Control group /:
-.slice
├─sys-fs-fuse-connections.mount 
├─sys-kernel-config.mount 
├─sys-kernel-debug.mount 
├─dev-mqueue.mount 
├─user.slice 
│ └─user-1000.slice 
│   ├─user@1000.service …
│   │ ├─app.slice 
│   │ └─init.scope 
│   │   ├─621 /lib/systemd/systemd --user
│   │   └─622 (sd-pam)
│   ├─session-4.scope 
│   │ ├─1502 sshd: zuul [priv]
│   │ └─1515 sshd: zuul@notty
│   └─session-1.scope 
│     ├─  618 sshd: zuul [priv]
│     ├─  635 sshd: zuul@notty
│     ├─  772 /usr/bin/python3
│     ├─ 1506 ssh: /home/zuul/.ansible/cp/199.204.45.3-22-zuul [mux]
│     ├─38493 sh -c /bin/sh -c 'sudo -H -S -n  -u root /bin/sh -c '"'"'echo BECOME-SUCCESS-zysrylocdsypfhzflklqxtwfqtojrpcm ; /usr/bin/python3'"'"' && sleep 0'
│     ├─38494 /bin/sh -c sudo -H -S -n  -u root /bin/sh -c 'echo BECOME-SUCCESS-zysrylocdsypfhzflklqxtwfqtojrpcm ; /usr/bin/python3' && sleep 0
│     ├─38495 sudo -H -S -n -u root /bin/sh -c echo BECOME-SUCCESS-zysrylocdsypfhzflklqxtwfqtojrpcm ; /usr/bin/python3
│     ├─38496 /bin/sh -c echo BECOME-SUCCESS-zysrylocdsypfhzflklqxtwfqtojrpcm ; /usr/bin/python3
│     ├─38497 /usr/bin/python3
│     ├─38498 /bin/bash -c set -x
systemd-cgls --full --all --no-pager > /tmp/logs/system/systemd-cgls.txt
ip addr > /tmp/logs/system/ip-addr.txt
ip route > /tmp/logs/system/ip-route.txt
lsblk > /tmp/logs/system/lsblk.txt
mount > /tmp/logs/system/mount.txt
docker images > /tmp/logs/system/docker-images.txt
brctl show > /tmp/logs/system/brctl-show.txt
ps aux --sort=-%mem > /tmp/logs/system/ps.txt
dpkg -l > /tmp/logs/system/packages.txt
CONTAINERS=($(docker ps -a --format '{{ .Names }}' --filter label=zuul))
if [ ! -z "$CONTAINERS" ]; then
  mkdir -p "/tmp/logs/system/containers"
  for CONTAINER in ${CONTAINERS}; do
    docker logs "${CONTAINER}" > "/tmp/logs/system/containers/${CONTAINER}.txt"
  done
fi
│     └─38500 systemd-cgls --full --all --no-pager
├─sys-kernel-tracing.mount 
├─init.scope 
│ └─1 /lib/systemd/systemd --system --deserialize 39 nofb
├─system.slice 
│ ├─containerd.service …
│ │ ├─ 3023 /usr/bin/containerd --config /etc/containerd/config.toml
│ │ ├─ 4595 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id bbb8ca4d429c07645cb56d041041723ad8ef8f35dfecd3ede5ce9f9476ac5b69 -address /run/containerd/containerd.sock
│ │ ├─ 4612 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 3a06cad5cbd56841e41f642d30e815a2fe5ff6a604dbceb895bde4d4063c47b9 -address /run/containerd/containerd.sock
│ │ ├─ 4642 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 9d18adb1a668af66758c7682f536d606371884d3989d5eedcbdb59ab950d3c72 -address /run/containerd/containerd.sock
│ │ ├─ 4652 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 521b7c52f0ff4df0731e01d44a853c26ed2084adef660f9ff8603a428aafb723 -address /run/containerd/containerd.sock
│ │ ├─ 4669 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 6afbf69486138e91d99d1fec590c4ce5786f3d0b1e0d4493225c500308ed58bf -address /run/containerd/containerd.sock
│ │ ├─ 5195 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 8083659628d78791c50e103b3904b56451bcca34133210bcc4beaee8ae259c0e -address /run/containerd/containerd.sock
│ │ ├─ 5830 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 7d0bc234aa9745aefcc1b047086d1289ea7181922d9fae285f06e36f30344ebc -address /run/containerd/containerd.sock
│ │ ├─ 5857 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1b89a1e9af06e4465d5fce72ae51992aa12ca3f5d2623c7bc1f3d14b68983f80 -address /run/containerd/containerd.sock
│ │ ├─ 7058 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id d25a976e16ce18a9ebecbde61c7a6ac1a123563c4f4d47b0c749f2e4b869fc7a -address /run/containerd/containerd.sock
│ │ ├─ 7370 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id b493fa42eb937614aaa56befb1a38e54f3a67d48dbd715b6efdfaf90c3fb3347 -address /run/containerd/containerd.sock
│ │ ├─ 7414 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 30c0bb9176bcf50fd1d9207449b7109a4787220b7df38420d96274d7f7758666 -address /run/containerd/containerd.sock
│ │ ├─ 7762 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 3d43d046ac632a4868943b4b264b42b87ff6e73f076f6d6f8d681636539304a5 -address /run/containerd/containerd.sock
│ │ ├─ 8186 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 1c0d40c0d0687bfa0284b2c53319f2474f3d4882d56237a91dbe9b16000acd7a -address /run/containerd/containerd.sock
│ │ ├─ 8237 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 8cdf880d79238d85e4da225b980f2312b56e0d94adf9e85b6c44cdeb276381ca -address /run/containerd/containerd.sock
