Sep  3 13:08:59 ip-172-16-3-10 useradd[893]: new group: name=rocky, GID=1000
Sep  3 13:08:59 ip-172-16-3-10 useradd[893]: new user: name=rocky, UID=1000, GID=1000, home=/home/rocky, shell=/bin/bash, from=none
Sep  3 13:08:59 ip-172-16-3-10 useradd[893]: add 'rocky' to group 'adm'
Sep  3 13:08:59 ip-172-16-3-10 useradd[893]: add 'rocky' to group 'systemd-journal'
Sep  3 13:08:59 ip-172-16-3-10 useradd[893]: add 'rocky' to shadow group 'adm'
Sep  3 13:08:59 ip-172-16-3-10 useradd[893]: add 'rocky' to shadow group 'systemd-journal'
Sep  3 13:09:00 ip-172-16-3-10 sshd[918]: Server listening on 0.0.0.0 port 22.
Sep  3 13:09:00 ip-172-16-3-10 sshd[918]: Server listening on :: port 22.
Sep  3 13:09:07 ip-172-16-3-10 sshd-session[2321]: Accepted publickey for rocky from 172.16.0.143 port 43390 ssh2: ED25519 SHA256:OBWBPoDNvbh4mbDy3i6fHnCrYINjEbKbR+Zz4TOtFIo
Sep  3 13:09:07 ip-172-16-3-10 systemd[2388]: pam_unix(systemd-user:session): session opened for user rocky(uid=1000) by rocky(uid=0)
Sep  3 13:09:07 ip-172-16-3-10 sshd-session[2321]: pam_unix(sshd:session): session opened for user rocky(uid=1000) by rocky(uid=0)
Sep  3 13:09:09 ip-172-16-3-10 sshd-session[2690]: Accepted publickey for rocky from 172.16.0.143 port 41944 ssh2: ED25519 SHA256:OBWBPoDNvbh4mbDy3i6fHnCrYINjEbKbR+Zz4TOtFIo
Sep  3 13:09:09 ip-172-16-3-10 sshd-session[2690]: pam_unix(sshd:session): session opened for user rocky(uid=1000) by rocky(uid=0)
Sep  3 13:09:10 ip-172-16-3-10 sshd-session[2862]: Accepted publickey for rocky from 172.16.0.143 port 41954 ssh2: ED25519 SHA256:OBWBPoDNvbh4mbDy3i6fHnCrYINjEbKbR+Zz4TOtFIo
Sep  3 13:09:10 ip-172-16-3-10 sshd-session[2862]: pam_unix(sshd:session): session opened for user rocky(uid=1000) by rocky(uid=0)
Sep  3 13:09:10 ip-172-16-3-10 sudo[3174]:   rocky : TTY=pts/0 ; PWD=/home/rocky ; USER=root ; COMMAND=/bin/bash /tmp/salt/wait_for_salt.sh
Sep  3 13:09:10 ip-172-16-3-10 sudo[3174]: pam_unix(sudo:session): session opened for user root(uid=0) by rocky(uid=1000)
Sep  3 13:09:57 ip-172-16-3-10 sshd[918]: Received signal 15; terminating.
Sep  3 13:09:58 ip-172-16-3-10 sshd[4857]: Server listening on 0.0.0.0 port 22.
Sep  3 13:09:58 ip-172-16-3-10 sshd[4857]: Server listening on :: port 22.
