USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 11481 1.3 0.0 2244680 56704 ? Ssl 02:22 0:00 /usr/bin/dockerd -H fd:// --containerd=/run/containerd/containerd.sock root 11111 0.4 0.0 2338716 41652 ? Ssl 02:22 0:00 /usr/bin/containerd --config /etc/containerd/config.toml root 12046 0.0 0.0 105880 22552 ? Sl 02:22 0:00 /usr/bin/python3 root 2561 0.0 0.0 296140 20444 ? Ssl 02:20 0:00 /usr/libexec/packagekitd root 615 0.0 0.0 33140 19636 ? Ss Aug20 0:00 /usr/bin/python3 /usr/bin/networkd-dispatcher --run-startup-triggers zuul 2001 0.0 0.0 179584 17112 ? Sl 02:20 0:00 /usr/bin/python3 root 363 0.0 0.0 40208 14956 ? S /tmp/logs/system/systemd-cgls.txt ip addr > /tmp/logs/system/ip-addr.txt ip route > /tmp/logs/system/ip-route.txt lsblk > /tmp/logs/system/lsblk.txt mount > /tmp/logs/system/mount.txt docker images > /tmp/logs/system/docker-images.txt brctl show > /tmp/logs/system/brctl-show.txt ps aux --sort=-%mem > /tmp/logs/system/ps.txt dpkg -l > /tmp/logs/system/packages.txt CONTAINERS=($(docker ps -a --format '{{ .Names }}' --filter label=zuul)) if [ ! -z "$CONTAINERS" ]; then mkdir -p "/tmp/logs/system/containers" for CONTAINER in ${CONTAINERS}; do docker logs "${CONTAINER}" > "/tmp/logs/system/containers/${CONTAINER}.txt" done fi zuul 1840 0.0 0.0 168460 2944 ? S 02:20 0:00 (sd-pam) uuidd 2228 0.0 0.0 9620 1512 ? Ss 02:20 0:00 /usr/sbin/uuidd --socket-activation root 625 0.0 0.0 6220 1140 ttyS0 Ss+ Aug20 0:00 /sbin/agetty -o -p -- \u --keep-baud 115200,57600,38400,9600 ttyS0 vt220 root 624 0.0 0.0 6176 1068 tty1 Ss+ Aug20 0:00 /sbin/agetty -o -p -- \u --noclear tty1 linux root 12045 0.0 0.0 2892 1004 ? S 02:22 0:00 /bin/sh -c echo BECOME-SUCCESS-ghvepwdnwmaonymihpfqfnkloimxfemo ; /usr/bin/python3 zuul 12042 0.0 0.0 2892 976 ? Ss 02:22 0:00 sh -c /bin/sh -c 'sudo -H -S -n -u root /bin/sh -c '"'"'echo BECOME-SUCCESS-ghvepwdnwmaonymihpfqfnkloimxfemo ; /usr/bin/python3'"'"' && sleep 0' zuul 12043 0.0 0.0 2892 972 ? S 02:22 0:00 /bin/sh -c sudo -H -S -n -u root /bin/sh -c 'echo BECOME-SUCCESS-ghvepwdnwmaonymihpfqfnkloimxfemo ; /usr/bin/python3' && sleep 0 _chrony 11988 0.0 0.0 10584 540 ? S 02:22 0:00 /usr/sbin/chronyd -F 1 root 2 0.0 0.0 0 0 ? S Aug20 0:00 [kthreadd] root 3 0.0 0.0 0 0 ? I< Aug20 0:00 [rcu_gp] root 4 0.0 0.0 0 0 ? I< Aug20 0:00 [rcu_par_gp] root 5 0.0 0.0 0 0 ? I< Aug20 0:00 [slub_flushwq] root 6 0.0 0.0 0 0 ? I< Aug20 0:00 [netns] root 8 0.0 0.0 0 0 ? I< Aug20 0:00 [kworker/0:0H-events_highpri] root 10 0.0 0.0 0 0 ? I< Aug20 0:00 [mm_percpu_wq] root 