May 25 21:25:01 prd-ubuntu2204-docker-8c-8g-20130 passwd[742]: password for 'ubuntu' changed by 'root' May 25 21:25:01 prd-ubuntu2204-docker-8c-8g-20130 systemd-logind[774]: New seat seat0. May 25 21:25:01 prd-ubuntu2204-docker-8c-8g-20130 systemd-logind[774]: Watching system buttons on /dev/input/event0 (Power Button) May 25 21:25:01 prd-ubuntu2204-docker-8c-8g-20130 systemd-logind[774]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) May 25 21:25:01 prd-ubuntu2204-docker-8c-8g-20130 sshd[798]: Server listening on 0.0.0.0 port 22. May 25 21:25:01 prd-ubuntu2204-docker-8c-8g-20130 sshd[798]: Server listening on :: port 22. May 25 21:25:04 prd-ubuntu2204-docker-8c-8g-20130 sshd[1043]: error: kex_exchange_identification: Connection closed by remote host May 25 21:25:04 prd-ubuntu2204-docker-8c-8g-20130 sshd[1043]: Connection closed by 10.30.168.15 port 52608 May 25 21:25:10 prd-ubuntu2204-docker-8c-8g-20130 sshd[1051]: Invalid user jenkins from 10.30.168.15 port 52612 May 25 21:25:10 prd-ubuntu2204-docker-8c-8g-20130 sshd[1051]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] May 25 21:25:10 prd-ubuntu2204-docker-8c-8g-20130 sshd[1051]: Received disconnect from 10.30.168.15 port 52612:11: Closed due to user request. [preauth] May 25 21:25:10 prd-ubuntu2204-docker-8c-8g-20130 sshd[1051]: Disconnected from invalid user jenkins 10.30.168.15 port 52612 [preauth] May 25 21:25:13 prd-ubuntu2204-docker-8c-8g-20130 sshd[1054]: Invalid user jenkins from 10.30.168.15 port 52614 May 25 21:25:13 prd-ubuntu2204-docker-8c-8g-20130 sshd[1054]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] May 25 21:25:13 prd-ubuntu2204-docker-8c-8g-20130 sshd[1054]: Received disconnect from 10.30.168.15 port 52614:11: Closed due to user request. [preauth] May 25 21:25:13 prd-ubuntu2204-docker-8c-8g-20130 sshd[1054]: Disconnected from invalid user jenkins 10.30.168.15 port 52614 [preauth] May 25 21:25:16 prd-ubuntu2204-docker-8c-8g-20130 sshd[1056]: Invalid user jenkins from 10.30.168.15 port 52618 May 25 21:25:16 prd-ubuntu2204-docker-8c-8g-20130 sshd[1056]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] May 25 21:25:16 prd-ubuntu2204-docker-8c-8g-20130 sshd[1056]: Received disconnect from 10.30.168.15 port 52618:11: Closed due to user request. [preauth] May 25 21:25:16 prd-ubuntu2204-docker-8c-8g-20130 sshd[1056]: Disconnected from invalid user jenkins 10.30.168.15 port 52618 [preauth] May 25 21:25:19 prd-ubuntu2204-docker-8c-8g-20130 sshd[1193]: Invalid user jenkins from 10.30.168.15 port 52620 May 25 21:25:19 prd-ubuntu2204-docker-8c-8g-20130 sshd[1193]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] May 25 21:25:19 prd-ubuntu2204-docker-8c-8g-20130 sshd[1193]: Received disconnect from 10.30.168.15 port 52620:11: Closed due to user request. [preauth] May 25 21:25:19 prd-ubuntu2204-docker-8c-8g-20130 sshd[1193]: Disconnected from invalid user jenkins 10.30.168.15 port 52620 [preauth] May 25 21:25:22 prd-ubuntu2204-docker-8c-8g-20130 sshd[1332]: Invalid user jenkins from 10.30.168.15 port 52622 May 25 21:25:22 prd-ubuntu2204-docker-8c-8g-20130 sshd[1332]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] May 25 21:25:22 prd-ubuntu2204-docker-8c-8g-20130 sshd[1332]: Received disconnect from 10.30.168.15 port 52622:11: Closed due to user request. [preauth] May 25 21:25:22 prd-ubuntu2204-docker-8c-8g-20130 sshd[1332]: Disconnected from invalid user jenkins 10.30.168.15 port 52622 [preauth] May 25 21:25:25 prd-ubuntu2204-docker-8c-8g-20130 sshd[1404]: Invalid user jenkins from 10.30.168.15 port 52624 May 25 21:25:25 prd-ubuntu2204-docker-8c-8g-20130 sshd[1404]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] May 25 21:25:25 prd-ubuntu2204-docker-8c-8g-20130 sshd[1404]: Received disconnect from 10.30.168.15 port 52624:11: Closed due to user request. [preauth] May 25 21:25:25 prd-ubuntu2204-docker-8c-8g-20130 sshd[1404]: Disconnected from invalid user jenkins 10.30.168.15 port 52624 [preauth] May 25 21:25:28 prd-ubuntu2204-docker-8c-8g-20130 sshd[1406]: Invalid user jenkins from 10.30.168.15 port 52626 May 25 21:25:28 prd-ubuntu2204-docker-8c-8g-20130 sshd[1406]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] May 25 21:25:28 prd-ubuntu2204-docker-8c-8g-20130 sshd[1406]: Received disconnect from 10.30.168.15 port 52626:11: Closed due to user request. [preauth] May 25 21:25:28 prd-ubuntu2204-docker-8c-8g-20130 sshd[1406]: Disconnected from invalid user jenkins 10.30.168.15 port 52626 [preauth] May 25 21:25:31 prd-ubuntu2204-docker-8c-8g-20130 sshd[1408]: Invalid user jenkins from 10.30.168.15 port 52634 May 25 21:25:31 prd-ubuntu2204-docker-8c-8g-20130 sshd[1408]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] May 25 21:25:31 prd-ubuntu2204-docker-8c-8g-20130 sshd[1408]: Received disconnect from 10.30.168.15 port 52634:11: Closed due to user request. [preauth] May 25 21:25:31 prd-ubuntu2204-docker-8c-8g-20130 sshd[1408]: Disconnected from invalid user jenkins 10.30.168.15 port 52634 [preauth] May 25 21:25:32 prd-ubuntu2204-docker-8c-8g-20130 useradd[1426]: new group: name=jenkins, GID=1001 May 25 21:25:32 prd-ubuntu2204-docker-8c-8g-20130 useradd[1426]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none May 25 21:25:32 prd-ubuntu2204-docker-8c-8g-20130 usermod[1435]: add 'jenkins' to group 'docker' May 25 21:25:32 prd-ubuntu2204-docker-8c-8g-20130 usermod[1435]: add 'jenkins' to shadow group 'docker' May 25 21:25:34 prd-ubuntu2204-docker-8c-8g-20130 sshd[1471]: Accepted publickey for jenkins from 10.30.168.15 port 52636 ssh2: RSA SHA256:BBsm4mRgG5V0fGum4Y1Rmy/vs16stdRVhwvexlLUhUs May 25 21:25:34 prd-ubuntu2204-docker-8c-8g-20130 sshd[1471]: pam_unix(sshd:session): session opened for user jenkins(uid=1001) by (uid=0) May 25 21:25:34 prd-ubuntu2204-docker-8c-8g-20130 systemd-logind[774]: New session 1 of user jenkins. May 25 21:25:34 prd-ubuntu2204-docker-8c-8g-20130 systemd: pam_unix(systemd-user:session): session opened for user jenkins(uid=1001) by (uid=0) May 25 21:26:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[1931]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 21:26:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[1931]: pam_unix(cron:session): session