-21 03:32:38.329317 | centos-9-stream | +-a always,exit -F path=/usr/sbin/aureport -F perm=x -k audittools 2025-09-21 03:32:38.329420 | centos-9-stream | +-a always,exit -F path=/usr/sbin/aulast -F perm=x -k audittools 2025-09-21 03:32:38.329524 | centos-9-stream | +-a always,exit -F path=/usr/sbin/aulastlogin -F perm=x -k audittools 2025-09-21 03:32:38.329634 | centos-9-stream | +-a always,exit -F path=/usr/sbin/auvirt -F perm=x -k audittools 2025-09-21 03:32:38.329735 | centos-9-stream | + 2025-09-21 03:32:38.329837 | centos-9-stream | +# Filters --------------------------------------------------------------------- 2025-09-21 03:32:38.329935 | centos-9-stream | + 2025-09-21 03:32:38.330053 | centos-9-stream | +### We put these early because audit is a first match wins system. 2025-09-21 03:32:38.330154 | centos-9-stream | + 2025-09-21 03:32:38.330274 | centos-9-stream | +## Ignore SELinux AVC records 2025-09-21 03:32:38.330378 | centos-9-stream | +-a always,exclude -F msgtype=AVC 2025-09-21 03:32:38.330480 | centos-9-stream | + 2025-09-21 03:32:38.330583 | centos-9-stream | +## Ignore current working directory records 2025-09-21 03:32:38.330688 | centos-9-stream | +-a always,exclude -F msgtype=CWD 2025-09-21 03:32:38.330785 | centos-9-stream | + 2025-09-21 03:32:38.330900 | centos-9-stream | +## Cron jobs fill the logs with stuff we normally don't want (works with SELinux) 2025-09-21 03:32:38.331034 | centos-9-stream | +-a never,user -F subj_type=crond_t 2025-09-21 03:32:38.331138 | centos-9-stream | +-a never,exit -F subj_type=crond_t 2025-09-21 03:32:38.331275 | centos-9-stream | + 2025-09-21 03:32:38.331363 | centos-9-stream | +## This prevents chrony from overwhelming the logs 2025-09-21 03:32:38.331471 | centos-9-stream | +-a never,exit -F arch=b64 -S adjtimex -F auid=-1 -F uid=chrony -F subj_type=chronyd_t 2025-09-21 03:32:38.331572 | centos-9-stream | + 2025-09-21 03:32:38.331683 | centos-9-stream | +## This is not very interesting and wastes a lot of space if the server is public facing 2025-09-21 03:32:38.331788 | centos-9-stream | +-a always,exclude -F msgtype=CRYPTO_KEY_USER 2025-09-21 03:32:38.331886 | centos-9-stream | + 2025-09-21 03:32:38.331999 | centos-9-stream | +## Open VM Tools 2025-09-21 03:32:38.332103 | centos-9-stream | +-a exit,never -F arch=b64 -S all -F exe=/usr/bin/vmtoolsd 2025-09-21 03:32:38.332220 | centos-9-stream | + 2025-09-21 03:32:38.332322 | centos-9-stream | +## High Volume Event Filter (especially on Linux Workstations) 2025-09-21 03:32:38.332424 | centos-9-stream | +-a never,exit -F arch=b64 -F dir=/dev/shm -k sharedmemaccess 2025-09-21 03:32:38.332527 | centos-9-stream | +-a never,exit -F arch=b64 -F dir=/var/lock/lvm -k locklvm 2025-09-21 03:32:38.332623 | centos-9-stream | + 2025-09-21 03:32:38.332725 | centos-9-stream | +## FileBeat 2025-09-21 03:32:38.332830 | centos-9-stream | +-a never,exit -F arch=b64 -F path=/opt/filebeat -k filebeat 2025-09-21 03:32:38.332929 | centos-9-stream | + 2025-09-21 03:32:38.333044 | centos-9-stream | +## More information on how to filter events 2025-09-21 03:32:38.333144 | centos-9-stream | +### https://access.redhat.com/solutions/2482221 2025-09-21 03:32:38.333261 | centos-9-stream | + 2025-09-21 03:32:38.333364 | centos-9-stream | +# Rules ----------------------------------------------------------------------- 2025-09-21 03:32:38.333461 | centos-9-stream | + 2025-09-21 03:32:38.333563 | centos-9-stream | +## Kernel parameters 2025-09-21 03:32:38.333663 | centos-9-stream | +-w /etc/sysctl.conf -p wa -k sysctl 2025-09-21 03:32:38.333764 | centos-9-stream | +-w /etc/sysctl.d -p wa -k sysctl 2025-09-21 03:32:38.333864 | centos-9-stream | + 2025-09-21 03:32:38.333966 | centos-9-stream | +## Kernel module loading and unloading 2025-09-21 03:32:38.334097 | centos-9-stream | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/insmod -k modules 2025-09-21 03:32:38.334218 | centos-9-stream | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/modprobe -k modules 2025-09-21 03:32:38.334323 | centos-9-stream | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/rmmod -k modules 2025-09-21 03:32:38.334434 | centos-9-stream | +-a always,exit -F arch=b64 -S finit_module -S init_module -S delete_module -F auid!=-1 -k modules 2025-09-21 03:32:38.334535 | centos-9-stream | + 2025-09-21 03:32:38.334634 | centos-9-stream | +## Modprobe configuration 2025-09-21 03:32:38.334738 | centos-9-stream | +-w /etc/modprobe.conf -p wa -k modprobe 2025-09-21 03:32:38.334841 | centos-9-stream | +-w /etc/modprobe.d -p wa -k modprobe 2025-09-21 03:32:38.334939 | centos-9-stream | + 2025-09-21 03:32:38.335058 | centos-9-stream | +## KExec usage (all actions) 2025-09-21 03:32:38.335200 | centos-9-stream | +-a always,exit -F arch=b64 -S kexec_load -k KEXEC 2025-09-21 03:32:38.335287 | centos-9-stream | + 2025-09-21 03:32:38.335389 | centos-9-stream | +## Special files 2025-09-21 03:32:38.335496 | centos-9-stream | +-a always,exit -F arch=b64 -S mknod -S mknodat -k specialfiles 2025-09-21 03:32:38.335593 | centos-9-stream | + 2025-09-21 03:32:38.335696 | centos-9-stream | +## Mount operations (only attributable) 2025-09-21 03:32:38.335800 | centos-9-stream | +-a always,exit -F arch=b64 -S mount -S umount2 -F auid!=-1 -k mount 2025-09-21 03:32:38.335898 | centos-9-stream | + 2025-09-21 03:32:38.336027 | centos-9-stream | +### NFS mount 2025-09-21 03:32:38.336141 | centos-9-stream | +-a always,exit -F path=/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-21 03:32:38.336269 | centos-9-stream | +-a always,exit -F path=/usr/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-21 03:32:38.336368 | centos-9-stream | + 2025-09-21 03:32:38.336472 | centos-9-stream | +## Change swap (only attributable) 2025-09-21 03:32:38.336575 | centos-9-stream | +-a always,exit -F arch=b64 -S swapon -S swapoff -F auid!=-1 -k swap 2025-09-21 03:32:38.336673 | centos-9-stream | + 2025-09-21 03:32:38.336779 | centos-9-stream | +## Time 2025-09-21 03:32:38.336885 | centos-9-stream | +-a always,exit -F arch=b64 -F uid!=ntp -S adjtimex -S settimeofday -S clock_settime -k time 2025-09-21 03:32:38.337002 | centos-9-stream | +### Local time zone 2025-09-21 03:32:38.337106 | centos-9-stream | +-w /etc/localtime -p wa -k localtime 2025-09-21 03:32:38.337221 | centos-9-stream | + 2025-09-21 03:32:38.337321 | centos-9-stream | +## Stunnel 2025-09-21 03:32:38.337421 | centos-9-stream | +-w /usr/sbin/stunnel -p x -k stunnel 2025-09-21 03:32:38.337529 | centos-9-stream | +-w /usr/bin/stunnel -p x -k stunnel 2025-09-21 03:32:38.337621 | centos-9-stream | + 2025-09-21 03:32:38.337723 | centos-9-stream | +## Cron configuration & scheduled jobs 2025-09-21 03:32:38.337827 | centos-9-stream | +-w /etc/cron.allow -p wa -k cron 2025-09-21 03:32:38.337928 | centos-9-stream | +-w /etc/cron.deny -p wa -k cron 2025-09-21 03:32:38.338041 | centos-9-stream | +-w /etc/cron.d/ -p wa -k cron 2025-09-21 03:32:38.338142 | centos-9-stream | +-w /etc/cron.daily/ -p wa -k cron 2025-09-21 03:32:38.338257 | centos-9-stream | +-w /etc/cron.hourly/ -p wa -k cron 2025-09-21 03:32:38.338357 | centos-9-stream | +-w /etc/cron.monthly/ -p wa -k cron 2025-09-21 03:32:38.338458 | centos-9-stream | +-w /etc/cron.weekly/ -p wa -k cron 2025-09-21 03:32:38.338560 | centos-9-stream | +-w /etc/crontab -p wa -k cron 2025-09-21 03:32:38.338664 | centos-9-stream | +-w /var/spool/cron/ -p wa -k cron 2025-09-21 03:32:38.338763 | centos-9-stream | + 2025-09-21 03:32:38.338875 | centos-9-stream | +## User, group, password databases 2025-09-21 03:32:38.338967 | centos-9-stream | +-w /etc/group -p wa -k etcgroup 2025-09-21 03:32:38.339092 | centos-9-stream | +-w /etc/passwd -p wa -k etcpasswd 2025-09-21 03:32:38.339216 | centos-9-stream | +-w /etc/gshadow -k etcgroup 2025-09-21 03:32:38.339317 | centos-9-stream | +-w /etc/shadow -k etcpasswd 2025-09-21 03:32:38.339420 | centos-9-stream | +-w /etc/security/opasswd -k opasswd 2025-09-21 03:32:38.339521 | centos-9-stream | + 2025-09-21 03:32:38.339622 | centos-9-stream | +## Sudoers file changes 2025-09-21 03:32:38.339721 | centos-9-stream | +-w /etc/sudoers -p wa -k actions 2025-09-21 03:32:38.339826 | centos-9-stream | +-w /etc/sudoers.d/ -p wa -k actions 2025-09-21 03:32:38.339925 | centos-9-stream | + 2025-09-21 03:32:38.340037 | centos-9-stream | +## Passwd 2025-09-21 03:32:38.340300 | centos-9-stream | +-w /usr/bin/passwd -p x -k passwd_modification 2025-09-21 03:32:38.340406 | centos-9-stream | + 2025-09-21 03:32:38.340511 | centos-9-stream | +## Tools to change group identifiers 2025-09-21 03:32:38.340616 | centos-9-stream | +-w /usr/sbin/groupadd -p x -k group_modification 2025-09-21 03:32:38.340718 | centos-9-stream | +-w /usr/sbin/groupmod -p x -k group_modification 2025-09-21 03:32:38.340820 | centos-9-stream | +-w /usr/sbin/addgroup -p x -k group_modification 2025-09-21 03:32:38.340921 | centos-9-stream | +-w /usr/sbin/useradd -p x -k user_modification 2025-09-21 03:32:38.341037 | centos-9-stream | +-w /usr/sbin/userdel -p x -k user_modification 2025-09-21 03:32:38.341146 | centos-9-stream | +-w /usr/sbin/usermod -p x -k user_modification 2025-09-21 03:32:38.341275 | centos-9-stream | +-w /usr/sbin/adduser -p x -k user_modification 2025-09-21 03:32:38.341373 | centos-9-stream | + 2025-09-21 03:32:38.341473 | centos-9-stream | +## Login configuration and information 2025-09-21 03:32:38.341576 | centos-9-stream | +-w /etc/login.defs -p wa -k login 2025-09-21 03:32:38.341676 | centos-9-stream | +-w /etc/securetty -p wa -k login 2025-09-21 03:32:38.341779 | centos-9-stream | +-w /var/log/faillog -p wa -k login 2025-09-21 03:32:38.341879 | centos-9-stream | +-w /var/log/lastlog -p wa -k login 2025-09-21 03:32:38.342009 | centos-9-stream | +-w /var/log/tallylog -p wa -k login 2025-09-21 03:32:38.342117 | centos-9-stream | + 2025-09-21 03:32:38.342226 | centos-9-stream | +## Network Environment 2025-09-21 03:32:38.342327 | centos-9-stream | +### Changes to hostname 2025-09-21 03:32:38.342438 | centos-9-stream | +-a always,exit -F arch=b64 -S sethostname -S setdomainname -k network_modifications 2025-09-21 03:32:38.342534 | centos-9-stream | + 2025-09-21 03:32:38.342633 | centos-9-stream | +### Detect Remote Shell Use 2025-09-21 03:32:38.342741 | centos-9-stream | +-a always,exit -F arch=b64 -F exe=/bin/bash -F success=1 -S connect -k "remote_shell" 2025-09-21 03:32:38.342853 | centos-9-stream | +-a always,exit -F arch=b64 -F exe=/usr/bin/bash -F success=1 -S connect -k "remote_shell" 2025-09-21 03:32:38.342952 | centos-9-stream | + 2025-09-21 03:32:38.343066 | centos-9-stream | +### Successful IPv4 Connections 2025-09-21 03:32:38.343199 | centos-9-stream | +-a always,exit -F arch=b64 -S connect -F a2=16 -F success=1 -F key=network_connect_4 2025-09-21 03:32:38.343299 | centos-9-stream | + 2025-09-21 03:32:38.343400 | centos-9-stream | +### Successful IPv6 Connections 2025-09-21 03:32:38.343507 | centos-9-stream | +-a always,exit -F arch=b64 -S connect -F a2=28 -F success=1 -F key=network_connect_6 2025-09-21 03:32:38.351228 | centos-9-stream | + 2025-09-21 03:32:38.351285 | centos-9-stream | +### Changes to other files 2025-09-21 03:32:38.351293 | centos-9-stream | +-w /etc/hosts -p wa -k network_modifications 2025-09-21 03:32:38.351299 | centos-9-stream | +-w /etc/sysconfig/network -p wa -k network_modifications 2025-09-21 03:32:38.351305 | centos-9-stream | +-w /etc/sysconfig/network-scripts -p w -k network_modifications 2025-09-21 03:32:38.351310 | centos-9-stream | +-w /etc/network/ -p wa -k network 2025-09-21 03:32:38.351315 | centos-9-stream | +-a always,exit -F dir=/etc/NetworkManager/ -F perm=wa -k network_modifications 2025-09-21 03:32:38.351333 | centos-9-stream | + 2025-09-21 03:32:38.351338 | centos-9-stream | +### Changes to issue 2025-09-21 03:32:38.351343 | centos-9-stream | +-w /etc/issue -p wa -k etcissue 2025-09-21 03:32:38.351348 | centos-9-stream | +-w /etc/issue.net -p wa -k etcissue 2025-09-21 03:32:38.351352 | centos-9-stream | + 2025-09-21 03:32:38.351357 | centos-9-stream | +## System startup scripts 2025-09-21 03:32:38.351361 | centos-9-stream | +-w /etc/inittab -p wa -k init 2025-09-21 03:32:38.351366 | centos-9-stream | +-w /etc/init.d/ -p wa -k init 2025-09-21 03:32:38.351370 | centos-9-stream | +-w /etc/init/ -p wa -k init 2025-09-21 03:32:38.351375 | centos-9-stream | + 2025-09-21 03:32:38.351379 | centos-9-stream | +## Library search paths 2025-09-21 03:32:38.351384 | centos-9-stream | +-w /etc/ld.so.conf -p wa -k libpath 2025-09-21 03:32:38.351388 | centos-9-stream | +-w /etc/ld.so.conf.d -p wa -k libpath 2025-09-21 03:32:38.351393 | centos-9-stream | + 2025-09-21 03:32:38.351397 | centos-9-stream | +## Systemwide library preloads (LD_PRELOAD) 2025-09-21 03:32:38.351402 | centos-9-stream | +-w /etc/ld.so.preload -p wa -k systemwide_preloads 2025-09-21 03:32:38.351406 | centos-9-stream | + 2025-09-21 03:32:38.351410 | centos-9-stream | +## Pam configuration 2025-09-21 03:32:38.351415 | centos-9-stream | +-w /etc/pam.d/ -p wa -k pam 2025-09-21 03:32:38.351419 | centos-9-stream | +-w /etc/security/limits.conf -p wa -k pam 2025-09-21 03:32:38.351424 | centos-9-stream | +-w /etc/security/limits.d -p wa -k pam 2025-09-21 03:32:38.351428 | centos-9-stream | +-w /etc/security/pam_env.conf -p wa -k pam 2025-09-21 03:32:38.351433 | centos-9-stream | +-w /etc/security/namespace.conf -p wa -k pam 2025-09-21 03:32:38.351437 | centos-9-stream | +-w /etc/security/namespace.d -p wa -k pam 2025-09-21 03:32:38.351441 | centos-9-stream | +-w /etc/security/namespace.init -p wa -k pam 2025-09-21 03:32:38.351446 | centos-9-stream | + 2025-09-21 03:32:38.351450 | centos-9-stream | +## Mail configuration 2025-09-21 03:32:38.351455 | centos-9-stream | +-w /etc/aliases -p wa -k mail 2025-09-21 03:32:38.351459 | centos-9-stream | +-w /etc/postfix/ -p wa -k mail 2025-09-21 03:32:38.351464 | centos-9-stream | +-w /etc/exim4/ -p wa -k mail 2025-09-21 03:32:38.351468 | centos-9-stream | + 2025-09-21 03:32:38.351473 | centos-9-stream | +## SSH configuration 2025-09-21 03:32:38.351477 | centos-9-stream | +-w /etc/ssh/sshd_config -k sshd 2025-09-21 03:32:38.351482 | centos-9-stream | +-w /etc/ssh/sshd_config.d -k sshd 2025-09-21 03:32:38.351486 | centos-9-stream | + 2025-09-21 03:32:38.351491 | centos-9-stream | +## root ssh key tampering 2025-09-21 03:32:38.351495 | centos-9-stream | +-w /root/.ssh -p wa -k rootkey 2025-09-21 03:32:38.351500 | centos-9-stream | + 2025-09-21 03:32:38.351504 | centos-9-stream | +# Systemd 2025-09-21 03:32:38.351509 | centos-9-stream | +-w /bin/systemctl -p x -k systemd 2025-09-21 03:32:38.351513 | centos-9-stream | +-w /etc/systemd/ -p wa -k systemd 2025-09-21 03:32:38.351518 | centos-9-stream | +-w /usr/lib/systemd -p wa -k systemd 2025-09-21 03:32:38.351522 | centos-9-stream | + 2025-09-21 03:32:38.351527 | centos-9-stream | +## https://systemd.network/systemd.generator.html 2025-09-21 03:32:38.351532 | centos-9-stream | +-w /etc/systemd/system-generators/ -p wa -k systemd_generator 2025-09-21 03:32:38.351536 | centos-9-stream | +-w /usr/local/lib/systemd/system-generators/ -p wa -k systemd_generator 2025-09-21 03:32:38.351541 | centos-9-stream | +-w /usr/lib/systemd/system-generators -p wa -k systemd_generator 2025-09-21 03:32:38.351545 | centos-9-stream | + 2025-09-21 03:32:38.351550 | centos-9-stream | +-w /etc/systemd/user-generators/ -p wa -k systemd_generator 2025-09-21 03:32:38.351554 | centos-9-stream | +-w /usr/local/lib/systemd/user-generators/ -p wa -k systemd_generator 2025-09-21 03:32:38.351559 | centos-9-stream | +-w /lib/systemd/system-generators/ -p wa -k systemd_generator 2025-09-21 03:32:38.351563 | centos-9-stream | + 2025-09-21 03:32:38.351568 | centos-9-stream | +## SELinux events that modify the system's Mandatory Access Controls (MAC) 2025-09-21 03:32:38.351572 | centos-9-stream | +-w /etc/selinux/ -p wa -k mac_policy 2025-09-21 03:32:38.351577 | centos-9-stream | + 2025-09-21 03:32:38.351581 | centos-9-stream | +## Critical elements access failures 2025-09-21 03:32:38.351585 | centos-9-stream | +-a always,exit -F arch=b64 -S open -F dir=/etc -F success=0 -k unauthedfileaccess 2025-09-21 03:32:38.351591 | centos-9-stream | +-a always,exit -F arch=b64 -S open -F dir=/bin -F success=0 -k unauthedfileaccess 2025-09-21 03:32:38.351595 | centos-9-stream | +-a always,exit -F arch=b64 -S open -F dir=/sbin -F success=0 -k unauthedfileaccess 2025-09-21 03:32:38.351607 | centos-9-stream | +-a always,exit -F arch=b64 -S open -F dir=/usr/bin -F success=0 -k unauthedfileaccess 2025-09-21 03:32:38.351612 | centos-9-stream | +-a always,exit -F arch=b64 -S open -F dir=/usr/sbin -F success=0 -k unauthedfileaccess 2025-09-21 03:32:38.351616 | centos-9-stream | +-a always,exit -F arch=b64 -S open -F dir=/var -F success=0 -k unauthedfileaccess 2025-09-21 03:32:38.351621 | centos-9-stream | +-a always,exit -F arch=b64 -S open -F dir=/home -F success=0 -k unauthedfileaccess 2025-09-21 03:32:38.351629 | centos-9-stream | +-a always,exit -F arch=b64 -S open -F dir=/srv -F success=0 -k unauthedfileaccess 2025-09-21 03:32:38.351633 | centos-9-stream | + 2025-09-21 03:32:38.351638 | centos-9-stream | +## Process ID change (switching accounts) applications 2025-09-21 03:32:38.351642 | centos-9-stream | +-w /bin/su -p x -k priv_esc 2025-09-21 03:32:38.351647 | centos-9-stream | +-w /usr/bin/sudo -p x -k priv_esc 2025-09-21 03:32:38.351651 | centos-9-stream | + 2025-09-21 03:32:38.351656 | centos-9-stream | +## Power state 2025-09-21 03:32:38.351660 | centos-9-stream | +-w /sbin/shutdown -p x -k power 2025-09-21 03:32:38.351672 | centos-9-stream | +-w /sbin/poweroff -p x -k power 2025-09-21 03:32:38.351677 | centos-9-stream | +-w /sbin/reboot -p x -k power 2025-09-21 03:32:38.351681 | centos-9-stream | +-w /sbin/halt -p x -k power 2025-09-21 03:32:38.351686 | centos-9-stream | + 2025-09-21 03:32:38.351690 | centos-9-stream | +## Session initiation information 2025-09-21 03:32:38.351748 | centos-9-stream | +-w /var/run/utmp -p wa -k session 2025-09-21 03:32:38.354259 | centos-9-stream | +-w /var/log/btmp -p wa -k session 2025-09-21 03:32:38.354298 | centos-9-stream | +-w /var/log/wtmp -p wa -k session 2025-09-21 03:32:38.354303 | centos-9-stream | + 2025-09-21 03:32:38.354308 | centos-9-stream | +## Discretionary Access Control (DAC) modifications 2025-09-21 03:32:38.354313 | centos-9-stream | +-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:38.354319 | centos-9-stream | +-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:38.354325 | centos-9-stream | +-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:38.354329 | centos-9-stream | +-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:38.354334 | centos-9-stream | +-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:38.354339 | centos-9-stream | +-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:38.354344 | centos-9-stream | +-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:38.354348 | centos-9-stream | +-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:38.354353 | centos-9-stream | +-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:38.354357 | centos-9-stream | +-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:38.354362 | centos-9-stream | +-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:38.354366 | centos-9-stream | +-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:38.354371 | centos-9-stream | +-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:38.354375 | centos-9-stream | + 2025-09-21 03:32:38.354380 | centos-9-stream | +# Special Rules --------------------------------------------------------------- 2025-09-21 03:32:38.354384 | centos-9-stream | + 2025-09-21 03:32:38.354389 | centos-9-stream | +## Reconnaissance 2025-09-21 03:32:38.354394 | centos-9-stream | +-w /usr/bin/whoami -p x -k recon 2025-09-21 03:32:38.354398 | centos-9-stream | +-w /usr/bin/id -p x -k recon 2025-09-21 03:32:38.354403 | centos-9-stream | +-w /bin/hostname -p x -k recon 2025-09-21 03:32:38.354408 | centos-9-stream | +-w /bin/uname -p x -k recon 2025-09-21 03:32:38.354417 | centos-9-stream | +-w /etc/issue -p r -k recon 2025-09-21 03:32:38.354421 | centos-9-stream | +-w /etc/hostname -p r -k recon 2025-09-21 03:32:38.355338 | centos-9-stream | + 2025-09-21 03:32:38.355397 | centos-9-stream | +## Suspicious activity 2025-09-21 03:32:38.355403 | centos-9-stream | +-w /usr/bin/wget -p x -k susp_activity 2025-09-21 03:32:38.355409 | centos-9-stream | +-w /usr/bin/curl -p x -k susp_activity 2025-09-21 03:32:38.355414 | centos-9-stream | +-w /usr/bin/base64 -p x -k susp_activity 2025-09-21 03:32:38.355418 | centos-9-stream | +-w /bin/nc -p x -k susp_activity 2025-09-21 03:32:38.355423 | centos-9-stream | +-w /bin/netcat -p x -k susp_activity 2025-09-21 03:32:38.355427 | centos-9-stream | +-w /usr/bin/ncat -p x -k susp_activity 2025-09-21 03:32:38.355437 | centos-9-stream | +-w /usr/bin/ss -p x -k susp_activity 2025-09-21 03:32:38.355442 | centos-9-stream | +-w /usr/bin/netstat -p x -k susp_activity 2025-09-21 03:32:38.355540 | centos-9-stream | +-w /usr/bin/ssh -p x -k susp_activity 2025-09-21 03:32:38.355643 | centos-9-stream | +-w /usr/bin/scp -p x -k susp_activity 2025-09-21 03:32:38.355749 | centos-9-stream | +-w /usr/bin/sftp -p x -k susp_activity 2025-09-21 03:32:38.355849 | centos-9-stream | +-w /usr/bin/ftp -p x -k susp_activity 2025-09-21 03:32:38.355952 | centos-9-stream | +-w /usr/bin/socat -p x -k susp_activity 2025-09-21 03:32:38.356067 | centos-9-stream | +-w /usr/bin/wireshark -p x -k susp_activity 2025-09-21 03:32:38.356196 | centos-9-stream | +-w /usr/bin/tshark -p x -k susp_activity 2025-09-21 03:32:38.356291 | centos-9-stream | +-w /usr/bin/rawshark -p x -k susp_activity 2025-09-21 03:32:38.356407 | centos-9-stream | +-w /usr/bin/rdesktop -p x -k susp_activity 2025-09-21 03:32:38.356501 | centos-9-stream | +-w /usr/local/bin/rdesktop -p x -k susp_activity 2025-09-21 03:32:38.356604 | centos-9-stream | +-w /usr/bin/wlfreerdp -p x -k susp_activity 2025-09-21 03:32:38.356706 | centos-9-stream | +-w /usr/bin/xfreerdp -p x -k susp_activity 2025-09-21 03:32:38.356809 | centos-9-stream | +-w /usr/local/bin/xfreerdp -p x -k susp_activity 2025-09-21 03:32:38.356908 | centos-9-stream | +-w /usr/bin/nmap -p x -k susp_activity 2025-09-21 03:32:38.357032 | centos-9-stream | + 2025-09-21 03:32:38.357133 | centos-9-stream | +## sssd 2025-09-21 03:32:38.357265 | centos-9-stream | +-a always,exit -F path=/usr/libexec/sssd/p11_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-21 03:32:38.357376 | centos-9-stream | +-a always,exit -F path=/usr/libexec/sssd/krb5_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-21 03:32:38.357492 | centos-9-stream | +-a always,exit -F path=/usr/libexec/sssd/ldap_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-21 03:32:38.357595 | centos-9-stream | +-a always,exit -F path=/usr/libexec/sssd/selinux_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-21 03:32:38.357706 | centos-9-stream | +-a always,exit -F path=/usr/libexec/sssd/proxy_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-21 03:32:38.357804 | centos-9-stream | + 2025-09-21 03:32:38.357908 | centos-9-stream | +## T1002 Data Compressed 2025-09-21 03:32:38.358022 | centos-9-stream | + 2025-09-21 03:32:38.358125 | centos-9-stream | +-w /usr/bin/zip -p x -k Data_Compressed 2025-09-21 03:32:38.358250 | centos-9-stream | +-w /usr/bin/gzip -p x -k Data_Compressed 2025-09-21 03:32:38.358353 | centos-9-stream | +-w /usr/bin/tar -p x -k Data_Compressed 2025-09-21 03:32:38.358460 | centos-9-stream | +-w /usr/bin/bzip2 -p x -k Data_Compressed 2025-09-21 03:32:38.358580 | centos-9-stream | + 2025-09-21 03:32:38.358660 | centos-9-stream | +-w /usr/bin/lzip -p x -k Data_Compressed 2025-09-21 03:32:38.358769 | centos-9-stream | +-w /usr/local/bin/lzip -p x -k Data_Compressed 2025-09-21 03:32:38.358864 | centos-9-stream | + 2025-09-21 03:32:38.358993 | centos-9-stream | +-w /usr/bin/lz4 -p x -k Data_Compressed 2025-09-21 03:32:38.359089 | centos-9-stream | +-w /usr/local/bin/lz4 -p x -k Data_Compressed 2025-09-21 03:32:38.359205 | centos-9-stream | + 2025-09-21 03:32:38.359308 | centos-9-stream | +-w /usr/bin/lzop -p x -k Data_Compressed 2025-09-21 03:32:38.359411 | centos-9-stream | +-w /usr/local/bin/lzop -p x -k Data_Compressed 2025-09-21 03:32:38.359511 | centos-9-stream | + 2025-09-21 03:32:38.359613 | centos-9-stream | +-w /usr/bin/plzip -p x -k Data_Compressed 2025-09-21 03:32:38.359714 | centos-9-stream | +-w /usr/local/bin/plzip -p x -k Data_Compressed 2025-09-21 03:32:38.359810 | centos-9-stream | + 2025-09-21 03:32:38.359918 | centos-9-stream | +-w /usr/bin/pbzip2 -p x -k Data_Compressed 2025-09-21 03:32:38.360044 | centos-9-stream | +-w /usr/local/bin/pbzip2 -p x -k Data_Compressed 2025-09-21 03:32:38.360142 | centos-9-stream | + 2025-09-21 03:32:38.360260 | centos-9-stream | +-w /usr/bin/lbzip2 -p x -k Data_Compressed 2025-09-21 03:32:38.360364 | centos-9-stream | +-w /usr/local/bin/lbzip2 -p x -k Data_Compressed 2025-09-21 03:32:38.360462 | centos-9-stream | + 2025-09-21 03:32:38.360563 | centos-9-stream | +-w /usr/bin/pixz -p x -k Data_Compressed 2025-09-21 03:32:38.360666 | centos-9-stream | +-w /usr/local/bin/pixz -p x -k Data_Compressed 2025-09-21 03:32:38.360766 | centos-9-stream | + 2025-09-21 03:32:38.360874 | centos-9-stream | +-w /usr/bin/pigz -p x -k Data_Compressed 2025-09-21 03:32:38.361000 | centos-9-stream | +-w /usr/local/bin/pigz -p x -k Data_Compressed 2025-09-21 03:32:38.361092 | centos-9-stream | +-w /usr/bin/unpigz -p x -k Data_Compressed 2025-09-21 03:32:38.361219 | centos-9-stream | +-w /usr/local/bin/unpigz -p x -k Data_Compressed 2025-09-21 03:32:38.361319 | centos-9-stream | + 2025-09-21 03:32:38.361421 | centos-9-stream | +-w /usr/bin/zstd -p x -k Data_Compressed 2025-09-21 03:32:38.361522 | centos-9-stream | +-w /usr/local/bin/zstd -p x -k Data_Compressed 2025-09-21 03:32:38.361624 | centos-9-stream | + 2025-09-21 03:32:38.361723 | centos-9-stream | +## Added to catch netcat on Ubuntu 2025-09-21 03:32:38.361845 | centos-9-stream | +-w /bin/nc.openbsd -p x -k susp_activity 2025-09-21 03:32:38.361928 | centos-9-stream | +-w /bin/nc.traditional -p x -k susp_activity 2025-09-21 03:32:38.362056 | centos-9-stream | + 2025-09-21 03:32:38.362156 | centos-9-stream | +## Sbin suspicious activity 2025-09-21 03:32:38.362276 | centos-9-stream | +-w /sbin/iptables -p x -k sbin_susp 2025-09-21 03:32:38.362379 | centos-9-stream | +-w /sbin/ip6tables -p x -k sbin_susp 2025-09-21 03:32:38.362483 | centos-9-stream | +-w /sbin/ifconfig -p x -k sbin_susp 2025-09-21 03:32:38.362587 | centos-9-stream | +-w /usr/sbin/arptables -p x -k sbin_susp 2025-09-21 03:32:38.362688 | centos-9-stream | +-w /usr/sbin/ebtables -p x -k sbin_susp 2025-09-21 03:32:38.362799 | centos-9-stream | +-w /sbin/xtables-nft-multi -p x -k sbin_susp 2025-09-21 03:32:38.362940 | centos-9-stream | +-w /usr/sbin/nft -p x -k sbin_susp 2025-09-21 03:32:38.363015 | centos-9-stream | +-w /usr/sbin/tcpdump -p x -k sbin_susp 2025-09-21 03:32:38.363118 | centos-9-stream | +-w /usr/sbin/traceroute -p x -k sbin_susp 2025-09-21 03:32:38.363234 | centos-9-stream | +-w /usr/sbin/ufw -p x -k sbin_susp 2025-09-21 03:32:38.363335 | centos-9-stream | + 2025-09-21 03:32:38.363438 | centos-9-stream | +### kde4 2025-09-21 03:32:38.363555 | centos-9-stream | +-a always,exit -F path=/usr/libexec/kde4/kpac_dhcp_helper -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-21 03:32:38.363667 | centos-9-stream | +-a always,exit -F path=/usr/libexec/kde4/kdesud -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-21 03:32:38.363768 | centos-9-stream | + 2025-09-21 03:32:38.363871 | centos-9-stream | +## dbus-send invocation 2025-09-21 03:32:38.364027 | centos-9-stream | +### may indicate privilege escalation CVE-2021-3560 2025-09-21 03:32:38.364091 | centos-9-stream | +-w /usr/bin/dbus-send -p x -k dbus_send 2025-09-21 03:32:38.364211 | centos-9-stream | +-w /usr/bin/gdbus -p x -k gdubs_call 2025-09-21 03:32:38.364311 | centos-9-stream | + 2025-09-21 03:32:38.364419 | centos-9-stream | +## pkexec invocation 2025-09-21 03:32:38.364522 | centos-9-stream | +### may indicate privilege escalation CVE-2021-4034 2025-09-21 03:32:38.364624 | centos-9-stream | +-w /usr/bin/pkexec -p x -k pkexec 2025-09-21 03:32:38.364723 | centos-9-stream | + 2025-09-21 03:32:38.364826 | centos-9-stream | +## Suspicious shells 2025-09-21 03:32:38.364926 | centos-9-stream | +-w /bin/ash -p x -k susp_shell 2025-09-21 03:32:38.365053 | centos-9-stream | +-w /bin/csh -p x -k susp_shell 2025-09-21 03:32:38.365176 | centos-9-stream | +-w /bin/fish -p x -k susp_shell 2025-09-21 03:32:38.365280 | centos-9-stream | +-w /bin/tcsh -p x -k susp_shell 2025-09-21 03:32:38.365386 | centos-9-stream | +-w /bin/tclsh -p x -k susp_shell 2025-09-21 03:32:38.365486 | centos-9-stream | +-w /bin/xonsh -p x -k susp_shell 2025-09-21 03:32:38.365590 | centos-9-stream | +-w /usr/local/bin/xonsh -p x -k susp_shell 2025-09-21 03:32:38.365691 | centos-9-stream | +-w /bin/open -p x -k susp_shell 2025-09-21 03:32:38.366026 | centos-9-stream | +-w /bin/rbash -p x -k susp_shell 2025-09-21 03:32:38.366221 | centos-9-stream | + 2025-09-21 03:32:38.366286 | centos-9-stream | +# Web Server Actvity 2025-09-21 03:32:38.366403 | centos-9-stream | +## Change the number "33" to the ID of your WebServer user. Default: www-data:x:33:33 2025-09-21 03:32:38.366513 | centos-9-stream | +-a always,exit -F arch=b64 -S execve -F euid=33 -k detect_execve_www 2025-09-21 03:32:38.366615 | centos-9-stream | + 2025-09-21 03:32:38.366720 | centos-9-stream | +### https://clustershell.readthedocs.io/ 2025-09-21 03:32:38.366826 | centos-9-stream | +-w /bin/clush -p x -k susp_shell 2025-09-21 03:32:38.366929 | centos-9-stream | +-w /usr/local/bin/clush -p x -k susp_shell 2025-09-21 03:32:38.367051 | centos-9-stream | +-w /etc/clustershell/clush.conf -p x -k susp_shell 2025-09-21 03:32:38.367149 | centos-9-stream | + 2025-09-21 03:32:38.367314 | centos-9-stream | +### https://github.com/tmux/tmux 2025-09-21 03:32:38.367379 | centos-9-stream | +-w /bin/tmux -p x -k susp_shell 2025-09-21 03:32:38.367486 | centos-9-stream | +-w /usr/local/bin/tmux -p x -k susp_shell 2025-09-21 03:32:38.367583 | centos-9-stream | + 2025-09-21 03:32:38.367696 | centos-9-stream | +## Shell/profile configurations 2025-09-21 03:32:38.367800 | centos-9-stream | +-w /etc/profile.d/ -p wa -k shell_profiles 2025-09-21 03:32:38.367905 | centos-9-stream | +-w /etc/profile -p wa -k shell_profiles 2025-09-21 03:32:38.368035 | centos-9-stream | +-w /etc/shells -p wa -k shell_profiles 2025-09-21 03:32:38.368141 | centos-9-stream | +-w /etc/bashrc -p wa -k shell_profiles 2025-09-21 03:32:38.368260 | centos-9-stream | +-w /etc/csh.cshrc -p wa -k shell_profiles 2025-09-21 03:32:38.368404 | centos-9-stream | +-w /etc/csh.login -p wa -k shell_profiles 2025-09-21 03:32:38.368460 | centos-9-stream | +-w /etc/fish/ -p wa -k shell_profiles 2025-09-21 03:32:38.368562 | centos-9-stream | +-w /etc/zsh/ -p wa -k shell_profiles 2025-09-21 03:32:38.368664 | centos-9-stream | + 2025-09-21 03:32:38.368767 | centos-9-stream | +### https://github.com/xxh/xxh 2025-09-21 03:32:38.368873 | centos-9-stream | +-w /usr/local/bin/xxh.bash -p x -k susp_shell 2025-09-21 03:32:38.369003 | centos-9-stream | +-w /usr/local/bin/xxh.xsh -p x -k susp_shell 2025-09-21 03:32:38.369093 | centos-9-stream | +-w /usr/local/bin/xxh.zsh -p x -k susp_shell 2025-09-21 03:32:38.369213 | centos-9-stream | + 2025-09-21 03:32:38.369316 | centos-9-stream | +## Injection 2025-09-21 03:32:38.369419 | centos-9-stream | +### These rules watch for code injection by the ptrace facility. 2025-09-21 03:32:38.369528 | centos-9-stream | +### This could indicate someone trying to do something bad or just debugging 2025-09-21 03:32:38.369630 | centos-9-stream | +-a always,exit -F arch=b64 -S ptrace -F a0=0x4 -k code_injection 2025-09-21 03:32:38.369735 | centos-9-stream | +-a always,exit -F arch=b64 -S ptrace -F a0=0x5 -k data_injection 2025-09-21 03:32:38.369839 | centos-9-stream | +-a always,exit -F arch=b64 -S ptrace -F a0=0x6 -k register_injection 2025-09-21 03:32:38.369958 | centos-9-stream | +-a always,exit -F arch=b64 -S ptrace -k tracing 2025-09-21 03:32:38.370073 | centos-9-stream | + 2025-09-21 03:32:38.370193 | centos-9-stream | +## Anonymous File Creation 2025-09-21 03:32:38.370295 | centos-9-stream | +### These rules watch the use of memfd_create 2025-09-21 03:32:38.370408 | centos-9-stream | +### "memfd_create" creates anonymous file and returns a file descriptor to access it 2025-09-21 03:32:38.370520 | centos-9-stream | +### When combined with "fexecve" can be used to stealthily run binaries in memory without touching disk 2025-09-21 03:32:38.370628 | centos-9-stream | +-a always,exit -F arch=b64 -S memfd_create -F key=anon_file_create 2025-09-21 03:32:38.370730 | centos-9-stream | + 2025-09-21 03:32:38.370832 | centos-9-stream | +## Privilege Abuse 2025-09-21 03:32:38.370944 | centos-9-stream | +### The purpose of this rule is to detect when an admin may be abusing power by looking in user's home dir. 2025-09-21 03:32:38.371070 | centos-9-stream | +-a always,exit -F dir=/home -F uid=0 -F auid>=1000 -F auid!=-1 -C auid!=obj_uid -k power_abuse 2025-09-21 03:32:38.371188 | centos-9-stream | + 2025-09-21 03:32:38.371295 | centos-9-stream | +# Socket Creations 2025-09-21 03:32:38.371400 | centos-9-stream | +# will catch both IPv4 and IPv6 2025-09-21 03:32:38.371497 | centos-9-stream | + 2025-09-21 03:32:38.371605 | centos-9-stream | +-a always,exit -F arch=b32 -S socket -F a0=2 -k network_socket_created 2025-09-21 03:32:38.371712 | centos-9-stream | +-a always,exit -F arch=b64 -S socket -F a0=2 -k network_socket_created 2025-09-21 03:32:38.371812 | centos-9-stream | + 2025-09-21 03:32:38.371916 | centos-9-stream | +-a always,exit -F arch=b32 -S socket -F a0=10 -k network_socket_created 2025-09-21 03:32:38.372047 | centos-9-stream | +-a always,exit -F arch=b64 -S socket -F a0=10 -k network_socket_created 2025-09-21 03:32:38.372150 | centos-9-stream | + 2025-09-21 03:32:38.372269 | centos-9-stream | +# Software Management --------------------------------------------------------- 2025-09-21 03:32:38.372370 | centos-9-stream | + 2025-09-21 03:32:38.372474 | centos-9-stream | +# RPM (Redhat/CentOS) 2025-09-21 03:32:38.372575 | centos-9-stream | +-w /usr/bin/rpm -p x -k software_mgmt 2025-09-21 03:32:38.372685 | centos-9-stream | +-w /usr/bin/yum -p x -k software_mgmt 2025-09-21 03:32:38.372782 | centos-9-stream | + 2025-09-21 03:32:38.372888 | centos-9-stream | +# DNF (Fedora/RedHat 8/CentOS 8) 2025-09-21 03:32:38.373027 | centos-9-stream | +-w /usr/bin/dnf -p x -k software_mgmt 2025-09-21 03:32:38.373100 | centos-9-stream | + 2025-09-21 03:32:38.373229 | centos-9-stream | +# YAST/Zypper/RPM (SuSE) 2025-09-21 03:32:38.373336 | centos-9-stream | +-w /sbin/yast -p x -k software_mgmt 2025-09-21 03:32:38.373440 | centos-9-stream | +-w /sbin/yast2 -p x -k software_mgmt 2025-09-21 03:32:38.373545 | centos-9-stream | +-w /bin/rpm -p x -k software_mgmt 2025-09-21 03:32:38.373652 | centos-9-stream | +-w /usr/bin/zypper -k software_mgmt 2025-09-21 03:32:38.373754 | centos-9-stream | + 2025-09-21 03:32:38.374013 | centos-9-stream | +# DPKG / APT-GET (Debian/Ubuntu) 2025-09-21 03:32:38.374135 | centos-9-stream | +-w /usr/bin/dpkg -p x -k software_mgmt 2025-09-21 03:32:38.374253 | centos-9-stream | +-w /usr/bin/apt -p x -k software_mgmt 2025-09-21 03:32:38.374361 | centos-9-stream | +-w /usr/bin/apt-add-repository -p x -k software_mgmt 2025-09-21 03:32:38.374468 | centos-9-stream | +-w /usr/bin/apt-get -p x -k software_mgmt 2025-09-21 03:32:38.374570 | centos-9-stream | +-w /usr/bin/aptitude -p x -k software_mgmt 2025-09-21 03:32:38.374674 | centos-9-stream | +-w /usr/bin/wajig -p x -k software_mgmt 2025-09-21 03:32:38.374779 | centos-9-stream | +-w /usr/bin/snap -p x -k software_mgmt 2025-09-21 03:32:38.374925 | centos-9-stream | + 2025-09-21 03:32:38.375007 | centos-9-stream | +# PIP(3) (Python installs) 2025-09-21 03:32:38.375120 | centos-9-stream | +-w /usr/bin/pip -p x -k third_party_software_mgmt 2025-09-21 03:32:38.375253 | centos-9-stream | +-w /usr/local/bin/pip -p x -k third_party_software_mgmt 2025-09-21 03:32:38.375358 | centos-9-stream | +-w /usr/bin/pip3 -p x -k third_party_software_mgmt 2025-09-21 03:32:38.375538 | centos-9-stream | +-w /usr/local/bin/pip3 -p x -k third_party_software_mgmt 2025-09-21 03:32:38.375643 | centos-9-stream | +-w /usr/bin/pipx -p x -k third_party_software_mgmt 2025-09-21 03:32:38.375752 | centos-9-stream | +-w /usr/local/bin/pipx -p x -k third_party_software_mgmt 2025-09-21 03:32:38.375848 | centos-9-stream | + 2025-09-21 03:32:38.375952 | centos-9-stream | +# npm 2025-09-21 03:32:38.376072 | centos-9-stream | +## T1072 third party software 2025-09-21 03:32:38.376198 | centos-9-stream | +## https://www.npmjs.com 2025-09-21 03:32:38.376298 | centos-9-stream | +## https://docs.npmjs.com/cli/v6/commands/npm-audit 2025-09-21 03:32:38.376405 | centos-9-stream | +-w /usr/bin/npm -p x -k third_party_software_mgmt 2025-09-21 03:32:38.376510 | centos-9-stream | + 2025-09-21 03:32:38.376614 | centos-9-stream | +# Comprehensive Perl Archive Network (CPAN) (CPAN installs) 2025-09-21 03:32:38.376715 | centos-9-stream | +## T1072 third party software 2025-09-21 03:32:38.376815 | centos-9-stream | +## https://www.cpan.org 2025-09-21 03:32:38.376921 | centos-9-stream | +-w /usr/bin/cpan -p x -k third_party_software_mgmt 2025-09-21 03:32:38.377034 | centos-9-stream | + 2025-09-21 03:32:38.377192 | centos-9-stream | +# Ruby (RubyGems installs) 2025-09-21 03:32:38.377263 | centos-9-stream | +## T1072 third party software 2025-09-21 03:32:38.377363 | centos-9-stream | +## https://rubygems.org 2025-09-21 03:32:38.377468 | centos-9-stream | +-w /usr/bin/gem -p x -k third_party_software_mgmt 2025-09-21 03:32:38.377566 | centos-9-stream | + 2025-09-21 03:32:38.377671 | centos-9-stream | +# LuaRocks (Lua installs) 2025-09-21 03:32:38.377774 | centos-9-stream | +## T1072 third party software 2025-09-21 03:32:38.377879 | centos-9-stream | +## https://luarocks.org 2025-09-21 03:32:38.378002 | centos-9-stream | +-w /usr/bin/luarocks -p x -k third_party_software_mgmt 2025-09-21 03:32:38.378119 | centos-9-stream | + 2025-09-21 03:32:38.378854 | centos-9-stream | +# Pacman (Arch Linux) 2025-09-21 03:32:38.379085 | centos-9-stream | +## https://wiki.archlinux.org/title/Pacman 2025-09-21 03:32:38.379226 | centos-9-stream | +## T1072 third party software 2025-09-21 03:32:38.379372 | centos-9-stream | +-w /etc/pacman.conf -p x -k third_party_software_mgmt 2025-09-21 03:32:38.379436 | centos-9-stream | +-w /etc/pacman.d -p x -k third_party_software_mgmt 2025-09-21 03:32:38.379537 | centos-9-stream | + 2025-09-21 03:32:38.379640 | centos-9-stream | +# Special Software ------------------------------------------------------------ 2025-09-21 03:32:38.379736 | centos-9-stream | + 2025-09-21 03:32:38.379840 | centos-9-stream | +## GDS specific secrets 2025-09-21 03:32:38.379940 | centos-9-stream | +-w /etc/puppet/ssl -p wa -k puppet_ssl 2025-09-21 03:32:38.380057 | centos-9-stream | + 2025-09-21 03:32:38.380155 | centos-9-stream | +## IBM Bigfix BESClient 2025-09-21 03:32:38.380287 | centos-9-stream | +-a always,exit -F arch=b64 -S open -F dir=/opt/BESClient -F success=0 -k soft_besclient 2025-09-21 03:32:38.380391 | centos-9-stream | +-w /var/opt/BESClient/ -p wa -k soft_besclient 2025-09-21 03:32:38.380507 | centos-9-stream | + 2025-09-21 03:32:38.380600 | centos-9-stream | +## CHEF https://www.chef.io/chef/ 2025-09-21 03:32:38.380704 | centos-9-stream | +-w /etc/chef -p wa -k soft_chef 2025-09-21 03:32:38.380805 | centos-9-stream | + 2025-09-21 03:32:38.380903 | centos-9-stream | +## Salt 2025-09-21 03:32:38.381020 | centos-9-stream | +## https://saltproject.io/ 2025-09-21 03:32:38.381125 | centos-9-stream | +## https://docs.saltproject.io/en/latest/ref/configuration/master.html 2025-09-21 03:32:38.381247 | centos-9-stream | +-w /etc/salt -p wa -k soft_salt 2025-09-21 03:32:38.381352 | centos-9-stream | +-w /usr/local/etc/salt -p wa -k soft_salt 2025-09-21 03:32:38.381452 | centos-9-stream | + 2025-09-21 03:32:38.381554 | centos-9-stream | +## Otter 2025-09-21 03:32:38.381659 | centos-9-stream | +## https://inedo.com/otter 2025-09-21 03:32:38.381762 | centos-9-stream | +-w /etc/otter -p wa -k soft_otter 2025-09-21 03:32:38.381866 | centos-9-stream | + 2025-09-21 03:32:38.381967 | centos-9-stream | +## T1081 Credentials In Files 2025-09-21 03:32:38.382081 | centos-9-stream | +-w /usr/bin/grep -p x -k string_search 2025-09-21 03:32:38.382203 | centos-9-stream | +-w /usr/bin/egrep -p x -k string_search 2025-09-21 03:32:38.382308 | centos-9-stream | +-w /usr/bin/ugrep -p x -k string_search 2025-09-21 03:32:38.382415 | centos-9-stream | +### macOS 2025-09-21 03:32:38.382518 | centos-9-stream | +-w /usr/local/bin/grep -p x -k string_search 2025-09-21 03:32:38.382648 | centos-9-stream | +-w /usr/local/bin/egrep -p x -k string_search 2025-09-21 03:32:38.382727 | centos-9-stream | +-w /usr/local/bin/ugrep -p x -k string_search 2025-09-21 03:32:38.382829 | centos-9-stream | + 2025-09-21 03:32:38.382944 | centos-9-stream | +### https://github.com/tmbinc/bgrep 2025-09-21 03:32:38.383073 | centos-9-stream | +-w /usr/bin/bgrep -p x -k string_search 2025-09-21 03:32:38.383203 | centos-9-stream | +### macOS 2025-09-21 03:32:38.383302 | centos-9-stream | +-w /usr/local/bin/bgrep -p x -k string_search 2025-09-21 03:32:38.383404 | centos-9-stream | + 2025-09-21 03:32:38.383508 | centos-9-stream | +### https://github.com/BurntSushi/ripgrep 2025-09-21 03:32:38.383613 | centos-9-stream | +-w /usr/bin/rg -p x -k string_search 2025-09-21 03:32:38.383747 | centos-9-stream | +### macOS 2025-09-21 03:32:38.383817 | centos-9-stream | +-w /usr/local/bin/rg -p x -k string_search 2025-09-21 03:32:38.383916 | centos-9-stream | + 2025-09-21 03:32:38.384035 | centos-9-stream | +### https://github.com/awgn/cgrep 2025-09-21 03:32:38.384133 | centos-9-stream | + 2025-09-21 03:32:38.384250 | centos-9-stream | +-w /usr/bin/cgrep -p x -k string_search 2025-09-21 03:32:38.384351 | centos-9-stream | +### macOS 2025-09-21 03:32:38.384454 | centos-9-stream | +-w /usr/local/bin/cgrep -p x -k string_search 2025-09-21 03:32:38.384553 | centos-9-stream | + 2025-09-21 03:32:38.384657 | centos-9-stream | +### https://github.com/jpr5/ngrep 2025-09-21 03:32:38.384760 | centos-9-stream | +-w /usr/bin/ngrep -p x -k string_search 2025-09-21 03:32:38.384860 | centos-9-stream | +### macOS 2025-09-21 03:32:38.384962 | centos-9-stream | +-w /usr/local/bin/ngrep -p x -k string_search 2025-09-21 03:32:38.385075 | centos-9-stream | + 2025-09-21 03:32:38.385203 | centos-9-stream | +### https://github.com/vrothberg/vgrep 2025-09-21 03:32:38.385303 | centos-9-stream | +-w /usr/bin/vgrep -p x -k string_search 2025-09-21 03:32:38.385405 | centos-9-stream | +### macOS 2025-09-21 03:32:38.385509 | centos-9-stream | +-w /usr/local/bin/vgrep -p x -k string_search 2025-09-21 03:32:38.385612 | centos-9-stream | + 2025-09-21 03:32:38.385715 | centos-9-stream | +### https://github.com/monochromegane/the_platinum_searcher 2025-09-21 03:32:38.385825 | centos-9-stream | +-w /usr/bin/pt -p x -k string_search 2025-09-21 03:32:38.385937 | centos-9-stream | +### macOS 2025-09-21 03:32:38.386047 | centos-9-stream | +-w /usr/local/bin/pt -p x -k string_search 2025-09-21 03:32:38.386147 | centos-9-stream | + 2025-09-21 03:32:38.386266 | centos-9-stream | +### https://github.com/gvansickle/ucg 2025-09-21 03:32:38.386369 | centos-9-stream | +-w /usr/bin/ucg -p x -k string_search 2025-09-21 03:32:38.386472 | centos-9-stream | +### macOS 2025-09-21 03:32:38.386572 | centos-9-stream | +-w /usr/local/bin/ucg -p x -k string_search 2025-09-21 03:32:38.386676 | centos-9-stream | + 2025-09-21 03:32:38.386776 | centos-9-stream | +### https://github.com/ggreer/the_silver_searcher 2025-09-21 03:32:38.386880 | centos-9-stream | +-w /usr/bin/ag -p x -k string_search 2025-09-21 03:32:38.387058 | centos-9-stream | +### macOS 2025-09-21 03:32:38.387102 | centos-9-stream | +-w /usr/local/bin/ag -p x -k string_search 2025-09-21 03:32:38.387221 | centos-9-stream | + 2025-09-21 03:32:38.387323 | centos-9-stream | +### https://github.com/beyondgrep/ack3 2025-09-21 03:32:38.387426 | centos-9-stream | +### https://beyondgrep.com 2025-09-21 03:32:38.387527 | centos-9-stream | +-w /usr/bin/ack -p x -k string_search 2025-09-21 03:32:38.387630 | centos-9-stream | +-w /usr/local/bin/ack -p x -k string_search 2025-09-21 03:32:38.387733 | centos-9-stream | +-w /usr/bin/semgrep -p x -k string_search 2025-09-21 03:32:38.387834 | centos-9-stream | +### macOS 2025-09-21 03:32:38.387942 | centos-9-stream | +-w /usr/local/bin/semgrep -p x -k string_search 2025-09-21 03:32:38.388067 | centos-9-stream | + 2025-09-21 03:32:38.388188 | centos-9-stream | +## Docker 2025-09-21 03:32:38.388287 | centos-9-stream | +-w /usr/bin/dockerd -k docker 2025-09-21 03:32:38.388389 | centos-9-stream | +-w /usr/bin/docker -k docker 2025-09-21 03:32:38.388490 | centos-9-stream | +-w /usr/bin/docker-containerd -k docker 2025-09-21 03:32:38.388590 | centos-9-stream | +-w /usr/bin/docker-runc -k docker 2025-09-21 03:32:38.388693 | centos-9-stream | +-w /var/lib/docker -p wa -k docker 2025-09-21 03:32:38.388793 | centos-9-stream | +-w /etc/docker -k docker 2025-09-21 03:32:38.388895 | centos-9-stream | +-w /etc/sysconfig/docker -k docker 2025-09-21 03:32:38.389011 | centos-9-stream | +-w /etc/sysconfig/docker-storage -k docker 2025-09-21 03:32:38.389113 | centos-9-stream | +-w /usr/lib/systemd/system/docker.service -k docker 2025-09-21 03:32:38.389235 | centos-9-stream | +-w /usr/lib/systemd/system/docker.socket -k docker 2025-09-21 03:32:38.389335 | centos-9-stream | + 2025-09-21 03:32:38.389435 | centos-9-stream | +## Virtualization stuff 2025-09-21 03:32:38.389541 | centos-9-stream | +-w /usr/bin/qemu-system-x86_64 -p x -k qemu-system-x86_64 2025-09-21 03:32:38.389647 | centos-9-stream | +-w /usr/bin/qemu-img -p x -k qemu-img 2025-09-21 03:32:38.389750 | centos-9-stream | +-w /usr/bin/qemu-kvm -p x -k qemu-kvm 2025-09-21 03:32:38.389854 | centos-9-stream | +-w /usr/bin/qemu -p x -k qemu 2025-09-21 03:32:38.389960 | centos-9-stream | +-w /usr/bin/virtualbox -p x -k virtualbox 2025-09-21 03:32:38.390077 | centos-9-stream | +-w /usr/bin/virt-manager -p x -k virt-manager 2025-09-21 03:32:38.390195 | centos-9-stream | +-w /usr/bin/VBoxManage -p x -k VBoxManage 2025-09-21 03:32:38.390302 | centos-9-stream | + 2025-09-21 03:32:38.390408 | centos-9-stream | +#### VirtualBox on macOS 2025-09-21 03:32:38.390507 | centos-9-stream | + 2025-09-21 03:32:38.390611 | centos-9-stream | +-w /usr/local/bin/VirtualBox -p x -k virt_tool 2025-09-21 03:32:38.390716 | centos-9-stream | +-w /usr/local/bin/VirtualBoxVM -p x -k virt_tool 2025-09-21 03:32:38.390817 | centos-9-stream | +-w /usr/local/bin/VBoxManage -p x -k virt_tool 2025-09-21 03:32:38.390919 | centos-9-stream | +-w /usr/local/bin/VBoxVRDP -p x -k virt_tool 2025-09-21 03:32:38.391046 | centos-9-stream | +-w /usr/local/bin/VBoxHeadless -p x -k virt_tool 2025-09-21 03:32:38.391149 | centos-9-stream | +-w /usr/local/bin/vboxwebsrv -p x -k virt_tool 2025-09-21 03:32:38.391273 | centos-9-stream | +-w /usr/local/bin/VBoxBugReport -p x -k virt_tool 2025-09-21 03:32:38.391380 | centos-9-stream | +-w /usr/local/bin/VBoxBalloonCtrl -p x -k virt_tool 2025-09-21 03:32:38.391478 | centos-9-stream | +-w /usr/local/bin/VBoxAutostart -p x -k virt_tool 2025-09-21 03:32:38.391583 | centos-9-stream | +-w /usr/local/bin/VBoxDTrace -p x -k virt_tool 2025-09-21 03:32:38.391682 | centos-9-stream | +-w /usr/local/bin/vbox-img -p x -k virt_tool 2025-09-21 03:32:38.391790 | centos-9-stream | +-w /Library/LaunchDaemons/org.virtualbox.startup.plist -p x -k virt_tool 2025-09-21 03:32:38.391896 | centos-9-stream | +-w /Library/Application Support/VirtualBox/LaunchDaemons/ -p x -k virt_tool 2025-09-21 03:32:38.392013 | centos-9-stream | +-w /Library/Application Support/VirtualBox/VBoxDrv.kext/ -p x -k virt_tool 2025-09-21 03:32:38.392112 | centos-9-stream | +-w /Library/Application Support/VirtualBox/VBoxUSB.kext/ -p x -k virt_tool 2025-09-21 03:32:38.392230 | centos-9-stream | +-w /Library/Application Support/VirtualBox/VBoxNetFlt.kext/ -p x -k virt_tool 2025-09-21 03:32:38.392335 | centos-9-stream | +-w /Library/Application Support/VirtualBox/VBoxNetAdp.kext/ -p x -k virt_tool 2025-09-21 03:32:38.392469 | centos-9-stream | + 2025-09-21 03:32:38.392540 | centos-9-stream | +### Parallels Desktop on macOS 2025-09-21 03:32:38.392641 | centos-9-stream | + 2025-09-21 03:32:38.392745 | centos-9-stream | +-w /usr/local/bin/prl_convert -p x -k virt_tool 2025-09-21 03:32:38.392844 | centos-9-stream | +-w /usr/local/bin/prl_disk_tool -p x -k virt_tool 2025-09-21 03:32:38.392954 | centos-9-stream | +-w /usr/local/bin/prl_perf_ctl -p x -k virt_tool 2025-09-21 03:32:38.393067 | centos-9-stream | +-w /usr/local/bin/prlcore2dmp -p x -k virt_tool 2025-09-21 03:32:38.393193 | centos-9-stream | +-w /usr/local/bin/prlctl -p x -k virt_tool 2025-09-21 03:32:38.393299 | centos-9-stream | +-w /usr/local/bin/prlexec -p x -k virt_tool 2025-09-21 03:32:38.393402 | centos-9-stream | +-w /usr/local/bin/prlsrvctl -p x -k virt_tool 2025-09-21 03:32:38.393504 | centos-9-stream | +-w /Library/Preferences/Parallels -p x -k virt_tool 2025-09-21 03:32:38.393602 | centos-9-stream | + 2025-09-21 03:32:38.393702 | centos-9-stream | +### qemu on macOS 2025-09-21 03:32:38.393802 | centos-9-stream | + 2025-09-21 03:32:38.393906 | centos-9-stream | +-w /usr/local/bin/qemu-edid -p x -k virt_tool 2025-09-21 03:32:38.394038 | centos-9-stream | +-w /usr/local/bin/qemu-img -p x -k virt_tool 2025-09-21 03:32:38.394143 | centos-9-stream | +-w /usr/local/bin/qemu-io -p x -k virt_tool 2025-09-21 03:32:38.394262 | centos-9-stream | +-w /usr/local/bin/qemu-nbd -p x -k virt_tool 2025-09-21 03:32:38.394365 | centos-9-stream | +-w /usr/local/bin/qemu-system-x86_64 -p x -k virt_tool 2025-09-21 03:32:38.394478 | centos-9-stream | + 2025-09-21 03:32:38.394564 | centos-9-stream | +## Kubelet 2025-09-21 03:32:38.394667 | centos-9-stream | +-w /usr/bin/kubelet -k kubelet 2025-09-21 03:32:38.394775 | centos-9-stream | + 2025-09-21 03:32:38.394865 | centos-9-stream | +# ipc system call 2025-09-21 03:32:38.394990 | centos-9-stream | +# /usr/include/linux/ipc.h 2025-09-21 03:32:38.395078 | centos-9-stream | + 2025-09-21 03:32:38.395227 | centos-9-stream | +## msgctl 2025-09-21 03:32:38.395338 | centos-9-stream | +#-a always,exit -S ipc -F a0=14 -k Inter-Process_Communication 2025-09-21 03:32:38.395441 | centos-9-stream | +## msgget 2025-09-21 03:32:38.395545 | centos-9-stream | +#-a always,exit -S ipc -F a0=13 -k Inter-Process_Communication 2025-09-21 03:32:38.395646 | centos-9-stream | +## Use these lines on x86_64, ia64 instead 2025-09-21 03:32:38.395754 | centos-9-stream | +-a always,exit -F arch=b64 -S msgctl -k Inter-Process_Communication 2025-09-21 03:32:38.395858 | centos-9-stream | +-a always,exit -F arch=b64 -S msgget -k Inter-Process_Communication 2025-09-21 03:32:38.395957 | centos-9-stream | + 2025-09-21 03:32:38.396092 | centos-9-stream | +## semctl 2025-09-21 03:32:38.396206 | centos-9-stream | +#-a always,exit -S ipc -F a0=3 -k Inter-Process_Communication 2025-09-21 03:32:38.396314 | centos-9-stream | +## semget 2025-09-21 03:32:38.396420 | centos-9-stream | +#-a always,exit -S ipc -F a0=2 -k Inter-Process_Communication 2025-09-21 03:32:38.396520 | centos-9-stream | +## semop 2025-09-21 03:32:38.396624 | centos-9-stream | +#-a always,exit -S ipc -F a0=1 -k Inter-Process_Communication 2025-09-21 03:32:38.396729 | centos-9-stream | +## semtimedop 2025-09-21 03:32:38.396833 | centos-9-stream | +#-a always,exit -S ipc -F a0=4 -k Inter-Process_Communication 2025-09-21 03:32:38.396934 | centos-9-stream | +## Use these lines on x86_64, ia64 instead 2025-09-21 03:32:38.397051 | centos-9-stream | +-a always,exit -F arch=b64 -S semctl -k Inter-Process_Communication 2025-09-21 03:32:38.397183 | centos-9-stream | +-a always,exit -F arch=b64 -S semget -k Inter-Process_Communication 2025-09-21 03:32:38.397282 | centos-9-stream | +-a always,exit -F arch=b64 -S semop -k Inter-Process_Communication 2025-09-21 03:32:38.397383 | centos-9-stream | +-a always,exit -F arch=b64 -S semtimedop -k Inter-Process_Communication 2025-09-21 03:32:38.397479 | centos-9-stream | + 2025-09-21 03:32:38.397599 | centos-9-stream | +## shmctl 2025-09-21 03:32:38.397687 | centos-9-stream | +#-a always,exit -S ipc -F a0=24 -k Inter-Process_Communication 2025-09-21 03:32:38.397791 | centos-9-stream | +## shmget 2025-09-21 03:32:38.397913 | centos-9-stream | +#-a always,exit -S ipc -F a0=23 -k Inter-Process_Communication 2025-09-21 03:32:38.398014 | centos-9-stream | +## Use these lines on x86_64, ia64 instead 2025-09-21 03:32:38.398118 | centos-9-stream | +-a always,exit -F arch=b64 -S shmctl -k Inter-Process_Communication 2025-09-21 03:32:38.398241 | centos-9-stream | +-a always,exit -F arch=b64 -S shmget -k Inter-Process_Communication 2025-09-21 03:32:38.398337 | centos-9-stream | + 2025-09-21 03:32:38.398441 | centos-9-stream | +# High Volume Events ---------------------------------------------------------- 2025-09-21 03:32:38.398540 | centos-9-stream | + 2025-09-21 03:32:38.398642 | centos-9-stream | +## Disable these rules if they create too many events in your environment 2025-09-21 03:32:38.398740 | centos-9-stream | + 2025-09-21 03:32:38.398851 | centos-9-stream | +## Common Shells 2025-09-21 03:32:38.398948 | centos-9-stream | +-w /bin/bash -p x -k susp_shell 2025-09-21 03:32:38.399078 | centos-9-stream | +-w /bin/dash -p x -k susp_shell 2025-09-21 03:32:38.399206 | centos-9-stream | +-w /bin/busybox -p x -k susp_shell 2025-09-21 03:32:38.399315 | centos-9-stream | +-w /bin/zsh -p x -k susp_shell 2025-09-21 03:32:38.399410 | centos-9-stream | +-w /bin/sh -p x -k susp_shell 2025-09-21 03:32:38.399509 | centos-9-stream | +-w /bin/ksh -p x -k susp_shell 2025-09-21 03:32:38.399609 | centos-9-stream | + 2025-09-21 03:32:38.399711 | centos-9-stream | +## Root command executions 2025-09-21 03:32:38.399823 | centos-9-stream | +-a always,exit -F arch=b64 -F euid=0 -F auid>=1000 -F auid!