Sep  3 13:10:07 ip-172-16-3-10 sudo[3174]: pam_unix(sudo:session): session closed for user root
Sep  3 13:10:08 ip-172-16-3-10 sshd-session[4905]: Accepted publickey for rocky from 172.16.0.143 port 42518 ssh2: ED25519 SHA256:OBWBPoDNvbh4mbDy3i6fHnCrYINjEbKbR+Zz4TOtFIo
Sep  3 13:10:08 ip-172-16-3-10 sshd-session[4905]: pam_unix(sshd:session): session opened for user rocky(uid=1000) by rocky(uid=0)
Sep  3 13:10:08 ip-172-16-3-10 sudo[4984]:   rocky : TTY=pts/0 ; PWD=/home/rocky ; USER=root ; COMMAND=/bin/rm -rf /root/salt
Sep  3 13:10:08 ip-172-16-3-10 sudo[4984]: pam_unix(sudo:session): session opened for user root(uid=0) by rocky(uid=1000)
Sep  3 13:10:08 ip-172-16-3-10 sudo[4984]: pam_unix(sudo:session): session closed for user root
Sep  3 13:10:08 ip-172-16-3-10 sudo[4988]:   rocky : TTY=pts/0 ; PWD=/home/rocky ; USER=root ; COMMAND=/bin/mv /tmp/salt /root
Sep  3 13:10:08 ip-172-16-3-10 sudo[4988]: pam_unix(sudo:session): session opened for user root(uid=0) by rocky(uid=1000)
Sep  3 13:10:08 ip-172-16-3-10 sudo[4988]: pam_unix(sudo:session): session closed for user root
Sep  3 13:10:08 ip-172-16-3-10 sudo[4992]:   rocky : TTY=pts/0 ; PWD=/home/rocky ; USER=root ; COMMAND=/bin/bash /root/salt/first_deployment_highstate.sh
Sep  3 13:10:08 ip-172-16-3-10 sudo[4992]: pam_unix(sudo:session): session opened for user root(uid=0) by rocky(uid=1000)
Sep  3 13:10:16 ip-172-16-3-10 groupadd[5071]: group added to /etc/group: name=admin, GID=994
Sep  3 13:10:16 ip-172-16-3-10 groupadd[5071]: group added to /etc/gshadow: name=admin
Sep  3 13:10:16 ip-172-16-3-10 groupadd[5071]: new group: name=admin, GID=994
Sep  3 13:10:16 ip-172-16-3-10 useradd[5077]: new user: name=admin, UID=1001, GID=994, home=/home/admin, shell=/bin/bash, from=/dev/pts/1
Sep  3 13:11:50 ip-172-16-3-10 sudo[4992]: pam_unix(sudo:session): session closed for user root
Sep  3 13:26:53 ip-172-16-3-10 sshd-session[2727]: Connection closed by 172.16.0.143 port 41944
Sep  3 13:26:53 ip-172-16-3-10 sshd-session[4908]: Connection closed by 172.16.0.143 port 42518
Sep  3 13:26:53 ip-172-16-3-10 sshd-session[4905]: pam_unix(sshd:session): session closed for user rocky
Sep  3 13:26:53 ip-172-16-3-10 sshd-session[2690]: pam_unix(sshd:session): session closed for user rocky
Sep  3 13:26:53 ip-172-16-3-10 sshd-session[2446]: Connection closed by 172.16.0.143 port 43390
Sep  3 13:26:53 ip-172-16-3-10 sshd-session[2321]: pam_unix(sshd:session): session closed for user rocky
Sep  3 13:26:53 ip-172-16-3-10 sshd-session[2928]: Connection closed by 172.16.0.143 port 41954
Sep  3 13:26:53 ip-172-16-3-10 sshd-session[2862]: pam_unix(sshd:session): session closed for user rocky
Sep  3 13:28:31 ip-172-16-3-10 sshd-session[5371]: Accepted publickey for root from 172.16.3.5 port 40688 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Sep  3 13:28:32 ip-172-16-3-10 systemd[5375]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep  3 13:28:32 ip-172-16-3-10 sshd-session[5371]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0)
Sep  3 13:28:32 ip-172-16-3-10 sshd-session[5384]: Connection closed by 172.16.3.5 port 40688
Sep  3 13:28:32 ip-172-16-3-10 sshd-session[5371]: pam_unix(sshd:session): session closed for user root
Sep  3 13:28:32 ip-172-16-3-10 sshd-session[5409]: Accepted publickey for root from 172.16.3.5 port 40702 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Sep  3 13:28:32 ip-172-16-3-10 sshd-session[5409]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0)
Sep  3 13:28:32 ip-172-16-3-10 sshd-session[5412]: Connection closed by 172.16.3.5 port 40702
