Sparrow is Raku automation framework comes with useful plugins people can use to automate infrastructure. Scc plugin allows to check Linux essential configuration files for security compliance.
—-
Plugin latest version
https://sparrowhub.io/plugin/scc/0.000023
Supported checks
- sshd
- redis
- sudoers
- bind
- sysctl
- fstab
- ifconfig
Here some example reports
Sysctl
$ sudo sysctl -a | s6 --plg-run scc@check=sysctl
12:24:07 :: [task] - run plg scc@check=sysctl
12:24:07 :: [task] - run [scc], thing: scc@check=sysctl
[task run: task.bash - scc]
[task stdout]
12:24:08 :: abi.cp15_barrier = 1
12:24:08 :: abi.setend = 1
12:24:08 :: abi.swp = 0
12:24:08 :: abi.tagged_addr_disabled = 0
12:24:08 :: debug.exception-trace = 0
12:24:08 :: dev.cdrom.autoclose = 1
12:24:08 :: dev.cdrom.autoeject = 0
12:24:08 :: dev.cdrom.check_media = 0
12:24:08 :: dev.cdrom.debug = 0
12:24:08 :: dev.cdrom.info = CD-ROM information, Id: cdrom.c 3.20 2003/12/17
12:24:08 :: dev.cdrom.info =
12:24:08 :: dev.cdrom.info = drive name:
12:24:08 :: dev.cdrom.info = drive speed:
12:24:08 :: dev.cdrom.info = drive # of slots:
12:24:08 :: dev.cdrom.info = Can close tray:
12:24:08 :: dev.cdrom.info = Can open tray:
12:24:08 :: dev.cdrom.info = Can lock tray:
12:24:08 :: dev.cdrom.info = Can change speed:
12:24:08 :: dev.cdrom.info = Can select disk:
12:24:08 :: dev.cdrom.info = Can read multisession:
12:24:08 :: dev.cdrom.info = Can read MCN:
12:24:08 :: dev.cdrom.info = Reports media changed:
12:24:08 :: dev.cdrom.info = Can play audio:
12:24:08 :: dev.cdrom.info = Can write CD-R:
12:24:08 :: dev.cdrom.info = Can write CD-RW:
12:24:08 :: dev.cdrom.info = Can read DVD:
12:24:08 :: dev.cdrom.info = Can write DVD-R:
12:24:08 :: dev.cdrom.info = Can write DVD-RAM:
12:24:08 :: dev.cdrom.info = Can read MRW:
12:24:08 :: dev.cdrom.info = Can write MRW:
12:24:08 :: dev.cdrom.info = Can write RAM:
12:24:08 :: dev.cdrom.info =
12:24:08 :: dev.cdrom.info =
12:24:08 :: dev.cdrom.lock = 0
12:24:08 :: dev.raid.speed_limit_max = 200000
12:24:08 :: dev.raid.speed_limit_min = 1000
12:24:08 :: dev.scsi.logging_level = 68
12:24:08 :: dev.tty.ldisc_autoload = 1
12:24:08 :: dev.tty.legacy_tiocsti = 0
12:24:08 :: fs.aio-max-nr = 65536
12:24:08 :: fs.aio-nr = 0
12:24:08 :: fs.binfmt_misc.llvm-14-runtime/binfmt = enabled
12:24:08 :: fs.binfmt_misc.llvm-14-runtime/binfmt = interpreter /usr/bin/lli-14
12:24:08 :: fs.binfmt_misc.llvm-14-runtime/binfmt = flags:
12:24:08 :: fs.binfmt_misc.llvm-14-runtime/binfmt = offset 0
12:24:08 :: fs.binfmt_misc.llvm-14-runtime/binfmt = magic 4243
12:24:08 :: fs.binfmt_misc.python3/10 = enabled
12:24:08 :: fs.binfmt_misc.python3/10 = interpreter /usr/bin/python3.10
12:24:08 :: fs.binfmt_misc.python3/10 = flags:
12:24:08 :: fs.binfmt_misc.python3/10 = offset 0
12:24:08 :: fs.binfmt_misc.python3/10 = magic 6f0d0d0a
12:24:08 :: fs.binfmt_misc.status = enabled
12:24:08 :: fs.dentry-state = 409950 398351 45 0 243512 0
12:24:08 :: fs.dir-notify-enable = 1
12:24:08 :: fs.epoll.max_user_watches = 5456495
12:24:08 :: fs.fanotify.max_queued_events = 16384
12:24:08 :: fs.fanotify.max_user_groups = 128
12:24:08 :: fs.fanotify.max_user_marks = 198574
12:24:08 :: fs.file-max = 9223372036854775807
12:24:08 :: fs.file-nr = 3520 0 9223372036854775807
12:24:08 :: fs.inode-nr = 166357 412
12:24:08 :: fs.inode-state = 166357 412 0 0 0 0 0
12:24:08 :: fs.inotify.max_queued_events = 16384
12:24:08 :: fs.inotify.max_user_instances = 128
12:24:08 :: fs.inotify.max_user_watches = 186755
12:24:08 :: fs.lease-break-time = 45
12:24:08 :: fs.leases-enable = 1
12:24:08 :: fs.mount-max = 100000
12:24:08 :: fs.mqueue.msg_default = 10
12:24:08 :: fs.mqueue.msg_max = 10
12:24:08 :: fs.mqueue.msgsize_default = 8192
12:24:08 :: fs.mqueue.msgsize_max = 8192
12:24:08 :: fs.mqueue.queues_max = 256
12:24:08 :: fs.nr_open = 1048576
12:24:08 :: fs.overflowgid = 65534
12:24:08 :: fs.overflowuid = 65534
12:24:08 :: fs.pipe-max-size = 1048576
12:24:08 :: fs.pipe-user-pages-hard = 0
12:24:08 :: fs.pipe-user-pages-soft = 16384
12:24:08 :: fs.protected_fifos = 1
12:24:08 :: fs.protected_hardlinks = 1
12:24:08 :: fs.protected_regular = 2
12:24:08 :: fs.protected_symlinks = 1
12:24:08 :: fs.quota.allocated_dquots = 0
12:24:08 :: fs.quota.cache_hits = 0
12:24:08 :: fs.quota.drops = 0
12:24:08 :: fs.quota.free_dquots = 0
12:24:08 :: fs.quota.lookups = 0
12:24:08 :: fs.quota.reads = 0
12:24:08 :: fs.quota.syncs = 320
12:24:08 :: fs.quota.writes = 0
12:24:08 :: fs.suid_dumpable = 2
12:24:08 :: fs.verity.require_signatures = 0
12:24:08 :: kernel.acct = 4 2 30
12:24:08 :: kernel.apparmor_display_secid_mode = 0
12:24:08 :: kernel.apparmor_restrict_unprivileged_io_uring = 0
12:24:08 :: kernel.apparmor_restrict_unprivileged_unconfined = 0
12:24:08 :: kernel.apparmor_restrict_unprivileged_userns = 0
12:24:08 :: kernel.apparmor_restrict_unprivileged_userns_complain = 0
12:24:08 :: kernel.apparmor_restrict_unprivileged_userns_force = 0
12:24:08 :: kernel.arch = aarch64
12:24:08 :: kernel.auto_msgmni = 0
12:24:08 :: kernel.bpf_stats_enabled = 0
12:24:08 :: kernel.cad_pid = 1
12:24:08 :: kernel.cap_last_cap = 40
12:24:08 :: kernel.core_pattern = |/usr/share/apport/apport -p%p -s%s -c%c -d%d -P%P -u%u -g%g -F%F -- %E
12:24:08 :: kernel.core_pipe_limit = 10
12:24:08 :: kernel.core_uses_pid = 1
12:24:08 :: kernel.ctrl-alt-del = 0
12:24:08 :: kernel.dmesg_restrict = 1
12:24:08 :: kernel.domainname = (none)
12:24:08 :: kernel.firmware_config.force_sysfs_fallback = 0
12:24:08 :: kernel.firmware_config.ignore_sysfs_fallback = 0
12:24:08 :: kernel.ftrace_dump_on_oops = 0
12:24:08 :: kernel.ftrace_enabled = 1
12:24:08 :: kernel.hardlockup_all_cpu_backtrace = 0
12:24:08 :: kernel.hardlockup_panic = 0
12:24:08 :: kernel.hostname = sparky02b
12:24:08 :: kernel.hotplug =
12:24:08 :: kernel.hung_task_all_cpu_backtrace = 0
12:24:08 :: kernel.hung_task_check_count = 4194304
12:24:08 :: kernel.hung_task_check_interval_secs = 0
12:24:08 :: kernel.hung_task_panic = 0
12:24:08 :: kernel.hung_task_timeout_secs = 120
12:24:08 :: kernel.hung_task_warnings = 10
12:24:08 :: kernel.io_uring_disabled = 0
12:24:08 :: kernel.io_uring_group = -1
12:24:08 :: kernel.kexec_load_disabled = 0
12:24:08 :: kernel.kexec_load_limit_panic = -1
12:24:08 :: kernel.kexec_load_limit_reboot = -1
12:24:08 :: kernel.keys.gc_delay = 300
12:24:08 :: kernel.keys.maxbytes = 20000
12:24:08 :: kernel.keys.maxkeys = 200
12:24:08 :: kernel.keys.persistent_keyring_expiry = 259200
12:24:08 :: kernel.keys.root_maxbytes = 25000000
12:24:08 :: kernel.keys.root_maxkeys = 1000000
12:24:08 :: kernel.kptr_restrict = 1
12:24:08 :: kernel.latencytop = 0
12:24:08 :: kernel.max_lock_depth = 1024
12:24:08 :: kernel.max_rcu_stall_to_panic = 0
12:24:08 :: kernel.modprobe = /sbin/modprobe
12:24:08 :: kernel.modules_disabled = 0
12:24:08 :: kernel.msg_next_id = -1
12:24:08 :: kernel.msgmax = 8192
12:24:08 :: kernel.msgmnb = 16384
12:24:08 :: kernel.msgmni = 32000
12:24:08 :: kernel.ngroups_max = 65536
12:24:08 :: kernel.nmi_watchdog = 0
12:24:08 :: kernel.ns_last_pid = 856760
12:24:08 :: kernel.numa_balancing = 0
12:24:08 :: kernel.numa_balancing_promote_rate_limit_MBps = 65536
12:24:08 :: kernel.oops_all_cpu_backtrace = 0
12:24:08 :: kernel.oops_limit = 10000
12:24:08 :: kernel.osrelease = 6.8.0-1050-oracle
12:24:08 :: kernel.ostype = Linux
12:24:08 :: kernel.overflowgid = 65534
12:24:08 :: kernel.overflowuid = 65534
12:24:08 :: kernel.panic = 0
12:24:08 :: kernel.panic_on_oops = 0
12:24:08 :: kernel.panic_on_rcu_stall = 0
12:24:08 :: kernel.panic_on_warn = 0
12:24:08 :: kernel.panic_print = 0
12:24:08 :: kernel.perf_cpu_time_max_percent = 25
12:24:08 :: kernel.perf_event_max_contexts_per_stack = 8
12:24:08 :: kernel.perf_event_max_sample_rate = 100000
12:24:08 :: kernel.perf_event_max_stack = 127
12:24:08 :: kernel.perf_event_mlock_kb = 516
12:24:08 :: kernel.perf_event_paranoid = 4
12:24:08 :: kernel.perf_user_access = 0
12:24:08 :: kernel.pid_max = 4194304
12:24:08 :: kernel.poweroff_cmd = /sbin/poweroff
12:24:08 :: kernel.print-fatal-signals = 0
12:24:08 :: kernel.printk = 4 4 1 7
12:24:08 :: kernel.printk_delay = 0
12:24:08 :: kernel.printk_devkmsg = on
12:24:08 :: kernel.printk_ratelimit = 5
12:24:08 :: kernel.printk_ratelimit_burst = 10
12:24:08 :: kernel.pty.max = 4096
12:24:08 :: kernel.pty.nr = 4
12:24:08 :: kernel.pty.reserve = 1024
12:24:08 :: kernel.random.boot_id = 03560fb6-eb3e-4cc2-a12c-1604610ee88a
12:24:08 :: kernel.random.entropy_avail = 256
12:24:08 :: kernel.random.poolsize = 256
12:24:08 :: kernel.random.urandom_min_reseed_secs = 60
12:24:08 :: kernel.random.uuid = bf318e69-c00e-4483-965d-eb1674fadf71
12:24:08 :: kernel.random.write_wakeup_threshold = 256
12:24:08 :: kernel.randomize_va_space = 2
12:24:08 :: kernel.real-root-dev = 0
12:24:08 :: kernel.sched_autogroup_enabled = 1
12:24:08 :: kernel.sched_cfs_bandwidth_slice_us = 5000
12:24:08 :: kernel.sched_deadline_period_max_us = 4194304
12:24:08 :: kernel.sched_deadline_period_min_us = 100
12:24:08 :: kernel.sched_rr_timeslice_ms = 100
12:24:08 :: kernel.sched_rt_period_us = 1000000
12:24:08 :: kernel.sched_rt_runtime_us = 950000
12:24:08 :: kernel.sched_schedstats = 0
12:24:08 :: kernel.sched_util_clamp_max = 1024
12:24:08 :: kernel.sched_util_clamp_min = 1024
12:24:08 :: kernel.sched_util_clamp_min_rt_default = 1024
12:24:08 :: kernel.seccomp.actions_avail = kill_process kill_thread trap errno user_notif trace log allow
12:24:08 :: kernel.seccomp.actions_logged = kill_process kill_thread trap errno user_notif trace log
12:24:08 :: kernel.sem = 32000 1024000000 500 32000
12:24:08 :: kernel.sem_next_id = -1
12:24:08 :: kernel.shm_next_id = -1
12:24:08 :: kernel.shm_rmid_forced = 0
12:24:08 :: kernel.shmall = 18446744073692774399
12:24:08 :: kernel.shmmax = 18446744073692774399
12:24:08 :: kernel.shmmni = 4096
12:24:08 :: kernel.soft_watchdog = 1
12:24:08 :: kernel.softlockup_all_cpu_backtrace = 0
12:24:08 :: kernel.softlockup_panic = 0
12:24:08 :: kernel.stack_tracer_enabled = 0
12:24:08 :: kernel.sysctl_writes_strict = 1
12:24:08 :: kernel.sysrq = 176
12:24:08 :: kernel.tainted = 0
12:24:08 :: kernel.task_delayacct = 0
12:24:08 :: kernel.threads-max = 191241
12:24:08 :: kernel.timer_migration = 1
12:24:08 :: kernel.traceoff_on_warning = 0
12:24:08 :: kernel.tracepoint_printk = 0
12:24:08 :: kernel.unprivileged_bpf_disabled = 2
12:24:08 :: kernel.unprivileged_userns_apparmor_policy = 1
12:24:08 :: kernel.unprivileged_userns_clone = 1
12:24:08 :: kernel.user_events_max = 32768
12:24:08 :: kernel.usermodehelper.bset = 4294967295 511
12:24:08 :: kernel.usermodehelper.inheritable = 4294967295 511
