2026-06-15 04:38:39.276251 | Job console starting 2026-06-15 04:38:39.303598 | Updating git repos 2026-06-15 04:38:39.366335 | Cloning repos into workspace 2026-06-15 04:38:39.438437 | Restoring repo states 2026-06-15 04:38:39.462016 | Merging changes 2026-06-15 04:38:40.069571 | Checking out repos 2026-06-15 04:38:40.139620 | Preparing playbooks 2026-06-15 04:38:41.119721 | Running Ansible setup 2026-06-15 04:38:47.052009 | PRE-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/pre.yaml@main] 2026-06-15 04:38:47.868923 | 2026-06-15 04:38:47.869130 | PLAY [Base pre] 2026-06-15 04:38:47.889101 | 2026-06-15 04:38:47.889272 | TASK [Setup log path fact] 2026-06-15 04:38:47.918970 | debian-bookworm | ok 2026-06-15 04:38:47.943383 | 2026-06-15 04:38:47.943779 | TASK [set-zuul-log-path-fact : Set log path for a build] 2026-06-15 04:38:47.989235 | debian-bookworm | ok 2026-06-15 04:38:48.004388 | 2026-06-15 04:38:48.004558 | TASK [emit-job-header : Print job information] 2026-06-15 04:38:48.063100 | # Job Information 2026-06-15 04:38:48.063397 | Ansible Version: 2.16.14 2026-06-15 04:38:48.063457 | Job: ansible-collection-services-molecule-auditd 2026-06-15 04:38:48.064557 | Pipeline: check 2026-06-15 04:38:48.064626 | Executor: 521e9411259a 2026-06-15 04:38:48.064669 | Triggered by: https://github.com/osism/ansible-collection-services/pull/2090 2026-06-15 04:38:48.064712 | Event ID: f1b8e4b0-6873-11f1-9c17-20916c7697e6 2026-06-15 04:38:48.072388 | 2026-06-15 04:38:48.072551 | LOOP [emit-job-header : Print node information] 2026-06-15 04:38:48.191748 | debian-bookworm | ok: 2026-06-15 04:38:48.195278 | debian-bookworm | # Node Information 2026-06-15 04:38:48.195394 | debian-bookworm | Inventory Hostname: debian-bookworm 2026-06-15 04:38:48.195444 | debian-bookworm | Hostname: debian 2026-06-15 04:38:48.195486 | debian-bookworm | Username: zuul 2026-06-15 04:38:48.195525 | debian-bookworm | Distro: Debian 12.14 2026-06-15 04:38:48.195568 | debian-bookworm | Provider: regiocloud-a 2026-06-15 04:38:48.195606 | debian-bookworm | Region: 2026-06-15 04:38:48.195644 | debian-bookworm | Label: debian-bookworm 2026-06-15 04:38:48.195679 | debian-bookworm | Product Name: OpenStack Nova 2026-06-15 04:38:48.195714 | debian-bookworm | Interface IP: 2a13:1a81:8000:3124:f816:3eff:fe8d:920e 2026-06-15 04:38:48.239329 | debian-bookworm | ok: 2026-06-15 04:38:48.239466 | debian-bookworm | # Node Information 2026-06-15 04:38:48.239497 | debian-bookworm | Inventory Hostname: ubuntu-noble 2026-06-15 04:38:48.239522 | debian-bookworm | Hostname: ubuntu 2026-06-15 04:38:48.239547 | debian-bookworm | Username: zuul 2026-06-15 04:38:48.239568 | debian-bookworm | Distro: Ubuntu 24.04 2026-06-15 04:38:48.239587 | debian-bookworm | Provider: regiocloud-a 2026-06-15 04:38:48.239608 | debian-bookworm | Region: 2026-06-15 04:38:48.239626 | debian-bookworm | Label: ubuntu-noble 2026-06-15 04:38:48.239645 | debian-bookworm | Product Name: OpenStack Nova 2026-06-15 04:38:48.239664 | debian-bookworm | Interface IP: 2a13:1a81:8000:3124:f816:3eff:feb4:5c93 2026-06-15 04:38:48.263644 | 2026-06-15 04:38:48.263784 | TASK [log-inventory : Ensure Zuul Ansible directory exists] 2026-06-15 04:38:48.792257 | debian-bookworm -> localhost | changed 2026-06-15 04:38:48.801914 | 2026-06-15 04:38:48.802060 | TASK [log-inventory : Copy ansible inventory to logs dir] 2026-06-15 04:38:50.078996 | ubuntu-noble -> localhost | changed 2026-06-15 04:38:50.090627 | debian-bookworm -> localhost | ok 2026-06-15 04:38:50.106024 | 2026-06-15 04:38:50.106148 | TASK [add-build-sshkey : Check to see if ssh key was already created for this build] 2026-06-15 04:38:50.409551 | debian-bookworm -> localhost | ok 2026-06-15 04:38:50.424580 | 2026-06-15 04:38:50.424763 | TASK [add-build-sshkey : Create a new key in workspace based on build UUID] 2026-06-15 04:38:50.470080 | ubuntu-noble | ok 2026-06-15 04:38:50.485342 | debian-bookworm | ok 2026-06-15 04:38:50.506937 | ubuntu-noble | included: /var/lib/zuul/builds/430ba355c05b4a93a28c8e1d41ebb1c2/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/create-key-and-replace.yaml 2026-06-15 04:38:50.507076 | debian-bookworm | included: /var/lib/zuul/builds/430ba355c05b4a93a28c8e1d41ebb1c2/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/create-key-and-replace.yaml 2026-06-15 04:38:50.513973 | 2026-06-15 04:38:50.514094 | TASK [add-build-sshkey : Create Temp SSH key] 2026-06-15 04:38:52.608180 | debian-bookworm -> localhost | Generating public/private rsa key pair. 2026-06-15 04:38:52.608489 | debian-bookworm -> localhost | Your identification has been saved in /var/lib/zuul/builds/430ba355c05b4a93a28c8e1d41ebb1c2/work/430ba355c05b4a93a28c8e1d41ebb1c2_id_rsa 2026-06-15 04:38:52.608530 | debian-bookworm -> localhost | Your public key has been saved in /var/lib/zuul/builds/430ba355c05b4a93a28c8e1d41ebb1c2/work/430ba355c05b4a93a28c8e1d41ebb1c2_id_rsa.pub 2026-06-15 04:38:52.608560 | debian-bookworm -> localhost | The key fingerprint is: 2026-06-15 04:38:52.608588 | debian-bookworm -> localhost | SHA256:3Hyz5cXKTIQmQgYTk0bY+utI8zJI7eo3QV+CVHOBnzM zuul-build-sshkey 2026-06-15 04:38:52.608613 | debian-bookworm -> localhost | The key's randomart image is: 2026-06-15 04:38:52.608642 | debian-bookworm -> localhost | +---[RSA 3072]----+ 2026-06-15 04:38:52.608666 | debian-bookworm -> localhost | | =O==. | 2026-06-15 04:38:52.608691 | debian-bookworm -> localhost | | o =B . | 2026-06-15 04:38:52.608712 | debian-bookworm -> localhost | | . + .... o . | 2026-06-15 04:38:52.608731 | debian-bookworm -> localhost | | + ..E+ o . . | 2026-06-15 04:38:52.608750 | debian-bookworm -> localhost | | o o oSoo o o o| 2026-06-15 04:38:52.608769 | debian-bookworm -> localhost | | . o o . O o | 2026-06-15 04:38:52.608787 | debian-bookworm -> localhost | | . oo. . . = | 2026-06-15 04:38:52.608807 | debian-bookworm -> localhost | | ..*+. | 2026-06-15 04:38:52.608826 | debian-bookworm -> localhost | | .oo.=o | 2026-06-15 04:38:52.608890 | debian-bookworm -> localhost | +----[SHA256]-----+ 2026-06-15 04:38:52.608962 | debian-bookworm -> localhost | ok: Runtime: 0:00:01.513882 2026-06-15 04:38:52.617671 | 2026-06-15 04:38:52.617806 | TASK [add-build-sshkey : Remote setup ssh keys (linux)] 2026-06-15 04:38:52.693881 | debian-bookworm | ok 2026-06-15 04:38:52.719550 | ubuntu-noble | ok 2026-06-15 04:38:52.742030 | debian-bookworm | included: /var/lib/zuul/builds/430ba355c05b4a93a28c8e1d41ebb1c2/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/remote-linux.yaml 2026-06-15 04:38:52.744325 | ubuntu-noble | included: /var/lib/zuul/builds/430ba355c05b4a93a28c8e1d41ebb1c2/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/remote-linux.yaml 2026-06-15 04:38:52.757321 | 2026-06-15 04:38:52.757431 | TASK [add-build-sshkey : Remove previously added zuul-build-sshkey] 2026-06-15 04:38:52.808014 | debian-bookworm | skipping: Conditional result was False 2026-06-15 04:38:52.830100 | ubuntu-noble | skipping: Conditional result was False 2026-06-15 04:38:52.851228 | 2026-06-15 04:38:52.851494 | TASK [add-build-sshkey : Enable access via build key on all nodes] 2026-06-15 04:38:53.648443 | debian-bookworm | changed 2026-06-15 04:38:53.766600 | ubuntu-noble | changed 2026-06-15 04:38:53.772822 | 2026-06-15 04:38:53.772980 | TASK [add-build-sshkey : Make sure user has a .ssh] 2026-06-15 04:38:54.033195 | debian-bookworm | ok 2026-06-15 04:38:54.120148 | ubuntu-noble | ok 2026-06-15 04:38:54.126338 | 2026-06-15 04:38:54.126458 | TASK [add-build-sshkey : Install build private key as SSH key on all nodes] 2026-06-15 04:38:54.933854 | debian-bookworm | changed 2026-06-15 04:38:55.061720 | ubuntu-noble | changed 2026-06-15 04:38:55.068013 | 2026-06-15 04:38:55.068142 | TASK [add-build-sshkey : Install build public key as SSH key on all nodes] 2026-06-15 04:38:55.884811 | debian-bookworm | changed 2026-06-15 04:38:55.931060 | ubuntu-noble | changed 2026-06-15 04:38:55.939427 | 2026-06-15 04:38:55.939589 | TASK [add-build-sshkey : Remote setup ssh keys (windows)] 2026-06-15 04:38:55.975163 | debian-bookworm | skipping: Conditional result was False 2026-06-15 04:38:55.986366 | ubuntu-noble | skipping: Conditional result was False 2026-06-15 04:38:55.994016 | 2026-06-15 04:38:55.994142 | TASK [remove-zuul-sshkey : Remove master key from local agent] 2026-06-15 04:38:56.405538 | debian-bookworm -> localhost | changed 2026-06-15 04:38:56.426121 | 2026-06-15 04:38:56.426400 | TASK [add-build-sshkey : Add back temp key] 2026-06-15 04:38:56.890290 | debian-bookworm -> localhost | Identity added: /var/lib/zuul/builds/430ba355c05b4a93a28c8e1d41ebb1c2/work/430ba355c05b4a93a28c8e1d41ebb1c2_id_rsa (zuul-build-sshkey) 2026-06-15 04:38:56.890579 | debian-bookworm -> localhost | ok: Runtime: 0:00:00.013637 2026-06-15 04:38:56.898510 | 2026-06-15 04:38:56.898638 | TASK [add-build-sshkey : Verify we can still SSH to all nodes] 2026-06-15 04:38:57.338409 | debian-bookworm | ok 2026-06-15 04:38:57.377345 | ubuntu-noble | ok 2026-06-15 04:38:57.387381 | 2026-06-15 04:38:57.387587 | TASK [add-build-sshkey : Verify we can still SSH to all nodes (windows)] 2026-06-15 04:38:57.431253 | debian-bookworm | skipping: Conditional result was False 2026-06-15 04:38:57.432153 | ubuntu-noble | skipping: Conditional result was False 2026-06-15 04:38:57.453969 | 2026-06-15 04:38:57.454113 | TASK [start-zuul-console : Start zuul_console daemon.] 2026-06-15 04:38:57.883489 | debian-bookworm | ok 2026-06-15 04:38:57.929291 | ubuntu-noble | ok 2026-06-15 04:38:57.953608 | 2026-06-15 04:38:57.953894 | TASK [validate-host : Define zuul_info_dir fact] 2026-06-15 04:38:57.993022 | debian-bookworm | ok 2026-06-15 04:38:58.016359 | ubuntu-noble | ok 2026-06-15 04:38:58.025605 | 2026-06-15 04:38:58.025911 | TASK [validate-host : Ensure Zuul Ansible directory exists] 2026-06-15 04:38:58.391418 | debian-bookworm -> localhost | ok 2026-06-15 04:38:58.398664 | 2026-06-15 04:38:58.398799 | TASK [validate-host : Collect information about the host] 2026-06-15 04:38:59.571787 | debian-bookworm | ok 2026-06-15 04:38:59.666252 | ubuntu-noble | ok 2026-06-15 04:38:59.690491 | 2026-06-15 04:38:59.690768 | TASK [validate-host : Sanitize hostname] 2026-06-15 04:38:59.772791 | debian-bookworm | ok 2026-06-15 04:38:59.780502 | ubuntu-noble | ok 2026-06-15 04:38:59.785674 | 2026-06-15 04:38:59.785793 | TASK [validate-host : Write out all ansible variables/facts known for each host] 2026-06-15 04:39:00.415130 | ubuntu-noble -> localhost | changed 2026-06-15 04:39:00.447014 | debian-bookworm -> localhost | changed 2026-06-15 04:39:00.455678 | 2026-06-15 04:39:00.455848 | TASK [validate-host : Collect information about zuul worker] 2026-06-15 04:39:00.990027 | debian-bookworm | ok 2026-06-15 04:39:01.009740 | ubuntu-noble | ok 2026-06-15 04:39:01.024944 | 2026-06-15 04:39:01.025278 | TASK [validate-host : Write out all zuul information for each host] 2026-06-15 04:39:01.605536 | debian-bookworm -> localhost | changed 2026-06-15 04:39:01.634932 | ubuntu-noble -> localhost | changed 2026-06-15 04:39:01.660248 | 2026-06-15 04:39:01.660427 | TASK [prepare-workspace-log : Start zuul_console daemon.] 2026-06-15 04:39:01.957789 | debian-bookworm | ok 2026-06-15 04:39:02.014102 | ubuntu-noble | ok 2026-06-15 04:39:02.020458 | 2026-06-15 04:39:02.020581 | TASK [prepare-workspace-log : Synchronize src repos to workspace directory.] 2026-06-15 04:39:03.368738 | ubuntu-noble | changed: 2026-06-15 04:39:03.369159 | ubuntu-noble | cd+++++++++ src/ 2026-06-15 04:39:03.369223 | ubuntu-noble | cd+++++++++ src/github.com/ 2026-06-15 04:39:03.369265 | ubuntu-noble | cd+++++++++ src/github.com/osism/ 2026-06-15 04:39:03.369302 | ubuntu-noble | cd+++++++++ src/github.com/osism/ansible-collection-services/ 2026-06-15 04:39:03.369338 | ubuntu-noble | config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-15 04:40:53.127894 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-15 04:40:53.164009 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-15 04:40:53.703677 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-15 04:40:53.704345 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-15 04:40:53.725592 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-15 04:40:53.731316 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: dependency 2026-06-15 04:40:53.731428 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-15 04:40:53.758491 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-15 04:40:53.759131 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-15 04:40:53.782059 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-15 04:40:53.787889 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: dependency 2026-06-15 04:40:53.787926 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-15 04:40:54.846901 | debian-bookworm | INFO [delegated > dependency] Executing 2026-06-15 04:40:54.847421 | debian-bookworm | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-15 04:40:55.175978 | debian-bookworm | ansible-galaxy [core 2.18.17] 2026-06-15 04:40:55.176515 | debian-bookworm | config file = None 2026-06-15 04:40:55.177044 | debian-bookworm | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-15 04:40:55.177607 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-15 04:40:55.178053 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.11/site-packages:/home/zuul/venv/lib/python3.11/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.11/dist-packages 2026-06-15 04:40:55.178371 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-15 04:40:55.178667 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) [GCC 12.2.0] (/home/zuul/venv/bin/python3) 2026-06-15 04:40:55.179017 | debian-bookworm | jinja version = 3.1.6 2026-06-15 04:40:55.179299 | debian-bookworm | libyaml = True 2026-06-15 04:40:55.179565 | debian-bookworm | No config file found; using defaults 2026-06-15 04:40:55.180047 | debian-bookworm | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-15 04:40:55.183270 | debian-bookworm | Loading collection cisco.mso from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso 2026-06-15 04:40:55.183786 | debian-bookworm | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso' 2026-06-15 04:40:55.184217 | debian-bookworm | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt 2026-06-15 04:40:55.184498 | debian-bookworm | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt' 2026-06-15 04:40:55.184900 | debian-bookworm | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-15 04:40:55.185266 | debian-bookworm | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-15 04:40:55.187611 | debian-bookworm | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection 2026-06-15 04:40:55.188185 | debian-bookworm | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection' 2026-06-15 04:40:55.188512 | debian-bookworm | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2026-06-15 04:40:55.188809 | debian-bookworm | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-15 04:40:55.189264 | debian-bookworm | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-15 04:40:55.189604 | debian-bookworm | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-15 04:40:55.189990 | debian-bookworm | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas 2026-06-15 04:40:55.190365 | debian-bookworm | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas' 2026-06-15 04:40:55.190767 | debian-bookworm | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-15 04:40:55.191297 | debian-bookworm | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-15 04:40:55.191814 | debian-bookworm | Loading collection amazon.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws 2026-06-15 04:40:55.192233 | debian-bookworm | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws' 2026-06-15 04:40:55.192812 | debian-bookworm | Loading collection cisco.ios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios 2026-06-15 04:40:55.193192 | debian-bookworm | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios' 2026-06-15 04:40:55.193912 | debian-bookworm | Loading collection arista.eos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos 2026-06-15 04:40:55.194191 | debian-bookworm | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos' 2026-06-15 04:40:55.194769 | debian-bookworm | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2026-06-15 04:40:55.195147 | debian-bookworm | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-15 04:40:55.195364 | debian-bookworm | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-15 04:40:55.195579 | debian-bookworm | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-15 04:40:55.195913 | debian-bookworm | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-15 04:40:55.196158 | debian-bookworm | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-15 04:40:55.196793 | debian-bookworm | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity 2026-06-15 04:40:55.197043 | debian-bookworm | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity' 2026-06-15 04:40:55.197281 | debian-bookworm | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-15 04:40:55.197545 | debian-bookworm | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-15 04:40:55.199306 | debian-bookworm | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki 2026-06-15 04:40:55.199551 | debian-bookworm | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki' 2026-06-15 04:40:55.200259 | debian-bookworm | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade 2026-06-15 04:40:55.200683 | debian-bookworm | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2026-06-15 04:40:55.201013 | debian-bookworm | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-15 04:40:55.201485 | debian-bookworm | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-15 04:40:55.201850 | debian-bookworm | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-15 04:40:55.202152 | debian-bookworm | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-15 04:40:55.203012 | debian-bookworm | Loading collection cisco.aci from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci 2026-06-15 04:40:55.203376 | debian-bookworm | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci' 2026-06-15 04:40:55.204172 | debian-bookworm | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud 2026-06-15 04:40:55.204514 | debian-bookworm | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2026-06-15 04:40:55.210676 | debian-bookworm | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2026-06-15 04:40:55.211087 | debian-bookworm | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-15 04:40:55.211906 | debian-bookworm | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon 2026-06-15 04:40:55.212298 | debian-bookworm | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon' 2026-06-15 04:40:55.212846 | debian-bookworm | Loading collection splunk.es from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es 2026-06-15 04:40:55.213299 | debian-bookworm | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es' 2026-06-15 04:40:55.213805 | debian-bookworm | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar 2026-06-15 04:40:55.214269 | debian-bookworm | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar' 2026-06-15 04:40:55.214930 | debian-bookworm | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap 2026-06-15 04:40:55.215283 | debian-bookworm | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap' 2026-06-15 04:40:55.215537 | debian-bookworm | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core 2026-06-15 04:40:55.215892 | debian-bookworm | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core' 2026-06-15 04:40:55.216146 | debian-bookworm | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2026-06-15 04:40:55.216487 | debian-bookworm | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-15 04:40:55.216736 | debian-bookworm | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight 2026-06-15 04:40:55.217099 | debian-bookworm | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight' 2026-06-15 04:40:55.217407 | debian-bookworm | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac 2026-06-15 04:40:55.217669 | debian-bookworm | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac' 2026-06-15 04:40:55.218025 | debian-bookworm | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox 2026-06-15 04:40:55.218290 | debian-bookworm | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2026-06-15 04:40:55.218630 | debian-bookworm | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr 2026-06-15 04:40:55.218914 | debian-bookworm | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr' 2026-06-15 04:40:55.219363 | debian-bookworm | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox 2026-06-15 04:40:55.219662 | debian-bookworm | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox' 2026-06-15 04:40:55.219982 | debian-bookworm | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2026-06-15 04:40:55.220221 | debian-bookworm | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-15 04:40:55.220492 | debian-bookworm | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex 2026-06-15 04:40:55.220769 | debian-bookworm | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2026-06-15 04:40:55.221088 | debian-bookworm | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-15 04:40:55.221373 | debian-bookworm | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-15 04:40:55.221647 | debian-bookworm | Loading collection community.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows 2026-06-15 04:40:55.222010 | debian-bookworm | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows' 2026-06-15 04:40:55.222311 | debian-bookworm | Loading collection wti.remote from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote 2026-06-15 04:40:55.222591 | debian-bookworm | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote' 2026-06-15 04:40:55.222917 | debian-bookworm | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb 2026-06-15 04:40:55.223293 | debian-bookworm | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb' 2026-06-15 04:40:55.223564 | debian-bookworm | Loading collection cisco.asa from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa 2026-06-15 04:40:55.223770 | debian-bookworm | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa' 2026-06-15 04:40:55.224047 | debian-bookworm | Loading collection ansible.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows 2026-06-15 04:40:55.224264 | debian-bookworm | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows' 2026-06-15 04:40:55.224541 | debian-bookworm | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad 2026-06-15 04:40:55.224773 | debian-bookworm | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad' 2026-06-15 04:40:55.225061 | debian-bookworm | Loading collection community.zabbix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix 2026-06-15 04:40:55.225280 | debian-bookworm | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix' 2026-06-15 04:40:55.225853 | debian-bookworm | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage 2026-06-15 04:40:55.226089 | debian-bookworm | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2026-06-15 04:40:55.228145 | debian-bookworm | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos 2026-06-15 04:40:55.228367 | debian-bookworm | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos' 2026-06-15 04:40:55.230136 | debian-bookworm | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman 2026-06-15 04:40:55.230482 | debian-bookworm | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman' 2026-06-15 04:40:55.230763 | debian-bookworm | Loading collection community.proxmox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox 2026-06-15 04:40:55.230974 | debian-bookworm | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox' 2026-06-15 04:40:55.231189 | debian-bookworm | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud 2026-06-15 04:40:55.231405 | debian-bookworm | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud' 2026-06-15 04:40:55.231695 | debian-bookworm | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana 2026-06-15 04:40:55.231979 | debian-bookworm | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana' 2026-06-15 04:40:55.232312 | debian-bookworm | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault 2026-06-15 04:40:55.232525 | debian-bookworm | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault' 2026-06-15 04:40:55.233050 | debian-bookworm | Loading collection community.crypto from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto 2026-06-15 04:40:55.233362 | debian-bookworm | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto' 2026-06-15 04:40:55.233734 | debian-bookworm | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur 2026-06-15 04:40:55.234043 | debian-bookworm | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur' 2026-06-15 04:40:55.234339 | debian-bookworm | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis 2026-06-15 04:40:55.234578 | debian-bookworm | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis' 2026-06-15 04:40:55.235636 | debian-bookworm | Loading collection community.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware 2026-06-15 04:40:55.235915 | debian-bookworm | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware' 2026-06-15 04:40:55.278033 | debian-bookworm | Loading collection community.network from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network 2026-06-15 04:40:55.278490 | debian-bookworm | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network' 2026-06-15 04:40:55.279076 | debian-bookworm | Loading collection ansible.posix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix 2026-06-15 04:40:55.279602 | debian-bookworm | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix' 2026-06-15 04:40:55.280166 | debian-bookworm | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs 2026-06-15 04:40:55.280616 | debian-bookworm | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs' 2026-06-15 04:40:55.280990 | debian-bookworm | Loading collection community.libvirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt 2026-06-15 04:40:55.281470 | debian-bookworm | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt' 2026-06-15 04:40:55.281851 | debian-bookworm | Loading collection cisco.ise from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise 2026-06-15 04:40:55.282217 | debian-bookworm | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise' 2026-06-15 04:40:55.282797 | debian-bookworm | Loading collection community.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana 2026-06-15 04:40:55.283183 | debian-bookworm | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana' 2026-06-15 04:40:55.283842 | debian-bookworm | Loading collection community.docker from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker 2026-06-15 04:40:55.284221 | debian-bookworm | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker' 2026-06-15 04:40:55.285574 | debian-bookworm | Loading collection google.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud 2026-06-15 04:40:55.285945 | debian-bookworm | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud' 2026-06-15 04:40:55.286221 | debian-bookworm | Loading collection community.proxysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql 2026-06-15 04:40:55.286575 | debian-bookworm | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql' 2026-06-15 04:40:55.286990 | debian-bookworm | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray 2026-06-15 04:40:55.287429 | debian-bookworm | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2026-06-15 04:40:55.287734 | debian-bookworm | Loading collection ansible.utils from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils 2026-06-15 04:40:55.288101 | debian-bookworm | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils' 2026-06-15 04:40:55.288403 | debian-bookworm | Loading collection community.mysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql 2026-06-15 04:40:55.288712 | debian-bookworm | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql' 2026-06-15 04:40:55.289077 | debian-bookworm | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-15 04:40:55.289562 | debian-bookworm | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-15 04:40:55.289778 | debian-bookworm | Loading collection community.sops from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops 2026-06-15 04:40:55.290138 | debian-bookworm | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops' 2026-06-15 04:40:55.291502 | debian-bookworm | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean 2026-06-15 04:40:55.291840 | debian-bookworm | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean' 2026-06-15 04:40:55.295998 | debian-bookworm | Loading collection community.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws 2026-06-15 04:40:55.296316 | debian-bookworm | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws' 2026-06-15 04:40:55.296715 | debian-bookworm | Loading collection community.hrobot from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot 2026-06-15 04:40:55.297034 | debian-bookworm | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot' 2026-06-15 04:40:55.297405 | debian-bookworm | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2026-06-15 04:40:55.297663 | debian-bookworm | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-15 04:40:55.298291 | debian-bookworm | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt 2026-06-15 04:40:55.298496 | debian-bookworm | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2026-06-15 04:40:55.298710 | debian-bookworm | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-15 04:40:55.298996 | debian-bookworm | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-15 04:40:55.301447 | debian-bookworm | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2026-06-15 04:40:55.301746 | debian-bookworm | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-15 04:40:55.302127 | debian-bookworm | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid 2026-06-15 04:40:55.302345 | debian-bookworm | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2026-06-15 04:40:55.303011 | debian-bookworm | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core 2026-06-15 04:40:55.303278 | debian-bookworm | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core' 2026-06-15 04:40:55.303489 | debian-bookworm | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-15 04:40:55.303704 | debian-bookworm | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-15 04:40:55.304014 | debian-bookworm | Loading collection cloud.common from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common 2026-06-15 04:40:55.304296 | debian-bookworm | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common' 2026-06-15 04:40:55.307473 | debian-bookworm | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios 2026-06-15 04:40:55.307693 | debian-bookworm | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios' 2026-06-15 04:40:55.308784 | debian-bookworm | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos 2026-06-15 04:40:55.309036 | debian-bookworm | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2026-06-15 04:40:55.317558 | debian-bookworm | Loading collection community.general from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general 2026-06-15 04:40:55.317973 | debian-bookworm | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general' 2026-06-15 04:40:55.320234 | debian-bookworm | Loading collection awx.awx from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx 2026-06-15 04:40:55.320605 | debian-bookworm | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx' 2026-06-15 04:40:55.321227 | debian-bookworm | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos 2026-06-15 04:40:55.321661 | debian-bookworm | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos' 2026-06-15 04:40:55.322056 | debian-bookworm | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim 2026-06-15 04:40:55.322387 | debian-bookworm | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim' 2026-06-15 04:40:55.322770 | debian-bookworm | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs 2026-06-15 04:40:55.323162 | debian-bookworm | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs' 2026-06-15 04:40:55.323429 | debian-bookworm | Loading collection community.routeros from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros 2026-06-15 04:40:55.323767 | debian-bookworm | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros' 2026-06-15 04:40:55.324033 | debian-bookworm | Loading collection containers.podman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman 2026-06-15 04:40:55.324285 | debian-bookworm | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman' 2026-06-15 04:40:55.324535 | debian-bookworm | Loading collection community.mongodb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb 2026-06-15 04:40:55.324892 | debian-bookworm | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb' 2026-06-15 04:40:55.325142 | debian-bookworm | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware 2026-06-15 04:40:55.325423 | debian-bookworm | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware' 2026-06-15 04:40:55.325768 | debian-bookworm | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud 2026-06-15 04:40:55.326074 | debian-bookworm | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud' 2026-06-15 04:40:55.326317 | debian-bookworm | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go 2026-06-15 04:40:55.326591 | debian-bookworm | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go' 2026-06-15 04:40:55.326797 | debian-bookworm | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb 2026-06-15 04:40:55.327016 | debian-bookworm | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb' 2026-06-15 04:40:55.327284 | debian-bookworm | Loading collection community.okd from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd 2026-06-15 04:40:55.327489 | debian-bookworm | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd' 2026-06-15 04:40:55.327774 | debian-bookworm | Loading collection community.postgresql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql 2026-06-15 04:40:55.327989 | debian-bookworm | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql' 2026-06-15 04:40:55.328252 | debian-bookworm | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq 2026-06-15 04:40:55.328452 | debian-bookworm | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq' 2026-06-15 04:40:55.328718 | debian-bookworm | Loading collection community.dns from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns 2026-06-15 04:40:55.328961 | debian-bookworm | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns' 2026-06-15 04:40:55.333102 | debian-bookworm | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-15 04:40:55.333369 | debian-bookworm | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-15 04:40:55.336963 | debian-bookworm | Initial connection to galaxy_server: https://galaxy.ansible.com 2026-06-15 04:40:55.337299 | debian-bookworm | Created /home/zuul/.ansible/galaxy_token 2026-06-15 04:40:55.337532 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/ 2026-06-15 04:40:55.114590 | ubuntu-noble | INFO [delegated > dependency] Executing 2026-06-15 04:40:55.115926 | ubuntu-noble | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-15 04:40:55.483483 | ubuntu-noble | ansible-galaxy [core 2.18.17] 2026-06-15 04:40:55.483563 | ubuntu-noble | config file = None 2026-06-15 04:40:55.483700 | ubuntu-noble | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-15 04:40:55.484137 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-15 04:40:55.484605 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.12/site-packages:/home/zuul/venv/lib/python3.12/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.12/dist-packages 2026-06-15 04:40:55.484995 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-15 04:40:55.485443 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) [GCC 13.3.0] (/home/zuul/venv/bin/python3) 2026-06-15 04:40:55.485828 | ubuntu-noble | jinja version = 3.1.6 2026-06-15 04:40:55.486229 | ubuntu-noble | libyaml = True 2026-06-15 04:40:55.486585 | ubuntu-noble | No config file found; using defaults 2026-06-15 04:40:55.487105 | ubuntu-noble | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-15 04:40:55.495257 | ubuntu-noble | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-15 04:40:55.495724 | ubuntu-noble | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-15 04:40:55.505693 | ubuntu-noble | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb 2026-06-15 04:40:55.506208 | ubuntu-noble | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb' 2026-06-15 04:40:55.508454 | ubuntu-noble | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-15 04:40:55.508486 | ubuntu-noble | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-15 04:40:55.508499 | ubuntu-noble | Loading collection community.proxmox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox 2026-06-15 04:40:55.508510 | ubuntu-noble | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox' 2026-06-15 04:40:55.508547 | ubuntu-noble | Loading collection community.routeros from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros 2026-06-15 04:40:55.508857 | ubuntu-noble | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros' 2026-06-15 04:40:55.509333 | ubuntu-noble | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos 2026-06-15 04:40:55.509748 | ubuntu-noble | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos' 2026-06-15 04:40:55.510764 | ubuntu-noble | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity 2026-06-15 04:40:55.511372 | ubuntu-noble | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity' 2026-06-15 04:40:55.511795 | ubuntu-noble | Loading collection community.