time="2026-07-05T07:59:23.192945492Z" level=info msg="starting containerd" revision=e53c7c1516c3b2bff98eb76f1f4117477e6f4e66 version=v2.2.5 time="2026-07-05T07:59:23.199102346Z" level=info msg="loading plugin" id=io.containerd.content.v1.content type=io.containerd.content.v1 time="2026-07-05T07:59:23.199154174Z" level=info msg="loading plugin" id=io.containerd.image-verifier.v1.bindir type=io.containerd.image-verifier.v1 time="2026-07-05T07:59:23.199198582Z" level=info msg="loading plugin" id=io.containerd.internal.v1.opt type=io.containerd.internal.v1 time="2026-07-05T07:59:23.199294159Z" level=info msg="loading plugin" id=io.containerd.warning.v1.deprecations type=io.containerd.warning.v1 time="2026-07-05T07:59:23.199302129Z" level=info msg="loading plugin" id=io.containerd.mount-handler.v1.erofs type=io.containerd.mount-handler.v1 time="2026-07-05T07:59:23.199312089Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.blockfile type=io.containerd.snapshotter.v1 time="2026-07-05T07:59:23.199353297Z" level=info msg="skip loading plugin" error="no scratch file generator: skip plugin" id=io.containerd.snapshotter.v1.blockfile type=io.containerd.snapshotter.v1 time="2026-07-05T07:59:23.199358497Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.btrfs type=io.containerd.snapshotter.v1 time="2026-07-05T07:59:23.199433704Z" level=info msg="skip loading plugin" error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (overlay) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" id=io.containerd.snapshotter.v1.btrfs type=io.containerd.snapshotter.v1 time="2026-07-05T07:59:23.199439734Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.devmapper type=io.containerd.snapshotter.v1 time="2026-07-05T07:59:23.199453733Z" level=info msg="skip loading plugin" error="devmapper not configured: skip plugin" id=io.containerd.snapshotter.v1.devmapper type=io.containerd.snapshotter.v1 time="2026-07-05T07:59:23.199458653Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.erofs type=io.containerd.snapshotter.v1 time="2026-07-05T07:59:23.199545750Z" level=info msg="skip loading plugin" error="EROFS unsupported, please `modprobe erofs`: skip plugin" id=io.containerd.snapshotter.v1.erofs type=io.containerd.snapshotter.v1 time="2026-07-05T07:59:23.199551869Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.native type=io.containerd.snapshotter.v1 time="2026-07-05T07:59:23.199583608Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.overlayfs type=io.containerd.snapshotter.v1 time="2026-07-05T07:59:23.199687204Z" level=info msg="loading plugin" id=io.containerd.snapshotter.v1.zfs type=io.containerd.snapshotter.v1 time="2026-07-05T07:59:23.199705094Z" level=info msg="skip loading plugin" error="lstat /var/lib/containerd/io.containerd.snapshotter.v1.zfs: no such file or directory: skip plugin" id=io.containerd.snapshotter.v1.zfs type=io.containerd.snapshotter.v1 time="2026-07-05T07:59:23.199710083Z" level=info msg="loading plugin" id=io.containerd.event.v1.exchange type=io.containerd.event.v1 time="2026-07-05T07:59:23.199760891Z" level=info msg="loading plugin" id=io.containerd.monitor.task.v1.cgroups type=io.containerd.monitor.task.v1 time="2026-07-05T07:59:23.199956904Z" level=info msg="loading plugin" id=io.containerd.metadata.v1.bolt type=io.containerd.metadata.v1 time="2026-07-05T07:59:23.200021992Z" level=info msg="metadata content store policy set" policy=shared