│ │ ├─ 8303 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id d2b00a87e2175c9e376b72136fce9c59a52e376a04bbf464b3ec4447ed3d0b7d -address /run/containerd/containerd.sock
│ │ ├─10452 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 4544da78fe3622cd181bda12b6b6f6fd32f14705c42c50c93eeb30f852c5bd1f -address /run/containerd/containerd.sock
│ │ ├─10528 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id c345a70217eeaadc9f8db59a5156703755b5f338d6bead25b0970860f355ba49 -address /run/containerd/containerd.sock
│ │ ├─11310 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 27e0f82202532ee741e0988493203cb5a9d14742f41e84ec64ba576e6dcb65ca -address /run/containerd/containerd.sock
│ │ ├─11401 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id f4e0fcf7eb63093bfd303825290671a67a000eaeb34dafe18e00622cde822bad -address /run/containerd/containerd.sock
│ │ ├─11712 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id a8e6324fbfc1fdbae1f8466e627a7ac43fe4c956f37dfe7ecfb6723c54e838ad -address /run/containerd/containerd.sock
│ │ ├─11978 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id d213d58b771fa8308f04a3124fb2b67da2a099810e0909cf0c95bcd9344e2fe9 -address /run/containerd/containerd.sock
│ │ ├─12332 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id b5b3ebab3433acaacb35ea65b886fbb008ec743df6818330ef9097f7d0504e70 -address /run/containerd/containerd.sock
│ │ ├─13994 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id cdc4026ef5d29c36973704298499496629ef522505c3fafefd7ae6f5f236a696 -address /run/containerd/containerd.sock
│ │ ├─14651 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id be8886391af486ef05daa98f7b6899a08ea53e9b6f20742bc4dba557c4c38a6a -address /run/containerd/containerd.sock
│ │ ├─18146 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id addfd0794272aa05a5cea7f021827611f2e7549104c59dcc27286e0e2d653287 -address /run/containerd/containerd.sock
│ │ ├─20597 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 63e4666a7e0c885d729eb45feec03840d323e592f16211ecb436e320108a070b -address /run/containerd/containerd.sock
│ │ ├─20698 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id fac6d614dd7a78809b74a7647084a7412d22e1b43bb6a40ba2a3ca754519b89f -address /run/containerd/containerd.sock
│ │ ├─20735 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id c3a33cdc44755dd82d8847c3bf2e3993a1a881d880e02eeb61fbe7627072015f -address /run/containerd/containerd.sock
│ │ ├─20774 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 09509e6cbf70dc014487a86795d49710cc9ad8913cf10c693928e3c411f4e88c -address /run/containerd/containerd.sock
│ │ ├─21902 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 8b4222e8e206af884ee82a4791838bc5d42e391f7ac92965d01093c07e21de89 -address /run/containerd/containerd.sock
│ │ ├─22084 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 398888f9a96c10f636bfad1547f4b3d5ec487078c1ecf3f9239fd9bdaede14ec -address /run/containerd/containerd.sock
│ │ ├─22732 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 2001ffb596f2b5cfc53bf0c941b2bf2d7394d5feb9f4a8a31578021867743776 -address /run/containerd/containerd.sock
│ │ ├─24460 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 9a273dce9abb47b71c3753a1db5ca79fc10556eee94415a0a3c129cae447e02f -address /run/containerd/containerd.sock
│ │ ├─29832 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id ad8c821cee4f557bf5c6eb6171c9801ca5d2e8ec2abe7472e10b678d66c546c3 -address /run/containerd/containerd.sock
│ │ ├─29875 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id b7204f93318655486b891e62f7f1d4b339f61df0ba3e8aa0a30b6d3c410b6a3c -address /run/containerd/containerd.sock
│ │ └─29947 /usr/bin/containerd-shim-runc-v2 -namespace k8s.io -id 57230c3439ee7347bbb4e941ab028daf22d2ace84d8032ffbbdf01962a063569 -address /run/containerd/containerd.sock
│ ├─packagekit.service 
│ │ └─1323 /usr/libexec/packagekitd
│ ├─systemd-networkd.service 
│ │ └─439 /lib/systemd/systemd-networkd
│ ├─systemd-udevd.service 
│ │ └─331 /lib/systemd/systemd-udevd
│ ├─system-serial\x2dgetty.slice 
│ │ └─serial-getty@ttyS0.service 
│ │   └─544 /sbin/agetty -o -p -- \u --keep-baud 115200,57600,38400,9600 ttyS0 vt220
│ ├─polkit.service 
│ │ └─559 /usr/libexec/polkitd --no-debug
│ ├─networkd-dispatcher.service 
│ │ └─534 /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers
│ ├─kubelet.service 
│ │ └─5032 /usr/bin/kubelet --bootstrap-kubeconfig=/etc/kubernetes/bootstrap-kubelet.conf --kubeconfig=/etc/kubernetes/kubelet.conf --config=/var/lib/kubelet/config.yaml --cgroups-per-qos=false --container-runtime-endpoint=/run/containerd/containerd.sock --enforce-node-allocatable= --node-ip=199.204.45.3 --pod-infra-container-image=harbor.atmosphere.dev/registry.k8s.io/pause:3.9