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana 2026-06-15 04:40:55.512219 | ubuntu-noble | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana' 2026-06-15 04:40:55.512653 | ubuntu-noble | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage 2026-06-15 04:40:55.513229 | ubuntu-noble | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-15 04:40:55.513661 | ubuntu-noble | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad 2026-06-15 04:40:55.514038 | ubuntu-noble | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad' 2026-06-15 04:40:55.514393 | ubuntu-noble | Loading collection containers.podman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman 2026-06-15 04:40:55.514791 | ubuntu-noble | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman' 2026-06-15 04:40:55.515295 | ubuntu-noble | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki 2026-06-15 04:40:55.515688 | ubuntu-noble | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki' 2026-06-15 04:40:55.516060 | ubuntu-noble | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt 2026-06-15 04:40:55.516535 | ubuntu-noble | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt' 2026-06-15 04:40:55.516889 | ubuntu-noble | Loading collection cisco.ise from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise 2026-06-15 04:40:55.517294 | ubuntu-noble | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise' 2026-06-15 04:40:55.517639 | ubuntu-noble | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules 2026-06-15 04:40:55.517953 | ubuntu-noble | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-15 04:40:55.518381 | ubuntu-noble | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage 2026-06-15 04:40:55.518716 | ubuntu-noble | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-15 04:40:55.519043 | ubuntu-noble | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-15 04:40:55.519354 | ubuntu-noble | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-15 04:40:55.519687 | ubuntu-noble | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr 2026-06-15 04:40:55.520120 | ubuntu-noble | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr' 2026-06-15 04:40:55.520452 | ubuntu-noble | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-15 04:40:55.522449 | ubuntu-noble | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-15 04:40:55.522479 | ubuntu-noble | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs 2026-06-15 04:40:55.522488 | ubuntu-noble | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs' 2026-06-15 04:40:55.522495 | ubuntu-noble | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core 2026-06-15 04:40:55.522503 | ubuntu-noble | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core' 2026-06-15 04:40:55.522606 | ubuntu-noble | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight 2026-06-15 04:40:55.522863 | ubuntu-noble | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight' 2026-06-15 04:40:55.523132 | ubuntu-noble | Loading collection cisco.asa from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa 2026-06-15 04:40:55.523393 | ubuntu-noble | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa' 2026-06-15 04:40:55.523682 | ubuntu-noble | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud 2026-06-15 04:40:55.524062 | ubuntu-noble | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud' 2026-06-15 04:40:55.524327 | ubuntu-noble | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray 2026-06-15 04:40:55.524585 | ubuntu-noble | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray' 2026-06-15 04:40:55.526292 | ubuntu-noble | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios 2026-06-15 04:40:55.526609 | ubuntu-noble | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios' 2026-06-15 04:40:55.527083 | ubuntu-noble | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex 2026-06-15 04:40:55.527369 | ubuntu-noble | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex' 2026-06-15 04:40:55.529226 | ubuntu-noble | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection 2026-06-15 04:40:55.529545 | ubuntu-noble | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection' 2026-06-15 04:40:55.529819 | ubuntu-noble | Loading collection ansible.utils from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils 2026-06-15 04:40:55.530100 | ubuntu-noble | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils' 2026-06-15 04:40:55.530366 | ubuntu-noble | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq 2026-06-15 04:40:55.530655 | ubuntu-noble | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq' 2026-06-15 04:40:55.530871 | ubuntu-noble | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-15 04:40:55.531183 | ubuntu-noble | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-15 04:40:55.531436 | ubuntu-noble | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-15 04:40:55.531701 | ubuntu-noble | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-15 04:40:55.531897 | ubuntu-noble | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core 2026-06-15 04:40:55.532161 | ubuntu-noble | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core' 2026-06-15 04:40:55.532359 | ubuntu-noble | Loading collection wti.remote from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote 2026-06-15 04:40:55.532625 | ubuntu-noble | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote' 2026-06-15 04:40:55.532873 | ubuntu-noble | Loading collection community.okd from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd 2026-06-15 04:40:55.533169 | ubuntu-noble | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd' 2026-06-15 04:40:55.533438 | ubuntu-noble | Loading collection community.hrobot from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot 2026-06-15 04:40:55.533677 | ubuntu-noble | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot' 2026-06-15 04:40:55.533849 | ubuntu-noble | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go 2026-06-15 04:40:55.534079 | ubuntu-noble | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go' 2026-06-15 04:40:55.534295 | ubuntu-noble | Loading collection community.mongodb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb 2026-06-15 04:40:55.534559 | ubuntu-noble | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb' 2026-06-15 04:40:55.536474 | ubuntu-noble | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean 2026-06-15 04:40:55.536754 | ubuntu-noble | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean' 2026-06-15 04:40:55.537195 | ubuntu-noble | Loading collection community.docker from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker 2026-06-15 04:40:55.537430 | ubuntu-noble | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker' 2026-06-15 04:40:55.538184 | ubuntu-noble | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox 2026-06-15 04:40:55.538428 | ubuntu-noble | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox' 2026-06-15 04:40:55.538719 | ubuntu-noble | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-15 04:40:55.538940 | ubuntu-noble | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-15 04:40:55.539317 | ubuntu-noble | Loading collection community.dns from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns 2026-06-15 04:40:55.539556 | ubuntu-noble | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns' 2026-06-15 04:40:55.540751 | ubuntu-noble | Loading collection splunk.es from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es 2026-06-15 04:40:55.540768 | ubuntu-noble | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es' 2026-06-15 04:40:55.540783 | ubuntu-noble | Loading collection community.libvirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt 2026-06-15 04:40:55.540789 | ubuntu-noble | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt' 2026-06-15 04:40:55.556113 | ubuntu-noble | Loading collection cisco.aci from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci 2026-06-15 04:40:55.556347 | ubuntu-noble | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci' 2026-06-15 04:40:55.556939 | ubuntu-noble | Loading collection community.proxysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql 2026-06-15 04:40:55.556959 | ubuntu-noble | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql' 2026-06-15 04:40:55.558694 | ubuntu-noble | Loading collection cisco.mso from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso 2026-06-15 04:40:55.558715 | ubuntu-noble | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso' 2026-06-15 04:40:55.568569 | ubuntu-noble | Loading collection community.general from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general 2026-06-15 04:40:55.568592 | ubuntu-noble | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general' 2026-06-15 04:40:55.569229 | ubuntu-noble | Loading collection community.postgresql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql 2026-06-15 04:40:55.569245 | ubuntu-noble | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql' 2026-06-15 04:40:55.572201 | ubuntu-noble | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman 2026-06-15 04:40:55.572229 | ubuntu-noble | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman' 2026-06-15 04:40:55.572236 | ubuntu-noble | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox 2026-06-15 04:40:55.572244 | ubuntu-noble | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox' 2026-06-15 04:40:55.572250 | ubuntu-noble | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs 2026-06-15 04:40:55.572257 | ubuntu-noble | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs' 2026-06-15 04:40:55.574531 | ubuntu-noble | Loading collection community.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware 2026-06-15 04:40:55.574557 | ubuntu-noble | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware' 2026-06-15 04:40:55.574566 | ubuntu-noble | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-15 04:40:55.574574 | ubuntu-noble | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-15 04:40:55.574909 | ubuntu-noble | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur 2026-06-15 04:40:55.575271 | ubuntu-noble | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur' 2026-06-15 04:40:55.575637 | ubuntu-noble | Loading collection community.sops from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops 2026-06-15 04:40:55.575949 | ubuntu-noble | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops' 2026-06-15 04:40:55.576326 | ubuntu-noble | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-15 04:40:55.576629 | ubuntu-noble | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-15 04:40:55.576987 | ubuntu-noble | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware 2026-06-15 04:40:55.577299 | ubuntu-noble | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware' 2026-06-15 04:40:55.577667 | ubuntu-noble | Loading collection google.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud 2026-06-15 04:40:55.578049 | ubuntu-noble | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud' 2026-06-15 04:40:55.578324 | ubuntu-noble | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade 2026-06-15 04:40:55.578695 | ubuntu-noble | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade' 2026-06-15 04:40:55.578978 | ubuntu-noble | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim 2026-06-15 04:40:55.579271 | ubuntu-noble | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim' 2026-06-15 04:40:55.579642 | ubuntu-noble | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid 2026-06-15 04:40:55.579927 | ubuntu-noble | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid' 2026-06-15 04:40:55.580221 | ubuntu-noble | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-15 04:40:55.580590 | ubuntu-noble | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-15 04:40:55.581168 | ubuntu-noble | Loading collection amazon.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws 2026-06-15 04:40:55.581472 | ubuntu-noble | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws' 2026-06-15 04:40:55.584716 | ubuntu-noble | Loading collection community.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws 2026-06-15 04:40:55.584987 | ubuntu-noble | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws' 2026-06-15 04:40:55.585590 | ubuntu-noble | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt 2026-06-15 04:40:55.585859 | ubuntu-noble | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt' 2026-06-15 04:40:55.586137 | ubuntu-noble | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules 2026-06-15 04:40:55.586409 | ubuntu-noble | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-15 04:40:55.586895 | ubuntu-noble | Loading collection ansible.posix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix 2026-06-15 04:40:55.586908 | ubuntu-noble | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix' 2026-06-15 04:40:55.593185 | ubuntu-noble | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager 2026-06-15 04:40:55.593218 | ubuntu-noble | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-15 04:40:55.593225 | ubuntu-noble | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager 2026-06-15 04:40:55.593232 | ubuntu-noble | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-15 04:40:55.593788 | ubuntu-noble | Loading collection community.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows 2026-06-15 04:40:55.593806 | ubuntu-noble | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows' 2026-06-15 04:40:55.596052 | ubuntu-noble | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud 2026-06-15 04:40:55.596078 | ubuntu-noble | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud' 2026-06-15 04:40:55.596085 | ubuntu-noble | Loading collection cloud.common from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common 2026-06-15 04:40:55.596091 | ubuntu-noble | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common' 2026-06-15 04:40:55.596106 | ubuntu-noble | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis 2026-06-15 04:40:55.596112 | ubuntu-noble | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis' 2026-06-15 04:40:55.596360 | ubuntu-noble | Loading collection community.zabbix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix 2026-06-15 04:40:55.596644 | ubuntu-noble | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix' 2026-06-15 04:40:55.597381 | ubuntu-noble | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap 2026-06-15 04:40:55.597615 | ubuntu-noble | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap' 2026-06-15 04:40:55.597888 | ubuntu-noble | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb 2026-06-15 04:40:55.598120 | ubuntu-noble | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb' 2026-06-15 04:40:55.635757 | ubuntu-noble | Loading collection community.network from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network 2026-06-15 04:40:55.636225 | ubuntu-noble | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network' 2026-06-15 04:40:55.636630 | ubuntu-noble | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac 2026-06-15 04:40:55.636921 | ubuntu-noble | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac' 2026-06-15 04:40:55.637299 | ubuntu-noble | Loading collection community.mysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql 2026-06-15 04:40:55.637620 | ubuntu-noble | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql' 2026-06-15 04:40:55.637981 | ubuntu-noble | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar 2026-06-15 04:40:55.638282 | ubuntu-noble | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar' 2026-06-15 04:40:55.638663 | ubuntu-noble | Loading collection community.crypto from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto 2026-06-15 04:40:55.638966 | ubuntu-noble | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto' 2026-06-15 04:40:55.639539 | ubuntu-noble | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos 2026-06-15 04:40:55.639875 | ubuntu-noble | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos' 2026-06-15 04:40:55.640697 | ubuntu-noble | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon 2026-06-15 04:40:55.641070 | ubuntu-noble | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon' 2026-06-15 04:40:55.641397 | ubuntu-noble | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-15 04:40:55.641763 | ubuntu-noble | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-15 04:40:55.642150 | ubuntu-noble | Loading collection cisco.ios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios 2026-06-15 04:40:55.642488 | ubuntu-noble | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios' 2026-06-15 04:40:55.644880 | ubuntu-noble | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest 2026-06-15 04:40:55.645230 | ubuntu-noble | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-15 04:40:55.645948 | ubuntu-noble | Loading collection arista.eos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos 2026-06-15 04:40:55.646317 | ubuntu-noble | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos' 2026-06-15 04:40:55.648628 | ubuntu-noble | Loading collection awx.awx from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx 2026-06-15 04:40:55.649016 | ubuntu-noble | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx' 2026-06-15 04:40:55.649814 | ubuntu-noble | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-15 04:40:55.649837 | ubuntu-noble | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-15 04:40:55.651450 | ubuntu-noble | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage 2026-06-15 04:40:55.651474 | ubuntu-noble | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage' 2026-06-15 04:40:55.651482 | ubuntu-noble | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana 2026-06-15 04:40:55.651489 | ubuntu-noble | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana' 2026-06-15 04:40:55.651576 | ubuntu-noble | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud 2026-06-15 04:40:55.651850 | ubuntu-noble | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud' 2026-06-15 04:40:55.652082 | ubuntu-noble | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault 2026-06-15 04:40:55.652356 | ubuntu-noble | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault' 2026-06-15 04:40:55.652606 | ubuntu-noble | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-15 04:40:55.652884 | ubuntu-noble | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-15 04:40:55.653132 | ubuntu-noble | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas 2026-06-15 04:40:55.653355 | ubuntu-noble | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas' 2026-06-15 04:40:55.653646 | ubuntu-noble | Loading collection ansible.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows 2026-06-15 04:40:55.653871 | ubuntu-noble | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows' 2026-06-15 04:40:55.655604 | ubuntu-noble | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos 2026-06-15 04:40:55.655865 | ubuntu-noble | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos' 2026-06-15 04:40:55.659780 | ubuntu-noble | Initial connection to galaxy_server: https://galaxy.ansible.com 2026-06-15 04:40:55.660089 | ubuntu-noble | Created /home/zuul/.ansible/galaxy_token 2026-06-15 04:40:55.660284 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/ 2026-06-15 04:40:55.890791 | ubuntu-noble | Found API version 'v3, pulp-v3, v1' with Galaxy server default (https://galaxy.ansible.com/api/) 2026-06-15 04:40:55.891519 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/ 2026-06-15 04:40:56.505146 | debian-bookworm | Found API version 'v3, pulp-v3, v1' with Galaxy server default (https://galaxy.ansible.com/api/) 2026-06-15 04:40:56.505401 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/ 2026-06-15 04:40:56.568335 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/?limit=100 2026-06-15 04:40:57.091659 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/?limit=100 2026-06-15 04:40:57.978114 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/0.20260601.0/ 2026-06-15 04:40:58.622495 | debian-bookworm | Server https://galaxy.ansible.com/api/ has not signed osism.commons:0.20260601.0 2026-06-15 04:40:58.622899 | debian-bookworm | Fetching a collection tarball for 'osism.commons:0.20260601.0' from Ansible Galaxy 2026-06-15 04:40:58.732455 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/0.20260601.0/ 2026-06-15 04:40:59.298195 | ubuntu-noble | Server https://galaxy.ansible.com/api/ has not signed osism.commons:0.20260601.0 2026-06-15 04:40:59.298766 | ubuntu-noble | Fetching a collection tarball for 'osism.commons:0.20260601.0' from Ansible Galaxy 2026-06-15 04:41:00.023519 | debian-bookworm | Validating downloaded file hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 with expected hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 2026-06-15 04:41:00.023997 | debian-bookworm | Collection 'osism.commons:0.20260601.0' obtained from server default https://galaxy.ansible.com/api/ 2026-06-15 04:41:00.176548 | debian-bookworm | Starting galaxy collection install process 2026-06-15 04:41:00.176898 | debian-bookworm | Process install dependency map 2026-06-15 04:41:00.177236 | debian-bookworm | Starting collection install process 2026-06-15 04:41:00.177782 | debian-bookworm | 'ansible.posix:1.6.2' is already installed, skipping. 2026-06-15 04:41:00.178255 | debian-bookworm | 'community.docker:4.8.2' is already installed, skipping. 2026-06-15 04:41:00.178662 | debian-bookworm | 'community.general:10.7.6' is already installed, skipping. 2026-06-15 04:41:00.179131 | debian-bookworm | 'community.library_inventory_filtering_v1:1.1.5' is already installed, skipping. 2026-06-15 04:41:00.179596 | debian-bookworm | Downloading https://galaxy.ansible.com/api/v3/plugin/ansible/content/published/collections/artifacts/osism-commons-0.20260601.0.tar.gz to /home/zuul/.ansible/tmp/ansible-local-18794o4ke_0k/tmp_l54d849/osism-commons-0.20260601.0-9u5aypaa 2026-06-15 04:41:00.180046 | debian-bookworm | Installing 'osism.commons:0.20260601.0' to '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-15 04:41:00.180519 | debian-bookworm | osism.commons:0.20260601.0 was installed successfully 2026-06-15 04:41:00.228776 | debian-bookworm | INFO [delegated > dependency] Dependency completed successfully. 2026-06-15 04:41:00.228878 | debian-bookworm | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from dependency_sequence to suppress) 2026-06-15 04:41:00.229289 | debian-bookworm | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-15 04:41:00.451742 | ubuntu-noble | Validating downloaded file hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 with expected hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 2026-06-15 04:41:00.451798 | ubuntu-noble | Collection 'osism.commons:0.20260601.0' obtained from server default https://galaxy.ansible.com/api/ 2026-06-15 04:41:00.616454 | ubuntu-noble | Starting galaxy collection install process 2026-06-15 04:41:00.616497 | ubuntu-noble | Process install dependency map 2026-06-15 04:41:00.616504 | ubuntu-noble | Starting collection install process 2026-06-15 04:41:00.616508 | ubuntu-noble | 'ansible.posix:1.6.2' is already installed, skipping. 2026-06-15 04:41:00.616513 | ubuntu-noble | 'community.docker:4.8.2' is already installed, skipping. 2026-06-15 04:41:00.616517 | ubuntu-noble | 'community.general:10.7.6' is already installed, skipping. 2026-06-15 04:41:00.616521 | ubuntu-noble | 'community.library_inventory_filtering_v1:1.1.5' is already installed, skipping. 2026-06-15 04:41:00.616526 | ubuntu-noble | Downloading https://galaxy.ansible.com/api/v3/plugin/ansible/content/published/collections/artifacts/osism-commons-0.20260601.0.tar.gz to /home/zuul/.ansible/tmp/ansible-local-1708v3btq2ae/tmpgj4jkq9o/osism-commons-0.20260601.0-ve1utunt 2026-06-15 04:41:00.616540 | ubuntu-noble | Installing 'osism.commons:0.20260601.0' to '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-15 04:41:00.616545 | ubuntu-noble | osism.commons:0.20260601.0 was installed successfully 2026-06-15 04:41:00.687508 | ubuntu-noble | INFO [delegated > dependency] Dependency completed successfully. 2026-06-15 04:41:00.687704 | ubuntu-noble | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from dependency_sequence to suppress) 2026-06-15 04:41:00.688077 | ubuntu-noble | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-15 04:41:00.957852 | debian-bookworm | ok: Runtime: 0:00:07.592486 2026-06-15 04:41:00.976841 | ubuntu-noble | ok: Runtime: 0:00:07.996468 2026-06-15 04:41:00.987529 | 2026-06-15 04:41:00.987671 | TASK [ansible-molecule : Run molecule create action with scenario delegated] 2026-06-15 04:41:01.540062 | debian-bookworm | skipping: Conditional result was False 2026-06-15 04:41:01.541089 | ubuntu-noble | skipping: Conditional result was False 2026-06-15 04:41:01.549556 | 2026-06-15 04:41:01.549694 | TASK [ansible-molecule : Run molecule prepare action with scenario delegated] 2026-06-15 04:41:02.188955 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-15 04:41:02.197382 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-15 04:41:02.236628 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-15 04:41:02.245475 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-15 04:41:02.613711 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-15 04:41:02.614312 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-15 04:41:02.633520 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-15 04:41:02.638925 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: prepare 2026-06-15 04:41:02.639008 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-15 04:41:02.729158 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-15 04:41:02.729778 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-15 04:41:02.751547 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-15 04:41:02.757192 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: prepare 2026-06-15 04:41:02.757246 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-15 04:41:03.743610 | debian-bookworm | INFO [delegated > prepare] Executing 2026-06-15 04:41:04.020074 | debian-bookworm | DEBUG [delegated > prepare] ansible-playbook version: ansible-playbook 2026-06-15 04:41:04.020126 | debian-bookworm | config file = None 2026-06-15 04:41:04.020139 | debian-bookworm | configured module search path = 2026-06-15 04:41:04.020145 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-15 04:41:04.020152 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-15 04:41:04.020156 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-15 04:41:04.020160 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) (/home/zuul/venv/bin/python3) 2026-06-15 04:41:04.020165 | debian-bookworm | jinja version = 3.1.6 2026-06-15 04:41:04.020169 | debian-bookworm | libyaml = True 2026-06-15 04:41:04.020178 | debian-bookworm | DEBUG ANSIBLE ENVIRONMENT: 2026-06-15 04:41:04.020183 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-15 04:41:04.020187 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-15 04:41:04.020191 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2026-06-15 04:41:04.020195 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-15 04:41:04.020199 | debian-bookworm | ANSIBLE_ROLE: auditd 2026-06-15 04:41:04.020203 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2026-06-15 04:41:04.020207 | debian-bookworm | ANSIBLE_VERBOSITY: 1 2026-06-15 04:41:04.020211 | debian-bookworm | 2026-06-15 04:41:04.020215 | debian-bookworm | DEBUG MOLECULE ENVIRONMENT: 2026-06-15 04:41:04.020219 | debian-bookworm | MOLECULE_DEBUG: True 2026-06-15 04:41:04.020224 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-15 04:41:04.020228 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2026-06-15 04:41:04.020232 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-15 04:41:04.020244 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-15 04:41:04.020249 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-15 04:41:04.020253 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-15 04:41:04.020257 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-15 04:41:04.020262 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-15 04:41:04.020266 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2026-06-15 04:41:04.020270 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-15 04:41:04.020274 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2026-06-15 04:41:04.020278 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-15 04:41:04.020282 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2026-06-15 04:41:04.020286 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-15 04:41:04.020290 | debian-bookworm | 2026-06-15 04:41:04.020370 | debian-bookworm | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-15 04:41:03.996895 | ubuntu-noble | INFO [delegated > prepare] Executing 2026-06-15 04:41:04.265435 | debian-bookworm | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-15 04:41:04.500247 | debian-bookworm | 2026-06-15 04:41:04.500698 | debian-bookworm | PLAY [Prepare] ***************************************************************** 2026-06-15 04:41:04.501099 | debian-bookworm | 2026-06-15 04:41:04.501532 | debian-bookworm | TASK [Gathering Facts] ********************************************************* 2026-06-15 04:41:04.318005 | ubuntu-noble | DEBUG [delegated > prepare] ansible-playbook version: ansible-playbook 2026-06-15 04:41:04.318046 | ubuntu-noble | config file = None 2026-06-15 04:41:04.318058 | ubuntu-noble | configured module search path = 2026-06-15 04:41:04.318065 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-15 04:41:04.318069 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-15 04:41:04.318073 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-15 04:41:04.318077 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) (/home/zuul/venv/bin/python3) 2026-06-15 04:41:04.318080 | ubuntu-noble | jinja version = 3.1.6 2026-06-15 04:41:04.318084 | ubuntu-noble | libyaml = True 2026-06-15 04:41:04.318432 | ubuntu-noble | DEBUG ANSIBLE ENVIRONMENT: 2026-06-15 04:41:04.318441 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-15 04:41:04.318445 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-15 04:41:04.318449 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2026-06-15 04:41:04.318452 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-15 04:41:04.318456 | ubuntu-noble | ANSIBLE_ROLE: auditd 2026-06-15 04:41:04.318460 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2026-06-15 04:41:04.318463 | ubuntu-noble | ANSIBLE_VERBOSITY: 1 2026-06-15 04:41:04.318467 | ubuntu-noble | 2026-06-15 04:41:04.318698 | ubuntu-noble | DEBUG MOLECULE ENVIRONMENT: 2026-06-15 04:41:04.318703 | ubuntu-noble | MOLECULE_DEBUG: True 2026-06-15 04:41:04.318707 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-15 04:41:04.318710 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2026-06-15 04:41:04.318714 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-15 04:41:04.318717 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-15 04:41:04.318721 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-15 04:41:04.318724 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-15 04:41:04.318728 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-15 04:41:04.318732 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-15 04:41:04.318735 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2026-06-15 04:41:04.318739 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-15 04:41:04.318742 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2026-06-15 04:41:04.318746 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-15 04:41:04.318749 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2026-06-15 04:41:04.318753 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-15 04:41:04.318756 | ubuntu-noble | 2026-06-15 04:41:04.319033 | ubuntu-noble | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-15 04:41:04.600157 | ubuntu-noble | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-15 04:41:04.834457 | ubuntu-noble | 2026-06-15 04:41:04.834582 | ubuntu-noble | PLAY [Prepare] ***************************************************************** 2026-06-15 04:41:04.834879 | ubuntu-noble | 2026-06-15 04:41:04.835267 | ubuntu-noble | TASK [Gathering Facts] ********************************************************* 2026-06-15 04:41:05.528908 | debian-bookworm | ok: [molecule-auditd] 2026-06-15 04:41:05.529014 | debian-bookworm | 2026-06-15 04:41:05.529191 | debian-bookworm | TASK [Install packages in venv] ************************************************ 2026-06-15 04:41:06.000449 | ubuntu-noble | ok: [molecule-auditd] 2026-06-15 04:41:06.002259 | ubuntu-noble | 2026-06-15 04:41:06.002289 | ubuntu-noble | TASK [Install packages in venv] ************************************************ 2026-06-15 04:41:09.886660 | debian-bookworm | changed: [molecule-auditd] => (item=docker) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "docker"], "item": "docker", "name": ["docker"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting docker\n Downloading docker-7.1.0-py3-none-any.whl (147 kB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 4.4 MB/s eta 0:00:00\nRequirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.34.2)\nRequirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.7.0)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.18)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (2026.5.20)\nInstalling collected packages: docker\nSuccessfully installed docker-7.1.0\n", "stdout_lines": ["Collecting docker", " Downloading docker-7.1.0-py3-none-any.whl (147 kB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 4.4 MB/s eta 0:00:00", "Requirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.34.2)", "Requirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.7.0)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.18)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (2026.5.20)", "Installing collected packages: docker", "Successfully installed docker-7.1.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-15 04:41:09.887204 | debian-bookworm | changed: [molecule-auditd] => (item=netaddr) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "netaddr"], "item": "netaddr", "name": ["netaddr"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting netaddr\n Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 17.6 MB/s eta 0:00:00\nInstalling collected packages: netaddr\nSuccessfully installed netaddr-1.3.0\n", "stdout_lines": ["Collecting netaddr", " Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 17.6 MB/s eta 0:00:00", "Installing collected packages: netaddr", "Successfully installed netaddr-1.3.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-15 04:41:09.887397 | debian-bookworm | ok: [molecule-auditd] => (item=requests) => {"ansible_loop_var": "item", "changed": false, "cmd": ["/home/zuul/venv/bin/pip3", "install", "requests"], "item": "requests", "name": ["requests"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Requirement already satisfied: requests in /home/zuul/venv/lib/python3.11/site-packages (2.34.2)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.18)\nRequirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2.7.0)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2026.5.20)\n", "stdout_lines": ["Requirement already satisfied: requests in /home/zuul/venv/lib/python3.11/site-packages (2.34.2)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.18)", "Requirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2.7.0)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2026.5.20)"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-15 04:41:09.887554 | debian-bookworm | 2026-06-15 04:41:09.887696 | debian-bookworm | TASK [Include required prepare tasks] ****************************************** 2026-06-15 04:41:09.908745 | debian-bookworm | included: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/prepare/auditd.yml for molecule-auditd 2026-06-15 04:41:09.908852 | debian-bookworm | 2026-06-15 04:41:09.908990 | debian-bookworm | PLAY RECAP ********************************************************************* 2026-06-15 04:41:09.909131 | debian-bookworm | molecule-auditd : ok=3 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-15 04:41:09.909258 | debian-bookworm | 2026-06-15 04:41:10.035035 | debian-bookworm | INFO [delegated > prepare] Executed: Successful 2026-06-15 04:41:10.035717 | debian-bookworm | INFO Molecule executed 1 scenario (1 successful) 2026-06-15 04:41:10.447170 | ubuntu-noble | changed: [molecule-auditd] => (item=docker) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "docker"], "item": "docker", "name": ["docker"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting docker\n Downloading docker-7.1.0-py3-none-any.whl.metadata (3.8 kB)\nRequirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.34.2)\nRequirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.7.0)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.18)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (2026.5.20)\nDownloading docker-7.1.0-py3-none-any.whl (147 kB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 3.8 MB/s eta 0:00:00\nInstalling collected packages: docker\nSuccessfully installed docker-7.1.0\n", "stdout_lines": ["Collecting docker", " Downloading docker-7.1.0-py3-none-any.whl.metadata (3.8 kB)", "Requirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.34.2)", "Requirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.7.0)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.18)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (2026.5.20)", "Downloading docker-7.1.0-py3-none-any.whl (147 kB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 3.8 MB/s eta 0:00:00", "Installing collected packages: docker", "Successfully installed docker-7.1.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-15 04:41:10.448458 | ubuntu-noble | changed: [molecule-auditd] => (item=netaddr) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "netaddr"], "item": "netaddr", "name": ["netaddr"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting netaddr\n Downloading netaddr-1.3.0-py3-none-any.whl.metadata (5.0 kB)\nDownloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 13.0 MB/s eta 0:00:00\nInstalling collected packages: netaddr\nSuccessfully installed netaddr-1.3.0\n", "stdout_lines": ["Collecting netaddr", " Downloading netaddr-1.3.0-py3-none-any.whl.metadata (5.0 kB)", "Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 13.0 MB/s eta 0:00:00", "Installing collected packages: netaddr", "Successfully installed netaddr-1.3.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-15 04:41:10.448484 | ubuntu-noble | ok: [molecule-auditd] => (item=requests) => {"ansible_loop_var": "item", "changed": false, "cmd": ["/home/zuul/venv/bin/pip3", "install", "requests"], "item": "requests", "name": ["requests"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Requirement already satisfied: requests in /home/zuul/venv/lib/python3.12/site-packages (2.34.2)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.18)\nRequirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2.7.0)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2026.5.20)\n", "stdout_lines": ["Requirement already satisfied: requests in /home/zuul/venv/lib/python3.12/site-packages (2.34.2)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.18)", "Requirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2.7.0)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2026.5.20)"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-15 04:41:10.448490 | ubuntu-noble | 2026-06-15 04:41:10.448495 | ubuntu-noble | TASK [Include required prepare tasks] ****************************************** 2026-06-15 04:41:10.465482 | ubuntu-noble | included: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/prepare/auditd.yml for molecule-auditd 2026-06-15 04:41:10.465546 | ubuntu-noble | 2026-06-15 04:41:10.465562 | ubuntu-noble | PLAY RECAP ********************************************************************* 2026-06-15 04:41:10.465575 | ubuntu-noble | molecule-auditd : ok=3 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-15 04:41:10.465761 | ubuntu-noble | 2026-06-15 04:41:10.531493 | ubuntu-noble | INFO [delegated > prepare] Executed: Successful 2026-06-15 04:41:10.532316 | ubuntu-noble | INFO Molecule executed 1 scenario (1 successful) 2026-06-15 04:41:10.631452 | debian-bookworm | ok: Runtime: 0:00:08.235587 2026-06-15 04:41:10.639029 | ubuntu-noble | ok: Runtime: 0:00:08.678984 2026-06-15 04:41:10.651592 | 2026-06-15 04:41:10.651733 | TASK [ansible-molecule : Reset connection] 2026-06-15 04:41:10.683566 | 2026-06-15 04:41:10.683707 | TASK [ansible-molecule : Reset connection] 2026-06-15 04:41:10.743756 | 2026-06-15 04:41:10.743960 | TASK [ansible-molecule : Run molecule converge action with scenario delegated] 2026-06-15 04:41:11.671372 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-15 04:41:11.681587 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-15 04:41:11.661373 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-15 04:41:11.671897 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-15 04:41:12.234784 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-15 04:41:12.235503 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-15 04:41:12.265314 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-15 04:41:12.275063 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: dependency, create, prepare, converge 2026-06-15 04:41:12.275210 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-15 04:41:12.135635 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-15 04:41:12.136401 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-15 04:41:12.170379 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-15 04:41:12.177197 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: dependency, create, prepare, converge 2026-06-15 04:41:12.177347 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-15 04:41:13.578772 | debian-bookworm | INFO [delegated > dependency] Executing 2026-06-15 04:41:13.579169 | debian-bookworm | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-15 04:41:13.440483 | ubuntu-noble | INFO [delegated > dependency] Executing 2026-06-15 04:41:13.441145 | ubuntu-noble | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-15 04:41:13.796378 | ubuntu-noble | ansible-galaxy [core 2.18.17] 2026-06-15 04:41:13.797133 | ubuntu-noble | config file = None 2026-06-15 04:41:13.797700 | ubuntu-noble | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-15 04:41:13.798560 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-15 04:41:13.799208 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.12/site-packages:/home/zuul/venv/lib/python3.12/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.12/dist-packages 2026-06-15 04:41:13.799706 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-15 04:41:13.800112 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) [GCC 13.3.0] (/home/zuul/venv/bin/python3) 2026-06-15 04:41:13.801503 | ubuntu-noble | jinja version = 3.1.6 2026-06-15 04:41:13.801544 | ubuntu-noble | libyaml = True 2026-06-15 04:41:13.801555 | ubuntu-noble | No config file found; using defaults 2026-06-15 04:41:13.801911 | ubuntu-noble | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-15 04:41:13.808288 | ubuntu-noble | Loading collection community.docker from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker 2026-06-15 04:41:13.808819 | ubuntu-noble | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker' 2026-06-15 04:41:13.809250 | ubuntu-noble | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-15 04:41:13.809736 | ubuntu-noble | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-15 04:41:13.810063 | ubuntu-noble | Loading collection community.libvirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt 2026-06-15 04:41:13.810484 | ubuntu-noble | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt' 2026-06-15 04:41:13.810854 | ubuntu-noble | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs 2026-06-15 04:41:13.811166 | ubuntu-noble | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs' 2026-06-15 04:41:13.811588 | ubuntu-noble | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage 2026-06-15 04:41:13.811959 | ubuntu-noble | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage' 2026-06-15 04:41:13.813051 | ubuntu-noble | Loading collection community.