Jan 13 00:23:19 prd-ubuntu2004-docker-8c-8g-1150 passwd[766]: password for 'ubuntu' changed by 'root' Jan 13 00:23:19 prd-ubuntu2004-docker-8c-8g-1150 sshd[871]: Server listening on 0.0.0.0 port 22. Jan 13 00:23:19 prd-ubuntu2004-docker-8c-8g-1150 sshd[871]: Server listening on :: port 22. Jan 13 00:23:19 prd-ubuntu2004-docker-8c-8g-1150 systemd-logind[833]: New seat seat0. Jan 13 00:23:19 prd-ubuntu2004-docker-8c-8g-1150 systemd-logind[833]: Watching system buttons on /dev/input/event0 (Power Button) Jan 13 00:23:19 prd-ubuntu2004-docker-8c-8g-1150 systemd-logind[833]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jan 13 00:23:23 prd-ubuntu2004-docker-8c-8g-1150 sshd[2242]: error: kex_exchange_identification: Connection closed by remote host Jan 13 00:23:31 prd-ubuntu2004-docker-8c-8g-1150 sshd[4596]: Invalid user jenkins from 10.30.168.15 port 38336 Jan 13 00:23:31 prd-ubuntu2004-docker-8c-8g-1150 sshd[4596]: Received disconnect from 10.30.168.15 port 38336:11: Closed due to user request. [preauth] Jan 13 00:23:31 prd-ubuntu2004-docker-8c-8g-1150 sshd[4596]: Disconnected from invalid user jenkins 10.30.168.15 port 38336 [preauth] Jan 13 00:23:34 prd-ubuntu2004-docker-8c-8g-1150 sshd[5378]: Invalid user jenkins from 10.30.168.15 port 38338 Jan 13 00:23:34 prd-ubuntu2004-docker-8c-8g-1150 sshd[5378]: Received disconnect from 10.30.168.15 port 38338:11: Closed due to user request. [preauth] Jan 13 00:23:34 prd-ubuntu2004-docker-8c-8g-1150 sshd[5378]: Disconnected from invalid user jenkins 10.30.168.15 port 38338 [preauth] Jan 13 00:23:37 prd-ubuntu2004-docker-8c-8g-1150 sshd[6197]: Invalid user jenkins from 10.30.168.15 port 38342 Jan 13 00:23:37 prd-ubuntu2004-docker-8c-8g-1150 sshd[6197]: Received disconnect from 10.30.168.15 port 38342:11: Closed due to user request. [preauth] Jan 13 00:23:37 prd-ubuntu2004-docker-8c-8g-1150 sshd[6197]: Disconnected from invalid user jenkins 10.30.168.15 port 38342 [preauth] Jan 13 00:23:40 prd-ubuntu2004-docker-8c-8g-1150 sshd[7337]: Invalid user jenkins from 10.30.168.15 port 38344 Jan 13 00:23:40 prd-ubuntu2004-docker-8c-8g-1150 sshd[7337]: Received disconnect from 10.30.168.15 port 38344:11: Closed due to user request. [preauth] Jan 13 00:23:40 prd-ubuntu2004-docker-8c-8g-1150 sshd[7337]: Disconnected from invalid user jenkins 10.30.168.15 port 38344 [preauth] Jan 13 00:23:43 prd-ubuntu2004-docker-8c-8g-1150 sshd[8319]: Invalid user jenkins from 10.30.168.15 port 38410 Jan 13 00:23:43 prd-ubuntu2004-docker-8c-8g-1150 sshd[8319]: Received disconnect from 10.30.168.15 port 38410:11: Closed due to user request. [preauth] Jan 13 00:23:43 prd-ubuntu2004-docker-8c-8g-1150 sshd[8319]: Disconnected from invalid user jenkins 10.30.168.15 port 38410 [preauth] Jan 13 00:23:44 prd-ubuntu2004-docker-8c-8g-1150 useradd[8774]: new group: name=jenkins, GID=1001 Jan 13 00:23:44 prd-ubuntu2004-docker-8c-8g-1150 useradd[8774]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Jan 13 00:23:45 prd-ubuntu2004-docker-8c-8g-1150 usermod[8808]: add 'jenkins' to group 'docker' Jan 13 00:23:45 prd-ubuntu2004-docker-8c-8g-1150 usermod[8808]: add 'jenkins' to shadow group 'docker' Jan 13 00:23:46 prd-ubuntu2004-docker-8c-8g-1150 sshd[9328]: Accepted publickey for jenkins from 10.30.168.15 port 38414 ssh2: RSA SHA256:BBsm4mRgG5V0fGum4Y1Rmy/vs16stdRVhwvexlLUhUs Jan 13 00:23:46 prd-ubuntu2004-docker-8c-8g-1150 sshd[9328]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jan 13 00:23:46 prd-ubuntu2004-docker-8c-8g-1150 systemd-logind[833]: New session 1 of user jenkins. Jan 13 00:23:46 prd-ubuntu2004-docker-8c-8g-1150 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jan 13 00:24:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[14304]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 00:24:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[14304]: pam_unix(cron:session): session closed for user root Jan 13 00:25:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[29070]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 00:25:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[29070]: pam_unix(cron:session): session closed for user root Jan 13 00:25:21 prd-ubuntu2004-docker-8c-8g-1150 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/autorelease-release-titanium-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/java java /usr/lib/jvm/java-21-openjdk-amd64/bin/java 1 Jan 13 00:25:21 prd-ubuntu2004-docker-8c-8g-1150 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jan 13 00:25:21 prd-ubuntu2004-docker-8c-8g-1150 sudo: pam_unix(sudo:session): session closed for user root Jan 13 00:25:21 prd-ubuntu2004-docker-8c-8g-1150 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/autorelease-release-titanium-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/javac javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac 1 Jan 13 00:25:21 prd-ubuntu2004-docker-8c-8g-1150 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jan 13 00:25:21 prd-ubuntu2004-docker-8c-8g-1150 sudo: pam_unix(sudo:session): session closed for user root Jan 13 00:25:21 prd-ubuntu2004-docker-8c-8g-1150 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/autorelease-release-titanium-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/lib/jvm/java-openjdk java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 1 Jan 13 00:25:21 prd-ubuntu2004-docker-8c-8g-1150 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jan 13 00:25:21 prd-ubuntu2004-docker-8c-8g-1150 sudo: pam_unix(sudo:session): session closed for user root Jan 13 00:25:21 prd-ubuntu2004-docker-8c-8g-1150 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/autorelease-release-titanium-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java /usr/lib/jvm/java-21-openjdk-amd64/bin/java Jan 13 00:25:21 prd-ubuntu2004-docker-8c-8g-1150 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jan 13 00:25:21 prd-ubuntu2004-docker-8c-8g-1150 sudo: pam_unix(sudo:session): session closed for user root Jan 13 00:25:21 prd-ubuntu2004-docker-8c-8g-1150 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/autorelease-release-titanium-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --set javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac Jan 13 00:25:21 prd-ubuntu2004-docker-8c-8g-1150 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jan 