2026-06-02 08:23:50.457766 | Job console starting 2026-06-02 08:23:50.474616 | Updating git repos 2026-06-02 08:23:50.543874 | Cloning repos into workspace 2026-06-02 08:23:50.612364 | Restoring repo states 2026-06-02 08:23:50.630796 | Merging changes 2026-06-02 08:23:51.183983 | Checking out repos 2026-06-02 08:23:51.265011 | Preparing playbooks 2026-06-02 08:23:52.237530 | Running Ansible setup 2026-06-02 08:23:57.773377 | PRE-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/pre.yaml@main] 2026-06-02 08:23:58.569540 | 2026-06-02 08:23:58.569721 | PLAY [Base pre] 2026-06-02 08:23:58.587838 | 2026-06-02 08:23:58.588003 | TASK [Setup log path fact] 2026-06-02 08:23:58.619145 | debian-bookworm | ok 2026-06-02 08:23:58.636220 | 2026-06-02 08:23:58.636399 | TASK [set-zuul-log-path-fact : Set log path for a build] 2026-06-02 08:23:58.678120 | debian-bookworm | ok 2026-06-02 08:23:58.689265 | 2026-06-02 08:23:58.689855 | TASK [emit-job-header : Print job information] 2026-06-02 08:23:58.745053 | # Job Information 2026-06-02 08:23:58.745292 | Ansible Version: 2.16.14 2026-06-02 08:23:58.745338 | Job: ansible-collection-services-molecule-auditd 2026-06-02 08:23:58.745381 | Pipeline: check 2026-06-02 08:23:58.745410 | Executor: 521e9411259a 2026-06-02 08:23:58.745437 | Triggered by: https://github.com/osism/ansible-collection-services/pull/2090 2026-06-02 08:23:58.745465 | Event ID: 5ab612c0-5e5c-11f1-99f1-a39c443be713 2026-06-02 08:23:58.752255 | 2026-06-02 08:23:58.752392 | LOOP [emit-job-header : Print node information] 2026-06-02 08:23:58.860849 | debian-bookworm | ok: 2026-06-02 08:23:58.861150 | debian-bookworm | # Node Information 2026-06-02 08:23:58.861189 | debian-bookworm | Inventory Hostname: debian-bookworm 2026-06-02 08:23:58.861215 | debian-bookworm | Hostname: debian 2026-06-02 08:23:58.861237 | debian-bookworm | Username: zuul 2026-06-02 08:23:58.861258 | debian-bookworm | Distro: Debian 12.14 2026-06-02 08:23:58.861281 | debian-bookworm | Provider: regiocloud-a 2026-06-02 08:23:58.861302 | debian-bookworm | Region: 2026-06-02 08:23:58.861322 | debian-bookworm | Label: debian-bookworm 2026-06-02 08:23:58.861342 | debian-bookworm | Product Name: OpenStack Nova 2026-06-02 08:23:58.861361 | debian-bookworm | Interface IP: 2a13:1a81:8000:3124:f816:3eff:fecb:791b 2026-06-02 08:23:58.908411 | debian-bookworm | ok: 2026-06-02 08:23:58.908552 | debian-bookworm | # Node Information 2026-06-02 08:23:58.908584 | debian-bookworm | Inventory Hostname: ubuntu-noble 2026-06-02 08:23:58.908609 | debian-bookworm | Hostname: ubuntu 2026-06-02 08:23:58.908635 | debian-bookworm | Username: zuul 2026-06-02 08:23:58.908656 | debian-bookworm | Distro: Ubuntu 24.04 2026-06-02 08:23:58.908676 | debian-bookworm | Provider: regiocloud-a 2026-06-02 08:23:58.908696 | debian-bookworm | Region: 2026-06-02 08:23:58.908715 | debian-bookworm | Label: ubuntu-noble 2026-06-02 08:23:58.908734 | debian-bookworm | Product Name: OpenStack Nova 2026-06-02 08:23:58.908752 | debian-bookworm | Interface IP: 2a13:1a81:8000:3124:f816:3eff:fed3:6436 2026-06-02 08:23:58.924433 | 2026-06-02 08:23:58.924599 | TASK [log-inventory : Ensure Zuul Ansible directory exists] 2026-06-02 08:23:59.405578 | debian-bookworm -> localhost | changed 2026-06-02 08:23:59.418968 | 2026-06-02 08:23:59.419170 | TASK [log-inventory : Copy ansible inventory to logs dir] 2026-06-02 08:24:00.528822 | ubuntu-noble -> localhost | changed 2026-06-02 08:24:00.540316 | debian-bookworm -> localhost | ok 2026-06-02 08:24:00.555782 | 2026-06-02 08:24:00.555924 | TASK [add-build-sshkey : Check to see if ssh key was already created for this build] 2026-06-02 08:24:00.857329 | debian-bookworm -> localhost | ok 2026-06-02 08:24:00.864115 | 2026-06-02 08:24:00.864249 | TASK [add-build-sshkey : Create a new key in workspace based on build UUID] 2026-06-02 08:24:00.897584 | debian-bookworm | ok 2026-06-02 08:24:00.912413 | ubuntu-noble | ok 2026-06-02 08:24:00.932459 | debian-bookworm | included: /var/lib/zuul/builds/dec99bfba93846f596ecb5720898f196/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/create-key-and-replace.yaml 2026-06-02 08:24:00.932582 | ubuntu-noble | included: /var/lib/zuul/builds/dec99bfba93846f596ecb5720898f196/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/create-key-and-replace.yaml 2026-06-02 08:24:00.939523 | 2026-06-02 08:24:00.939642 | TASK [add-build-sshkey : Create Temp SSH key] 2026-06-02 08:24:02.099223 | debian-bookworm -> localhost | Generating public/private rsa key pair. 2026-06-02 08:24:02.099466 | debian-bookworm -> localhost | Your identification has been saved in /var/lib/zuul/builds/dec99bfba93846f596ecb5720898f196/work/dec99bfba93846f596ecb5720898f196_id_rsa 2026-06-02 08:24:02.099507 | debian-bookworm -> localhost | Your public key has been saved in /var/lib/zuul/builds/dec99bfba93846f596ecb5720898f196/work/dec99bfba93846f596ecb5720898f196_id_rsa.pub 2026-06-02 08:24:02.099534 | debian-bookworm -> localhost | The key fingerprint is: 2026-06-02 08:24:02.099561 | debian-bookworm -> localhost | SHA256:seXuA9wufdyZJ6790AJFK8a4NRnkMZiczFQ+BroGOgs zuul-build-sshkey 2026-06-02 08:24:02.099585 | debian-bookworm -> localhost | The key's randomart image is: 2026-06-02 08:24:02.099611 | debian-bookworm -> localhost | +---[RSA 3072]----+ 2026-06-02 08:24:02.099634 | debian-bookworm -> localhost | | =o** . | 2026-06-02 08:24:02.099656 | debian-bookworm -> localhost | | .B* * . | 2026-06-02 08:24:02.099677 | debian-bookworm -> localhost | | . o o % o | 2026-06-02 08:24:02.099697 | debian-bookworm -> localhost | | . . * = = | 2026-06-02 08:24:02.099717 | debian-bookworm -> localhost | | E o .S.o . | 2026-06-02 08:24:02.099736 | debian-bookworm -> localhost | | . o .o.. . . | 2026-06-02 08:24:02.099756 | debian-bookworm -> localhost | | . +.. .oo.| 2026-06-02 08:24:02.099777 | debian-bookworm -> localhost | | ..+ o.=o.| 2026-06-02 08:24:02.099797 | debian-bookworm -> localhost | | ..o.oo+.| 2026-06-02 08:24:02.099816 | debian-bookworm -> localhost | +----[SHA256]-----+ 2026-06-02 08:24:02.099871 | debian-bookworm -> localhost | ok: Runtime: 0:00:00.639036 2026-06-02 08:24:02.107104 | 2026-06-02 08:24:02.107237 | TASK [add-build-sshkey : Remote setup ssh keys (linux)] 2026-06-02 08:24:02.132739 | debian-bookworm | ok 2026-06-02 08:24:02.147651 | ubuntu-noble | ok 2026-06-02 08:24:02.161503 | debian-bookworm | included: /var/lib/zuul/builds/dec99bfba93846f596ecb5720898f196/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/remote-linux.yaml 2026-06-02 08:24:02.161598 | ubuntu-noble | included: /var/lib/zuul/builds/dec99bfba93846f596ecb5720898f196/trusted/project_1/github.com/osism/openinfra-zuul-jobs/roles/add-build-sshkey/tasks/remote-linux.yaml 2026-06-02 08:24:02.173041 | 2026-06-02 08:24:02.173173 | TASK [add-build-sshkey : Remove previously added zuul-build-sshkey] 2026-06-02 08:24:02.198145 | debian-bookworm | skipping: Conditional result was False 2026-06-02 08:24:02.199499 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 08:24:02.206544 | 2026-06-02 08:24:02.206659 | TASK [add-build-sshkey : Enable access via build key on all nodes] 2026-06-02 08:24:02.887647 | debian-bookworm | changed 2026-06-02 08:24:02.929836 | ubuntu-noble | changed 2026-06-02 08:24:02.940483 | 2026-06-02 08:24:02.940699 | TASK [add-build-sshkey : Make sure user has a .ssh] 2026-06-02 08:24:03.230146 | debian-bookworm | ok 2026-06-02 08:24:03.258130 | ubuntu-noble | ok 2026-06-02 08:24:03.265014 | 2026-06-02 08:24:03.265185 | TASK [add-build-sshkey : Install build private key as SSH key on all nodes] 2026-06-02 08:24:03.959556 | debian-bookworm | changed 2026-06-02 08:24:03.992695 | ubuntu-noble | changed 2026-06-02 08:24:04.001619 | 2026-06-02 08:24:04.001768 | TASK [add-build-sshkey : Install build public key as SSH key on all nodes] 2026-06-02 08:24:04.782556 | debian-bookworm | changed 2026-06-02 08:24:04.787813 | ubuntu-noble | changed 2026-06-02 08:24:04.793136 | 2026-06-02 08:24:04.793235 | TASK [add-build-sshkey : Remote setup ssh keys (windows)] 2026-06-02 08:24:04.818752 | debian-bookworm | skipping: Conditional result was False 2026-06-02 08:24:04.829672 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 08:24:04.835528 | 2026-06-02 08:24:04.835631 | TASK [remove-zuul-sshkey : Remove master key from local agent] 2026-06-02 08:24:05.230419 | debian-bookworm -> localhost | changed 2026-06-02 08:24:05.258738 | 2026-06-02 08:24:05.258927 | TASK [add-build-sshkey : Add back temp key] 2026-06-02 08:24:05.624046 | debian-bookworm -> localhost | Identity added: /var/lib/zuul/builds/dec99bfba93846f596ecb5720898f196/work/dec99bfba93846f596ecb5720898f196_id_rsa (zuul-build-sshkey) 2026-06-02 08:24:05.624657 | debian-bookworm -> localhost | ok: Runtime: 0:00:00.020039 2026-06-02 08:24:05.638931 | 2026-06-02 08:24:05.639118 | TASK [add-build-sshkey : Verify we can still SSH to all nodes] 2026-06-02 08:24:05.993122 | debian-bookworm | ok 2026-06-02 08:24:06.017554 | ubuntu-noble | ok 2026-06-02 08:24:06.030200 | 2026-06-02 08:24:06.030391 | TASK [add-build-sshkey : Verify we can still SSH to all nodes (windows)] 2026-06-02 08:24:06.057703 | debian-bookworm | skipping: Conditional result was False 2026-06-02 08:24:06.079099 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 08:24:06.108008 | 2026-06-02 08:24:06.108183 | TASK [start-zuul-console : Start zuul_console daemon.] 2026-06-02 08:24:06.501531 | debian-bookworm | ok 2026-06-02 08:24:06.544147 | ubuntu-noble | ok 2026-06-02 08:24:06.566349 | 2026-06-02 08:24:06.566494 | TASK [validate-host : Define zuul_info_dir fact] 2026-06-02 08:24:06.599858 | debian-bookworm | ok 2026-06-02 08:24:06.615332 | ubuntu-noble | ok 2026-06-02 08:24:06.622674 | 2026-06-02 08:24:06.622871 | TASK [validate-host : Ensure Zuul Ansible directory exists] 2026-06-02 08:24:06.944689 | debian-bookworm -> localhost | ok 2026-06-02 08:24:06.956757 | 2026-06-02 08:24:06.956907 | TASK [validate-host : Collect information about the host] 2026-06-02 08:24:08.025998 | debian-bookworm | ok 2026-06-02 08:24:08.096672 | ubuntu-noble | ok 2026-06-02 08:24:08.108118 | 2026-06-02 08:24:08.108245 | TASK [validate-host : Sanitize hostname] 2026-06-02 08:24:08.169422 | debian-bookworm | ok 2026-06-02 08:24:08.196351 | ubuntu-noble | ok 2026-06-02 08:24:08.201497 | 2026-06-02 08:24:08.201611 | TASK [validate-host : Write out all ansible variables/facts known for each host] 2026-06-02 08:24:08.804894 | ubuntu-noble -> localhost | changed 2026-06-02 08:24:08.836597 | debian-bookworm -> localhost | changed 2026-06-02 08:24:08.842663 | 2026-06-02 08:24:08.842779 | TASK [validate-host : Collect information about zuul worker] 2026-06-02 08:24:09.340810 | debian-bookworm | ok 2026-06-02 08:24:09.359794 | ubuntu-noble | ok 2026-06-02 08:24:09.364740 | 2026-06-02 08:24:09.364857 | TASK [validate-host : Write out all zuul information for each host] 2026-06-02 08:24:09.937155 | ubuntu-noble -> localhost | changed 2026-06-02 08:24:09.978955 | debian-bookworm -> localhost | changed 2026-06-02 08:24:09.992587 | 2026-06-02 08:24:09.992734 | TASK [prepare-workspace-log : Start zuul_console daemon.] 2026-06-02 08:24:10.271233 | debian-bookworm | ok 2026-06-02 08:24:10.308762 | ubuntu-noble | ok 2026-06-02 08:24:10.315821 | 2026-06-02 08:24:10.316083 | TASK [prepare-workspace-log : Synchronize src repos to workspace directory.] 2026-06-02 08:24:11.551595 | debian-bookworm | changed: 2026-06-02 08:24:11.552111 | debian-bookworm | cd+++++++++ src/ 2026-06-02 08:24:11.552181 | debian-bookworm | cd+++++++++ src/github.com/ 2026-06-02 08:24:11.552212 | debian-bookworm | cd+++++++++ src/github.com/osism/ 2026-06-02 08:24:11.552238 | debian-bookworm | cd+++++++++ src/github.com/osism/ansible-collection-services/ 2026-06-02 08:24:11.552262 | debian-bookworm | config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 08:25:23.525628 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 08:25:23.563441 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 08:25:24.142033 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 08:25:24.142680 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 08:25:24.164542 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 08:25:24.170225 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: dependency 2026-06-02 08:25:24.170263 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 08:25:24.126717 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 08:25:24.127278 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 08:25:24.149207 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 08:25:24.154907 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: dependency 2026-06-02 08:25:24.154971 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 08:25:25.338200 | debian-bookworm | INFO [delegated > dependency] Executing 2026-06-02 08:25:25.338607 | debian-bookworm | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-02 08:25:25.455018 | ubuntu-noble | INFO [delegated > dependency] Executing 2026-06-02 08:25:25.455602 | ubuntu-noble | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-02 08:25:25.839969 | ubuntu-noble | ansible-galaxy [core 2.18.17] 2026-06-02 08:25:25.840016 | ubuntu-noble | config file = None 2026-06-02 08:25:25.840024 | ubuntu-noble | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-02 08:25:25.840029 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-02 08:25:25.840039 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.12/site-packages:/home/zuul/venv/lib/python3.12/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.12/dist-packages 2026-06-02 08:25:25.840047 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-02 08:25:25.840124 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) [GCC 13.3.0] (/home/zuul/venv/bin/python3) 2026-06-02 08:25:25.840402 | ubuntu-noble | jinja version = 3.1.6 2026-06-02 08:25:25.840738 | ubuntu-noble | libyaml = True 2026-06-02 08:25:25.841042 | ubuntu-noble | No config file found; using defaults 2026-06-02 08:25:25.841527 | ubuntu-noble | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-02 08:25:25.849796 | ubuntu-noble | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware 2026-06-02 08:25:25.850210 | ubuntu-noble | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware' 2026-06-02 08:25:25.850594 | ubuntu-noble | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-02 08:25:25.850969 | ubuntu-noble | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-02 08:25:25.852147 | ubuntu-noble | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon 2026-06-02 08:25:25.852507 | ubuntu-noble | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon' 2026-06-02 08:25:25.853703 | ubuntu-noble | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud 2026-06-02 08:25:25.854066 | ubuntu-noble | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud' 2026-06-02 08:25:25.854556 | ubuntu-noble | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq 2026-06-02 08:25:25.854902 | ubuntu-noble | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq' 2026-06-02 08:25:25.855274 | ubuntu-noble | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules 2026-06-02 08:25:25.855638 | ubuntu-noble | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-02 08:25:25.859583 | ubuntu-noble | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios 2026-06-02 08:25:25.859789 | ubuntu-noble | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios' 2026-06-02 08:25:25.860718 | ubuntu-noble | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt 2026-06-02 08:25:25.861095 | ubuntu-noble | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt' 2026-06-02 08:25:25.862124 | ubuntu-noble | Loading collection google.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud 2026-06-02 08:25:25.862488 | ubuntu-noble | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud' 2026-06-02 08:25:25.862829 | ubuntu-noble | Loading collection community.routeros from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros 2026-06-02 08:25:25.863213 | ubuntu-noble | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros' 2026-06-02 08:25:25.863496 | ubuntu-noble | Loading collection ansible.utils from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils 2026-06-02 08:25:25.863834 | ubuntu-noble | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils' 2026-06-02 08:25:25.864265 | ubuntu-noble | Loading collection community.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows 2026-06-02 08:25:25.864624 | ubuntu-noble | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows' 2026-06-02 08:25:25.890069 | ubuntu-noble | Loading collection community.general from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general 2026-06-02 08:25:25.890393 | ubuntu-noble | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general' 2026-06-02 08:25:25.891293 | ubuntu-noble | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage 2026-06-02 08:25:25.891651 | ubuntu-noble | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage' 2026-06-02 08:25:25.892167 | ubuntu-noble | Loading collection wti.remote from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote 2026-06-02 08:25:25.892526 | ubuntu-noble | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote' 2026-06-02 08:25:25.892860 | ubuntu-noble | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-02 08:25:25.893220 | ubuntu-noble | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-02 08:25:25.893593 | ubuntu-noble | Loading collection community.docker from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker 2026-06-02 08:25:25.893943 | ubuntu-noble | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker' 2026-06-02 08:25:25.894280 | ubuntu-noble | Loading collection cloud.common from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common 2026-06-02 08:25:25.894634 | ubuntu-noble | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common' 2026-06-02 08:25:25.895566 | ubuntu-noble | Loading collection community.crypto from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto 2026-06-02 08:25:25.896453 | ubuntu-noble | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto' 2026-06-02 08:25:25.896805 | ubuntu-noble | Loading collection community.mysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql 2026-06-02 08:25:25.897130 | ubuntu-noble | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql' 2026-06-02 08:25:25.897533 | ubuntu-noble | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-02 08:25:25.897808 | ubuntu-noble | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-02 08:25:25.898115 | ubuntu-noble | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage 2026-06-02 08:25:25.898379 | ubuntu-noble | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-02 08:25:25.898817 | ubuntu-noble | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud 2026-06-02 08:25:25.899123 | ubuntu-noble | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud' 2026-06-02 08:25:25.899430 | ubuntu-noble | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-02 08:25:25.901026 | ubuntu-noble | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-02 08:25:25.901078 | ubuntu-noble | Loading collection splunk.es from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es 2026-06-02 08:25:25.901089 | ubuntu-noble | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es' 2026-06-02 08:25:25.902344 | ubuntu-noble | Loading collection cisco.mso from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso 2026-06-02 08:25:25.902381 | ubuntu-noble | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso' 2026-06-02 08:25:25.902390 | ubuntu-noble | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight 2026-06-02 08:25:25.902398 | ubuntu-noble | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight' 2026-06-02 08:25:25.904760 | ubuntu-noble | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos 2026-06-02 08:25:25.904788 | ubuntu-noble | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos' 2026-06-02 08:25:25.904797 | ubuntu-noble | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim 2026-06-02 08:25:25.904805 | ubuntu-noble | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim' 2026-06-02 08:25:25.904812 | ubuntu-noble | Loading collection community.mongodb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb 2026-06-02 08:25:25.904819 | ubuntu-noble | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb' 2026-06-02 08:25:25.905149 | ubuntu-noble | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt 2026-06-02 08:25:25.905527 | ubuntu-noble | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt' 2026-06-02 08:25:25.905841 | ubuntu-noble | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas 2026-06-02 08:25:25.906175 | ubuntu-noble | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas' 2026-06-02 08:25:25.906703 | ubuntu-noble | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox 2026-06-02 08:25:25.907008 | ubuntu-noble | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox' 2026-06-02 08:25:25.907582 | ubuntu-noble | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-02 08:25:25.907855 | ubuntu-noble | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-02 08:25:25.908143 | ubuntu-noble | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core 2026-06-02 08:25:25.908431 | ubuntu-noble | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core' 2026-06-02 08:25:25.909236 | ubuntu-noble | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos 2026-06-02 08:25:25.909546 | ubuntu-noble | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos' 2026-06-02 08:25:25.910301 | ubuntu-noble | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-02 08:25:25.910601 | ubuntu-noble | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-02 08:25:25.910868 | ubuntu-noble | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault 2026-06-02 08:25:25.911155 | ubuntu-noble | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault' 2026-06-02 08:25:25.911437 | ubuntu-noble | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-02 08:25:25.911705 | ubuntu-noble | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-02 08:25:25.912484 | ubuntu-noble | Loading collection arista.eos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos 2026-06-02 08:25:25.912745 | ubuntu-noble | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos' 2026-06-02 08:25:25.913011 | ubuntu-noble | Loading collection ansible.posix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix 2026-06-02 08:25:25.913276 | ubuntu-noble | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix' 2026-06-02 08:25:25.913537 | ubuntu-noble | Loading collection community.sops from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops 2026-06-02 08:25:25.913782 | ubuntu-noble | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops' 2026-06-02 08:25:25.915698 | ubuntu-noble | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki 2026-06-02 08:25:25.916050 | ubuntu-noble | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki' 2026-06-02 08:25:25.916399 | ubuntu-noble | Loading collection ansible.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows 2026-06-02 08:25:25.916685 | ubuntu-noble | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows' 2026-06-02 08:25:25.916953 | ubuntu-noble | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb 2026-06-02 08:25:25.917211 | ubuntu-noble | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb' 2026-06-02 08:25:25.918144 | ubuntu-noble | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap 2026-06-02 08:25:25.918403 | ubuntu-noble | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap' 2026-06-02 08:25:25.918667 | ubuntu-noble | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana 2026-06-02 08:25:25.918937 | ubuntu-noble | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana' 2026-06-02 08:25:25.919730 | ubuntu-noble | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr 2026-06-02 08:25:25.919969 | ubuntu-noble | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr' 2026-06-02 08:25:25.920268 | ubuntu-noble | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox 2026-06-02 08:25:25.920505 | ubuntu-noble | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox' 2026-06-02 08:25:25.920841 | ubuntu-noble | Loading collection cisco.asa from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa 2026-06-02 08:25:25.921076 | ubuntu-noble | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa' 2026-06-02 08:25:25.921437 | ubuntu-noble | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid 2026-06-02 08:25:25.921661 | ubuntu-noble | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid' 2026-06-02 08:25:25.923309 | ubuntu-noble | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman 2026-06-02 08:25:25.923659 | ubuntu-noble | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman' 2026-06-02 08:25:25.923875 | ubuntu-noble | Loading collection community.proxysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql 2026-06-02 08:25:25.924107 | ubuntu-noble | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql' 2026-06-02 08:25:25.924379 | ubuntu-noble | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade 2026-06-02 08:25:25.924646 | ubuntu-noble | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade' 2026-06-02 08:25:25.925044 | ubuntu-noble | Loading collection community.dns from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns 2026-06-02 08:25:25.925284 | ubuntu-noble | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns' 2026-06-02 08:25:25.927222 | ubuntu-noble | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection 2026-06-02 08:25:25.927542 | ubuntu-noble | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection' 2026-06-02 08:25:25.927952 | ubuntu-noble | Loading collection community.postgresql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql 2026-06-02 08:25:25.928215 | ubuntu-noble | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql' 2026-06-02 08:25:25.928498 | ubuntu-noble | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go 2026-06-02 08:25:25.928733 | ubuntu-noble | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go' 2026-06-02 08:25:25.928979 | ubuntu-noble | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules 2026-06-02 08:25:25.929212 | ubuntu-noble | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-02 08:25:25.929699 | ubuntu-noble | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar 2026-06-02 08:25:25.929959 | ubuntu-noble | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar' 2026-06-02 08:25:25.930282 | ubuntu-noble | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad 2026-06-02 08:25:25.930548 | ubuntu-noble | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad' 2026-06-02 08:25:25.933025 | ubuntu-noble | Loading collection awx.awx from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx 2026-06-02 08:25:25.933332 | ubuntu-noble | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx' 2026-06-02 08:25:25.934043 | ubuntu-noble | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core 2026-06-02 08:25:25.934323 | ubuntu-noble | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core' 2026-06-02 08:25:25.935075 | ubuntu-noble | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity 2026-06-02 08:25:25.935334 | ubuntu-noble | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity' 2026-06-02 08:25:25.935807 | ubuntu-noble | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex 2026-06-02 08:25:25.936079 | ubuntu-noble | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex' 2026-06-02 08:25:25.939668 | ubuntu-noble | Loading collection community.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws 2026-06-02 08:25:25.940039 | ubuntu-noble | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws' 2026-06-02 08:25:25.940373 | ubuntu-noble | Loading collection community.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana 2026-06-02 08:25:25.940633 | ubuntu-noble | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana' 2026-06-02 08:25:25.696653 | debian-bookworm | ansible-galaxy [core 2.18.17] 2026-06-02 08:25:25.696997 | debian-bookworm | config file = None 2026-06-02 08:25:25.697339 | debian-bookworm | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-02 08:25:25.697663 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-02 08:25:25.697952 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.11/site-packages:/home/zuul/venv/lib/python3.11/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.11/dist-packages 2026-06-02 08:25:25.698215 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-02 08:25:25.698487 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) [GCC 12.2.0] (/home/zuul/venv/bin/python3) 2026-06-02 08:25:25.698752 | debian-bookworm | jinja version = 3.1.6 2026-06-02 08:25:25.698978 | debian-bookworm | libyaml = True 2026-06-02 08:25:25.699215 | debian-bookworm | No config file found; using defaults 2026-06-02 08:25:25.699570 | debian-bookworm | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-02 08:25:25.702223 | debian-bookworm | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go 2026-06-02 08:25:25.702660 | debian-bookworm | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go' 2026-06-02 08:25:25.706780 | debian-bookworm | Loading collection community.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws 2026-06-02 08:25:25.707064 | debian-bookworm | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws' 2026-06-02 08:25:25.707586 | debian-bookworm | Loading collection ansible.posix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix 2026-06-02 08:25:25.707970 | debian-bookworm | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix' 2026-06-02 08:25:25.710594 | debian-bookworm | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2026-06-02 08:25:25.711173 | debian-bookworm | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-02 08:25:25.720500 | debian-bookworm | Loading collection community.general from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general 2026-06-02 08:25:25.720867 | debian-bookworm | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general' 2026-06-02 08:25:25.721250 | debian-bookworm | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2026-06-02 08:25:25.721587 | debian-bookworm | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-02 08:25:25.723086 | debian-bookworm | Loading collection cisco.mso from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso 2026-06-02 08:25:25.723464 | debian-bookworm | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso' 2026-06-02 08:25:25.724117 | debian-bookworm | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt 2026-06-02 08:25:25.724462 | debian-bookworm | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2026-06-02 08:25:25.724797 | debian-bookworm | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad 2026-06-02 08:25:25.725169 | debian-bookworm | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad' 2026-06-02 08:25:25.725917 | debian-bookworm | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox 2026-06-02 08:25:25.726539 | debian-bookworm | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2026-06-02 08:25:25.726925 | debian-bookworm | Loading collection google.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud 2026-06-02 08:25:25.727540 | debian-bookworm | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud' 2026-06-02 08:25:25.727953 | debian-bookworm | Loading collection community.proxysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql 2026-06-02 08:25:25.728441 | debian-bookworm | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql' 2026-06-02 08:25:25.731024 | debian-bookworm | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios 2026-06-02 08:25:25.731400 | debian-bookworm | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios' 2026-06-02 08:25:25.731752 | debian-bookworm | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2026-06-02 08:25:25.732150 | debian-bookworm | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-02 08:25:25.733039 | debian-bookworm | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud 2026-06-02 08:25:25.733405 | debian-bookworm | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2026-06-02 08:25:25.733742 | debian-bookworm | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-02 08:25:25.734077 | debian-bookworm | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-02 08:25:25.734859 | debian-bookworm | Loading collection arista.eos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos 2026-06-02 08:25:25.735217 | debian-bookworm | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos' 2026-06-02 08:25:25.735562 | debian-bookworm | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core 2026-06-02 08:25:25.735903 | debian-bookworm | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core' 2026-06-02 08:25:25.736308 | debian-bookworm | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-02 08:25:25.736608 | debian-bookworm | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-02 08:25:25.736882 | debian-bookworm | Loading collection community.mysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql 2026-06-02 08:25:25.737179 | debian-bookworm | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql' 2026-06-02 08:25:25.737449 | debian-bookworm | Loading collection cisco.asa from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa 2026-06-02 08:25:25.737738 | debian-bookworm | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa' 2026-06-02 08:25:25.738281 | debian-bookworm | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-02 08:25:25.738575 | debian-bookworm | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-02 08:25:25.738810 | debian-bookworm | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana 2026-06-02 08:25:25.739042 | debian-bookworm | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana' 2026-06-02 08:25:25.739756 | debian-bookworm | Loading collection splunk.es from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es 2026-06-02 08:25:25.740051 | debian-bookworm | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es' 2026-06-02 08:25:25.741404 | debian-bookworm | Loading collection amazon.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws 2026-06-02 08:25:25.742353 | debian-bookworm | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws' 2026-06-02 08:25:25.742892 | debian-bookworm | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex 2026-06-02 08:25:25.743248 | debian-bookworm | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2026-06-02 08:25:25.743710 | debian-bookworm | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid 2026-06-02 08:25:25.744043 | debian-bookworm | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2026-06-02 08:25:25.745516 | debian-bookworm | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos 2026-06-02 08:25:25.745883 | debian-bookworm | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos' 2026-06-02 08:25:25.746275 | debian-bookworm | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-02 08:25:25.746650 | debian-bookworm | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-02 08:25:25.746991 | debian-bookworm | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-02 08:25:25.747351 | debian-bookworm | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-02 08:25:25.747766 | debian-bookworm | Loading collection community.proxmox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox 2026-06-02 08:25:25.748150 | debian-bookworm | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox' 2026-06-02 08:25:25.748917 | debian-bookworm | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap 2026-06-02 08:25:25.749281 | debian-bookworm | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap' 2026-06-02 08:25:25.751219 | debian-bookworm | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection 2026-06-02 08:25:25.751577 | debian-bookworm | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection' 2026-06-02 08:25:25.787491 | debian-bookworm | Loading collection community.network from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network 2026-06-02 08:25:25.787893 | debian-bookworm | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network' 2026-06-02 08:25:25.788368 | debian-bookworm | Loading collection community.dns from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns 2026-06-02 08:25:25.788692 | debian-bookworm | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns' 2026-06-02 08:25:25.789000 | debian-bookworm | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-02 08:25:25.789454 | debian-bookworm | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-02 08:25:25.789756 | debian-bookworm | Loading collection community.mongodb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb 2026-06-02 08:25:25.790083 | debian-bookworm | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb' 2026-06-02 08:25:25.790432 | debian-bookworm | Loading collection community.okd from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd 2026-06-02 08:25:25.790717 | debian-bookworm | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd' 2026-06-02 08:25:25.791518 | debian-bookworm | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud 2026-06-02 08:25:25.791806 | debian-bookworm | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud' 2026-06-02 08:25:25.792075 | debian-bookworm | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault 2026-06-02 08:25:25.792384 | debian-bookworm | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault' 2026-06-02 08:25:25.793574 | debian-bookworm | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon 2026-06-02 08:25:25.793916 | debian-bookworm | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon' 2026-06-02 08:25:25.794432 | debian-bookworm | Loading collection community.postgresql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql 2026-06-02 08:25:25.794694 | debian-bookworm | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql' 2026-06-02 08:25:25.795283 | debian-bookworm | Loading collection community.crypto from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto 2026-06-02 08:25:25.795546 | debian-bookworm | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto' 2026-06-02 08:25:25.795899 | debian-bookworm | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq 2026-06-02 08:25:25.796179 | debian-bookworm | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq' 2026-06-02 08:25:25.796728 | debian-bookworm | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar 2026-06-02 08:25:25.797032 | debian-bookworm | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar' 2026-06-02 08:25:25.797360 | debian-bookworm | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac 2026-06-02 08:25:25.797610 | debian-bookworm | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac' 2026-06-02 08:25:25.799668 | debian-bookworm | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki 2026-06-02 08:25:25.799894 | debian-bookworm | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki' 2026-06-02 08:25:25.800767 | debian-bookworm | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox 2026-06-02 08:25:25.800996 | debian-bookworm | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox' 2026-06-02 08:25:25.803434 | debian-bookworm | Loading collection awx.awx from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx 2026-06-02 08:25:25.803767 | debian-bookworm | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx' 2026-06-02 08:25:25.804284 | debian-bookworm | Loading collection wti.remote from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote 2026-06-02 08:25:25.804515 | debian-bookworm | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote' 2026-06-02 08:25:25.805341 | debian-bookworm | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity 2026-06-02 08:25:25.805567 | debian-bookworm | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity' 2026-06-02 08:25:25.807258 | debian-bookworm | Loading collection community.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware 2026-06-02 08:25:25.807493 | debian-bookworm | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware' 2026-06-02 08:25:25.808022 | debian-bookworm | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware 2026-06-02 08:25:25.808272 | debian-bookworm | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware' 2026-06-02 08:25:25.808613 | debian-bookworm | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2026-06-02 08:25:25.808841 | debian-bookworm | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-02 08:25:25.809070 | debian-bookworm | Loading collection ansible.utils from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils 2026-06-02 08:25:25.809381 | debian-bookworm | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils' 2026-06-02 08:25:25.809654 | debian-bookworm | Loading collection cloud.common from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common 2026-06-02 08:25:25.809980 | debian-bookworm | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common' 2026-06-02 08:25:25.810301 | debian-bookworm | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs 2026-06-02 08:25:25.810592 | debian-bookworm | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs' 2026-06-02 08:25:25.810926 | debian-bookworm | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-02 08:25:25.811211 | debian-bookworm | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-02 08:25:25.811708 | debian-bookworm | Loading collection community.hrobot from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot 2026-06-02 08:25:25.811977 | debian-bookworm | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot' 2026-06-02 08:25:25.813069 | debian-bookworm | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud 2026-06-02 08:25:25.813665 | debian-bookworm | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud' 2026-06-02 08:25:25.814195 | debian-bookworm | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos 2026-06-02 08:25:25.814569 | debian-bookworm | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos' 2026-06-02 08:25:25.814998 | debian-bookworm | Loading collection community.libvirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt 2026-06-02 08:25:25.815327 | debian-bookworm | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt' 2026-06-02 08:25:25.816228 | debian-bookworm | Loading collection cisco.aci from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci 2026-06-02 08:25:25.816576 | debian-bookworm | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci' 2026-06-02 08:25:25.816908 | debian-bookworm | Loading collection cisco.ise from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise 2026-06-02 08:25:25.817263 | debian-bookworm | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise' 2026-06-02 08:25:25.817518 | debian-bookworm | Loading collection containers.podman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman 2026-06-02 08:25:25.817859 | debian-bookworm | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman' 2026-06-02 08:25:25.818117 | debian-bookworm | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade 2026-06-02 08:25:25.818617 | debian-bookworm | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2026-06-02 08:25:25.818885 | debian-bookworm | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray 2026-06-02 08:25:25.819264 | debian-bookworm | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2026-06-02 08:25:25.819514 | debian-bookworm | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight 2026-06-02 08:25:25.819770 | debian-bookworm | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight' 2026-06-02 08:25:25.820107 | debian-bookworm | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr 2026-06-02 08:25:25.820471 | debian-bookworm | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr' 2026-06-02 08:25:25.820719 | debian-bookworm | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-02 08:25:25.821057 | debian-bookworm | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-02 08:25:25.821344 | debian-bookworm | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis 2026-06-02 08:25:25.821681 | debian-bookworm | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis' 2026-06-02 08:25:25.821931 | debian-bookworm | Loading collection community.