time="2026-07-05T07:59:23.218811951Z" level=info msg="loading plugin" id=io.containerd.gc.v1.scheduler type=io.containerd.gc.v1 time="2026-07-05T07:59:23.218883508Z" level=info msg="loading plugin" id=io.containerd.nri.v1.nri type=io.containerd.nri.v1 time="2026-07-05T07:59:23.219001564Z" level=info msg="built-in NRI default validator is disabled" time="2026-07-05T07:59:23.219017033Z" level=info msg="runtime interface created" time="2026-07-05T07:59:23.219021363Z" level=info msg="created NRI interface" time="2026-07-05T07:59:23.219028373Z" level=info msg="loading plugin" id=io.containerd.differ.v1.erofs type=io.containerd.differ.v1 time="2026-07-05T07:59:23.219105440Z" level=info msg="skip loading plugin" error="failed to check mkfs.erofs availability: failed to run mkfs.erofs --help: exec: \"mkfs.erofs\": executable file not found in $PATH: skip plugin" id=io.containerd.differ.v1.erofs type=io.containerd.differ.v1 time="2026-07-05T07:59:23.219113780Z" level=info msg="loading plugin" id=io.containerd.mount-manager.v1.bolt type=io.containerd.mount-manager.v1 time="2026-07-05T07:59:23.223911573Z" level=info msg="loading plugin" id=io.containerd.differ.v1.walking type=io.containerd.differ.v1 time="2026-07-05T07:59:23.223948021Z" level=info msg="loading plugin" id=io.containerd.lease.v1.manager type=io.containerd.lease.v1 time="2026-07-05T07:59:23.223968162Z" level=info msg="loading plugin" id=io.containerd.service.v1.containers-service type=io.containerd.service.v1 time="2026-07-05T07:59:23.223978141Z" level=info msg="loading plugin" id=io.containerd.service.v1.content-service type=io.containerd.service.v1 time="2026-07-05T07:59:23.223983831Z" level=info msg="loading plugin" id=io.containerd.service.v1.diff-service type=io.containerd.service.v1 time="2026-07-05T07:59:23.224009970Z" level=info msg="loading plugin" id=io.containerd.service.v1.images-service type=io.containerd.service.v1 time="2026-07-05T07:59:23.224017430Z" level=info msg="loading plugin" id=io.containerd.service.v1.introspection-service type=io.containerd.service.v1 time="2026-07-05T07:59:23.224024209Z" level=info msg="loading plugin" id=io.containerd.service.v1.namespaces-service type=io.containerd.service.v1 time="2026-07-05T07:59:23.224030709Z" level=info msg="loading plugin" id=io.containerd.service.v1.snapshots-service type=io.containerd.service.v1 time="2026-07-05T07:59:23.224035789Z" level=info msg="loading plugin" id=io.containerd.shim.v1.manager type=io.containerd.shim.v1 time="2026-07-05T07:59:23.224048308Z" level=info msg="loading plugin" id=io.containerd.runtime.v2.task type=io.containerd.runtime.v2 time="2026-07-05T07:59:23.224120776Z" level=info msg="loading plugin" id=io.containerd.service.v1.tasks-service type=io.containerd.service.v1 time="2026-07-05T07:59:23.224138005Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.containers type=io.containerd.grpc.v1 time="2026-07-05T07:59:23.224147755Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.content type=io.containerd.grpc.v1 time="2026-07-05T07:59:23.224155104Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.diff type=io.containerd.grpc.v1 time="2026-07-05T07:59:23.224162564Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.events type=io.containerd.grpc.v1 time="2026-07-05T07:59:23.224171574Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.images type=io.containerd.grpc.v1 