Sep 30 21:15:41 prd-ubuntu2004-docker-8c-8g-30988 passwd[755]: password for 'ubuntu' changed by 'root' Sep 30 21:15:41 prd-ubuntu2004-docker-8c-8g-30988 systemd-logind[828]: New seat seat0. Sep 30 21:15:41 prd-ubuntu2004-docker-8c-8g-30988 systemd-logind[828]: Watching system buttons on /dev/input/event0 (Power Button) Sep 30 21:15:41 prd-ubuntu2004-docker-8c-8g-30988 systemd-logind[828]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Sep 30 21:15:41 prd-ubuntu2004-docker-8c-8g-30988 sshd[884]: Server listening on 0.0.0.0 port 22. Sep 30 21:15:41 prd-ubuntu2004-docker-8c-8g-30988 sshd[884]: Server listening on :: port 22. Sep 30 21:15:42 prd-ubuntu2004-docker-8c-8g-30988 sshd[1138]: error: kex_exchange_identification: Connection closed by remote host Sep 30 21:15:48 prd-ubuntu2004-docker-8c-8g-30988 sshd[2796]: Invalid user jenkins from 10.30.168.15 port 33044 Sep 30 21:15:48 prd-ubuntu2004-docker-8c-8g-30988 sshd[2796]: Received disconnect from 10.30.168.15 port 33044:11: Closed due to user request. [preauth] Sep 30 21:15:48 prd-ubuntu2004-docker-8c-8g-30988 sshd[2796]: Disconnected from invalid user jenkins 10.30.168.15 port 33044 [preauth] Sep 30 21:15:51 prd-ubuntu2004-docker-8c-8g-30988 sshd[3738]: Invalid user jenkins from 10.30.168.15 port 33048 Sep 30 21:15:51 prd-ubuntu2004-docker-8c-8g-30988 sshd[3738]: Received disconnect from 10.30.168.15 port 33048:11: Closed due to user request. [preauth] Sep 30 21:15:51 prd-ubuntu2004-docker-8c-8g-30988 sshd[3738]: Disconnected from invalid user jenkins 10.30.168.15 port 33048 [preauth] Sep 30 21:15:54 prd-ubuntu2004-docker-8c-8g-30988 sshd[4569]: Invalid user jenkins from 10.30.168.15 port 33050 Sep 30 21:15:54 prd-ubuntu2004-docker-8c-8g-30988 sshd[4569]: Received disconnect from 10.30.168.15 port 33050:11: Closed due to user request. [preauth] Sep 30 21:15:54 prd-ubuntu2004-docker-8c-8g-30988 sshd[4569]: Disconnected from invalid user jenkins 10.30.168.15 port 33050 [preauth] Sep 30 21:15:57 prd-ubuntu2004-docker-8c-8g-30988 sshd[5369]: Invalid user jenkins from 10.30.168.15 port 33052 Sep 30 21:15:57 prd-ubuntu2004-docker-8c-8g-30988 sshd[5369]: Received disconnect from 10.30.168.15 port 33052:11: Closed due to user request. [preauth] Sep 30 21:15:57 prd-ubuntu2004-docker-8c-8g-30988 sshd[5369]: Disconnected from invalid user jenkins 10.30.168.15 port 33052 [preauth] Sep 30 21:16:01 prd-ubuntu2004-docker-8c-8g-30988 sshd[6162]: Invalid user jenkins from 10.30.168.15 port 33054 Sep 30 21:16:01 prd-ubuntu2004-docker-8c-8g-30988 sshd[6162]: Received disconnect from 10.30.168.15 port 33054:11: Closed due to user request. [preauth] Sep 30 21:16:01 prd-ubuntu2004-docker-8c-8g-30988 sshd[6162]: Disconnected from invalid user jenkins 10.30.168.15 port 33054 [preauth] Sep 30 21:16:03 prd-ubuntu2004-docker-8c-8g-30988 CRON[6996]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 30 21:16:03 prd-ubuntu2004-docker-8c-8g-30988 CRON[6996]: pam_unix(cron:session): session closed for user root Sep 30 21:16:04 prd-ubuntu2004-docker-8c-8g-30988 sshd[7415]: Invalid user jenkins from 10.30.168.15 port 33058 Sep 30 21:16:04 prd-ubuntu2004-docker-8c-8g-30988 sshd[7415]: Received disconnect from 10.30.168.15 port 33058:11: Closed due to user request. [preauth] Sep 30 21:16:04 prd-ubuntu2004-docker-8c-8g-30988 sshd[7415]: Disconnected from invalid user jenkins 10.30.168.15 port 33058 [preauth] Sep 30 21:16:07 prd-ubuntu2004-docker-8c-8g-30988 sshd[8244]: Invalid user jenkins from 10.30.168.15 