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana 2026-06-02 08:25:25.822363 | debian-bookworm | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana' 2026-06-02 08:25:25.822648 | debian-bookworm | Loading collection community.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows 2026-06-02 08:25:25.823004 | debian-bookworm | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows' 2026-06-02 08:25:25.823289 | debian-bookworm | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs 2026-06-02 08:25:25.823579 | debian-bookworm | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs' 2026-06-02 08:25:25.823787 | debian-bookworm | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb 2026-06-02 08:25:25.823996 | debian-bookworm | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb' 2026-06-02 08:25:25.824317 | debian-bookworm | Loading collection ansible.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows 2026-06-02 08:25:25.824520 | debian-bookworm | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows' 2026-06-02 08:25:25.824834 | debian-bookworm | Loading collection community.zabbix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix 2026-06-02 08:25:25.825108 | debian-bookworm | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix' 2026-06-02 08:25:25.825447 | debian-bookworm | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim 2026-06-02 08:25:25.825724 | debian-bookworm | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim' 2026-06-02 08:25:25.826073 | debian-bookworm | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur 2026-06-02 08:25:25.826351 | debian-bookworm | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur' 2026-06-02 08:25:25.827099 | debian-bookworm | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos 2026-06-02 08:25:25.827432 | debian-bookworm | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2026-06-02 08:25:25.827681 | debian-bookworm | Loading collection community.sops from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops 2026-06-02 08:25:25.827926 | debian-bookworm | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops' 2026-06-02 08:25:25.828422 | debian-bookworm | Loading collection community.docker from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker 2026-06-02 08:25:25.828718 | debian-bookworm | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker' 2026-06-02 08:25:25.829003 | debian-bookworm | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2026-06-02 08:25:25.829276 | debian-bookworm | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-02 08:25:25.830040 | debian-bookworm | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-02 08:25:25.830298 | debian-bookworm | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-02 08:25:25.831440 | debian-bookworm | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean 2026-06-02 08:25:25.831757 | debian-bookworm | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean' 2026-06-02 08:25:25.832448 | debian-bookworm | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core 2026-06-02 08:25:25.832759 | debian-bookworm | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core' 2026-06-02 08:25:25.833065 | debian-bookworm | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-02 08:25:25.833348 | debian-bookworm | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-02 08:25:25.833771 | debian-bookworm | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas 2026-06-02 08:25:25.834072 | debian-bookworm | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas' 2026-06-02 08:25:25.834329 | debian-bookworm | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-02 08:25:25.834615 | debian-bookworm | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-02 08:25:25.834881 | debian-bookworm | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2026-06-02 08:25:25.835167 | debian-bookworm | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-02 08:25:25.835498 | debian-bookworm | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb 2026-06-02 08:25:25.835719 | debian-bookworm | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb' 2026-06-02 08:25:25.836253 | debian-bookworm | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt 2026-06-02 08:25:25.836520 | debian-bookworm | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt' 2026-06-02 08:25:25.837174 | debian-bookworm | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage 2026-06-02 08:25:25.837499 | debian-bookworm | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2026-06-02 08:25:25.838518 | debian-bookworm | Loading collection cisco.ios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios 2026-06-02 08:25:25.838711 | debian-bookworm | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios' 2026-06-02 08:25:25.844810 | debian-bookworm | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2026-06-02 08:25:25.845141 | debian-bookworm | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-02 08:25:25.845450 | debian-bookworm | Loading collection community.routeros from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros 2026-06-02 08:25:25.845759 | debian-bookworm | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros' 2026-06-02 08:25:25.847934 | debian-bookworm | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman 2026-06-02 08:25:25.848495 | debian-bookworm | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman' 2026-06-02 08:25:25.848942 | debian-bookworm | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-02 08:25:25.849376 | debian-bookworm | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-02 08:25:25.853852 | debian-bookworm | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-02 08:25:25.854271 | debian-bookworm | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-02 08:25:25.858038 | debian-bookworm | Initial connection to galaxy_server: https://galaxy.ansible.com 2026-06-02 08:25:25.858540 | debian-bookworm | Created /home/zuul/.ansible/galaxy_token 2026-06-02 08:25:25.858818 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/ 2026-06-02 08:25:25.941891 | ubuntu-noble | Loading collection cisco.ios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios 2026-06-02 08:25:25.941913 | ubuntu-noble | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios' 2026-06-02 08:25:25.942139 | ubuntu-noble | Loading collection community.okd from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd 2026-06-02 08:25:25.942438 | ubuntu-noble | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd' 2026-06-02 08:25:25.942664 | ubuntu-noble | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur 2026-06-02 08:25:25.942981 | ubuntu-noble | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur' 2026-06-02 08:25:25.943435 | ubuntu-noble | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud 2026-06-02 08:25:25.943748 | ubuntu-noble | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud' 2026-06-02 08:25:25.982094 | ubuntu-noble | Loading collection community.network from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network 2026-06-02 08:25:25.982483 | ubuntu-noble | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network' 2026-06-02 08:25:25.984055 | ubuntu-noble | Loading collection community.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware 2026-06-02 08:25:25.984377 | ubuntu-noble | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware' 2026-06-02 08:25:25.984806 | ubuntu-noble | Loading collection community.proxmox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox 2026-06-02 08:25:25.985076 | ubuntu-noble | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox' 2026-06-02 08:25:25.985391 | ubuntu-noble | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager 2026-06-02 08:25:25.985649 | ubuntu-noble | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-02 08:25:25.991616 | ubuntu-noble | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager 2026-06-02 08:25:25.991994 | ubuntu-noble | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-02 08:25:25.993634 | ubuntu-noble | Loading collection cisco.aci from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci 2026-06-02 08:25:25.993954 | ubuntu-noble | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci' 2026-06-02 08:25:25.994323 | ubuntu-noble | Loading collection community.hrobot from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot 2026-06-02 08:25:25.994576 | ubuntu-noble | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot' 2026-06-02 08:25:25.994889 | ubuntu-noble | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs 2026-06-02 08:25:25.995218 | ubuntu-noble | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs' 2026-06-02 08:25:25.995822 | ubuntu-noble | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-02 08:25:25.996291 | ubuntu-noble | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-02 08:25:25.996308 | ubuntu-noble | Loading collection community.libvirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt 2026-06-02 08:25:25.996747 | ubuntu-noble | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt' 2026-06-02 08:25:25.996762 | ubuntu-noble | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis 2026-06-02 08:25:25.996976 | ubuntu-noble | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis' 2026-06-02 08:25:25.997212 | ubuntu-noble | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-02 08:25:25.997447 | ubuntu-noble | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-02 08:25:25.997679 | ubuntu-noble | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-02 08:25:25.997882 | ubuntu-noble | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-02 08:25:25.999234 | ubuntu-noble | Loading collection amazon.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws 2026-06-02 08:25:25.999565 | ubuntu-noble | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws' 2026-06-02 08:25:26.000054 | ubuntu-noble | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-02 08:25:26.000519 | ubuntu-noble | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-02 08:25:26.000531 | ubuntu-noble | Loading collection cisco.ise from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise 2026-06-02 08:25:26.000788 | ubuntu-noble | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise' 2026-06-02 08:25:26.001020 | ubuntu-noble | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray 2026-06-02 08:25:26.001248 | ubuntu-noble | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray' 2026-06-02 08:25:26.001586 | ubuntu-noble | Loading collection community.zabbix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix 2026-06-02 08:25:26.001998 | ubuntu-noble | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix' 2026-06-02 08:25:26.002013 | ubuntu-noble | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs 2026-06-02 08:25:26.002315 | ubuntu-noble | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs' 2026-06-02 08:25:26.003399 | ubuntu-noble | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean 2026-06-02 08:25:26.003698 | ubuntu-noble | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean' 2026-06-02 08:25:26.003968 | ubuntu-noble | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-02 08:25:26.004353 | ubuntu-noble | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-02 08:25:26.004364 | ubuntu-noble | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac 2026-06-02 08:25:26.004604 | ubuntu-noble | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac' 2026-06-02 08:25:26.006789 | ubuntu-noble | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos 2026-06-02 08:25:26.007144 | ubuntu-noble | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos' 2026-06-02 08:25:26.009867 | ubuntu-noble | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest 2026-06-02 08:25:26.010209 | ubuntu-noble | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-02 08:25:26.010509 | ubuntu-noble | Loading collection containers.podman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman 2026-06-02 08:25:26.010771 | ubuntu-noble | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman' 2026-06-02 08:25:26.011037 | ubuntu-noble | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage 2026-06-02 08:25:26.011280 | ubuntu-noble | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-02 08:25:26.011545 | ubuntu-noble | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb 2026-06-02 08:25:26.011821 | ubuntu-noble | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb' 2026-06-02 08:25:26.024042 | ubuntu-noble | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-02 08:25:26.024326 | ubuntu-noble | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-02 08:25:26.028768 | ubuntu-noble | Initial connection to galaxy_server: https://galaxy.ansible.com 2026-06-02 08:25:26.028794 | ubuntu-noble | Created /home/zuul/.ansible/galaxy_token 2026-06-02 08:25:26.028804 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/ 2026-06-02 08:25:26.358001 | ubuntu-noble | Found API version 'v3, pulp-v3, v1' with Galaxy server default (https://galaxy.ansible.com/api/) 2026-06-02 08:25:26.358129 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/ 2026-06-02 08:25:26.113662 | debian-bookworm | Found API version 'v3, pulp-v3, v1' with Galaxy server default (https://galaxy.ansible.com/api/) 2026-06-02 08:25:26.114156 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/ 2026-06-02 08:25:26.915908 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/?limit=100 2026-06-02 08:25:26.623986 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/?limit=100 2026-06-02 08:25:28.158222 | debian-bookworm | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/0.20260601.0/ 2026-06-02 08:25:28.526743 | ubuntu-noble | Calling Galaxy at https://galaxy.ansible.com/api/v3/collections/osism/commons/versions/0.20260601.0/ 2026-06-02 08:25:29.230598 | ubuntu-noble | Server https://galaxy.ansible.com/api/ has not signed osism.commons:0.20260601.0 2026-06-02 08:25:29.230652 | ubuntu-noble | Fetching a collection tarball for 'osism.commons:0.20260601.0' from Ansible Galaxy 2026-06-02 08:25:29.396032 | debian-bookworm | Server https://galaxy.ansible.com/api/ has not signed osism.commons:0.20260601.0 2026-06-02 08:25:29.396336 | debian-bookworm | Fetching a collection tarball for 'osism.commons:0.20260601.0' from Ansible Galaxy 2026-06-02 08:25:30.642063 | ubuntu-noble | Validating downloaded file hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 with expected hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 2026-06-02 08:25:30.642753 | ubuntu-noble | Collection 'osism.commons:0.20260601.0' obtained from server default https://galaxy.ansible.com/api/ 2026-06-02 08:25:30.812030 | ubuntu-noble | Starting galaxy collection install process 2026-06-02 08:25:30.812112 | ubuntu-noble | Process install dependency map 2026-06-02 08:25:30.812401 | ubuntu-noble | Starting collection install process 2026-06-02 08:25:30.812791 | ubuntu-noble | 'ansible.posix:1.6.2' is already installed, skipping. 2026-06-02 08:25:30.813182 | ubuntu-noble | 'community.docker:4.8.2' is already installed, skipping. 2026-06-02 08:25:30.813535 | ubuntu-noble | 'community.general:10.7.6' is already installed, skipping. 2026-06-02 08:25:30.814019 | ubuntu-noble | 'community.library_inventory_filtering_v1:1.1.5' is already installed, skipping. 2026-06-02 08:25:30.814375 | ubuntu-noble | Downloading https://galaxy.ansible.com/api/v3/plugin/ansible/content/published/collections/artifacts/osism-commons-0.20260601.0.tar.gz to /home/zuul/.ansible/tmp/ansible-local-1662dsjblz34/tmp793lmtyw/osism-commons-0.20260601.0-ztmr38b4 2026-06-02 08:25:30.814726 | ubuntu-noble | Installing 'osism.commons:0.20260601.0' to '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-02 08:25:30.815102 | ubuntu-noble | osism.commons:0.20260601.0 was installed successfully 2026-06-02 08:25:30.890045 | ubuntu-noble | INFO [delegated > dependency] Dependency completed successfully. 2026-06-02 08:25:30.890106 | ubuntu-noble | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from dependency_sequence to suppress) 2026-06-02 08:25:30.890121 | ubuntu-noble | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-02 08:25:31.065675 | debian-bookworm | Validating downloaded file hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 with expected hash 1d41d3b5d145afda8cce7ec8515d5495c0afe9a3787ce4d2ea101956f5f7e2b1 2026-06-02 08:25:31.066418 | debian-bookworm | Collection 'osism.commons:0.20260601.0' obtained from server default https://galaxy.ansible.com/api/ 2026-06-02 08:25:31.246852 | debian-bookworm | Starting galaxy collection install process 2026-06-02 08:25:31.246953 | debian-bookworm | Process install dependency map 2026-06-02 08:25:31.247092 | debian-bookworm | Starting collection install process 2026-06-02 08:25:31.247279 | debian-bookworm | 'ansible.posix:1.6.2' is already installed, skipping. 2026-06-02 08:25:31.247441 | debian-bookworm | 'community.docker:4.8.2' is already installed, skipping. 2026-06-02 08:25:31.247593 | debian-bookworm | 'community.general:10.7.6' is already installed, skipping. 2026-06-02 08:25:31.247704 | debian-bookworm | 'community.library_inventory_filtering_v1:1.1.5' is already installed, skipping. 2026-06-02 08:25:31.247872 | debian-bookworm | Downloading https://galaxy.ansible.com/api/v3/plugin/ansible/content/published/collections/artifacts/osism-commons-0.20260601.0.tar.gz to /home/zuul/.ansible/tmp/ansible-local-1857hi8phhp2/tmpmwf3skmz/osism-commons-0.20260601.0-wfd5012o 2026-06-02 08:25:31.248012 | debian-bookworm | Installing 'osism.commons:0.20260601.0' to '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-02 08:25:31.248173 | debian-bookworm | osism.commons:0.20260601.0 was installed successfully 2026-06-02 08:25:31.338641 | debian-bookworm | INFO [delegated > dependency] Dependency completed successfully. 2026-06-02 08:25:31.338750 | debian-bookworm | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from dependency_sequence to suppress) 2026-06-02 08:25:31.339092 | debian-bookworm | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-02 08:25:31.453164 | ubuntu-noble | ok: Runtime: 0:00:07.720070 2026-06-02 08:25:31.470170 | debian-bookworm | ok: Runtime: 0:00:08.206776 2026-06-02 08:25:31.481144 | 2026-06-02 08:25:31.481341 | TASK [ansible-molecule : Run molecule create action with scenario delegated] 2026-06-02 08:25:32.037287 | debian-bookworm | skipping: Conditional result was False 2026-06-02 08:25:32.038758 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 08:25:32.050524 | 2026-06-02 08:25:32.050715 | TASK [ansible-molecule : Run molecule prepare action with scenario delegated] 2026-06-02 08:25:32.785909 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 08:25:32.798220 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 08:25:32.690897 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 08:25:32.701058 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 08:25:33.305328 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 08:25:33.305992 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 08:25:33.326122 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 08:25:33.331676 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: prepare 2026-06-02 08:25:33.331896 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 08:25:33.168624 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 08:25:33.169489 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 08:25:33.193756 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 08:25:33.199353 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: prepare 2026-06-02 08:25:33.199432 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 08:25:34.381021 | debian-bookworm | INFO [delegated > prepare] Executing 2026-06-02 08:25:34.635488 | ubuntu-noble | INFO [delegated > prepare] Executing 2026-06-02 08:25:34.977029 | ubuntu-noble | DEBUG [delegated > prepare] ansible-playbook version: ansible-playbook 2026-06-02 08:25:34.977100 | ubuntu-noble | config file = None 2026-06-02 08:25:34.977131 | ubuntu-noble | configured module search path = 2026-06-02 08:25:34.977145 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-02 08:25:34.977158 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-02 08:25:34.977168 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-02 08:25:34.977178 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) (/home/zuul/venv/bin/python3) 2026-06-02 08:25:34.977189 | ubuntu-noble | jinja version = 3.1.6 2026-06-02 08:25:34.977199 | ubuntu-noble | libyaml = True 2026-06-02 08:25:34.977209 | ubuntu-noble | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 08:25:34.977219 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 08:25:34.977230 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 08:25:34.977240 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 08:25:34.977250 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 08:25:34.977260 | ubuntu-noble | ANSIBLE_ROLE: auditd 2026-06-02 08:25:34.977271 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 08:25:34.977281 | ubuntu-noble | ANSIBLE_VERBOSITY: 1 2026-06-02 08:25:34.977292 | ubuntu-noble | 2026-06-02 08:25:34.977304 | ubuntu-noble | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 08:25:34.977315 | ubuntu-noble | MOLECULE_DEBUG: True 2026-06-02 08:25:34.977325 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 08:25:34.977336 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2026-06-02 08:25:34.977346 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 08:25:34.977356 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 08:25:34.977366 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 08:25:34.977377 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 08:25:34.977387 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 08:25:34.977397 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 08:25:34.977408 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 08:25:34.977418 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 08:25:34.977428 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 08:25:34.977438 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 08:25:34.977448 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 08:25:34.977458 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 08:25:34.977469 | ubuntu-noble | 2026-06-02 08:25:34.977489 | ubuntu-noble | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 08:25:34.691598 | debian-bookworm | DEBUG [delegated > prepare] ansible-playbook version: ansible-playbook 2026-06-02 08:25:34.691660 | debian-bookworm | config file = None 2026-06-02 08:25:34.691677 | debian-bookworm | configured module search path = 2026-06-02 08:25:34.691683 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-02 08:25:34.691691 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-02 08:25:34.691695 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-02 08:25:34.691700 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) (/home/zuul/venv/bin/python3) 2026-06-02 08:25:34.691704 | debian-bookworm | jinja version = 3.1.6 2026-06-02 08:25:34.691708 | debian-bookworm | libyaml = True 2026-06-02 08:25:34.691814 | debian-bookworm | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 08:25:34.691820 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 08:25:34.691825 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 08:25:34.691829 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 08:25:34.691833 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 08:25:34.691837 | debian-bookworm | ANSIBLE_ROLE: auditd 2026-06-02 08:25:34.691841 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 08:25:34.691845 | debian-bookworm | ANSIBLE_VERBOSITY: 1 2026-06-02 08:25:34.691849 | debian-bookworm | 2026-06-02 08:25:34.692156 | debian-bookworm | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 08:25:34.692162 | debian-bookworm | MOLECULE_DEBUG: True 2026-06-02 08:25:34.692166 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 08:25:34.692170 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2026-06-02 08:25:34.692174 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 08:25:34.692178 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 08:25:34.692182 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 08:25:34.692187 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 08:25:34.692191 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 08:25:34.692195 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 08:25:34.692199 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 08:25:34.692203 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 08:25:34.692207 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 08:25:34.692211 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 08:25:34.692215 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 08:25:34.692219 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 08:25:34.692223 | debian-bookworm | 2026-06-02 08:25:34.692600 | debian-bookworm | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 08:25:34.961329 | debian-bookworm | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-02 08:25:35.279955 | ubuntu-noble | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-02 08:25:35.542233 | ubuntu-noble | 2026-06-02 08:25:35.542776 | ubuntu-noble | PLAY [Prepare] ***************************************************************** 2026-06-02 08:25:35.543250 | ubuntu-noble | 2026-06-02 08:25:35.544431 | ubuntu-noble | TASK [Gathering Facts] ********************************************************* 2026-06-02 08:25:35.227964 | debian-bookworm | 2026-06-02 08:25:35.228416 | debian-bookworm | PLAY [Prepare] ***************************************************************** 2026-06-02 08:25:35.228813 | debian-bookworm | 2026-06-02 08:25:35.229382 | debian-bookworm | TASK [Gathering Facts] ********************************************************* 2026-06-02 08:25:36.341467 | debian-bookworm | ok: [molecule-auditd] 2026-06-02 08:25:36.341593 | debian-bookworm | 2026-06-02 08:25:36.342036 | debian-bookworm | TASK [Install packages in venv] ************************************************ 2026-06-02 08:25:36.787472 | ubuntu-noble | ok: [molecule-auditd] 2026-06-02 08:25:36.787978 | ubuntu-noble | 2026-06-02 08:25:36.787998 | ubuntu-noble | TASK [Install packages in venv] ************************************************ 2026-06-02 08:25:41.004562 | debian-bookworm | changed: [molecule-auditd] => (item=docker) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "docker"], "item": "docker", "name": ["docker"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting docker\n Downloading docker-7.1.0-py3-none-any.whl (147 kB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 3.9 MB/s eta 0:00:00\nRequirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.34.2)\nRequirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.7.0)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.17)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (2026.5.20)\nInstalling collected packages: docker\nSuccessfully installed docker-7.1.0\n", "stdout_lines": ["Collecting docker", " Downloading docker-7.1.0-py3-none-any.whl (147 kB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 3.9 MB/s eta 0:00:00", "Requirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.34.2)", "Requirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.11/site-packages (from docker) (2.7.0)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (3.17)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests>=2.26.0->docker) (2026.5.20)", "Installing collected packages: docker", "Successfully installed docker-7.1.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 08:25:41.004807 | debian-bookworm | changed: [molecule-auditd] => (item=netaddr) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "netaddr"], "item": "netaddr", "name": ["netaddr"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting netaddr\n Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 12.7 MB/s eta 0:00:00\nInstalling collected packages: netaddr\nSuccessfully installed netaddr-1.3.0\n", "stdout_lines": ["Collecting netaddr", " Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 12.7 MB/s eta 0:00:00", "Installing collected packages: netaddr", "Successfully installed netaddr-1.3.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 08:25:41.004898 | debian-bookworm | ok: [molecule-auditd] => (item=requests) => {"ansible_loop_var": "item", "changed": false, "cmd": ["/home/zuul/venv/bin/pip3", "install", "requests"], "item": "requests", "name": ["requests"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Requirement already satisfied: requests in /home/zuul/venv/lib/python3.11/site-packages (2.34.2)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.17)\nRequirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2.7.0)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2026.5.20)\n", "stdout_lines": ["Requirement already satisfied: requests in /home/zuul/venv/lib/python3.11/site-packages (2.34.2)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (3.17)", "Requirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2.7.0)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.11/site-packages (from requests) (2026.5.20)"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 08:25:41.004916 | debian-bookworm | 2026-06-02 08:25:41.005033 | debian-bookworm | TASK [Include required prepare tasks] ****************************************** 2026-06-02 08:25:41.029001 | debian-bookworm | included: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/prepare/auditd.yml for molecule-auditd 2026-06-02 08:25:41.029064 | debian-bookworm | 2026-06-02 08:25:41.029182 | debian-bookworm | PLAY RECAP ********************************************************************* 2026-06-02 08:25:41.029294 | debian-bookworm | molecule-auditd : ok=3 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-02 08:25:41.029387 | debian-bookworm | 2026-06-02 08:25:41.114935 | debian-bookworm | INFO [delegated > prepare] Executed: Successful 2026-06-02 08:25:41.115317 | debian-bookworm | INFO Molecule executed 1 scenario (1 successful) 2026-06-02 08:25:41.393874 | ubuntu-noble | changed: [molecule-auditd] => (item=docker) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "docker"], "item": "docker", "name": ["docker"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting docker\n Downloading docker-7.1.0-py3-none-any.whl.metadata (3.8 kB)\nRequirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.34.2)\nRequirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.7.0)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.17)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (2026.5.20)\nDownloading docker-7.1.0-py3-none-any.whl (147 kB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 4.3 MB/s eta 0:00:00\nInstalling collected packages: docker\nSuccessfully installed docker-7.1.0\n", "stdout_lines": ["Collecting docker", " Downloading docker-7.1.0-py3-none-any.whl.metadata (3.8 kB)", "Requirement already satisfied: requests>=2.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.34.2)", "Requirement already satisfied: urllib3>=1.26.0 in /home/zuul/venv/lib/python3.12/site-packages (from docker) (2.7.0)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (3.17)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests>=2.26.0->docker) (2026.5.20)", "Downloading docker-7.1.0-py3-none-any.whl (147 kB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 147.8/147.8 kB 4.3 MB/s eta 0:00:00", "Installing collected packages: docker", "Successfully installed docker-7.1.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 08:25:41.394285 | ubuntu-noble | changed: [molecule-auditd] => (item=netaddr) => {"ansible_loop_var": "item", "changed": true, "cmd": ["/home/zuul/venv/bin/pip3", "install", "netaddr"], "item": "netaddr", "name": ["netaddr"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Collecting netaddr\n Downloading netaddr-1.3.0-py3-none-any.whl.metadata (5.0 kB)\nDownloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)\n ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 13.4 MB/s eta 0:00:00\nInstalling collected packages: netaddr\nSuccessfully installed netaddr-1.3.0\n", "stdout_lines": ["Collecting netaddr", " Downloading netaddr-1.3.0-py3-none-any.whl.metadata (5.0 kB)", "Downloading netaddr-1.3.0-py3-none-any.whl (2.3 MB)", " ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 2.3/2.3 MB 13.4 MB/s eta 0:00:00", "Installing collected packages: netaddr", "Successfully installed netaddr-1.3.0"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 08:25:41.394415 | ubuntu-noble | ok: [molecule-auditd] => (item=requests) => {"ansible_loop_var": "item", "changed": false, "cmd": ["/home/zuul/venv/bin/pip3", "install", "requests"], "item": "requests", "name": ["requests"], "requirements": null, "state": "present", "stderr": "", "stderr_lines": [], "stdout": "Requirement already satisfied: requests in /home/zuul/venv/lib/python3.12/site-packages (2.34.2)\nRequirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.4.7)\nRequirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.17)\nRequirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2.7.0)\nRequirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2026.5.20)\n", "stdout_lines": ["Requirement already satisfied: requests in /home/zuul/venv/lib/python3.12/site-packages (2.34.2)", "Requirement already satisfied: charset_normalizer<4,>=2 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.4.7)", "Requirement already satisfied: idna<4,>=2.5 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (3.17)", "Requirement already satisfied: urllib3<3,>=1.26 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2.7.0)", "Requirement already satisfied: certifi>=2023.5.7 in /home/zuul/venv/lib/python3.12/site-packages (from requests) (2026.5.20)"], "version": null, "virtualenv": "/home/zuul/venv"} 2026-06-02 08:25:41.394523 | ubuntu-noble | 2026-06-02 08:25:41.394629 | ubuntu-noble | TASK [Include required prepare tasks] ****************************************** 2026-06-02 08:25:41.413416 | ubuntu-noble | included: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/prepare/auditd.yml for molecule-auditd 2026-06-02 08:25:41.413911 | ubuntu-noble | 2026-06-02 08:25:41.413945 | ubuntu-noble | PLAY RECAP ********************************************************************* 2026-06-02 08:25:41.413951 | ubuntu-noble | molecule-auditd : ok=3 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-02 08:25:41.413955 | ubuntu-noble | 2026-06-02 08:25:41.492018 | ubuntu-noble | INFO [delegated > prepare] Executed: Successful 2026-06-02 08:25:41.492382 | ubuntu-noble | INFO Molecule executed 1 scenario (1 successful) 2026-06-02 08:25:41.618797 | debian-bookworm | ok: Runtime: 0:00:08.802173 2026-06-02 08:25:41.630322 | ubuntu-noble | ok: Runtime: 0:00:09.123491 2026-06-02 08:25:41.638663 | 2026-06-02 08:25:41.638805 | TASK [ansible-molecule : Reset connection] 2026-06-02 08:25:41.666142 | 2026-06-02 08:25:41.666322 | TASK [ansible-molecule : Reset connection] 2026-06-02 08:25:41.695571 | 2026-06-02 08:25:41.695723 | TASK [ansible-molecule : Run molecule converge action with scenario delegated] 2026-06-02 08:25:42.609447 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 08:25:42.619960 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 08:25:42.560746 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 08:25:42.570987 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 08:25:43.097789 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 08:25:43.098614 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 08:25:43.120510 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 08:25:43.126964 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: dependency, create, prepare, converge 2026-06-02 08:25:43.126989 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 08:25:43.024149 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 08:25:43.024758 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 08:25:43.046009 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 08:25:43.051583 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: dependency, create, prepare, converge 2026-06-02 08:25:43.051654 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 08:25:44.248971 | debian-bookworm | INFO [delegated > dependency] Executing 2026-06-02 08:25:44.249414 | debian-bookworm | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-02 08:25:44.470347 | ubuntu-noble | INFO [delegated > dependency] Executing 2026-06-02 08:25:44.471098 | ubuntu-noble | WARNING [delegated > dependency] Missing roles requirements file: requirements.yml 2026-06-02 08:25:44.601726 | debian-bookworm | ansible-galaxy [core 2.18.17] 2026-06-02 08:25:44.602159 | debian-bookworm | config file = None 2026-06-02 08:25:44.602664 | debian-bookworm | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-02 08:25:44.603093 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-02 08:25:44.603525 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.11/site-packages:/home/zuul/venv/lib/python3.11/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.11/dist-packages 2026-06-02 08:25:44.603851 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-02 08:25:44.604214 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) [GCC 12.2.0] (/home/zuul/venv/bin/python3) 2026-06-02 08:25:44.604585 | debian-bookworm | jinja version = 3.1.6 2026-06-02 08:25:44.604881 | debian-bookworm | libyaml = True 2026-06-02 08:25:44.605203 | debian-bookworm | No config file found; using defaults 2026-06-02 08:25:44.605663 | debian-bookworm | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-02 08:25:44.608260 | debian-bookworm | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-02 08:25:44.608852 | debian-bookworm | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-02 08:25:44.609503 | debian-bookworm | Loading collection osism.commons from /home/zuul/.ansible/collections/ansible_collections/osism/commons 2026-06-02 08:25:44.611216 | debian-bookworm | Found installed collection osism.commons:0.20260601.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-02 08:25:44.616145 | debian-bookworm | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana 2026-06-02 08:25:44.616599 | debian-bookworm | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/grafana/grafana' 2026-06-02 08:25:44.616980 | debian-bookworm | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud 2026-06-02 08:25:44.617400 | debian-bookworm | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vultr/cloud' 2026-06-02 08:25:44.617788 | debian-bookworm | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade 2026-06-02 08:25:44.618089 | debian-bookworm | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flashblade' 2026-06-02 08:25:44.619092 | debian-bookworm | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon 2026-06-02 08:25:44.619459 | debian-bookworm | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/netcommon' 2026-06-02 08:25:44.620476 | debian-bookworm | Loading collection google.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud 2026-06-02 08:25:44.620805 | debian-bookworm | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/google/cloud' 2026-06-02 08:25:44.621845 | debian-bookworm | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap 2026-06-02 08:25:44.622214 | debian-bookworm | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/ontap' 2026-06-02 08:25:44.622740 | debian-bookworm | Loading collection community.mongodb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb 2026-06-02 08:25:44.623072 | debian-bookworm | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mongodb' 2026-06-02 08:25:44.625424 | debian-bookworm | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki 2026-06-02 08:25:44.625804 | debian-bookworm | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/meraki' 2026-06-02 08:25:44.626060 | debian-bookworm | Loading collection community.mysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql 2026-06-02 08:25:44.626349 | debian-bookworm | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/mysql' 2026-06-02 08:25:44.626782 | debian-bookworm | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight 2026-06-02 08:25:44.627042 | debian-bookworm | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/intersight' 2026-06-02 08:25:44.627336 | debian-bookworm | Loading collection cisco.asa from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa 2026-06-02 08:25:44.627674 | debian-bookworm | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/asa' 2026-06-02 08:25:44.627921 | debian-bookworm | Loading collection splunk.es from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es 2026-06-02 08:25:44.628312 | debian-bookworm | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/splunk/es' 2026-06-02 08:25:44.628572 | debian-bookworm | Loading collection community.dns from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns 2026-06-02 08:25:44.628968 | debian-bookworm | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/dns' 2026-06-02 08:25:44.629251 | debian-bookworm | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-02 08:25:44.629596 | debian-bookworm | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-02 08:25:44.629847 | debian-bookworm | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray 2026-06-02 08:25:44.630098 | debian-bookworm | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/purestorage/flasharray' 2026-06-02 08:25:44.630516 | debian-bookworm | Loading collection community.grafana from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana 2026-06-02 08:25:44.630722 | debian-bookworm | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/grafana' 2026-06-02 08:25:44.639869 | debian-bookworm | Loading collection community.general from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general 2026-06-02 08:25:44.640144 | debian-bookworm | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/general' 2026-06-02 08:25:44.640565 | debian-bookworm | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go 2026-06-02 08:25:44.640831 | debian-bookworm | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/sensu/sensu_go' 2026-06-02 08:25:44.642187 | debian-bookworm | Loading collection amazon.