time="2026-07-05T07:59:23.224178034Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.introspection type=io.containerd.grpc.v1 time="2026-07-05T07:59:23.224184803Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.leases type=io.containerd.grpc.v1 time="2026-07-05T07:59:23.224191463Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.mounts type=io.containerd.grpc.v1 time="2026-07-05T07:59:23.224197283Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.namespaces type=io.containerd.grpc.v1 time="2026-07-05T07:59:23.224205243Z" level=info msg="loading plugin" id=io.containerd.sandbox.store.v1.local type=io.containerd.sandbox.store.v1 time="2026-07-05T07:59:23.224211162Z" level=info msg="loading plugin" id=io.containerd.transfer.v1.local type=io.containerd.transfer.v1 time="2026-07-05T07:59:23.224241501Z" level=info msg="loading plugin" id=io.containerd.cri.v1.images type=io.containerd.cri.v1 time="2026-07-05T07:59:23.224299479Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.native\" for snapshotter \"native\"" time="2026-07-05T07:59:23.224308099Z" level=info msg="Start snapshots syncer" time="2026-07-05T07:59:23.224329738Z" level=info msg="loading plugin" id=io.containerd.cri.v1.runtime type=io.containerd.cri.v1 time="2026-07-05T07:59:23.224593288Z" level=info msg="starting cri plugin" config="{\"containerd\":{\"defaultRuntimeName\":\"runc\",\"runtimes\":{\"runc\":{\"runtimeType\":\"io.containerd.runc.v2\",\"runtimePath\":\"\",\"PodAnnotations\":[],\"ContainerAnnotations\":[],\"options\":{\"BinaryName\":\"\",\"CriuImagePath\":\"\",\"CriuWorkPath\":\"\",\"IoGid\":0,\"IoUid\":0,\"NoNewKeyring\":false,\"Root\":\"\",\"ShimCgroup\":\"\",\"SystemdCgroup\":false},\"privileged_without_host_devices\":false,\"privileged_without_host_devices_all_devices_allowed\":false,\"cgroupWritable\":false,\"baseRuntimeSpec\":\"\",\"cniConfDir\":\"\",\"cniMaxConfNum\":0,\"snapshotter\":\"\",\"sandboxer\":\"podsandbox\",\"io_type\":\"\"}},\"ignoreBlockIONotEnabledErrors\":false,\"ignoreRdtNotEnabledErrors\":false},\"cni\":{\"binDir\":\"\",\"binDirs\":[\"/opt/cni/bin\"],\"confDir\":\"/etc/cni/net.d\",\"maxConfNum\":1,\"setupSerially\":false,\"confTemplate\":\"\",\"ipPref\":\"\",\"useInternalLoopback\":false},\"enableSelinux\":false,\"selinuxCategoryRange\":1024,\"maxContainerLogLineSize\":16384,\"disableApparmor\":false,\"restrictOOMScoreAdj\":false,\"disableProcMount\":false,\"unsetSeccompProfile\":\"\",\"tolerateMissingHugetlbController\":true,\"disableHugetlbController\":true,\"device_ownership_from_security_context\":false,\"ignoreImageDefinedVolumes\":false,\"netnsMountsUnderStateDir\":false,\"enableUnprivilegedPorts\":true,\"enableUnprivilegedICMP\":true,\"enableCDI\":true,\"cdiSpecDirs\":[\"/etc/cdi\",\"/var/run/cdi\"],\"drainExecSyncIOTimeout\":\"0s\",\"ignoreDeprecationWarnings\":[],\"containerdRootDir\":\"/var/lib/containerd\",\"containerdEndpoint\":\"/run/containerd/containerd.sock\",\"rootDir\":\"/var/lib/containerd/io.containerd.grpc.v1.cri\",\"stateDir\":\"/run/containerd/io.containerd.grpc.v1.cri\"}" time="2026-07-05T07:59:23.224632556Z" level=info msg="loading plugin" id=io.containerd.podsandbox.controller.v1.podsandbox type=io.containerd.podsandbox.controller.v1 time="2026-07-05T07:59:23.224673115Z" level=info msg="loading plugin" id=io.containerd.sandbox.controller.v1.shim type=io.containerd.sandbox.controller.v1 time="2026-07-05T07:59:23.224768772Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.sandbox-controllers