time="2026-09-24T15:47:52.678306886Z" level=info msg="Updating config from single file: /tmp/crio-vulnerable-2/crio.conf"
time="2026-09-24T15:47:52.678332215Z" level=info msg="Updating config from drop-in file: /tmp/crio-vulnerable-2/crio.conf"
time="2026-09-24T15:47:52.678514558Z" level=info msg="Updating config from path: "
time="2026-09-24T15:47:52.686104195Z" level=info msg="Starting CRI-O, version: 1.36.5, git: 6e902ee2a9f7ce535855c68c92c6838f087f578f(clean)"
time="2026-09-24T15:47:52.686159643Z" level=info msg="Node configuration value for hugetlb cgroup is true"
time="2026-09-24T15:47:52.686162472Z" level=info msg="Node configuration value for pid cgroup is true"
time="2026-09-24T15:47:52.686187561Z" level=info msg="Node configuration value for memoryswap cgroup is true"
time="2026-09-24T15:47:52.686189531Z" level=info msg="Node configuration value for cgroup v2 is true"
time="2026-09-24T15:47:52.68622626Z" level=warning msg="node configuration validation for systemd AllowedCPUs failed: check systemd AllowedCPUs: exec: \"systemctl\": executable file not found in $PATH"
time="2026-09-24T15:47:52.68622927Z" level=info msg="Node configuration value for systemd AllowedCPUs is false"
time="2026-09-24T15:47:52.686717642Z" level=info msg="Using default capabilities: CAP_CHOWN, CAP_DAC_OVERRIDE, CAP_FSETID, CAP_FOWNER, CAP_SETGID, CAP_SETUID, CAP_SETPCAP, CAP_NET_BIND_SERVICE, CAP_KILL"
time="2026-09-24T15:47:52.686749501Z" level=info msg="Runtime handler \"runc\" container create timeout not set, using default: 240 seconds"
time="2026-09-24T15:47:52.686764231Z" level=warning msg="Runtime handler \"crun\" is being ignored due to: \"crun\" not found in $PATH: exec: \"crun\": executable file not found in $PATH"
time="2026-09-24T15:47:52.692252511Z" level=info msg="Using runtime handler runc version 1.3.4, commit: v1.3.4-0-gd6d73eb8, spec: 1.2.1, go: go1.24.10, libseccomp: 2.5.6"
time="2026-09-24T15:47:52.698710098Z" level=info msg="Using pinns executable: /tmp/crio-vulnerable-2/pinns"
time="2026-09-24T15:47:52.698747757Z" level=info msg="Checkpoint/restore support enabled"
time="2026-09-24T15:47:52.698752507Z" level=info msg="Using the internal default seccomp profile"
time="2026-09-24T15:47:52.698756916Z" level=info msg="AppArmor is disabled by the system or at CRI-O build-time"
time="2026-09-24T15:47:52.698759326Z" level=info msg="No blockio config file specified, blockio not configured"
time="2026-09-24T15:47:52.698762146Z" level=info msg="RDT not available in the host system"
time="2026-09-24T15:47:52.698768036Z" level=info msg="Using conmon executable: /usr/bin/conmon"
time="2026-09-24T15:47:52.701626263Z" level=info msg="Conmon does support the --sync option"
time="2026-09-24T15:47:52.701635293Z" level=info msg="Conmon does support the --log-global-size-max option"
time="2026-09-24T15:47:52.705132317Z" level=info msg="Found CNI network lo (type=loopback) at /tmp/crio-vulnerable-2/cni/10-loopback.conflist"
time="2026-09-24T15:47:52.705141937Z" level=info msg="Updated default CNI network name to lo"
time="2026-09-24T15:47:52.705242283Z" level=info msg="FLAG: --c=\"/tmp/crio-vulnerable-2/crio.conf\"\n"
time="2026-09-24T15:47:52.705250822Z" level=info msg="FLAG: --config=\"/tmp/crio-vulnerable-2/crio.conf\"\n"
time="2026-09-24T15:47:52.705253432Z" level=info msg="FLAG: --config-dir=\"\"\n"
time="2026-09-24T15:47:52.705255512Z" level=info msg="FLAG: --d=\"\"\n"
