May 30 19:05:46 prd-ubuntu20-04-docker-2c-8g-lt-2510 passwd[683]: password for 'ubuntu' changed by 'root' May 30 19:05:46 prd-ubuntu20-04-docker-2c-8g-lt-2510 sshd[770]: Server listening on 0.0.0.0 port 22. May 30 19:05:46 prd-ubuntu20-04-docker-2c-8g-lt-2510 sshd[770]: Server listening on :: port 22. May 30 19:05:46 prd-ubuntu20-04-docker-2c-8g-lt-2510 systemd-logind[719]: New seat seat0. May 30 19:05:46 prd-ubuntu20-04-docker-2c-8g-lt-2510 systemd-logind[719]: Watching system buttons on /dev/input/event0 (Power Button) May 30 19:05:46 prd-ubuntu20-04-docker-2c-8g-lt-2510 systemd-logind[719]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) May 30 19:05:51 prd-ubuntu20-04-docker-2c-8g-lt-2510 sshd[943]: error: kex_exchange_identification: Connection closed by remote host May 30 19:05:52 prd-ubuntu20-04-docker-2c-8g-lt-2510 sshd[950]: Invalid user jenkins from 10.30.120.5 port 49414 May 30 19:05:52 prd-ubuntu20-04-docker-2c-8g-lt-2510 sshd[950]: Received disconnect from 10.30.120.5 port 49414:11: Closed due to user request. [preauth] May 30 19:05:52 prd-ubuntu20-04-docker-2c-8g-lt-2510 sshd[950]: Disconnected from invalid user jenkins 10.30.120.5 port 49414 [preauth] May 30 19:05:54 prd-ubuntu20-04-docker-2c-8g-lt-2510 sshd[952]: Invalid user jenkins from 10.30.120.5 port 49416 May 30 19:05:54 prd-ubuntu20-04-docker-2c-8g-lt-2510 sshd[952]: Received disconnect from 10.30.120.5 port 49416:11: Closed due to user request. [preauth] May 30 19:05:54 prd-ubuntu20-04-docker-2c-8g-lt-2510 sshd[952]: Disconnected from invalid user jenkins 10.30.120.5 port 49416 [preauth] May 30 19:05:56 prd-ubuntu20-04-docker-2c-8g-lt-2510 sshd[954]: Invalid user jenkins from 10.30.120.5 port 49420 May 30 19:05:56 prd-ubuntu20-04-docker-2c-8g-lt-2510 sshd[954]: Received disconnect from 10.30.120.5 port 49420:11: Closed due to user request. [preauth] May 30 19:05:56 prd-ubuntu20-04-docker-2c-8g-lt-2510 sshd[954]: Disconnected from invalid user jenkins 10.30.120.5 port 49420 [preauth] May 30 19:05:58 prd-ubuntu20-04-docker-2c-8g-lt-2510 sshd[972]: Invalid user jenkins from 10.30.120.5 port 49424 May 30 19:05:58 prd-ubuntu20-04-docker-2c-8g-lt-2510 sshd[972]: Received disconnect from 10.30.120.5 port 49424:11: Closed due to user request. [preauth] May 30 19:05:58 prd-ubuntu20-04-docker-2c-8g-lt-2510 sshd[972]: Disconnected from invalid user jenkins 10.30.120.5 port 49424 [preauth] May 30 19:06:00 prd-ubuntu20-04-docker-2c-8g-lt-2510 sshd[974]: Invalid user jenkins from 10.30.120.5 port 49426 May 30 19:06:00 prd-ubuntu20-04-docker-2c-8g-lt-2510 sshd[974]: Received disconnect from 10.30.120.5 port 49426:11: Closed due to user request. [preauth] May 30 19:06:00 prd-ubuntu20-04-docker-2c-8g-lt-2510 sshd[974]: Disconnected from invalid user jenkins 10.30.120.5 port 49426 [preauth] May 30 19:06:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[976]: pam_unix(cron:session): session opened for user root by (uid=0) May 30 19:06:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[976]: pam_unix(cron:session): session closed for user root May 30 19:06:03 prd-ubuntu20-04-docker-2c-8g-lt-2510 sshd[979]: Invalid user jenkins from 10.30.120.5 port 49428 May 30 19:06:03 prd-ubuntu20-04-docker-2c-8g-lt-2510 sshd[979]: Received disconnect from 10.30.120.5 port 49428:11: Closed due to user request. [preauth] May 30 19:06:03 prd-ubuntu20-04-docker-2c-8g-lt-2510 sshd[979]: Disconnected from invalid user jenkins 10.30.120.5 port 49428 [preauth] May 30 19:06:05 prd-ubuntu20-04-docker-2c-8g-lt-2510 sshd[1247]: Invalid user jenkins from 10.30.120.5 port 49430 May 30 19:06:05 prd-ubuntu20-04-docker-2c-8g-lt-2510 sshd[1247]: Received disconnect from 10.30.120.5 port 49430:11: Closed due to user request. [preauth] May 30 19:06:05 prd-ubuntu20-04-docker-2c-8g-lt-2510 sshd[1247]: Disconnected from invalid user jenkins 10.30.120.5 port 49430 [preauth] May 30 19:06:07 prd-ubuntu20-04-docker-2c-8g-lt-2510 sshd[1286]: Invalid user jenkins from 10.30.120.5 port 49434 May 30 19:06:07 prd-ubuntu20-04-docker-2c-8g-lt-2510 sshd[1286]: Received disconnect from 10.30.120.5 port 49434:11: Closed due to user request. [preauth] May 30 19:06:07 prd-ubuntu20-04-docker-2c-8g-lt-2510 sshd[1286]: Disconnected from invalid user jenkins 10.30.120.5 port 49434 [preauth] May 30 19:06:09 prd-ubuntu20-04-docker-2c-8g-lt-2510 sshd[1288]: Invalid user