13 00:25:21 prd-ubuntu2004-docker-8c-8g-1150 sudo: pam_unix(sudo:session): session closed for user root Jan 13 00:25:21 prd-ubuntu2004-docker-8c-8g-1150 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/autorelease-release-titanium-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 Jan 13 00:25:21 prd-ubuntu2004-docker-8c-8g-1150 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jan 13 00:25:21 prd-ubuntu2004-docker-8c-8g-1150 sudo: pam_unix(sudo:session): session closed for user root Jan 13 00:26:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[49179]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 00:26:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[49179]: pam_unix(cron:session): session closed for user root Jan 13 00:27:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[49648]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 00:27:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[49648]: pam_unix(cron:session): session closed for user root Jan 13 00:28:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[50200]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 00:28:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[50200]: pam_unix(cron:session): session closed for user root Jan 13 00:29:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[51843]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 00:29:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[51843]: pam_unix(cron:session): session closed for user root Jan 13 00:30:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[52740]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 00:30:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[52740]: pam_unix(cron:session): session closed for user root Jan 13 00:31:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[53410]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 00:31:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[53410]: pam_unix(cron:session): session closed for user root Jan 13 00:32:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[53964]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 00:32:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[53964]: pam_unix(cron:session): session closed for user root Jan 13 00:33:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[54658]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 00:33:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[54658]: pam_unix(cron:session): session closed for user root Jan 13 00:34:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[55390]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 00:34:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[55390]: pam_unix(cron:session): session closed for user root Jan 13 00:35:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[56034]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 00:35:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[56034]: pam_unix(cron:session): session closed for user root Jan 13 00:36:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[56783]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 00:36:02 prd-ubuntu2004-docker-8c-8g-1150 CRON[56783]: pam_unix(cron:session): session closed for user root Jan 13 00:37:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[57466]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 00:37:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[57466]: pam_unix(cron:session): session closed for user root Jan 13 00:38:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[58021]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 00:38:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[58021]: pam_unix(cron:session): session closed for user root Jan 13 00:39:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[58346]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 00:39:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[58346]: pam_unix(cron:session): session closed for user root Jan 13 00:40:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[59159]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 00:40:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[59159]: pam_unix(cron:session): session closed for user root Jan 13 00:41:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[59938]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 00:41:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[59938]: pam_unix(cron:session): session closed for user root Jan 13 00:42:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[60667]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 00:42:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[60667]: pam_unix(cron:session): session closed for user root Jan 13 00:43:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[61119]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 00:43:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[61119]: pam_unix(cron:session): session closed for user root Jan 13 00:44:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[61587]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 00:44:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[61587]: pam_unix(cron:session): session closed for user root Jan 13 00:45:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[62109]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 00:45:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[62109]: pam_unix(cron:session): session closed for user root Jan 13 00:46:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[62861]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 00:46:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[62861]: pam_unix(cron:session): session closed for user root Jan 13 00:47:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[63569]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 00:47:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[63569]: pam_unix(cron:session): session closed for user root Jan 13 00:48:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[63989]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 00:48:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[63989]: pam_unix(cron:session): session closed for user root Jan 13 00:49:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[64199]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 