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware 2026-06-15 04:41:13.813502 | ubuntu-noble | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware' 2026-06-15 04:41:13.954534 | debian-bookworm | ansible-galaxy [core 2.18.17] 2026-06-15 04:41:13.954876 | debian-bookworm | config file = None 2026-06-15 04:41:13.955161 | debian-bookworm | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-15 04:41:13.955468 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-15 04:41:13.955761 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.11/site-packages:/home/zuul/venv/lib/python3.11/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.11/dist-packages 2026-06-15 04:41:13.955986 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-15 04:41:13.956204 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) [GCC 12.2.0] (/home/zuul/venv/bin/python3) 2026-06-15 04:41:13.956447 | debian-bookworm | jinja version = 3.1.6 2026-06-15 04:41:13.956706 | debian-bookworm | libyaml = True 2026-06-15 04:41:13.956920 | debian-bookworm | No config file found; using defaults 2026-06-15 04:41:13.957284 | debian-bookworm | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-15 04:41:13.962477 | debian-bookworm | Loading collection community.postgresql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql 2026-06-15 04:41:13.963053 | debian-bookworm | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql' 2026-06-15 04:41:13.965012 | debian-bookworm | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos 2026-06-15 04:41:13.965513 | debian-bookworm | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos' 2026-06-15 04:41:13.965883 | debian-bookworm | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2026-06-15 04:41:13.966262 | debian-bookworm | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-15 04:41:13.966525 | debian-bookworm | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray 2026-06-15 04:41:13.966911 | debian-bookworm | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2026-06-15 04:41:13.967166 | debian-bookworm | Loading collection containers.podman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman 2026-06-15 04:41:13.967511 | debian-bookworm | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman' 2026-06-15 04:41:13.967847 | debian-bookworm | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac 2026-06-15 04:41:13.968145 | debian-bookworm | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac' 2026-06-15 04:41:13.970297 | debian-bookworm | Loading collection awx.awx from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx 2026-06-15 04:41:13.970672 | debian-bookworm | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx' 2026-06-15 04:41:13.972662 | debian-bookworm | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection 2026-06-15 04:41:13.972962 | debian-bookworm | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection' 2026-06-15 04:41:13.973269 | debian-bookworm | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox 2026-06-15 04:41:13.973648 | debian-bookworm | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2026-06-15 04:41:13.980214 | debian-bookworm | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2026-06-15 04:41:13.980765 | debian-bookworm | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-15 04:41:13.981147 | debian-bookworm | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex 2026-06-15 04:41:13.981563 | debian-bookworm | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2026-06-15 04:41:13.982707 | debian-bookworm | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt 2026-06-15 04:41:13.983176 | debian-bookworm | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2026-06-15 04:41:13.983706 | debian-bookworm | Loading collection arista.eos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos 2026-06-15 04:41:13.984015 | debian-bookworm | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos' 2026-06-15 04:41:13.984431 | debian-bookworm | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-15 04:41:13.984928 | debian-bookworm | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-15 04:41:13.986103 | debian-bookworm | Loading collection cisco.aci from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci 2026-06-15 04:41:13.986434 | debian-bookworm | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci' 2026-06-15 04:41:13.987714 | debian-bookworm | Loading collection amazon.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws 2026-06-15 04:41:13.987986 | debian-bookworm | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws' 2026-06-15 04:41:13.988493 | debian-bookworm | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt 2026-06-15 04:41:13.988789 | debian-bookworm | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt' 2026-06-15 04:41:13.989153 | debian-bookworm | Loading collection cisco.asa from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa 2026-06-15 04:41:13.989460 | debian-bookworm | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa' 2026-06-15 04:41:13.989772 | debian-bookworm | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs 2026-06-15 04:41:13.990116 | debian-bookworm | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs' 2026-06-15 04:41:13.990934 | debian-bookworm | Loading collection google.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud 2026-06-15 04:41:13.991177 | debian-bookworm | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud' 2026-06-15 04:41:14.027125 | debian-bookworm | Loading collection community.network from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network 2026-06-15 04:41:14.027549 | debian-bookworm | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network' 2026-06-15 04:41:14.028308 | debian-bookworm | Loading collection cisco.ios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios 2026-06-15 04:41:14.028711 | debian-bookworm | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios' 2026-06-15 04:41:14.030408 | debian-bookworm | Loading collection community.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware 2026-06-15 04:41:14.030852 | debian-bookworm | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware' 2026-06-15 04:41:14.031188 | debian-bookworm | Loading collection community.sops from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops 2026-06-15 04:41:14.031664 | debian-bookworm | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops' 2026-06-15 04:41:14.032000 | debian-bookworm | Loading collection community.zabbix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix 2026-06-15 04:41:14.032397 | debian-bookworm | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix' 2026-06-15 04:41:14.032739 | debian-bookworm | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-15 04:41:14.033029 | debian-bookworm | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-15 04:41:14.033677 | debian-bookworm | Loading collection community.docker from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker 2026-06-15 04:41:14.033995 | debian-bookworm | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker' 2026-06-15 04:41:14.036105 | debian-bookworm | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2026-06-15 04:41:14.036505 | debian-bookworm | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-15 04:41:14.036878 | debian-bookworm | Loading collection community.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana 2026-06-15 04:41:14.037291 | debian-bookworm | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana' 2026-06-15 04:41:14.037759 | debian-bookworm | Loading collection community.crypto from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto 2026-06-15 04:41:14.038026 | debian-bookworm | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto' 2026-06-15 04:41:14.038370 | debian-bookworm | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud 2026-06-15 04:41:14.038651 | debian-bookworm | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud' 2026-06-15 04:41:14.040317 | debian-bookworm | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki 2026-06-15 04:41:14.040689 | debian-bookworm | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki' 2026-06-15 04:41:14.041506 | debian-bookworm | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos 2026-06-15 04:41:14.041929 | debian-bookworm | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos' 2026-06-15 04:41:14.042410 | debian-bookworm | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs 2026-06-15 04:41:14.042755 | debian-bookworm | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs' 2026-06-15 04:41:14.043537 | debian-bookworm | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud 2026-06-15 04:41:14.043935 | debian-bookworm | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2026-06-15 04:41:14.044222 | debian-bookworm | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-15 04:41:14.044503 | debian-bookworm | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-15 04:41:14.044807 | debian-bookworm | Loading collection wti.remote from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote 2026-06-15 04:41:14.045092 | debian-bookworm | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote' 2026-06-15 04:41:14.045408 | debian-bookworm | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-15 04:41:14.045727 | debian-bookworm | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-15 04:41:14.047690 | debian-bookworm | Loading collection cisco.mso from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso 2026-06-15 04:41:14.048134 | debian-bookworm | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso' 2026-06-15 04:41:14.048434 | debian-bookworm | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-15 04:41:14.048883 | debian-bookworm | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-15 04:41:14.049307 | debian-bookworm | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid 2026-06-15 04:41:14.049964 | debian-bookworm | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2026-06-15 04:41:14.050253 | debian-bookworm | Loading collection ansible.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows 2026-06-15 04:41:14.050592 | debian-bookworm | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows' 2026-06-15 04:41:14.051026 | debian-bookworm | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap 2026-06-15 04:41:14.051295 | debian-bookworm | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap' 2026-06-15 04:41:14.051693 | debian-bookworm | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault 2026-06-15 04:41:14.051959 | debian-bookworm | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault' 2026-06-15 04:41:14.052393 | debian-bookworm | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2026-06-15 04:41:14.052699 | debian-bookworm | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-15 04:41:14.053053 | debian-bookworm | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight 2026-06-15 04:41:14.053420 | debian-bookworm | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight' 2026-06-15 04:41:14.053878 | debian-bookworm | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud 2026-06-15 04:41:14.054141 | debian-bookworm | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud' 2026-06-15 04:41:14.054502 | debian-bookworm | Loading collection splunk.es from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es 2026-06-15 04:41:14.054938 | debian-bookworm | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es' 2026-06-15 04:41:14.055297 | debian-bookworm | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core 2026-06-15 04:41:14.055564 | debian-bookworm | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core' 2026-06-15 04:41:14.065013 | debian-bookworm | Loading collection community.general from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general 2026-06-15 04:41:14.065543 | debian-bookworm | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general' 2026-06-15 04:41:14.065995 | debian-bookworm | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage 2026-06-15 04:41:14.066421 | debian-bookworm | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2026-06-15 04:41:14.066853 | debian-bookworm | Loading collection cloud.common from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common 2026-06-15 04:41:14.067138 | debian-bookworm | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common' 2026-06-15 04:41:14.067515 | debian-bookworm | Loading collection community.mongodb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb 2026-06-15 04:41:14.067849 | debian-bookworm | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb' 2026-06-15 04:41:14.068241 | debian-bookworm | Loading collection community.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows 2026-06-15 04:41:14.068543 | debian-bookworm | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows' 2026-06-15 04:41:14.071532 | debian-bookworm | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios 2026-06-15 04:41:14.071980 | debian-bookworm | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios' 2026-06-15 04:41:14.072449 | debian-bookworm | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade 2026-06-15 04:41:14.072807 | debian-bookworm | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2026-06-15 04:41:14.073219 | debian-bookworm | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-15 04:41:14.073735 | debian-bookworm | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-15 04:41:14.074056 | debian-bookworm | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas 2026-06-15 04:41:14.074456 | debian-bookworm | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas' 2026-06-15 04:41:14.074855 | debian-bookworm | Loading collection community.libvirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt 2026-06-15 04:41:14.075145 | debian-bookworm | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt' 2026-06-15 04:41:14.075431 | debian-bookworm | Loading collection ansible.posix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix 2026-06-15 04:41:14.075747 | debian-bookworm | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix' 2026-06-15 04:41:14.076144 | debian-bookworm | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-15 04:41:14.076547 | debian-bookworm | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-15 04:41:14.076953 | debian-bookworm | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-15 04:41:14.077247 | debian-bookworm | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-15 04:41:14.077765 | debian-bookworm | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-15 04:41:14.078047 | debian-bookworm | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-15 04:41:14.078350 | debian-bookworm | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim 2026-06-15 04:41:14.078676 | debian-bookworm | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim' 2026-06-15 04:41:14.079152 | debian-bookworm | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon 2026-06-15 04:41:14.079417 | debian-bookworm | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon' 2026-06-15 04:41:14.079844 | debian-bookworm | Loading collection community.dns from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns 2026-06-15 04:41:14.080160 | debian-bookworm | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns' 2026-06-15 04:41:14.081427 | debian-bookworm | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman 2026-06-15 04:41:14.081752 | debian-bookworm | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman' 2026-06-15 04:41:14.082025 | debian-bookworm | Loading collection ansible.utils from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils 2026-06-15 04:41:14.082357 | debian-bookworm | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils' 2026-06-15 04:41:14.082735 | debian-bookworm | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad 2026-06-15 04:41:14.083074 | debian-bookworm | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad' 2026-06-15 04:41:14.083385 | debian-bookworm | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb 2026-06-15 04:41:14.083726 | debian-bookworm | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb' 2026-06-15 04:41:14.084717 | debian-bookworm | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean 2026-06-15 04:41:14.084966 | debian-bookworm | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean' 2026-06-15 04:41:14.085203 | debian-bookworm | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana 2026-06-15 04:41:14.085457 | debian-bookworm | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana' 2026-06-15 04:41:14.085885 | debian-bookworm | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq 2026-06-15 04:41:14.086115 | debian-bookworm | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq' 2026-06-15 04:41:14.086608 | debian-bookworm | Loading collection community.hrobot from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot 2026-06-15 04:41:14.086859 | debian-bookworm | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot' 2026-06-15 04:41:14.087450 | debian-bookworm | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core 2026-06-15 04:41:14.087707 | debian-bookworm | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core' 2026-06-15 04:41:14.088058 | debian-bookworm | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2026-06-15 04:41:14.088335 | debian-bookworm | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-15 04:41:14.088570 | debian-bookworm | Loading collection cisco.ise from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise 2026-06-15 04:41:14.088834 | debian-bookworm | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise' 2026-06-15 04:41:14.089269 | debian-bookworm | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware 2026-06-15 04:41:14.089594 | debian-bookworm | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware' 2026-06-15 04:41:14.089883 | debian-bookworm | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go 2026-06-15 04:41:14.090147 | debian-bookworm | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go' 2026-06-15 04:41:14.090956 | debian-bookworm | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox 2026-06-15 04:41:14.091232 | debian-bookworm | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox' 2026-06-15 04:41:14.094776 | debian-bookworm | Loading collection community.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws 2026-06-15 04:41:14.095081 | debian-bookworm | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws' 2026-06-15 04:41:14.095615 | debian-bookworm | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-15 04:41:14.095909 | debian-bookworm | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-15 04:41:14.096221 | debian-bookworm | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2026-06-15 04:41:14.096493 | debian-bookworm | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-15 04:41:14.097643 | debian-bookworm | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos 2026-06-15 04:41:14.097864 | debian-bookworm | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2026-06-15 04:41:14.098282 | debian-bookworm | Loading collection community.routeros from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros 2026-06-15 04:41:14.098505 | debian-bookworm | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros' 2026-06-15 04:41:14.098790 | debian-bookworm | Loading collection community.proxysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql 2026-06-15 04:41:14.099007 | debian-bookworm | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql' 2026-06-15 04:41:14.099223 | debian-bookworm | Loading collection community.proxmox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox 2026-06-15 04:41:14.099540 | debian-bookworm | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox' 2026-06-15 04:41:14.100078 | debian-bookworm | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar 2026-06-15 04:41:14.100547 | debian-bookworm | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar' 2026-06-15 04:41:14.100811 | debian-bookworm | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2026-06-15 04:41:14.101074 | debian-bookworm | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-15 04:41:14.101295 | debian-bookworm | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis 2026-06-15 04:41:14.101623 | debian-bookworm | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis' 2026-06-15 04:41:14.101977 | debian-bookworm | Loading collection community.okd from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd 2026-06-15 04:41:14.102262 | debian-bookworm | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd' 2026-06-15 04:41:14.102493 | debian-bookworm | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb 2026-06-15 04:41:14.102798 | debian-bookworm | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb' 2026-06-15 04:41:14.103018 | debian-bookworm | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur 2026-06-15 04:41:14.103235 | debian-bookworm | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur' 2026-06-15 04:41:14.103454 | debian-bookworm | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-15 04:41:14.103800 | debian-bookworm | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-15 04:41:14.104035 | debian-bookworm | Loading collection community.mysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql 2026-06-15 04:41:14.104412 | debian-bookworm | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql' 2026-06-15 04:41:14.105638 | debian-bookworm | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr 2026-06-15 04:41:14.105856 | debian-bookworm | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr' 2026-06-15 04:41:14.106180 | debian-bookworm | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-15 04:41:14.106463 | debian-bookworm | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-15 04:41:14.107151 | debian-bookworm | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity 2026-06-15 04:41:14.107443 | debian-bookworm | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity' 2026-06-15 04:41:14.112527 | debian-bookworm | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-15 04:41:14.113040 | debian-bookworm | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-15 04:41:14.113461 | debian-bookworm | Loading collection osism.commons from /home/zuul/.ansible/collections/ansible_collections/osism/commons 2026-06-15 04:41:14.114551 | debian-bookworm | Found installed collection osism.commons:0.20260601.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-15 04:41:14.116112 | debian-bookworm | Starting galaxy collection install process 2026-06-15 04:41:14.116363 | debian-bookworm | Nothing to do. All requested collections are already installed. If you want to reinstall them, consider using `--force`. 2026-06-15 04:41:14.234810 | debian-bookworm | INFO [delegated > dependency] Dependency completed successfully. 2026-06-15 04:41:14.234905 | debian-bookworm | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from converge_sequence to suppress) 2026-06-15 04:41:14.253398 | debian-bookworm | INFO [delegated > create] Executing 2026-06-15 04:41:14.256495 | debian-bookworm | WARNING [delegated > create] Executed: Missing playbook (Remove from converge_sequence to suppress) 2026-06-15 04:41:14.267228 | debian-bookworm | INFO [delegated > prepare] Executing 2026-06-15 04:41:14.267304 | debian-bookworm | WARNING [delegated > prepare] Skipping, instances already prepared. 2026-06-15 04:41:14.267442 | debian-bookworm | INFO [delegated > prepare] Executed: Successful 2026-06-15 04:41:14.276007 | debian-bookworm | INFO [delegated > converge] Executing 2026-06-15 04:41:13.837752 | ubuntu-noble | Loading collection community.general from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general 2026-06-15 04:41:13.838305 | ubuntu-noble | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general' 2026-06-15 04:41:13.838739 | ubuntu-noble | Loading collection cisco.asa from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa 2026-06-15 04:41:13.839236 | ubuntu-noble | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa' 2026-06-15 04:41:13.839621 | ubuntu-noble | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq 2026-06-15 04:41:13.840454 | ubuntu-noble | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq' 2026-06-15 04:41:13.840483 | ubuntu-noble | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud 2026-06-15 04:41:13.840869 | ubuntu-noble | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud' 2026-06-15 04:41:13.841220 | ubuntu-noble | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex 2026-06-15 04:41:13.841714 | ubuntu-noble | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex' 2026-06-15 04:41:13.842089 | ubuntu-noble | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity 2026-06-15 04:41:13.842481 | ubuntu-noble | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity' 2026-06-15 04:41:13.842955 | ubuntu-noble | Loading collection community.dns from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns 2026-06-15 04:41:13.843302 | ubuntu-noble | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns' 2026-06-15 04:41:13.843686 | ubuntu-noble | Loading collection containers.podman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman 2026-06-15 04:41:13.845454 | ubuntu-noble | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman' 2026-06-15 04:41:13.845484 | ubuntu-noble | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb 2026-06-15 04:41:13.845494 | ubuntu-noble | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb' 2026-06-15 04:41:13.845504 | ubuntu-noble | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-15 04:41:13.845513 | ubuntu-noble | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-15 04:41:13.845784 | ubuntu-noble | Loading collection community.proxmox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox 2026-06-15 04:41:13.846097 | ubuntu-noble | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox' 2026-06-15 04:41:13.847700 | ubuntu-noble | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios 2026-06-15 04:41:13.848117 | ubuntu-noble | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios' 2026-06-15 04:41:13.848905 | ubuntu-noble | Loading collection arista.eos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos 2026-06-15 04:41:13.849327 | ubuntu-noble | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos' 2026-06-15 04:41:13.850169 | ubuntu-noble | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr 2026-06-15 04:41:13.850785 | ubuntu-noble | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr' 2026-06-15 04:41:13.852033 | ubuntu-noble | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection 2026-06-15 04:41:13.852399 | ubuntu-noble | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection' 2026-06-15 04:41:13.852711 | ubuntu-noble | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb 2026-06-15 04:41:13.853042 | ubuntu-noble | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb' 2026-06-15 04:41:13.853322 | ubuntu-noble | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim 2026-06-15 04:41:13.853615 | ubuntu-noble | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim' 2026-06-15 04:41:13.854057 | ubuntu-noble | Loading collection community.postgresql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql 2026-06-15 04:41:13.854323 | ubuntu-noble | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql' 2026-06-15 04:41:13.854609 | ubuntu-noble | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager 2026-06-15 04:41:13.854975 | ubuntu-noble | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-15 04:41:13.855195 | ubuntu-noble | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar 2026-06-15 04:41:13.855441 | ubuntu-noble | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar' 2026-06-15 04:41:13.855743 | ubuntu-noble | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas 2026-06-15 04:41:13.855958 | ubuntu-noble | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas' 2026-06-15 04:41:13.856165 | ubuntu-noble | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage 2026-06-15 04:41:13.856397 | ubuntu-noble | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-15 04:41:13.856714 | ubuntu-noble | Loading collection community.mongodb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb 2026-06-15 04:41:13.856940 | ubuntu-noble | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb' 2026-06-15 04:41:13.857152 | ubuntu-noble | Loading collection cloud.common from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common 2026-06-15 04:41:13.857439 | ubuntu-noble | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common' 2026-06-15 04:41:13.857702 | ubuntu-noble | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-15 04:41:13.857925 | ubuntu-noble | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-15 04:41:13.863564 | ubuntu-noble | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager 2026-06-15 04:41:13.865442 | ubuntu-noble | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-15 04:41:13.865471 | ubuntu-noble | Loading collection ansible.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows 2026-06-15 04:41:13.865480 | ubuntu-noble | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows' 2026-06-15 04:41:13.865487 | ubuntu-noble | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox 2026-06-15 04:41:13.865495 | ubuntu-noble | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox' 2026-06-15 04:41:13.865501 | ubuntu-noble | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware 2026-06-15 04:41:13.865543 | ubuntu-noble | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware' 2026-06-15 04:41:13.865825 | ubuntu-noble | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis 2026-06-15 04:41:13.866107 | ubuntu-noble | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis' 2026-06-15 04:41:13.866327 | ubuntu-noble | Loading collection community.proxysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql 2026-06-15 04:41:13.866565 | ubuntu-noble | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql' 2026-06-15 04:41:13.866872 | ubuntu-noble | Loading collection community.crypto from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto 2026-06-15 04:41:13.867090 | ubuntu-noble | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto' 2026-06-15 04:41:13.904826 | ubuntu-noble | Loading collection community.network from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network 2026-06-15 04:41:13.905353 | ubuntu-noble | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network' 2026-06-15 04:41:13.905782 | ubuntu-noble | Loading collection wti.remote from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote 2026-06-15 04:41:13.906199 | ubuntu-noble | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote' 2026-06-15 04:41:13.906606 | ubuntu-noble | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-15 04:41:13.907015 | ubuntu-noble | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-15 04:41:13.907502 | ubuntu-noble | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos 2026-06-15 04:41:13.908022 | ubuntu-noble | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos' 2026-06-15 04:41:13.909623 | ubuntu-noble | Loading collection awx.awx from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx 2026-06-15 04:41:13.910106 | ubuntu-noble | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx' 2026-06-15 04:41:13.911232 | ubuntu-noble | Loading collection amazon.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws 2026-06-15 04:41:13.911708 | ubuntu-noble | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws' 2026-06-15 04:41:13.912151 | ubuntu-noble | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray 2026-06-15 04:41:13.912477 | ubuntu-noble | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray' 2026-06-15 04:41:13.912969 | ubuntu-noble | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana 2026-06-15 04:41:13.913334 | ubuntu-noble | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana' 2026-06-15 04:41:13.913636 | ubuntu-noble | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-15 04:41:13.913956 | ubuntu-noble | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-15 04:41:13.914176 | ubuntu-noble | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-15 04:41:13.914387 | ubuntu-noble | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-15 04:41:13.914752 | ubuntu-noble | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac 2026-06-15 04:41:13.915055 | ubuntu-noble | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac' 2026-06-15 04:41:13.915288 | ubuntu-noble | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-15 04:41:13.915992 | ubuntu-noble | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-15 04:41:13.916014 | ubuntu-noble | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core 2026-06-15 04:41:13.916023 | ubuntu-noble | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core' 2026-06-15 04:41:13.916728 | ubuntu-noble | Loading collection cisco.ios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios 2026-06-15 04:41:13.916750 | ubuntu-noble | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios' 2026-06-15 04:41:13.918403 | ubuntu-noble | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-15 04:41:13.918440 | ubuntu-noble | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-15 04:41:13.918447 | ubuntu-noble | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules 2026-06-15 04:41:13.918453 | ubuntu-noble | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-15 04:41:13.918460 | ubuntu-noble | Loading collection community.sops from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops 2026-06-15 04:41:13.918468 | ubuntu-noble | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops' 2026-06-15 04:41:13.919726 | ubuntu-noble | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox 2026-06-15 04:41:13.920237 | ubuntu-noble | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox' 2026-06-15 04:41:13.922375 | ubuntu-noble | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman 2026-06-15 04:41:13.922860 | ubuntu-noble | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman' 2026-06-15 04:41:13.923467 | ubuntu-noble | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault 2026-06-15 04:41:13.923485 | ubuntu-noble | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault' 2026-06-15 04:41:13.926314 | ubuntu-noble | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos 2026-06-15 04:41:13.926565 | ubuntu-noble | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos' 2026-06-15 04:41:13.927156 | ubuntu-noble | Loading collection community.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows 2026-06-15 04:41:13.927629 | ubuntu-noble | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows' 2026-06-15 04:41:13.927645 | ubuntu-noble | Loading collection cisco.ise from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise 2026-06-15 04:41:13.928055 | ubuntu-noble | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise' 2026-06-15 04:41:13.928543 | ubuntu-noble | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt 2026-06-15 04:41:13.928823 | ubuntu-noble | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt' 2026-06-15 04:41:13.930169 | ubuntu-noble | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon 2026-06-15 04:41:13.930401 | ubuntu-noble | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon' 2026-06-15 04:41:13.930785 | ubuntu-noble | Loading collection community.mysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql 2026-06-15 04:41:13.931013 | ubuntu-noble | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql' 2026-06-15 04:41:13.932140 | ubuntu-noble | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap 2026-06-15 04:41:13.932431 | ubuntu-noble | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap' 2026-06-15 04:41:13.932894 | ubuntu-noble | Loading collection community.okd from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd 2026-06-15 04:41:13.933178 | ubuntu-noble | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd' 2026-06-15 04:41:13.934480 | ubuntu-noble | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean 2026-06-15 04:41:13.934814 | ubuntu-noble | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean' 2026-06-15 04:41:13.935626 | ubuntu-noble | Loading collection splunk.es from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es 2026-06-15 04:41:13.935934 | ubuntu-noble | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es' 2026-06-15 04:41:13.936194 | ubuntu-noble | Loading collection ansible.posix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix 2026-06-15 04:41:13.936512 | ubuntu-noble | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix' 2026-06-15 04:41:13.937831 | ubuntu-noble | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud 2026-06-15 04:41:13.938072 | ubuntu-noble | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud' 2026-06-15 04:41:13.938378 | ubuntu-noble | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go 2026-06-15 04:41:13.938700 | ubuntu-noble | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go' 2026-06-15 04:41:13.942988 | ubuntu-noble | Loading collection community.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws 2026-06-15 04:41:13.943013 | ubuntu-noble | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws' 2026-06-15 04:41:13.944494 | ubuntu-noble | Loading collection cisco.mso from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso 2026-06-15 04:41:13.944758 | ubuntu-noble | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso' 2026-06-15 04:41:13.947582 | ubuntu-noble | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki 2026-06-15 04:41:13.947607 | ubuntu-noble | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki' 2026-06-15 04:41:13.947617 | ubuntu-noble | Loading collection ansible.utils from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils 2026-06-15 04:41:13.947622 | ubuntu-noble | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils' 2026-06-15 04:41:13.949224 | ubuntu-noble | Loading collection cisco.aci from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci 2026-06-15 04:41:13.949500 | ubuntu-noble | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci' 2026-06-15 04:41:13.949814 | ubuntu-noble | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage 2026-06-15 04:41:13.950565 | ubuntu-noble | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-15 04:41:13.950583 | ubuntu-noble | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-15 04:41:13.950588 | ubuntu-noble | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-15 04:41:13.951124 | ubuntu-noble | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-15 04:41:13.951137 | ubuntu-noble | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-15 04:41:13.951690 | ubuntu-noble | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs 2026-06-15 04:41:13.951707 | ubuntu-noble | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs' 2026-06-15 04:41:13.953407 | ubuntu-noble | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos 2026-06-15 04:41:13.953447 | ubuntu-noble | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos' 2026-06-15 04:41:13.953454 | ubuntu-noble | Loading collection community.routeros from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros 2026-06-15 04:41:13.953459 | ubuntu-noble | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros' 2026-06-15 04:41:13.956463 | ubuntu-noble | Loading collection google.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud 2026-06-15 04:41:13.956513 | ubuntu-noble | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud' 2026-06-15 04:41:13.956519 | ubuntu-noble | Loading collection community.