Oct 6 09:02:59 prd-ubuntu2004-docker-8c-8g-39571 passwd[758]: password for 'ubuntu' changed by 'root' Oct 6 09:02:59 prd-ubuntu2004-docker-8c-8g-39571 systemd-logind[830]: New seat seat0. Oct 6 09:02:59 prd-ubuntu2004-docker-8c-8g-39571 systemd-logind[830]: Watching system buttons on /dev/input/event0 (Power Button) Oct 6 09:02:59 prd-ubuntu2004-docker-8c-8g-39571 systemd-logind[830]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Oct 6 09:02:59 prd-ubuntu2004-docker-8c-8g-39571 sshd[878]: Server listening on 0.0.0.0 port 22. Oct 6 09:02:59 prd-ubuntu2004-docker-8c-8g-39571 sshd[878]: Server listening on :: port 22. Oct 6 09:03:01 prd-ubuntu2004-docker-8c-8g-39571 CRON[1463]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 6 09:03:01 prd-ubuntu2004-docker-8c-8g-39571 CRON[1463]: pam_unix(cron:session): session closed for user root Oct 6 09:03:02 prd-ubuntu2004-docker-8c-8g-39571 sshd[1756]: error: kex_exchange_identification: Connection closed by remote host Oct 6 09:03:08 prd-ubuntu2004-docker-8c-8g-39571 sshd[3066]: Invalid user jenkins from 10.30.168.15 port 41344 Oct 6 09:03:09 prd-ubuntu2004-docker-8c-8g-39571 sshd[3066]: Received disconnect from 10.30.168.15 port 41344:11: Closed due to user request. [preauth] Oct 6 09:03:09 prd-ubuntu2004-docker-8c-8g-39571 sshd[3066]: Disconnected from invalid user jenkins 10.30.168.15 port 41344 [preauth] Oct 6 09:03:11 prd-ubuntu2004-docker-8c-8g-39571 sshd[3644]: Invalid user jenkins from 10.30.168.15 port 41346 Oct 6 09:03:12 prd-ubuntu2004-docker-8c-8g-39571 sshd[3644]: Received disconnect from 10.30.168.15 port 41346:11: Closed due to user request. [preauth] Oct 6 09:03:12 prd-ubuntu2004-docker-8c-8g-39571 sshd[3644]: Disconnected from invalid user jenkins 10.30.168.15 port 41346 [preauth] Oct 6 09:03:14 prd-ubuntu2004-docker-8c-8g-39571 sshd[4070]: Invalid user jenkins from 10.30.168.15 port 41348 Oct 6 09:03:14 prd-ubuntu2004-docker-8c-8g-39571 sshd[4070]: Received disconnect from 10.30.168.15 port 41348:11: Closed due to user request. [preauth] Oct 6 09:03:14 prd-ubuntu2004-docker-8c-8g-39571 sshd[4070]: Disconnected from invalid user jenkins 10.30.168.15 port 41348 [preauth] Oct 6 09:03:17 prd-ubuntu2004-docker-8c-8g-39571 sshd[4562]: Invalid user jenkins from 10.30.168.15 port 41350 Oct 6 09:03:17 prd-ubuntu2004-docker-8c-8g-39571 sshd[4562]: Received disconnect from 10.30.168.15 port 41350:11: Closed due to user request. [preauth] Oct 6 09:03:17 prd-ubuntu2004-docker-8c-8g-39571 sshd[4562]: Disconnected from invalid user jenkins 10.30.168.15 port 41350 [preauth] Oct 6 09:03:21 prd-ubuntu2004-docker-8c-8g-39571 sshd[5316]: Invalid user jenkins from 10.30.168.15 port 41354 Oct 6 09:03:21 prd-ubuntu2004-docker-8c-8g-39571 sshd[5316]: Received disconnect from 10.30.168.15 port 41354:11: Closed due to user request. [preauth] Oct 6 09:03:21 prd-ubuntu2004-docker-8c-8g-39571 sshd[5316]: Disconnected from invalid user jenkins 10.30.168.15 port 41354 [preauth] Oct 6 09:03:23 prd-ubuntu2004-docker-8c-8g-39571 sshd[5922]: Invalid user jenkins from 10.30.168.15 port 41356 Oct 6 09:03:23 prd-ubuntu2004-docker-8c-8g-39571 sshd[5922]: Received disconnect from 10.30.168.15 port 41356:11: Closed due to user request. [preauth] Oct 6 09:03:23 prd-ubuntu2004-docker-8c-8g-39571 sshd[5922]: Disconnected from invalid user jenkins 