00:49:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[64199]: pam_unix(cron:session): session closed for user root Jan 13 00:50:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[64436]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 00:50:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[64436]: pam_unix(cron:session): session closed for user root Jan 13 00:51:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[64493]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 00:51:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[64493]: pam_unix(cron:session): session closed for user root Jan 13 00:52:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[64608]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 00:52:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[64608]: pam_unix(cron:session): session closed for user root Jan 13 00:53:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[65364]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 00:53:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[65364]: pam_unix(cron:session): session closed for user root Jan 13 00:54:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[65593]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 00:54:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[65593]: pam_unix(cron:session): session closed for user root Jan 13 00:55:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[65597]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 00:55:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[65597]: pam_unix(cron:session): session closed for user root Jan 13 00:56:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[65601]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 00:56:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[65601]: pam_unix(cron:session): session closed for user root Jan 13 00:57:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[65887]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 00:57:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[65887]: pam_unix(cron:session): session closed for user root Jan 13 00:58:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[66579]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 00:58:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[66579]: pam_unix(cron:session): session closed for user root Jan 13 00:59:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[66868]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 00:59:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[66868]: pam_unix(cron:session): session closed for user root Jan 13 01:00:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[67574]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 01:00:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[67574]: pam_unix(cron:session): session closed for user root Jan 13 01:01:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[68768]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 01:01:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[68768]: pam_unix(cron:session): session closed for user root Jan 13 01:02:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[69029]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 01:02:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[69029]: pam_unix(cron:session): session closed for user root Jan 13 01:03:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[69355]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 01:03:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[69355]: pam_unix(cron:session): session closed for user root Jan 13 01:04:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[69473]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 01:04:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[69473]: pam_unix(cron:session): session closed for user root Jan 13 01:05:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[69801]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 01:05:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[69801]: pam_unix(cron:session): session closed for user root Jan 13 01:06:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[70133]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 01:06:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[70133]: pam_unix(cron:session): session closed for user root Jan 13 01:07:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[70452]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 01:07:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[70452]: pam_unix(cron:session): session closed for user root Jan 13 01:08:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[70772]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 01:08:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[70772]: pam_unix(cron:session): session closed for user root Jan 13 01:08:58 prd-ubuntu2004-docker-8c-8g-1150 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/autorelease-release-titanium-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/autorelease-release-titanium-mvn39-openjdk21/m2repo Jan 13 01:08:58 prd-ubuntu2004-docker-8c-8g-1150 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jan 13 01:08:58 prd-ubuntu2004-docker-8c-8g-1150 sudo: pam_unix(sudo:session): session closed for user root Jan 13 01:09:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[71295]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 01:09:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[71295]: pam_unix(cron:session): session closed for user root Jan 13 01:10:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[71308]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 01:10:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[71308]: pam_unix(cron:session): session closed for user root Jan 13 01:11:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[71392]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 13 01:11:01 prd-ubuntu2004-docker-8c-8g-1150 CRON[71392]: pam_unix(cron:session): session closed for user root Jan 13 01:11:34 prd-ubuntu2004-docker-8c-8g-1150 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/autorelease-release-titanium-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Jan 13 01:11:34 prd-ubuntu2004-docker-8c-8g-1150 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)