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana 2026-06-15 04:41:13.956523 | ubuntu-noble | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana' 2026-06-15 04:41:13.956528 | ubuntu-noble | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight 2026-06-15 04:41:13.956533 | ubuntu-noble | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight' 2026-06-15 04:41:13.956537 | ubuntu-noble | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid 2026-06-15 04:41:13.956542 | ubuntu-noble | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid' 2026-06-15 04:41:13.956733 | ubuntu-noble | Loading collection community.zabbix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix 2026-06-15 04:41:13.956934 | ubuntu-noble | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix' 2026-06-15 04:41:13.957096 | ubuntu-noble | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur 2026-06-15 04:41:13.957389 | ubuntu-noble | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur' 2026-06-15 04:41:13.957822 | ubuntu-noble | Loading collection community.hrobot from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot 2026-06-15 04:41:13.958140 | ubuntu-noble | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot' 2026-06-15 04:41:13.958480 | ubuntu-noble | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad 2026-06-15 04:41:13.958752 | ubuntu-noble | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad' 2026-06-15 04:41:13.959186 | ubuntu-noble | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade 2026-06-15 04:41:13.959439 | ubuntu-noble | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade' 2026-06-15 04:41:13.962292 | ubuntu-noble | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest 2026-06-15 04:41:13.962562 | ubuntu-noble | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-15 04:41:13.963057 | ubuntu-noble | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules 2026-06-15 04:41:13.963251 | ubuntu-noble | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-15 04:41:13.963962 | ubuntu-noble | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud 2026-06-15 04:41:13.964228 | ubuntu-noble | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud' 2026-06-15 04:41:13.964383 | ubuntu-noble | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core 2026-06-15 04:41:13.964591 | ubuntu-noble | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core' 2026-06-15 04:41:13.965104 | ubuntu-noble | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt 2026-06-15 04:41:13.965353 | ubuntu-noble | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt' 2026-06-15 04:41:13.965556 | ubuntu-noble | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-15 04:41:13.965766 | ubuntu-noble | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-15 04:41:13.966466 | ubuntu-noble | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-15 04:41:13.966693 | ubuntu-noble | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-15 04:41:13.979391 | ubuntu-noble | Loading collection osism.commons from /home/zuul/.ansible/collections/ansible_collections/osism/commons 2026-06-15 04:41:13.980626 | ubuntu-noble | Found installed collection osism.commons:0.20260601.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-15 04:41:13.981854 | ubuntu-noble | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-15 04:41:13.982187 | ubuntu-noble | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-15 04:41:13.982529 | ubuntu-noble | Starting galaxy collection install process 2026-06-15 04:41:13.982753 | ubuntu-noble | Nothing to do. All requested collections are already installed. If you want to reinstall them, consider using `--force`. 2026-06-15 04:41:14.033208 | ubuntu-noble | INFO [delegated > dependency] Dependency completed successfully. 2026-06-15 04:41:14.033818 | ubuntu-noble | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from converge_sequence to suppress) 2026-06-15 04:41:14.053180 | ubuntu-noble | INFO [delegated > create] Executing 2026-06-15 04:41:14.056272 | ubuntu-noble | WARNING [delegated > create] Executed: Missing playbook (Remove from converge_sequence to suppress) 2026-06-15 04:41:14.066232 | ubuntu-noble | INFO [delegated > prepare] Executing 2026-06-15 04:41:14.066377 | ubuntu-noble | WARNING [delegated > prepare] Skipping, instances already prepared. 2026-06-15 04:41:14.066522 | ubuntu-noble | INFO [delegated > prepare] Executed: Successful 2026-06-15 04:41:14.074483 | ubuntu-noble | INFO [delegated > converge] Executing 2026-06-15 04:41:14.654799 | debian-bookworm | DEBUG [delegated > converge] ansible-playbook version: ansible-playbook 2026-06-15 04:41:14.654879 | debian-bookworm | config file = None 2026-06-15 04:41:14.654889 | debian-bookworm | configured module search path = 2026-06-15 04:41:14.654895 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-15 04:41:14.654902 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-15 04:41:14.654906 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-15 04:41:14.654911 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) (/home/zuul/venv/bin/python3) 2026-06-15 04:41:14.654915 | debian-bookworm | jinja version = 3.1.6 2026-06-15 04:41:14.654920 | debian-bookworm | libyaml = True 2026-06-15 04:41:14.654932 | debian-bookworm | DEBUG ANSIBLE ENVIRONMENT: 2026-06-15 04:41:14.654937 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-15 04:41:14.654941 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-15 04:41:14.654945 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2026-06-15 04:41:14.654949 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-15 04:41:14.654953 | debian-bookworm | ANSIBLE_ROLE: auditd 2026-06-15 04:41:14.654957 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2026-06-15 04:41:14.654961 | debian-bookworm | ANSIBLE_VERBOSITY: 1 2026-06-15 04:41:14.654965 | debian-bookworm | 2026-06-15 04:41:14.655163 | debian-bookworm | DEBUG MOLECULE ENVIRONMENT: 2026-06-15 04:41:14.655169 | debian-bookworm | MOLECULE_DEBUG: True 2026-06-15 04:41:14.655173 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-15 04:41:14.655202 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2026-06-15 04:41:14.655207 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-15 04:41:14.655211 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-15 04:41:14.655219 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-15 04:41:14.655223 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-15 04:41:14.655227 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-15 04:41:14.655232 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-15 04:41:14.655236 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2026-06-15 04:41:14.655240 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-15 04:41:14.655244 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2026-06-15 04:41:14.655248 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-15 04:41:14.655252 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2026-06-15 04:41:14.655256 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-15 04:41:14.655261 | debian-bookworm | 2026-06-15 04:41:14.655615 | debian-bookworm | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-15 04:41:14.470365 | ubuntu-noble | DEBUG [delegated > converge] ansible-playbook version: ansible-playbook 2026-06-15 04:41:14.470474 | ubuntu-noble | config file = None 2026-06-15 04:41:14.470494 | ubuntu-noble | configured module search path = 2026-06-15 04:41:14.470505 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-15 04:41:14.470516 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-15 04:41:14.470526 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-15 04:41:14.470537 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) (/home/zuul/venv/bin/python3) 2026-06-15 04:41:14.470547 | ubuntu-noble | jinja version = 3.1.6 2026-06-15 04:41:14.470557 | ubuntu-noble | libyaml = True 2026-06-15 04:41:14.471464 | ubuntu-noble | DEBUG ANSIBLE ENVIRONMENT: 2026-06-15 04:41:14.471498 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-15 04:41:14.471510 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-15 04:41:14.471520 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2026-06-15 04:41:14.471531 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-15 04:41:14.471541 | ubuntu-noble | ANSIBLE_ROLE: auditd 2026-06-15 04:41:14.471551 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2026-06-15 04:41:14.471561 | ubuntu-noble | ANSIBLE_VERBOSITY: 1 2026-06-15 04:41:14.471574 | ubuntu-noble | 2026-06-15 04:41:14.471587 | ubuntu-noble | DEBUG MOLECULE ENVIRONMENT: 2026-06-15 04:41:14.471597 | ubuntu-noble | MOLECULE_DEBUG: True 2026-06-15 04:41:14.471607 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-15 04:41:14.471661 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2026-06-15 04:41:14.471673 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-15 04:41:14.471683 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-15 04:41:14.471694 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-15 04:41:14.471704 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-15 04:41:14.471714 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-15 04:41:14.471724 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-15 04:41:14.471734 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2026-06-15 04:41:14.471744 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-15 04:41:14.471754 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2026-06-15 04:41:14.471764 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-15 04:41:14.471775 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2026-06-15 04:41:14.471785 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-15 04:41:14.471795 | ubuntu-noble | 2026-06-15 04:41:14.472503 | ubuntu-noble | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-15 04:41:14.757458 | ubuntu-noble | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-15 04:41:14.950362 | debian-bookworm | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-15 04:41:15.236213 | debian-bookworm | 2026-06-15 04:41:15.236427 | debian-bookworm | PLAY [Converge] **************************************************************** 2026-06-15 04:41:15.236595 | debian-bookworm | 2026-06-15 04:41:15.236812 | debian-bookworm | TASK [Gathering Facts] ********************************************************* 2026-06-15 04:41:14.974270 | ubuntu-noble | 2026-06-15 04:41:14.974731 | ubuntu-noble | PLAY [Converge] **************************************************************** 2026-06-15 04:41:14.975018 | ubuntu-noble | 2026-06-15 04:41:14.975336 | ubuntu-noble | TASK [Gathering Facts] ********************************************************* 2026-06-15 04:41:16.145128 | ubuntu-noble | ok: [molecule-auditd] 2026-06-15 04:41:16.145202 | ubuntu-noble | 2026-06-15 04:41:16.145388 | ubuntu-noble | TASK [Include required variables] ********************************************** 2026-06-15 04:41:16.188453 | ubuntu-noble | ok: [molecule-auditd] => {"ansible_facts": {}, "ansible_included_var_files": ["/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/vars/auditd.yml"], "changed": false} 2026-06-15 04:41:16.188501 | ubuntu-noble | 2026-06-15 04:41:16.188510 | ubuntu-noble | TASK [Include role auditd] ***************************************************** 2026-06-15 04:41:16.257010 | ubuntu-noble | included: auditd for molecule-auditd 2026-06-15 04:41:16.257056 | ubuntu-noble | 2026-06-15 04:41:16.257065 | ubuntu-noble | TASK [auditd : Include distribution specific install tasks] ******************** 2026-06-15 04:41:16.283496 | ubuntu-noble | included: /home/zuul/src/github.com/osism/ansible-collection-services/roles/auditd/tasks/install-Debian-family.yml for molecule-auditd 2026-06-15 04:41:16.283653 | ubuntu-noble | 2026-06-15 04:41:16.283672 | ubuntu-noble | TASK [auditd : Install auditd package] ***************************************** 2026-06-15 04:41:16.411059 | debian-bookworm | ok: [molecule-auditd] 2026-06-15 04:41:16.411148 | debian-bookworm | 2026-06-15 04:41:16.411269 | debian-bookworm | TASK [Include required variables] ********************************************** 2026-06-15 04:41:16.459805 | debian-bookworm | ok: [molecule-auditd] => {"ansible_facts": {}, "ansible_included_var_files": ["/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/vars/auditd.yml"], "changed": false} 2026-06-15 04:41:16.460181 | debian-bookworm | 2026-06-15 04:41:16.460506 | debian-bookworm | TASK [Include role auditd] ***************************************************** 2026-06-15 04:41:16.513653 | debian-bookworm | included: auditd for molecule-auditd 2026-06-15 04:41:16.513961 | debian-bookworm | 2026-06-15 04:41:16.514350 | debian-bookworm | TASK [auditd : Include distribution specific install tasks] ******************** 2026-06-15 04:41:16.565129 | debian-bookworm | included: /home/zuul/src/github.com/osism/ansible-collection-services/roles/auditd/tasks/install-Debian-family.yml for molecule-auditd 2026-06-15 04:41:16.565441 | debian-bookworm | 2026-06-15 04:41:16.565775 | debian-bookworm | TASK [auditd : Install auditd package] ***************************************** 2026-06-15 04:41:20.981215 | debian-bookworm | The following additional packages will be installed: 2026-06-15 04:41:20.981323 | debian-bookworm | libauparse0 2026-06-15 04:41:20.981372 | debian-bookworm | Suggested packages: 2026-06-15 04:41:20.981390 | debian-bookworm | audispd-plugins 2026-06-15 04:41:20.981416 | debian-bookworm | The following NEW packages will be installed: 2026-06-15 04:41:20.981467 | debian-bookworm | auditd libauparse0 2026-06-15 04:41:20.981625 | debian-bookworm | 0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded. 2026-06-15 04:41:20.982950 | debian-bookworm | changed: [molecule-auditd] => {"cache_update_time": 1781498376, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following additional packages will be installed:\n libauparse0\nSuggested packages:\n audispd-plugins\nThe following NEW packages will be installed:\n auditd libauparse0\n0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 279 kB of archives.\nAfter this operation, 934 kB of additional disk space will be used.\nGet:1 http://deb.debian.org/debian bookworm/main amd64 libauparse0 amd64 1:3.0.9-1 [61.9 kB]\nGet:2 http://deb.debian.org/debian bookworm/main amd64 auditd amd64 1:3.0.9-1 [218 kB]\nFetched 279 kB in 0s (3314 kB/s)\nSelecting previously unselected package libauparse0:amd64.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 28691 files and directories currently installed.)\r\nPreparing to unpack .../libauparse0_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking libauparse0:amd64 (1:3.0.9-1) ...\r\nSelecting previously unselected package auditd.\r\nPreparing to unpack .../auditd_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking auditd (1:3.0.9-1) ...\r\nSetting up libauparse0:amd64 (1:3.0.9-1) ...\r\nSetting up auditd (1:3.0.9-1) ...\r\nCreated symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /lib/systemd/system/auditd.service.\r\r\nProcessing triggers for libc-bin (2.36-9+deb12u14) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following additional packages will be installed:", " libauparse0", "Suggested packages:", " audispd-plugins", "The following NEW packages will be installed:", " auditd libauparse0", "0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.", "Need to get 279 kB of archives.", "After this operation, 934 kB of additional disk space will be used.", "Get:1 http://deb.debian.org/debian bookworm/main amd64 libauparse0 amd64 1:3.0.9-1 [61.9 kB]", "Get:2 http://deb.debian.org/debian bookworm/main amd64 auditd amd64 1:3.0.9-1 [218 kB]", "Fetched 279 kB in 0s (3314 kB/s)", "Selecting previously unselected package libauparse0:amd64.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 28691 files and directories currently installed.)", "Preparing to unpack .../libauparse0_1%3a3.0.9-1_amd64.deb ...", "Unpacking libauparse0:amd64 (1:3.0.9-1) ...", "Selecting previously unselected package auditd.", "Preparing to unpack .../auditd_1%3a3.0.9-1_amd64.deb ...", "Unpacking auditd (1:3.0.9-1) ...", "Setting up libauparse0:amd64 (1:3.0.9-1) ...", "Setting up auditd (1:3.0.9-1) ...", "Created symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /lib/systemd/system/auditd.service.", "", "Processing triggers for libc-bin (2.36-9+deb12u14) ..."]} 2026-06-15 04:41:20.983053 | debian-bookworm | 2026-06-15 04:41:20.983078 | debian-bookworm | TASK [auditd : Install audispd-plugins package] ******************************** 2026-06-15 04:41:20.896518 | ubuntu-noble | The following additional packages will be installed: 2026-06-15 04:41:20.896604 | ubuntu-noble | libauparse0t64 2026-06-15 04:41:20.896623 | ubuntu-noble | Suggested packages: 2026-06-15 04:41:20.896632 | ubuntu-noble | audispd-plugins 2026-06-15 04:41:20.896641 | ubuntu-noble | The following NEW packages will be installed: 2026-06-15 04:41:20.896650 | ubuntu-noble | auditd libauparse0t64 2026-06-15 04:41:20.896658 | ubuntu-noble | 0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded. 2026-06-15 04:41:20.899939 | ubuntu-noble | changed: [molecule-auditd] => {"cache_update_time": 1781498378, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following additional packages will be installed:\n libauparse0t64\nSuggested packages:\n audispd-plugins\nThe following NEW packages will be installed:\n auditd libauparse0t64\n0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 274 kB of archives.\nAfter this operation, 893 kB of additional disk space will be used.\nGet:1 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 libauparse0t64 amd64 1:3.1.2-2.1build1.1 [58.9 kB]\nGet:2 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 auditd amd64 1:3.1.2-2.1build1.1 [215 kB]\nFetched 274 kB in 0s (2084 kB/s)\nSelecting previously unselected package libauparse0t64:amd64.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 36110 files and directories currently installed.)\r\nPreparing to unpack .../libauparse0t64_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nAdding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0 to /lib/x86_64-linux-gnu/libauparse.so.0.usr-is-merged by libauparse0t64'\r\nAdding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0.0.0 to /lib/x86_64-linux-gnu/libauparse.so.0.0.0.usr-is-merged by libauparse0t64'\r\nUnpacking libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...\r\nSelecting previously unselected package auditd.\r\nPreparing to unpack .../auditd_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nUnpacking auditd (1:3.1.2-2.1build1.1) ...\r\nSetting up libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...\r\nSetting up auditd (1:3.1.2-2.1build1.1) ...\r\nCreated symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /usr/lib/systemd/system/auditd.service.\r\r\nProcessing triggers for libc-bin (2.39-0ubuntu8.7) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following additional packages will be installed:", " libauparse0t64", "Suggested packages:", " audispd-plugins", "The following NEW packages will be installed:", " auditd libauparse0t64", "0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.", "Need to get 274 kB of archives.", "After this operation, 893 kB of additional disk space will be used.", "Get:1 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 libauparse0t64 amd64 1:3.1.2-2.1build1.1 [58.9 kB]", "Get:2 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 auditd amd64 1:3.1.2-2.1build1.1 [215 kB]", "Fetched 274 kB in 0s (2084 kB/s)", "Selecting previously unselected package libauparse0t64:amd64.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 36110 files and directories currently installed.)", "Preparing to unpack .../libauparse0t64_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Adding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0 to /lib/x86_64-linux-gnu/libauparse.so.0.usr-is-merged by libauparse0t64'", "Adding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0.0.0 to /lib/x86_64-linux-gnu/libauparse.so.0.0.0.usr-is-merged by libauparse0t64'", "Unpacking libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...", "Selecting previously unselected package auditd.", "Preparing to unpack .../auditd_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Unpacking auditd (1:3.1.2-2.1build1.1) ...", "Setting up libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...", "Setting up auditd (1:3.1.2-2.1build1.1) ...", "Created symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /usr/lib/systemd/system/auditd.service.", "", "Processing triggers for libc-bin (2.39-0ubuntu8.7) ..."]} 2026-06-15 04:41:20.900217 | ubuntu-noble | 2026-06-15 04:41:20.900486 | ubuntu-noble | TASK [auditd : Install audispd-plugins package] ******************************** 2026-06-15 04:41:23.939749 | debian-bookworm | The following NEW packages will be installed: 2026-06-15 04:41:23.939866 | debian-bookworm | audispd-plugins 2026-06-15 04:41:23.939944 | debian-bookworm | 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. 2026-06-15 04:41:23.940116 | debian-bookworm | changed: [molecule-auditd] => {"cache_update_time": 1781498376, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following NEW packages will be installed:\n audispd-plugins\n0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 45.6 kB of archives.\nAfter this operation, 132 kB of additional disk space will be used.\nGet:1 http://deb.debian.org/debian bookworm/main amd64 audispd-plugins amd64 1:3.0.9-1 [45.6 kB]\nFetched 45.6 kB in 0s (947 kB/s)\nSelecting previously unselected package audispd-plugins.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 28782 files and directories currently installed.)\r\nPreparing to unpack .../audispd-plugins_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking audispd-plugins (1:3.0.9-1) ...\r\nSetting up audispd-plugins (1:3.0.9-1) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following NEW packages will be installed:", " audispd-plugins", "0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.", "Need to get 45.6 kB of archives.", "After this operation, 132 kB of additional disk space will be used.", "Get:1 http://deb.debian.org/debian bookworm/main amd64 audispd-plugins amd64 1:3.0.9-1 [45.6 kB]", "Fetched 45.6 kB in 0s (947 kB/s)", "Selecting previously unselected package audispd-plugins.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 28782 files and directories currently installed.)", "Preparing to unpack .../audispd-plugins_1%3a3.0.9-1_amd64.deb ...", "Unpacking audispd-plugins (1:3.0.9-1) ...", "Setting up audispd-plugins (1:3.0.9-1) ..."]} 2026-06-15 04:41:23.940221 | debian-bookworm | 2026-06-15 04:41:23.940325 | debian-bookworm | TASK [auditd : Copy auditd.conf configuration files] *************************** 2026-06-15 04:41:24.375447 | ubuntu-noble | The following NEW packages will be installed: 2026-06-15 04:41:24.376900 | ubuntu-noble | audispd-plugins 2026-06-15 04:41:24.377460 | ubuntu-noble | 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. 2026-06-15 04:41:24.377480 | ubuntu-noble | changed: [molecule-auditd] => {"cache_update_time": 1781498378, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following NEW packages will be installed:\n audispd-plugins\n0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 38.8 kB of archives.\nAfter this operation, 131 kB of additional disk space will be used.\nGet:1 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 audispd-plugins amd64 1:3.1.2-2.1build1.1 [38.8 kB]\nFetched 38.8 kB in 0s (664 kB/s)\nSelecting previously unselected package audispd-plugins.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 36206 files and directories currently installed.)\r\nPreparing to unpack .../audispd-plugins_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nUnpacking audispd-plugins (1:3.1.2-2.1build1.1) ...\r\nSetting up audispd-plugins (1:3.1.2-2.1build1.1) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following NEW packages will be installed:", " audispd-plugins", "0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.", "Need to get 38.8 kB of archives.", "After this operation, 131 kB of additional disk space will be used.", "Get:1 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 audispd-plugins amd64 1:3.1.2-2.1build1.1 [38.8 kB]", "Fetched 38.8 kB in 0s (664 kB/s)", "Selecting previously unselected package audispd-plugins.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 36206 files and directories currently installed.)", "Preparing to unpack .../audispd-plugins_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Unpacking audispd-plugins (1:3.1.2-2.1build1.1) ...", "Setting up audispd-plugins (1:3.1.2-2.1build1.1) ..."]} 2026-06-15 04:41:24.377506 | ubuntu-noble | 2026-06-15 04:41:24.377511 | ubuntu-noble | TASK [auditd : Copy auditd.conf configuration files] *************************** 2026-06-15 04:41:25.202875 | debian-bookworm | --- before 2026-06-15 04:41:25.203038 | debian-bookworm | +++ after: /home/zuul/.ansible/tmp/ansible-local-21340_z7is5l/tmpt3xpcvr5/auditd.conf.j2 2026-06-15 04:41:25.203194 | debian-bookworm | @@ -0,0 +1,37 @@ 2026-06-15 04:41:25.203345 | debian-bookworm | +# 2026-06-15 04:41:25.203507 | debian-bookworm | +# This file controls the configuration of the audit daemon 2026-06-15 04:41:25.203654 | debian-bookworm | +# 2026-06-15 04:41:25.203801 | debian-bookworm | + 2026-06-15 04:41:25.203988 | debian-bookworm | +local_events = yes 2026-06-15 04:41:25.204137 | debian-bookworm | +write_logs = yes 2026-06-15 04:41:25.204294 | debian-bookworm | +log_file = /var/log/audit/audit.log 2026-06-15 04:41:25.204445 | debian-bookworm | +log_group = adm 2026-06-15 04:41:25.204594 | debian-bookworm | +log_format = RAW 2026-06-15 04:41:25.204744 | debian-bookworm | +flush = INCREMENTAL_ASYNC 2026-06-15 04:41:25.204940 | debian-bookworm | +freq = 50 2026-06-15 04:41:25.205084 | debian-bookworm | +max_log_file = 8 2026-06-15 04:41:25.205221 | debian-bookworm | +num_logs = 5 2026-06-15 04:41:25.205393 | debian-bookworm | +priority_boost = 4 2026-06-15 04:41:25.205528 | debian-bookworm | +disp_qos = lossy 2026-06-15 04:41:25.205666 | debian-bookworm | +dispatcher = /sbin/audispd 2026-06-15 04:41:25.205803 | debian-bookworm | +name_format = NONE 2026-06-15 04:41:25.205973 | debian-bookworm | +##name = mydomain 2026-06-15 04:41:25.206113 | debian-bookworm | +max_log_file_action = ROTATE 2026-06-15 04:41:25.206499 | debian-bookworm | +space_left = 12361 2026-06-15 04:41:25.206659 | debian-bookworm | +space_left_action = email 2026-06-15 04:41:25.206799 | debian-bookworm | +verify_email = yes 2026-06-15 04:41:25.206955 | debian-bookworm | +action_mail_acct = root 2026-06-15 04:41:25.207092 | debian-bookworm | +admin_space_left = 50 2026-06-15 04:41:25.207236 | debian-bookworm | +admin_space_left_action = SUSPEND 2026-06-15 04:41:25.207375 | debian-bookworm | +disk_full_action = SUSPEND 2026-06-15 04:41:25.207513 | debian-bookworm | +disk_error_action = SUSPEND 2026-06-15 04:41:25.207652 | debian-bookworm | +use_libwrap = yes 2026-06-15 04:41:25.207787 | debian-bookworm | +##tcp_listen_port = 60 2026-06-15 04:41:25.207940 | debian-bookworm | +tcp_listen_queue = 5 2026-06-15 04:41:25.208075 | debian-bookworm | +tcp_max_per_addr = 1 2026-06-15 04:41:25.208220 | debian-bookworm | +##tcp_client_ports = 1024-65535 2026-06-15 04:41:25.208359 | debian-bookworm | +tcp_client_max_idle = 0 2026-06-15 04:41:25.208497 | debian-bookworm | +enable_krb5 = no 2026-06-15 04:41:25.208653 | debian-bookworm | +krb5_principal = auditd 2026-06-15 04:41:25.208776 | debian-bookworm | +##krb5_key_file = /etc/audit/audit.key 2026-06-15 04:41:25.208961 | debian-bookworm | +distribute_network = no 2026-06-15 04:41:25.209095 | debian-bookworm | 2026-06-15 04:41:25.209252 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "checksum": "e902cc6bebf86c17087d153e359a2cc1231672e0", "dest": "/etc/audit/audit.conf", "gid": 0, "group": "root", "md5sum": "69dfd768317bae876a6a78c8aeb5cce1", "mode": "0640", "owner": "root", "size": 806, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1781498483.9569228-2504-97603510092879/.source.conf", "state": "file", "uid": 0} 2026-06-15 04:41:25.209417 | debian-bookworm | 2026-06-15 04:41:25.209557 | debian-bookworm | TASK [auditd : Adjust auditd/audispd configurations] *************************** 2026-06-15 04:41:25.651792 | debian-bookworm | ok: [molecule-auditd] => (item={'parameter': 'active', 'value': 'no', 'config': '/etc/audit/plugins.d/syslog.conf'}) => {"ansible_loop_var": "item", "backup": "", "changed": false, "item": {"config": "/etc/audit/plugins.d/syslog.conf", "parameter": "active", "value": "no"}, "msg": ""} 2026-06-15 04:41:25.651938 | debian-bookworm | 2026-06-15 04:41:25.652092 | debian-bookworm | TASK [auditd : Deploy rules for auditd] **************************************** 2026-06-15 04:41:25.763133 | ubuntu-noble | --- before 2026-06-15 04:41:25.763183 | ubuntu-noble | +++ after: /home/zuul/.ansible/tmp/ansible-local-1976n7x8a5nq/tmp754u2pko/auditd.conf.j2 2026-06-15 04:41:25.764434 | ubuntu-noble | @@ -0,0 +1,37 @@ 2026-06-15 04:41:25.764448 | ubuntu-noble | +# 2026-06-15 04:41:25.764453 | ubuntu-noble | +# This file controls the configuration of the audit daemon 2026-06-15 04:41:25.764457 | ubuntu-noble | +# 2026-06-15 04:41:25.764460 | ubuntu-noble | + 2026-06-15 04:41:25.764464 | ubuntu-noble | +local_events = yes 2026-06-15 04:41:25.764468 | ubuntu-noble | +write_logs = yes 2026-06-15 04:41:25.764472 | ubuntu-noble | +log_file = /var/log/audit/audit.log 2026-06-15 04:41:25.764476 | ubuntu-noble | +log_group = adm 2026-06-15 04:41:25.764585 | ubuntu-noble | +log_format = RAW 2026-06-15 04:41:25.764797 | ubuntu-noble | +flush = INCREMENTAL_ASYNC 2026-06-15 04:41:25.764913 | ubuntu-noble | +freq = 50 2026-06-15 04:41:25.765025 | ubuntu-noble | +max_log_file = 8 2026-06-15 04:41:25.765137 | ubuntu-noble | +num_logs = 5 2026-06-15 04:41:25.765248 | ubuntu-noble | +priority_boost = 4 2026-06-15 04:41:25.765358 | ubuntu-noble | +disp_qos = lossy 2026-06-15 04:41:25.765510 | ubuntu-noble | +dispatcher = /sbin/audispd 2026-06-15 04:41:25.765631 | ubuntu-noble | +name_format = NONE 2026-06-15 04:41:25.765745 | ubuntu-noble | +##name = mydomain 2026-06-15 04:41:25.765858 | ubuntu-noble | +max_log_file_action = ROTATE 2026-06-15 04:41:25.765971 | ubuntu-noble | +space_left = 12361 2026-06-15 04:41:25.766084 | ubuntu-noble | +space_left_action = email 2026-06-15 04:41:25.766196 | ubuntu-noble | +verify_email = yes 2026-06-15 04:41:25.766306 | ubuntu-noble | +action_mail_acct = root 2026-06-15 04:41:25.766483 | ubuntu-noble | +admin_space_left = 50 2026-06-15 04:41:25.766610 | ubuntu-noble | +admin_space_left_action = SUSPEND 2026-06-15 04:41:25.766723 | ubuntu-noble | +disk_full_action = SUSPEND 2026-06-15 04:41:25.766837 | ubuntu-noble | +disk_error_action = SUSPEND 2026-06-15 04:41:25.766951 | ubuntu-noble | +use_libwrap = yes 2026-06-15 04:41:25.767064 | ubuntu-noble | +##tcp_listen_port = 60 2026-06-15 04:41:25.767176 | ubuntu-noble | +tcp_listen_queue = 5 2026-06-15 04:41:25.767286 | ubuntu-noble | +tcp_max_per_addr = 1 2026-06-15 04:41:25.768836 | ubuntu-noble | +##tcp_client_ports = 1024-65535 2026-06-15 04:41:25.769096 | ubuntu-noble | +tcp_client_max_idle = 0 2026-06-15 04:41:25.769286 | ubuntu-noble | +enable_krb5 = no 2026-06-15 04:41:25.769545 | ubuntu-noble | +krb5_principal = auditd 2026-06-15 04:41:25.769669 | ubuntu-noble | +##krb5_key_file = /etc/audit/audit.key 2026-06-15 04:41:25.769782 | ubuntu-noble | +distribute_network = no 2026-06-15 04:41:25.769888 | ubuntu-noble | 2026-06-15 04:41:25.770038 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "checksum": "e902cc6bebf86c17087d153e359a2cc1231672e0", "dest": "/etc/audit/audit.conf", "gid": 0, "group": "root", "md5sum": "69dfd768317bae876a6a78c8aeb5cce1", "mode": "0640", "owner": "root", "size": 806, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1781498484.396522-2373-61767717423856/.source.conf", "state": "file", "uid": 0} 2026-06-15 04:41:25.770444 | ubuntu-noble | 2026-06-15 04:41:25.770657 | ubuntu-noble | TASK [auditd : Adjust auditd/audispd configurations] *************************** 2026-06-15 04:41:26.237796 | ubuntu-noble | ok: [molecule-auditd] => (item={'parameter': 'active', 'value': 'no', 'config': '/etc/audit/plugins.d/syslog.conf'}) => {"ansible_loop_var": "item", "backup": "", "changed": false, "item": {"config": "/etc/audit/plugins.d/syslog.conf", "parameter": "active", "value": "no"}, "msg": ""} 2026-06-15 04:41:26.237995 | ubuntu-noble | 2026-06-15 04:41:26.238145 | ubuntu-noble | TASK [auditd : Deploy rules for auditd] **************************************** 2026-06-15 04:41:26.549819 | debian-bookworm | --- before 2026-06-15 04:41:26.549945 | debian-bookworm | +++ after: /home/zuul/.ansible/tmp/ansible-local-21340_z7is5l/tmp8zfp9j6a/20-neo23x0.rules.j2 2026-06-15 04:41:26.550001 | debian-bookworm | @@ -0,0 +1,750 @@ 2026-06-15 04:41:26.550098 | debian-bookworm | +# ___ ___ __ __ 2026-06-15 04:41:26.550202 | debian-bookworm | +# / | __ ______/ (_) /_____/ / 2026-06-15 04:41:26.550316 | debian-bookworm | +# / /| |/ / / / __ / / __/ __ / 2026-06-15 04:41:26.550431 | debian-bookworm | +# / ___ / /_/ / /_/ / / /_/ /_/ / 2026-06-15 04:41:26.550535 | debian-bookworm | +# /_/ |_\__,_/\__,_/_/\__/\__,_/ 2026-06-15 04:41:26.550631 | debian-bookworm | +# 2026-06-15 04:41:26.550735 | debian-bookworm | +# Linux Audit Daemon - Best Practice Configuration 2026-06-15 04:41:26.550833 | debian-bookworm | +# /etc/audit/audit.rules 2026-06-15 04:41:26.550950 | debian-bookworm | +# 2026-06-15 04:41:26.551046 | debian-bookworm | +# Compiled by Florian Roth 2026-06-15 04:41:26.551142 | debian-bookworm | +# 2026-06-15 04:41:26.551238 | debian-bookworm | +# Created : 2017/12/05 2026-06-15 04:41:26.551360 | debian-bookworm | +# Modified : 2023/01/25 2026-06-15 04:41:26.551482 | debian-bookworm | +# 2026-06-15 04:41:26.551579 | debian-bookworm | +# Based on rules published here: 2026-06-15 04:41:26.551678 | debian-bookworm | +# Gov.uk auditd rules 2026-06-15 04:41:26.551955 | debian-bookworm | +# https://github.com/gds-operations/puppet-auditd/pull/1 2026-06-15 04:41:26.552107 | debian-bookworm | +# CentOS 7 hardening 2026-06-15 04:41:26.552276 | debian-bookworm | +# https://highon.coffee/blog/security-harden-centos-7/#auditd---audit-daemon 2026-06-15 04:41:26.552435 | debian-bookworm | +# Linux audit repo 2026-06-15 04:41:26.552589 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/tree/master/rules 2026-06-15 04:41:26.552755 | debian-bookworm | +# Auditd high performance linux auditing 2026-06-15 04:41:26.553390 | debian-bookworm | +# https://linux-audit.com/tuning-auditd-high-performance-linux-auditing/ 2026-06-15 04:41:26.553413 | debian-bookworm | +# 2026-06-15 04:41:26.553420 | debian-bookworm | +# Further rules 2026-06-15 04:41:26.553428 | debian-bookworm | +# For PCI DSS compliance see: 2026-06-15 04:41:26.553435 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-pci-dss-v31.rules 2026-06-15 04:41:26.557495 | debian-bookworm | +# For NISPOM compliance see: 2026-06-15 04:41:26.557538 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-nispom.rules 2026-06-15 04:41:26.557545 | debian-bookworm | + 2026-06-15 04:41:26.557552 | debian-bookworm | +# Remove any existing rules 2026-06-15 04:41:26.557559 | debian-bookworm | +-D 2026-06-15 04:41:26.557566 | debian-bookworm | + 2026-06-15 04:41:26.557572 | debian-bookworm | +# Buffer Size 2026-06-15 04:41:26.557578 | debian-bookworm | +## Feel free to increase this if the machine panic's 2026-06-15 04:41:26.557584 | debian-bookworm | +-b 8192 2026-06-15 04:41:26.557591 | debian-bookworm | + 2026-06-15 04:41:26.557597 | debian-bookworm | +# Failure Mode 2026-06-15 04:41:26.557603 | debian-bookworm | +## Possible values: 0 (silent), 1 (printk, print a failure message), 2 (panic, halt the system) 2026-06-15 04:41:26.557609 | debian-bookworm | +-f 1 2026-06-15 04:41:26.557615 | debian-bookworm | + 2026-06-15 04:41:26.557621 | debian-bookworm | +# Ignore errors 2026-06-15 04:41:26.557627 | debian-bookworm | +## e.g. caused by users or files not found in the local environment 2026-06-15 04:41:26.557634 | debian-bookworm | +-i 2026-06-15 04:41:26.557640 | debian-bookworm | + 2026-06-15 04:41:26.557646 | debian-bookworm | +# Self Auditing --------------------------------------------------------------- 2026-06-15 04:41:26.557652 | debian-bookworm | + 2026-06-15 04:41:26.557658 | debian-bookworm | +## Audit the audit logs 2026-06-15 04:41:26.557664 | debian-bookworm | +### Successful and unsuccessful attempts to read information from the audit records 2026-06-15 04:41:26.557670 | debian-bookworm | +-w /var/log/audit/ -p wra -k auditlog 2026-06-15 04:41:26.557676 | debian-bookworm | +-w /var/audit/ -p wra -k auditlog 2026-06-15 04:41:26.557682 | debian-bookworm | + 2026-06-15 04:41:26.557688 | debian-bookworm | +## Auditd configuration 2026-06-15 04:41:26.557694 | debian-bookworm | +### Modifications to audit configuration that occur while the audit collection functions are operating 2026-06-15 04:41:26.557701 | debian-bookworm | +-w /etc/audit/ -p wa -k auditconfig 2026-06-15 04:41:26.557707 | debian-bookworm | +-w /etc/libaudit.conf -p wa -k auditconfig 2026-06-15 04:41:26.557713 | debian-bookworm | +-w /etc/audisp/ -p wa -k audispconfig 2026-06-15 04:41:26.557719 | debian-bookworm | + 2026-06-15 04:41:26.557725 | debian-bookworm | +## Monitor for use of audit management tools 2026-06-15 04:41:26.557731 | debian-bookworm | +-w /sbin/auditctl -p x -k audittools 2026-06-15 04:41:26.557737 | debian-bookworm | +-w /sbin/auditd -p x -k audittools 2026-06-15 04:41:26.557743 | debian-bookworm | +-w /usr/sbin/auditd -p x -k audittools 2026-06-15 04:41:26.557749 | debian-bookworm | +-w /usr/sbin/augenrules -p x -k audittools 2026-06-15 04:41:26.557755 | debian-bookworm | + 2026-06-15 04:41:26.557761 | debian-bookworm | +## Access to all audit trails 2026-06-15 04:41:26.557767 | debian-bookworm | + 2026-06-15 04:41:26.557773 | debian-bookworm | +-a always,exit -F path=/usr/sbin/ausearch -F perm=x -k audittools 2026-06-15 04:41:26.557779 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aureport -F perm=x -k audittools 2026-06-15 04:41:26.557785 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aulast -F perm=x -k audittools 2026-06-15 04:41:26.557797 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aulastlogin -F perm=x -k audittools 2026-06-15 04:41:26.557803 | debian-bookworm | +-a always,exit -F path=/usr/sbin/auvirt -F perm=x -k audittools 2026-06-15 04:41:26.557809 | debian-bookworm | + 2026-06-15 04:41:26.557815 | debian-bookworm | +# Filters --------------------------------------------------------------------- 2026-06-15 04:41:26.557908 | debian-bookworm | + 2026-06-15 04:41:26.557967 | debian-bookworm | +### We put these early because audit is a first match wins system. 2026-06-15 04:41:26.558060 | debian-bookworm | + 2026-06-15 04:41:26.558159 | debian-bookworm | +## Ignore SELinux AVC records 2026-06-15 04:41:26.558257 | debian-bookworm | +-a always,exclude -F msgtype=AVC 2026-06-15 04:41:26.558348 | debian-bookworm | + 2026-06-15 04:41:26.558470 | debian-bookworm | +## Ignore current working directory records 2026-06-15 04:41:26.558583 | debian-bookworm | +-a always,exclude -F msgtype=CWD 2026-06-15 04:41:26.558676 | debian-bookworm | + 2026-06-15 04:41:26.558777 | debian-bookworm | +## Cron jobs fill the logs with stuff we normally don't want (works with SELinux) 2026-06-15 04:41:26.558903 | debian-bookworm | +-a never,user -F subj_type=crond_t 2026-06-15 04:41:26.559002 | debian-bookworm | +-a never,exit -F subj_type=crond_t 2026-06-15 04:41:26.559093 | debian-bookworm | + 2026-06-15 04:41:26.559189 | debian-bookworm | +## This prevents chrony from overwhelming the logs 2026-06-15 04:41:26.559287 | debian-bookworm | +-a never,exit -F arch=b64 -S adjtimex -F auid=-1 -F uid=chrony -F subj_type=chronyd_t 2026-06-15 04:41:26.559376 | debian-bookworm | + 2026-06-15 04:41:26.559473 | debian-bookworm | +## This is not very interesting and wastes a lot of space if the server is public facing 2026-06-15 04:41:26.559571 | debian-bookworm | +-a always,exclude -F msgtype=CRYPTO_KEY_USER 2026-06-15 04:41:26.559659 | debian-bookworm | + 2026-06-15 04:41:26.559786 | debian-bookworm | +## Open VM Tools 2026-06-15 04:41:26.559993 | debian-bookworm | +-a exit,never -F arch=b64 -S all -F exe=/usr/bin/vmtoolsd 2026-06-15 04:41:26.560183 | debian-bookworm | + 2026-06-15 04:41:26.560382 | debian-bookworm | +## High Volume Event Filter (especially on Linux Workstations) 2026-06-15 04:41:26.560512 | debian-bookworm | +-a never,exit -F arch=b64 -F dir=/dev/shm -k sharedmemaccess 2026-06-15 04:41:26.560610 | debian-bookworm | +-a never,exit -F arch=b64 -F dir=/var/lock/lvm -k locklvm 2026-06-15 04:41:26.560699 | debian-bookworm | + 2026-06-15 04:41:26.560793 | debian-bookworm | +## FileBeat 2026-06-15 04:41:26.560927 | debian-bookworm | +-a never,exit -F arch=b64 -F path=/opt/filebeat -k filebeat 2026-06-15 04:41:26.561017 | debian-bookworm | + 2026-06-15 04:41:26.561112 | debian-bookworm | +## More information on how to filter events 2026-06-15 04:41:26.561210 | debian-bookworm | +### https://access.redhat.com/solutions/2482221 2026-06-15 04:41:26.561303 | debian-bookworm | + 2026-06-15 04:41:26.561428 | debian-bookworm | +# Rules ----------------------------------------------------------------------- 2026-06-15 04:41:26.561523 | debian-bookworm | + 2026-06-15 04:41:26.561618 | debian-bookworm | +## Kernel parameters 2026-06-15 04:41:26.561713 | debian-bookworm | +-w /etc/sysctl.conf -p wa -k sysctl 2026-06-15 04:41:26.561835 | debian-bookworm | +-w /etc/sysctl.d -p wa -k sysctl 2026-06-15 04:41:26.561953 | debian-bookworm | + 2026-06-15 04:41:26.562051 | debian-bookworm | +## Kernel module loading and unloading 2026-06-15 04:41:26.562150 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/insmod -k modules 2026-06-15 04:41:26.562246 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/modprobe -k modules 2026-06-15 04:41:26.562344 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/rmmod -k modules 2026-06-15 04:41:26.562488 | debian-bookworm | +-a always,exit -F arch=b64 -S finit_module -S init_module -S delete_module -F auid!