UNIT FILE                              STATE           PRESET
arp-ethers.service                     disabled        disabled
autovt@.service                        alias           -
console-getty.service                  enabled-runtime disabled
container-getty@.service               static          -
dbus-broker.service                    enabled         enabled
dbus-org.freedesktop.hostname1.service alias           -
dbus-org.freedesktop.locale1.service   alias           -
dbus-org.freedesktop.login1.service    alias           -
dbus-org.freedesktop.timedate1.service alias           -
dbus.service                           alias           -
debug-shell.service                    disabled        disabled
dnf-makecache.service                  static          -
dnf-system-upgrade-cleanup.service     static          -
dnf-system-upgrade.service             disabled        disabled
emergency.service                      static          -
falco-custom.service                   disabled        disabled
falco-kmod-inject.service              static          -
falco-kmod.service                     disabled        disabled
falco-modern-bpf.service               disabled        disabled
falcoctl-artifact-follow.service       disabled        disabled
fstrim.service                         static          -
getty@.service                         disabled        enabled
lab-install.service                    enabled         disabled
ldconfig.service                       static          -
logrotate.service                      static          -
modprobe@.service                      static          -
nis-domainname.service                 disabled        enabled
pam_namespace.service                  static          -
rc-local.service                       static          -
rescue.service                         static          -
rpmdb-rebuild.service                  disabled        disabled
rsyslog.service                        enabled         enabled
serial-getty@.service                  disabled        disabled
sshd-keygen@.service                   disabled        disabled
sshd.service                           enabled         enabled
sshd@.service                          static          -
system-update-cleanup.service          static          -
systemd-ask-password-console.service   static          -
systemd-ask-password-wall.service      static          -
systemd-boot-check-no-failures.service disabled        disabled
systemd-exit.service                   static          -
systemd-firstboot.service              static          -
systemd-halt.service                   static          -
systemd-hostnamed.service              static          -
systemd-initctl.service                static          -
systemd-journal-catalog-update.service static          -
systemd-journal-flush.service          static          -
systemd-journald.service               static          -
systemd-journald@.service              static          -
systemd-kexec.service                  static          -
systemd-localed.service                static          -
systemd-logind.service                 static          -
systemd-machine-id-commit.service      static          -
systemd-network-generator.service      disabled        enabled
systemd-pcrfs-root.service             static          -
systemd-pcrfs@.service                 static          -
systemd-pcrmachine.service             static          -
systemd-poweroff.service               static          -
systemd-reboot.service                 static          -
systemd-sysext.service                 disabled        disabled
systemd-sysupdate-reboot.service       indirect        disabled
systemd-sysupdate.service              indirect        disabled
systemd-sysusers.service               static          -
systemd-timedated.service              static          -
systemd-tmpfiles-clean.service         static          -
systemd-tmpfiles-setup.service         static          -
systemd-update-done.service            static          -
systemd-update-utmp-runlevel.service   static          -
systemd-update-utmp.service            static          -
systemd-user-sessions.service          enabled         disabled
user-runtime-dir@.service              static          -
user@.service                          static          -
wazuh-agent.service                    disabled        disabled

73 unit files listed.
--service-status--
× lab-install.service - Install Purple Team Lab Services on First Boot
     Loaded: loaded (/etc/systemd/system/lab-install.service; enabled; preset: disabled)
     Active: failed (Result: exit-code) since Mon 2026-06-15 05:40:31 UTC; 2min 9s ago
    Process: 61 ExecStart=/opt/purple-team/scripts/install-all.sh (code=exited, status=1/FAILURE)
   Main PID: 61 (code=exited, status=1/FAILURE)
        CPU: 53ms