time="2026-09-24T15:47:52.705454276Z" level=info msg="CNI plugin is now healthy (was: plugin status uninitialized)"
time="2026-09-24T15:47:52.705493863Z" level=info msg="Current CRI-O configuration:\n[crio]\n  root = \"/var/lib/pruva-crio-root\"\n  runroot = \"/run/pruva-crio-root\"\n  imagestore = \"\"\n  storage_driver = \"vfs\"\n  log_dir = \"/var/log/crio/pods\"\n  version_file = \"/var/run/crio/version\"\n  version_file_persist = \"\"\n  clean_shutdown_file = \"/var/lib/crio/clean.shutdown\"\n  internal_wipe = true\n  internal_repair = true\n  [crio.api]\n    grpc_max_send_msg_size = 83886080\n    grpc_max_recv_msg_size = 83886080\n    listen = \"/tmp/crio-vulnerable-2/crio.sock\"\n    stream_address = \"127.0.0.1\"\n    stream_port = \"0\"\n    stream_enable_tls = false\n    stream_tls_cert = \"\"\n    stream_tls_key = \"\"\n    stream_tls_ca = \"\"\n    stream_idle_timeout = \"\"\n    tls_min_version = \"VersionTLS12\"\n  [crio.runtime]\n    no_pivot = false\n    selinux = false\n    log_to_journald = false\n    drop_infra_ctr = false\n    read_only = false\n    hooks_dir = [\"/usr/share/containers/oci/hooks.d\"]\n    default_capabilities = [\"CHOWN\", \"DAC_OVERRIDE\", \"FSETID\", \"FOWNER\", \"SETGID\", \"SETUID\", \"SETPCAP\", \"NET_BIND_SERVICE\", \"KILL\"]\n    add_inheritable_capabilities = false\n    min_injected_gomaxprocs = 0\n    allowed_devices = [\"/dev/fuse\", \"/dev/net/tun\"]\n    cdi_spec_dirs = [\"/etc/cdi\", \"/var/run/cdi\"]\n    device_ownership_from_security_context = false\n    default_runtime = \"runc\"\n    decryption_keys_path = \"/etc/crio/keys/\"\n    conmon = \"/usr/bin/conmon\"\n    conmon_cgroup = \"\"\n    seccomp_profile = \"\"\n    privileged_seccomp_profile = \"\"\n    apparmor_profile = \"crio-default\"\n    blockio_config_file = \"\"\n    blockio_reload = false\n    irqbalance_config_file = \"/etc/sysconfig/irqbalance\"\n    rdt_config_file = \"\"\n    cgroup_manager = \"cgroupfs\"\n    default_mounts_file = \"\"\n    container_exits_dir = \"/tmp/crio-vulnerable-2/exits\"\n    container_attach_socket_dir = \"/tmp/crio-vulnerable-2/attach\"\n    bind_mount_prefix = \"\"\n    uid_mappings = \"\"\n    minimum_mappable_uid = -1\n    gid_mappings = \"\"\n    minimum_mappable_gid = -1\n    log_level = \"info\"\n    log_filter = \"\"\n    namespaces_dir = \"/var/run\"\n    pinns_path = \"/tmp/crio-vulnerable-2/pinns\"\n    enable_criu_support = true\n    pids_limit = -1\n    log_size_max = -1\n    ctr_stop_timeout = 30\n    separate_pull_cgroup = \"\"\n    infra_ctr_cpuset = \"\"\n    shared_cpuset = \"\"\n    enable_pod_events = false\n    irqbalance_config_restore_file = \"/etc/sysconfig/orig_irq_banned_cpus\"\n    hostnetwork_disable_selinux = true\n    disable_hostport_mapping = false\n    timezone = \"\"\n    [crio.runtime.runtimes]\n      [crio.runtime.runtimes.runc]\n        runtime_config_path = \"\"\n        runtime_path = \"/usr/local/bin/runc-rootless-adapter\"\n        runtime_type = \"oci\"\n        runtime_root = \"/tmp/crio-vulnerable-2/runc-root\"\n        monitor_path = \"/usr/bin/conmon\"\n        container_min_memory = \"12MiB\"\n        no_sync_log = false\n        container_create_timeout = 240\n  [crio.image]\n    default_transport = \"docker://\"\n    global_auth_file = \"\"\n    namespaced_auth_dir = \"/etc/crio/auth\"\n    pause_image = \"registry.k8s.io/pause:3.10.2\"\n    pause_image_auth_file = \"\"\n    