Mar 11 09:53:27 prd-ubuntu2204-docker-8c-8g-1126 passwd[739]: password for 'ubuntu' changed by 'root' Mar 11 09:53:27 prd-ubuntu2204-docker-8c-8g-1126 systemd-logind[774]: New seat seat0. Mar 11 09:53:27 prd-ubuntu2204-docker-8c-8g-1126 sshd[808]: Server listening on 0.0.0.0 port 22. Mar 11 09:53:27 prd-ubuntu2204-docker-8c-8g-1126 sshd[808]: Server listening on :: port 22. Mar 11 09:53:27 prd-ubuntu2204-docker-8c-8g-1126 systemd-logind[774]: Watching system buttons on /dev/input/event0 (Power Button) Mar 11 09:53:27 prd-ubuntu2204-docker-8c-8g-1126 systemd-logind[774]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Mar 11 09:53:30 prd-ubuntu2204-docker-8c-8g-1126 sshd[960]: error: kex_exchange_identification: Connection closed by remote host Mar 11 09:53:30 prd-ubuntu2204-docker-8c-8g-1126 sshd[960]: Connection closed by 10.30.104.4 port 50464 Mar 11 09:53:30 prd-ubuntu2204-docker-8c-8g-1126 sshd[988]: Invalid user jenkins from 10.30.104.4 port 50466 Mar 11 09:53:30 prd-ubuntu2204-docker-8c-8g-1126 sshd[988]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Mar 11 09:53:30 prd-ubuntu2204-docker-8c-8g-1126 sshd[988]: Received disconnect from 10.30.104.4 port 50466:11: Closed due to user request. [preauth] Mar 11 09:53:30 prd-ubuntu2204-docker-8c-8g-1126 sshd[988]: Disconnected from invalid user jenkins 10.30.104.4 port 50466 [preauth] Mar 11 09:53:32 prd-ubuntu2204-docker-8c-8g-1126 sshd[1029]: Invalid user jenkins from 10.30.104.4 port 50468 Mar 11 09:53:32 prd-ubuntu2204-docker-8c-8g-1126 sshd[1029]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Mar 11 09:53:32 prd-ubuntu2204-docker-8c-8g-1126 sshd[1029]: Received disconnect from 10.30.104.4 port 50468:11: Closed due to user request. [preauth] Mar 11 09:53:32 prd-ubuntu2204-docker-8c-8g-1126 sshd[1029]: Disconnected from invalid user jenkins 10.30.104.4 port 50468 [preauth] Mar 11 09:53:34 prd-ubuntu2204-docker-8c-8g-1126 sshd[1038]: Invalid user jenkins from 10.30.104.4 port 50470 Mar 11 09:53:35 prd-ubuntu2204-docker-8c-8g-1126 sshd[1038]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Mar 11 09:53:35 prd-ubuntu2204-docker-8c-8g-1126 sshd[1038]: Received disconnect from 10.30.104.4 port 50470:11: Closed due to user request. [preauth] Mar 11 09:53:35 prd-ubuntu2204-docker-8c-8g-1126 sshd[1038]: Disconnected from invalid user jenkins 10.30.104.4 port 50470 [preauth] Mar 11 09:53:37 prd-ubuntu2204-docker-8c-8g-1126 sshd[1040]: Invalid user jenkins from 10.30.104.4 port 50472 Mar 11 09:53:37 prd-ubuntu2204-docker-8c-8g-1126 sshd[1040]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Mar 11 09:53:37 prd-ubuntu2204-docker-8c-8g-1126 sshd[1040]: Received disconnect from 10.30.104.4 port 50472:11: Closed due to user request. [preauth] Mar 11 09:53:37 prd-ubuntu2204-docker-8c-8g-1126 sshd[1040]: Disconnected from invalid user jenkins 10.30.104.4 port 50472 [preauth] Mar 11 09:53:39 prd-ubuntu2204-docker-8c-8g-1126 sshd[1042]: Invalid user jenkins from 10.30.104.4 port 50474 Mar 11 09:53:39 prd-ubuntu2204-docker-8c-8g-1126 sshd[1042]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Mar 11 09:53:39 prd-ubuntu2204-docker-8c-8g-1126 sshd[1042]: Received disconnect from 10.30.104.4 port 50474:11: Closed due to user request. [preauth] Mar 11 09:53:39 prd-ubuntu2204-docker-8c-8g-1126 sshd[1042]: Disconnected from invalid user jenkins 10.30.104.4 port 50474 [preauth] Mar 11 09:53:41 prd-ubuntu2204-docker-8c-8g-1126 