Jun 15 05:40:31 app.techvault.local install-all.sh[64]: Cleaning up any orphaned wazuh processes...
Jun 15 05:40:31 app.techvault.local install-all.sh[64]: No wazuh processes to kill
Jun 15 05:40:31 app.techvault.local install-all.sh[64]: Cleaning PID files...
Jun 15 05:40:31 app.techvault.local install-all.sh[64]: Enabling and starting Wazuh agent service...
Jun 15 05:40:31 app.techvault.local systemctl[74]: Synchronizing state of wazuh-agent.service with SysV service script with /usr/lib/systemd/systemd-sysv-install.
Jun 15 05:40:31 app.techvault.local systemctl[74]: Executing: /usr/lib/systemd/systemd-sysv-install enable wazuh-agent
Jun 15 05:40:31 app.techvault.local (sysv-ins[75]: Failed to execute /usr/lib/systemd/systemd-sysv-install: No such file or directory
Jun 15 05:40:31 app.techvault.local systemd[1]: lab-install.service: Main process exited, code=exited, status=1/FAILURE
Jun 15 05:40:31 app.techvault.local systemd[1]: lab-install.service: Failed with result 'exit-code'.
Jun 15 05:40:31 app.techvault.local systemd[1]: Failed to start Install Purple Team Lab Services on First Boot.

● rsyslog.service - System Logging Service
     Loaded: loaded (/usr/lib/systemd/system/rsyslog.service; enabled; preset: enabled)
    Drop-In: /etc/systemd/system/rsyslog.service.d
             └─docker-override.conf
     Active: active (running) since Mon 2026-06-15 05:40:30 UTC; 2min 9s ago
       Docs: man:rsyslogd(8)
             https://www.rsyslog.com/doc/
   Main PID: 55 (rsyslogd)
      Tasks: 3 (limit: 123488)
     Memory: 1.1M (peak: 1.4M)
        CPU: 15ms
     CGroup: /system.slice/docker-bf3c1a0082ae52d9924a5b59f7362765ffced3c88502ad05e42bec5c7b362263.scope/system.slice/rsyslog.service
             └─55 /usr/sbin/rsyslogd -n

Jun 15 05:40:30 app.techvault.local systemd[1]: Starting System Logging Service...
Jun 15 05:40:30 app.techvault.local rsyslogd[55]: [origin software="rsyslogd" swVersion="8.2506.0-2.el9" x-pid="55" x-info="https://www.rsyslog.com"] start
Jun 15 05:40:30 app.techvault.local systemd[1]: Started System Logging Service.
Jun 15 05:40:30 app.techvault.local rsyslogd[55]: imjournal: No statefile exists, /var/lib/rsyslog/imjournal.state will be created (ignore if this is first run): No such file or directory [v8.2506.0-2.el9 try https://www.rsyslog.com/e/2040 ]
Jun 15 05:40:30 app.techvault.local rsyslogd[55]: imjournal: journal files changed, reloading...  [v8.2506.0-2.el9 try https://www.rsyslog.com/e/0 ]

● sshd.service - OpenSSH server daemon
     Loaded: loaded (/usr/lib/systemd/system/sshd.service; enabled; preset: enabled)
     Active: active (running) since Mon 2026-06-15 05:40:30 UTC; 2min 9s ago
       Docs: man:sshd(8)
             man:sshd_config(5)
   Main PID: 56 (sshd)
      Tasks: 1 (limit: 123488)
     Memory: 1.7M (peak: 2.0M)
        CPU: 14ms
     CGroup: /system.slice/docker-bf3c1a0082ae52d9924a5b59f7362765ffced3c88502ad05e42bec5c7b362263.scope/system.slice/sshd.service
             └─56 "sshd: /usr/sbin/sshd -D [listener] 0 of 10-100 startups"

Jun 15 05:40:30 app.techvault.local systemd[1]: Starting OpenSSH server daemon...
Jun 15 05:40:30 app.techvault.local sshd[56]: Server listening on 0.0.0.0 port 22.
Jun 15 05:40:30 app.techvault.local sshd[56]: Server listening on :: port 22.
Jun 15 05:40:30 app.techvault.local systemd[1]: Started OpenSSH server daemon.