pause_command = \"/pause\"\n    signature_policy = \"\"\n    signature_policy_dir = \"/etc/crio/policies\"\n    image_volumes = \"mkdir\"\n    big_files_temporary_dir = \"\"\n    auto_reload_registries = false\n    pull_progress_timeout = \"0s\"\n    oci_artifact_mount_support = true\n    short_name_mode = \"enforcing\"\n  [crio.network]\n    cni_default_network = \"\"\n    network_dir = \"/tmp/crio-vulnerable-2/cni\"\n    plugin_dirs = [\"/tmp/crio-vulnerable-2/cnibin\"]\n    cni_status_grace_period = \"0s\"\n  [crio.metrics]\n    enable_metrics = false\n    metrics_collectors = [\"image_pulls_layer_size\", \"containers_events_dropped_total\", \"containers_oom_total\", \"processes_defunct\", \"operations_total\", \"operations_latency_seconds\", \"operations_latency_seconds_total\", \"operations_errors_total\", \"image_pulls_bytes_total\", \"image_pulls_skipped_bytes_total\", \"image_pulls_failure_total\", \"image_pulls_success_total\", \"image_layer_reuse_total\", \"containers_oom_count_total\", \"containers_seccomp_notifier_count_total\", \"resources_stalled_at_stage\", \"containers_stopped_monitor_count\", \"default_runtime\"]\n    metrics_host = \"127.0.0.1\"\n    metrics_port = 9090\n    metrics_socket = \"\"\n    metrics_cert = \"\"\n    metrics_key = \"\"\n  [crio.tracing]\n    enable_tracing = false\n    tracing_endpoint = \"127.0.0.1:4317\"\n    tracing_sampling_rate_per_million = 0\n  [crio.stats]\n    stats_collection_period = 0\n    collection_period = 0\n  [crio.nri]\n    enable_nri = true\n    nri_listen = \"/var/run/nri/nri.sock\"\n    nri_plugin_dir = \"/opt/nri/plugins\"\n    nri_plugin_config_dir = \"/etc/nri/conf.d\"\n    nri_plugin_registration_timeout = \"5s\"\n    nri_plugin_request_timeout = \"2s\"\n    nri_disable_connections = false\n    [crio.nri.default_validator]\n      nri_enable_default_validator = false\n      nri_validator_reject_oci_hook_adjustment = false\n      nri_validator_reject_runtime_default_seccomp_adjustment = false\n      nri_validator_reject_unconfined_seccomp_adjustment = false\n      nri_validator_reject_custom_seccomp_adjustment = false\n      nri_validator_reject_namespace_adjustment = false\n      nri_validator_tolerate_missing_plugins_annotation = \"\"\n"
time="2026-09-24T15:47:52.705563312Z" level=info msg="Continuous CNI STATUS monitoring is disabled (cni_status_grace_period is 0s)"
time="2026-09-24T15:47:52.705901249Z" level=info msg="Attempting to restore irqbalance config from /etc/sysconfig/orig_irq_banned_cpus"
time="2026-09-24T15:47:52.705962236Z" level=info msg="Restore irqbalance config: failed to get current CPU ban list, ignoring"
time="2026-09-24T15:47:52.712944475Z" level=info msg="No kernel support for IPv6: could not find nftables binary: exec: \"nft\": executable file not found in $PATH"
time="2026-09-24T15:47:52.713461806Z" level=info msg="Registered SIGHUP reload watcher"
time="2026-09-24T15:47:52.713471766Z" level=info msg="Starting seccomp notifier watcher"
time="2026-09-24T15:47:52.713503655Z" level=info msg="Create NRI interface"
time="2026-09-24T15:47:52.713582642Z" level=info msg="built-in NRI default validator is disabled"
time="2026-09-24T15:47:52.713592262Z" level=info msg="runtime interface created"
time="2026-09-24T15:47:52.713596902Z" level=info msg="Registered domain \"k8s.io\" with NRI"
time="2026-09-24T15:47:52.713599452Z" level=info msg="runtime interface starting up..."