│ ├─system-modprobe.slice 
│ ├─cloud-init-local.service 
│ ├─systemd-journald.service 
│ │ └─298 /lib/systemd/systemd-journald
│ ├─ssh.service 
│ │ └─565 sshd: /usr/sbin/sshd -D [listener] 0 of 10-100 startups
│ ├─uuidd.service 
│ │ └─990 /usr/sbin/uuidd --socket-activation
│ ├─cloud-config.service 
│ ├─systemd-resolved.service 
│ │ └─334 /lib/systemd/systemd-resolved
│ ├─dbus.service 
│ │ └─531 @dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
│ ├─systemd-timesyncd.service 
│ │ └─336 /lib/systemd/systemd-timesyncd
│ ├─system-getty.slice 
│ │ └─getty@tty1.service 
│ │   └─543 /sbin/agetty -o -p -- \u --noclear tty1 linux
│ └─systemd-logind.service 
│   └─537 /lib/systemd/systemd-logind
├─k8s.io 
│ ├─04450be45e60e46a60ca93f8ed26010f06836ccdeec205b34e7df584fba0f759 
│ │ └─8463 /app/cmd/webhook/webhook --v=2 --secure-port=10250 --feature-gates=AdditionalCertificateOutputFormats=true --dynamic-serving-ca-secret-namespace=cert-manager --dynamic-serving-ca-secret-name=cert-manager-webhook-ca --dynamic-serving-dns-names=cert-manager-webhook --dynamic-serving-dns-names=cert-manager-webhook.cert-manager --dynamic-serving-dns-names=cert-manager-webhook.cert-manager.svc --feature-gates=AdditionalCertificateOutputFormats=true
│ ├─a7c66a184e52caff1d5941ac1d0e5609d5e0145e7d0e4c6ab83c8d14c30944fd 
│ │ └─7499 /coredns -conf /etc/coredns/Corefile
│ ├─1b80e78a12a9137f4b42bd684bced1832995d06123d5eff084662ebb63a8630a 
│ │ └─22984 /bin/prometheus-config-reloader --listen-address=:8080 --reload-url=http://127.0.0.1:9093/-/reload --config-file=/etc/alertmanager/config/alertmanager.yaml.gz --config-envsubst-file=/etc/alertmanager/config_out/alertmanager.env.yaml --watched-dir=/etc/alertmanager/config
│ ├─30c0bb9176bcf50fd1d9207449b7109a4787220b7df38420d96274d7f7758666 
│ │ └─7459 /pause
│ ├─ad8c821cee4f557bf5c6eb6171c9801ca5d2e8ec2abe7472e10b678d66c546c3 
│ │ └─29858 /pause
│ ├─8e079050f9ddb2995ab0b48af15a024c863d79efa4d9ce38af12d37c877b25ab 
│ │ └─4898 etcd --advertise-client-urls=https://199.204.45.3:2379 --cert-file=/etc/kubernetes/pki/etcd/server.crt --client-cert-auth=true --data-dir=/var/lib/etcd --experimental-initial-corrupt-check=true --experimental-watch-progress-notify-interval=5s --initial-advertise-peer-urls=https://199.204.45.3:2380 --initial-cluster=instance=https://199.204.45.3:2380 --key-file=/etc/kubernetes/pki/etcd/server.key --listen-client-urls=https://127.0.0.1:2379,https://199.204.45.3:2379 --listen-metrics-urls=http://127.0.0.1:2381 --listen-peer-urls=https://199.204.45.3:2380 --name=instance --peer-cert-file=/etc/kubernetes/pki/etcd/peer.crt --peer-client-cert-auth=true --peer-key-file=/etc/kubernetes/pki/etcd/peer.key --peer-trusted-ca-file=/etc/kubernetes/pki/etcd/ca.crt --snapshot-count=10000 --tls-min-version=TLS1.3 --trusted-ca-file=/etc/kubernetes/pki/etcd/ca.crt
│ ├─9d18adb1a668af66758c7682f536d606371884d3989d5eedcbdb59ab950d3c72 
│ │ └─4762 /pause
│ ├─0f8285e7a0964ddc7ce0b85b5653d731d262ad6d7565ee94b8cf4c6add686f90 
│ │ └─7440 /coredns -conf /etc/coredns/Corefile
│ ├─fac6d614dd7a78809b74a7647084a7412d22e1b43bb6a40ba2a3ca754519b89f 
│ │ └─20722 /pause
│ ├─31206cf8028d36a1dd82fd4697d15f944cddc7fab9fcab695e2ec8ca20cd4515 
│ │ └─12619 /opt/percona/peer-list -on-change=/opt/percona/haproxy_add_pxc_nodes.sh -service=percona-xtradb-pxc -protocol=$(PEER_LIST_SRV_PROTOCOL)
│ ├─8b4222e8e206af884ee82a4791838bc5d42e391f7ac92965d01093c07e21de89 
│ │ └─21933 /pause
│ ├─683768a807affa0044691dabde2c52afb7cc8e5d45d1ffefaf3fee4bd960f183 
│ │ └─4987 /kube-vip manager
│ ├─4232a4b6b525753b6f80bc3d1df06ae891e5e4cef86bf90ba71610c4e2587ed3 
│ │ └─14396 memcached -v -p 11211 -U 0 -c 8192 -m 1024
│ ├─1c0d40c0d0687bfa0284b2c53319f2474f3d4882d56237a91dbe9b16000acd7a 
│ │ └─8209 /pause
│ ├─aeb531e639e4352087ac45e30129c3597475a8182c08371c5b8f4b3fb799bd5f 
│ │ └─14758 java -Dkc.config.built=true -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Dfile.encoding=UTF-8 -Dsun.stdout.encoding=UTF-8 -Dsun.err.encoding=UTF-8 -Dstdout.encoding=UTF-8 -Dstderr.encoding=UTF-8 -XX:+ExitOnOutOfMemoryError -Djava.security.egd=file:/dev/urandom -XX:+UseParallelGC -XX:GCTimeRatio=4 -XX:AdaptiveSizePolicyWeight=90 -XX:FlightRecorderOptions=stackdepth=512 -XX:MinHeapFreeRatio=10 -XX:MaxHeapFreeRatio=20 -XX:MaxRAMPercentage=70 -XX:MinRAMPercentage=70 -XX:InitialRAMPercentage=50 --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.base/java.security=ALL-UNNAMED -Djgroups.dns.query=keycloak-headless.auth-system.svc.cluster.local -Dkc.home.dir=/opt/keycloak/bin/.. -Djboss.server.config.dir=/opt/keycloak/bin/../conf -Djava.util.logging.manager=org.jboss.logmanager.LogManager -Dpicocli.disable.closures=true -Dquarkus-log-max-startup-records=10000 -cp /opt/keycloak/bin/../lib/quarkus-run.jar io.quarkus.bootstrap.runner.QuarkusEntryPoint --verbose start --health-enabled=true --http-enabled=true --http-port=8080 --hostname-strict=false --spi-events-listener-jboss-logging-success-level=info --spi-events-listener-jboss-logging-error-level=warn --transaction-xa-enabled=false --metrics-enabled=true