=-1 -k modules 2026-06-15 04:41:26.562595 | debian-bookworm | + 2026-06-15 04:41:26.562692 | debian-bookworm | +## Modprobe configuration 2026-06-15 04:41:26.562794 | debian-bookworm | +-w /etc/modprobe.conf -p wa -k modprobe 2026-06-15 04:41:26.562899 | debian-bookworm | +-w /etc/modprobe.d -p wa -k modprobe 2026-06-15 04:41:26.562992 | debian-bookworm | + 2026-06-15 04:41:26.563083 | debian-bookworm | +## KExec usage (all actions) 2026-06-15 04:41:26.563176 | debian-bookworm | +-a always,exit -F arch=b64 -S kexec_load -k KEXEC 2026-06-15 04:41:26.563269 | debian-bookworm | + 2026-06-15 04:41:26.563358 | debian-bookworm | +## Special files 2026-06-15 04:41:26.563455 | debian-bookworm | +-a always,exit -F arch=b64 -S mknod -S mknodat -k specialfiles 2026-06-15 04:41:26.563548 | debian-bookworm | + 2026-06-15 04:41:26.563645 | debian-bookworm | +## Mount operations (only attributable) 2026-06-15 04:41:26.563741 | debian-bookworm | +-a always,exit -F arch=b64 -S mount -S umount2 -F auid!=-1 -k mount 2026-06-15 04:41:26.563831 | debian-bookworm | + 2026-06-15 04:41:26.563960 | debian-bookworm | +### NFS mount 2026-06-15 04:41:26.564068 | debian-bookworm | +-a always,exit -F path=/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-15 04:41:26.564166 | debian-bookworm | +-a always,exit -F path=/usr/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-15 04:41:26.564247 | debian-bookworm | + 2026-06-15 04:41:26.564341 | debian-bookworm | +## Change swap (only attributable) 2026-06-15 04:41:26.564440 | debian-bookworm | +-a always,exit -F arch=b64 -S swapon -S swapoff -F auid!=-1 -k swap 2026-06-15 04:41:26.564531 | debian-bookworm | + 2026-06-15 04:41:26.564649 | debian-bookworm | +## Time 2026-06-15 04:41:26.564752 | debian-bookworm | +-a always,exit -F arch=b64 -F uid!=ntp -S adjtimex -S settimeofday -S clock_settime -k time 2026-06-15 04:41:26.564952 | debian-bookworm | +### Local time zone 2026-06-15 04:41:26.564976 | debian-bookworm | +-w /etc/localtime -p wa -k localtime 2026-06-15 04:41:26.565041 | debian-bookworm | + 2026-06-15 04:41:26.565135 | debian-bookworm | +## Stunnel 2026-06-15 04:41:26.565231 | debian-bookworm | +-w /usr/sbin/stunnel -p x -k stunnel 2026-06-15 04:41:26.565326 | debian-bookworm | +-w /usr/bin/stunnel -p x -k stunnel 2026-06-15 04:41:26.565452 | debian-bookworm | + 2026-06-15 04:41:26.565547 | debian-bookworm | +## Cron configuration & scheduled jobs 2026-06-15 04:41:26.565640 | debian-bookworm | +-w /etc/cron.allow -p wa -k cron 2026-06-15 04:41:26.565737 | debian-bookworm | +-w /etc/cron.deny -p wa -k cron 2026-06-15 04:41:26.565828 | debian-bookworm | +-w /etc/cron.d/ -p wa -k cron 2026-06-15 04:41:26.565935 | debian-bookworm | +-w /etc/cron.daily/ -p wa -k cron 2026-06-15 04:41:26.566028 | debian-bookworm | +-w /etc/cron.hourly/ -p wa -k cron 2026-06-15 04:41:26.566121 | debian-bookworm | +-w /etc/cron.monthly/ -p wa -k cron 2026-06-15 04:41:26.566251 | debian-bookworm | +-w /etc/cron.weekly/ -p wa -k cron 2026-06-15 04:41:26.566350 | debian-bookworm | +-w /etc/crontab -p wa -k cron 2026-06-15 04:41:26.566483 | debian-bookworm | +-w /var/spool/cron/ -p wa -k cron 2026-06-15 04:41:26.566593 | debian-bookworm | + 2026-06-15 04:41:26.566693 | debian-bookworm | +## User, group, password databases 2026-06-15 04:41:26.566790 | debian-bookworm | +-w /etc/group -p wa -k etcgroup 2026-06-15 04:41:26.566912 | debian-bookworm | +-w /etc/passwd -p wa -k etcpasswd 2026-06-15 04:41:26.567011 | debian-bookworm | +-w /etc/gshadow -k etcgroup 2026-06-15 04:41:26.567106 | debian-bookworm | +-w /etc/shadow -k etcpasswd 2026-06-15 04:41:26.567201 | debian-bookworm | +-w /etc/security/opasswd -k opasswd 2026-06-15 04:41:26.567295 | debian-bookworm | + 2026-06-15 04:41:26.567390 | debian-bookworm | +## Sudoers file changes 2026-06-15 04:41:26.567495 | debian-bookworm | +-w /etc/sudoers -p wa -k actions 2026-06-15 04:41:26.567626 | debian-bookworm | +-w /etc/sudoers.d/ -p wa -k actions 2026-06-15 04:41:26.567730 | debian-bookworm | + 2026-06-15 04:41:26.567827 | debian-bookworm | +## Passwd 2026-06-15 04:41:26.567938 | debian-bookworm | +-w /usr/bin/passwd -p x -k passwd_modification 2026-06-15 04:41:26.568029 | debian-bookworm | + 2026-06-15 04:41:26.568125 | debian-bookworm | +## Tools to change group identifiers 2026-06-15 04:41:26.568223 | debian-bookworm | +-w /usr/sbin/groupadd -p x -k group_modification 2026-06-15 04:41:26.568343 | debian-bookworm | +-w /usr/sbin/groupmod -p x -k group_modification 2026-06-15 04:41:26.568415 | debian-bookworm | +-w /usr/sbin/addgroup -p x -k group_modification 2026-06-15 04:41:26.568508 | debian-bookworm | +-w /usr/sbin/useradd -p x -k user_modification 2026-06-15 04:41:26.568618 | debian-bookworm | +-w /usr/sbin/userdel -p x -k user_modification 2026-06-15 04:41:26.568702 | debian-bookworm | +-w /usr/sbin/usermod -p x -k user_modification 2026-06-15 04:41:26.568796 | debian-bookworm | +-w /usr/sbin/adduser -p x -k user_modification 2026-06-15 04:41:26.568902 | debian-bookworm | + 2026-06-15 04:41:26.569002 | debian-bookworm | +## Login configuration and information 2026-06-15 04:41:26.569097 | debian-bookworm | +-w /etc/login.defs -p wa -k login 2026-06-15 04:41:26.569195 | debian-bookworm | +-w /etc/securetty -p wa -k login 2026-06-15 04:41:26.569290 | debian-bookworm | +-w /var/log/faillog -p wa -k login 2026-06-15 04:41:26.569416 | debian-bookworm | +-w /var/log/lastlog -p wa -k login 2026-06-15 04:41:26.569508 | debian-bookworm | +-w /var/log/tallylog -p wa -k login 2026-06-15 04:41:26.569603 | debian-bookworm | + 2026-06-15 04:41:26.569696 | debian-bookworm | +## Network Environment 2026-06-15 04:41:26.569790 | debian-bookworm | +### Changes to hostname 2026-06-15 04:41:26.569919 | debian-bookworm | +-a always,exit -F arch=b64 -S sethostname -S setdomainname -k network_modifications 2026-06-15 04:41:26.570014 | debian-bookworm | + 2026-06-15 04:41:26.570107 | debian-bookworm | +### Detect Remote Shell Use 2026-06-15 04:41:26.570205 | debian-bookworm | +-a always,exit -F arch=b64 -F exe=/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-15 04:41:26.570304 | debian-bookworm | +-a always,exit -F arch=b64 -F exe=/usr/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-15 04:41:26.570403 | debian-bookworm | + 2026-06-15 04:41:26.570532 | debian-bookworm | +### Successful IPv4 Connections 2026-06-15 04:41:26.570632 | debian-bookworm | +-a always,exit -F arch=b64 -S connect -F a2=16 -F success=1 -F key=network_connect_4 2026-06-15 04:41:26.570723 | debian-bookworm | + 2026-06-15 04:41:26.570818 | debian-bookworm | +### Successful IPv6 Connections 2026-06-15 04:41:26.570930 | debian-bookworm | +-a always,exit -F arch=b64 -S connect -F a2=28 -F success=1 -F key=network_connect_6 2026-06-15 04:41:26.571018 | debian-bookworm | + 2026-06-15 04:41:26.571113 | debian-bookworm | +### Changes to other files 2026-06-15 04:41:26.571208 | debian-bookworm | +-w /etc/hosts -p wa -k network_modifications 2026-06-15 04:41:26.571305 | debian-bookworm | +-w /etc/sysconfig/network -p wa -k network_modifications 2026-06-15 04:41:26.571399 | debian-bookworm | +-w /etc/sysconfig/network-scripts -p w -k network_modifications 2026-06-15 04:41:26.571489 | debian-bookworm | +-w /etc/network/ -p wa -k network 2026-06-15 04:41:26.571612 | debian-bookworm | +-a always,exit -F dir=/etc/NetworkManager/ -F perm=wa -k network_modifications 2026-06-15 04:41:26.571682 | debian-bookworm | + 2026-06-15 04:41:26.571779 | debian-bookworm | +### Changes to issue 2026-06-15 04:41:26.571889 | debian-bookworm | +-w /etc/issue -p wa -k etcissue 2026-06-15 04:41:26.571987 | debian-bookworm | +-w /etc/issue.net -p wa -k etcissue 2026-06-15 04:41:26.572081 | debian-bookworm | + 2026-06-15 04:41:26.572176 | debian-bookworm | +## System startup scripts 2026-06-15 04:41:26.572289 | debian-bookworm | +-w /etc/inittab -p wa -k init 2026-06-15 04:41:26.572403 | debian-bookworm | +-w /etc/init.d/ -p wa -k init 2026-06-15 04:41:26.572498 | debian-bookworm | +-w /etc/init/ -p wa -k init 2026-06-15 04:41:26.572592 | debian-bookworm | + 2026-06-15 04:41:26.572700 | debian-bookworm | +## Library search paths 2026-06-15 04:41:26.572783 | debian-bookworm | +-w /etc/ld.so.conf -p wa -k libpath 2026-06-15 04:41:26.572905 | debian-bookworm | +-w /etc/ld.so.conf.d -p wa -k libpath 2026-06-15 04:41:26.573000 | debian-bookworm | + 2026-06-15 04:41:26.573098 | debian-bookworm | +## Systemwide library preloads (LD_PRELOAD) 2026-06-15 04:41:26.573191 | debian-bookworm | +-w /etc/ld.so.preload -p wa -k systemwide_preloads 2026-06-15 04:41:26.573281 | debian-bookworm | + 2026-06-15 04:41:26.573466 | debian-bookworm | +## Pam configuration 2026-06-15 04:41:26.573592 | debian-bookworm | +-w /etc/pam.d/ -p wa -k pam 2026-06-15 04:41:26.573693 | debian-bookworm | +-w /etc/security/limits.conf -p wa -k pam 2026-06-15 04:41:26.573794 | debian-bookworm | +-w /etc/security/limits.d -p wa -k pam 2026-06-15 04:41:26.573916 | debian-bookworm | +-w /etc/security/pam_env.conf -p wa -k pam 2026-06-15 04:41:26.574014 | debian-bookworm | +-w /etc/security/namespace.conf -p wa -k pam 2026-06-15 04:41:26.574107 | debian-bookworm | +-w /etc/security/namespace.d -p wa -k pam 2026-06-15 04:41:26.574203 | debian-bookworm | +-w /etc/security/namespace.init -p wa -k pam 2026-06-15 04:41:26.574292 | debian-bookworm | + 2026-06-15 04:41:26.574391 | debian-bookworm | +## Mail configuration 2026-06-15 04:41:26.574519 | debian-bookworm | +-w /etc/aliases -p wa -k mail 2026-06-15 04:41:26.574615 | debian-bookworm | +-w /etc/postfix/ -p wa -k mail 2026-06-15 04:41:26.574709 | debian-bookworm | +-w /etc/exim4/ -p wa -k mail 2026-06-15 04:41:26.574804 | debian-bookworm | + 2026-06-15 04:41:26.574912 | debian-bookworm | +## SSH configuration 2026-06-15 04:41:26.575008 | debian-bookworm | +-w /etc/ssh/sshd_config -k sshd 2026-06-15 04:41:26.575100 | debian-bookworm | +-w /etc/ssh/sshd_config.d -k sshd 2026-06-15 04:41:26.575199 | debian-bookworm | + 2026-06-15 04:41:26.575293 | debian-bookworm | +## root ssh key tampering 2026-06-15 04:41:26.575389 | debian-bookworm | +-w /root/.ssh -p wa -k rootkey 2026-06-15 04:41:26.575482 | debian-bookworm | + 2026-06-15 04:41:26.575576 | debian-bookworm | +# Systemd 2026-06-15 04:41:26.575671 | debian-bookworm | +-w /bin/systemctl -p x -k systemd 2026-06-15 04:41:26.575767 | debian-bookworm | +-w /etc/systemd/ -p wa -k systemd 2026-06-15 04:41:26.575873 | debian-bookworm | +-w /usr/lib/systemd -p wa -k systemd 2026-06-15 04:41:26.575996 | debian-bookworm | + 2026-06-15 04:41:26.576062 | debian-bookworm | +## https://systemd.network/systemd.generator.html 2026-06-15 04:41:26.576161 | debian-bookworm | +-w /etc/systemd/system-generators/ -p wa -k systemd_generator 2026-06-15 04:41:26.576260 | debian-bookworm | +-w /usr/local/lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-15 04:41:26.576354 | debian-bookworm | +-w /usr/lib/systemd/system-generators -p wa -k systemd_generator 2026-06-15 04:41:26.576445 | debian-bookworm | + 2026-06-15 04:41:26.576541 | debian-bookworm | +-w /etc/systemd/user-generators/ -p wa -k systemd_generator 2026-06-15 04:41:26.576635 | debian-bookworm | +-w /usr/local/lib/systemd/user-generators/ -p wa -k systemd_generator 2026-06-15 04:41:26.576730 | debian-bookworm | +-w /lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-15 04:41:26.576823 | debian-bookworm | + 2026-06-15 04:41:26.576930 | debian-bookworm | +## SELinux events that modify the system's Mandatory Access Controls (MAC) 2026-06-15 04:41:26.577027 | debian-bookworm | +-w /etc/selinux/ -p wa -k mac_policy 2026-06-15 04:41:26.577117 | debian-bookworm | + 2026-06-15 04:41:26.577213 | debian-bookworm | +## Critical elements access failures 2026-06-15 04:41:26.577312 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/etc -F success=0 -k unauthedfileaccess 2026-06-15 04:41:26.577434 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/bin -F success=0 -k unauthedfileaccess 2026-06-15 04:41:26.577534 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/sbin -F success=0 -k unauthedfileaccess 2026-06-15 04:41:26.577660 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/usr/bin -F success=0 -k unauthedfileaccess 2026-06-15 04:41:26.577759 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/usr/sbin -F success=0 -k unauthedfileaccess 2026-06-15 04:41:26.577880 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/var -F success=0 -k unauthedfileaccess 2026-06-15 04:41:26.577979 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/home -F success=0 -k unauthedfileaccess 2026-06-15 04:41:26.578076 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/srv -F success=0 -k unauthedfileaccess 2026-06-15 04:41:26.578177 | debian-bookworm | + 2026-06-15 04:41:26.578264 | debian-bookworm | +## Process ID change (switching accounts) applications 2026-06-15 04:41:26.578358 | debian-bookworm | +-w /bin/su -p x -k priv_esc 2026-06-15 04:41:26.578489 | debian-bookworm | +-w /usr/bin/sudo -p x -k priv_esc 2026-06-15 04:41:26.578586 | debian-bookworm | + 2026-06-15 04:41:26.578707 | debian-bookworm | +## Power state 2026-06-15 04:41:26.578836 | debian-bookworm | +-w /sbin/shutdown -p x -k power 2026-06-15 04:41:26.578948 | debian-bookworm | +-w /sbin/poweroff -p x -k power 2026-06-15 04:41:26.579043 | debian-bookworm | +-w /sbin/reboot -p x -k power 2026-06-15 04:41:26.579137 | debian-bookworm | +-w /sbin/halt -p x -k power 2026-06-15 04:41:26.579272 | debian-bookworm | + 2026-06-15 04:41:26.579319 | debian-bookworm | +## Session initiation information 2026-06-15 04:41:26.579415 | debian-bookworm | +-w /var/run/utmp -p wa -k session 2026-06-15 04:41:26.579514 | debian-bookworm | +-w /var/log/btmp -p wa -k session 2026-06-15 04:41:26.579607 | debian-bookworm | +-w /var/log/wtmp -p wa -k session 2026-06-15 04:41:26.579698 | debian-bookworm | + 2026-06-15 04:41:26.579793 | debian-bookworm | +## Discretionary Access Control (DAC) modifications 2026-06-15 04:41:26.579901 | debian-bookworm | +-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-15 04:41:26.579998 | debian-bookworm | +-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-15 04:41:26.580093 | debian-bookworm | +-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-15 04:41:26.580204 | debian-bookworm | +-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-15 04:41:26.580292 | debian-bookworm | +-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-15 04:41:26.580379 | debian-bookworm | +-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-15 04:41:26.580477 | debian-bookworm | +-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-15 04:41:26.580575 | debian-bookworm | +-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-15 04:41:26.580673 | debian-bookworm | +-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-15 04:41:26.580770 | debian-bookworm | +-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-15 04:41:26.580887 | debian-bookworm | +-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-15 04:41:26.580979 | debian-bookworm | +-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-15 04:41:26.581077 | debian-bookworm | +-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-15 04:41:26.581167 | debian-bookworm | + 2026-06-15 04:41:26.581260 | debian-bookworm | +# Special Rules --------------------------------------------------------------- 2026-06-15 04:41:26.581415 | debian-bookworm | + 2026-06-15 04:41:26.581473 | debian-bookworm | +## Reconnaissance 2026-06-15 04:41:26.581656 | debian-bookworm | +-w /usr/bin/whoami -p x -k recon 2026-06-15 04:41:26.581762 | debian-bookworm | +-w /usr/bin/id -p x -k recon 2026-06-15 04:41:26.581924 | debian-bookworm | +-w /bin/hostname -p x -k recon 2026-06-15 04:41:26.581983 | debian-bookworm | +-w /bin/uname -p x -k recon 2026-06-15 04:41:26.582084 | debian-bookworm | +-w /etc/issue -p r -k recon 2026-06-15 04:41:26.582176 | debian-bookworm | +-w /etc/hostname -p r -k recon 2026-06-15 04:41:26.582267 | debian-bookworm | + 2026-06-15 04:41:26.582363 | debian-bookworm | +## Suspicious activity 2026-06-15 04:41:26.582489 | debian-bookworm | +-w /usr/bin/wget -p x -k susp_activity 2026-06-15 04:41:26.582602 | debian-bookworm | +-w /usr/bin/curl -p x -k susp_activity 2026-06-15 04:41:26.582699 | debian-bookworm | +-w /usr/bin/base64 -p x -k susp_activity 2026-06-15 04:41:26.582796 | debian-bookworm | +-w /bin/nc -p x -k susp_activity 2026-06-15 04:41:26.582909 | debian-bookworm | +-w /bin/netcat -p x -k susp_activity 2026-06-15 04:41:26.583003 | debian-bookworm | +-w /usr/bin/ncat -p x -k susp_activity 2026-06-15 04:41:26.583149 | debian-bookworm | +-w /usr/bin/ss -p x -k susp_activity 2026-06-15 04:41:26.583263 | debian-bookworm | +-w /usr/bin/netstat -p x -k susp_activity 2026-06-15 04:41:26.583359 | debian-bookworm | +-w /usr/bin/ssh -p x -k susp_activity 2026-06-15 04:41:26.583456 | debian-bookworm | +-w /usr/bin/scp -p x -k susp_activity 2026-06-15 04:41:26.583553 | debian-bookworm | +-w /usr/bin/sftp -p x -k susp_activity 2026-06-15 04:41:26.583695 | debian-bookworm | +-w /usr/bin/ftp -p x -k susp_activity 2026-06-15 04:41:26.583743 | debian-bookworm | +-w /usr/bin/socat -p x -k susp_activity 2026-06-15 04:41:26.583838 | debian-bookworm | +-w /usr/bin/wireshark -p x -k susp_activity 2026-06-15 04:41:26.583955 | debian-bookworm | +-w /usr/bin/tshark -p x -k susp_activity 2026-06-15 04:41:26.584045 | debian-bookworm | +-w /usr/bin/rawshark -p x -k susp_activity 2026-06-15 04:41:26.584141 | debian-bookworm | +-w /usr/bin/rdesktop -p x -k susp_activity 2026-06-15 04:41:26.584238 | debian-bookworm | +-w /usr/local/bin/rdesktop -p x -k susp_activity 2026-06-15 04:41:26.584333 | debian-bookworm | +-w /usr/bin/wlfreerdp -p x -k susp_activity 2026-06-15 04:41:26.584432 | debian-bookworm | +-w /usr/bin/xfreerdp -p x -k susp_activity 2026-06-15 04:41:26.584530 | debian-bookworm | +-w /usr/local/bin/xfreerdp -p x -k susp_activity 2026-06-15 04:41:26.584626 | debian-bookworm | +-w /usr/bin/nmap -p x -k susp_activity 2026-06-15 04:41:26.584720 | debian-bookworm | + 2026-06-15 04:41:26.584815 | debian-bookworm | +## sssd 2026-06-15 04:41:26.584958 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/p11_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-15 04:41:26.585068 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/krb5_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-15 04:41:26.585164 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/ldap_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-15 04:41:26.585264 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/selinux_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-15 04:41:26.585388 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/proxy_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-15 04:41:26.585480 | debian-bookworm | + 2026-06-15 04:41:26.585575 | debian-bookworm | +## T1002 Data Compressed 2026-06-15 04:41:26.585671 | debian-bookworm | + 2026-06-15 04:41:26.585771 | debian-bookworm | +-w /usr/bin/zip -p x -k Data_Compressed 2026-06-15 04:41:26.585950 | debian-bookworm | +-w /usr/bin/gzip -p x -k Data_Compressed 2026-06-15 04:41:26.585967 | debian-bookworm | +-w /usr/bin/tar -p x -k Data_Compressed 2026-06-15 04:41:26.586071 | debian-bookworm | +-w /usr/bin/bzip2 -p x -k Data_Compressed 2026-06-15 04:41:26.586160 | debian-bookworm | + 2026-06-15 04:41:26.586256 | debian-bookworm | +-w /usr/bin/lzip -p x -k Data_Compressed 2026-06-15 04:41:26.586354 | debian-bookworm | +-w /usr/local/bin/lzip -p x -k Data_Compressed 2026-06-15 04:41:26.586473 | debian-bookworm | + 2026-06-15 04:41:26.586583 | debian-bookworm | +-w /usr/bin/lz4 -p x -k Data_Compressed 2026-06-15 04:41:26.586678 | debian-bookworm | +-w /usr/local/bin/lz4 -p x -k Data_Compressed 2026-06-15 04:41:26.586765 | debian-bookworm | + 2026-06-15 04:41:26.586889 | debian-bookworm | +-w /usr/bin/lzop -p x -k Data_Compressed 2026-06-15 04:41:26.587015 | debian-bookworm | +-w /usr/local/bin/lzop -p x -k Data_Compressed 2026-06-15 04:41:26.587110 | debian-bookworm | + 2026-06-15 04:41:26.587169 | debian-bookworm | +-w /usr/bin/plzip -p x -k Data_Compressed 2026-06-15 04:41:26.587268 | debian-bookworm | +-w /usr/local/bin/plzip -p x -k Data_Compressed 2026-06-15 04:41:26.587361 | debian-bookworm | + 2026-06-15 04:41:26.587462 | debian-bookworm | +-w /usr/bin/pbzip2 -p x -k Data_Compressed 2026-06-15 04:41:26.587599 | debian-bookworm | +-w /usr/local/bin/pbzip2 -p x -k Data_Compressed 2026-06-15 04:41:26.587693 | debian-bookworm | + 2026-06-15 04:41:26.587788 | debian-bookworm | +-w /usr/bin/lbzip2 -p x -k Data_Compressed 2026-06-15 04:41:26.587897 | debian-bookworm | +-w /usr/local/bin/lbzip2 -p x -k Data_Compressed 2026-06-15 04:41:26.587990 | debian-bookworm | + 2026-06-15 04:41:26.588082 | debian-bookworm | +-w /usr/bin/pixz -p x -k Data_Compressed 2026-06-15 04:41:26.588238 | debian-bookworm | +-w /usr/local/bin/pixz -p x -k Data_Compressed 2026-06-15 04:41:26.588266 | debian-bookworm | + 2026-06-15 04:41:26.588362 | debian-bookworm | +-w /usr/bin/pigz -p x -k Data_Compressed 2026-06-15 04:41:26.588458 | debian-bookworm | +-w /usr/local/bin/pigz -p x -k Data_Compressed 2026-06-15 04:41:26.588552 | debian-bookworm | +-w /usr/bin/unpigz -p x -k Data_Compressed 2026-06-15 04:41:26.588654 | debian-bookworm | +-w /usr/local/bin/unpigz -p x -k Data_Compressed 2026-06-15 04:41:26.588745 | debian-bookworm | + 2026-06-15 04:41:26.588873 | debian-bookworm | +-w /usr/bin/zstd -p x -k Data_Compressed 2026-06-15 04:41:26.588951 | debian-bookworm | +-w /usr/local/bin/zstd -p x -k Data_Compressed 2026-06-15 04:41:26.589045 | debian-bookworm | + 2026-06-15 04:41:26.589140 | debian-bookworm | +## Added to catch netcat on Ubuntu 2026-06-15 04:41:26.589240 | debian-bookworm | +-w /bin/nc.openbsd -p x -k susp_activity 2026-06-15 04:41:26.589395 | debian-bookworm | +-w /bin/nc.traditional -p x -k susp_activity 2026-06-15 04:41:26.589474 | debian-bookworm | + 2026-06-15 04:41:26.589557 | debian-bookworm | +## Sbin suspicious activity 2026-06-15 04:41:26.589656 | debian-bookworm | +-w /sbin/iptables -p x -k sbin_susp 2026-06-15 04:41:26.589752 | debian-bookworm | +-w /sbin/ip6tables -p x -k sbin_susp 2026-06-15 04:41:26.589878 | debian-bookworm | +-w /sbin/ifconfig -p x -k sbin_susp 2026-06-15 04:41:26.589973 | debian-bookworm | +-w /usr/sbin/arptables -p x -k sbin_susp 2026-06-15 04:41:26.590070 | debian-bookworm | +-w /usr/sbin/ebtables -p x -k sbin_susp 2026-06-15 04:41:26.590165 | debian-bookworm | +-w /sbin/xtables-nft-multi -p x -k sbin_susp 2026-06-15 04:41:26.590260 | debian-bookworm | +-w /usr/sbin/nft -p x -k sbin_susp 2026-06-15 04:41:26.590358 | debian-bookworm | +-w /usr/sbin/tcpdump -p x -k sbin_susp 2026-06-15 04:41:26.590476 | debian-bookworm | +-w /usr/sbin/traceroute -p x -k sbin_susp 2026-06-15 04:41:26.590605 | debian-bookworm | +-w /usr/sbin/ufw -p x -k sbin_susp 2026-06-15 04:41:26.590683 | debian-bookworm | + 2026-06-15 04:41:26.590778 | debian-bookworm | +### kde4 2026-06-15 04:41:26.590922 | debian-bookworm | +-a always,exit -F path=/usr/libexec/kde4/kpac_dhcp_helper -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-15 04:41:26.590995 | debian-bookworm | +-a always,exit -F path=/usr/libexec/kde4/kdesud -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-15 04:41:26.591086 | debian-bookworm | + 2026-06-15 04:41:26.591179 | debian-bookworm | +## dbus-send invocation 2026-06-15 04:41:26.591280 | debian-bookworm | +### may indicate privilege escalation CVE-2021-3560 2026-06-15 04:41:26.591371 | debian-bookworm | +-w /usr/bin/dbus-send -p x -k dbus_send 2026-06-15 04:41:26.591464 | debian-bookworm | +-w /usr/bin/gdbus -p x -k gdubs_call 2026-06-15 04:41:26.591556 | debian-bookworm | + 2026-06-15 04:41:26.591724 | debian-bookworm | +## pkexec invocation 2026-06-15 04:41:26.591780 | debian-bookworm | +### may indicate privilege escalation CVE-2021-4034 2026-06-15 04:41:26.591896 | debian-bookworm | +-w /usr/bin/pkexec -p x -k pkexec 2026-06-15 04:41:26.591990 | debian-bookworm | + 2026-06-15 04:41:26.592081 | debian-bookworm | +## Suspicious shells 2026-06-15 04:41:26.592177 | debian-bookworm | +-w /bin/ash -p x -k susp_shell 2026-06-15 04:41:26.592271 | debian-bookworm | +-w /bin/csh -p x -k susp_shell 2026-06-15 04:41:26.592365 | debian-bookworm | +-w /bin/fish -p x -k susp_shell 2026-06-15 04:41:26.592460 | debian-bookworm | +-w /bin/tcsh -p x -k susp_shell 2026-06-15 04:41:26.592561 | debian-bookworm | +-w /bin/tclsh -p x -k susp_shell 2026-06-15 04:41:26.592648 | debian-bookworm | +-w /bin/xonsh -p x -k susp_shell 2026-06-15 04:41:26.592834 | debian-bookworm | +-w /usr/local/bin/xonsh -p x -k susp_shell 2026-06-15 04:41:26.592930 | debian-bookworm | +-w /bin/open -p x -k susp_shell 2026-06-15 04:41:26.593052 | debian-bookworm | +-w /bin/rbash -p x -k susp_shell 2026-06-15 04:41:26.593141 | debian-bookworm | + 2026-06-15 04:41:26.593233 | debian-bookworm | +# Web Server Actvity 2026-06-15 04:41:26.593330 | debian-bookworm | +## Change the number "33" to the ID of your WebServer user. Default: www-data:x:33:33 2026-06-15 04:41:26.593447 | debian-bookworm | +-a always,exit -F arch=b64 -S execve -F euid=33 -k detect_execve_www 2026-06-15 04:41:26.593536 | debian-bookworm | + 2026-06-15 04:41:26.593630 | debian-bookworm | +### https://clustershell.readthedocs.io/ 2026-06-15 04:41:26.593722 | debian-bookworm | +-w /bin/clush -p x -k susp_shell 2026-06-15 04:41:26.593819 | debian-bookworm | +-w /usr/local/bin/clush -p x -k susp_shell 2026-06-15 04:41:26.593956 | debian-bookworm | +-w /etc/clustershell/clush.conf -p x -k susp_shell 2026-06-15 04:41:26.594017 | debian-bookworm | + 2026-06-15 04:41:26.594117 | debian-bookworm | +### https://github.com/tmux/tmux 2026-06-15 04:41:26.594208 | debian-bookworm | +-w /bin/tmux -p x -k susp_shell 2026-06-15 04:41:26.594307 | debian-bookworm | +-w /usr/local/bin/tmux -p x -k susp_shell 2026-06-15 04:41:26.594401 | debian-bookworm | + 2026-06-15 04:41:26.594512 | debian-bookworm | +## Shell/profile configurations 2026-06-15 04:41:26.594609 | debian-bookworm | +-w /etc/profile.d/ -p wa -k shell_profiles 2026-06-15 04:41:26.594699 | debian-bookworm | +-w /etc/profile -p wa -k shell_profiles 2026-06-15 04:41:26.594793 | debian-bookworm | +-w /etc/shells -p wa -k shell_profiles 2026-06-15 04:41:26.594898 | debian-bookworm | +-w /etc/bashrc -p wa -k shell_profiles 2026-06-15 04:41:26.595014 | debian-bookworm | +-w /etc/csh.cshrc -p wa -k shell_profiles 2026-06-15 04:41:26.595098 | debian-bookworm | +-w /etc/csh.login -p wa -k shell_profiles 2026-06-15 04:41:26.595179 | debian-bookworm | +-w /etc/fish/ -p wa -k shell_profiles 2026-06-15 04:41:26.595273 | debian-bookworm | +-w /etc/zsh/ -p wa -k shell_profiles 2026-06-15 04:41:26.595366 | debian-bookworm | + 2026-06-15 04:41:26.595459 | debian-bookworm | +### https://github.com/xxh/xxh 2026-06-15 04:41:26.595553 | debian-bookworm | +-w /usr/local/bin/xxh.bash -p x -k susp_shell 2026-06-15 04:41:26.595649 | debian-bookworm | +-w /usr/local/bin/xxh.xsh -p x -k susp_shell 2026-06-15 04:41:26.595741 | debian-bookworm | +-w /usr/local/bin/xxh.zsh -p x -k susp_shell 2026-06-15 04:41:26.595832 | debian-bookworm | + 2026-06-15 04:41:26.595949 | debian-bookworm | +## Injection 2026-06-15 04:41:26.596076 | debian-bookworm | +### These rules watch for code injection by the ptrace facility. 2026-06-15 04:41:26.596218 | debian-bookworm | +### This could indicate someone trying to do something bad or just debugging 2026-06-15 04:41:26.596276 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x4 -k code_injection 2026-06-15 04:41:26.596371 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x5 -k data_injection 2026-06-15 04:41:26.596467 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x6 -k register_injection 2026-06-15 04:41:26.596564 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -k tracing 2026-06-15 04:41:26.596654 | debian-bookworm | + 2026-06-15 04:41:26.596748 | debian-bookworm | +## Anonymous File Creation 2026-06-15 04:41:26.596874 | debian-bookworm | +### These rules watch the use of memfd_create 2026-06-15 04:41:26.596962 | debian-bookworm | +### "memfd_create" creates anonymous file and returns a file descriptor to access it 2026-06-15 04:41:26.597070 | debian-bookworm | +### When combined with "fexecve" can be used to stealthily run binaries in memory without touching disk 2026-06-15 04:41:26.597199 | debian-bookworm | +-a always,exit -F arch=b64 -S memfd_create -F key=anon_file_create 2026-06-15 04:41:26.597327 | debian-bookworm | + 2026-06-15 04:41:26.597438 | debian-bookworm | +## Privilege Abuse 2026-06-15 04:41:26.597540 | debian-bookworm | +### The purpose of this rule is to detect when an admin may be abusing power by looking in user's home dir. 2026-06-15 04:41:26.597639 | debian-bookworm | +-a always,exit -F dir=/home -F uid=0 -F auid>=1000 -F auid!=-1 -C auid!=obj_uid -k power_abuse 2026-06-15 04:41:26.597733 | debian-bookworm | + 2026-06-15 04:41:26.597827 | debian-bookworm | +# Socket Creations 2026-06-15 04:41:26.597954 | debian-bookworm | +# will catch both IPv4 and IPv6 2026-06-15 04:41:26.598046 | debian-bookworm | + 2026-06-15 04:41:26.598144 | debian-bookworm | +-a always,exit -F arch=b32 -S socket -F a0=2 -k network_socket_created 2026-06-15 04:41:26.598243 | debian-bookworm | +-a always,exit -F arch=b64 -S socket -F a0=2 -k network_socket_created 2026-06-15 04:41:26.598334 | debian-bookworm | + 2026-06-15 04:41:26.598450 | debian-bookworm | +-a always,exit -F arch=b32 -S socket -F a0=10 -k network_socket_created 2026-06-15 04:41:26.598555 | debian-bookworm | +-a always,exit -F arch=b64 -S socket -F a0=10 -k network_socket_created 2026-06-15 04:41:26.598646 | debian-bookworm | + 2026-06-15 04:41:26.598742 | debian-bookworm | +# Software Management --------------------------------------------------------- 2026-06-15 04:41:26.598832 | debian-bookworm | + 2026-06-15 04:41:26.598943 | debian-bookworm | +# RPM (Redhat/CentOS) 2026-06-15 04:41:26.599038 | debian-bookworm | +-w /usr/bin/rpm -p x -k software_mgmt 2026-06-15 04:41:26.599133 | debian-bookworm | +-w /usr/bin/yum -p x -k software_mgmt 2026-06-15 04:41:26.599221 | debian-bookworm | + 2026-06-15 04:41:26.599316 | debian-bookworm | +# DNF (Fedora/RedHat 8/CentOS 8) 2026-06-15 04:41:26.599414 | debian-bookworm | +-w /usr/bin/dnf -p x -k software_mgmt 2026-06-15 04:41:26.599554 | debian-bookworm | + 2026-06-15 04:41:26.599598 | debian-bookworm | +# YAST/Zypper/RPM (SuSE) 2026-06-15 04:41:26.599692 | debian-bookworm | +-w /sbin/yast -p x -k software_mgmt 2026-06-15 04:41:26.599786 | debian-bookworm | +-w /sbin/yast2 -p x -k software_mgmt 2026-06-15 04:41:26.599916 | debian-bookworm | +-w /bin/rpm -p x -k software_mgmt 2026-06-15 04:41:26.600013 | debian-bookworm | +-w /usr/bin/zypper -k software_mgmt 2026-06-15 04:41:26.600105 | debian-bookworm | + 2026-06-15 04:41:26.600200 | debian-bookworm | +# DPKG / APT-GET (Debian/Ubuntu) 2026-06-15 04:41:26.600294 | debian-bookworm | +-w /usr/bin/dpkg -p x -k software_mgmt 2026-06-15 04:41:26.600387 | debian-bookworm | +-w /usr/bin/apt -p x -k software_mgmt 2026-06-15 04:41:26.600484 | debian-bookworm | +-w /usr/bin/apt-add-repository -p x -k software_mgmt 2026-06-15 04:41:26.600579 | debian-bookworm | +-w /usr/bin/apt-get -p x -k software_mgmt 2026-06-15 04:41:26.600676 | debian-bookworm | +-w /usr/bin/aptitude -p x -k software_mgmt 2026-06-15 04:41:26.600764 | debian-bookworm | +-w /usr/bin/wajig -p x -k software_mgmt 2026-06-15 04:41:26.600908 | debian-bookworm | +-w /usr/bin/snap -p x -k software_mgmt 2026-06-15 04:41:26.600957 | debian-bookworm | + 2026-06-15 04:41:26.601052 | debian-bookworm | +# PIP(3) (Python installs) 2026-06-15 04:41:26.601143 | debian-bookworm | +-w /usr/bin/pip -p x -k third_party_software_mgmt 2026-06-15 04:41:26.601242 | debian-bookworm | +-w /usr/local/bin/pip -p x -k third_party_software_mgmt 2026-06-15 04:41:26.601375 | debian-bookworm | +-w /usr/bin/pip3 -p x -k third_party_software_mgmt 2026-06-15 04:41:26.601452 | debian-bookworm | +-w /usr/local/bin/pip3 -p x -k third_party_software_mgmt 2026-06-15 04:41:26.601550 | debian-bookworm | +-w /usr/bin/pipx -p x -k third_party_software_mgmt 2026-06-15 04:41:26.601644 | debian-bookworm | +-w /usr/local/bin/pipx -p x -k third_party_software_mgmt 2026-06-15 04:41:26.601786 | debian-bookworm | + 2026-06-15 04:41:26.601831 | debian-bookworm | +# npm 2026-06-15 04:41:26.601946 | debian-bookworm | +## T1072 third party software 2026-06-15 04:41:26.602036 | debian-bookworm | +## https://www.npmjs.com 2026-06-15 04:41:26.602136 | debian-bookworm | +## https://docs.npmjs.com/cli/v6/commands/npm-audit 2026-06-15 04:41:26.602235 | debian-bookworm | +-w /usr/bin/npm -p x -k third_party_software_mgmt 2026-06-15 04:41:26.602317 | debian-bookworm | + 2026-06-15 04:41:26.602422 | debian-bookworm | +# Comprehensive Perl Archive Network (CPAN) (CPAN installs) 2026-06-15 04:41:26.602550 | debian-bookworm | +## T1072 third party software 2026-06-15 04:41:26.602638 | debian-bookworm | +## https://www.cpan.org 2026-06-15 04:41:26.602735 | debian-bookworm | +-w /usr/bin/cpan -p x -k third_party_software_mgmt 2026-06-15 04:41:26.602868 | debian-bookworm | + 2026-06-15 04:41:26.602935 | debian-bookworm | +# Ruby (RubyGems installs) 2026-06-15 04:41:26.603025 | debian-bookworm | +## T1072 third party software 2026-06-15 04:41:26.603119 | debian-bookworm | +## https://rubygems.org 2026-06-15 04:41:26.603215 | debian-bookworm | +-w /usr/bin/gem -p x -k third_party_software_mgmt 2026-06-15 04:41:26.603307 | debian-bookworm | + 2026-06-15 04:41:26.603399 | debian-bookworm | +# LuaRocks (Lua installs) 2026-06-15 04:41:26.603491 | debian-bookworm | +## T1072 third party software 2026-06-15 04:41:26.603585 | debian-bookworm | +## https://luarocks.org 2026-06-15 04:41:26.603681 | debian-bookworm | +-w /usr/bin/luarocks -p x -k third_party_software_mgmt 2026-06-15 04:41:26.603775 | debian-bookworm | + 2026-06-15 04:41:26.603893 | debian-bookworm | +# Pacman (Arch Linux) 2026-06-15 04:41:26.604040 | debian-bookworm | +## https://wiki.archlinux.org/title/Pacman 2026-06-15 04:41:26.604085 | debian-bookworm | +## T1072 third party software 2026-06-15 04:41:26.604180 | debian-bookworm | +-w /etc/pacman.conf -p x -k third_party_software_mgmt 2026-06-15 04:41:26.604273 | debian-bookworm | +-w /etc/pacman.d -p x -k third_party_software_mgmt 2026-06-15 04:41:26.604365 | debian-bookworm | + 2026-06-15 04:41:26.604462 | debian-bookworm | +# Special Software ------------------------------------------------------------ 2026-06-15 04:41:26.604549 | debian-bookworm | + 2026-06-15 04:41:26.604642 | debian-bookworm | +## GDS specific secrets 2026-06-15 04:41:26.604737 | debian-bookworm | +-w /etc/puppet/ssl -p wa -k puppet_ssl 2026-06-15 04:41:26.604829 | debian-bookworm | + 2026-06-15 04:41:26.604932 | debian-bookworm | +## IBM Bigfix BESClient 2026-06-15 04:41:26.605029 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/opt/BESClient -F success=0 -k soft_besclient 2026-06-15 04:41:26.605145 | debian-bookworm | +-w /var/opt/BESClient/ -p wa -k soft_besclient 2026-06-15 04:41:26.605213 | debian-bookworm | + 2026-06-15 04:41:26.605310 | debian-bookworm | +## CHEF https://www.chef.io/chef/ 2026-06-15 04:41:26.605433 | debian-bookworm | +-w /etc/chef -p wa -k soft_chef 2026-06-15 04:41:26.605526 | debian-bookworm | + 2026-06-15 04:41:26.605620 | debian-bookworm | +## Salt 2026-06-15 04:41:26.605714 | debian-bookworm | +## https://saltproject.io/ 2026-06-15 04:41:26.605813 | debian-bookworm | +## https://docs.saltproject.io/en/latest/ref/configuration/master.html 2026-06-15 04:41:26.605953 | debian-bookworm | +-w /etc/salt -p wa -k soft_salt 2026-06-15 04:41:26.606046 | debian-bookworm | +-w /usr/local/etc/salt -p wa -k soft_salt 2026-06-15 04:41:26.606137 | debian-bookworm | + 2026-06-15 04:41:26.606255 | debian-bookworm | +## Otter 2026-06-15 04:41:26.606328 | debian-bookworm | +## https://inedo.com/otter 2026-06-15 04:41:26.606443 | debian-bookworm | +-w /etc/otter -p wa -k soft_otter 2026-06-15 04:41:26.606547 | debian-bookworm | + 2026-06-15 04:41:26.606644 | debian-bookworm | +## T1081 Credentials In Files 2026-06-15 04:41:26.606737 | debian-bookworm | +-w /usr/bin/grep -p x -k string_search 2026-06-15 04:41:26.606832 | debian-bookworm | +-w /usr/bin/egrep -p x -k string_search 2026-06-15 04:41:26.606940 | debian-bookworm | +-w /usr/bin/ugrep -p x -k string_search 2026-06-15 04:41:26.607037 | debian-bookworm | +### macOS 2026-06-15 04:41:26.607142 | debian-bookworm | +-w /usr/local/bin/grep -p x -k string_search 2026-06-15 04:41:26.607264 | debian-bookworm | +-w /usr/local/bin/egrep -p x -k string_search 2026-06-15 04:41:26.607363 | debian-bookworm | +-w /usr/local/bin/ugrep -p x -k string_search 2026-06-15 04:41:26.607457 | debian-bookworm | + 2026-06-15 04:41:26.607553 | debian-bookworm | +### https://github.com/tmbinc/bgrep 2026-06-15 04:41:26.607650 | debian-bookworm | +-w /usr/bin/bgrep -p x -k string_search 2026-06-15 04:41:26.607743 | debian-bookworm | +### macOS 2026-06-15 04:41:26.607905 | debian-bookworm | +-w /usr/local/bin/bgrep -p x -k string_search 2026-06-15 04:41:26.607937 | debian-bookworm | + 2026-06-15 04:41:26.608065 | debian-bookworm | +### https://github.com/BurntSushi/ripgrep 2026-06-15 04:41:26.608154 | debian-bookworm | +-w /usr/bin/rg -p x -k string_search 2026-06-15 04:41:26.608250 | debian-bookworm | +### macOS 2026-06-15 04:41:26.608335 | debian-bookworm | +-w /usr/local/bin/rg -p x -k string_search 2026-06-15 04:41:26.608462 | debian-bookworm | + 2026-06-15 04:41:26.608527 | debian-bookworm | +### https://github.com/awgn/cgrep 2026-06-15 04:41:26.608616 | debian-bookworm | + 2026-06-15 04:41:26.608711 | debian-bookworm | +-w /usr/bin/cgrep -p x -k string_search 2026-06-15 04:41:26.608808 | debian-bookworm | +### macOS 2026-06-15 04:41:26.608953 | debian-bookworm | +-w /usr/local/bin/cgrep -p x -k string_search 2026-06-15 04:41:26.609027 | debian-bookworm | + 2026-06-15 04:41:26.609124 | debian-bookworm | +### https://github.com/jpr5/ngrep 2026-06-15 04:41:26.609217 | debian-bookworm | +-w /usr/bin/ngrep -p x -k string_search 2026-06-15 04:41:26.609311 | debian-bookworm | +### macOS 2026-06-15 04:41:26.609431 | debian-bookworm | +-w /usr/local/bin/ngrep -p x -k string_search 2026-06-15 04:41:26.609567 | debian-bookworm | + 2026-06-15 04:41:26.609619 | debian-bookworm | +### https://github.com/vrothberg/vgrep 2026-06-15 04:41:26.609712 | debian-bookworm | +-w /usr/bin/vgrep -p x -k string_search 2026-06-15 04:41:26.609808 | debian-bookworm | +### macOS 2026-06-15 04:41:26.609917 | debian-bookworm | +-w /usr/local/bin/vgrep -p x -k string_search 2026-06-15 04:41:26.610005 | debian-bookworm | + 2026-06-15 04:41:26.610100 | debian-bookworm | +### https://github.com/monochromegane/the_platinum_searcher 2026-06-15 04:41:26.610194 | debian-bookworm | +-w /usr/bin/pt -p x -k string_search 2026-06-15 04:41:26.610286 | debian-bookworm | +### macOS 2026-06-15 04:41:26.610383 | debian-bookworm | +-w /usr/local/bin/pt -p x -k string_search 2026-06-15 04:41:26.610517 | debian-bookworm | + 2026-06-15 04:41:26.610665 | debian-bookworm | +### https://github.com/gvansickle/ucg 2026-06-15 04:41:26.610712 | debian-bookworm | +-w /usr/bin/ucg -p x -k string_search 2026-06-15 04:41:26.610805 | debian-bookworm | +### macOS 2026-06-15 04:41:26.610930 | debian-bookworm | +-w /usr/local/bin/ucg -p x -k