jenkins from 10.30.120.5 port 49436 May 30 19:06:09 prd-ubuntu20-04-docker-2c-8g-lt-2510 sshd[1288]: Received disconnect from 10.30.120.5 port 49436:11: Closed due to user request. [preauth] May 30 19:06:09 prd-ubuntu20-04-docker-2c-8g-lt-2510 sshd[1288]: Disconnected from invalid user jenkins 10.30.120.5 port 49436 [preauth] May 30 19:06:10 prd-ubuntu20-04-docker-2c-8g-lt-2510 useradd[1309]: new group: name=jenkins, GID=1001 May 30 19:06:10 prd-ubuntu20-04-docker-2c-8g-lt-2510 useradd[1309]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none May 30 19:06:10 prd-ubuntu20-04-docker-2c-8g-lt-2510 usermod[1319]: add 'jenkins' to group 'docker' May 30 19:06:10 prd-ubuntu20-04-docker-2c-8g-lt-2510 usermod[1319]: add 'jenkins' to shadow group 'docker' May 30 19:06:11 prd-ubuntu20-04-docker-2c-8g-lt-2510 sshd[1354]: Accepted publickey for jenkins from 10.30.120.5 port 49438 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU May 30 19:06:11 prd-ubuntu20-04-docker-2c-8g-lt-2510 sshd[1354]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) May 30 19:06:11 prd-ubuntu20-04-docker-2c-8g-lt-2510 systemd-logind[719]: New session 2 of user jenkins. May 30 19:06:11 prd-ubuntu20-04-docker-2c-8g-lt-2510 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) May 30 19:07:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[1563]: pam_unix(cron:session): session opened for user root by (uid=0) May 30 19:07:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[1563]: pam_unix(cron:session): session closed for user root May 30 19:08:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[1567]: pam_unix(cron:session): session opened for user root by (uid=0) May 30 19:08:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[1567]: pam_unix(cron:session): session closed for user root May 30 19:09:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[1573]: pam_unix(cron:session): session opened for user root by (uid=0) May 30 19:09:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[1573]: pam_unix(cron:session): session closed for user root May 30 19:10:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[1577]: pam_unix(cron:session): session opened for user root by (uid=0) May 30 19:10:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[1577]: pam_unix(cron:session): session closed for user root May 30 19:11:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2008]: pam_unix(cron:session): session opened for user root by (uid=0) May 30 19:11:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2008]: pam_unix(cron:session): session closed for user root May 30 19:12:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2548]: pam_unix(cron:session): session opened for user root by (uid=0) May 30 19:12:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2548]: pam_unix(cron:session): session closed for user root May 30 19:13:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2605]: pam_unix(cron:session): session opened for user root by (uid=0) May 30 19:13:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2605]: pam_unix(cron:session): session closed for user root May 30 19:13:19 prd-ubuntu20-04-docker-2c-8g-lt-2510 sshd[2608]: Connection closed by authenticating user jenkins 10.30.120.5 port 49716 [preauth] May 30 19:13:27 prd-ubuntu20-04-docker-2c-8g-lt-2510 sshd[2610]: Connection closed by authenticating user jenkins 10.30.120.5 port 49722 [preauth] May 30 19:13:57 prd-ubuntu20-04-docker-2c-8g-lt-2510 sshd[2613]: Connection closed by authenticating user jenkins 10.30.120.5 port 49732 [preauth] May 30 19:14:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2615]: pam_unix(cron:session): session opened for user root by (uid=0) May 30 19:14:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2615]: pam_unix(cron:session): session closed for user root May 30 19:15:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2619]: pam_unix(cron:session): session opened for user root by (uid=0) May 30 19:15:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2619]: pam_unix(cron:session): session closed for user root May 30 19:16:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2634]: pam_unix(cron:session): session opened for user root by (uid=0) May 30 19:16:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2634]: pam_unix(cron:session): session closed for user root May 30 