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws 2026-06-02 08:25:44.642502 | debian-bookworm | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/amazon/aws' 2026-06-02 08:25:44.642778 | debian-bookworm | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage 2026-06-02 08:25:44.643045 | debian-bookworm | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-02 08:25:44.643344 | debian-bookworm | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core 2026-06-02 08:25:44.643694 | debian-bookworm | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubevirt/core' 2026-06-02 08:25:44.644357 | debian-bookworm | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-02 08:25:44.644673 | debian-bookworm | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-02 08:25:44.645043 | debian-bookworm | Loading collection community.hrobot from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot 2026-06-02 08:25:44.645331 | debian-bookworm | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hrobot' 2026-06-02 08:25:44.646117 | debian-bookworm | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity 2026-06-02 08:25:44.646492 | debian-bookworm | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/unity' 2026-06-02 08:25:44.646987 | debian-bookworm | Loading collection community.crypto from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto 2026-06-02 08:25:44.647296 | debian-bookworm | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/crypto' 2026-06-02 08:25:44.647725 | debian-bookworm | Loading collection wti.remote from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote 2026-06-02 08:25:44.647953 | debian-bookworm | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/wti/remote' 2026-06-02 08:25:44.648264 | debian-bookworm | Loading collection cloud.common from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common 2026-06-02 08:25:44.648490 | debian-bookworm | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloud/common' 2026-06-02 08:25:44.650865 | debian-bookworm | Loading collection awx.awx from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx 2026-06-02 08:25:44.651234 | debian-bookworm | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/awx/awx' 2026-06-02 08:25:44.651976 | debian-bookworm | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-02 08:25:44.652353 | debian-bookworm | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-02 08:25:44.652671 | debian-bookworm | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb 2026-06-02 08:25:44.652897 | debian-bookworm | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ravendb/ravendb' 2026-06-02 08:25:44.653873 | debian-bookworm | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault 2026-06-02 08:25:44.654485 | debian-bookworm | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/hashi_vault' 2026-06-02 08:25:44.655025 | debian-bookworm | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos 2026-06-02 08:25:44.655367 | debian-bookworm | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vyos/vyos' 2026-06-02 08:25:44.655766 | debian-bookworm | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs 2026-06-02 08:25:44.656050 | debian-bookworm | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ucs' 2026-06-02 08:25:44.656462 | debian-bookworm | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos 2026-06-02 08:25:44.656837 | debian-bookworm | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/junipernetworks/junos' 2026-06-02 08:25:44.659542 | debian-bookworm | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest 2026-06-02 08:25:44.659886 | debian-bookworm | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-02 08:25:44.660359 | debian-bookworm | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid 2026-06-02 08:25:44.660729 | debian-bookworm | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/storagegrid' 2026-06-02 08:25:44.660989 | debian-bookworm | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-02 08:25:44.661357 | debian-bookworm | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-02 08:25:44.661609 | debian-bookworm | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad 2026-06-02 08:25:44.661942 | debian-bookworm | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/ad' 2026-06-02 08:25:44.662209 | debian-bookworm | Loading collection community.postgresql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql 2026-06-02 08:25:44.662595 | debian-bookworm | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/postgresql' 2026-06-02 08:25:44.662924 | debian-bookworm | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac 2026-06-02 08:25:44.663305 | debian-bookworm | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/dnac' 2026-06-02 08:25:44.663630 | debian-bookworm | Loading collection community.proxmox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox 2026-06-02 08:25:44.663901 | debian-bookworm | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxmox' 2026-06-02 08:25:44.664315 | debian-bookworm | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-02 08:25:44.664644 | debian-bookworm | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-02 08:25:44.664900 | debian-bookworm | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs 2026-06-02 08:25:44.665307 | debian-bookworm | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sap_libs' 2026-06-02 08:25:44.665545 | debian-bookworm | Loading collection community.libvirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt 2026-06-02 08:25:44.665747 | debian-bookworm | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/libvirt' 2026-06-02 08:25:44.665944 | debian-bookworm | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb 2026-06-02 08:25:44.666233 | debian-bookworm | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/ciscosmb' 2026-06-02 08:25:44.671033 | debian-bookworm | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager 2026-06-02 08:25:44.671342 | debian-bookworm | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-02 08:25:44.671753 | debian-bookworm | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-02 08:25:44.672061 | debian-bookworm | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-02 08:25:44.672350 | debian-bookworm | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage 2026-06-02 08:25:44.672600 | debian-bookworm | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-02 08:25:44.672848 | debian-bookworm | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-02 08:25:44.673100 | debian-bookworm | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-02 08:25:44.673362 | debian-bookworm | Loading collection ansible.utils from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils 2026-06-02 08:25:44.673591 | debian-bookworm | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/utils' 2026-06-02 08:25:44.674104 | debian-bookworm | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage 2026-06-02 08:25:44.674462 | debian-bookworm | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/openmanage' 2026-06-02 08:25:44.675377 | debian-bookworm | Loading collection arista.eos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos 2026-06-02 08:25:44.675662 | debian-bookworm | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/arista/eos' 2026-06-02 08:25:44.675895 | debian-bookworm | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas 2026-06-02 08:25:44.676253 | debian-bookworm | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/pas' 2026-06-02 08:25:44.676480 | debian-bookworm | Loading collection ansible.posix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix 2026-06-02 08:25:44.676809 | debian-bookworm | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/posix' 2026-06-02 08:25:44.677258 | debian-bookworm | Loading collection community.docker from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker 2026-06-02 08:25:44.677484 | debian-bookworm | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/docker' 2026-06-02 08:25:44.677955 | debian-bookworm | Loading collection community.okd from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd 2026-06-02 08:25:44.678268 | debian-bookworm | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/okd' 2026-06-02 08:25:44.679038 | debian-bookworm | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox 2026-06-02 08:25:44.679343 | debian-bookworm | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netbox/netbox' 2026-06-02 08:25:44.680931 | debian-bookworm | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman 2026-06-02 08:25:44.681260 | debian-bookworm | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/theforeman/foreman' 2026-06-02 08:25:44.684480 | debian-bookworm | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios 2026-06-02 08:25:44.684796 | debian-bookworm | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/fortinet/fortios' 2026-06-02 08:25:44.685009 | debian-bookworm | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-02 08:25:44.685360 | debian-bookworm | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-02 08:25:44.685661 | debian-bookworm | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox 2026-06-02 08:25:44.685920 | debian-bookworm | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infinidat/infinibox' 2026-06-02 08:25:44.686427 | debian-bookworm | Loading collection community.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows 2026-06-02 08:25:44.688276 | debian-bookworm | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/windows' 2026-06-02 08:25:44.688691 | debian-bookworm | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-02 08:25:44.688713 | debian-bookworm | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-02 08:25:44.689207 | debian-bookworm | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex 2026-06-02 08:25:44.689355 | debian-bookworm | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/powerflex' 2026-06-02 08:25:44.689590 | debian-bookworm | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud 2026-06-02 08:25:44.689758 | debian-bookworm | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/openstack/cloud' 2026-06-02 08:25:44.690467 | debian-bookworm | Loading collection community.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware 2026-06-02 08:25:44.690658 | debian-bookworm | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/vmware' 2026-06-02 08:25:44.691930 | debian-bookworm | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean 2026-06-02 08:25:44.692191 | debian-bookworm | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/digitalocean' 2026-06-02 08:25:44.692506 | debian-bookworm | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt 2026-06-02 08:25:44.692810 | debian-bookworm | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/check_point/mgmt' 2026-06-02 08:25:44.693045 | debian-bookworm | Loading collection community.routeros from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros 2026-06-02 08:25:44.693377 | debian-bookworm | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/routeros' 2026-06-02 08:25:44.693712 | debian-bookworm | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules 2026-06-02 08:25:44.693937 | debian-bookworm | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-02 08:25:44.697706 | debian-bookworm | Loading collection community.aws from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws 2026-06-02 08:25:44.697922 | debian-bookworm | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/aws' 2026-06-02 08:25:44.698234 | debian-bookworm | Loading collection community.proxysql from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql 2026-06-02 08:25:44.698565 | debian-bookworm | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/proxysql' 2026-06-02 08:25:44.698880 | debian-bookworm | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager 2026-06-02 08:25:44.699146 | debian-bookworm | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-02 08:25:44.699933 | debian-bookworm | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr 2026-06-02 08:25:44.700246 | debian-bookworm | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/iosxr' 2026-06-02 08:25:44.700736 | debian-bookworm | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-02 08:25:44.701036 | debian-bookworm | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-02 08:25:44.703046 | debian-bookworm | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos 2026-06-02 08:25:44.703406 | debian-bookworm | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/nxos' 2026-06-02 08:25:44.704093 | debian-bookworm | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core 2026-06-02 08:25:44.704462 | debian-bookworm | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/kubernetes/core' 2026-06-02 08:25:44.704671 | debian-bookworm | Loading collection cisco.ise from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise 2026-06-02 08:25:44.704961 | debian-bookworm | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ise' 2026-06-02 08:25:44.705279 | debian-bookworm | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim 2026-06-02 08:25:44.706085 | debian-bookworm | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/inspur/ispim' 2026-06-02 08:25:44.707262 | debian-bookworm | Loading collection cisco.aci from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci 2026-06-02 08:25:44.707540 | debian-bookworm | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/aci' 2026-06-02 08:25:44.709453 | debian-bookworm | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection 2026-06-02 08:25:44.709774 | debian-bookworm | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/azure/azcollection' 2026-06-02 08:25:44.746601 | debian-bookworm | Loading collection community.network from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network 2026-06-02 08:25:44.747140 | debian-bookworm | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/network' 2026-06-02 08:25:44.747472 | debian-bookworm | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq 2026-06-02 08:25:44.747880 | debian-bookworm | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/rabbitmq' 2026-06-02 08:25:44.748160 | debian-bookworm | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-02 08:25:44.748564 | debian-bookworm | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-02 08:25:44.748842 | debian-bookworm | Loading collection containers.podman from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman 2026-06-02 08:25:44.749278 | debian-bookworm | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/containers/podman' 2026-06-02 08:25:44.749562 | debian-bookworm | Loading collection community.zabbix from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix 2026-06-02 08:25:44.749940 | debian-bookworm | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/zabbix' 2026-06-02 08:25:44.750243 | debian-bookworm | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis 2026-06-02 08:25:44.750562 | debian-bookworm | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/microsoft/iis' 2026-06-02 08:25:44.751010 | debian-bookworm | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt 2026-06-02 08:25:44.751341 | debian-bookworm | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ovirt/ovirt' 2026-06-02 08:25:44.751729 | debian-bookworm | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur 2026-06-02 08:25:44.752015 | debian-bookworm | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cyberark/conjur' 2026-06-02 08:25:44.752446 | debian-bookworm | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware 2026-06-02 08:25:44.752714 | debian-bookworm | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/vmware/vmware' 2026-06-02 08:25:44.753563 | debian-bookworm | Loading collection cisco.mso from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso 2026-06-02 08:25:44.753892 | debian-bookworm | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/mso' 2026-06-02 08:25:44.755211 | debian-bookworm | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-02 08:25:44.755667 | debian-bookworm | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-02 08:25:44.755968 | debian-bookworm | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules 2026-06-02 08:25:44.756287 | debian-bookworm | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-02 08:25:44.756701 | debian-bookworm | Loading collection ansible.windows from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows 2026-06-02 08:25:44.756998 | debian-bookworm | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ansible/windows' 2026-06-02 08:25:44.757295 | debian-bookworm | Loading collection community.sops from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops 2026-06-02 08:25:44.757568 | debian-bookworm | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/community/sops' 2026-06-02 08:25:44.757947 | debian-bookworm | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar 2026-06-02 08:25:44.758278 | debian-bookworm | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/ibm/qradar' 2026-06-02 08:25:44.758683 | debian-bookworm | Loading collection cisco.ios from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios 2026-06-02 08:25:44.849148 | ubuntu-noble | ansible-galaxy [core 2.18.17] 2026-06-02 08:25:44.849784 | ubuntu-noble | config file = None 2026-06-02 08:25:44.850286 | ubuntu-noble | configured module search path = ['/home/zuul/src/github.com/osism/ansible-collection-services/plugins/modules', '/home/zuul/.ansible/plugins/modules', '/usr/share/ansible/plugins/modules'] 2026-06-02 08:25:44.850701 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-02 08:25:44.851176 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections:/home/zuul/venv/lib/python3.12/site-packages:/home/zuul/venv/lib/python3.12/dist-packages:/home/zuul/venv/lib/python3/dist-packages:/home/zuul/venv/local/lib/python3.12/dist-packages 2026-06-02 08:25:44.851605 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-galaxy 2026-06-02 08:25:44.851999 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) [GCC 13.3.0] (/home/zuul/venv/bin/python3) 2026-06-02 08:25:44.852361 | ubuntu-noble | jinja version = 3.1.6 2026-06-02 08:25:44.852691 | ubuntu-noble | libyaml = True 2026-06-02 08:25:44.853591 | ubuntu-noble | No config file found; using defaults 2026-06-02 08:25:44.853624 | ubuntu-noble | Reading requirement file at '/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/collections.yml' 2026-06-02 08:25:44.862918 | ubuntu-noble | Loading collection osism.services from /home/zuul/.ansible/collections/ansible_collections/osism/services 2026-06-02 08:25:44.863627 | ubuntu-noble | Found installed collection osism.services:999.0.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/services' 2026-06-02 08:25:44.863647 | ubuntu-noble | Loading collection osism.commons from /home/zuul/.ansible/collections/ansible_collections/osism/commons 2026-06-02 08:25:44.865475 | ubuntu-noble | Found installed collection osism.commons:0.20260601.0 at '/home/zuul/.ansible/collections/ansible_collections/osism/commons' 2026-06-02 08:25:44.877458 | ubuntu-noble | Loading collection ngine_io.cloudstack from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack 2026-06-02 08:25:44.877488 | ubuntu-noble | Found installed collection ngine_io.cloudstack:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ngine_io/cloudstack' 2026-06-02 08:25:44.882963 | ubuntu-noble | Loading collection community.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws 2026-06-02 08:25:44.882996 | ubuntu-noble | Found installed collection community.aws:9.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/aws' 2026-06-02 08:25:44.883008 | ubuntu-noble | Loading collection community.libvirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt 2026-06-02 08:25:44.883017 | ubuntu-noble | Found installed collection community.libvirt:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/libvirt' 2026-06-02 08:25:44.883026 | ubuntu-noble | Loading collection ansible.posix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix 2026-06-02 08:25:44.883061 | ubuntu-noble | Found installed collection ansible.posix:1.6.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/posix' 2026-06-02 08:25:44.883464 | ubuntu-noble | Loading collection sensu.sensu_go from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go 2026-06-02 08:25:44.883784 | ubuntu-noble | Found installed collection sensu.sensu_go:1.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/sensu/sensu_go' 2026-06-02 08:25:44.884206 | ubuntu-noble | Loading collection community.docker from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker 2026-06-02 08:25:44.884599 | ubuntu-noble | Found installed collection community.docker:4.8.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/docker' 2026-06-02 08:25:44.885592 | ubuntu-noble | Loading collection cisco.aci from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci 2026-06-02 08:25:44.886032 | ubuntu-noble | Found installed collection cisco.aci:2.12.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/aci' 2026-06-02 08:25:44.886467 | ubuntu-noble | Loading collection community.zabbix from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix 2026-06-02 08:25:44.886825 | ubuntu-noble | Found installed collection community.zabbix:3.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/zabbix' 2026-06-02 08:25:44.887216 | ubuntu-noble | Loading collection community.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana 2026-06-02 08:25:44.887569 | ubuntu-noble | Found installed collection community.grafana:2.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/grafana' 2026-06-02 08:25:44.887998 | ubuntu-noble | Loading collection lowlydba.sqlserver from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver 2026-06-02 08:25:44.888355 | ubuntu-noble | Found installed collection lowlydba.sqlserver:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/lowlydba/sqlserver' 2026-06-02 08:25:44.906380 | ubuntu-noble | Loading collection vmware.vmware_rest from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest 2026-06-02 08:25:44.906850 | ubuntu-noble | Found installed collection vmware.vmware_rest:4.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware_rest' 2026-06-02 08:25:44.907198 | ubuntu-noble | Loading collection community.proxmox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox 2026-06-02 08:25:44.907634 | ubuntu-noble | Found installed collection community.proxmox:1.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxmox' 2026-06-02 08:25:44.907967 | ubuntu-noble | Loading collection inspur.ispim from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim 2026-06-02 08:25:44.908345 | ubuntu-noble | Found installed collection inspur.ispim:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/inspur/ispim' 2026-06-02 08:25:44.908741 | ubuntu-noble | Loading collection ansible.netcommon from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon 2026-06-02 08:25:44.909162 | ubuntu-noble | Found installed collection ansible.netcommon:7.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/netcommon' 2026-06-02 08:25:44.909566 | ubuntu-noble | Loading collection infinidat.infinibox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox 2026-06-02 08:25:44.909874 | ubuntu-noble | Found installed collection infinidat.infinibox:1.6.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infinidat/infinibox' 2026-06-02 08:25:44.910307 | ubuntu-noble | Loading collection telekom_mms.icinga_director from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director 2026-06-02 08:25:44.910639 | ubuntu-noble | Found installed collection telekom_mms.icinga_director:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/telekom_mms/icinga_director' 2026-06-02 08:25:44.911082 | ubuntu-noble | Loading collection cisco.iosxr from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr 2026-06-02 08:25:44.911508 | ubuntu-noble | Found installed collection cisco.iosxr:10.3.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/iosxr' 2026-06-02 08:25:44.913206 | ubuntu-noble | Loading collection community.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware 2026-06-02 08:25:44.913632 | ubuntu-noble | Found installed collection community.vmware:5.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/vmware' 2026-06-02 08:25:44.913898 | ubuntu-noble | Loading collection kubevirt.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core 2026-06-02 08:25:44.914240 | ubuntu-noble | Found installed collection kubevirt.core:2.2.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubevirt/core' 2026-06-02 08:25:44.914535 | ubuntu-noble | Loading collection community.library_inventory_filtering_v1 from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1 2026-06-02 08:25:44.914787 | ubuntu-noble | Found installed collection community.library_inventory_filtering_v1:1.1.5 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/library_inventory_filtering_v1' 2026-06-02 08:25:44.915136 | ubuntu-noble | Loading collection containers.podman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman 2026-06-02 08:25:44.915418 | ubuntu-noble | Found installed collection containers.podman:1.18.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/containers/podman' 2026-06-02 08:25:44.915692 | ubuntu-noble | Loading collection community.sops from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops 2026-06-02 08:25:44.915969 | ubuntu-noble | Found installed collection community.sops:2.2.7 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sops' 2026-06-02 08:25:44.916448 | ubuntu-noble | Loading collection community.mysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql 2026-06-02 08:25:44.916959 | ubuntu-noble | Found installed collection community.mysql:3.16.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mysql' 2026-06-02 08:25:44.916980 | ubuntu-noble | Loading collection kaytus.ksmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage 2026-06-02 08:25:44.917207 | ubuntu-noble | Found installed collection kaytus.ksmanage:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kaytus/ksmanage' 2026-06-02 08:25:44.917439 | ubuntu-noble | Loading collection purestorage.flashblade from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade 2026-06-02 08:25:44.917706 | ubuntu-noble | Found installed collection purestorage.flashblade:1.22.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flashblade' 2026-06-02 08:25:44.917992 | ubuntu-noble | Loading collection community.mongodb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb 2026-06-02 08:25:44.918215 | ubuntu-noble | Found installed collection community.mongodb:1.7.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/mongodb' 2026-06-02 08:25:44.918446 | ubuntu-noble | Loading collection cisco.dnac from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac 2026-06-02 08:25:44.918657 | ubuntu-noble | Found installed collection cisco.dnac:6.31.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/dnac' 2026-06-02 08:25:44.919873 | ubuntu-noble | Loading collection cisco.nxos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos 2026-06-02 08:25:44.919896 | ubuntu-noble | Found installed collection cisco.nxos:9.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/nxos' 2026-06-02 08:25:44.921388 | ubuntu-noble | Loading collection cisco.mso from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso 2026-06-02 08:25:44.921646 | ubuntu-noble | Found installed collection cisco.mso:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/mso' 2026-06-02 08:25:44.922549 | ubuntu-noble | Loading collection hitachivantara.vspone_block from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block 2026-06-02 08:25:44.922573 | ubuntu-noble | Found installed collection hitachivantara.vspone_block:3.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_block' 2026-06-02 08:25:44.923406 | ubuntu-noble | Loading collection vultr.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud 2026-06-02 08:25:44.923433 | ubuntu-noble | Found installed collection vultr.cloud:1.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vultr/cloud' 2026-06-02 08:25:44.923440 | ubuntu-noble | Loading collection community.routeros from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros 2026-06-02 08:25:44.923689 | ubuntu-noble | Found installed collection community.routeros:3.13.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/routeros' 2026-06-02 08:25:44.933473 | ubuntu-noble | Loading collection community.general from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general 2026-06-02 08:25:44.933808 | ubuntu-noble | Found installed collection community.general:10.7.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/general' 2026-06-02 08:25:44.935780 | ubuntu-noble | Loading collection cisco.meraki from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki 2026-06-02 08:25:44.936148 | ubuntu-noble | Found installed collection cisco.meraki:2.21.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/meraki' 2026-06-02 08:25:44.936749 | ubuntu-noble | Loading collection ovirt.ovirt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt 2026-06-02 08:25:44.937097 | ubuntu-noble | Found installed collection ovirt.ovirt:3.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ovirt/ovirt' 2026-06-02 08:25:44.938656 | ubuntu-noble | Loading collection theforeman.foreman from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman 2026-06-02 08:25:44.939016 | ubuntu-noble | Found installed collection theforeman.foreman:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/theforeman/foreman' 2026-06-02 08:25:44.939372 | ubuntu-noble | Loading collection cisco.ise from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise 2026-06-02 08:25:44.939771 | ubuntu-noble | Found installed collection cisco.ise:2.10.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ise' 2026-06-02 08:25:44.940068 | ubuntu-noble | Loading collection netapp_eseries.santricity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity 2026-06-02 08:25:44.940449 | ubuntu-noble | Found installed collection netapp_eseries.santricity:1.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp_eseries/santricity' 2026-06-02 08:25:44.941955 | ubuntu-noble | Loading collection grafana.grafana from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana 2026-06-02 08:25:44.941978 | ubuntu-noble | Found installed collection grafana.grafana:5.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/grafana/grafana' 2026-06-02 08:25:44.941987 | ubuntu-noble | Loading collection f5networks.f5_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules 2026-06-02 08:25:44.941995 | ubuntu-noble | Found installed collection f5networks.f5_modules:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/f5networks/f5_modules' 2026-06-02 08:25:44.942003 | ubuntu-noble | Loading collection ravendb.ravendb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb 2026-06-02 08:25:44.942011 | ubuntu-noble | Found installed collection ravendb.ravendb:1.0.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ravendb/ravendb' 2026-06-02 08:25:44.942377 | ubuntu-noble | Loading collection splunk.es from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es 2026-06-02 08:25:44.942671 | ubuntu-noble | Found installed collection splunk.es:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/splunk/es' 2026-06-02 08:25:44.942975 | ubuntu-noble | Loading collection community.dns from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns 2026-06-02 08:25:44.943196 | ubuntu-noble | Found installed collection community.dns:3.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/dns' 2026-06-02 08:25:44.946437 | ubuntu-noble | Loading collection fortinet.fortios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios 2026-06-02 08:25:44.946709 | ubuntu-noble | Found installed collection fortinet.fortios:2.4.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortios' 2026-06-02 08:25:44.946993 | ubuntu-noble | Loading collection cisco.intersight from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight 2026-06-02 08:25:44.947250 | ubuntu-noble | Found installed collection cisco.intersight:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/intersight' 2026-06-02 08:25:44.947518 | ubuntu-noble | Loading collection ibm.spectrum_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize 2026-06-02 08:25:44.947768 | ubuntu-noble | Found installed collection ibm.spectrum_virtualize:2.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/spectrum_virtualize' 2026-06-02 08:25:44.948036 | ubuntu-noble | Loading collection community.hashi_vault from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault 2026-06-02 08:25:44.948316 | ubuntu-noble | Found installed collection community.hashi_vault:6.2.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hashi_vault' 2026-06-02 08:25:44.949080 | ubuntu-noble | Loading collection vyos.vyos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos 2026-06-02 08:25:44.949364 | ubuntu-noble | Found installed collection vyos.vyos:5.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vyos/vyos' 2026-06-02 08:25:44.949616 | ubuntu-noble | Loading collection community.ciscosmb from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb 2026-06-02 08:25:44.949957 | ubuntu-noble | Found installed collection community.ciscosmb:1.0.11 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/ciscosmb' 2026-06-02 08:25:44.950237 | ubuntu-noble | Loading collection wti.remote from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote 2026-06-02 08:25:44.950508 | ubuntu-noble | Found installed collection wti.remote:1.0.10 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/wti/remote' 2026-06-02 08:25:44.950755 | ubuntu-noble | Loading collection cloud.common from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common 2026-06-02 08:25:44.951021 | ubuntu-noble | Found installed collection cloud.common:4.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloud/common' 2026-06-02 08:25:44.951286 | ubuntu-noble | Loading collection community.postgresql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql 2026-06-02 08:25:44.951547 | ubuntu-noble | Found installed collection community.postgresql:3.14.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/postgresql' 2026-06-02 08:25:44.951795 | ubuntu-noble | Loading collection purestorage.flasharray from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray 2026-06-02 08:25:44.952074 | ubuntu-noble | Found installed collection purestorage.flasharray:1.39.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/purestorage/flasharray' 2026-06-02 08:25:44.952297 | ubuntu-noble | Loading collection ansible.utils from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils 2026-06-02 08:25:44.952550 | ubuntu-noble | Found installed collection ansible.utils:5.1.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/utils' 2026-06-02 08:25:44.953186 | ubuntu-noble | Loading collection netbox.netbox from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox 2026-06-02 08:25:44.953493 | ubuntu-noble | Found installed collection netbox.netbox:3.21.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netbox/netbox' 2026-06-02 08:25:44.959612 | ubuntu-noble | Loading collection fortinet.fortimanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager 2026-06-02 08:25:44.959893 | ubuntu-noble | Found installed collection fortinet.fortimanager:2.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/fortinet/fortimanager' 2026-06-02 08:25:44.998529 | ubuntu-noble | Loading collection community.network from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network 2026-06-02 08:25:44.998901 | ubuntu-noble | Found installed collection community.network:5.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/network' 2026-06-02 08:25:44.999240 | ubuntu-noble | Loading collection microsoft.ad from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad 2026-06-02 08:25:44.999575 | ubuntu-noble | Found installed collection microsoft.ad:1.9.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/ad' 2026-06-02 08:25:44.999809 | ubuntu-noble | Loading collection cisco.ucs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs 2026-06-02 08:25:45.000161 | ubuntu-noble | Found installed collection cisco.ucs:1.16.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ucs' 2026-06-02 08:25:45.001176 | ubuntu-noble | Loading collection microsoft.iis from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis 2026-06-02 08:25:45.001198 | ubuntu-noble | Found installed collection microsoft.iis:1.0.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/microsoft/iis' 2026-06-02 08:25:45.001206 | ubuntu-noble | Loading collection netapp.storagegrid from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid 2026-06-02 08:25:45.001213 | ubuntu-noble | Found installed collection netapp.storagegrid:21.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/storagegrid' 2026-06-02 08:25:45.001983 | ubuntu-noble | Loading collection cisco.ios from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios 2026-06-02 08:25:45.002006 | ubuntu-noble | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/ios' 2026-06-02 08:25:45.003039 | ubuntu-noble | Loading collection arista.eos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos 2026-06-02 08:25:45.003059 | ubuntu-noble | Found installed collection arista.eos:10.1.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/arista/eos' 2026-06-02 08:25:45.004396 | ubuntu-noble | Loading collection amazon.aws from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws 2026-06-02 08:25:45.004667 | ubuntu-noble | Found installed collection amazon.aws:9.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/amazon/aws' 2026-06-02 08:25:45.005684 | ubuntu-noble | Loading collection dellemc.enterprise_sonic from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic 2026-06-02 08:25:45.005705 | ubuntu-noble | Found installed collection dellemc.enterprise_sonic:2.5.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/enterprise_sonic' 2026-06-02 08:25:45.007862 | ubuntu-noble | Loading collection azure.azcollection from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection 2026-06-02 08:25:45.007882 | ubuntu-noble | Found installed collection azure.azcollection:3.10.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/azure/azcollection' 2026-06-02 08:25:45.008531 | ubuntu-noble | Loading collection community.hrobot from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot 2026-06-02 08:25:45.008552 | ubuntu-noble | Found installed collection community.hrobot:2.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/hrobot' 2026-06-02 08:25:45.009523 | ubuntu-noble | Loading collection cloudscale_ch.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud 2026-06-02 08:25:45.009557 | ubuntu-noble | Found installed collection cloudscale_ch.cloud:2.5.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cloudscale_ch/cloud' 2026-06-02 08:25:45.009818 | ubuntu-noble | Loading collection community.rabbitmq from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq 2026-06-02 08:25:45.010111 | ubuntu-noble | Found installed collection community.rabbitmq:1.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/rabbitmq' 2026-06-02 08:25:45.010675 | ubuntu-noble | Loading collection dellemc.powerflex from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex 2026-06-02 08:25:45.010913 | ubuntu-noble | Found installed collection dellemc.powerflex:2.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/powerflex' 2026-06-02 08:25:45.011136 | ubuntu-noble | Loading collection ibm.qradar from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar 2026-06-02 08:25:45.011324 | ubuntu-noble | Found installed collection ibm.qradar:4.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/qradar' 2026-06-02 08:25:45.011725 | ubuntu-noble | Loading collection community.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows 2026-06-02 08:25:45.011947 | ubuntu-noble | Found installed collection community.windows:2.4.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/windows' 2026-06-02 08:25:45.012845 | ubuntu-noble | Loading collection openstack.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud 2026-06-02 08:25:45.012861 | ubuntu-noble | Found installed collection openstack.cloud:2.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/openstack/cloud' 2026-06-02 08:25:45.013523 | ubuntu-noble | Loading collection kubernetes.core from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core 2026-06-02 08:25:45.013774 | ubuntu-noble | Found installed collection kubernetes.core:5.4.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/kubernetes/core' 2026-06-02 08:25:45.014014 | ubuntu-noble | Loading collection cyberark.conjur from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur 2026-06-02 08:25:45.014241 | ubuntu-noble | Found installed collection cyberark.conjur:1.3.8 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/conjur' 2026-06-02 08:25:45.014485 | ubuntu-noble | Loading collection infoblox.nios_modules from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules 2026-06-02 08:25:45.014699 | ubuntu-noble | Found installed collection infoblox.nios_modules:1.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/infoblox/nios_modules' 2026-06-02 08:25:45.015738 | ubuntu-noble | Loading collection google.cloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud 2026-06-02 08:25:45.016038 | ubuntu-noble | Found installed collection google.cloud:1.9.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/google/cloud' 2026-06-02 08:25:45.016485 | ubuntu-noble | Loading collection community.okd from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd 2026-06-02 08:25:45.016753 | ubuntu-noble | Found installed collection community.okd:4.0.2 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/okd' 2026-06-02 08:25:45.017806 | ubuntu-noble | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud 2026-06-02 08:25:45.018083 | ubuntu-noble | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hetzner/hcloud' 2026-06-02 08:25:45.018410 | ubuntu-noble | Loading collection community.sap_libs from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs 2026-06-02 08:25:45.018642 | ubuntu-noble | Found installed collection community.sap_libs:1.5.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/sap_libs' 2026-06-02 08:25:45.019659 | ubuntu-noble | Loading collection community.digitalocean from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean 2026-06-02 08:25:45.019937 | ubuntu-noble | Found installed collection community.digitalocean:1.27.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/digitalocean' 2026-06-02 08:25:45.020197 | ubuntu-noble | Loading collection chocolatey.chocolatey from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey 2026-06-02 08:25:45.020448 | ubuntu-noble | Found installed collection chocolatey.chocolatey:1.5.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/chocolatey/chocolatey' 2026-06-02 08:25:45.020890 | ubuntu-noble | Loading collection community.crypto from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto 2026-06-02 08:25:45.021155 | ubuntu-noble | Found installed collection community.crypto:2.26.6 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/crypto' 2026-06-02 08:25:45.021894 | ubuntu-noble | Loading collection dellemc.unity from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity 2026-06-02 08:25:45.022155 | ubuntu-noble | Found installed collection dellemc.unity:2.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/unity' 2026-06-02 08:25:45.024601 | ubuntu-noble | Loading collection awx.awx from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx 2026-06-02 08:25:45.024895 | ubuntu-noble | Found installed collection awx.awx:24.6.1 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/awx/awx' 2026-06-02 08:25:45.025133 | ubuntu-noble | Loading collection hitachivantara.vspone_object from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object 2026-06-02 08:25:45.025401 | ubuntu-noble | Found installed collection hitachivantara.vspone_object:1.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/hitachivantara/vspone_object' 2026-06-02 08:25:45.025593 | ubuntu-noble | Loading collection ibm.storage_virtualize from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize 2026-06-02 08:25:45.025850 | ubuntu-noble | Found installed collection ibm.storage_virtualize:2.7.4 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ibm/storage_virtualize' 2026-06-02 08:25:45.026188 | ubuntu-noble | Loading collection ansible.windows from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows 2026-06-02 08:25:45.026428 | ubuntu-noble | Found installed collection ansible.windows:2.8.