12:24:08 :: kernel.version = #51~22.04.1-Ubuntu SMP Tue Apr 21 04:35:38 UTC 2026
12:24:08 :: kernel.warn_limit = 0
12:24:08 :: kernel.watchdog = 1
12:24:08 :: kernel.watchdog_cpumask = 0-3
12:24:08 :: kernel.watchdog_thresh = 10
12:24:08 :: kernel.yama.ptrace_scope = 1
12:24:08 :: net.bridge.bridge-nf-call-arptables = 1
12:24:08 :: net.bridge.bridge-nf-call-ip6tables = 1
12:24:08 :: net.bridge.bridge-nf-call-iptables = 1
12:24:08 :: net.bridge.bridge-nf-filter-pppoe-tagged = 0
12:24:08 :: net.bridge.bridge-nf-filter-vlan-tagged = 0
12:24:08 :: net.bridge.bridge-nf-pass-vlan-input-dev = 0
12:24:08 :: net.core.bpf_jit_enable = 1
12:24:08 :: net.core.bpf_jit_harden = 0
12:24:08 :: net.core.bpf_jit_kallsyms = 1
12:24:08 :: net.core.bpf_jit_limit = 68168512962560
12:24:08 :: net.core.busy_poll = 0
12:24:08 :: net.core.busy_read = 0
12:24:08 :: net.core.default_qdisc = fq_codel
12:24:08 :: net.core.dev_weight = 64
12:24:08 :: net.core.dev_weight_rx_bias = 1
12:24:08 :: net.core.dev_weight_tx_bias = 1
12:24:08 :: net.core.devconf_inherit_init_net = 0
12:24:08 :: net.core.fb_tunnels_only_for_init_net = 0
12:24:08 :: net.core.flow_limit_cpu_bitmap = 0
12:24:08 :: net.core.flow_limit_table_len = 4096
12:24:08 :: net.core.gro_normal_batch = 8
12:24:08 :: net.core.high_order_alloc_disable = 0
12:24:08 :: net.core.max_skb_frags = 17
12:24:08 :: net.core.mem_pcpu_rsv = 256
12:24:08 :: net.core.message_burst = 10
12:24:08 :: net.core.message_cost = 5
12:24:08 :: net.core.netdev_budget = 300
12:24:08 :: net.core.netdev_budget_usecs = 2000
12:24:08 :: net.core.netdev_max_backlog = 1000
12:24:08 :: net.core.netdev_rss_key = 00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00:00
12:24:08 :: net.core.netdev_tstamp_prequeue = 1
12:24:08 :: net.core.netdev_unregister_timeout_secs = 10
12:24:08 :: net.core.optmem_max = 131072
12:24:08 :: net.core.rmem_default = 212992
12:24:08 :: net.core.rmem_max = 212992
12:24:08 :: net.core.rps_default_mask = 0
12:24:08 :: net.core.rps_sock_flow_entries = 0
12:24:08 :: net.core.skb_defer_max = 64
12:24:08 :: net.core.somaxconn = 4096
12:24:08 :: net.core.tstamp_allow_data = 1
12:24:08 :: net.core.txrehash = 1
12:24:08 :: net.core.warnings = 0
12:24:08 :: net.core.wmem_default = 212992
12:24:08 :: net.core.wmem_max = 212992
12:24:08 :: net.core.xfrm_acq_expires = 30
12:24:08 :: net.core.xfrm_aevent_etime = 10
12:24:08 :: net.core.xfrm_aevent_rseqth = 2
12:24:08 :: net.core.xfrm_larval_drop = 1
12:24:08 :: net.ipv4.cipso_cache_bucket_size = 10
12:24:08 :: net.ipv4.cipso_cache_enable = 1
12:24:08 :: net.ipv4.cipso_rbm_optfmt = 0
12:24:08 :: net.ipv4.cipso_rbm_strictvalid = 1
12:24:08 :: net.ipv4.conf.all.accept_local = 0
12:24:08 :: net.ipv4.conf.all.accept_redirects = 0
12:24:08 :: net.ipv4.conf.all.accept_source_route = 0
12:24:08 :: net.ipv4.conf.all.arp_accept = 0
12:24:08 :: net.ipv4.conf.all.arp_announce = 0
12:24:08 :: net.ipv4.conf.all.arp_evict_nocarrier = 1
12:24:08 :: net.ipv4.conf.all.arp_filter = 0
12:24:08 :: net.ipv4.conf.all.arp_ignore = 0
12:24:08 :: net.ipv4.conf.all.arp_notify = 0
12:24:08 :: net.ipv4.conf.all.bc_forwarding = 0
12:24:08 :: net.ipv4.conf.all.bootp_relay = 0
12:24:08 :: net.ipv4.conf.all.disable_policy = 0
12:24:08 :: net.ipv4.conf.all.disable_xfrm = 0
12:24:08 :: net.ipv4.conf.all.drop_gratuitous_arp = 0
12:24:08 :: net.ipv4.conf.all.drop_unicast_in_l2_multicast = 0
12:24:08 :: net.ipv4.conf.all.force_igmp_version = 0
12:24:08 :: net.ipv4.conf.all.forwarding = 1
12:24:08 :: net.ipv4.conf.all.igmpv2_unsolicited_report_interval = 10000
12:24:08 :: net.ipv4.conf.all.igmpv3_unsolicited_report_interval = 1000
12:24:08 :: net.ipv4.conf.all.ignore_routes_with_linkdown = 0
12:24:08 :: net.ipv4.conf.all.log_martians = 0
12:24:08 :: net.ipv4.conf.all.mc_forwarding = 0
12:24:08 :: net.ipv4.conf.all.medium_id = 0
12:24:08 :: net.ipv4.conf.all.promote_secondaries = 0
12:24:08 :: net.ipv4.conf.all.proxy_arp = 0
12:24:08 :: net.ipv4.conf.all.proxy_arp_pvlan = 0
12:24:08 :: net.ipv4.conf.all.route_localnet = 0
12:24:08 :: net.ipv4.conf.all.rp_filter = 2
12:24:08 :: net.ipv4.conf.all.secure_redirects = 1
12:24:08 :: net.ipv4.conf.all.send_redirects = 1
12:24:08 :: net.ipv4.conf.all.shared_media = 1
12:24:08 :: net.ipv4.conf.all.src_valid_mark = 0
12:24:08 :: net.ipv4.conf.all.tag = 0
12:24:08 :: net.ipv4.conf.default.accept_local = 0
12:24:08 :: net.ipv4.conf.default.accept_redirects = 1
12:24:08 :: net.ipv4.conf.default.accept_source_route = 0
12:24:08 :: net.ipv4.conf.default.arp_accept = 0
12:24:08 :: net.ipv4.conf.default.arp_announce = 0
12:24:08 :: net.ipv4.conf.default.arp_evict_nocarrier = 1
12:24:08 :: net.ipv4.conf.default.arp_filter = 0
12:24:08 :: net.ipv4.conf.default.arp_ignore = 0
12:24:08 :: net.ipv4.conf.default.arp_notify = 0
12:24:08 :: net.ipv4.conf.default.bc_forwarding = 0
12:24:08 :: net.ipv4.conf.default.bootp_relay = 0
12:24:08 :: net.ipv4.conf.default.disable_policy = 0
12:24:08 :: net.ipv4.conf.default.disable_xfrm = 0
12:24:08 :: net.ipv4.conf.default.drop_gratuitous_arp = 0
12:24:08 :: net.ipv4.conf.default.drop_unicast_in_l2_multicast = 0
12:24:08 :: net.ipv4.conf.default.force_igmp_version = 0
12:24:08 :: net.ipv4.conf.default.forwarding = 1
12:24:08 :: net.ipv4.conf.default.igmpv2_unsolicited_report_interval = 10000
12:24:08 :: net.ipv4.conf.default.igmpv3_unsolicited_report_interval = 1000
12:24:08 :: net.ipv4.conf.default.ignore_routes_with_linkdown = 0
12:24:08 :: net.ipv4.conf.default.log_martians = 0
12:24:08 :: net.ipv4.conf.default.mc_forwarding = 0
12:24:08 :: net.ipv4.conf.default.medium_id = 0
12:24:08 :: net.ipv4.conf.default.promote_secondaries = 1
12:24:08 :: net.ipv4.conf.default.proxy_arp = 0
12:24:08 :: net.ipv4.conf.default.proxy_arp_pvlan = 0
12:24:08 :: net.ipv4.conf.default.route_localnet = 0
12:24:08 :: net.ipv4.conf.default.rp_filter = 2
12:24:08 :: net.ipv4.conf.default.secure_redirects = 1
12:24:08 :: net.ipv4.conf.default.send_redirects = 1
12:24:08 :: net.ipv4.conf.default.shared_media = 1
12:24:08 :: net.ipv4.conf.default.src_valid_mark = 0
12:24:08 :: net.ipv4.conf.default.tag = 0
12:24:08 :: net.ipv4.conf.docker0.accept_local = 0
12:24:08 :: net.ipv4.conf.docker0.accept_redirects = 1
12:24:08 :: net.ipv4.conf.docker0.accept_source_route = 0
12:24:08 :: net.ipv4.conf.docker0.arp_accept = 0
12:24:08 :: net.ipv4.conf.docker0.arp_announce = 0
12:24:08 :: net.ipv4.conf.docker0.arp_evict_nocarrier = 1
12:24:08 :: net.ipv4.conf.docker0.arp_filter = 0
12:24:08 :: net.ipv4.conf.docker0.arp_ignore = 0
12:24:08 :: net.ipv4.conf.docker0.arp_notify = 0
12:24:08 :: net.ipv4.conf.docker0.bc_forwarding = 0
12:24:08 :: net.ipv4.conf.docker0.bootp_relay = 0
12:24:08 :: net.ipv4.conf.docker0.disable_policy = 0
12:24:08 :: net.ipv4.conf.docker0.disable_xfrm = 0
12:24:08 :: net.ipv4.conf.docker0.drop_gratuitous_arp = 0
12:24:08 :: net.ipv4.conf.docker0.drop_unicast_in_l2_multicast = 0
12:24:08 :: net.ipv4.conf.docker0.force_igmp_version = 0
12:24:08 :: net.ipv4.conf.docker0.forwarding = 1
12:24:08 :: net.ipv4.conf.docker0.igmpv2_unsolicited_report_interval = 10000
12:24:08 :: net.ipv4.conf.docker0.igmpv3_unsolicited_report_interval = 1000
12:24:08 :: net.ipv4.conf.docker0.ignore_routes_with_linkdown = 0
12:24:08 :: net.ipv4.conf.docker0.log_martians = 0
12:24:08 :: net.ipv4.conf.docker0.mc_forwarding = 0
12:24:08 :: net.ipv4.conf.docker0.medium_id = 0
12:24:08 :: net.ipv4.conf.docker0.promote_secondaries = 1
12:24:08 :: net.ipv4.conf.docker0.proxy_arp = 0
12:24:08 :: net.ipv4.conf.docker0.proxy_arp_pvlan = 0
12:24:08 :: net.ipv4.conf.docker0.route_localnet = 0
12:24:08 :: net.ipv4.conf.docker0.rp_filter = 2
12:24:08 :: net.ipv4.conf.docker0.secure_redirects = 1
12:24:08 :: net.ipv4.conf.docker0.send_redirects = 1
12:24:08 :: net.ipv4.conf.docker0.shared_media = 1
12:24:08 :: net.ipv4.conf.docker0.src_valid_mark = 0
12:24:08 :: net.ipv4.conf.docker0.tag = 0
12:24:08 :: net.ipv4.conf.enp0s3.accept_local = 0
12:24:08 :: net.ipv4.conf.enp0s3.accept_redirects = 1
12:24:08 :: net.ipv4.conf.enp0s3.accept_source_route = 0
12:24:08 :: net.ipv4.conf.enp0s3.arp_accept = 0
12:24:08 :: net.ipv4.conf.enp0s3.arp_announce = 0
12:24:08 :: net.ipv4.conf.enp0s3.arp_evict_nocarrier = 1
12:24:08 :: net.ipv4.conf.enp0s3.arp_filter = 0
12:24:08 :: net.ipv4.conf.enp0s3.arp_ignore = 0
12:24:08 :: net.ipv4.conf.enp0s3.arp_notify = 0
12:24:08 :: net.ipv4.conf.enp0s3.bc_forwarding = 0
12:24:08 :: net.ipv4.conf.enp0s3.bootp_relay = 0
12:24:08 :: net.ipv4.conf.enp0s3.disable_policy = 0
12:24:08 :: net.ipv4.conf.enp0s3.disable_xfrm = 0
12:24:08 :: net.ipv4.conf.enp0s3.drop_gratuitous_arp = 0
12:24:08 :: net.ipv4.conf.enp0s3.drop_unicast_in_l2_multicast = 0
12:24:08 :: net.ipv4.conf.enp0s3.force_igmp_version = 0
12:24:08 :: net.ipv4.conf.enp0s3.forwarding = 1
12:24:08 :: net.ipv4.conf.enp0s3.igmpv2_unsolicited_report_interval = 10000
12:24:08 :: net.ipv4.conf.enp0s3.igmpv3_unsolicited_report_interval = 1000
12:24:08 :: net.ipv4.conf.enp0s3.ignore_routes_with_linkdown = 0
12:24:08 :: net.ipv4.conf.enp0s3.log_martians = 0
12:24:08 :: net.ipv4.conf.enp0s3.mc_forwarding = 0
12:24:08 :: net.ipv4.conf.enp0s3.medium_id = 0
12:24:08 :: net.ipv4.conf.enp0s3.promote_secondaries = 1
12:24:08 :: net.ipv4.conf.enp0s3.proxy_arp = 0
12:24:08 :: net.ipv4.conf.enp0s3.proxy_arp_pvlan = 0
12:24:08 :: net.ipv4.conf.enp0s3.route_localnet = 0
12:24:08 :: net.ipv4.conf.enp0s3.rp_filter = 2
12:24:08 :: net.ipv4.conf.enp0s3.secure_redirects = 1
12:24:08 :: net.ipv4.conf.enp0s3.send_redirects = 1
12:24:08 :: net.ipv4.conf.enp0s3.shared_media = 1
12:24:08 :: net.ipv4.conf.enp0s3.src_valid_mark = 0
12:24:08 :: net.ipv4.conf.enp0s3.tag = 0
12:24:08 :: net.ipv4.conf.lo.accept_local = 0
12:24:08 :: net.ipv4.conf.lo.accept_redirects = 1
12:24:08 :: net.ipv4.conf.lo.accept_source_route = 0
12:24:08 :: net.ipv4.conf.lo.arp_accept = 0
12:24:08 :: net.ipv4.conf.lo.arp_announce = 0
12:24:08 :: net.ipv4.conf.lo.arp_evict_nocarrier = 1
12:24:08 :: net.ipv4.conf.lo.arp_filter = 0
12:24:08 :: net.ipv4.conf.lo.arp_ignore = 0
12:24:08 :: net.ipv4.conf.lo.arp_notify = 0
12:24:08 :: net.ipv4.conf.lo.bc_forwarding = 0
12:24:08 :: net.ipv4.conf.lo.bootp_relay = 0
12:24:08 :: net.ipv4.conf.lo.disable_policy = 1
12:24:08 :: net.ipv4.conf.lo.disable_xfrm = 1
12:24:08 :: net.ipv4.conf.lo.drop_gratuitous_arp = 0
12:24:08 :: net.ipv4.conf.lo.drop_unicast_in_l2_multicast = 0
12:24:08 :: net.ipv4.conf.lo.force_igmp_version = 0
12:24:08 :: net.ipv4.conf.lo.forwarding = 1
12:24:08 :: net.ipv4.conf.lo.igmpv2_unsolicited_report_interval = 10000
12:24:08 :: net.ipv4.conf.lo.igmpv3_unsolicited_report_interval = 1000