string_search 2026-06-15 04:41:26.611024 | debian-bookworm | + 2026-06-15 04:41:26.611121 | debian-bookworm | +### https://github.com/ggreer/the_silver_searcher 2026-06-15 04:41:26.611218 | debian-bookworm | +-w /usr/bin/ag -p x -k string_search 2026-06-15 04:41:26.611308 | debian-bookworm | +### macOS 2026-06-15 04:41:26.611403 | debian-bookworm | +-w /usr/local/bin/ag -p x -k string_search 2026-06-15 04:41:26.611495 | debian-bookworm | + 2026-06-15 04:41:26.611589 | debian-bookworm | +### https://github.com/beyondgrep/ack3 2026-06-15 04:41:26.611682 | debian-bookworm | +### https://beyondgrep.com 2026-06-15 04:41:26.611779 | debian-bookworm | +-w /usr/bin/ack -p x -k string_search 2026-06-15 04:41:26.612022 | debian-bookworm | +-w /usr/local/bin/ack -p x -k string_search 2026-06-15 04:41:26.612108 | debian-bookworm | +-w /usr/bin/semgrep -p x -k string_search 2026-06-15 04:41:26.612133 | debian-bookworm | +### macOS 2026-06-15 04:41:26.612152 | debian-bookworm | +-w /usr/local/bin/semgrep -p x -k string_search 2026-06-15 04:41:26.612260 | debian-bookworm | + 2026-06-15 04:41:26.612347 | debian-bookworm | +## Docker 2026-06-15 04:41:26.612437 | debian-bookworm | +-w /usr/bin/dockerd -k docker 2026-06-15 04:41:26.612528 | debian-bookworm | +-w /usr/bin/docker -k docker 2026-06-15 04:41:26.612618 | debian-bookworm | +-w /usr/bin/docker-containerd -k docker 2026-06-15 04:41:26.612709 | debian-bookworm | +-w /usr/bin/docker-runc -k docker 2026-06-15 04:41:26.612825 | debian-bookworm | +-w /var/lib/docker -p wa -k docker 2026-06-15 04:41:26.612889 | debian-bookworm | +-w /etc/docker -k docker 2026-06-15 04:41:26.613019 | debian-bookworm | +-w /etc/sysconfig/docker -k docker 2026-06-15 04:41:26.613088 | debian-bookworm | +-w /etc/sysconfig/docker-storage -k docker 2026-06-15 04:41:26.613179 | debian-bookworm | +-w /usr/lib/systemd/system/docker.service -k docker 2026-06-15 04:41:26.613273 | debian-bookworm | +-w /usr/lib/systemd/system/docker.socket -k docker 2026-06-15 04:41:26.613406 | debian-bookworm | + 2026-06-15 04:41:26.613490 | debian-bookworm | +## Virtualization stuff 2026-06-15 04:41:26.613572 | debian-bookworm | +-w /usr/bin/qemu-system-x86_64 -p x -k qemu-system-x86_64 2026-06-15 04:41:26.613667 | debian-bookworm | +-w /usr/bin/qemu-img -p x -k qemu-img 2026-06-15 04:41:26.613764 | debian-bookworm | +-w /usr/bin/qemu-kvm -p x -k qemu-kvm 2026-06-15 04:41:26.613880 | debian-bookworm | +-w /usr/bin/qemu -p x -k qemu 2026-06-15 04:41:26.613956 | debian-bookworm | +-w /usr/bin/virtualbox -p x -k virtualbox 2026-06-15 04:41:26.614073 | debian-bookworm | +-w /usr/bin/virt-manager -p x -k virt-manager 2026-06-15 04:41:26.614160 | debian-bookworm | +-w /usr/bin/VBoxManage -p x -k VBoxManage 2026-06-15 04:41:26.614235 | debian-bookworm | + 2026-06-15 04:41:26.614335 | debian-bookworm | +#### VirtualBox on macOS 2026-06-15 04:41:26.614432 | debian-bookworm | + 2026-06-15 04:41:26.614550 | debian-bookworm | +-w /usr/local/bin/VirtualBox -p x -k virt_tool 2026-06-15 04:41:26.614638 | debian-bookworm | +-w /usr/local/bin/VirtualBoxVM -p x -k virt_tool 2026-06-15 04:41:26.614805 | debian-bookworm | +-w /usr/local/bin/VBoxManage -p x -k virt_tool 2026-06-15 04:41:26.614933 | debian-bookworm | +-w /usr/local/bin/VBoxVRDP -p x -k virt_tool 2026-06-15 04:41:26.615022 | debian-bookworm | +-w /usr/local/bin/VBoxHeadless -p x -k virt_tool 2026-06-15 04:41:26.615118 | debian-bookworm | +-w /usr/local/bin/vboxwebsrv -p x -k virt_tool 2026-06-15 04:41:26.615229 | debian-bookworm | +-w /usr/local/bin/VBoxBugReport -p x -k virt_tool 2026-06-15 04:41:26.615316 | debian-bookworm | +-w /usr/local/bin/VBoxBalloonCtrl -p x -k virt_tool 2026-06-15 04:41:26.615404 | debian-bookworm | +-w /usr/local/bin/VBoxAutostart -p x -k virt_tool 2026-06-15 04:41:26.615496 | debian-bookworm | +-w /usr/local/bin/VBoxDTrace -p x -k virt_tool 2026-06-15 04:41:26.615587 | debian-bookworm | +-w /usr/local/bin/vbox-img -p x -k virt_tool 2026-06-15 04:41:26.615696 | debian-bookworm | +-w /Library/LaunchDaemons/org.virtualbox.startup.plist -p x -k virt_tool 2026-06-15 04:41:26.615785 | debian-bookworm | +-w /Library/Application Support/VirtualBox/LaunchDaemons/ -p x -k virt_tool 2026-06-15 04:41:26.615925 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxDrv.kext/ -p x -k virt_tool 2026-06-15 04:41:26.615989 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxUSB.kext/ -p x -k virt_tool 2026-06-15 04:41:26.616093 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxNetFlt.kext/ -p x -k virt_tool 2026-06-15 04:41:26.616184 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxNetAdp.kext/ -p x -k virt_tool 2026-06-15 04:41:26.616276 | debian-bookworm | + 2026-06-15 04:41:26.616431 | debian-bookworm | +### Parallels Desktop on macOS 2026-06-15 04:41:26.616449 | debian-bookworm | + 2026-06-15 04:41:26.616552 | debian-bookworm | +-w /usr/local/bin/prl_convert -p x -k virt_tool 2026-06-15 04:41:26.616684 | debian-bookworm | +-w /usr/local/bin/prl_disk_tool -p x -k virt_tool 2026-06-15 04:41:26.616818 | debian-bookworm | +-w /usr/local/bin/prl_perf_ctl -p x -k virt_tool 2026-06-15 04:41:26.616948 | debian-bookworm | +-w /usr/local/bin/prlcore2dmp -p x -k virt_tool 2026-06-15 04:41:26.617044 | debian-bookworm | +-w /usr/local/bin/prlctl -p x -k virt_tool 2026-06-15 04:41:26.617141 | debian-bookworm | +-w /usr/local/bin/prlexec -p x -k virt_tool 2026-06-15 04:41:26.617247 | debian-bookworm | +-w /usr/local/bin/prlsrvctl -p x -k virt_tool 2026-06-15 04:41:26.617334 | debian-bookworm | +-w /Library/Preferences/Parallels -p x -k virt_tool 2026-06-15 04:41:26.617447 | debian-bookworm | + 2026-06-15 04:41:26.617544 | debian-bookworm | +### qemu on macOS 2026-06-15 04:41:26.617641 | debian-bookworm | + 2026-06-15 04:41:26.617737 | debian-bookworm | +-w /usr/local/bin/qemu-edid -p x -k virt_tool 2026-06-15 04:41:26.617833 | debian-bookworm | +-w /usr/local/bin/qemu-img -p x -k virt_tool 2026-06-15 04:41:26.618017 | debian-bookworm | +-w /usr/local/bin/qemu-io -p x -k virt_tool 2026-06-15 04:41:26.618044 | debian-bookworm | +-w /usr/local/bin/qemu-nbd -p x -k virt_tool 2026-06-15 04:41:26.618129 | debian-bookworm | +-w /usr/local/bin/qemu-system-x86_64 -p x -k virt_tool 2026-06-15 04:41:26.618214 | debian-bookworm | + 2026-06-15 04:41:26.618304 | debian-bookworm | +## Kubelet 2026-06-15 04:41:26.618423 | debian-bookworm | +-w /usr/bin/kubelet -k kubelet 2026-06-15 04:41:26.618531 | debian-bookworm | + 2026-06-15 04:41:26.618645 | debian-bookworm | +# ipc system call 2026-06-15 04:41:26.618719 | debian-bookworm | +# /usr/include/linux/ipc.h 2026-06-15 04:41:26.618813 | debian-bookworm | + 2026-06-15 04:41:26.618934 | debian-bookworm | +## msgctl 2026-06-15 04:41:26.619026 | debian-bookworm | +#-a always,exit -S ipc -F a0=14 -k Inter-Process_Communication 2026-06-15 04:41:26.619121 | debian-bookworm | +## msgget 2026-06-15 04:41:26.619222 | debian-bookworm | +#-a always,exit -S ipc -F a0=13 -k Inter-Process_Communication 2026-06-15 04:41:26.619323 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2026-06-15 04:41:26.619424 | debian-bookworm | +-a always,exit -F arch=b64 -S msgctl -k Inter-Process_Communication 2026-06-15 04:41:26.619523 | debian-bookworm | +-a always,exit -F arch=b64 -S msgget -k Inter-Process_Communication 2026-06-15 04:41:26.619616 | debian-bookworm | + 2026-06-15 04:41:26.619731 | debian-bookworm | +## semctl 2026-06-15 04:41:26.619810 | debian-bookworm | +#-a always,exit -S ipc -F a0=3 -k Inter-Process_Communication 2026-06-15 04:41:26.619931 | debian-bookworm | +## semget 2026-06-15 04:41:26.620029 | debian-bookworm | +#-a always,exit -S ipc -F a0=2 -k Inter-Process_Communication 2026-06-15 04:41:26.620122 | debian-bookworm | +## semop 2026-06-15 04:41:26.620219 | debian-bookworm | +#-a always,exit -S ipc -F a0=1 -k Inter-Process_Communication 2026-06-15 04:41:26.620321 | debian-bookworm | +## semtimedop 2026-06-15 04:41:26.620412 | debian-bookworm | +#-a always,exit -S ipc -F a0=4 -k Inter-Process_Communication 2026-06-15 04:41:26.620510 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2026-06-15 04:41:26.620607 | debian-bookworm | +-a always,exit -F arch=b64 -S semctl -k Inter-Process_Communication 2026-06-15 04:41:26.620700 | debian-bookworm | +-a always,exit -F arch=b64 -S semget -k Inter-Process_Communication 2026-06-15 04:41:26.620810 | debian-bookworm | +-a always,exit -F arch=b64 -S semop -k Inter-Process_Communication 2026-06-15 04:41:26.620901 | debian-bookworm | +-a always,exit -F arch=b64 -S semtimedop -k Inter-Process_Communication 2026-06-15 04:41:26.620993 | debian-bookworm | + 2026-06-15 04:41:26.621088 | debian-bookworm | +## shmctl 2026-06-15 04:41:26.621185 | debian-bookworm | +#-a always,exit -S ipc -F a0=24 -k Inter-Process_Communication 2026-06-15 04:41:26.621278 | debian-bookworm | +## shmget 2026-06-15 04:41:26.621398 | debian-bookworm | +#-a always,exit -S ipc -F a0=23 -k Inter-Process_Communication 2026-06-15 04:41:26.621495 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2026-06-15 04:41:26.621594 | debian-bookworm | +-a always,exit -F arch=b64 -S shmctl -k Inter-Process_Communication 2026-06-15 04:41:26.621693 | debian-bookworm | +-a always,exit -F arch=b64 -S shmget -k Inter-Process_Communication 2026-06-15 04:41:26.621810 | debian-bookworm | + 2026-06-15 04:41:26.621960 | debian-bookworm | +# High Volume Events ---------------------------------------------------------- 2026-06-15 04:41:26.622056 | debian-bookworm | + 2026-06-15 04:41:26.622153 | debian-bookworm | +## Disable these rules if they create too many events in your environment 2026-06-15 04:41:26.622245 | debian-bookworm | + 2026-06-15 04:41:26.622341 | debian-bookworm | +## Common Shells 2026-06-15 04:41:26.622434 | debian-bookworm | +-w /bin/bash -p x -k susp_shell 2026-06-15 04:41:26.622531 | debian-bookworm | +-w /bin/dash -p x -k susp_shell 2026-06-15 04:41:26.622645 | debian-bookworm | +-w /bin/busybox -p x -k susp_shell 2026-06-15 04:41:26.622744 | debian-bookworm | +-w /bin/zsh -p x -k susp_shell 2026-06-15 04:41:26.622854 | debian-bookworm | +-w /bin/sh -p x -k susp_shell 2026-06-15 04:41:26.622966 | debian-bookworm | +-w /bin/ksh -p x -k susp_shell 2026-06-15 04:41:26.623062 | debian-bookworm | + 2026-06-15 04:41:26.623161 | debian-bookworm | +## Root command executions 2026-06-15 04:41:26.623255 | debian-bookworm | +-a always,exit -F arch=b64 -F euid=0 -F auid>=1000 -F auid!=-1 -S execve -k rootcmd 2026-06-15 04:41:26.623347 | debian-bookworm | + 2026-06-15 04:41:26.623443 | debian-bookworm | +## File Deletion Events by User 2026-06-15 04:41:26.623543 | debian-bookworm | +-a always,exit -F arch=b64 -S rmdir -S unlink -S unlinkat -S rename -S renameat -F auid>=1000 -F auid!=-1 -k delete 2026-06-15 04:41:26.623636 | debian-bookworm | + 2026-06-15 04:41:26.623729 | debian-bookworm | +## File Access 2026-06-15 04:41:26.623828 | debian-bookworm | +### Unauthorized Access (unsuccessful) 2026-06-15 04:41:26.623942 | debian-bookworm | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k file_access 2026-06-15 04:41:26.624041 | debian-bookworm | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k file_access 2026-06-15 04:41:26.624132 | debian-bookworm | + 2026-06-15 04:41:26.624228 | debian-bookworm | +### Unsuccessful Creation 2026-06-15 04:41:26.624327 | debian-bookworm | +-a always,exit -F arch=b64 -S mkdir,creat,link,symlink,mknod,mknodat,linkat,symlinkat -F exit=-EACCES -k file_creation 2026-06-15 04:41:26.624425 | debian-bookworm | +-a always,exit -F arch=b64 -S mkdir,link,symlink,mkdirat -F exit=-EPERM -k file_creation 2026-06-15 04:41:26.624520 | debian-bookworm | + 2026-06-15 04:41:26.624621 | debian-bookworm | +### Unsuccessful Modification 2026-06-15 04:41:26.624734 | debian-bookworm | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EACCES -k file_modification 2026-06-15 04:41:26.624824 | debian-bookworm | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EPERM -k file_modification 2026-06-15 04:41:26.624930 | debian-bookworm | + 2026-06-15 04:41:26.625027 | debian-bookworm | +## 32bit API Exploitation 2026-06-15 04:41:26.625126 | debian-bookworm | +### If you are on a 64 bit platform, everything _should_ be running 2026-06-15 04:41:26.625224 | debian-bookworm | +### in 64 bit mode. This rule will detect any use of the 32 bit syscalls 2026-06-15 04:41:26.625322 | debian-bookworm | +### because this might be a sign of someone exploiting a hole in the 32 2026-06-15 04:41:26.625615 | debian-bookworm | +### bit API. 2026-06-15 04:41:26.625702 | debian-bookworm | +-a always,exit -F arch=b32 -S all -k 32bit_api 2026-06-15 04:41:26.625800 | debian-bookworm | + 2026-06-15 04:41:26.625939 | debian-bookworm | +# Make The Configuration Immutable -------------------------------------------- 2026-06-15 04:41:26.626031 | debian-bookworm | + 2026-06-15 04:41:26.626125 | debian-bookworm | +##-e 2 2026-06-15 04:41:26.626280 | debian-bookworm | 2026-06-15 04:41:26.626468 | debian-bookworm | changed: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": true, "checksum": "9f99ce5c4f891fbf3e2bce06ed4cb97fb9e01f41", "dest": "/etc/audit/rules.d/20-neo23x0.rules", "gid": 0, "group": "root", "item": "20-neo23x0.rules", "md5sum": "6ac57206fd77de34805c3f4d50ef8b1d", "mode": "0644", "owner": "root", "size": 27367, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1781498485.6842678-2582-254551602716191/.source.rules", "state": "file", "uid": 0} 2026-06-15 04:41:26.626549 | debian-bookworm | 2026-06-15 04:41:26.626651 | debian-bookworm | TASK [auditd : Manage auditd service] ****************************************** 2026-06-15 04:41:27.140468 | ubuntu-noble | --- before 2026-06-15 04:41:27.140522 | ubuntu-noble | +++ after: /home/zuul/.ansible/tmp/ansible-local-1976n7x8a5nq/tmpqzla9tdy/20-neo23x0.rules.j2 2026-06-15 04:41:27.140532 | ubuntu-noble | @@ -0,0 +1,750 @@ 2026-06-15 04:41:27.140538 | ubuntu-noble | +# ___ ___ __ __ 2026-06-15 04:41:27.140545 | ubuntu-noble | +# / | __ ______/ (_) /_____/ / 2026-06-15 04:41:27.140551 | ubuntu-noble | +# / /| |/ / / / __ / / __/ __ / 2026-06-15 04:41:27.140557 | ubuntu-noble | +# / ___ / /_/ / /_/ / / /_/ /_/ / 2026-06-15 04:41:27.140563 | ubuntu-noble | +# /_/ |_\__,_/\__,_/_/\__/\__,_/ 2026-06-15 04:41:27.140569 | ubuntu-noble | +# 2026-06-15 04:41:27.140764 | ubuntu-noble | +# Linux Audit Daemon - Best Practice Configuration 2026-06-15 04:41:27.140948 | ubuntu-noble | +# /etc/audit/audit.rules 2026-06-15 04:41:27.141110 | ubuntu-noble | +# 2026-06-15 04:41:27.141276 | ubuntu-noble | +# Compiled by Florian Roth 2026-06-15 04:41:27.141481 | ubuntu-noble | +# 2026-06-15 04:41:27.141658 | ubuntu-noble | +# Created : 2017/12/05 2026-06-15 04:41:27.141822 | ubuntu-noble | +# Modified : 2023/01/25 2026-06-15 04:41:27.141980 | ubuntu-noble | +# 2026-06-15 04:41:27.142146 | ubuntu-noble | +# Based on rules published here: 2026-06-15 04:41:27.142314 | ubuntu-noble | +# Gov.uk auditd rules 2026-06-15 04:41:27.142801 | ubuntu-noble | +# https://github.com/gds-operations/puppet-auditd/pull/1 2026-06-15 04:41:27.143076 | ubuntu-noble | +# CentOS 7 hardening 2026-06-15 04:41:27.143339 | ubuntu-noble | +# https://highon.coffee/blog/security-harden-centos-7/#auditd---audit-daemon 2026-06-15 04:41:27.143644 | ubuntu-noble | +# Linux audit repo 2026-06-15 04:41:27.143908 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/tree/master/rules 2026-06-15 04:41:27.144157 | ubuntu-noble | +# Auditd high performance linux auditing 2026-06-15 04:41:27.144477 | ubuntu-noble | +# https://linux-audit.com/tuning-auditd-high-performance-linux-auditing/ 2026-06-15 04:41:27.144654 | ubuntu-noble | +# 2026-06-15 04:41:27.144821 | ubuntu-noble | +# Further rules 2026-06-15 04:41:27.145054 | ubuntu-noble | +# For PCI DSS compliance see: 2026-06-15 04:41:27.145301 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-pci-dss-v31.rules 2026-06-15 04:41:27.145569 | ubuntu-noble | +# For NISPOM compliance see: 2026-06-15 04:41:27.145818 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-nispom.rules 2026-06-15 04:41:27.145986 | ubuntu-noble | + 2026-06-15 04:41:27.146152 | ubuntu-noble | +# Remove any existing rules 2026-06-15 04:41:27.146310 | ubuntu-noble | +-D 2026-06-15 04:41:27.146535 | ubuntu-noble | + 2026-06-15 04:41:27.146704 | ubuntu-noble | +# Buffer Size 2026-06-15 04:41:27.146869 | ubuntu-noble | +## Feel free to increase this if the machine panic's 2026-06-15 04:41:27.147012 | ubuntu-noble | +-b 8192 2026-06-15 04:41:27.147151 | ubuntu-noble | + 2026-06-15 04:41:27.147294 | ubuntu-noble | +# Failure Mode 2026-06-15 04:41:27.147498 | ubuntu-noble | +## Possible values: 0 (silent), 1 (printk, print a failure message), 2 (panic, halt the system) 2026-06-15 04:41:27.147648 | ubuntu-noble | +-f 1 2026-06-15 04:41:27.147788 | ubuntu-noble | + 2026-06-15 04:41:27.147934 | ubuntu-noble | +# Ignore errors 2026-06-15 04:41:27.148082 | ubuntu-noble | +## e.g. caused by users or files not found in the local environment 2026-06-15 04:41:27.148220 | ubuntu-noble | +-i 2026-06-15 04:41:27.149431 | ubuntu-noble | + 2026-06-15 04:41:27.149447 | ubuntu-noble | +# Self Auditing --------------------------------------------------------------- 2026-06-15 04:41:27.149453 | ubuntu-noble | + 2026-06-15 04:41:27.149457 | ubuntu-noble | +## Audit the audit logs 2026-06-15 04:41:27.149462 | ubuntu-noble | +### Successful and unsuccessful attempts to read information from the audit records 2026-06-15 04:41:27.149467 | ubuntu-noble | +-w /var/log/audit/ -p wra -k auditlog 2026-06-15 04:41:27.149471 | ubuntu-noble | +-w /var/audit/ -p wra -k auditlog 2026-06-15 04:41:27.149475 | ubuntu-noble | + 2026-06-15 04:41:27.149479 | ubuntu-noble | +## Auditd configuration 2026-06-15 04:41:27.149552 | ubuntu-noble | +### Modifications to audit configuration that occur while the audit collection functions are operating 2026-06-15 04:41:27.149695 | ubuntu-noble | +-w /etc/audit/ -p wa -k auditconfig 2026-06-15 04:41:27.149838 | ubuntu-noble | +-w /etc/libaudit.conf -p wa -k auditconfig 2026-06-15 04:41:27.149977 | ubuntu-noble | +-w /etc/audisp/ -p wa -k audispconfig 2026-06-15 04:41:27.150110 | ubuntu-noble | + 2026-06-15 04:41:27.150248 | ubuntu-noble | +## Monitor for use of audit management tools 2026-06-15 04:41:27.150400 | ubuntu-noble | +-w /sbin/auditctl -p x -k audittools 2026-06-15 04:41:27.150555 | ubuntu-noble | +-w /sbin/auditd -p x -k audittools 2026-06-15 04:41:27.150719 | ubuntu-noble | +-w /usr/sbin/auditd -p x -k audittools 2026-06-15 04:41:27.150861 | ubuntu-noble | +-w /usr/sbin/augenrules -p x -k audittools 2026-06-15 04:41:27.150990 | ubuntu-noble | + 2026-06-15 04:41:27.151128 | ubuntu-noble | +## Access to all audit trails 2026-06-15 04:41:27.151258 | ubuntu-noble | + 2026-06-15 04:41:27.151460 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/ausearch -F perm=x -k audittools 2026-06-15 04:41:27.151608 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aureport -F perm=x -k audittools 2026-06-15 04:41:27.151750 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aulast -F perm=x -k audittools 2026-06-15 04:41:27.151876 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aulastlogin -F perm=x -k audittools 2026-06-15 04:41:27.152002 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/auvirt -F perm=x -k audittools 2026-06-15 04:41:27.152116 | ubuntu-noble | + 2026-06-15 04:41:27.152237 | ubuntu-noble | +# Filters --------------------------------------------------------------------- 2026-06-15 04:41:27.152352 | ubuntu-noble | + 2026-06-15 04:41:27.152513 | ubuntu-noble | +### We put these early because audit is a first match wins system. 2026-06-15 04:41:27.152637 | ubuntu-noble | + 2026-06-15 04:41:27.152764 | ubuntu-noble | +## Ignore SELinux AVC records 2026-06-15 04:41:27.152888 | ubuntu-noble | +-a always,exclude -F msgtype=AVC 2026-06-15 04:41:27.153007 | ubuntu-noble | + 2026-06-15 04:41:27.153132 | ubuntu-noble | +## Ignore current working directory records 2026-06-15 04:41:27.153257 | ubuntu-noble | +-a always,exclude -F msgtype=CWD 2026-06-15 04:41:27.153393 | ubuntu-noble | + 2026-06-15 04:41:27.153540 | ubuntu-noble | +## Cron jobs fill the logs with stuff we normally don't want (works with SELinux) 2026-06-15 04:41:27.153669 | ubuntu-noble | +-a never,user -F subj_type=crond_t 2026-06-15 04:41:27.153793 | ubuntu-noble | +-a never,exit -F subj_type=crond_t 2026-06-15 04:41:27.153911 | ubuntu-noble | + 2026-06-15 04:41:27.154035 | ubuntu-noble | +## This prevents chrony from overwhelming the logs 2026-06-15 04:41:27.154164 | ubuntu-noble | +-a never,exit -F arch=b64 -S adjtimex -F auid=-1 -F uid=chrony -F subj_type=chronyd_t 2026-06-15 04:41:27.154280 | ubuntu-noble | + 2026-06-15 04:41:27.154457 | ubuntu-noble | +## This is not very interesting and wastes a lot of space if the server is public facing 2026-06-15 04:41:27.154598 | ubuntu-noble | +-a always,exclude -F msgtype=CRYPTO_KEY_USER 2026-06-15 04:41:27.154714 | ubuntu-noble | + 2026-06-15 04:41:27.154829 | ubuntu-noble | +## Open VM Tools 2026-06-15 04:41:27.154946 | ubuntu-noble | +-a exit,never -F arch=b64 -S all -F exe=/usr/bin/vmtoolsd 2026-06-15 04:41:27.155051 | ubuntu-noble | + 2026-06-15 04:41:27.155167 | ubuntu-noble | +## High Volume Event Filter (especially on Linux Workstations) 2026-06-15 04:41:27.155281 | ubuntu-noble | +-a never,exit -F arch=b64 -F dir=/dev/shm -k sharedmemaccess 2026-06-15 04:41:27.155424 | ubuntu-noble | +-a never,exit -F arch=b64 -F dir=/var/lock/lvm -k locklvm 2026-06-15 04:41:27.155540 | ubuntu-noble | + 2026-06-15 04:41:27.155649 | ubuntu-noble | +## FileBeat 2026-06-15 04:41:27.155764 | ubuntu-noble | +-a never,exit -F arch=b64 -F path=/opt/filebeat -k filebeat 2026-06-15 04:41:27.155869 | ubuntu-noble | + 2026-06-15 04:41:27.155981 | ubuntu-noble | +## More information on how to filter events 2026-06-15 04:41:27.156095 | ubuntu-noble | +### https://access.redhat.com/solutions/2482221 2026-06-15 04:41:27.156202 | ubuntu-noble | + 2026-06-15 04:41:27.156311 | ubuntu-noble | +# Rules ----------------------------------------------------------------------- 2026-06-15 04:41:27.156466 | ubuntu-noble | + 2026-06-15 04:41:27.156584 | ubuntu-noble | +## Kernel parameters 2026-06-15 04:41:27.156699 | ubuntu-noble | +-w /etc/sysctl.conf -p wa -k sysctl 2026-06-15 04:41:27.156810 | ubuntu-noble | +-w /etc/sysctl.d -p wa -k sysctl 2026-06-15 04:41:27.156916 | ubuntu-noble | + 2026-06-15 04:41:27.157028 | ubuntu-noble | +## Kernel module loading and unloading 2026-06-15 04:41:27.157144 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/insmod -k modules 2026-06-15 04:41:27.157261 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/modprobe -k modules 2026-06-15 04:41:27.157390 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/rmmod -k modules 2026-06-15 04:41:27.157525 | ubuntu-noble | +-a always,exit -F arch=b64 -S finit_module -S init_module -S delete_module -F auid!=-1 -k modules 2026-06-15 04:41:27.158442 | ubuntu-noble | + 2026-06-15 04:41:27.158455 | ubuntu-noble | +## Modprobe configuration 2026-06-15 04:41:27.158460 | ubuntu-noble | +-w /etc/modprobe.conf -p wa -k modprobe 2026-06-15 04:41:27.158464 | ubuntu-noble | +-w /etc/modprobe.d -p wa -k modprobe 2026-06-15 04:41:27.158468 | ubuntu-noble | + 2026-06-15 04:41:27.158471 | ubuntu-noble | +## KExec usage (all actions) 2026-06-15 04:41:27.158475 | ubuntu-noble | +-a always,exit -F arch=b64 -S kexec_load -k KEXEC 2026-06-15 04:41:27.158489 | ubuntu-noble | + 2026-06-15 04:41:27.158493 | ubuntu-noble | +## Special files 2026-06-15 04:41:27.158592 | ubuntu-noble | +-a always,exit -F arch=b64 -S mknod -S mknodat -k specialfiles 2026-06-15 04:41:27.158702 | ubuntu-noble | + 2026-06-15 04:41:27.158818 | ubuntu-noble | +## Mount operations (only attributable) 2026-06-15 04:41:27.158941 | ubuntu-noble | +-a always,exit -F arch=b64 -S mount -S umount2 -F auid!=-1 -k mount 2026-06-15 04:41:27.159048 | ubuntu-noble | + 2026-06-15 04:41:27.159161 | ubuntu-noble | +### NFS mount 2026-06-15 04:41:27.159284 | ubuntu-noble | +-a always,exit -F path=/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-15 04:41:27.159470 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-15 04:41:27.159595 | ubuntu-noble | + 2026-06-15 04:41:27.159712 | ubuntu-noble | +## Change swap (only attributable) 2026-06-15 04:41:27.159829 | ubuntu-noble | +-a always,exit -F arch=b64 -S swapon -S swapoff -F auid!=-1 -k swap 2026-06-15 04:41:27.159937 | ubuntu-noble | + 2026-06-15 04:41:27.160048 | ubuntu-noble | +## Time 2026-06-15 04:41:27.160167 | ubuntu-noble | +-a always,exit -F arch=b64 -F uid!=ntp -S adjtimex -S settimeofday -S clock_settime -k time 2026-06-15 04:41:27.160280 | ubuntu-noble | +### Local time zone 2026-06-15 04:41:27.160431 | ubuntu-noble | +-w /etc/localtime -p wa -k localtime 2026-06-15 04:41:27.160547 | ubuntu-noble | + 2026-06-15 04:41:27.160660 | ubuntu-noble | +## Stunnel 2026-06-15 04:41:27.160773 | ubuntu-noble | +-w /usr/sbin/stunnel -p x -k stunnel 2026-06-15 04:41:27.160883 | ubuntu-noble | +-w /usr/bin/stunnel -p x -k stunnel 2026-06-15 04:41:27.160990 | ubuntu-noble | + 2026-06-15 04:41:27.161103 | ubuntu-noble | +## Cron configuration & scheduled jobs 2026-06-15 04:41:27.161218 | ubuntu-noble | +-w /etc/cron.allow -p wa -k cron 2026-06-15 04:41:27.161329 | ubuntu-noble | +-w /etc/cron.deny -p wa -k cron 2026-06-15 04:41:27.161496 | ubuntu-noble | +-w /etc/cron.d/ -p wa -k cron 2026-06-15 04:41:27.161620 | ubuntu-noble | +-w /etc/cron.daily/ -p wa -k cron 2026-06-15 04:41:27.161733 | ubuntu-noble | +-w /etc/cron.hourly/ -p wa -k cron 2026-06-15 04:41:27.161847 | ubuntu-noble | +-w /etc/cron.monthly/ -p wa -k cron 2026-06-15 04:41:27.161962 | ubuntu-noble | +-w /etc/cron.weekly/ -p wa -k cron 2026-06-15 04:41:27.162075 | ubuntu-noble | +-w /etc/crontab -p wa -k cron 2026-06-15 04:41:27.162188 | ubuntu-noble | +-w /var/spool/cron/ -p wa -k cron 2026-06-15 04:41:27.162296 | ubuntu-noble | + 2026-06-15 04:41:27.162438 | ubuntu-noble | +## User, group, password databases 2026-06-15 04:41:27.162558 | ubuntu-noble | +-w /etc/group -p wa -k etcgroup 2026-06-15 04:41:27.162671 | ubuntu-noble | +-w /etc/passwd -p wa -k etcpasswd 2026-06-15 04:41:27.162784 | ubuntu-noble | +-w /etc/gshadow -k etcgroup 2026-06-15 04:41:27.162894 | ubuntu-noble | +-w /etc/shadow -k etcpasswd 2026-06-15 04:41:27.163007 | ubuntu-noble | +-w /etc/security/opasswd -k opasswd 2026-06-15 04:41:27.163113 | ubuntu-noble | + 2026-06-15 04:41:27.163224 | ubuntu-noble | +## Sudoers file changes 2026-06-15 04:41:27.163334 | ubuntu-noble | +-w /etc/sudoers -p wa -k actions 2026-06-15 04:41:27.163474 | ubuntu-noble | +-w /etc/sudoers.d/ -p wa -k actions 2026-06-15 04:41:27.163585 | ubuntu-noble | + 2026-06-15 04:41:27.163696 | ubuntu-noble | +## Passwd 2026-06-15 04:41:27.163812 | ubuntu-noble | +-w /usr/bin/passwd -p x -k passwd_modification 2026-06-15 04:41:27.163917 | ubuntu-noble | + 2026-06-15 04:41:27.164030 | ubuntu-noble | +## Tools to change group identifiers 2026-06-15 04:41:27.164144 | ubuntu-noble | +-w /usr/sbin/groupadd -p x -k group_modification 2026-06-15 04:41:27.164258 | ubuntu-noble | +-w /usr/sbin/groupmod -p x -k group_modification 2026-06-15 04:41:27.164406 | ubuntu-noble | +-w /usr/sbin/addgroup -p x -k group_modification 2026-06-15 04:41:27.165474 | ubuntu-noble | +-w /usr/sbin/useradd -p x -k user_modification 2026-06-15 04:41:27.165494 | ubuntu-noble | +-w /usr/sbin/userdel -p x -k user_modification 2026-06-15 04:41:27.165498 | ubuntu-noble | +-w /usr/sbin/usermod -p x -k user_modification 2026-06-15 04:41:27.165502 | ubuntu-noble | +-w /usr/sbin/adduser -p x -k user_modification 2026-06-15 04:41:27.165505 | ubuntu-noble | + 2026-06-15 04:41:27.165509 | ubuntu-noble | +## Login configuration and information 2026-06-15 04:41:27.165513 | ubuntu-noble | +-w /etc/login.defs -p wa -k login 2026-06-15 04:41:27.165517 | ubuntu-noble | +-w /etc/securetty -p wa -k login 2026-06-15 04:41:27.165520 | ubuntu-noble | +-w /var/log/faillog -p wa -k login 2026-06-15 04:41:27.165618 | ubuntu-noble | +-w /var/log/lastlog -p wa -k login 2026-06-15 04:41:27.165733 | ubuntu-noble | +-w /var/log/tallylog -p wa -k login 2026-06-15 04:41:27.165841 | ubuntu-noble | + 2026-06-15 04:41:27.165952 | ubuntu-noble | +## Network Environment 2026-06-15 04:41:27.166064 | ubuntu-noble | +### Changes to hostname 2026-06-15 04:41:27.166194 | ubuntu-noble | +-a always,exit -F arch=b64 -S sethostname -S setdomainname -k network_modifications 2026-06-15 04:41:27.166301 | ubuntu-noble | + 2026-06-15 04:41:27.166454 | ubuntu-noble | +### Detect Remote Shell Use 2026-06-15 04:41:27.166579 | ubuntu-noble | +-a always,exit -F arch=b64 -F exe=/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-15 04:41:27.166695 | ubuntu-noble | +-a always,exit -F arch=b64 -F exe=/usr/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-15 04:41:27.166800 | ubuntu-noble | + 2026-06-15 04:41:27.166917 | ubuntu-noble | +### Successful IPv4 Connections 2026-06-15 04:41:27.167035 | ubuntu-noble | +-a always,exit -F arch=b64 -S connect -F a2=16 -F success=1 -F key=network_connect_4 2026-06-15 04:41:27.167139 | ubuntu-noble | + 2026-06-15 04:41:27.167252 | ubuntu-noble | +### Successful IPv6 Connections 2026-06-15 04:41:27.167401 | ubuntu-noble | +-a always,exit -F arch=b64 -S connect -F a2=28 -F success=1 -F key=network_connect_6 2026-06-15 04:41:27.167532 | ubuntu-noble | + 2026-06-15 04:41:27.167652 | ubuntu-noble | +### Changes to other files 2026-06-15 04:41:27.167768 | ubuntu-noble | +-w /etc/hosts -p wa -k network_modifications 2026-06-15 04:41:27.167883 | ubuntu-noble | +-w /etc/sysconfig/network -p wa -k network_modifications 2026-06-15 04:41:27.167997 | ubuntu-noble | +-w /etc/sysconfig/network-scripts -p w -k network_modifications 2026-06-15 04:41:27.168107 | ubuntu-noble | +-w /etc/network/ -p wa -k network 2026-06-15 04:41:27.168246 | ubuntu-noble | +-a always,exit -F dir=/etc/NetworkManager/ -F perm=wa -k network_modifications 2026-06-15 04:41:27.168359 | ubuntu-noble | + 2026-06-15 04:41:27.168514 | ubuntu-noble | +### Changes to issue 2026-06-15 04:41:27.168631 | ubuntu-noble | +-w /etc/issue -p wa -k etcissue 2026-06-15 04:41:27.168748 | ubuntu-noble | +-w /etc/issue.net -p wa -k etcissue 2026-06-15 04:41:27.168857 | ubuntu-noble | + 2026-06-15 04:41:27.168970 | ubuntu-noble | +## System startup scripts 2026-06-15 04:41:27.169081 | ubuntu-noble | +-w /etc/inittab -p wa -k init 2026-06-15 04:41:27.169192 | ubuntu-noble | +-w /etc/init.d/ -p wa -k init 2026-06-15 04:41:27.169304 | ubuntu-noble | +-w /etc/init/ -p wa -k init 2026-06-15 04:41:27.169440 | ubuntu-noble | + 2026-06-15 04:41:27.169566 | ubuntu-noble | +## Library search paths 2026-06-15 04:41:27.169679 | ubuntu-noble | +-w /etc/ld.so.conf -p wa -k libpath 2026-06-15 04:41:27.169791 | ubuntu-noble | +-w /etc/ld.so.conf.d -p wa -k libpath 2026-06-15 04:41:27.169897 | ubuntu-noble | + 2026-06-15 04:41:27.170014 | ubuntu-noble | +## Systemwide library preloads (LD_PRELOAD) 2026-06-15 04:41:27.170128 | ubuntu-noble | +-w /etc/ld.so.preload -p wa -k systemwide_preloads 2026-06-15 04:41:27.170234 | ubuntu-noble | + 2026-06-15 04:41:27.170345 | ubuntu-noble | +## Pam configuration 2026-06-15 04:41:27.170487 | ubuntu-noble | +-w /etc/pam.d/ -p wa -k pam 2026-06-15 04:41:27.170607 | ubuntu-noble | +-w /etc/security/limits.conf -p wa -k pam 2026-06-15 04:41:27.170722 | ubuntu-noble | +-w /etc/security/limits.d -p wa -k pam 2026-06-15 04:41:27.170836 | ubuntu-noble | +-w /etc/security/pam_env.conf -p wa -k pam 2026-06-15 04:41:27.170949 | ubuntu-noble | +-w /etc/security/namespace.conf -p wa -k pam 2026-06-15 04:41:27.171063 | ubuntu-noble | +-w /etc/security/namespace.d -p wa -k pam 2026-06-15 04:41:27.171176 | ubuntu-noble | +-w /etc/security/namespace.init -p wa -k pam 2026-06-15 04:41:27.171284 | ubuntu-noble | + 2026-06-15 04:41:27.171449 | ubuntu-noble | +## Mail configuration 2026-06-15 04:41:27.171572 | ubuntu-noble | +-w /etc/aliases -p wa -k mail 2026-06-15 04:41:27.171686 | ubuntu-noble | +-w /etc/postfix/ -p wa -k mail 2026-06-15 04:41:27.171800 | ubuntu-noble | +-w /etc/exim4/ -p wa -k mail 2026-06-15 04:41:27.172426 | ubuntu-noble | + 2026-06-15 04:41:27.172438 | ubuntu-noble | +## SSH configuration 2026-06-15 04:41:27.172442 | ubuntu-noble | +-w /etc/ssh/sshd_config -k sshd 2026-06-15 04:41:27.172445 | ubuntu-noble | +-w /etc/ssh/sshd_config.d -k sshd 2026-06-15 04:41:27.172449 | ubuntu-noble | + 2026-06-15 04:41:27.172453 | ubuntu-noble | +## root ssh key tampering 2026-06-15 04:41:27.172525 | ubuntu-noble | +-w /root/.ssh -p wa -k rootkey 2026-06-15 04:41:27.172633 | ubuntu-noble | + 2026-06-15 04:41:27.172745 | ubuntu-noble | +# Systemd 2026-06-15 04:41:27.172859 | ubuntu-noble | +-w /bin/systemctl -p x -k systemd 2026-06-15 04:41:27.172968 | ubuntu-noble | +-w /etc/systemd/ -p wa -k systemd 2026-06-15 04:41:27.173081 | ubuntu-noble | +-w /usr/lib/systemd -p wa -k systemd 2026-06-15 04:41:27.173187 | ubuntu-noble | + 2026-06-15 04:41:27.173303 | ubuntu-noble | +## https://systemd.network/systemd.generator.html 2026-06-15 04:41:27.173446 | ubuntu-noble | +-w /etc/systemd/system-generators/ -p wa -k systemd_generator 2026-06-15 04:41:27.173566 | ubuntu-noble | +-w /usr/local/lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-15 04:41:27.173691 | ubuntu-noble | +-w /usr/lib/systemd/system-generators -p wa -k systemd_generator 2026-06-15 04:41:27.173807 | ubuntu-noble | + 2026-06-15 04:41:27.173921 | ubuntu-noble | +-w /etc/systemd/user-generators/ -p wa -k systemd_generator 2026-06-15 04:41:27.174036 | ubuntu-noble | +-w /usr/local/lib/systemd/user-generators/ -p wa -k systemd_generator 2026-06-15 04:41:27.174152 | ubuntu-noble | +-w /lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-15 04:41:27.174260 | ubuntu-noble | + 2026-06-15 04:41:27.174429 | ubuntu-noble | +## SELinux events that modify the system's Mandatory Access Controls (MAC) 2026-06-15 04:41:27.174555 | ubuntu-noble | +-w /etc/selinux/ -p wa -k mac_policy 2026-06-15 04:41:27.174661 | ubuntu-noble | + 2026-06-15 04:41:27.174771 | ubuntu-noble | +## Critical elements access failures 2026-06-15 04:41:27.174889 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/etc -F success=0 -k unauthedfileaccess 2026-06-15 04:41:27.175006 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/bin -F success=0 -k unauthedfileaccess 2026-06-15 04:41:27.175123 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/sbin -F success=0 -k unauthedfileaccess 2026-06-15 04:41:27.175242 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/usr/bin -F success=0 -k unauthedfileaccess 2026-06-15 04:41:27.175358 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/usr/sbin -F success=0 -k unauthedfileaccess 2026-06-15 04:41:27.175506 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/var -F success=0 -k unauthedfileaccess 2026-06-15 04:41:27.175627 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/home -F success=0 -k unauthedfileaccess 2026-06-15 04:41:27.175744 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/srv -F success=0 -k unauthedfileaccess 2026-06-15 04:41:27.175852 | ubuntu-noble | + 2026-06-15 04:41:27.175967 | ubuntu-noble | +## Process ID change (switching accounts) applications 2026-06-15 04:41:27.176081 | ubuntu-noble | +-w /bin/su -p x -k priv_esc 2026-06-15 04:41:27.176198 | ubuntu-noble | +-w /usr/bin/sudo -p x -k priv_esc 2026-06-15 04:41:27.176306 | ubuntu-noble | + 2026-06-15 04:41:27.177428 | ubuntu-noble | +## Power state 2026-06-15 04:41:27.177442 | ubuntu-noble | +-w /sbin/shutdown -p x -k power 2026-06-15 04:41:27.177446 | ubuntu-noble | +-w /sbin/poweroff -p x -k power 2026-06-15 04:41:27.177450 | ubuntu-noble | +-w /sbin/reboot -p x -k power 2026-06-15 04:41:27.177453 | ubuntu-noble | +-w /sbin/halt -p x -k power 2026-06-15 04:41:27.177457 | ubuntu-noble | + 2026-06-15 04:41:27.177461 | ubuntu-noble | +## Session initiation information 2026-06-15 04:41:27.177465 | ubuntu-noble | +-w /var/run/utmp -p wa -k session 2026-06-15 04:41:27.177469 | ubuntu-noble | +-w /var/log/btmp -p wa -k session 2026-06-15 04:41:27.177472 | ubuntu-noble | +-w /var/log/wtmp -p wa -k session 2026-06-15 04:41:27.177476 | ubuntu-noble | + 2026-06-15 04:41:27.177597 | ubuntu-noble | +## Discretionary Access Control (DAC) modifications 2026-06-15 04:41:27.177717 | ubuntu-noble | +-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-15 04:41:27.177838 | ubuntu-noble | +-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-15 04:41:27.177957 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-15 04:41:27.178075 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-15 04:41:27.178192 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-15 04:41:27.178310 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-15 04:41:27.178484 | ubuntu-noble | +-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-15 04:41:27.178619 | ubuntu-noble | +-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-15 04:41:27.178745 | ubuntu-noble | +-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-15 04:41:27.178865 | ubuntu-noble | +-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-15 04:41:27.178982 | ubuntu-noble | +-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-15 04:41:27.179100 | ubuntu-noble | +-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-15 04:41:27.179217 | ubuntu-noble | +-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-15 04:41:27.179322 | ubuntu-noble | + 2026-06-15 04:41:27.179468 | ubuntu-noble | +# Special Rules --------------------------------------------------------------- 2026-06-15 04:41:27.179583 | ubuntu-noble | + 2026-06-15 04:41:27.179708 | ubuntu-noble | +## Reconnaissance 2026-06-15 04:41:27.179822 | ubuntu-noble | +-w /usr/bin/whoami -p x -k recon 2026-06-15 04:41:27.179933 | ubuntu-noble | +-w /usr/bin/id -p x -k recon 2026-06-15 04:41:27.180048 | ubuntu-noble | +-w /bin/hostname -p x -k recon 2026-06-15 04:41:27.180161 | ubuntu-noble | +-w /bin/uname -p x -k recon 2026-06-15 04:41:27.180274 | ubuntu-noble | +-w /etc/issue -p r -k recon 2026-06-15 04:41:27.180403 | ubuntu-noble | +-w /etc/hostname -p r -k recon 2026-06-15 04:41:27.180529 | ubuntu-noble | + 2026-06-15 04:41:27.180646 | ubuntu-noble | +## Suspicious activity 2026-06-15 04:41:27.180761 | ubuntu-noble | +-w /usr/bin/wget -p x -k susp_activity 2026-06-15 04:41:27.180875 | ubuntu-noble | +-w /usr/bin/curl -p x -k susp_activity 2026-06-15 04:41:27.180990 | ubuntu-noble | +-w /usr/bin/base64 -p x -k susp_activity 2026-06-15 04:41:27.181103 | ubuntu-noble | +-w /bin/nc -p x -k susp_activity 2026-06-15 04:41:27.181214 | ubuntu-noble | +-w /bin/netcat -p x -k susp_activity 2026-06-15 04:41:27.181331 | ubuntu-noble | +-w /usr/bin/ncat -p x -k susp_activity 2026-06-15 04:41:27.181476 | ubuntu-noble | +-w /usr/bin/ss -p x -k susp_activity 2026-06-15 04:41:27.181601 | ubuntu-noble | +-w /usr/bin/netstat -p x -k susp_activity 2026-06-15 04:41:27.181715 | ubuntu-noble | +-w /usr/bin/ssh -p x -k susp_activity 2026-06-15 04:41:27.181831 | ubuntu-noble | +-w /usr/bin/scp -p x -k susp_activity 2026-06-15 04:41:27.181944 | ubuntu-noble | +-w /usr/bin/sftp -p x -k susp_activity 2026-06-15 04:41:27.182059 | ubuntu-noble | +-w /usr/bin/ftp -p x -k susp_activity 2026-06-15 04:41:27.182260 | ubuntu-noble | +-w /usr/bin/socat -p x -k susp_activity 2026-06-15 04:41:27.182442 | ubuntu-noble | +-w /usr/bin/wireshark -p x -k susp_activity 2026-06-15 04:41:27.182582 | ubuntu-noble | +-w /usr/bin/tshark -p x -k susp_activity 2026-06-15 04:41:27.182699 | ubuntu-noble | +-w /usr/bin/rawshark -p x -k susp_activity 2026-06-15 04:41:27.182814 | ubuntu-noble | +-w /usr/bin/rdesktop -p x -k susp_activity 2026-06-15 04:41:27.182930 | ubuntu-noble | +-w /usr/local/bin/rdesktop -p x -k susp_activity 2026-06-15 04:41:27.183046 | ubuntu-noble | +-w /usr/bin/wlfreerdp -p x -k susp_activity 2026-06-15 04:41:27.183160 | ubuntu-noble | +-w /usr/bin/xfreerdp -p x -k susp_activity 2026-06-15 04:41:27.183273 | ubuntu-noble | +-w /usr/local/bin/xfreerdp -p x -k susp_activity 2026-06-15 04:41:27.183403 | ubuntu-noble | +-w /usr/bin/nmap -p x -k susp_activity 2026-06-15 04:41:27.183530 | ubuntu-noble | + 2026-06-15 04:41:27.183647 | ubuntu-noble | +## sssd 2026-06-15 04:41:27.183772 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/p11_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-15 04:41:27.183897 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/krb5_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-15 04:41:27.184017 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/ldap_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-15 04:41:27.184137 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/selinux_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-15 04:41:27.184255 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/proxy_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-15 