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ansible/windows' 2026-06-02 08:25:45.027721 | ubuntu-noble | Loading collection junipernetworks.junos from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos 2026-06-02 08:25:45.028058 | ubuntu-noble | Found installed collection junipernetworks.junos:9.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/junipernetworks/junos' 2026-06-02 08:25:45.029025 | ubuntu-noble | Loading collection netapp.ontap from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap 2026-06-02 08:25:45.029313 | ubuntu-noble | Found installed collection netapp.ontap:22.14.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/ontap' 2026-06-02 08:25:45.029559 | ubuntu-noble | Loading collection ieisystem.inmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage 2026-06-02 08:25:45.029796 | ubuntu-noble | Found installed collection ieisystem.inmanage:3.0.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/ieisystem/inmanage' 2026-06-02 08:25:45.030412 | ubuntu-noble | Loading collection dellemc.openmanage from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage 2026-06-02 08:25:45.030705 | ubuntu-noble | Found installed collection dellemc.openmanage:9.12.3 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/dellemc/openmanage' 2026-06-02 08:25:45.030890 | ubuntu-noble | Loading collection cyberark.pas from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas 2026-06-02 08:25:45.031185 | ubuntu-noble | Found installed collection cyberark.pas:1.0.36 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cyberark/pas' 2026-06-02 08:25:45.031505 | ubuntu-noble | Loading collection netapp.cloudmanager from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager 2026-06-02 08:25:45.031734 | ubuntu-noble | Found installed collection netapp.cloudmanager:21.24.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/netapp/cloudmanager' 2026-06-02 08:25:45.031913 | ubuntu-noble | Loading collection community.proxysql from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql 2026-06-02 08:25:45.032173 | ubuntu-noble | Found installed collection community.proxysql:1.7.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/community/proxysql' 2026-06-02 08:25:45.032620 | ubuntu-noble | Loading collection check_point.mgmt from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt 2026-06-02 08:25:45.032848 | ubuntu-noble | Found installed collection check_point.mgmt:6.6.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/check_point/mgmt' 2026-06-02 08:25:45.033241 | ubuntu-noble | Loading collection vmware.vmware from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware 2026-06-02 08:25:45.033472 | ubuntu-noble | Found installed collection vmware.vmware:1.11.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/vmware/vmware' 2026-06-02 08:25:45.033776 | ubuntu-noble | Loading collection cisco.asa from /home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa 2026-06-02 08:25:45.034011 | ubuntu-noble | Found installed collection cisco.asa:6.1.0 at '/home/zuul/venv/lib/python3.12/site-packages/ansible_collections/cisco/asa' 2026-06-02 08:25:45.034815 | ubuntu-noble | Starting galaxy collection install process 2026-06-02 08:25:45.034826 | ubuntu-noble | Nothing to do. All requested collections are already installed. If you want to reinstall them, consider using `--force`. 2026-06-02 08:25:45.102019 | ubuntu-noble | INFO [delegated > dependency] Dependency completed successfully. 2026-06-02 08:25:45.102108 | ubuntu-noble | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from converge_sequence to suppress) 2026-06-02 08:25:45.117829 | ubuntu-noble | INFO [delegated > create] Executing 2026-06-02 08:25:45.120360 | ubuntu-noble | WARNING [delegated > create] Executed: Missing playbook (Remove from converge_sequence to suppress) 2026-06-02 08:25:45.129355 | ubuntu-noble | INFO [delegated > prepare] Executing 2026-06-02 08:25:45.129488 | ubuntu-noble | WARNING [delegated > prepare] Skipping, instances already prepared. 2026-06-02 08:25:45.129591 | ubuntu-noble | INFO [delegated > prepare] Executed: Successful 2026-06-02 08:25:45.137582 | ubuntu-noble | INFO [delegated > converge] Executing 2026-06-02 08:25:44.759022 | debian-bookworm | Found installed collection cisco.ios:9.2.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/cisco/ios' 2026-06-02 08:25:44.759935 | debian-bookworm | Loading collection hetzner.hcloud from /home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud 2026-06-02 08:25:44.760294 | debian-bookworm | Found installed collection hetzner.hcloud:4.3.0 at '/home/zuul/venv/lib/python3.11/site-packages/ansible_collections/hetzner/hcloud' 2026-06-02 08:25:44.761040 | debian-bookworm | Starting galaxy collection install process 2026-06-02 08:25:44.761493 | debian-bookworm | Nothing to do. All requested collections are already installed. If you want to reinstall them, consider using `--force`. 2026-06-02 08:25:44.832403 | debian-bookworm | INFO [delegated > dependency] Dependency completed successfully. 2026-06-02 08:25:44.832594 | debian-bookworm | WARNING [delegated > dependency] Executed: Missing roles requirements file: requirements.yml (Remove from converge_sequence to suppress) 2026-06-02 08:25:44.848250 | debian-bookworm | INFO [delegated > create] Executing 2026-06-02 08:25:44.850731 | debian-bookworm | WARNING [delegated > create] Executed: Missing playbook (Remove from converge_sequence to suppress) 2026-06-02 08:25:44.859426 | debian-bookworm | INFO [delegated > prepare] Executing 2026-06-02 08:25:44.859515 | debian-bookworm | WARNING [delegated > prepare] Skipping, instances already prepared. 2026-06-02 08:25:44.859602 | debian-bookworm | INFO [delegated > prepare] Executed: Successful 2026-06-02 08:25:44.867366 | debian-bookworm | INFO [delegated > converge] Executing 2026-06-02 08:25:45.203153 | debian-bookworm | DEBUG [delegated > converge] ansible-playbook version: ansible-playbook 2026-06-02 08:25:45.203231 | debian-bookworm | config file = None 2026-06-02 08:25:45.203239 | debian-bookworm | configured module search path = 2026-06-02 08:25:45.203244 | debian-bookworm | ansible python module location = /home/zuul/venv/lib/python3.11/site-packages/ansible 2026-06-02 08:25:45.203249 | debian-bookworm | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-02 08:25:45.203254 | debian-bookworm | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-02 08:25:45.203258 | debian-bookworm | python version = 3.11.2 (main, Apr 8 2026, 01:58:00) (/home/zuul/venv/bin/python3) 2026-06-02 08:25:45.203262 | debian-bookworm | jinja version = 3.1.6 2026-06-02 08:25:45.203277 | debian-bookworm | libyaml = True 2026-06-02 08:25:45.203478 | debian-bookworm | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 08:25:45.203484 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 08:25:45.203488 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 08:25:45.203492 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 08:25:45.203496 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 08:25:45.203500 | debian-bookworm | ANSIBLE_ROLE: auditd 2026-06-02 08:25:45.203504 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 08:25:45.203508 | debian-bookworm | ANSIBLE_VERBOSITY: 1 2026-06-02 08:25:45.203511 | debian-bookworm | 2026-06-02 08:25:45.203711 | debian-bookworm | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 08:25:45.203717 | debian-bookworm | MOLECULE_DEBUG: True 2026-06-02 08:25:45.203721 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 08:25:45.203737 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2026-06-02 08:25:45.203741 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 08:25:45.203745 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 08:25:45.203752 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 08:25:45.203756 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 08:25:45.203760 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 08:25:45.203765 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 08:25:45.203769 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 08:25:45.203773 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 08:25:45.203777 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 08:25:45.203781 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 08:25:45.203785 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 08:25:45.203789 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 08:25:45.203793 | debian-bookworm | 2026-06-02 08:25:45.204047 | debian-bookworm | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 08:25:45.495679 | ubuntu-noble | DEBUG [delegated > converge] ansible-playbook version: ansible-playbook 2026-06-02 08:25:45.495722 | ubuntu-noble | config file = None 2026-06-02 08:25:45.495728 | ubuntu-noble | configured module search path = 2026-06-02 08:25:45.495733 | ubuntu-noble | ansible python module location = /home/zuul/venv/lib/python3.12/site-packages/ansible 2026-06-02 08:25:45.495737 | ubuntu-noble | ansible collection location = /home/zuul/.ansible/collections:/usr/share/ansible/collections 2026-06-02 08:25:45.495741 | ubuntu-noble | executable location = /home/zuul/venv/bin/ansible-playbook 2026-06-02 08:25:45.495745 | ubuntu-noble | python version = 3.12.3 (main, Mar 23 2026, 19:04:32) (/home/zuul/venv/bin/python3) 2026-06-02 08:25:45.495749 | ubuntu-noble | jinja version = 3.1.6 2026-06-02 08:25:45.495753 | ubuntu-noble | libyaml = True 2026-06-02 08:25:45.495991 | ubuntu-noble | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 08:25:45.496003 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 08:25:45.496008 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 08:25:45.496011 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 08:25:45.496015 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 08:25:45.496019 | ubuntu-noble | ANSIBLE_ROLE: auditd 2026-06-02 08:25:45.496022 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 08:25:45.496026 | ubuntu-noble | ANSIBLE_VERBOSITY: 1 2026-06-02 08:25:45.496031 | ubuntu-noble | 2026-06-02 08:25:45.496141 | ubuntu-noble | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 08:25:45.496148 | ubuntu-noble | MOLECULE_DEBUG: True 2026-06-02 08:25:45.496152 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 08:25:45.496170 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2026-06-02 08:25:45.496174 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 08:25:45.496178 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 08:25:45.496182 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 08:25:45.496186 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 08:25:45.496189 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 08:25:45.496193 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 08:25:45.496197 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 08:25:45.496201 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 08:25:45.496204 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 08:25:45.496208 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 08:25:45.496212 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 08:25:45.496215 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 08:25:45.496220 | ubuntu-noble | 2026-06-02 08:25:45.496468 | ubuntu-noble | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 08:25:45.478236 | debian-bookworm | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-02 08:25:45.718122 | debian-bookworm | 2026-06-02 08:25:45.718506 | debian-bookworm | PLAY [Converge] **************************************************************** 2026-06-02 08:25:45.718780 | debian-bookworm | 2026-06-02 08:25:45.719063 | debian-bookworm | TASK [Gathering Facts] ********************************************************* 2026-06-02 08:25:45.795679 | ubuntu-noble | Using /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg as config file 2026-06-02 08:25:46.021150 | ubuntu-noble | 2026-06-02 08:25:46.021648 | ubuntu-noble | PLAY [Converge] **************************************************************** 2026-06-02 08:25:46.022048 | ubuntu-noble | 2026-06-02 08:25:46.023265 | ubuntu-noble | TASK [Gathering Facts] ********************************************************* 2026-06-02 08:25:47.199262 | ubuntu-noble | ok: [molecule-auditd] 2026-06-02 08:25:47.199576 | ubuntu-noble | 2026-06-02 08:25:47.199901 | ubuntu-noble | TASK [Include required variables] ********************************************** 2026-06-02 08:25:47.230477 | ubuntu-noble | ok: [molecule-auditd] => {"ansible_facts": {}, "ansible_included_var_files": ["/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/vars/auditd.yml"], "changed": false} 2026-06-02 08:25:47.230606 | ubuntu-noble | 2026-06-02 08:25:47.230762 | ubuntu-noble | TASK [Include role auditd] ***************************************************** 2026-06-02 08:25:46.812264 | debian-bookworm | ok: [molecule-auditd] 2026-06-02 08:25:46.812319 | debian-bookworm | 2026-06-02 08:25:46.812414 | debian-bookworm | TASK [Include required variables] ********************************************** 2026-06-02 08:25:46.838222 | debian-bookworm | ok: [molecule-auditd] => {"ansible_facts": {}, "ansible_included_var_files": ["/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/vars/auditd.yml"], "changed": false} 2026-06-02 08:25:46.838289 | debian-bookworm | 2026-06-02 08:25:46.838415 | debian-bookworm | TASK [Include role auditd] ***************************************************** 2026-06-02 08:25:46.876141 | debian-bookworm | included: auditd for molecule-auditd 2026-06-02 08:25:46.876396 | debian-bookworm | 2026-06-02 08:25:46.876651 | debian-bookworm | TASK [auditd : Include distribution specific install tasks] ******************** 2026-06-02 08:25:46.917609 | debian-bookworm | included: /home/zuul/src/github.com/osism/ansible-collection-services/roles/auditd/tasks/install-Debian-family.yml for molecule-auditd 2026-06-02 08:25:46.917744 | debian-bookworm | 2026-06-02 08:25:46.917920 | debian-bookworm | TASK [auditd : Install auditd package] ***************************************** 2026-06-02 08:25:47.286440 | ubuntu-noble | included: auditd for molecule-auditd 2026-06-02 08:25:47.286511 | ubuntu-noble | 2026-06-02 08:25:47.286639 | ubuntu-noble | TASK [auditd : Include distribution specific install tasks] ******************** 2026-06-02 08:25:47.319441 | ubuntu-noble | included: /home/zuul/src/github.com/osism/ansible-collection-services/roles/auditd/tasks/install-Debian-family.yml for molecule-auditd 2026-06-02 08:25:47.319526 | ubuntu-noble | 2026-06-02 08:25:47.319622 | ubuntu-noble | TASK [auditd : Install auditd package] ***************************************** 2026-06-02 08:25:51.033440 | debian-bookworm | The following additional packages will be installed: 2026-06-02 08:25:51.033613 | debian-bookworm | libauparse0 2026-06-02 08:25:51.033861 | debian-bookworm | Suggested packages: 2026-06-02 08:25:51.034052 | debian-bookworm | audispd-plugins 2026-06-02 08:25:51.034254 | debian-bookworm | The following NEW packages will be installed: 2026-06-02 08:25:51.034518 | debian-bookworm | auditd libauparse0 2026-06-02 08:25:51.034639 | debian-bookworm | 0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded. 2026-06-02 08:25:51.036274 | debian-bookworm | changed: [molecule-auditd] => {"cache_update_time": 1780388658, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following additional packages will be installed:\n libauparse0\nSuggested packages:\n audispd-plugins\nThe following NEW packages will be installed:\n auditd libauparse0\n0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 279 kB of archives.\nAfter this operation, 934 kB of additional disk space will be used.\nGet:1 http://deb.debian.org/debian bookworm/main amd64 libauparse0 amd64 1:3.0.9-1 [61.9 kB]\nGet:2 http://deb.debian.org/debian bookworm/main amd64 auditd amd64 1:3.0.9-1 [218 kB]\nFetched 279 kB in 0s (3852 kB/s)\nSelecting previously unselected package libauparse0:amd64.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 28689 files and directories currently installed.)\r\nPreparing to unpack .../libauparse0_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking libauparse0:amd64 (1:3.0.9-1) ...\r\nSelecting previously unselected package auditd.\r\nPreparing to unpack .../auditd_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking auditd (1:3.0.9-1) ...\r\nSetting up libauparse0:amd64 (1:3.0.9-1) ...\r\nSetting up auditd (1:3.0.9-1) ...\r\nCreated symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /lib/systemd/system/auditd.service.\r\r\nProcessing triggers for libc-bin (2.36-9+deb12u14) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following additional packages will be installed:", " libauparse0", "Suggested packages:", " audispd-plugins", "The following NEW packages will be installed:", " auditd libauparse0", "0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.", "Need to get 279 kB of archives.", "After this operation, 934 kB of additional disk space will be used.", "Get:1 http://deb.debian.org/debian bookworm/main amd64 libauparse0 amd64 1:3.0.9-1 [61.9 kB]", "Get:2 http://deb.debian.org/debian bookworm/main amd64 auditd amd64 1:3.0.9-1 [218 kB]", "Fetched 279 kB in 0s (3852 kB/s)", "Selecting previously unselected package libauparse0:amd64.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 28689 files and directories currently installed.)", "Preparing to unpack .../libauparse0_1%3a3.0.9-1_amd64.deb ...", "Unpacking libauparse0:amd64 (1:3.0.9-1) ...", "Selecting previously unselected package auditd.", "Preparing to unpack .../auditd_1%3a3.0.9-1_amd64.deb ...", "Unpacking auditd (1:3.0.9-1) ...", "Setting up libauparse0:amd64 (1:3.0.9-1) ...", "Setting up auditd (1:3.0.9-1) ...", "Created symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /lib/systemd/system/auditd.service.", "", "Processing triggers for libc-bin (2.36-9+deb12u14) ..."]} 2026-06-02 08:25:51.036381 | debian-bookworm | 2026-06-02 08:25:51.036591 | debian-bookworm | TASK [auditd : Install audispd-plugins package] ******************************** 2026-06-02 08:25:51.767788 | ubuntu-noble | The following additional packages will be installed: 2026-06-02 08:25:51.767831 | ubuntu-noble | libauparse0t64 2026-06-02 08:25:51.767838 | ubuntu-noble | Suggested packages: 2026-06-02 08:25:51.767843 | ubuntu-noble | audispd-plugins 2026-06-02 08:25:51.767999 | ubuntu-noble | The following NEW packages will be installed: 2026-06-02 08:25:51.769970 | ubuntu-noble | auditd libauparse0t64 2026-06-02 08:25:51.769995 | ubuntu-noble | 0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded. 2026-06-02 08:25:51.773317 | ubuntu-noble | changed: [molecule-auditd] => {"cache_update_time": 1780388660, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following additional packages will be installed:\n libauparse0t64\nSuggested packages:\n audispd-plugins\nThe following NEW packages will be installed:\n auditd libauparse0t64\n0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 274 kB of archives.\nAfter this operation, 893 kB of additional disk space will be used.\nGet:1 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 libauparse0t64 amd64 1:3.1.2-2.1build1.1 [58.9 kB]\nGet:2 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 auditd amd64 1:3.1.2-2.1build1.1 [215 kB]\nFetched 274 kB in 0s (2722 kB/s)\nSelecting previously unselected package libauparse0t64:amd64.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 36110 files and directories currently installed.)\r\nPreparing to unpack .../libauparse0t64_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nAdding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0 to /lib/x86_64-linux-gnu/libauparse.so.0.usr-is-merged by libauparse0t64'\r\nAdding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0.0.0 to /lib/x86_64-linux-gnu/libauparse.so.0.0.0.usr-is-merged by libauparse0t64'\r\nUnpacking libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...\r\nSelecting previously unselected package auditd.\r\nPreparing to unpack .../auditd_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nUnpacking auditd (1:3.1.2-2.1build1.1) ...\r\nSetting up libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...\r\nSetting up auditd (1:3.1.2-2.1build1.1) ...\r\nCreated symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /usr/lib/systemd/system/auditd.service.\r\r\nProcessing triggers for libc-bin (2.39-0ubuntu8.7) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following additional packages will be installed:", " libauparse0t64", "Suggested packages:", " audispd-plugins", "The following NEW packages will be installed:", " auditd libauparse0t64", "0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.", "Need to get 274 kB of archives.", "After this operation, 893 kB of additional disk space will be used.", "Get:1 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 libauparse0t64 amd64 1:3.1.2-2.1build1.1 [58.9 kB]", "Get:2 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 auditd amd64 1:3.1.2-2.1build1.1 [215 kB]", "Fetched 274 kB in 0s (2722 kB/s)", "Selecting previously unselected package libauparse0t64:amd64.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 36110 files and directories currently installed.)", "Preparing to unpack .../libauparse0t64_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Adding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0 to /lib/x86_64-linux-gnu/libauparse.so.0.usr-is-merged by libauparse0t64'", "Adding 'diversion of /lib/x86_64-linux-gnu/libauparse.so.0.0.0 to /lib/x86_64-linux-gnu/libauparse.so.0.0.0.usr-is-merged by libauparse0t64'", "Unpacking libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...", "Selecting previously unselected package auditd.", "Preparing to unpack .../auditd_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Unpacking auditd (1:3.1.2-2.1build1.1) ...", "Setting up libauparse0t64:amd64 (1:3.1.2-2.1build1.1) ...", "Setting up auditd (1:3.1.2-2.1build1.1) ...", "Created symlink /etc/systemd/system/multi-user.target.wants/auditd.service → /usr/lib/systemd/system/auditd.service.", "", "Processing triggers for libc-bin (2.39-0ubuntu8.7) ..."]} 2026-06-02 08:25:51.773562 | ubuntu-noble | 2026-06-02 08:25:51.773894 | ubuntu-noble | TASK [auditd : Install audispd-plugins package] ******************************** 2026-06-02 08:25:53.864820 | debian-bookworm | The following NEW packages will be installed: 2026-06-02 08:25:53.864935 | debian-bookworm | audispd-plugins 2026-06-02 08:25:53.864954 | debian-bookworm | 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. 2026-06-02 08:25:53.864995 | debian-bookworm | changed: [molecule-auditd] => {"cache_update_time": 1780388658, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following NEW packages will be installed:\n audispd-plugins\n0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 45.6 kB of archives.\nAfter this operation, 132 kB of additional disk space will be used.\nGet:1 http://deb.debian.org/debian bookworm/main amd64 audispd-plugins amd64 1:3.0.9-1 [45.6 kB]\nFetched 45.6 kB in 0s (958 kB/s)\nSelecting previously unselected package audispd-plugins.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 28780 files and directories currently installed.)\r\nPreparing to unpack .../audispd-plugins_1%3a3.0.9-1_amd64.deb ...\r\nUnpacking audispd-plugins (1:3.0.9-1) ...\r\nSetting up audispd-plugins (1:3.0.9-1) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following NEW packages will be installed:", " audispd-plugins", "0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.", "Need to get 45.6 kB of archives.", "After this operation, 132 kB of additional disk space will be used.", "Get:1 http://deb.debian.org/debian bookworm/main amd64 audispd-plugins amd64 1:3.0.9-1 [45.6 kB]", "Fetched 45.6 kB in 0s (958 kB/s)", "Selecting previously unselected package audispd-plugins.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 28780 files and directories currently installed.)", "Preparing to unpack .../audispd-plugins_1%3a3.0.9-1_amd64.deb ...", "Unpacking audispd-plugins (1:3.0.9-1) ...", "Setting up audispd-plugins (1:3.0.9-1) ..."]} 2026-06-02 08:25:53.865010 | debian-bookworm | 2026-06-02 08:25:53.865022 | debian-bookworm | TASK [auditd : Copy auditd.conf configuration files] *************************** 2026-06-02 08:25:54.948457 | ubuntu-noble | The following NEW packages will be installed: 2026-06-02 08:25:54.948537 | ubuntu-noble | audispd-plugins 2026-06-02 08:25:54.948658 | ubuntu-noble | 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. 2026-06-02 08:25:54.948852 | ubuntu-noble | changed: [molecule-auditd] => {"cache_update_time": 1780388660, "cache_updated": false, "changed": true, "stderr": "debconf: delaying package configuration, since apt-utils is not installed\n", "stderr_lines": ["debconf: delaying package configuration, since apt-utils is not installed"], "stdout": "Reading package lists...\nBuilding dependency tree...\nReading state information...\nThe following NEW packages will be installed:\n audispd-plugins\n0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.\nNeed to get 38.8 kB of archives.\nAfter this operation, 131 kB of additional disk space will be used.\nGet:1 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 audispd-plugins amd64 1:3.1.2-2.1build1.1 [38.8 kB]\nFetched 38.8 kB in 0s (531 kB/s)\nSelecting previously unselected package audispd-plugins.\r\n(Reading database ... \r(Reading database ... 5%\r(Reading database ... 10%\r(Reading database ... 15%\r(Reading database ... 20%\r(Reading database ... 25%\r(Reading database ... 30%\r(Reading database ... 35%\r(Reading database ... 40%\r(Reading database ... 45%\r(Reading database ... 50%\r(Reading database ... 55%\r(Reading database ... 60%\r(Reading database ... 65%\r(Reading database ... 70%\r(Reading database ... 75%\r(Reading database ... 80%\r(Reading database ... 85%\r(Reading database ... 90%\r(Reading database ... 95%\r(Reading database ... 100%\r(Reading database ... 36206 files and directories currently installed.)\r\nPreparing to unpack .../audispd-plugins_1%3a3.1.2-2.1build1.1_amd64.deb ...\r\nUnpacking audispd-plugins (1:3.1.2-2.1build1.1) ...\r\nSetting up audispd-plugins (1:3.1.2-2.1build1.1) ...\r\n", "stdout_lines": ["Reading package lists...", "Building dependency tree...", "Reading state information...", "The following NEW packages will be installed:", " audispd-plugins", "0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.", "Need to get 38.8 kB of archives.", "After this operation, 131 kB of additional disk space will be used.", "Get:1 http://archive.ubuntu.com/ubuntu noble-updates/universe amd64 audispd-plugins amd64 1:3.1.2-2.1build1.1 [38.8 kB]", "Fetched 38.8 kB in 0s (531 kB/s)", "Selecting previously unselected package audispd-plugins.", "(Reading database ... ", "(Reading database ... 5%", "(Reading database ... 10%", "(Reading database ... 15%", "(Reading database ... 20%", "(Reading database ... 25%", "(Reading database ... 30%", "(Reading database ... 35%", "(Reading database ... 40%", "(Reading database ... 45%", "(Reading database ... 50%", "(Reading database ... 55%", "(Reading database ... 60%", "(Reading database ... 65%", "(Reading database ... 70%", "(Reading database ... 75%", "(Reading database ... 80%", "(Reading database ... 85%", "(Reading database ... 90%", "(Reading database ... 95%", "(Reading database ... 100%", "(Reading database ... 36206 files and directories currently installed.)", "Preparing to unpack .../audispd-plugins_1%3a3.1.2-2.1build1.1_amd64.deb ...", "Unpacking audispd-plugins (1:3.1.2-2.1build1.1) ...", "Setting up audispd-plugins (1:3.1.2-2.1build1.1) ..."]} 2026-06-02 08:25:54.950717 | ubuntu-noble | 2026-06-02 08:25:54.950775 | ubuntu-noble | TASK [auditd : Copy auditd.conf configuration files] *************************** 2026-06-02 08:25:55.034610 | debian-bookworm | --- before 2026-06-02 08:25:55.034709 | debian-bookworm | +++ after: /home/zuul/.ansible/tmp/ansible-local-2113zjzh2w7z/tmpkqzooshy/auditd.conf.j2 2026-06-02 08:25:55.034727 | debian-bookworm | @@ -0,0 +1,37 @@ 2026-06-02 08:25:55.034805 | debian-bookworm | +# 2026-06-02 08:25:55.034906 | debian-bookworm | +# This file controls the configuration of the audit daemon 2026-06-02 08:25:55.035003 | debian-bookworm | +# 2026-06-02 08:25:55.035100 | debian-bookworm | + 2026-06-02 08:25:55.035200 | debian-bookworm | +local_events = yes 2026-06-02 08:25:55.035301 | debian-bookworm | +write_logs = yes 2026-06-02 08:25:55.035403 | debian-bookworm | +log_file = /var/log/audit/audit.log 2026-06-02 08:25:55.035501 | debian-bookworm | +log_group = adm 2026-06-02 08:25:55.035598 | debian-bookworm | +log_format = RAW 2026-06-02 08:25:55.035694 | debian-bookworm | +flush = INCREMENTAL_ASYNC 2026-06-02 08:25:55.035790 | debian-bookworm | +freq = 50 2026-06-02 08:25:55.035884 | debian-bookworm | +max_log_file = 8 2026-06-02 08:25:55.035977 | debian-bookworm | +num_logs = 5 2026-06-02 08:25:55.036073 | debian-bookworm | +priority_boost = 4 2026-06-02 08:25:55.036168 | debian-bookworm | +disp_qos = lossy 2026-06-02 08:25:55.036490 | debian-bookworm | +dispatcher = /sbin/audispd 2026-06-02 08:25:55.036591 | debian-bookworm | +name_format = NONE 2026-06-02 08:25:55.036688 | debian-bookworm | +##name = mydomain 2026-06-02 08:25:55.036783 | debian-bookworm | +max_log_file_action = ROTATE 2026-06-02 08:25:55.036881 | debian-bookworm | +space_left = 12361 2026-06-02 08:25:55.036978 | debian-bookworm | +space_left_action = email 2026-06-02 08:25:55.037076 | debian-bookworm | +verify_email = yes 2026-06-02 08:25:55.037170 | debian-bookworm | +action_mail_acct = root 2026-06-02 08:25:55.037284 | debian-bookworm | +admin_space_left = 50 2026-06-02 08:25:55.037382 | debian-bookworm | +admin_space_left_action = SUSPEND 2026-06-02 08:25:55.037481 | debian-bookworm | +disk_full_action = SUSPEND 2026-06-02 08:25:55.037579 | debian-bookworm | +disk_error_action = SUSPEND 2026-06-02 08:25:55.037675 | debian-bookworm | +use_libwrap = yes 2026-06-02 08:25:55.037772 | debian-bookworm | +##tcp_listen_port = 60 2026-06-02 08:25:55.037870 | debian-bookworm | +tcp_listen_queue = 5 2026-06-02 08:25:55.037966 | debian-bookworm | +tcp_max_per_addr = 1 2026-06-02 08:25:55.038063 | debian-bookworm | +##tcp_client_ports = 1024-65535 2026-06-02 08:25:55.038160 | debian-bookworm | +tcp_client_max_idle = 0 2026-06-02 08:25:55.038271 | debian-bookworm | +enable_krb5 = no 2026-06-02 08:25:55.038368 | debian-bookworm | +krb5_principal = auditd 2026-06-02 08:25:55.038523 | debian-bookworm | +##krb5_key_file = /etc/audit/audit.key 2026-06-02 08:25:55.038622 | debian-bookworm | +distribute_network = no 2026-06-02 08:25:55.038714 | debian-bookworm | 2026-06-02 08:25:55.038828 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "checksum": "e902cc6bebf86c17087d153e359a2cc1231672e0", "dest": "/etc/audit/audit.conf", "gid": 0, "group": "root", "md5sum": "69dfd768317bae876a6a78c8aeb5cce1", "mode": "0640", "owner": "root", "size": 806, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1780388753.8985665-2483-204952842916006/.source.conf", "state": "file", "uid": 0} 2026-06-02 08:25:55.038916 | debian-bookworm | 2026-06-02 08:25:55.039023 | debian-bookworm | TASK [auditd : Adjust auditd/audispd configurations] *************************** 2026-06-02 08:25:55.424062 | debian-bookworm | ok: [molecule-auditd] => (item={'parameter': 'active', 'value': 'no', 'config': '/etc/audit/plugins.d/syslog.conf'}) => {"ansible_loop_var": "item", "backup": "", "changed": false, "item": {"config": "/etc/audit/plugins.d/syslog.conf", "parameter": "active", "value": "no"}, "msg": ""} 2026-06-02 08:25:55.424160 | debian-bookworm | 2026-06-02 08:25:55.424312 | debian-bookworm | TASK [auditd : Deploy rules for auditd] **************************************** 2026-06-02 08:25:56.145448 | ubuntu-noble | --- before 2026-06-02 08:25:56.145496 | ubuntu-noble | +++ after: /home/zuul/.ansible/tmp/ansible-local-1929buyicgsi/tmpwop3it8c/auditd.conf.j2 2026-06-02 08:25:56.146965 | ubuntu-noble | @@ -0,0 +1,37 @@ 2026-06-02 08:25:56.146995 | ubuntu-noble | +# 2026-06-02 08:25:56.147001 | ubuntu-noble | +# This file controls the configuration of the audit daemon 2026-06-02 08:25:56.147007 | ubuntu-noble | +# 2026-06-02 08:25:56.147013 | ubuntu-noble | + 2026-06-02 08:25:56.147022 | ubuntu-noble | +local_events = yes 2026-06-02 08:25:56.147743 | ubuntu-noble | +write_logs = yes 2026-06-02 08:25:56.147760 | ubuntu-noble | +log_file = /var/log/audit/audit.log 2026-06-02 08:25:56.147769 | ubuntu-noble | +log_group = adm 2026-06-02 08:25:56.148149 | ubuntu-noble | +log_format = RAW 2026-06-02 08:25:56.148427 | ubuntu-noble | +flush = INCREMENTAL_ASYNC 2026-06-02 08:25:56.148689 | ubuntu-noble | +freq = 50 2026-06-02 08:25:56.149217 | ubuntu-noble | +max_log_file = 8 2026-06-02 08:25:56.149490 | ubuntu-noble | +num_logs = 5 2026-06-02 08:25:56.149729 | ubuntu-noble | +priority_boost = 4 2026-06-02 08:25:56.150024 | ubuntu-noble | +disp_qos = lossy 2026-06-02 08:25:56.150265 | ubuntu-noble | +dispatcher = /sbin/audispd 2026-06-02 08:25:56.150506 | ubuntu-noble | +name_format = NONE 2026-06-02 08:25:56.150747 | ubuntu-noble | +##name = mydomain 2026-06-02 08:25:56.151056 | ubuntu-noble | +max_log_file_action = ROTATE 2026-06-02 08:25:56.151300 | ubuntu-noble | +space_left = 12361 2026-06-02 08:25:56.151546 | ubuntu-noble | +space_left_action = email 2026-06-02 08:25:56.151816 | ubuntu-noble | +verify_email = yes 2026-06-02 08:25:56.152088 | ubuntu-noble | +action_mail_acct = root 2026-06-02 08:25:56.152333 | ubuntu-noble | +admin_space_left = 50 2026-06-02 08:25:56.152584 | ubuntu-noble | +admin_space_left_action = SUSPEND 2026-06-02 08:25:56.152879 | ubuntu-noble | +disk_full_action = SUSPEND 2026-06-02 08:25:56.153161 | ubuntu-noble | +disk_error_action = SUSPEND 2026-06-02 08:25:56.153408 | ubuntu-noble | +use_libwrap = yes 2026-06-02 08:25:56.153648 | ubuntu-noble | +##tcp_listen_port = 60 2026-06-02 08:25:56.153906 | ubuntu-noble | +tcp_listen_queue = 5 2026-06-02 08:25:56.154285 | ubuntu-noble | +tcp_max_per_addr = 1 2026-06-02 08:25:56.154534 | ubuntu-noble | +##tcp_client_ports = 1024-65535 2026-06-02 08:25:56.154801 | ubuntu-noble | +tcp_client_max_idle = 0 2026-06-02 08:25:56.155060 | ubuntu-noble | +enable_krb5 = no 2026-06-02 08:25:56.155302 | ubuntu-noble | +krb5_principal = auditd 2026-06-02 08:25:56.155546 | ubuntu-noble | +##krb5_key_file = /etc/audit/audit.key 2026-06-02 08:25:56.155840 | ubuntu-noble | +distribute_network = no 2026-06-02 08:25:56.156101 | ubuntu-noble | 2026-06-02 08:25:56.156404 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "checksum": "e902cc6bebf86c17087d153e359a2cc1231672e0", "dest": "/etc/audit/audit.conf", "gid": 0, "group": "root", "md5sum": "69dfd768317bae876a6a78c8aeb5cce1", "mode": "0640", "owner": "root", "size": 806, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1780388754.9636173-2327-53639470434011/.source.conf", "state": "file", "uid": 0} 2026-06-02 08:25:56.157050 | ubuntu-noble | 2026-06-02 08:25:56.157364 | ubuntu-noble | TASK [auditd : Adjust auditd/audispd configurations] *************************** 2026-06-02 08:25:56.234581 | debian-bookworm | --- before 2026-06-02 08:25:56.234627 | debian-bookworm | +++ after: /home/zuul/.ansible/tmp/ansible-local-2113zjzh2w7z/tmpe56xtzdi/20-neo23x0.rules.j2 2026-06-02 08:25:56.234633 | debian-bookworm | @@ -0,0 +1,750 @@ 2026-06-02 08:25:56.234638 | debian-bookworm | +# ___ ___ __ __ 2026-06-02 08:25:56.234643 | debian-bookworm | +# / | __ ______/ (_) /_____/ / 2026-06-02 08:25:56.234647 | debian-bookworm | +# / /| |/ / / / __ / / __/ __ / 2026-06-02 08:25:56.234651 | debian-bookworm | +# / ___ / /_/ / /_/ / / /_/ /_/ / 2026-06-02 08:25:56.234655 | debian-bookworm | +# /_/ |_\__,_/\__,_/_/\__/\__,_/ 2026-06-02 08:25:56.234659 | debian-bookworm | +# 2026-06-02 08:25:56.234664 | debian-bookworm | +# Linux Audit Daemon - Best Practice Configuration 2026-06-02 08:25:56.234668 | debian-bookworm | +# /etc/audit/audit.rules 2026-06-02 08:25:56.234672 | debian-bookworm | +# 2026-06-02 08:25:56.234676 | debian-bookworm | +# Compiled by Florian Roth 2026-06-02 08:25:56.234679 | debian-bookworm | +# 2026-06-02 08:25:56.234683 | debian-bookworm | +# Created : 2017/12/05 2026-06-02 08:25:56.234699 | debian-bookworm | +# Modified : 2023/01/25 2026-06-02 08:25:56.234703 | debian-bookworm | +# 2026-06-02 08:25:56.234707 | debian-bookworm | +# Based on rules published here: 2026-06-02 08:25:56.234711 | debian-bookworm | +# Gov.uk auditd rules 2026-06-02 08:25:56.234714 | debian-bookworm | +# https://github.com/gds-operations/puppet-auditd/pull/1 2026-06-02 08:25:56.234718 | debian-bookworm | +# CentOS 7 hardening 2026-06-02 08:25:56.234722 | debian-bookworm | +# https://highon.coffee/blog/security-harden-centos-7/#auditd---audit-daemon 2026-06-02 08:25:56.234726 | debian-bookworm | +# Linux audit repo 2026-06-02 08:25:56.234730 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/tree/master/rules 2026-06-02 08:25:56.234735 | debian-bookworm | +# Auditd high performance linux auditing 2026-06-02 08:25:56.234739 | debian-bookworm | +# https://linux-audit.com/tuning-auditd-high-performance-linux-auditing/ 2026-06-02 08:25:56.234743 | debian-bookworm | +# 2026-06-02 08:25:56.234747 | debian-bookworm | +# Further rules 2026-06-02 08:25:56.234876 | debian-bookworm | +# For PCI DSS compliance see: 2026-06-02 08:25:56.235093 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-pci-dss-v31.rules 2026-06-02 08:25:56.235272 | debian-bookworm | +# For NISPOM compliance see: 2026-06-02 08:25:56.238696 | debian-bookworm | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-nispom.rules 2026-06-02 08:25:56.239074 | debian-bookworm | + 2026-06-02 08:25:56.239330 | debian-bookworm | +# Remove any existing rules 2026-06-02 08:25:56.239528 | debian-bookworm | +-D 2026-06-02 08:25:56.239715 | debian-bookworm | + 2026-06-02 08:25:56.239900 | debian-bookworm | +# Buffer Size 2026-06-02 08:25:56.240082 | debian-bookworm | +## Feel free to increase this if the machine panic's 2026-06-02 08:25:56.240290 | debian-bookworm | +-b 8192 2026-06-02 08:25:56.240472 | debian-bookworm | + 2026-06-02 08:25:56.240654 | debian-bookworm | +# Failure Mode 2026-06-02 08:25:56.240847 | debian-bookworm | +## Possible values: 0 (silent), 1 (printk, print a failure message), 2 (panic, halt the system) 2026-06-02 08:25:56.241034 | debian-bookworm | +-f 1 2026-06-02 08:25:56.241270 | debian-bookworm | + 2026-06-02 08:25:56.241488 | debian-bookworm | +# Ignore errors 2026-06-02 08:25:56.241775 | debian-bookworm | +## e.g. caused by users or files not found in the local environment 2026-06-02 08:25:56.241977 | debian-bookworm | +-i 2026-06-02 08:25:56.242159 | debian-bookworm | + 2026-06-02 08:25:56.242441 | debian-bookworm | +# Self Auditing --------------------------------------------------------------- 2026-06-02 08:25:56.242683 | debian-bookworm | + 2026-06-02 08:25:56.242898 | debian-bookworm | +## Audit the audit logs 2026-06-02 08:25:56.243128 | debian-bookworm | +### Successful and unsuccessful attempts to read information from the audit records 2026-06-02 08:25:56.243352 | debian-bookworm | +-w /var/log/audit/ -p wra -k auditlog 2026-06-02 08:25:56.243542 | debian-bookworm | +-w /var/audit/ -p wra -k auditlog 2026-06-02 08:25:56.243722 | debian-bookworm | + 2026-06-02 08:25:56.243909 | debian-bookworm | +## Auditd configuration 2026-06-02 08:25:56.244099 | debian-bookworm | +### Modifications to audit configuration that occur while the audit collection functions are operating 2026-06-02 08:25:56.244356 | debian-bookworm | +-w /etc/audit/ -p wa -k auditconfig 2026-06-02 08:25:56.244586 | debian-bookworm | +-w /etc/libaudit.conf -p wa -k auditconfig 2026-06-02 08:25:56.244753 | debian-bookworm | +-w /etc/audisp/ -p wa -k audispconfig 2026-06-02 08:25:56.244911 | debian-bookworm | + 2026-06-02 08:25:56.245069 | debian-bookworm | +## Monitor for use of audit management tools 2026-06-02 08:25:56.245248 | debian-bookworm | +-w /sbin/auditctl -p x -k audittools 2026-06-02 08:25:56.245410 | debian-bookworm | +-w /sbin/auditd -p x -k audittools 2026-06-02 08:25:56.245571 | debian-bookworm | +-w /usr/sbin/auditd -p x -k audittools 2026-06-02 08:25:56.245731 | debian-bookworm | +-w /usr/sbin/augenrules -p x -k audittools 2026-06-02 08:25:56.245886 | debian-bookworm | + 2026-06-02 08:25:56.246046 | debian-bookworm | +## Access to all audit trails 2026-06-02 08:25:56.246237 | debian-bookworm | + 2026-06-02 08:25:56.246457 | debian-bookworm | +-a always,exit -F path=/usr/sbin/ausearch -F perm=x -k audittools 2026-06-02 08:25:56.246628 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aureport -F perm=x -k audittools 2026-06-02 08:25:56.246794 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aulast -F perm=x -k audittools 2026-06-02 08:25:56.246958 | debian-bookworm | +-a always,exit -F path=/usr/sbin/aulastlogin -F perm=x -k audittools 2026-06-02 08:25:56.247120 | debian-bookworm | +-a always,exit -F path=/usr/sbin/auvirt -F perm=x -k audittools 2026-06-02 08:25:56.247295 | debian-bookworm | + 2026-06-02 08:25:56.247456 | debian-bookworm | +# Filters --------------------------------------------------------------------- 2026-06-02 08:25:56.247610 | debian-bookworm | + 2026-06-02 08:25:56.247790 | debian-bookworm | +### We put these early because audit is a first match wins system. 2026-06-02 08:25:56.247948 | debian-bookworm | + 2026-06-02 08:25:56.248110 | debian-bookworm | +## Ignore SELinux AVC records 2026-06-02 08:25:56.248325 | debian-bookworm | +-a always,exclude -F msgtype=AVC 2026-06-02 08:25:56.248488 | debian-bookworm | + 2026-06-02 08:25:56.248649 | debian-bookworm | +## Ignore current working directory records 2026-06-02 08:25:56.248795 | debian-bookworm | +-a always,exclude -F msgtype=CWD 2026-06-02 08:25:56.248933 | debian-bookworm | + 2026-06-02 08:25:56.249077 | debian-bookworm | +## Cron jobs fill the logs with stuff we normally don't want (works with SELinux) 2026-06-02 08:25:56.249237 | debian-bookworm | +-a never,user -F subj_type=crond_t 2026-06-02 08:25:56.249380 | debian-bookworm | +-a never,exit -F subj_type=crond_t 2026-06-02 08:25:56.249521 | debian-bookworm | + 2026-06-02 08:25:56.249667 | debian-bookworm | +## This prevents chrony from overwhelming the logs 2026-06-02 08:25:56.249816 | debian-bookworm | +-a never,exit -F arch=b64 -S adjtimex -F auid=-1 -F uid=chrony -F subj_type=chronyd_t 2026-06-02 08:25:56.249955 | debian-bookworm | + 2026-06-02 08:25:56.250100 | debian-bookworm | +## This is not very interesting and wastes a lot of space if the server is public facing 2026-06-02 08:25:56.250271 | debian-bookworm | +-a always,exclude -F msgtype=CRYPTO_KEY_USER 2026-06-02 08:25:56.250430 | debian-bookworm | + 2026-06-02 08:25:56.250576 | debian-bookworm | +## Open VM Tools 2026-06-02 08:25:56.250721 | debian-bookworm | +-a exit,never -F arch=b64 -S all -F exe=/usr/bin/vmtoolsd 2026-06-02 08:25:56.250860 | debian-bookworm | + 2026-06-02 08:25:56.251007 | debian-bookworm | +## High Volume Event Filter (especially on Linux Workstations) 2026-06-02 08:25:56.251152 | debian-bookworm | +-a never,exit -F arch=b64 -F dir=/dev/shm -k sharedmemaccess 2026-06-02 08:25:56.251338 | debian-bookworm | +-a never,exit -F arch=b64 -F dir=/var/lock/lvm -k locklvm 2026-06-02 08:25:56.251480 | debian-bookworm | + 2026-06-02 08:25:56.251620 | debian-bookworm | +## FileBeat 2026-06-02 08:25:56.251762 | debian-bookworm | +-a never,exit -F arch=b64 -F path=/opt/filebeat -k filebeat 2026-06-02 08:25:56.251894 | debian-bookworm | + 2026-06-02 08:25:56.252028 | debian-bookworm | +## More information on how to filter events 2026-06-02 08:25:56.252174 | debian-bookworm | +### https://access.redhat.com/solutions/2482221 2026-06-02 08:25:56.252321 | debian-bookworm | + 2026-06-02 08:25:56.252454 | debian-bookworm | +# Rules ----------------------------------------------------------------------- 2026-06-02 08:25:56.252585 | debian-bookworm | + 2026-06-02 08:25:56.252719 | debian-bookworm | +## Kernel parameters 2026-06-02 08:25:56.252852 | debian-bookworm | +-w /etc/sysctl.conf -p wa -k sysctl 2026-06-02 08:25:56.252984 | debian-bookworm | +-w /etc/sysctl.d -p wa -k sysctl 2026-06-02 08:25:56.253113 | debian-bookworm | + 2026-06-02 08:25:56.253261 | debian-bookworm | +## Kernel module loading and unloading 2026-06-02 08:25:56.253400 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/insmod -k modules 2026-06-02 08:25:56.253536 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/modprobe -k modules 2026-06-02 08:25:56.253673 | debian-bookworm | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/rmmod -k modules 2026-06-02 08:25:56.253810 | debian-bookworm | +-a always,exit -F arch=b64 -S finit_module -S init_module -S delete_module -F auid!