12:24:08 :: net.ipv4.conf.lo.ignore_routes_with_linkdown = 0
12:24:08 :: net.ipv4.conf.lo.log_martians = 0
12:24:08 :: net.ipv4.conf.lo.mc_forwarding = 0
12:24:08 :: net.ipv4.conf.lo.medium_id = 0
12:24:08 :: net.ipv4.conf.lo.promote_secondaries = 1
12:24:08 :: net.ipv4.conf.lo.proxy_arp = 0
12:24:08 :: net.ipv4.conf.lo.proxy_arp_pvlan = 0
12:24:08 :: net.ipv4.conf.lo.route_localnet = 0
12:24:08 :: net.ipv4.conf.lo.rp_filter = 2
12:24:08 :: net.ipv4.conf.lo.secure_redirects = 1
12:24:08 :: net.ipv4.conf.lo.send_redirects = 1
12:24:08 :: net.ipv4.conf.lo.shared_media = 1
12:24:08 :: net.ipv4.conf.lo.src_valid_mark = 0
12:24:08 :: net.ipv4.conf.lo.tag = 0
12:24:08 :: net.ipv4.conf.vethd9a62a1.accept_local = 0
12:24:08 :: net.ipv4.conf.vethd9a62a1.accept_redirects = 1
12:24:08 :: net.ipv4.conf.vethd9a62a1.accept_source_route = 0
12:24:08 :: net.ipv4.conf.vethd9a62a1.arp_accept = 0
12:24:08 :: net.ipv4.conf.vethd9a62a1.arp_announce = 0
12:24:08 :: net.ipv4.conf.vethd9a62a1.arp_evict_nocarrier = 1
12:24:08 :: net.ipv4.conf.vethd9a62a1.arp_filter = 0
12:24:08 :: net.ipv4.conf.vethd9a62a1.arp_ignore = 0
12:24:08 :: net.ipv4.conf.vethd9a62a1.arp_notify = 0
12:24:08 :: net.ipv4.conf.vethd9a62a1.bc_forwarding = 0
12:24:08 :: net.ipv4.conf.vethd9a62a1.bootp_relay = 0
12:24:08 :: net.ipv4.conf.vethd9a62a1.disable_policy = 0
12:24:08 :: net.ipv4.conf.vethd9a62a1.disable_xfrm = 0
12:24:08 :: net.ipv4.conf.vethd9a62a1.drop_gratuitous_arp = 0
12:24:08 :: net.ipv4.conf.vethd9a62a1.drop_unicast_in_l2_multicast = 0
12:24:08 :: net.ipv4.conf.vethd9a62a1.force_igmp_version = 0
12:24:08 :: net.ipv4.conf.vethd9a62a1.forwarding = 1
12:24:08 :: net.ipv4.conf.vethd9a62a1.igmpv2_unsolicited_report_interval = 10000
12:24:08 :: net.ipv4.conf.vethd9a62a1.igmpv3_unsolicited_report_interval = 1000
12:24:08 :: net.ipv4.conf.vethd9a62a1.ignore_routes_with_linkdown = 0
12:24:08 :: net.ipv4.conf.vethd9a62a1.log_martians = 0
12:24:08 :: net.ipv4.conf.vethd9a62a1.mc_forwarding = 0
12:24:08 :: net.ipv4.conf.vethd9a62a1.medium_id = 0
12:24:08 :: net.ipv4.conf.vethd9a62a1.promote_secondaries = 1
12:24:08 :: net.ipv4.conf.vethd9a62a1.proxy_arp = 0
12:24:08 :: net.ipv4.conf.vethd9a62a1.proxy_arp_pvlan = 0
12:24:08 :: net.ipv4.conf.vethd9a62a1.route_localnet = 0
12:24:08 :: net.ipv4.conf.vethd9a62a1.rp_filter = 2
12:24:08 :: net.ipv4.conf.vethd9a62a1.secure_redirects = 1
12:24:08 :: net.ipv4.conf.vethd9a62a1.send_redirects = 1
12:24:08 :: net.ipv4.conf.vethd9a62a1.shared_media = 1
12:24:08 :: net.ipv4.conf.vethd9a62a1.src_valid_mark = 0
12:24:08 :: net.ipv4.conf.vethd9a62a1.tag = 0
12:24:08 :: net.ipv4.conf.virbr0.accept_local = 0
12:24:08 :: net.ipv4.conf.virbr0.accept_redirects = 1
12:24:08 :: net.ipv4.conf.virbr0.accept_source_route = 0
12:24:08 :: net.ipv4.conf.virbr0.arp_accept = 0
12:24:08 :: net.ipv4.conf.virbr0.arp_announce = 0
12:24:08 :: net.ipv4.conf.virbr0.arp_evict_nocarrier = 1
12:24:08 :: net.ipv4.conf.virbr0.arp_filter = 0
12:24:08 :: net.ipv4.conf.virbr0.arp_ignore = 0
12:24:08 :: net.ipv4.conf.virbr0.arp_notify = 0
12:24:08 :: net.ipv4.conf.virbr0.bc_forwarding = 0
12:24:08 :: net.ipv4.conf.virbr0.bootp_relay = 0
12:24:08 :: net.ipv4.conf.virbr0.disable_policy = 0
12:24:08 :: net.ipv4.conf.virbr0.disable_xfrm = 0
12:24:08 :: net.ipv4.conf.virbr0.drop_gratuitous_arp = 0
12:24:08 :: net.ipv4.conf.virbr0.drop_unicast_in_l2_multicast = 0
12:24:08 :: net.ipv4.conf.virbr0.force_igmp_version = 0
12:24:08 :: net.ipv4.conf.virbr0.forwarding = 1
12:24:08 :: net.ipv4.conf.virbr0.igmpv2_unsolicited_report_interval = 10000
12:24:08 :: net.ipv4.conf.virbr0.igmpv3_unsolicited_report_interval = 1000
12:24:08 :: net.ipv4.conf.virbr0.ignore_routes_with_linkdown = 0
12:24:08 :: net.ipv4.conf.virbr0.log_martians = 0
12:24:08 :: net.ipv4.conf.virbr0.mc_forwarding = 0
12:24:08 :: net.ipv4.conf.virbr0.medium_id = 0
12:24:08 :: net.ipv4.conf.virbr0.promote_secondaries = 1
12:24:08 :: net.ipv4.conf.virbr0.proxy_arp = 0
12:24:08 :: net.ipv4.conf.virbr0.proxy_arp_pvlan = 0
12:24:08 :: net.ipv4.conf.virbr0.route_localnet = 0
12:24:08 :: net.ipv4.conf.virbr0.rp_filter = 2
12:24:08 :: net.ipv4.conf.virbr0.secure_redirects = 1
12:24:08 :: net.ipv4.conf.virbr0.send_redirects = 1
12:24:08 :: net.ipv4.conf.virbr0.shared_media = 1
12:24:08 :: net.ipv4.conf.virbr0.src_valid_mark = 0
12:24:08 :: net.ipv4.conf.virbr0.tag = 0
12:24:08 :: net.ipv4.fib_multipath_hash_fields = 7
12:24:08 :: net.ipv4.fib_multipath_hash_policy = 0
12:24:08 :: net.ipv4.fib_multipath_use_neigh = 0
12:24:08 :: net.ipv4.fib_notify_on_flag_change = 0
12:24:08 :: net.ipv4.fib_sync_mem = 524288
12:24:08 :: net.ipv4.fwmark_reflect = 0
12:24:08 :: net.ipv4.icmp_echo_enable_probe = 0
12:24:08 :: net.ipv4.icmp_echo_ignore_all = 0
12:24:08 :: net.ipv4.icmp_echo_ignore_broadcasts = 1
12:24:08 :: net.ipv4.icmp_errors_use_inbound_ifaddr = 0
12:24:08 :: net.ipv4.icmp_ignore_bogus_error_responses = 1
12:24:08 :: net.ipv4.icmp_msgs_burst = 50
12:24:08 :: net.ipv4.icmp_msgs_per_sec = 1000
12:24:08 :: net.ipv4.icmp_ratelimit = 1000
12:24:08 :: net.ipv4.icmp_ratemask = 6168
12:24:08 :: net.ipv4.igmp_link_local_mcast_reports = 1
12:24:08 :: net.ipv4.igmp_max_memberships = 20
12:24:08 :: net.ipv4.igmp_max_msf = 10
12:24:08 :: net.ipv4.igmp_qrv = 2
12:24:08 :: net.ipv4.inet_peer_maxttl = 600
12:24:08 :: net.ipv4.inet_peer_minttl = 120
12:24:08 :: net.ipv4.inet_peer_threshold = 65664
12:24:08 :: net.ipv4.ip_autobind_reuse = 0
12:24:08 :: net.ipv4.ip_default_ttl = 64
12:24:08 :: net.ipv4.ip_dynaddr = 0
12:24:08 :: net.ipv4.ip_early_demux = 1
12:24:08 :: net.ipv4.ip_forward = 1
12:24:08 :: net.ipv4.ip_forward_update_priority = 1
12:24:08 :: net.ipv4.ip_forward_use_pmtu = 0
12:24:08 :: net.ipv4.ip_local_port_range = 32768 60999
12:24:08 :: net.ipv4.ip_local_reserved_ports =
12:24:08 :: net.ipv4.ip_no_pmtu_disc = 0
12:24:08 :: net.ipv4.ip_nonlocal_bind = 0
12:24:08 :: net.ipv4.ip_unprivileged_port_start = 1024
12:24:08 :: net.ipv4.ipfrag_high_thresh = 4194304
12:24:08 :: net.ipv4.ipfrag_low_thresh = 3145728
12:24:08 :: net.ipv4.ipfrag_max_dist = 64
12:24:08 :: net.ipv4.ipfrag_secret_interval = 0
12:24:08 :: net.ipv4.ipfrag_time = 30
12:24:08 :: net.ipv4.neigh.default.anycast_delay = 100
12:24:08 :: net.ipv4.neigh.default.app_solicit = 0
12:24:08 :: net.ipv4.neigh.default.base_reachable_time_ms = 30000
12:24:08 :: net.ipv4.neigh.default.delay_first_probe_time = 5
12:24:08 :: net.ipv4.neigh.default.gc_interval = 30
12:24:08 :: net.ipv4.neigh.default.gc_stale_time = 60
12:24:08 :: net.ipv4.neigh.default.gc_thresh1 = 128
12:24:08 :: net.ipv4.neigh.default.gc_thresh2 = 512
12:24:08 :: net.ipv4.neigh.default.gc_thresh3 = 1024
12:24:08 :: net.ipv4.neigh.default.interval_probe_time_ms = 5000
12:24:08 :: net.ipv4.neigh.default.locktime = 100
12:24:08 :: net.ipv4.neigh.default.mcast_resolicit = 0
12:24:08 :: net.ipv4.neigh.default.mcast_solicit = 3
12:24:08 :: net.ipv4.neigh.default.proxy_delay = 80
12:24:08 :: net.ipv4.neigh.default.proxy_qlen = 64
12:24:08 :: net.ipv4.neigh.default.retrans_time_ms = 1000
12:24:08 :: net.ipv4.neigh.default.ucast_solicit = 3
12:24:08 :: net.ipv4.neigh.default.unres_qlen = 101
12:24:08 :: net.ipv4.neigh.default.unres_qlen_bytes = 212992
12:24:08 :: net.ipv4.neigh.docker0.anycast_delay = 100
12:24:08 :: net.ipv4.neigh.docker0.app_solicit = 0
12:24:08 :: net.ipv4.neigh.docker0.base_reachable_time_ms = 30000
12:24:08 :: net.ipv4.neigh.docker0.delay_first_probe_time = 5
12:24:08 :: net.ipv4.neigh.docker0.gc_stale_time = 60
12:24:08 :: net.ipv4.neigh.docker0.interval_probe_time_ms = 5000
12:24:08 :: net.ipv4.neigh.docker0.locktime = 100
12:24:08 :: net.ipv4.neigh.docker0.mcast_resolicit = 0
12:24:08 :: net.ipv4.neigh.docker0.mcast_solicit = 3
12:24:08 :: net.ipv4.neigh.docker0.proxy_delay = 80
12:24:08 :: net.ipv4.neigh.docker0.proxy_qlen = 64
12:24:08 :: net.ipv4.neigh.docker0.retrans_time_ms = 1000
12:24:08 :: net.ipv4.neigh.docker0.ucast_solicit = 3
12:24:08 :: net.ipv4.neigh.docker0.unres_qlen = 101
12:24:08 :: net.ipv4.neigh.docker0.unres_qlen_bytes = 212992
12:24:08 :: net.ipv4.neigh.enp0s3.anycast_delay = 100
12:24:08 :: net.ipv4.neigh.enp0s3.app_solicit = 0
12:24:08 :: net.ipv4.neigh.enp0s3.base_reachable_time_ms = 30000
12:24:08 :: net.ipv4.neigh.enp0s3.delay_first_probe_time = 5
12:24:08 :: net.ipv4.neigh.enp0s3.gc_stale_time = 60
12:24:08 :: net.ipv4.neigh.enp0s3.interval_probe_time_ms = 5000
12:24:08 :: net.ipv4.neigh.enp0s3.locktime = 100
12:24:08 :: net.ipv4.neigh.enp0s3.mcast_resolicit = 0
12:24:08 :: net.ipv4.neigh.enp0s3.mcast_solicit = 3
12:24:08 :: net.ipv4.neigh.enp0s3.proxy_delay = 80
12:24:08 :: net.ipv4.neigh.enp0s3.proxy_qlen = 64
12:24:08 :: net.ipv4.neigh.enp0s3.retrans_time_ms = 1000
12:24:08 :: net.ipv4.neigh.enp0s3.ucast_solicit = 3
12:24:08 :: net.ipv4.neigh.enp0s3.unres_qlen = 101
12:24:08 :: net.ipv4.neigh.enp0s3.unres_qlen_bytes = 212992
12:24:08 :: net.ipv4.neigh.lo.anycast_delay = 100
12:24:08 :: net.ipv4.neigh.lo.app_solicit = 0
12:24:08 :: net.ipv4.neigh.lo.base_reachable_time_ms = 30000
12:24:08 :: net.ipv4.neigh.lo.delay_first_probe_time = 5
12:24:08 :: net.ipv4.neigh.lo.gc_stale_time = 60
12:24:08 :: net.ipv4.neigh.lo.interval_probe_time_ms = 5000
12:24:08 :: net.ipv4.neigh.lo.locktime = 100
12:24:08 :: net.ipv4.neigh.lo.mcast_resolicit = 0
12:24:08 :: net.ipv4.neigh.lo.mcast_solicit = 3
12:24:08 :: net.ipv4.neigh.lo.proxy_delay = 80
12:24:08 :: net.ipv4.neigh.lo.proxy_qlen = 64
12:24:08 :: net.ipv4.neigh.lo.retrans_time_ms = 1000
12:24:08 :: net.ipv4.neigh.lo.ucast_solicit = 3
12:24:08 :: net.ipv4.neigh.lo.unres_qlen = 101
12:24:08 :: net.ipv4.neigh.lo.unres_qlen_bytes = 212992
12:24:08 :: net.ipv4.neigh.vethd9a62a1.anycast_delay = 100
12:24:08 :: net.ipv4.neigh.vethd9a62a1.app_solicit = 0
12:24:08 :: net.ipv4.neigh.vethd9a62a1.base_reachable_time_ms = 30000
12:24:08 :: net.ipv4.neigh.vethd9a62a1.delay_first_probe_time = 5
12:24:08 :: net.ipv4.neigh.vethd9a62a1.gc_stale_time = 60
12:24:08 :: net.ipv4.neigh.vethd9a62a1.interval_probe_time_ms = 5000
12:24:08 :: net.ipv4.neigh.vethd9a62a1.locktime = 100
12:24:08 :: net.ipv4.neigh.vethd9a62a1.mcast_resolicit = 0
12:24:08 :: net.ipv4.neigh.vethd9a62a1.mcast_solicit = 3
12:24:08 :: net.ipv4.neigh.vethd9a62a1.proxy_delay = 80
12:24:08 :: net.ipv4.neigh.vethd9a62a1.proxy_qlen = 64
12:24:08 :: net.ipv4.neigh.vethd9a62a1.retrans_time_ms = 1000
12:24:08 :: net.ipv4.neigh.vethd9a62a1.ucast_solicit = 3
12:24:08 :: net.ipv4.neigh.vethd9a62a1.unres_qlen = 101
12:24:08 :: net.ipv4.neigh.vethd9a62a1.unres_qlen_bytes = 212992
12:24:08 :: net.ipv4.neigh.virbr0.anycast_delay = 100