│ ├─2001ffb596f2b5cfc53bf0c941b2bf2d7394d5feb9f4a8a31578021867743776 
│ │ └─22756 /pause
│ ├─70104241df6f95b7508a21afe7e409fa857c2bffb2337650c8c59eaa14d2e0e4 
│ │ ├─26611 apache2 -DFOREGROUND
│ │ ├─26625 (wsgi:k -DFOREGROUND
│ │ ├─26626 (wsgi:k -DFOREGROUND
│ │ ├─26627 (wsgi:k -DFOREGROUND
│ │ ├─26628 (wsgi:k -DFOREGROUND
│ │ ├─26632 apache2 -DFOREGROUND
│ │ ├─26634 apache2 -DFOREGROUND
│ │ ├─26636 apache2 -DFOREGROUND
│ │ ├─26637 apache2 -DFOREGROUND
│ │ ├─26638 apache2 -DFOREGROUND
│ │ ├─26639 apache2 -DFOREGROUND
│ │ ├─26641 apache2 -DFOREGROUND
│ │ ├─26642 apache2 -DFOREGROUND
│ │ ├─26643 apache2 -DFOREGROUND
│ │ └─26644 apache2 -DFOREGROUND
│ ├─2877e851c3d97ad1b11b5e1185baa41a613758e6646d0bd635742304d47c7bf4 
│ │ └─22819 /bin/prometheus --web.console.templates=/etc/prometheus/consoles --web.console.libraries=/etc/prometheus/console_libraries --config.file=/etc/prometheus/config_out/prometheus.env.yaml --web.enable-lifecycle --web.external-url=http://prometheus.199-204-45-3.nip.io/ --web.route-prefix=/ --storage.tsdb.retention.time=10d --storage.tsdb.path=/prometheus --storage.tsdb.wal-compression --web.config.file=/etc/prometheus/web_config/web-config.yaml
│ ├─b8d069e690898649b276f6a692cf4fdc02d0f66e5094f34cae5bf5bda7d446c1 
│ │ └─8501 /app/cmd/controller/controller --v=2 --cluster-resource-namespace=cert-manager --leader-election-namespace=cert-manager --acme-http01-solver-image=harbor.atmosphere.dev/quay.io/jetstack/cert-manager-acmesolver:v1.12.17 --feature-gates=AdditionalCertificateOutputFormats=true --max-concurrent-challenges=60
│ ├─8083659628d78791c50e103b3904b56451bcca34133210bcc4beaee8ae259c0e 
│ │ └─5220 /pause
│ ├─6afbf69486138e91d99d1fec590c4ce5786f3d0b1e0d4493225c500308ed58bf 
│ │ └─4765 /pause
│ ├─1fcc5320729e9e97d3d2d448707043165e02a65da056f916d9512d5efabc8d47 
│ │ └─4879 kube-controller-manager --authentication-kubeconfig=/etc/kubernetes/controller-manager.conf --authorization-kubeconfig=/etc/kubernetes/controller-manager.conf --bind-address=0.0.0.0 --client-ca-file=/etc/kubernetes/pki/ca.crt --cluster-name=kubernetes --cluster-signing-cert-file=/etc/kubernetes/pki/ca.crt --cluster-signing-key-file=/etc/kubernetes/pki/ca.key --controllers=*,bootstrapsigner,tokencleaner --kubeconfig=/etc/kubernetes/controller-manager.conf --leader-elect=true --requestheader-client-ca-file=/etc/kubernetes/pki/front-proxy-ca.crt --root-ca-file=/etc/kubernetes/pki/ca.crt --service-account-private-key-file=/etc/kubernetes/pki/sa.key --tls-min-version=VersionTLS13 --use-service-account-credentials=true
│ ├─f4e0fcf7eb63093bfd303825290671a67a000eaeb34dafe18e00622cde822bad 
│ │ └─11426 /pause
│ ├─63c07755c009fcee446cb62f639c76d801d57cf38e27384263b8986133927dc0 
│ │ └─21864 /bin/sh -ec while true; do
  tmp="/run/prometheus/libvirt-mounts.prom.$"
  awk '
    function suspicious(target) {
      return target ~ /^\/etc\/ceph(\/|$)/ ||
        target ~ /^\/var\/lib\/kubelet\/pods\/[^\/]+\/volumes\/kubernetes\.io~host-path\/etcceph(\/|$)/ ||
        target ~ /^\/var\/lib\/kubelet\/pods\/[^\/]+\/volume-subpaths\/(ceph-etc|ceph-keyring|ceph-admin-keyring|external-ceph-keyring|ceph-keyring-[^\/]+)(\/|$)/
    }
    {
      total++
      target = $5
      if (suspicious(target)) {
        count[target]++
      }
    }
    END {
      duplicate = 0
      max = 0
      targets = 0
      for (target in count) {
        targets++
        if (count[target] > max) {
          max = count[target]
        }
        if (count[target] > 1) {
          duplicate += count[target] - 1
        }
      }
      print "# HELP node_libvirt_ceph_mount_duplicate_entries Number of extra duplicate libvirt Ceph-related mountinfo entries."
      print "# TYPE node_libvirt_ceph_mount_duplicate_entries gauge"
      print "node_libvirt_ceph_mount_duplicate_entries " duplicate
      print "# HELP node_libvirt_ceph_mount_max_duplicates Maximum mountinfo entries seen for a single libvirt Ceph-related mount target."
