container-test-run-authelia
checks.x86_64-linux.authelia
· build #109
· raw
1Machine state will be reset. To keep it, pass --keep-machine-state2start all VLans3(finished: start all VLans, in 0.00 seconds)45Test will time out and terminate in 3600.0 seconds6run the VM test script7additionally exposed symbols:8 server,9 vlan1,10 start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh11start all VMs12server: systemd-nspawn running (pid 51)13server: Waiting for journal at /build/vm-state-server/var/log/journal...14(finished: start all VMs, in 0.00 seconds)15??? Warning (UserWarning): wait_for_unit(): passing a bare int/float as a duration is deprecated. Use datetime.timedelta instead.16 File "/nix/store/wsnxjqf86imlxfmxxxf02lp1kvcib7xs-nixos-test-driver-1.1/lib/python3.14/site-packages/test_driver/duration.py", line 3917server: waiting for unit authelia-authelia.service18nixos-nspawn(server): TAP vde-tap1 not found; container will be isolated from VDE19nixos-nspawn(server): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.20Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.21░ Spawning container server on /build/vm-state-server.22server # [8276731.133974] server systemd-journald[187]: Journal started23server # [8276731.134002] server systemd-journald[187]: Runtime Journal (/run/log/journal/372333ad9b434c31828eccda59f37371) is 8M, max 3.7G, 3.7G free.24server # [8276731.136737] server systemd[1]: Finished Create Static Device Nodes in /dev gracefully.25server # [8276731.141534] server systemd[1]: Starting Flush Journal to Persistent Storage...26server # [8276731.141927] server systemd[1]: Starting Create Static Device Nodes in /dev...27server # [8276731.145894] server systemd-journald[187]: Time spent on flushing to /var/log/journal/372333ad9b434c31828eccda59f37371 is 1.298ms for 5 entries.28server # [8276731.145894] server systemd-journald[187]: System Journal (/var/log/journal/372333ad9b434c31828eccda59f37371) is 8M, max 4G, 3.9G free.29server # [8276731.149664] server systemd[1]: Finished Create Static Device Nodes in /dev.30server # [8276731.149761] server systemd[1]: Reached target Preparation for Local File Systems.31server # [8276731.149799] server systemd[1]: Reached target Local File Systems.32server # [8276731.150354] server systemd[1]: Listening on Boot Loader Control Service Socket.33server # [8276731.150378] server systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container34server # [8276731.150712] server systemd[1]: Starting Save Transient machine-id to Disk...35server # [8276731.150727] server systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys36server # [8276731.212065] server systemd[1]: Finished Firewall.37server # [8276731.212171] server systemd[1]: Reached target Preparation for Network.38server # [8276731.212322] server systemd[1]: Listening on Network Management Resolve Hook Socket.39server # [8276731.212971] server systemd[1]: Starting Network Management...40server # [8276731.312417] server systemd[1]: Finished Flush Journal to Persistent Storage.41server # [8276731.313189] server systemd[1]: Starting Create System Files and Directories...42server # [8276731.348538] server systemd-tmpfiles[294]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted43server # [8276731.348684] server systemd-tmpfiles[294]: fchmod() of /var/log/journal failed: Operation not permitted44server # [8276731.348784] server systemd-tmpfiles[294]: fchmod() of /var/log/journal/372333ad9b434c31828eccda59f37371 failed: Operation not permitted45server # [8276731.348933] server systemd-tmpfiles[294]: fchmod() of /run/log/journal failed: Operation not permitted46server # [8276731.354627] server systemd[1]: Finished Create System Files and Directories.47server # [8276731.355282] server systemd[1]: Starting Rebuild Journal Catalog...48server # [8276731.355621] server systemd[1]: Starting Record System Boot/Shutdown in UTMP...49server # [8276731.386551] server systemd[1]: Finished Record System Boot/Shutdown in UTMP.50server # [8276731.391453] server systemd[1]: Finished Rebuild Journal Catalog.51server # [8276731.392033] server systemd[1]: Starting Update is Completed...52server # [8276731.397099] server systemd[1]: Finished Update is Completed.53server # [8276731.527848] server systemd-networkd[290]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted54server # [8276731.527923] server systemd-networkd[290]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted55server # [8276731.532861] server systemd-networkd[290]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.56server # [8276731.533043] server systemd-networkd[290]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.57server # [8276731.533163] server systemd-networkd[290]: lo: Link UP58server # [8276731.533167] server systemd-networkd[290]: lo: Gained carrier59server # [8276731.533317] server systemd-networkd[290]: eth1: Configuring with /etc/systemd/network/40-eth1.network.60server # [8276731.533905] server systemd[1]: Started Network Management.61server # [8276731.533939] server systemd-networkd[290]: eth1: Link UP62server # [8276731.534096] server systemd-networkd[290]: eth1: Gained carrier63server # [8276731.534788] server systemd[1]: Starting Enable Persistent Storage in systemd-networkd...64server # [8276731.570556] server systemd[1]: Finished Enable Persistent Storage in systemd-networkd.65server # [8276731.627566] server systemd-resolved[199]: Positive Trust Anchors:66server # [8276731.627573] server systemd-resolved[199]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d67server # [8276731.627577] server systemd-resolved[199]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b1668server # [8276731.627592] server systemd-resolved[199]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test69server # [8276731.637892] server systemd-resolved[199]: Using system hostname 'server'.70server # [8276731.638739] server systemd[1]: Started Network Name Resolution.71server # [8276731.638788] server systemd[1]: Reached target Network.72server # [8276731.638821] server systemd[1]: Reached target Network is Online.73server # [8276731.638861] server systemd[1]: Reached target System Initialization.74server # [8276731.638905] server systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container75server # [8276731.638920] server systemd[1]: Started Daily Cleanup of Temporary Directories.76server # [8276731.638931] server systemd[1]: Reached target Timer Units.77server # [8276731.639011] server systemd[1]: Listening on D-Bus System Message Bus Socket.78server # [8276731.650637] server systemd[1]: Listening on Nix Daemon Socket.79server # [8276731.650715] server systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.80server # [8276731.650725] server systemd[1]: Reached target Socket Units.81server # [8276731.650746] server systemd[1]: Reached target Basic System.82server # [8276731.651594] server systemd[1]: Starting Authelia authentication and authorization server...83server # [8276731.652114] server systemd[1]: Starting Caddy...84server # [8276731.652485] server systemd[1]: Starting Import lastlog data into lastlog2 database...85server # [8276731.652992] server systemd[1]: Starting Name Service Cache Daemon (nsncd)...86server # [8276731.653607] server systemd[1]: Starting D-Bus System Message Bus...87server # [8276731.684862] server systemd[1]: Finished Import lastlog data into lastlog2 database.88server # [8276731.743896] server nsncd[308]: Sep 04 05:06:29.109 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"89server # [8276731.743975] server systemd[1]: Started Name Service Cache Daemon (nsncd).90server # [8276731.744174] server systemd[1]: Reached target Host and Network Name Lookups.91server # [8276731.744207] server systemd[1]: Reached target User and Group Name Lookups.92server # [8276731.747642] server systemd[1]: Starting User Login Management...93server # [8276731.747974] server systemd[1]: Starting Permit User Sessions...94server # [8276731.772608] server systemd[1]: Finished Permit User Sessions.95server # [8276731.773151] server systemd[1]: Started Console Getty.96server # [8276731.773173] server systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty097server # [8276731.773185] server systemd[1]: Reached target Login Prompts.98server # [8276731.787573] server dbus-broker-launch[309]: Looking up NSS user entry for 'systemd-timesync'...99server # [8276731.787982] server dbus-broker-launch[309]: NSS returned no entry for 'systemd-timesync'100server # [8276731.787982] server dbus-broker-launch[309]: Invalid user-name in /nix/store/jbps3irp4a3rn6wi58m4w38d4g3zncn2-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"101server # [8276731.788231] server systemd[1]: Started D-Bus System Message Bus.102server # [8276731.791881] server dbus-broker-launch[309]: Ready103server # [8276731.876207] server systemd[1]: Started Caddy.104server # [8276731.914667] server systemd[1]: Finished Save Transient machine-id to Disk.105server # [8276732.049501] server systemd-logind[328]: New seat seat0.106server # [8276732.049591] server systemd[1]: Started User Login Management.107server # [8276732.050333] server systemd[1]: Starting linger-users.service...108server # [8276732.082352] server systemd[1]: linger-users.service: Deactivated successfully.109server # [8276732.082463] server