12:24:08 :: net.ipv4.neigh.virbr0.app_solicit = 0
12:24:08 :: net.ipv4.neigh.virbr0.base_reachable_time_ms = 30000
12:24:08 :: net.ipv4.neigh.virbr0.delay_first_probe_time = 5
12:24:08 :: net.ipv4.neigh.virbr0.gc_stale_time = 60
12:24:08 :: net.ipv4.neigh.virbr0.interval_probe_time_ms = 5000
12:24:08 :: net.ipv4.neigh.virbr0.locktime = 100
12:24:08 :: net.ipv4.neigh.virbr0.mcast_resolicit = 0
12:24:08 :: net.ipv4.neigh.virbr0.mcast_solicit = 3
12:24:08 :: net.ipv4.neigh.virbr0.proxy_delay = 80
12:24:08 :: net.ipv4.neigh.virbr0.proxy_qlen = 64
12:24:08 :: net.ipv4.neigh.virbr0.retrans_time_ms = 1000
12:24:08 :: net.ipv4.neigh.virbr0.ucast_solicit = 3
12:24:08 :: net.ipv4.neigh.virbr0.unres_qlen = 101
12:24:08 :: net.ipv4.neigh.virbr0.unres_qlen_bytes = 212992
12:24:08 :: net.ipv4.nexthop_compat_mode = 1
12:24:08 :: net.ipv4.ping_group_range = 0 2147483647
12:24:08 :: net.ipv4.raw_l3mdev_accept = 1
12:24:08 :: net.ipv4.route.error_burst = 5000
12:24:08 :: net.ipv4.route.error_cost = 1000
12:24:08 :: net.ipv4.route.gc_elasticity = 8
12:24:08 :: net.ipv4.route.gc_interval = 60
12:24:08 :: net.ipv4.route.gc_min_interval = 0
12:24:08 :: net.ipv4.route.gc_min_interval_ms = 500
12:24:08 :: net.ipv4.route.gc_thresh = -1
12:24:08 :: net.ipv4.route.gc_timeout = 300
12:24:08 :: net.ipv4.route.max_size = 2147483647
12:24:08 :: net.ipv4.route.min_adv_mss = 256
12:24:08 :: net.ipv4.route.min_pmtu = 552
12:24:08 :: net.ipv4.route.mtu_expires = 600
12:24:08 :: net.ipv4.route.redirect_load = 20
12:24:08 :: net.ipv4.route.redirect_number = 9
12:24:08 :: net.ipv4.route.redirect_silence = 20480
12:24:08 :: net.ipv4.tcp_abort_on_overflow = 0
12:24:08 :: net.ipv4.tcp_adv_win_scale = 1
12:24:08 :: net.ipv4.tcp_allowed_congestion_control = reno cubic
12:24:08 :: net.ipv4.tcp_app_win = 31
12:24:08 :: net.ipv4.tcp_autocorking = 1
12:24:08 :: net.ipv4.tcp_available_congestion_control = reno cubic
12:24:08 :: net.ipv4.tcp_available_ulp = espintcp mptcp tls
12:24:08 :: net.ipv4.tcp_backlog_ack_defer = 1
12:24:08 :: net.ipv4.tcp_base_mss = 1024
12:24:08 :: net.ipv4.tcp_challenge_ack_limit = 2147483647
12:24:08 :: net.ipv4.tcp_child_ehash_entries = 0
12:24:08 :: net.ipv4.tcp_comp_sack_delay_ns = 1000000
12:24:08 :: net.ipv4.tcp_comp_sack_nr = 44
12:24:08 :: net.ipv4.tcp_comp_sack_slack_ns = 100000
12:24:08 :: net.ipv4.tcp_congestion_control = cubic
12:24:08 :: net.ipv4.tcp_dsack = 1
12:24:08 :: net.ipv4.tcp_early_demux = 1
12:24:08 :: net.ipv4.tcp_early_retrans = 3
12:24:08 :: net.ipv4.tcp_ecn = 2
12:24:08 :: net.ipv4.tcp_ecn_fallback = 1
12:24:08 :: net.ipv4.tcp_ehash_entries = 262144
12:24:08 :: net.ipv4.tcp_fack = 0
12:24:08 :: net.ipv4.tcp_fastopen = 1
12:24:08 :: net.ipv4.tcp_fastopen_blackhole_timeout_sec = 0
12:24:08 :: net.ipv4.tcp_fastopen_key = 18c50a1b-669e94a6-55bcd76f-11216f14
12:24:08 :: net.ipv4.tcp_fin_timeout = 60
12:24:08 :: net.ipv4.tcp_frto = 2
12:24:08 :: net.ipv4.tcp_fwmark_accept = 0
12:24:08 :: net.ipv4.tcp_invalid_ratelimit = 500
12:24:08 :: net.ipv4.tcp_keepalive_intvl = 75
12:24:08 :: net.ipv4.tcp_keepalive_probes = 9
12:24:08 :: net.ipv4.tcp_keepalive_time = 7200
12:24:08 :: net.ipv4.tcp_l3mdev_accept = 0
12:24:08 :: net.ipv4.tcp_limit_output_bytes = 1048576
12:24:08 :: net.ipv4.tcp_low_latency = 0
12:24:08 :: net.ipv4.tcp_max_orphans = 131072
12:24:08 :: net.ipv4.tcp_max_reordering = 300
12:24:08 :: net.ipv4.tcp_max_syn_backlog = 2048
12:24:08 :: net.ipv4.tcp_max_tw_buckets = 131072
12:24:08 :: net.ipv4.tcp_mem = 286143 381525 572286
12:24:08 :: net.ipv4.tcp_migrate_req = 0
12:24:08 :: net.ipv4.tcp_min_rtt_wlen = 300
12:24:08 :: net.ipv4.tcp_min_snd_mss = 48
12:24:08 :: net.ipv4.tcp_min_tso_segs = 2
12:24:08 :: net.ipv4.tcp_moderate_rcvbuf = 1
12:24:08 :: net.ipv4.tcp_mtu_probe_floor = 48
12:24:08 :: net.ipv4.tcp_mtu_probing = 0
12:24:08 :: net.ipv4.tcp_no_metrics_save = 0
12:24:08 :: net.ipv4.tcp_no_ssthresh_metrics_save = 1
12:24:08 :: net.ipv4.tcp_notsent_lowat = 4294967295
12:24:08 :: net.ipv4.tcp_orphan_retries = 0
12:24:08 :: net.ipv4.tcp_pacing_ca_ratio = 120
12:24:08 :: net.ipv4.tcp_pacing_ss_ratio = 200
12:24:08 :: net.ipv4.tcp_pingpong_thresh = 1
12:24:08 :: net.ipv4.tcp_plb_cong_thresh = 128
12:24:08 :: net.ipv4.tcp_plb_enabled = 0
12:24:08 :: net.ipv4.tcp_plb_idle_rehash_rounds = 3
12:24:08 :: net.ipv4.tcp_plb_rehash_rounds = 12
12:24:08 :: net.ipv4.tcp_plb_suspend_rto_sec = 60
12:24:08 :: net.ipv4.tcp_probe_interval = 600
12:24:08 :: net.ipv4.tcp_probe_threshold = 8
12:24:08 :: net.ipv4.tcp_recovery = 1
12:24:08 :: net.ipv4.tcp_reflect_tos = 0
12:24:08 :: net.ipv4.tcp_reordering = 3
12:24:08 :: net.ipv4.tcp_retrans_collapse = 1
12:24:08 :: net.ipv4.tcp_retries1 = 3
12:24:08 :: net.ipv4.tcp_retries2 = 15
12:24:08 :: net.ipv4.tcp_rfc1337 = 0
12:24:08 :: net.ipv4.tcp_rmem = 4096 131072 6291456
12:24:08 :: net.ipv4.tcp_sack = 1
12:24:08 :: net.ipv4.tcp_shrink_window = 0
12:24:08 :: net.ipv4.tcp_slow_start_after_idle = 1
12:24:08 :: net.ipv4.tcp_stdurg = 0
12:24:08 :: net.ipv4.tcp_syn_linear_timeouts = 4
12:24:08 :: net.ipv4.tcp_syn_retries = 6
12:24:08 :: net.ipv4.tcp_synack_retries = 5
12:24:08 :: net.ipv4.tcp_syncookies = 1
12:24:08 :: net.ipv4.tcp_thin_linear_timeouts = 0
12:24:08 :: net.ipv4.tcp_timestamps = 1
12:24:08 :: net.ipv4.tcp_tso_rtt_log = 9
12:24:08 :: net.ipv4.tcp_tso_win_divisor = 3
12:24:08 :: net.ipv4.tcp_tw_reuse = 2
12:24:08 :: net.ipv4.tcp_window_scaling = 1
12:24:08 :: net.ipv4.tcp_wmem = 4096 16384 4194304
12:24:08 :: net.ipv4.tcp_workaround_signed_windows = 0
12:24:08 :: net.ipv4.udp_child_hash_entries = 0
12:24:08 :: net.ipv4.udp_early_demux = 1
12:24:08 :: net.ipv4.udp_hash_entries = 16384
12:24:08 :: net.ipv4.udp_l3mdev_accept = 0
12:24:08 :: net.ipv4.udp_mem = 572286 763050 1144572
12:24:08 :: net.ipv4.udp_rmem_min = 4096
12:24:08 :: net.ipv4.udp_wmem_min = 4096
12:24:08 :: net.ipv4.xfrm4_gc_thresh = 32768
12:24:08 :: net.ipv6.anycast_src_echo_reply = 0
12:24:08 :: net.ipv6.auto_flowlabels = 1
12:24:08 :: net.ipv6.bindv6only = 0
12:24:08 :: net.ipv6.calipso_cache_bucket_size = 10
12:24:08 :: net.ipv6.calipso_cache_enable = 1
12:24:08 :: net.ipv6.conf.all.accept_dad = 0
12:24:08 :: net.ipv6.conf.all.accept_ra = 1
12:24:08 :: net.ipv6.conf.all.accept_ra_defrtr = 1
12:24:08 :: net.ipv6.conf.all.accept_ra_from_local = 0
12:24:08 :: net.ipv6.conf.all.accept_ra_min_hop_limit = 1
12:24:08 :: net.ipv6.conf.all.accept_ra_min_lft = 0
12:24:08 :: net.ipv6.conf.all.accept_ra_mtu = 1
12:24:08 :: net.ipv6.conf.all.accept_ra_pinfo = 1
12:24:08 :: net.ipv6.conf.all.accept_ra_rt_info_max_plen = 0
12:24:08 :: net.ipv6.conf.all.accept_ra_rt_info_min_plen = 0
12:24:08 :: net.ipv6.conf.all.accept_ra_rtr_pref = 1
12:24:08 :: net.ipv6.conf.all.accept_redirects = 1
12:24:08 :: net.ipv6.conf.all.accept_source_route = 0
12:24:08 :: net.ipv6.conf.all.accept_untracked_na = 0
12:24:08 :: net.ipv6.conf.all.addr_gen_mode = 0
12:24:08 :: net.ipv6.conf.all.autoconf = 1
12:24:08 :: net.ipv6.conf.all.dad_transmits = 1
12:24:08 :: net.ipv6.conf.all.disable_ipv6 = 0
12:24:08 :: net.ipv6.conf.all.disable_policy = 0
12:24:08 :: net.ipv6.conf.all.drop_unicast_in_l2_multicast = 0
12:24:08 :: net.ipv6.conf.all.drop_unsolicited_na = 0
12:24:08 :: net.ipv6.conf.all.enhanced_dad = 1
12:24:08 :: net.ipv6.conf.all.force_mld_version = 0
12:24:08 :: net.ipv6.conf.all.force_tllao = 0
12:24:08 :: net.ipv6.conf.all.forwarding = 0
12:24:08 :: net.ipv6.conf.all.hop_limit = 64
12:24:08 :: net.ipv6.conf.all.ignore_routes_with_linkdown = 0
12:24:08 :: net.ipv6.conf.all.ioam6_enabled = 0
12:24:08 :: net.ipv6.conf.all.ioam6_id = 65535
12:24:08 :: net.ipv6.conf.all.ioam6_id_wide = 4294967295
12:24:08 :: net.ipv6.conf.all.keep_addr_on_down = 0
12:24:08 :: net.ipv6.conf.all.max_addresses = 16
12:24:08 :: net.ipv6.conf.all.max_desync_factor = 600
12:24:08 :: net.ipv6.conf.all.mc_forwarding = 0
12:24:08 :: net.ipv6.conf.all.mldv1_unsolicited_report_interval = 10000
12:24:08 :: net.ipv6.conf.all.mldv2_unsolicited_report_interval = 1000
12:24:08 :: net.ipv6.conf.all.mtu = 1280
12:24:08 :: net.ipv6.conf.all.ndisc_evict_nocarrier = 1
12:24:08 :: net.ipv6.conf.all.ndisc_notify = 0
12:24:08 :: net.ipv6.conf.all.ndisc_tclass = 0
12:24:08 :: net.ipv6.conf.all.proxy_ndp = 0
12:24:08 :: net.ipv6.conf.all.ra_defrtr_metric = 1024
12:24:08 :: net.ipv6.conf.all.ra_honor_pio_life = 0
12:24:08 :: net.ipv6.conf.all.regen_max_retry = 3
12:24:08 :: net.ipv6.conf.all.router_probe_interval = 60
12:24:08 :: net.ipv6.conf.all.router_solicitation_delay = 1
12:24:08 :: net.ipv6.conf.all.router_solicitation_interval = 4
12:24:08 :: net.ipv6.conf.all.router_solicitation_max_interval = 3600
12:24:08 :: net.ipv6.conf.all.router_solicitations = -1
12:24:08 :: net.ipv6.conf.all.rpl_seg_enabled = 0
12:24:08 :: net.ipv6.conf.all.seg6_enabled = 0
12:24:08 :: net.ipv6.conf.all.seg6_require_hmac = 0
12:24:08 :: net.ipv6.conf.all.suppress_frag_ndisc = 1
12:24:08 :: net.ipv6.conf.all.temp_prefered_lft = 86400
12:24:08 :: net.ipv6.conf.all.temp_valid_lft = 604800
12:24:08 :: net.ipv6.conf.all.use_oif_addrs_only = 0
12:24:08 :: net.ipv6.conf.all.use_tempaddr = 0
12:24:08 :: net.ipv6.conf.default.accept_dad = 1
12:24:08 :: net.ipv6.conf.default.accept_ra = 1
12:24:08 :: net.ipv6.conf.default.accept_ra_defrtr = 1
12:24:08 :: net.ipv6.conf.default.accept_ra_from_local = 0
12:24:08 :: net.ipv6.conf.default.accept_ra_min_hop_limit = 1
12:24:08 :: net.ipv6.conf.default.accept_ra_min_lft = 0
12:24:08 :: net.ipv6.conf.default.accept_ra_mtu = 1
12:24:08 :: net.ipv6.conf.default.accept_ra_pinfo = 1
12:24:08 :: net.ipv6.conf.default.accept_ra_rt_info_max_plen = 0
12:24:08 :: net.ipv6.conf.default.accept_ra_rt_info_min_plen = 0
12:24:08 :: net.ipv6.conf.default.accept_ra_rtr_pref = 1
12:24:08 :: net.ipv6.conf.default.accept_redirects = 1
12:24:08 :: net.ipv6.conf.default.accept_source_route = 0
12:24:08 :: net.ipv6.conf.default.accept_untracked_na = 0
12:24:08 :: net.ipv6.conf.default.addr_gen_mode = 0
12:24:08 :: net.ipv6.conf.default.autoconf = 1
12:24:08 :: net.ipv6.conf.default.dad_transmits = 1
12:24:08 :: net.ipv6.conf.default.disable_ipv6 = 0
12:24:08 :: net.ipv6.conf.default.disable_policy = 0
12:24:08 :: net.ipv6.conf.default.drop_unicast_in_l2_multicast = 0
12:24:08 :: net.ipv6.conf.default.drop_unsolicited_na = 0
12:24:08 :: net.ipv6.conf.default.enhanced_dad = 1
12:24:08 :: net.ipv6.conf.default.force_mld_version = 0
12:24:08 :: net.ipv6.conf.default.force_tllao = 0
12:24:08 :: net.ipv6.conf.default.forwarding = 0
12:24:08 :: net.ipv6.conf.default.hop_limit = 64
12:24:08 :: net.ipv6.conf.default.ignore_routes_with_linkdown = 0
12:24:08 :: net.ipv6.conf.default.ioam6_enabled = 0