=-1 -k modules 2026-06-02 08:25:56.253940 | debian-bookworm | + 2026-06-02 08:25:56.254074 | debian-bookworm | +## Modprobe configuration 2026-06-02 08:25:56.254223 | debian-bookworm | +-w /etc/modprobe.conf -p wa -k modprobe 2026-06-02 08:25:56.254359 | debian-bookworm | +-w /etc/modprobe.d -p wa -k modprobe 2026-06-02 08:25:56.254529 | debian-bookworm | + 2026-06-02 08:25:56.254665 | debian-bookworm | +## KExec usage (all actions) 2026-06-02 08:25:56.254801 | debian-bookworm | +-a always,exit -F arch=b64 -S kexec_load -k KEXEC 2026-06-02 08:25:56.254931 | debian-bookworm | + 2026-06-02 08:25:56.255064 | debian-bookworm | +## Special files 2026-06-02 08:25:56.255237 | debian-bookworm | +-a always,exit -F arch=b64 -S mknod -S mknodat -k specialfiles 2026-06-02 08:25:56.255376 | debian-bookworm | + 2026-06-02 08:25:56.255512 | debian-bookworm | +## Mount operations (only attributable) 2026-06-02 08:25:56.255641 | debian-bookworm | +-a always,exit -F arch=b64 -S mount -S umount2 -F auid!=-1 -k mount 2026-06-02 08:25:56.255759 | debian-bookworm | + 2026-06-02 08:25:56.255882 | debian-bookworm | +### NFS mount 2026-06-02 08:25:56.256018 | debian-bookworm | +-a always,exit -F path=/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 08:25:56.256149 | debian-bookworm | +-a always,exit -F path=/usr/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 08:25:56.256286 | debian-bookworm | + 2026-06-02 08:25:56.256410 | debian-bookworm | +## Change swap (only attributable) 2026-06-02 08:25:56.256535 | debian-bookworm | +-a always,exit -F arch=b64 -S swapon -S swapoff -F auid!=-1 -k swap 2026-06-02 08:25:56.256669 | debian-bookworm | + 2026-06-02 08:25:56.256791 | debian-bookworm | +## Time 2026-06-02 08:25:56.256917 | debian-bookworm | +-a always,exit -F arch=b64 -F uid!=ntp -S adjtimex -S settimeofday -S clock_settime -k time 2026-06-02 08:25:56.257039 | debian-bookworm | +### Local time zone 2026-06-02 08:25:56.257164 | debian-bookworm | +-w /etc/localtime -p wa -k localtime 2026-06-02 08:25:56.257299 | debian-bookworm | + 2026-06-02 08:25:56.257421 | debian-bookworm | +## Stunnel 2026-06-02 08:25:56.257542 | debian-bookworm | +-w /usr/sbin/stunnel -p x -k stunnel 2026-06-02 08:25:56.257666 | debian-bookworm | +-w /usr/bin/stunnel -p x -k stunnel 2026-06-02 08:25:56.257783 | debian-bookworm | + 2026-06-02 08:25:56.257907 | debian-bookworm | +## Cron configuration & scheduled jobs 2026-06-02 08:25:56.258029 | debian-bookworm | +-w /etc/cron.allow -p wa -k cron 2026-06-02 08:25:56.258151 | debian-bookworm | +-w /etc/cron.deny -p wa -k cron 2026-06-02 08:25:56.258315 | debian-bookworm | +-w /etc/cron.d/ -p wa -k cron 2026-06-02 08:25:56.258467 | debian-bookworm | +-w /etc/cron.daily/ -p wa -k cron 2026-06-02 08:25:56.258580 | debian-bookworm | +-w /etc/cron.hourly/ -p wa -k cron 2026-06-02 08:25:56.258694 | debian-bookworm | +-w /etc/cron.monthly/ -p wa -k cron 2026-06-02 08:25:56.258805 | debian-bookworm | +-w /etc/cron.weekly/ -p wa -k cron 2026-06-02 08:25:56.258918 | debian-bookworm | +-w /etc/crontab -p wa -k cron 2026-06-02 08:25:56.259027 | debian-bookworm | +-w /var/spool/cron/ -p wa -k cron 2026-06-02 08:25:56.259137 | debian-bookworm | + 2026-06-02 08:25:56.259263 | debian-bookworm | +## User, group, password databases 2026-06-02 08:25:56.259376 | debian-bookworm | +-w /etc/group -p wa -k etcgroup 2026-06-02 08:25:56.259486 | debian-bookworm | +-w /etc/passwd -p wa -k etcpasswd 2026-06-02 08:25:56.259601 | debian-bookworm | +-w /etc/gshadow -k etcgroup 2026-06-02 08:25:56.259713 | debian-bookworm | +-w /etc/shadow -k etcpasswd 2026-06-02 08:25:56.259826 | debian-bookworm | +-w /etc/security/opasswd -k opasswd 2026-06-02 08:25:56.259934 | debian-bookworm | + 2026-06-02 08:25:56.260044 | debian-bookworm | +## Sudoers file changes 2026-06-02 08:25:56.260155 | debian-bookworm | +-w /etc/sudoers -p wa -k actions 2026-06-02 08:25:56.260282 | debian-bookworm | +-w /etc/sudoers.d/ -p wa -k actions 2026-06-02 08:25:56.260394 | debian-bookworm | + 2026-06-02 08:25:56.260502 | debian-bookworm | +## Passwd 2026-06-02 08:25:56.260617 | debian-bookworm | +-w /usr/bin/passwd -p x -k passwd_modification 2026-06-02 08:25:56.260724 | debian-bookworm | + 2026-06-02 08:25:56.260834 | debian-bookworm | +## Tools to change group identifiers 2026-06-02 08:25:56.260947 | debian-bookworm | +-w /usr/sbin/groupadd -p x -k group_modification 2026-06-02 08:25:56.261058 | debian-bookworm | +-w /usr/sbin/groupmod -p x -k group_modification 2026-06-02 08:25:56.261166 | debian-bookworm | +-w /usr/sbin/addgroup -p x -k group_modification 2026-06-02 08:25:56.261316 | debian-bookworm | +-w /usr/sbin/useradd -p x -k user_modification 2026-06-02 08:25:56.261429 | debian-bookworm | +-w /usr/sbin/userdel -p x -k user_modification 2026-06-02 08:25:56.261542 | debian-bookworm | +-w /usr/sbin/usermod -p x -k user_modification 2026-06-02 08:25:56.261656 | debian-bookworm | +-w /usr/sbin/adduser -p x -k user_modification 2026-06-02 08:25:56.261765 | debian-bookworm | + 2026-06-02 08:25:56.261877 | debian-bookworm | +## Login configuration and information 2026-06-02 08:25:56.261989 | debian-bookworm | +-w /etc/login.defs -p wa -k login 2026-06-02 08:25:56.262103 | debian-bookworm | +-w /etc/securetty -p wa -k login 2026-06-02 08:25:56.262232 | debian-bookworm | +-w /var/log/faillog -p wa -k login 2026-06-02 08:25:56.262346 | debian-bookworm | +-w /var/log/lastlog -p wa -k login 2026-06-02 08:25:56.262488 | debian-bookworm | +-w /var/log/tallylog -p wa -k login 2026-06-02 08:25:56.262602 | debian-bookworm | + 2026-06-02 08:25:56.262713 | debian-bookworm | +## Network Environment 2026-06-02 08:25:56.262821 | debian-bookworm | +### Changes to hostname 2026-06-02 08:25:56.262935 | debian-bookworm | +-a always,exit -F arch=b64 -S sethostname -S setdomainname -k network_modifications 2026-06-02 08:25:56.263041 | debian-bookworm | + 2026-06-02 08:25:56.263152 | debian-bookworm | +### Detect Remote Shell Use 2026-06-02 08:25:56.263284 | debian-bookworm | +-a always,exit -F arch=b64 -F exe=/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-02 08:25:56.263399 | debian-bookworm | +-a always,exit -F arch=b64 -F exe=/usr/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-02 08:25:56.263506 | debian-bookworm | + 2026-06-02 08:25:56.263615 | debian-bookworm | +### Successful IPv4 Connections 2026-06-02 08:25:56.263726 | debian-bookworm | +-a always,exit -F arch=b64 -S connect -F a2=16 -F success=1 -F key=network_connect_4 2026-06-02 08:25:56.263835 | debian-bookworm | + 2026-06-02 08:25:56.588422 | ubuntu-noble | ok: [molecule-auditd] => (item={'parameter': 'active', 'value': 'no', 'config': '/etc/audit/plugins.d/syslog.conf'}) => {"ansible_loop_var": "item", "backup": "", "changed": false, "item": {"config": "/etc/audit/plugins.d/syslog.conf", "parameter": "active", "value": "no"}, "msg": ""} 2026-06-02 08:25:56.588598 | ubuntu-noble | 2026-06-02 08:25:56.588734 | ubuntu-noble | TASK [auditd : Deploy rules for auditd] **************************************** 2026-06-02 08:25:56.264157 | debian-bookworm | +### Successful IPv6 Connections 2026-06-02 08:25:56.264320 | debian-bookworm | +-a always,exit -F arch=b64 -S connect -F a2=28 -F success=1 -F key=network_connect_6 2026-06-02 08:25:56.264443 | debian-bookworm | + 2026-06-02 08:25:56.264570 | debian-bookworm | +### Changes to other files 2026-06-02 08:25:56.264682 | debian-bookworm | +-w /etc/hosts -p wa -k network_modifications 2026-06-02 08:25:56.264793 | debian-bookworm | +-w /etc/sysconfig/network -p wa -k network_modifications 2026-06-02 08:25:56.264908 | debian-bookworm | +-w /etc/sysconfig/network-scripts -p w -k network_modifications 2026-06-02 08:25:56.265016 | debian-bookworm | +-w /etc/network/ -p wa -k network 2026-06-02 08:25:56.265129 | debian-bookworm | +-a always,exit -F dir=/etc/NetworkManager/ -F perm=wa -k network_modifications 2026-06-02 08:25:56.265286 | debian-bookworm | + 2026-06-02 08:25:56.265402 | debian-bookworm | +### Changes to issue 2026-06-02 08:25:56.265523 | debian-bookworm | +-w /etc/issue -p wa -k etcissue 2026-06-02 08:25:56.265639 | debian-bookworm | +-w /etc/issue.net -p wa -k etcissue 2026-06-02 08:25:56.265748 | debian-bookworm | + 2026-06-02 08:25:56.265860 | debian-bookworm | +## System startup scripts 2026-06-02 08:25:56.265972 | debian-bookworm | +-w /etc/inittab -p wa -k init 2026-06-02 08:25:56.266085 | debian-bookworm | +-w /etc/init.d/ -p wa -k init 2026-06-02 08:25:56.266216 | debian-bookworm | +-w /etc/init/ -p wa -k init 2026-06-02 08:25:56.266329 | debian-bookworm | + 2026-06-02 08:25:56.266474 | debian-bookworm | +## Library search paths 2026-06-02 08:25:56.266590 | debian-bookworm | +-w /etc/ld.so.conf -p wa -k libpath 2026-06-02 08:25:56.266701 | debian-bookworm | +-w /etc/ld.so.conf.d -p wa -k libpath 2026-06-02 08:25:56.266809 | debian-bookworm | + 2026-06-02 08:25:56.266922 | debian-bookworm | +## Systemwide library preloads (LD_PRELOAD) 2026-06-02 08:25:56.267033 | debian-bookworm | +-w /etc/ld.so.preload -p wa -k systemwide_preloads 2026-06-02 08:25:56.267140 | debian-bookworm | + 2026-06-02 08:25:56.267265 | debian-bookworm | +## Pam configuration 2026-06-02 08:25:56.267376 | debian-bookworm | +-w /etc/pam.d/ -p wa -k pam 2026-06-02 08:25:56.267492 | debian-bookworm | +-w /etc/security/limits.conf -p wa -k pam 2026-06-02 08:25:56.267603 | debian-bookworm | +-w /etc/security/limits.d -p wa -k pam 2026-06-02 08:25:56.267713 | debian-bookworm | +-w /etc/security/pam_env.conf -p wa -k pam 2026-06-02 08:25:56.267827 | debian-bookworm | +-w /etc/security/namespace.conf -p wa -k pam 2026-06-02 08:25:56.267938 | debian-bookworm | +-w /etc/security/namespace.d -p wa -k pam 2026-06-02 08:25:56.268050 | debian-bookworm | +-w /etc/security/namespace.init -p wa -k pam 2026-06-02 08:25:56.268157 | debian-bookworm | + 2026-06-02 08:25:56.268277 | debian-bookworm | +## Mail configuration 2026-06-02 08:25:56.268390 | debian-bookworm | +-w /etc/aliases -p wa -k mail 2026-06-02 08:25:56.268501 | debian-bookworm | +-w /etc/postfix/ -p wa -k mail 2026-06-02 08:25:56.268611 | debian-bookworm | +-w /etc/exim4/ -p wa -k mail 2026-06-02 08:25:56.268718 | debian-bookworm | + 2026-06-02 08:25:56.268828 | debian-bookworm | +## SSH configuration 2026-06-02 08:25:56.268941 | debian-bookworm | +-w /etc/ssh/sshd_config -k sshd 2026-06-02 08:25:56.269051 | debian-bookworm | +-w /etc/ssh/sshd_config.d -k sshd 2026-06-02 08:25:56.269160 | debian-bookworm | + 2026-06-02 08:25:56.269308 | debian-bookworm | +## root ssh key tampering 2026-06-02 08:25:56.269420 | debian-bookworm | +-w /root/.ssh -p wa -k rootkey 2026-06-02 08:25:56.269528 | debian-bookworm | + 2026-06-02 08:25:56.269638 | debian-bookworm | +# Systemd 2026-06-02 08:25:56.269764 | debian-bookworm | +-w /bin/systemctl -p x -k systemd 2026-06-02 08:25:56.269925 | debian-bookworm | +-w /etc/systemd/ -p wa -k systemd 2026-06-02 08:25:56.270048 | debian-bookworm | +-w /usr/lib/systemd -p wa -k systemd 2026-06-02 08:25:56.270156 | debian-bookworm | + 2026-06-02 08:25:56.270289 | debian-bookworm | +## https://systemd.network/systemd.generator.html 2026-06-02 08:25:56.270540 | debian-bookworm | +-w /etc/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 08:25:56.270681 | debian-bookworm | +-w /usr/local/lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 08:25:56.270801 | debian-bookworm | +-w /usr/lib/systemd/system-generators -p wa -k systemd_generator 2026-06-02 08:25:56.270909 | debian-bookworm | + 2026-06-02 08:25:56.271022 | debian-bookworm | +-w /etc/systemd/user-generators/ -p wa -k systemd_generator 2026-06-02 08:25:56.271133 | debian-bookworm | +-w /usr/local/lib/systemd/user-generators/ -p wa -k systemd_generator 2026-06-02 08:25:56.271262 | debian-bookworm | +-w /lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 08:25:56.271372 | debian-bookworm | + 2026-06-02 08:25:56.271486 | debian-bookworm | +## SELinux events that modify the system's Mandatory Access Controls (MAC) 2026-06-02 08:25:56.271597 | debian-bookworm | +-w /etc/selinux/ -p wa -k mac_policy 2026-06-02 08:25:56.271728 | debian-bookworm | + 2026-06-02 08:25:56.271853 | debian-bookworm | +## Critical elements access failures 2026-06-02 08:25:56.271969 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/etc -F success=0 -k unauthedfileaccess 2026-06-02 08:25:56.272093 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/bin -F success=0 -k unauthedfileaccess 2026-06-02 08:25:56.272246 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/sbin -F success=0 -k unauthedfileaccess 2026-06-02 08:25:56.272379 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/usr/bin -F success=0 -k unauthedfileaccess 2026-06-02 08:25:56.272491 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/usr/sbin -F success=0 -k unauthedfileaccess 2026-06-02 08:25:56.272604 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/var -F success=0 -k unauthedfileaccess 2026-06-02 08:25:56.272715 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/home -F success=0 -k unauthedfileaccess 2026-06-02 08:25:56.272827 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/srv -F success=0 -k unauthedfileaccess 2026-06-02 08:25:56.272936 | debian-bookworm | + 2026-06-02 08:25:56.273075 | debian-bookworm | +## Process ID change (switching accounts) applications 2026-06-02 08:25:56.273242 | debian-bookworm | +-w /bin/su -p x -k priv_esc 2026-06-02 08:25:56.273383 | debian-bookworm | +-w /usr/bin/sudo -p x -k priv_esc 2026-06-02 08:25:56.273505 | debian-bookworm | + 2026-06-02 08:25:56.273616 | debian-bookworm | +## Power state 2026-06-02 08:25:56.273731 | debian-bookworm | +-w /sbin/shutdown -p x -k power 2026-06-02 08:25:56.273879 | debian-bookworm | +-w /sbin/poweroff -p x -k power 2026-06-02 08:25:56.273997 | debian-bookworm | +-w /sbin/reboot -p x -k power 2026-06-02 08:25:56.274132 | debian-bookworm | +-w /sbin/halt -p x -k power 2026-06-02 08:25:56.274285 | debian-bookworm | + 2026-06-02 08:25:56.274430 | debian-bookworm | +## Session initiation information 2026-06-02 08:25:56.274592 | debian-bookworm | +-w /var/run/utmp -p wa -k session 2026-06-02 08:25:56.274716 | debian-bookworm | +-w /var/log/btmp -p wa -k session 2026-06-02 08:25:56.274827 | debian-bookworm | +-w /var/log/wtmp -p wa -k session 2026-06-02 08:25:56.274935 | debian-bookworm | + 2026-06-02 08:25:56.275075 | debian-bookworm | +## Discretionary Access Control (DAC) modifications 2026-06-02 08:25:56.275231 | debian-bookworm | +-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:25:56.275357 | debian-bookworm | +-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:25:56.275526 | debian-bookworm | +-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:25:56.275719 | debian-bookworm | +-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:25:56.275934 | debian-bookworm | +-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:25:56.276130 | debian-bookworm | +-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:25:56.276400 | debian-bookworm | +-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:25:56.276618 | debian-bookworm | +-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:25:56.276826 | debian-bookworm | +-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:25:56.277023 | debian-bookworm | +-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:25:56.277234 | debian-bookworm | +-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:25:56.277436 | debian-bookworm | +-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:25:56.277633 | debian-bookworm | +-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:25:56.277935 | debian-bookworm | + 2026-06-02 08:25:56.278147 | debian-bookworm | +# Special Rules --------------------------------------------------------------- 2026-06-02 08:25:56.278329 | debian-bookworm | + 2026-06-02 08:25:56.278494 | debian-bookworm | +## Reconnaissance 2026-06-02 08:25:56.278612 | debian-bookworm | +-w /usr/bin/whoami -p x -k recon 2026-06-02 08:25:56.278726 | debian-bookworm | +-w /usr/bin/id -p x -k recon 2026-06-02 08:25:56.278841 | debian-bookworm | +-w /bin/hostname -p x -k recon 2026-06-02 08:25:56.278958 | debian-bookworm | +-w /bin/uname -p x -k recon 2026-06-02 08:25:56.279071 | debian-bookworm | +-w /etc/issue -p r -k recon 2026-06-02 08:25:56.279184 | debian-bookworm | +-w /etc/hostname -p r -k recon 2026-06-02 08:25:56.279314 | debian-bookworm | + 2026-06-02 08:25:56.279428 | debian-bookworm | +## Suspicious activity 2026-06-02 08:25:56.279539 | debian-bookworm | +-w /usr/bin/wget -p x -k susp_activity 2026-06-02 08:25:56.279650 | debian-bookworm | +-w /usr/bin/curl -p x -k susp_activity 2026-06-02 08:25:56.279760 | debian-bookworm | +-w /usr/bin/base64 -p x -k susp_activity 2026-06-02 08:25:56.279872 | debian-bookworm | +-w /bin/nc -p x -k susp_activity 2026-06-02 08:25:56.279983 | debian-bookworm | +-w /bin/netcat -p x -k susp_activity 2026-06-02 08:25:56.280095 | debian-bookworm | +-w /usr/bin/ncat -p x -k susp_activity 2026-06-02 08:25:56.280242 | debian-bookworm | +-w /usr/bin/ss -p x -k susp_activity 2026-06-02 08:25:56.280374 | debian-bookworm | +-w /usr/bin/netstat -p x -k susp_activity 2026-06-02 08:25:56.280487 | debian-bookworm | +-w /usr/bin/ssh -p x -k susp_activity 2026-06-02 08:25:56.280598 | debian-bookworm | +-w /usr/bin/scp -p x -k susp_activity 2026-06-02 08:25:56.280708 | debian-bookworm | +-w /usr/bin/sftp -p x -k susp_activity 2026-06-02 08:25:56.280819 | debian-bookworm | +-w /usr/bin/ftp -p x -k susp_activity 2026-06-02 08:25:56.280929 | debian-bookworm | +-w /usr/bin/socat -p x -k susp_activity 2026-06-02 08:25:56.281043 | debian-bookworm | +-w /usr/bin/wireshark -p x -k susp_activity 2026-06-02 08:25:56.281153 | debian-bookworm | +-w /usr/bin/tshark -p x -k susp_activity 2026-06-02 08:25:56.281284 | debian-bookworm | +-w /usr/bin/rawshark -p x -k susp_activity 2026-06-02 08:25:56.281395 | debian-bookworm | +-w /usr/bin/rdesktop -p x -k susp_activity 2026-06-02 08:25:56.281510 | debian-bookworm | +-w /usr/local/bin/rdesktop -p x -k susp_activity 2026-06-02 08:25:56.281623 | debian-bookworm | +-w /usr/bin/wlfreerdp -p x -k susp_activity 2026-06-02 08:25:56.282117 | debian-bookworm | +-w /usr/bin/xfreerdp -p x -k susp_activity 2026-06-02 08:25:56.282551 | debian-bookworm | +-w /usr/local/bin/xfreerdp -p x -k susp_activity 2026-06-02 08:25:56.282697 | debian-bookworm | +-w /usr/bin/nmap -p x -k susp_activity 2026-06-02 08:25:56.282809 | debian-bookworm | + 2026-06-02 08:25:56.282920 | debian-bookworm | +## sssd 2026-06-02 08:25:56.283040 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/p11_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 08:25:56.283157 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/krb5_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 08:25:56.283290 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/ldap_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 08:25:56.283404 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/selinux_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 08:25:56.283516 | debian-bookworm | +-a always,exit -F path=/usr/libexec/sssd/proxy_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 08:25:56.283626 | debian-bookworm | + 2026-06-02 08:25:56.284013 | debian-bookworm | +## T1002 Data Compressed 2026-06-02 08:25:56.284141 | debian-bookworm | + 2026-06-02 08:25:56.284297 | debian-bookworm | +-w /usr/bin/zip -p x -k Data_Compressed 2026-06-02 08:25:56.284415 | debian-bookworm | +-w /usr/bin/gzip -p x -k Data_Compressed 2026-06-02 08:25:56.284538 | debian-bookworm | +-w /usr/bin/tar -p x -k Data_Compressed 2026-06-02 08:25:56.284690 | debian-bookworm | +-w /usr/bin/bzip2 -p x -k Data_Compressed 2026-06-02 08:25:56.284805 | debian-bookworm | + 2026-06-02 08:25:56.284953 | debian-bookworm | +-w /usr/bin/lzip -p x -k Data_Compressed 2026-06-02 08:25:56.285074 | debian-bookworm | +-w /usr/local/bin/lzip -p x -k Data_Compressed 2026-06-02 08:25:56.285181 | debian-bookworm | + 2026-06-02 08:25:56.285345 | debian-bookworm | +-w /usr/bin/lz4 -p x -k Data_Compressed 2026-06-02 08:25:56.285464 | debian-bookworm | +-w /usr/local/bin/lz4 -p x -k Data_Compressed 2026-06-02 08:25:56.285572 | debian-bookworm | + 2026-06-02 08:25:56.285683 | debian-bookworm | +-w /usr/bin/lzop -p x -k Data_Compressed 2026-06-02 08:25:56.285795 | debian-bookworm | +-w /usr/local/bin/lzop -p x -k Data_Compressed 2026-06-02 08:25:56.285901 | debian-bookworm | + 2026-06-02 08:25:56.286013 | debian-bookworm | +-w /usr/bin/plzip -p x -k Data_Compressed 2026-06-02 08:25:56.286124 | debian-bookworm | +-w /usr/local/bin/plzip -p x -k Data_Compressed 2026-06-02 08:25:56.286274 | debian-bookworm | + 2026-06-02 08:25:56.286442 | debian-bookworm | +-w /usr/bin/pbzip2 -p x -k Data_Compressed 2026-06-02 08:25:56.286558 | debian-bookworm | +-w /usr/local/bin/pbzip2 -p x -k Data_Compressed 2026-06-02 08:25:56.286787 | debian-bookworm | + 2026-06-02 08:25:56.286919 | debian-bookworm | +-w /usr/bin/lbzip2 -p x -k Data_Compressed 2026-06-02 08:25:56.287040 | debian-bookworm | +-w /usr/local/bin/lbzip2 -p x -k Data_Compressed 2026-06-02 08:25:56.287151 | debian-bookworm | + 2026-06-02 08:25:56.287302 | debian-bookworm | +-w /usr/bin/pixz -p x -k Data_Compressed 2026-06-02 08:25:56.287417 | debian-bookworm | +-w /usr/local/bin/pixz -p x -k Data_Compressed 2026-06-02 08:25:56.287522 | debian-bookworm | + 2026-06-02 08:25:56.287640 | debian-bookworm | +-w /usr/bin/pigz -p x -k Data_Compressed 2026-06-02 08:25:56.287751 | debian-bookworm | +-w /usr/local/bin/pigz -p x -k Data_Compressed 2026-06-02 08:25:56.287861 | debian-bookworm | +-w /usr/bin/unpigz -p x -k Data_Compressed 2026-06-02 08:25:56.288147 | debian-bookworm | +-w /usr/local/bin/unpigz -p x -k Data_Compressed 2026-06-02 08:25:56.288470 | debian-bookworm | + 2026-06-02 08:25:56.288606 | debian-bookworm | +-w /usr/bin/zstd -p x -k Data_Compressed 2026-06-02 08:25:56.288723 | debian-bookworm | +-w /usr/local/bin/zstd -p x -k Data_Compressed 2026-06-02 08:25:56.288845 | debian-bookworm | + 2026-06-02 08:25:56.288960 | debian-bookworm | +## Added to catch netcat on Ubuntu 2026-06-02 08:25:56.289076 | debian-bookworm | +-w /bin/nc.openbsd -p x -k susp_activity 2026-06-02 08:25:56.289226 | debian-bookworm | +-w /bin/nc.traditional -p x -k susp_activity 2026-06-02 08:25:56.289344 | debian-bookworm | + 2026-06-02 08:25:56.289457 | debian-bookworm | +## Sbin suspicious activity 2026-06-02 08:25:56.289571 | debian-bookworm | +-w /sbin/iptables -p x -k sbin_susp 2026-06-02 08:25:56.289681 | debian-bookworm | +-w /sbin/ip6tables -p x -k sbin_susp 2026-06-02 08:25:56.289790 | debian-bookworm | +-w /sbin/ifconfig -p x -k sbin_susp 2026-06-02 08:25:56.289901 | debian-bookworm | +-w /usr/sbin/arptables -p x -k sbin_susp 2026-06-02 08:25:56.290013 | debian-bookworm | +-w /usr/sbin/ebtables -p x -k sbin_susp 2026-06-02 08:25:56.290130 | debian-bookworm | +-w /sbin/xtables-nft-multi -p x -k sbin_susp 2026-06-02 08:25:56.290260 | debian-bookworm | +-w /usr/sbin/nft -p x -k sbin_susp 2026-06-02 08:25:56.290406 | debian-bookworm | +-w /usr/sbin/tcpdump -p x -k sbin_susp 2026-06-02 08:25:56.290523 | debian-bookworm | +-w /usr/sbin/traceroute -p x -k sbin_susp 2026-06-02 08:25:56.290634 | debian-bookworm | +-w /usr/sbin/ufw -p x -k sbin_susp 2026-06-02 08:25:56.290741 | debian-bookworm | + 2026-06-02 08:25:56.290850 | debian-bookworm | +### kde4 2026-06-02 08:25:56.290970 | debian-bookworm | +-a always,exit -F path=/usr/libexec/kde4/kpac_dhcp_helper -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 08:25:56.291085 | debian-bookworm | +-a always,exit -F path=/usr/libexec/kde4/kdesud -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 08:25:56.291207 | debian-bookworm | + 2026-06-02 08:25:56.291324 | debian-bookworm | +## dbus-send invocation 2026-06-02 08:25:56.291440 | debian-bookworm | +### may indicate privilege escalation CVE-2021-3560 2026-06-02 08:25:56.291552 | debian-bookworm | +-w /usr/bin/dbus-send -p x -k dbus_send 2026-06-02 08:25:56.291665 | debian-bookworm | +-w /usr/bin/gdbus -p x -k gdubs_call 2026-06-02 08:25:56.291772 | debian-bookworm | + 2026-06-02 08:25:56.291883 | debian-bookworm | +## pkexec invocation 2026-06-02 08:25:56.291996 | debian-bookworm | +### may indicate privilege escalation CVE-2021-4034 2026-06-02 08:25:56.292106 | debian-bookworm | +-w /usr/bin/pkexec -p x -k pkexec 2026-06-02 08:25:56.292247 | debian-bookworm | + 2026-06-02 08:25:56.292361 | debian-bookworm | +## Suspicious shells 2026-06-02 08:25:56.292472 | debian-bookworm | +-w /bin/ash -p x -k susp_shell 2026-06-02 08:25:56.292583 | debian-bookworm | +-w /bin/csh -p x -k susp_shell 2026-06-02 08:25:56.292694 | debian-bookworm | +-w /bin/fish -p x -k susp_shell 2026-06-02 08:25:56.292890 | debian-bookworm | +-w /bin/tcsh -p x -k susp_shell 2026-06-02 08:25:56.293008 | debian-bookworm | +-w /bin/tclsh -p x -k susp_shell 2026-06-02 08:25:56.293118 | debian-bookworm | +-w /bin/xonsh -p x -k susp_shell 2026-06-02 08:25:56.293246 | debian-bookworm | +-w /usr/local/bin/xonsh -p x -k susp_shell 2026-06-02 08:25:56.293361 | debian-bookworm | +-w /bin/open -p x -k susp_shell 2026-06-02 08:25:56.293472 | debian-bookworm | +-w /bin/rbash -p x -k susp_shell 2026-06-02 08:25:56.293582 | debian-bookworm | + 2026-06-02 08:25:56.293692 | debian-bookworm | +# Web Server Actvity 2026-06-02 08:25:56.293810 | debian-bookworm | +## Change the number "33" to the ID of your WebServer user. Default: www-data:x:33:33 2026-06-02 08:25:56.293924 | debian-bookworm | +-a always,exit -F arch=b64 -S execve -F euid=33 -k detect_execve_www 2026-06-02 08:25:56.294032 | debian-bookworm | + 2026-06-02 08:25:56.294140 | debian-bookworm | +### https://clustershell.readthedocs.io/ 2026-06-02 08:25:56.294265 | debian-bookworm | +-w /bin/clush -p x -k susp_shell 2026-06-02 08:25:56.294402 | debian-bookworm | +-w /usr/local/bin/clush -p x -k susp_shell 2026-06-02 08:25:56.294530 | debian-bookworm | +-w /etc/clustershell/clush.conf -p x -k susp_shell 2026-06-02 08:25:56.294640 | debian-bookworm | + 2026-06-02 08:25:56.294753 | debian-bookworm | +### https://github.com/tmux/tmux 2026-06-02 08:25:56.294865 | debian-bookworm | +-w /bin/tmux -p x -k susp_shell 2026-06-02 08:25:56.294976 | debian-bookworm | +-w /usr/local/bin/tmux -p x -k susp_shell 2026-06-02 08:25:56.295084 | debian-bookworm | + 2026-06-02 08:25:56.295235 | debian-bookworm | +## Shell/profile configurations 2026-06-02 08:25:56.295353 | debian-bookworm | +-w /etc/profile.d/ -p wa -k shell_profiles 2026-06-02 08:25:56.295463 | debian-bookworm | +-w /etc/profile -p wa -k shell_profiles 2026-06-02 08:25:56.295575 | debian-bookworm | +-w /etc/shells -p wa -k shell_profiles 2026-06-02 08:25:56.295685 | debian-bookworm | +-w /etc/bashrc -p wa -k shell_profiles 2026-06-02 08:25:56.295793 | debian-bookworm | +-w /etc/csh.cshrc -p wa -k shell_profiles 2026-06-02 08:25:56.295904 | debian-bookworm | +-w /etc/csh.login -p wa -k shell_profiles 2026-06-02 08:25:56.296013 | debian-bookworm | +-w /etc/fish/ -p wa -k shell_profiles 2026-06-02 08:25:56.296125 | debian-bookworm | +-w /etc/zsh/ -p wa -k shell_profiles 2026-06-02 08:25:56.296265 | debian-bookworm | + 2026-06-02 08:25:56.296376 | debian-bookworm | +### https://github.com/xxh/xxh 2026-06-02 08:25:56.296487 | debian-bookworm | +-w /usr/local/bin/xxh.bash -p x -k susp_shell 2026-06-02 08:25:56.296597 | debian-bookworm | +-w /usr/local/bin/xxh.xsh -p x -k susp_shell 2026-06-02 08:25:56.296705 | debian-bookworm | +-w /usr/local/bin/xxh.zsh -p x -k susp_shell 2026-06-02 08:25:56.296811 | debian-bookworm | + 2026-06-02 08:25:56.296921 | debian-bookworm | +## Injection 2026-06-02 08:25:56.297033 | debian-bookworm | +### These rules watch for code injection by the ptrace facility. 2026-06-02 08:25:56.297145 | debian-bookworm | +### This could indicate someone trying to do something bad or just debugging 2026-06-02 08:25:56.297272 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x4 -k code_injection 2026-06-02 08:25:56.297385 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x5 -k data_injection 2026-06-02 08:25:56.297495 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -F a0=0x6 -k register_injection 2026-06-02 08:25:56.297606 | debian-bookworm | +-a always,exit -F arch=b64 -S ptrace -k tracing 2026-06-02 08:25:56.297714 | debian-bookworm | + 2026-06-02 08:25:56.297825 | debian-bookworm | +## Anonymous File Creation 2026-06-02 08:25:56.297935 | debian-bookworm | +### These rules watch the use of memfd_create 2026-06-02 08:25:56.298048 | debian-bookworm | +### "memfd_create" creates anonymous file and returns a file descriptor to access it 2026-06-02 08:25:56.298175 | debian-bookworm | +### When combined with "fexecve" can be used to stealthily run binaries in memory without touching disk 2026-06-02 08:25:56.298328 | debian-bookworm | +-a always,exit -F arch=b64 -S memfd_create -F key=anon_file_create 2026-06-02 08:25:56.298499 | debian-bookworm | + 2026-06-02 08:25:56.298615 | debian-bookworm | +## Privilege Abuse 2026-06-02 08:25:56.298731 | debian-bookworm | +### The purpose of this rule is to detect when an admin may be abusing power by looking in user's home dir. 2026-06-02 08:25:56.298855 | debian-bookworm | +-a always,exit -F dir=/home -F uid=0 -F auid>=1000 -F auid!=-1 -C auid!=obj_uid -k power_abuse 2026-06-02 08:25:56.298966 | debian-bookworm | + 2026-06-02 08:25:56.299077 | debian-bookworm | +# Socket Creations 2026-06-02 08:25:56.299216 | debian-bookworm | +# will catch both IPv4 and IPv6 2026-06-02 08:25:56.299331 | debian-bookworm | + 2026-06-02 08:25:56.299445 | debian-bookworm | +-a always,exit -F arch=b32 -S socket -F a0=2 -k network_socket_created 2026-06-02 08:25:56.299559 | debian-bookworm | +-a always,exit -F arch=b64 -S socket -F a0=2 -k network_socket_created 2026-06-02 08:25:56.299667 | debian-bookworm | + 2026-06-02 08:25:56.299780 | debian-bookworm | +-a always,exit -F arch=b32 -S socket -F a0=10 -k network_socket_created 2026-06-02 08:25:56.299891 | debian-bookworm | +-a always,exit -F arch=b64 -S socket -F a0=10 -k network_socket_created 2026-06-02 08:25:56.300000 | debian-bookworm | + 2026-06-02 08:25:56.300112 | debian-bookworm | +# Software Management --------------------------------------------------------- 2026-06-02 08:25:56.300233 | debian-bookworm | + 2026-06-02 08:25:56.300349 | debian-bookworm | +# RPM (Redhat/CentOS) 2026-06-02 08:25:56.300463 | debian-bookworm | +-w /usr/bin/rpm -p x -k software_mgmt 2026-06-02 08:25:56.300573 | debian-bookworm | +-w /usr/bin/yum -p x -k software_mgmt 2026-06-02 08:25:56.300681 | debian-bookworm | + 2026-06-02 08:25:56.300791 | debian-bookworm | +# DNF (Fedora/RedHat 8/CentOS 8) 2026-06-02 08:25:56.300903 | debian-bookworm | +-w /usr/bin/dnf -p x -k software_mgmt 2026-06-02 08:25:56.301010 | debian-bookworm | + 2026-06-02 08:25:56.301121 | debian-bookworm | +# YAST/Zypper/RPM (SuSE) 2026-06-02 08:25:56.301245 | debian-bookworm | +-w /sbin/yast -p x -k software_mgmt 2026-06-02 08:25:56.301358 | debian-bookworm | +-w /sbin/yast2 -p x -k software_mgmt 2026-06-02 08:25:56.301469 | debian-bookworm | +-w /bin/rpm -p x -k software_mgmt 2026-06-02 08:25:56.301585 | debian-bookworm | +-w /usr/bin/zypper -k software_mgmt 2026-06-02 08:25:56.301695 | debian-bookworm | + 2026-06-02 08:25:56.301806 | debian-bookworm | +# DPKG / APT-GET (Debian/Ubuntu) 2026-06-02 08:25:56.301916 | debian-bookworm | +-w /usr/bin/dpkg -p x -k software_mgmt 2026-06-02 08:25:56.302025 | debian-bookworm | +-w /usr/bin/apt -p x -k software_mgmt 2026-06-02 08:25:56.302138 | debian-bookworm | +-w /usr/bin/apt-add-repository -p x -k software_mgmt 2026-06-02 08:25:56.302282 | debian-bookworm | +-w /usr/bin/apt-get -p x -k software_mgmt 2026-06-02 08:25:56.302433 | debian-bookworm | +-w /usr/bin/aptitude -p x -k software_mgmt 2026-06-02 08:25:56.302549 | debian-bookworm | +-w /usr/bin/wajig -p x -k software_mgmt 2026-06-02 08:25:56.302659 | debian-bookworm | +-w /usr/bin/snap -p x -k software_mgmt 2026-06-02 08:25:56.302769 | debian-bookworm | + 2026-06-02 08:25:56.302879 | debian-bookworm | +# PIP(3) (Python installs) 2026-06-02 08:25:56.302990 | debian-bookworm | +-w /usr/bin/pip -p x -k third_party_software_mgmt 2026-06-02 08:25:56.303102 | debian-bookworm | +-w /usr/local/bin/pip -p x -k third_party_software_mgmt 2026-06-02 08:25:56.303241 | debian-bookworm | +-w /usr/bin/pip3 -p x -k third_party_software_mgmt 2026-06-02 08:25:56.303356 | debian-bookworm | +-w /usr/local/bin/pip3 -p x -k third_party_software_mgmt 2026-06-02 08:25:56.303467 | debian-bookworm | +-w /usr/bin/pipx -p x -k third_party_software_mgmt 2026-06-02 08:25:56.303577 | debian-bookworm | +-w /usr/local/bin/pipx -p x -k third_party_software_mgmt 2026-06-02 08:25:56.303686 | debian-bookworm | + 2026-06-02 08:25:56.303794 | debian-bookworm | +# npm 2026-06-02 08:25:56.303905 | debian-bookworm | +## T1072 third party software 2026-06-02 08:25:56.304016 | debian-bookworm | +## https://www.npmjs.com 2026-06-02 08:25:56.304130 | debian-bookworm | +## https://docs.npmjs.com/cli/v6/commands/npm-audit 2026-06-02 08:25:56.304278 | debian-bookworm | +-w /usr/bin/npm -p x -k third_party_software_mgmt 2026-06-02 08:25:56.304391 | debian-bookworm | + 2026-06-02 08:25:56.304504 | debian-bookworm | +# Comprehensive Perl Archive Network (CPAN) (CPAN installs) 2026-06-02 08:25:56.304615 | debian-bookworm | +## T1072 third party software 2026-06-02 08:25:56.304726 | debian-bookworm | +## https://www.cpan.org 2026-06-02 08:25:56.304839 | debian-bookworm | +-w /usr/bin/cpan -p x -k third_party_software_mgmt 2026-06-02 08:25:56.304948 | debian-bookworm | + 2026-06-02 08:25:56.305059 | debian-bookworm | +# Ruby (RubyGems installs) 2026-06-02 08:25:56.305172 | debian-bookworm | +## T1072 third party software 2026-06-02 08:25:56.305298 | debian-bookworm | +## https://rubygems.org 2026-06-02 08:25:56.305412 | debian-bookworm | +-w /usr/bin/gem -p x -k third_party_software_mgmt 2026-06-02 08:25:56.305520 | debian-bookworm | + 2026-06-02 08:25:56.305629 | debian-bookworm | +# LuaRocks (Lua installs) 2026-06-02 08:25:56.305738 | debian-bookworm | +## T1072 third party software 2026-06-02 08:25:56.305854 | debian-bookworm | +## https://luarocks.org 2026-06-02 08:25:56.305970 | debian-bookworm | +-w /usr/bin/luarocks -p x -k third_party_software_mgmt 2026-06-02 08:25:56.306077 | debian-bookworm | + 2026-06-02 08:25:56.306211 | debian-bookworm | +# Pacman (Arch Linux) 2026-06-02 08:25:56.306330 | debian-bookworm | +## https://wiki.archlinux.org/title/Pacman 2026-06-02 08:25:56.306470 | debian-bookworm | +## T1072 third party software 2026-06-02 08:25:56.306585 | debian-bookworm | +-w /etc/pacman.conf -p x -k third_party_software_mgmt 2026-06-02 08:25:56.306697 | debian-bookworm | +-w /etc/pacman.d -p x -k third_party_software_mgmt 2026-06-02 08:25:56.306803 | debian-bookworm | + 2026-06-02 08:25:56.306913 | debian-bookworm | +# Special Software ------------------------------------------------------------ 2026-06-02 08:25:56.307023 | debian-bookworm | + 2026-06-02 08:25:56.307134 | debian-bookworm | +## GDS specific secrets 2026-06-02 08:25:56.307260 | debian-bookworm | +-w /etc/puppet/ssl -p wa -k puppet_ssl 2026-06-02 08:25:56.307369 | debian-bookworm | + 2026-06-02 08:25:56.307481 | debian-bookworm | +## IBM Bigfix BESClient 2026-06-02 08:25:56.307594 | debian-bookworm | +-a always,exit -F arch=b64 -S open -F dir=/opt/BESClient -F success=0 -k soft_besclient 2026-06-02 08:25:56.307709 | debian-bookworm | +-w /var/opt/BESClient/ -p wa -k soft_besclient 2026-06-02 08:25:56.307816 | debian-bookworm | + 2026-06-02 08:25:56.307929 | debian-bookworm | +## CHEF https://www.chef.io/chef/ 2026-06-02 08:25:56.308039 | debian-bookworm | +-w /etc/chef -p wa -k soft_chef 2026-06-02 08:25:56.308148 | debian-bookworm | + 2026-06-02 08:25:56.308272 | debian-bookworm | +## Salt 2026-06-02 08:25:56.308385 | debian-bookworm | +## https://saltproject.io/ 2026-06-02 08:25:56.308501 | debian-bookworm | +## https://docs.saltproject.io/en/latest/ref/configuration/master.html 2026-06-02 08:25:56.308613 | debian-bookworm | +-w /etc/salt -p wa -k soft_salt 2026-06-02 08:25:56.308726 | debian-bookworm | +-w /usr/local/etc/salt -p wa -k soft_salt 2026-06-02 08:25:56.308833 | debian-bookworm | + 2026-06-02 08:25:56.308945 | debian-bookworm | +## Otter 2026-06-02 08:25:56.309055 | debian-bookworm | +## https://inedo.com/otter 2026-06-02 08:25:56.309166 | debian-bookworm | +-w /etc/otter -p wa -k soft_otter 2026-06-02 08:25:56.309285 | debian-bookworm | + 2026-06-02 08:25:56.309398 | debian-bookworm | +## T1081 Credentials In Files 2026-06-02 08:25:56.309510 | debian-bookworm | +-w /usr/bin/grep -p x -k string_search 2026-06-02 08:25:56.309620 | debian-bookworm | +-w /usr/bin/egrep -p x -k string_search 2026-06-02 08:25:56.309728 | debian-bookworm | +-w /usr/bin/ugrep -p x -k string_search 2026-06-02 08:25:56.309838 | debian-bookworm | +### macOS 2026-06-02 08:25:56.309951 | debian-bookworm | +-w /usr/local/bin/grep -p x -k string_search 2026-06-02 08:25:56.310061 | debian-bookworm | +-w /usr/local/bin/egrep -p x -k string_search 2026-06-02 08:25:56.310177 | debian-bookworm | +-w /usr/local/bin/ugrep -p x -k string_search 2026-06-02 08:25:56.310321 | debian-bookworm | + 2026-06-02 08:25:56.310464 | debian-bookworm | +### https://github.com/tmbinc/bgrep 2026-06-02 08:25:56.310575 | debian-bookworm | +-w /usr/bin/bgrep -p x -k string_search 2026-06-02 08:25:56.310686 | debian-bookworm | +### macOS 2026-06-02 08:25:56.310799 | debian-bookworm | +-w /usr/local/bin/bgrep -p x -k string_search 2026-06-02 08:25:56.310918 | debian-bookworm | + 2026-06-02 08:25:56.311034 | debian-bookworm | +### https://github.com/BurntSushi/ripgrep 2026-06-02 08:25:56.311145 | debian-bookworm | +-w /usr/bin/rg -p x -k string_search 2026-06-02 08:25:56.311272 | debian-bookworm | +### macOS 2026-06-02 08:25:56.311385 | debian-bookworm | +-w /usr/local/bin/rg -p x -k string_search 2026-06-02 08:25:56.311493 | debian-bookworm | + 2026-06-02 08:25:56.311603 | debian-bookworm | +### https://github.com/awgn/cgrep 2026-06-02 08:25:56.311710 | debian-bookworm | + 2026-06-02 08:25:56.311823 | debian-bookworm | +-w /usr/bin/cgrep -p x -k string_search 2026-06-02 08:25:56.311932 | debian-bookworm | +### macOS 2026-06-02 08:25:56.312042 | debian-bookworm | +-w /usr/local/bin/cgrep -p x -k string_search 2026-06-02 08:25:56.312150 | debian-bookworm | + 2026-06-02 08:25:56.312274 | debian-bookworm | +### https://github.com/jpr5/ngrep 2026-06-02 08:25:56.312386 | debian-bookworm | +-w /usr/bin/ngrep -p x -k string_search 2026-06-02 08:25:56.312496 | debian-bookworm | +### macOS 2026-06-02 08:25:56.312609 | debian-bookworm | +-w /usr/local/bin/ngrep -p x -k string_search 2026-06-02 08:25:56.312716 | debian-bookworm | + 2026-06-02 08:25:56.312827 | debian-bookworm | +### https://github.com/vrothberg/vgrep 2026-06-02 08:25:56.312938 | debian-bookworm | +-w /usr/bin/vgrep -p x -k string_search 2026-06-02 08:25:56.313047 | debian-bookworm | +### macOS 2026-06-02 08:25:56.313157 | debian-bookworm | +-w /usr/local/bin/vgrep -p x -k string_search 2026-06-02 08:25:56.313299 | debian-bookworm | + 2026-06-02 08:25:56.313418 | debian-bookworm | +### https://github.com/monochromegane/the_platinum_searcher 2026-06-02 08:25:56.313531 | debian-bookworm | +-w /usr/bin/pt -p x -k string_search 2026-06-02 08:25:56.313641 | debian-bookworm | +### macOS 2026-06-02 08:25:56.313753 | debian-bookworm | +-w /usr/local/bin/pt -p x -k string_search 2026-06-02 08:25:56.313863 | debian-bookworm | + 2026-06-02 08:25:56.313999 | debian-bookworm | +### https://github.com/gvansickle/ucg 2026-06-02 08:25:56.314159 | debian-bookworm | +-w /usr/bin/ucg -p x -k string_search 2026-06-02 08:25:56.314306 | debian-bookworm | +### macOS 2026-06-02 08:25:56.314453 | debian-bookworm | +-w /usr/local/bin/ucg -p x -k string_search 2026-06-02 08:25:56.314564 | debian-bookworm | + 2026-06-02 08:25:56.314678 | debian-bookworm | +### https://github.com/ggreer/the_silver_searcher 2026-06-02 08:25:56.314792 | debian-bookworm | +-w /usr/bin/ag -p x -k string_search 2026-06-02 08:25:56.314900 | debian-bookworm | +### macOS 2026-06-02 08:25:56.315021 | debian-bookworm | +-w /usr/local/bin/ag -p x -k string_search 2026-06-02 08:25:56.315128 | debian-bookworm | + 2026-06-02 08:25:56.315279 | debian-bookworm | +### https://github.com/beyondgrep/ack3 2026-06-02 08:25:56.315394 | debian-bookworm | +### https://beyondgrep.com 2026-06-02 08:25:56.315506 | debian-bookworm | +-w /usr/bin/ack -p x -k string_search 2026-06-02 08:25:56.315619 | debian-bookworm | +-w /usr/local/bin/ack -p x -k string_search 2026-06-02 08:25:56.315728 | debian-bookworm | +-w /usr/bin/semgrep -p x -k string_search 2026-06-02 08:25:56.315835 | debian-bookworm | +### macOS 2026-06-02 08:25:56.315947 | debian-bookworm | +-w /usr/local/bin/semgrep -p x -k string_search 2026-06-02 08:25:56.316054 | debian-bookworm | + 2026-06-02 08:25:56.316160 | debian-bookworm | +## Docker 2026-06-02 08:25:56.316285 | debian-bookworm | +-w /usr/bin/dockerd -k docker 2026-06-02 08:25:56.316398 | debian-bookworm | +-w /usr/bin/docker -k docker 2026-06-02 08:25:56.316511 | debian-bookworm | +-w /usr/bin/docker-containerd -k docker 2026-06-02 08:25:56.316623 | debian-bookworm | +-w /usr/bin/docker-runc -k docker 2026-06-02 08:25:56.316732 | debian-bookworm | +-w /var/lib/docker -p wa -k docker 2026-06-02 08:25:56.316844 | debian-bookworm | +-w /etc/docker -k docker 2026-06-02 08:25:56.316956 | debian-bookworm | +-w /etc/sysconfig/docker -k docker 2026-06-02 08:25:56.317067 | debian-bookworm | +-w /etc/sysconfig/docker-storage -k docker 2026-06-02 08:25:56.317178 | debian-bookworm | +-w /usr/lib/systemd/system/docker.service -k docker 2026-06-02 08:25:56.317305 | debian-bookworm | +-w /usr/lib/systemd/system/docker.socket -k docker 2026-06-02 08:25:56.317411 | debian-bookworm | + 2026-06-02 08:25:56.317522 | debian-bookworm | +## Virtualization stuff 2026-06-02 08:25:56.317632 | debian-bookworm | +-w /usr/bin/qemu-system-x86_64 -p x -k qemu-system-x86_64 2026-06-02 08:25:56.317743 | debian-bookworm | +-w /usr/bin/qemu-img -p x -k qemu-img 2026-06-02 08:25:56.317853 | debian-bookworm | +-w /usr/bin/qemu-kvm -p x -k qemu-kvm 2026-06-02 08:25:56.317964 | debian-bookworm | +-w /usr/bin/qemu -p x -k qemu 2026-06-02 08:25:56.318073 | debian-bookworm | +-w /usr/bin/virtualbox -p x -k virtualbox 2026-06-02 08:25:56.318185 | debian-bookworm | +-w /usr/bin/virt-manager -p x -k virt-manager 2026-06-02 