Oct 9 20:39:19 prd-ubuntu2004-docker-8c-8g-40991 passwd[753]: password for 'ubuntu' changed by 'root' Oct 9 20:39:19 prd-ubuntu2004-docker-8c-8g-40991 systemd-logind[827]: New seat seat0. Oct 9 20:39:19 prd-ubuntu2004-docker-8c-8g-40991 sshd[853]: Server listening on 0.0.0.0 port 22. Oct 9 20:39:19 prd-ubuntu2004-docker-8c-8g-40991 sshd[853]: Server listening on :: port 22. Oct 9 20:39:19 prd-ubuntu2004-docker-8c-8g-40991 systemd-logind[827]: Watching system buttons on /dev/input/event0 (Power Button) Oct 9 20:39:19 prd-ubuntu2004-docker-8c-8g-40991 systemd-logind[827]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Oct 9 20:39:22 prd-ubuntu2004-docker-8c-8g-40991 sshd[1979]: error: kex_exchange_identification: Connection closed by remote host Oct 9 20:39:29 prd-ubuntu2004-docker-8c-8g-40991 sshd[3818]: Invalid user jenkins from 10.30.168.15 port 46402 Oct 9 20:39:29 prd-ubuntu2004-docker-8c-8g-40991 sshd[3818]: Received disconnect from 10.30.168.15 port 46402:11: Closed due to user request. [preauth] Oct 9 20:39:29 prd-ubuntu2004-docker-8c-8g-40991 sshd[3818]: Disconnected from invalid user jenkins 10.30.168.15 port 46402 [preauth] Oct 9 20:39:32 prd-ubuntu2004-docker-8c-8g-40991 sshd[4650]: Invalid user jenkins from 10.30.168.15 port 46410 Oct 9 20:39:32 prd-ubuntu2004-docker-8c-8g-40991 sshd[4650]: Received disconnect from 10.30.168.15 port 46410:11: Closed due to user request. [preauth] Oct 9 20:39:32 prd-ubuntu2004-docker-8c-8g-40991 sshd[4650]: Disconnected from invalid user jenkins 10.30.168.15 port 46410 [preauth] Oct 9 20:39:34 prd-ubuntu2004-docker-8c-8g-40991 sshd[5364]: Invalid user jenkins from 10.30.168.15 port 46412 Oct 9 20:39:34 prd-ubuntu2004-docker-8c-8g-40991 sshd[5364]: Received disconnect from 10.30.168.15 port 46412:11: Closed due to user request. [preauth] Oct 9 20:39:34 prd-ubuntu2004-docker-8c-8g-40991 sshd[5364]: Disconnected from invalid user jenkins 10.30.168.15 port 46412 [preauth] Oct 9 20:39:38 prd-ubuntu2004-docker-8c-8g-40991 sshd[6150]: Invalid user jenkins from 10.30.168.15 port 46414 Oct 9 20:39:38 prd-ubuntu2004-docker-8c-8g-40991 sshd[6150]: Received disconnect from 10.30.168.15 port 46414:11: Closed due to user request. [preauth] Oct 9 20:39:38 prd-ubuntu2004-docker-8c-8g-40991 sshd[6150]: Disconnected from invalid user jenkins 10.30.168.15 port 46414 [preauth] Oct 9 20:39:41 prd-ubuntu2004-docker-8c-8g-40991 sshd[7304]: Invalid user jenkins from 10.30.168.15 port 46418 Oct 9 20:39:41 prd-ubuntu2004-docker-8c-8g-40991 sshd[7304]: Received disconnect from 10.30.168.15 port 46418:11: Closed due to user request. [preauth] Oct 9 20:39:41 prd-ubuntu2004-docker-8c-8g-40991 sshd[7304]: Disconnected from invalid user jenkins 10.30.168.15 port 46418 [preauth] Oct 9 20:39:43 prd-ubuntu2004-docker-8c-8g-40991 sshd[8104]: Invalid user jenkins from 10.30.168.15 port 46420 Oct 9 20:39:44 prd-ubuntu2004-docker-8c-8g-40991 sshd[8104]: Received disconnect from 10.30.168.15 port 46420:11: Closed due to user request. [preauth] Oct 9 20:39:44 prd-ubuntu2004-docker-8c-8g-40991 sshd[8104]: Disconnected from invalid user jenkins 10.30.168.15 port 46420 [preauth] Oct 9 20:39:46 prd-ubuntu2004-docker-8c-8g-40991 sshd[8664]: Invalid user jenkins from 10.30.168.15 port 46422 Oct 9 20:39:46 prd-ubuntu2004-docker-8c-8g-40991 sshd[8664]: Received disconnect from 