12:24:08 :: net.ipv6.conf.default.ioam6_id = 65535
12:24:08 :: net.ipv6.conf.default.ioam6_id_wide = 4294967295
12:24:08 :: net.ipv6.conf.default.keep_addr_on_down = 0
12:24:08 :: net.ipv6.conf.default.max_addresses = 16
12:24:08 :: net.ipv6.conf.default.max_desync_factor = 600
12:24:08 :: net.ipv6.conf.default.mc_forwarding = 0
12:24:08 :: net.ipv6.conf.default.mldv1_unsolicited_report_interval = 10000
12:24:08 :: net.ipv6.conf.default.mldv2_unsolicited_report_interval = 1000
12:24:08 :: net.ipv6.conf.default.mtu = 1280
12:24:08 :: net.ipv6.conf.default.ndisc_evict_nocarrier = 1
12:24:08 :: net.ipv6.conf.default.ndisc_notify = 0
12:24:08 :: net.ipv6.conf.default.ndisc_tclass = 0
12:24:08 :: net.ipv6.conf.default.proxy_ndp = 0
12:24:08 :: net.ipv6.conf.default.ra_defrtr_metric = 1024
12:24:08 :: net.ipv6.conf.default.ra_honor_pio_life = 0
12:24:08 :: net.ipv6.conf.default.regen_max_retry = 3
12:24:08 :: net.ipv6.conf.default.router_probe_interval = 60
12:24:08 :: net.ipv6.conf.default.router_solicitation_delay = 1
12:24:08 :: net.ipv6.conf.default.router_solicitation_interval = 4
12:24:08 :: net.ipv6.conf.default.router_solicitation_max_interval = 3600
12:24:08 :: net.ipv6.conf.default.router_solicitations = -1
12:24:08 :: net.ipv6.conf.default.rpl_seg_enabled = 0
12:24:08 :: net.ipv6.conf.default.seg6_enabled = 0
12:24:08 :: net.ipv6.conf.default.seg6_require_hmac = 0
12:24:08 :: net.ipv6.conf.default.suppress_frag_ndisc = 1
12:24:08 :: net.ipv6.conf.default.temp_prefered_lft = 86400
12:24:08 :: net.ipv6.conf.default.temp_valid_lft = 604800
12:24:08 :: net.ipv6.conf.default.use_oif_addrs_only = 0
12:24:08 :: net.ipv6.conf.default.use_tempaddr = 0
12:24:08 :: net.ipv6.conf.docker0.accept_dad = 1
12:24:08 :: net.ipv6.conf.docker0.accept_ra = 0
12:24:08 :: net.ipv6.conf.docker0.accept_ra_defrtr = 1
12:24:08 :: net.ipv6.conf.docker0.accept_ra_from_local = 0
12:24:08 :: net.ipv6.conf.docker0.accept_ra_min_hop_limit = 1
12:24:08 :: net.ipv6.conf.docker0.accept_ra_min_lft = 0
12:24:08 :: net.ipv6.conf.docker0.accept_ra_mtu = 1
12:24:08 :: net.ipv6.conf.docker0.accept_ra_pinfo = 1
12:24:08 :: net.ipv6.conf.docker0.accept_ra_rt_info_max_plen = 0
12:24:08 :: net.ipv6.conf.docker0.accept_ra_rt_info_min_plen = 0
12:24:08 :: net.ipv6.conf.docker0.accept_ra_rtr_pref = 1
12:24:08 :: net.ipv6.conf.docker0.accept_redirects = 1
12:24:08 :: net.ipv6.conf.docker0.accept_source_route = 0
12:24:08 :: net.ipv6.conf.docker0.accept_untracked_na = 0
12:24:08 :: net.ipv6.conf.docker0.addr_gen_mode = 0
12:24:08 :: net.ipv6.conf.docker0.autoconf = 1
12:24:08 :: net.ipv6.conf.docker0.dad_transmits = 1
12:24:08 :: net.ipv6.conf.docker0.disable_ipv6 = 0
12:24:08 :: net.ipv6.conf.docker0.disable_policy = 0
12:24:08 :: net.ipv6.conf.docker0.drop_unicast_in_l2_multicast = 0
12:24:08 :: net.ipv6.conf.docker0.drop_unsolicited_na = 0
12:24:08 :: net.ipv6.conf.docker0.enhanced_dad = 1
12:24:08 :: net.ipv6.conf.docker0.force_mld_version = 0
12:24:08 :: net.ipv6.conf.docker0.force_tllao = 0
12:24:08 :: net.ipv6.conf.docker0.forwarding = 0
12:24:08 :: net.ipv6.conf.docker0.hop_limit = 64
12:24:08 :: net.ipv6.conf.docker0.ignore_routes_with_linkdown = 0
12:24:08 :: net.ipv6.conf.docker0.ioam6_enabled = 0
12:24:08 :: net.ipv6.conf.docker0.ioam6_id = 65535
12:24:08 :: net.ipv6.conf.docker0.ioam6_id_wide = 4294967295
12:24:08 :: net.ipv6.conf.docker0.keep_addr_on_down = 0
12:24:08 :: net.ipv6.conf.docker0.max_addresses = 16
12:24:08 :: net.ipv6.conf.docker0.max_desync_factor = 600
12:24:08 :: net.ipv6.conf.docker0.mc_forwarding = 0
12:24:08 :: net.ipv6.conf.docker0.mldv1_unsolicited_report_interval = 10000
12:24:08 :: net.ipv6.conf.docker0.mldv2_unsolicited_report_interval = 1000
12:24:08 :: net.ipv6.conf.docker0.mtu = 1500
12:24:08 :: net.ipv6.conf.docker0.ndisc_evict_nocarrier = 1
12:24:08 :: net.ipv6.conf.docker0.ndisc_notify = 0
12:24:08 :: net.ipv6.conf.docker0.ndisc_tclass = 0
12:24:08 :: net.ipv6.conf.docker0.proxy_ndp = 0
12:24:08 :: net.ipv6.conf.docker0.ra_defrtr_metric = 1024
12:24:08 :: net.ipv6.conf.docker0.ra_honor_pio_life = 0
12:24:08 :: net.ipv6.conf.docker0.regen_max_retry = 3
12:24:08 :: net.ipv6.conf.docker0.router_probe_interval = 60
12:24:08 :: net.ipv6.conf.docker0.router_solicitation_delay = 1
12:24:08 :: net.ipv6.conf.docker0.router_solicitation_interval = 4
12:24:08 :: net.ipv6.conf.docker0.router_solicitation_max_interval = 3600
12:24:08 :: net.ipv6.conf.docker0.router_solicitations = -1
12:24:08 :: net.ipv6.conf.docker0.rpl_seg_enabled = 0
12:24:08 :: net.ipv6.conf.docker0.seg6_enabled = 0
12:24:08 :: net.ipv6.conf.docker0.seg6_require_hmac = 0
12:24:08 :: net.ipv6.conf.docker0.suppress_frag_ndisc = 1
12:24:08 :: net.ipv6.conf.docker0.temp_prefered_lft = 86400
12:24:08 :: net.ipv6.conf.docker0.temp_valid_lft = 604800
12:24:08 :: net.ipv6.conf.docker0.use_oif_addrs_only = 0
12:24:08 :: net.ipv6.conf.docker0.use_tempaddr = 0
12:24:08 :: net.ipv6.conf.enp0s3.accept_dad = 1
12:24:08 :: net.ipv6.conf.enp0s3.accept_ra = 0
12:24:08 :: net.ipv6.conf.enp0s3.accept_ra_defrtr = 1
12:24:08 :: net.ipv6.conf.enp0s3.accept_ra_from_local = 0
12:24:08 :: net.ipv6.conf.enp0s3.accept_ra_min_hop_limit = 1
12:24:08 :: net.ipv6.conf.enp0s3.accept_ra_min_lft = 0
12:24:08 :: net.ipv6.conf.enp0s3.accept_ra_mtu = 1
12:24:08 :: net.ipv6.conf.enp0s3.accept_ra_pinfo = 1
12:24:08 :: net.ipv6.conf.enp0s3.accept_ra_rt_info_max_plen = 0
12:24:08 :: net.ipv6.conf.enp0s3.accept_ra_rt_info_min_plen = 0
12:24:08 :: net.ipv6.conf.enp0s3.accept_ra_rtr_pref = 1
12:24:08 :: net.ipv6.conf.enp0s3.accept_redirects = 1
12:24:08 :: net.ipv6.conf.enp0s3.accept_source_route = 0
12:24:08 :: net.ipv6.conf.enp0s3.accept_untracked_na = 0
12:24:08 :: net.ipv6.conf.enp0s3.addr_gen_mode = 0
12:24:08 :: net.ipv6.conf.enp0s3.autoconf = 1
12:24:08 :: net.ipv6.conf.enp0s3.dad_transmits = 1
12:24:08 :: net.ipv6.conf.enp0s3.disable_ipv6 = 0
12:24:08 :: net.ipv6.conf.enp0s3.disable_policy = 0
12:24:08 :: net.ipv6.conf.enp0s3.drop_unicast_in_l2_multicast = 0
12:24:08 :: net.ipv6.conf.enp0s3.drop_unsolicited_na = 0
12:24:08 :: net.ipv6.conf.enp0s3.enhanced_dad = 1
12:24:08 :: net.ipv6.conf.enp0s3.force_mld_version = 0
12:24:08 :: net.ipv6.conf.enp0s3.force_tllao = 0
12:24:08 :: net.ipv6.conf.enp0s3.forwarding = 0
12:24:08 :: net.ipv6.conf.enp0s3.hop_limit = 64
12:24:08 :: net.ipv6.conf.enp0s3.ignore_routes_with_linkdown = 0
12:24:08 :: net.ipv6.conf.enp0s3.ioam6_enabled = 0
12:24:08 :: net.ipv6.conf.enp0s3.ioam6_id = 65535
12:24:08 :: net.ipv6.conf.enp0s3.ioam6_id_wide = 4294967295
12:24:08 :: net.ipv6.conf.enp0s3.keep_addr_on_down = 0
12:24:08 :: net.ipv6.conf.enp0s3.max_addresses = 16
12:24:08 :: net.ipv6.conf.enp0s3.max_desync_factor = 600
12:24:08 :: net.ipv6.conf.enp0s3.mc_forwarding = 0
12:24:08 :: net.ipv6.conf.enp0s3.mldv1_unsolicited_report_interval = 10000
12:24:08 :: net.ipv6.conf.enp0s3.mldv2_unsolicited_report_interval = 1000
12:24:08 :: net.ipv6.conf.enp0s3.mtu = 9000
12:24:08 :: net.ipv6.conf.enp0s3.ndisc_evict_nocarrier = 1
12:24:08 :: net.ipv6.conf.enp0s3.ndisc_notify = 0
12:24:08 :: net.ipv6.conf.enp0s3.ndisc_tclass = 0
12:24:08 :: net.ipv6.conf.enp0s3.proxy_ndp = 0
12:24:08 :: net.ipv6.conf.enp0s3.ra_defrtr_metric = 1024
12:24:08 :: net.ipv6.conf.enp0s3.ra_honor_pio_life = 0
12:24:08 :: net.ipv6.conf.enp0s3.regen_max_retry = 3
12:24:08 :: net.ipv6.conf.enp0s3.router_probe_interval = 60
12:24:08 :: net.ipv6.conf.enp0s3.router_solicitation_delay = 1
12:24:08 :: net.ipv6.conf.enp0s3.router_solicitation_interval = 4
12:24:08 :: net.ipv6.conf.enp0s3.router_solicitation_max_interval = 3600
12:24:08 :: net.ipv6.conf.enp0s3.router_solicitations = -1
12:24:08 :: net.ipv6.conf.enp0s3.rpl_seg_enabled = 0
12:24:08 :: net.ipv6.conf.enp0s3.seg6_enabled = 0
12:24:08 :: net.ipv6.conf.enp0s3.seg6_require_hmac = 0
12:24:08 :: net.ipv6.conf.enp0s3.suppress_frag_ndisc = 1
12:24:08 :: net.ipv6.conf.enp0s3.temp_prefered_lft = 86400
12:24:08 :: net.ipv6.conf.enp0s3.temp_valid_lft = 604800
12:24:08 :: net.ipv6.conf.enp0s3.use_oif_addrs_only = 0
12:24:08 :: net.ipv6.conf.enp0s3.use_tempaddr = 0
12:24:08 :: net.ipv6.conf.lo.accept_dad = -1
12:24:08 :: net.ipv6.conf.lo.accept_ra = 1
12:24:08 :: net.ipv6.conf.lo.accept_ra_defrtr = 1
12:24:08 :: net.ipv6.conf.lo.accept_ra_from_local = 0
12:24:08 :: net.ipv6.conf.lo.accept_ra_min_hop_limit = 1
12:24:08 :: net.ipv6.conf.lo.accept_ra_min_lft = 0
12:24:08 :: net.ipv6.conf.lo.accept_ra_mtu = 1
12:24:08 :: net.ipv6.conf.lo.accept_ra_pinfo = 1
12:24:08 :: net.ipv6.conf.lo.accept_ra_rt_info_max_plen = 0
12:24:08 :: net.ipv6.conf.lo.accept_ra_rt_info_min_plen = 0
12:24:08 :: net.ipv6.conf.lo.accept_ra_rtr_pref = 1
12:24:08 :: net.ipv6.conf.lo.accept_redirects = 1
12:24:08 :: net.ipv6.conf.lo.accept_source_route = 0
12:24:08 :: net.ipv6.conf.lo.accept_untracked_na = 0
12:24:08 :: net.ipv6.conf.lo.addr_gen_mode = 0
12:24:08 :: net.ipv6.conf.lo.autoconf = 1
12:24:08 :: net.ipv6.conf.lo.dad_transmits = 1
12:24:08 :: net.ipv6.conf.lo.disable_ipv6 = 0
12:24:08 :: net.ipv6.conf.lo.disable_policy = 0
12:24:08 :: net.ipv6.conf.lo.drop_unicast_in_l2_multicast = 0
12:24:08 :: net.ipv6.conf.lo.drop_unsolicited_na = 0
12:24:08 :: net.ipv6.conf.lo.enhanced_dad = 1
12:24:08 :: net.ipv6.conf.lo.force_mld_version = 0
12:24:08 :: net.ipv6.conf.lo.force_tllao = 0
12:24:08 :: net.ipv6.conf.lo.forwarding = 0
12:24:08 :: net.ipv6.conf.lo.hop_limit = 64
12:24:08 :: net.ipv6.conf.lo.ignore_routes_with_linkdown = 0
12:24:08 :: net.ipv6.conf.lo.ioam6_enabled = 0
12:24:08 :: net.ipv6.conf.lo.ioam6_id = 65535
12:24:08 :: net.ipv6.conf.lo.ioam6_id_wide = 4294967295
12:24:08 :: net.ipv6.conf.lo.keep_addr_on_down = 0
12:24:08 :: net.ipv6.conf.lo.max_addresses = 16
12:24:08 :: net.ipv6.conf.lo.max_desync_factor = 600
12:24:08 :: net.ipv6.conf.lo.mc_forwarding = 0
12:24:08 :: net.ipv6.conf.lo.mldv1_unsolicited_report_interval = 10000
12:24:08 :: net.ipv6.conf.lo.mldv2_unsolicited_report_interval = 1000
12:24:08 :: net.ipv6.conf.lo.mtu = 65536
12:24:08 :: net.ipv6.conf.lo.ndisc_evict_nocarrier = 1
12:24:08 :: net.ipv6.conf.lo.ndisc_notify = 0
12:24:08 :: net.ipv6.conf.lo.ndisc_tclass = 0
12:24:08 :: net.ipv6.conf.lo.proxy_ndp = 0
12:24:08 :: net.ipv6.conf.lo.ra_defrtr_metric = 1024
12:24:08 :: net.ipv6.conf.lo.ra_honor_pio_life = 0
12:24:08 :: net.ipv6.conf.lo.regen_max_retry = 3
12:24:08 :: net.ipv6.conf.lo.router_probe_interval = 60
12:24:08 :: net.ipv6.conf.lo.router_solicitation_delay = 1
12:24:08 :: net.ipv6.conf.lo.router_solicitation_interval = 4
12:24:08 :: net.ipv6.conf.lo.router_solicitation_max_interval = 3600