=-1 -S execve -k rootcmd 2025-09-21 03:32:38.399917 | centos-9-stream | + 2025-09-21 03:32:38.400034 | centos-9-stream | +## File Deletion Events by User 2025-09-21 03:32:38.400151 | centos-9-stream | +-a always,exit -F arch=b64 -S rmdir -S unlink -S unlinkat -S rename -S renameat -F auid>=1000 -F auid!=-1 -k delete 2025-09-21 03:32:38.400259 | centos-9-stream | + 2025-09-21 03:32:38.400363 | centos-9-stream | +## File Access 2025-09-21 03:32:38.400466 | centos-9-stream | +### Unauthorized Access (unsuccessful) 2025-09-21 03:32:38.400578 | centos-9-stream | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k file_access 2025-09-21 03:32:38.400689 | centos-9-stream | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k file_access 2025-09-21 03:32:38.400790 | centos-9-stream | + 2025-09-21 03:32:38.400893 | centos-9-stream | +### Unsuccessful Creation 2025-09-21 03:32:38.401027 | centos-9-stream | +-a always,exit -F arch=b64 -S mkdir,creat,link,symlink,mknod,mknodat,linkat,symlinkat -F exit=-EACCES -k file_creation 2025-09-21 03:32:38.401138 | centos-9-stream | +-a always,exit -F arch=b64 -S mkdir,link,symlink,mkdirat -F exit=-EPERM -k file_creation 2025-09-21 03:32:38.401258 | centos-9-stream | + 2025-09-21 03:32:38.401362 | centos-9-stream | +### Unsuccessful Modification 2025-09-21 03:32:38.401472 | centos-9-stream | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EACCES -k file_modification 2025-09-21 03:32:38.401586 | centos-9-stream | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EPERM -k file_modification 2025-09-21 03:32:38.401684 | centos-9-stream | + 2025-09-21 03:32:38.401787 | centos-9-stream | +## 32bit API Exploitation 2025-09-21 03:32:38.401890 | centos-9-stream | +### If you are on a 64 bit platform, everything _should_ be running 2025-09-21 03:32:38.402005 | centos-9-stream | +### in 64 bit mode. This rule will detect any use of the 32 bit syscalls 2025-09-21 03:32:38.402110 | centos-9-stream | +### because this might be a sign of someone exploiting a hole in the 32 2025-09-21 03:32:38.402225 | centos-9-stream | +### bit API. 2025-09-21 03:32:38.402330 | centos-9-stream | +-a always,exit -F arch=b32 -S all -k 32bit_api 2025-09-21 03:32:38.402432 | centos-9-stream | + 2025-09-21 03:32:38.402534 | centos-9-stream | +# Make The Configuration Immutable -------------------------------------------- 2025-09-21 03:32:38.402631 | centos-9-stream | + 2025-09-21 03:32:38.402731 | centos-9-stream | +##-e 2 2025-09-21 03:32:38.402829 | centos-9-stream | 2025-09-21 03:32:38.403119 | centos-9-stream | changed: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": true, "checksum": "9f99ce5c4f891fbf3e2bce06ed4cb97fb9e01f41", "dest": "/etc/audit/rules.d/20-neo23x0.rules", "gid": 0, "group": "root", "item": "20-neo23x0.rules", "md5sum": "6ac57206fd77de34805c3f4d50ef8b1d", "mode": "0644", "owner": "root", "secontext": "system_u:object_r:auditd_etc_t:s0", "size": 27367, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1758425557.1383064-2109-180046707446746/.source.rules", "state": "file", "uid": 0} 2025-09-21 03:32:38.403233 | centos-9-stream | 2025-09-21 03:32:38.403340 | centos-9-stream | TASK [auditd : Manage auditd service] ****************************************** 2025-09-21 03:32:38.493383 | debian-bookworm | ok: [molecule-auditd] => {"changed": false, "cmd": ["find", "/etc/audit/rules.d", "-type", "f", "-printf", "%f\n"], "delta": "0:00:00.007936", "end": "2025-09-21 03:32:38.443073", "msg": "", "rc": 0, "start": "2025-09-21 03:32:38.435137", "stderr": "", "stderr_lines": [], "stdout": "audit.rules\n20-neo23x0.rules", "stdout_lines": ["audit.rules", "20-neo23x0.rules"]} 2025-09-21 03:32:38.493444 | debian-bookworm | 2025-09-21 03:32:38.493456 | debian-bookworm | TASK [auditd : Remove unmanaged rules files] *********************************** 2025-09-21 03:32:38.452512 | ubuntu-noble | --- before 2025-09-21 03:32:38.452565 | ubuntu-noble | +++ after: /home/zuul/.ansible/tmp/ansible-local-1870yjqauc5_/tmpeyecrcou/20-neo23x0.rules.j2 2025-09-21 03:32:38.452573 | ubuntu-noble | @@ -0,0 +1,750 @@ 2025-09-21 03:32:38.452580 | ubuntu-noble | +# ___ ___ __ __ 2025-09-21 03:32:38.452587 | ubuntu-noble | +# / | __ ______/ (_) /_____/ / 2025-09-21 03:32:38.452592 | ubuntu-noble | +# / /| |/ / / / __ / / __/ __ / 2025-09-21 03:32:38.452674 | ubuntu-noble | +# / ___ / /_/ / /_/ / / /_/ /_/ / 2025-09-21 03:32:38.452893 | ubuntu-noble | +# /_/ |_\__,_/\__,_/_/\__/\__,_/ 2025-09-21 03:32:38.453100 | ubuntu-noble | +# 2025-09-21 03:32:38.453319 | ubuntu-noble | +# Linux Audit Daemon - Best Practice Configuration 2025-09-21 03:32:38.453573 | ubuntu-noble | +# /etc/audit/audit.rules 2025-09-21 03:32:38.453786 | ubuntu-noble | +# 2025-09-21 03:32:38.453997 | ubuntu-noble | +# Compiled by Florian Roth 2025-09-21 03:32:38.454200 | ubuntu-noble | +# 2025-09-21 03:32:38.454407 | ubuntu-noble | +# Created : 2017/12/05 2025-09-21 03:32:38.454686 | ubuntu-noble | +# Modified : 2023/01/25 2025-09-21 03:32:38.454892 | ubuntu-noble | +# 2025-09-21 03:32:38.455090 | ubuntu-noble | +# Based on rules published here: 2025-09-21 03:32:38.455286 | ubuntu-noble | +# Gov.uk auditd rules 2025-09-21 03:32:38.455755 | ubuntu-noble | +# https://github.com/gds-operations/puppet-auditd/pull/1 2025-09-21 03:32:38.456059 | ubuntu-noble | +# CentOS 7 hardening 2025-09-21 03:32:38.456376 | ubuntu-noble | +# https://highon.coffee/blog/security-harden-centos-7/#auditd---audit-daemon 2025-09-21 03:32:38.456726 | ubuntu-noble | +# Linux audit repo 2025-09-21 03:32:38.457023 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/tree/master/rules 2025-09-21 03:32:38.457266 | ubuntu-noble | +# Auditd high performance linux auditing 2025-09-21 03:32:38.457567 | ubuntu-noble | +# https://linux-audit.com/tuning-auditd-high-performance-linux-auditing/ 2025-09-21 03:32:38.457748 | ubuntu-noble | +# 2025-09-21 03:32:38.457922 | ubuntu-noble | +# Further rules 2025-09-21 03:32:38.458163 | ubuntu-noble | +# For PCI DSS compliance see: 2025-09-21 03:32:38.458447 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-pci-dss-v31.rules 2025-09-21 03:32:38.458711 | ubuntu-noble | +# For NISPOM compliance see: 2025-09-21 03:32:38.459002 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-nispom.rules 2025-09-21 03:32:38.459201 | ubuntu-noble | + 2025-09-21 03:32:38.459377 | ubuntu-noble | +# Remove any existing rules 2025-09-21 03:32:38.459587 | ubuntu-noble | +-D 2025-09-21 03:32:38.459764 | ubuntu-noble | + 2025-09-21 03:32:38.459936 | ubuntu-noble | +# Buffer Size 2025-09-21 03:32:38.460109 | ubuntu-noble | +## Feel free to increase this if the machine panic's 2025-09-21 03:32:38.460276 | ubuntu-noble | +-b 8192 2025-09-21 03:32:38.460455 | ubuntu-noble | + 2025-09-21 03:32:38.460680 | ubuntu-noble | +# Failure Mode 2025-09-21 03:32:38.460883 | ubuntu-noble | +## Possible values: 0 (silent), 1 (printk, print a failure message), 2 (panic, halt the system) 2025-09-21 03:32:38.461051 | ubuntu-noble | +-f 1 2025-09-21 03:32:38.461199 | ubuntu-noble | + 2025-09-21 03:32:38.461350 | ubuntu-noble | +# Ignore errors 2025-09-21 03:32:38.461549 | ubuntu-noble | +## e.g. caused by users or files not found in the local environment 2025-09-21 03:32:38.461702 | ubuntu-noble | +-i 2025-09-21 03:32:38.461852 | ubuntu-noble | + 2025-09-21 03:32:38.462004 | ubuntu-noble | +# Self Auditing --------------------------------------------------------------- 2025-09-21 03:32:38.462149 | ubuntu-noble | + 2025-09-21 03:32:38.462300 | ubuntu-noble | +## Audit the audit logs 2025-09-21 03:32:38.462479 | ubuntu-noble | +### Successful and unsuccessful attempts to read information from the audit records 2025-09-21 03:32:38.462651 | ubuntu-noble | +-w /var/log/audit/ -p wra -k auditlog 2025-09-21 03:32:38.462804 | ubuntu-noble | +-w /var/audit/ -p wra -k auditlog 2025-09-21 03:32:38.462946 | ubuntu-noble | + 2025-09-21 03:32:38.463097 | ubuntu-noble | +## Auditd configuration 2025-09-21 03:32:38.463257 | ubuntu-noble | +### Modifications to audit configuration that occur while the audit collection functions are operating 2025-09-21 03:32:38.463410 | ubuntu-noble | +-w /etc/audit/ -p wa -k auditconfig 2025-09-21 03:32:38.464456 | ubuntu-noble | +-w /etc/libaudit.conf -p wa -k auditconfig 2025-09-21 03:32:38.464470 | ubuntu-noble | +-w /etc/audisp/ -p wa -k audispconfig 2025-09-21 03:32:38.464475 | ubuntu-noble | + 2025-09-21 03:32:38.464480 | ubuntu-noble | +## Monitor for use of audit management tools 2025-09-21 03:32:38.464521 | ubuntu-noble | +-w /sbin/auditctl -p x -k audittools 2025-09-21 03:32:38.464527 | ubuntu-noble | +-w /sbin/auditd -p x -k audittools 2025-09-21 03:32:38.464531 | ubuntu-noble | +-w /usr/sbin/auditd -p x -k audittools 2025-09-21 03:32:38.464681 | ubuntu-noble | +-w /usr/sbin/augenrules -p x -k audittools 2025-09-21 03:32:38.464846 | ubuntu-noble | + 2025-09-21 03:32:38.464997 | ubuntu-noble | +## Access to all audit trails 2025-09-21 03:32:38.465135 | ubuntu-noble | + 2025-09-21 03:32:38.465288 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/ausearch -F perm=x -k audittools 2025-09-21 03:32:38.465461 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aureport -F perm=x -k audittools 2025-09-21 03:32:38.465637 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aulast -F perm=x -k audittools 2025-09-21 03:32:38.465786 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aulastlogin -F perm=x -k audittools 2025-09-21 03:32:38.465935 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/auvirt -F perm=x -k audittools 2025-09-21 03:32:38.466073 | ubuntu-noble | + 2025-09-21 03:32:38.466217 | ubuntu-noble | +# Filters --------------------------------------------------------------------- 2025-09-21 03:32:38.466356 | ubuntu-noble | + 2025-09-21 03:32:38.466536 | ubuntu-noble | +### We put these early because audit is a first match wins system. 2025-09-21 03:32:38.466679 | ubuntu-noble | + 2025-09-21 03:32:38.466827 | ubuntu-noble | +## Ignore SELinux AVC records 2025-09-21 03:32:38.466974 | ubuntu-noble | +-a always,exclude -F msgtype=AVC 2025-09-21 03:32:38.467113 | ubuntu-noble | + 2025-09-21 03:32:38.467257 | ubuntu-noble | +## Ignore current working directory records 2025-09-21 03:32:38.467403 | ubuntu-noble | +-a always,exclude -F msgtype=CWD 2025-09-21 03:32:38.467604 | ubuntu-noble | + 2025-09-21 03:32:38.467770 | ubuntu-noble | +## Cron jobs fill the logs with stuff we normally don't want (works with SELinux) 2025-09-21 03:32:38.467910 | ubuntu-noble | +-a never,user -F subj_type=crond_t 2025-09-21 03:32:38.468042 | ubuntu-noble | +-a never,exit -F subj_type=crond_t 2025-09-21 03:32:38.468168 | ubuntu-noble | + 2025-09-21 03:32:38.468298 | ubuntu-noble | +## This prevents chrony from overwhelming the logs 2025-09-21 03:32:38.468452 | ubuntu-noble | +-a never,exit -F arch=b64 -S adjtimex -F auid=-1 -F uid=chrony -F subj_type=chronyd_t 2025-09-21 03:32:38.468596 | ubuntu-noble | + 2025-09-21 03:32:38.468736 | ubuntu-noble | +## This is not very interesting and wastes a lot of space if the server is public facing 2025-09-21 03:32:38.468871 | ubuntu-noble | +-a always,exclude -F msgtype=CRYPTO_KEY_USER 2025-09-21 03:32:38.468996 | ubuntu-noble | + 2025-09-21 03:32:38.469125 | ubuntu-noble | +## Open VM Tools 2025-09-21 03:32:38.469275 | ubuntu-noble | +-a exit,never -F arch=b64 -S all -F exe=/usr/bin/vmtoolsd 2025-09-21 03:32:38.469401 | ubuntu-noble | + 2025-09-21 03:32:38.469566 | ubuntu-noble | +## High Volume Event Filter (especially on Linux Workstations) 2025-09-21 03:32:38.469703 | ubuntu-noble | +-a never,exit -F arch=b64 -F dir=/dev/shm -k sharedmemaccess 2025-09-21 03:32:38.469836 | ubuntu-noble | +-a never,exit -F arch=b64 -F dir=/var/lock/lvm -k locklvm 2025-09-21 03:32:38.469960 | ubuntu-noble | + 2025-09-21 03:32:38.470090 | ubuntu-noble | +## FileBeat 2025-09-21 03:32:38.470224 | ubuntu-noble | +-a never,exit -F arch=b64 -F path=/opt/filebeat -k filebeat 2025-09-21 03:32:38.470347 | ubuntu-noble | + 2025-09-21 03:32:38.470522 | ubuntu-noble | +## More information on how to filter events 2025-09-21 03:32:38.470668 | ubuntu-noble | +### https://access.redhat.com/solutions/2482221 2025-09-21 03:32:38.470794 | ubuntu-noble | + 2025-09-21 03:32:38.470923 | ubuntu-noble | +# Rules ----------------------------------------------------------------------- 2025-09-21 03:32:38.471038 | ubuntu-noble | + 2025-09-21 03:32:38.472448 | ubuntu-noble | +## Kernel parameters 2025-09-21 03:32:38.472460 | ubuntu-noble | +-w /etc/sysctl.conf -p wa -k sysctl 2025-09-21 03:32:38.472464 | ubuntu-noble | +-w /etc/sysctl.d -p wa -k sysctl 2025-09-21 03:32:38.472467 | ubuntu-noble | + 2025-09-21 03:32:38.472470 | ubuntu-noble | +## Kernel module loading and unloading 2025-09-21 03:32:38.472474 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/insmod -k modules 2025-09-21 03:32:38.472477 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/modprobe -k modules 2025-09-21 03:32:38.472481 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/rmmod -k modules 2025-09-21 03:32:38.472513 | ubuntu-noble | +-a always,exit -F arch=b64 -S finit_module -S init_module -S delete_module -F auid!=-1 -k modules 2025-09-21 03:32:38.472517 | ubuntu-noble | + 2025-09-21 03:32:38.472520 | ubuntu-noble | +## Modprobe configuration 2025-09-21 03:32:38.472524 | ubuntu-noble | +-w /etc/modprobe.conf -p wa -k modprobe 2025-09-21 03:32:38.472528 | ubuntu-noble | +-w /etc/modprobe.d -p wa -k modprobe 2025-09-21 03:32:38.472589 | ubuntu-noble | + 2025-09-21 03:32:38.472712 | ubuntu-noble | +## KExec usage (all actions) 2025-09-21 03:32:38.472834 | ubuntu-noble | +-a always,exit -F arch=b64 -S kexec_load -k KEXEC 2025-09-21 03:32:38.472945 | ubuntu-noble | + 2025-09-21 03:32:38.473062 | ubuntu-noble | +## Special files 2025-09-21 03:32:38.473183 | ubuntu-noble | +-a always,exit -F arch=b64 -S mknod -S mknodat -k specialfiles 2025-09-21 03:32:38.473298 | ubuntu-noble | + 2025-09-21 03:32:38.473427 | ubuntu-noble | +## Mount operations (only attributable) 2025-09-21 03:32:38.473587 | ubuntu-noble | +-a always,exit -F arch=b64 -S mount -S umount2 -F auid!=-1 -k mount 2025-09-21 03:32:38.473700 | ubuntu-noble | + 2025-09-21 03:32:38.473816 | ubuntu-noble | +### NFS mount 2025-09-21 03:32:38.473950 | ubuntu-noble | +-a always,exit -F path=/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-21 03:32:38.474081 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-21 03:32:38.474193 | ubuntu-noble | + 2025-09-21 03:32:38.474313 | ubuntu-noble | +## Change swap (only attributable) 2025-09-21 03:32:38.474448 | ubuntu-noble | +-a always,exit -F arch=b64 -S swapon -S swapoff -F auid!=-1 -k swap 2025-09-21 03:32:38.474605 | ubuntu-noble | + 2025-09-21 03:32:38.474722 | ubuntu-noble | +## Time 2025-09-21 03:32:38.474854 | ubuntu-noble | +-a always,exit -F arch=b64 -F uid!=ntp -S adjtimex -S settimeofday -S clock_settime -k time 2025-09-21 03:32:38.474974 | ubuntu-noble | +### Local time zone 2025-09-21 03:32:38.475091 | ubuntu-noble | +-w /etc/localtime -p wa -k localtime 2025-09-21 03:32:38.475206 | ubuntu-noble | + 2025-09-21 03:32:38.475322 | ubuntu-noble | +## Stunnel 2025-09-21 03:32:38.475454 | ubuntu-noble | +-w /usr/sbin/stunnel -p x -k stunnel 2025-09-21 03:32:38.475589 | ubuntu-noble | +-w /usr/bin/stunnel -p x -k stunnel 2025-09-21 03:32:38.475702 | ubuntu-noble | + 2025-09-21 03:32:38.475821 | ubuntu-noble | +## Cron configuration & scheduled jobs 2025-09-21 03:32:38.475938 | ubuntu-noble | +-w /etc/cron.allow -p wa -k cron 2025-09-21 03:32:38.476056 | ubuntu-noble | +-w /etc/cron.deny -p wa -k cron 2025-09-21 03:32:38.476173 | ubuntu-noble | +-w /etc/cron.d/ -p wa -k cron 2025-09-21 03:32:38.476292 | ubuntu-noble | +-w /etc/cron.daily/ -p wa -k cron 2025-09-21 03:32:38.476412 | ubuntu-noble | +-w /etc/cron.hourly/ -p wa -k cron 2025-09-21 03:32:38.476555 | ubuntu-noble | +-w /etc/cron.monthly/ -p wa -k cron 2025-09-21 03:32:38.476679 | ubuntu-noble | +-w /etc/cron.weekly/ -p wa -k cron 2025-09-21 03:32:38.476797 | ubuntu-noble | +-w /etc/crontab -p wa -k cron 2025-09-21 03:32:38.476915 | ubuntu-noble | +-w /var/spool/cron/ -p wa -k cron 2025-09-21 03:32:38.477042 | ubuntu-noble | + 2025-09-21 03:32:38.477163 | ubuntu-noble | +## User, group, password databases 2025-09-21 03:32:38.477281 | ubuntu-noble | +-w /etc/group -p wa -k etcgroup 2025-09-21 03:32:38.477397 | ubuntu-noble | +-w /etc/passwd -p wa -k etcpasswd 2025-09-21 03:32:38.477568 | ubuntu-noble | +-w /etc/gshadow -k etcgroup 2025-09-21 03:32:38.477692 | ubuntu-noble | +-w /etc/shadow -k etcpasswd 2025-09-21 03:32:38.477809 | ubuntu-noble | +-w /etc/security/opasswd -k opasswd 2025-09-21 03:32:38.477923 | ubuntu-noble | + 2025-09-21 03:32:38.478043 | ubuntu-noble | +## Sudoers file changes 2025-09-21 03:32:38.478163 | ubuntu-noble | +-w /etc/sudoers -p wa -k actions 2025-09-21 03:32:38.478284 | ubuntu-noble | +-w /etc/sudoers.d/ -p wa -k actions 2025-09-21 03:32:38.478396 | ubuntu-noble | + 2025-09-21 03:32:38.478545 | ubuntu-noble | +## Passwd 2025-09-21 03:32:38.478670 | ubuntu-noble | +-w /usr/bin/passwd -p x -k passwd_modification 2025-09-21 03:32:38.478783 | ubuntu-noble | + 2025-09-21 03:32:38.478903 | ubuntu-noble | +## Tools to change group identifiers 2025-09-21 03:32:38.479023 | ubuntu-noble | +-w /usr/sbin/groupadd -p x -k group_modification 2025-09-21 03:32:38.479142 | ubuntu-noble | +-w /usr/sbin/groupmod -p x -k group_modification 2025-09-21 03:32:38.479263 | ubuntu-noble | +-w /usr/sbin/addgroup -p x -k group_modification 2025-09-21 03:32:38.479383 | ubuntu-noble | +-w /usr/sbin/useradd -p x -k user_modification 2025-09-21 03:32:38.479530 | ubuntu-noble | +-w /usr/sbin/userdel -p x -k user_modification 2025-09-21 03:32:38.479655 | ubuntu-noble | +-w /usr/sbin/usermod -p x -k user_modification 2025-09-21 03:32:38.479778 | ubuntu-noble | +-w /usr/sbin/adduser -p x -k user_modification 2025-09-21 03:32:38.479890 | ubuntu-noble | + 2025-09-21 03:32:38.480009 | ubuntu-noble | +## Login configuration and information 2025-09-21 03:32:38.480130 | ubuntu-noble | +-w /etc/login.defs -p wa -k login 2025-09-21 03:32:38.480251 | ubuntu-noble | +-w /etc/securetty -p wa -k login 2025-09-21 03:32:38.480369 | ubuntu-noble | +-w /var/log/faillog -p wa -k login 2025-09-21 03:32:38.480537 | ubuntu-noble | +-w /var/log/lastlog -p wa -k login 2025-09-21 03:32:38.482426 | ubuntu-noble | +-w /var/log/tallylog -p wa -k login 2025-09-21 03:32:38.482478 | ubuntu-noble | + 2025-09-21 03:32:38.482483 | ubuntu-noble | +## Network Environment 2025-09-21 03:32:38.482503 | ubuntu-noble | +### Changes to hostname 2025-09-21 03:32:38.482506 | ubuntu-noble | +-a always,exit -F arch=b64 -S sethostname -S setdomainname -k network_modifications 2025-09-21 03:32:38.482533 | ubuntu-noble | + 2025-09-21 03:32:38.482663 | ubuntu-noble | +### Detect Remote Shell Use 2025-09-21 03:32:38.482795 | ubuntu-noble | +-a always,exit -F arch=b64 -F exe=/bin/bash -F success=1 -S connect -k "remote_shell" 2025-09-21 03:32:38.482924 | ubuntu-noble | +-a always,exit -F arch=b64 -F exe=/usr/bin/bash -F success=1 -S connect -k "remote_shell" 2025-09-21 03:32:38.483040 | ubuntu-noble | + 2025-09-21 03:32:38.483161 | ubuntu-noble | +### Successful IPv4 Connections 2025-09-21 03:32:38.483287 | ubuntu-noble | +-a always,exit -F arch=b64 -S connect -F a2=16 -F success=1 -F key=network_connect_4 2025-09-21 03:32:38.483402 | ubuntu-noble | + 2025-09-21 03:32:38.483585 | ubuntu-noble | +### Successful IPv6 Connections 2025-09-21 03:32:38.483722 | ubuntu-noble | +-a always,exit -F arch=b64 -S connect -F a2=28 -F success=1 -F key=network_connect_6 2025-09-21 03:32:38.483835 | ubuntu-noble | + 2025-09-21 03:32:38.483955 | ubuntu-noble | +### Changes to other files 2025-09-21 03:32:38.484078 | ubuntu-noble | +-w /etc/hosts -p wa -k network_modifications 2025-09-21 03:32:38.485354 | ubuntu-noble | +-w /etc/sysconfig/network -p wa -k network_modifications 2025-09-21 03:32:38.485719 | ubuntu-noble | +-w /etc/sysconfig/network-scripts -p w -k network_modifications 2025-09-21 03:32:38.485862 | ubuntu-noble | +-w /etc/network/ -p wa -k network 2025-09-21 03:32:38.485991 | ubuntu-noble | +-a always,exit -F dir=/etc/NetworkManager/ -F perm=wa -k network_modifications 2025-09-21 03:32:38.486111 | ubuntu-noble | + 2025-09-21 03:32:38.486233 | ubuntu-noble | +### Changes to issue 2025-09-21 03:32:38.486354 | ubuntu-noble | +-w /etc/issue -p wa -k etcissue 2025-09-21 03:32:38.487463 | ubuntu-noble | +-w /etc/issue.net -p wa -k etcissue 2025-09-21 03:32:38.487477 | ubuntu-noble | + 2025-09-21 03:32:38.487481 | ubuntu-noble | +## System startup scripts 2025-09-21 03:32:38.487498 | ubuntu-noble | +-w /etc/inittab -p wa -k init 2025-09-21 03:32:38.487502 | ubuntu-noble | +-w /etc/init.d/ -p wa -k init 2025-09-21 03:32:38.487505 | ubuntu-noble | +-w /etc/init/ -p wa -k init 2025-09-21 03:32:38.487509 | ubuntu-noble | + 2025-09-21 03:32:38.487512 | ubuntu-noble | +## Library search paths 2025-09-21 03:32:38.487516 | ubuntu-noble | +-w /etc/ld.so.conf -p wa -k libpath 2025-09-21 03:32:38.487519 | ubuntu-noble | +-w /etc/ld.so.conf.d -p wa -k libpath 2025-09-21 03:32:38.487845 | ubuntu-noble | + 2025-09-21 03:32:38.487999 | ubuntu-noble | +## Systemwide library preloads (LD_PRELOAD) 2025-09-21 03:32:38.488121 | ubuntu-noble | +-w /etc/ld.so.preload -p wa -k systemwide_preloads 2025-09-21 03:32:38.488234 | ubuntu-noble | + 2025-09-21 03:32:38.488352 | ubuntu-noble | +## Pam configuration 2025-09-21 03:32:38.488534 | ubuntu-noble | +-w /etc/pam.d/ -p wa -k pam 2025-09-21 03:32:38.488670 | ubuntu-noble | +-w /etc/security/limits.conf -p wa -k pam 2025-09-21 03:32:38.488788 | ubuntu-noble | +-w /etc/security/limits.d -p wa -k pam 2025-09-21 03:32:38.488907 | ubuntu-noble | +-w /etc/security/pam_env.conf -p wa -k pam 2025-09-21 03:32:38.489028 | ubuntu-noble | +-w /etc/security/namespace.conf -p wa -k pam 2025-09-21 03:32:38.489146 | ubuntu-noble | +-w /etc/security/namespace.d -p wa -k pam 2025-09-21 03:32:38.489540 | ubuntu-noble | +-w /etc/security/namespace.init -p wa -k pam 2025-09-21 03:32:38.489672 | ubuntu-noble | + 2025-09-21 03:32:38.489792 | ubuntu-noble | +## Mail configuration 2025-09-21 03:32:38.489911 | ubuntu-noble | +-w /etc/aliases -p wa -k mail 2025-09-21 03:32:38.490029 | ubuntu-noble | +-w /etc/postfix/ -p wa -k mail 2025-09-21 03:32:38.490146 | ubuntu-noble | +-w /etc/exim4/ -p wa -k mail 2025-09-21 03:32:38.490258 | ubuntu-noble | + 2025-09-21 03:32:38.490376 | ubuntu-noble | +## SSH configuration 2025-09-21 03:32:38.490524 | ubuntu-noble | +-w /etc/ssh/sshd_config -k sshd 2025-09-21 03:32:38.490648 | ubuntu-noble | +-w /etc/ssh/sshd_config.d -k sshd 2025-09-21 03:32:38.490763 | ubuntu-noble | + 2025-09-21 03:32:38.490881 | ubuntu-noble | +## root ssh key tampering 2025-09-21 03:32:38.490998 | ubuntu-noble | +-w /root/.ssh -p wa -k rootkey 2025-09-21 03:32:38.491110 | ubuntu-noble | + 2025-09-21 03:32:38.491225 | ubuntu-noble | +# Systemd 2025-09-21 03:32:38.491347 | ubuntu-noble | +-w /bin/systemctl -p x -k systemd 2025-09-21 03:32:38.491514 | ubuntu-noble | +-w /etc/systemd/ -p wa -k systemd 2025-09-21 03:32:38.491645 | ubuntu-noble | +-w /usr/lib/systemd -p wa -k systemd 2025-09-21 03:32:38.491760 | ubuntu-noble | + 2025-09-21 03:32:38.491880 | ubuntu-noble | +## https://systemd.network/systemd.generator.html 2025-09-21 03:32:38.492000 | ubuntu-noble | +-w /etc/systemd/system-generators/ -p wa -k systemd_generator 2025-09-21 03:32:38.492121 | ubuntu-noble | +-w /usr/local/lib/systemd/system-generators/ -p wa -k systemd_generator 2025-09-21 03:32:38.492241 | ubuntu-noble | +-w /usr/lib/systemd/system-generators -p wa -k systemd_generator 2025-09-21 03:32:38.492352 | ubuntu-noble | + 2025-09-21 03:32:38.492498 | ubuntu-noble | +-w /etc/systemd/user-generators/ -p wa -k systemd_generator 2025-09-21 03:32:38.493466 | ubuntu-noble | +-w /usr/local/lib/systemd/user-generators/ -p wa -k systemd_generator 2025-09-21 03:32:38.493477 | ubuntu-noble | +-w /lib/systemd/system-generators/ -p wa -k systemd_generator 2025-09-21 03:32:38.493481 | ubuntu-noble | + 2025-09-21 03:32:38.493515 | ubuntu-noble | +## SELinux events that modify the system's Mandatory Access Controls (MAC) 2025-09-21 03:32:38.493519 | ubuntu-noble | +-w /etc/selinux/ -p wa -k mac_policy 2025-09-21 03:32:38.493522 | ubuntu-noble | + 2025-09-21 03:32:38.493525 | ubuntu-noble | +## Critical elements access failures 2025-09-21 03:32:38.493529 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/etc -F success=0 -k unauthedfileaccess 2025-09-21 03:32:38.493533 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/bin -F success=0 -k unauthedfileaccess 2025-09-21 03:32:38.493663 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/sbin -F success=0 -k unauthedfileaccess 2025-09-21 03:32:38.493790 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/usr/bin -F success=0 -k unauthedfileaccess 2025-09-21 03:32:38.493915 