08:25:56.318329 | debian-bookworm | +-w /usr/bin/VBoxManage -p x -k VBoxManage 2026-06-02 08:25:56.318458 | debian-bookworm | + 2026-06-02 08:25:56.318651 | debian-bookworm | +#### VirtualBox on macOS 2026-06-02 08:25:56.318762 | debian-bookworm | + 2026-06-02 08:25:56.318872 | debian-bookworm | +-w /usr/local/bin/VirtualBox -p x -k virt_tool 2026-06-02 08:25:56.319001 | debian-bookworm | +-w /usr/local/bin/VirtualBoxVM -p x -k virt_tool 2026-06-02 08:25:56.319112 | debian-bookworm | +-w /usr/local/bin/VBoxManage -p x -k virt_tool 2026-06-02 08:25:56.319245 | debian-bookworm | +-w /usr/local/bin/VBoxVRDP -p x -k virt_tool 2026-06-02 08:25:56.319357 | debian-bookworm | +-w /usr/local/bin/VBoxHeadless -p x -k virt_tool 2026-06-02 08:25:56.319470 | debian-bookworm | +-w /usr/local/bin/vboxwebsrv -p x -k virt_tool 2026-06-02 08:25:56.319583 | debian-bookworm | +-w /usr/local/bin/VBoxBugReport -p x -k virt_tool 2026-06-02 08:25:56.319694 | debian-bookworm | +-w /usr/local/bin/VBoxBalloonCtrl -p x -k virt_tool 2026-06-02 08:25:56.319805 | debian-bookworm | +-w /usr/local/bin/VBoxAutostart -p x -k virt_tool 2026-06-02 08:25:56.319917 | debian-bookworm | +-w /usr/local/bin/VBoxDTrace -p x -k virt_tool 2026-06-02 08:25:56.320026 | debian-bookworm | +-w /usr/local/bin/vbox-img -p x -k virt_tool 2026-06-02 08:25:56.320139 | debian-bookworm | +-w /Library/LaunchDaemons/org.virtualbox.startup.plist -p x -k virt_tool 2026-06-02 08:25:56.320264 | debian-bookworm | +-w /Library/Application Support/VirtualBox/LaunchDaemons/ -p x -k virt_tool 2026-06-02 08:25:56.320377 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxDrv.kext/ -p x -k virt_tool 2026-06-02 08:25:56.320488 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxUSB.kext/ -p x -k virt_tool 2026-06-02 08:25:56.320601 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxNetFlt.kext/ -p x -k virt_tool 2026-06-02 08:25:56.320712 | debian-bookworm | +-w /Library/Application Support/VirtualBox/VBoxNetAdp.kext/ -p x -k virt_tool 2026-06-02 08:25:56.320820 | debian-bookworm | + 2026-06-02 08:25:56.320931 | debian-bookworm | +### Parallels Desktop on macOS 2026-06-02 08:25:56.321039 | debian-bookworm | + 2026-06-02 08:25:56.321149 | debian-bookworm | +-w /usr/local/bin/prl_convert -p x -k virt_tool 2026-06-02 08:25:56.321292 | debian-bookworm | +-w /usr/local/bin/prl_disk_tool -p x -k virt_tool 2026-06-02 08:25:56.321407 | debian-bookworm | +-w /usr/local/bin/prl_perf_ctl -p x -k virt_tool 2026-06-02 08:25:56.321519 | debian-bookworm | +-w /usr/local/bin/prlcore2dmp -p x -k virt_tool 2026-06-02 08:25:56.321638 | debian-bookworm | +-w /usr/local/bin/prlctl -p x -k virt_tool 2026-06-02 08:25:56.321750 | debian-bookworm | +-w /usr/local/bin/prlexec -p x -k virt_tool 2026-06-02 08:25:56.321861 | debian-bookworm | +-w /usr/local/bin/prlsrvctl -p x -k virt_tool 2026-06-02 08:25:56.321977 | debian-bookworm | +-w /Library/Preferences/Parallels -p x -k virt_tool 2026-06-02 08:25:56.322086 | debian-bookworm | + 2026-06-02 08:25:56.322210 | debian-bookworm | +### qemu on macOS 2026-06-02 08:25:56.322322 | debian-bookworm | + 2026-06-02 08:25:56.322464 | debian-bookworm | +-w /usr/local/bin/qemu-edid -p x -k virt_tool 2026-06-02 08:25:56.322580 | debian-bookworm | +-w /usr/local/bin/qemu-img -p x -k virt_tool 2026-06-02 08:25:56.322695 | debian-bookworm | +-w /usr/local/bin/qemu-io -p x -k virt_tool 2026-06-02 08:25:56.322809 | debian-bookworm | +-w /usr/local/bin/qemu-nbd -p x -k virt_tool 2026-06-02 08:25:56.322923 | debian-bookworm | +-w /usr/local/bin/qemu-system-x86_64 -p x -k virt_tool 2026-06-02 08:25:56.323030 | debian-bookworm | + 2026-06-02 08:25:56.323138 | debian-bookworm | +## Kubelet 2026-06-02 08:25:56.323266 | debian-bookworm | +-w /usr/bin/kubelet -k kubelet 2026-06-02 08:25:56.323377 | debian-bookworm | + 2026-06-02 08:25:56.323486 | debian-bookworm | +# ipc system call 2026-06-02 08:25:56.323595 | debian-bookworm | +# /usr/include/linux/ipc.h 2026-06-02 08:25:56.323708 | debian-bookworm | + 2026-06-02 08:25:56.323822 | debian-bookworm | +## msgctl 2026-06-02 08:25:56.323939 | debian-bookworm | +#-a always,exit -S ipc -F a0=14 -k Inter-Process_Communication 2026-06-02 08:25:56.324048 | debian-bookworm | +## msgget 2026-06-02 08:25:56.324159 | debian-bookworm | +#-a always,exit -S ipc -F a0=13 -k Inter-Process_Communication 2026-06-02 08:25:56.324304 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2026-06-02 08:25:56.324420 | debian-bookworm | +-a always,exit -F arch=b64 -S msgctl -k Inter-Process_Communication 2026-06-02 08:25:56.324530 | debian-bookworm | +-a always,exit -F arch=b64 -S msgget -k Inter-Process_Communication 2026-06-02 08:25:56.324635 | debian-bookworm | + 2026-06-02 08:25:56.324743 | debian-bookworm | +## semctl 2026-06-02 08:25:56.324854 | debian-bookworm | +#-a always,exit -S ipc -F a0=3 -k Inter-Process_Communication 2026-06-02 08:25:56.324960 | debian-bookworm | +## semget 2026-06-02 08:25:56.325071 | debian-bookworm | +#-a always,exit -S ipc -F a0=2 -k Inter-Process_Communication 2026-06-02 08:25:56.325178 | debian-bookworm | +## semop 2026-06-02 08:25:56.325307 | debian-bookworm | +#-a always,exit -S ipc -F a0=1 -k Inter-Process_Communication 2026-06-02 08:25:56.325417 | debian-bookworm | +## semtimedop 2026-06-02 08:25:56.325531 | debian-bookworm | +#-a always,exit -S ipc -F a0=4 -k Inter-Process_Communication 2026-06-02 08:25:56.325641 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2026-06-02 08:25:56.325766 | debian-bookworm | +-a always,exit -F arch=b64 -S semctl -k Inter-Process_Communication 2026-06-02 08:25:56.325879 | debian-bookworm | +-a always,exit -F arch=b64 -S semget -k Inter-Process_Communication 2026-06-02 08:25:56.325991 | debian-bookworm | +-a always,exit -F arch=b64 -S semop -k Inter-Process_Communication 2026-06-02 08:25:56.326101 | debian-bookworm | +-a always,exit -F arch=b64 -S semtimedop -k Inter-Process_Communication 2026-06-02 08:25:56.326224 | debian-bookworm | + 2026-06-02 08:25:56.326334 | debian-bookworm | +## shmctl 2026-06-02 08:25:56.326463 | debian-bookworm | +#-a always,exit -S ipc -F a0=24 -k Inter-Process_Communication 2026-06-02 08:25:56.326572 | debian-bookworm | +## shmget 2026-06-02 08:25:56.326703 | debian-bookworm | +#-a always,exit -S ipc -F a0=23 -k Inter-Process_Communication 2026-06-02 08:25:56.326857 | debian-bookworm | +## Use these lines on x86_64, ia64 instead 2026-06-02 08:25:56.327005 | debian-bookworm | +-a always,exit -F arch=b64 -S shmctl -k Inter-Process_Communication 2026-06-02 08:25:56.327143 | debian-bookworm | +-a always,exit -F arch=b64 -S shmget -k Inter-Process_Communication 2026-06-02 08:25:56.327278 | debian-bookworm | + 2026-06-02 08:25:56.327393 | debian-bookworm | +# High Volume Events ---------------------------------------------------------- 2026-06-02 08:25:56.327500 | debian-bookworm | + 2026-06-02 08:25:56.327611 | debian-bookworm | +## Disable these rules if they create too many events in your environment 2026-06-02 08:25:56.327719 | debian-bookworm | + 2026-06-02 08:25:56.327830 | debian-bookworm | +## Common Shells 2026-06-02 08:25:56.327942 | debian-bookworm | +-w /bin/bash -p x -k susp_shell 2026-06-02 08:25:56.328054 | debian-bookworm | +-w /bin/dash -p x -k susp_shell 2026-06-02 08:25:56.328166 | debian-bookworm | +-w /bin/busybox -p x -k susp_shell 2026-06-02 08:25:56.328315 | debian-bookworm | +-w /bin/zsh -p x -k susp_shell 2026-06-02 08:25:56.328438 | debian-bookworm | +-w /bin/sh -p x -k susp_shell 2026-06-02 08:25:56.328613 | debian-bookworm | +-w /bin/ksh -p x -k susp_shell 2026-06-02 08:25:56.328738 | debian-bookworm | + 2026-06-02 08:25:56.328854 | debian-bookworm | +## Root command executions 2026-06-02 08:25:56.328969 | debian-bookworm | +-a always,exit -F arch=b64 -F euid=0 -F auid>=1000 -F auid!=-1 -S execve -k rootcmd 2026-06-02 08:25:56.329075 | debian-bookworm | + 2026-06-02 08:25:56.329204 | debian-bookworm | +## File Deletion Events by User 2026-06-02 08:25:56.329369 | debian-bookworm | +-a always,exit -F arch=b64 -S rmdir -S unlink -S unlinkat -S rename -S renameat -F auid>=1000 -F auid!=-1 -k delete 2026-06-02 08:25:56.329486 | debian-bookworm | + 2026-06-02 08:25:56.329629 | debian-bookworm | +## File Access 2026-06-02 08:25:56.329756 | debian-bookworm | +### Unauthorized Access (unsuccessful) 2026-06-02 08:25:56.329872 | debian-bookworm | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k file_access 2026-06-02 08:25:56.330009 | debian-bookworm | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k file_access 2026-06-02 08:25:56.330129 | debian-bookworm | + 2026-06-02 08:25:56.330280 | debian-bookworm | +### Unsuccessful Creation 2026-06-02 08:25:56.330437 | debian-bookworm | +-a always,exit -F arch=b64 -S mkdir,creat,link,symlink,mknod,mknodat,linkat,symlinkat -F exit=-EACCES -k file_creation 2026-06-02 08:25:56.330555 | debian-bookworm | +-a always,exit -F arch=b64 -S mkdir,link,symlink,mkdirat -F exit=-EPERM -k file_creation 2026-06-02 08:25:56.330664 | debian-bookworm | + 2026-06-02 08:25:56.330775 | debian-bookworm | +### Unsuccessful Modification 2026-06-02 08:25:56.330888 | debian-bookworm | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EACCES -k file_modification 2026-06-02 08:25:56.331005 | debian-bookworm | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EPERM -k file_modification 2026-06-02 08:25:56.331111 | debian-bookworm | + 2026-06-02 08:25:56.331235 | debian-bookworm | +## 32bit API Exploitation 2026-06-02 08:25:56.331357 | debian-bookworm | +### If you are on a 64 bit platform, everything _should_ be running 2026-06-02 08:25:56.331508 | debian-bookworm | +### in 64 bit mode. This rule will detect any use of the 32 bit syscalls 2026-06-02 08:25:56.331628 | debian-bookworm | +### because this might be a sign of someone exploiting a hole in the 32 2026-06-02 08:25:56.331737 | debian-bookworm | +### bit API. 2026-06-02 08:25:56.331850 | debian-bookworm | +-a always,exit -F arch=b32 -S all -k 32bit_api 2026-06-02 08:25:56.331955 | debian-bookworm | + 2026-06-02 08:25:56.332066 | debian-bookworm | +# Make The Configuration Immutable -------------------------------------------- 2026-06-02 08:25:56.332185 | debian-bookworm | + 2026-06-02 08:25:56.332336 | debian-bookworm | +##-e 2 2026-06-02 08:25:56.332441 | debian-bookworm | 2026-06-02 08:25:56.332694 | debian-bookworm | changed: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": true, "checksum": "9f99ce5c4f891fbf3e2bce06ed4cb97fb9e01f41", "dest": "/etc/audit/rules.d/20-neo23x0.rules", "gid": 0, "group": "root", "item": "20-neo23x0.rules", "md5sum": "6ac57206fd77de34805c3f4d50ef8b1d", "mode": "0644", "owner": "root", "size": 27367, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1780388755.4478962-2561-194535495843952/.source.rules", "state": "file", "uid": 0} 2026-06-02 08:25:56.332808 | debian-bookworm | 2026-06-02 08:25:56.332923 | debian-bookworm | TASK [auditd : Manage auditd service] ****************************************** 2026-06-02 08:25:57.027023 | debian-bookworm | ok: [molecule-auditd] => {"changed": false, "enabled": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 08:25:50 UTC", "ActiveEnterTimestampMonotonic": "897798596", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "local-fs.target systemd-journald.socket system.slice systemd-tmpfiles-setup.service", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 08:25:50 UTC", "AssertTimestampMonotonic": "897745435", "Before": "shutdown.target ssh.service systemd-update-utmp.service sysinit.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "44280000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 08:25:50 UTC", "ConditionTimestampMonotonic": "897745402", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3367", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2333", "ExecMainStartTimestamp": "Tue 2026-06-02 08:25:50 UTC", "ExecMainStartTimestampMonotonic": "897776685", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 08:25:50 UTC] ; stop_time=[Tue 2026-06-02 08:25:50 UTC] ; pid=2332 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 08:25:50 UTC] ; stop_time=[Tue 2026-06-02 08:25:50 UTC] ; pid=2332 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 08:25:50 UTC] ; stop_time=[Tue 2026-06-02 08:25:50 UTC] ; pid=2336 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 08:25:50 UTC] ; stop_time=[Tue 2026-06-02 08:25:50 UTC] ; pid=2336 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2026-06-02 08:25:50 UTC", "InactiveExitTimestampMonotonic": "897756951", "InvocationID": "dcffce8c4f3e4b3280aa00993d20a85a", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15480", "LimitNPROCSoft": "15480", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15480", "LimitSIGPENDINGSoft": "15480", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2333", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "716800", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Tue 2026-06-02 08:25:50 UTC", "StateChangeTimestampMonotonic": "897798596", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 08:25:57.032217 | debian-bookworm | 2026-06-02 08:25:57.032249 | debian-bookworm | TASK [auditd : List existing rules files] ************************************** 2026-06-02 08:25:57.364967 | ubuntu-noble | --- before 2026-06-02 08:25:57.365004 | ubuntu-noble | +++ after: /home/zuul/.ansible/tmp/ansible-local-1929buyicgsi/tmpnq63q1ls/20-neo23x0.rules.j2 2026-06-02 08:25:57.365013 | ubuntu-noble | @@ -0,0 +1,750 @@ 2026-06-02 08:25:57.365019 | ubuntu-noble | +# ___ ___ __ __ 2026-06-02 08:25:57.365026 | ubuntu-noble | +# / | __ ______/ (_) /_____/ / 2026-06-02 08:25:57.365032 | ubuntu-noble | +# / /| |/ / / / __ / / __/ __ / 2026-06-02 08:25:57.365037 | ubuntu-noble | +# / ___ / /_/ / /_/ / / /_/ /_/ / 2026-06-02 08:25:57.365043 | ubuntu-noble | +# /_/ |_\__,_/\__,_/_/\__/\__,_/ 2026-06-02 08:25:57.365049 | ubuntu-noble | +# 2026-06-02 08:25:57.365056 | ubuntu-noble | +# Linux Audit Daemon - Best Practice Configuration 2026-06-02 08:25:57.365517 | ubuntu-noble | +# /etc/audit/audit.rules 2026-06-02 08:25:57.365712 | ubuntu-noble | +# 2026-06-02 08:25:57.365916 | ubuntu-noble | +# Compiled by Florian Roth 2026-06-02 08:25:57.366135 | ubuntu-noble | +# 2026-06-02 08:25:57.366325 | ubuntu-noble | +# Created : 2017/12/05 2026-06-02 08:25:57.366514 | ubuntu-noble | +# Modified : 2023/01/25 2026-06-02 08:25:57.366690 | ubuntu-noble | +# 2026-06-02 08:25:57.366939 | ubuntu-noble | +# Based on rules published here: 2026-06-02 08:25:57.367141 | ubuntu-noble | +# Gov.uk auditd rules 2026-06-02 08:25:57.367575 | ubuntu-noble | +# https://github.com/gds-operations/puppet-auditd/pull/1 2026-06-02 08:25:57.367905 | ubuntu-noble | +# CentOS 7 hardening 2026-06-02 08:25:57.368228 | ubuntu-noble | +# https://highon.coffee/blog/security-harden-centos-7/#auditd---audit-daemon 2026-06-02 08:25:57.368497 | ubuntu-noble | +# Linux audit repo 2026-06-02 08:25:57.368779 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/tree/master/rules 2026-06-02 08:25:57.369078 | ubuntu-noble | +# Auditd high performance linux auditing 2026-06-02 08:25:57.369359 | ubuntu-noble | +# https://linux-audit.com/tuning-auditd-high-performance-linux-auditing/ 2026-06-02 08:25:57.369544 | ubuntu-noble | +# 2026-06-02 08:25:57.369731 | ubuntu-noble | +# Further rules 2026-06-02 08:25:57.370019 | ubuntu-noble | +# For PCI DSS compliance see: 2026-06-02 08:25:57.370305 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-pci-dss-v31.rules 2026-06-02 08:25:57.370563 | ubuntu-noble | +# For NISPOM compliance see: 2026-06-02 08:25:57.370829 | ubuntu-noble | +# https://github.com/linux-audit/audit-userspace/blob/master/rules/30-nispom.rules 2026-06-02 08:25:57.371084 | ubuntu-noble | + 2026-06-02 08:25:57.371274 | ubuntu-noble | +# Remove any existing rules 2026-06-02 08:25:57.371433 | ubuntu-noble | +-D 2026-06-02 08:25:57.371589 | ubuntu-noble | + 2026-06-02 08:25:57.371749 | ubuntu-noble | +# Buffer Size 2026-06-02 08:25:57.371942 | ubuntu-noble | +## Feel free to increase this if the machine panic's 2026-06-02 08:25:57.372111 | ubuntu-noble | +-b 8192 2026-06-02 08:25:57.372267 | ubuntu-noble | + 2026-06-02 08:25:57.372429 | ubuntu-noble | +# Failure Mode 2026-06-02 08:25:57.372602 | ubuntu-noble | +## Possible values: 0 (silent), 1 (printk, print a failure message), 2 (panic, halt the system) 2026-06-02 08:25:57.372756 | ubuntu-noble | +-f 1 2026-06-02 08:25:57.372959 | ubuntu-noble | + 2026-06-02 08:25:57.373107 | ubuntu-noble | +# Ignore errors 2026-06-02 08:25:57.373255 | ubuntu-noble | +## e.g. caused by users or files not found in the local environment 2026-06-02 08:25:57.373391 | ubuntu-noble | +-i 2026-06-02 08:25:57.373528 | ubuntu-noble | + 2026-06-02 08:25:57.373672 | ubuntu-noble | +# Self Auditing --------------------------------------------------------------- 2026-06-02 08:25:57.373810 | ubuntu-noble | + 2026-06-02 08:25:57.373984 | ubuntu-noble | +## Audit the audit logs 2026-06-02 08:25:57.374137 | ubuntu-noble | +### Successful and unsuccessful attempts to read information from the audit records 2026-06-02 08:25:57.374280 | ubuntu-noble | +-w /var/log/audit/ -p wra -k auditlog 2026-06-02 08:25:57.374422 | ubuntu-noble | +-w /var/audit/ -p wra -k auditlog 2026-06-02 08:25:57.374558 | ubuntu-noble | + 2026-06-02 08:25:57.374699 | ubuntu-noble | +## Auditd configuration 2026-06-02 08:25:57.374856 | ubuntu-noble | +### Modifications to audit configuration that occur while the audit collection functions are operating 2026-06-02 08:25:57.375017 | ubuntu-noble | +-w /etc/audit/ -p wa -k auditconfig 2026-06-02 08:25:57.375168 | ubuntu-noble | +-w /etc/libaudit.conf -p wa -k auditconfig 2026-06-02 08:25:57.375312 | ubuntu-noble | +-w /etc/audisp/ -p wa -k audispconfig 2026-06-02 08:25:57.375449 | ubuntu-noble | + 2026-06-02 08:25:57.375594 | ubuntu-noble | +## Monitor for use of audit management tools 2026-06-02 08:25:57.375737 | ubuntu-noble | +-w /sbin/auditctl -p x -k audittools 2026-06-02 08:25:57.375888 | ubuntu-noble | +-w /sbin/auditd -p x -k audittools 2026-06-02 08:25:57.377947 | ubuntu-noble | +-w /usr/sbin/auditd -p x -k audittools 2026-06-02 08:25:57.377966 | ubuntu-noble | +-w /usr/sbin/augenrules -p x -k audittools 2026-06-02 08:25:57.377971 | ubuntu-noble | + 2026-06-02 08:25:57.377975 | ubuntu-noble | +## Access to all audit trails 2026-06-02 08:25:57.377980 | ubuntu-noble | + 2026-06-02 08:25:57.377984 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/ausearch -F perm=x -k audittools 2026-06-02 08:25:57.377989 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aureport -F perm=x -k audittools 2026-06-02 08:25:57.377994 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aulast -F perm=x -k audittools 2026-06-02 08:25:57.377998 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/aulastlogin -F perm=x -k audittools 2026-06-02 08:25:57.378002 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/auvirt -F perm=x -k audittools 2026-06-02 08:25:57.378006 | ubuntu-noble | + 2026-06-02 08:25:57.378011 | ubuntu-noble | +# Filters --------------------------------------------------------------------- 2026-06-02 08:25:57.378015 | ubuntu-noble | + 2026-06-02 08:25:57.378019 | ubuntu-noble | +### We put these early because audit is a first match wins system. 2026-06-02 08:25:57.378023 | ubuntu-noble | + 2026-06-02 08:25:57.378028 | ubuntu-noble | +## Ignore SELinux AVC records 2026-06-02 08:25:57.378166 | ubuntu-noble | +-a always,exclude -F msgtype=AVC 2026-06-02 08:25:57.378296 | ubuntu-noble | + 2026-06-02 08:25:57.378433 | ubuntu-noble | +## Ignore current working directory records 2026-06-02 08:25:57.378570 | ubuntu-noble | +-a always,exclude -F msgtype=CWD 2026-06-02 08:25:57.378697 | ubuntu-noble | + 2026-06-02 08:25:57.378847 | ubuntu-noble | +## Cron jobs fill the logs with stuff we normally don't want (works with SELinux) 2026-06-02 08:25:57.379009 | ubuntu-noble | +-a never,user -F subj_type=crond_t 2026-06-02 08:25:57.379153 | ubuntu-noble | +-a never,exit -F subj_type=crond_t 2026-06-02 08:25:57.379283 | ubuntu-noble | + 2026-06-02 08:25:57.379421 | ubuntu-noble | +## This prevents chrony from overwhelming the logs 2026-06-02 08:25:57.379561 | ubuntu-noble | +-a never,exit -F arch=b64 -S adjtimex -F auid=-1 -F uid=chrony -F subj_type=chronyd_t 2026-06-02 08:25:57.379689 | ubuntu-noble | + 2026-06-02 08:25:57.379831 | ubuntu-noble | +## This is not very interesting and wastes a lot of space if the server is public facing 2026-06-02 08:25:57.380022 | ubuntu-noble | +-a always,exclude -F msgtype=CRYPTO_KEY_USER 2026-06-02 08:25:57.380153 | ubuntu-noble | + 2026-06-02 08:25:57.380275 | ubuntu-noble | +## Open VM Tools 2026-06-02 08:25:57.380405 | ubuntu-noble | +-a exit,never -F arch=b64 -S all -F exe=/usr/bin/vmtoolsd 2026-06-02 08:25:57.380523 | ubuntu-noble | + 2026-06-02 08:25:57.380651 | ubuntu-noble | +## High Volume Event Filter (especially on Linux Workstations) 2026-06-02 08:25:57.380777 | ubuntu-noble | +-a never,exit -F arch=b64 -F dir=/dev/shm -k sharedmemaccess 2026-06-02 08:25:57.380912 | ubuntu-noble | +-a never,exit -F arch=b64 -F dir=/var/lock/lvm -k locklvm 2026-06-02 08:25:57.381043 | ubuntu-noble | + 2026-06-02 08:25:57.381173 | ubuntu-noble | +## FileBeat 2026-06-02 08:25:57.381300 | ubuntu-noble | +-a never,exit -F arch=b64 -F path=/opt/filebeat -k filebeat 2026-06-02 08:25:57.381417 | ubuntu-noble | + 2026-06-02 08:25:57.381540 | ubuntu-noble | +## More information on how to filter events 2026-06-02 08:25:57.381666 | ubuntu-noble | +### https://access.redhat.com/solutions/2482221 2026-06-02 08:25:57.381781 | ubuntu-noble | + 2026-06-02 08:25:57.381941 | ubuntu-noble | +# Rules ----------------------------------------------------------------------- 2026-06-02 08:25:57.382064 | ubuntu-noble | + 2026-06-02 08:25:57.382186 | ubuntu-noble | +## Kernel parameters 2026-06-02 08:25:57.382308 | ubuntu-noble | +-w /etc/sysctl.conf -p wa -k sysctl 2026-06-02 08:25:57.382425 | ubuntu-noble | +-w /etc/sysctl.d -p wa -k sysctl 2026-06-02 08:25:57.382531 | ubuntu-noble | + 2026-06-02 08:25:57.382642 | ubuntu-noble | +## Kernel module loading and unloading 2026-06-02 08:25:57.382758 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/insmod -k modules 2026-06-02 08:25:57.382882 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/modprobe -k modules 2026-06-02 08:25:57.383010 | ubuntu-noble | +-a always,exit -F perm=x -F auid!=-1 -F path=/sbin/rmmod -k modules 2026-06-02 08:25:57.383129 | ubuntu-noble | +-a always,exit -F arch=b64 -S finit_module -S init_module -S delete_module -F auid!=-1 -k modules 2026-06-02 08:25:57.383234 | ubuntu-noble | + 2026-06-02 08:25:57.383344 | ubuntu-noble | +## Modprobe configuration 2026-06-02 08:25:57.383456 | ubuntu-noble | +-w /etc/modprobe.conf -p wa -k modprobe 2026-06-02 08:25:57.383570 | ubuntu-noble | +-w /etc/modprobe.d -p wa -k modprobe 2026-06-02 08:25:57.383675 | ubuntu-noble | + 2026-06-02 08:25:57.383787 | ubuntu-noble | +## KExec usage (all actions) 2026-06-02 08:25:57.383912 | ubuntu-noble | +-a always,exit -F arch=b64 -S kexec_load -k KEXEC 2026-06-02 08:25:57.384041 | ubuntu-noble | + 2026-06-02 08:25:57.384158 | ubuntu-noble | +## Special files 2026-06-02 08:25:57.384278 | ubuntu-noble | +-a always,exit -F arch=b64 -S mknod -S mknodat -k specialfiles 2026-06-02 08:25:57.384384 | ubuntu-noble | + 2026-06-02 08:25:57.384497 | ubuntu-noble | +## Mount operations (only attributable) 2026-06-02 08:25:57.384614 | ubuntu-noble | +-a always,exit -F arch=b64 -S mount -S umount2 -F auid!=-1 -k mount 2026-06-02 08:25:57.384721 | ubuntu-noble | + 2026-06-02 08:25:57.384832 | ubuntu-noble | +### NFS mount 2026-06-02 08:25:57.385078 | ubuntu-noble | +-a always,exit -F path=/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 08:25:57.385212 | ubuntu-noble | +-a always,exit -F path=/usr/sbin/mount.nfs -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 08:25:57.385320 | ubuntu-noble | + 2026-06-02 08:25:57.385436 | ubuntu-noble | +## Change swap (only attributable) 2026-06-02 08:25:57.385556 | ubuntu-noble | +-a always,exit -F arch=b64 -S swapon -S swapoff -F auid!=-1 -k swap 2026-06-02 08:25:57.385663 | ubuntu-noble | + 2026-06-02 08:25:57.385846 | ubuntu-noble | +## Time 2026-06-02 08:25:57.385984 | ubuntu-noble | +-a always,exit -F arch=b64 -F uid!=ntp -S adjtimex -S settimeofday -S clock_settime -k time 2026-06-02 08:25:57.386102 | ubuntu-noble | +### Local time zone 2026-06-02 08:25:57.386216 | ubuntu-noble | +-w /etc/localtime -p wa -k localtime 2026-06-02 08:25:57.386323 | ubuntu-noble | + 2026-06-02 08:25:57.386434 | ubuntu-noble | +## Stunnel 2026-06-02 08:25:57.386547 | ubuntu-noble | +-w /usr/sbin/stunnel -p x -k stunnel 2026-06-02 08:25:57.386659 | ubuntu-noble | +-w /usr/bin/stunnel -p x -k stunnel 2026-06-02 08:25:57.386766 | ubuntu-noble | + 2026-06-02 08:25:57.386890 | ubuntu-noble | +## Cron configuration & scheduled jobs 2026-06-02 08:25:57.387021 | ubuntu-noble | +-w /etc/cron.allow -p wa -k cron 2026-06-02 08:25:57.387137 | ubuntu-noble | +-w /etc/cron.deny -p wa -k cron 2026-06-02 08:25:57.387249 | ubuntu-noble | +-w /etc/cron.d/ -p wa -k cron 2026-06-02 08:25:57.387361 | ubuntu-noble | +-w /etc/cron.daily/ -p wa -k cron 2026-06-02 08:25:57.387473 | ubuntu-noble | +-w /etc/cron.hourly/ -p wa -k cron 2026-06-02 08:25:57.387585 | ubuntu-noble | +-w /etc/cron.monthly/ -p wa -k cron 2026-06-02 08:25:57.387697 | ubuntu-noble | +-w /etc/cron.weekly/ -p wa -k cron 2026-06-02 08:25:57.387808 | ubuntu-noble | +-w /etc/crontab -p wa -k cron 2026-06-02 08:25:57.387939 | ubuntu-noble | +-w /var/spool/cron/ -p wa -k cron 2026-06-02 08:25:57.388052 | ubuntu-noble | + 2026-06-02 08:25:57.388165 | ubuntu-noble | +## User, group, password databases 2026-06-02 08:25:57.388277 | ubuntu-noble | +-w /etc/group -p wa -k etcgroup 2026-06-02 08:25:57.388386 | ubuntu-noble | +-w /etc/passwd -p wa -k etcpasswd 2026-06-02 08:25:57.388499 | ubuntu-noble | +-w /etc/gshadow -k etcgroup 2026-06-02 08:25:57.388873 | ubuntu-noble | +-w /etc/shadow -k etcpasswd 2026-06-02 08:25:57.389019 | ubuntu-noble | +-w /etc/security/opasswd -k opasswd 2026-06-02 08:25:57.389224 | ubuntu-noble | + 2026-06-02 08:25:57.389351 | ubuntu-noble | +## Sudoers file changes 2026-06-02 08:25:57.389466 | ubuntu-noble | +-w /etc/sudoers -p wa -k actions 2026-06-02 08:25:57.389579 | ubuntu-noble | +-w /etc/sudoers.d/ -p wa -k actions 2026-06-02 08:25:57.389686 | ubuntu-noble | + 2026-06-02 08:25:57.389797 | ubuntu-noble | +## Passwd 2026-06-02 08:25:57.389939 | ubuntu-noble | +-w /usr/bin/passwd -p x -k passwd_modification 2026-06-02 08:25:57.390055 | ubuntu-noble | + 2026-06-02 08:25:57.390295 | ubuntu-noble | +## Tools to change group identifiers 2026-06-02 08:25:57.390425 | ubuntu-noble | +-w /usr/sbin/groupadd -p x -k group_modification 2026-06-02 08:25:57.390609 | ubuntu-noble | +-w /usr/sbin/groupmod -p x -k group_modification 2026-06-02 08:25:57.390731 | ubuntu-noble | +-w /usr/sbin/addgroup -p x -k group_modification 2026-06-02 08:25:57.390857 | ubuntu-noble | +-w /usr/sbin/useradd -p x -k user_modification 2026-06-02 08:25:57.390995 | ubuntu-noble | +-w /usr/sbin/userdel -p x -k user_modification 2026-06-02 08:25:57.391113 | ubuntu-noble | +-w /usr/sbin/usermod -p x -k user_modification 2026-06-02 08:25:57.391227 | ubuntu-noble | +-w /usr/sbin/adduser -p x -k user_modification 2026-06-02 08:25:57.391336 | ubuntu-noble | + 2026-06-02 08:25:57.391449 | ubuntu-noble | +## Login configuration and information 2026-06-02 08:25:57.391683 | ubuntu-noble | +-w /etc/login.defs -p wa -k login 2026-06-02 08:25:57.391804 | ubuntu-noble | +-w /etc/securetty -p wa -k login 2026-06-02 08:25:57.392094 | ubuntu-noble | +-w /var/log/faillog -p wa -k login 2026-06-02 08:25:57.392280 | ubuntu-noble | +-w /var/log/lastlog -p wa -k login 2026-06-02 08:25:57.392396 | ubuntu-noble | +-w /var/log/tallylog -p wa -k login 2026-06-02 08:25:57.393942 | ubuntu-noble | + 2026-06-02 08:25:57.393954 | ubuntu-noble | +## Network Environment 2026-06-02 08:25:57.393959 | ubuntu-noble | +### Changes to hostname 2026-06-02 08:25:57.393969 | ubuntu-noble | +-a always,exit -F arch=b64 -S sethostname -S setdomainname -k network_modifications 2026-06-02 08:25:57.393972 | ubuntu-noble | + 2026-06-02 08:25:57.393976 | ubuntu-noble | +### Detect Remote Shell Use 2026-06-02 08:25:57.393980 | ubuntu-noble | +-a always,exit -F arch=b64 -F exe=/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-02 08:25:57.393983 | ubuntu-noble | +-a always,exit -F arch=b64 -F exe=/usr/bin/bash -F success=1 -S connect -k "remote_shell" 2026-06-02 08:25:57.393987 | ubuntu-noble | + 2026-06-02 08:25:57.393991 | ubuntu-noble | +### Successful IPv4 Connections 2026-06-02 08:25:57.393994 | ubuntu-noble | +-a always,exit -F arch=b64 -S connect -F a2=16 -F success=1 -F key=network_connect_4 2026-06-02 08:25:57.393998 | ubuntu-noble | + 2026-06-02 08:25:57.394001 | ubuntu-noble | +### Successful IPv6 Connections 2026-06-02 08:25:57.394005 | ubuntu-noble | +-a always,exit -F arch=b64 -S connect -F a2=28 -F success=1 -F key=network_connect_6 2026-06-02 08:25:57.394009 | ubuntu-noble | + 2026-06-02 08:25:57.394069 | ubuntu-noble | +### Changes to other files 2026-06-02 08:25:57.394189 | ubuntu-noble | +-w /etc/hosts -p wa -k network_modifications 2026-06-02 08:25:57.394303 | ubuntu-noble | +-w /etc/sysconfig/network -p wa -k network_modifications 2026-06-02 08:25:57.394419 | ubuntu-noble | +-w /etc/sysconfig/network-scripts -p w -k network_modifications 2026-06-02 08:25:57.394528 | ubuntu-noble | +-w /etc/network/ -p wa -k network 2026-06-02 08:25:57.394649 | ubuntu-noble | +-a always,exit -F dir=/etc/NetworkManager/ -F perm=wa -k network_modifications 2026-06-02 08:25:57.394756 | ubuntu-noble | + 2026-06-02 08:25:57.394894 | ubuntu-noble | +### Changes to issue 2026-06-02 08:25:57.395026 | ubuntu-noble | +-w /etc/issue -p wa -k etcissue 2026-06-02 08:25:57.395145 | ubuntu-noble | +-w /etc/issue.net -p wa -k etcissue 2026-06-02 08:25:57.395252 | ubuntu-noble | + 2026-06-02 08:25:57.395364 | ubuntu-noble | +## System startup scripts 2026-06-02 08:25:57.395476 | ubuntu-noble | +-w /etc/inittab -p wa -k init 2026-06-02 08:25:57.395589 | ubuntu-noble | +-w /etc/init.d/ -p wa -k init 2026-06-02 08:25:57.395698 | ubuntu-noble | +-w /etc/init/ -p wa -k init 2026-06-02 08:25:57.395807 | ubuntu-noble | + 2026-06-02 08:25:57.395944 | ubuntu-noble | +## Library search paths 2026-06-02 08:25:57.396064 | ubuntu-noble | +-w /etc/ld.so.conf -p wa -k libpath 2026-06-02 08:25:57.396179 | ubuntu-noble | +-w /etc/ld.so.conf.d -p wa -k libpath 2026-06-02 08:25:57.396286 | ubuntu-noble | + 2026-06-02 08:25:57.396425 | ubuntu-noble | +## Systemwide library preloads (LD_PRELOAD) 2026-06-02 08:25:57.396578 | ubuntu-noble | +-w /etc/ld.so.preload -p wa -k systemwide_preloads 2026-06-02 08:25:57.396691 | ubuntu-noble | + 2026-06-02 08:25:57.396806 | ubuntu-noble | +## Pam configuration 2026-06-02 08:25:57.396965 | ubuntu-noble | +-w /etc/pam.d/ -p wa -k pam 2026-06-02 08:25:57.397087 | ubuntu-noble | +-w /etc/security/limits.conf -p wa -k pam 2026-06-02 08:25:57.397202 | ubuntu-noble | +-w /etc/security/limits.d -p wa -k pam 2026-06-02 08:25:57.397317 | ubuntu-noble | +-w /etc/security/pam_env.conf -p wa -k pam 2026-06-02 08:25:57.397430 | ubuntu-noble | +-w /etc/security/namespace.conf -p wa -k pam 2026-06-02 08:25:57.397544 | ubuntu-noble | +-w /etc/security/namespace.d -p wa -k pam 2026-06-02 08:25:57.397656 | ubuntu-noble | +-w /etc/security/namespace.init -p wa -k pam 2026-06-02 08:25:57.397762 | ubuntu-noble | + 2026-06-02 08:25:57.397884 | ubuntu-noble | +## Mail configuration 2026-06-02 08:25:57.398015 | ubuntu-noble | +-w /etc/aliases -p wa -k mail 2026-06-02 08:25:57.398132 | ubuntu-noble | +-w /etc/postfix/ -p wa -k mail 2026-06-02 08:25:57.398246 | ubuntu-noble | +-w /etc/exim4/ -p wa -k mail 2026-06-02 08:25:57.398352 | ubuntu-noble | + 2026-06-02 08:25:57.398467 | ubuntu-noble | +## SSH configuration 2026-06-02 08:25:57.398579 | ubuntu-noble | +-w /etc/ssh/sshd_config -k sshd 2026-06-02 08:25:57.398693 | ubuntu-noble | +-w /etc/ssh/sshd_config.d -k sshd 2026-06-02 08:25:57.398797 | ubuntu-noble | + 2026-06-02 08:25:57.398935 | ubuntu-noble | +## root ssh key tampering 2026-06-02 08:25:57.399055 | ubuntu-noble | +-w /root/.ssh -p wa -k rootkey 2026-06-02 08:25:57.399163 | ubuntu-noble | + 2026-06-02 08:25:57.399275 | ubuntu-noble | +# Systemd 2026-06-02 08:25:57.399390 | ubuntu-noble | +-w /bin/systemctl -p x -k systemd 2026-06-02 08:25:57.399502 | ubuntu-noble | +-w /etc/systemd/ -p wa -k systemd 2026-06-02 08:25:57.399614 | ubuntu-noble | +-w /usr/lib/systemd -p wa -k systemd 2026-06-02 08:25:57.399719 | ubuntu-noble | + 2026-06-02 08:25:57.399860 | ubuntu-noble | +## https://systemd.network/systemd.generator.html 2026-06-02 08:25:57.399994 | ubuntu-noble | +-w /etc/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 08:25:57.400112 | ubuntu-noble | +-w /usr/local/lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 08:25:57.400233 | ubuntu-noble | +-w /usr/lib/systemd/system-generators -p wa -k systemd_generator 2026-06-02 08:25:57.400349 | ubuntu-noble | + 2026-06-02 08:25:57.400466 | ubuntu-noble | +-w /etc/systemd/user-generators/ -p wa -k systemd_generator 2026-06-02 08:25:57.400581 | ubuntu-noble | +-w /usr/local/lib/systemd/user-generators/ -p wa -k systemd_generator 2026-06-02 08:25:57.400695 | ubuntu-noble | +-w /lib/systemd/system-generators/ -p wa -k systemd_generator 2026-06-02 08:25:57.400801 | ubuntu-noble | + 2026-06-02 08:25:57.400944 | ubuntu-noble | +## SELinux events that modify the system's Mandatory Access Controls (MAC) 2026-06-02 08:25:57.401064 | ubuntu-noble | +-w /etc/selinux/ -p wa -k mac_policy 2026-06-02 08:25:57.401170 | ubuntu-noble | + 2026-06-02 08:25:57.401281 | ubuntu-noble | +## Critical elements access failures 2026-06-02 08:25:57.401398 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/etc -F success=0 -k unauthedfileaccess 2026-06-02 08:25:57.401514 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/bin -F success=0 -k unauthedfileaccess 2026-06-02 08:25:57.401629 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/sbin -F success=0 -k unauthedfileaccess 2026-06-02 08:25:57.401744 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/usr/bin -F success=0 -k unauthedfileaccess 2026-06-02 08:25:57.401869 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/usr/sbin -F success=0 -k unauthedfileaccess 2026-06-02 08:25:57.402043 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/var -F success=0 -k unauthedfileaccess 2026-06-02 08:25:57.402179 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/home -F success=0 -k unauthedfileaccess 2026-06-02 08:25:57.402297 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/srv -F success=0 -k unauthedfileaccess 2026-06-02 08:25:57.402406 | ubuntu-noble | + 2026-06-02 08:25:57.402521 | ubuntu-noble | +## Process ID change (switching accounts) applications 2026-06-02 08:25:57.402635 | ubuntu-noble | +-w /bin/su -p x -k priv_esc 2026-06-02 08:25:57.402750 | ubuntu-noble | +-w /usr/bin/sudo -p x -k priv_esc 2026-06-02 08:25:57.402869 | ubuntu-noble | + 2026-06-02 08:25:57.402996 | ubuntu-noble | +## Power state 2026-06-02 08:25:57.403112 | ubuntu-noble | +-w /sbin/shutdown -p x -k power 2026-06-02 08:25:57.403223 | ubuntu-noble | +-w /sbin/poweroff -p x -k power 2026-06-02 08:25:57.403336 | ubuntu-noble | +-w /sbin/reboot -p x -k power 2026-06-02 08:25:57.403448 | ubuntu-noble | +-w /sbin/halt -p x -k power 2026-06-02 08:25:57.403553 | ubuntu-noble | + 2026-06-02 08:25:57.403665 | ubuntu-noble | +## Session initiation information 2026-06-02 08:25:57.403779 | ubuntu-noble | +-w /var/run/utmp -p wa -k session 2026-06-02 08:25:57.403931 | ubuntu-noble | +-w /var/log/btmp -p wa -k session 2026-06-02 08:25:57.404050 | ubuntu-noble | +-w /var/log/wtmp -p wa -k session 2026-06-02 08:25:57.404158 | ubuntu-noble | + 2026-06-02 08:25:57.404274 | ubuntu-noble | +## Discretionary Access Control (DAC) modifications 2026-06-02 08:25:57.404391 | ubuntu-noble | +-a always,exit -F arch=b64 -S chmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:25:57.404507 | ubuntu-noble | +-a always,exit -F arch=b64 -S chown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:25:57.404621 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchmod -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:25:57.404737 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchmodat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:25:57.404864 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:25:57.404991 | ubuntu-noble | +-a always,exit -F arch=b64 -S fchownat -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:25:57.405934 | ubuntu-noble | +-a always,exit -F arch=b64 -S fremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:25:57.405950 | ubuntu-noble | +-a always,exit -F arch=b64 -S fsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:25:57.405954 | ubuntu-noble | +-a always,exit -F arch=b64 -S lchown -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:25:57.405957 | ubuntu-noble | +-a always,exit -F arch=b64 -S lremovexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:25:57.405961 | ubuntu-noble | +-a always,exit -F arch=b64 -S lsetxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:25:57.405964 | ubuntu-noble | +-a always,exit -F arch=b64 -S removexattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:25:57.405968 | ubuntu-noble | +-a always,exit -F arch=b64 -S setxattr -F auid>=1000 -F auid!=-1 -k perm_mod 2026-06-02 08:25:57.405972 | ubuntu-noble | + 2026-06-02 08:25:57.405977 | ubuntu-noble | +# Special Rules --------------------------------------------------------------- 2026-06-02 08:25:57.406029 | ubuntu-noble | + 2026-06-02 08:25:57.406149 | ubuntu-noble | +## Reconnaissance 2026-06-02 08:25:57.406262 | ubuntu-noble | +-w /usr/bin/whoami -p x -k recon 2026-06-02 08:25:57.406373 | ubuntu-noble | +-w /usr/bin/id -p x -k recon 2026-06-02 08:25:57.406486 | ubuntu-noble | +-w /bin/hostname -p x -k recon 2026-06-02 08:25:57.406598 | ubuntu-noble | +-w /bin/uname -p x -k recon 2026-06-02 08:25:57.406712 | ubuntu-noble | +-w /etc/issue -p r -k recon 2026-06-02 08:25:57.406822 | ubuntu-noble | +-w /etc/hostname -p r -k recon 2026-06-02 08:25:57.406950 | ubuntu-noble | + 2026-06-02 08:25:57.407069 | ubuntu-noble | +## Suspicious activity 2026-06-02 08:25:57.407183 | ubuntu-noble | +-w /usr/bin/wget -p x -k susp_activity 2026-06-02 08:25:57.407297 | ubuntu-noble | +-w /usr/bin/curl -p x -k susp_activity 2026-06-02 08:25:57.407413 | ubuntu-noble | +-w /usr/bin/base64 -p x -k susp_activity 2026-06-02 08:25:57.407524 | ubuntu-noble | +-w /bin/nc -p x -k susp_activity 2026-06-02 08:25:57.407636 | ubuntu-noble | +-w /bin/netcat -p x -k susp_activity 2026-06-02 08:25:57.407749 | ubuntu-noble | +-w /usr/bin/ncat -p x -k susp_activity 2026-06-02 08:25:57.407880 | ubuntu-noble | +-w /usr/bin/ss -p x -k susp_activity 2026-06-02 08:25:57.408006 | ubuntu-noble | +-w /usr/bin/netstat -p x -k susp_activity 2026-06-02 08:25:57.408121 | ubuntu-noble | +-w /usr/bin/ssh -p x -k susp_activity 2026-06-02 08:25:57.408235 | ubuntu-noble | +-w /usr/bin/scp -p x -k susp_activity 2026-06-02 08:25:57.408347 | ubuntu-noble | +-w /usr/bin/sftp -p x -k susp_activity 2026-06-02 08:25:57.408459 | ubuntu-noble | +-w /usr/bin/ftp -p x -k susp_activity 2026-06-02 08:25:57.408638 | ubuntu-noble | +-w /usr/bin/socat -p x -k susp_activity 2026-06-02 08:25:57.408755 | ubuntu-noble | +-w /usr/bin/wireshark -p x -k susp_activity 2026-06-02 08:25:57.408886 | ubuntu-noble | +-w /usr/bin/tshark -p x -k susp_activity 2026-06-02 08:25:57.409013 | ubuntu-noble | +-w /usr/bin/rawshark -p x -k susp_activity 2026-06-02 08:25:57.409133 | ubuntu-noble | +-w /usr/bin/rdesktop -p x -k susp_activity 2026-06-02 08:25:57.409247 | ubuntu-noble | +-w /usr/local/bin/rdesktop -p x -k susp_activity 2026-06-02 08:25:57.409361 | ubuntu-noble | +-w /usr/bin/wlfreerdp -p x -k susp_activity 2026-06-02 08:25:57.409474 | ubuntu-noble | +-w /usr/bin/xfreerdp -p x -k susp_activity 2026-06-02 08:25:57.409587 | ubuntu-noble | +-w /usr/local/bin/xfreerdp -p x -k susp_activity 2026-06-02 08:25:57.409699 | ubuntu-noble | +-w /usr/bin/nmap -p x -k susp_activity 2026-06-02 08:25:57.409803 | ubuntu-noble | + 2026-06-02 08:25:57.409935 | ubuntu-noble | +## sssd 2026-06-02 08:25:57.410062 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/p11_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 08:25:57.410185 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/krb5_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 08:25:57.410304 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/ldap_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 08:25:57.410422 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/selinux_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 08:25:57.410542 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/sssd/proxy_child -F perm=x -F auid>=500 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 08:25:57.410649 | ubuntu-noble | + 2026-06-02 08:25:57.410763 | ubuntu-noble | +## T1002 Data Compressed 2026-06-02 08:25:57.410891 | ubuntu-noble | + 2026-06-02 08:25:57.411029 | ubuntu-noble | +-w /usr/bin/zip -p x -k Data_Compressed 2026-06-02 08:25:57.411149 | ubuntu-noble | +-w /usr/bin/gzip -p x -k Data_Compressed 2026-06-02 08:25:57.411262 | ubuntu-noble | +-w /usr/bin/tar -p x -k Data_Compressed 2026-06-02 08:25:57.411376 | ubuntu-noble | +-w /usr/bin/bzip2 -p x -k Data_Compressed 2026-06-02 08:25:57.411483 | ubuntu-noble | + 2026-06-02 08:25:57.411597 | ubuntu-noble | +-w /usr/bin/lzip -p x -k Data_Compressed 2026-06-02 08:25:57.411713 | ubuntu-noble | +-w /usr/local/bin/lzip -p x -k Data_Compressed 2026-06-02 08:25:57.411821 | ubuntu-noble | + 2026-06-02 08:25:57.411958 | ubuntu-noble | +-w /usr/bin/lz4 -p x -k Data_Compressed 2026-06-02 08:25:57.412079 | ubuntu-noble | +-w /usr/local/bin/lz4 -p x -k Data_Compressed 2026-06-02 08:25:57.412185 | ubuntu-noble | + 2026-06-02 08:25:57.412298 | ubuntu-noble | +-w /usr/bin/lzop -p x -k Data_Compressed 2026-06-02 08:25:57.412412 | ubuntu-noble | +-w /usr/local/bin/lzop -p x -k Data_Compressed 2026-06-02 08:25:57.412519 | ubuntu-noble | + 2026-06-02 08:25:57.414935 | ubuntu-noble | +-w /usr/bin/plzip -p x -k Data_Compressed 2026-06-02 08:25:57.414947 | ubuntu-noble | +-w /usr/local/bin/plzip -p x -k Data_Compressed 2026-06-02 08:25:57.414951 | ubuntu-noble | + 2026-06-02 08:25:57.414955 | ubuntu-noble | +-w /usr/bin/pbzip2 -p x -k Data_Compressed 2026-06-02 08:25:57.414965 | ubuntu-noble | +-w /usr/local/bin/pbzip2 -p x -k Data_Compressed 2026-06-02 08:25:57.414969 | ubuntu-noble | + 2026-06-02 08:25:57.414972 | ubuntu-noble | +-w /usr/bin/lbzip2 -p x -k Data_Compressed 2026-06-02 08:25:57.414976 | ubuntu-noble | +-w /usr/local/bin/lbzip2 -p x -k Data_Compressed 2026-06-02 08:25:57.414979 | ubuntu-noble | + 2026-06-02 08:25:57.414983 | ubuntu-noble | +-w /usr/bin/pixz -p x -k Data_Compressed 2026-06-02 08:25:57.414986 | ubuntu-noble | +-w /usr/local/bin/pixz -p x -k Data_Compressed 2026-06-02 08:25:57.414990 | ubuntu-noble | + 2026-06-02 08:25:57.414993 | ubuntu-noble | +-w /usr/bin/pigz -p x -k Data_Compressed 2026-06-02 08:25:57.414997 | ubuntu-noble | +-w /usr/local/bin/pigz -p x -k Data_Compressed 2026-06-02 08:25:57.415000 | ubuntu-noble | +-w /usr/bin/unpigz -p x -k Data_Compressed 2026-06-02 08:25:57.415004 | ubuntu-noble | +-w /usr/local/bin/unpigz -p x -k Data_Compressed 2026-06-02 08:25:57.415007 | ubuntu-noble | + 2026-06-02 08:25:57.415011 | ubuntu-noble | +-w /usr/bin/zstd -p x -k Data_Compressed 2026-06-02 08:25:57.415014 | ubuntu-noble | +-w /usr/local/bin/zstd -p x -k Data_Compressed 2026-06-02 08:25:57.415018 | ubuntu-noble | + 2026-06-02 08:25:57.415022 | ubuntu-noble | +## Added to catch netcat on Ubuntu 2026-06-02 08:25:57.415025 | ubuntu-noble | +-w /bin/nc.openbsd -p x -k susp_activity 2026-06-02 08:25:57.415029 | ubuntu-noble | +-w /bin/nc.traditional -p x -k susp_activity 2026-06-02 08:25:57.415032 | ubuntu-noble | + 2026-06-02 08:25:57.415036 | ubuntu-noble | +## Sbin suspicious activity 2026-06-02 08:25:57.415125 | ubuntu-noble | +-w /sbin/iptables -p x -k sbin_susp 2026-06-02 08:25:57.415243 | ubuntu-noble | +-w /sbin/ip6tables -p x -k sbin_susp 2026-06-02 08:25:57.415357 | ubuntu-noble | +-w /sbin/ifconfig -p x -k sbin_susp 2026-06-02 08:25:57.415471 | ubuntu-noble | +-w /usr/sbin/arptables -p x -k sbin_susp 2026-06-02 08:25:57.415585 | ubuntu-noble | +-w /usr/sbin/ebtables -p x -k sbin_susp 2026-06-02 08:25:57.415699 | ubuntu-noble | +-w /sbin/xtables-nft-multi -p x -k sbin_susp 2026-06-02 08:25:57.415812 | ubuntu-noble | +-w /usr/sbin/nft -p x -k sbin_susp 2026-06-02 08:25:57.415945 | ubuntu-noble | +-w /usr/sbin/tcpdump -p x -k sbin_susp 2026-06-02 08:25:57.416063 | ubuntu-noble | +-w /usr/sbin/traceroute -p x -k sbin_susp 2026-06-02 08:25:57.416175 | ubuntu-noble | +-w /usr/sbin/ufw -p x -k sbin_susp 2026-06-02 08:25:57.416281 | ubuntu-noble | + 2026-06-02 08:25:57.416391 | ubuntu-noble | +### kde4 2026-06-02 08:25:57.416516 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/kde4/kpac_dhcp_helper -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 08:25:57.416637 | ubuntu-noble | +-a always,exit -F path=/usr/libexec/kde4/kdesud -F perm=x -F auid>=1000 -F auid!