sshd[1044]: Invalid user jenkins from 10.30.104.4 port 50478 Mar 11 09:53:41 prd-ubuntu2204-docker-8c-8g-1126 sshd[1044]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Mar 11 09:53:41 prd-ubuntu2204-docker-8c-8g-1126 sshd[1044]: Received disconnect from 10.30.104.4 port 50478:11: Closed due to user request. [preauth] Mar 11 09:53:41 prd-ubuntu2204-docker-8c-8g-1126 sshd[1044]: Disconnected from invalid user jenkins 10.30.104.4 port 50478 [preauth] Mar 11 09:53:43 prd-ubuntu2204-docker-8c-8g-1126 sshd[1046]: Invalid user jenkins from 10.30.104.4 port 50480 Mar 11 09:53:43 prd-ubuntu2204-docker-8c-8g-1126 sshd[1046]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Mar 11 09:53:43 prd-ubuntu2204-docker-8c-8g-1126 sshd[1046]: Received disconnect from 10.30.104.4 port 50480:11: Closed due to user request. [preauth] Mar 11 09:53:43 prd-ubuntu2204-docker-8c-8g-1126 sshd[1046]: Disconnected from invalid user jenkins 10.30.104.4 port 50480 [preauth] Mar 11 09:53:45 prd-ubuntu2204-docker-8c-8g-1126 sshd[1193]: Invalid user jenkins from 10.30.104.4 port 50482 Mar 11 09:53:45 prd-ubuntu2204-docker-8c-8g-1126 sshd[1193]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Mar 11 09:53:45 prd-ubuntu2204-docker-8c-8g-1126 sshd[1193]: Received disconnect from 10.30.104.4 port 50482:11: Closed due to user request. [preauth] Mar 11 09:53:45 prd-ubuntu2204-docker-8c-8g-1126 sshd[1193]: Disconnected from invalid user jenkins 10.30.104.4 port 50482 [preauth] Mar 11 09:53:48 prd-ubuntu2204-docker-8c-8g-1126 sshd[1279]: Invalid user jenkins from 10.30.104.4 port 50484 Mar 11 09:53:48 prd-ubuntu2204-docker-8c-8g-1126 sshd[1279]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Mar 11 09:53:48 prd-ubuntu2204-docker-8c-8g-1126 sshd[1279]: Received disconnect from 10.30.104.4 port 50484:11: Closed due to user request. [preauth] Mar 11 09:53:48 prd-ubuntu2204-docker-8c-8g-1126 sshd[1279]: Disconnected from invalid user jenkins 10.30.104.4 port 50484 [preauth] Mar 11 09:53:50 prd-ubuntu2204-docker-8c-8g-1126 sshd[1319]: Invalid user jenkins from 10.30.104.4 port 50492 Mar 11 09:53:50 prd-ubuntu2204-docker-8c-8g-1126 sshd[1319]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Mar 11 09:53:50 prd-ubuntu2204-docker-8c-8g-1126 sshd[1319]: Received disconnect from 10.30.104.4 port 50492:11: Closed due to user request. [preauth] Mar 11 09:53:50 prd-ubuntu2204-docker-8c-8g-1126 sshd[1319]: Disconnected from invalid user jenkins 10.30.104.4 port 50492 [preauth] Mar 11 09:53:52 prd-ubuntu2204-docker-8c-8g-1126 sshd[1321]: Invalid user jenkins from 10.30.104.4 port 50494 Mar 11 09:53:52 prd-ubuntu2204-docker-8c-8g-1126 sshd[1321]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Mar 11 09:53:52 prd-ubuntu2204-docker-8c-8g-1126 sshd[1321]: Received disconnect from 10.30.104.4 port 50494:11: Closed due to user request. [preauth] Mar 11 09:53:52 prd-ubuntu2204-docker-8c-8g-1126 sshd[1321]: Disconnected from invalid user jenkins 10.30.104.4 port 50494 [preauth] Mar 11 09:53:54 prd-ubuntu2204-docker-8c-8g-1126 sshd[1323]: Invalid user jenkins from 10.30.104.4 port 50496 Mar 11 09:53:54 prd-ubuntu2204-docker-8c-8g-1126 sshd[1323]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Mar 11 09:53:54 prd-ubuntu2204-docker-8c-8g-1126 sshd[1323]: Received disconnect from 10.30.104.4 port 50496:11: Closed due to user request. [preauth] Mar 11 09:53:54 prd-ubuntu2204-docker-8c-8g-1126 