Mar 11 12:30:20 prd-ubuntu1804-docker-4c-4g-2328 passwd[940]: password for 'ubuntu' changed by 'root' Mar 11 12:30:20 prd-ubuntu1804-docker-4c-4g-2328 systemd-logind[1016]: Watching system buttons on /dev/input/event0 (Power Button) Mar 11 12:30:20 prd-ubuntu1804-docker-4c-4g-2328 systemd-logind[1016]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Mar 11 12:30:20 prd-ubuntu1804-docker-4c-4g-2328 systemd-logind[1016]: New seat seat0. Mar 11 12:30:21 prd-ubuntu1804-docker-4c-4g-2328 sshd[1246]: Server listening on 0.0.0.0 port 22. Mar 11 12:30:21 prd-ubuntu1804-docker-4c-4g-2328 sshd[1246]: Server listening on :: port 22. Mar 11 12:30:24 prd-ubuntu1804-docker-4c-4g-2328 sshd[1486]: Did not receive identification string from 10.32.4.5 port 52412 Mar 11 12:30:32 prd-ubuntu1804-docker-4c-4g-2328 sshd[1538]: Invalid user jenkins from 10.32.4.5 port 52428 Mar 11 12:30:32 prd-ubuntu1804-docker-4c-4g-2328 sshd[1538]: Received disconnect from 10.32.4.5 port 52428:11: Closed due to user request. [preauth] Mar 11 12:30:32 prd-ubuntu1804-docker-4c-4g-2328 sshd[1538]: Disconnected from invalid user jenkins 10.32.4.5 port 52428 [preauth] Mar 11 12:30:34 prd-ubuntu1804-docker-4c-4g-2328 sshd[1542]: Invalid user jenkins from 10.32.4.5 port 52440 Mar 11 12:30:34 prd-ubuntu1804-docker-4c-4g-2328 sshd[1542]: Received disconnect from 10.32.4.5 port 52440:11: Closed due to user request. [preauth] Mar 11 12:30:34 prd-ubuntu1804-docker-4c-4g-2328 sshd[1542]: Disconnected from invalid user jenkins 10.32.4.5 port 52440 [preauth] Mar 11 12:30:36 prd-ubuntu1804-docker-4c-4g-2328 sshd[1544]: Invalid user jenkins from 10.32.4.5 port 52452 Mar 11 12:30:36 prd-ubuntu1804-docker-4c-4g-2328 sshd[1544]: Received disconnect from 10.32.4.5 port 52452:11: Closed due to user request. [preauth] Mar 11 12:30:36 prd-ubuntu1804-docker-4c-4g-2328 sshd[1544]: Disconnected from invalid user jenkins 10.32.4.5 port 52452 [preauth] Mar 11 12:30:38 prd-ubuntu1804-docker-4c-4g-2328 sshd[1546]: Invalid user jenkins from 10.32.4.5 port 52456 Mar 11 12:30:38 prd-ubuntu1804-docker-4c-4g-2328 sshd[1546]: Received disconnect from 10.32.4.5 port 52456:11: Closed due to user request. [preauth] Mar 11 12:30:38 prd-ubuntu1804-docker-4c-4g-2328 sshd[1546]: Disconnected from invalid user jenkins 10.32.4.5 port 52456 [preauth] Mar 11 12:30:40 prd-ubuntu1804-docker-4c-4g-2328 sshd[1548]: Invalid user jenkins from 10.32.4.5 port 52468 Mar 11 12:30:40 prd-ubuntu1804-docker-4c-4g-2328 sshd[1548]: Received disconnect from 10.32.4.5 port 52468:11: Closed due to user request. [preauth] Mar 11 12:30:40 prd-ubuntu1804-docker-4c-4g-2328 sshd[1548]: Disconnected from invalid user jenkins 10.32.4.5 port 52468 [preauth] Mar 11 12:30:42 prd-ubuntu1804-docker-4c-4g-2328 sshd[1560]: Invalid user jenkins from 10.32.4.5 port 52474 Mar 11 12:30:42 prd-ubuntu1804-docker-4c-4g-2328 sshd[1560]: Received disconnect from 10.32.4.5 port 52474:11: Closed due to user request. [preauth] Mar 11 12:30:42 prd-ubuntu1804-docker-4c-4g-2328 sshd[1560]: Disconnected from invalid user jenkins 10.32.4.5 port 52474 [preauth] Mar 11 12:30:45 prd-ubuntu1804-docker-4c-4g-2328 sshd[1786]: Invalid user jenkins from 10.32.4.5 port 52484 Mar 11 12:30:45 prd-ubuntu1804-docker-4c-4g-2328 sshd[1786]: Received disconnect from 10.32.4.5 port 52484:11: Closed due to user request. [preauth] Mar 11 12:30:45 prd-ubuntu1804-docker-4c-4g-2328 sshd[1786]: Disconnected from invalid user jenkins 10.32.4.5 port 52484 [preauth] Mar 11 12:30:48 prd-ubuntu1804-docker-4c-4g-2328 sshd[1826]: Invalid user jenkins from 10.32.4.5 port 52486 Mar 11 12:30:48 prd-ubuntu1804-docker-4c-4g-2328 sshd[1826]: Received disconnect from 10.32.4.5 port 52486:11: Closed due to user request. [preauth] Mar 11 12:30:48 prd-ubuntu1804-docker-4c-4g-2328 sshd[1826]: Disconnected from invalid user jenkins 10.32.4.5 port 52486 [preauth] Mar 11 12:30:50 prd-ubuntu1804-docker-4c-4g-2328 sshd[1830]: Invalid user jenkins from 10.32.4.5 port 52490 Mar 11 12:30:50 prd-ubuntu1804-docker-4c-4g-2328 sshd[1830]: Received disconnect from 10.32.4.5 port 52490:11: Closed due to user request. [preauth] Mar 11 12:30:50 prd-ubuntu1804-docker-4c-4g-2328 sshd[1830]: Disconnected from invalid user jenkins 10.32.4.5 port 52490 [preauth] Mar 11 12:30:50 prd-ubuntu1804-docker-4c-4g-2328 useradd[1846]: new group: name=jenkins, GID=1001 Mar 11 12:30:50 prd-ubuntu1804-docker-4c-4g-2328 useradd[1846]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Mar 11 12:30:50 prd-ubuntu1804-docker-4c-4g-2328 usermod[1853]: add 'jenkins' to group 'docker' Mar 11 12:30:50 prd-ubuntu1804-docker-4c-4g-2328 usermod[1853]: add 'jenkins' to shadow group 'docker' Mar 11 12:30:52 prd-ubuntu1804-docker-4c-4g-2328 sshd[1894]: Accepted publickey for jenkins from 10.32.4.5 port 52494 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Mar 11 12:30:52 prd-ubuntu1804-docker-4c-4g-2328 sshd[1894]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Mar 11 12:30:52 prd-ubuntu1804-docker-4c-4g-2328 systemd-logind[1016]: New session 1 of user jenkins. Mar 11 12:30:52 prd-ubuntu1804-docker-4c-4g-2328 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Mar 11 12:31:02 prd-ubuntu1804-docker-4c-4g-2328 CRON[2201]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 11 12:31:02 prd-ubuntu1804-docker-4c-4g-2328 CRON[2201]: pam_unix(cron:session): session closed for user root Mar 11 12:32:01 prd-ubuntu1804-docker-4c-4g-2328 CRON[2873]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 11 12:32:01 prd-ubuntu1804-docker-4c-4g-2328 CRON[2873]: pam_unix(cron:session): session closed for user root Mar 11 12:33:01 prd-ubuntu1804-docker-4c-4g-2328 CRON[7024]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 11 12:33:01 prd-ubuntu1804-docker-4c-4g-2328 CRON[7024]: pam_unix(cron:session): session closed for user root Mar 11 12:34:01 prd-ubuntu1804-docker-4c-4g-2328 CRON[7799]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 11 12:34:01 prd-ubuntu1804-docker-4c-4g-2328 CRON[7799]: pam_unix(cron:session): session closed for user root Mar 11 12:35:01 prd-ubuntu1804-docker-4c-4g-2328 CRON[8582]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 11 12:35:01 prd-ubuntu1804-docker-4c-4g-2328 CRON[8582]: pam_unix(cron:session): session closed for user root Mar 11 12:36:01 prd-ubuntu1804-docker-4c-4g-2328 CRON[9265]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 11 12:36:01 prd-ubuntu1804-docker-4c-4g-2328 CRON[9265]: pam_unix(cron:session): session closed for user root Mar 11 12:37:01 prd-ubuntu1804-docker-4c-4g-2328 CRON[9931]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 11 12:37:01 prd-ubuntu1804-docker-4c-4g-2328 CRON[9931]: pam_unix(cron:session): session closed for user root Mar 11 12:38:01 prd-ubuntu1804-docker-4c-4g-2328 CRON[10606]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 11 12:38:01 prd-ubuntu1804-docker-4c-4g-2328 CRON[10606]: pam_unix(cron:session): session closed for user root Mar 11 12:39:01 prd-ubuntu1804-docker-4c-4g-2328 CRON[11378]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 11 12:39:01 prd-ubuntu1804-docker-4c-4g-2328 CRON[11378]: pam_unix(cron:session): session closed for user root Mar 11 12:40:01 prd-ubuntu1804-docker-4c-4g-2328 CRON[11922]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 11 12:40:01 prd-ubuntu1804-docker-4c-4g-2328 CRON[11922]: pam_unix(cron:session): session closed for user root Mar 11 12:41:01 prd-ubuntu1804-docker-4c-4g-2328 CRON[12498]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 11 12:41:01 prd-ubuntu1804-docker-4c-4g-2328 CRON[12498]: pam_unix(cron:session): session closed for user root Mar 11 12:42:01 prd-ubuntu1804-docker-4c-4g-2328 CRON[13227]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 11 12:42:01 prd-ubuntu1804-docker-4c-4g-2328 CRON[13227]: pam_unix(cron:session): session closed for user root Mar 11 12:43:01 prd-ubuntu1804-docker-4c-4g-2328 CRON[13957]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 11 12:43:01 prd-ubuntu1804-docker-4c-4g-2328 CRON[13957]: pam_unix(cron:session): session closed for user root Mar 11 12:44:01 prd-ubuntu1804-docker-4c-4g-2328 CRON[14645]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 11 12:44:01 prd-ubuntu1804-docker-4c-4g-2328 CRON[14645]: pam_unix(cron:session): session closed for user root Mar 11 12:45:01 prd-ubuntu1804-docker-4c-4g-2328 CRON[15236]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 11 12:45:01 prd-ubuntu1804-docker-4c-4g-2328 CRON[15236]: pam_unix(cron:session): session closed for user root Mar 11 12:46:01 prd-ubuntu1804-docker-4c-4g-2328 CRON[17050]: pam_unix(cron:session): session opened for user root by (uid=0) Mar 11 12:46:01 prd-ubuntu1804-docker-4c-4g-2328 CRON[17050]: pam_unix(cron:session): session closed for user root Mar 11 12:46:13 prd-ubuntu1804-docker-4c-4g-2328 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/it-dep-smo-install-docker-verify-all ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Mar 11 12:46:13 prd-ubuntu1804-docker-4c-4g-2328 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)