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/usr/sbin -F success=0 -k unauthedfileaccess 2025-09-21 03:32:38.494044 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/var -F success=0 -k unauthedfileaccess 2025-09-21 03:32:38.494169 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/home -F success=0 -k unauthedfileaccess 2025-09-21 03:32:38.494295 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/srv -F success=0 -k unauthedfileaccess 2025-09-21 03:32:38.494409 | ubuntu-noble | + 2025-09-21 03:32:38.494565 | ubuntu-noble | +## Process ID change (switching accounts) applications 2025-09-21 03:32:38.494690 | ubuntu-noble | +-w /bin/su -p x -k priv_esc 2025-09-21 03:32:38.494811 | ubuntu-noble | +-w /usr/bin/sudo -p x -k priv_esc 2025-09-21 03:32:38.494924 | ubuntu-noble | + 2025-09-21 03:32:38.495043 | ubuntu-noble | +## Power state 2025-09-21 03:32:38.495161 | ubuntu-noble | +-w /sbin/shutdown -p x -k power 2025-09-21 03:32:38.495278 | ubuntu-noble | +-w /sbin/poweroff -p x -k power 2025-09-21 03:32:38.495394 | ubuntu-noble | +-w /sbin/reboot -p x -k power 2025-09-21 03:32:38.495542 | ubuntu-noble | +-w /sbin/halt -p x -k power 2025-09-21 03:32:38.495671 | ubuntu-noble | + 2025-09-21 03:32:38.495790 | ubuntu-noble | +## Session initiation information 2025-09-21 03:32:38.495908 | ubuntu-noble | +-w /var/run/utmp -p wa -k session 2025-09-21 03:32:38.496026 | ubuntu-noble | +-w /var/log/btmp -p wa -k session 2025-09-21 03:32:38.496146 | ubuntu-noble | +-w /var/log/wtmp -p wa -k session 2025-09-21 03:32:38.496258 | ubuntu-noble | + 2025-09-21 03:32:38.496378 | ubuntu-noble | +## Discretionary Access Control (DAC) modifications 2025-09-21 03:32:38.496568 | ubuntu-noble | +-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:38.496701 | ubuntu-noble | +-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:38.496824 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:38.496946 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:38.497071 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:38.497196 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:38.497324 | ubuntu-noble | +-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:38.497462 | ubuntu-noble | +-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:38.497605 | ubuntu-noble | +-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:38.497732 | ubuntu-noble | +-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:38.497853 | ubuntu-noble | +-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:38.497976 | ubuntu-noble | +-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:38.498098 | ubuntu-noble | +-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2025-09-21 03:32:38.498212 | ubuntu-noble | + 2025-09-21 03:32:38.498329 | ubuntu-noble | +# Special Rules --------------------------------------------------------------- 2025-09-21 03:32:38.498459 | ubuntu-noble | + 2025-09-21 03:32:38.498596 | ubuntu-noble | +## Reconnaissance 2025-09-21 03:32:38.498718 | ubuntu-noble | +-w /usr/bin/whoami -p x -k recon 2025-09-21 03:32:38.498836 | ubuntu-noble | +-w /usr/bin/id -p x -k recon 2025-09-21 03:32:38.498954 | ubuntu-noble | +-w /bin/hostname -p x -k recon 2025-09-21 03:32:38.499072 | ubuntu-noble | +-w /bin/uname -p x -k recon 2025-09-21 03:32:38.499190 | ubuntu-noble | +-w /etc/issue -p r -k recon 2025-09-21 03:32:38.499306 | ubuntu-noble | +-w /etc/hostname -p r -k recon 2025-09-21 03:32:38.499419 | ubuntu-noble | + 2025-09-21 03:32:38.499586 | ubuntu-noble | +## Suspicious activity 2025-09-21 03:32:38.499714 | ubuntu-noble | +-w /usr/bin/wget -p x -k susp_activity 2025-09-21 03:32:38.499834 | ubuntu-noble | +-w /usr/bin/curl -p x -k susp_activity 2025-09-21 03:32:38.499965 | ubuntu-noble | +-w /usr/bin/base64 -p x -k susp_activity 2025-09-21 03:32:38.501447 | ubuntu-noble | +-w /bin/nc -p x -k susp_activity 2025-09-21 03:32:38.501458 | ubuntu-noble | +-w /bin/netcat -p x -k susp_activity 2025-09-21 03:32:38.501462 | ubuntu-noble | +-w /usr/bin/ncat -p x -k susp_activity 2025-09-21 03:32:38.501465 | ubuntu-noble | +-w /usr/bin/ss -p x -k susp_activity 2025-09-21 03:32:38.501469 | ubuntu-noble | +-w /usr/bin/netstat -p x -k susp_activity 2025-09-21 03:32:38.501472 | ubuntu-noble | +-w /usr/bin/ssh -p x -k susp_activity 2025-09-21 03:32:38.501475 | ubuntu-noble | +-w /usr/bin/scp -p x -k susp_activity 2025-09-21 03:32:38.501478 | ubuntu-noble | +-w /usr/bin/sftp -p x -k susp_activity 2025-09-21 03:32:38.501482 | ubuntu-noble | +-w /usr/bin/ftp -p x -k susp_activity 2025-09-21 03:32:38.501496 | ubuntu-noble | +-w /usr/bin/socat -p x -k susp_activity 2025-09-21 03:32:38.501500 | ubuntu-noble | +-w /usr/bin/wireshark -p x -k susp_activity 2025-09-21 03:32:38.501503 | ubuntu-noble | +-w /usr/bin/tshark -p x -k susp_activity 2025-09-21 03:32:38.501506 | ubuntu-noble | +-w /usr/bin/rawshark -p x -k susp_activity 2025-09-21 03:32:38.501510 | ubuntu-noble | +-w /usr/bin/rdesktop -p x -k susp_activity 2025-09-21 03:32:38.501591 | ubuntu-noble | +-w /usr/local/bin/rdesktop -p x -k susp_activity 2025-09-21 03:32:38.501712 | ubuntu-noble | +-w /usr/bin/wlfreerdp -p x -k susp_activity 2025-09-21 03:32:38.501829 | ubuntu-noble | +-w /usr/bin/xfreerdp -p x -k susp_activity 2025-09-21 03:32:38.501947 | ubuntu-noble | +-w /usr/local/bin/xfreerdp -p x -k susp_activity 2025-09-21 03:32:38.502064 | ubuntu-noble | +-w /usr/bin/nmap -p x -k susp_activity 2025-09-21 03:32:38.502174 | ubuntu-noble | + 2025-09-21 03:32:38.502291 | ubuntu-noble | +## sssd 2025-09-21 03:32:38.502448 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/p11_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-21 03:32:38.502620 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/krb5_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-21 03:32:38.502751 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/ldap_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-21 03:32:38.502882 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/selinux_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-21 03:32:38.503013 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/proxy_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-21 03:32:38.503125 | ubuntu-noble | + 2025-09-21 03:32:38.503243 | ubuntu-noble | +## T1002 Data Compressed 2025-09-21 03:32:38.503354 | ubuntu-noble | + 2025-09-21 03:32:38.503519 | ubuntu-noble | +-w /usr/bin/zip -p x -k Data_Compressed 2025-09-21 03:32:38.503650 | ubuntu-noble | +-w /usr/bin/gzip -p x -k Data_Compressed 2025-09-21 03:32:38.503770 | ubuntu-noble | +-w /usr/bin/tar -p x -k Data_Compressed 2025-09-21 03:32:38.503890 | ubuntu-noble | +-w /usr/bin/bzip2 -p x -k Data_Compressed 2025-09-21 03:32:38.504002 | ubuntu-noble | + 2025-09-21 03:32:38.504121 | ubuntu-noble | +-w /usr/bin/lzip -p x -k Data_Compressed 2025-09-21 03:32:38.504241 | ubuntu-noble | +-w /usr/local/bin/lzip -p x -k Data_Compressed 2025-09-21 03:32:38.504354 | ubuntu-noble | + 2025-09-21 03:32:38.504501 | ubuntu-noble | +-w /usr/bin/lz4 -p x -k Data_Compressed 2025-09-21 03:32:38.504627 | ubuntu-noble | +-w /usr/local/bin/lz4 -p x -k Data_Compressed 2025-09-21 03:32:38.504739 | ubuntu-noble | + 2025-09-21 03:32:38.504856 | ubuntu-noble | +-w /usr/bin/lzop -p x -k Data_Compressed 2025-09-21 03:32:38.504975 | ubuntu-noble | +-w /usr/local/bin/lzop -p x -k Data_Compressed 2025-09-21 03:32:38.505087 | ubuntu-noble | + 2025-09-21 03:32:38.505208 | ubuntu-noble | +-w /usr/bin/plzip -p x -k Data_Compressed 2025-09-21 03:32:38.505330 | ubuntu-noble | +-w /usr/local/bin/plzip -p x -k Data_Compressed 2025-09-21 03:32:38.505456 | ubuntu-noble | + 2025-09-21 03:32:38.505591 | ubuntu-noble | +-w /usr/bin/pbzip2 -p x -k Data_Compressed 2025-09-21 03:32:38.505712 | ubuntu-noble | +-w /usr/local/bin/pbzip2 -p x -k Data_Compressed 2025-09-21 03:32:38.505824 | ubuntu-noble | + 2025-09-21 03:32:38.505945 | ubuntu-noble | +-w /usr/bin/lbzip2 -p x -k Data_Compressed 2025-09-21 03:32:38.506071 | ubuntu-noble | +-w /usr/local/bin/lbzip2 -p x -k Data_Compressed 2025-09-21 03:32:38.506183 | ubuntu-noble | + 2025-09-21 03:32:38.506302 | ubuntu-noble | +-w /usr/bin/pixz -p x -k Data_Compressed 2025-09-21 03:32:38.506423 | ubuntu-noble | +-w /usr/local/bin/pixz -p x -k Data_Compressed 2025-09-21 03:32:38.506580 | ubuntu-noble | + 2025-09-21 03:32:38.506713 | ubuntu-noble | +-w /usr/bin/pigz -p x -k Data_Compressed 2025-09-21 03:32:38.506835 | ubuntu-noble | +-w /usr/local/bin/pigz -p x -k Data_Compressed 2025-09-21 03:32:38.506955 | ubuntu-noble | +-w /usr/bin/unpigz -p x -k Data_Compressed 2025-09-21 03:32:38.507075 | ubuntu-noble | +-w /usr/local/bin/unpigz -p x -k Data_Compressed 2025-09-21 03:32:38.507188 | ubuntu-noble | + 2025-09-21 03:32:38.507306 | ubuntu-noble | +-w /usr/bin/zstd -p x -k Data_Compressed 2025-09-21 03:32:38.507425 | ubuntu-noble | +-w /usr/local/bin/zstd -p x -k Data_Compressed 2025-09-21 03:32:38.507572 | ubuntu-noble | + 2025-09-21 03:32:38.507692 | ubuntu-noble | +## Added to catch netcat on Ubuntu 2025-09-21 03:32:38.507811 | ubuntu-noble | +-w /bin/nc.openbsd -p x -k susp_activity 2025-09-21 03:32:38.507926 | ubuntu-noble | +-w /bin/nc.traditional -p x -k susp_activity 2025-09-21 03:32:38.508037 | ubuntu-noble | + 2025-09-21 03:32:38.508155 | ubuntu-noble | +## Sbin suspicious activity 2025-09-21 03:32:38.508273 | ubuntu-noble | +-w /sbin/iptables -p x -k sbin_susp 2025-09-21 03:32:38.508390 | ubuntu-noble | +-w /sbin/ip6tables -p x -k sbin_susp 2025-09-21 03:32:38.508534 | ubuntu-noble | +-w /sbin/ifconfig -p x -k sbin_susp 2025-09-21 03:32:38.508658 | ubuntu-noble | +-w /usr/sbin/arptables -p x -k sbin_susp 2025-09-21 03:32:38.508776 | ubuntu-noble | +-w /usr/sbin/ebtables -p x -k sbin_susp 2025-09-21 03:32:38.508895 | ubuntu-noble | +-w /sbin/xtables-nft-multi -p x -k sbin_susp 2025-09-21 03:32:38.509013 | ubuntu-noble | +-w /usr/sbin/nft -p x -k sbin_susp 2025-09-21 03:32:38.509133 | ubuntu-noble | +-w /usr/sbin/tcpdump -p x -k sbin_susp 2025-09-21 03:32:38.509251 | ubuntu-noble | +-w /usr/sbin/traceroute -p x -k sbin_susp 2025-09-21 03:32:38.509368 | ubuntu-noble | +-w /usr/sbin/ufw -p x -k sbin_susp 2025-09-21 03:32:38.509522 | ubuntu-noble | + 2025-09-21 03:32:38.509647 | ubuntu-noble | +### kde4 2025-09-21 03:32:38.509782 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/kde4/kpac_dhcp_helper -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-21 03:32:38.509927 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/kde4/kdesud -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2025-09-21 03:32:38.510042 | ubuntu-noble | + 2025-09-21 03:32:38.510161 | ubuntu-noble | +## dbus-send invocation 2025-09-21 03:32:38.510284 | ubuntu-noble | +### may indicate privilege escalation CVE-2021-3560 2025-09-21 03:32:38.510401 | ubuntu-noble | +-w /usr/bin/dbus-send -p x -k dbus_send 2025-09-21 03:32:38.510571 | ubuntu-noble | +-w /usr/bin/gdbus -p x -k gdubs_call 2025-09-21 03:32:38.510751 | ubuntu-noble | + 2025-09-21 03:32:38.510943 | ubuntu-noble | +## pkexec invocation 2025-09-21 03:32:38.511079 | ubuntu-noble | +### may indicate privilege escalation CVE-2021-4034 2025-09-21 03:32:38.511200 | ubuntu-noble | +-w /usr/bin/pkexec -p x -k pkexec 2025-09-21 03:32:38.511315 | ubuntu-noble | + 2025-09-21 03:32:38.511453 | ubuntu-noble | +## Suspicious shells 2025-09-21 03:32:38.511623 | ubuntu-noble | +-w /bin/ash -p x -k susp_shell 2025-09-21 03:32:38.511744 | ubuntu-noble | +-w /bin/csh -p x -k susp_shell 2025-09-21 03:32:38.511864 | ubuntu-noble | +-w /bin/fish -p x -k susp_shell 2025-09-21 03:32:38.511995 | ubuntu-noble | +-w /bin/tcsh -p x -k susp_shell 2025-09-21 03:32:38.512113 | ubuntu-noble | +-w /bin/tclsh -p x -k susp_shell 2025-09-21 03:32:38.512231 | ubuntu-noble | +-w /bin/xonsh -p x -k susp_shell 2025-09-21 03:32:38.514452 | ubuntu-noble | +-w /usr/local/bin/xonsh -p x -k susp_shell 2025-09-21 03:32:38.514469 | ubuntu-noble | +-w /bin/open -p x -k susp_shell 2025-09-21 03:32:38.514473 | ubuntu-noble | +-w /bin/rbash -p x -k susp_shell 2025-09-21 03:32:38.514476 | ubuntu-noble | + 2025-09-21 03:32:38.514480 | ubuntu-noble | +# Web Server Actvity 2025-09-21 03:32:38.514508 | ubuntu-noble | +## Change the number "33" to the ID of your WebServer user. Default: www-data:x:33:33 2025-09-21 03:32:38.514512 | ubuntu-noble | +-a always,exit -F arch=b64 -S execve -F euid=33 -k detect_execve_www 2025-09-21 03:32:38.514516 | ubuntu-noble | + 2025-09-21 03:32:38.514520 | ubuntu-noble | +### https://clustershell.readthedocs.io/ 2025-09-21 03:32:38.514523 | ubuntu-noble | +-w /bin/clush -p x -k susp_shell 2025-09-21 03:32:38.514527 | ubuntu-noble | +-w /usr/local/bin/clush -p x -k susp_shell 2025-09-21 03:32:38.514530 | ubuntu-noble | +-w /etc/clustershell/clush.conf -p x -k susp_shell 2025-09-21 03:32:38.514533 | ubuntu-noble | + 2025-09-21 03:32:38.514536 | ubuntu-noble | +### https://github.com/tmux/tmux 2025-09-21 03:32:38.514540 | ubuntu-noble | +-w /bin/tmux -p x -k susp_shell 2025-09-21 03:32:38.514543 | ubuntu-noble | +-w /usr/local/bin/tmux -p x -k susp_shell 2025-09-21 03:32:38.514546 | ubuntu-noble | + 2025-09-21 03:32:38.514549 | ubuntu-noble | +## Shell/profile configurations 2025-09-21 03:32:38.514553 | ubuntu-noble | +-w /etc/profile.d/ -p wa -k shell_profiles 2025-09-21 03:32:38.514556 | ubuntu-noble | +-w /etc/profile -p wa -k shell_profiles 2025-09-21 03:32:38.514559 | ubuntu-noble | +-w /etc/shells -p wa -k shell_profiles 2025-09-21 03:32:38.514675 | ubuntu-noble | +-w /etc/bashrc -p wa -k shell_profiles 2025-09-21 03:32:38.514796 | ubuntu-noble | +-w /etc/csh.cshrc -p wa -k shell_profiles 2025-09-21 03:32:38.514917 | ubuntu-noble | +-w /etc/csh.login -p wa -k shell_profiles 2025-09-21 03:32:38.515037 | ubuntu-noble | +-w /etc/fish/ -p wa -k shell_profiles 2025-09-21 03:32:38.515155 | ubuntu-noble | +-w /etc/zsh/ -p wa -k shell_profiles 2025-09-21 03:32:38.515266 | ubuntu-noble | + 2025-09-21 03:32:38.515386 | ubuntu-noble | +### https://github.com/xxh/xxh 2025-09-21 03:32:38.515533 | ubuntu-noble | +-w /usr/local/bin/xxh.bash -p x -k susp_shell 2025-09-21 03:32:38.515661 | ubuntu-noble | +-w /usr/local/bin/xxh.xsh -p x -k susp_shell 2025-09-21 03:32:38.515780 | ubuntu-noble | +-w /usr/local/bin/xxh.zsh -p x -k susp_shell 2025-09-21 03:32:38.515894 | ubuntu-noble | + 2025-09-21 03:32:38.516012 | ubuntu-noble | +## Injection 2025-09-21 03:32:38.516132 | ubuntu-noble | +### These rules watch for code injection by the ptrace facility. 2025-09-21 03:32:38.516254 | ubuntu-noble | +### This could indicate someone trying to do something bad or just debugging 2025-09-21 03:32:38.516387 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x4 -k code_injection 2025-09-21 03:32:38.516539 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x5 -k data_injection 2025-09-21 03:32:38.516667 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x6 -k register_injection 2025-09-21 03:32:38.516789 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -k tracing 2025-09-21 03:32:38.516903 | ubuntu-noble | + 2025-09-21 03:32:38.517022 | ubuntu-noble | +## Anonymous File Creation 2025-09-21 03:32:38.517139 | ubuntu-noble | +### These rules watch the use of memfd_create 2025-09-21 03:32:38.517269 | ubuntu-noble | +### "memfd_create" creates anonymous file and returns a file descriptor to access it 2025-09-21 03:32:38.517408 | ubuntu-noble | +### When combined with "fexecve" can be used to stealthily run binaries in memory without touching disk 2025-09-21 03:32:38.517580 | ubuntu-noble | +-a always,exit -F arch=b64 -S memfd_create -F key=anon_file_create 2025-09-21 03:32:38.517703 | ubuntu-noble | + 2025-09-21 03:32:38.517822 | ubuntu-noble | +## Privilege Abuse 2025-09-21 03:32:38.517950 | ubuntu-noble | +### The purpose of this rule is to detect when an admin may be abusing power by looking in user's home dir. 2025-09-21 03:32:38.518077 | ubuntu-noble | +-a always,exit -F dir=/home -F uid=0 -F auid>=1000 -F auid!=-1 -C auid!=obj_uid -k power_abuse 2025-09-21 03:32:38.518191 | ubuntu-noble | + 2025-09-21 03:32:38.518311 | ubuntu-noble | +# Socket Creations 2025-09-21 03:32:38.518451 | ubuntu-noble | +# will catch both IPv4 and IPv6 2025-09-21 03:32:38.518585 | ubuntu-noble | + 2025-09-21 03:32:38.518732 | ubuntu-noble | +-a always,exit -F arch=b32 -S socket -F a0=2 -k network_socket_created 2025-09-21 03:32:38.518891 | ubuntu-noble | +-a always,exit -F arch=b64 -S socket -F a0=2 -k network_socket_created 2025-09-21 03:32:38.519006 | ubuntu-noble | + 2025-09-21 03:32:38.519126 | ubuntu-noble | +-a always,exit -F arch=b32 -S socket -F a0=10 -k network_socket_created 2025-09-21 03:32:38.519247 | ubuntu-noble | +-a always,exit -F arch=b64 -S socket -F a0=10 -k network_socket_created 2025-09-21 03:32:38.519359 | ubuntu-noble | + 2025-09-21 03:32:38.519527 | ubuntu-noble | +# Software Management --------------------------------------------------------- 2025-09-21 03:32:38.519652 | ubuntu-noble | + 2025-09-21 03:32:38.519771 | ubuntu-noble | +# RPM (Redhat/CentOS) 2025-09-21 03:32:38.519890 | ubuntu-noble | +-w /usr/bin/rpm -p x -k software_mgmt 2025-09-21 03:32:38.520011 | ubuntu-noble | +-w /usr/bin/yum -p x -k software_mgmt 2025-09-21 03:32:38.520125 | ubuntu-noble | + 2025-09-21 03:32:38.520244 | ubuntu-noble | +# DNF (Fedora/RedHat 8/CentOS 8) 2025-09-21 03:32:38.520365 | ubuntu-noble | +-w /usr/bin/dnf -p x -k software_mgmt 2025-09-21 03:32:38.520505 | ubuntu-noble | + 2025-09-21 03:32:38.520630 | ubuntu-noble | +# YAST/Zypper/RPM (SuSE) 2025-09-21 03:32:38.520749 | ubuntu-noble | +-w /sbin/yast -p x -k software_mgmt 2025-09-21 03:32:38.520869 | ubuntu-noble | +-w /sbin/yast2 -p x -k software_mgmt 2025-09-21 03:32:38.520989 | ubuntu-noble | +-w /bin/rpm -p x -k software_mgmt 2025-09-21 03:32:38.521110 | ubuntu-noble | +-w /usr/bin/zypper -k software_mgmt 2025-09-21 03:32:38.521224 | ubuntu-noble | + 2025-09-21 03:32:38.521341 | ubuntu-noble | +# DPKG / APT-GET (Debian/Ubuntu) 2025-09-21 03:32:38.521472 | ubuntu-noble | +-w /usr/bin/dpkg -p x -k software_mgmt 2025-09-21 03:32:38.521626 | ubuntu-noble | +-w /usr/bin/apt -p x -k software_mgmt 2025-09-21 03:32:38.521749 | ubuntu-noble | +-w /usr/bin/apt-add-repository -p x -k software_mgmt 2025-09-21 03:32:38.521867 | ubuntu-noble | +-w /usr/bin/apt-get -p x -k software_mgmt 2025-09-21 03:32:38.521988 | ubuntu-noble | +-w /usr/bin/aptitude -p x -k software_mgmt 2025-09-21 03:32:38.522108 | ubuntu-noble | +-w /usr/bin/wajig -p x -k software_mgmt 2025-09-21 03:32:38.522226 | ubuntu-noble | +-w /usr/bin/snap -p x -k software_mgmt 2025-09-21 03:32:38.522337 | ubuntu-noble | + 2025-09-21 03:32:38.522467 | ubuntu-noble | +# PIP(3) (Python installs) 2025-09-21 03:32:38.522613 | ubuntu-noble | +-w /usr/bin/pip -p x -k third_party_software_mgmt 2025-09-21 03:32:38.522735 | ubuntu-noble | +-w /usr/local/bin/pip -p x -k third_party_software_mgmt 2025-09-21 03:32:38.522855 | ubuntu-noble | +-w /usr/bin/pip3 -p x -k third_party_software_mgmt 2025-09-21 03:32:38.522980 | ubuntu-noble | +-w /usr/local/bin/pip3 -p x -k third_party_software_mgmt 2025-09-21 03:32:38.523101 | ubuntu-noble | +-w /usr/bin/pipx -p x -k third_party_software_mgmt 2025-09-21 03:32:38.523223 | ubuntu-noble | +-w /usr/local/bin/pipx -p x -k third_party_software_mgmt 2025-09-21 03:32:38.523335 | ubuntu-noble | + 2025-09-21 03:32:38.523464 | ubuntu-noble | +# npm 2025-09-21 03:32:38.523614 | ubuntu-noble | +## T1072 third party software 2025-09-21 03:32:38.523733 | ubuntu-noble | +## https://www.npmjs.com 2025-09-21 03:32:38.523855 | ubuntu-noble | +## https://docs.npmjs.com/cli/v6/commands/npm-audit 2025-09-21 03:32:38.523976 | ubuntu-noble | +-w /usr/bin/npm -p x -k third_party_software_mgmt 2025-09-21 03:32:38.524089 | ubuntu-noble | + 2025-09-21 03:32:38.524212 | ubuntu-noble | +# Comprehensive Perl Archive Network (CPAN) (CPAN installs) 2025-09-21 03:32:38.524332 | ubuntu-noble | +## T1072 third party software 2025-09-21 03:32:38.524560 | ubuntu-noble | +## https://www.cpan.org 2025-09-21 03:32:38.524707 | ubuntu-noble | +-w /usr/bin/cpan -p x -k third_party_software_mgmt 2025-09-21 03:32:38.524823 | ubuntu-noble | + 2025-09-21 03:32:38.524944 | ubuntu-noble | +# Ruby (RubyGems installs) 2025-09-21 03:32:38.525133 | ubuntu-noble | +## T1072 third party software 2025-09-21 03:32:38.525255 | ubuntu-noble | +## https://rubygems.org 2025-09-21 03:32:38.525394 | ubuntu-noble | +-w /usr/bin/gem -p x -k third_party_software_mgmt 2025-09-21 03:32:38.525542 | ubuntu-noble | + 2025-09-21 03:32:38.525664 | ubuntu-noble | +# LuaRocks (Lua installs) 2025-09-21 03:32:38.525782 | ubuntu-noble | +## T1072 third party software 2025-09-21 03:32:38.525899 | ubuntu-noble | +## https://luarocks.org 2025-09-21 03:32:38.526019 | ubuntu-noble | +-w /usr/bin/luarocks -p x -k third_party_software_mgmt 2025-09-21 03:32:38.526129 | ubuntu-noble | + 2025-09-21 03:32:38.526246 | ubuntu-noble | +# Pacman (Arch Linux) 2025-09-21 03:32:38.526365 | ubuntu-noble | +## https://wiki.archlinux.org/title/Pacman 2025-09-21 03:32:38.526509 | ubuntu-noble | +## T1072 third party software 2025-09-21 03:32:38.526637 | ubuntu-noble | +-w /etc/pacman.conf -p x -k third_party_software_mgmt 2025-09-21 03:32:38.526757 | ubuntu-noble | +-w /etc/pacman.d -p x -k third_party_software_mgmt 2025-09-21 03:32:38.526869 | ubuntu-noble | + 2025-09-21 03:32:38.526986 | ubuntu-noble | +# Special Software ------------------------------------------------------------ 2025-09-21 03:32:38.527098 | ubuntu-noble | + 2025-09-21 03:32:38.527214 | ubuntu-noble | +## GDS specific secrets 2025-09-21 03:32:38.527332 | ubuntu-noble | +-w /etc/puppet/ssl -p wa -k puppet_ssl 2025-09-21 03:32:38.527455 | ubuntu-noble | + 2025-09-21 03:32:38.527589 | ubuntu-noble | +## IBM Bigfix BESClient 2025-09-21 03:32:38.527721 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/opt/BESClient -F success=0 -k soft_besclient 2025-09-21 03:32:38.527844 | ubuntu-noble | +-w /var/opt/BESClient/ -p wa -k soft_besclient 2025-09-21 03:32:38.527957 | ubuntu-noble | + 2025-09-21 03:32:38.528075 | ubuntu-noble | +## CHEF https://www.chef.io/chef/ 2025-09-21 03:32:38.528192 | ubuntu-noble | +-w /etc/chef -p wa -k soft_chef 2025-09-21 03:32:38.528307 | ubuntu-noble | + 2025-09-21 03:32:38.528425 | ubuntu-noble | +## Salt 2025-09-21 03:32:38.528603 | ubuntu-noble | +## https://saltproject.io/ 2025-09-21 03:32:38.528727 | ubuntu-noble | +## https://docs.saltproject.io/en/latest/ref/configuration/master.html 2025-09-21 03:32:38.528845 | ubuntu-noble | +-w /etc/salt -p wa -k soft_salt 2025-09-21 03:32:38.528963 | ubuntu-noble | +-w /usr/local/etc/salt -p wa -k soft_salt 2025-09-21 03:32:38.529077 | ubuntu-noble | + 2025-09-21 03:32:38.529191 | ubuntu-noble | +## Otter 2025-09-21 03:32:38.529309 | ubuntu-noble | +## https://inedo.com/otter 2025-09-21 03:32:38.529426 | ubuntu-noble | +-w /etc/otter -p wa -k soft_otter 2025-09-21 03:32:38.529571 | ubuntu-noble | + 2025-09-21 03:32:38.529691 | ubuntu-noble | +## T1081 Credentials In Files 2025-09-21 03:32:38.529812 | ubuntu-noble | +-w /usr/bin/grep -p x -k string_search 2025-09-21 03:32:38.529931 | ubuntu-noble | +-w /usr/bin/egrep -p x -k string_search 2025-09-21 03:32:38.530049 | ubuntu-noble | +-w /usr/bin/ugrep -p x -k string_search 2025-09-21 03:32:38.530164 | ubuntu-noble | +### macOS 2025-09-21 03:32:38.530284 | ubuntu-noble | +-w /usr/local/bin/grep -p x -k string_search 2025-09-21 03:32:38.530404 | ubuntu-noble | +-w /usr/local/bin/egrep -p x -k string_search 2025-09-21 03:32:38.530549 | ubuntu-noble | +-w /usr/local/bin/ugrep -p x -k string_search 2025-09-21 03:32:38.530667 | ubuntu-noble | + 2025-09-21 03:32:38.530788 | ubuntu-noble | +### https://github.com/tmbinc/bgrep 2025-09-21 03:32:38.530906 | ubuntu-noble | +-w /usr/bin/bgrep -p x -k string_search 2025-09-21 03:32:38.531023 | ubuntu-noble | +### macOS 2025-09-21 03:32:38.532468 | ubuntu-noble | +-w /usr/local/bin/bgrep -p x -k string_search 2025-09-21 03:32:38.532522 | ubuntu-noble | + 2025-09-21 03:32:38.532528 | ubuntu-noble | +### https://github.com/BurntSushi/ripgrep 2025-09-21 03:32:38.532532 | ubuntu-noble | +-w /usr/bin/rg -p x -k string_search 2025-09-21 03:32:38.532535 | ubuntu-noble | +### macOS 2025-09-21 03:32:38.532539 | ubuntu-noble | +-w /usr/local/bin/rg -p x -k string_search 2025-09-21 03:32:38.532543 | ubuntu-noble | + 2025-09-21 03:32:38.532546 | ubuntu-noble | +### https://github.com/awgn/cgrep 2025-09-21 03:32:38.532549 | ubuntu-noble | + 2025-09-21 03:32:38.532553 | ubuntu-noble | +-w /usr/bin/cgrep -p x -k string_search 2025-09-21 03:32:38.532556 | ubuntu-noble | +### macOS 2025-09-21 03:32:38.532560 | ubuntu-noble | +-w /usr/local/bin/cgrep -p x -k string_search 2025-09-21 03:32:38.532663 | ubuntu-noble | + 2025-09-21 03:32:38.532788 | ubuntu-noble | +### https://github.com/jpr5/ngrep 2025-09-21 03:32:38.532909 | ubuntu-noble | +-w /usr/bin/ngrep -p x -k string_search 2025-09-21 03:32:38.533025 | ubuntu-noble | +### macOS 2025-09-21 03:32:38.533148 | ubuntu-noble | +-w /usr/local/bin/ngrep -p x -k string_search 2025-09-21 03:32:38.533261 | ubuntu-noble | + 2025-09-21 03:32:38.533379 | ubuntu-noble | +### https://github.com/vrothberg/vgrep 2025-09-21 03:32:38.533529 | ubuntu-noble | +-w /usr/bin/vgrep -p x -k string_search 2025-09-21 03:32:38.533651 | ubuntu-noble | +### macOS 2025-09-21 03:32:38.533774 | ubuntu-noble | +-w /usr/local/bin/vgrep -p x -k string_search 2025-09-21 03:32:38.533889 | ubuntu-noble | + 2025-09-21 03:32:38.534027 | ubuntu-noble | +### https://github.com/monochromegane/the_platinum_searcher 2025-09-21 03:32:38.534147 | ubuntu-noble | +-w /usr/bin/pt -p x -k string_search 2025-09-21 03:32:38.534263 | ubuntu-noble | +### macOS 2025-09-21 03:32:38.534391 | ubuntu-noble | +-w /usr/local/bin/pt -p x -k string_search 2025-09-21 03:32:38.534548 | ubuntu-noble | + 2025-09-21 03:32:38.534674 | ubuntu-noble | +### https://github.com/gvansickle/ucg 2025-09-21 03:32:38.534796 | ubuntu-noble | +-w /usr/bin/ucg -p x -k string_search 2025-09-21 03:32:38.534912 | ubuntu-noble | +### macOS 2025-09-21 03:32:38.535032 | ubuntu-noble | +-w /usr/local/bin/ucg -p x -k string_search 2025-09-21 03:32:38.535146 | ubuntu-noble | + 2025-09-21 03:32:38.535296 | ubuntu-noble | +### https://github.com/ggreer/the_silver_searcher 2025-09-21 03:32:38.535449 | ubuntu-noble | +-w /usr/bin/ag -p x -k string_search 2025-09-21 03:32:38.535615 | ubuntu-noble | +### macOS 2025-09-21 03:32:38.535748 | ubuntu-noble | +-w /usr/local/bin/ag -p x -k string_search 2025-09-21 03:32:38.535861 | ubuntu-noble | + 2025-09-21 03:32:38.535982 | ubuntu-noble | +### https://github.com/beyondgrep/ack3 2025-09-21 03:32:38.536127 | ubuntu-noble | +### https://beyondgrep.com 2025-09-21 03:32:38.536249 | ubuntu-noble | +-w /usr/bin/ack -p x -k string_search 2025-09-21 03:32:38.536390 | ubuntu-noble | +-w /usr/local/bin/ack -p x -k string_search 2025-09-21 03:32:38.536650 | ubuntu-noble | +-w /usr/bin/semgrep -p x -k string_search 2025-09-21 03:32:38.536861 | ubuntu-noble | +### macOS 2025-09-21 03:32:38.537060 | ubuntu-noble | +-w /usr/local/bin/semgrep -p x -k string_search 2025-09-21 03:32:38.537246 | ubuntu-noble | + 2025-09-21 03:32:38.537427 | ubuntu-noble | +## Docker 2025-09-21 03:32:38.537630 | ubuntu-noble | +-w /usr/bin/dockerd -k docker 2025-09-21 03:32:38.537755 | ubuntu-noble | +-w /usr/bin/docker -k docker 2025-09-21 03:32:38.537876 | ubuntu-noble | +-w /usr/bin/docker-containerd -k docker 2025-09-21 03:32:38.537998 | ubuntu-noble | +-w /usr/bin/docker-runc -k docker 2025-09-21 03:32:38.538117 | ubuntu-noble | +-w /var/lib/docker -p wa -k docker 2025-09-21 03:32:38.538234 | ubuntu-noble | +-w /etc/docker -k docker 2025-09-21 03:32:38.538351 | ubuntu-noble | +-w /etc/sysconfig/docker -k docker 2025-09-21 03:32:38.538498 | ubuntu-noble | +-w /etc/sysconfig/docker-storage -k docker 2025-09-21 03:32:38.538626 | ubuntu-noble | +-w /usr/lib/systemd/system/docker.service -k docker 2025-09-21 03:32:38.538748 | ubuntu-noble | +-w /usr/lib/systemd/system/docker.socket -k docker 2025-09-21 03:32:38.538862 | ubuntu-noble | + 2025-09-21 03:32:38.538981 | ubuntu-noble | +## Virtualization stuff 2025-09-21 03:32:38.539113 | ubuntu-noble | +-w /usr/bin/qemu-system-x86_64 -p x -k qemu-system-x86_64 2025-09-21 03:32:38.539232 | ubuntu-noble | +-w /usr/bin/qemu-img -p x -k qemu-img 2025-09-21 03:32:38.539349 | ubuntu-noble | +-w /usr/bin/qemu-kvm -p x -k qemu-kvm 2025-09-21 03:32:38.539482 | ubuntu-noble | +-w /usr/bin/qemu -p x -k qemu 2025-09-21 03:32:38.539685 | ubuntu-noble | +-w /usr/bin/virtualbox -p x -k virtualbox 2025-09-21 03:32:38.539813 | ubuntu-noble | +-w /usr/bin/virt-manager -p x -k virt-manager 2025-09-21 03:32:38.539933 | ubuntu-noble | +-w /usr/bin/VBoxManage -p x -k VBoxManage 2025-09-21 03:32:38.540047 | ubuntu-noble | + 2025-09-21 03:32:38.540167 | ubuntu-noble | +#### VirtualBox on macOS 2025-09-21 03:32:38.540281 | ubuntu-noble | + 2025-09-21 03:32:38.540402 | ubuntu-noble | +-w /usr/local/bin/VirtualBox -p x -k virt_tool 2025-09-21 03:32:38.540558 | ubuntu-noble | +-w /usr/local/bin/VirtualBoxVM -p x -k virt_tool 2025-09-21 03:32:38.540685 | ubuntu-noble | +-w /usr/local/bin/VBoxManage -p x -k virt_tool 2025-09-21 03:32:38.540806 | ubuntu-noble | +-w /usr/local/bin/VBoxVRDP -p x -k virt_tool 2025-09-21 03:32:38.540929 | ubuntu-noble | +-w /usr/local/bin/VBoxHeadless -p x -k virt_tool 2025-09-21 03:32:38.541049 | ubuntu-noble | +-w /usr/local/bin/vboxwebsrv -p x -k virt_tool 2025-09-21 03:32:38.541169 | ubuntu-noble | +-w /usr/local/bin/VBoxBugReport -p x -k virt_tool 2025-09-21 03:32:38.541297 | ubuntu-noble | +-w /usr/local/bin/VBoxBalloonCtrl -p x -k virt_tool 2025-09-21 03:32:38.541418 | ubuntu-noble | +-w /usr/local/bin/VBoxAutostart -p x -k virt_tool 2025-09-21 03:32:38.541587 | ubuntu-noble | +-w /usr/local/bin/VBoxDTrace -p x -k virt_tool 2025-09-21 03:32:38.541715 | ubuntu-noble | +-w /usr/local/bin/vbox-img -p x -k virt_tool 2025-09-21 03:32:38.541841 | ubuntu-noble | +-w /Library/LaunchDaemons/org.virtualbox.startup.plist -p x -k virt_tool 2025-09-21 03:32:38.541966 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/LaunchDaemons/ -p x -k virt_tool 2025-09-21 03:32:38.543447 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxDrv.kext/ -p x -k virt_tool 2025-09-21 03:32:38.543460 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxUSB.kext/ -p x -k virt_tool 2025-09-21 03:32:38.543464 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxNetFlt.kext/ -p x -k virt_tool 2025-09-21 03:32:38.543482 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxNetAdp.kext/ -p x -k virt_tool 2025-09-21 03:32:38.543498 | ubuntu-noble | + 2025-09-21 03:32:38.543502 | ubuntu-noble | +### Parallels Desktop on macOS 2025-09-21 03:32:38.543506 | ubuntu-noble | + 2025-09-21 03:32:38.543509 | ubuntu-noble | +-w /usr/local/bin/prl_convert -p x -k virt_tool 2025-09-21 03:32:38.543512 | ubuntu-noble | +-w /usr/local/bin/prl_disk_tool -p x -k virt_tool 2025-09-21 03:32:38.543522 | ubuntu-noble | +-w /usr/local/bin/prl_perf_ctl -p x -k virt_tool 2025-09-21 03:32:38.543526 | ubuntu-noble | +-w /usr/local/bin/prlcore2dmp -p x -k virt_tool 2025-09-21 03:32:38.543529 | ubuntu-noble | +-w /usr/local/bin/prlctl -p x -k virt_tool 2025-09-21 03:32:38.543532 | ubuntu-noble | +-w /usr/local/bin/prlexec -p x -k virt_tool 2025-09-21 03:32:38.543536 | ubuntu-noble | +-w /usr/local/bin/prlsrvctl -p x -k virt_tool 2025-09-21 03:32:38.543694 | ubuntu-noble | +-w /Library/Preferences/Parallels -p x -k virt_tool 2025-09-21 03:32:38.543820 | ubuntu-noble | + 2025-09-21 03:32:38.543942 | ubuntu-noble | +### qemu on macOS 2025-09-21 03:32:38.544053 | ubuntu-noble | + 2025-09-21 03:32:38.544173 | ubuntu-noble | +-w /usr/local/bin/qemu-edid -p x -k virt_tool 2025-09-21 03:32:38.544294 | ubuntu-noble | +-w /usr/local/bin/qemu-img -p x -k virt_tool 2025-09-21 03:32:38.544417 | ubuntu-noble | +-w /usr/local/bin/qemu-io -p x -k virt_tool 2025-09-21 03:32:38.544588 | ubuntu-noble | +-w /usr/local/bin/qemu-nbd -p x -k virt_tool 2025-09-21 03:32:38.544716 | ubuntu-noble | +-w /usr/local/bin/qemu-system-x86_64 -p x -k virt_tool 2025-09-21 03:32:38.544831 | ubuntu-noble | + 2025-09-21 03:32:38.544949 | ubuntu-noble | +## Kubelet 2025-09-21 03:32:38.545068 | ubuntu-noble | +-w /usr/bin/kubelet -k kubelet 2025-09-21 03:32:38.545185 | ubuntu-noble | + 2025-09-21 03:32:38.545303 | ubuntu-noble | +# ipc system call 2025-09-21 03:32:38.545422 | ubuntu-noble | +# /usr/include/linux/ipc.h 2025-09-21 03:32:38.545566 | ubuntu-noble | + 2025-09-21 03:32:38.545687 | ubuntu-noble | +## msgctl 2025-09-21 03:32:38.545811 | ubuntu-noble | +#-a always,exit -S ipc -F a0=14 -k Inter-Process_Communication 2025-09-21 03:32:38.545925 | ubuntu-noble | +## msgget 2025-09-21 03:32:38.546047 | ubuntu-noble | +#-a always,exit -S ipc -F a0=13 -k Inter-Process_Communication 2025-09-21 03:32:38.546202 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2025-09-21 03:32:38.546338 | ubuntu-noble | +-a always,exit -F arch=b64 -S msgctl -k Inter-Process_Communication 2025-09-21 03:32:38.546477 | ubuntu-noble | +-a always,exit -F arch=b64 -S msgget -k Inter-Process_Communication 2025-09-21 03:32:38.546611 | ubuntu-noble | + 2025-09-21 03:32:38.546729 | ubuntu-noble | +## semctl 2025-09-21 03:32:38.546853 | ubuntu-noble | +#-a always,exit -S ipc -F a0=3 -k Inter-Process_Communication 2025-09-21 03:32:38.546970 | ubuntu-noble | +## semget 2025-09-21 03:32:38.547094 | ubuntu-noble | +#-a always,exit -S ipc -F a0=2 -k Inter-Process_Communication 2025-09-21 03:32:38.547213 | ubuntu-noble | +## semop 2025-09-21 03:32:38.547338 | ubuntu-noble | +#-a always,exit -S ipc -F a0=1 -k Inter-Process_Communication 2025-09-21 03:32:38.547468 | ubuntu-noble | +## semtimedop 2025-09-21 03:32:38.547664 | ubuntu-noble | +#-a always,exit -S ipc -F a0=4 -k Inter-Process_Communication 2025-09-21 03:32:38.547793 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2025-09-21 03:32:38.547918 | ubuntu-noble | +-a always,exit -F arch=b64 -S semctl -k Inter-Process_Communication 2025-09-21 03:32:38.548041 | ubuntu-noble | +-a always,exit -F arch=b64 -S semget -k Inter-Process_Communication 2025-09-21 03:32:38.548162 | ubuntu-noble | +-a always,exit -F arch=b64 -S semop -k Inter-Process_Communication 2025-09-21 03:32:38.548287 | ubuntu-noble | +-a always,exit -F arch=b64 -S semtimedop -k Inter-Process_Communication 2025-09-21 03:32:38.548400 | ubuntu-noble | + 2025-09-21 03:32:38.548541 | ubuntu-noble | +## shmctl 2025-09-21 03:32:38.548669 | ubuntu-noble | +#-a always,exit -S ipc -F a0=24 -k Inter-Process_Communication 2025-09-21 03:32:38.548786 | ubuntu-noble | +## shmget 2025-09-21 03:32:38.548908 | ubuntu-noble | +#-a always,exit -S ipc -F a0=23 -k Inter-Process_Communication 2025-09-21 03:32:38.549026 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2025-09-21 03:32:38.549148 | ubuntu-noble | +-a always,exit -F arch=b64 -S shmctl -k Inter-Process_Communication 2025-09-21 03:32:38.549270 | ubuntu-noble | +-a always,exit -F arch=b64 -S shmget -k Inter-Process_Communication 2025-09-21 03:32:38.549383 | ubuntu-noble | + 2025-09-21 03:32:38.549529 | ubuntu-noble | +# High Volume Events ---------------------------------------------------------- 2025-09-21 03:32:38.549646 | ubuntu-noble | + 2025-09-21 03:32:38.549766 | ubuntu-noble | +## Disable these rules if they create too many events in your environment 2025-09-21 03:32:38.549889 | ubuntu-noble | + 2025-09-21 03:32:38.550008 | ubuntu-noble | +## Common Shells 2025-09-21 03:32:38.550127 | ubuntu-noble | +-w /bin/bash -p x -k susp_shell 2025-09-21 03:32:38.550246 | ubuntu-noble | +-w /bin/dash -p x -k susp_shell 2025-09-21 03:32:38.550366 | ubuntu-noble | +-w /bin/busybox -p x -k susp_shell 2025-09-21 03:32:38.550530 | ubuntu-noble | +-w /bin/zsh -p x -k susp_shell 2025-09-21 03:32:38.550659 | ubuntu-noble | +-w /bin/sh -p x -k susp_shell 2025-09-21 03:32:38.550777 | ubuntu-noble | +-w /bin/ksh -p x -k susp_shell 2025-09-21 03:32:38.550890 | ubuntu-noble | + 2025-09-21 03:32:38.551008 | ubuntu-noble | +## Root command executions 2025-09-21 03:32:38.551139 | ubuntu-noble | +-a always,exit -F arch=b64 -F euid=0 -F auid>=1000 -F auid!=-1 -S execve -k rootcmd 2025-09-21 03:32:38.551251 | ubuntu-noble | + 2025-09-21 03:32:38.551376 | ubuntu-noble | +## File Deletion Events by User 2025-09-21 03:32:38.551537 | ubuntu-noble | +-a always,exit -F arch=b64 -S rmdir -S unlink -S unlinkat -S rename -S renameat -F auid>=1000 -F auid!=-1 -k delete 2025-09-21 03:32:38.551697 | ubuntu-noble | + 2025-09-21 03:32:38.551823 | ubuntu-noble | +## File Access 2025-09-21 03:32:38.551943 | ubuntu-noble | +### Unauthorized Access (unsuccessful) 2025-09-21 03:32:38.552077 | ubuntu-noble | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k file_access 2025-09-21 03:32:38.552210 | ubuntu-noble | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k file_access 2025-09-21 03:32:38.552322 | ubuntu-noble | + 2025-09-21 03:32:38.552459 | ubuntu-noble | +### Unsuccessful Creation 2025-09-21 03:32:38.552627 | ubuntu-noble | +-a always,exit -F arch=b64 -S mkdir,creat,link,symlink,mknod,mknodat,linkat,symlinkat -F exit=-EACCES -k file_creation 2025-09-21 03:32:38.552759 | ubuntu-noble | +-a always,exit -F arch=b64 -S mkdir,link,symlink,mkdirat -F exit=-EPERM -k file_creation 2025-09-21 03:32:38.552875 | ubuntu-noble | + 2025-09-21 03:32:38.552994 | ubuntu-noble | +### Unsuccessful Modification 2025-09-21 03:32:38.553125 | ubuntu-noble | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EACCES -k file_modification 2025-09-21 03:32:38.553255 | ubuntu-noble | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EPERM -k file_modification 2025-09-21 03:32:38.553366 | ubuntu-noble | + 2025-09-21 03:32:38.553512 | ubuntu-noble | +## 32bit API Exploitation 2025-09-21 03:32:38.553643 | ubuntu-noble | +### If you are on a 64 bit platform, everything _should_ be running 2025-09-21 03:32:38.553768 | ubuntu-noble | +### in 64 bit mode. This rule will detect any use of the 32 bit syscalls 2025-09-21 03:32:38.553888 | ubuntu-noble | +### because this might be a sign of someone exploiting a hole in the 32 2025-09-21 03:32:38.554005 | ubuntu-noble | +### bit API. 2025-09-21 03:32:38.554127 | ubuntu-noble | +-a always,exit -F arch=b32 -S all -k 32bit_api 2025-09-21 03:32:38.555098 | ubuntu-noble | + 2025-09-21 03:32:38.555112 | ubuntu-noble | +# Make The Configuration Immutable -------------------------------------------- 2025-09-21 03:32:38.555116 | ubuntu-noble | + 2025-09-21 03:32:38.555119 | ubuntu-noble | +##-e 2 2025-09-21 03:32:38.555123 | ubuntu-noble | 2025-09-21 03:32:38.555129 | ubuntu-noble | changed: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": true, "checksum": "9f99ce5c4f891fbf3e2bce06ed4cb97fb9e01f41", "dest": "/etc/audit/rules.d/20-neo23x0.rules", "gid": 0, "group": "root", "item": "20-neo23x0.rules", "md5sum": "6ac57206fd77de34805c3f4d50ef8b1d", "mode": "0644", "owner": "root", "size": 27367, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1758425557.2887604-2346-197639915718690/.source.rules", "state": "file", "uid": 0} 2025-09-21 03:32:38.555134 | ubuntu-noble | 2025-09-21 03:32:38.555138 | ubuntu-noble | TASK [auditd : Manage auditd service] ****************************************** 2025-09-21 03:32:38.414303 | ubuntu-jammy | ok: [molecule-auditd] => {"changed": false, "cmd": ["find", "/etc/audit/rules.d", "-type", "f", "-printf", "%f\n"], "delta": "0:00:00.004158", "end": "2025-09-21 03:32:38.364601", "msg": "", "rc": 0, "start": "2025-09-21 03:32:38.360443", "stderr": "", "stderr_lines": [], "stdout": "20-neo23x0.rules\naudit.rules", "stdout_lines": ["20-neo23x0.rules", "audit.rules"]} 2025-09-21 03:32:38.414441 | ubuntu-jammy | 2025-09-21 03:32:38.414602 | ubuntu-jammy | TASK [auditd : Remove unmanaged rules files] *********************************** 2025-09-21 03:32:38.820709 | ubuntu-jammy | skipping: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": false, "false_condition": "item not in auditd_rules_files", "item": "20-neo23x0.rules", "skip_reason": "Conditional result was False"} 2025-09-21 03:32:38.821018 | ubuntu-jammy | --- before 2025-09-21 03:32:38.821300 | ubuntu-jammy | +++ after 2025-09-21 03:32:38.821581 | ubuntu-jammy | @@ -1,4 +1,4 @@ 2025-09-21 03:32:38.821858 | ubuntu-jammy | { 2025-09-21 03:32:38.822178 | ubuntu-jammy | "path": "/etc/audit/rules.d/audit.rules", 2025-09-21 03:32:38.822465 | ubuntu-jammy | - "state": "file" 2025-09-21 03:32:38.822743 | ubuntu-jammy | + "state": "absent" 2025-09-21 03:32:38.823086 | ubuntu-jammy | } 2025-09-21 03:32:38.823352 | ubuntu-jammy | 2025-09-21 03:32:38.823669 | ubuntu-jammy | changed: [molecule-auditd] => (item=audit.rules) => {"ansible_loop_var": "item", "changed": true, "item": "audit.rules", "path": "/etc/audit/rules.d/audit.rules", "state": "absent"} 2025-09-21 03:32:38.824026 | ubuntu-jammy | 2025-09-21 03:32:38.824308 | ubuntu-jammy | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2025-09-21 03:32:38.945649 | debian-bookworm | --- before 2025-09-21 03:32:38.945716 | debian-bookworm | +++ after 2025-09-21 03:32:38.945728 | debian-bookworm | @@ -1,4 +1,4 @@ 2025-09-21 03:32:38.945744 | debian-bookworm | { 2025-09-21 03:32:38.945884 | debian-bookworm | "path": "/etc/audit/rules.d/audit.rules", 2025-09-21 03:32:38.946035 | debian-bookworm | - "state": "file" 2025-09-21 03:32:38.946179 | debian-bookworm | + "state": "absent" 2025-09-21 03:32:38.946463 | debian-bookworm | } 2025-09-21 03:32:38.946619 | debian-bookworm | 2025-09-21 03:32:38.946792 | debian-bookworm | changed: [molecule-auditd] => (item=audit.rules) => {"ansible_loop_var": "item", "changed": true, "item": "audit.rules", "path": "/etc/audit/rules.d/audit.rules", "state": "absent"} 2025-09-21 03:32:38.946943 | debian-bookworm | skipping: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": false, "false_condition": "item not in auditd_rules_files", "item": "20-neo23x0.rules", "skip_reason": "Conditional result was False"} 2025-09-21 03:32:38.947081 | debian-bookworm | 2025-09-21 03:32:38.947216 | debian-bookworm | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2025-09-21 03:32:39.007649 | centos-9-stream | ok: [molecule-auditd] => {"changed": false, "enabled": true, "name": "auditd", "state": "started", "status": {"AccessSELinuxContext": "system_u:object_r:auditd_unit_file_t:s0", "ActiveEnterTimestamp": "Sun 2025-09-21 03:19:37 UTC", "ActiveEnterTimestampMonotonic": "4674383", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "local-fs.target system.slice systemd-tmpfiles-setup.service systemd-journald.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Sun 2025-09-21 03:19:36 UTC", "AssertTimestampMonotonic": "4523672", "Before": "crond.service systemd-update-utmp.service shutdown.target sysinit.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "97468000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Sun 2025-09-21 03:19:36 UTC", "ConditionTimestampMonotonic": "4523617", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "2300", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "511", "ExecMainStartTimestamp": "Sun 2025-09-21 03:19:37 UTC", "ExecMainStartTimestampMonotonic": "4589515", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Sun 2025-09-21 03:19:36 UTC", "InactiveExitTimestampMonotonic": "4531863", "InvocationID": "9b96154ea4dd4943820664074bc11231", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "infinity", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15466", "LimitNPROCSoft": "15466", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15466", "LimitSIGPENDINGSoft": "15466", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "511", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "4444160", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "7323648", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Sun 2025-09-21 03:19:37 UTC", "StateChangeTimestampMonotonic": "4674383", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "24745", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2025-09-21 03:32:39.013253 | centos-9-stream | 2025-09-21 03:32:39.013462 | centos-9-stream | TASK [auditd : List existing rules files] ************************************** 2025-09-21 03:32:39.753761 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Sun 2025-09-21 03:32:30 UTC", "ActiveEnterTimestampMonotonic": "764349977", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "system.slice local-fs.target systemd-journald.socket systemd-tmpfiles-setup.service", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Sun 2025-09-21 03:32:30 UTC", "AssertTimestampMonotonic": "764277624", "Before": "ssh.service sysinit.target systemd-update-utmp.service shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "49165000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Sun 2025-09-21 03:32:30 UTC", "ConditionTimestampMonotonic": "764277574", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3367", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2342", "ExecMainStartTimestamp": "Sun 2025-09-21 03:32:30 UTC", "ExecMainStartTimestampMonotonic": "764322820", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Sun 2025-09-21 03:32:30 UTC] ; stop_time=[Sun 2025-09-21 03:32:30 UTC] ; pid=2341 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Sun 2025-09-21 03:32:30 UTC] ; stop_time=[Sun 2025-09-21 03:32:30 UTC] ; pid=2341 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Sun 2025-09-21 03:32:30 UTC] ; stop_time=[Sun 2025-09-21 03:32:30 UTC] ; pid=2345 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Sun 2025-09-21 03:32:30 UTC] ; stop_time=[Sun 2025-09-21 03:32:30 UTC] ; pid=2345 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Sun 2025-09-21 03:32:30 UTC", "InactiveExitTimestampMonotonic": "764305596", "InvocationID": "6e3b8a5661064709931437ee34c3ad5b", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15481", "LimitNPROCSoft": "15481", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15481", "LimitSIGPENDINGSoft": "15481", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2342", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "720896", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Sun 2025-09-21 03:32:30 UTC", "StateChangeTimestampMonotonic": "764349977", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2025-09-21 03:32:39.758313 | debian-bookworm | 2025-09-21 03:32:39.758634 | debian-bookworm | RUNNING HANDLER [auditd : Generate auditd rules] ******************************* 2025-09-21 03:32:39.460134 | ubuntu-noble | ok: [molecule-auditd] => {"changed": false, "enabled": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Sun 2025-09-21 03:32:30 UTC", "ActiveEnterTimestampMonotonic": "756718276", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "systemd-journald.socket systemd-tmpfiles-setup.service system.slice local-fs.target", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Sun 2025-09-21 03:32:30 UTC", "AssertTimestampMonotonic": "756687870", "Before": "ssh.service sysinit.target systemd-update-utmp.service shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "26025000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Sun 2025-09-21 03:32:30 UTC", "ConditionTimestampMonotonic": "756687822", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3826", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2115", "ExecMainStartTimestamp": "Sun 2025-09-21 03:32:30 UTC", "ExecMainStartTimestampMonotonic": "756699889", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Sun 2025-09-21 03:32:30 UTC] ; stop_time=[Sun 2025-09-21 03:32:30 UTC] ; pid=2114 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Sun 2025-09-21 03:32:30 UTC] ; stop_time=[Sun 2025-09-21 03:32:30 UTC] ; pid=2114 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Sun 2025-09-21 03:32:30 UTC] ; stop_time=[Sun 2025-09-21 03:32:30 UTC] ; pid=2119 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Sun 2025-09-21 03:32:30 UTC] ; stop_time=[Sun 2025-09-21 03:32:30 UTC] ; pid=2119 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Sun 2025-09-21 03:32:30 UTC", "InactiveExitTimestampMonotonic": "756692274", "InvocationID": "7f0249ea2b9e455f922446ca406f9489", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15387", "LimitNPROCSoft": "15387", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15387", "LimitSIGPENDINGSoft": "15387", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2115", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3495710720", "MemoryCurrent": "499712", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2158592", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Sun 2025-09-21 03:32:30 UTC", "StateChangeTimestampMonotonic": "756718276", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4616", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2025-09-21 03:32:39.466198 | ubuntu-noble | 2025-09-21 03:32:39.466220 | ubuntu-noble | TASK [auditd : List existing rules files] ************************************** 2025-09-21 03:32:39.584389 | ubuntu-jammy | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Sun 2025-09-21 03:32:30 UTC", "ActiveEnterTimestampMonotonic": "761352503", "ActiveExitTimestamp": "n/a", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "system.slice local-fs.target systemd-tmpfiles-setup.service systemd-journald.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Sun 2025-09-21 03:32:30 UTC", "AssertTimestampMonotonic": "761292100", "Before": "sysinit.target ssh.service systemd-update-utmp.service shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "63461000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Sun 2025-09-21 03:32:30 UTC", "ConditionTimestampMonotonic": "761292066", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestamp": "n/a", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "1633", "ExecMainStartTimestamp": "Sun 2025-09-21 03:32:30 UTC", "ExecMainStartTimestampMonotonic": "761315407", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Sun 2025-09-21 03:32:30 UTC] ; stop_time=[Sun 2025-09-21 03:32:30 UTC] ; pid=1632 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Sun 2025-09-21 03:32:30 UTC] ; stop_time=[Sun 2025-09-21 03:32:30 UTC] ; pid=1632 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Sun 2025-09-21 03:32:30 UTC] ; stop_time=[Sun 2025-09-21 03:32:30 UTC] ; pid=1636 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Sun 2025-09-21 03:32:30 UTC] ; stop_time=[Sun 2025-09-21 03:32:30 UTC] ; pid=1636 ; code=exited ; status=0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "n/a", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Sun 2025-09-21 03:32:30 UTC", "InactiveExitTimestampMonotonic": "761293482", "InvocationID": "86f1b0bc0a0c4619b5c282e62fbac4fd", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15337", "LimitNPROCSoft": "15337", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15337", "LimitSIGPENDINGSoft": "15337", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "1633", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "512000", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "yes", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Sun 2025-09-21 03:32:30 UTC", "StateChangeTimestampMonotonic": "761352503", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4601", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestamp": "n/a", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2025-09-21 03:32:39.587134 | ubuntu-jammy | 2025-09-21 03:32:39.587420 | ubuntu-jammy | RUNNING HANDLER [auditd : Generate auditd rules] ******************************* 2025-09-21 03:32:39.635838 | centos-9-stream | ok: [molecule-auditd] => {"changed": false, "cmd": ["find", "/etc/audit/rules.d", "-type", "f", "-printf", "%f\n"], "delta": "0:00:00.008859", "end": "2025-09-21 03:32:39.566928", "msg": "", "rc": 0, "start": "2025-09-21 03:32:39.558069", "stderr": "", "stderr_lines": [], "stdout": "audit.rules\n20-neo23x0.rules", "stdout_lines": ["audit.rules", "20-neo23x0.rules"]} 2025-09-21 03:32:39.636085 | centos-9-stream | 2025-09-21 03:32:39.636390 | centos-9-stream | TASK [auditd : Remove unmanaged rules files] *********************************** 2025-09-21 03:32:40.276535 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "cmd": ["augenrules", "--load"], "delta": "0:00:00.108407", "end": "2025-09-21 03:32:40.222147", "msg": "", "rc": 0, "start": "2025-09-21 03:32:40.113740", "stderr": "Unknown user: chrony\nThere was an error in line 24 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 28 of /etc/audit/audit.rules\nUnknown user: ntp\nThere was an error in line 44 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 83 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 84 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 112 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 115 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 176 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 177 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 178 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 179 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 180 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 217 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 218 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 234 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 285 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 286 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 324 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 325 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 346 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 347 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 348 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 349 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 350 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 351 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 359 of /etc/audit/audit.rules", "stderr_lines": ["Unknown user: chrony", "There was an error in line 24 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 28 of /etc/audit/audit.rules", "Unknown user: ntp", "There was an error in line 44 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 83 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 84 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 112 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 115 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 176 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 177 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 178 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 179 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 180 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 217 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 218 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 234 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 285 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 286 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 324 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 325 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 346 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 347 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 348 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 349 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 350 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 351 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 359 of /etc/audit/audit.rules"], "stdout": "/usr/sbin/augenrules: No change\nNo rules\nenabled 1\nfailure 1\npid 2731\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 443\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0\nenabled 1\nfailure 1\npid 2731\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 118\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0", "stdout_lines": ["/usr/sbin/augenrules: No change", "No rules", "enabled 1", "failure 1", "pid 2731", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 443", "backlog_wait_time 60000", "backlog_wait_time_actual 0", "enabled 1", "failure 1", "pid 2731", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 118", "backlog_wait_time 60000", "backlog_wait_time_actual 0"]} 2025-09-21 03:32:40.276816 | debian-bookworm | 2025-09-21 03:32:40.277146 | debian-bookworm | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2025-09-21 03:32:40.079905 | ubuntu-noble | ok: [molecule-auditd] => {"changed": false, "cmd": ["find", "/etc/audit/rules.d", "-type", "f", "-printf", "%f\n"], "delta": "0:00:00.005070", "end": "2025-09-21 03:32:40.024336", "msg": "", "rc": 0, "start": "2025-09-21 03:32:40.019266", "stderr": "", "stderr_lines": [], "stdout": "20-neo23x0.rules\naudit.rules", "stdout_lines": ["20-neo23x0.rules", "audit.rules"]} 2025-09-21 03:32:40.079951 | ubuntu-noble | 2025-09-21 03:32:40.079957 | ubuntu-noble | TASK [auditd : Remove unmanaged rules files] *********************************** 2025-09-21 03:32:40.087707 | ubuntu-jammy | changed: [molecule-auditd] => {"changed": true, "cmd": ["augenrules", "--load"], "delta": "0:00:00.108412", "end": "2025-09-21 03:32:40.027945", "msg": "", "rc": 0, "start": "2025-09-21 03:32:39.919533", "stderr": "Unknown user: chrony\nThere was an error in line 24 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 28 of /etc/audit/audit.rules\nUnknown user: ntp\nThere was an error in line 44 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 83 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 84 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 86 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 112 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 115 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 176 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 177 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 178 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 179 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 180 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 217 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 218 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 234 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 285 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 286 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 324 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 325 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 346 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 347 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 348 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 349 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 350 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 351 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 359 of /etc/audit/audit.rules", "stderr_lines": ["Unknown user: chrony", "There was an error in line 24 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 28 of /etc/audit/audit.rules", "Unknown user: ntp", "There was an error in line 44 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 83 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 84 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 86 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 112 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 115 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 176 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 177 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 178 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 179 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 180 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 217 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 218 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 234 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 285 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 286 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 324 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 325 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 346 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 347 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 348 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 349 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 350 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 351 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 359 of /etc/audit/audit.rules"], "stdout": "/usr/sbin/augenrules: No change\nNo rules\nenabled 1\nfailure 1\npid 2020\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 43\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0\nenabled 1\nfailure 1\npid 2020\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 4\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0", "stdout_lines": ["/usr/sbin/augenrules: No change", "No rules", "enabled 1", "failure 1", "pid 2020", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 43", "backlog_wait_time 60000", "backlog_wait_time_actual 0", "enabled 1", "failure 1", "pid 2020", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 4", "backlog_wait_time 60000", "backlog_wait_time_actual 0"]} 2025-09-21 03:32:40.087833 | ubuntu-jammy | 2025-09-21 03:32:40.087975 | ubuntu-jammy | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2025-09-21 03:32:40.145296 | centos-9-stream | --- before 2025-09-21 03:32:40.145413 | centos-9-stream | +++ after 2025-09-21 03:32:40.145481 | centos-9-stream | @@ -1,4 +1,4 @@ 2025-09-21 03:32:40.145599 | centos-9-stream | { 2025-09-21 03:32:40.145716 | centos-9-stream | "path": "/etc/audit/rules.d/audit.rules", 2025-09-21 03:32:40.145830 | centos-9-stream | - "state": "file" 2025-09-21 03:32:40.145946 | centos-9-stream | + "state": "absent" 2025-09-21 03:32:40.146070 | centos-9-stream | } 2025-09-21 03:32:40.146270 | centos-9-stream | 2025-09-21 03:32:40.146354 | centos-9-stream | changed: [molecule-auditd] => (item=audit.rules) => {"ansible_loop_var": "item", "changed": true, "item": "audit.rules", "path": "/etc/audit/rules.d/audit.rules", "state": "absent"} 2025-09-21 03:32:40.146483 | centos-9-stream | skipping: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": false, "false_condition": "item not in auditd_rules_files", "item": "20-neo23x0.rules", "skip_reason": "Conditional result was False"} 2025-09-21 03:32:40.146586 | centos-9-stream | 2025-09-21 03:32:40.146712 | centos-9-stream | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2025-09-21 03:32:40.531111 | ubuntu-noble | skipping: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": false, "false_condition": "item not in auditd_rules_files", "item": "20-neo23x0.rules", "skip_reason": "Conditional result was False"} 2025-09-21 03:32:40.531585 | ubuntu-noble | --- before 2025-09-21 03:32:40.531904 | ubuntu-noble | +++ after 2025-09-21 03:32:40.534425 | ubuntu-noble | @@ -1,4 +1,4 @@ 2025-09-21 03:32:40.534495 | ubuntu-noble | { 2025-09-21 03:32:40.534504 | ubuntu-noble | "path": "/etc/audit/rules.d/audit.rules", 2025-09-21 03:32:40.534513 | ubuntu-noble | - "state": "file" 2025-09-21 03:32:40.534521 | ubuntu-noble | + "state": "absent" 2025-09-21 03:32:40.534528 | ubuntu-noble | } 2025-09-21 03:32:40.534536 | ubuntu-noble | 2025-09-21 03:32:40.534545 | ubuntu-noble | changed: [molecule-auditd] => (item=audit.rules) => {"ansible_loop_var": "item", "changed": true, "item": "audit.rules", "path": "/etc/audit/rules.d/audit.rules", "state": "absent"} 2025-09-21 03:32:40.534554 | ubuntu-noble | 2025-09-21 03:32:40.534561 | ubuntu-noble | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2025-09-21 03:32:40.837420 | ubuntu-jammy | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Sun 2025-09-21 03:32:39 UTC", "ActiveEnterTimestampMonotonic": "770749429", "ActiveExitTimestamp": "Sun 2025-09-21 03:32:39 UTC", "ActiveExitTimestampMonotonic": "770581732", "ActiveState": "active", "After": "system.slice local-fs.target systemd-tmpfiles-setup.service systemd-journald.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Sun 2025-09-21 03:32:39 UTC", "AssertTimestampMonotonic": "770622616", "Before": "sysinit.target ssh.service systemd-update-utmp.service shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "163897000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Sun 2025-09-21 03:32:39 UTC", "ConditionTimestampMonotonic": "770622548", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestamp": "n/a", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2020", "ExecMainStartTimestamp": "Sun 2025-09-21 03:32:39 UTC", "ExecMainStartTimestampMonotonic": "770646650", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Sun 2025-09-21 03:32:39 UTC] ; stop_time=[Sun 2025-09-21 03:32:39 UTC] ; pid=2019 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Sun 2025-09-21 03:32:39 UTC] ; stop_time=[Sun 2025-09-21 03:32:39 UTC] ; pid=2019 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Sun 2025-09-21 03:32:39 UTC] ; stop_time=[Sun 2025-09-21 03:32:39 UTC] ; pid=2023 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Sun 2025-09-21 03:32:39 UTC] ; stop_time=[Sun 2025-09-21 03:32:39 UTC] ; pid=2023 ; code=exited ; status=0 }", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "Sun 2025-09-21 03:32:39 UTC", "InactiveEnterTimestampMonotonic": "770620313", "InactiveExitTimestamp": "Sun 2025-09-21 03:32:39 UTC", "InactiveExitTimestampMonotonic": "770625417", "InvocationID": "337fcb060c5841e6b6f6426b92b39a8d", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "65536", "LimitMEMLOCKSoft": "65536", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15337", "LimitNPROCSoft": "15337", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15337", "LimitSIGPENDINGSoft": "15337", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2020", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "1875968", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "yes", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Sun 2025-09-21 03:32:39 UTC", "StateChangeTimestampMonotonic": "770749429", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4601", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestamp": "n/a", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2025-09-21 03:32:40.838442 | ubuntu-jammy | 2025-09-21 03:32:40.838471 | ubuntu-jammy | PLAY RECAP ********************************************************************* 2025-09-21 03:32:40.838479 | ubuntu-jammy | molecule-auditd : ok=15 changed=8 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2025-09-21 03:32:40.838484 | ubuntu-jammy | 2025-09-21 03:32:41.130570 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Sun 2025-09-21 03:32:39 UTC", "ActiveEnterTimestampMonotonic": "773949917", "ActiveExitTimestamp": "Sun 2025-09-21 03:32:39 UTC", "ActiveExitTimestampMonotonic": "773753046", "ActiveState": "active", "After": "system.slice local-fs.target systemd-journald.socket systemd-tmpfiles-setup.service", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Sun 2025-09-21 03:32:39 UTC", "AssertTimestampMonotonic": "773793642", "Before": "ssh.service sysinit.target systemd-update-utmp.service shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "168367000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Sun 2025-09-21 03:32:39 UTC", "ConditionTimestampMonotonic": "773793600", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3406", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2731", "ExecMainStartTimestamp": "Sun 2025-09-21 03:32:39 UTC", "ExecMainStartTimestampMonotonic": "773846218", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Sun 2025-09-21 03:32:39 UTC] ; stop_time=[Sun 2025-09-21 03:32:39 UTC] ; pid=2730 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Sun 2025-09-21 03:32:39 UTC] ; stop_time=[Sun 2025-09-21 03:32:39 UTC] ; pid=2730 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Sun 2025-09-21 03:32:39 UTC] ; stop_time=[Sun 2025-09-21 03:32:39 UTC] ; pid=2735 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Sun 2025-09-21 03:32:39 UTC] ; stop_time=[Sun 2025-09-21 03:32:39 UTC] ; pid=2735 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "Sun 2025-09-21 03:32:39 UTC", "InactiveEnterTimestampMonotonic": "773792998", "InactiveExitTimestamp": "Sun 2025-09-21 03:32:39 UTC", "InactiveExitTimestampMonotonic": "773821011", "InvocationID": "559722410922497fac2a1c6882747c6f", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15481", "LimitNPROCSoft": "15481", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15481", "LimitSIGPENDINGSoft": "15481", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2731", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "2072576", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Sun 2025-09-21 03:32:39 UTC", "StateChangeTimestampMonotonic": "773949917", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2025-09-21 03:32:41.131767 | debian-bookworm | 2025-09-21 03:32:41.131792 | debian-bookworm | PLAY RECAP ********************************************************************* 2025-09-21 03:32:41.131799 | debian-bookworm | molecule-auditd : ok=15 changed=8 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2025-09-21 03:32:41.131803 | debian-bookworm | 2025-09-21 03:32:41.244501 | debian-bookworm | INFO [delegated > converge] Completed 2025-09-21 03:32:40.938112 | ubuntu-jammy | INFO [delegated > converge] Completed 2025-09-21 03:32:40.960526 | centos-9-stream | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"AccessSELinuxContext": "system_u:object_r:auditd_unit_file_t:s0", "ActiveEnterTimestamp": "Sun 2025-09-21 03:19:37 UTC", "ActiveEnterTimestampMonotonic": "4674383", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "local-fs.target system.slice systemd-tmpfiles-setup.service systemd-journald.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Sun 2025-09-21 03:19:36 UTC", "AssertTimestampMonotonic": "4523672", "Before": "crond.service systemd-update-utmp.service shutdown.target sysinit.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "98858000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Sun 2025-09-21 03:19:36 UTC", "ConditionTimestampMonotonic": "4523617", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "2300", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "511", "ExecMainStartTimestamp": "Sun 2025-09-21 03:19:37 UTC", "ExecMainStartTimestampMonotonic": "4589515", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Sun 2025-09-21 03:19:36 UTC", "InactiveExitTimestampMonotonic": "4531863", "InvocationID": "9b96154ea4dd4943820664074bc11231", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "infinity", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15466", "LimitNPROCSoft": "15466", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15466", "LimitSIGPENDINGSoft": "15466", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "511", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "4444160", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "7323648", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Sun 2025-09-21 03:19:37 UTC", "StateChangeTimestampMonotonic": "4674383", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "24745", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2025-09-21 03:32:40.965100 | centos-9-stream | 2025-09-21 03:32:40.965224 | centos-9-stream | RUNNING HANDLER [auditd : Generate auditd rules] ******************************* 2025-09-21 03:32:41.333061 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Sun 2025-09-21 03:32:30 UTC", "ActiveEnterTimestampMonotonic": "756718276", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "systemd-journald.socket systemd-tmpfiles-setup.service system.slice local-fs.target", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Sun 2025-09-21 03:32:30 UTC", "AssertTimestampMonotonic": "756687870", "Before": "ssh.service sysinit.target systemd-update-utmp.service shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "27556000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Sun 2025-09-21 03:32:30 UTC", "ConditionTimestampMonotonic": "756687822", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3826", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2115", "ExecMainStartTimestamp": "Sun 2025-09-21 03:32:30 UTC", "ExecMainStartTimestampMonotonic": "756699889", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Sun 2025-09-21 03:32:30 UTC] ; stop_time=[Sun 2025-09-21 03:32:30 UTC] ; pid=2114 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Sun 2025-09-21 03:32:30 UTC] ; stop_time=[Sun 2025-09-21 03:32:30 UTC] ; pid=2114 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Sun 2025-09-21 03:32:30 UTC] ; stop_time=[Sun 2025-09-21 03:32:30 UTC] ; pid=2119 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Sun 2025-09-21 03:32:30 UTC] ; stop_time=[Sun 2025-09-21 03:32:30 UTC] ; pid=2119 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Sun 2025-09-21 03:32:30 UTC", "InactiveExitTimestampMonotonic": "756692274", "InvocationID": "7f0249ea2b9e455f922446ca406f9489", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15387", "LimitNPROCSoft": "15387", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15387", "LimitSIGPENDINGSoft": "15387", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2115", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3519852544", "MemoryCurrent": "507904", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2158592", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Sun 2025-09-21 03:32:30 UTC", "StateChangeTimestampMonotonic": "756718276", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4616", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2025-09-21 03:32:41.335637 | ubuntu-noble | 2025-09-21 03:32:41.335675 | ubuntu-noble | RUNNING HANDLER [auditd : Generate auditd rules] ******************************* 2025-09-21 03:32:41.821781 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "cmd": ["augenrules", "--load"], "delta": "0:00:00.051558", "end": "2025-09-21 03:32:41.758851", "msg": "", "rc": 0, "start": "2025-09-21 03:32:41.707293", "stderr": "Unknown user: chrony\nThere was an error in line 24 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 28 of /etc/audit/audit.rules\nUnknown user: ntp\nThere was an error in line 44 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 83 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 84 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 86 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 112 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 115 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 176 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 177 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 178 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 179 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 180 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 217 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 218 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 234 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 285 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 286 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 324 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 325 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 346 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 347 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 348 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 349 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 350 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 351 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 359 of /etc/audit/audit.rules", "stderr_lines": ["Unknown user: chrony", "There was an error in line 24 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 28 of /etc/audit/audit.rules", "Unknown user: ntp", "There was an error in line 44 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 83 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 84 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 86 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 112 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 115 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 176 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 177 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 178 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 179 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 180 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 217 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 218 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 234 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 285 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 286 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 324 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 325 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 346 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 347 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 348 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 349 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 350 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 351 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 359 of /etc/audit/audit.rules"], "stdout": "/usr/sbin/augenrules: No change\nNo rules\nenabled 1\nfailure 1\npid 2507\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 831\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0\nenabled 1\nfailure 1\npid 2507\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 801\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0", "stdout_lines": ["/usr/sbin/augenrules: No change", "No rules", "enabled 1", "failure 1", "pid 2507", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 831", "backlog_wait_time 60000", "backlog_wait_time_actual 0", "enabled 1", "failure 1", "pid 2507", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 801", "backlog_wait_time 60000", "backlog_wait_time_actual 0"]} 2025-09-21 03:32:41.821839 | ubuntu-noble | 2025-09-21 03:32:41.821846 | ubuntu-noble | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2025-09-21 03:32:41.633428 | centos-9-stream | changed: [molecule-auditd] => {"changed": true, "cmd": ["augenrules", "--load"], "delta": "0:00:00.127479", "end": "2025-09-21 03:32:41.568352", "msg": "", "rc": 0, "start": "2025-09-21 03:32:41.440873", "stderr": "Old style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nperm used without an arch is slower\nperm used without an arch is slower\nperm used without an arch is slower\nperm used without an arch is slower\nperm used without an arch is slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 28 of /etc/audit/audit.rules\nOld style watch rules are slower\nOld style watch rules are slower\nperm used without an arch is slower\nperm used without an arch is slower\nperm used without an arch is slower\nOld style watch rules are slower\nOld style watch rules are slower\nperm used without an arch is slower\nperm used without an arch is slower\nUnknown user: ntp\nThere was an error in line 44 of /etc/audit/audit.rules\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nperm used without an arch is slower\nperm used without an arch is slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 112 of /etc/audit/audit.rules\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 