port 33068 Sep 30 21:16:07 prd-ubuntu2004-docker-8c-8g-30988 sshd[8244]: Received disconnect from 10.30.168.15 port 33068:11: Closed due to user request. [preauth] Sep 30 21:16:07 prd-ubuntu2004-docker-8c-8g-30988 sshd[8244]: Disconnected from invalid user jenkins 10.30.168.15 port 33068 [preauth] Sep 30 21:16:11 prd-ubuntu2004-docker-8c-8g-30988 sshd[8734]: Invalid user jenkins from 10.30.168.15 port 33070 Sep 30 21:16:11 prd-ubuntu2004-docker-8c-8g-30988 sshd[8734]: Received disconnect from 10.30.168.15 port 33070:11: Closed due to user request. [preauth] Sep 30 21:16:11 prd-ubuntu2004-docker-8c-8g-30988 sshd[8734]: Disconnected from invalid user jenkins 10.30.168.15 port 33070 [preauth] Sep 30 21:16:11 prd-ubuntu2004-docker-8c-8g-30988 useradd[8983]: new group: name=jenkins, GID=1001 Sep 30 21:16:11 prd-ubuntu2004-docker-8c-8g-30988 useradd[8983]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Sep 30 21:16:11 prd-ubuntu2004-docker-8c-8g-30988 usermod[9015]: add 'jenkins' to group 'docker' Sep 30 21:16:11 prd-ubuntu2004-docker-8c-8g-30988 usermod[9015]: add 'jenkins' to shadow group 'docker' Sep 30 21:16:16 prd-ubuntu2004-docker-8c-8g-30988 sshd[10537]: Accepted publickey for jenkins from 10.30.168.15 port 33072 ssh2: RSA SHA256:BBsm4mRgG5V0fGum4Y1Rmy/vs16stdRVhwvexlLUhUs Sep 30 21:16:16 prd-ubuntu2004-docker-8c-8g-30988 sshd[10537]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Sep 30 21:16:16 prd-ubuntu2004-docker-8c-8g-30988 systemd-logind[828]: New session 2 of user jenkins. Sep 30 21:16:16 prd-ubuntu2004-docker-8c-8g-30988 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Sep 30 21:16:40 prd-ubuntu2004-docker-8c-8g-30988 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-scandium ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/java java /usr/lib/jvm/java-21-openjdk-amd64/bin/java 1 Sep 30 21:16:40 prd-ubuntu2004-docker-8c-8g-30988 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Sep 30 21:16:40 prd-ubuntu2004-docker-8c-8g-30988 sudo: pam_unix(sudo:session): session closed for user root Sep 30 21:16:40 prd-ubuntu2004-docker-8c-8g-30988 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-scandium ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/javac javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac 1 Sep 30 21:16:40 prd-ubuntu2004-docker-8c-8g-30988 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Sep 30 21:16:40 prd-ubuntu2004-docker-8c-8g-30988 sudo: pam_unix(sudo:session): session closed for user root Sep 30 21:16:40 prd-ubuntu2004-docker-8c-8g-30988 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-scandium ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/lib/jvm/java-openjdk java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 1 Sep 30 21:16:40 prd-ubuntu2004-docker-8c-8g-30988 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Sep 30 21:16:40 prd-ubuntu2004-docker-8c-8g-30988 sudo: pam_unix(sudo:session): session closed for user root Sep 30 21:16:40 prd-ubuntu2004-docker-8c-8g-30988 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-scandium ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java /usr/lib/jvm/java-21-openjdk-amd64/bin/java Sep 30 21:16:40 prd-ubuntu2004-docker-8c-8g-30988 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Sep 30 21:16:40 prd-ubuntu2004-docker-8c-8g-30988 sudo: pam_unix(sudo:session): session closed for user root Sep 30 21:16:40 prd-ubuntu2004-docker-8c-8g-30988 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-scandium ; USER=root ; COMMAND=/usr/bin/update-alternatives --set javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac Sep 30 21:16:40 prd-ubuntu2004-docker-8c-8g-30988 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Sep 30 21:16:40 prd-ubuntu2004-docker-8c-8g-30988 sudo: pam_unix(sudo:session): session closed for user root Sep 30 21:16:40 prd-ubuntu2004-docker-8c-8g-30988 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-scandium ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 Sep 30 21:16:40 prd-ubuntu2004-docker-8c-8g-30988 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Sep 30 21:16:40 prd-ubuntu2004-docker-8c-8g-30988 sudo: pam_unix(sudo:session): session closed for user root Sep 30 21:17:01 prd-ubuntu2004-docker-8c-8g-30988 CRON[23049]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 30 21:17:01 prd-ubuntu2004-docker-8c-8g-30988 CRON[23050]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 30 21:17:01 prd-ubuntu2004-docker-8c-8g-30988 CRON[23049]: pam_unix(cron:session): session closed for user root Sep 30 21:17:01 prd-ubuntu2004-docker-8c-8g-30988 CRON[23050]: pam_unix(cron:session): session closed for user root Sep 30 21:18:01 prd-ubuntu2004-docker-8c-8g-30988 CRON[28460]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 30 21:18:01 prd-ubuntu2004-docker-8c-8g-30988 CRON[28460]: pam_unix(cron:session): session closed for user root Sep 30 21:19:01 prd-ubuntu2004-docker-8c-8g-30988 CRON[29106]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 30 21:19:01 prd-ubuntu2004-docker-8c-8g-30988 CRON[29106]: pam_unix(cron:session): session closed for user root Sep 30 21:20:01 prd-ubuntu2004-docker-8c-8g-30988 CRON[30754]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 30 21:20:01 prd-ubuntu2004-docker-8c-8g-30988 CRON[30754]: pam_unix(cron:session): session closed for user root Sep 30 21:21:01 prd-ubuntu2004-docker-8c-8g-30988 CRON[32437]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 30 21:21:01 prd-ubuntu2004-docker-8c-8g-30988 CRON[32437]: pam_unix(cron:session): session closed for user root Sep 30 21:22:01 prd-ubuntu2004-docker-8c-8g-30988 CRON[33037]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 30 21:22:01 prd-ubuntu2004-docker-8c-8g-30988 CRON[33037]: pam_unix(cron:session): session closed for user root Sep 30 21:23:01 prd-ubuntu2004-docker-8c-8g-30988 CRON[33133]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 30 21:23:01 prd-ubuntu2004-docker-8c-8g-30988 CRON[33133]: pam_unix(cron:session): session closed for user root Sep 30 21:24:01 prd-ubuntu2004-docker-8c-8g-30988 CRON[33184]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 30 21:24:01 prd-ubuntu2004-docker-8c-8g-30988 CRON[33184]: pam_unix(cron:session): session closed for user root Sep 30 21:25:01 prd-ubuntu2004-docker-8c-8g-30988 CRON[39538]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 30 21:25:01 prd-ubuntu2004-docker-8c-8g-30988 CRON[39538]: pam_unix(cron:session): session closed for user root Sep 30 21:26:01 prd-ubuntu2004-docker-8c-8g-30988 CRON[39993]: pam_unix(cron:session): session opened for user root by (uid=0) Sep 30 21:26:01 prd-ubuntu2004-docker-8c-8g-30988 CRON[39993]: pam_unix(cron:session): session closed for user root Sep 30 21:26:40 prd-ubuntu2004-docker-8c-8g-30988 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-scandium ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Sep 30 21:26:40 prd-ubuntu2004-docker-8c-8g-30988 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)