time="2026-09-24T15:47:52.713601842Z" level=info msg="starting plugins..."
time="2026-09-24T15:47:52.713635361Z" level=info msg="Synchronizing NRI (plugin) with current runtime state"
time="2026-09-24T15:47:52.713740176Z" level=info msg="No systemd watchdog enabled"
time="2026-09-24T15:47:53.713803592Z" level=info msg="Pulling image: registry.k8s.io/pause:3.10.2" id=77a803c1-f1c2-4073-be4e-5470d2ea1c46 name=/runtime.v1.ImageService/PullImage
time="2026-09-24T15:47:53.714078192Z" level=info msg="Trying to access \"registry.k8s.io/pause:3.10.2\""
time="2026-09-24T15:47:54.22729775Z" level=info msg="Pulled image: 4a83b15d3ecfe0d916b2d0a7991bc2854a629b8097017c2ee1ff65b30ae4c07c" id=77a803c1-f1c2-4073-be4e-5470d2ea1c46 name=/runtime.v1.ImageService/PullImage
time="2026-09-24T15:47:54.248019199Z" level=info msg="Pulling image: quay.io/crio/fedora-crio-ci:latest" id=e3822277-ffad-4b6c-b8cd-febd9d84faa3 name=/runtime.v1.ImageService/PullImage
time="2026-09-24T15:47:54.248234001Z" level=info msg="Trying to access \"quay.io/crio/fedora-crio-ci:latest\""
time="2026-09-24T15:47:55.544140307Z" level=info msg="Pulled image: 492b81c586bf4fe31298733e7dd38ad35d03f5288a6810835d5d8c3c064d6837" id=e3822277-ffad-4b6c-b8cd-febd9d84faa3 name=/runtime.v1.ImageService/PullImage
time="2026-09-24T15:47:55.575731824Z" level=info msg="Running pod sandbox: pruva-repro/pod-vulnerable-2/POD" id=94fe4a2b-86a7-41eb-ad8e-5baa8a5cb53b name=/runtime.v1.RuntimeService/RunPodSandbox
time="2026-09-24T15:47:55.575782982Z" level=info msg="Allowed annotations are specified for workload []"
time="2026-09-24T15:47:55.578963787Z" level=info msg="Allowed annotations are specified for workload []"
time="2026-09-24T15:47:55.63175145Z" level=info msg="Ran pod sandbox d295d2022c8517a4de3920d7292d6bec64473d54042a832493bfe2547f18e6c7 with infra container: pruva-repro/pod-vulnerable-2/POD" id=94fe4a2b-86a7-41eb-ad8e-5baa8a5cb53b name=/runtime.v1.RuntimeService/RunPodSandbox
time="2026-09-24T15:47:55.655110731Z" level=info msg="Creating container: //" id=f7d18cf2-5daa-4e3d-b8fe-e1482e45e1b0 name=/runtime.v1.RuntimeService/CreateContainer
time="2026-09-24T15:47:55.65623893Z" level=info msg="Allowed annotations are specified for workload []"
time="2026-09-24T15:47:55.65625299Z" level=info msg="Allowed annotations are specified for workload []"
time="2026-09-24T15:47:55.997513635Z" level=info msg="Allowed annotations are specified for workload []"
time="2026-09-24T15:47:55.998396173Z" level=info msg="Allowed annotations are specified for workload []"
time="2026-09-24T15:47:56.029308725Z" level=info msg="Starting container: f84c11f958fe7d9ecdccd8171ab73189aa6eb147ae710b4f0e01cdbecf5a8166" id=7b05ba4f-c43a-4685-b3c8-1647910d5bda name=/runtime.v1.RuntimeService/StartContainer
time="2026-09-24T15:47:56.126264569Z" level=info msg="Restored container: f84c11f958fe7d9ecdccd8171ab73189aa6eb147ae710b4f0e01cdbecf5a8166" id=7b05ba4f-c43a-4685-b3c8-1647910d5bda name=/runtime.v1.RuntimeService/StartContainer