Oct 10 00:03:29 prd-ubuntu2004-docker-8c-8g-41010 passwd[756]: password for 'ubuntu' changed by 'root' Oct 10 00:03:29 prd-ubuntu2004-docker-8c-8g-41010 sshd[848]: Server listening on 0.0.0.0 port 22. Oct 10 00:03:29 prd-ubuntu2004-docker-8c-8g-41010 sshd[848]: Server listening on :: port 22. Oct 10 00:03:29 prd-ubuntu2004-docker-8c-8g-41010 systemd-logind[826]: New seat seat0. Oct 10 00:03:29 prd-ubuntu2004-docker-8c-8g-41010 systemd-logind[826]: Watching system buttons on /dev/input/event0 (Power Button) Oct 10 00:03:29 prd-ubuntu2004-docker-8c-8g-41010 systemd-logind[826]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Oct 10 00:03:31 prd-ubuntu2004-docker-8c-8g-41010 sshd[1805]: error: kex_exchange_identification: Connection closed by remote host Oct 10 00:03:38 prd-ubuntu2004-docker-8c-8g-41010 sshd[3735]: Invalid user jenkins from 10.30.168.15 port 56788 Oct 10 00:03:38 prd-ubuntu2004-docker-8c-8g-41010 sshd[3735]: Received disconnect from 10.30.168.15 port 56788:11: Closed due to user request. [preauth] Oct 10 00:03:38 prd-ubuntu2004-docker-8c-8g-41010 sshd[3735]: Disconnected from invalid user jenkins 10.30.168.15 port 56788 [preauth] Oct 10 00:03:41 prd-ubuntu2004-docker-8c-8g-41010 sshd[4619]: Invalid user jenkins from 10.30.168.15 port 56790 Oct 10 00:03:41 prd-ubuntu2004-docker-8c-8g-41010 sshd[4619]: Received disconnect from 10.30.168.15 port 56790:11: Closed due to user request. [preauth] Oct 10 00:03:41 prd-ubuntu2004-docker-8c-8g-41010 sshd[4619]: Disconnected from invalid user jenkins 10.30.168.15 port 56790 [preauth] Oct 10 00:03:50 prd-ubuntu2004-docker-8c-8g-41010 sshd[7250]: Invalid user jenkins from 10.30.168.15 port 56802 Oct 10 00:03:50 prd-ubuntu2004-docker-8c-8g-41010 sshd[7250]: Received disconnect from 10.30.168.15 port 56802:11: Closed due to user request. [preauth] Oct 10 00:03:50 prd-ubuntu2004-docker-8c-8g-41010 sshd[7250]: Disconnected from invalid user jenkins 10.30.168.15 port 56802 [preauth] Oct 10 00:03:53 prd-ubuntu2004-docker-8c-8g-41010 sshd[8235]: Invalid user jenkins from 10.30.168.15 port 56806 Oct 10 00:03:53 prd-ubuntu2004-docker-8c-8g-41010 sshd[8235]: Received disconnect from 10.30.168.15 port 56806:11: Closed due to user request. [preauth] Oct 10 00:03:53 prd-ubuntu2004-docker-8c-8g-41010 sshd[8235]: Disconnected from invalid user jenkins 10.30.168.15 port 56806 [preauth] Oct 10 00:03:56 prd-ubuntu2004-docker-8c-8g-41010 sshd[8886]: Invalid user jenkins from 10.30.168.15 port 56808 Oct 10 00:03:56 prd-ubuntu2004-docker-8c-8g-41010 sshd[8886]: Received disconnect from 10.30.168.15 port 56808:11: Closed due to user request. [preauth] Oct 10 00:03:56 prd-ubuntu2004-docker-8c-8g-41010 sshd[8886]: Disconnected from invalid user jenkins 10.30.168.15 port 56808 [preauth] Oct 10 00:03:57 prd-ubuntu2004-docker-8c-8g-41010 useradd[9385]: new group: name=jenkins, GID=1001 Oct 10 00:03:57 prd-ubuntu2004-docker-8c-8g-41010 useradd[9385]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Oct 10 00:03:57 prd-ubuntu2004-docker-8c-8g-41010 usermod[9417]: add 'jenkins' to group 'docker' Oct 10 00:03:57 prd-ubuntu2004-docker-8c-8g-41010 usermod[9417]: add 'jenkins' to shadow group 'docker' Oct 10 00:03:59 prd-ubuntu2004-docker-8c-8g-41010 sshd[9835]: Accepted publickey for jenkins from 10.30.168.15 port 56810 ssh2: RSA SHA256:BBsm4mRgG5V0fGum4Y1Rmy/vs16stdRVhwvexlLUhUs Oct 10 00:03:59 prd-ubuntu2004-docker-8c-8g-41010 sshd[9835]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Oct 10 00:03:59 prd-ubuntu2004-docker-8c-8g-41010 systemd-logind[826]: New session 1 of user jenkins. Oct 10 00:03:59 prd-ubuntu2004-docker-8c-8g-41010 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Oct 10 00:04:02 prd-ubuntu2004-docker-8c-8g-41010 CRON[11045]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:04:02 prd-ubuntu2004-docker-8c-8g-41010 CRON[11045]: pam_unix(cron:session): session closed for user root Oct 10 00:05:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[28377]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:05:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[28377]: pam_unix(cron:session): session closed for user root Oct 10 00:05:40 prd-ubuntu2004-docker-8c-8g-41010 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/autorelease-release-scandium-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/java java /usr/lib/jvm/java-21-openjdk-amd64/bin/java 1 Oct 10 00:05:40 prd-ubuntu2004-docker-8c-8g-41010 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Oct 10 00:05:40 prd-ubuntu2004-docker-8c-8g-41010 sudo: pam_unix(sudo:session): session closed for user root Oct 10 00:05:40 prd-ubuntu2004-docker-8c-8g-41010 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/autorelease-release-scandium-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/javac javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac 1 Oct 10 00:05:40 prd-ubuntu2004-docker-8c-8g-41010 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Oct 10 00:05:40 prd-ubuntu2004-docker-8c-8g-41010 sudo: pam_unix(sudo:session): session closed for user root Oct 10 00:05:41 prd-ubuntu2004-docker-8c-8g-41010 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/autorelease-release-scandium-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/lib/jvm/java-openjdk java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 1 Oct 10 00:05:41 prd-ubuntu2004-docker-8c-8g-41010 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Oct 10 00:05:41 prd-ubuntu2004-docker-8c-8g-41010 sudo: pam_unix(sudo:session): session closed for user root Oct 10 00:05:41 prd-ubuntu2004-docker-8c-8g-41010 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/autorelease-release-scandium-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java /usr/lib/jvm/java-21-openjdk-amd64/bin/java Oct 10 00:05:41 prd-ubuntu2004-docker-8c-8g-41010 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Oct 10 00:05:41 prd-ubuntu2004-docker-8c-8g-41010 sudo: pam_unix(sudo:session): session closed for user root Oct 10 00:05:41 prd-ubuntu2004-docker-8c-8g-41010 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/autorelease-release-scandium-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --set javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac Oct 10 00:05:41 prd-ubuntu2004-docker-8c-8g-41010 