12:24:08 :: net.ipv6.conf.lo.router_solicitations = -1
12:24:08 :: net.ipv6.conf.lo.rpl_seg_enabled = 0
12:24:08 :: net.ipv6.conf.lo.seg6_enabled = 0
12:24:08 :: net.ipv6.conf.lo.seg6_require_hmac = 0
12:24:08 :: net.ipv6.conf.lo.suppress_frag_ndisc = 1
12:24:08 :: net.ipv6.conf.lo.temp_prefered_lft = 86400
12:24:08 :: net.ipv6.conf.lo.temp_valid_lft = 604800
12:24:08 :: net.ipv6.conf.lo.use_oif_addrs_only = 0
12:24:08 :: net.ipv6.conf.lo.use_tempaddr = -1
12:24:08 :: net.ipv6.conf.vethd9a62a1.accept_dad = 1
12:24:08 :: net.ipv6.conf.vethd9a62a1.accept_ra = 1
12:24:08 :: net.ipv6.conf.vethd9a62a1.accept_ra_defrtr = 1
12:24:08 :: net.ipv6.conf.vethd9a62a1.accept_ra_from_local = 0
12:24:08 :: net.ipv6.conf.vethd9a62a1.accept_ra_min_hop_limit = 1
12:24:08 :: net.ipv6.conf.vethd9a62a1.accept_ra_min_lft = 0
12:24:08 :: net.ipv6.conf.vethd9a62a1.accept_ra_mtu = 1
12:24:08 :: net.ipv6.conf.vethd9a62a1.accept_ra_pinfo = 1
12:24:08 :: net.ipv6.conf.vethd9a62a1.accept_ra_rt_info_max_plen = 0
12:24:08 :: net.ipv6.conf.vethd9a62a1.accept_ra_rt_info_min_plen = 0
12:24:08 :: net.ipv6.conf.vethd9a62a1.accept_ra_rtr_pref = 1
12:24:08 :: net.ipv6.conf.vethd9a62a1.accept_redirects = 1
12:24:08 :: net.ipv6.conf.vethd9a62a1.accept_source_route = 0
12:24:08 :: net.ipv6.conf.vethd9a62a1.accept_untracked_na = 0
12:24:08 :: net.ipv6.conf.vethd9a62a1.addr_gen_mode = 0
12:24:08 :: net.ipv6.conf.vethd9a62a1.autoconf = 1
12:24:08 :: net.ipv6.conf.vethd9a62a1.dad_transmits = 1
12:24:08 :: net.ipv6.conf.vethd9a62a1.disable_ipv6 = 0
12:24:08 :: net.ipv6.conf.vethd9a62a1.disable_policy = 0
12:24:08 :: net.ipv6.conf.vethd9a62a1.drop_unicast_in_l2_multicast = 0
12:24:08 :: net.ipv6.conf.vethd9a62a1.drop_unsolicited_na = 0
12:24:08 :: net.ipv6.conf.vethd9a62a1.enhanced_dad = 1
12:24:08 :: net.ipv6.conf.vethd9a62a1.force_mld_version = 0
12:24:08 :: net.ipv6.conf.vethd9a62a1.force_tllao = 0
12:24:08 :: net.ipv6.conf.vethd9a62a1.forwarding = 0
12:24:08 :: net.ipv6.conf.vethd9a62a1.hop_limit = 64
12:24:08 :: net.ipv6.conf.vethd9a62a1.ignore_routes_with_linkdown = 0
12:24:08 :: net.ipv6.conf.vethd9a62a1.ioam6_enabled = 0
12:24:08 :: net.ipv6.conf.vethd9a62a1.ioam6_id = 65535
12:24:08 :: net.ipv6.conf.vethd9a62a1.ioam6_id_wide = 4294967295
12:24:08 :: net.ipv6.conf.vethd9a62a1.keep_addr_on_down = 0
12:24:08 :: net.ipv6.conf.vethd9a62a1.max_addresses = 16
12:24:08 :: net.ipv6.conf.vethd9a62a1.max_desync_factor = 600
12:24:08 :: net.ipv6.conf.vethd9a62a1.mc_forwarding = 0
12:24:08 :: net.ipv6.conf.vethd9a62a1.mldv1_unsolicited_report_interval = 10000
12:24:08 :: net.ipv6.conf.vethd9a62a1.mldv2_unsolicited_report_interval = 1000
12:24:08 :: net.ipv6.conf.vethd9a62a1.mtu = 1500
12:24:08 :: net.ipv6.conf.vethd9a62a1.ndisc_evict_nocarrier = 1
12:24:08 :: net.ipv6.conf.vethd9a62a1.ndisc_notify = 0
12:24:08 :: net.ipv6.conf.vethd9a62a1.ndisc_tclass = 0
12:24:08 :: net.ipv6.conf.vethd9a62a1.proxy_ndp = 0
12:24:08 :: net.ipv6.conf.vethd9a62a1.ra_defrtr_metric = 1024
12:24:08 :: net.ipv6.conf.vethd9a62a1.ra_honor_pio_life = 0
12:24:08 :: net.ipv6.conf.vethd9a62a1.regen_max_retry = 3
12:24:08 :: net.ipv6.conf.vethd9a62a1.router_probe_interval = 60
12:24:08 :: net.ipv6.conf.vethd9a62a1.router_solicitation_delay = 1
12:24:08 :: net.ipv6.conf.vethd9a62a1.router_solicitation_interval = 4
12:24:08 :: net.ipv6.conf.vethd9a62a1.router_solicitation_max_interval = 3600
12:24:08 :: net.ipv6.conf.vethd9a62a1.router_solicitations = -1
12:24:08 :: net.ipv6.conf.vethd9a62a1.rpl_seg_enabled = 0
12:24:08 :: net.ipv6.conf.vethd9a62a1.seg6_enabled = 0
12:24:08 :: net.ipv6.conf.vethd9a62a1.seg6_require_hmac = 0
12:24:08 :: net.ipv6.conf.vethd9a62a1.suppress_frag_ndisc = 1
12:24:08 :: net.ipv6.conf.vethd9a62a1.temp_prefered_lft = 86400
12:24:08 :: net.ipv6.conf.vethd9a62a1.temp_valid_lft = 604800
12:24:08 :: net.ipv6.conf.vethd9a62a1.use_oif_addrs_only = 0
12:24:08 :: net.ipv6.conf.vethd9a62a1.use_tempaddr = 0
12:24:08 :: net.ipv6.conf.virbr0.accept_dad = 1
12:24:08 :: net.ipv6.conf.virbr0.accept_ra = 0
12:24:08 :: net.ipv6.conf.virbr0.accept_ra_defrtr = 1
12:24:08 :: net.ipv6.conf.virbr0.accept_ra_from_local = 0
12:24:08 :: net.ipv6.conf.virbr0.accept_ra_min_hop_limit = 1
12:24:08 :: net.ipv6.conf.virbr0.accept_ra_min_lft = 0
12:24:08 :: net.ipv6.conf.virbr0.accept_ra_mtu = 1
12:24:08 :: net.ipv6.conf.virbr0.accept_ra_pinfo = 1
12:24:08 :: net.ipv6.conf.virbr0.accept_ra_rt_info_max_plen = 0
12:24:08 :: net.ipv6.conf.virbr0.accept_ra_rt_info_min_plen = 0
12:24:08 :: net.ipv6.conf.virbr0.accept_ra_rtr_pref = 1
12:24:08 :: net.ipv6.conf.virbr0.accept_redirects = 1
12:24:08 :: net.ipv6.conf.virbr0.accept_source_route = 0
12:24:08 :: net.ipv6.conf.virbr0.accept_untracked_na = 0
12:24:08 :: net.ipv6.conf.virbr0.addr_gen_mode = 0
12:24:08 :: net.ipv6.conf.virbr0.autoconf = 0
12:24:08 :: net.ipv6.conf.virbr0.dad_transmits = 1
12:24:08 :: net.ipv6.conf.virbr0.disable_ipv6 = 1
12:24:08 :: net.ipv6.conf.virbr0.disable_policy = 0
12:24:08 :: net.ipv6.conf.virbr0.drop_unicast_in_l2_multicast = 0
12:24:08 :: net.ipv6.conf.virbr0.drop_unsolicited_na = 0
12:24:08 :: net.ipv6.conf.virbr0.enhanced_dad = 1
12:24:08 :: net.ipv6.conf.virbr0.force_mld_version = 0
12:24:08 :: net.ipv6.conf.virbr0.force_tllao = 0
12:24:08 :: net.ipv6.conf.virbr0.forwarding = 0
12:24:08 :: net.ipv6.conf.virbr0.hop_limit = 64
12:24:08 :: net.ipv6.conf.virbr0.ignore_routes_with_linkdown = 0
12:24:08 :: net.ipv6.conf.virbr0.ioam6_enabled = 0
12:24:08 :: net.ipv6.conf.virbr0.ioam6_id = 65535
12:24:08 :: net.ipv6.conf.virbr0.ioam6_id_wide = 4294967295
12:24:08 :: net.ipv6.conf.virbr0.keep_addr_on_down = 0
12:24:08 :: net.ipv6.conf.virbr0.max_addresses = 16
12:24:08 :: net.ipv6.conf.virbr0.max_desync_factor = 600
12:24:08 :: net.ipv6.conf.virbr0.mc_forwarding = 0
12:24:08 :: net.ipv6.conf.virbr0.mldv1_unsolicited_report_interval = 10000
12:24:08 :: net.ipv6.conf.virbr0.mldv2_unsolicited_report_interval = 1000
12:24:08 :: net.ipv6.conf.virbr0.mtu = 1500
12:24:08 :: net.ipv6.conf.virbr0.ndisc_evict_nocarrier = 1
12:24:08 :: net.ipv6.conf.virbr0.ndisc_notify = 0
12:24:08 :: net.ipv6.conf.virbr0.ndisc_tclass = 0
12:24:08 :: net.ipv6.conf.virbr0.proxy_ndp = 0
12:24:08 :: net.ipv6.conf.virbr0.ra_defrtr_metric = 1024
12:24:08 :: net.ipv6.conf.virbr0.ra_honor_pio_life = 0
12:24:08 :: net.ipv6.conf.virbr0.regen_max_retry = 3
12:24:08 :: net.ipv6.conf.virbr0.router_probe_interval = 60
12:24:08 :: net.ipv6.conf.virbr0.router_solicitation_delay = 1
12:24:08 :: net.ipv6.conf.virbr0.router_solicitation_interval = 4
12:24:08 :: net.ipv6.conf.virbr0.router_solicitation_max_interval = 3600
12:24:08 :: net.ipv6.conf.virbr0.router_solicitations = -1
12:24:08 :: net.ipv6.conf.virbr0.rpl_seg_enabled = 0
12:24:08 :: net.ipv6.conf.virbr0.seg6_enabled = 0
12:24:08 :: net.ipv6.conf.virbr0.seg6_require_hmac = 0
12:24:08 :: net.ipv6.conf.virbr0.suppress_frag_ndisc = 1
12:24:08 :: net.ipv6.conf.virbr0.temp_prefered_lft = 86400
12:24:08 :: net.ipv6.conf.virbr0.temp_valid_lft = 604800
12:24:08 :: net.ipv6.conf.virbr0.use_oif_addrs_only = 0
12:24:08 :: net.ipv6.conf.virbr0.use_tempaddr = 0
12:24:08 :: net.ipv6.fib_multipath_hash_fields = 7
12:24:08 :: net.ipv6.fib_multipath_hash_policy = 0
12:24:08 :: net.ipv6.fib_notify_on_flag_change = 0
12:24:08 :: net.ipv6.flowlabel_consistency = 1
12:24:08 :: net.ipv6.flowlabel_reflect = 0
12:24:08 :: net.ipv6.flowlabel_state_ranges = 0
12:24:08 :: net.ipv6.fwmark_reflect = 0
12:24:08 :: net.ipv6.icmp.echo_ignore_all = 0
12:24:08 :: net.ipv6.icmp.echo_ignore_anycast = 0
12:24:08 :: net.ipv6.icmp.echo_ignore_multicast = 0
12:24:08 :: net.ipv6.icmp.error_anycast_as_unicast = 0
12:24:08 :: net.ipv6.icmp.ratelimit = 1000
12:24:08 :: net.ipv6.icmp.ratemask = 0-1,3-127
12:24:08 :: net.ipv6.idgen_delay = 1
12:24:08 :: net.ipv6.idgen_retries = 3
12:24:08 :: net.ipv6.ioam6_id = 16777215
12:24:08 :: net.ipv6.ioam6_id_wide = 72057594037927935
12:24:08 :: net.ipv6.ip6frag_high_thresh = 4194304
12:24:08 :: net.ipv6.ip6frag_low_thresh = 3145728
12:24:08 :: net.ipv6.ip6frag_secret_interval = 0
12:24:08 :: net.ipv6.ip6frag_time = 60
12:24:08 :: net.ipv6.ip_nonlocal_bind = 0
12:24:08 :: net.ipv6.max_dst_opts_length = 2147483647
12:24:08 :: net.ipv6.max_dst_opts_number = 8
12:24:08 :: net.ipv6.max_hbh_length = 2147483647
12:24:08 :: net.ipv6.max_hbh_opts_number = 8
12:24:08 :: net.ipv6.mld_max_msf = 64
12:24:08 :: net.ipv6.mld_qrv = 2
12:24:08 :: net.ipv6.neigh.default.anycast_delay = 100
12:24:08 :: net.ipv6.neigh.default.app_solicit = 0
12:24:08 :: net.ipv6.neigh.default.base_reachable_time_ms = 30000
12:24:08 :: net.ipv6.neigh.default.delay_first_probe_time = 5
12:24:08 :: net.ipv6.neigh.default.gc_interval = 30
12:24:08 :: net.ipv6.neigh.default.gc_stale_time = 60
12:24:08 :: net.ipv6.neigh.default.gc_thresh1 = 128
12:24:08 :: net.ipv6.neigh.default.gc_thresh2 = 512
12:24:08 :: net.ipv6.neigh.default.gc_thresh3 = 1024
12:24:08 :: net.ipv6.neigh.default.interval_probe_time_ms = 5000
12:24:08 :: net.ipv6.neigh.default.locktime = 0
12:24:08 :: net.ipv6.neigh.default.mcast_resolicit = 0
12:24:08 :: net.ipv6.neigh.default.mcast_solicit = 3
12:24:08 :: net.ipv6.neigh.default.proxy_delay = 80
12:24:08 :: net.ipv6.neigh.default.proxy_qlen = 64
12:24:08 :: net.ipv6.neigh.default.retrans_time_ms = 1000
12:24:08 :: net.ipv6.neigh.default.ucast_solicit = 3
12:24:08 :: net.ipv6.neigh.default.unres_qlen = 101
12:24:08 :: net.ipv6.neigh.default.unres_qlen_bytes = 212992
12:24:08 :: net.ipv6.neigh.docker0.anycast_delay = 100
12:24:08 :: net.ipv6.neigh.docker0.app_solicit = 0
12:24:08 :: net.ipv6.neigh.docker0.base_reachable_time_ms = 30000
12:24:08 :: net.ipv6.neigh.docker0.delay_first_probe_time = 5
12:24:08 :: net.ipv6.neigh.docker0.gc_stale_time = 60
12:24:08 :: net.ipv6.neigh.docker0.interval_probe_time_ms = 5000
12:24:08 :: net.ipv6.neigh.docker0.locktime = 0
12:24:08 :: net.ipv6.neigh.docker0.mcast_resolicit = 0
12:24:08 :: net.ipv6.neigh.docker0.mcast_solicit = 3
12:24:08 :: net.ipv6.neigh.docker0.proxy_delay = 80
12:24:08 :: net.ipv6.neigh.docker0.proxy_qlen = 64
12:24:08 :: net.ipv6.neigh.docker0.retrans_time_ms = 1000
12:24:08 :: net.ipv6.neigh.docker0.ucast_solicit = 3
12:24:08 :: net.ipv6.neigh.docker0.unres_qlen = 101
12:24:08 :: net.ipv6.neigh.docker0.unres_qlen_bytes = 212992
12:24:08 :: net.ipv6.neigh.enp0s3.anycast_delay = 100
12:24:08 :: net.ipv6.neigh.enp0s3.app_solicit = 0
12:24:08 :: net.ipv6.neigh.enp0s3.base_reachable_time_ms = 30000
12:24:08 :: net.ipv6.neigh.enp0s3.delay_first_probe_time = 5
12:24:08 :: net.ipv6.neigh.enp0s3.gc_stale_time = 60
12:24:08 :: net.ipv6.neigh.enp0s3.interval_probe_time_ms = 5000