type=io.containerd.grpc.v1 time="2026-07-05T07:59:23.224792711Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.sandboxes type=io.containerd.grpc.v1 time="2026-07-05T07:59:23.224802101Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.snapshots type=io.containerd.grpc.v1 time="2026-07-05T07:59:23.224808501Z" level=info msg="loading plugin" id=io.containerd.streaming.v1.manager type=io.containerd.streaming.v1 time="2026-07-05T07:59:23.224815810Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.streaming type=io.containerd.grpc.v1 time="2026-07-05T07:59:23.224822430Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.tasks type=io.containerd.grpc.v1 time="2026-07-05T07:59:23.224828590Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.transfer type=io.containerd.grpc.v1 time="2026-07-05T07:59:23.224844979Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.version type=io.containerd.grpc.v1 time="2026-07-05T07:59:23.224850909Z" level=info msg="loading plugin" id=io.containerd.monitor.container.v1.restart type=io.containerd.monitor.container.v1 time="2026-07-05T07:59:23.224886558Z" level=info msg="loading plugin" id=io.containerd.tracing.processor.v1.otlp type=io.containerd.tracing.processor.v1 time="2026-07-05T07:59:23.224907627Z" level=info msg="skip loading plugin" error="skip plugin: tracing endpoint not configured" id=io.containerd.tracing.processor.v1.otlp type=io.containerd.tracing.processor.v1 time="2026-07-05T07:59:23.224915067Z" level=info msg="loading plugin" id=io.containerd.internal.v1.tracing type=io.containerd.internal.v1 time="2026-07-05T07:59:23.224921956Z" level=info msg="skip loading plugin" error="skip plugin: tracing endpoint not configured" id=io.containerd.internal.v1.tracing type=io.containerd.internal.v1 time="2026-07-05T07:59:23.224929526Z" level=info msg="loading plugin" id=io.containerd.ttrpc.v1.otelttrpc type=io.containerd.ttrpc.v1 time="2026-07-05T07:59:23.224962395Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.healthcheck type=io.containerd.grpc.v1 time="2026-07-05T07:59:23.224973074Z" level=info msg="loading plugin" id=io.containerd.grpc.v1.cri type=io.containerd.grpc.v1 time="2026-07-05T07:59:23.225007503Z" level=info msg="Connect containerd service" time="2026-07-05T07:59:23.225024402Z" level=info msg="using experimental NRI integration - disable nri plugin to prevent this" time="2026-07-05T07:59:23.233083706Z" level=info msg="Start subscribing containerd event" time="2026-07-05T07:59:23.233122075Z" level=info msg="Start recovering state" time="2026-07-05T07:59:23.233229171Z" level=info msg="Start event monitor" time="2026-07-05T07:59:23.233247080Z" level=info msg="Start cni network conf syncer for default" time="2026-07-05T07:59:23.233271909Z" level=info msg="Start streaming server" time="2026-07-05T07:59:23.233289678Z" level=info msg="Registered namespace \"k8s.io\" with NRI" time="2026-07-05T07:59:23.233297308Z" level=info msg="runtime interface starting up..." time="2026-07-05T07:59:23.233301598Z" level=info msg="starting plugins..." time="2026-07-05T07:59:23.233318247Z" level=info msg="Synchronizing NRI (plugin) with current runtime state" time="2026-07-05T07:59:23.233239200Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc time="2026-07-05T07:59:23.233448912Z" level=info msg=serving... address=/run/containerd/containerd.sock time="2026-07-05T07:59:23.233480611Z" level=info