Nov 27 15:54:45 prd-ubuntu2004-docker-8c-8g-15903 passwd[768]: password for 'ubuntu' changed by 'root' Nov 27 15:54:45 prd-ubuntu2004-docker-8c-8g-15903 systemd-logind[818]: New seat seat0. Nov 27 15:54:45 prd-ubuntu2004-docker-8c-8g-15903 systemd-logind[818]: Watching system buttons on /dev/input/event0 (Power Button) Nov 27 15:54:45 prd-ubuntu2004-docker-8c-8g-15903 systemd-logind[818]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Nov 27 15:54:46 prd-ubuntu2004-docker-8c-8g-15903 sshd[918]: Server listening on 0.0.0.0 port 22. Nov 27 15:54:46 prd-ubuntu2004-docker-8c-8g-15903 sshd[918]: Server listening on :: port 22. Nov 27 15:54:46 prd-ubuntu2004-docker-8c-8g-15903 gdm-launch-environment]: pam_unix(gdm-launch-environment:session): session opened for user gdm by (uid=0) Nov 27 15:54:46 prd-ubuntu2004-docker-8c-8g-15903 systemd-logind[818]: New session c1 of user gdm. Nov 27 15:54:46 prd-ubuntu2004-docker-8c-8g-15903 systemd: pam_unix(systemd-user:session): session opened for user gdm by (uid=0) Nov 27 15:54:49 prd-ubuntu2004-docker-8c-8g-15903 polkitd(authority=local): Registered Authentication Agent for unix-session:c1 (system bus name :1.30 [/usr/bin/gnome-shell], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale C.UTF-8) Nov 27 15:54:51 prd-ubuntu2004-docker-8c-8g-15903 sshd[1474]: error: kex_exchange_identification: Connection closed by remote host Nov 27 15:54:53 prd-ubuntu2004-docker-8c-8g-15903 sshd[1475]: Invalid user jenkins from 10.30.104.4 port 36918 Nov 27 15:54:53 prd-ubuntu2004-docker-8c-8g-15903 sshd[1475]: Received disconnect from 10.30.104.4 port 36918:11: Closed due to user request. [preauth] Nov 27 15:54:53 prd-ubuntu2004-docker-8c-8g-15903 sshd[1475]: Disconnected from invalid user jenkins 10.30.104.4 port 36918 [preauth] Nov 27 15:54:55 prd-ubuntu2004-docker-8c-8g-15903 sshd[1478]: Invalid user jenkins from 10.30.104.4 port 36920 Nov 27 15:54:55 prd-ubuntu2004-docker-8c-8g-15903 sshd[1478]: Received disconnect from 10.30.104.4 port 36920:11: Closed due to user request. [preauth] Nov 27 15:54:55 prd-ubuntu2004-docker-8c-8g-15903 sshd[1478]: Disconnected from invalid user jenkins 10.30.104.4 port 36920 [preauth] Nov 27 15:54:57 prd-ubuntu2004-docker-8c-8g-15903 sshd[1480]: Invalid user jenkins from 10.30.104.4 port 36924 Nov 27 15:54:57 prd-ubuntu2004-docker-8c-8g-15903 sshd[1480]: Received disconnect from 10.30.104.4 port 36924:11: Closed due to user request. [preauth] Nov 27 15:54:57 prd-ubuntu2004-docker-8c-8g-15903 sshd[1480]: Disconnected from invalid user jenkins 10.30.104.4 port 36924 [preauth] Nov 27 15:54:59 prd-ubuntu2004-docker-8c-8g-15903 sshd[1482]: Invalid user jenkins from 10.30.104.4 port 36926 Nov 27 15:54:59 prd-ubuntu2004-docker-8c-8g-15903 sshd[1482]: Received disconnect from 10.30.104.4 port 36926:11: Closed due to user request. [preauth] Nov 27 15:54:59 prd-ubuntu2004-docker-8c-8g-15903 sshd[1482]: Disconnected from invalid user jenkins 10.30.104.4 port 36926 [preauth] Nov 27 15:55:01 prd-ubuntu2004-docker-8c-8g-15903 CRON[1484]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 27 15:55:01 prd-ubuntu2004-docker-8c-8g-15903 CRON[1484]: pam_unix(cron:session): session closed for user root Nov 27 15:55:01 prd-ubuntu2004-docker-8c-8g-15903 sshd[1495]: Invalid user jenkins from 10.30.104.4 port 36934 Nov 27 15:55:01 prd-ubuntu2004-docker-8c-8g-15903 sshd[1495]: Received disconnect from 10.30.104.4 port 36934:11: Closed due to user request. [preauth] Nov 27 15:55:01 prd-ubuntu2004-docker-8c-8g-15903 sshd[1495]: Disconnected from invalid user jenkins 10.30.104.4 port 36934 [preauth] Nov 27 15:55:03 prd-ubuntu2004-docker-8c-8g-15903 sshd[1507]: Invalid user jenkins from 10.30.104.4 port 36954 Nov 27 15:55:04 prd-ubuntu2004-docker-8c-8g-15903 sshd[1507]: Received disconnect from 10.30.104.4 port 36954:11: Closed due to user request. [preauth] Nov 27 15:55:04 prd-ubuntu2004-docker-8c-8g-15903 sshd[1507]: Disconnected from invalid user jenkins 10.30.104.4 port 36954 [preauth] Nov 27 15:55:06 prd-ubuntu2004-docker-8c-8g-15903 sshd[1701]: Invalid user jenkins from 10.30.104.4 port 37022 Nov 27 15:55:07 prd-ubuntu2004-docker-8c-8g-15903 sshd[1701]: Received disconnect from 10.30.104.4 port 37022:11: Closed due to user request. [preauth] Nov 27 15:55:07 prd-ubuntu2004-docker-8c-8g-15903 sshd[1701]: Disconnected from invalid user jenkins 10.30.104.4 port 37022 [preauth] Nov 27 15:55:09 prd-ubuntu2004-docker-8c-8g-15903 sshd[1705]: Invalid user jenkins from 10.30.104.4 port 37024 Nov 27 15:55:09 prd-ubuntu2004-docker-8c-8g-15903 sshd[1705]: Received disconnect from 10.30.104.4 port 37024:11: Closed due to user request. [preauth] Nov 27 15:55:09 prd-ubuntu2004-docker-8c-8g-15903 sshd[1705]: Disconnected from invalid user jenkins 10.30.104.4 port 37024 [preauth] Nov 27 15:55:10 prd-ubuntu2004-docker-8c-8g-15903 useradd[1726]: new group: name=jenkins, GID=1001 Nov 27 15:55:10 prd-ubuntu2004-docker-8c-8g-15903 useradd[1726]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Nov 27 15:55:10 prd-ubuntu2004-docker-8c-8g-15903 usermod[1736]: add 'jenkins' to group 'docker' Nov 27 15:55:10 prd-ubuntu2004-docker-8c-8g-15903 usermod[1736]: add 'jenkins' to shadow group 'docker' Nov 27 15:55:11 prd-ubuntu2004-docker-8c-8g-15903 sshd[1789]: Accepted publickey for jenkins from 10.30.104.4 port 37026 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Nov 27 15:55:11 prd-ubuntu2004-docker-8c-8g-15903 sshd[1789]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Nov 27 15:55:11 prd-ubuntu2004-docker-8c-8g-15903 systemd-logind[818]: New session 3 of user jenkins. Nov 27 15:55:11 prd-ubuntu2004-docker-8c-8g-15903 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Nov 27 15:55:12 prd-ubuntu2004-docker-8c-8g-15903 dbus-daemon[783]: [system] Failed to activate service 'org.bluez': timed out (service_start_timeout=25000ms) Nov 27 15:56:01 prd-ubuntu2004-docker-8c-8g-15903 CRON[2438]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 27 15:56:01 prd-ubuntu2004-docker-8c-8g-15903 CRON[2438]: pam_unix(cron:session): session closed for user root Nov 27 15:56:19 prd-ubuntu2004-docker-8c-8g-15903 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/policy-opa-pdp-master-verify-golang ; USER=root ; COMMAND=/usr/bin/rm -rf /usr/local/go Nov 27 15:56:19 prd-ubuntu2004-docker-8c-8g-15903 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 27 15:56:20 prd-ubuntu2004-docker-8c-8g-15903 sudo: pam_unix(sudo:session): session closed for user root Nov 27 15:56:20 prd-ubuntu2004-docker-8c-8g-15903 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/policy-opa-pdp-master-verify-golang ; USER=root ; COMMAND=/usr/bin/tar -C /usr/local -xzf go.tar.gz Nov 27 15:56:20 prd-ubuntu2004-docker-8c-8g-15903 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 27 15:56:21 prd-ubuntu2004-docker-8c-8g-15903 sudo: pam_unix(sudo:session): session closed for user root Nov 27 15:57:01 prd-ubuntu2004-docker-8c-8g-15903 CRON[9541]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 27 15:57:01 prd-ubuntu2004-docker-8c-8g-15903 CRON[9541]: pam_unix(cron:session): session closed for user root Nov 27 15:58:01 prd-ubuntu2004-docker-8c-8g-15903 CRON[14268]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 27 15:58:01 prd-ubuntu2004-docker-8c-8g-15903 CRON[14268]: pam_unix(cron:session): session closed for user root Nov 27 15:58:11 prd-ubuntu2004-docker-8c-8g-15903 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/policy-opa-pdp-master-verify-golang ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Nov 27 15:58:11 prd-ubuntu2004-docker-8c-8g-15903 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)