12:24:08 :: net.ipv6.neigh.enp0s3.locktime = 0
12:24:08 :: net.ipv6.neigh.enp0s3.mcast_resolicit = 0
12:24:08 :: net.ipv6.neigh.enp0s3.mcast_solicit = 3
12:24:08 :: net.ipv6.neigh.enp0s3.proxy_delay = 80
12:24:08 :: net.ipv6.neigh.enp0s3.proxy_qlen = 64
12:24:08 :: net.ipv6.neigh.enp0s3.retrans_time_ms = 1000
12:24:08 :: net.ipv6.neigh.enp0s3.ucast_solicit = 3
12:24:08 :: net.ipv6.neigh.enp0s3.unres_qlen = 101
12:24:08 :: net.ipv6.neigh.enp0s3.unres_qlen_bytes = 212992
12:24:08 :: net.ipv6.neigh.lo.anycast_delay = 100
12:24:08 :: net.ipv6.neigh.lo.app_solicit = 0
12:24:08 :: net.ipv6.neigh.lo.base_reachable_time_ms = 30000
12:24:08 :: net.ipv6.neigh.lo.delay_first_probe_time = 5
12:24:08 :: net.ipv6.neigh.lo.gc_stale_time = 60
12:24:08 :: net.ipv6.neigh.lo.interval_probe_time_ms = 5000
12:24:08 :: net.ipv6.neigh.lo.locktime = 0
12:24:08 :: net.ipv6.neigh.lo.mcast_resolicit = 0
12:24:08 :: net.ipv6.neigh.lo.mcast_solicit = 3
12:24:08 :: net.ipv6.neigh.lo.proxy_delay = 80
12:24:08 :: net.ipv6.neigh.lo.proxy_qlen = 64
12:24:08 :: net.ipv6.neigh.lo.retrans_time_ms = 1000
12:24:08 :: net.ipv6.neigh.lo.ucast_solicit = 3
12:24:08 :: net.ipv6.neigh.lo.unres_qlen = 101
12:24:08 :: net.ipv6.neigh.lo.unres_qlen_bytes = 212992
12:24:08 :: net.ipv6.neigh.vethd9a62a1.anycast_delay = 100
12:24:08 :: net.ipv6.neigh.vethd9a62a1.app_solicit = 0
12:24:08 :: net.ipv6.neigh.vethd9a62a1.base_reachable_time_ms = 30000
12:24:08 :: net.ipv6.neigh.vethd9a62a1.delay_first_probe_time = 5
12:24:08 :: net.ipv6.neigh.vethd9a62a1.gc_stale_time = 60
12:24:08 :: net.ipv6.neigh.vethd9a62a1.interval_probe_time_ms = 5000
12:24:08 :: net.ipv6.neigh.vethd9a62a1.locktime = 0
12:24:08 :: net.ipv6.neigh.vethd9a62a1.mcast_resolicit = 0
12:24:08 :: net.ipv6.neigh.vethd9a62a1.mcast_solicit = 3
12:24:08 :: net.ipv6.neigh.vethd9a62a1.proxy_delay = 80
12:24:08 :: net.ipv6.neigh.vethd9a62a1.proxy_qlen = 64
12:24:08 :: net.ipv6.neigh.vethd9a62a1.retrans_time_ms = 1000
12:24:08 :: net.ipv6.neigh.vethd9a62a1.ucast_solicit = 3
12:24:08 :: net.ipv6.neigh.vethd9a62a1.unres_qlen = 101
12:24:08 :: net.ipv6.neigh.vethd9a62a1.unres_qlen_bytes = 212992
12:24:08 :: net.ipv6.neigh.virbr0.anycast_delay = 100
12:24:08 :: net.ipv6.neigh.virbr0.app_solicit = 0
12:24:08 :: net.ipv6.neigh.virbr0.base_reachable_time_ms = 30000
12:24:08 :: net.ipv6.neigh.virbr0.delay_first_probe_time = 5
12:24:08 :: net.ipv6.neigh.virbr0.gc_stale_time = 60
12:24:08 :: net.ipv6.neigh.virbr0.interval_probe_time_ms = 5000
12:24:08 :: net.ipv6.neigh.virbr0.locktime = 0
12:24:08 :: net.ipv6.neigh.virbr0.mcast_resolicit = 0
12:24:08 :: net.ipv6.neigh.virbr0.mcast_solicit = 3
12:24:08 :: net.ipv6.neigh.virbr0.proxy_delay = 80
12:24:08 :: net.ipv6.neigh.virbr0.proxy_qlen = 64
12:24:08 :: net.ipv6.neigh.virbr0.retrans_time_ms = 1000
12:24:08 :: net.ipv6.neigh.virbr0.ucast_solicit = 3
12:24:08 :: net.ipv6.neigh.virbr0.unres_qlen = 101
12:24:08 :: net.ipv6.neigh.virbr0.unres_qlen_bytes = 212992
12:24:08 :: net.ipv6.route.gc_elasticity = 9
12:24:08 :: net.ipv6.route.gc_interval = 30
12:24:08 :: net.ipv6.route.gc_min_interval = 0
12:24:08 :: net.ipv6.route.gc_min_interval_ms = 500
12:24:08 :: net.ipv6.route.gc_thresh = 1024
12:24:08 :: net.ipv6.route.gc_timeout = 60
12:24:08 :: net.ipv6.route.max_size = 2147483647
12:24:08 :: net.ipv6.route.min_adv_mss = 1220
12:24:08 :: net.ipv6.route.mtu_expires = 600
12:24:08 :: net.ipv6.route.skip_notify_on_dev_down = 0
12:24:08 :: net.ipv6.seg6_flowlabel = 0
12:24:08 :: net.ipv6.xfrm6_gc_thresh = 32768
12:24:08 :: net.mptcp.add_addr_timeout = 120
12:24:08 :: net.mptcp.allow_join_initial_addr_port = 1
12:24:08 :: net.mptcp.checksum_enabled = 0
12:24:08 :: net.mptcp.close_timeout = 60
12:24:08 :: net.mptcp.enabled = 1
12:24:08 :: net.mptcp.pm_type = 0
12:24:08 :: net.mptcp.scheduler = default
12:24:08 :: net.mptcp.stale_loss_cnt = 4
12:24:08 :: net.netfilter.nf_conntrack_acct = 0
12:24:08 :: net.netfilter.nf_conntrack_buckets = 262144
12:24:08 :: net.netfilter.nf_conntrack_checksum = 1
12:24:08 :: net.netfilter.nf_conntrack_count = 225
12:24:08 :: net.netfilter.nf_conntrack_dccp_loose = 1
12:24:08 :: net.netfilter.nf_conntrack_dccp_timeout_closereq = 64
12:24:08 :: net.netfilter.nf_conntrack_dccp_timeout_closing = 64
12:24:08 :: net.netfilter.nf_conntrack_dccp_timeout_open = 43200
12:24:08 :: net.netfilter.nf_conntrack_dccp_timeout_partopen = 480
12:24:08 :: net.netfilter.nf_conntrack_dccp_timeout_request = 240
12:24:08 :: net.netfilter.nf_conntrack_dccp_timeout_respond = 480
12:24:08 :: net.netfilter.nf_conntrack_dccp_timeout_timewait = 240
12:24:08 :: net.netfilter.nf_conntrack_events = 2
12:24:08 :: net.netfilter.nf_conntrack_expect_max = 4096
12:24:08 :: net.netfilter.nf_conntrack_frag6_high_thresh = 4194304
12:24:08 :: net.netfilter.nf_conntrack_frag6_low_thresh = 3145728
12:24:08 :: net.netfilter.nf_conntrack_frag6_timeout = 60
12:24:08 :: net.netfilter.nf_conntrack_generic_timeout = 600
12:24:08 :: net.netfilter.nf_conntrack_gre_timeout = 30
12:24:08 :: net.netfilter.nf_conntrack_gre_timeout_stream = 180
12:24:08 :: net.netfilter.nf_conntrack_icmp_timeout = 30
12:24:08 :: net.netfilter.nf_conntrack_icmpv6_timeout = 30
12:24:08 :: net.netfilter.nf_conntrack_log_invalid = 0
12:24:08 :: net.netfilter.nf_conntrack_max = 262144
12:24:08 :: net.netfilter.nf_conntrack_sctp_timeout_closed = 10
12:24:08 :: net.netfilter.nf_conntrack_sctp_timeout_cookie_echoed = 3
12:24:08 :: net.netfilter.nf_conntrack_sctp_timeout_cookie_wait = 3
12:24:08 :: net.netfilter.nf_conntrack_sctp_timeout_established = 210
12:24:08 :: net.netfilter.nf_conntrack_sctp_timeout_heartbeat_sent = 30
12:24:08 :: net.netfilter.nf_conntrack_sctp_timeout_shutdown_ack_sent = 3
12:24:08 :: net.netfilter.nf_conntrack_sctp_timeout_shutdown_recd = 3
12:24:08 :: net.netfilter.nf_conntrack_sctp_timeout_shutdown_sent = 3
12:24:08 :: net.netfilter.nf_conntrack_tcp_be_liberal = 0
12:24:08 :: net.netfilter.nf_conntrack_tcp_ignore_invalid_rst = 0
12:24:08 :: net.netfilter.nf_conntrack_tcp_loose = 1
12:24:08 :: net.netfilter.nf_conntrack_tcp_max_retrans = 3
12:24:08 :: net.netfilter.nf_conntrack_tcp_timeout_close = 10
12:24:08 :: net.netfilter.nf_conntrack_tcp_timeout_close_wait = 60
12:24:08 :: net.netfilter.nf_conntrack_tcp_timeout_established = 432000
12:24:08 :: net.netfilter.nf_conntrack_tcp_timeout_fin_wait = 120
12:24:08 :: net.netfilter.nf_conntrack_tcp_timeout_last_ack = 30
12:24:08 :: net.netfilter.nf_conntrack_tcp_timeout_max_retrans = 300
12:24:08 :: net.netfilter.nf_conntrack_tcp_timeout_syn_recv = 60
12:24:08 :: net.netfilter.nf_conntrack_tcp_timeout_syn_sent = 120
12:24:08 :: net.netfilter.nf_conntrack_tcp_timeout_time_wait = 120
12:24:08 :: net.netfilter.nf_conntrack_tcp_timeout_unacknowledged = 300
12:24:08 :: net.netfilter.nf_conntrack_timestamp = 0
12:24:08 :: net.netfilter.nf_conntrack_udp_timeout = 30
12:24:08 :: net.netfilter.nf_conntrack_udp_timeout_stream = 120
12:24:08 :: net.netfilter.nf_flowtable_tcp_timeout = 30
12:24:08 :: net.netfilter.nf_flowtable_udp_timeout = 30
12:24:08 :: net.netfilter.nf_hooks_lwtunnel = 0
12:24:08 :: net.netfilter.nf_log.0 = NONE
12:24:08 :: net.netfilter.nf_log.1 = NONE
12:24:08 :: net.netfilter.nf_log.10 = NONE
12:24:08 :: net.netfilter.nf_log.2 = NONE
12:24:08 :: net.netfilter.nf_log.3 = NONE
12:24:08 :: net.netfilter.nf_log.4 = NONE
12:24:08 :: net.netfilter.nf_log.5 = NONE
12:24:08 :: net.netfilter.nf_log.6 = NONE
12:24:08 :: net.netfilter.nf_log.7 = NONE
12:24:08 :: net.netfilter.nf_log.8 = NONE
12:24:08 :: net.netfilter.nf_log.9 = NONE
12:24:08 :: net.netfilter.nf_log_all_netns = 0
12:24:08 :: net.nf_conntrack_max = 262144
12:24:08 :: net.unix.max_dgram_qlen = 512
12:24:08 :: sunrpc.max_resvport = 1023
12:24:08 :: sunrpc.min_resvport = 665
12:24:08 :: sunrpc.nfs_debug = 0x0000
12:24:08 :: sunrpc.nfsd_debug = 0x0000
12:24:08 :: sunrpc.nlm_debug = 0x0000
12:24:08 :: sunrpc.rpc_debug = 0x0000
12:24:08 :: sunrpc.tcp_fin_timeout = 15
12:24:08 :: sunrpc.tcp_max_slot_table_entries = 65536
12:24:08 :: sunrpc.tcp_slot_table_entries = 2
12:24:08 :: sunrpc.transports = tcp 1048576
12:24:08 :: sunrpc.transports = udp 32768
12:24:08 :: sunrpc.udp_slot_table_entries = 16
12:24:08 :: user.max_cgroup_namespaces = 95620
12:24:08 :: user.max_fanotify_groups = 128
12:24:08 :: user.max_fanotify_marks = 198574
12:24:08 :: user.max_inotify_instances = 128
12:24:08 :: user.max_inotify_watches = 186755
12:24:08 :: user.max_ipc_namespaces = 95620
12:24:08 :: user.max_mnt_namespaces = 95620
12:24:08 :: user.max_net_namespaces = 95620
12:24:08 :: user.max_pid_namespaces = 95620
12:24:08 :: user.max_time_namespaces = 95620
12:24:08 :: user.max_user_namespaces = 95620
12:24:08 :: user.max_uts_namespaces = 95620
12:24:08 :: vm.admin_reserve_kbytes = 8192
12:24:08 :: vm.compact_unevictable_allowed = 1
12:24:08 :: vm.compaction_proactiveness = 20
12:24:08 :: vm.dirty_background_bytes = 0
12:24:08 :: vm.dirty_background_ratio = 10
12:24:08 :: vm.dirty_bytes = 0
12:24:08 :: vm.dirty_expire_centisecs = 3000
12:24:08 :: vm.dirty_ratio = 20
12:24:08 :: vm.dirty_writeback_centisecs = 500
12:24:08 :: vm.dirtytime_expire_seconds = 43200
12:24:08 :: vm.extfrag_threshold = 500
12:24:08 :: vm.hugetlb_shm_group = 0
12:24:08 :: vm.laptop_mode = 0
12:24:08 :: vm.legacy_va_layout = 0
12:24:08 :: vm.lowmem_reserve_ratio = 256 256 32 0 0
12:24:08 :: vm.max_map_count = 65530
12:24:08 :: vm.memfd_noexec = 0
12:24:08 :: vm.memory_failure_early_kill = 0
12:24:08 :: vm.memory_failure_recovery = 1
12:24:08 :: vm.min_free_kbytes = 45056
12:24:08 :: vm.min_slab_ratio = 5
12:24:08 :: vm.min_unmapped_ratio = 1
12:24:08 :: vm.mmap_min_addr = 32768
12:24:08 :: vm.mmap_rnd_bits = 33
12:24:08 :: vm.mmap_rnd_compat_bits = 16
12:24:08 :: vm.nr_hugepages = 0
12:24:08 :: vm.nr_hugepages_mempolicy = 0
12:24:08 :: vm.nr_overcommit_hugepages = 0
12:24:08 :: vm.numa_stat = 1
12:24:08 :: vm.numa_zonelist_order = Node
12:24:08 :: vm.oom_dump_tasks = 1
12:24:08 :: vm.oom_kill_allocating_task = 0
12:24:08 :: vm.overcommit_kbytes = 0
12:24:08 :: vm.overcommit_memory = 0
12:24:08 :: vm.overcommit_ratio = 50
12:24:08 :: vm.page-cluster = 3
12:24:08 :: vm.page_lock_unfairness = 5
12:24:08 :: vm.panic_on_oom = 0
12:24:08 :: vm.percpu_pagelist_high_fraction = 0
12:24:08 :: vm.stat_interval = 1
12:24:08 :: vm.swappiness = 60
12:24:08 :: vm.unprivileged_userfaultfd = 0
12:24:08 :: vm.user_reserve_kbytes = 131072
12:24:08 :: vm.vfs_cache_pressure = 100
12:24:08 :: vm.watermark_boost_factor = 15000
12:24:08 :: vm.watermark_scale_factor = 10
12:24:08 :: vm.zone_reclaim_mode = 0
12:24:08 ::
[task check]