10.30.168.15 port 41356 [preauth] Oct 6 09:03:28 prd-ubuntu2004-docker-8c-8g-39571 sshd[6646]: Invalid user jenkins from 10.30.168.15 port 41360 Oct 6 09:03:28 prd-ubuntu2004-docker-8c-8g-39571 sshd[6646]: Received disconnect from 10.30.168.15 port 41360:11: Closed due to user request. [preauth] Oct 6 09:03:28 prd-ubuntu2004-docker-8c-8g-39571 sshd[6646]: Disconnected from invalid user jenkins 10.30.168.15 port 41360 [preauth] Oct 6 09:03:28 prd-ubuntu2004-docker-8c-8g-39571 useradd[6905]: new group: name=jenkins, GID=1001 Oct 6 09:03:28 prd-ubuntu2004-docker-8c-8g-39571 useradd[6905]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Oct 6 09:03:29 prd-ubuntu2004-docker-8c-8g-39571 usermod[6935]: add 'jenkins' to group 'docker' Oct 6 09:03:29 prd-ubuntu2004-docker-8c-8g-39571 usermod[6935]: add 'jenkins' to shadow group 'docker' Oct 6 09:03:31 prd-ubuntu2004-docker-8c-8g-39571 sshd[7543]: Accepted publickey for jenkins from 10.30.168.15 port 41368 ssh2: RSA SHA256:BBsm4mRgG5V0fGum4Y1Rmy/vs16stdRVhwvexlLUhUs Oct 6 09:03:31 prd-ubuntu2004-docker-8c-8g-39571 sshd[7543]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Oct 6 09:03:31 prd-ubuntu2004-docker-8c-8g-39571 systemd-logind[830]: New session 2 of user jenkins. Oct 6 09:03:31 prd-ubuntu2004-docker-8c-8g-39571 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Oct 6 09:03:57 prd-ubuntu2004-docker-8c-8g-39571 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-scandium ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/java java /usr/lib/jvm/java-21-openjdk-amd64/bin/java 1 Oct 6 09:03:57 prd-ubuntu2004-docker-8c-8g-39571 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Oct 6 09:03:57 prd-ubuntu2004-docker-8c-8g-39571 sudo: pam_unix(sudo:session): session closed for user root Oct 6 09:03:57 prd-ubuntu2004-docker-8c-8g-39571 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-scandium ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/javac javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac 1 Oct 6 09:03:57 prd-ubuntu2004-docker-8c-8g-39571 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Oct 6 09:03:57 prd-ubuntu2004-docker-8c-8g-39571 sudo: pam_unix(sudo:session): session closed for user root Oct 6 09:03:57 prd-ubuntu2004-docker-8c-8g-39571 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-scandium ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/lib/jvm/java-openjdk java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 1 Oct 6 09:03:57 prd-ubuntu2004-docker-8c-8g-39571 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Oct 6 09:03:57 prd-ubuntu2004-docker-8c-8g-39571 sudo: pam_unix(sudo:session): session closed for user root Oct 6 09:03:57 prd-ubuntu2004-docker-8c-8g-39571 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-scandium ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java /usr/lib/jvm/java-21-openjdk-amd64/bin/java Oct 6 09:03:57 prd-ubuntu2004-docker-8c-8g-39571 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Oct 6 09:03:57 prd-ubuntu2004-docker-8c-8g-39571 sudo: pam_unix(sudo:session): session closed for user root Oct 6 09:03:57 prd-ubuntu2004-docker-8c-8g-39571 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-scandium ; USER=root ; COMMAND=/usr/bin/update-alternatives --set javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac Oct 6 09:03:57 prd-ubuntu2004-docker-8c-8g-39571 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Oct 6 09:03:57 prd-ubuntu2004-docker-8c-8g-39571 sudo: pam_unix(sudo:session): session closed for user root Oct 6 09:03:57 prd-ubuntu2004-docker-8c-8g-39571 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-scandium ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 Oct 6 09:03:57 prd-ubuntu2004-docker-8c-8g-39571 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Oct 6 09:03:57 prd-ubuntu2004-docker-8c-8g-39571 sudo: pam_unix(sudo:session): session closed for user root Oct 6 09:04:02 prd-ubuntu2004-docker-8c-8g-39571 CRON[13951]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 6 09:04:02 prd-ubuntu2004-docker-8c-8g-39571 CRON[13951]: pam_unix(cron:session): session closed for user root Oct 6 09:05:01 prd-ubuntu2004-docker-8c-8g-39571 CRON[26302]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 6 09:05:01 prd-ubuntu2004-docker-8c-8g-39571 CRON[26302]: pam_unix(cron:session): session closed for user root Oct 6 09:06:01 prd-ubuntu2004-docker-8c-8g-39571 CRON[28706]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 6 09:06:01 prd-ubuntu2004-docker-8c-8g-39571 CRON[28706]: pam_unix(cron:session): session closed for user root Oct 6 09:07:01 prd-ubuntu2004-docker-8c-8g-39571 CRON[30548]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 6 09:07:01 prd-ubuntu2004-docker-8c-8g-39571 CRON[30548]: pam_unix(cron:session): session closed for user root Oct 6 09:08:01 prd-ubuntu2004-docker-8c-8g-39571 CRON[31828]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 6 09:08:01 prd-ubuntu2004-docker-8c-8g-39571 CRON[31828]: pam_unix(cron:session): session closed for user root Oct 6 09:09:01 prd-ubuntu2004-docker-8c-8g-39571 CRON[32952]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 6 09:09:01 prd-ubuntu2004-docker-8c-8g-39571 CRON[32952]: pam_unix(cron:session): session closed for user root Oct 6 09:10:01 prd-ubuntu2004-docker-8c-8g-39571 CRON[33012]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 6 09:10:01 prd-ubuntu2004-docker-8c-8g-39571 CRON[33012]: pam_unix(cron:session): session closed for user root Oct 6 09:11:01 prd-ubuntu2004-docker-8c-8g-39571 CRON[33092]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 6 09:11:01 prd-ubuntu2004-docker-8c-8g-39571 CRON[33092]: pam_unix(cron:session): session closed for user root Oct 6 09:12:01 prd-ubuntu2004-docker-8c-8g-39571 CRON[33152]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 6 09:12:01 prd-ubuntu2004-docker-8c-8g-39571 CRON[33152]: pam_unix(cron:session): session closed for user root Oct 6 09:13:01 prd-ubuntu2004-docker-8c-8g-39571 CRON[39492]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 6 09:13:01 prd-ubuntu2004-docker-8c-8g-39571 CRON[39492]: pam_unix(cron:session): session closed for user root Oct 6 09:14:01 prd-ubuntu2004-docker-8c-8g-39571 CRON[40111]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 6 09:14:01 prd-ubuntu2004-docker-8c-8g-39571 CRON[40111]: pam_unix(cron:session): session closed for user root Oct 6 09:14:21 prd-ubuntu2004-docker-8c-8g-39571 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-scandium ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Oct 6 09:14:21 prd-ubuntu2004-docker-8c-8g-39571 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)