11 0.0 0.0 0 0 ? S Aug20 0:00 [rcu_tasks_rude_] root 12 0.0 0.0 0 0 ? S Aug20 0:00 [rcu_tasks_trace] root 13 0.0 0.0 0 0 ? S Aug20 0:00 [ksoftirqd/0] root 14 0.1 0.0 0 0 ? I Aug20 0:27 [rcu_sched] root 15 0.0 0.0 0 0 ? S Aug20 0:00 [migration/0] root 16 0.0 0.0 0 0 ? S Aug20 0:00 [idle_inject/0] root 17 0.0 0.0 0 0 ? I Aug20 0:00 [kworker/0:1-events] root 18 0.0 0.0 0 0 ? S Aug20 0:00 [cpuhp/0] root 19 0.0 0.0 0 0 ? S Aug20 0:00 [cpuhp/1] root 20 0.0 0.0 0 0 ? S Aug20 0:00 [idle_inject/1] root 21 0.0 0.0 0 0 ? S Aug20 0:00 [migration/1] root 22 0.0 0.0 0 0 ? S Aug20 0:00 [ksoftirqd/1] root 24 0.0 0.0 0 0 ? I< Aug20 0:00 [kworker/1:0H-events_highpri] root 25 0.0 0.0 0 0 ? S Aug20 0:00 [cpuhp/2] root 26 0.0 0.0 0 0 ? S Aug20 0:00 [idle_inject/2] root 27 0.0 0.0 0 0 ? S Aug20 0:00 [migration/2] root 28 0.0 0.0 0 0 ? S Aug20 0:00 [ksoftirqd/2] root 30 0.0 0.0 0 0 ? I< Aug20 0:00 [kworker/2:0H-kblockd] root 31 0.0 0.0 0 0 ? S Aug20 0:00 [cpuhp/3] root 32 0.0 0.0 0 0 ? S Aug20 0:00 [idle_inject/3] root 33 0.0 0.0 0 0 ? S Aug20 0:00 [migration/3] root 34 0.0 0.0 0 0 ? S Aug20 0:00 [ksoftirqd/3] root 36 0.0 0.0 0 0 ? I< Aug20 0:00 [kworker/3:0H-events_highpri] root 37 0.0 0.0 0 0 ? S Aug20 0:00 [cpuhp/4] root 38 0.0 0.0 0 0 ? S Aug20 0:00 [idle_inject/4] root 39 0.0 0.0 0 0 ? S Aug20 0:00 [migration/4] root 40 0.0 0.0 0 0 ? S Aug20 0:00 [ksoftirqd/4] root 42 0.0 0.0 0 0 ? I< Aug20 0:00 [kworker/4:0H-events_highpri] root 43 0.0 0.0 0 0 ? S Aug20 0:00 [cpuhp/5] root 44 0.0 0.0 0 0 ? S Aug20 0:00 [idle_inject/5] root 45 0.0 0.0 0 0 ? S Aug20 0:00 [migration/5] root 46 0.0 0.0 0 0 ? S Aug20 0:00 [ksoftirqd/5] root 48 0.0 0.0 0 0 ? I< Aug20 0:00 [kworker/5:0H-events_highpri] root 49 0.0 0.0 0 0 ? S Aug20 0:00 [cpuhp/6] root 50 0.0 0.0 0 0 ? S Aug20 0:00 [idle_inject/6] root 51 0.0 0.0 0 0 ? S Aug20 0:00 [migration/6] root 52 0.0 0.0 0 0 ? S Aug20 0:00 [ksoftirqd/6] root 53 0.0 0.0 0 0 ? I Aug20 0:00 [kworker/6:0-events] root 54 0.0 0.0 0 0 ? I< Aug20 0:00 [kworker/6:0H-events_highpri] root 55 0.0 0.0 0 0 ? S Aug20 0:00 [cpuhp/7] root 56 0.0 0.0 0 0 ? S Aug20 0:00 [idle_inject/7] root 57 0.0 0.0 0 0 ? S Aug20 0:00 [migration/7] root 58 0.0 0.0 0 0 ? S Aug20 0:00 [ksoftirqd/7] root 60 0.0 0.0 0 0 ? I< Aug20 0:00 [kworker/7:0H-events_highpri] root 61 0.0 0.0 0 0 ? S Aug20 0:00 [cpuhp/8] root 62 0.0 0.0 0 0 ? S Aug20 0:00 [idle_inject/8] root 63 0.0 0.0 0 0 ? S Aug20 0:00 [migration/8] root 64 0.0 0.0 0 0 ? S Aug20 0:00 [ksoftirqd/8] root 65 0.0 0.0 0 0 ? I Aug20 0:00 [kworker/8:0-events] root 