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Oct 10 00:05:41 prd-ubuntu2004-docker-8c-8g-41010 sudo: pam_unix(sudo:session): session closed for user root Oct 10 00:05:41 prd-ubuntu2004-docker-8c-8g-41010 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/autorelease-release-scandium-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 Oct 10 00:05:41 prd-ubuntu2004-docker-8c-8g-41010 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Oct 10 00:05:41 prd-ubuntu2004-docker-8c-8g-41010 sudo: pam_unix(sudo:session): session closed for user root Oct 10 00:06:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[49152]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:06:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[49152]: pam_unix(cron:session): session closed for user root Oct 10 00:07:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[49637]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:07:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[49637]: pam_unix(cron:session): session closed for user root Oct 10 00:08:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[50029]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:08:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[50029]: pam_unix(cron:session): session closed for user root Oct 10 00:09:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[51960]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:09:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[51960]: pam_unix(cron:session): session closed for user root Oct 10 00:10:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[52746]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:10:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[52746]: pam_unix(cron:session): session closed for user root Oct 10 00:11:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[53371]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:11:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[53371]: pam_unix(cron:session): session closed for user root Oct 10 00:12:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[53879]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:12:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[53879]: pam_unix(cron:session): session closed for user root Oct 10 00:13:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[54742]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:13:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[54742]: pam_unix(cron:session): session closed for user root Oct 10 00:14:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[55210]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:14:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[55210]: pam_unix(cron:session): session closed for user root Oct 10 00:15:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[55959]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:15:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[55959]: pam_unix(cron:session): session closed for user root Oct 10 00:16:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[56669]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:16:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[56669]: pam_unix(cron:session): session closed for user root Oct 10 00:17:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[57231]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:17:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[57230]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:17:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[57230]: pam_unix(cron:session): session closed for user root Oct 10 00:17:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[57231]: pam_unix(cron:session): session closed for user root Oct 10 00:18:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[58021]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:18:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[58021]: pam_unix(cron:session): session closed for user root Oct 10 00:19:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[58295]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:19:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[58295]: pam_unix(cron:session): session closed for user root Oct 10 00:20:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[59083]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:20:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[59083]: pam_unix(cron:session): session closed for user root Oct 10 00:21:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[59852]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:21:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[59852]: pam_unix(cron:session): session closed for user root Oct 10 00:22:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[60501]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:22:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[60501]: pam_unix(cron:session): session closed for user root Oct 10 00:23:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[61086]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:23:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[61086]: pam_unix(cron:session): session closed for user root Oct 10 00:24:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[61644]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:24:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[61644]: pam_unix(cron:session): session closed for user root Oct 10 00:25:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[62019]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:25:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[62019]: pam_unix(cron:session): session closed for user root Oct 10 00:26:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[62797]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:26:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[62797]: pam_unix(cron:session): session closed for user root Oct 10 00:27:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[63641]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:27:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[63641]: pam_unix(cron:session): session closed for user root Oct 10 