      print "# TYPE node_libvirt_ceph_mount_max_duplicates gauge"
      print "node_libvirt_ceph_mount_max_duplicates " max
      print "# HELP node_libvirt_ceph_mount_targets Number of libvirt Ceph-related mount targets seen in mountinfo."
      print "# TYPE node_libvirt_ceph_mount_targets gauge"
      print "node_libvirt_ceph_mount_targets " targets
      print "# HELP node_mountinfo_entries Number of entries in /proc/1/mountinfo."
      print "# TYPE node_mountinfo_entries gauge"
      print "node_mountinfo_entries " total
    }
  ' /host/proc/1/mountinfo > "${tmp}"
  mv "${tmp}" /run/prometheus/libvirt-mounts.prom
  sleep 60
done
│ ├─addfd0794272aa05a5cea7f021827611f2e7549104c59dcc27286e0e2d653287 
│ │ └─18169 /pause
│ ├─c3a33cdc44755dd82d8847c3bf2e3993a1a881d880e02eeb61fbe7627072015f 
│ │ └─20758 /pause
│ ├─7d0bc234aa9745aefcc1b047086d1289ea7181922d9fae285f06e36f30344ebc 
│ │ └─5870 /pause
│ ├─f8f52636ee359e1449ae2d2acad3d0f88b45b2b0a18c78e02d3cbbe9ce11d302 
│ │ └─23195 /bin/oauth2-proxy
│ ├─dce67c5191692feb9b7d7e2aeb9d6c314ffa72f80e057f1874fa04a9821996e0 
│ │ └─22940 /bin/alertmanager --config.file=/etc/alertmanager/config_out/alertmanager.env.yaml --storage.path=/alertmanager --data.retention=120h --cluster.listen-address= --web.listen-address=:9093 --web.external-url=http://alertmanager.199-204-45-3.nip.io/ --web.route-prefix=/ --cluster.label=monitoring/kube-prometheus-stack-alertmanager --cluster.peer=alertmanager-kube-prometheus-stack-alertmanager-0.alertmanager-operated:9094 --cluster.reconnect-timeout=5m --web.config.file=/etc/alertmanager/web_config/web-config.yaml
│ ├─d6a4328cd44e5227936bc124140c773e5a908c592b6cd238ae0c24d29201704b 
│ │ └─10891 /server
│ ├─d213d58b771fa8308f04a3124fb2b67da2a099810e0909cf0c95bcd9344e2fe9 
│ │ └─12002 /pause
│ ├─5a1edda1dc11ecd9a6ccfaea528b1038ae4c49275e2e27e6bd44a889065b166a 
│ │ └─6094 cilium-operator-generic --config-dir=/tmp/cilium/config-map --debug=false
│ ├─a426e6009e472b63031c62f464f7ff624b3706438090c207ab0d92f51f84f722 
│ │ └─23391 /bin/node_exporter --path.procfs=/host/proc --path.sysfs=/host/sys --path.rootfs=/host/root --path.udev.data=/host/root/run/udev/data --web.listen-address=[0.0.0.0]:9100 --collector.diskstats.ignored-devices=^(ram|loop|nbd|fd|(h|s|v|xv)d[a-z]|nvme\\d+n\\d+p)\\d+$ --collector.filesystem.fs-types-exclude=^(autofs|binfmt_misc|bpf|cgroup2?|configfs|debugfs|devpts|devtmpfs|fusectl|fuse.squashfuse_ll|hugetlbfs|iso9660|mqueue|nsfs|overlay|proc|procfs|pstore|rpc_pipefs|securityfs|selinuxfs|squashfs|sysfs|tracefs)$ --collector.filesystem.mount-points-exclude=^/(dev|proc|run/credentials/.+|sys|var/lib/docker/.+|var/lib/kubelet/pods/.+|var/lib/kubelet/plugins/kubernetes.io/csi/.+|run/containerd/.+)($|/) --collector.ethtool --collector.netclass.ignored-devices=^(lxc|cilium_(host|net)|qbr|qvb|qvo|tap|ovs-system|br|tbr|gre_sys|[0-9a-f]+_eth|vxlan).*$ --collector.netdev.device-exclude=^(lxc|cilium_(host|net)|qbr|qvb|qvo|tap|ovs-system|br|tbr|gre_sys|[0-9a-f]+_eth|vxlan).*$ --collector.processes --collector.systemd --collector.stat.softirq --collector.textfile.directory=/run/prometheus --web.config.file=/config/node-exporter.yml
│ ├─bb5fb384ec98afbdb64eb2b5d04bb0ffe09823b2cbe18efc8ffc0b37c0cb85bb 
│ │ └─22429 grafana server --homepath=/usr/share/grafana --config=/etc/grafana/grafana.ini --packaging=docker cfg:default.log.mode=console cfg:default.paths.data=/var/lib/grafana/ cfg:default.paths.logs=/var/log/grafana cfg:default.paths.plugins=/var/lib/grafana/plugins cfg:default.paths.provisioning=/etc/grafana/provisioning
│ ├─bbb8ca4d429c07645cb56d041041723ad8ef8f35dfecd3ede5ce9f9476ac5b69 
│ │ └─4707 /pause
│ ├─a8e6324fbfc1fdbae1f8466e627a7ac43fe4c956f37dfe7ecfb6723c54e838ad 
│ │ └─11735 /pause
│ ├─9d4633e13ba1d08075a36f83c591b71d8657fc0d5a1692878c4747397b5ba5c7 
│ │ └─12737 /bin/mysqld_exporter --mysqld.username=monitor --collect.info_schema.processlist
│ ├─1b56ba70f04c0195815d1ada77eac4fb61ac952cdf7ef2da2b8ff581cec4f1eb 
