Machine state will be reset. To keep it, pass --keep-machine-state start all VLans (finished: start all VLans, in 0.00 seconds) Test will time out and terminate in 3600.0 seconds run the VM test script additionally exposed symbols: server, vlan1, start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh start all VMs server: systemd-nspawn running (pid 51) server: Waiting for journal at /build/vm-state-server/var/log/journal... (finished: start all VMs, in 0.00 seconds) ??? Warning (UserWarning): wait_for_unit(): passing a bare int/float as a duration is deprecated. Use datetime.timedelta instead. File "/nix/store/wsnxjqf86imlxfmxxxf02lp1kvcib7xs-nixos-test-driver-1.1/lib/python3.14/site-packages/test_driver/duration.py", line 39 server: waiting for unit authelia-authelia.service nixos-nspawn(server): TAP vde-tap1 not found; container will be isolated from VDE nixos-nspawn(server): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths. Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file. ░ Spawning container server on /build/vm-state-server. server # No journal boot entry found for the specified boot (+0). server # [8244289.017755] server systemd-journald[186]: Journal started server # [8244289.017799] server systemd-journald[186]: Runtime Journal (/run/log/journal/6bc15a643b09432f95871a8b428015ed) is 8M, max 3.7G, 3.7G free. server # [8244289.023261] server systemd[1]: Finished Create Static Device Nodes in /dev gracefully. server # [8244289.029076] server systemd[1]: Starting Flush Journal to Persistent Storage... server # [8244289.029517] server systemd[1]: Starting Network Name Resolution... server # [8244289.029946] server systemd[1]: Starting Create Static Device Nodes in /dev... server # [8244289.049192] server systemd-journald[186]: Time spent on flushing to /var/log/journal/6bc15a643b09432f95871a8b428015ed is 1.184ms for 6 entries. server # [8244289.049192] server systemd-journald[186]: System Journal (/var/log/journal/6bc15a643b09432f95871a8b428015ed) is 8M, max 4G, 3.9G free. server # [8244289.057074] server systemd[1]: Finished Create Static Device Nodes in /dev. server # [8244289.057898] server systemd[1]: Reached target Preparation for Local File Systems. server # [8244289.057993] server systemd[1]: Reached target Local File Systems. server # [8244289.058806] server systemd[1]: Listening on Boot Loader Control Service Socket. server # [8244289.058842] server systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container server # [8244289.059536] server systemd[1]: Starting Save Transient machine-id to Disk... server # [8244289.059557] server systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys server # [8244289.231665] server systemd[1]: Finished Firewall. server # [8244289.231778] server systemd[1]: Reached target Preparation for Network. server # [8244289.231937] server systemd[1]: Listening on Network Management Resolve Hook Socket. server # [8244289.232588] server systemd[1]: Starting Network Management... server # [8244289.256119] server systemd[1]: Finished Flush Journal to Persistent Storage. server # [8244289.257070] server systemd[1]: Starting Create System Files and Directories... server # [8244289.272705] server systemd-tmpfiles[293]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted server # [8244289.272861] server systemd-tmpfiles[293]: fchmod() of /var/log/journal failed: Operation not permitted server # [8244289.272973] server systemd-tmpfiles[293]: fchmod() of /var/log/journal/6bc15a643b09432f95871a8b428015ed failed: Operation not permitted server # [8244289.273142] server systemd-tmpfiles[293]: fchmod() of /run/log/journal failed: Operation not permitted server # [8244289.274624] server systemd[1]: Finished Create System Files and Directories. server # [8244289.275617] server systemd[1]: Starting Rebuild Journal Catalog... server # [8244289.276323] server systemd[1]: Starting Record System Boot/Shutdown in UTMP... server # [8244289.284209] server systemd[1]: Finished Record System Boot/Shutdown in UTMP. server # [8244289.289471] server systemd[1]: Finished Rebuild Journal Catalog. server # [8244289.290340] server systemd[1]: Starting Update is Completed... server # [8244289.301044] server systemd[1]: Finished Update is Completed. server # [8244289.502371] server systemd-networkd[290]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted server # [8244289.502460] server systemd-networkd[290]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted server # [8244289.508219] server systemd-networkd[290]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. server # [8244289.508384] server