closed for user root May 25 21:27:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[2164]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 21:27:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[2164]: pam_unix(cron:session): session closed for user root May 25 21:27:02 prd-ubuntu2204-docker-8c-8g-20130 sudo: jenkins : PWD=/w/workspace/bgpcep-maven-merge-master ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/java java /usr/lib/jvm/java-21-openjdk-amd64/bin/java 1 May 25 21:27:02 prd-ubuntu2204-docker-8c-8g-20130 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) May 25 21:27:02 prd-ubuntu2204-docker-8c-8g-20130 sudo: pam_unix(sudo:session): session closed for user root May 25 21:27:02 prd-ubuntu2204-docker-8c-8g-20130 sudo: jenkins : PWD=/w/workspace/bgpcep-maven-merge-master ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/javac javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac 1 May 25 21:27:02 prd-ubuntu2204-docker-8c-8g-20130 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) May 25 21:27:02 prd-ubuntu2204-docker-8c-8g-20130 sudo: pam_unix(sudo:session): session closed for user root May 25 21:27:02 prd-ubuntu2204-docker-8c-8g-20130 sudo: jenkins : PWD=/w/workspace/bgpcep-maven-merge-master ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/lib/jvm/java-openjdk java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 1 May 25 21:27:02 prd-ubuntu2204-docker-8c-8g-20130 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) May 25 21:27:02 prd-ubuntu2204-docker-8c-8g-20130 sudo: pam_unix(sudo:session): session closed for user root May 25 21:27:02 prd-ubuntu2204-docker-8c-8g-20130 sudo: jenkins : PWD=/w/workspace/bgpcep-maven-merge-master ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java /usr/lib/jvm/java-21-openjdk-amd64/bin/java May 25 21:27:02 prd-ubuntu2204-docker-8c-8g-20130 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) May 25 21:27:02 prd-ubuntu2204-docker-8c-8g-20130 sudo: pam_unix(sudo:session): session closed for user root May 25 21:27:02 prd-ubuntu2204-docker-8c-8g-20130 sudo: jenkins : PWD=/w/workspace/bgpcep-maven-merge-master ; USER=root ; COMMAND=/usr/bin/update-alternatives --set javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac May 25 21:27:02 prd-ubuntu2204-docker-8c-8g-20130 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) May 25 21:27:02 prd-ubuntu2204-docker-8c-8g-20130 sudo: pam_unix(sudo:session): session closed for user root May 25 21:27:02 prd-ubuntu2204-docker-8c-8g-20130 sudo: jenkins : PWD=/w/workspace/bgpcep-maven-merge-master ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 May 25 21:27:02 prd-ubuntu2204-docker-8c-8g-20130 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) May 25 21:27:02 prd-ubuntu2204-docker-8c-8g-20130 sudo: pam_unix(sudo:session): session closed for user root May 25 21:28:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[2352]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 21:28:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[2352]: pam_unix(cron:session): session closed for user root May 25 21:29:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[2977]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 21:29:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[2977]: pam_unix(cron:session): session closed for user root May 25 21:30:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[4828]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 21:30:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[4828]: pam_unix(cron:session): session closed for user root May 25 21:31:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[6696]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 21:31:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[6696]: pam_unix(cron:session): session closed for user root May 25 21:32:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[8315]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 21:32:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[8315]: pam_unix(cron:session): session closed for user root May 25 21:33:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[9531]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 21:33:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[9531]: pam_unix(cron:session): session closed for user root May 25 21:34:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[10299]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 21:34:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[10299]: pam_unix(cron:session): session closed for user root May 25 21:35:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[10802]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 21:35:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[10802]: pam_unix(cron:session): session closed for user root May 25 21:36:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[11474]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 21:36:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[11474]: pam_unix(cron:session): session closed for user root May 25 21:37:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[12021]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 21:37:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[12021]: pam_unix(cron:session): session closed for user root May 25 21:38:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[13160]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 21:38:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[13160]: pam_unix(cron:session): session closed for user root May 25 21:39:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[15166]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 21:39:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[15166]: pam_unix(cron:session): session closed for user root May 25 21:40:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[17324]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 21:40:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[17324]: pam_unix(cron:session): session closed for user root May 25 21:41:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[18624]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 