10.30.168.15 port 46422:11: Closed due to user request. [preauth] Oct 9 20:39:46 prd-ubuntu2004-docker-8c-8g-40991 sshd[8664]: Disconnected from invalid user jenkins 10.30.168.15 port 46422 [preauth] Oct 9 20:39:47 prd-ubuntu2004-docker-8c-8g-40991 useradd[8964]: new group: name=jenkins, GID=1001 Oct 9 20:39:47 prd-ubuntu2004-docker-8c-8g-40991 useradd[8964]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Oct 9 20:39:47 prd-ubuntu2004-docker-8c-8g-40991 usermod[8999]: add 'jenkins' to group 'docker' Oct 9 20:39:47 prd-ubuntu2004-docker-8c-8g-40991 usermod[8999]: add 'jenkins' to shadow group 'docker' Oct 9 20:39:50 prd-ubuntu2004-docker-8c-8g-40991 sshd[9590]: Accepted publickey for jenkins from 10.30.168.15 port 46424 ssh2: RSA SHA256:BBsm4mRgG5V0fGum4Y1Rmy/vs16stdRVhwvexlLUhUs Oct 9 20:39:50 prd-ubuntu2004-docker-8c-8g-40991 sshd[9590]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Oct 9 20:39:50 prd-ubuntu2004-docker-8c-8g-40991 systemd-logind[827]: New session 1 of user jenkins. Oct 9 20:39:50 prd-ubuntu2004-docker-8c-8g-40991 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Oct 9 20:40:01 prd-ubuntu2004-docker-8c-8g-40991 CRON[13242]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 9 20:40:01 prd-ubuntu2004-docker-8c-8g-40991 CRON[13242]: pam_unix(cron:session): session closed for user root Oct 9 20:40:14 prd-ubuntu2004-docker-8c-8g-40991 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-calcium ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/java java /usr/lib/jvm/java-17-openjdk-amd64/bin/java 1 Oct 9 20:40:14 prd-ubuntu2004-docker-8c-8g-40991 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Oct 9 20:40:14 prd-ubuntu2004-docker-8c-8g-40991 sudo: pam_unix(sudo:session): session closed for user root Oct 9 20:40:14 prd-ubuntu2004-docker-8c-8g-40991 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-calcium ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/javac javac /usr/lib/jvm/java-17-openjdk-amd64/bin/javac 1 Oct 9 20:40:14 prd-ubuntu2004-docker-8c-8g-40991 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Oct 9 20:40:14 prd-ubuntu2004-docker-8c-8g-40991 sudo: pam_unix(sudo:session): session closed for user root Oct 9 20:40:14 prd-ubuntu2004-docker-8c-8g-40991 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-calcium ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/lib/jvm/java-openjdk java_sdk_openjdk /usr/lib/jvm/java-17-openjdk-amd64 1 Oct 9 20:40:14 prd-ubuntu2004-docker-8c-8g-40991 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Oct 9 20:40:14 prd-ubuntu2004-docker-8c-8g-40991 sudo: pam_unix(sudo:session): session closed for user root Oct 9 20:40:14 prd-ubuntu2004-docker-8c-8g-40991 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-calcium ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java /usr/lib/jvm/java-17-openjdk-amd64/bin/java Oct 9 20:40:14 prd-ubuntu2004-docker-8c-8g-40991 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Oct 9 20:40:14 prd-ubuntu2004-docker-8c-8g-40991 sudo: pam_unix(sudo:session): session closed for user root Oct 9 20:40:14 prd-ubuntu2004-docker-8c-8g-40991 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-calcium ; USER=root ; COMMAND=/usr/bin/update-alternatives --set javac /usr/lib/jvm/java-17-openjdk-amd64/bin/javac Oct 9 20:40:14 prd-ubuntu2004-docker-8c-8g-40991 