systemd-networkd[290]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. server # [8244289.508480] server systemd-networkd[290]: lo: Link UP server # [8244289.508483] server systemd-networkd[290]: lo: Gained carrier server # [8244289.508658] server systemd-networkd[290]: eth1: Configuring with /etc/systemd/network/40-eth1.network. server # [8244289.508928] server systemd[1]: Started Network Management. server # [8244289.508996] server systemd-networkd[290]: eth1: Link UP server # [8244289.509170] server systemd-networkd[290]: eth1: Gained carrier server # [8244289.509632] server systemd[1]: Starting Enable Persistent Storage in systemd-networkd... server # [8244289.536982] server systemd-resolved[214]: Positive Trust Anchors: server # [8244289.536997] server systemd-resolved[214]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d server # [8244289.537003] server systemd-resolved[214]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 server # [8244289.537322] server systemd-resolved[214]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test server # [8244289.537968] server systemd[1]: Finished Enable Persistent Storage in systemd-networkd. server # [8244289.559150] server systemd-resolved[214]: Using system hostname 'server'. server # [8244289.560547] server systemd[1]: Started Network Name Resolution. server # [8244289.560641] server systemd[1]: Reached target Network. server # [8244289.560695] server systemd[1]: Reached target Network is Online. server # [8244289.560737] server systemd[1]: Reached target System Initialization. server # [8244289.560794] server systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container server # [8244289.560824] server systemd[1]: Started Daily Cleanup of Temporary Directories. server # [8244289.560839] server systemd[1]: Reached target Timer Units. server # [8244289.560975] server systemd[1]: Listening on D-Bus System Message Bus Socket. server # [8244289.561107] server systemd[1]: Listening on Nix Daemon Socket. server # [8244289.561232] server systemd[1]: Listening on Virtual Machine and Container Registration Service Socket. server # [8244289.561254] server systemd[1]: Reached target Socket Units. server # [8244289.561291] server systemd[1]: Reached target Basic System. server # [8244289.562654] server systemd[1]: Starting Authelia authentication and authorization server... server # [8244289.563553] server systemd[1]: Starting Caddy... server # [8244289.564293] server systemd[1]: Starting Import lastlog data into lastlog2 database... server # [8244289.565077] server systemd[1]: Starting Name Service Cache Daemon (nsncd)... server # [8244289.582671] server systemd[1]: Starting D-Bus System Message Bus... server # [8244289.593611] server systemd[1]: Finished Import lastlog data into lastlog2 database. server # [8244289.667548] server nsncd[307]: Sep 03 20:05:47.033 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket" server # [8244289.667655] server systemd[1]: Started Name Service Cache Daemon (nsncd). server # [8244289.667719] server systemd[1]: Reached target Host and Network Name Lookups. server # [8244289.667765] server systemd[1]: Reached target User and Group Name Lookups. server # [8244289.668805] server systemd[1]: Starting User Login Management... server # [8244289.669355] server systemd[1]: Starting Permit User Sessions... server # [8244289.677182] server systemd[1]: Finished Permit User Sessions. server # [8244289.677697] server systemd[1]: Started Console Getty. server # [8244289.677718] server systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0 server # [8244289.677728] server systemd[1]: Reached target Login Prompts. server # [8244289.725251] server dbus-broker-launch[311]: Looking up NSS user entry for 'systemd-timesync'... server # [8244289.725880] server dbus-broker-launch[311]: NSS returned no entry for 'systemd-timesync' server # [8244289.725880] server dbus-broker-launch[311]: Invalid user-name in /nix/store/jbps3irp4a3rn6wi58m4w38d4g3zncn2-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync" server # [8244289.726346] server systemd[1]: Started D-Bus System Message Bus. server # [8244289.731160] server dbus-broker-launch[311]: Ready server # [8244289.850239] server systemd[1]: Started Caddy. server # [8244290.071093] server systemd-logind[327]: New seat seat0. server # [8244290.071215] server systemd[1]: Started User Login Management. server # [8244290.072063] server systemd[1]: Starting linger-users.service... server # [8244290.094096] server systemd[1]: linger-users.service: Deactivated successfully. server # [8244290.094231] server systemd[1]: Finished