19:17:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2642]: pam_unix(cron:session): session opened for user root by (uid=0) May 30 19:17:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2643]: pam_unix(cron:session): session opened for user root by (uid=0) May 30 19:17:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2642]: pam_unix(cron:session): session closed for user root May 30 19:17:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2643]: pam_unix(cron:session): session closed for user root May 30 19:18:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2650]: pam_unix(cron:session): session opened for user root by (uid=0) May 30 19:18:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2650]: pam_unix(cron:session): session closed for user root May 30 19:19:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2655]: pam_unix(cron:session): session opened for user root by (uid=0) May 30 19:19:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2655]: pam_unix(cron:session): session closed for user root May 30 19:20:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2659]: pam_unix(cron:session): session opened for user root by (uid=0) May 30 19:20:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2659]: pam_unix(cron:session): session closed for user root May 30 19:21:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2684]: pam_unix(cron:session): session opened for user root by (uid=0) May 30 19:21:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2684]: pam_unix(cron:session): session closed for user root May 30 19:22:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2690]: pam_unix(cron:session): session opened for user root by (uid=0) May 30 19:22:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2690]: pam_unix(cron:session): session closed for user root May 30 19:23:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2693]: pam_unix(cron:session): session opened for user root by (uid=0) May 30 19:23:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2693]: pam_unix(cron:session): session closed for user root May 30 19:24:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2697]: pam_unix(cron:session): session opened for user root by (uid=0) May 30 19:24:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2697]: pam_unix(cron:session): session closed for user root May 30 19:25:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2700]: pam_unix(cron:session): session opened for user root by (uid=0) May 30 19:25:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2700]: pam_unix(cron:session): session closed for user root May 30 19:26:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2706]: pam_unix(cron:session): session opened for user root by (uid=0) May 30 19:26:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2706]: pam_unix(cron:session): session closed for user root May 30 19:27:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2710]: pam_unix(cron:session): session opened for user root by (uid=0) May 30 19:27:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2710]: pam_unix(cron:session): session closed for user root May 30 19:28:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2714]: pam_unix(cron:session): session opened for user root by (uid=0) May 30 19:28:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2714]: pam_unix(cron:session): session closed for user root May 30 19:29:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2717]: pam_unix(cron:session): session opened for user root by (uid=0) May 30 19:29:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2717]: pam_unix(cron:session): session closed for user root May 30 19:30:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2721]: pam_unix(cron:session): session opened for user root by (uid=0) May 30 19:30:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2721]: pam_unix(cron:session): session closed for user root May 30 19:31:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2724]: pam_unix(cron:session): session opened for user root by (uid=0) May 30 19:31:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2724]: pam_unix(cron:session): session closed for user root May 30 19:32:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2730]: pam_unix(cron:session): session opened for user root by (uid=0) May 30 