Aug 9 22:17:11 prd-ubuntu1804-docker-v1-8c-8g-34186 passwd[997]: password for 'ubuntu' changed by 'root' Aug 9 22:17:11 prd-ubuntu1804-docker-v1-8c-8g-34186 systemd-logind[1079]: Watching system buttons on /dev/input/event0 (Power Button) Aug 9 22:17:11 prd-ubuntu1804-docker-v1-8c-8g-34186 systemd-logind[1079]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Aug 9 22:17:11 prd-ubuntu1804-docker-v1-8c-8g-34186 systemd-logind[1079]: New seat seat0. Aug 9 22:17:11 prd-ubuntu1804-docker-v1-8c-8g-34186 sshd[1120]: Server listening on 0.0.0.0 port 22. Aug 9 22:17:11 prd-ubuntu1804-docker-v1-8c-8g-34186 sshd[1120]: Server listening on :: port 22. Aug 9 22:17:13 prd-ubuntu1804-docker-v1-8c-8g-34186 sshd[1444]: Did not receive identification string from 10.30.104.4 port 38960 Aug 9 22:17:22 prd-ubuntu1804-docker-v1-8c-8g-34186 sshd[1468]: Invalid user jenkins from 10.30.104.4 port 38970 Aug 9 22:17:22 prd-ubuntu1804-docker-v1-8c-8g-34186 sshd[1468]: Received disconnect from 10.30.104.4 port 38970:11: Closed due to user request. [preauth] Aug 9 22:17:22 prd-ubuntu1804-docker-v1-8c-8g-34186 sshd[1468]: Disconnected from invalid user jenkins 10.30.104.4 port 38970 [preauth] Aug 9 22:17:24 prd-ubuntu1804-docker-v1-8c-8g-34186 sshd[1472]: Invalid user jenkins from 10.30.104.4 port 38976 Aug 9 22:17:24 prd-ubuntu1804-docker-v1-8c-8g-34186 sshd[1472]: Received disconnect from 10.30.104.4 port 38976:11: Closed due to user request. [preauth] Aug 9 22:17:24 prd-ubuntu1804-docker-v1-8c-8g-34186 sshd[1472]: Disconnected from invalid user jenkins 10.30.104.4 port 38976 [preauth] Aug 9 22:17:26 prd-ubuntu1804-docker-v1-8c-8g-34186 sshd[1474]: Invalid user jenkins from 10.30.104.4 port 38978 Aug 9 22:17:26 prd-ubuntu1804-docker-v1-8c-8g-34186 sshd[1474]: Received disconnect from 10.30.104.4 port 38978:11: Closed due to user request. [preauth] Aug 9 22:17:26 prd-ubuntu1804-docker-v1-8c-8g-34186 sshd[1474]: Disconnected from invalid user jenkins 10.30.104.4 port 38978 [preauth] Aug 9 22:17:28 prd-ubuntu1804-docker-v1-8c-8g-34186 sshd[1498]: Invalid user jenkins from 10.30.104.4 port 38980 Aug 9 22:17:28 prd-ubuntu1804-docker-v1-8c-8g-34186 sshd[1498]: Received disconnect from 10.30.104.4 port 38980:11: Closed due to user request. [preauth] Aug 9 22:17:28 prd-ubuntu1804-docker-v1-8c-8g-34186 sshd[1498]: Disconnected from invalid user jenkins 10.30.104.4 port 38980 [preauth] Aug 9 22:17:30 prd-ubuntu1804-docker-v1-8c-8g-34186 sshd[1724]: Invalid user jenkins from 10.30.104.4 port 38988 Aug 9 22:17:30 prd-ubuntu1804-docker-v1-8c-8g-34186 sshd[1724]: Received disconnect from 10.30.104.4 port 38988:11: Closed due to user request. [preauth] Aug 9 22:17:30 prd-ubuntu1804-docker-v1-8c-8g-34186 sshd[1724]: Disconnected from invalid user jenkins 10.30.104.4 port 38988 [preauth] Aug 9 22:17:32 prd-ubuntu1804-docker-v1-8c-8g-34186 sshd[1749]: Invalid user jenkins from 10.30.104.4 port 38992 Aug 9 22:17:32 prd-ubuntu1804-docker-v1-8c-8g-34186 sshd[1749]: Received disconnect from 10.30.104.4 port 38992:11: Closed due to user request. [preauth] Aug 9 22:17:32 prd-ubuntu1804-docker-v1-8c-8g-34186 sshd[1749]: Disconnected from invalid user jenkins 10.30.104.4 port 38992 [preauth] Aug 9 22:17:34 prd-ubuntu1804-docker-v1-8c-8g-34186 useradd[1769]: new group: name=jenkins, GID=1001 Aug 9 22:17:34 prd-ubuntu1804-docker-v1-8c-8g-34186 useradd[1769]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Aug 9 22:17:34 prd-ubuntu1804-docker-v1-8c-8g-34186 usermod[1776]: add 'jenkins' to group 'docker' Aug 9 22:17:34 prd-ubuntu1804-docker-v1-8c-8g-34186 usermod[1776]: add 'jenkins' to shadow group 'docker' Aug 9 22:17:34 prd-ubuntu1804-docker-v1-8c-8g-34186 sshd[1791]: Accepted publickey for jenkins from 10.30.104.4 port 39002 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Aug 9 22:17:34 prd-ubuntu1804-docker-v1-8c-8g-34186 sshd[1791]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Aug 9 22:17:34 prd-ubuntu1804-docker-v1-8c-8g-34186 systemd-logind[1079]: New session 1 of user jenkins. Aug 9 22:17:34 prd-ubuntu1804-docker-v1-8c-8g-34186 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Aug 9 22:18:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2090]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 9 22:18:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2090]: pam_unix(cron:session): session closed for user root Aug 9 22:19:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2116]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 9 22:19:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2116]: pam_unix(cron:session): session closed for user root Aug 9 22:20:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2121]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 9 22:20:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2121]: pam_unix(cron:session): session closed for user root Aug 9 22:21:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2124]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 9 