│ │ ├─23249 /bin/sh /opt/rabbitmq/sbin/rabbitmq-server
│ │ ├─23266 /opt/erlang/lib/erlang/erts-15.2.7.2/bin/beam.smp -W w -MBas ageffcbf -MHas ageffcbf -MBlmbcs 512 -MHlmbcs 512 -MMmcs 30 -pc unicode -P 1048576 -t 5000000 -stbt db -zdbbl 128000 -sbwt none -sbwtdcpu none -sbwtdio none -B i -- -root /opt/erlang/lib/erlang -bindir /opt/erlang/lib/erlang/erts-15.2.7.2/bin -progname erl -- -home /var/lib/rabbitmq -- -pa  -noshell -noinput -s rabbit boot -boot start_sasl -syslog logger [] -syslog syslog_error_logger false -kernel prevent_overlapping_partitions false --
│ │ ├─23281 erl_child_setup 1048576
│ │ ├─23332 /opt/erlang/lib/erlang/erts-15.2.7.2/bin/inet_gethost 4
│ │ ├─23333 /opt/erlang/lib/erlang/erts-15.2.7.2/bin/inet_gethost 4
│ │ ├─23343 /opt/erlang/lib/erlang/erts-15.2.7.2/bin/epmd -daemon
│ │ └─23470 /bin/sh -s rabbit_disk_monitor
│ ├─d281c0c60242899458971a731517481324a1463bbb597e463bad2bba721b1690 
│ │ ├─31374 apache2 -DFOREGROUND
│ │ ├─33399 (wsgi:h -DFOREGROUND
│ │ ├─33400 (wsgi:h -DFOREGROUND
│ │ ├─33401 (wsgi:h -DFOREGROUND
│ │ ├─33402 (wsgi:h -DFOREGROUND
│ │ ├─33403 (wsgi:h -DFOREGROUND
│ │ ├─33404 apache2 -DFOREGROUND
│ │ └─33405 apache2 -DFOREGROUND
│ ├─114f7dc49d4eb4f46fd1b6338f86881de14f89fffcad92696a75f3898ba73b47 
│ │ └─22892 /usr/bin/pod-tls-sidecar --template=/config/certificate-template.yml --ca-path=/certs/ca.crt --cert-path=/certs/tls.crt --key-path=/certs/tls.key
│ ├─cdc4026ef5d29c36973704298499496629ef522505c3fafefd7ae6f5f236a696 
│ │ └─14028 /pause
│ ├─1a73a8699e78e8d7b89cc54a597436633c18bbb9e77be192350336049292a67f 
│ │ └─5245 /usr/local/bin/kube-proxy --config=/var/lib/kube-proxy/config.conf --hostname-override=instance
│ ├─aff259565fb7f8490ef99a77d15fc99a8942a0c5daf5072816b3932f8d60c0fe 
│ │ └─11858 percona-xtradb-cluster-operator
│ ├─9a273dce9abb47b71c3753a1db5ca79fc10556eee94415a0a3c129cae447e02f 
│ │ └─24484 /pause
│ ├─ebffc54735d291f3974f67b2e137ab2d5e724a72e04ae78ffcf5516bdbfc8071 
│ │ ├─6297 cilium-agent --config-dir=/tmp/cilium/config-map
│ │ └─6661 cilium-health-responder --listen 4240 --pidfile /var/run/cilium/state/health-endpoint.pid
│ ├─d67ac86fa1766b577fb33dae0f27bde3a6a3c4be1171b605e222ac4ec451b90f 
│ │ └─11574 /manager --metrics-bind-address=:8080
│ ├─ddf074d1ea56c0f016623f4b907b1ba4a77e550ead5121153b5a437b017bee3e 
│ │ ├─31344 apache2 -DFOREGROUND
│ │ ├─33424 (wsgi:h -DFOREGROUND
│ │ ├─33425 (wsgi:h -DFOREGROUND
│ │ ├─33426 (wsgi:h -DFOREGROUND
│ │ ├─33427 (wsgi:h -DFOREGROUND
│ │ ├─33428 (wsgi:h -DFOREGROUND
│ │ ├─33429 apache2 -DFOREGROUND
│ │ └─33430 apache2 -DFOREGROUND
│ ├─fb4ce150945404bc9a0455780c74ac4728c63e564ed5e220c7d70e08f144b59a 
│ │ └─7107 /usr/local/bin/envoy-gateway server --config-path=/config/envoy-gateway.yaml
│ ├─398888f9a96c10f636bfad1547f4b3d5ec487078c1ecf3f9239fd9bdaede14ec 
│ │ └─22108 /pause
│ ├─42fd8d7ab55365362344eb2a7611af426659ba12aaff690b43ec85f256088690 
│ │ └─23213 /bin/oauth2-proxy
│ ├─6567400a07220eb4fc71ab765e91e5a05ad71013ec8960b33994d738cc99b903 
│ │ ├─31360 apache2 -DFOREGROUND
│ │ ├─33410 (wsgi:h -DFOREGROUND
│ │ ├─33411 (wsgi:h -DFOREGROUND
│ │ ├─33412 (wsgi:h -DFOREGROUND
│ │ ├─33413 (wsgi:h -DFOREGROUND
│ │ ├─33414 (wsgi:h -DFOREGROUND
│ │ ├─33415 apache2 -DFOREGROUND
│ │ └─33416 apache2 -DFOREGROUND
│ ├─57230c3439ee7347bbb4e941ab028daf22d2ace84d8032ffbbdf01962a063569 
│ │ └─30002 /pause
│ ├─51d7c4e7d4c855d8a83e18226aec3c8a3a01ba375ed345743770065ade43b68c 
│ │ ├─21588 python -u /app/sidecar.py
│ │ ├─21760 python -u /app/sidecar.py
│ │ └─21761 python -u /app/sidecar.py
│ ├─8cdf880d79238d85e4da225b980f2312b56e0d94adf9e85b6c44cdeb276381ca 
│ │ └─8273 /pause
│ ├─88a5534c8bf593a200d651f6998f2e8b0554d0e89210df481e8f2dd8212b139e 
│ │ ├─12523 mysqld --wsrep_start_position=71c2fbf4-641a-11f1-a257-7e83fdc7e1e9:20
│ │ └─12648 /var/lib/mysql/mysql-state-monitor
│ ├─3a06cad5cbd56841e41f642d30e815a2fe5ff6a604dbceb895bde4d4063c47b9 
│ │ └─4720 /pause
│ ├─b7204f93318655486b891e62f7f1d4b339f61df0ba3e8aa0a30b6d3c410b6a3c 
│ │ └─29904 /pause
│ ├─67a81bc27e5ba297827757624fcac8b582ccfe9d329820a0f60ca9a1adad9823 
│ │ └─4841 kube-apiserver --advertise-address=199.204.45.3 --allow-privileged=true --authorization-mode=Node,RBAC --client-ca-file=/etc/kubernetes/pki/ca.crt --enable-admission-plugins=NodeRestriction --enable-bootstrap-token-auth=true --etcd-cafile=/etc/kubernetes/pki/etcd/ca.crt --etcd-certfile=/etc/kubernetes/pki/apiserver-etcd-client.crt --etcd-keyfile=/etc/kubernetes/pki/apiserver-etcd-client.key --etcd-servers=https://127.0.0.1:2379 --kubelet-client-certificate=/etc/kubernetes/pki/apiserver-kubelet-client.crt --kubelet-client-key=/etc/kubernetes/pki/apiserver-kubelet-client.key --kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname --proxy-client-cert-file=/etc/kubernetes/pki/front-proxy-client.crt --proxy-client-key-file=/etc/kubernetes/pki/front-proxy-client.key --requestheader-allowed-names=front-proxy-client --requestheader-client-ca-file=/etc/kubernetes/pki/front-proxy-ca.crt --requestheader-extra-headers-prefix=X-Remote-Extra- --requestheader-group-headers=X-Remote-Group --requestheader-username-headers=X-Remote-User --secure-port=6443 --service-account-issuer=https://kubernetes.default.svc.cluster.local --service-account-key-file=/etc/kubernetes/pki/sa.pub --service-account-signing-key-file=/etc/kubernetes/pki/sa.key --service-cluster-ip-range=10.96.0.0/12 --tls-cert-file=/etc/kubernetes/pki/apiserver.crt --tls-min-version=VersionTLS13 --tls-private-key-file=/etc/kubernetes/pki/apiserver.key
│ ├─521b7c52f0ff4df0731e01d44a853c26ed2084adef660f9ff8603a428aafb723 
│ │ └─4751 /pause
│ ├─c56a2467891cb5049cc26bf611b42488d8ba6e917e206818c7304ad52e9ca3c1 
│ │ ├─10755 /usr/bin/dumb-init -- /nginx-ingress-controller --default-backend-service=ingress-nginx/ingress-nginx-defaultbackend --publish-service=ingress-nginx/ingress-nginx-controller --election-id=ingress-nginx-leader --controller-class=k8s.io/ingress-nginx --ingress-class=atmosphere --configmap=ingress-nginx/ingress-nginx-controller --tcp-services-configmap=ingress-nginx/ingress-nginx-tcp --udp-services-configmap=ingress-nginx/ingress-nginx-udp --validating-webhook=:7443 --validating-webhook-certificate=/usr/local/certificates/cert --validating-webhook-key=/usr/local/certificates/key --enable-metrics=true
│ │ ├─10767 /nginx-ingress-controller --default-backend-service=ingress-nginx/ingress-nginx-defaultbackend --publish-service=ingress-nginx/ingress-nginx-controller --election-id=ingress-nginx-leader --controller-class=k8s.io/ingress-nginx --ingress-class=atmosphere --configmap=ingress-nginx/ingress-nginx-controller --tcp-services-configmap=ingress-nginx/ingress-nginx-tcp --udp-services-configmap=ingress-nginx/ingress-nginx-udp --validating-webhook=:7443 --validating-webhook-certificate=/usr/local/certificates/cert --validating-webhook-key=/usr/local/certificates/key --enable-metrics=true
│ │ ├─10787 nginx: master process /usr/bin/nginx -c /etc/nginx/nginx.conf
│ │ ├─31013 nginx: worker process
│ │ ├─31014 nginx: worker process
│ │ └─31015 nginx: cache manager process
│ ├─d25a976e16ce18a9ebecbde61c7a6ac1a123563c4f4d47b0c749f2e4b869fc7a 
│ │ └─7082 /pause
│ ├─e979e182e5b9754239581ca72a11555b8f4727280b560d565547463d8f0c051c 
│ │ └─4867 kube-scheduler --authentication-kubeconfig=/etc/kubernetes/scheduler.conf --authorization-kubeconfig=/etc/kubernetes/scheduler.conf --bind-address=0.0.0.0 --kubeconfig=/etc/kubernetes/scheduler.conf --leader-elect=true --tls-min-version=VersionTLS13
│ ├─09509e6cbf70dc014487a86795d49710cc9ad8913cf10c693928e3c411f4e88c 
│ │ └─20806 /pause
│ ├─932b5807327e6e4e5af707df16318c2e7ffb6f61916c58c68f16e2bf3402b652 