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Oct 9 20:40:14 prd-ubuntu2004-docker-8c-8g-40991 sudo: pam_unix(sudo:session): session closed for user root Oct 9 20:40:14 prd-ubuntu2004-docker-8c-8g-40991 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-calcium ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java_sdk_openjdk /usr/lib/jvm/java-17-openjdk-amd64 Oct 9 20:40:14 prd-ubuntu2004-docker-8c-8g-40991 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Oct 9 20:40:14 prd-ubuntu2004-docker-8c-8g-40991 sudo: pam_unix(sudo:session): session closed for user root Oct 9 20:41:01 prd-ubuntu2004-docker-8c-8g-40991 CRON[28387]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 9 20:41:01 prd-ubuntu2004-docker-8c-8g-40991 CRON[28387]: pam_unix(cron:session): session closed for user root Oct 9 20:42:01 prd-ubuntu2004-docker-8c-8g-40991 CRON[28485]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 9 20:42:01 prd-ubuntu2004-docker-8c-8g-40991 CRON[28485]: pam_unix(cron:session): session closed for user root Oct 9 20:43:01 prd-ubuntu2004-docker-8c-8g-40991 CRON[29745]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 9 20:43:01 prd-ubuntu2004-docker-8c-8g-40991 CRON[29745]: pam_unix(cron:session): session closed for user root Oct 9 20:44:01 prd-ubuntu2004-docker-8c-8g-40991 CRON[31412]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 9 20:44:01 prd-ubuntu2004-docker-8c-8g-40991 CRON[31412]: pam_unix(cron:session): session closed for user root Oct 9 20:45:01 prd-ubuntu2004-docker-8c-8g-40991 CRON[32594]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 9 20:45:01 prd-ubuntu2004-docker-8c-8g-40991 CRON[32594]: pam_unix(cron:session): session closed for user root Oct 9 20:46:01 prd-ubuntu2004-docker-8c-8g-40991 CRON[32685]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 9 20:46:01 prd-ubuntu2004-docker-8c-8g-40991 CRON[32685]: pam_unix(cron:session): session closed for user root Oct 9 20:47:01 prd-ubuntu2004-docker-8c-8g-40991 CRON[32691]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 9 20:47:01 prd-ubuntu2004-docker-8c-8g-40991 CRON[32691]: pam_unix(cron:session): session closed for user root Oct 9 20:48:01 prd-ubuntu2004-docker-8c-8g-40991 CRON[32771]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 9 20:48:01 prd-ubuntu2004-docker-8c-8g-40991 CRON[32771]: pam_unix(cron:session): session closed for user root Oct 9 20:49:01 prd-ubuntu2004-docker-8c-8g-40991 CRON[32826]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 9 20:49:01 prd-ubuntu2004-docker-8c-8g-40991 CRON[32826]: pam_unix(cron:session): session closed for user root Oct 9 20:50:01 prd-ubuntu2004-docker-8c-8g-40991 CRON[39448]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 9 20:50:01 prd-ubuntu2004-docker-8c-8g-40991 CRON[39448]: pam_unix(cron:session): session closed for user root Oct 9 20:51:01 prd-ubuntu2004-docker-8c-8g-40991 CRON[40050]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 9 20:51:01 prd-ubuntu2004-docker-8c-8g-40991 CRON[40050]: pam_unix(cron:session): session closed for user root Oct 9 20:51:26 prd-ubuntu2004-docker-8c-8g-40991 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-calcium ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Oct 9 20:51:26 prd-ubuntu2004-docker-8c-8g-40991 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)