22:21:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2124]: pam_unix(cron:session): session closed for user root Aug 9 22:22:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2130]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 9 22:22:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2130]: pam_unix(cron:session): session closed for user root Aug 9 22:23:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2135]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 9 22:23:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2135]: pam_unix(cron:session): session closed for user root Aug 9 22:24:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2161]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 9 22:24:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2161]: pam_unix(cron:session): session closed for user root Aug 9 22:25:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2164]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 9 22:25:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2164]: pam_unix(cron:session): session closed for user root Aug 9 22:26:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2168]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 9 22:26:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2168]: pam_unix(cron:session): session closed for user root Aug 9 22:27:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2171]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 9 22:27:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2171]: pam_unix(cron:session): session closed for user root Aug 9 22:28:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2175]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 9 22:28:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2175]: pam_unix(cron:session): session closed for user root Aug 9 22:29:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2179]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 9 22:29:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2179]: pam_unix(cron:session): session closed for user root Aug 9 22:30:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2183]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 9 22:30:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2183]: pam_unix(cron:session): session closed for user root Aug 9 22:31:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2186]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 9 22:31:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2186]: pam_unix(cron:session): session closed for user root Aug 9 22:32:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2191]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 9 22:32:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2191]: pam_unix(cron:session): session closed for user root Aug 9 22:33:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2215]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 9 22:33:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2215]: pam_unix(cron:session): session closed for user root Aug 9 22:34:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2219]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 9 22:34:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2219]: pam_unix(cron:session): session closed for user root Aug 9 22:35:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2222]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 9 22:35:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2222]: pam_unix(cron:session): session closed for user root Aug 9 22:36:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2226]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 9 22:36:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2226]: pam_unix(cron:session): session closed for user root Aug 9 22:37:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2231]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 9 22:37:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2231]: pam_unix(cron:session): session closed for user root Aug 9 22:38:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2235]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 9 22:38:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2235]: pam_unix(cron:session): session closed for user root Aug 9 22:39:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2244]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 9 22:39:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2244]: pam_unix(cron:session): session closed for user root Aug 9 22:40:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2248]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 9 22:40:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2248]: pam_unix(cron:session): session closed for user root Aug 9 22:41:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2251]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 9 22:41:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2251]: pam_unix(cron:session): session closed for user root Aug 9 