66 0.0 0.0 0 0 ? I< Aug20 0:00 [kworker/8:0H-events_highpri] root 67 0.0 0.0 0 0 ? S Aug20 0:00 [cpuhp/9] root 68 0.0 0.0 0 0 ? S Aug20 0:00 [idle_inject/9] root 69 0.0 0.0 0 0 ? S Aug20 0:00 [migration/9] root 70 0.0 0.0 0 0 ? S Aug20 0:00 [ksoftirqd/9] root 71 0.0 0.0 0 0 ? I Aug20 0:00 [kworker/9:0-events] root 72 0.0 0.0 0 0 ? I< Aug20 0:00 [kworker/9:0H-events_highpri] root 73 0.0 0.0 0 0 ? S Aug20 0:00 [cpuhp/10] root 74 0.0 0.0 0 0 ? S Aug20 0:00 [idle_inject/10] root 75 0.0 0.0 0 0 ? S Aug20 0:00 [migration/10] root 76 0.0 0.0 0 0 ? S Aug20 0:00 [ksoftirqd/10] root 78 0.0 0.0 0 0 ? I< Aug20 0:00 [kworker/10:0H-events_highpri] root 79 0.0 0.0 0 0 ? S Aug20 0:00 [cpuhp/11] root 80 0.0 0.0 0 0 ? S Aug20 0:00 [idle_inject/11] root 81 0.0 0.0 0 0 ? S Aug20 0:00 [migration/11] root 82 0.0 0.0 0 0 ? S Aug20 0:00 [ksoftirqd/11] root 83 0.0 0.0 0 0 ? I Aug20 0:00 [kworker/11:0-events] root 84 0.0 0.0 0 0 ? I< Aug20 0:00 [kworker/11:0H-events_highpri] root 85 0.0 0.0 0 0 ? S Aug20 0:00 [cpuhp/12] root 86 0.0 0.0 0 0 ? S Aug20 0:00 [idle_inject/12] root 87 0.0 0.0 0 0 ? S Aug20 0:00 [migration/12] root 88 0.0 0.0 0 0 ? S Aug20 0:00 [ksoftirqd/12] root 90 0.0 0.0 0 0 ? I< Aug20 0:00 [kworker/12:0H-events_highpri] root 91 0.0 0.0 0 0 ? S Aug20 0:00 [cpuhp/13] root 92 0.0 0.0 0 0 ? S Aug20 0:00 [idle_inject/13] root 93 0.0 0.0 0 0 ? S Aug20 0:00 [migration/13] root 94 0.0 0.0 0 0 ? S Aug20 0:00 [ksoftirqd/13] root 95 0.0 0.0 0 0 ? I Aug20 0:00 [kworker/13:0-events] root 96 0.0 0.0 0 0 ? I< Aug20 0:00 [kworker/13:0H-events_highpri] root 97 0.0 0.0 0 0 ? S Aug20 0:00 [cpuhp/14] root 98 0.0 0.0 0 0 ? S Aug20 0:00 [idle_inject/14] root 99 0.0 0.0 0 0 ? S Aug20 0:00 [migration/14] root 100 0.0 0.0 0 0 ? S Aug20 0:00 [ksoftirqd/14] root 102 0.0 0.0 0 0 ? I< Aug20 0:00 [kworker/14:0H-events_highpri] root 103 0.0 0.0 0 0 ? S Aug20 0:00 [cpuhp/15] root 104 0.0 0.0 0 0 ? S Aug20 0:00 [idle_inject/15] root 105 0.0 0.0 0 0 ? S Aug20 0:00 [migration/15] root 106 0.0 0.0 0 0 ? S Aug20 0:00 [ksoftirqd/15] root 108 0.0 0.0 0 0 ? I< Aug20 0:00 [kworker/15:0H-events_highpri] root 109 0.0 0.0 0 0 ? S Aug20 0:00 [kdevtmpfs] root 110 0.0 0.0 0 0 ? I< Aug20 0:00 [inet_frag_wq] root 111 0.0 0.0 0 0 ? S Aug20 0:00 [kauditd] root 112 0.0 0.0 0 0 ? S Aug20 0:00 [khungtaskd] root 113 0.0 0.0 0 0 ? S Aug20 0:00 [oom_reaper] root 114 0.0 0.0 0 0 ? I< Aug20 0:00 [writeback] root 115 0.0 0.0 0 0 ? S Aug20 0:01 [kcompactd0] root 116 0.0 0.0 0 0 ? SN Aug20 0:00 [ksmd] root 117 0.0 0.0 0 0 ? SN Aug20 0:00 [khugepaged] root 136 0.0 0.0 0 0 ? I Aug20 0:00 [kworker/10:1-events] root 139 0.0 0.0 0 0 ? I Aug20 0:00 [kworker/11:1-events] root 143 0.0 0.0 0 0 ? I Aug20 0:00 [kworker/12:1-mm_percpu_wq] root 146 0.0 0.0 0 0 ? I Aug20 0:00 [kworker/13:1-events] root 167 0.0 0.0 0 0 ? I< Aug20 0:00 [kintegrityd] root 168 0.0 0.0 0 0 ? I< Aug20 0:00 [kblockd] root 169 0.0 0.0 0 0 ? I< Aug20 0:00 [blkcg_punt_bio] root 170 0.0 0.0 0 0 ? I< Aug20 0:00 [tpm_dev_wq] root 171 0.0 0.0 0 0 ? I< Aug20 0:00 [ata_sff] root 172 0.0 0.0 0 0 ? I< Aug20 0:00 [md] root 173 0.0 0.0 0 0 ? I< Aug20 0:00 [edac-poller] root 174 0.0 0.0 0 0 ? I< Aug20 0:00 [devfreq_wq] root 175 0.0 0.0 0 0 ? S Aug20 0:00 [watchdogd] root 177 0.0 0.0 0 0 ? I< Aug20 0:00 [kworker/0:1H-kblockd] root 179 0.0 0.0 0 0 ? S Aug20 0:00 [kswapd0] root 180 0.0 0.0 0 0 ? S Aug20 0:00 [ecryptfs-kthrea] root 182 0.0 0.0 0 0 ? I< Aug20 0:00 [kthrotld] root 183 0.0 0.0 0 0 ? I Aug20 0:00 [kworker/2:1-events] root 184 0.0 0.0 0 0 ? I< Aug20 0:00 [acpi_thermal_pm] root 186 0.0 0.0 0 0 ? S Aug20 0:00 [scsi_eh_0] root 187 0.0 0.0 0 0 ? I< Aug20 0:00 [scsi_tmf_0] root 188 0.0 0.0 0 0 ? S Aug20 0:00 [scsi_eh_1] root 189 0.0 0.0 0 0 ? I< Aug20 0:00 [scsi_tmf_1] root 191 0.0 0.0 0 0 ? I< Aug20 0:00 [vfio-irqfd-clea] root 192 0.0 0.0 0 0 ? I Aug20 0:00 [kworker/15:1-events] root 193 0.0 0.0 0 0 ? I Aug20 0:00 [kworker/8:1-mm_percpu_wq] root 194 0.0 0.0 0 0 ? I< Aug20 0:00 [mld] root 195 0.0 0.0 0 0 ? I< Aug20 0:00 [kworker/15:1H-kblockd] root 196 0.0 0.0 0 0 ? I< Aug20 0:00 [ipv6_addrconf] root 200 0.0 0.0 0 0 ? I Aug20 0:00 [kworker/7:1-events] root 201 0.0 0.0 0 0 ? I Aug20 0:00 [kworker/14:1-events] root 203 0.0 0.0 0 0 ? I Aug20 0:00 [kworker/5:1-mm_percpu_wq] root 204 0.0 0.0 0 0 ? I Aug20 0:00 [kworker/1:1-events] root 205 0.0 0.0 0 0 ? I Aug20 0:00 [kworker/3:1-events] root 206 0.0 0.0 0 0 ? I Aug20 0:00 [kworker/6:1-mm_percpu_wq] root 207 0.0 0.0 0 0 ? I Aug20 0:00 [kworker/9:1-events] root 208 0.0 0.0 0 0 ? I Aug20 0:00 [kworker/4:1-mm_percpu_wq] root 209 0.0 0.0 0 0 ? I< Aug20 0:00 [kworker/2:1H-kblockd] root 217 0.0 0.0 0 0 ? I< Aug20 0:00 [kstrp] root 220 0.0 0.0 0 0 ? I< Aug20 0:00 [zswap-shrink] root 221 0.0 0.0 0 0 ? I< Aug20 0:00 [kworker/u33:0] root 226 0.0 0.0 0 0 ? I< Aug20 0:00 [charger_manager] root 248 0.0 0.0 0 0 ? I< Aug20 0:00 [kworker/8:1H-kblockd] root 263 0.0 0.0 0 0 ? I< Aug20 0:00 [kworker/5:1H-kblockd] root 284 0.0 0.0 0 0 ? S Aug20 0:00 [hwrng] root 288 0.0 0.0 0 0 ? I Aug20 0:00 [kworker/7:2-events] root 290 0.0 