Sep  3 13:28:32 ip-172-16-3-10 sshd-session[5409]: pam_unix(sshd:session): session closed for user root
Sep  3 13:28:32 ip-172-16-3-10 sshd-session[5436]: Accepted publickey for root from 172.16.3.5 port 40716 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Sep  3 13:28:32 ip-172-16-3-10 sshd-session[5436]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0)
Sep  3 13:28:32 ip-172-16-3-10 sshd-session[5439]: Connection closed by 172.16.3.5 port 40716
Sep  3 13:28:32 ip-172-16-3-10 sshd-session[5436]: pam_unix(sshd:session): session closed for user root
Sep  3 13:28:32 ip-172-16-3-10 sshd-session[5463]: Accepted publickey for root from 172.16.3.5 port 40724 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Sep  3 13:28:33 ip-172-16-3-10 sshd-session[5463]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0)
Sep  3 13:28:33 ip-172-16-3-10 sshd-session[5466]: Connection closed by 172.16.3.5 port 40724
Sep  3 13:28:33 ip-172-16-3-10 sshd-session[5463]: pam_unix(sshd:session): session closed for user root
Sep  3 13:28:33 ip-172-16-3-10 sshd-session[5490]: Accepted publickey for root from 172.16.3.5 port 40736 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Sep  3 13:28:33 ip-172-16-3-10 sshd-session[5490]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0)
Sep  3 13:28:33 ip-172-16-3-10 sshd-session[5493]: Connection closed by 172.16.3.5 port 40736
Sep  3 13:28:33 ip-172-16-3-10 sshd-session[5490]: pam_unix(sshd:session): session closed for user root
Sep  3 13:28:33 ip-172-16-3-10 sshd-session[5517]: Accepted publickey for root from 172.16.3.5 port 40738 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Sep  3 13:28:33 ip-172-16-3-10 sshd-session[5517]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0)
Sep  3 13:28:33 ip-172-16-3-10 sshd-session[5520]: Connection closed by 172.16.3.5 port 40738
Sep  3 13:28:33 ip-172-16-3-10 sshd-session[5517]: pam_unix(sshd:session): session closed for user root
Sep  3 13:28:33 ip-172-16-3-10 sshd-session[5544]: Accepted publickey for root from 172.16.3.5 port 40750 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Sep  3 13:28:33 ip-172-16-3-10 sshd-session[5544]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0)
Sep  3 13:28:33 ip-172-16-3-10 sshd-session[5547]: Connection closed by 172.16.3.5 port 40750
Sep  3 13:28:33 ip-172-16-3-10 sshd-session[5544]: pam_unix(sshd:session): session closed for user root
Sep  3 13:28:33 ip-172-16-3-10 sshd-session[5571]: Accepted publickey for root from 172.16.3.5 port 40752 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Sep  3 13:28:33 ip-172-16-3-10 sshd-session[5571]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0)
Sep  3 13:28:34 ip-172-16-3-10 sshd-session[5575]: Connection closed by 172.16.3.5 port 40752
Sep  3 13:28:34 ip-172-16-3-10 sshd-session[5571]: pam_unix(sshd:session): session closed for user root
Sep  3 13:28:34 ip-172-16-3-10 sshd-session[5603]: Accepted publickey for root from 172.16.3.5 port 40756 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Sep  3 13:28:34 ip-172-16-3-10 sshd-session[5603]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0)
Sep  3 13:28:34 ip-172-16-3-10 sshd-session[5606]: Connection closed by 172.16.3.5 port 40756
Sep  3 13:28:34 ip-172-16-3-10 sshd-session[5603]: pam_unix(sshd:session): session closed for user root
Sep  3 13:28:34 ip-172-16-3-10 sshd-session[5632]: Accepted publickey for root from 172.16.3.5 port 40770 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Sep  3 13:28:34 ip-172-16-3-10 sshd-session[5632]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0)