# Enable TCP SYN cookies (net.ipv4.tcp_syncookies = 1)
stdout match <^^ \s* net\.ipv4\.tcp_syncookies \s* \= \s* 1 \s* $$> True
# Disable IP forwarding (net.ipv4.ip_forward = 0)
stdout match <^^ \s* net\.ipv4\.ip_forward \s* \= \s* 0 \s* $$> False
# Enable reverse path filtering on all interfaces - 0 is acceptable when default is 2 (net.ipv4.conf.all.rp_filter = 0)
stdout match <^^ \s* net\.ipv4\.conf\.all\.rp_filter \s* \= \s* [0|1|2] \s* $$> True
# Enable strict reverse path filtering on default interface - must be 2 for secure defaults (net.ipv4.conf.default.rp_filter = 2)
stdout match <^^ \s* net\.ipv4\.conf\.default\.rp_filter \s* \= \s* 2 \s* $$> True
# Ignore ICMP redirects on all interfaces (net.ipv4.conf.all.accept_redirects = 0)
stdout match <^^ \s* net\.ipv4\.conf\.all\.accept_redirects \s* \= \s* 0 \s* $$> True
# Ignore ICMP redirects on default interface (net.ipv4.conf.default.accept_redirects = 0)
stdout match <^^ \s* net\.ipv4\.conf\.default\.accept_redirects \s* \= \s* 0 \s* $$> False
# Log martian packets (net.ipv4.conf.all.log_martians = 1)
stdout match <^^ \s* net\.ipv4\.conf\.all\.log_martians \s* \= \s* 1 \s* $$> False
# Restrict access to kernel logs (kernel.dmesg_restrict = 1)
stdout match <^^ \s* kernel\.dmesg_restrict \s* \= \s* 1 \s* $$> True
# Disable unprivileged BPF (kernel.unprivileged_bpf_disabled = 2)
stdout match <^^ \s* kernel\.unprivileged_bpf_disabled \s* \= \s* 2 \s* $$> True
# Disable unprivileged user namespaces (kernel.unprivileged_userns_clone = 0)
stdout match <^^ \s* kernel\.unprivileged_userns_clone \s* \= \s* 0 \s* $$> False
# Restrict ptrace scope - 1 or 2 acceptable (kernel.yama.ptrace_scope = 1|2)
stdout match <^^ \s* kernel\.yama\.ptrace_scope \s* \= \s* [1|2] \s* $$> True
# Protect hardlinks against race conditions (fs.protected_hardlinks = 1)
stdout match <^^ \s* fs\.protected_hardlinks \s* \= \s* 1 \s* $$> True
# Protect symlinks against race conditions (fs.protected_symlinks = 1)
stdout match <^^ \s* fs\.protected_symlinks \s* \= \s* 1 \s* $$> True
# Protect FIFOs against opening in sticky directories (fs.protected_fifos = 1)
stdout match <^^ \s* fs\.protected_fifos \s* \= \s* 1 \s* $$> True
# Protect regular files against opening in sticky directories (fs.protected_regular = 2)
stdout match <^^ \s* fs\.protected_regular \s* \= \s* 2 \s* $$> True
=================
TASK CHECK FAIL
Sudoers
$ sudo cat /etc/sudoers | s6 --plg-run scc@check=sudoers
12:25:00 :: [task] - run plg scc@check=sudoers
12:25:00 :: [task] - run [scc], thing: scc@check=sudoers
[task run: task.bash - scc]
[task stdout]
12:25:00 :: #
12:25:00 :: # This file MUST be edited with the 'visudo' command as root.
12:25:00 :: #
12:25:00 :: # Please consider adding local content in /etc/sudoers.d/ instead of
12:25:00 :: # directly modifying this file.
12:25:00 :: #
12:25:00 :: # See the man page for details on how to write a sudoers file.
12:25:00 :: #
12:25:00 :: Defaults env_reset
12:25:00 :: Defaults mail_badpass
12:25:00 :: Defaults secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin"
12:25:00 :: Defaults use_pty
12:25:00 ::
12:25:00 :: # This preserves proxy settings from user environments of root
12:25:00 :: # equivalent users (group sudo)
12:25:00 :: #Defaults:%sudo env_keep += "http_proxy https_proxy ftp_proxy all_proxy no_proxy"
12:25:00 ::
12:25:00 :: # This allows running arbitrary commands, but so does ALL, and it means
12:25:00 :: # different sudoers have their choice of editor respected.
12:25:00 :: #Defaults:%sudo env_keep += "EDITOR"
12:25:00 ::
12:25:00 :: # Completely harmless preservation of a user preference.
12:25:00 :: #Defaults:%sudo env_keep += "GREP_COLOR"
12:25:00 ::
12:25:00 :: # While you shouldn't normally run git as root, you need to with etckeeper
12:25:00 :: #Defaults:%sudo env_keep += "GIT_AUTHOR_* GIT_COMMITTER_*"
12:25:00 ::
12:25:00 :: # Per-user preferences; root won't have sensible values for them.
12:25:00 :: #Defaults:%sudo env_keep += "EMAIL DEBEMAIL DEBFULLNAME"
12:25:00 ::
12:25:00 :: # "sudo scp" or "sudo rsync" should be able to use your SSH agent.
12:25:00 :: #Defaults:%sudo env_keep += "SSH_AGENT_PID SSH_AUTH_SOCK"
12:25:00 ::
12:25:00 :: # Ditto for GPG agent
12:25:00 :: #Defaults:%sudo env_keep += "GPG_AGENT_INFO"
12:25:00 ::
12:25:00 :: # Host alias specification
12:25:00 ::
12:25:00 :: # User alias specification
12:25:00 ::
12:25:00 :: # Cmnd alias specification
12:25:00 ::
12:25:00 :: # User privilege specification
12:25:00 :: root ALL=(ALL:ALL) ALL
12:25:00 ::
12:25:00 :: # Members of the admin group may gain root privileges
12:25:00 :: %admin ALL=(ALL) ALL
12:25:00 ::
12:25:00 :: # Allow members of group sudo to execute any command
12:25:00 :: %sudo ALL=(ALL:ALL) ALL
12:25:00 ::
12:25:00 :: # See sudoers(5) for more information on "@include" directives:
12:25:00 ::
12:25:00 :: @includedir /etc/sudoers.d
12:25:00 ::
[task check]
<passwordless sudo is disabled> True
<Defaults requiretty is not set - unsecure tty handling> False
<Defaults env_reset is set> True
<Defaults secure_path may be insecure - "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin"> False
<Defaults mail_badpass is set> True
<Defaults logfile is not configured - sudo actions not logged> False
<Defaults rootpw is not set - using user's own password> True
<Defaults insults is not enabled> True
<Defaults timestamp_timeout is not set - using default> True
<unrestricted sudo access found - ALL=(ALL) ALL> False
<no commented-out dangerous directives found> True
<Defaults lecture is not configured> False
=================
TASK CHECK FAIL
Sshd
$ sudo sshd -T | s6 --plg-run scc@check=sshd
12:25:47 :: [task] - run plg scc@check=sshd
12:25:47 :: [task] - run [scc], thing: scc@check=sshd
[task run: task.bash - scc]
[task stdout]
12:25:47 :: port 22
12:25:47 :: addressfamily any
12:25:47 :: listenaddress [::]:22
12:25:47 :: listenaddress 0.0.0.0:22
12:25:47 :: usepam yes
12:25:47 :: logingracetime 120
12:25:47 :: x11displayoffset 10
12:25:47 :: maxauthtries 6
12:25:47 :: maxsessions 10
12:25:47 :: clientaliveinterval 0
12:25:47 :: clientalivecountmax 3
12:25:47 :: streamlocalbindmask 0177
12:25:47 :: permitrootlogin without-password
12:25:47 :: ignorerhosts yes
12:25:47 :: ignoreuserknownhosts no
12:25:47 :: hostbasedauthentication no
12:25:47 :: hostbasedusesnamefrompacketonly no
12:25:47 :: pubkeyauthentication yes
12:25:47 :: kerberosauthentication no
12:25:47 :: kerberosorlocalpasswd yes
12:25:47 :: kerberosticketcleanup yes
12:25:47 :: gssapiauthentication no
12:25:47 :: gssapicleanupcredentials yes
12:25:47 :: gssapikeyexchange no
12:25:47 :: gssapistrictacceptorcheck yes
12:25:47 :: gssapistorecredentialsonrekey no
12:25:47 :: gssapikexalgorithms gss-group14-sha256-,gss-group16-sha512-,gss-nistp256-sha256-,gss-curve25519-sha256-,gss-group14-sha1-,gss-gex-sha1-
12:25:47 :: passwordauthentication no
12:25:47 :: kbdinteractiveauthentication no
12:25:47 :: printmotd no
12:25:47 :: printlastlog yes
12:25:47 :: x11forwarding yes
12:25:47 :: x11uselocalhost yes
12:25:47 :: permittty yes
12:25:47 :: permituserrc yes
12:25:47 :: strictmodes yes
12:25:47 :: tcpkeepalive yes
12:25:47 :: permitemptypasswords no
12:25:47 :: compression yes
12:25:47 :: gatewayports no
12:25:47 :: usedns no
12:25:47 :: allowtcpforwarding yes
12:25:47 :: allowagentforwarding yes
12:25:47 :: disableforwarding no
12:25:47 :: allowstreamlocalforwarding yes
12:25:47 :: streamlocalbindunlink no
12:25:47 :: fingerprinthash SHA256
12:25:47 :: exposeauthinfo no
12:25:47 :: pidfile /run/sshd.pid
12:25:47 :: modulifile /etc/ssh/moduli
12:25:47 :: xauthlocation /usr/bin/xauth
12:25:47 :: ciphers chacha20-poly1305@openssh.com,aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com
12:25:47 :: macs umac-64-etm@openssh.com,umac-128-etm@openssh.com,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1-etm@openssh.com,umac-64@openssh.com,umac-128@openssh.com,hmac-sha2-256,hmac-sha2-512,hmac-sha1
12:25:47 :: banner none
12:25:47 :: forcecommand none
12:25:47 :: chrootdirectory none
12:25:47 :: trustedusercakeys none
12:25:47 :: revokedkeys none
12:25:47 :: securitykeyprovider internal
12:25:47 :: authorizedprincipalsfile none
12:25:47 :: versionaddendum none
12:25:47 :: authorizedkeyscommand none
12:25:47 :: authorizedkeyscommanduser none
12:25:47 :: authorizedprincipalscommand none
12:25:47 :: authorizedprincipalscommanduser none
12:25:47 :: hostkeyagent none
12:25:47 :: kexalgorithms curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,sntrup761x25519-sha512@openssh.com,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256
12:25:47 :: casignaturealgorithms ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256
12:25:47 :: hostbasedacceptedalgorithms ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256
12:25:47 :: hostkeyalgorithms ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256
12:25:47 :: pubkeyacceptedalgorithms ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com,rsa-sha2-512,rsa-sha2-256
12:25:47 :: loglevel INFO
12:25:47 :: syslogfacility AUTH
12:25:47 :: authorizedkeysfile .ssh/authorized_keys .ssh/authorized_keys2
12:25:47 :: hostkey /etc/ssh/ssh_host_rsa_key
12:25:47 :: hostkey /etc/ssh/ssh_host_ecdsa_key
12:25:47 :: hostkey /etc/ssh/ssh_host_ed25519_key
12:25:47 :: acceptenv LANG
12:25:47 :: acceptenv LC_*
12:25:47 :: authenticationmethods any
12:25:47 :: subsystem sftp /usr/lib/openssh/sftp-server
12:25:47 :: maxstartups 10:30:100
12:25:47 :: persourcemaxstartups none
12:25:47 :: persourcenetblocksize 32:128
12:25:47 :: permittunnel no
12:25:47 :: ipqos lowdelay throughput
12:25:47 :: rekeylimit 0 0
12:25:47 :: permitopen any
12:25:47 :: permitlisten any
12:25:47 :: permituserenvironment no
12:25:47 :: pubkeyauthoptions none
12:25:47 ::
[task check]
<port is valid (22)> True
<ListenAddress found ([::]:22)> True
<PermitRootLogin not set> False
<PasswordAuthentication disabled> True
<PubkeyAuthentication enabled> True
<MaxAuthTries <= 6 (6)> True
<MaxSessions <= 10 (10)> True
<LoginGraceTime not found> False
<empty passwords forbidden> True
<X11Forwarding is yes> False
<ClientAliveInterval is 0 (should be >0)> False
<ClientAliveCountMax 3 (<=3)> True
<UseDNS disabled> True
<strong cipher present> True
<strong MAC present> True
<DH KEX found> True
<HostKey defined (/etc/ssh/ssh_host_rsa_key)> True
<SyslogFacility AUTH> True
<LogLevel INFO> True
<AllowUsers not set (open to all)> False
<AllowGroups not set> False
<sftp subsystem defined (/usr/lib/openssh/sftp-server)> True
<Banner file none> True
<neither AllowUsers nor AllowGroups is set> False
=================
TASK CHECK FAIL
Top comments (0)