0.0 0 0 ? I< Aug20 0:00 [kworker/14:1H-kblockd] root 291 0.0 0.0 0 0 ? I< Aug20 0:00 [kworker/6:1H-kblockd] root 292 0.0 0.0 0 0 ? I< Aug20 0:00 [kworker/1:1H-kblockd] root 293 0.0 0.0 0 0 ? I< Aug20 0:00 [kworker/10:1H-kblockd] root 312 0.0 0.0 0 0 ? S Aug20 0:00 [jbd2/vda1-8] root 313 0.0 0.0 0 0 ? I< Aug20 0:00 [ext4-rsv-conver] root 317 0.0 0.0 0 0 ? I< Aug20 0:00 [kworker/4:1H-kblockd] root 318 0.0 0.0 0 0 ? I< Aug20 0:00 [kworker/7:1H-kblockd] root 319 0.0 0.0 0 0 ? I< Aug20 0:00 [kworker/3:1H-kblockd] root 320 0.0 0.0 0 0 ? I< Aug20 0:00 [kworker/11:1H-kblockd] root 321 0.0 0.0 0 0 ? I< Aug20 0:00 [kworker/12:1H-kblockd] root 322 0.0 0.0 0 0 ? I< Aug20 0:00 [kworker/13:1H-kblockd] root 323 0.0 0.0 0 0 ? I< Aug20 0:00 [kworker/9:1H-kblockd] root 332 0.0 0.0 0 0 ? I Aug20 0:00 [kworker/15:2-cgroup_free] root 370 0.0 0.0 0 0 ? I Aug20 0:00 [kworker/2:2-cgroup_free] root 384 0.0 0.0 0 0 ? I Aug20 0:00 [kworker/4:2] root 402 0.0 0.0 0 0 ? I Aug20 0:00 [kworker/3:2-events] root 455 0.0 0.0 0 0 ? I< Aug20 0:00 [cryptd] root 490 0.0 0.0 0 0 ? I Aug20 0:00 [kworker/14:2] root 505 0.0 0.0 0 0 ? I Aug20 0:00 [kworker/12:2-events] root 657 0.0 0.0 0 0 ? I Aug20 0:00 [kworker/1:2-events] root 718 0.0 0.0 0 0 ? I Aug20 0:00 [kworker/5:0-events] root 1055 0.0 0.0 0 0 ? I 00:00 0:00 [kworker/10:2-mm_percpu_wq] root 1330 0.0 0.0 0 0 ? I 00:38 0:00 [kworker/0:0-events] root 1580 0.0 0.0 0 0 ? I 01:22 0:01 [kworker/u32:0-flush-252:0] root 1719 0.0 0.0 0 0 ? I 01:50 0:00 [kworker/u32:1-events_unbound] root 1809 0.0 0.0 0 0 ? I 02:13 0:00 [kworker/u32:2-flush-252:0] root 1828 0.1 0.0 0 0 ? I 02:18 0:00 [kworker/u32:3-flush-252:0] root 1845 0.0 0.0 0 0 ? I 02:20 0:00 [kworker/2:0-events] root 3380 0.0 0.0 0 0 ? I 02:21 0:00 [kworker/3:0-events] root 3397 0.0 0.0 0 0 ? I 02:21 0:00 [kworker/5:2] root 3408 0.0 0.0 0 0 ? I 02:21 0:00 [kworker/10:0-inode_switch_wbs] root 7193 0.0 0.0 0 0 ? I 02:21 0:00 [kworker/15:0] root 7194 0.0 0.0 0 0 ? I 02:21 0:00 [kworker/15:3] root 7201 0.0 0.0 0 0 ? I 02:21 0:00 [kworker/9:2-mm_percpu_wq] root 10145 0.0 0.0 0 0 ? I 02:21 0:00 [kworker/u32:4-events_power_efficient] root 10375 0.0 0.0 0 0 ? I< 02:22 0:00 [kdmflush] root 10392 0.0 0.0 0 0 ? I< 02:22 0:00 [kdmflush] root 10408 0.0 0.0 0 0 ? I< 02:22 0:00 [kdmflush] root 10479 0.0 0.0 0 0 ? I 02:22 0:00 [kworker/4:0] root 10488 0.0 0.0 0 0 ? I 02:22 0:00 [kworker/7:0-events] root 11110 0.0 0.0 0 0 ? I 02:22 0:00 [kworker/6:2-events] root 11503 0.0 0.0 0 0 ? I 02:22 0:00 [kworker/u32:5-ext4-rsv-conversion]