19:32:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2730]: pam_unix(cron:session): session closed for user root May 30 19:32:51 prd-ubuntu20-04-docker-2c-8g-lt-2510 sshd[2733]: Accepted publickey for jenkins from 10.30.120.5 port 50260 ssh2: RSA SHA256:aPmPdMw/h9M56P/o8xjsZcdBWoRKGeie6FPOwnlsRmU May 30 19:32:51 prd-ubuntu20-04-docker-2c-8g-lt-2510 sshd[2733]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) May 30 19:32:51 prd-ubuntu20-04-docker-2c-8g-lt-2510 systemd-logind[719]: New session 31 of user jenkins. May 30 19:33:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2836]: pam_unix(cron:session): session opened for user root by (uid=0) May 30 19:33:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2836]: pam_unix(cron:session): session closed for user root May 30 19:34:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2906]: pam_unix(cron:session): session opened for user root by (uid=0) May 30 19:34:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[2906]: pam_unix(cron:session): session closed for user root May 30 19:35:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[3006]: pam_unix(cron:session): session opened for user root by (uid=0) May 30 19:35:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[3006]: pam_unix(cron:session): session closed for user root May 30 19:36:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[3031]: pam_unix(cron:session): session opened for user root by (uid=0) May 30 19:36:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[3031]: pam_unix(cron:session): session closed for user root May 30 19:36:32 prd-ubuntu20-04-docker-2c-8g-lt-2510 sudo: jenkins : TTY=pts/0 ; PWD=/home/jenkins/ci-management/global-jjb/shell ; USER=root ; COMMAND=/usr/bin/mv bin/packer.io /usr/local/bin/packer May 30 19:36:32 prd-ubuntu20-04-docker-2c-8g-lt-2510 sudo: pam_unix(sudo:session): session opened for user root by jenkins(uid=0) May 30 19:36:32 prd-ubuntu20-04-docker-2c-8g-lt-2510 sudo: pam_unix(sudo:session): session closed for user root May 30 19:37:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[3065]: pam_unix(cron:session): session opened for user root by (uid=0) May 30 19:37:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[3065]: pam_unix(cron:session): session closed for user root May 30 19:38:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[3069]: pam_unix(cron:session): session opened for user root by (uid=0) May 30 19:38:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[3069]: pam_unix(cron:session): session closed for user root May 30 19:38:47 prd-ubuntu20-04-docker-2c-8g-lt-2510 sudo: jenkins : TTY=pts/0 ; PWD=/home/jenkins/ci-management/global-jjb/shell ; USER=root ; COMMAND=/usr/bin/mv bin/packer.io /usr/local/bin/packer May 30 19:38:47 prd-ubuntu20-04-docker-2c-8g-lt-2510 sudo: pam_unix(sudo:session): session opened for user root by jenkins(uid=0) May 30 19:38:47 prd-ubuntu20-04-docker-2c-8g-lt-2510 sudo: pam_unix(sudo:session): session closed for user root May 30 19:39:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[3092]: pam_unix(cron:session): session opened for user root by (uid=0) May 30 19:39:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[3092]: pam_unix(cron:session): session closed for user root May 30 19:40:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[3104]: pam_unix(cron:session): session opened for user root by (uid=0) May 30 19:40:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[3104]: pam_unix(cron:session): session closed for user root May 30 19:41:01 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[3687]: pam_unix(cron:session): session opened for user root by (uid=0) May 30 19:41:02 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[3687]: pam_unix(cron:session): session closed for user root May 30 19:42:02 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[3965]: pam_unix(cron:session): session opened for user root by (uid=0) May 30 19:42:02 prd-ubuntu20-04-docker-2c-8g-lt-2510 CRON[3965]: pam_unix(cron:session): session closed for user root May 30 19:42:41 prd-ubuntu20-04-docker-2c-8g-lt-2510 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/ci-management-packer-merge-ubuntu-24.04-docker ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp May 30 19:42:41 prd-ubuntu20-04-docker-2c-8g-lt-2510 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)