115 of /etc/audit/audit.rules\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nperm used without an arch is slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 176 of /etc/audit/audit.rules\nperm used without an arch is slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 177 of /etc/audit/audit.rules\nperm used without an arch is slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 178 of /etc/audit/audit.rules\nperm used without an arch is slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 179 of /etc/audit/audit.rules\nperm used without an arch is slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 180 of /etc/audit/audit.rules\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nperm used without an arch is slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 217 of /etc/audit/audit.rules\nperm used without an arch is slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 218 of /etc/audit/audit.rules\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 234 of /etc/audit/audit.rules\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 285 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 286 of /etc/audit/audit.rules\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 346 of /etc/audit/audit.rules\nOld style watch rules are slower\nparameter passed without an option given\nThere was an error in line 347 of /etc/audit/audit.rules\nOld style watch rules are slower\nparameter passed without an option given\nThere was an error in line 348 of /etc/audit/audit.rules\nOld style watch rules are slower\nparameter passed without an option given\nThere was an error in line 349 of /etc/audit/audit.rules\nOld style watch rules are slower\nparameter passed without an option given\nThere was an error in line 350 of /etc/audit/audit.rules\nOld style watch rules are slower\nparameter passed without an option given\nThere was an error in line 351 of /etc/audit/audit.rules\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nError sending add rule data request (No such file or directory)\nThere was an error in line 359 of /etc/audit/audit.rules\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower\nOld style watch rules are slower", "stderr_lines": ["Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "perm used without an arch is slower", "perm used without an arch is slower", "perm used without an arch is slower", "perm used without an arch is slower", "perm used without an arch is slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 28 of /etc/audit/audit.rules", "Old style watch rules are slower", "Old style watch rules are slower", "perm used without an arch is slower", "perm used without an arch is slower", "perm used without an arch is slower", "Old style watch rules are slower", "Old style watch rules are slower", "perm used without an arch is slower", "perm used without an arch is slower", "Unknown user: ntp", "There was an error in line 44 of /etc/audit/audit.rules", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "perm used without an arch is slower", "perm used without an arch is slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 112 of /etc/audit/audit.rules", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 115 of /etc/audit/audit.rules", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "perm used without an arch is slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 176 of /etc/audit/audit.rules", "perm used without an arch is slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 177 of /etc/audit/audit.rules", "perm used without an arch is slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 178 of /etc/audit/audit.rules", "perm used without an arch is slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 179 of /etc/audit/audit.rules", "perm used without an arch is slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 180 of /etc/audit/audit.rules", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "perm used without an arch is slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 217 of /etc/audit/audit.rules", "perm used without an arch is slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 218 of /etc/audit/audit.rules", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 234 of /etc/audit/audit.rules", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 285 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 286 of /etc/audit/audit.rules", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 346 of /etc/audit/audit.rules", "Old style watch rules are slower", "parameter passed without an option given", "There was an error in line 347 of /etc/audit/audit.rules", "Old style watch rules are slower", "parameter passed without an option given", "There was an error in line 348 of /etc/audit/audit.rules", "Old style watch rules are slower", "parameter passed without an option given", "There was an error in line 349 of /etc/audit/audit.rules", "Old style watch rules are slower", "parameter passed without an option given", "There was an error in line 350 of /etc/audit/audit.rules", "Old style watch rules are slower", "parameter passed without an option given", "There was an error in line 351 of /etc/audit/audit.rules", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Error sending add rule data request (No such file or directory)", "There was an error in line 359 of /etc/audit/audit.rules", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower", "Old style watch rules are slower"], "stdout": "/sbin/augenrules: No change\nNo rules\nenabled 1\nfailure 1\npid 2213\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 0\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0\nenabled 1\nfailure 1\npid 2213\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 4\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0", "stdout_lines": ["/sbin/augenrules: No change", "No rules", "enabled 1", "failure 1", "pid 2213", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 0", "backlog_wait_time 60000", "backlog_wait_time_actual 0", "enabled 1", "failure 1", "pid 2213", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 4", "backlog_wait_time 60000", "backlog_wait_time_actual 0"]} 2025-09-21 03:32:41.639105 | centos-9-stream | 2025-09-21 03:32:41.639238 | centos-9-stream | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2025-09-21 03:32:42.660611 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Sun 2025-09-21 03:32:41 UTC", "ActiveEnterTimestampMonotonic": "767282832", "ActiveExitTimestamp": "Sun 2025-09-21 03:32:41 UTC", "ActiveExitTimestampMonotonic": "767128092", "ActiveState": "active", "After": "systemd-journald.socket systemd-tmpfiles-setup.service system.slice local-fs.target", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Sun 2025-09-21 03:32:41 UTC", "AssertTimestampMonotonic": "767168854", "Before": "ssh.service sysinit.target systemd-update-utmp.service shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "149145000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Sun 2025-09-21 03:32:41 UTC", "ConditionTimestampMonotonic": "767168778", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3868", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2507", "ExecMainStartTimestamp": "Sun 2025-09-21 03:32:41 UTC", "ExecMainStartTimestampMonotonic": "767203385", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Sun 2025-09-21 03:32:41 UTC] ; stop_time=[Sun 2025-09-21 03:32:41 UTC] ; pid=2506 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Sun 2025-09-21 03:32:41 UTC] ; stop_time=[Sun 2025-09-21 03:32:41 UTC] ; pid=2506 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Sun 2025-09-21 03:32:41 UTC] ; stop_time=[Sun 2025-09-21 03:32:41 UTC] ; pid=2510 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Sun 2025-09-21 03:32:41 UTC] ; stop_time=[Sun 2025-09-21 03:32:41 UTC] ; pid=2510 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "Sun 2025-09-21 03:32:41 UTC", "InactiveEnterTimestampMonotonic": "767167584", "InactiveExitTimestamp": "Sun 2025-09-21 03:32:41 UTC", "InactiveExitTimestampMonotonic": "767174581", "InvocationID": "2ff318ed62984f3ca51e75d0c6e18790", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15387", "LimitNPROCSoft": "15387", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15387", "LimitSIGPENDINGSoft": "15387", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2507", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3533565952", "MemoryCurrent": "1867776", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2215936", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Sun 2025-09-21 03:32:41 UTC", "StateChangeTimestampMonotonic": "767282832", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4616", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2025-09-21 03:32:42.662491 | ubuntu-noble | 2025-09-21 03:32:42.662630 | ubuntu-noble | PLAY RECAP ********************************************************************* 2025-09-21 03:32:42.662936 | ubuntu-noble | molecule-auditd : ok=15 changed=8 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2025-09-21 03:32:42.663169 | ubuntu-noble | 2025-09-21 03:32:42.773377 | ubuntu-noble | INFO [delegated > converge] Completed 2025-09-21 03:32:42.535228 | centos-9-stream | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"AccessSELinuxContext": "system_u:object_r:auditd_unit_file_t:s0", "ActiveEnterTimestamp": "Sun 2025-09-21 03:32:40 UTC", "ActiveEnterTimestampMonotonic": "787332135", "ActiveExitTimestamp": "Sun 2025-09-21 03:32:40 UTC", "ActiveExitTimestampMonotonic": "787160592", "ActiveState": "active", "After": "local-fs.target system.slice systemd-tmpfiles-setup.service systemd-journald.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Sun 2025-09-21 03:32:40 UTC", "AssertTimestampMonotonic": "787207648", "Before": "crond.service systemd-update-utmp.service shutdown.target sysinit.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "176326000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_module cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Sun 2025-09-21 03:32:40 UTC", "ConditionTimestampMonotonic": "787207543", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "4069", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2213", "ExecMainStartTimestamp": "Sun 2025-09-21 03:32:40 UTC", "ExecMainStartTimestampMonotonic": "787237106", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Sun 2025-09-21 03:32:40 UTC] ; stop_time=[Sun 2025-09-21 03:32:40 UTC] ; pid=2212 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Sun 2025-09-21 03:32:40 UTC] ; stop_time=[Sun 2025-09-21 03:32:40 UTC] ; pid=2212 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Sun 2025-09-21 03:32:40 UTC] ; stop_time=[Sun 2025-09-21 03:32:40 UTC] ; pid=2216 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Sun 2025-09-21 03:32:40 UTC] ; stop_time=[Sun 2025-09-21 03:32:40 UTC] ; pid=2216 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "Sun 2025-09-21 03:32:40 UTC", "InactiveEnterTimestampMonotonic": "787203042", "InactiveExitTimestamp": "Sun 2025-09-21 03:32:40 UTC", "InactiveExitTimestampMonotonic": "787217590", "InvocationID": "9d32f90cc765448a8943b5292a5168cd", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "infinity", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15466", "LimitNPROCSoft": "15466", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15466", "LimitSIGPENDINGSoft": "15466", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2213", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "2637824", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "4632576", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "no", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Sun 2025-09-21 03:32:40 UTC", "StateChangeTimestampMonotonic": "787332135", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "24745", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2025-09-21 03:32:42.537184 | centos-9-stream | 2025-09-21 03:32:42.537312 | centos-9-stream | PLAY RECAP ********************************************************************* 2025-09-21 03:32:42.537438 | centos-9-stream | molecule-auditd : ok=17 changed=8 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2025-09-21 03:32:42.537544 | centos-9-stream | 2025-09-21 03:32:42.665579 | centos-9-stream | INFO [delegated > converge] Completed 2025-09-21 03:32:42.934163 | ubuntu-jammy | ok: Runtime: 0:00:20.130466 2025-09-21 03:32:42.972304 | debian-bookworm | ok: Runtime: 0:00:20.456544 2025-09-21 03:32:42.995779 | centos-9-stream | ok: Runtime: 0:00:21.833935 2025-09-21 03:32:43.016232 | ubuntu-noble | ok: Runtime: 0:00:21.955752 2025-09-21 03:32:43.033070 | 2025-09-21 03:32:43.033182 | TASK [ansible-molecule : Run molecule verify action with scenario delegated] 2025-09-21 03:32:44.417777 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-09-21 03:32:44.426893 | debian-bookworm | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-09-21 03:32:44.426986 | debian-bookworm | INFO default scenario not found, disabling shared state. 2025-09-21 03:32:44.427134 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: verify 2025-09-21 03:32:44.427190 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-09-21 03:32:44.549411 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-09-21 03:32:44.558042 | ubuntu-noble | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-09-21 03:32:44.558123 | ubuntu-noble | INFO default scenario not found, disabling shared state. 2025-09-21 03:32:44.558254 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: verify 2025-09-21 03:32:44.558304 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-09-21 03:32:44.335443 | ubuntu-jammy | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-09-21 03:32:44.344066 | ubuntu-jammy | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-09-21 03:32:44.344143 | ubuntu-jammy | INFO default scenario not found, disabling shared state. 2025-09-21 03:32:44.344335 | ubuntu-jammy | INFO [delegated > discovery] scenario test matrix: verify 2025-09-21 03:32:44.344366 | ubuntu-jammy | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-09-21 03:32:44.604195 | centos-9-stream | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2025-09-21 03:32:44.615428 | centos-9-stream | CRITICAL 'molecule/default/molecule.yml' glob failed. Exiting. 2025-09-21 03:32:44.615526 | centos-9-stream | INFO default scenario not found, disabling shared state. 2025-09-21 03:32:44.615660 | centos-9-stream | INFO [delegated > discovery] scenario test matrix: verify 2025-09-21 03:32:44.615716 | centos-9-stream | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2025-09-21 03:32:45.875295 | ubuntu-jammy | INFO [delegated > verify] Starting 2025-09-21 03:32:45.876478 | ubuntu-jammy | INFO [delegated > verify] Executing Testinfra tests found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests/... 2025-09-21 03:32:45.881248 | ubuntu-jammy | DEBUG: ANSIBLE ENVIRONMENT: 2025-09-21 03:32:45.881287 | ubuntu-jammy | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2025-09-21 03:32:45.881307 | ubuntu-jammy | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2025-09-21 03:32:45.881324 | ubuntu-jammy | ANSIBLE_LIBRARY: ../../plugins 2025-09-21 03:32:45.881341 | ubuntu-jammy | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2025-09-21 03:32:45.881358 | ubuntu-jammy | ANSIBLE_ROLE: auditd 2025-09-21 03:32:45.881373 | ubuntu-jammy | ANSIBLE_ROLES_PATH: ../../roles 2025-09-21 03:32:45.881404 | ubuntu-jammy | ANSIBLE_VERBOSITY: '1' 2025-09-21 03:32:45.881421 | ubuntu-jammy | 2025-09-21 03:32:45.883920 | ubuntu-jammy | DEBUG: MOLECULE ENVIRONMENT: 2025-09-21 03:32:45.883948 | ubuntu-jammy | MOLECULE_DEBUG: 'True' 2025-09-21 03:32:45.883986 | ubuntu-jammy | MOLECULE_DEPENDENCY_NAME: galaxy 2025-09-21 03:32:45.884002 | ubuntu-jammy | MOLECULE_DRIVER_NAME: default 2025-09-21 03:32:45.884019 | ubuntu-jammy | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2025-09-21 03:32:45.884035 | ubuntu-jammy | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2025-09-21 03:32:45.884051 | ubuntu-jammy | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2025-09-21 03:32:45.884067 | ubuntu-jammy | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2025-09-21 03:32:45.884083 | ubuntu-jammy | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2025-09-21 03:32:45.884100 | ubuntu-jammy | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2025-09-21 03:32:45.884116 | ubuntu-jammy | MOLECULE_PROVISIONER_NAME: ansible 2025-09-21 03:32:45.884133 | ubuntu-jammy | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2025-09-21 03:32:45.884149 | ubuntu-jammy | MOLECULE_SCENARIO_NAME: delegated 2025-09-21 03:32:45.884165 | ubuntu-jammy | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2025-09-21 03:32:45.884181 | ubuntu-jammy | MOLECULE_VERIFIER_NAME: testinfra 2025-09-21 03:32:45.884197 | ubuntu-jammy | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-21 03:32:45.884214 | ubuntu-jammy | 2025-09-21 03:32:45.885552 | ubuntu-jammy | DEBUG: SHELL REPLAY: 2025-09-21 03:32:45.885587 | ubuntu-jammy | ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-21 03:32:46.121821 | debian-bookworm | INFO [delegated > verify] Starting 2025-09-21 03:32:46.123585 | debian-bookworm | INFO [delegated > verify] Executing Testinfra tests found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests/... 2025-09-21 03:32:46.129577 | debian-bookworm | DEBUG: ANSIBLE ENVIRONMENT: 2025-09-21 03:32:46.129624 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2025-09-21 03:32:46.129643 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2025-09-21 03:32:46.129659 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2025-09-21 03:32:46.129675 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2025-09-21 03:32:46.129690 | debian-bookworm | ANSIBLE_ROLE: auditd 2025-09-21 03:32:46.129705 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2025-09-21 03:32:46.129732 | debian-bookworm | ANSIBLE_VERBOSITY: '1' 2025-09-21 03:32:46.129748 | debian-bookworm | 2025-09-21 03:32:46.132546 | debian-bookworm | DEBUG: MOLECULE ENVIRONMENT: 2025-09-21 03:32:46.132648 | debian-bookworm | MOLECULE_DEBUG: 'True' 2025-09-21 03:32:46.132675 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2025-09-21 03:32:46.132691 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2025-09-21 03:32:46.132709 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2025-09-21 03:32:46.132726 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2025-09-21 03:32:46.132741 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2025-09-21 03:32:46.132756 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2025-09-21 03:32:46.132771 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2025-09-21 03:32:46.132786 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2025-09-21 03:32:46.132801 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2025-09-21 03:32:46.132816 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2025-09-21 03:32:46.132830 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2025-09-21 03:32:46.132845 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2025-09-21 03:32:46.132859 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2025-09-21 03:32:46.132874 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-21 03:32:46.132890 | debian-bookworm | 2025-09-21 03:32:46.134162 | debian-bookworm | DEBUG: SHELL REPLAY: 2025-09-21 03:32:46.134212 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-21 03:32:46.386813 | debian-bookworm | writing pytest debug information to pytestdebug.log 2025-09-21 03:32:46.402472 | debian-bookworm | ============================= test session starts ============================== 2025-09-21 03:32:46.403038 | debian-bookworm | platform linux -- Python 3.11.2, pytest-8.4.2, pluggy-1.6.0 -- /home/zuul/venv/bin/python3 2025-09-21 03:32:46.403485 | debian-bookworm | using: pytest-8.4.2 2025-09-21 03:32:46.403886 | debian-bookworm | registered third-party plugins: 2025-09-21 03:32:46.404256 | debian-bookworm | pytest-testinfra-10.2.2 at /home/zuul/venv/lib/python3.11/site-packages/testinfra/plugin.py 2025-09-21 03:32:46.404616 | debian-bookworm | rootdir: /home/zuul 2025-09-21 03:32:46.404973 | debian-bookworm | plugins: testinfra-10.2.2 2025-09-21 03:32:46.290001 | ubuntu-noble | INFO [delegated > verify] Starting 2025-09-21 03:32:46.291722 | ubuntu-noble | INFO [delegated > verify] Executing Testinfra tests found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests/... 2025-09-21 03:32:46.297696 | ubuntu-noble | DEBUG: ANSIBLE ENVIRONMENT: 2025-09-21 03:32:46.297711 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2025-09-21 03:32:46.297720 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2025-09-21 03:32:46.297728 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2025-09-21 03:32:46.297737 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2025-09-21 03:32:46.297744 | ubuntu-noble | ANSIBLE_ROLE: auditd 2025-09-21 03:32:46.297750 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2025-09-21 03:32:46.297765 | ubuntu-noble | ANSIBLE_VERBOSITY: '1' 2025-09-21 03:32:46.297772 | ubuntu-noble | 2025-09-21 03:32:46.300814 | ubuntu-noble | DEBUG: MOLECULE ENVIRONMENT: 2025-09-21 03:32:46.300826 | ubuntu-noble | MOLECULE_DEBUG: 'True' 2025-09-21 03:32:46.300834 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2025-09-21 03:32:46.300844 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2025-09-21 03:32:46.300855 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2025-09-21 03:32:46.300865 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2025-09-21 03:32:46.300874 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2025-09-21 03:32:46.300883 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2025-09-21 03:32:46.300892 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2025-09-21 03:32:46.300901 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2025-09-21 03:32:46.300911 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2025-09-21 03:32:46.300920 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2025-09-21 03:32:46.300929 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2025-09-21 03:32:46.300938 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2025-09-21 03:32:46.300947 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2025-09-21 03:32:46.300956 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-21 03:32:46.300965 | ubuntu-noble | 2025-09-21 03:32:46.302831 | ubuntu-noble | DEBUG: SHELL REPLAY: 2025-09-21 03:32:46.302857 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-21 03:32:46.577424 | ubuntu-noble | writing pytest debug information to pytestdebug.log 2025-09-21 03:32:46.594501 | ubuntu-noble | ============================= test session starts ============================== 2025-09-21 03:32:46.594535 | ubuntu-noble | platform linux -- Python 3.12.3, pytest-8.4.2, pluggy-1.6.0 -- /home/zuul/venv/bin/python3 2025-09-21 03:32:46.594542 | ubuntu-noble | using: pytest-8.4.2 2025-09-21 03:32:46.594587 | ubuntu-noble | registered third-party plugins: 2025-09-21 03:32:46.594908 | ubuntu-noble | pytest-testinfra-10.2.2 at /home/zuul/venv/lib/python3.12/site-packages/testinfra/plugin.py 2025-09-21 03:32:46.119501 | ubuntu-jammy | writing pytest debug information to pytestdebug.log 2025-09-21 03:32:46.131574 | ubuntu-jammy | ============================= test session starts ============================== 2025-09-21 03:32:46.132092 | ubuntu-jammy | platform linux -- Python 3.11.0rc1, pytest-8.4.2, pluggy-1.6.0 -- /home/zuul/venv/bin/python3.11 2025-09-21 03:32:46.132474 | ubuntu-jammy | using: pytest-8.4.2 2025-09-21 03:32:46.132863 | ubuntu-jammy | registered third-party plugins: 2025-09-21 03:32:46.133278 | ubuntu-jammy | pytest-testinfra-10.2.2 at /home/zuul/venv/lib/python3.11/site-packages/testinfra/plugin.py 2025-09-21 03:32:46.133604 | ubuntu-jammy | rootdir: /home/zuul 2025-09-21 03:32:46.133952 | ubuntu-jammy | plugins: testinfra-10.2.2 2025-09-21 03:32:46.620059 | centos-9-stream | WARNING Another version of 'amazon.aws' 10.1.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 10.1.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.620247 | centos-9-stream | WARNING Another version of 'ansible.netcommon' 8.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 8.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.620318 | centos-9-stream | WARNING Another version of 'ansible.posix' 2.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.620339 | centos-9-stream | WARNING Another version of 'ansible.utils' 6.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.620356 | centos-9-stream | WARNING Another version of 'ansible.windows' 3.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.620372 | centos-9-stream | WARNING Another version of 'arista.eos' 12.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 12.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.620388 | centos-9-stream | WARNING Another version of 'awx.awx' 24.6.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 24.6.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.620405 | centos-9-stream | WARNING Another version of 'azure.azcollection' 3.8.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.8.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.620421 | centos-9-stream | WARNING Another version of 'check_point.mgmt' 6.4.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.4.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.620438 | centos-9-stream | WARNING Another version of 'chocolatey.chocolatey' 1.5.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.5.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.620454 | centos-9-stream | WARNING Another version of 'cisco.aci' 2.12.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.12.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.620470 | centos-9-stream | WARNING Another version of 'cisco.dnac' 6.39.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.39.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.620486 | centos-9-stream | WARNING Another version of 'cisco.intersight' 2.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.620537 | centos-9-stream | WARNING Another version of 'cisco.ios' 11.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 11.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.620572 | centos-9-stream | WARNING Another version of 'cisco.iosxr' 12.