Sep  3 13:28:34 ip-172-16-3-10 sshd-session[5635]: Connection closed by 172.16.3.5 port 40770
Sep  3 13:28:34 ip-172-16-3-10 sshd-session[5632]: pam_unix(sshd:session): session closed for user root
Sep  3 13:28:34 ip-172-16-3-10 sshd-session[5661]: Accepted publickey for root from 172.16.3.5 port 40778 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Sep  3 13:28:34 ip-172-16-3-10 sshd-session[5661]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0)
Sep  3 13:28:34 ip-172-16-3-10 sshd-session[5664]: Connection closed by 172.16.3.5 port 40778
Sep  3 13:28:34 ip-172-16-3-10 sshd-session[5661]: pam_unix(sshd:session): session closed for user root
Sep  3 13:28:34 ip-172-16-3-10 sshd-session[5690]: Accepted publickey for root from 172.16.3.5 port 40782 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Sep  3 13:28:34 ip-172-16-3-10 sshd-session[5690]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0)
Sep  3 13:28:35 ip-172-16-3-10 sshd-session[5693]: Connection closed by 172.16.3.5 port 40782
Sep  3 13:28:35 ip-172-16-3-10 sshd-session[5690]: pam_unix(sshd:session): session closed for user root
Sep  3 13:28:35 ip-172-16-3-10 sshd-session[5717]: Accepted publickey for root from 172.16.3.5 port 40788 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Sep  3 13:28:35 ip-172-16-3-10 sshd-session[5717]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0)
Sep  3 13:28:35 ip-172-16-3-10 sshd-session[5720]: Connection closed by 172.16.3.5 port 40788
Sep  3 13:28:35 ip-172-16-3-10 sshd-session[5717]: pam_unix(sshd:session): session closed for user root
Sep  3 14:49:56 ip-172-16-3-10 sshd-session[5826]: Accepted publickey for root from 172.16.3.5 port 53026 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Sep  3 14:49:57 ip-172-16-3-10 systemd[5830]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep  3 14:49:57 ip-172-16-3-10 sshd-session[5826]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0)
Sep  3 14:49:57 ip-172-16-3-10 sshd-session[5841]: Connection closed by 172.16.3.5 port 53026
Sep  3 14:49:57 ip-172-16-3-10 sshd-session[5826]: pam_unix(sshd:session): session closed for user root
Sep  3 14:49:57 ip-172-16-3-10 sshd-session[5866]: Accepted publickey for root from 172.16.3.5 port 53028 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Sep  3 14:49:57 ip-172-16-3-10 sshd-session[5866]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0)
Sep  3 14:49:57 ip-172-16-3-10 sshd-session[5869]: Connection closed by 172.16.3.5 port 53028
Sep  3 14:49:57 ip-172-16-3-10 sshd-session[5866]: pam_unix(sshd:session): session closed for user root
Sep  3 14:49:57 ip-172-16-3-10 sshd-session[5893]: Accepted publickey for root from 172.16.3.5 port 53036 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Sep  3 14:49:57 ip-172-16-3-10 sshd-session[5893]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0)
Sep  3 14:49:57 ip-172-16-3-10 sshd-session[5896]: Connection closed by 172.16.3.5 port 53036
Sep  3 14:49:57 ip-172-16-3-10 sshd-session[5893]: pam_unix(sshd:session): session closed for user root
Sep  3 14:49:57 ip-172-16-3-10 sshd-session[5920]: Accepted publickey for root from 172.16.3.5 port 53050 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Sep  3 14:49:58 ip-172-16-3-10 sshd-session[5920]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0)
Sep  3 14:49:58 ip-172-16-3-10 sshd-session[5923]: Connection closed by 172.16.3.5 port 53050
Sep  3 14:49:58 ip-172-16-3-10 sshd-session[5920]: pam_unix(sshd:session): session closed for user root