systemd[1]: Finished linger-users.service.110server # [8276732.126618] server systemd[1]: etc-machine\x2did.mount: Deactivated successfully.111server # [8276732.523917] server authelia[363]: Configuration parsed and loaded successfully without errors.112server # [8276732.925074] server systemd-networkd[290]: eth1: Gained IPv6LL113server # [8276732.965675] server systemd[1]: Started Authelia authentication and authorization server.114server # [8276732.966451] server systemd[1]: Starting Punchcard time tracking (punchcard)...115server # [8276732.994031] server authelia[384]: time="2026-09-04T05:06:30Z" level=info msg="Authelia v4.39.20-nixpkgs is starting"116server # [8276732.994249] server authelia[384]: time="2026-09-04T05:06:30Z" level=info msg="Log severity set to info"117server # [8276733.006851] server authelia[384]: time="2026-09-04T05:06:30Z" level=info msg="Storage schema is being checked for updates"118server # [8276733.007484] server authelia[384]: time="2026-09-04T05:06:30Z" level=info msg="Storage schema migration from 0 to 24 is being attempted"119server # [8276733.024911] server authelia[384]: time="2026-09-04T05:06:30Z" level=info msg="Storage schema migration from 0 to 24 is complete"120server # [8276733.053754] server systemd[1]: Started Punchcard time tracking (punchcard).121server # [8276733.053886] server systemd[1]: Reached target Multi-User System.122server # [8276733.054055] server systemd[1]: Startup finished in 2.260s.123server # [8276733.058320] server systemd-resolved[199]: Switching to fallback DNS server 1.1.1.1#one.one.one.one.124server # [8276733.059203] server authelia[384]: time="2026-09-04T05:06:30Z" level=warning msg="Could not determine the clock offset due to an error" error="error occurred during dial: dial udp: lookup time.cloudflare.com: no such host"125server # [8276733.059516] server punchcard-punchcard-start[388]: 2026/09/04 05:06:30 Warning: .env file not found, using environment variables: open .env: no such file or directory126server # [8276733.063572] server authelia[384]: time="2026-09-04T05:06:30Z" level=info msg="Startup complete"127server # [8276733.063649] server authelia[384]: time="2026-09-04T05:06:30Z" level=info msg="Listening for non-TLS connections on '127.0.0.1:9091' path '/'" server=main service=server128server # [8276733.066823] server punchcard-punchcard-start[388]: 2026/09/04 05:06:30 OIDC authentication enabled with issuer: https://auth.test.clan129server # [8276733.066823] server punchcard-punchcard-start[388]: 2026/09/04 05:06:30 Redirect URL: https://punchcard.test.clan/callback130server # [8276733.067185] server punchcard-punchcard-start[388]: 2026/09/04 05:06:30 Server starting on :8099131server: (finished: waiting for unit authelia-authelia.service, in 3.14 seconds)132??? Warning (UserWarning): wait_until_succeeds(): passing a bare int/float as a duration is deprecated. Use datetime.timedelta instead.133 File "/nix/store/wsnxjqf86imlxfmxxxf02lp1kvcib7xs-nixos-test-driver-1.1/lib/python3.14/site-packages/test_driver/duration.py", line 39134server: waiting for success: curl -sf http://127.0.0.1:9091/api/health135??? Warning (UserWarning): execute(): passing a bare int/float as a duration is deprecated. Use datetime.timedelta instead.136 File "/nix/store/wsnxjqf86imlxfmxxxf02lp1kvcib7xs-nixos-test-driver-1.1/lib/python3.14/site-packages/test_driver/duration.py", line 39137server: (finished: waiting for success: curl -sf http://127.0.0.1:9091/api/health, in 0.01 seconds)138server: must succeed: test -f /run/authelia-authelia/users.json139server: (finished: must succeed: test -f /run/authelia-authelia/users.json, in 0.00 seconds)140server: must succeed: cat /run/authelia-authelia/users.json141server: (finished: must succeed: cat /run/authelia-authelia/users.json, in 0.00 seconds)142server: must succeed: test -f /run/authelia-authelia/oidc.json143server: (finished: must succeed: test -f /run/authelia-authelia/oidc.json, in 0.00 seconds)144server: must succeed: cat /run/authelia-authelia/oidc.json145server: (finished: must succeed: cat /run/authelia-authelia/oidc.json, in 0.00 seconds)146server: waiting for unit caddy.service147server: (finished: waiting for unit caddy.service, in 0.01 seconds)148server: waiting for success: curl -sf https://auth.test.clan/api/health149server: (finished: waiting for success: curl -sf https://auth.test.clan/api/health, in 0.02 seconds)150server: waiting for success: curl -sf https://auth.test.clan/.well-known/openid-configuration151server: (finished: waiting for success: curl -sf https://auth.test.clan/.well-known/openid-configuration, in 0.02 seconds)152??? Warning (UserWarning): wait_for_unit(): passing a bare int/float as a duration is deprecated. Use datetime.timedelta instead.153 File "/nix/store/wsnxjqf86imlxfmxxxf02lp1kvcib7xs-nixos-test-driver-1.1/lib/python3.14/site-packages/test_driver/duration.py", line 39154server: waiting for unit punchcard-punchcard.service155server: (finished: waiting for unit punchcard-punchcard.service, in 0.01 seconds)156server: waiting for success: curl -sf https://punchcard.test.clan/login157server: (finished: waiting for success: curl -sf https://punchcard.test.clan/login, in 0.02 seconds)158server: must succeed: cat /run/secrets/per-machine/server/authelia-user-bob/password159server: (finished: must succeed: cat /run/secrets/per-machine/server/authelia-user-bob/password, in 0.00 seconds)160server: must succeed: curl -s -o /dev/null -w '%{redirect_url}' -c /tmp/pc-cookies https://punchcard.test.clan/login/start161server: (finished: must succeed: curl -s -o /dev/null -w '%{redirect_url}' -c /tmp/pc-cookies https://punchcard.test.clan/login/start, in 0.04 seconds)162server: must succeed: curl -sf -X POST https://auth.test.clan/api/firstfactor -H 'Content-Type: application/json' -c /tmp/auth-cookies -d '{"username": "bob", "password": "appendage-dining-affix-subsidy-reference-salaried-cornball", "keepMeLoggedIn": false}'163server: (finished: must succeed: curl -sf -X POST https://auth.test.clan/api/firstfactor -H 'Content-Type: application/json' -c /tmp/auth-cookies -d '{"username": "bob", "password": "appendage-dining-affix-subsidy-reference-salaried-cornball", "keepMeLoggedIn": false}', in 1.06 seconds)164server: must succeed: curl -s -o /dev/null -w '%{redirect_url}' -b /tmp/auth-cookies -c /tmp/auth-cookies 'https://auth.test.clan/api/oidc/authorization?client_id=punchcard-punchcard&code_challenge=Ifo9Zftqec1OF2VEspleUjHjD84PI_iLecB_KhM5dU0&code_challenge_method=S256&redirect_uri=https%3A%2F%2Fpunchcard.test.clan%2Fcallback&response_type=code&scope=openid+profile+email&state=LHkgRNzvO_Ar-1WJpGu7-G7P-TkoAmPxrh_dBOoIcsY%3D'165server: (finished: must succeed: curl -s -o /dev/null -w '%{redirect_url}' -b /tmp/auth-cookies -c /tmp/auth-cookies 'https://auth.test.clan/api/oidc/authorization?client_id=punchcard-punchcard&code_challenge=Ifo9Zftqec1OF2VEspleUjHjD84PI_iLecB_KhM5dU0&code_challenge_method=S256&redirect_uri=https%3A%2F%2Fpunchcard.test.clan%2Fcallback&response_type=code&scope=openid+profile+email&state=LHkgRNzvO_Ar-1WJpGu7-G7P-TkoAmPxrh_dBOoIcsY%3D', in 0.15 seconds)166server: must succeed: curl -s -o /dev/null -w '%{http_code}' -c /tmp/pc-cookies -b /tmp/pc-cookies 'https://punchcard.test.clan/callback?code=authelia_ac_rRtoWR7Gnl_HUkLwdcGIw49Xx6hq5MihR6VWfZDwEt0.wYfhsPNBPC3zzcDaBpcvHkEVGrt1lnNz7GT6klNlzF8&iss=https%3A%2F%2Fauth.test.clan&scope=openid+profile+email&state=LHkgRNzvO_Ar-1WJpGu7-G7P-TkoAmPxrh_dBOoIcsY%3D'167server: (finished: must succeed: curl -s -o /dev/null -w '%{http_code}' -c /tmp/pc-cookies -b /tmp/pc-cookies 'https://punchcard.test.clan/callback?code=authelia_ac_rRtoWR7Gnl_HUkLwdcGIw49Xx6hq5MihR6VWfZDwEt0.wYfhsPNBPC3zzcDaBpcvHkEVGrt1lnNz7GT6klNlzF8&iss=https%3A%2F%2Fauth.test.clan&scope=openid+profile+email&state=LHkgRNzvO_Ar-1WJpGu7-G7P-TkoAmPxrh_dBOoIcsY%3D', in 0.09 seconds)168server: must succeed: curl -s -L -o /dev/null -w '%{http_code}' -b /tmp/pc-cookies -c /tmp/pc-cookies https://punchcard.test.clan/169server: (finished: must succeed: curl -s -L -o /dev/null -w '%{http_code}' -b /tmp/pc-cookies -c /tmp/pc-cookies https://punchcard.test.clan/, in 0.02 seconds)170(finished: run the VM test script, in 4.59 seconds)171server # [8276734.875688] server authelia[384]: time="2026-09-04T05:06:32Z" level=error msg="Access Request failed with error: Client authentication failed (e.g., unknown client, no client authentication included, or unsupported authentication method). The request was determined to be using 'token_endpoint_auth_method' method 'client_secret_basic', however the OAuth 2.0 client registration does not allow this method. The registered client with id 'punchcard-punchcard' is configured to only support 'token_endpoint_auth_method' method 'client_secret_post'. Either the Authorization Server client registration will need to have the 'token_endpoint_auth_method' updated to 'client_secret_basic' or the Relying Party will need to be configured to use 'client_secret_post'." method=POST path=/api/oidc/token remote_ip="::1"172server # [8276734.950535] server punchcard-punchcard-start[388]: 2026/09/04 05:06:32 User () logged in successfully173test script finished in 5.38s174cleanup175kill NspawnMachine (pid 51)176(finished: cleanup, in 0.11 seconds)177Container server terminated by signal KILL.