04:41:27.184375 | ubuntu-noble | + 2026-06-15 04:41:27.184504 | ubuntu-noble | +## T1002 Data Compressed 2026-06-15 04:41:27.186427 | ubuntu-noble | + 2026-06-15 04:41:27.186442 | ubuntu-noble | +-w /usr/bin/zip -p x -k Data_Compressed 2026-06-15 04:41:27.186447 | ubuntu-noble | +-w /usr/bin/gzip -p x -k Data_Compressed 2026-06-15 04:41:27.186450 | ubuntu-noble | +-w /usr/bin/tar -p x -k Data_Compressed 2026-06-15 04:41:27.186454 | ubuntu-noble | +-w /usr/bin/bzip2 -p x -k Data_Compressed 2026-06-15 04:41:27.186458 | ubuntu-noble | + 2026-06-15 04:41:27.186461 | ubuntu-noble | +-w /usr/bin/lzip -p x -k Data_Compressed 2026-06-15 04:41:27.186465 | ubuntu-noble | +-w /usr/local/bin/lzip -p x -k Data_Compressed 2026-06-15 04:41:27.186468 | ubuntu-noble | + 2026-06-15 04:41:27.186472 | ubuntu-noble | +-w /usr/bin/lz4 -p x -k Data_Compressed 2026-06-15 04:41:27.186475 | ubuntu-noble | +-w /usr/local/bin/lz4 -p x -k Data_Compressed 2026-06-15 04:41:27.186479 | ubuntu-noble | + 2026-06-15 04:41:27.186482 | ubuntu-noble | +-w /usr/bin/lzop -p x -k Data_Compressed 2026-06-15 04:41:27.186486 | ubuntu-noble | +-w /usr/local/bin/lzop -p x -k Data_Compressed 2026-06-15 04:41:27.186489 | ubuntu-noble | + 2026-06-15 04:41:27.186492 | ubuntu-noble | +-w /usr/bin/plzip -p x -k Data_Compressed 2026-06-15 04:41:27.186496 | ubuntu-noble | +-w /usr/local/bin/plzip -p x -k Data_Compressed 2026-06-15 04:41:27.186499 | ubuntu-noble | + 2026-06-15 04:41:27.186503 | ubuntu-noble | +-w /usr/bin/pbzip2 -p x -k Data_Compressed 2026-06-15 04:41:27.186551 | ubuntu-noble | +-w /usr/local/bin/pbzip2 -p x -k Data_Compressed 2026-06-15 04:41:27.186661 | ubuntu-noble | + 2026-06-15 04:41:27.186790 | ubuntu-noble | +-w /usr/bin/lbzip2 -p x -k Data_Compressed 2026-06-15 04:41:27.186905 | ubuntu-noble | +-w /usr/local/bin/lbzip2 -p x -k Data_Compressed 2026-06-15 04:41:27.187012 | ubuntu-noble | + 2026-06-15 04:41:27.187125 | ubuntu-noble | +-w /usr/bin/pixz -p x -k Data_Compressed 2026-06-15 04:41:27.187240 | ubuntu-noble | +-w /usr/local/bin/pixz -p x -k Data_Compressed 2026-06-15 04:41:27.187349 | ubuntu-noble | + 2026-06-15 04:41:27.187520 | ubuntu-noble | +-w /usr/bin/pigz -p x -k Data_Compressed 2026-06-15 04:41:27.187642 | ubuntu-noble | +-w /usr/local/bin/pigz -p x -k Data_Compressed 2026-06-15 04:41:27.187757 | ubuntu-noble | +-w /usr/bin/unpigz -p x -k Data_Compressed 2026-06-15 04:41:27.187871 | ubuntu-noble | +-w /usr/local/bin/unpigz -p x -k Data_Compressed 2026-06-15 04:41:27.187981 | ubuntu-noble | + 2026-06-15 04:41:27.188095 | ubuntu-noble | +-w /usr/bin/zstd -p x -k Data_Compressed 2026-06-15 04:41:27.188211 | ubuntu-noble | +-w /usr/local/bin/zstd -p x -k Data_Compressed 2026-06-15 04:41:27.188316 | ubuntu-noble | + 2026-06-15 04:41:27.188462 | ubuntu-noble | +## Added to catch netcat on Ubuntu 2026-06-15 04:41:27.188582 | ubuntu-noble | +-w /bin/nc.openbsd -p x -k susp_activity 2026-06-15 04:41:27.188697 | ubuntu-noble | +-w /bin/nc.traditional -p x -k susp_activity 2026-06-15 04:41:27.188802 | ubuntu-noble | + 2026-06-15 04:41:27.188917 | ubuntu-noble | +## Sbin suspicious activity 2026-06-15 04:41:27.189029 | ubuntu-noble | +-w /sbin/iptables -p x -k sbin_susp 2026-06-15 04:41:27.189142 | ubuntu-noble | +-w /sbin/ip6tables -p x -k sbin_susp 2026-06-15 04:41:27.189256 | ubuntu-noble | +-w /sbin/ifconfig -p x -k sbin_susp 2026-06-15 04:41:27.189400 | ubuntu-noble | +-w /usr/sbin/arptables -p x -k sbin_susp 2026-06-15 04:41:27.189534 | ubuntu-noble | +-w /usr/sbin/ebtables -p x -k sbin_susp 2026-06-15 04:41:27.189654 | ubuntu-noble | +-w /sbin/xtables-nft-multi -p x -k sbin_susp 2026-06-15 04:41:27.189768 | ubuntu-noble | +-w /usr/sbin/nft -p x -k sbin_susp 2026-06-15 04:41:27.189881 | ubuntu-noble | +-w /usr/sbin/tcpdump -p x -k sbin_susp 2026-06-15 04:41:27.189994 | ubuntu-noble | +-w /usr/sbin/traceroute -p x -k sbin_susp 2026-06-15 04:41:27.190104 | ubuntu-noble | +-w /usr/sbin/ufw -p x -k sbin_susp 2026-06-15 04:41:27.190208 | ubuntu-noble | + 2026-06-15 04:41:27.190318 | ubuntu-noble | +### kde4 2026-06-15 04:41:27.190470 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/kde4/kpac_dhcp_helper -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-15 04:41:27.190597 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/kde4/kdesud -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-15 04:41:27.190702 | ubuntu-noble | + 2026-06-15 04:41:27.190815 | ubuntu-noble | +## dbus-send invocation 2026-06-15 04:41:27.190933 | ubuntu-noble | +### may indicate privilege escalation CVE-2021-3560 2026-06-15 04:41:27.191045 | ubuntu-noble | +-w /usr/bin/dbus-send -p x -k dbus_send 2026-06-15 04:41:27.191158 | ubuntu-noble | +-w /usr/bin/gdbus -p x -k gdubs_call 2026-06-15 04:41:27.191265 | ubuntu-noble | + 2026-06-15 04:41:27.191393 | ubuntu-noble | +## pkexec invocation 2026-06-15 04:41:27.191524 | ubuntu-noble | +### may indicate privilege escalation CVE-2021-4034 2026-06-15 04:41:27.191640 | ubuntu-noble | +-w /usr/bin/pkexec -p x -k pkexec 2026-06-15 04:41:27.191748 | ubuntu-noble | + 2026-06-15 04:41:27.191860 | ubuntu-noble | +## Suspicious shells 2026-06-15 04:41:27.191972 | ubuntu-noble | +-w /bin/ash -p x -k susp_shell 2026-06-15 04:41:27.192084 | ubuntu-noble | +-w /bin/csh -p x -k susp_shell 2026-06-15 04:41:27.192195 | ubuntu-noble | +-w /bin/fish -p x -k susp_shell 2026-06-15 04:41:27.192308 | ubuntu-noble | +-w /bin/tcsh -p x -k susp_shell 2026-06-15 04:41:27.192448 | ubuntu-noble | +-w /bin/tclsh -p x -k susp_shell 2026-06-15 04:41:27.192566 | ubuntu-noble | +-w /bin/xonsh -p x -k susp_shell 2026-06-15 04:41:27.192680 | ubuntu-noble | +-w /usr/local/bin/xonsh -p x -k susp_shell 2026-06-15 04:41:27.192792 | ubuntu-noble | +-w /bin/open -p x -k susp_shell 2026-06-15 04:41:27.192904 | ubuntu-noble | +-w /bin/rbash -p x -k susp_shell 2026-06-15 04:41:27.193012 | ubuntu-noble | + 2026-06-15 04:41:27.193125 | ubuntu-noble | +# Web Server Actvity 2026-06-15 04:41:27.193245 | ubuntu-noble | +## Change the number "33" to the ID of your WebServer user. Default: www-data:x:33:33 2026-06-15 04:41:27.193361 | ubuntu-noble | +-a always,exit -F arch=b64 -S execve -F euid=33 -k detect_execve_www 2026-06-15 04:41:27.193515 | ubuntu-noble | + 2026-06-15 04:41:27.193632 | ubuntu-noble | +### https://clustershell.readthedocs.io/ 2026-06-15 04:41:27.193747 | ubuntu-noble | +-w /bin/clush -p x -k susp_shell 2026-06-15 04:41:27.193873 | ubuntu-noble | +-w /usr/local/bin/clush -p x -k susp_shell 2026-06-15 04:41:27.193987 | ubuntu-noble | +-w /etc/clustershell/clush.conf -p x -k susp_shell 2026-06-15 04:41:27.194104 | ubuntu-noble | + 2026-06-15 04:41:27.194217 | ubuntu-noble | +### https://github.com/tmux/tmux 2026-06-15 04:41:27.194328 | ubuntu-noble | +-w /bin/tmux -p x -k susp_shell 2026-06-15 04:41:27.194470 | ubuntu-noble | +-w /usr/local/bin/tmux -p x -k susp_shell 2026-06-15 04:41:27.194580 | ubuntu-noble | + 2026-06-15 04:41:27.194694 | ubuntu-noble | +## Shell/profile configurations 2026-06-15 04:41:27.194806 | ubuntu-noble | +-w /etc/profile.d/ -p wa -k shell_profiles 2026-06-15 04:41:27.194921 | ubuntu-noble | +-w /etc/profile -p wa -k shell_profiles 2026-06-15 04:41:27.195032 | ubuntu-noble | +-w /etc/shells -p wa -k shell_profiles 2026-06-15 04:41:27.195144 | ubuntu-noble | +-w /etc/bashrc -p wa -k shell_profiles 2026-06-15 04:41:27.195257 | ubuntu-noble | +-w /etc/csh.cshrc -p wa -k shell_profiles 2026-06-15 04:41:27.195400 | ubuntu-noble | +-w /etc/csh.login -p wa -k shell_profiles 2026-06-15 04:41:27.195534 | ubuntu-noble | +-w /etc/fish/ -p wa -k shell_profiles 2026-06-15 04:41:27.195650 | ubuntu-noble | +-w /etc/zsh/ -p wa -k shell_profiles 2026-06-15 04:41:27.195756 | ubuntu-noble | + 2026-06-15 04:41:27.195866 | ubuntu-noble | +### https://github.com/xxh/xxh 2026-06-15 04:41:27.195977 | ubuntu-noble | +-w /usr/local/bin/xxh.bash -p x -k susp_shell 2026-06-15 04:41:27.196089 | ubuntu-noble | +-w /usr/local/bin/xxh.xsh -p x -k susp_shell 2026-06-15 04:41:27.196202 | ubuntu-noble | +-w /usr/local/bin/xxh.zsh -p x -k susp_shell 2026-06-15 04:41:27.196307 | ubuntu-noble | + 2026-06-15 04:41:27.196446 | ubuntu-noble | +## Injection 2026-06-15 04:41:27.196570 | ubuntu-noble | +### These rules watch for code injection by the ptrace facility. 2026-06-15 04:41:27.196689 | ubuntu-noble | +### This could indicate someone trying to do something bad or just debugging 2026-06-15 04:41:27.196807 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x4 -k code_injection 2026-06-15 04:41:27.196924 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x5 -k data_injection 2026-06-15 04:41:27.197040 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x6 -k register_injection 2026-06-15 04:41:27.197155 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -k tracing 2026-06-15 04:41:27.197263 | ubuntu-noble | + 2026-06-15 04:41:27.197407 | ubuntu-noble | +## Anonymous File Creation 2026-06-15 04:41:27.197544 | ubuntu-noble | +### These rules watch the use of memfd_create 2026-06-15 04:41:27.197662 | ubuntu-noble | +### "memfd_create" creates anonymous file and returns a file descriptor to access it 2026-06-15 04:41:27.197779 | ubuntu-noble | +### When combined with "fexecve" can be used to stealthily run binaries in memory without touching disk 2026-06-15 04:41:27.197899 | ubuntu-noble | +-a always,exit -F arch=b64 -S memfd_create -F key=anon_file_create 2026-06-15 04:41:27.198007 | ubuntu-noble | + 2026-06-15 04:41:27.198122 | ubuntu-noble | +## Privilege Abuse 2026-06-15 04:41:27.198243 | ubuntu-noble | +### The purpose of this rule is to detect when an admin may be abusing power by looking in user's home dir. 2026-06-15 04:41:27.198375 | ubuntu-noble | +-a always,exit -F dir=/home -F uid=0 -F auid>=1000 -F auid!=-1 -C auid!=obj_uid -k power_abuse 2026-06-15 04:41:27.198498 | ubuntu-noble | + 2026-06-15 04:41:27.198826 | ubuntu-noble | +# Socket Creations 2026-06-15 04:41:27.198957 | ubuntu-noble | +# will catch both IPv4 and IPv6 2026-06-15 04:41:27.199066 | ubuntu-noble | + 2026-06-15 04:41:27.199184 | ubuntu-noble | +-a always,exit -F arch=b32 -S socket -F a0=2 -k network_socket_created 2026-06-15 04:41:27.199301 | ubuntu-noble | +-a always,exit -F arch=b64 -S socket -F a0=2 -k network_socket_created 2026-06-15 04:41:27.199441 | ubuntu-noble | + 2026-06-15 04:41:27.199570 | ubuntu-noble | +-a always,exit -F arch=b32 -S socket -F a0=10 -k network_socket_created 2026-06-15 04:41:27.199685 | ubuntu-noble | +-a always,exit -F arch=b64 -S socket -F a0=10 -k network_socket_created 2026-06-15 04:41:27.199791 | ubuntu-noble | + 2026-06-15 04:41:27.200483 | ubuntu-noble | +# Software Management --------------------------------------------------------- 2026-06-15 04:41:27.200533 | ubuntu-noble | + 2026-06-15 04:41:27.200541 | ubuntu-noble | +# RPM (Redhat/CentOS) 2026-06-15 04:41:27.200547 | ubuntu-noble | +-w /usr/bin/rpm -p x -k software_mgmt 2026-06-15 04:41:27.200554 | ubuntu-noble | +-w /usr/bin/yum -p x -k software_mgmt 2026-06-15 04:41:27.200559 | ubuntu-noble | + 2026-06-15 04:41:27.200570 | ubuntu-noble | +# DNF (Fedora/RedHat 8/CentOS 8) 2026-06-15 04:41:27.200697 | ubuntu-noble | +-w /usr/bin/dnf -p x -k software_mgmt 2026-06-15 04:41:27.200705 | ubuntu-noble | + 2026-06-15 04:41:27.200805 | ubuntu-noble | +# YAST/Zypper/RPM (SuSE) 2026-06-15 04:41:27.200901 | ubuntu-noble | +-w /sbin/yast -p x -k software_mgmt 2026-06-15 04:41:27.200988 | ubuntu-noble | +-w /sbin/yast2 -p x -k software_mgmt 2026-06-15 04:41:27.201088 | ubuntu-noble | +-w /bin/rpm -p x -k software_mgmt 2026-06-15 04:41:27.201185 | ubuntu-noble | +-w /usr/bin/zypper -k software_mgmt 2026-06-15 04:41:27.201274 | ubuntu-noble | + 2026-06-15 04:41:27.201387 | ubuntu-noble | +# DPKG / APT-GET (Debian/Ubuntu) 2026-06-15 04:41:27.201801 | ubuntu-noble | +-w /usr/bin/dpkg -p x -k software_mgmt 2026-06-15 04:41:27.201821 | ubuntu-noble | +-w /usr/bin/apt -p x -k software_mgmt 2026-06-15 04:41:27.201828 | ubuntu-noble | +-w /usr/bin/apt-add-repository -p x -k software_mgmt 2026-06-15 04:41:27.201899 | ubuntu-noble | +-w /usr/bin/apt-get -p x -k software_mgmt 2026-06-15 04:41:27.202000 | ubuntu-noble | +-w /usr/bin/aptitude -p x -k software_mgmt 2026-06-15 04:41:27.202097 | ubuntu-noble | +-w /usr/bin/wajig -p x -k software_mgmt 2026-06-15 04:41:27.202195 | ubuntu-noble | +-w /usr/bin/snap -p x -k software_mgmt 2026-06-15 04:41:27.202289 | ubuntu-noble | + 2026-06-15 04:41:27.202404 | ubuntu-noble | +# PIP(3) (Python installs) 2026-06-15 04:41:27.202886 | ubuntu-noble | +-w /usr/bin/pip -p x -k third_party_software_mgmt 2026-06-15 04:41:27.202902 | ubuntu-noble | +-w /usr/local/bin/pip -p x -k third_party_software_mgmt 2026-06-15 04:41:27.202907 | ubuntu-noble | +-w /usr/bin/pip3 -p x -k third_party_software_mgmt 2026-06-15 04:41:27.202912 | ubuntu-noble | +-w /usr/local/bin/pip3 -p x -k third_party_software_mgmt 2026-06-15 04:41:27.202919 | ubuntu-noble | +-w /usr/bin/pipx -p x -k third_party_software_mgmt 2026-06-15 04:41:27.203020 | ubuntu-noble | +-w /usr/local/bin/pipx -p x -k third_party_software_mgmt 2026-06-15 04:41:27.203200 | ubuntu-noble | + 2026-06-15 04:41:27.203292 | ubuntu-noble | +# npm 2026-06-15 04:41:27.203458 | ubuntu-noble | +## T1072 third party software 2026-06-15 04:41:27.203515 | ubuntu-noble | +## https://www.npmjs.com 2026-06-15 04:41:27.203620 | ubuntu-noble | +## https://docs.npmjs.com/cli/v6/commands/npm-audit 2026-06-15 04:41:27.203724 | ubuntu-noble | +-w /usr/bin/npm -p x -k third_party_software_mgmt 2026-06-15 04:41:27.203816 | ubuntu-noble | + 2026-06-15 04:41:27.203965 | ubuntu-noble | +# Comprehensive Perl Archive Network (CPAN) (CPAN installs) 2026-06-15 04:41:27.204013 | ubuntu-noble | +## T1072 third party software 2026-06-15 04:41:27.204115 | ubuntu-noble | +## https://www.cpan.org 2026-06-15 04:41:27.204402 | ubuntu-noble | +-w /usr/bin/cpan -p x -k third_party_software_mgmt 2026-06-15 04:41:27.204440 | ubuntu-noble | + 2026-06-15 04:41:27.204448 | ubuntu-noble | +# Ruby (RubyGems installs) 2026-06-15 04:41:27.204552 | ubuntu-noble | +## T1072 third party software 2026-06-15 04:41:27.204650 | ubuntu-noble | +## https://rubygems.org 2026-06-15 04:41:27.204747 | ubuntu-noble | +-w /usr/bin/gem -p x -k third_party_software_mgmt 2026-06-15 04:41:27.204838 | ubuntu-noble | + 2026-06-15 04:41:27.204940 | ubuntu-noble | +# LuaRocks (Lua installs) 2026-06-15 04:41:27.205068 | ubuntu-noble | +## T1072 third party software 2026-06-15 04:41:27.205132 | ubuntu-noble | +## https://luarocks.org 2026-06-15 04:41:27.205231 | ubuntu-noble | +-w /usr/bin/luarocks -p x -k third_party_software_mgmt 2026-06-15 04:41:27.205319 | ubuntu-noble | + 2026-06-15 04:41:27.205447 | ubuntu-noble | +# Pacman (Arch Linux) 2026-06-15 04:41:27.205548 | ubuntu-noble | +## https://wiki.archlinux.org/title/Pacman 2026-06-15 04:41:27.205648 | ubuntu-noble | +## T1072 third party software 2026-06-15 04:41:27.205748 | ubuntu-noble | +-w /etc/pacman.conf -p x -k third_party_software_mgmt 2026-06-15 04:41:27.205849 | ubuntu-noble | +-w /etc/pacman.d -p x -k third_party_software_mgmt 2026-06-15 04:41:27.205943 | ubuntu-noble | + 2026-06-15 04:41:27.206045 | ubuntu-noble | +# Special Software ------------------------------------------------------------ 2026-06-15 04:41:27.206150 | ubuntu-noble | + 2026-06-15 04:41:27.206230 | ubuntu-noble | +## GDS specific secrets 2026-06-15 04:41:27.206327 | ubuntu-noble | +-w /etc/puppet/ssl -p wa -k puppet_ssl 2026-06-15 04:41:27.206490 | ubuntu-noble | + 2026-06-15 04:41:27.206548 | ubuntu-noble | +## IBM Bigfix BESClient 2026-06-15 04:41:27.206652 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/opt/BESClient -F success=0 -k soft_besclient 2026-06-15 04:41:27.206751 | ubuntu-noble | +-w /var/opt/BESClient/ -p wa -k soft_besclient 2026-06-15 04:41:27.206843 | ubuntu-noble | + 2026-06-15 04:41:27.206941 | ubuntu-noble | +## CHEF https://www.chef.io/chef/ 2026-06-15 04:41:27.207038 | ubuntu-noble | +-w /etc/chef -p wa -k soft_chef 2026-06-15 04:41:27.207131 | ubuntu-noble | + 2026-06-15 04:41:27.207227 | ubuntu-noble | +## Salt 2026-06-15 04:41:27.207324 | ubuntu-noble | +## https://saltproject.io/ 2026-06-15 04:41:27.208464 | ubuntu-noble | +## https://docs.saltproject.io/en/latest/ref/configuration/master.html 2026-06-15 04:41:27.208493 | ubuntu-noble | +-w /etc/salt -p wa -k soft_salt 2026-06-15 04:41:27.208498 | ubuntu-noble | +-w /usr/local/etc/salt -p wa -k soft_salt 2026-06-15 04:41:27.208503 | ubuntu-noble | + 2026-06-15 04:41:27.208507 | ubuntu-noble | +## Otter 2026-06-15 04:41:27.208511 | ubuntu-noble | +## https://inedo.com/otter 2026-06-15 04:41:27.208526 | ubuntu-noble | +-w /etc/otter -p wa -k soft_otter 2026-06-15 04:41:27.208530 | ubuntu-noble | + 2026-06-15 04:41:27.208534 | ubuntu-noble | +## T1081 Credentials In Files 2026-06-15 04:41:27.208542 | ubuntu-noble | +-w /usr/bin/grep -p x -k string_search 2026-06-15 04:41:27.208548 | ubuntu-noble | +-w /usr/bin/egrep -p x -k string_search 2026-06-15 04:41:27.208654 | ubuntu-noble | +-w /usr/bin/ugrep -p x -k string_search 2026-06-15 04:41:27.208741 | ubuntu-noble | +### macOS 2026-06-15 04:41:27.208840 | ubuntu-noble | +-w /usr/local/bin/grep -p x -k string_search 2026-06-15 04:41:27.208939 | ubuntu-noble | +-w /usr/local/bin/egrep -p x -k string_search 2026-06-15 04:41:27.209038 | ubuntu-noble | +-w /usr/local/bin/ugrep -p x -k string_search 2026-06-15 04:41:27.209129 | ubuntu-noble | + 2026-06-15 04:41:27.209228 | ubuntu-noble | +### https://github.com/tmbinc/bgrep 2026-06-15 04:41:27.209326 | ubuntu-noble | +-w /usr/bin/bgrep -p x -k string_search 2026-06-15 04:41:27.210238 | ubuntu-noble | +### macOS 2026-06-15 04:41:27.210262 | ubuntu-noble | +-w /usr/local/bin/bgrep -p x -k string_search 2026-06-15 04:41:27.210267 | ubuntu-noble | + 2026-06-15 04:41:27.210271 | ubuntu-noble | +### https://github.com/BurntSushi/ripgrep 2026-06-15 04:41:27.210275 | ubuntu-noble | +-w /usr/bin/rg -p x -k string_search 2026-06-15 04:41:27.210279 | ubuntu-noble | +### macOS 2026-06-15 04:41:27.210283 | ubuntu-noble | +-w /usr/local/bin/rg -p x -k string_search 2026-06-15 04:41:27.210287 | ubuntu-noble | + 2026-06-15 04:41:27.210293 | ubuntu-noble | +### https://github.com/awgn/cgrep 2026-06-15 04:41:27.210427 | ubuntu-noble | + 2026-06-15 04:41:27.210540 | ubuntu-noble | +-w /usr/bin/cgrep -p x -k string_search 2026-06-15 04:41:27.210636 | ubuntu-noble | +### macOS 2026-06-15 04:41:27.210735 | ubuntu-noble | +-w /usr/local/bin/cgrep -p x -k string_search 2026-06-15 04:41:27.210827 | ubuntu-noble | + 2026-06-15 04:41:27.210925 | ubuntu-noble | +### https://github.com/jpr5/ngrep 2026-06-15 04:41:27.211023 | ubuntu-noble | +-w /usr/bin/ngrep -p x -k string_search 2026-06-15 04:41:27.211116 | ubuntu-noble | +### macOS 2026-06-15 04:41:27.211214 | ubuntu-noble | +-w /usr/local/bin/ngrep -p x -k string_search 2026-06-15 04:41:27.211306 | ubuntu-noble | + 2026-06-15 04:41:27.211932 | ubuntu-noble | +### https://github.com/vrothberg/vgrep 2026-06-15 04:41:27.212078 | ubuntu-noble | +-w /usr/bin/vgrep -p x -k string_search 2026-06-15 04:41:27.212156 | ubuntu-noble | +### macOS 2026-06-15 04:41:27.212265 | ubuntu-noble | +-w /usr/local/bin/vgrep -p x -k string_search 2026-06-15 04:41:27.212382 | ubuntu-noble | + 2026-06-15 04:41:27.212528 | ubuntu-noble | +### https://github.com/monochromegane/the_platinum_searcher 2026-06-15 04:41:27.212630 | ubuntu-noble | +-w /usr/bin/pt -p x -k string_search 2026-06-15 04:41:27.212727 | ubuntu-noble | +### macOS 2026-06-15 04:41:27.212827 | ubuntu-noble | +-w /usr/local/bin/pt -p x -k string_search 2026-06-15 04:41:27.212922 | ubuntu-noble | + 2026-06-15 04:41:27.213023 | ubuntu-noble | +### https://github.com/gvansickle/ucg 2026-06-15 04:41:27.213124 | ubuntu-noble | +-w /usr/bin/ucg -p x -k string_search 2026-06-15 04:41:27.213217 | ubuntu-noble | +### macOS 2026-06-15 04:41:27.213319 | ubuntu-noble | +-w /usr/local/bin/ucg -p x -k string_search 2026-06-15 04:41:27.214995 | ubuntu-noble | + 2026-06-15 04:41:27.216358 | ubuntu-noble | +### https://github.com/ggreer/the_silver_searcher 2026-06-15 04:41:27.216443 | ubuntu-noble | +-w /usr/bin/ag -p x -k string_search 2026-06-15 04:41:27.216449 | ubuntu-noble | +### macOS 2026-06-15 04:41:27.216452 | ubuntu-noble | +-w /usr/local/bin/ag -p x -k string_search 2026-06-15 04:41:27.216456 | ubuntu-noble | + 2026-06-15 04:41:27.216460 | ubuntu-noble | +### https://github.com/beyondgrep/ack3 2026-06-15 04:41:27.216463 | ubuntu-noble | +### https://beyondgrep.com 2026-06-15 04:41:27.216467 | ubuntu-noble | +-w /usr/bin/ack -p x -k string_search 2026-06-15 04:41:27.216471 | ubuntu-noble | +-w /usr/local/bin/ack -p x -k string_search 2026-06-15 04:41:27.216474 | ubuntu-noble | +-w /usr/bin/semgrep -p x -k string_search 2026-06-15 04:41:27.216478 | ubuntu-noble | +### macOS 2026-06-15 04:41:27.216826 | ubuntu-noble | +-w /usr/local/bin/semgrep -p x -k string_search 2026-06-15 04:41:27.216982 | ubuntu-noble | + 2026-06-15 04:41:27.217074 | ubuntu-noble | +## Docker 2026-06-15 04:41:27.217187 | ubuntu-noble | +-w /usr/bin/dockerd -k docker 2026-06-15 04:41:27.217274 | ubuntu-noble | +-w /usr/bin/docker -k docker 2026-06-15 04:41:27.217389 | ubuntu-noble | +-w /usr/bin/docker-containerd -k docker 2026-06-15 04:41:27.218212 | ubuntu-noble | +-w /usr/bin/docker-runc -k docker 2026-06-15 04:41:27.218247 | ubuntu-noble | +-w /var/lib/docker -p wa -k docker 2026-06-15 04:41:27.218252 | ubuntu-noble | +-w /etc/docker -k docker 2026-06-15 04:41:27.218256 | ubuntu-noble | +-w /etc/sysconfig/docker -k docker 2026-06-15 04:41:27.218259 | ubuntu-noble | +-w /etc/sysconfig/docker-storage -k docker 2026-06-15 04:41:27.218263 | ubuntu-noble | +-w /usr/lib/systemd/system/docker.service -k docker 2026-06-15 04:41:27.218275 | ubuntu-noble | +-w /usr/lib/systemd/system/docker.socket -k docker 2026-06-15 04:41:27.218282 | ubuntu-noble | + 2026-06-15 04:41:27.218343 | ubuntu-noble | +## Virtualization stuff 2026-06-15 04:41:27.218514 | ubuntu-noble | +-w /usr/bin/qemu-system-x86_64 -p x -k qemu-system-x86_64 2026-06-15 04:41:27.218610 | ubuntu-noble | +-w /usr/bin/qemu-img -p x -k qemu-img 2026-06-15 04:41:27.218704 | ubuntu-noble | +-w /usr/bin/qemu-kvm -p x -k qemu-kvm 2026-06-15 04:41:27.218796 | ubuntu-noble | +-w /usr/bin/qemu -p x -k qemu 2026-06-15 04:41:27.218894 | ubuntu-noble | +-w /usr/bin/virtualbox -p x -k virtualbox 2026-06-15 04:41:27.218995 | ubuntu-noble | +-w /usr/bin/virt-manager -p x -k virt-manager 2026-06-15 04:41:27.219102 | ubuntu-noble | +-w /usr/bin/VBoxManage -p x -k VBoxManage 2026-06-15 04:41:27.219195 | ubuntu-noble | + 2026-06-15 04:41:27.219297 | ubuntu-noble | +#### VirtualBox on macOS 2026-06-15 04:41:27.219506 | ubuntu-noble | + 2026-06-15 04:41:27.219558 | ubuntu-noble | +-w /usr/local/bin/VirtualBox -p x -k virt_tool 2026-06-15 04:41:27.219660 | ubuntu-noble | +-w /usr/local/bin/VirtualBoxVM -p x -k virt_tool 2026-06-15 04:41:27.219770 | ubuntu-noble | +-w /usr/local/bin/VBoxManage -p x -k virt_tool 2026-06-15 04:41:27.219877 | ubuntu-noble | +-w /usr/local/bin/VBoxVRDP -p x -k virt_tool 2026-06-15 04:41:27.219978 | ubuntu-noble | +-w /usr/local/bin/VBoxHeadless -p x -k virt_tool 2026-06-15 04:41:27.220077 | ubuntu-noble | +-w /usr/local/bin/vboxwebsrv -p x -k virt_tool 2026-06-15 04:41:27.220187 | ubuntu-noble | +-w /usr/local/bin/VBoxBugReport -p x -k virt_tool 2026-06-15 04:41:27.220311 | ubuntu-noble | +-w /usr/local/bin/VBoxBalloonCtrl -p x -k virt_tool 2026-06-15 04:41:27.220434 | ubuntu-noble | +-w /usr/local/bin/VBoxAutostart -p x -k virt_tool 2026-06-15 04:41:27.220535 | ubuntu-noble | +-w /usr/local/bin/VBoxDTrace -p x -k virt_tool 2026-06-15 04:41:27.220635 | ubuntu-noble | +-w /usr/local/bin/vbox-img -p x -k virt_tool 2026-06-15 04:41:27.220741 | ubuntu-noble | +-w /Library/LaunchDaemons/org.virtualbox.startup.plist -p x -k virt_tool 2026-06-15 04:41:27.220844 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/LaunchDaemons/ -p x -k virt_tool 2026-06-15 04:41:27.220944 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxDrv.kext/ -p x -k virt_tool 2026-06-15 04:41:27.221043 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxUSB.kext/ -p x -k virt_tool 2026-06-15 04:41:27.221145 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxNetFlt.kext/ -p x -k virt_tool 2026-06-15 04:41:27.221246 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxNetAdp.kext/ -p x -k virt_tool 2026-06-15 04:41:27.221340 | ubuntu-noble | + 2026-06-15 04:41:27.221478 | ubuntu-noble | +### Parallels Desktop on macOS 2026-06-15 04:41:27.221570 | ubuntu-noble | + 2026-06-15 04:41:27.221673 | ubuntu-noble | +-w /usr/local/bin/prl_convert -p x -k virt_tool 2026-06-15 04:41:27.221771 | ubuntu-noble | +-w /usr/local/bin/prl_disk_tool -p x -k virt_tool 2026-06-15 04:41:27.221941 | ubuntu-noble | +-w /usr/local/bin/prl_perf_ctl -p x -k virt_tool 2026-06-15 04:41:27.222043 | ubuntu-noble | +-w /usr/local/bin/prlcore2dmp -p x -k virt_tool 2026-06-15 04:41:27.222142 | ubuntu-noble | +-w /usr/local/bin/prlctl -p x -k virt_tool 2026-06-15 04:41:27.222240 | ubuntu-noble | +-w /usr/local/bin/prlexec -p x -k virt_tool 2026-06-15 04:41:27.222359 | ubuntu-noble | +-w /usr/local/bin/prlsrvctl -p x -k virt_tool 2026-06-15 04:41:27.222505 | ubuntu-noble | +-w /Library/Preferences/Parallels -p x -k virt_tool 2026-06-15 04:41:27.222596 | ubuntu-noble | + 2026-06-15 04:41:27.222692 | ubuntu-noble | +### qemu on macOS 2026-06-15 04:41:27.222786 | ubuntu-noble | + 2026-06-15 04:41:27.222887 | ubuntu-noble | +-w /usr/local/bin/qemu-edid -p x -k virt_tool 2026-06-15 04:41:27.223000 | ubuntu-noble | +-w /usr/local/bin/qemu-img -p x -k virt_tool 2026-06-15 04:41:27.223101 | ubuntu-noble | +-w /usr/local/bin/qemu-io -p x -k virt_tool 2026-06-15 04:41:27.223200 | ubuntu-noble | +-w /usr/local/bin/qemu-nbd -p x -k virt_tool 2026-06-15 04:41:27.223299 | ubuntu-noble | +-w /usr/local/bin/qemu-system-x86_64 -p x -k virt_tool 2026-06-15 04:41:27.223447 | ubuntu-noble | + 2026-06-15 04:41:27.223548 | ubuntu-noble | +## Kubelet 2026-06-15 04:41:27.223645 | ubuntu-noble | +-w /usr/bin/kubelet -k kubelet 2026-06-15 04:41:27.223740 | ubuntu-noble | + 2026-06-15 04:41:27.224480 | ubuntu-noble | +# ipc system call 2026-06-15 04:41:27.224502 | ubuntu-noble | +# /usr/include/linux/ipc.h 2026-06-15 04:41:27.224506 | ubuntu-noble | + 2026-06-15 04:41:27.224509 | ubuntu-noble | +## msgctl 2026-06-15 04:41:27.224513 | ubuntu-noble | +#-a always,exit -S ipc -F a0=14 -k Inter-Process_Communication 2026-06-15 04:41:27.224517 | ubuntu-noble | +## msgget 2026-06-15 04:41:27.224521 | ubuntu-noble | +#-a always,exit -S ipc -F a0=13 -k Inter-Process_Communication 2026-06-15 04:41:27.224538 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2026-06-15 04:41:27.224642 | ubuntu-noble | +-a always,exit -F arch=b64 -S msgctl -k Inter-Process_Communication 2026-06-15 04:41:27.224744 | ubuntu-noble | +-a always,exit -F arch=b64 -S msgget -k Inter-Process_Communication 2026-06-15 04:41:27.224834 | ubuntu-noble | + 2026-06-15 04:41:27.224929 | ubuntu-noble | +## semctl 2026-06-15 04:41:27.225034 | ubuntu-noble | +#-a always,exit -S ipc -F a0=3 -k Inter-Process_Communication 2026-06-15 04:41:27.225130 | ubuntu-noble | +## semget 2026-06-15 04:41:27.225249 | ubuntu-noble | +#-a always,exit -S ipc -F a0=2 -k Inter-Process_Communication 2026-06-15 04:41:27.225346 | ubuntu-noble | +## semop 2026-06-15 04:41:27.225493 | ubuntu-noble | +#-a always,exit -S ipc -F a0=1 -k Inter-Process_Communication 2026-06-15 04:41:27.225585 | ubuntu-noble | +## semtimedop 2026-06-15 04:41:27.225686 | ubuntu-noble | +#-a always,exit -S ipc -F a0=4 -k Inter-Process_Communication 2026-06-15 04:41:27.225785 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2026-06-15 04:41:27.225887 | ubuntu-noble | +-a always,exit -F arch=b64 -S semctl -k Inter-Process_Communication 2026-06-15 04:41:27.226003 | ubuntu-noble | +-a always,exit -F arch=b64 -S semget -k Inter-Process_Communication 2026-06-15 04:41:27.226089 | ubuntu-noble | +-a always,exit -F arch=b64 -S semop -k Inter-Process_Communication 2026-06-15 04:41:27.226191 | ubuntu-noble | +-a always,exit -F arch=b64 -S semtimedop -k Inter-Process_Communication 2026-06-15 04:41:27.226283 | ubuntu-noble | + 2026-06-15 04:41:27.226434 | ubuntu-noble | +## shmctl 2026-06-15 04:41:27.226535 | ubuntu-noble | +#-a always,exit -S ipc -F a0=24 -k Inter-Process_Communication 2026-06-15 04:41:27.226626 | ubuntu-noble | +## shmget 2026-06-15 04:41:27.226724 | ubuntu-noble | +#-a always,exit -S ipc -F a0=23 -k Inter-Process_Communication 2026-06-15 04:41:27.226824 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2026-06-15 04:41:27.226927 | ubuntu-noble | +-a always,exit -F arch=b64 -S shmctl -k Inter-Process_Communication 2026-06-15 04:41:27.227029 | ubuntu-noble | +-a always,exit -F arch=b64 -S shmget -k Inter-Process_Communication 2026-06-15 04:41:27.227131 | ubuntu-noble | + 2026-06-15 04:41:27.227231 | ubuntu-noble | +# High Volume Events ---------------------------------------------------------- 2026-06-15 04:41:27.227326 | ubuntu-noble | + 2026-06-15 04:41:27.227460 | ubuntu-noble | +## Disable these rules if they create too many events in your environment 2026-06-15 04:41:27.227552 | ubuntu-noble | + 2026-06-15 04:41:27.227652 | ubuntu-noble | +## Common Shells 2026-06-15 04:41:27.227748 | ubuntu-noble | +-w /bin/bash -p x -k susp_shell 2026-06-15 04:41:27.227845 | ubuntu-noble | +-w /bin/dash -p x -k susp_shell 2026-06-15 04:41:27.227947 | ubuntu-noble | +-w /bin/busybox -p x -k susp_shell 2026-06-15 04:41:27.228055 | ubuntu-noble | +-w /bin/zsh -p x -k susp_shell 2026-06-15 04:41:27.228170 | ubuntu-noble | +-w /bin/sh -p x -k susp_shell 2026-06-15 04:41:27.228250 | ubuntu-noble | +-w /bin/ksh -p x -k susp_shell 2026-06-15 04:41:27.228342 | ubuntu-noble | + 2026-06-15 04:41:27.228561 | ubuntu-noble | +## Root command executions 2026-06-15 04:41:27.228605 | ubuntu-noble | +-a always,exit -F arch=b64 -F euid=0 -F auid>=1000 -F auid!=-1 -S execve -k rootcmd 2026-06-15 04:41:27.228695 | ubuntu-noble | + 2026-06-15 04:41:27.228793 | ubuntu-noble | +## File Deletion Events by User 2026-06-15 04:41:27.228897 | ubuntu-noble | +-a always,exit -F arch=b64 -S rmdir -S unlink -S unlinkat -S rename -S renameat -F auid>=1000 -F auid!=-1 -k delete 2026-06-15 04:41:27.228989 | ubuntu-noble | + 2026-06-15 04:41:27.229085 | ubuntu-noble | +## File Access 2026-06-15 04:41:27.229185 | ubuntu-noble | +### Unauthorized Access (unsuccessful) 2026-06-15 04:41:27.229294 | ubuntu-noble | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k file_access 2026-06-15 04:41:27.229430 | ubuntu-noble | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k file_access 2026-06-15 04:41:27.229520 | ubuntu-noble | + 2026-06-15 04:41:27.229619 | ubuntu-noble | +### Unsuccessful Creation 2026-06-15 04:41:27.229726 | ubuntu-noble | +-a always,exit -F arch=b64 -S mkdir,creat,link,symlink,mknod,mknodat,linkat,symlinkat -F exit=-EACCES -k file_creation 2026-06-15 04:41:27.229841 | ubuntu-noble | +-a always,exit -F arch=b64 -S mkdir,link,symlink,mkdirat -F exit=-EPERM -k file_creation 2026-06-15 04:41:27.229926 | ubuntu-noble | + 2026-06-15 04:41:27.231451 | ubuntu-noble | +### Unsuccessful Modification 2026-06-15 04:41:27.231480 | ubuntu-noble | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EACCES -k file_modification 2026-06-15 04:41:27.231496 | ubuntu-noble | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EPERM -k file_modification 2026-06-15 04:41:27.231500 | ubuntu-noble | + 2026-06-15 04:41:27.231503 | ubuntu-noble | +## 32bit API Exploitation 2026-06-15 04:41:27.231507 | ubuntu-noble | +### If you are on a 64 bit platform, everything _should_ be running 2026-06-15 04:41:27.231511 | ubuntu-noble | +### in 64 bit mode. This rule will detect any use of the 32 bit syscalls 2026-06-15 04:41:27.231515 | ubuntu-noble | +### because this might be a sign of someone exploiting a hole in the 32 2026-06-15 04:41:27.231519 | ubuntu-noble | +### bit API. 2026-06-15 04:41:27.231522 | ubuntu-noble | +-a always,exit -F arch=b32 -S all -k 32bit_api 2026-06-15 04:41:27.231526 | ubuntu-noble | + 2026-06-15 04:41:27.231529 | ubuntu-noble | +# Make The Configuration Immutable -------------------------------------------- 2026-06-15 04:41:27.231533 | ubuntu-noble | + 2026-06-15 04:41:27.231536 | ubuntu-noble | +##-e 2 2026-06-15 04:41:27.231544 | ubuntu-noble | 2026-06-15 04:41:27.231697 | ubuntu-noble | changed: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": true, "checksum": "9f99ce5c4f891fbf3e2bce06ed4cb97fb9e01f41", "dest": "/etc/audit/rules.d/20-neo23x0.rules", "gid": 0, "group": "root", "item": "20-neo23x0.rules", "md5sum": "6ac57206fd77de34805c3f4d50ef8b1d", "mode": "0644", "owner": "root", "size": 27367, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1781498486.2644413-2451-198911184799189/.source.rules", "state": "file", "uid": 0} 2026-06-15 04:41:27.231788 | ubuntu-noble | 2026-06-15 04:41:27.231890 | ubuntu-noble | TASK [auditd : Manage auditd service] ****************************************** 2026-06-15 04:41:27.453948 | debian-bookworm | ok: [molecule-auditd] => {"changed": false, "enabled": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Mon 2026-06-15 04:41:20 UTC", "ActiveEnterTimestampMonotonic": "417532324", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "local-fs.target systemd-journald.socket system.slice systemd-tmpfiles-setup.service", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-06-15 04:41:20 UTC", "AssertTimestampMonotonic": "417466985", "Before": "systemd-update-utmp.service shutdown.target sysinit.target ssh.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "53867000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-06-15 04:41:20 UTC", "ConditionTimestampMonotonic": "417466901", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3211", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2354", "ExecMainStartTimestamp": "Mon 2026-06-15 04:41:20 UTC", "ExecMainStartTimestampMonotonic": "417505425", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Mon 2026-06-15 04:41:20 UTC] ; stop_time=[Mon 2026-06-15 04:41:20 UTC] ; pid=2353 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Mon 2026-06-15 04:41:20 UTC] ; stop_time=[Mon 2026-06-15 04:41:20 UTC] ; pid=2353 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Mon 2026-06-15 04:41:20 UTC] ; stop_time=[Mon 2026-06-15 04:41:20 UTC] ; pid=2357 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Mon 2026-06-15 04:41:20 UTC] ; stop_time=[Mon 2026-06-15 04:41:20 UTC] ; pid=2357 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-06-15 04:41:20 UTC", "InactiveExitTimestampMonotonic": "417481564", "InvocationID": "3116c1875dac43ab926ac9d41e0ba3a0", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15480", "LimitNPROCSoft": "15480", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15480", "LimitSIGPENDINGSoft": "15480", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2354", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "712704", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-06-15 04:41:20 UTC", "StateChangeTimestampMonotonic": "417532324", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-15 04:41:27.458716 | debian-bookworm | 2026-06-15 04:41:27.458834 | debian-bookworm | TASK [auditd : List existing rules files] ************************************** 2026-06-15 04:41:27.902881 | debian-bookworm | ok: [molecule-auditd] => {"changed": false, "cmd": ["find", "/etc/audit/rules.d", "-type", "f", "-printf", "%f\n"], "delta": "0:00:00.009058", "end": "2026-06-15 04:41:27.836169", "msg": "", "rc": 0, "start": "2026-06-15 04:41:27.827111", "stderr": "", "stderr_lines": [], "stdout": "audit.rules\n20-neo23x0.rules", "stdout_lines": ["audit.rules", "20-neo23x0.rules"]} 2026-06-15 04:41:27.903063 | debian-bookworm | 2026-06-15 04:41:27.903115 | debian-bookworm | TASK [auditd : Remove unmanaged rules files] *********************************** 2026-06-15 04:41:28.279592 | debian-bookworm | --- before 2026-06-15 04:41:28.279660 | debian-bookworm | +++ after 2026-06-15 04:41:28.279757 | debian-bookworm | @@ -1,4 +1,4 @@ 2026-06-15 04:41:28.279865 | debian-bookworm | { 2026-06-15 04:41:28.279967 | debian-bookworm | "path": "/etc/audit/rules.d/audit.rules", 2026-06-15 04:41:28.280064 | debian-bookworm | - "state": "file" 2026-06-15 04:41:28.083796 | ubuntu-noble | ok: [molecule-auditd] => {"changed": false, "enabled": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Mon 2026-06-15 04:41:20 UTC", "ActiveEnterTimestampMonotonic": "179379339", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "systemd-tmpfiles-setup.service local-fs.target system.slice systemd-journald.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-06-15 04:41:20 UTC", "AssertTimestampMonotonic": "179326994", "Before": "ssh.service sysinit.target systemd-update-utmp.service shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "39009000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-06-15 04:41:20 UTC", "ConditionTimestampMonotonic": "179326949", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3826", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2220", "ExecMainStartTimestamp": "Mon 2026-06-15 04:41:20 UTC", "ExecMainStartTimestampMonotonic": "179349150", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Mon 2026-06-15 04:41:20 UTC] ; stop_time=[Mon 2026-06-15 04:41:20 UTC] ; pid=2219 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Mon 2026-06-15 04:41:20 UTC] ; stop_time=[Mon 2026-06-15 04:41:20 UTC] ; pid=2219 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Mon 2026-06-15 04:41:20 UTC] ; stop_time=[Mon 2026-06-15 04:41:20 UTC] ; pid=2223 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Mon 2026-06-15 04:41:20 UTC] ; stop_time=[Mon 2026-06-15 04:41:20 UTC] ; pid=2223 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-06-15 04:41:20 UTC", "InactiveExitTimestampMonotonic": "179337640", "InvocationID": "c6842ff5d0e243abb759b3d17c499ed8", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15372", "LimitNPROCSoft": "15372", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15372", "LimitSIGPENDINGSoft": "15372", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2220", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3514060800", "MemoryCurrent": "507904", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2207744", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Mon 2026-06-15 04:41:20 UTC", "StateChangeTimestampMonotonic": "179379339", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4611", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-15 04:41:28.280150 | debian-bookworm | + "state": "absent" 2026-06-15 04:41:28.092550 | ubuntu-noble | 2026-06-15 04:41:28.280246 | debian-bookworm | } 2026-06-15 04:41:28.092662 | ubuntu-noble | TASK [auditd : List existing rules files] ************************************** 2026-06-15 04:41:28.280353 | debian-bookworm | 2026-06-15 04:41:28.280441 | debian-bookworm | changed: [molecule-auditd] => (item=audit.rules) => {"ansible_loop_var": "item", "changed": true, "item": "audit.rules", "path": "/etc/audit/rules.d/audit.rules", "state": "absent"} 2026-06-15 04:41:28.280545 | debian-bookworm | skipping: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": false, "false_condition": "item not in auditd_rules_files", "item": "20-neo23x0.rules", "skip_reason": "Conditional result was False"} 2026-06-15 04:41:28.280634 | debian-bookworm | 2026-06-15 04:41:28.280735 | debian-bookworm | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-15 04:41:28.560786 | ubuntu-noble | ok: [molecule-auditd] => {"changed": false, "cmd": ["find", "/etc/audit/rules.d", "-type", "f", "-printf", "%f\n"], "delta": "0:00:00.008469", "end": "2026-06-15 04:41:28.511959", "msg": "", "rc": 0, "start": "2026-06-15 04:41:28.503490", "stderr": "", "stderr_lines": [], "stdout": "audit.rules\n20-neo23x0.rules", "stdout_lines": ["audit.rules", "20-neo23x0.rules"]} 2026-06-15 04:41:28.560879 | ubuntu-noble | 2026-06-15 04:41:28.561002 | ubuntu-noble | TASK [auditd : Remove unmanaged rules files] *********************************** 2026-06-15 04:41:28.991337 | ubuntu-noble | --- before 2026-06-15 04:41:28.951145 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Mon 2026-06-15 04:41:20 UTC", "ActiveEnterTimestampMonotonic": "417532324", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "local-fs.target systemd-journald.socket system.slice systemd-tmpfiles-setup.service", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-06-15 04:41:20 UTC", "AssertTimestampMonotonic": "417466985", "Before": "systemd-update-utmp.service shutdown.target sysinit.target ssh.