22:42:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2255]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 9 22:42:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2255]: pam_unix(cron:session): session closed for user root Aug 9 22:43:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2258]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 9 22:43:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2258]: pam_unix(cron:session): session closed for user root Aug 9 22:44:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2263]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 9 22:44:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2263]: pam_unix(cron:session): session closed for user root Aug 9 22:45:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2266]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 9 22:45:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2266]: pam_unix(cron:session): session closed for user root Aug 9 22:46:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2271]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 9 22:46:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2271]: pam_unix(cron:session): session closed for user root Aug 9 22:47:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2298]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 9 22:47:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2298]: pam_unix(cron:session): session closed for user root Aug 9 22:48:00 prd-ubuntu1804-docker-v1-8c-8g-34186 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/so-so-admin-cockpit-coverity ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/java java /usr/lib/jvm/java-11-openjdk-amd64/bin/java 1 Aug 9 22:48:00 prd-ubuntu1804-docker-v1-8c-8g-34186 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Aug 9 22:48:00 prd-ubuntu1804-docker-v1-8c-8g-34186 sudo: pam_unix(sudo:session): session closed for user root Aug 9 22:48:00 prd-ubuntu1804-docker-v1-8c-8g-34186 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/so-so-admin-cockpit-coverity ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/javac javac /usr/lib/jvm/java-11-openjdk-amd64/bin/javac 1 Aug 9 22:48:00 prd-ubuntu1804-docker-v1-8c-8g-34186 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Aug 9 22:48:00 prd-ubuntu1804-docker-v1-8c-8g-34186 sudo: pam_unix(sudo:session): session closed for user root Aug 9 22:48:00 prd-ubuntu1804-docker-v1-8c-8g-34186 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/so-so-admin-cockpit-coverity ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/lib/jvm/java-openjdk java_sdk_openjdk /usr/lib/jvm/java-11-openjdk-amd64 1 Aug 9 22:48:00 prd-ubuntu1804-docker-v1-8c-8g-34186 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Aug 9 22:48:00 prd-ubuntu1804-docker-v1-8c-8g-34186 sudo: pam_unix(sudo:session): session closed for user root Aug 9 22:48:00 prd-ubuntu1804-docker-v1-8c-8g-34186 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/so-so-admin-cockpit-coverity ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java /usr/lib/jvm/java-11-openjdk-amd64/bin/java Aug 9 22:48:00 prd-ubuntu1804-docker-v1-8c-8g-34186 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Aug 9 22:48:00 prd-ubuntu1804-docker-v1-8c-8g-34186 sudo: pam_unix(sudo:session): session closed for user root Aug 9 22:48:00 prd-ubuntu1804-docker-v1-8c-8g-34186 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/so-so-admin-cockpit-coverity ; USER=root ; COMMAND=/usr/bin/update-alternatives --set javac /usr/lib/jvm/java-11-openjdk-amd64/bin/javac Aug 9 22:48:00 prd-ubuntu1804-docker-v1-8c-8g-34186 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Aug 9 22:48:00 prd-ubuntu1804-docker-v1-8c-8g-34186 sudo: pam_unix(sudo:session): session closed for user root Aug 9 22:48:00 prd-ubuntu1804-docker-v1-8c-8g-34186 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/so-so-admin-cockpit-coverity ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java_sdk_openjdk /usr/lib/jvm/java-11-openjdk-amd64 Aug 9 22:48:00 prd-ubuntu1804-docker-v1-8c-8g-34186 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Aug 9 22:48:00 prd-ubuntu1804-docker-v1-8c-8g-34186 sudo: pam_unix(sudo:session): session closed for user root Aug 9 22:48:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2762]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 9 22:48:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[2762]: pam_unix(cron:session): session closed for user root Aug 9 22:49:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[3141]: pam_unix(cron:session): session opened for user root by (uid=0) Aug 9 22:49:01 prd-ubuntu1804-docker-v1-8c-8g-34186 CRON[3141]: pam_unix(cron:session): session closed for user root Aug 9 22:49:07 prd-ubuntu1804-docker-v1-8c-8g-34186 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/so-so-admin-cockpit-coverity ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Aug 9 22:49:07 prd-ubuntu1804-docker-v1-8c-8g-34186 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)