=4294967295 -k T1078_Valid_Accounts 2026-06-02 08:25:57.416746 | ubuntu-noble | + 2026-06-02 08:25:57.416879 | ubuntu-noble | +## dbus-send invocation 2026-06-02 08:25:57.417010 | ubuntu-noble | +### may indicate privilege escalation CVE-2021-3560 2026-06-02 08:25:57.417126 | ubuntu-noble | +-w /usr/bin/dbus-send -p x -k dbus_send 2026-06-02 08:25:57.417241 | ubuntu-noble | +-w /usr/bin/gdbus -p x -k gdubs_call 2026-06-02 08:25:57.417348 | ubuntu-noble | + 2026-06-02 08:25:57.417460 | ubuntu-noble | +## pkexec invocation 2026-06-02 08:25:57.417576 | ubuntu-noble | +### may indicate privilege escalation CVE-2021-4034 2026-06-02 08:25:57.417689 | ubuntu-noble | +-w /usr/bin/pkexec -p x -k pkexec 2026-06-02 08:25:57.417795 | ubuntu-noble | + 2026-06-02 08:25:57.417939 | ubuntu-noble | +## Suspicious shells 2026-06-02 08:25:57.418059 | ubuntu-noble | +-w /bin/ash -p x -k susp_shell 2026-06-02 08:25:57.418171 | ubuntu-noble | +-w /bin/csh -p x -k susp_shell 2026-06-02 08:25:57.418283 | ubuntu-noble | +-w /bin/fish -p x -k susp_shell 2026-06-02 08:25:57.418395 | ubuntu-noble | +-w /bin/tcsh -p x -k susp_shell 2026-06-02 08:25:57.418506 | ubuntu-noble | +-w /bin/tclsh -p x -k susp_shell 2026-06-02 08:25:57.418615 | ubuntu-noble | +-w /bin/xonsh -p x -k susp_shell 2026-06-02 08:25:57.418729 | ubuntu-noble | +-w /usr/local/bin/xonsh -p x -k susp_shell 2026-06-02 08:25:57.418849 | ubuntu-noble | +-w /bin/open -p x -k susp_shell 2026-06-02 08:25:57.418975 | ubuntu-noble | +-w /bin/rbash -p x -k susp_shell 2026-06-02 08:25:57.419084 | ubuntu-noble | + 2026-06-02 08:25:57.419197 | ubuntu-noble | +# Web Server Actvity 2026-06-02 08:25:57.419314 | ubuntu-noble | +## Change the number "33" to the ID of your WebServer user. Default: www-data:x:33:33 2026-06-02 08:25:57.419430 | ubuntu-noble | +-a always,exit -F arch=b64 -S execve -F euid=33 -k detect_execve_www 2026-06-02 08:25:57.419538 | ubuntu-noble | + 2026-06-02 08:25:57.419651 | ubuntu-noble | +### https://clustershell.readthedocs.io/ 2026-06-02 08:25:57.419764 | ubuntu-noble | +-w /bin/clush -p x -k susp_shell 2026-06-02 08:25:57.419905 | ubuntu-noble | +-w /usr/local/bin/clush -p x -k susp_shell 2026-06-02 08:25:57.420041 | ubuntu-noble | +-w /etc/clustershell/clush.conf -p x -k susp_shell 2026-06-02 08:25:57.420160 | ubuntu-noble | + 2026-06-02 08:25:57.420272 | ubuntu-noble | +### https://github.com/tmux/tmux 2026-06-02 08:25:57.420386 | ubuntu-noble | +-w /bin/tmux -p x -k susp_shell 2026-06-02 08:25:57.420498 | ubuntu-noble | +-w /usr/local/bin/tmux -p x -k susp_shell 2026-06-02 08:25:57.420604 | ubuntu-noble | + 2026-06-02 08:25:57.420714 | ubuntu-noble | +## Shell/profile configurations 2026-06-02 08:25:57.420826 | ubuntu-noble | +-w /etc/profile.d/ -p wa -k shell_profiles 2026-06-02 08:25:57.420959 | ubuntu-noble | +-w /etc/profile -p wa -k shell_profiles 2026-06-02 08:25:57.421074 | ubuntu-noble | +-w /etc/shells -p wa -k shell_profiles 2026-06-02 08:25:57.421188 | ubuntu-noble | +-w /etc/bashrc -p wa -k shell_profiles 2026-06-02 08:25:57.421302 | ubuntu-noble | +-w /etc/csh.cshrc -p wa -k shell_profiles 2026-06-02 08:25:57.421415 | ubuntu-noble | +-w /etc/csh.login -p wa -k shell_profiles 2026-06-02 08:25:57.421526 | ubuntu-noble | +-w /etc/fish/ -p wa -k shell_profiles 2026-06-02 08:25:57.421640 | ubuntu-noble | +-w /etc/zsh/ -p wa -k shell_profiles 2026-06-02 08:25:57.421747 | ubuntu-noble | + 2026-06-02 08:25:57.421870 | ubuntu-noble | +### https://github.com/xxh/xxh 2026-06-02 08:25:57.421996 | ubuntu-noble | +-w /usr/local/bin/xxh.bash -p x -k susp_shell 2026-06-02 08:25:57.422111 | ubuntu-noble | +-w /usr/local/bin/xxh.xsh -p x -k susp_shell 2026-06-02 08:25:57.422226 | ubuntu-noble | +-w /usr/local/bin/xxh.zsh -p x -k susp_shell 2026-06-02 08:25:57.422331 | ubuntu-noble | + 2026-06-02 08:25:57.422444 | ubuntu-noble | +## Injection 2026-06-02 08:25:57.422558 | ubuntu-noble | +### These rules watch for code injection by the ptrace facility. 2026-06-02 08:25:57.422670 | ubuntu-noble | +### This could indicate someone trying to do something bad or just debugging 2026-06-02 08:25:57.422787 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x4 -k code_injection 2026-06-02 08:25:57.422936 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x5 -k data_injection 2026-06-02 08:25:57.423060 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -F a0=0x6 -k register_injection 2026-06-02 08:25:57.423176 | ubuntu-noble | +-a always,exit -F arch=b64 -S ptrace -k tracing 2026-06-02 08:25:57.423282 | ubuntu-noble | + 2026-06-02 08:25:57.423396 | ubuntu-noble | +## Anonymous File Creation 2026-06-02 08:25:57.423510 | ubuntu-noble | +### These rules watch the use of memfd_create 2026-06-02 08:25:57.423626 | ubuntu-noble | +### "memfd_create" creates anonymous file and returns a file descriptor to access it 2026-06-02 08:25:57.423742 | ubuntu-noble | +### When combined with "fexecve" can be used to stealthily run binaries in memory without touching disk 2026-06-02 08:25:57.423865 | ubuntu-noble | +-a always,exit -F arch=b64 -S memfd_create -F key=anon_file_create 2026-06-02 08:25:57.423986 | ubuntu-noble | + 2026-06-02 08:25:57.424103 | ubuntu-noble | +## Privilege Abuse 2026-06-02 08:25:57.424219 | ubuntu-noble | +### The purpose of this rule is to detect when an admin may be abusing power by looking in user's home dir. 2026-06-02 08:25:57.424337 | ubuntu-noble | +-a always,exit -F dir=/home -F uid=0 -F auid>=1000 -F auid!=-1 -C auid!=obj_uid -k power_abuse 2026-06-02 08:25:57.424442 | ubuntu-noble | + 2026-06-02 08:25:57.424554 | ubuntu-noble | +# Socket Creations 2026-06-02 08:25:57.424671 | ubuntu-noble | +# will catch both IPv4 and IPv6 2026-06-02 08:25:57.424779 | ubuntu-noble | + 2026-06-02 08:25:57.424905 | ubuntu-noble | +-a always,exit -F arch=b32 -S socket -F a0=2 -k network_socket_created 2026-06-02 08:25:57.425032 | ubuntu-noble | +-a always,exit -F arch=b64 -S socket -F a0=2 -k network_socket_created 2026-06-02 08:25:57.425140 | ubuntu-noble | + 2026-06-02 08:25:57.425257 | ubuntu-noble | +-a always,exit -F arch=b32 -S socket -F a0=10 -k network_socket_created 2026-06-02 08:25:57.425374 | ubuntu-noble | +-a always,exit -F arch=b64 -S socket -F a0=10 -k network_socket_created 2026-06-02 08:25:57.425481 | ubuntu-noble | + 2026-06-02 08:25:57.425593 | ubuntu-noble | +# Software Management --------------------------------------------------------- 2026-06-02 08:25:57.425699 | ubuntu-noble | + 2026-06-02 08:25:57.425810 | ubuntu-noble | +# RPM (Redhat/CentOS) 2026-06-02 08:25:57.425959 | ubuntu-noble | +-w /usr/bin/rpm -p x -k software_mgmt 2026-06-02 08:25:57.426077 | ubuntu-noble | +-w /usr/bin/yum -p x -k software_mgmt 2026-06-02 08:25:57.426184 | ubuntu-noble | + 2026-06-02 08:25:57.426299 | ubuntu-noble | +# DNF (Fedora/RedHat 8/CentOS 8) 2026-06-02 08:25:57.426414 | ubuntu-noble | +-w /usr/bin/dnf -p x -k software_mgmt 2026-06-02 08:25:57.426521 | ubuntu-noble | + 2026-06-02 08:25:57.426634 | ubuntu-noble | +# YAST/Zypper/RPM (SuSE) 2026-06-02 08:25:57.426748 | ubuntu-noble | +-w /sbin/yast -p x -k software_mgmt 2026-06-02 08:25:57.426870 | ubuntu-noble | +-w /sbin/yast2 -p x -k software_mgmt 2026-06-02 08:25:57.414370 | debian-bookworm | ok: [molecule-auditd] => {"changed": false, "cmd": ["find", "/etc/audit/rules.d", "-type", "f", "-printf", "%f\n"], "delta": "0:00:00.009444", "end": "2026-06-02 08:25:57.371752", "msg": "", "rc": 0, "start": "2026-06-02 08:25:57.362308", "stderr": "", "stderr_lines": [], "stdout": "audit.rules\n20-neo23x0.rules", "stdout_lines": ["audit.rules", "20-neo23x0.rules"]} 2026-06-02 08:25:57.414444 | debian-bookworm | 2026-06-02 08:25:57.414450 | debian-bookworm | TASK [auditd : Remove unmanaged rules files] *********************************** 2026-06-02 08:25:57.426995 | ubuntu-noble | +-w /bin/rpm -p x -k software_mgmt 2026-06-02 08:25:57.427119 | ubuntu-noble | +-w /usr/bin/zypper -k software_mgmt 2026-06-02 08:25:57.427226 | ubuntu-noble | + 2026-06-02 08:25:57.427341 | ubuntu-noble | +# DPKG / APT-GET (Debian/Ubuntu) 2026-06-02 08:25:57.427453 | ubuntu-noble | +-w /usr/bin/dpkg -p x -k software_mgmt 2026-06-02 08:25:57.427564 | ubuntu-noble | +-w /usr/bin/apt -p x -k software_mgmt 2026-06-02 08:25:57.427678 | ubuntu-noble | +-w /usr/bin/apt-add-repository -p x -k software_mgmt 2026-06-02 08:25:57.759004 | debian-bookworm | --- before 2026-06-02 08:25:57.427791 | ubuntu-noble | +-w /usr/bin/apt-get -p x -k software_mgmt 2026-06-02 08:25:57.427913 | ubuntu-noble | +-w /usr/bin/aptitude -p x -k software_mgmt 2026-06-02 08:25:57.428037 | ubuntu-noble | +-w /usr/bin/wajig -p x -k software_mgmt 2026-06-02 08:25:57.428154 | ubuntu-noble | +-w /usr/bin/snap -p x -k software_mgmt 2026-06-02 08:25:57.428260 | ubuntu-noble | + 2026-06-02 08:25:57.759055 | debian-bookworm | +++ after 2026-06-02 08:25:57.428374 | ubuntu-noble | +# PIP(3) (Python installs) 2026-06-02 08:25:57.428490 | ubuntu-noble | +-w /usr/bin/pip -p x -k third_party_software_mgmt 2026-06-02 08:25:57.428605 | ubuntu-noble | +-w /usr/local/bin/pip -p x -k third_party_software_mgmt 2026-06-02 08:25:57.428720 | ubuntu-noble | +-w /usr/bin/pip3 -p x -k third_party_software_mgmt 2026-06-02 08:25:57.428834 | ubuntu-noble | +-w /usr/local/bin/pip3 -p x -k third_party_software_mgmt 2026-06-02 08:25:57.759061 | debian-bookworm | @@ -1,4 +1,4 @@ 2026-06-02 08:25:57.428969 | ubuntu-noble | +-w /usr/bin/pipx -p x -k third_party_software_mgmt 2026-06-02 08:25:57.429087 | ubuntu-noble | +-w /usr/local/bin/pipx -p x -k third_party_software_mgmt 2026-06-02 08:25:57.429193 | ubuntu-noble | + 2026-06-02 08:25:57.429305 | ubuntu-noble | +# npm 2026-06-02 08:25:57.429419 | ubuntu-noble | +## T1072 third party software 2026-06-02 08:25:57.429531 | ubuntu-noble | +## https://www.npmjs.com 2026-06-02 08:25:57.429645 | ubuntu-noble | +## https://docs.npmjs.com/cli/v6/commands/npm-audit 2026-06-02 08:25:57.429760 | ubuntu-noble | +-w /usr/bin/npm -p x -k third_party_software_mgmt 2026-06-02 08:25:57.429886 | ubuntu-noble | + 2026-06-02 08:25:57.430015 | ubuntu-noble | +# Comprehensive Perl Archive Network (CPAN) (CPAN installs) 2026-06-02 08:25:57.430130 | ubuntu-noble | +## T1072 third party software 2026-06-02 08:25:57.430240 | ubuntu-noble | +## https://www.cpan.org 2026-06-02 08:25:57.430364 | ubuntu-noble | +-w /usr/bin/cpan -p x -k third_party_software_mgmt 2026-06-02 08:25:57.430470 | ubuntu-noble | + 2026-06-02 08:25:57.430582 | ubuntu-noble | +# Ruby (RubyGems installs) 2026-06-02 08:25:57.430700 | ubuntu-noble | +## T1072 third party software 2026-06-02 08:25:57.430812 | ubuntu-noble | +## https://rubygems.org 2026-06-02 08:25:57.430949 | ubuntu-noble | +-w /usr/bin/gem -p x -k third_party_software_mgmt 2026-06-02 08:25:57.431060 | ubuntu-noble | + 2026-06-02 08:25:57.431172 | ubuntu-noble | +# LuaRocks (Lua installs) 2026-06-02 08:25:57.431284 | ubuntu-noble | +## T1072 third party software 2026-06-02 08:25:57.431393 | ubuntu-noble | +## https://luarocks.org 2026-06-02 08:25:57.431507 | ubuntu-noble | +-w /usr/bin/luarocks -p x -k third_party_software_mgmt 2026-06-02 08:25:57.431611 | ubuntu-noble | + 2026-06-02 08:25:57.431723 | ubuntu-noble | +# Pacman (Arch Linux) 2026-06-02 08:25:57.759066 | debian-bookworm | { 2026-06-02 08:25:57.431838 | ubuntu-noble | +## https://wiki.archlinux.org/title/Pacman 2026-06-02 08:25:57.431985 | ubuntu-noble | +## T1072 third party software 2026-06-02 08:25:57.432104 | ubuntu-noble | +-w /etc/pacman.conf -p x -k third_party_software_mgmt 2026-06-02 08:25:57.432218 | ubuntu-noble | +-w /etc/pacman.d -p x -k third_party_software_mgmt 2026-06-02 08:25:57.432323 | ubuntu-noble | + 2026-06-02 08:25:57.432439 | ubuntu-noble | +# Special Software ------------------------------------------------------------ 2026-06-02 08:25:57.432556 | ubuntu-noble | + 2026-06-02 08:25:57.432685 | ubuntu-noble | +## GDS specific secrets 2026-06-02 08:25:57.432798 | ubuntu-noble | +-w /etc/puppet/ssl -p wa -k puppet_ssl 2026-06-02 08:25:57.432929 | ubuntu-noble | + 2026-06-02 08:25:57.433048 | ubuntu-noble | +## IBM Bigfix BESClient 2026-06-02 08:25:57.434936 | ubuntu-noble | +-a always,exit -F arch=b64 -S open -F dir=/opt/BESClient -F success=0 -k soft_besclient 2026-06-02 08:25:57.759070 | debian-bookworm | "path": "/etc/audit/rules.d/audit.rules", 2026-06-02 08:25:57.434948 | ubuntu-noble | +-w /var/opt/BESClient/ -p wa -k soft_besclient 2026-06-02 08:25:57.759075 | debian-bookworm | - "state": "file" 2026-06-02 08:25:57.434952 | ubuntu-noble | + 2026-06-02 08:25:57.759080 | debian-bookworm | + "state": "absent" 2026-06-02 08:25:57.434956 | ubuntu-noble | +## CHEF https://www.chef.io/chef/ 2026-06-02 08:25:57.759084 | debian-bookworm | } 2026-06-02 08:25:57.434960 | ubuntu-noble | +-w /etc/chef -p wa -k soft_chef 2026-06-02 08:25:57.759087 | debian-bookworm | 2026-06-02 08:25:57.434963 | ubuntu-noble | + 2026-06-02 08:25:57.759093 | debian-bookworm | changed: [molecule-auditd] => (item=audit.rules) => {"ansible_loop_var": "item", "changed": true, "item": "audit.rules", "path": "/etc/audit/rules.d/audit.rules", "state": "absent"} 2026-06-02 08:25:57.434967 | ubuntu-noble | +## Salt 2026-06-02 08:25:57.759099 | debian-bookworm | skipping: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": false, "false_condition": "item not in auditd_rules_files", "item": "20-neo23x0.rules", "skip_reason": "Conditional result was False"} 2026-06-02 08:25:57.434970 | ubuntu-noble | +## https://saltproject.io/ 2026-06-02 08:25:57.434974 | ubuntu-noble | +## https://docs.saltproject.io/en/latest/ref/configuration/master.html 2026-06-02 08:25:57.434978 | ubuntu-noble | +-w /etc/salt -p wa -k soft_salt 2026-06-02 08:25:57.434981 | ubuntu-noble | +-w /usr/local/etc/salt -p wa -k soft_salt 2026-06-02 08:25:57.434985 | ubuntu-noble | + 2026-06-02 08:25:57.434988 | ubuntu-noble | +## Otter 2026-06-02 08:25:57.434992 | ubuntu-noble | +## https://inedo.com/otter 2026-06-02 08:25:57.435002 | ubuntu-noble | +-w /etc/otter -p wa -k soft_otter 2026-06-02 08:25:57.759104 | debian-bookworm | 2026-06-02 08:25:57.435006 | ubuntu-noble | + 2026-06-02 08:25:57.435009 | ubuntu-noble | +## T1081 Credentials In Files 2026-06-02 08:25:57.435013 | ubuntu-noble | +-w /usr/bin/grep -p x -k string_search 2026-06-02 08:25:57.435016 | ubuntu-noble | +-w /usr/bin/egrep -p x -k string_search 2026-06-02 08:25:57.435044 | ubuntu-noble | +-w /usr/bin/ugrep -p x -k string_search 2026-06-02 08:25:57.435157 | ubuntu-noble | +### macOS 2026-06-02 08:25:57.435270 | ubuntu-noble | +-w /usr/local/bin/grep -p x -k string_search 2026-06-02 08:25:57.435381 | ubuntu-noble | +-w /usr/local/bin/egrep -p x -k string_search 2026-06-02 08:25:57.435494 | ubuntu-noble | +-w /usr/local/bin/ugrep -p x -k string_search 2026-06-02 08:25:57.435601 | ubuntu-noble | + 2026-06-02 08:25:57.759108 | debian-bookworm | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-02 08:25:57.435714 | ubuntu-noble | +### https://github.com/tmbinc/bgrep 2026-06-02 08:25:57.435827 | ubuntu-noble | +-w /usr/bin/bgrep -p x -k string_search 2026-06-02 08:25:57.435957 | ubuntu-noble | +### macOS 2026-06-02 08:25:57.436073 | ubuntu-noble | +-w /usr/local/bin/bgrep -p x -k string_search 2026-06-02 08:25:57.436179 | ubuntu-noble | + 2026-06-02 08:25:57.436296 | ubuntu-noble | +### https://github.com/BurntSushi/ripgrep 2026-06-02 08:25:57.436410 | ubuntu-noble | +-w /usr/bin/rg -p x -k string_search 2026-06-02 08:25:57.436519 | ubuntu-noble | +### macOS 2026-06-02 08:25:57.436633 | ubuntu-noble | +-w /usr/local/bin/rg -p x -k string_search 2026-06-02 08:25:57.436741 | ubuntu-noble | + 2026-06-02 08:25:57.436863 | ubuntu-noble | +### https://github.com/awgn/cgrep 2026-06-02 08:25:57.436987 | ubuntu-noble | + 2026-06-02 08:25:57.437105 | ubuntu-noble | +-w /usr/bin/cgrep -p x -k string_search 2026-06-02 08:25:57.437212 | ubuntu-noble | +### macOS 2026-06-02 08:25:57.437323 | ubuntu-noble | +-w /usr/local/bin/cgrep -p x -k string_search 2026-06-02 08:25:57.437427 | ubuntu-noble | + 2026-06-02 08:25:57.437539 | ubuntu-noble | +### https://github.com/jpr5/ngrep 2026-06-02 08:25:57.437650 | ubuntu-noble | +-w /usr/bin/ngrep -p x -k string_search 2026-06-02 08:25:57.437757 | ubuntu-noble | +### macOS 2026-06-02 08:25:57.437890 | ubuntu-noble | +-w /usr/local/bin/ngrep -p x -k string_search 2026-06-02 08:25:57.438011 | ubuntu-noble | + 2026-06-02 08:25:57.438129 | ubuntu-noble | +### https://github.com/vrothberg/vgrep 2026-06-02 08:25:57.438243 | ubuntu-noble | +-w /usr/bin/vgrep -p x -k string_search 2026-06-02 08:25:57.438353 | ubuntu-noble | +### macOS 2026-06-02 08:25:57.438474 | ubuntu-noble | +-w /usr/local/bin/vgrep -p x -k string_search 2026-06-02 08:25:57.438581 | ubuntu-noble | + 2026-06-02 08:25:57.438698 | ubuntu-noble | +### https://github.com/monochromegane/the_platinum_searcher 2026-06-02 08:25:57.438812 | ubuntu-noble | +-w /usr/bin/pt -p x -k string_search 2026-06-02 08:25:57.438941 | ubuntu-noble | +### macOS 2026-06-02 08:25:57.439060 | ubuntu-noble | +-w /usr/local/bin/pt -p x -k string_search 2026-06-02 08:25:57.439167 | ubuntu-noble | + 2026-06-02 08:25:57.439278 | ubuntu-noble | +### https://github.com/gvansickle/ucg 2026-06-02 08:25:57.439392 | ubuntu-noble | +-w /usr/bin/ucg -p x -k string_search 2026-06-02 08:25:57.439501 | ubuntu-noble | +### macOS 2026-06-02 08:25:57.439615 | ubuntu-noble | +-w /usr/local/bin/ucg -p x -k string_search 2026-06-02 08:25:57.439719 | ubuntu-noble | + 2026-06-02 08:25:57.439833 | ubuntu-noble | +### https://github.com/ggreer/the_silver_searcher 2026-06-02 08:25:57.439965 | ubuntu-noble | +-w /usr/bin/ag -p x -k string_search 2026-06-02 08:25:57.440078 | ubuntu-noble | +### macOS 2026-06-02 08:25:57.440190 | ubuntu-noble | +-w /usr/local/bin/ag -p x -k string_search 2026-06-02 08:25:57.440295 | ubuntu-noble | + 2026-06-02 08:25:57.440410 | ubuntu-noble | +### https://github.com/beyondgrep/ack3 2026-06-02 08:25:57.440521 | ubuntu-noble | +### https://beyondgrep.com 2026-06-02 08:25:57.440632 | ubuntu-noble | +-w /usr/bin/ack -p x -k string_search 2026-06-02 08:25:57.440767 | ubuntu-noble | +-w /usr/local/bin/ack -p x -k string_search 2026-06-02 08:25:57.440934 | ubuntu-noble | +-w /usr/bin/semgrep -p x -k string_search 2026-06-02 08:25:57.441052 | ubuntu-noble | +### macOS 2026-06-02 08:25:57.441168 | ubuntu-noble | +-w /usr/local/bin/semgrep -p x -k string_search 2026-06-02 08:25:57.441275 | ubuntu-noble | + 2026-06-02 08:25:57.441384 | ubuntu-noble | +## Docker 2026-06-02 08:25:57.441494 | ubuntu-noble | +-w /usr/bin/dockerd -k docker 2026-06-02 08:25:57.441606 | ubuntu-noble | +-w /usr/bin/docker -k docker 2026-06-02 08:25:57.441716 | ubuntu-noble | +-w /usr/bin/docker-containerd -k docker 2026-06-02 08:25:57.441827 | ubuntu-noble | +-w /usr/bin/docker-runc -k docker 2026-06-02 08:25:57.441962 | ubuntu-noble | +-w /var/lib/docker -p wa -k docker 2026-06-02 08:25:57.442076 | ubuntu-noble | +-w /etc/docker -k docker 2026-06-02 08:25:57.442187 | ubuntu-noble | +-w /etc/sysconfig/docker -k docker 2026-06-02 08:25:57.442300 | ubuntu-noble | +-w /etc/sysconfig/docker-storage -k docker 2026-06-02 08:25:57.442411 | ubuntu-noble | +-w /usr/lib/systemd/system/docker.service -k docker 2026-06-02 08:25:57.442532 | ubuntu-noble | +-w /usr/lib/systemd/system/docker.socket -k docker 2026-06-02 08:25:57.442638 | ubuntu-noble | + 2026-06-02 08:25:57.442748 | ubuntu-noble | +## Virtualization stuff 2026-06-02 08:25:57.442870 | ubuntu-noble | +-w /usr/bin/qemu-system-x86_64 -p x -k qemu-system-x86_64 2026-06-02 08:25:57.442996 | ubuntu-noble | +-w /usr/bin/qemu-img -p x -k qemu-img 2026-06-02 08:25:57.443112 | ubuntu-noble | +-w /usr/bin/qemu-kvm -p x -k qemu-kvm 2026-06-02 08:25:57.443223 | ubuntu-noble | +-w /usr/bin/qemu -p x -k qemu 2026-06-02 08:25:57.443336 | ubuntu-noble | +-w /usr/bin/virtualbox -p x -k virtualbox 2026-06-02 08:25:57.443448 | ubuntu-noble | +-w /usr/bin/virt-manager -p x -k virt-manager 2026-06-02 08:25:57.443561 | ubuntu-noble | +-w /usr/bin/VBoxManage -p x -k VBoxManage 2026-06-02 08:25:57.443668 | ubuntu-noble | + 2026-06-02 08:25:57.443778 | ubuntu-noble | +#### VirtualBox on macOS 2026-06-02 08:25:57.443891 | ubuntu-noble | + 2026-06-02 08:25:57.444018 | ubuntu-noble | +-w /usr/local/bin/VirtualBox -p x -k virt_tool 2026-06-02 08:25:57.444135 | ubuntu-noble | +-w /usr/local/bin/VirtualBoxVM -p x -k virt_tool 2026-06-02 08:25:57.444249 | ubuntu-noble | +-w /usr/local/bin/VBoxManage -p x -k virt_tool 2026-06-02 08:25:57.444363 | ubuntu-noble | +-w /usr/local/bin/VBoxVRDP -p x -k virt_tool 2026-06-02 08:25:57.444477 | ubuntu-noble | +-w /usr/local/bin/VBoxHeadless -p x -k virt_tool 2026-06-02 08:25:57.444591 | ubuntu-noble | +-w /usr/local/bin/vboxwebsrv -p x -k virt_tool 2026-06-02 08:25:57.444709 | ubuntu-noble | +-w /usr/local/bin/VBoxBugReport -p x -k virt_tool 2026-06-02 08:25:57.444821 | ubuntu-noble | +-w /usr/local/bin/VBoxBalloonCtrl -p x -k virt_tool 2026-06-02 08:25:57.444967 | ubuntu-noble | +-w /usr/local/bin/VBoxAutostart -p x -k virt_tool 2026-06-02 08:25:57.445087 | ubuntu-noble | +-w /usr/local/bin/VBoxDTrace -p x -k virt_tool 2026-06-02 08:25:57.445201 | ubuntu-noble | +-w /usr/local/bin/vbox-img -p x -k virt_tool 2026-06-02 08:25:57.445319 | ubuntu-noble | +-w /Library/LaunchDaemons/org.virtualbox.startup.plist -p x -k virt_tool 2026-06-02 08:25:57.445435 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/LaunchDaemons/ -p x -k virt_tool 2026-06-02 08:25:57.445550 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxDrv.kext/ -p x -k virt_tool 2026-06-02 08:25:57.445665 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxUSB.kext/ -p x -k virt_tool 2026-06-02 08:25:57.445778 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxNetFlt.kext/ -p x -k virt_tool 2026-06-02 08:25:57.445904 | ubuntu-noble | +-w /Library/Application Support/VirtualBox/VBoxNetAdp.kext/ -p x -k virt_tool 2026-06-02 08:25:57.446025 | ubuntu-noble | + 2026-06-02 08:25:57.446141 | ubuntu-noble | +### Parallels Desktop on macOS 2026-06-02 08:25:57.446248 | ubuntu-noble | + 2026-06-02 08:25:57.446361 | ubuntu-noble | +-w /usr/local/bin/prl_convert -p x -k virt_tool 2026-06-02 08:25:57.446474 | ubuntu-noble | +-w /usr/local/bin/prl_disk_tool -p x -k virt_tool 2026-06-02 08:25:57.446645 | ubuntu-noble | +-w /usr/local/bin/prl_perf_ctl -p x -k virt_tool 2026-06-02 08:25:57.446762 | ubuntu-noble | +-w /usr/local/bin/prlcore2dmp -p x -k virt_tool 2026-06-02 08:25:57.446884 | ubuntu-noble | +-w /usr/local/bin/prlctl -p x -k virt_tool 2026-06-02 08:25:57.447010 | ubuntu-noble | +-w /usr/local/bin/prlexec -p x -k virt_tool 2026-06-02 08:25:57.447124 | ubuntu-noble | +-w /usr/local/bin/prlsrvctl -p x -k virt_tool 2026-06-02 08:25:57.447240 | ubuntu-noble | +-w /Library/Preferences/Parallels -p x -k virt_tool 2026-06-02 08:25:57.447348 | ubuntu-noble | + 2026-06-02 08:25:57.447459 | ubuntu-noble | +### qemu on macOS 2026-06-02 08:25:57.447564 | ubuntu-noble | + 2026-06-02 08:25:57.447675 | ubuntu-noble | +-w /usr/local/bin/qemu-edid -p x -k virt_tool 2026-06-02 08:25:57.447789 | ubuntu-noble | +-w /usr/local/bin/qemu-img -p x -k virt_tool 2026-06-02 08:25:57.447913 | ubuntu-noble | +-w /usr/local/bin/qemu-io -p x -k virt_tool 2026-06-02 08:25:57.448039 | ubuntu-noble | +-w /usr/local/bin/qemu-nbd -p x -k virt_tool 2026-06-02 08:25:57.448157 | ubuntu-noble | +-w /usr/local/bin/qemu-system-x86_64 -p x -k virt_tool 2026-06-02 08:25:57.448263 | ubuntu-noble | + 2026-06-02 08:25:57.448372 | ubuntu-noble | +## Kubelet 2026-06-02 08:25:57.448483 | ubuntu-noble | +-w /usr/bin/kubelet -k kubelet 2026-06-02 08:25:57.448588 | ubuntu-noble | + 2026-06-02 08:25:57.448699 | ubuntu-noble | +# ipc system call 2026-06-02 08:25:57.449936 | ubuntu-noble | +# /usr/include/linux/ipc.h 2026-06-02 08:25:57.449948 | ubuntu-noble | + 2026-06-02 08:25:57.449952 | ubuntu-noble | +## msgctl 2026-06-02 08:25:57.449956 | ubuntu-noble | +#-a always,exit -S ipc -F a0=14 -k Inter-Process_Communication 2026-06-02 08:25:57.449959 | ubuntu-noble | +## msgget 2026-06-02 08:25:57.449963 | ubuntu-noble | +#-a always,exit -S ipc -F a0=13 -k Inter-Process_Communication 2026-06-02 08:25:57.449972 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2026-06-02 08:25:57.449976 | ubuntu-noble | +-a always,exit -F arch=b64 -S msgctl -k Inter-Process_Communication 2026-06-02 08:25:57.449979 | ubuntu-noble | +-a always,exit -F arch=b64 -S msgget -k Inter-Process_Communication 2026-06-02 08:25:57.449983 | ubuntu-noble | + 2026-06-02 08:25:57.449987 | ubuntu-noble | +## semctl 2026-06-02 08:25:57.449990 | ubuntu-noble | +#-a always,exit -S ipc -F a0=3 -k Inter-Process_Communication 2026-06-02 08:25:57.450048 | ubuntu-noble | +## semget 2026-06-02 08:25:57.450168 | ubuntu-noble | +#-a always,exit -S ipc -F a0=2 -k Inter-Process_Communication 2026-06-02 08:25:57.450279 | ubuntu-noble | +## semop 2026-06-02 08:25:57.450399 | ubuntu-noble | +#-a always,exit -S ipc -F a0=1 -k Inter-Process_Communication 2026-06-02 08:25:57.450513 | ubuntu-noble | +## semtimedop 2026-06-02 08:25:57.450628 | ubuntu-noble | +#-a always,exit -S ipc -F a0=4 -k Inter-Process_Communication 2026-06-02 08:25:57.450742 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2026-06-02 08:25:57.450867 | ubuntu-noble | +-a always,exit -F arch=b64 -S semctl -k Inter-Process_Communication 2026-06-02 08:25:57.450997 | ubuntu-noble | +-a always,exit -F arch=b64 -S semget -k Inter-Process_Communication 2026-06-02 08:25:57.451115 | ubuntu-noble | +-a always,exit -F arch=b64 -S semop -k Inter-Process_Communication 2026-06-02 08:25:57.451230 | ubuntu-noble | +-a always,exit -F arch=b64 -S semtimedop -k Inter-Process_Communication 2026-06-02 08:25:57.451336 | ubuntu-noble | + 2026-06-02 08:25:57.451445 | ubuntu-noble | +## shmctl 2026-06-02 08:25:57.451563 | ubuntu-noble | +#-a always,exit -S ipc -F a0=24 -k Inter-Process_Communication 2026-06-02 08:25:57.451672 | ubuntu-noble | +## shmget 2026-06-02 08:25:57.451789 | ubuntu-noble | +#-a always,exit -S ipc -F a0=23 -k Inter-Process_Communication 2026-06-02 08:25:57.451931 | ubuntu-noble | +## Use these lines on x86_64, ia64 instead 2026-06-02 08:25:57.452055 | ubuntu-noble | +-a always,exit -F arch=b64 -S shmctl -k Inter-Process_Communication 2026-06-02 08:25:57.452170 | ubuntu-noble | +-a always,exit -F arch=b64 -S shmget -k Inter-Process_Communication 2026-06-02 08:25:57.452280 | ubuntu-noble | + 2026-06-02 08:25:57.452395 | ubuntu-noble | +# High Volume Events ---------------------------------------------------------- 2026-06-02 08:25:57.452502 | ubuntu-noble | + 2026-06-02 08:25:57.452615 | ubuntu-noble | +## Disable these rules if they create too many events in your environment 2026-06-02 08:25:57.452720 | ubuntu-noble | + 2026-06-02 08:25:57.452829 | ubuntu-noble | +## Common Shells 2026-06-02 08:25:57.452962 | ubuntu-noble | +-w /bin/bash -p x -k susp_shell 2026-06-02 08:25:57.453079 | ubuntu-noble | +-w /bin/dash -p x -k susp_shell 2026-06-02 08:25:57.453193 | ubuntu-noble | +-w /bin/busybox -p x -k susp_shell 2026-06-02 08:25:57.453312 | ubuntu-noble | +-w /bin/zsh -p x -k susp_shell 2026-06-02 08:25:57.453423 | ubuntu-noble | +-w /bin/sh -p x -k susp_shell 2026-06-02 08:25:57.453534 | ubuntu-noble | +-w /bin/ksh -p x -k susp_shell 2026-06-02 08:25:57.453642 | ubuntu-noble | + 2026-06-02 08:25:57.453753 | ubuntu-noble | +## Root command executions 2026-06-02 08:25:57.453883 | ubuntu-noble | +-a always,exit -F arch=b64 -F euid=0 -F auid>=1000 -F auid!=-1 -S execve -k rootcmd 2026-06-02 08:25:57.454003 | ubuntu-noble | + 2026-06-02 08:25:57.454121 | ubuntu-noble | +## File Deletion Events by User 2026-06-02 08:25:57.454242 | ubuntu-noble | +-a always,exit -F arch=b64 -S rmdir -S unlink -S unlinkat -S rename -S renameat -F auid>=1000 -F auid!=-1 -k delete 2026-06-02 08:25:57.454350 | ubuntu-noble | + 2026-06-02 08:25:57.454461 | ubuntu-noble | +## File Access 2026-06-02 08:25:57.454577 | ubuntu-noble | +### Unauthorized Access (unsuccessful) 2026-06-02 08:25:57.454698 | ubuntu-noble | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EACCES -F auid>=1000 -F auid!=-1 -k file_access 2026-06-02 08:25:57.454818 | ubuntu-noble | +-a always,exit -F arch=b64 -S creat -S open -S openat -S open_by_handle_at -S truncate -S ftruncate -F exit=-EPERM -F auid>=1000 -F auid!=-1 -k file_access 2026-06-02 08:25:57.454943 | ubuntu-noble | + 2026-06-02 08:25:57.455060 | ubuntu-noble | +### Unsuccessful Creation 2026-06-02 08:25:57.455176 | ubuntu-noble | +-a always,exit -F arch=b64 -S mkdir,creat,link,symlink,mknod,mknodat,linkat,symlinkat -F exit=-EACCES -k file_creation 2026-06-02 08:25:57.455295 | ubuntu-noble | +-a always,exit -F arch=b64 -S mkdir,link,symlink,mkdirat -F exit=-EPERM -k file_creation 2026-06-02 08:25:57.455399 | ubuntu-noble | + 2026-06-02 08:25:57.455509 | ubuntu-noble | +### Unsuccessful Modification 2026-06-02 08:25:57.455626 | ubuntu-noble | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EACCES -k file_modification 2026-06-02 08:25:57.455754 | ubuntu-noble | +-a always,exit -F arch=b64 -S rename -S renameat -S truncate -S chmod -S setxattr -S lsetxattr -S removexattr -S lremovexattr -F exit=-EPERM -k file_modification 2026-06-02 08:25:57.455885 | ubuntu-noble | + 2026-06-02 08:25:57.456012 | ubuntu-noble | +## 32bit API Exploitation 2026-06-02 08:25:57.456135 | ubuntu-noble | +### If you are on a 64 bit platform, everything _should_ be running 2026-06-02 08:25:57.456252 | ubuntu-noble | +### in 64 bit mode. This rule will detect any use of the 32 bit syscalls 2026-06-02 08:25:57.456367 | ubuntu-noble | +### because this might be a sign of someone exploiting a hole in the 32 2026-06-02 08:25:57.456475 | ubuntu-noble | +### bit API. 2026-06-02 08:25:57.456595 | ubuntu-noble | +-a always,exit -F arch=b32 -S all -k 32bit_api 2026-06-02 08:25:57.456705 | ubuntu-noble | + 2026-06-02 08:25:57.456820 | ubuntu-noble | +# Make The Configuration Immutable -------------------------------------------- 2026-06-02 08:25:57.456949 | ubuntu-noble | + 2026-06-02 08:25:57.457064 | ubuntu-noble | +##-e 2 2026-06-02 08:25:57.457170 | ubuntu-noble | 2026-06-02 08:25:57.457394 | ubuntu-noble | changed: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": true, "checksum": "9f99ce5c4f891fbf3e2bce06ed4cb97fb9e01f41", "dest": "/etc/audit/rules.d/20-neo23x0.rules", "gid": 0, "group": "root", "item": "20-neo23x0.rules", "md5sum": "6ac57206fd77de34805c3f4d50ef8b1d", "mode": "0644", "owner": "root", "size": 27367, "src": "/home/zuul/.ansible/tmp/ansible-tmp-1780388756.6103096-2405-160037150277718/.source.rules", "state": "file", "uid": 0} 2026-06-02 08:25:57.457505 | ubuntu-noble | 2026-06-02 08:25:57.457621 | ubuntu-noble | TASK [auditd : Manage auditd service] ****************************************** 2026-06-02 08:25:58.087151 | ubuntu-noble | ok: [molecule-auditd] => {"changed": false, "enabled": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 08:25:50 UTC", "ActiveEnterTimestampMonotonic": "885189464", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "systemd-tmpfiles-setup.service local-fs.target systemd-journald.socket system.slice", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 08:25:50 UTC", "AssertTimestampMonotonic": "885137214", "Before": "sysinit.target systemd-update-utmp.service ssh.service shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "40648000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 08:25:50 UTC", "ConditionTimestampMonotonic": "885137172", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3826", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2174", "ExecMainStartTimestamp": "Tue 2026-06-02 08:25:50 UTC", "ExecMainStartTimestampMonotonic": "885159303", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 08:25:50 UTC] ; stop_time=[Tue 2026-06-02 08:25:50 UTC] ; pid=2173 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 08:25:50 UTC] ; stop_time=[Tue 2026-06-02 08:25:50 UTC] ; pid=2173 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 08:25:50 UTC] ; stop_time=[Tue 2026-06-02 08:25:50 UTC] ; pid=2177 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 08:25:50 UTC] ; stop_time=[Tue 2026-06-02 08:25:50 UTC] ; pid=2177 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2026-06-02 08:25:50 UTC", "InactiveExitTimestampMonotonic": "885149381", "InvocationID": "70ece017724646568fa3be535b56ccab", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15372", "LimitNPROCSoft": "15372", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15372", "LimitSIGPENDINGSoft": "15372", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2174", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3454574592", "MemoryCurrent": "499712", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2166784", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Tue 2026-06-02 08:25:50 UTC", "StateChangeTimestampMonotonic": "885189464", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4611", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 08:25:58.091799 | ubuntu-noble | 2026-06-02 08:25:58.093022 | ubuntu-noble | TASK [auditd : List existing rules files] ************************************** 2026-06-02 08:25:58.472017 | ubuntu-noble | ok: [molecule-auditd] => {"changed": false, "cmd": ["find", "/etc/audit/rules.d", "-type", "f", "-printf", "%f\n"], "delta": "0:00:00.005093", "end": "2026-06-02 08:25:58.432467", "msg": "", "rc": 0, "start": "2026-06-02 08:25:58.427374", "stderr": "", "stderr_lines": [], "stdout": "audit.rules\n20-neo23x0.rules", "stdout_lines": ["audit.rules", "20-neo23x0.rules"]} 2026-06-02 08:25:58.472091 | ubuntu-noble | 2026-06-02 08:25:58.472275 | ubuntu-noble | TASK [auditd : Remove unmanaged rules files] *********************************** 2026-06-02 08:25:58.405614 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 08:25:50 UTC", "ActiveEnterTimestampMonotonic": "897798596", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "local-fs.target systemd-journald.socket system.slice systemd-tmpfiles-setup.service", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 08:25:50 UTC", "AssertTimestampMonotonic": "897745435", "Before": "shutdown.target ssh.service systemd-update-utmp.service sysinit.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "45383000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 08:25:50 UTC", "ConditionTimestampMonotonic": "897745402", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3367", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2333", "ExecMainStartTimestamp": "Tue 2026-06-02 08:25:50 UTC", "ExecMainStartTimestampMonotonic": "897776685", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 08:25:50 UTC] ; stop_time=[Tue 2026-06-02 08:25:50 UTC] ; pid=2332 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 08:25:50 UTC] ; stop_time=[Tue 2026-06-02 08:25:50 UTC] ; pid=2332 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 08:25:50 UTC] ; stop_time=[Tue 2026-06-02 08:25:50 UTC] ; pid=2336 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 08:25:50 UTC] ; stop_time=[Tue 2026-06-02 08:25:50 UTC] ; pid=2336 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2026-06-02 08:25:50 UTC", "InactiveExitTimestampMonotonic": "897756951", "InvocationID": "dcffce8c4f3e4b3280aa00993d20a85a", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15480", "LimitNPROCSoft": "15480", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15480", "LimitSIGPENDINGSoft": "15480", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2333", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "724992", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Tue 2026-06-02 08:25:50 UTC", "StateChangeTimestampMonotonic": "897798596", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 08:25:58.411062 | debian-bookworm | 2026-06-02 08:25:58.411136 | debian-bookworm | RUNNING HANDLER [auditd : Generate auditd rules] ******************************* 2026-06-02 08:25:58.787792 | ubuntu-noble | --- before 2026-06-02 08:25:58.787827 | ubuntu-noble | +++ after 2026-06-02 08:25:58.787832 | ubuntu-noble | @@ -1,4 +1,4 @@ 2026-06-02 08:25:58.787837 | ubuntu-noble | { 2026-06-02 08:25:58.787842 | ubuntu-noble | "path": "/etc/audit/rules.d/audit.rules", 2026-06-02 08:25:58.787847 | ubuntu-noble | - "state": "file" 2026-06-02 08:25:58.787852 | ubuntu-noble | + "state": "absent" 2026-06-02 08:25:58.787857 | ubuntu-noble | } 2026-06-02 08:25:58.787862 | ubuntu-noble | 2026-06-02 08:25:58.787868 | ubuntu-noble | changed: [molecule-auditd] => (item=audit.rules) => {"ansible_loop_var": "item", "changed": true, "item": "audit.rules", "path": "/etc/audit/rules.d/audit.rules", "state": "absent"} 2026-06-02 08:25:58.787873 | ubuntu-noble | skipping: [molecule-auditd] => (item=20-neo23x0.rules) => {"ansible_loop_var": "item", "changed": false, "false_condition": "item not in auditd_rules_files", "item": "20-neo23x0.rules", "skip_reason": "Conditional result was False"} 2026-06-02 08:25:58.787884 | ubuntu-noble | 2026-06-02 08:25:58.787889 | ubuntu-noble | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-02 08:25:58.797587 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "cmd": ["augenrules", "--load"], "delta": "0:00:00.097433", "end": "2026-06-02 08:25:58.733459", "msg": "", "rc": 0, "start": "2026-06-02 08:25:58.636026", "stderr": "Unknown user: chrony\nThere was an error in line 24 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 28 of /etc/audit/audit.rules\nUnknown user: ntp\nThere was an error in line 44 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 83 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 84 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 112 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 115 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 176 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 177 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 178 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 179 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 180 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 217 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 218 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 234 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 285 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 286 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 324 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 325 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 346 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 347 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 348 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 349 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 350 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 351 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 359 of /etc/audit/audit.rules", "stderr_lines": ["Unknown user: chrony", "There was an error in line 24 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 28 of /etc/audit/audit.rules", "Unknown user: ntp", "There was an error in line 44 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 83 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 84 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 112 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 115 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 176 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 177 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 178 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 179 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 180 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 217 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 218 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 234 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 285 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 286 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 324 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 325 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 346 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 347 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 348 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 349 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 350 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 351 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 359 of /etc/audit/audit.rules"], "stdout": "/usr/sbin/augenrules: No change\nNo rules\nenabled 1\nfailure 1\npid 2726\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 912\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0\nenabled 1\nfailure 1\npid 2726\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 837\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0", "stdout_lines": ["/usr/sbin/augenrules: No change", "No rules", "enabled 1", "failure 1", "pid 2726", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 912", "backlog_wait_time 60000", "backlog_wait_time_actual 0", "enabled 1", "failure 1", "pid 2726", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 837", "backlog_wait_time 60000", "backlog_wait_time_actual 0"]} 2026-06-02 08:25:58.797641 | debian-bookworm | 2026-06-02 08:25:58.797647 | debian-bookworm | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-02 08:25:59.459420 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 08:25:50 UTC", "ActiveEnterTimestampMonotonic": "885189464", "ActiveExitTimestampMonotonic": "0", "ActiveState": "active", "After": "systemd-tmpfiles-setup.service local-fs.target systemd-journald.socket system.slice", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 08:25:50 UTC", "AssertTimestampMonotonic": "885137214", "Before": "sysinit.target systemd-update-utmp.service ssh.service shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "42256000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 08:25:50 UTC", "ConditionTimestampMonotonic": "885137172", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3826", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2174", "ExecMainStartTimestamp": "Tue 2026-06-02 08:25:50 UTC", "ExecMainStartTimestampMonotonic": "885159303", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 08:25:50 UTC] ; stop_time=[Tue 2026-06-02 08:25:50 UTC] ; pid=2173 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 08:25:50 UTC] ; stop_time=[Tue 2026-06-02 08:25:50 UTC] ; pid=2173 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 08:25:50 UTC] ; stop_time=[Tue 2026-06-02 08:25:50 UTC] ; pid=2177 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 08:25:50 UTC] ; stop_time=[Tue 2026-06-02 08:25:50 UTC] ; pid=2177 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestampMonotonic": "0", "InactiveExitTimestamp": "Tue 2026-06-02 08:25:50 UTC", "InactiveExitTimestampMonotonic": "885149381", "InvocationID": "70ece017724646568fa3be535b56ccab", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15372", "LimitNPROCSoft": "15372", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15372", "LimitSIGPENDINGSoft": "15372", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2174", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3463774208", "MemoryCurrent": "507904", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2166784", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Tue 2026-06-02 08:25:50 UTC", "StateChangeTimestampMonotonic": "885189464", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4611", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 08:25:59.462298 | ubuntu-noble | 2026-06-02 08:25:59.462463 | ubuntu-noble | RUNNING HANDLER [auditd : Generate auditd rules] ******************************* 2026-06-02 08:25:59.537660 | debian-bookworm | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 08:25:58 UTC", "ActiveEnterTimestampMonotonic": "905943872", "ActiveExitTimestamp": "Tue 2026-06-02 08:25:58 UTC", "ActiveExitTimestampMonotonic": "905756914", "ActiveState": "active", "After": "local-fs.target systemd-journald.socket system.slice systemd-tmpfiles-setup.service", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 08:25:58 UTC", "AssertTimestampMonotonic": "905795865", "Before": "shutdown.target ssh.service systemd-update-utmp.service sysinit.