Dec 12 17:46:24 prd-ubuntu2004-docker-8c-8g-2178 passwd[753]: password for 'ubuntu' changed by 'root' Dec 12 17:46:24 prd-ubuntu2004-docker-8c-8g-2178 systemd-logind[822]: New seat seat0. Dec 12 17:46:24 prd-ubuntu2004-docker-8c-8g-2178 systemd-logind[822]: Watching system buttons on /dev/input/event0 (Power Button) Dec 12 17:46:24 prd-ubuntu2004-docker-8c-8g-2178 systemd-logind[822]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Dec 12 17:46:24 prd-ubuntu2004-docker-8c-8g-2178 sshd[881]: Server listening on 0.0.0.0 port 22. Dec 12 17:46:24 prd-ubuntu2004-docker-8c-8g-2178 sshd[881]: Server listening on :: port 22. Dec 12 17:46:27 prd-ubuntu2004-docker-8c-8g-2178 sshd[1752]: error: kex_exchange_identification: Connection closed by remote host Dec 12 17:46:34 prd-ubuntu2004-docker-8c-8g-2178 sshd[3740]: Invalid user jenkins from 10.30.168.15 port 58514 Dec 12 17:46:34 prd-ubuntu2004-docker-8c-8g-2178 sshd[3740]: Received disconnect from 10.30.168.15 port 58514:11: Closed due to user request. [preauth] Dec 12 17:46:34 prd-ubuntu2004-docker-8c-8g-2178 sshd[3740]: Disconnected from invalid user jenkins 10.30.168.15 port 58514 [preauth] Dec 12 17:46:37 prd-ubuntu2004-docker-8c-8g-2178 sshd[4596]: Invalid user jenkins from 10.30.168.15 port 58524 Dec 12 17:46:37 prd-ubuntu2004-docker-8c-8g-2178 sshd[4596]: Received disconnect from 10.30.168.15 port 58524:11: Closed due to user request. [preauth] Dec 12 17:46:37 prd-ubuntu2004-docker-8c-8g-2178 sshd[4596]: Disconnected from invalid user jenkins 10.30.168.15 port 58524 [preauth] Dec 12 17:46:39 prd-ubuntu2004-docker-8c-8g-2178 sshd[5345]: Invalid user jenkins from 10.30.168.15 port 58526 Dec 12 17:46:40 prd-ubuntu2004-docker-8c-8g-2178 sshd[5345]: Received disconnect from 10.30.168.15 port 58526:11: Closed due to user request. [preauth] Dec 12 17:46:40 prd-ubuntu2004-docker-8c-8g-2178 sshd[5345]: Disconnected from invalid user jenkins 10.30.168.15 port 58526 [preauth] Dec 12 17:46:42 prd-ubuntu2004-docker-8c-8g-2178 sshd[6108]: Invalid user jenkins from 10.30.168.15 port 58528 Dec 12 17:46:42 prd-ubuntu2004-docker-8c-8g-2178 sshd[6108]: Received disconnect from 10.30.168.15 port 58528:11: Closed due to user request. [preauth] Dec 12 17:46:42 prd-ubuntu2004-docker-8c-8g-2178 sshd[6108]: Disconnected from invalid user jenkins 10.30.168.15 port 58528 [preauth] Dec 12 17:46:46 prd-ubuntu2004-docker-8c-8g-2178 sshd[7054]: Invalid user jenkins from 10.30.168.15 port 58530 Dec 12 17:46:46 prd-ubuntu2004-docker-8c-8g-2178 sshd[7054]: Received disconnect from 10.30.168.15 port 58530:11: Closed due to user request. [preauth] Dec 12 17:46:46 prd-ubuntu2004-docker-8c-8g-2178 sshd[7054]: Disconnected from invalid user jenkins 10.30.168.15 port 58530 [preauth] Dec 12 17:46:49 prd-ubuntu2004-docker-8c-8g-2178 sshd[8306]: Invalid user jenkins from 10.30.168.15 port 58532 Dec 12 17:46:49 prd-ubuntu2004-docker-8c-8g-2178 sshd[8306]: Received disconnect from 10.30.168.15 port 58532:11: Closed due to user request. [preauth] Dec 12 17:46:49 prd-ubuntu2004-docker-8c-8g-2178 sshd[8306]: Disconnected from invalid user jenkins 10.30.168.15 port 58532 [preauth] Dec 12 17:46:52 prd-ubuntu2004-docker-8c-8g-2178 sshd[9059]: Invalid user jenkins from 10.30.168.15 port 58536 Dec 12 17:46:54 prd-ubuntu2004-docker-8c-8g-2178 sshd[9059]: Received disconnect from 10.30.168.15 port 58536:11: Closed due to user request. [preauth] Dec 12 17:46:54 prd-ubuntu2004-docker-8c-8g-2178 sshd[9059]: Disconnected from invalid user jenkins 10.30.168.15 port 58536 [preauth] Dec 12 17:46:55 prd-ubuntu2004-docker-8c-8g-2178 useradd[9365]: new group: name=jenkins, GID=1001 Dec 12 17:46:55 prd-ubuntu2004-docker-8c-8g-2178 useradd[9365]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Dec 12 17:46:55 prd-ubuntu2004-docker-8c-8g-2178 usermod[9399]: add 'jenkins' to group 'docker' Dec 12 17:46:55 prd-ubuntu2004-docker-8c-8g-2178 usermod[9399]: add 'jenkins' to shadow group 'docker' Dec 12 17:46:56 prd-ubuntu2004-docker-8c-8g-2178 sshd[9820]: Accepted publickey for jenkins from 10.30.168.15 port 58538 ssh2: RSA SHA256:BBsm4mRgG5V0fGum4Y1Rmy/vs16stdRVhwvexlLUhUs Dec 12 17:46:56 prd-ubuntu2004-docker-8c-8g-2178 sshd[9820]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Dec 12 17:46:56 prd-ubuntu2004-docker-8c-8g-2178 systemd-logind[822]: New session 1 of user jenkins. Dec 12 17:46:56 prd-ubuntu2004-docker-8c-8g-2178 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Dec 12 17:47:02 prd-ubuntu2004-docker-8c-8g-2178 CRON[11667]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 12 17:47:02 prd-ubuntu2004-docker-8c-8g-2178 CRON[11667]: pam_unix(cron:session): session closed for user root Dec 12 17:47:25 prd-ubuntu2004-docker-8c-8g-2178 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-titanium ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/java java /usr/lib/jvm/java-21-openjdk-amd64/bin/java 1 Dec 12 