Sep  3 14:49:58 ip-172-16-3-10 sshd-session[5947]: Accepted publickey for root from 172.16.3.5 port 53054 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Sep  3 14:49:58 ip-172-16-3-10 sshd-session[5947]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0)
Sep  3 14:49:58 ip-172-16-3-10 sshd-session[5950]: Connection closed by 172.16.3.5 port 53054
Sep  3 14:49:58 ip-172-16-3-10 sshd-session[5947]: pam_unix(sshd:session): session closed for user root
Sep  3 14:49:58 ip-172-16-3-10 sshd-session[5974]: Accepted publickey for root from 172.16.3.5 port 53060 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Sep  3 14:49:58 ip-172-16-3-10 sshd-session[5974]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0)
Sep  3 14:49:58 ip-172-16-3-10 sshd-session[5978]: Connection closed by 172.16.3.5 port 53060
Sep  3 14:49:58 ip-172-16-3-10 sshd-session[5974]: pam_unix(sshd:session): session closed for user root
Sep  3 14:49:58 ip-172-16-3-10 sshd-session[6002]: Accepted publickey for root from 172.16.3.5 port 53062 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Sep  3 14:49:58 ip-172-16-3-10 sshd-session[6002]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0)
Sep  3 14:49:58 ip-172-16-3-10 sshd-session[6005]: Connection closed by 172.16.3.5 port 53062
Sep  3 14:49:58 ip-172-16-3-10 sshd-session[6002]: pam_unix(sshd:session): session closed for user root
Sep  3 14:49:58 ip-172-16-3-10 sshd-session[6029]: Accepted publickey for root from 172.16.3.5 port 53064 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Sep  3 14:49:58 ip-172-16-3-10 sshd-session[6029]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0)
Sep  3 14:49:59 ip-172-16-3-10 sshd-session[6032]: Connection closed by 172.16.3.5 port 53064
Sep  3 14:49:59 ip-172-16-3-10 sshd-session[6029]: pam_unix(sshd:session): session closed for user root
Sep  3 14:49:59 ip-172-16-3-10 sshd-session[6060]: Accepted publickey for root from 172.16.3.5 port 53066 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Sep  3 14:49:59 ip-172-16-3-10 sshd-session[6060]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0)
Sep  3 14:49:59 ip-172-16-3-10 sshd-session[6063]: Connection closed by 172.16.3.5 port 53066
Sep  3 14:49:59 ip-172-16-3-10 sshd-session[6060]: pam_unix(sshd:session): session closed for user root
Sep  3 14:51:39 ip-172-16-3-10 sshd-session[6090]: Accepted publickey for root from 172.16.3.5 port 41778 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Sep  3 14:51:40 ip-172-16-3-10 systemd[6094]: pam_unix(systemd-user:session): session opened for user root(uid=0) by root(uid=0)
Sep  3 14:51:40 ip-172-16-3-10 sshd-session[6090]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0)
Sep  3 14:51:40 ip-172-16-3-10 sshd-session[6103]: Connection closed by 172.16.3.5 port 41778
Sep  3 14:51:40 ip-172-16-3-10 sshd-session[6090]: pam_unix(sshd:session): session closed for user root
Sep  3 14:51:40 ip-172-16-3-10 sshd-session[6128]: Accepted publickey for root from 172.16.3.5 port 41792 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Sep  3 14:51:40 ip-172-16-3-10 sshd-session[6128]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0)
Sep  3 14:51:42 ip-172-16-3-10 sshd-session[6131]: Connection closed by 172.16.3.5 port 41792
Sep  3 14:51:42 ip-172-16-3-10 sshd-session[6128]: pam_unix(sshd:session): session closed for user root
Sep  3 14:51:42 ip-172-16-3-10 sshd-session[6179]: Accepted publickey for root from 172.16.3.5 port 41804 ssh2: ED25519 SHA256:6TsFBgFR2thOEHhtyc0UK3XB/EtCMtalKb5UoO8+Zus
Sep  3 14:51:42 ip-172-16-3-10 sshd-session[6179]: pam_unix(sshd:session): session opened for user root(uid=0) by root(uid=0)