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "55395000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-06-15 04:41:20 UTC", "ConditionTimestampMonotonic": "417466901", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3211", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2354", "ExecMainStartTimestamp": "Mon 2026-06-15 04:41:20 UTC", "ExecMainStartTimestampMonotonic": "417505425", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Mon 2026-06-15 04:41:20 UTC] ; stop_time=[Mon 2026-06-15 04:41:20 UTC] ; pid=2353 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Mon 2026-06-15 04:41:20 UTC] ; stop_time=[Mon 2026-06-15 04:41:20 UTC] ; pid=2353 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Mon 2026-06-15 04:41:20 UTC] ; stop_time=[Mon 2026-06-15 04:41:20 UTC] ; pid=2357 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Mon 2026-06-15 04:41:20 UTC] ; stop_time=[Mon 2026-06-15 04:41:20 UTC] ; pid=2357 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-06-15 04:41:20 UTC", "InactiveExitTimestampMonotonic": "417481564", "InvocationID": "3116c1875dac43ab926ac9d41e0ba3a0", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15480", "LimitNPROCSoft": "15480", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15480", "LimitSIGPENDINGSoft": "15480", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2354", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "720896", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-06-15 04:41:20 UTC", "StateChangeTimestampMonotonic": "417532324", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-15 04:41:28.991953 | ubuntu-noble | +++ after 2026-06-15 04:41:28.956921 | debian-bookworm | 2026-06-15 04:41:28.992327 | ubuntu-noble | @@ -1,4 +1,4 @@ 2026-06-15 04:41:28.957086 | debian-bookworm | RUNNING HANDLER [auditd : Generate auditd rules] ******************************* 2026-06-15 04:41:28.992763 | ubuntu-noble | { 2026-06-15 04:41:28.993132 | ubuntu-noble | "path": "/etc/audit/rules.d/audit.rules", 2026-06-15 04:41:28.994451 | ubuntu-noble | - "state": "file" 2026-06-15 04:41:28.994482 | ubuntu-noble | + "state": "absent" 2026-06-15 04:41:28.994494 | ubuntu-noble | } 2026-06-15 04:41:28.994507 | ubuntu-noble | 2026-06-15 04:41:28.994764 | ubuntu-noble | changed: [molecule-auditd] => (item=audit.rules) => {"ansible_loop_var": "item", "changed": true, "item": "audit.rules", "path": "/etc/audit/rules.d/audit.rules", "state": "absent"} 2026-06-15 04:41:28.995146 | ubuntu-noble | skipping: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": false, "false_condition": "item not in auditd_rules_files", "item": "20-neo23x0.rules", "skip_reason": "Conditional result was False"} 2026-06-15 04:41:28.995585 | ubuntu-noble | 2026-06-15 04:41:28.995910 | ubuntu-noble | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-15 04:41:29.357612 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "cmd": ["augenrules", "--load"], "delta": "0:00:00.078472", "end": "2026-06-15 04:41:29.304045", "msg": "", "rc": 0, "start": "2026-06-15 04:41:29.225573", "stderr": "Unknown user: chrony\nThere was an error in line 24 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 28 of /etc/audit/audit.rules\nUnknown user: ntp\nThere was an error in line 44 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 83 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 84 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 112 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 115 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 176 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 177 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 178 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 179 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 180 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 217 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 218 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 234 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 285 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 286 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 324 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 325 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 346 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 347 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 348 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 349 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 350 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 351 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 359 of /etc/audit/audit.rules", "stderr_lines": ["Unknown user: chrony", "There was an error in line 24 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 28 of /etc/audit/audit.rules", "Unknown user: ntp", "There was an error in line 44 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 83 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 84 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 112 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 115 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 176 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 177 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 178 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 179 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 180 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 217 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 218 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 234 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 285 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 286 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 324 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 325 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 346 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 347 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 348 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 349 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 350 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 351 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 359 of /etc/audit/audit.rules"], "stdout": "/usr/sbin/augenrules: No change\nNo rules\nenabled 1\nfailure 1\npid 2745\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 61\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0\nenabled 1\nfailure 1\npid 2745\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 64\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0", "stdout_lines": ["/usr/sbin/augenrules: No change", "No rules", "enabled 1", "failure 1", "pid 2745", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 61", "backlog_wait_time 60000", "backlog_wait_time_actual 0", "enabled 1", "failure 1", "pid 2745", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 64", "backlog_wait_time 60000", "backlog_wait_time_actual 0"]} 2026-06-15 04:41:29.357708 | debian-bookworm | 2026-06-15 04:41:29.357783 | debian-bookworm | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-15 04:41:29.725253 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Mon 2026-06-15 04:41:20 UTC", "ActiveEnterTimestampMonotonic": "179379339", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "systemd-tmpfiles-setup.service local-fs.target system.slice systemd-journald.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-06-15 04:41:20 UTC", "AssertTimestampMonotonic": "179326994", "Before": "ssh.service sysinit.target systemd-update-utmp.service shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "40454000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-06-15 04:41:20 UTC", "ConditionTimestampMonotonic": "179326949", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3826", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2220", "ExecMainStartTimestamp": "Mon 2026-06-15 04:41:20 UTC", "ExecMainStartTimestampMonotonic": "179349150", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Mon 2026-06-15 04:41:20 UTC] ; stop_time=[Mon 2026-06-15 04:41:20 UTC] ; pid=2219 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Mon 2026-06-15 04:41:20 UTC] ; stop_time=[Mon 2026-06-15 04:41:20 UTC] ; pid=2219 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Mon 2026-06-15 04:41:20 UTC] ; stop_time=[Mon 2026-06-15 04:41:20 UTC] ; pid=2223 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Mon 2026-06-15 04:41:20 UTC] ; stop_time=[Mon 2026-06-15 04:41:20 UTC] ; pid=2223 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Mon 2026-06-15 04:41:20 UTC", "InactiveExitTimestampMonotonic": "179337640", "InvocationID": "c6842ff5d0e243abb759b3d17c499ed8", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15372", "LimitNPROCSoft": "15372", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15372", "LimitSIGPENDINGSoft": "15372", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2220", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3515572224", "MemoryCurrent": "516096", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2207744", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Mon 2026-06-15 04:41:20 UTC", "StateChangeTimestampMonotonic": "179379339", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4611", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-15 04:41:29.733442 | ubuntu-noble | 2026-06-15 04:41:29.733828 | ubuntu-noble | RUNNING HANDLER [auditd : Generate auditd rules] ******************************* 2026-06-15 04:41:30.107282 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Mon 2026-06-15 04:41:28 UTC", "ActiveEnterTimestampMonotonic": "426220663", "ActiveExitTimestamp": "Mon 2026-06-15 04:41:28 UTC", "ActiveExitTimestampMonotonic": "426074709", "ActiveState": "active", "After": "local-fs.target systemd-journald.socket system.slice systemd-tmpfiles-setup.service", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-06-15 04:41:28 UTC", "AssertTimestampMonotonic": "426115268", "Before": "systemd-update-utmp.service shutdown.target sysinit.target ssh.service", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "157492000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-06-15 04:41:28 UTC", "ConditionTimestampMonotonic": "426115224", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3250", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2745", "ExecMainStartTimestamp": "Mon 2026-06-15 04:41:28 UTC", "ExecMainStartTimestampMonotonic": "426150773", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Mon 2026-06-15 04:41:28 UTC] ; stop_time=[Mon 2026-06-15 04:41:28 UTC] ; pid=2742 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Mon 2026-06-15 04:41:28 UTC] ; stop_time=[Mon 2026-06-15 04:41:28 UTC] ; pid=2742 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Mon 2026-06-15 04:41:28 UTC] ; stop_time=[Mon 2026-06-15 04:41:28 UTC] ; pid=2749 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Mon 2026-06-15 04:41:28 UTC] ; stop_time=[Mon 2026-06-15 04:41:28 UTC] ; pid=2749 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "Mon 2026-06-15 04:41:28 UTC", "InactiveEnterTimestampMonotonic": "426114376", "InactiveExitTimestamp": "Mon 2026-06-15 04:41:28 UTC", "InactiveExitTimestampMonotonic": "426136472", "InvocationID": "08d00e4b9f6e49adb7dea936f8d56eff", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15480", "LimitNPROCSoft": "15480", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15480", "LimitSIGPENDINGSoft": "15480", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2745", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "2072576", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Mon 2026-06-15 04:41:28 UTC", "StateChangeTimestampMonotonic": "426220663", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-15 04:41:30.110171 | debian-bookworm | 2026-06-15 04:41:30.110201 | debian-bookworm | PLAY RECAP ********************************************************************* 2026-06-15 04:41:30.110208 | debian-bookworm | molecule-auditd : ok=15 changed=8 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-15 04:41:30.110214 | debian-bookworm | 2026-06-15 04:41:30.206892 | debian-bookworm | INFO [delegated > converge] Executed: Successful 2026-06-15 04:41:30.207901 | debian-bookworm | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-15 04:41:30.139461 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "cmd": ["augenrules", "--load"], "delta": "0:00:00.061355", "end": "2026-06-15 04:41:30.085615", "msg": "", "rc": 0, "start": "2026-06-15 04:41:30.024260", "stderr": "Unknown user: chrony\nThere was an error in line 24 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 28 of /etc/audit/audit.rules\nUnknown user: ntp\nThere was an error in line 44 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 83 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 84 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 86 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 112 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 115 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 176 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 177 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 178 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 179 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 180 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 217 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 218 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 234 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 285 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 286 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 324 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 325 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 346 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 347 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 348 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 349 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 350 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 351 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 359 of /etc/audit/audit.rules", "stderr_lines": ["Unknown user: chrony", "There was an error in line 24 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 28 of /etc/audit/audit.rules", "Unknown user: ntp", "There was an error in line 44 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 83 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 84 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 86 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 112 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 115 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 176 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 177 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 178 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 179 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 180 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 217 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 218 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 234 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 285 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 286 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 324 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 325 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 346 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 347 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 348 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 349 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 350 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 351 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 359 of /etc/audit/audit.rules"], "stdout": "/usr/sbin/augenrules: No change\nNo rules\nenabled 1\nfailure 1\npid 2612\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 504\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0\nenabled 1\nfailure 1\npid 2612\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 502\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0", "stdout_lines": ["/usr/sbin/augenrules: No change", "No rules", "enabled 1", "failure 1", "pid 2612", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 504", "backlog_wait_time 60000", "backlog_wait_time_actual 0", "enabled 1", "failure 1", "pid 2612", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 502", "backlog_wait_time 60000", "backlog_wait_time_actual 0"]} 2026-06-15 04:41:30.139703 | ubuntu-noble | 2026-06-15 04:41:30.139854 | ubuntu-noble | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-15 04:41:30.892725 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Mon 2026-06-15 04:41:29 UTC", "ActiveEnterTimestampMonotonic": "188896709", "ActiveExitTimestamp": "Mon 2026-06-15 04:41:29 UTC", "ActiveExitTimestampMonotonic": "188739422", "ActiveState": "active", "After": "systemd-tmpfiles-setup.service local-fs.target system.slice systemd-journald.socket", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Mon 2026-06-15 04:41:29 UTC", "AssertTimestampMonotonic": "188780770", "Before": "ssh.service sysinit.target systemd-update-utmp.service shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "157569000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Mon 2026-06-15 04:41:29 UTC", "ConditionTimestampMonotonic": "188780678", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3868", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2612", "ExecMainStartTimestamp": "Mon 2026-06-15 04:41:29 UTC", "ExecMainStartTimestampMonotonic": "188808546", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Mon 2026-06-15 04:41:29 UTC] ; stop_time=[Mon 2026-06-15 04:41:29 UTC] ; pid=2611 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Mon 2026-06-15 04:41:29 UTC] ; stop_time=[Mon 2026-06-15 04:41:29 UTC] ; pid=2611 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Mon 2026-06-15 04:41:29 UTC] ; stop_time=[Mon 2026-06-15 04:41:29 UTC] ; pid=2615 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Mon 2026-06-15 04:41:29 UTC] ; stop_time=[Mon 2026-06-15 04:41:29 UTC] ; pid=2615 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "Mon 2026-06-15 04:41:29 UTC", "InactiveEnterTimestampMonotonic": "188778988", "InactiveExitTimestamp": "Mon 2026-06-15 04:41:29 UTC", "InactiveExitTimestampMonotonic": "188785622", "InvocationID": "08609ee604ee4207b2a41b9f6d132df6", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15372", "LimitNPROCSoft": "15372", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15372", "LimitSIGPENDINGSoft": "15372", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2612", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3533533184", "MemoryCurrent": "1855488", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2338816", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Mon 2026-06-15 04:41:29 UTC", "StateChangeTimestampMonotonic": "188896709", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4611", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-15 04:41:30.893697 | ubuntu-noble | 2026-06-15 04:41:30.893719 | ubuntu-noble | PLAY RECAP ********************************************************************* 2026-06-15 04:41:30.893725 | ubuntu-noble | molecule-auditd : ok=15 changed=8 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-15 04:41:30.893729 | ubuntu-noble | 2026-06-15 04:41:30.995210 | ubuntu-noble | INFO [delegated > converge] Executed: Successful 2026-06-15 04:41:30.996137 | ubuntu-noble | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-15 04:41:31.343328 | debian-bookworm | ok: Runtime: 0:00:18.987164 2026-06-15 04:41:31.378763 | ubuntu-noble | ok: Runtime: 0:00:19.766111 2026-06-15 04:41:31.401255 | 2026-06-15 04:41:31.401421 | TASK [ansible-molecule : Run molecule verify action with scenario delegated] 2026-06-15 04:41:32.116049 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-15 04:41:32.125499 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-15 04:41:32.215336 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-15 04:41:32.227452 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-15 04:41:32.612561 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-15 04:41:32.613220 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-15 04:41:32.636667 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-15 04:41:32.642541 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: verify 2026-06-15 04:41:32.642631 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-15 04:41:32.781093 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-15 04:41:32.781968 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-15 04:41:32.807471 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-15 04:41:32.813358 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: verify 2026-06-15 04:41:32.813557 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-15 04:41:34.083983 | debian-bookworm | INFO [delegated > verify] Executing 2026-06-15 04:41:34.086107 | debian-bookworm | INFO [delegated > verify] Executing Testinfra tests found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests/... 2026-06-15 04:41:34.087135 | debian-bookworm | DEBUG ANSIBLE ENVIRONMENT: 2026-06-15 04:41:34.087145 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-15 04:41:34.087152 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-15 04:41:34.087159 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2026-06-15 04:41:34.087165 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-15 04:41:34.087171 | debian-bookworm | ANSIBLE_ROLE: auditd 2026-06-15 04:41:34.087176 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2026-06-15 04:41:34.087181 | debian-bookworm | ANSIBLE_VERBOSITY: 1 2026-06-15 04:41:34.087186 | debian-bookworm | 2026-06-15 04:41:34.087266 | debian-bookworm | DEBUG MOLECULE ENVIRONMENT: 2026-06-15 04:41:34.087273 | debian-bookworm | MOLECULE_DEBUG: True 2026-06-15 04:41:34.087278 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-15 04:41:34.087283 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2026-06-15 04:41:34.087288 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-15 04:41:34.087293 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-15 04:41:34.087299 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-15 04:41:34.087303 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-15 04:41:34.087309 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-15 04:41:34.087314 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-15 04:41:34.087319 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2026-06-15 04:41:34.087324 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-15 04:41:34.087329 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2026-06-15 04:41:34.087334 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-15 04:41:34.087339 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2026-06-15 04:41:34.087345 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-15 04:41:34.087350 | debian-bookworm | 2026-06-15 04:41:34.087426 | debian-bookworm | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-15 04:41:34.341592 | debian-bookworm | writing pytest debug information to pytestdebug.log 2026-06-15 04:41:34.358466 | debian-bookworm | ============================= test session starts ============================== 2026-06-15 04:41:34.358973 | debian-bookworm | platform linux -- Python 3.11.2, pytest-8.4.2, pluggy-1.6.0 -- /home/zuul/venv/bin/python3 2026-06-15 04:41:34.359461 | debian-bookworm | using: pytest-8.4.2 2026-06-15 04:41:34.359875 | debian-bookworm | registered third-party plugins: 2026-06-15 04:41:34.360225 | debian-bookworm | pytest-testinfra-10.2.2 at /home/zuul/venv/lib/python3.11/site-packages/testinfra/plugin.py 2026-06-15 04:41:34.360548 | debian-bookworm | rootdir: /home/zuul 2026-06-15 04:41:34.361478 | debian-bookworm | plugins: testinfra-10.2.2 2026-06-15 04:41:34.380334 | ubuntu-noble | INFO [delegated > verify] Executing 2026-06-15 04:41:34.382198 | ubuntu-noble | INFO [delegated > verify] Executing Testinfra tests found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests/... 2026-06-15 04:41:34.383535 | ubuntu-noble | DEBUG ANSIBLE ENVIRONMENT: 2026-06-15 04:41:34.383564 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-15 04:41:34.383573 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-15 04:41:34.383580 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2026-06-15 04:41:34.383586 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-15 04:41:34.383592 | ubuntu-noble | ANSIBLE_ROLE: auditd 2026-06-15 04:41:34.383597 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2026-06-15 04:41:34.383602 | ubuntu-noble | ANSIBLE_VERBOSITY: 1 2026-06-15 04:41:34.383608 | ubuntu-noble | 2026-06-15 04:41:34.383797 | ubuntu-noble | DEBUG MOLECULE ENVIRONMENT: 2026-06-15 04:41:34.383806 | ubuntu-noble | MOLECULE_DEBUG: True 2026-06-15 04:41:34.383812 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-15 04:41:34.383817 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2026-06-15 04:41:34.383823 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-15 04:41:34.383829 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-15 04:41:34.383834 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-15 04:41:34.383840 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-15 04:41:34.383846 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-15 04:41:34.383852 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-15 04:41:34.383857 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2026-06-15 04:41:34.383862 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-15 04:41:34.383868 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2026-06-15 04:41:34.383873 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-15 04:41:34.383878 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2026-06-15 04:41:34.383884 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-15 04:41:34.383889 | ubuntu-noble | 2026-06-15 04:41:34.384081 | ubuntu-noble | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-15 04:41:34.662704 | ubuntu-noble | writing pytest debug information to pytestdebug.log 2026-06-15 04:41:34.683766 | ubuntu-noble | ============================= test session starts ============================== 2026-06-15 04:41:34.686095 | ubuntu-noble | platform linux -- Python 3.12.3, pytest-8.4.2, pluggy-1.6.0 -- /home/zuul/venv/bin/python3 2026-06-15 04:41:34.686142 | ubuntu-noble | using: pytest-8.4.2 2026-06-15 04:41:34.686160 | ubuntu-noble | registered third-party plugins: 2026-06-15 04:41:34.686175 | ubuntu-noble | pytest-testinfra-10.2.2 at /home/zuul/venv/lib/python3.12/site-packages/testinfra/plugin.py 2026-06-15 04:41:34.686189 | ubuntu-noble | rootdir: /home/zuul 2026-06-15 04:41:34.686202 | ubuntu-noble | plugins: testinfra-10.2.2 2026-06-15 04:41:35.391886 | debian-bookworm | collecting ... collected 6 items 2026-06-15 04:41:35.392186 | debian-bookworm | 2026-06-15 04:41:35.837481 | ubuntu-noble | collecting ... collected 6 items 2026-06-15 04:41:35.837532 | ubuntu-noble | 2026-06-15 04:41:39.818259 | debian-bookworm | tests/auditd.py::test_pkg[ansible://molecule-auditd] PASSED [ 16%] 2026-06-15 04:41:39.856059 | debian-bookworm | tests/auditd.py::test_conffile[ansible://molecule-auditd] PASSED [ 33%] 2026-06-15 04:41:40.545931 | ubuntu-noble | tests/auditd.py::test_pkg[ansible://molecule-auditd] PASSED [ 16%] 2026-06-15 04:41:40.599544 | ubuntu-noble | tests/auditd.py::test_conffile[ansible://molecule-auditd] PASSED [ 33%] 2026-06-15 04:41:42.454414 | debian-bookworm | tests/auditd.py::test_adjustment[ansible://molecule-auditd] PASSED [ 50%] 2026-06-15 04:41:43.319169 | ubuntu-noble | tests/auditd.py::test_adjustment[ansible://molecule-auditd] PASSED [ 50%] 2026-06-15 04:41:47.804908 | debian-bookworm | tests/auditd.py::test_rulefiles[ansible://molecule-auditd] PASSED [ 66%] 2026-06-15 04:41:48.905245 | ubuntu-noble | tests/auditd.py::test_rulefiles[ansible://molecule-auditd] PASSED [ 66%] 2026-06-15 04:41:49.111906 | debian-bookworm | tests/auditd.py::test_srv[ansible://molecule-auditd] PASSED [ 83%] 2026-06-15 04:41:49.201624 | debian-bookworm | wrote pytest debug information to pytestdebug.log 2026-06-15 04:41:49.202193 | debian-bookworm | tests/auditd.py::test_function[ansible://molecule-auditd] PASSED [100%] 2026-06-15 04:41:49.202549 | debian-bookworm | 2026-06-15 04:41:49.202947 | debian-bookworm | ============================== 6 passed in 14.79s ============================== 2026-06-15 04:41:49.245726 | debian-bookworm | INFO [delegated > verify] Verifier completed successfully. 2026-06-15 04:41:49.246024 | debian-bookworm | INFO [delegated > verify] Executed: Successful 2026-06-15 04:41:49.246971 | debian-bookworm | INFO Molecule executed 1 scenario (1 successful) 2026-06-15 04:41:50.300363 | ubuntu-noble | tests/auditd.py::test_srv[ansible://molecule-auditd] PASSED [ 83%] 2026-06-15 04:41:50.388649 | ubuntu-noble | wrote pytest debug information to pytestdebug.log 2026-06-15 04:41:50.389168 | ubuntu-noble | tests/auditd.py::test_function[ansible://molecule-auditd] PASSED [100%] 2026-06-15 04:41:50.389272 | ubuntu-noble | 2026-06-15 04:41:50.389679 | ubuntu-noble | ============================== 6 passed in 15.66s ============================== 2026-06-15 04:41:50.441779 | ubuntu-noble | INFO [delegated > verify] Verifier completed successfully. 2026-06-15 04:41:50.441905 | ubuntu-noble | INFO [delegated > verify] Executed: Successful 2026-06-15 04:41:50.442228 | ubuntu-noble | INFO Molecule executed 1 scenario (1 successful) 2026-06-15 04:41:50.987544 | debian-bookworm | ok: Runtime: 0:00:17.551292 2026-06-15 04:41:50.993912 | ubuntu-noble | ok: Runtime: 0:00:18.678744 2026-06-15 04:41:51.000359 | 2026-06-15 04:41:51.000484 | TASK [ansible-molecule : Run molecule destroy action with scenario delegated] 2026-06-15 04:41:51.561755 | ubuntu-noble | skipping: Conditional result was False 2026-06-15 04:41:51.562689 | debian-bookworm | skipping: Conditional result was False 2026-06-15 04:41:51.576385 | 2026-06-15 04:41:51.576492 | PLAY RECAP 2026-06-15 04:41:51.576556 | debian-bookworm | ok: 17 changed: 12 unreachable: 0 failed: 0 skipped: 16 rescued: 0 ignored: 0 2026-06-15 04:41:51.576590 | ubuntu-noble | ok: 17 changed: 12 unreachable: 0 failed: 0 skipped: 16 rescued: 0 ignored: 0 2026-06-15 04:41:51.576613 | 2026-06-15 04:41:51.832302 | RUN END RESULT_NORMAL: [untrusted : github.com/osism/zuul-jobs/playbooks/ansible-molecule/run.yaml@main] 2026-06-15 04:41:51.834729 | POST-RUN START: [untrusted : github.com/osism/ansible-collection-services/playbooks/collect-container-logs.yml@main] 2026-06-15 04:41:52.639364 | 2026-06-15 04:41:52.639558 | PLAY [Collect container logs] 2026-06-15 04:41:52.656429 | 2026-06-15 04:41:52.656583 | TASK [Create container log directory] 2026-06-15 04:41:53.345860 | debian-bookworm | changed 2026-06-15 04:41:53.428819 | ubuntu-noble | changed 2026-06-15 04:41:53.437446 | 2026-06-15 04:41:53.437663 | TASK [Capture container overview] 2026-06-15 04:41:54.514397 | debian-bookworm | ok: Runtime: 0:00:00.011369 2026-06-15 04:41:54.527388 | ubuntu-noble | ok: Runtime: 0:00:00.014535 2026-06-15 04:41:54.536839 | 2026-06-15 04:41:54.536996 | TASK [List containers] 2026-06-15 04:41:55.123609 | debian-bookworm | ok: ERROR (ignored) 2026-06-15 04:41:55.124658 | debian-bookworm | { 2026-06-15 04:41:55.124841 | debian-bookworm | "failed_when_result": false, 2026-06-15 04:41:55.124918 | debian-bookworm | "msg": "[Errno 2] No such file or directory: b'docker'", 2026-06-15 04:41:55.125001 | debian-bookworm | "rc": 2 2026-06-15 04:41:55.125064 | debian-bookworm | } 2026-06-15 04:41:55.137746 | ubuntu-noble | ok: ERROR (ignored) 2026-06-15 04:41:55.137971 | ubuntu-noble | { 2026-06-15 04:41:55.138031 | ubuntu-noble | "failed_when_result": false, 2026-06-15 04:41:55.138073 | ubuntu-noble | "msg": "[Errno 2] No such file or directory: b'docker'", 2026-06-15 04:41:55.138110 | ubuntu-noble | "rc": 2 2026-06-15 04:41:55.138144 | ubuntu-noble | } 2026-06-15 04:41:55.145685 | 2026-06-15 04:41:55.145850 | LOOP [Save per-container logs] 2026-06-15 04:41:55.216734 | 2026-06-15 04:41:55.217155 | LOOP [Save per-container inspect (state and health)] 2026-06-15 04:41:55.302064 | 2026-06-15 04:41:55.302398 | TASK [Open container log permissions] 2026-06-15 04:41:55.605766 | debian-bookworm | ok 2026-06-15 04:41:55.644481 | ubuntu-noble | changed 2026-06-15 04:41:55.646736 | 2026-06-15 04:41:55.646887 | PLAY RECAP 2026-06-15 04:41:55.646965 | debian-bookworm | ok: 4 changed: 1 unreachable: 0 failed: 0 skipped: 2 rescued: 0 ignored: 0 2026-06-15 04:41:55.647005 | ubuntu-noble | ok: 4 changed: 2 unreachable: 0 failed: 0 skipped: 2 rescued: 0 ignored: 0 2026-06-15 04:41:55.647031 | 2026-06-15 04:41:55.811402 | POST-RUN END RESULT_NORMAL: [untrusted : github.com/osism/ansible-collection-services/playbooks/collect-container-logs.yml@main] 2026-06-15 04:41:55.814773 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post-fetch.yaml@main] 2026-06-15 04:41:56.797484 | 2026-06-15 04:41:56.797763 | PLAY [Base post-fetch] 2026-06-15 04:41:56.820259 | 2026-06-15 04:41:56.820445 | TASK [diagnose-network : Ensure log directory exists] 2026-06-15 04:41:57.579648 | debian-bookworm | ok 2026-06-15 04:41:57.598712 | ubuntu-noble | ok 2026-06-15 04:41:57.608348 | 2026-06-15 04:41:57.608602 | TASK [diagnose-network : Snapshot dual-stack network state (post)] 2026-06-15 04:42:35.189592 | debian-bookworm | ok: Runtime: 0:00:30.807452 2026-06-15 04:42:35.202818 | ubuntu-noble | ok: Runtime: 0:00:36.783008 2026-06-15 04:42:35.212097 | 2026-06-15 04:42:35.212271 | TASK [diagnose-network : Snapshot Docker/BuildKit IPv6 config (teardown)] 2026-06-15 04:42:35.761984 | debian-bookworm | ok: Runtime: 0:00:00.009669 2026-06-15 04:42:35.772309 | ubuntu-noble | ok: Runtime: 0:00:00.010928 2026-06-15 04:42:35.779877 | 2026-06-15 04:42:35.780055 | TASK [diagnose-network : Probe container network namespace (teardown)] 2026-06-15 04:42:36.328742 | debian-bookworm | ok: Runtime: 0:00:00.009331 2026-06-15 04:42:36.342585 | ubuntu-noble | ok: Runtime: 0:00:00.011516 2026-06-15 04:42:36.362135 | 2026-06-15 04:42:36.362284 | TASK [fetch-output : Set log path for multiple nodes] 2026-06-15 04:42:36.426284 | debian-bookworm | ok 2026-06-15 04:42:36.456853 | ubuntu-noble | ok 2026-06-15 04:42:36.505563 | 2026-06-15 04:42:36.505722 | TASK [fetch-output : Set log path for single node] 2026-06-15 04:42:36.542876 | debian-bookworm | skipping: Conditional result was False 2026-06-15 04:42:36.553864 | ubuntu-noble | skipping: Conditional result was False 2026-06-15 04:42:36.559660 | 2026-06-15 04:42:36.559796 | LOOP [fetch-output : Ensure local output dirs] 2026-06-15 04:42:36.870647 | debian-bookworm -> localhost | changed: "/var/lib/zuul/builds/430ba355c05b4a93a28c8e1d41ebb1c2/work/logs/debian-bookworm" 2026-06-15 04:42:36.899374 | ubuntu-noble -> localhost | changed: "/var/lib/zuul/builds/430ba355c05b4a93a28c8e1d41ebb1c2/work/logs/ubuntu-noble" 2026-06-15 04:42:37.151640 | debian-bookworm -> localhost | changed: "/var/lib/zuul/builds/430ba355c05b4a93a28c8e1d41ebb1c2/work/artifacts" 2026-06-15 04:42:37.261406 | ubuntu-noble -> localhost | ok: "/var/lib/zuul/builds/430ba355c05b4a93a28c8e1d41ebb1c2/work/artifacts" 2026-06-15 04:42:37.430223 | debian-bookworm -> localhost | changed: "/var/lib/zuul/builds/430ba355c05b4a93a28c8e1d41ebb1c2/work/docs" 2026-06-15 04:42:37.541372 | ubuntu-noble -> localhost | ok: "/var/lib/zuul/builds/430ba355c05b4a93a28c8e1d41ebb1c2/work/docs" 2026-06-15 04:42:37.541549 | ubuntu-noble -> localhost | changed: All items complete 2026-06-15 04:42:37.541582 | 2026-06-15 04:42:37.564242 | 2026-06-15 04:42:37.564864 | LOOP [fetch-output : Collect logs, artifacts and docs] 2026-06-15 04:42:38.324359 | ubuntu-noble | changed: 2026-06-15 04:42:38.324826 | ubuntu-noble | .d..t...... ./ 2026-06-15 04:42:38.324913 | ubuntu-noble | >f+++++++++ net-debug.post.txt 2026-06-15 04:42:38.324960 | ubuntu-noble | >f+++++++++ net-debug.pre.txt 2026-06-15 04:42:38.325002 | ubuntu-noble | >f+++++++++ sudo-debug.txt 2026-06-15 04:42:38.325042 | ubuntu-noble | >f+++++++++ sudo-strace.log 2026-06-15 04:42:38.325080 | ubuntu-noble | >f+++++++++ sudo-strace.log.time 2026-06-15 04:42:38.325118 | ubuntu-noble | cd+++++++++ container-logs/ 2026-06-15 04:42:38.325154 | ubuntu-noble | >f+++++++++ container-logs/_overview.txt 2026-06-15 04:42:38.332030 | debian-bookworm | changed: 2026-06-15 04:42:38.332146 | debian-bookworm | .d..t...... ./ 2026-06-15 04:42:38.332180 | debian-bookworm | >f+++++++++ net-debug.post.txt 2026-06-15 04:42:38.332206 | debian-bookworm | >f+++++++++ net-debug.pre.txt 2026-06-15 04:42:38.332228 | debian-bookworm | >f+++++++++ sudo-debug.txt 2026-06-15 04:42:38.332249 | debian-bookworm | >f+++++++++ sudo-strace.log 2026-06-15 04:42:38.332270 | debian-bookworm | >f+++++++++ sudo-strace.log.time 2026-06-15 04:42:38.332290 | debian-bookworm | cd+++++++++ container-logs/ 2026-06-15 04:42:38.332310 | debian-bookworm | >f+++++++++ container-logs/_overview.txt 2026-06-15 04:42:38.924938 | ubuntu-noble | changed: .d..t...... ./ 2026-06-15 04:42:38.943606 | debian-bookworm | ok 2026-06-15 04:42:39.545997 | ubuntu-noble | changed: .d..t...... ./ 2026-06-15 04:42:39.571992 | debian-bookworm | ok 2026-06-15 04:42:39.572134 | debian-bookworm | changed: All items complete 2026-06-15 04:42:39.572165 | 2026-06-15 04:42:39.591086 | 2026-06-15 04:42:39.591271 | LOOP [merge-output-to-logs : Move artifacts and docs to logs dir] 2026-06-15 04:42:39.976868 | debian-bookworm -> localhost | ok: Item: artifacts Runtime: 0:00:00.012402 2026-06-15 04:42:40.309473 | debian-bookworm -> localhost | ok: Item: docs Runtime: 0:00:00.012355 2026-06-15 04:42:40.336672 | 2026-06-15 04:42:40.336971 | PLAY RECAP 2026-06-15 04:42:40.337167 | debian-bookworm | ok: 8 changed: 3 unreachable: 0 failed: 0 skipped: 1 rescued: 0 ignored: 0 2026-06-15 04:42:40.337215 | ubuntu-noble | ok: 7 changed: 2 unreachable: 0 failed: 0 skipped: 1 rescued: 0 ignored: 0 2026-06-15 04:42:40.337239 | 2026-06-15 04:42:40.553704 | POST-RUN END RESULT_NORMAL: [trusted : github.com/osism/zuul-config/playbooks/base/post-fetch.yaml@main] 2026-06-15 04:42:40.563874 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post.yaml@main] 2026-06-15 04:42:41.529834 | 2026-06-15 04:42:41.530038 | PLAY [Base post] 2026-06-15 04:42:41.546561 | 2026-06-15 04:42:41.546721 | TASK [remove-build-sshkey : Remove the build SSH key from all nodes] 2026-06-15 04:42:42.424489 | debian-bookworm | changed 2026-06-15 04:42:42.436569 | ubuntu-noble | changed 2026-06-15 04:42:42.465135 | 2026-06-15 04:42:42.465290 | PLAY RECAP 2026-06-15 04:42:42.465441 | debian-bookworm | ok: 1 changed: 1 unreachable: 0 failed: 0 skipped: 0 rescued: 0 ignored: 0 2026-06-15 04:42:42.465484 | ubuntu-noble | ok: 1 changed: 1 unreachable: 0 failed: 0 skipped: 0 rescued: 0 ignored: 0 2026-06-15 04:42:42.465510 | 2026-06-15 04:42:42.661261 | POST-RUN END RESULT_NORMAL: [trusted : github.com/osism/zuul-config/playbooks/base/post.yaml@main] 2026-06-15 04:42:42.662759 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post-logs.yaml@main] 2026-06-15 04:42:43.909506 | 2026-06-15 04:42:43.909733 | PLAY [Base post-logs] 2026-06-15 04:42:43.923066 | 2026-06-15 04:42:43.923256 | TASK [generate-zuul-manifest : Generate Zuul manifest] 2026-06-15 04:42:44.535967 | localhost | changed 2026-06-15 04:42:44.555124 | 2026-06-15 04:42:44.555332 | TASK [generate-zuul-manifest : Return Zuul manifest URL to Zuul] 2026-06-15 04:42:44.602600 | localhost | ok 2026-06-15 04:42:44.608799 | 2026-06-15 04:42:44.608939 | TASK [Set zuul-log-path fact] 2026-06-15 04:42:44.665421 | localhost | ok 2026-06-15 04:42:44.684954 | 2026-06-15 04:42:44.685209 | TASK [set-zuul-log-path-fact : Set log path for a build] 2026-06-15 04:42:44.713257 | localhost | ok 2026-06-15 04:42:44.717313 | 2026-06-15 04:42:44.717434 | TASK [upload-logs : Create log directories] 2026-06-15 04:42:45.286338 | localhost | changed 2026-06-15 04:42:45.290014 | 2026-06-15 04:42:45.290144 | TASK [upload-logs : Ensure logs are readable before uploading] 2026-06-15 04:42:45.947805 | localhost -> localhost | ok: Runtime: 0:00:00.008451 2026-06-15 04:42:45.952847 | 2026-06-15 04:42:45.952997 | TASK [upload-logs : Upload logs to log server] 2026-06-15 04:42:46.623220 | localhost | Output suppressed because no_log was given 2026-06-15 04:42:46.627961 | 2026-06-15 04:42:46.628194 | LOOP [upload-logs : Compress console log and json output] 2026-06-15 04:42:46.697204 | localhost | skipping: Conditional result was False 2026-06-15 04:42:46.702168 | localhost | skipping: Conditional result was False 2026-06-15 04:42:46.717248 | 2026-06-15 04:42:46.717544 | LOOP [upload-logs : Upload compressed console log and json output] 2026-06-15 04:42:46.779735 | localhost | skipping: Conditional result was False 2026-06-15 04:42:46.780434 | 2026-06-15 04:42:46.783978 | localhost | skipping: Conditional result was False 2026-06-15 04:42:46.789670 | 2026-06-15 04:42:46.789873 | LOOP [upload-logs : Upload console log and json output]