17:47:25 prd-ubuntu2004-docker-8c-8g-2178 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Dec 12 17:47:25 prd-ubuntu2004-docker-8c-8g-2178 sudo: pam_unix(sudo:session): session closed for user root Dec 12 17:47:25 prd-ubuntu2004-docker-8c-8g-2178 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-titanium ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/javac javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac 1 Dec 12 17:47:25 prd-ubuntu2004-docker-8c-8g-2178 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Dec 12 17:47:25 prd-ubuntu2004-docker-8c-8g-2178 sudo: pam_unix(sudo:session): session closed for user root Dec 12 17:47:25 prd-ubuntu2004-docker-8c-8g-2178 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-titanium ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/lib/jvm/java-openjdk java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 1 Dec 12 17:47:25 prd-ubuntu2004-docker-8c-8g-2178 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Dec 12 17:47:25 prd-ubuntu2004-docker-8c-8g-2178 sudo: pam_unix(sudo:session): session closed for user root Dec 12 17:47:25 prd-ubuntu2004-docker-8c-8g-2178 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-titanium ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java /usr/lib/jvm/java-21-openjdk-amd64/bin/java Dec 12 17:47:25 prd-ubuntu2004-docker-8c-8g-2178 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Dec 12 17:47:25 prd-ubuntu2004-docker-8c-8g-2178 sudo: pam_unix(sudo:session): session closed for user root Dec 12 17:47:25 prd-ubuntu2004-docker-8c-8g-2178 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-titanium ; USER=root ; COMMAND=/usr/bin/update-alternatives --set javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac Dec 12 17:47:25 prd-ubuntu2004-docker-8c-8g-2178 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Dec 12 17:47:25 prd-ubuntu2004-docker-8c-8g-2178 sudo: pam_unix(sudo:session): session closed for user root Dec 12 17:47:25 prd-ubuntu2004-docker-8c-8g-2178 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-titanium ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 Dec 12 17:47:25 prd-ubuntu2004-docker-8c-8g-2178 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Dec 12 17:47:25 prd-ubuntu2004-docker-8c-8g-2178 sudo: pam_unix(sudo:session): session closed for user root Dec 12 17:48:01 prd-ubuntu2004-docker-8c-8g-2178 CRON[27736]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 12 17:48:01 prd-ubuntu2004-docker-8c-8g-2178 CRON[27736]: pam_unix(cron:session): session closed for user root Dec 12 17:49:01 prd-ubuntu2004-docker-8c-8g-2178 CRON[28542]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 12 17:49:01 prd-ubuntu2004-docker-8c-8g-2178 CRON[28542]: pam_unix(cron:session): session closed for user root Dec 12 17:50:01 prd-ubuntu2004-docker-8c-8g-2178 CRON[30347]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 12 17:50:01 prd-ubuntu2004-docker-8c-8g-2178 CRON[30347]: pam_unix(cron:session): session closed for user root Dec 12 17:51:01 prd-ubuntu2004-docker-8c-8g-2178 CRON[31928]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 12 17:51:01 prd-ubuntu2004-docker-8c-8g-2178 CRON[31928]: pam_unix(cron:session): session closed for user root Dec 12 17:52:01 prd-ubuntu2004-docker-8c-8g-2178 CRON[32010]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 12 17:52:01 prd-ubuntu2004-docker-8c-8g-2178 CRON[32010]: pam_unix(cron:session): session closed for user root Dec 12 17:53:01 prd-ubuntu2004-docker-8c-8g-2178 CRON[32018]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 12 17:53:01 prd-ubuntu2004-docker-8c-8g-2178 CRON[32018]: pam_unix(cron:session): session closed for user root Dec 12 17:54:01 prd-ubuntu2004-docker-8c-8g-2178 CRON[33134]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 12 17:54:01 prd-ubuntu2004-docker-8c-8g-2178 CRON[33134]: pam_unix(cron:session): session closed for user root Dec 12 17:55:01 prd-ubuntu2004-docker-8c-8g-2178 CRON[33231]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 12 17:55:01 prd-ubuntu2004-docker-8c-8g-2178 CRON[33231]: pam_unix(cron:session): session closed for user root Dec 12 17:56:01 prd-ubuntu2004-docker-8c-8g-2178 CRON[39819]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 12 17:56:01 prd-ubuntu2004-docker-8c-8g-2178 CRON[39819]: pam_unix(cron:session): session closed for user root Dec 12 17:57:01 prd-ubuntu2004-docker-8c-8g-2178 CRON[40176]: pam_unix(cron:session): session opened for user root by (uid=0) Dec 12 17:57:01 prd-ubuntu2004-docker-8c-8g-2178 CRON[40176]: pam_unix(cron:session): session closed for user root Dec 12 17:57:02 prd-ubuntu2004-docker-8c-8g-2178 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/distribution-merge-managed-titanium ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Dec 12 17:57:02 prd-ubuntu2004-docker-8c-8g-2178 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)