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "175070000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 08:25:58 UTC", "ConditionTimestampMonotonic": "905795743", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3445", "ControlPID": "0", "CoredumpFilter": "0x33", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2726", "ExecMainStartTimestamp": "Tue 2026-06-02 08:25:58 UTC", "ExecMainStartTimestampMonotonic": "905842027", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 08:25:58 UTC] ; stop_time=[Tue 2026-06-02 08:25:58 UTC] ; pid=2724 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 08:25:58 UTC] ; stop_time=[Tue 2026-06-02 08:25:58 UTC] ; pid=2724 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 08:25:58 UTC] ; stop_time=[Tue 2026-06-02 08:25:58 UTC] ; pid=2729 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 08:25:58 UTC] ; stop_time=[Tue 2026-06-02 08:25:58 UTC] ; pid=2729 ; code=exited ; status=0 }", "ExitType": "main", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FinalKillSignal": "9", "FragmentPath": "/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "18446744073709551615", "IOReadOperations": "18446744073709551615", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "18446744073709551615", "IOWriteOperations": "18446744073709551615", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "Tue 2026-06-02 08:25:58 UTC", "InactiveEnterTimestampMonotonic": "905794331", "InactiveExitTimestamp": "Tue 2026-06-02 08:25:58 UTC", "InactiveExitTimestampMonotonic": "905808993", "InvocationID": "e505f858836a42ad83c51d73b1b36197", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15480", "LimitNPROCSoft": "15480", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15480", "LimitSIGPENDINGSoft": "15480", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2726", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "infinity", "MemoryCurrent": "2072576", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemorySwapMax": "infinity", "MountAPIVFS": "no", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "yes", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartPreventExitStatus": "2 4 6", "RestartUSec": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StateChangeTimestamp": "Tue 2026-06-02 08:25:58 UTC", "StateChangeTimestampMonotonic": "905943872", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4644", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 08:25:59.538580 | debian-bookworm | 2026-06-02 08:25:59.538607 | debian-bookworm | PLAY RECAP ********************************************************************* 2026-06-02 08:25:59.538803 | debian-bookworm | molecule-auditd : ok=15 changed=8 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-02 08:25:59.538813 | debian-bookworm | 2026-06-02 08:25:59.636782 | debian-bookworm | INFO [delegated > converge] Executed: Successful 2026-06-02 08:25:59.637538 | debian-bookworm | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-02 08:25:59.791477 | debian-bookworm | ok: Runtime: 0:00:17.473767 2026-06-02 08:25:59.798357 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "cmd": ["augenrules", "--load"], "delta": "0:00:00.046467", "end": "2026-06-02 08:25:59.757105", "msg": "", "rc": 0, "start": "2026-06-02 08:25:59.710638", "stderr": "Unknown user: chrony\nThere was an error in line 24 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 28 of /etc/audit/audit.rules\nUnknown user: ntp\nThere was an error in line 44 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 83 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 84 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 86 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 112 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 115 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 176 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 177 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 178 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 179 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 180 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 217 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 218 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 234 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 285 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 286 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 324 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 325 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 346 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 347 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 348 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 349 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 350 of /etc/audit/audit.rules\nparameter passed without an option given\nThere was an error in line 351 of /etc/audit/audit.rules\nError sending add rule data request (No such file or directory)\nThere was an error in line 359 of /etc/audit/audit.rules", "stderr_lines": ["Unknown user: chrony", "There was an error in line 24 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 28 of /etc/audit/audit.rules", "Unknown user: ntp", "There was an error in line 44 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 83 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 84 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 86 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 112 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 115 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 176 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 177 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 178 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 179 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 180 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 217 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 218 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 234 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 285 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 286 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 324 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 325 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 346 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 347 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 348 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 349 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 350 of /etc/audit/audit.rules", "parameter passed without an option given", "There was an error in line 351 of /etc/audit/audit.rules", "Error sending add rule data request (No such file or directory)", "There was an error in line 359 of /etc/audit/audit.rules"], "stdout": "/usr/sbin/augenrules: No change\nNo rules\nenabled 1\nfailure 1\npid 2567\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 1254\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0\nenabled 1\nfailure 1\npid 2567\nrate_limit 0\nbacklog_limit 8192\nlost 0\nbacklog 1255\nbacklog_wait_time 60000\nbacklog_wait_time_actual 0", "stdout_lines": ["/usr/sbin/augenrules: No change", "No rules", "enabled 1", "failure 1", "pid 2567", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 1254", "backlog_wait_time 60000", "backlog_wait_time_actual 0", "enabled 1", "failure 1", "pid 2567", "rate_limit 0", "backlog_limit 8192", "lost 0", "backlog 1255", "backlog_wait_time 60000", "backlog_wait_time_actual 0"]} 2026-06-02 08:25:59.798697 | ubuntu-noble | 2026-06-02 08:25:59.799032 | ubuntu-noble | RUNNING HANDLER [auditd : Restart auditd service] ****************************** 2026-06-02 08:26:00.623708 | ubuntu-noble | ok: Runtime: 0:00:18.311376 2026-06-02 08:26:00.643266 | 2026-06-02 08:26:00.643410 | TASK [ansible-molecule : Run molecule verify action with scenario delegated] 2026-06-02 08:26:00.474398 | ubuntu-noble | changed: [molecule-auditd] => {"changed": true, "name": "auditd", "state": "started", "status": {"ActiveEnterTimestamp": "Tue 2026-06-02 08:25:59 UTC", "ActiveEnterTimestampMonotonic": "893650921", "ActiveExitTimestamp": "Tue 2026-06-02 08:25:59 UTC", "ActiveExitTimestampMonotonic": "893509797", "ActiveState": "active", "After": "systemd-tmpfiles-setup.service local-fs.target systemd-journald.socket system.slice", "AllowIsolate": "no", "AssertResult": "yes", "AssertTimestamp": "Tue 2026-06-02 08:25:59 UTC", "AssertTimestampMonotonic": "893549476", "Before": "sysinit.target systemd-update-utmp.service ssh.service shutdown.target", "BlockIOAccounting": "no", "BlockIOWeight": "[not set]", "CPUAccounting": "yes", "CPUAffinityFromNUMA": "no", "CPUQuotaPerSecUSec": "infinity", "CPUQuotaPeriodUSec": "infinity", "CPUSchedulingPolicy": "0", "CPUSchedulingPriority": "0", "CPUSchedulingResetOnFork": "no", "CPUShares": "[not set]", "CPUUsageNSec": "155980000", "CPUWeight": "[not set]", "CacheDirectoryMode": "0755", "CanFreeze": "yes", "CanIsolate": "no", "CanReload": "no", "CanStart": "yes", "CanStop": "yes", "CapabilityBoundingSet": "cap_chown cap_dac_override cap_dac_read_search cap_fowner cap_fsetid cap_kill cap_setgid cap_setuid cap_setpcap cap_linux_immutable cap_net_bind_service cap_net_broadcast cap_net_admin cap_net_raw cap_ipc_lock cap_ipc_owner cap_sys_rawio cap_sys_chroot cap_sys_ptrace cap_sys_pacct cap_sys_admin cap_sys_boot cap_sys_nice cap_sys_resource cap_sys_time cap_sys_tty_config cap_mknod cap_lease cap_audit_write cap_audit_control cap_setfcap cap_mac_override cap_mac_admin cap_syslog cap_wake_alarm cap_block_suspend cap_audit_read cap_perfmon cap_bpf cap_checkpoint_restore", "CleanResult": "success", "CollectMode": "inactive", "ConditionResult": "yes", "ConditionTimestamp": "Tue 2026-06-02 08:25:59 UTC", "ConditionTimestampMonotonic": "893549243", "ConfigurationDirectoryMode": "0755", "Conflicts": "shutdown.target", "ControlGroup": "/system.slice/auditd.service", "ControlGroupId": "3868", "ControlPID": "0", "CoredumpFilter": "0x33", "CoredumpReceive": "no", "DefaultDependencies": "no", "DefaultMemoryLow": "0", "DefaultMemoryMin": "0", "DefaultStartupMemoryLow": "0", "Delegate": "no", "Description": "Security Auditing Service", "DevicePolicy": "auto", "Documentation": "\"man:auditd(8)\" https://github.com/linux-audit/audit-documentation", "DynamicUser": "no", "ExecMainCode": "0", "ExecMainExitTimestampMonotonic": "0", "ExecMainPID": "2567", "ExecMainStartTimestamp": "Tue 2026-06-02 08:25:59 UTC", "ExecMainStartTimestampMonotonic": "893573589", "ExecMainStatus": "0", "ExecStart": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; ignore_errors=no ; start_time=[Tue 2026-06-02 08:25:59 UTC] ; stop_time=[Tue 2026-06-02 08:25:59 UTC] ; pid=2565 ; code=exited ; status=0 }", "ExecStartEx": "{ path=/sbin/auditd ; argv[]=/sbin/auditd ; flags= ; start_time=[Tue 2026-06-02 08:25:59 UTC] ; stop_time=[Tue 2026-06-02 08:25:59 UTC] ; pid=2565 ; code=exited ; status=0 }", "ExecStartPost": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; ignore_errors=yes ; start_time=[Tue 2026-06-02 08:25:59 UTC] ; stop_time=[Tue 2026-06-02 08:25:59 UTC] ; pid=2570 ; code=exited ; status=0 }", "ExecStartPostEx": "{ path=/sbin/augenrules ; argv[]=/sbin/augenrules --load ; flags=ignore-failure ; start_time=[Tue 2026-06-02 08:25:59 UTC] ; stop_time=[Tue 2026-06-02 08:25:59 UTC] ; pid=2570 ; code=exited ; status=0 }", "ExitType": "main", "ExtensionImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "FailureAction": "none", "FileDescriptorStoreMax": "0", "FileDescriptorStorePreserve": "restart", "FinalKillSignal": "9", "FragmentPath": "/usr/lib/systemd/system/auditd.service", "FreezerState": "running", "GID": "[not set]", "GuessMainPID": "yes", "IOAccounting": "no", "IOReadBytes": "[not set]", "IOReadOperations": "[not set]", "IOSchedulingClass": "2", "IOSchedulingPriority": "4", "IOWeight": "[not set]", "IOWriteBytes": "[not set]", "IOWriteOperations": "[not set]", "IPAccounting": "no", "IPEgressBytes": "[no data]", "IPEgressPackets": "[no data]", "IPIngressBytes": "[no data]", "IPIngressPackets": "[no data]", "Id": "auditd.service", "IgnoreOnIsolate": "no", "IgnoreSIGPIPE": "yes", "InactiveEnterTimestamp": "Tue 2026-06-02 08:25:59 UTC", "InactiveEnterTimestampMonotonic": "893547512", "InactiveExitTimestamp": "Tue 2026-06-02 08:25:59 UTC", "InactiveExitTimestampMonotonic": "893559525", "InvocationID": "c5a1b062159140059b86d997e47a5970", "JobRunningTimeoutUSec": "infinity", "JobTimeoutAction": "none", "JobTimeoutUSec": "infinity", "KeyringMode": "private", "KillMode": "control-group", "KillSignal": "15", "LimitAS": "infinity", "LimitASSoft": "infinity", "LimitCORE": "infinity", "LimitCORESoft": "0", "LimitCPU": "infinity", "LimitCPUSoft": "infinity", "LimitDATA": "infinity", "LimitDATASoft": "infinity", "LimitFSIZE": "infinity", "LimitFSIZESoft": "infinity", "LimitLOCKS": "infinity", "LimitLOCKSSoft": "infinity", "LimitMEMLOCK": "8388608", "LimitMEMLOCKSoft": "8388608", "LimitMSGQUEUE": "819200", "LimitMSGQUEUESoft": "819200", "LimitNICE": "0", "LimitNICESoft": "0", "LimitNOFILE": "524288", "LimitNOFILESoft": "1024", "LimitNPROC": "15372", "LimitNPROCSoft": "15372", "LimitRSS": "infinity", "LimitRSSSoft": "infinity", "LimitRTPRIO": "0", "LimitRTPRIOSoft": "0", "LimitRTTIME": "infinity", "LimitRTTIMESoft": "infinity", "LimitSIGPENDING": "15372", "LimitSIGPENDINGSoft": "15372", "LimitSTACK": "infinity", "LimitSTACKSoft": "8388608", "LoadState": "loaded", "LockPersonality": "yes", "LogLevelMax": "-1", "LogRateLimitBurst": "0", "LogRateLimitIntervalUSec": "0", "LogsDirectoryMode": "0755", "MainPID": "2567", "ManagedOOMMemoryPressure": "auto", "ManagedOOMMemoryPressureLimit": "0", "ManagedOOMPreference": "none", "ManagedOOMSwap": "auto", "MemoryAccounting": "yes", "MemoryAvailable": "3497222144", "MemoryCurrent": "1863680", "MemoryDenyWriteExecute": "yes", "MemoryHigh": "infinity", "MemoryKSM": "no", "MemoryLimit": "infinity", "MemoryLow": "0", "MemoryMax": "infinity", "MemoryMin": "0", "MemoryPeak": "2117632", "MemoryPressureThresholdUSec": "200ms", "MemoryPressureWatch": "auto", "MemorySwapCurrent": "0", "MemorySwapMax": "infinity", "MemorySwapPeak": "0", "MemoryZSwapCurrent": "0", "MemoryZSwapMax": "infinity", "MountAPIVFS": "no", "MountImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "NFileDescriptorStore": "0", "NRestarts": "0", "NUMAPolicy": "n/a", "Names": "auditd.service", "NeedDaemonReload": "no", "Nice": "0", "NoNewPrivileges": "no", "NonBlocking": "no", "NotifyAccess": "none", "OOMPolicy": "stop", "OOMScoreAdjust": "0", "OnFailureJobMode": "replace", "OnSuccessJobMode": "fail", "PIDFile": "/run/auditd.pid", "Perpetual": "no", "PrivateDevices": "no", "PrivateIPC": "no", "PrivateMounts": "no", "PrivateNetwork": "no", "PrivateTmp": "no", "PrivateUsers": "no", "ProcSubset": "all", "ProtectClock": "no", "ProtectControlGroups": "no", "ProtectHome": "no", "ProtectHostname": "no", "ProtectKernelLogs": "no", "ProtectKernelModules": "yes", "ProtectKernelTunables": "no", "ProtectProc": "default", "ProtectSystem": "no", "RefuseManualStart": "no", "RefuseManualStop": "no", "ReloadResult": "success", "ReloadSignal": "1", "RemainAfterExit": "no", "RemoveIPC": "no", "Requires": "system.slice", "Restart": "on-failure", "RestartKillSignal": "15", "RestartMaxDelayUSec": "infinity", "RestartMode": "normal", "RestartPreventExitStatus": "2 4 6", "RestartSteps": "0", "RestartUSec": "100ms", "RestartUSecNext": "100ms", "RestrictNamespaces": "no", "RestrictRealtime": "yes", "RestrictSUIDSGID": "no", "Result": "success", "RootDirectoryStartOnly": "no", "RootEphemeral": "no", "RootImagePolicy": "root=verity+signed+encrypted+unprotected+absent:usr=verity+signed+encrypted+unprotected+absent:home=encrypted+unprotected+absent:srv=encrypted+unprotected+absent:tmp=encrypted+unprotected+absent:var=encrypted+unprotected+absent", "RuntimeDirectoryMode": "0755", "RuntimeDirectoryPreserve": "no", "RuntimeMaxUSec": "infinity", "RuntimeRandomizedExtraUSec": "0", "SameProcessGroup": "no", "SecureBits": "0", "SendSIGHUP": "no", "SendSIGKILL": "yes", "SetLoginEnvironment": "no", "Slice": "system.slice", "StandardError": "inherit", "StandardInput": "null", "StandardOutput": "journal", "StartLimitAction": "none", "StartLimitBurst": "5", "StartLimitIntervalUSec": "10s", "StartupBlockIOWeight": "[not set]", "StartupCPUShares": "[not set]", "StartupCPUWeight": "[not set]", "StartupIOWeight": "[not set]", "StartupMemoryHigh": "infinity", "StartupMemoryLow": "0", "StartupMemoryMax": "infinity", "StartupMemorySwapMax": "infinity", "StartupMemoryZSwapMax": "infinity", "StateChangeTimestamp": "Tue 2026-06-02 08:25:59 UTC", "StateChangeTimestampMonotonic": "893650921", "StateDirectoryMode": "0755", "StatusErrno": "0", "StopWhenUnneeded": "no", "SubState": "running", "SuccessAction": "none", "SurviveFinalKillSignal": "no", "SyslogFacility": "3", "SyslogLevel": "6", "SyslogLevelPrefix": "yes", "SyslogPriority": "30", "SystemCallErrorNumber": "2147483646", "TTYReset": "no", "TTYVHangup": "no", "TTYVTDisallocate": "no", "TasksAccounting": "yes", "TasksCurrent": "2", "TasksMax": "4611", "TimeoutAbortUSec": "1min 30s", "TimeoutCleanUSec": "infinity", "TimeoutStartFailureMode": "terminate", "TimeoutStartUSec": "1min 30s", "TimeoutStopFailureMode": "terminate", "TimeoutStopUSec": "1min 30s", "TimerSlackNSec": "50000", "Transient": "no", "Type": "forking", "UID": "[not set]", "UMask": "0022", "UnitFilePreset": "enabled", "UnitFileState": "enabled", "UtmpMode": "init", "WantedBy": "multi-user.target", "WatchdogSignal": "6", "WatchdogTimestampMonotonic": "0", "WatchdogUSec": "0"}} 2026-06-02 08:26:00.475404 | ubuntu-noble | 2026-06-02 08:26:00.475964 | ubuntu-noble | PLAY RECAP ********************************************************************* 2026-06-02 08:26:00.476003 | ubuntu-noble | molecule-auditd : ok=15 changed=8 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 2026-06-02 08:26:00.476009 | ubuntu-noble | 2026-06-02 08:26:00.538578 | ubuntu-noble | INFO [delegated > converge] Executed: Successful 2026-06-02 08:26:00.538895 | ubuntu-noble | WARNING Molecule executed 1 scenario (1 missing files) 2026-06-02 08:26:01.362134 | ubuntu-noble | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 08:26:01.372812 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 08:26:01.350139 | debian-bookworm | WARNING Molecule scenarios should migrate to 'extensions/molecule' 2026-06-02 08:26:01.363164 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 08:26:01.817959 | ubuntu-noble | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 08:26:01.819955 | ubuntu-noble | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 08:26:01.841226 | ubuntu-noble | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 08:26:01.846817 | ubuntu-noble | INFO [delegated > discovery] scenario test matrix: verify 2026-06-02 08:26:01.846969 | ubuntu-noble | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 08:26:01.833324 | debian-bookworm | DEBUG [unknown > config] provisioner.env found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml, this can be defined in ansible.env 2026-06-02 08:26:01.833947 | debian-bookworm | DEBUG [delegated > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/molecule.yml. 2026-06-02 08:26:01.870149 | debian-bookworm | DEBUG [default > validate] Validating schema /home/zuul/src/github.com/osism/ansible-collection-services/molecule/default/molecule.yml. 2026-06-02 08:26:01.877477 | debian-bookworm | INFO [delegated > discovery] scenario test matrix: verify 2026-06-02 08:26:01.877567 | debian-bookworm | INFO [delegated > prerun] Performing prerun with role_name_check=0... 2026-06-02 08:26:03.154563 | ubuntu-noble | INFO [delegated > verify] Executing 2026-06-02 08:26:03.156373 | ubuntu-noble | INFO [delegated > verify] Executing Testinfra tests found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests/... 2026-06-02 08:26:03.157543 | ubuntu-noble | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 08:26:03.157562 | ubuntu-noble | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 08:26:03.157572 | ubuntu-noble | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 08:26:03.157579 | ubuntu-noble | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 08:26:03.157585 | ubuntu-noble | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 08:26:03.157591 | ubuntu-noble | ANSIBLE_ROLE: auditd 2026-06-02 08:26:03.157596 | ubuntu-noble | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 08:26:03.157602 | ubuntu-noble | ANSIBLE_VERBOSITY: 1 2026-06-02 08:26:03.157609 | ubuntu-noble | 2026-06-02 08:26:03.157798 | ubuntu-noble | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 08:26:03.157808 | ubuntu-noble | MOLECULE_DEBUG: True 2026-06-02 08:26:03.157815 | ubuntu-noble | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 08:26:03.157820 | ubuntu-noble | MOLECULE_DRIVER_NAME: default 2026-06-02 08:26:03.157826 | ubuntu-noble | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 08:26:03.157832 | ubuntu-noble | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 08:26:03.157838 | ubuntu-noble | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 08:26:03.157844 | ubuntu-noble | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 08:26:03.157851 | ubuntu-noble | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 08:26:03.157857 | ubuntu-noble | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 08:26:03.157863 | ubuntu-noble | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 08:26:03.157869 | ubuntu-noble | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 08:26:03.157875 | ubuntu-noble | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 08:26:03.157880 | ubuntu-noble | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 08:26:03.157886 | ubuntu-noble | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 08:26:03.157892 | ubuntu-noble | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 08:26:03.157899 | ubuntu-noble | 2026-06-02 08:26:03.158125 | ubuntu-noble | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 08:26:03.397995 | ubuntu-noble | writing pytest debug information to pytestdebug.log 2026-06-02 08:26:03.410776 | ubuntu-noble | ============================= test session starts ============================== 2026-06-02 08:26:03.411350 | ubuntu-noble | platform linux -- Python 3.12.3, pytest-8.4.2, pluggy-1.6.0 -- /home/zuul/venv/bin/python3 2026-06-02 08:26:03.411768 | ubuntu-noble | using: pytest-8.4.2 2026-06-02 08:26:03.412243 | ubuntu-noble | registered third-party plugins: 2026-06-02 08:26:03.412634 | ubuntu-noble | pytest-testinfra-10.2.2 at /home/zuul/venv/lib/python3.12/site-packages/testinfra/plugin.py 2026-06-02 08:26:03.413010 | ubuntu-noble | rootdir: /home/zuul 2026-06-02 08:26:03.413426 | ubuntu-noble | plugins: testinfra-10.2.2 2026-06-02 08:26:03.282847 | debian-bookworm | INFO [delegated > verify] Executing 2026-06-02 08:26:03.284547 | debian-bookworm | INFO [delegated > verify] Executing Testinfra tests found in /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests/... 2026-06-02 08:26:03.285645 | debian-bookworm | DEBUG ANSIBLE ENVIRONMENT: 2026-06-02 08:26:03.285671 | debian-bookworm | ANSIBLE_COLLECTIONS_PATH: /home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections 2026-06-02 08:26:03.285689 | debian-bookworm | ANSIBLE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg 2026-06-02 08:26:03.285705 | debian-bookworm | ANSIBLE_LIBRARY: ../../plugins 2026-06-02 08:26:03.285720 | debian-bookworm | ANSIBLE_PYTHON_INTERPRETER: /home/zuul/venv/bin/python 2026-06-02 08:26:03.285735 | debian-bookworm | ANSIBLE_ROLE: auditd 2026-06-02 08:26:03.285749 | debian-bookworm | ANSIBLE_ROLES_PATH: ../../roles 2026-06-02 08:26:03.285763 | debian-bookworm | ANSIBLE_VERBOSITY: 1 2026-06-02 08:26:03.285777 | debian-bookworm | 2026-06-02 08:26:03.285801 | debian-bookworm | DEBUG MOLECULE ENVIRONMENT: 2026-06-02 08:26:03.285816 | debian-bookworm | MOLECULE_DEBUG: True 2026-06-02 08:26:03.285830 | debian-bookworm | MOLECULE_DEPENDENCY_NAME: galaxy 2026-06-02 08:26:03.285845 | debian-bookworm | MOLECULE_DRIVER_NAME: default 2026-06-02 08:26:03.285859 | debian-bookworm | MOLECULE_ENV_FILE: /home/zuul/src/github.com/osism/ansible-collection-services/.env.yml 2026-06-02 08:26:03.285874 | debian-bookworm | MOLECULE_EPHEMERAL_DIRECTORY: /home/zuul/.ansible/tmp/molecule.oWZD.delegated 2026-06-02 08:26:03.285889 | debian-bookworm | MOLECULE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml 2026-06-02 08:26:03.285903 | debian-bookworm | MOLECULE_INSTANCE_CONFIG: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml 2026-06-02 08:26:03.285917 | debian-bookworm | MOLECULE_INVENTORY_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml 2026-06-02 08:26:03.285932 | debian-bookworm | MOLECULE_PROJECT_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services 2026-06-02 08:26:03.285947 | debian-bookworm | MOLECULE_PROVISIONER_NAME: ansible 2026-06-02 08:26:03.285961 | debian-bookworm | MOLECULE_SCENARIO_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated 2026-06-02 08:26:03.285976 | debian-bookworm | MOLECULE_SCENARIO_NAME: delegated 2026-06-02 08:26:03.285990 | debian-bookworm | MOLECULE_STATE_FILE: /home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml 2026-06-02 08:26:03.286005 | debian-bookworm | MOLECULE_VERIFIER_NAME: testinfra 2026-06-02 08:26:03.286021 | debian-bookworm | MOLECULE_VERIFIER_TEST_DIRECTORY: /home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 08:26:03.286036 | debian-bookworm | 2026-06-02 08:26:03.286071 | debian-bookworm | DEBUG SHELL REPLAY: ANSIBLE_COLLECTIONS_PATH=/home/zuul/venv/.ansible/collections:/home/zuul/.ansible/collections ANSIBLE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/ansible.cfg ANSIBLE_LIBRARY=../../plugins ANSIBLE_PYTHON_INTERPRETER=/home/zuul/venv/bin/python ANSIBLE_ROLE=auditd ANSIBLE_ROLES_PATH=../../roles ANSIBLE_VERBOSITY=1 MOLECULE_DEBUG=True MOLECULE_DEPENDENCY_NAME=galaxy MOLECULE_DRIVER_NAME=default MOLECULE_ENV_FILE=/home/zuul/src/github.com/osism/ansible-collection-services/.env.yml MOLECULE_EPHEMERAL_DIRECTORY=/home/zuul/.ansible/tmp/molecule.oWZD.delegated MOLECULE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/molecule.yml MOLECULE_INSTANCE_CONFIG=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/instance_config.yml MOLECULE_INVENTORY_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/inventory/ansible_inventory.yml MOLECULE_PROJECT_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services MOLECULE_PROVISIONER_NAME=ansible MOLECULE_SCENARIO_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated MOLECULE_SCENARIO_NAME=delegated MOLECULE_STATE_FILE=/home/zuul/.ansible/tmp/molecule.oWZD.delegated/state.yml MOLECULE_VERIFIER_NAME=testinfra MOLECULE_VERIFIER_TEST_DIRECTORY=/home/zuul/src/github.com/osism/ansible-collection-services/molecule/delegated/tests 2026-06-02 08:26:03.550218 | debian-bookworm | writing pytest debug information to pytestdebug.log 2026-06-02 08:26:03.566664 | debian-bookworm | ============================= test session starts ============================== 2026-06-02 08:26:03.567137 | debian-bookworm | platform linux -- Python 3.11.2, pytest-8.4.2, pluggy-1.6.0 -- /home/zuul/venv/bin/python3 2026-06-02 08:26:03.567633 | debian-bookworm | using: pytest-8.4.2 2026-06-02 08:26:03.568087 | debian-bookworm | registered third-party plugins: 2026-06-02 08:26:03.569078 | debian-bookworm | pytest-testinfra-10.2.2 at /home/zuul/venv/lib/python3.11/site-packages/testinfra/plugin.py 2026-06-02 08:26:03.569628 | debian-bookworm | rootdir: /home/zuul 2026-06-02 08:26:03.570147 | debian-bookworm | plugins: testinfra-10.2.2 2026-06-02 08:26:04.385985 | ubuntu-noble | collecting ... collected 6 items 2026-06-02 08:26:04.386032 | ubuntu-noble | 2026-06-02 08:26:04.600171 | debian-bookworm | collecting ... collected 6 items 2026-06-02 08:26:04.600281 | debian-bookworm | 2026-06-02 08:26:08.424514 | ubuntu-noble | tests/auditd.py::test_pkg[ansible://molecule-auditd] PASSED [ 16%] 2026-06-02 08:26:08.459880 | ubuntu-noble | tests/auditd.py::test_conffile[ansible://molecule-auditd] PASSED [ 33%] 2026-06-02 08:26:08.759373 | debian-bookworm | tests/auditd.py::test_pkg[ansible://molecule-auditd] PASSED [ 16%] 2026-06-02 08:26:08.795503 | debian-bookworm | tests/auditd.py::test_conffile[ansible://molecule-auditd] PASSED [ 33%] 2026-06-02 08:26:10.825033 | ubuntu-noble | tests/auditd.py::test_adjustment[ansible://molecule-auditd] PASSED [ 50%] 2026-06-02 08:26:11.230330 | debian-bookworm | tests/auditd.py::test_adjustment[ansible://molecule-auditd] PASSED [ 50%] 2026-06-02 08:26:15.746772 | ubuntu-noble | tests/auditd.py::test_rulefiles[ansible://molecule-auditd] PASSED [ 66%] 2026-06-02 08:26:16.164757 | debian-bookworm | tests/auditd.py::test_rulefiles[ansible://molecule-auditd] PASSED [ 66%] 2026-06-02 08:26:16.853458 | ubuntu-noble | tests/auditd.py::test_srv[ansible://molecule-auditd] PASSED [ 83%] 2026-06-02 08:26:16.921489 | ubuntu-noble | wrote pytest debug information to pytestdebug.log 2026-06-02 08:26:16.922964 | ubuntu-noble | tests/auditd.py::test_function[ansible://molecule-auditd] PASSED [100%] 2026-06-02 08:26:16.922986 | ubuntu-noble | 2026-06-02 08:26:16.922993 | ubuntu-noble | ============================== 6 passed in 13.48s ============================== 2026-06-02 08:26:16.952902 | ubuntu-noble | INFO [delegated > verify] Verifier completed successfully. 2026-06-02 08:26:16.953256 | ubuntu-noble | INFO [delegated > verify] Executed: Successful 2026-06-02 08:26:16.954019 | ubuntu-noble | INFO Molecule executed 1 scenario (1 successful) 2026-06-02 08:26:17.434345 | debian-bookworm | tests/auditd.py::test_srv[ansible://molecule-auditd] PASSED [ 83%] 2026-06-02 08:26:17.519273 | debian-bookworm | wrote pytest debug information to pytestdebug.log 2026-06-02 08:26:17.519851 | debian-bookworm | tests/auditd.py::test_function[ansible://molecule-auditd] PASSED [100%] 2026-06-02 08:26:17.519960 | debian-bookworm | 2026-06-02 08:26:17.520097 | debian-bookworm | ============================== 6 passed in 13.91s ============================== 2026-06-02 08:26:17.564433 | debian-bookworm | INFO [delegated > verify] Verifier completed successfully. 2026-06-02 08:26:17.564494 | debian-bookworm | INFO [delegated > verify] Executed: Successful 2026-06-02 08:26:17.564506 | debian-bookworm | INFO Molecule executed 1 scenario (1 successful) 2026-06-02 08:26:17.769417 | ubuntu-noble | ok: Runtime: 0:00:15.950572 2026-06-02 08:26:17.779347 | debian-bookworm | ok: Runtime: 0:00:16.632189 2026-06-02 08:26:17.787192 | 2026-06-02 08:26:17.787357 | TASK [ansible-molecule : Run molecule destroy action with scenario delegated] 2026-06-02 08:26:18.349455 | debian-bookworm | skipping: Conditional result was False 2026-06-02 08:26:18.350429 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 08:26:18.368684 | 2026-06-02 08:26:18.368808 | PLAY RECAP 2026-06-02 08:26:18.368872 | debian-bookworm | ok: 17 changed: 12 unreachable: 0 failed: 0 skipped: 16 rescued: 0 ignored: 0 2026-06-02 08:26:18.368907 | ubuntu-noble | ok: 17 changed: 12 unreachable: 0 failed: 0 skipped: 16 rescued: 0 ignored: 0 2026-06-02 08:26:18.368930 | 2026-06-02 08:26:18.558767 | RUN END RESULT_NORMAL: [untrusted : github.com/osism/zuul-jobs/playbooks/ansible-molecule/run.yaml@main] 2026-06-02 08:26:18.561816 | POST-RUN START: [untrusted : github.com/osism/ansible-collection-services/playbooks/collect-container-logs.yml@main] 2026-06-02 08:26:19.384383 | 2026-06-02 08:26:19.384566 | PLAY [Collect container logs] 2026-06-02 08:26:19.400003 | 2026-06-02 08:26:19.400144 | TASK [Create container log directory] 2026-06-02 08:26:20.034763 | debian-bookworm | changed 2026-06-02 08:26:20.067153 | ubuntu-noble | changed 2026-06-02 08:26:20.075392 | 2026-06-02 08:26:20.075544 | TASK [Capture container overview] 2026-06-02 08:26:20.650306 | ubuntu-noble | ok: Runtime: 0:00:00.006654 2026-06-02 08:26:20.656384 | debian-bookworm | ok: Runtime: 0:00:00.011913 2026-06-02 08:26:20.662271 | 2026-06-02 08:26:20.662378 | TASK [List containers] 2026-06-02 08:26:21.222984 | debian-bookworm | ok: ERROR (ignored) 2026-06-02 08:26:21.223644 | debian-bookworm | { 2026-06-02 08:26:21.223734 | debian-bookworm | "failed_when_result": false, 2026-06-02 08:26:21.223789 | debian-bookworm | "msg": "[Errno 2] No such file or directory: b'docker'", 2026-06-02 08:26:21.223865 | debian-bookworm | "rc": 2 2026-06-02 08:26:21.223911 | debian-bookworm | } 2026-06-02 08:26:21.235071 | ubuntu-noble | ok: ERROR (ignored) 2026-06-02 08:26:21.235371 | ubuntu-noble | { 2026-06-02 08:26:21.235435 | ubuntu-noble | "failed_when_result": false, 2026-06-02 08:26:21.235477 | ubuntu-noble | "msg": "[Errno 2] No such file or directory: b'docker'", 2026-06-02 08:26:21.235514 | ubuntu-noble | "rc": 2 2026-06-02 08:26:21.235547 | ubuntu-noble | } 2026-06-02 08:26:21.246347 | 2026-06-02 08:26:21.246544 | LOOP [Save per-container logs] 2026-06-02 08:26:21.341971 | 2026-06-02 08:26:21.342483 | LOOP [Save per-container inspect (state and health)] 2026-06-02 08:26:21.415164 | 2026-06-02 08:26:21.415500 | TASK [Capture netbox systemd unit journal] 2026-06-02 08:26:21.997966 | debian-bookworm | ok: Runtime: 0:00:00.017799 2026-06-02 08:26:22.003540 | ubuntu-noble | ok: Runtime: 0:00:00.016508 2026-06-02 08:26:22.008915 | 2026-06-02 08:26:22.009036 | TASK [Capture netbox service state] 2026-06-02 08:26:22.615839 | debian-bookworm | ok: Runtime: 0:00:00.031569 2026-06-02 08:26:22.630728 | ubuntu-noble | ok: Runtime: 0:00:00.034368 2026-06-02 08:26:22.640880 | 2026-06-02 08:26:22.641049 | TASK [Capture docker compose version] 2026-06-02 08:26:23.226410 | debian-bookworm | ok: Runtime: 0:00:00.008143 2026-06-02 08:26:23.232584 | ubuntu-noble | ok: Runtime: 0:00:00.011056 2026-06-02 08:26:23.237639 | 2026-06-02 08:26:23.237749 | TASK [Open container log permissions] 2026-06-02 08:26:23.555962 | debian-bookworm | changed 2026-06-02 08:26:23.573774 | ubuntu-noble | changed 2026-06-02 08:26:23.575627 | 2026-06-02 08:26:23.575717 | PLAY RECAP 2026-06-02 08:26:23.575771 | debian-bookworm | ok: 7 changed: 2 unreachable: 0 failed: 0 skipped: 2 rescued: 0 ignored: 0 2026-06-02 08:26:23.575804 | ubuntu-noble | ok: 7 changed: 2 unreachable: 0 failed: 0 skipped: 2 rescued: 0 ignored: 0 2026-06-02 08:26:23.575825 | 2026-06-02 08:26:23.735534 | POST-RUN END RESULT_NORMAL: [untrusted : github.com/osism/ansible-collection-services/playbooks/collect-container-logs.yml@main] 2026-06-02 08:26:23.736982 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post-fetch.yaml@main] 2026-06-02 08:26:24.631803 | 2026-06-02 08:26:24.631977 | PLAY [Base post-fetch] 2026-06-02 08:26:24.647465 | 2026-06-02 08:26:24.647739 | TASK [fetch-output : Set log path for multiple nodes] 2026-06-02 08:26:24.741770 | debian-bookworm | ok 2026-06-02 08:26:24.746681 | ubuntu-noble | ok 2026-06-02 08:26:24.751805 | 2026-06-02 08:26:24.751945 | TASK [fetch-output : Set log path for single node] 2026-06-02 08:26:24.783890 | debian-bookworm | skipping: Conditional result was False 2026-06-02 08:26:24.794969 | ubuntu-noble | skipping: Conditional result was False 2026-06-02 08:26:24.802593 | 2026-06-02 08:26:24.802722 | LOOP [fetch-output : Ensure local output dirs] 2026-06-02 08:26:25.339167 | ubuntu-noble -> localhost | changed: "/var/lib/zuul/builds/dec99bfba93846f596ecb5720898f196/work/logs/ubuntu-noble" 2026-06-02 08:26:25.372118 | debian-bookworm -> localhost | changed: "/var/lib/zuul/builds/dec99bfba93846f596ecb5720898f196/work/logs/debian-bookworm" 2026-06-02 08:26:25.668511 | ubuntu-noble -> localhost | changed: "/var/lib/zuul/builds/dec99bfba93846f596ecb5720898f196/work/artifacts" 2026-06-02 08:26:25.724631 | debian-bookworm -> localhost | ok: "/var/lib/zuul/builds/dec99bfba93846f596ecb5720898f196/work/artifacts" 2026-06-02 08:26:25.970495 | ubuntu-noble -> localhost | changed: "/var/lib/zuul/builds/dec99bfba93846f596ecb5720898f196/work/docs" 2026-06-02 08:26:26.027470 | debian-bookworm -> localhost | ok: "/var/lib/zuul/builds/dec99bfba93846f596ecb5720898f196/work/docs" 2026-06-02 08:26:26.027618 | debian-bookworm -> localhost | changed: All items complete 2026-06-02 08:26:26.027654 | 2026-06-02 08:26:26.052918 | 2026-06-02 08:26:26.053089 | LOOP [fetch-output : Collect logs, artifacts and docs] 2026-06-02 08:26:26.810499 | ubuntu-noble | changed: 2026-06-02 08:26:26.810791 | ubuntu-noble | .d..t...... ./ 2026-06-02 08:26:26.811422 | ubuntu-noble | >f+++++++++ sudo-debug.txt 2026-06-02 08:26:26.811525 | ubuntu-noble | >f+++++++++ sudo-strace.log 2026-06-02 08:26:26.811554 | ubuntu-noble | >f+++++++++ sudo-strace.log.time 2026-06-02 08:26:26.811579 | ubuntu-noble | cd+++++++++ container-logs/ 2026-06-02 08:26:26.811600 | ubuntu-noble | >f+++++++++ container-logs/_compose-version.txt 2026-06-02 08:26:26.811621 | ubuntu-noble | >f+++++++++ container-logs/_overview.txt 2026-06-02 08:26:26.811642 | ubuntu-noble | >f+++++++++ container-logs/netbox.service.journal.txt 2026-06-02 08:26:26.811663 | ubuntu-noble | >f+++++++++ container-logs/netbox.service.status.txt 2026-06-02 08:26:26.889276 | debian-bookworm | changed: 2026-06-02 08:26:26.889409 | debian-bookworm | .d..t...... ./ 2026-06-02 08:26:26.889444 | debian-bookworm | >f+++++++++ sudo-debug.txt 2026-06-02 08:26:26.889471 | debian-bookworm | >f+++++++++ sudo-strace.log 2026-06-02 08:26:26.889493 | debian-bookworm | >f+++++++++ sudo-strace.log.time 2026-06-02 08:26:26.889514 | debian-bookworm | cd+++++++++ container-logs/ 2026-06-02 08:26:26.889534 | debian-bookworm | >f+++++++++ container-logs/_compose-version.txt 2026-06-02 08:26:26.889553 | debian-bookworm | >f+++++++++ container-logs/_overview.txt 2026-06-02 08:26:26.889572 | debian-bookworm | >f+++++++++ container-logs/netbox.service.journal.txt 2026-06-02 08:26:26.889592 | debian-bookworm | >f+++++++++ container-logs/netbox.service.status.txt 2026-06-02 08:26:27.419482 | ubuntu-noble | changed: .d..t...... ./ 2026-06-02 08:26:27.471718 | debian-bookworm | ok 2026-06-02 08:26:28.001976 | ubuntu-noble | changed: .d..t...... ./ 2026-06-02 08:26:28.102229 | debian-bookworm | ok 2026-06-02 08:26:28.102379 | debian-bookworm | changed: All items complete 2026-06-02 08:26:28.102414 | 2026-06-02 08:26:28.144024 | 2026-06-02 08:26:28.144181 | LOOP [merge-output-to-logs : Move artifacts and docs to logs dir] 2026-06-02 08:26:28.731721 | debian-bookworm -> localhost | ok: Item: artifacts Runtime: 0:00:00.008858 2026-06-02 08:26:29.029148 | debian-bookworm -> localhost | ok: Item: docs Runtime: 0:00:00.005713 2026-06-02 08:26:29.052688 | 2026-06-02 08:26:29.052814 | PLAY RECAP 2026-06-02 08:26:29.052871 | debian-bookworm | ok: 4 changed: 3 unreachable: 0 failed: 0 skipped: 1 rescued: 0 ignored: 0 2026-06-02 08:26:29.052904 | ubuntu-noble | ok: 3 changed: 2 unreachable: 0 failed: 0 skipped: 1 rescued: 0 ignored: 0 2026-06-02 08:26:29.052927 | 2026-06-02 08:26:29.199420 | POST-RUN END RESULT_NORMAL: [trusted : github.com/osism/zuul-config/playbooks/base/post-fetch.yaml@main] 2026-06-02 08:26:29.202941 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post.yaml@main] 2026-06-02 08:26:30.057564 | 2026-06-02 08:26:30.057753 | PLAY [Base post] 2026-06-02 08:26:30.071718 | 2026-06-02 08:26:30.071876 | TASK [remove-build-sshkey : Remove the build SSH key from all nodes] 2026-06-02 08:26:30.911423 | ubuntu-noble | changed 2026-06-02 08:26:30.919660 | debian-bookworm | changed 2026-06-02 08:26:30.929761 | 2026-06-02 08:26:30.929862 | PLAY RECAP 2026-06-02 08:26:30.929949 | debian-bookworm | ok: 1 changed: 1 unreachable: 0 failed: 0 skipped: 0 rescued: 0 ignored: 0 2026-06-02 08:26:30.929989 | ubuntu-noble | ok: 1 changed: 1 unreachable: 0 failed: 0 skipped: 0 rescued: 0 ignored: 0 2026-06-02 08:26:30.930015 | 2026-06-02 08:26:31.069125 | POST-RUN END RESULT_NORMAL: [trusted : github.com/osism/zuul-config/playbooks/base/post.yaml@main] 2026-06-02 08:26:31.072255 | POST-RUN START: [trusted : github.com/osism/zuul-config/playbooks/base/post-logs.yaml@main] 2026-06-02 08:26:31.940493 | 2026-06-02 08:26:31.940682 | PLAY [Base post-logs] 2026-06-02 08:26:31.951745 | 2026-06-02 08:26:31.951886 | TASK [generate-zuul-manifest : Generate Zuul manifest] 2026-06-02 08:26:32.465230 | localhost | changed 2026-06-02 08:26:32.486005 | 2026-06-02 08:26:32.486180 | TASK [generate-zuul-manifest : Return Zuul manifest URL to Zuul] 2026-06-02 08:26:32.513213 | localhost | ok 2026-06-02 08:26:32.518931 | 2026-06-02 08:26:32.519081 | TASK [Set zuul-log-path fact] 2026-06-02 08:26:32.535819 | localhost | ok 2026-06-02 08:26:32.547273 | 2026-06-02 08:26:32.547406 | TASK [set-zuul-log-path-fact : Set log path for a build] 2026-06-02 08:26:32.573776 | localhost | ok 2026-06-02 08:26:32.578567 | 2026-06-02 08:26:32.578702 | TASK [upload-logs : Create log directories] 2026-06-02 08:26:33.113052 | localhost | changed 2026-06-02 08:26:33.120749 | 2026-06-02 08:26:33.120949 | TASK [upload-logs : Ensure logs are readable before uploading] 2026-06-02 08:26:33.687149 | localhost -> localhost | ok: Runtime: 0:00:00.007571 2026-06-02 08:26:33.691724 | 2026-06-02 08:26:33.691842 | TASK [upload-logs : Upload logs to log server] 2026-06-02 08:26:34.289029 | localhost | Output suppressed because no_log was given 2026-06-02 08:26:34.291863 | 2026-06-02 08:26:34.292430 | LOOP [upload-logs : Compress console log and json output] 2026-06-02 08:26:34.350737 | localhost | skipping: Conditional result was False 2026-06-02 08:26:34.356365 | localhost | skipping: Conditional result was False 2026-06-02 08:26:34.365351 | 2026-06-02 08:26:34.365624 | LOOP [upload-logs : Upload compressed console log and json output] 2026-06-02 08:26:34.424896 | localhost | skipping: Conditional result was False 2026-06-02 08:26:34.425553 | 2026-06-02 08:26:34.429357 | localhost | skipping: Conditional result was False 2026-06-02 08:26:34.443381 | 2026-06-02 08:26:34.443644 | LOOP [upload-logs : Upload console log and json output]