linger-users.service. server # [8244290.646792] server authelia[361]: Configuration parsed and loaded successfully without errors. server # [8244291.095764] server systemd[1]: Started Authelia authentication and authorization server. server # [8244291.097027] server systemd[1]: Starting Punchcard time tracking (punchcard)... server # [8244291.127420] server authelia[382]: time="2026-09-03T20:05:48Z" level=info msg="Authelia v4.39.20-nixpkgs is starting" server # [8244291.127655] server authelia[382]: time="2026-09-03T20:05:48Z" level=info msg="Log severity set to info" server # [8244291.147124] server authelia[382]: time="2026-09-03T20:05:48Z" level=info msg="Storage schema is being checked for updates" server # [8244291.150256] server authelia[382]: time="2026-09-03T20:05:48Z" level=info msg="Storage schema migration from 0 to 24 is being attempted" server # [8244291.169146] server authelia[382]: time="2026-09-03T20:05:48Z" level=info msg="Storage schema migration from 0 to 24 is complete" server # [8244291.195117] server systemd[1]: Started Punchcard time tracking (punchcard). server # [8244291.195330] server systemd[1]: Reached target Multi-User System. server # [8244291.198094] server systemd-networkd[290]: eth1: Gained IPv6LL server # [8244291.201526] server punchcard-punchcard-start[386]: 2026/09/03 20:05:48 Warning: .env file not found, using environment variables: open .env: no such file or directory server # [8244291.248450] server systemd-resolved[214]: Switching to fallback DNS server 1.1.1.1#one.one.one.one. server # [8244291.249708] server authelia[382]: time="2026-09-03T20:05:48Z" level=warning msg="Could not determine the clock offset due to an error" error="error occurred during dial: dial udp: lookup time.cloudflare.com: no such host" server # [8244291.263580] server authelia[382]: time="2026-09-03T20:05:48Z" level=info msg="Startup complete" server # [8244291.264033] server authelia[382]: time="2026-09-03T20:05:48Z" level=info msg="Listening for non-TLS connections on '127.0.0.1:9091' path '/'" server=main service=server server # [8244291.308987] server punchcard-punchcard-start[386]: 2026/09/03 20:05:48 OIDC authentication enabled with issuer: https://auth.test.clan server # [8244291.308987] server punchcard-punchcard-start[386]: 2026/09/03 20:05:48 Redirect URL: https://punchcard.test.clan/callback server # [8244291.309541] server punchcard-punchcard-start[386]: 2026/09/03 20:05:48 Server starting on :8099 server: (finished: waiting for unit authelia-authelia.service, in 8.14 seconds) ??? Warning (UserWarning): wait_until_succeeds(): passing a bare int/float as a duration is deprecated. Use datetime.timedelta instead. File "/nix/store/wsnxjqf86imlxfmxxxf02lp1kvcib7xs-nixos-test-driver-1.1/lib/python3.14/site-packages/test_driver/duration.py", line 39 server: waiting for success: curl -sf http://127.0.0.1:9091/api/health ??? Warning (UserWarning): execute(): passing a bare int/float as a duration is deprecated. Use datetime.timedelta instead. File "/nix/store/wsnxjqf86imlxfmxxxf02lp1kvcib7xs-nixos-test-driver-1.1/lib/python3.14/site-packages/test_driver/duration.py", line 39 server: (finished: waiting for success: curl -sf http://127.0.0.1:9091/api/health, in 0.01 seconds) server: must succeed: test -f /run/authelia-authelia/users.json server: (finished: must succeed: test -f /run/authelia-authelia/users.json, in 0.00 seconds) server: must succeed: cat /run/authelia-authelia/users.json server: (finished: must succeed: cat /run/authelia-authelia/users.json, in 0.00 seconds) server: must succeed: test -f /run/authelia-authelia/oidc.json server: (finished: must succeed: test -f /run/authelia-authelia/oidc.json, in 0.00 seconds) server: must succeed: cat /run/authelia-authelia/oidc.json server: (finished: must succeed: cat /run/authelia-authelia/oidc.json, in 0.00 seconds) server: waiting for unit caddy.service server: (finished: waiting for unit caddy.service, in 0.01 seconds) server: waiting for success: curl -sf https://auth.test.clan/api/health server: (finished: waiting for success: curl -sf https://auth.test.clan/api/health, in 0.02 seconds) server: waiting for success: curl -sf https://auth.test.clan/.well-known/openid-configuration server: (finished: waiting for success: curl -sf https://auth.test.clan/.well-known/openid-configuration, in 0.02 seconds) ??? Warning (UserWarning): wait_for_unit(): passing a bare int/float as a duration is deprecated. Use datetime.timedelta instead. File "/nix/store/wsnxjqf86imlxfmxxxf02lp1kvcib7xs-nixos-test-driver-1.1/lib/python3.14/site-packages/test_driver/duration.py", line 39 server: waiting for unit punchcard-punchcard.service server: (finished: waiting for unit punchcard-punchcard.service, in 0.01 seconds) server: waiting for success: curl -sf https://punchcard.test.clan/login server: (finished: waiting for success: curl -sf https://punchcard.test.clan/login, in 0.02 seconds) server: must succeed: cat /run/secrets/per-machine/server/authelia-user-bob/password server: (finished: must succeed: cat /run/secrets/per-machine/server/authelia-user-bob/password, in 0.01 seconds) server: must succeed: curl -s -o /dev/null -w '%{redirect_url}' -c /tmp/pc-cookies https://punchcard.test.clan/login/start server: (finished: must succeed: curl -s -o /dev/null -w '%{redirect_url}' -c /tmp/pc-cookies https://punchcard.test.clan/login/start, in 0.04 seconds) server: must succeed: curl -sf -X POST https://auth.test.clan/api/firstfactor -H 'Content-Type: application/json' -c /tmp/auth-cookies -d '{"username": "bob", "password": "wincing-march-showdown-cherub-imaging-crawling-pamphlet", "keepMeLoggedIn": false}' server # [8244296.164424] server systemd[1]: etc-machine\x2did.mount: Deactivated successfully. server # [8244296.165182] server systemd[1]: Finished Save Transient machine-id to Disk. server # [8244296.165299] server systemd[1]: Startup finished in 7.479s. server: (finished: must succeed: curl -sf -X POST https://auth.test.clan/api/firstfactor -H 'Content-Type: application/json' -c /tmp/auth-cookies -d '{"username": "bob", "password": "wincing-march-showdown-cherub-imaging-crawling-pamphlet", "keepMeLoggedIn": false}', in 1.08 seconds) server: must succeed: curl -s -o /dev/null -w '%{redirect_url}' -b /tmp/auth-cookies -c /tmp/auth-cookies 'https://auth.test.clan/api/oidc/authorization?client_id=punchcard-punchcard&code_challenge=xNGMwVZaBqjfXuj3WVYU5_Y5SJ_NLNrpNqMFmVGcjX0&code_challenge_method=S256&redirect_uri=https%3A%2F%2Fpunchcard.test.clan%2Fcallback&response_type=code&scope=openid+profile+email&state=hlSlBwNBXrNxZ8pQUwaVq9ywJD_0FLrlhH_2964oV94%3D' server: (finished: must succeed: curl -s -o /dev/null -w '%{redirect_url}' -b /tmp/auth-cookies -c /tmp/auth-cookies 'https://auth.test.clan/api/oidc/authorization?client_id=punchcard-punchcard&code_challenge=xNGMwVZaBqjfXuj3WVYU5_Y5SJ_NLNrpNqMFmVGcjX0&code_challenge_method=S256&redirect_uri=https%3A%2F%2Fpunchcard.test.clan%2Fcallback&response_type=code&scope=openid+profile+email&state=hlSlBwNBXrNxZ8pQUwaVq9ywJD_0FLrlhH_2964oV94%3D', in 0.11 seconds) server: must succeed: curl -s -o /dev/null -w '%{http_code}' -c /tmp/pc-cookies -b /tmp/pc-cookies 'https://punchcard.test.clan/callback?code=authelia_ac_7dKV8qBhRy--f1vWm0-lm9S_a6lwmj9-TRmAn2q0_H8.y07JKrji655gYM_v74NpfGh-s9Rzrs7ES0JIakT-pbc&iss=https%3A%2F%2Fauth.test.clan&scope=openid+profile+email&state=hlSlBwNBXrNxZ8pQUwaVq9ywJD_0FLrlhH_2964oV94%3D' server: (finished: must succeed: curl -s -o /dev/null -w '%{http_code}' -c /tmp/pc-cookies -b /tmp/pc-cookies 'https://punchcard.test.clan/callback?code=authelia_ac_7dKV8qBhRy--f1vWm0-lm9S_a6lwmj9-TRmAn2q0_H8.y07JKrji655gYM_v74NpfGh-s9Rzrs7ES0JIakT-pbc&iss=https%3A%2F%2Fauth.test.clan&scope=openid+profile+email&state=hlSlBwNBXrNxZ8pQUwaVq9ywJD_0FLrlhH_2964oV94%3D', in 0.12 seconds) server: must succeed: curl -s -L -o /dev/null -w '%{http_code}' -b /tmp/pc-cookies -c /tmp/pc-cookies https://punchcard.test.clan/ server: (finished: must succeed: curl -s -L -o /dev/null -w '%{http_code}' -b /tmp/pc-cookies -c /tmp/pc-cookies https://punchcard.test.clan/, in 0.03 seconds) (finished: run the VM test script, in 9.63 seconds) server # [8244297.611805] server authelia[382]: time="2026-09-03T20:05:54Z" level=error msg="Access Request failed with error: Client authentication failed (e.g., unknown client, no client authentication included, or unsupported authentication method). The request was determined to be using 'token_endpoint_auth_method' method 'client_secret_basic', however the OAuth 2.0 client registration does not allow this method. The registered client with id 'punchcard-punchcard' is configured to only support 'token_endpoint_auth_method' method 'client_secret_post'. Either the Authorization Server client registration will need to have the 'token_endpoint_auth_method' updated to 'client_secret_basic' or the Relying Party will need to be configured to use 'client_secret_post'." method=POST path=/api/oidc/token remote_ip="::1" server # [8244297.706889] server punchcard-punchcard-start[386]: 2026/09/03 20:05:55 User () logged in successfully test script finished in 10.64s cleanup kill NspawnMachine (pid 51) Container server terminated by signal KILL. (finished: cleanup, in 0.11 seconds)