│ │ └─21203 /bin/operator --kubelet-service=kube-system/kube-prometheus-stack-kubelet --localhost=127.0.0.1 --prometheus-config-reloader=harbor.atmosphere.dev/quay.io/prometheus-operator/prometheus-config-reloader:v0.73.0 --config-reloader-cpu-request=0 --config-reloader-cpu-limit=0 --config-reloader-memory-request=0 --config-reloader-memory-limit=0 --thanos-default-base-image=quay.io/thanos/thanos:v0.35.1 --secret-field-selector=type!=kubernetes.io/dockercfg,type!=kubernetes.io/service-account-token,type!=helm.sh/release.v1 --web.enable-tls=true --web.cert-file=/cert/cert --web.key-file=/cert/key --web.listen-address=:10250 --web.tls-min-version=VersionTLS13
│ ├─d2b00a87e2175c9e376b72136fce9c59a52e376a04bbf464b3ec4447ed3d0b7d 
│ │ └─8337 /pause
│ ├─a9108733629b2e2395d465d9a06304e754f22b4054725a655f214ec922aef9f2 
│ │ └─8424 /app/cmd/cainjector/cainjector --v=2 --leader-election-namespace=cert-manager
│ ├─b5b3ebab3433acaacb35ea65b886fbb008ec743df6818330ef9097f7d0504e70 
│ │ └─12357 /pause
│ ├─91fc7b450a555ee9858a0b02908d7470cc51056dd6f635a7a9bf77ed83b74b86 
│ │ └─21803 /usr/bin/pod-tls-sidecar --template=/config/certificate-template.yml --ca-path=/certs/ca.crt --cert-path=/certs/tls.crt --key-path=/certs/tls.key
│ ├─af464ca9c719a1e89c4cadd8ab385173843167e7381ac0d27d7db88427acb0f4 
│ │ ├─21563 python -u /app/sidecar.py
│ │ ├─21742 python -u /app/sidecar.py
│ │ └─21743 python -u /app/sidecar.py
│ ├─fd3bb817ee761d0f0f37c842b7f7eadbaa49d5e1c57e8ff5932e38afb3db6715 
│ │ └─18260 /secretgen-controller
│ ├─05a972471959dd84221570f8c8aafc8574a6ad26e2f956338ffa3a1c012d6447 
│ │ └─7917 local-path-provisioner --debug start --config /etc/config/config.json --service-account-name local-path-provisioner --provisioner-name cluster.local/local-path-provisioner --helper-image harbor.atmosphere.dev/ghcr.io/containerd/busybox:1.36 --configmap-name local-path-config
│ ├─de68d6be2ecf1fb76fa4c75052ee696178a794d118629566ab8b9bad19037fdf 
│ │ └─22855 /bin/prometheus-config-reloader --listen-address=:8080 --reload-url=http://127.0.0.1:9090/-/reload --config-file=/etc/prometheus/config/prometheus.yaml.gz --config-envsubst-file=/etc/prometheus/config_out/prometheus.env.yaml --watched-dir=/etc/prometheus/rules/prometheus-kube-prometheus-stack-prometheus-rulefiles-0
│ ├─be8886391af486ef05daa98f7b6899a08ea53e9b6f20742bc4dba557c4c38a6a 
│ │ └─14674 /pause
│ ├─3d43d046ac632a4868943b4b264b42b87ff6e73f076f6d6f8d681636539304a5 
│ │ └─7787 /pause
│ ├─eafcbbdac3c14d8aaed5a0e68c050061ed8d9cf031932732057bdbc03bc591c1 
│ │ └─11473 /manager --metrics-bind-address=:9782
│ ├─1b89a1e9af06e4465d5fce72ae51992aa12ca3f5d2623c7bc1f3d14b68983f80 
│ │ └─5897 /pause
│ ├─63e4666a7e0c885d729eb45feec03840d323e592f16211ecb436e320108a070b 
│ │ └─20653 /pause
│ ├─c345a70217eeaadc9f8db59a5156703755b5f338d6bead25b0970860f355ba49 
│ │ └─10551 /pause
│ ├─27e0f82202532ee741e0988493203cb5a9d14742f41e84ec64ba576e6dcb65ca 
│ │ └─11334 /pause
│ ├─97dc7e74d4e6b55a8ee9485cd4a82da0e177ce6d1aae24bb6ef58640675ec336 
│ │ └─21048 /kube-state-metrics --port=8080 --telemetry-port=8081 --port=8080 --resources=certificatesigningrequests,configmaps,cronjobs,daemonsets,deployments,endpoints,horizontalpodautoscalers,ingresses,jobs,leases,limitranges,mutatingwebhookconfigurations,namespaces,networkpolicies,nodes,persistentvolumeclaims,persistentvolumes,poddisruptionbudgets,pods,replicasets,replicationcontrollers,resourcequotas,secrets,services,statefulsets,storageclasses,validatingwebhookconfigurations,volumeattachments
│ ├─b493fa42eb937614aaa56befb1a38e54f3a67d48dbd715b6efdfaf90c3fb3347 
│ │ └─7393 /pause
│ ├─52abeb6c754134c98999dc7ef8786e1c2071a35b645099fc12e92a614f826b5a 
│ │ ├─12476 haproxy -W -db -f /etc/haproxy-custom/haproxy-global.cfg -f /etc/haproxy/pxc/haproxy.cfg -p /etc/haproxy/pxc/haproxy.pid -S /etc/haproxy/pxc/haproxy-main.sock
│ │ └─15019 haproxy -sf 168 -x sockpair@5 -W -db -f /etc/haproxy-custom/haproxy-global.cfg -f /etc/haproxy/pxc/haproxy.cfg -p /etc/haproxy/pxc/haproxy.pid -S /etc/haproxy/pxc/haproxy-main.sock
│ ├─4544da78fe3622cd181bda12b6b6f6fd32f14705c42c50c93eeb30f852c5bd1f 
│ │ └─10484 /pause
│ └─3ec6ca7c7f19234aefddc5380f716ad549a763bd23826ad2fd6464bce77fc8bd 
│   └─14459 /bin/memcached_exporter
├─proc-sys-fs-binfmt_misc.mount 
└─dev-hugepages.mount