21:41:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[18624]: pam_unix(cron:session): session closed for user root May 25 21:42:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[18889]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 21:42:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[18889]: pam_unix(cron:session): session closed for user root May 25 21:43:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[19958]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 21:43:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[19958]: pam_unix(cron:session): session closed for user root May 25 21:44:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[21533]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 21:44:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[21533]: pam_unix(cron:session): session closed for user root May 25 21:45:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[22668]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 21:45:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[22668]: pam_unix(cron:session): session closed for user root May 25 21:46:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[23745]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 21:46:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[23745]: pam_unix(cron:session): session closed for user root May 25 21:47:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[24778]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 21:47:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[24778]: pam_unix(cron:session): session closed for user root May 25 21:48:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[26690]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 21:48:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[26690]: pam_unix(cron:session): session closed for user root May 25 21:49:02 prd-ubuntu2204-docker-8c-8g-20130 CRON[28273]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 21:49:03 prd-ubuntu2204-docker-8c-8g-20130 CRON[28273]: pam_unix(cron:session): session closed for user root May 25 21:50:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[29488]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 21:50:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[29488]: pam_unix(cron:session): session closed for user root May 25 21:51:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[30557]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 21:51:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[30557]: pam_unix(cron:session): session closed for user root May 25 21:52:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[31809]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 21:52:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[31809]: pam_unix(cron:session): session closed for user root May 25 21:53:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[33242]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 21:53:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[33242]: pam_unix(cron:session): session closed for user root May 25 21:54:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[34522]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 21:54:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[34522]: pam_unix(cron:session): session closed for user root May 25 21:55:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[35249]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 21:55:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[35249]: pam_unix(cron:session): session closed for user root May 25 21:56:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[36620]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 21:56:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[36620]: pam_unix(cron:session): session closed for user root May 25 21:57:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[38167]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 21:57:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[38167]: pam_unix(cron:session): session closed for user root May 25 21:58:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[39468]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 21:58:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[39468]: pam_unix(cron:session): session closed for user root May 25 21:59:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[40846]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 21:59:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[40846]: pam_unix(cron:session): session closed for user root May 25 22:00:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[41622]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 22:00:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[41622]: pam_unix(cron:session): session closed for user root May 25 22:01:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[42010]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 22:01:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[42010]: pam_unix(cron:session): session closed for user root May 25 22:02:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[42020]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 22:02:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[42020]: pam_unix(cron:session): session closed for user root May 25 22:03:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[42023]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 22:03:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[42023]: pam_unix(cron:session): session closed for user root May 25 22:04:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[42027]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 22:04:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[42027]: pam_unix(cron:session): session closed for user root May 25 22:05:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[42216]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) May 25 22:05:01 prd-ubuntu2204-docker-8c-8g-20130 CRON[42216]: pam_unix(cron:session): session closed for user root May 25 22:05:21 prd-ubuntu2204-docker-8c-8g-20130 sudo: jenkins : PWD=/w/workspace/bgpcep-maven-merge-master ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp