kazulog@sv1:~$ sudo journalctl --no-pager -o short-precise | awk '/STEP1-BEGIN-20260912-101552/{f=1} f'
Sep 12 10:16:17.812861 sv1 KAZULOG[2378]: STEP1-BEGIN-20260912-101552
Sep 12 10:16:17.859032 sv1 sshd-session[2292]: syslogin_perform_logout: logout() returned an error
Sep 12 10:16:17.859996 sv1 sshd-session[2345]: Received disconnect from 10.100.3.1 port 53549:11: disconnected by user
Sep 12 10:16:17.860287 sv1 sshd-session[2345]: Disconnected from user kazulog 10.100.3.1 port 53549
Sep 12 10:16:17.862141 sv1 sshd-session[2292]: pam_unix(sshd:session): session closed for user kazulog
Sep 12 10:16:17.865086 sv1 systemd[1]: session-10.scope: Deactivated successfully.
Sep 12 10:16:17.868519 sv1 systemd-logind[1133]: Session 10 logged out. Waiting for processes to exit.
Sep 12 10:16:17.872304 sv1 systemd-logind[1133]: Removed session 10.
Sep 12 10:16:20.682169 sv1 sshd-session[2390]: Accepted publickey for kazulog from 10.100.3.1 port 53557 ssh2: ED25519 SHA256:NdURwOz/PbiL79UHvTtYE5vuTJfA2RD5RXsn/rG76rw
Sep 12 10:16:20.688561 sv1 sshd-session[2390]: pam_unix(sshd:session): session opened for user kazulog(uid=1000) by kazulog(uid=0)
Sep 12 10:16:20.699686 sv1 systemd-logind[1133]: New session '11' of user 'kazulog' with class 'user' and type 'tty'.
Sep 12 10:16:20.706431 sv1 systemd[1]: Started session-11.scope - Session 11 of User kazulog.
Sep 12 10:16:21.134563 sv1 sudo[2487]: pam_unix(sudo:session): session opened for user root(uid=0) by kazulog(uid=1000)
Sep 12 10:16:21.135024 sv1 sudo[2487]: kazulog : TTY=/dev/pts/0 ; PWD=/home/kazulog ; USER=root ; COMMAND=/usr/bin/apt install -y vsftpd
Sep 12 10:16:27.112214 sv1 addgroup[2571]: Selecting GID from range 100 to 999 ...
Sep 12 10:16:27.118243 sv1 addgroup[2571]: Adding group `ssl-cert' (GID 109) ...
Sep 12 10:16:27.181273 sv1 groupadd[2574]: group added to /etc/group: name=ssl-cert, GID=109
Sep 12 10:16:27.210616 sv1 groupadd[2574]: group added to /etc/gshadow: name=ssl-cert
Sep 12 10:16:27.213189 sv1 groupadd[2574]: new group: name=ssl-cert, GID=109
Sep 12 10:16:27.734097 sv1 systemd[1]: Reload requested from client PID 2599 ('systemctl') (unit session-11.scope)...
Sep 12 10:16:27.734124 sv1 systemd[1]: Reloading...
Sep 12 10:16:28.119220 sv1 systemd[1]: /usr/lib/systemd/system/xfs_scrub_all.service:26: Support for option CPUAccounting= has been removed and it is ignored
Sep 12 10:16:28.120507 sv1 systemd[1]: /usr/lib/systemd/system/system-xfs_scrub.slice:15: Support for option CPUAccounting= has been removed and it is ignored
Sep 12 10:16:28.310181 sv1 systemd[1]: Reloading finished in 574 ms.
Sep 12 10:16:28.426383 sv1 systemd[1]: ssl-cert.service - Generate snakeoil SSL keypair skipped, unmet condition check ConditionPathExists=!/etc/ssl/private/ssl-cert-snakeoil.key
Sep 12 10:16:28.887411 sv1 adduser[2669]: Selecting UID from range 100 to 999 ...
Sep 12 10:16:28.891817 sv1 adduser[2669]: Selecting GID from range 100 to 999 ...
Sep 12 10:16:28.895633 sv1 adduser[2669]: Adding system user `ftp' (UID 103) ...
Sep 12 10:16:28.900070 sv1 adduser[2669]: Adding new group `ftp' (GID 110) ...
Sep 12 10:16:28.955172 sv1 groupadd[2674]: group added to /etc/group: name=ftp, GID=110
Sep 12 10:16:28.982201 sv1 groupadd[2674]: group added to /etc/gshadow: name=ftp
Sep 12 10:16:28.984066 sv1 groupadd[2674]: new group: name=ftp, GID=110
Sep 12 10:16:28.990421 sv1 adduser[2669]: The home dir /srv/ftp you specified can't be accessed: No such file or directory
Sep 12 10:16:28.995459 sv1 adduser[2669]: Adding new user `ftp' (UID 103) with group `ftp' ...
Sep 12 10:16:29.047225 sv1 useradd[2680]: new user: name=ftp, UID=103, GID=110, home=/srv/ftp, shell=/usr/sbin/nologin, from=none
Sep 12 10:16:29.161637 sv1 adduser[2669]: Not creating home directory `/srv/ftp' as requested.
Sep 12 10:16:29.400981 sv1 systemd[1]: Reload requested from client PID 2700 ('systemctl') (unit session-11.scope)...
Sep 12 10:16:29.401005 sv1 systemd[1]: Reloading...
Sep 12 10:16:29.727645 sv1 systemd[1]: /usr/lib/systemd/system/xfs_scrub_all.service:26: Support for option CPUAccounting= has been removed and it is ignored
Sep 12 10:16:29.728991 sv1 systemd[1]: /usr/lib/systemd/system/system-xfs_scrub.slice:15: Support for option CPUAccounting= has been removed and it is ignored
Sep 12 10:16:29.902288 sv1 systemd[1]: Reloading finished in 500 ms.
Sep 12 10:16:30.008105 sv1 systemd[1]: Starting vsftpd.service - vsftpd FTP server...
Sep 12 10:16:30.022890 sv1 systemd[1]: Started vsftpd.service - vsftpd FTP server.
Sep 12 10:16:37.228225 sv1 sudo[2487]: pam_unix(sudo:session): session closed for user root
Sep 12 10:16:37.377174 sv1 sudo[2858]: pam_unix(sudo:session): session opened for user root(uid=0) by kazulog(uid=1000)
Sep 12 10:16:37.377789 sv1 sudo[2858]: kazulog : TTY=/dev/pts/0 ; PWD=/home/kazulog ; USER=root ; COMMAND=/usr/bin/ss -tlnp sport = :21
Sep 12 10:16:37.392114 sv1 sudo[2858]: pam_unix(sudo:session): session closed for user root
Sep 12 10:16:37.414294 sv1 sshd-session[2390]: syslogin_perform_logout: logout() returned an error
Sep 12 10:16:37.416149 sv1 sshd-session[2443]: Received disconnect from 10.100.3.1 port 53557:11: disconnected by user
Sep 12 10:16:37.416388 sv1 sshd-session[2443]: Disconnected from user kazulog 10.100.3.1 port 53557
Sep 12 10:16:37.418117 sv1 sshd-session[2390]: pam_unix(sshd:session): session closed for user kazulog
Sep 12 10:16:37.420544 sv1 systemd[1]: session-11.scope: Deactivated successfully.
Sep 12 10:16:37.421686 sv1 systemd[1]: session-11.scope: Consumed 8.352s CPU time over 16.714s wall clock time, 184.8M memory peak.
Sep 12 10:16:37.424273 sv1 systemd-logind[1133]: Session 11 logged out. Waiting for processes to exit.
Sep 12 10:16:37.427594 sv1 systemd-logind[1133]: Removed session 11.
Sep 12 10:16:37.554688 sv1 sshd-session[2873]: Accepted publickey for kazulog from 10.100.3.1 port 53575 ssh2: ED25519 SHA256:NdURwOz/PbiL79UHvTtYE5vuTJfA2RD5RXsn/rG76rw
Sep 12 10:16:37.557030 sv1 sshd-session[2873]: pam_unix(sshd:session): session opened for user kazulog(uid=1000) by kazulog(uid=0)
Sep 12 10:16:37.566301 sv1 systemd-logind[1133]: New session '12' of user 'kazulog' with class 'user' and type 'tty'.
Sep 12 10:16:37.568407 sv1 systemd[1]: Started session-12.scope - Session 12 of User kazulog.
Sep 12 10:16:37.862513 sv1 sudo[2959]: pam_unix(sudo:session): session opened for user root(uid=0) by kazulog(uid=1000)
Sep 12 10:16:37.862950 sv1 sudo[2959]: kazulog : TTY=/dev/pts/0 ; PWD=/home/kazulog ; USER=root ; COMMAND=/usr/bin/journalctl --no-pager -o short-precise