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 12.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.620589 | centos-9-stream | WARNING Another version of 'cisco.meraki' 2.21.4 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.21.4 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.620605 | centos-9-stream | WARNING Another version of 'cisco.mso' 2.11.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.11.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.620621 | centos-9-stream | WARNING Another version of 'cisco.nxos' 11.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 11.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.620643 | centos-9-stream | WARNING Another version of 'cisco.ucs' 1.16.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.16.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.620659 | centos-9-stream | WARNING Another version of 'cloudscale_ch.cloud' 2.5.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.620676 | centos-9-stream | WARNING Another version of 'community.aws' 10.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 10.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.620692 | centos-9-stream | WARNING Another version of 'community.ciscosmb' 1.0.11 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.11 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.620708 | centos-9-stream | WARNING Another version of 'community.crypto' 3.0.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.0.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.620726 | centos-9-stream | WARNING Another version of 'community.digitalocean' 1.27.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.27.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.620747 | centos-9-stream | WARNING Another version of 'community.dns' 3.3.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.3.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.620763 | centos-9-stream | WARNING Another version of 'community.docker' 4.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.620779 | centos-9-stream | WARNING Another version of 'community.general' 11.2.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 11.2.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.620803 | centos-9-stream | WARNING Another version of 'community.grafana' 2.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.620828 | centos-9-stream | WARNING Another version of 'community.hashi_vault' 7.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 7.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.620845 | centos-9-stream | WARNING Another version of 'community.hrobot' 2.5.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.620861 | centos-9-stream | WARNING Another version of 'community.library_inventory_filtering_v1' 1.1.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.1.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.620888 | centos-9-stream | WARNING Another version of 'community.libvirt' 2.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.620910 | centos-9-stream | WARNING Another version of 'community.mongodb' 1.7.10 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.7.10 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.620927 | centos-9-stream | WARNING Another version of 'community.mysql' 3.15.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.15.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.620943 | centos-9-stream | WARNING Another version of 'community.okd' 5.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.620959 | centos-9-stream | WARNING Another version of 'community.postgresql' 4.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.620975 | centos-9-stream | WARNING Another version of 'community.proxmox' 1.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621013 | centos-9-stream | WARNING Another version of 'community.proxysql' 1.6.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.6.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621037 | centos-9-stream | WARNING Another version of 'community.rabbitmq' 1.6.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.6.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621054 | centos-9-stream | WARNING Another version of 'community.routeros' 3.10.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.10.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621070 | centos-9-stream | WARNING Another version of 'community.sap_libs' 1.4.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.4.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621086 | centos-9-stream | WARNING Another version of 'community.sops' 2.2.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621109 | centos-9-stream | WARNING Another version of 'community.vmware' 5.7.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.7.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621126 | centos-9-stream | WARNING Another version of 'community.windows' 3.0.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.0.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621142 | centos-9-stream | WARNING Another version of 'community.zabbix' 4.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621158 | centos-9-stream | WARNING Another version of 'containers.podman' 1.17.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.17.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621221 | centos-9-stream | WARNING Another version of 'cyberark.conjur' 1.3.7 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.3.7 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621238 | centos-9-stream | WARNING Another version of 'cyberark.pas' 1.0.35 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.35 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621261 | centos-9-stream | WARNING Another version of 'dellemc.enterprise_sonic' 3.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621287 | centos-9-stream | WARNING Another version of 'dellemc.openmanage' 9.12.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 9.12.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621303 | centos-9-stream | WARNING Another version of 'dellemc.powerflex' 2.6.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.6.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621320 | centos-9-stream | WARNING Another version of 'dellemc.unity' 2.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621336 | centos-9-stream | WARNING Another version of 'f5networks.f5_modules' 1.38.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.38.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621353 | centos-9-stream | WARNING Another version of 'fortinet.fortimanager' 2.10.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.10.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621369 | centos-9-stream | WARNING Another version of 'fortinet.fortios' 2.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621385 | centos-9-stream | WARNING Another version of 'google.cloud' 1.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621401 | centos-9-stream | WARNING Another version of 'grafana.grafana' 6.0.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.0.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621425 | centos-9-stream | WARNING Another version of 'hetzner.hcloud' 5.2.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.2.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621441 | centos-9-stream | WARNING Another version of 'hitachivantara.vspone_block' 4.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621465 | centos-9-stream | WARNING Another version of 'ibm.qradar' 4.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621482 | centos-9-stream | WARNING Another version of 'ibm.storage_virtualize' 2.7.4 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.7.4 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621498 | centos-9-stream | WARNING Another version of 'ieisystem.inmanage' 3.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621513 | centos-9-stream | WARNING Another version of 'infinidat.infinibox' 1.6.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.6.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621535 | centos-9-stream | WARNING Another version of 'infoblox.nios_modules' 1.8.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.8.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621552 | centos-9-stream | WARNING Another version of 'inspur.ispim' 2.2.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621569 | centos-9-stream | WARNING Another version of 'junipernetworks.junos' 11.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 11.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621585 | centos-9-stream | WARNING Another version of 'kaytus.ksmanage' 2.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621609 | centos-9-stream | WARNING Another version of 'kubernetes.core' 6.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621625 | centos-9-stream | WARNING Another version of 'kubevirt.core' 2.2.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.2.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621641 | centos-9-stream | WARNING Another version of 'lowlydba.sqlserver' 2.7.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.7.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621657 | centos-9-stream | WARNING Another version of 'microsoft.ad' 1.9.2 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.9.2 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621673 | centos-9-stream | WARNING Another version of 'microsoft.iis' 1.0.3 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.3 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621697 | centos-9-stream | WARNING Another version of 'netapp.cloudmanager' 21.24.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 21.24.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621714 | centos-9-stream | WARNING Another version of 'netapp.ontap' 23.1.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 23.1.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621730 | centos-9-stream | WARNING Another version of 'netapp.storagegrid' 21.15.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 21.15.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621754 | centos-9-stream | WARNING Another version of 'netapp_eseries.santricity' 1.4.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.4.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621770 | centos-9-stream | WARNING Another version of 'netbox.netbox' 3.21.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.21.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621787 | centos-9-stream | WARNING Another version of 'ngine_io.cloudstack' 2.5.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.5.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621803 | centos-9-stream | WARNING Another version of 'openstack.cloud' 2.4.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621819 | centos-9-stream | WARNING Another version of 'ovirt.ovirt' 3.2.1 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 3.2.1 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621835 | centos-9-stream | WARNING Another version of 'purestorage.flasharray' 1.36.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.36.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621852 | centos-9-stream | WARNING Another version of 'purestorage.flashblade' 1.20.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.20.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621880 | centos-9-stream | WARNING Another version of 'splunk.es' 4.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621897 | centos-9-stream | WARNING Another version of 'telekom_mms.icinga_director' 2.4.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.4.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621914 | centos-9-stream | WARNING Another version of 'theforeman.foreman' 5.5.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 5.5.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621930 | centos-9-stream | WARNING Another version of 'vmware.vmware' 2.3.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 2.3.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621953 | centos-9-stream | WARNING Another version of 'vmware.vmware_rest' 4.9.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 4.9.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.621969 | centos-9-stream | WARNING Another version of 'vultr.cloud' 1.13.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.13.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.622025 | centos-9-stream | WARNING Another version of 'vyos.vyos' 6.0.0 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 6.0.0 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.622044 | centos-9-stream | WARNING Another version of 'wti.remote' 1.0.10 was found installed in /home/zuul/venv/lib64/python3.11/site-packages/ansible_collections, only the first one will be used, 1.0.10 (/home/zuul/venv/lib/python3.11/site-packages/ansible_collections). 2025-09-21 03:32:46.632956 | centos-9-stream | INFO [delegated > verify] Starting 2025-09-21 03:32:46.634398 | centos-9-stream | INFO [delegated > verify] Executing Testinfra tests found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests/... 2025-09-21 03:32:46.639712 | centos-9-stream | DEBUG: ANSIBLE ENVIRONMENT: 2025-09-21 03:32:46.639745 | centos-9-stream | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2025-09-21 03:32:46.639762 | centos-9-stream | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2025-09-21 03:32:46.639778 | centos-9-stream | ANSIBLE_LIBRARY: ../../plugins 2025-09-21 03:32:46.639794 | centos-9-stream | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2025-09-21 03:32:46.639809 | centos-9-stream | ANSIBLE_ROLE: auditd 2025-09-21 03:32:46.639823 | centos-9-stream | ANSIBLE_ROLES_PATH: ../../roles 2025-09-21 03:32:46.639838 | centos-9-stream | ANSIBLE_VERBOSITY: '1' 2025-09-21 03:32:46.639852 | centos-9-stream | 2025-09-21 03:32:46.595592 | ubuntu-noble | rootdir: /home/zuul 2025-09-21 03:32:46.595899 | ubuntu-noble | plugins: testinfra-10.2.2 2025-09-21 03:32:46.642691 | centos-9-stream | DEBUG: MOLECULE ENVIRONMENT: 2025-09-21 03:32:46.642731 | centos-9-stream | MOLECULE_DEBUG: 'True' 2025-09-21 03:32:46.642746 | centos-9-stream | MOLECULE_DEPENDENCY_NAME: galaxy 2025-09-21 03:32:46.642761 | centos-9-stream | MOLECULE_DRIVER_NAME: default 2025-09-21 03:32:46.642776 | centos-9-stream | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2025-09-21 03:32:46.642791 | centos-9-stream | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2025-09-21 03:32:46.642815 | centos-9-stream | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2025-09-21 03:32:46.642852 | centos-9-stream | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2025-09-21 03:32:46.642867 | centos-9-stream | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2025-09-21 03:32:46.642882 | centos-9-stream | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2025-09-21 03:32:46.642897 | centos-9-stream | MOLECULE_PROVISIONER_NAME: ansible 2025-09-21 03:32:46.642912 | centos-9-stream | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2025-09-21 03:32:46.642926 | centos-9-stream | MOLECULE_SCENARIO_NAME: delegated 2025-09-21 03:32:46.642940 | centos-9-stream | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2025-09-21 03:32:46.642954 | centos-9-stream | MOLECULE_VERIFIER_NAME: testinfra 2025-09-21 03:32:46.642968 | centos-9-stream | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-21 03:32:46.643004 | centos-9-stream | 2025-09-21 03:32:46.644481 | centos-9-stream | DEBUG: SHELL REPLAY: 2025-09-21 03:32:46.644512 | centos-9-stream | ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2025-09-21 03:32:46.925200 | centos-9-stream | writing pytest debug information to pytestdebug.log 2025-09-21 03:32:46.939843 | centos-9-stream | ============================= test session starts ============================== 2025-09-21 03:32:46.940502 | centos-9-stream | platform linux -- Python 3.11.13, pytest-8.4.2, pluggy-1.6.0 -- /home/zuul/venv/bin/python3.11 2025-09-21 03:32:46.941038 | centos-9-stream | using: pytest-8.4.2 2025-09-21 03:32:46.941552 | centos-9-stream | registered third-party plugins: 2025-09-21 03:32:46.942101 | centos-9-stream | pytest-testinfra-10.2.2 at /home/zuul/venv/lib64/python3.11/site-packages/testinfra/plugin.py 2025-09-21 03:32:46.942700 | centos-9-stream | rootdir: /home/zuul 2025-09-21 03:32:46.943276 | centos-9-stream | plugins: testinfra-10.2.2 2025-09-21 03:32:47.273431 | ubuntu-jammy | collecting ... collected 6 items 2025-09-21 03:32:47.273761 | ubuntu-jammy | 2025-09-21 03:32:47.660643 | debian-bookworm | collecting ... collected 6 items 2025-09-21 03:32:47.660915 | debian-bookworm | 2025-09-21 03:32:47.928738 | ubuntu-noble | collecting ... collected 6 items 2025-09-21 03:32:47.928846 | ubuntu-noble | 2025-09-21 03:32:48.357217 | centos-9-stream | collecting ... collected 6 items 2025-09-21 03:32:48.357329 | centos-9-stream | 2025-09-21 03:32:52.156589 | ubuntu-jammy | tests/auditd.py::test_pkg[ansible://molecule-auditd] PASSED [ 16%] 2025-09-21 03:32:52.198538 | ubuntu-jammy | tests/auditd.py::test_conffile[ansible://molecule-auditd] PASSED [ 33%] 2025-09-21 03:32:52.685182 | debian-bookworm | tests/auditd.py::test_pkg[ansible://molecule-auditd] PASSED [ 16%] 2025-09-21 03:32:52.731443 | debian-bookworm | tests/auditd.py::test_conffile[ansible://molecule-auditd] PASSED [ 33%] 2025-09-21 03:32:53.313025 | ubuntu-noble | tests/auditd.py::test_pkg[ansible://molecule-auditd] PASSED [ 16%] 2025-09-21 03:32:53.351267 | ubuntu-noble | tests/auditd.py::test_conffile[ansible://molecule-auditd] PASSED [ 33%] 2025-09-21 03:32:54.972235 | ubuntu-jammy | tests/auditd.py::test_adjustment[ansible://molecule-auditd] PASSED [ 50%] 2025-09-21 03:32:55.699768 | debian-bookworm | tests/auditd.py::test_adjustment[ansible://molecule-auditd] PASSED [ 50%] 2025-09-21 03:32:56.527562 | ubuntu-noble | tests/auditd.py::test_adjustment[ansible://molecule-auditd] PASSED [ 50%] 2025-09-21 03:32:56.344097 | centos-9-stream | tests/auditd.py::test_pkg[ansible://molecule-auditd] PASSED [ 16%] 2025-09-21 03:32:56.394428 | centos-9-stream | tests/auditd.py::test_conffile[ansible://molecule-auditd] PASSED [ 33%] 2025-09-21 03:32:59.786433 | centos-9-stream | tests/auditd.py::test_adjustment[ansible://molecule-auditd] PASSED [ 50%] 2025-09-21 03:33:00.538460 | ubuntu-jammy | tests/auditd.py::test_rulefiles[ansible://molecule-auditd] PASSED [ 66%] 2025-09-21 03:33:01.562773 | debian-bookworm | tests/auditd.py::test_rulefiles[ansible://molecule-auditd] PASSED [ 66%] 2025-09-21 03:33:01.961915 | ubuntu-jammy | tests/auditd.py::test_srv[ansible://molecule-auditd] PASSED [ 83%] 2025-09-21 03:33:02.040013 | ubuntu-jammy | wrote pytest debug information to pytestdebug.log 2025-09-21 03:33:02.041244 | ubuntu-jammy | tests/auditd.py::test_function[ansible://molecule-auditd] PASSED [100%] 2025-09-21 03:33:02.041362 | ubuntu-jammy | 2025-09-21 03:33:02.041557 | ubuntu-jammy | ============================== 6 passed in 15.87s ============================== 2025-09-21 03:33:02.089252 | ubuntu-jammy | INFO [delegated > verify] Verifier completed successfully. 2025-09-21 03:33:02.089380 | ubuntu-jammy | INFO [delegated > verify] Completed 2025-09-21 03:33:03.032493 | debian-bookworm | tests/auditd.py::test_srv[ansible://molecule-auditd] PASSED [ 83%] 2025-09-21 03:33:02.945420 | ubuntu-noble | tests/auditd.py::test_rulefiles[ansible://molecule-auditd] PASSED [ 66%] 2025-09-21 03:33:03.104409 | debian-bookworm | wrote pytest debug information to pytestdebug.log 2025-09-21 03:33:03.104960 | debian-bookworm | tests/auditd.py::test_function[ansible://molecule-auditd] PASSED [100%] 2025-09-21 03:33:03.105268 | debian-bookworm | 2025-09-21 03:33:03.105613 | debian-bookworm | ============================== 6 passed in 16.66s ============================== 2025-09-21 03:33:03.143050 | debian-bookworm | INFO [delegated > verify] Verifier completed successfully. 2025-09-21 03:33:03.143164 | debian-bookworm | INFO [delegated > verify] Completed 2025-09-21 03:33:04.577617 | ubuntu-noble | tests/auditd.py::test_srv[ansible://molecule-auditd] PASSED [ 83%] 2025-09-21 03:33:04.646808 | ubuntu-noble | wrote pytest debug information to pytestdebug.log 2025-09-21 03:33:04.647860 | ubuntu-noble | tests/auditd.py::test_function[ansible://molecule-auditd] PASSED [100%] 2025-09-21 03:33:04.647888 | ubuntu-noble | 2025-09-21 03:33:04.647895 | ubuntu-noble | ============================== 6 passed in 18.01s ============================== 2025-09-21 03:33:04.696533 | ubuntu-noble | INFO [delegated > verify] Verifier completed successfully. 2025-09-21 03:33:04.696583 | ubuntu-noble | INFO [delegated > verify] Completed 2025-09-21 03:33:06.483868 | centos-9-stream | tests/auditd.py::test_rulefiles[ansible://molecule-auditd] PASSED [ 66%] 2025-09-21 03:33:08.131297 | centos-9-stream | tests/auditd.py::test_srv[ansible://molecule-auditd] PASSED [ 83%] 2025-09-21 03:33:08.229461 | centos-9-stream | wrote pytest debug information to pytestdebug.log 2025-09-21 03:33:08.229569 | centos-9-stream | tests/auditd.py::test_function[ansible://molecule-auditd] PASSED [100%] 2025-09-21 03:33:08.229591 | centos-9-stream | 2025-09-21 03:33:08.229611 | centos-9-stream | ============================== 6 passed in 21.24s ============================== 2025-09-21 03:33:08.268251 | centos-9-stream | INFO [delegated > verify] Verifier completed successfully. 2025-09-21 03:33:08.268543 | centos-9-stream | INFO [delegated > verify] Completed 2025-09-21 03:33:08.676722 | ubuntu-jammy | ok: Runtime: 0:00:18.779489 2025-09-21 03:33:08.691639 | debian-bookworm | ok: Runtime: 0:00:19.782544 2025-09-21 03:33:08.699404 | ubuntu-noble | ok: Runtime: 0:00:21.335073 2025-09-21 03:33:08.704465 | centos-9-stream | ok: Runtime: 0:00:24.906223 2025-09-21 03:33:08.710942 | 2025-09-21 03:33:08.711045 | TASK [ansible-molecule : Run molecule destroy action with scenario delegated] 2025-09-21 03:33:09.321811 | centos-9-stream | skipping: Conditional result was False 2025-09-21 03:33:09.323189 | debian-bookworm | skipping: Conditional result was False 2025-09-21 03:33:09.323718 | ubuntu-jammy | skipping: Conditional result was False 2025-09-21 03:33:09.324202 | ubuntu-noble | skipping: Conditional result was False 2025-09-21 03:33:09.354304 | 2025-09-21 03:33:09.354393 | PLAY RECAP 2025-09-21 03:33:09.354454 | centos-9-stream | ok: 9 changed: 8 unreachable: 0 failed: 0 skipped: 2 rescued: 0 ignored: 0 2025-09-21 03:33:09.354488 | debian-bookworm | ok: 17 changed: 12 unreachable: 0 failed: 0 skipped: 16 rescued: 0 ignored: 0 2025-09-21 03:33:09.354515 | ubuntu-jammy | ok: 13 changed: 10 unreachable: 0 failed: 0 skipped: 9 rescued: 0 ignored: 0 2025-09-21 03:33:09.354550 | ubuntu-noble | ok: 17 changed: 12 unreachable: 0 failed: 0 skipped: 16 rescued: 0 ignored: 0 2025-09-21 03:33:09.354568 | 2025-09-21 03:33:09.532150 | RUN END RESULT_NORMAL: [untrusted : github.com/osism/zuul-jobs/playbooks/ansible-molecule/run.yaml@main] 2025-09-21 03:33:09.534687 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post.yaml@main] 2025-09-21 03:33:10.248812 | 2025-09-21 03:33:10.248987 | PLAY [Base post] 2025-09-21 03:33:10.261577 | 2025-09-21 03:33:10.261703 | TASK [remove-build-sshkey : Remove the build SSH key from all nodes] 2025-09-21 03:33:11.055768 | ubuntu-jammy | changed 2025-09-21 03:33:11.105511 | debian-bookworm | changed 2025-09-21 03:33:11.122125 | ubuntu-noble | changed 2025-09-21 03:33:11.136865 | centos-9-stream | changed 2025-09-21 03:33:11.156673 | 2025-09-21 03:33:11.156777 | PLAY RECAP 2025-09-21 03:33:11.156834 | centos-9-stream | ok: 1 changed: 1 unreachable: 0 failed: 0 skipped: 0 rescued: 0 ignored: 0 2025-09-21 03:33:11.156867 | debian-bookworm | ok: 1 changed: 1 unreachable: 0 failed: 0 skipped: 0 rescued: 0 ignored: 0 2025-09-21 03:33:11.156937 | ubuntu-jammy | ok: 1 changed: 1 unreachable: 0 failed: 0 skipped: 0 rescued: 0 ignored: 0 2025-09-21 03:33:11.156969 | ubuntu-noble | ok: 1 changed: 1 unreachable: 0 failed: 0 skipped: 0 rescued: 0 ignored: 0 2025-09-21 03:33:11.156989 | 2025-09-21 03:33:11.284615 | POST-RUN END RESULT_NORMAL: [trusted : github.com/osism/zuul-config/playbooks/base/post.yaml@main] 2025-09-21 03:33:11.289107 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post-logs.yaml@main] 2025-09-21 03:33:12.102187 | 2025-09-21 03:33:12.102361 | PLAY [Base post-logs] 2025-09-21 03:33:12.114014 | 2025-09-21 03:33:12.114153 | TASK [generate-zuul-manifest : Generate Zuul manifest] 2025-09-21 03:33:12.591740 | localhost | changed 2025-09-21 03:33:12.611838 | 2025-09-21 03:33:12.612073 | TASK [generate-zuul-manifest : Return Zuul manifest URL to Zuul] 2025-09-21 03:33:12.651357 | localhost | ok 2025-09-21 03:33:12.659549 | 2025-09-21 03:33:12.659723 | TASK [Set zuul-log-path fact] 2025-09-21 03:33:12.677088 | localhost | ok 2025-09-21 03:33:12.689808 | 2025-09-21 03:33:12.689958 | TASK [set-zuul-log-path-fact : Set log path for a build] 2025-09-21 03:33:12.728058 | localhost | ok 2025-09-21 03:33:12.735190 | 2025-09-21 03:33:12.735364 | TASK [upload-logs : Create log directories] 2025-09-21 03:33:13.250471 | localhost | changed 2025-09-21 03:33:13.256627 | 2025-09-21 03:33:13.256789 | TASK [upload-logs : Ensure logs are readable before uploading] 2025-09-21 03:33:13.759150 | localhost -> localhost | ok: Runtime: 0:00:00.006265 2025-09-21 03:33:13.768169 | 2025-09-21 03:33:13.768374 | TASK [upload-logs : Upload logs to log server] 2025-09-21 03:33:14.303314 | localhost | Output suppressed because no_log was given 2025-09-21 03:33:14.306874 | 2025-09-21 03:33:14.307127 | LOOP [upload-logs : Compress console log and json output] 2025-09-21 03:33:14.355123 | localhost | skipping: Conditional result was False 2025-09-21 03:33:14.373867 | localhost | skipping: Conditional result was False 2025-09-21 03:33:14.386585 | 2025-09-21 03:33:14.386759 | LOOP [upload-logs : Upload compressed console log and json output] 2025-09-21 03:33:14.435417 | localhost | skipping: Conditional result was False 2025-09-21 03:33:14.436101 | 2025-09-21 03:33:14.447128 | localhost | skipping: Conditional result was False 2025-09-21 03:33:14.458213 | 2025-09-21 03:33:14.458445 | LOOP [upload-logs : Upload console log and json output]