sshd[1323]: Disconnected from invalid user jenkins 10.30.104.4 port 50496 [preauth] Mar 11 09:53:56 prd-ubuntu2204-docker-8c-8g-1126 sshd[1325]: Invalid user jenkins from 10.30.104.4 port 50502 Mar 11 09:53:57 prd-ubuntu2204-docker-8c-8g-1126 sshd[1325]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Mar 11 09:53:57 prd-ubuntu2204-docker-8c-8g-1126 sshd[1325]: Received disconnect from 10.30.104.4 port 50502:11: Closed due to user request. [preauth] Mar 11 09:53:57 prd-ubuntu2204-docker-8c-8g-1126 sshd[1325]: Disconnected from invalid user jenkins 10.30.104.4 port 50502 [preauth] Mar 11 09:53:59 prd-ubuntu2204-docker-8c-8g-1126 sshd[1329]: Invalid user jenkins from 10.30.104.4 port 50504 Mar 11 09:53:59 prd-ubuntu2204-docker-8c-8g-1126 sshd[1329]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Mar 11 09:53:59 prd-ubuntu2204-docker-8c-8g-1126 sshd[1329]: Received disconnect from 10.30.104.4 port 50504:11: Closed due to user request. [preauth] Mar 11 09:53:59 prd-ubuntu2204-docker-8c-8g-1126 sshd[1329]: Disconnected from invalid user jenkins 10.30.104.4 port 50504 [preauth] Mar 11 09:54:01 prd-ubuntu2204-docker-8c-8g-1126 sshd[1331]: Invalid user jenkins from 10.30.104.4 port 50508 Mar 11 09:54:01 prd-ubuntu2204-docker-8c-8g-1126 sshd[1331]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Mar 11 09:54:01 prd-ubuntu2204-docker-8c-8g-1126 sshd[1331]: Received disconnect from 10.30.104.4 port 50508:11: Closed due to user request. [preauth] Mar 11 09:54:01 prd-ubuntu2204-docker-8c-8g-1126 sshd[1331]: Disconnected from invalid user jenkins 10.30.104.4 port 50508 [preauth] Mar 11 09:54:02 prd-ubuntu2204-docker-8c-8g-1126 CRON[1335]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 11 09:54:02 prd-ubuntu2204-docker-8c-8g-1126 CRON[1335]: pam_unix(cron:session): session closed for user root Mar 11 09:54:03 prd-ubuntu2204-docker-8c-8g-1126 sshd[1338]: Invalid user jenkins from 10.30.104.4 port 50518 Mar 11 09:54:03 prd-ubuntu2204-docker-8c-8g-1126 sshd[1338]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Mar 11 09:54:03 prd-ubuntu2204-docker-8c-8g-1126 sshd[1338]: Received disconnect from 10.30.104.4 port 50518:11: Closed due to user request. [preauth] Mar 11 09:54:03 prd-ubuntu2204-docker-8c-8g-1126 sshd[1338]: Disconnected from invalid user jenkins 10.30.104.4 port 50518 [preauth] Mar 11 09:54:05 prd-ubuntu2204-docker-8c-8g-1126 sshd[1341]: Invalid user jenkins from 10.30.104.4 port 50522 Mar 11 09:54:05 prd-ubuntu2204-docker-8c-8g-1126 sshd[1341]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Mar 11 09:54:05 prd-ubuntu2204-docker-8c-8g-1126 sshd[1341]: Received disconnect from 10.30.104.4 port 50522:11: Closed due to user request. [preauth] Mar 11 09:54:05 prd-ubuntu2204-docker-8c-8g-1126 sshd[1341]: Disconnected from invalid user jenkins 10.30.104.4 port 50522 [preauth] Mar 11 09:54:07 prd-ubuntu2204-docker-8c-8g-1126 sshd[1344]: Invalid user jenkins from 10.30.104.4 port 50528 Mar 11 09:54:07 prd-ubuntu2204-docker-8c-8g-1126 sshd[1344]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Mar 11 09:54:07 prd-ubuntu2204-docker-8c-8g-1126 sshd[1344]: Received disconnect from 10.30.104.4 port 50528:11: Closed due to user request. [preauth] Mar 11 09:54:07 prd-ubuntu2204-docker-8c-8g-1126 sshd[1344]: Disconnected from invalid user jenkins 10.30.104.4 port 50528 [preauth] Mar 11 09:54:08 prd-ubuntu2204-docker-8c-8g-1126 useradd[1364]: new group: name=jenkins, GID=1001 Mar 11 09:54:08 prd-ubuntu2204-docker-8c-8g-1126 useradd[1364]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Mar 11 09:54:09 prd-ubuntu2204-docker-8c-8g-1126 sshd[1366]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Mar 11 09:54:09 prd-ubuntu2204-docker-8c-8g-1126 sshd[1366]: Received disconnect from 10.30.104.4 port 50534:11: Closed due to user request. [preauth] Mar 11 09:54:09 prd-ubuntu2204-docker-8c-8g-1126 sshd[1366]: Disconnected from authenticating user jenkins 10.30.104.4 port 50534 [preauth] Mar 11 09:54:10 prd-ubuntu2204-docker-8c-8g-1126 usermod[1375]: add 'jenkins' to group 'docker' Mar 11 09:54:10 prd-ubuntu2204-docker-8c-8g-1126 usermod[1375]: add 'jenkins' to shadow group 'docker' Mar 11 09:54:12 prd-ubuntu2204-docker-8c-8g-1126 sshd[1399]: Accepted publickey for jenkins from 10.30.104.4 port 50542 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Mar 11 09:54:12 prd-ubuntu2204-docker-8c-8g-1126 sshd[1399]: pam_unix(sshd:session): session opened for user jenkins(uid=1001) by (uid=0) Mar 11 09:54:12 prd-ubuntu2204-docker-8c-8g-1126 systemd-logind[774]: New session 2 of user jenkins. Mar 11 09:54:12 prd-ubuntu2204-docker-8c-8g-1126 systemd: pam_unix(systemd-user:session): session opened for user jenkins(uid=1001) by (uid=0) Mar 11 09:55:01 prd-ubuntu2204-docker-8c-8g-1126 CRON[1898]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 11 09:55:01 prd-ubuntu2204-docker-8c-8g-1126 CRON[1898]: pam_unix(cron:session): session closed for user root Mar 11 09:55:44 prd-ubuntu2204-docker-8c-8g-1126 sudo: jenkins : PWD=/w/workspace/policy-pap-quebec-project-csit-pap ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/java java /usr/lib/jvm/java-17-openjdk-amd64/bin/java 1 Mar 11 09:55:44 prd-ubuntu2204-docker-8c-8g-1126 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Mar 11 09:55:44 prd-ubuntu2204-docker-8c-8g-1126 sudo: pam_unix(sudo:session): session closed for user root Mar 11 09:55:44 prd-ubuntu2204-docker-8c-8g-1126 sudo: jenkins : PWD=/w/workspace/policy-pap-quebec-project-csit-pap ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/javac javac /usr/lib/jvm/java-17-openjdk-amd64/bin/javac 1 Mar 11 09:55:44 prd-ubuntu2204-docker-8c-8g-1126 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Mar 11 09:55:44 prd-ubuntu2204-docker-8c-8g-1126 sudo: pam_unix(sudo:session): session closed for user root Mar 11 09:55:44 prd-ubuntu2204-docker-8c-8g-1126 sudo: jenkins : PWD=/w/workspace/policy-pap-quebec-project-csit-pap ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/lib/jvm/java-openjdk java_sdk_openjdk /usr/lib/jvm/java-17-openjdk-amd64 1 Mar 11 09:55:44 prd-ubuntu2204-docker-8c-8g-1126 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Mar 11 09:55:44 prd-ubuntu2204-docker-8c-8g-1126 sudo: pam_unix(sudo:session): session closed for user root Mar 11 09:55:44 prd-ubuntu2204-docker-8c-8g-1126 sudo: jenkins : PWD=/w/workspace/policy-pap-quebec-project-csit-pap ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java /usr/lib/jvm/java-17-openjdk-amd64/bin/java Mar 11 09:55:44 prd-ubuntu2204-docker-8c-8g-1126 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Mar 11 09:55:44 prd-ubuntu2204-docker-8c-8g-1126 sudo: pam_unix(sudo:session): session closed for user root Mar 11 09:55:44 prd-ubuntu2204-docker-8c-8g-1126 sudo: jenkins : PWD=/w/workspace/policy-pap-quebec-project-csit-pap ; USER=root ; COMMAND=/usr/bin/update-alternatives --set javac /usr/lib/jvm/java-17-openjdk-amd64/bin/javac Mar 11 09:55:44 prd-ubuntu2204-docker-8c-8g-1126 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Mar 11 09:55:44 prd-ubuntu2204-docker-8c-8g-1126 sudo: pam_unix(sudo:session): session closed for user root Mar 11 09:55:44 prd-ubuntu2204-docker-8c-8g-1126 sudo: jenkins : PWD=/w/workspace/policy-pap-quebec-project-csit-pap ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java_sdk_openjdk /usr/lib/jvm/java-17-openjdk-amd64 Mar 11 09:55:44 prd-ubuntu2204-docker-8c-8g-1126 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Mar 11 09:55:44 prd-ubuntu2204-docker-8c-8g-1126 sudo: pam_unix(sudo:session): session closed for user root Mar 11 09:55:45 prd-ubuntu2204-docker-8c-8g-1126 sudo: jenkins : PWD=/w/workspace/policy-pap-quebec-project-csit-pap ; USER=root ; COMMAND=/usr/bin/rm -rf /w/workspace/policy-pap-quebec-project-csit-pap/csit/archives/pap Mar 11 09:55:45 prd-ubuntu2204-docker-8c-8g-1126 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Mar 11 09:55:45 prd-ubuntu2204-docker-8c-8g-1126 sudo: pam_unix(sudo:session): session closed for user root Mar 11 09:56:01 prd-ubuntu2204-docker-8c-8g-1126 CRON[2291]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 11 09:56:01 prd-ubuntu2204-docker-8c-8g-1126 CRON[2291]: pam_unix(cron:session): session closed for user root Mar 11 09:57:01 prd-ubuntu2204-docker-8c-8g-1126 CRON[2368]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 11 09:57:01 prd-ubuntu2204-docker-8c-8g-1126 CRON[2368]: pam_unix(cron:session): session closed for user root Mar 11 09:58:01 prd-ubuntu2204-docker-8c-8g-1126 CRON[2690]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 11 09:58:01 prd-ubuntu2204-docker-8c-8g-1126 CRON[2690]: pam_unix(cron:session): session closed for user root Mar 11 09:59:01 prd-ubuntu2204-docker-8c-8g-1126 CRON[6179]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 11 09:59:01 prd-ubuntu2204-docker-8c-8g-1126 CRON[6179]: pam_unix(cron:session): session closed for user root Mar 11 10:00:01 prd-ubuntu2204-docker-8c-8g-1126 CRON[6762]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 11 10:00:01 prd-ubuntu2204-docker-8c-8g-1126 CRON[6762]: pam_unix(cron:session): session closed for user root Mar 11 10:01:01 prd-ubuntu2204-docker-8c-8g-1126 CRON[8606]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 11 10:01:01 prd-ubuntu2204-docker-8c-8g-1126 CRON[8606]: pam_unix(cron:session): session closed for user root Mar 11 10:02:01 prd-ubuntu2204-docker-8c-8g-1126 CRON[8807]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 11 10:02:01 prd-ubuntu2204-docker-8c-8g-1126 CRON[8807]: pam_unix(cron:session): session closed for user root Mar 11 10:03:01 prd-ubuntu2204-docker-8c-8g-1126 CRON[8821]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 11 10:03:01 prd-ubuntu2204-docker-8c-8g-1126 CRON[8821]: pam_unix(cron:session): session closed for user root Mar 11 10:04:01 prd-ubuntu2204-docker-8c-8g-1126 CRON[10329]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 11 10:04:01 prd-ubuntu2204-docker-8c-8g-1126 CRON[10329]: pam_unix(cron:session): session closed for user root Mar 11 10:04:07 prd-ubuntu2204-docker-8c-8g-1126 sudo: jenkins : PWD=/w/workspace/policy-pap-quebec-project-csit-pap ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Mar 11 10:04:07 prd-ubuntu2204-docker-8c-8g-1126 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)