msg="containerd successfully booted in 0.041240s" time="2026-07-05T07:59:23.985129749Z" level=info msg="ImageCreate event name:\"pruva-registry:5000/pause:3.10\"" time="2026-07-05T07:59:24.015078017Z" level=info msg="ImageCreate event name:\"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\" labels:{key:\"io.cri-containerd.image\" value:\"managed\"} labels:{key:\"io.cri-containerd.pinned\" value:\"pinned\"}" time="2026-07-05T07:59:24.015345768Z" level=info msg="ImageUpdate event name:\"pruva-registry:5000/pause:3.10\" labels:{key:\"io.cri-containerd.image\" value:\"managed\"} labels:{key:\"io.cri-containerd.pinned\" value:\"pinned\"}" time="2026-07-05T07:59:24.312102070Z" level=info msg="RunPodSandbox for name:\"pruva-pod\" uid:\"pruvapod\" namespace:\"default\" attempt:1" time="2026-07-05T07:59:24.382145404Z" level=info msg="snapshotter does not support rebase capability, unpacking will be sequential" time="2026-07-05T07:59:24.522406024Z" level=info msg="connecting to shim 77b0e1700d6a759049d9fc7efe58a3fd36464f6163804d149f771e5127c5ba33" address="unix:///run/containerd/s/6c87e190b1ef117fecaa80b80db8bf68e8dac84d3c7d82637578d2641d73ef87" namespace=k8s.io protocol=ttrpc version=3 time="2026-07-05T07:59:24.571310955Z" level=info msg="RunPodSandbox for name:\"pruva-pod\" uid:\"pruvapod\" namespace:\"default\" attempt:1 returns sandbox id \"77b0e1700d6a759049d9fc7efe58a3fd36464f6163804d149f771e5127c5ba33\"" time="2026-07-05T07:59:24.600896406Z" level=info msg="CreateContainer within sandbox \"77b0e1700d6a759049d9fc7efe58a3fd36464f6163804d149f771e5127c5ba33\" for container name:\"checkpoint-importer\" attempt:1" time="2026-07-05T07:59:24.600977193Z" level=info msg="\"/checkpoints/malicious.tar\" is a file. Assuming it is a checkpoint archive" time="2026-07-05T07:59:24.819850361Z" level=info msg="ImageCreate event name:\"localhost:5000/attacker:latest\"" time="2026-07-05T07:59:24.850170246Z" level=info msg="ImageCreate event name:\"sha256:c2096718eff565dec2df02a94ad0c2072d39c6f5f4629370b79ba6497cd795a5\" labels:{key:\"io.cri-containerd.image\" value:\"managed\"}" time="2026-07-05T07:59:24.850457725Z" level=info msg="ImageUpdate event name:\"localhost:5000/attacker:latest\" labels:{key:\"io.cri-containerd.image\" value:\"managed\"}" time="2026-07-05T07:59:24.873352563Z" level=info msg="snapshotter does not support rebase capability, unpacking will be sequential" time="2026-07-05T07:59:25.157678053Z" level=info msg="Prepared e7657dc92e90aaa08cf150edb8c9f9dc40d9e973f3118f1fdfdbbcb6b3134013 for restore" time="2026-07-05T07:59:25.157724682Z" level=info msg="CreateContainer within sandbox \"77b0e1700d6a759049d9fc7efe58a3fd36464f6163804d149f771e5127c5ba33\" for name:\"checkpoint-importer\" attempt:1 returns container id \"e7657dc92e90aaa08cf150edb8c9f9dc40d9e973f3118f1fdfdbbcb6b3134013\"" time="2026-07-05T07:59:25.222515808Z" level=info msg="CreateContainer within sandbox \"77b0e1700d6a759049d9fc7efe58a3fd36464f6163804d149f771e5127c5ba33\" for container name:\"victim-from-poisoned-tag\" attempt:1" time="2026-07-05T07:59:25.222916503Z" level=error msg="CreateContainer within sandbox \"77b0e1700d6a759049d9fc7efe58a3fd36464f6163804d149f771e5127c5ba33\" for name:\"victim-from-poisoned-tag\" attempt:1 failed" error="rpc error: code = NotFound desc = failed to check if this is a checkpoint image: failed to resolve image \"localhost:5000/victim:stable\": not found"