● systemd-journald.service - Journal Service
     Loaded: loaded (/usr/lib/systemd/system/systemd-journald.service; static)
     Active: active (running) since Mon 2026-06-15 05:40:30 UTC; 2min 9s ago
TriggeredBy: ● systemd-journald.socket
             ● systemd-journald-dev-log.socket
       Docs: man:systemd-journald.service(8)
             man:journald.conf(5)
   Main PID: 54 (systemd-journal)
     Status: "Processing requests..."
      Tasks: 1 (limit: 123488)
     Memory: 9.4M (peak: 10.2M)
        CPU: 29ms
     CGroup: /system.slice/docker-bf3c1a0082ae52d9924a5b59f7362765ffced3c88502ad05e42bec5c7b362263.scope/system.slice/systemd-journald.service
             └─54 /usr/lib/systemd/systemd-journald

Jun 15 05:40:30 app.techvault.local systemd-journald[54]: Journal started
Jun 15 05:40:30 app.techvault.local systemd-journald[54]: Runtime Journal (/run/log/journal/cdc4eca107d74720a4892d6d9c728f4c) is 8.0M, max 4.0G, 3.9G free.
Notice: journal has been rotated since unit was started, output may be incomplete.

○ systemd-tmpfiles-clean.service - Cleanup of Temporary Directories
     Loaded: loaded (/usr/lib/systemd/system/systemd-tmpfiles-clean.service; static)
     Active: inactive (dead)
TriggeredBy: ● systemd-tmpfiles-clean.timer
       Docs: man:tmpfiles.d(5)
             man:systemd-tmpfiles(8)

× systemd-tmpfiles-setup.service - Create Volatile Files and Directories
     Loaded: loaded (/usr/lib/systemd/system/systemd-tmpfiles-setup.service; static)
     Active: failed (Result: exit-code) since Mon 2026-06-15 05:40:30 UTC; 2min 9s ago
       Docs: man:tmpfiles.d(5)
             man:systemd-tmpfiles(8)
    Process: 52 ExecStart=systemd-tmpfiles --create --remove --boot --exclude-prefix=/dev (code=exited, status=243/CREDENTIALS)
   Main PID: 52 (code=exited, status=243/CREDENTIALS)
        CPU: 2ms

Notice: journal has been rotated since unit was started, output may be incomplete.

● systemd-user-sessions.service - Permit User Sessions
     Loaded: loaded (/usr/lib/systemd/system/systemd-user-sessions.service; enabled; preset: disabled)
     Active: active (exited) since Mon 2026-06-15 05:40:30 UTC; 2min 9s ago
       Docs: man:systemd-user-sessions.service(8)
    Process: 57 ExecStart=/usr/lib/systemd/systemd-user-sessions start (code=exited, status=0/SUCCESS)
   Main PID: 57 (code=exited, status=0/SUCCESS)
        CPU: 7ms

Jun 15 05:40:30 app.techvault.local systemd[1]: Starting Permit User Sessions...
Jun 15 05:40:30 app.techvault.local systemd[1]: Finished Permit User Sessions.

○ wazuh-agent.service - Wazuh agent
     Loaded: loaded (/usr/lib/systemd/system/wazuh-agent.service; disabled; preset: disabled)
     Active: inactive (dead)

○ falco-modern-bpf.service - Falco: Container Native Runtime Security with modern ebpf
     Loaded: loaded (/usr/lib/systemd/system/falco-modern-bpf.service; disabled; preset: disabled)
     Active: inactive (dead)
       Docs: https://falco.org/docs/

○ falco-kmod.service - Falco: Container Native Runtime Security with kmod
     Loaded: loaded (/usr/lib/systemd/system/falco-kmod.service; disabled; preset: disabled)
     Active: inactive (dead)
       Docs: https://falco.org/docs/

○ falco-custom.service - Falco: Container Native Runtime Security with custom configuration
     Loaded: loaded (/usr/lib/systemd/system/falco-custom.service; disabled; preset: disabled)
     Active: inactive (dead)
       Docs: https://falco.org/docs/