00:28:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[64074]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:28:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[64074]: pam_unix(cron:session): session closed for user root Oct 10 00:29:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[64377]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:29:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[64377]: pam_unix(cron:session): session closed for user root Oct 10 00:30:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[64511]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:30:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[64511]: pam_unix(cron:session): session closed for user root Oct 10 00:31:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[64688]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:31:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[64688]: pam_unix(cron:session): session closed for user root Oct 10 00:32:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[64765]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:32:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[64765]: pam_unix(cron:session): session closed for user root Oct 10 00:33:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[65564]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:33:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[65564]: pam_unix(cron:session): session closed for user root Oct 10 00:34:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[65793]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:34:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[65793]: pam_unix(cron:session): session closed for user root Oct 10 00:35:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[65801]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:35:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[65801]: pam_unix(cron:session): session closed for user root Oct 10 00:36:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[65805]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:36:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[65805]: pam_unix(cron:session): session closed for user root Oct 10 00:37:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[66079]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:37:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[66079]: pam_unix(cron:session): session closed for user root Oct 10 00:38:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[66762]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:38:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[66762]: pam_unix(cron:session): session closed for user root Oct 10 00:39:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[67055]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:39:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[67055]: pam_unix(cron:session): session closed for user root Oct 10 00:40:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[67785]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:40:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[67785]: pam_unix(cron:session): session closed for user root Oct 10 00:41:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[68898]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:41:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[68898]: pam_unix(cron:session): session closed for user root Oct 10 00:42:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[69247]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:42:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[69247]: pam_unix(cron:session): session closed for user root Oct 10 00:43:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[69500]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:43:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[69500]: pam_unix(cron:session): session closed for user root Oct 10 00:44:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[69742]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:44:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[69742]: pam_unix(cron:session): session closed for user root Oct 10 00:45:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[70073]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:45:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[70073]: pam_unix(cron:session): session closed for user root Oct 10 00:46:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[70417]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:46:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[70417]: pam_unix(cron:session): session closed for user root Oct 10 00:47:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[70761]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:47:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[70761]: pam_unix(cron:session): session closed for user root Oct 10 00:48:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[71104]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:48:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[71104]: pam_unix(cron:session): session closed for user root Oct 10 00:48:22 prd-ubuntu2004-docker-8c-8g-41010 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/autorelease-release-scandium-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/autorelease-release-scandium-mvn39-openjdk21/m2repo Oct 10 00:48:22 prd-ubuntu2004-docker-8c-8g-41010 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Oct 10 00:48:22 prd-ubuntu2004-docker-8c-8g-41010 sudo: pam_unix(sudo:session): session closed for user root Oct 10 00:49:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[71457]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:49:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[71457]: pam_unix(cron:session): session closed for user root Oct 10 00:50:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[71542]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 10 00:50:01 prd-ubuntu2004-docker-8c-8g-41010 CRON[71542]: pam_unix(cron:session): session closed for user root Oct 10 00:51:01 prd-ubuntu2004-docker-8c-8g-41010 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/autorelease-release-scandium-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Oct 10 00:51:01 prd-ubuntu2004-docker-8c-8g-41010 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)