these 48 derivations will be built: /nix/store/0l8py4601wfwqg4fx3w4ivpbr2vhx697-tmpfiles.d.drv /nix/store/vj7k58h551bff84w4bg2zv3ymf5ms149-punchcard-19700101-go-modules.drv /nix/store/d2v34b7g3fn897bz4qn0zrwk3cvxylj6-punchcard-19700101.drv /nix/store/2xirgwxwdnkfdlgg5vbgzhlzy6fy0hqk-unit-script-punchcard-punchcard-start.drv /nix/store/11z2fb06dhbg1vxila8n9vzhy2c6c5s6-unit-punchcard-punchcard.service.drv /nix/store/19yxl8xc6zr56yjnl4mnigddysbjv8kz-generator-pki-root-ca.drv /nix/store/9h1p0i8sc9vrq35j5y4j5iyhm2jy92xx-decrypt-age-secrets.drv /nix/store/dbicnpl7flw7h9gfis5x0gj1c8l4h714-users-groups.json.drv /nix/store/1n6cmvnnqh7442l73989j42h5rbaqhrz-dry-activate.drv /nix/store/2g3qn803yb9l423bj5s17gmnzgrl5miy-generator-authelia-user-alice.drv /nix/store/7nx58xpgyn38njnxvhp93ga4mgwv0i2h-generator-authelia-oidc-punchcard-punchcard.drv /nix/store/cxmddbk09qby73df8i1jnx39xz605hws-generator-cert-auth.drv /nix/store/hy2d25xx9148x4d40hzsc840pv2abgam-generator-state-version.drv /nix/store/nlah9428k9qrcrw0y35k7mas8vzxfmyi-generator-cert-punchcard.drv /nix/store/x22zvhn87mr19xjzy7lwimq85k4av7hn-generator-authelia.drv /nix/store/2slmzn0salaribig43kbrwkyf5x9c24f-vars-check-punchcard.drv /nix/store/qc7i18aijv8rq0vv4xvlrcaxmlpjyacm-state-commands.drv /nix/store/d08lf6bdnqgn0rj725zwv5j80cdnsw8q-system-path.drv /nix/store/ydcqybmn8na96q8lhrn2bdamwzdpa81l-nss-cacert-3.126.drv /nix/store/8gbb6zq2473mawzfl1fdsr79jm2hysmm-unit-nix-daemon.service.drv /nix/store/wra2bp7xhyw960xkwzngllxhxn0ip9l6-Caddyfile.drv /nix/store/y6nh7wyrx6cjgi279x7w9zp546qbdn9j-Caddyfile-formatted.drv /nix/store/9nimql87z4xjqcngwn8mlllrdfkcg3pz-X-Reload-Triggers-caddy.drv /nix/store/fjyl7r62jc3j4ql98aalp5giilnmaimg-unit-caddy.service.drv /nix/store/v6pkblzw123vc7cab51prs77ic3j0pr5-dbus-1.drv /nix/store/aqy3790kxr1c2w5x8wk51zwng0703hi8-X-Restart-Triggers-dbus-broker.drv /nix/store/pcpkdczkwg4232hv7896gkm6cgaac7wm-unit-dbus-broker.service.drv /nix/store/784nxr2x03lnr2jhfw8md4cqxz84h40a-X-Restart-Triggers-systemd-tmpfiles-resetup.drv /nix/store/ss6awn1pyx848kk7462j7zdq1gx3ssx4-unit-systemd-tmpfiles-resetup.service.drv /nix/store/65hnh5z7vc6mgdia7i54jkpsgy6lb7km-config.yml.drv /nix/store/lc1cq1lyl691mfrp06lfic1rz3pljs91-authelia-users-input.json.drv /nix/store/qzkzq8xz2akbbydhpcnlh1vqi4k1rmaq-oidc-jwks.yaml.drv /nix/store/wxf68fswhyv38kz784ff441ajr4zbqi0-authelia-oidc-input.json.drv /nix/store/lna5z6lxs4p947jxahcz8hiydlcc6844-unit-script-authelia-authelia-pre-start.drv /nix/store/yfp9msrv4mk89bicwxx7rnwrvjg6bgiq-unit-authelia-authelia.service.drv /nix/store/51249f15d1jr6iba564h2mxjj9pg6jz1-system-units.drv /nix/store/d4zp8bx0827xzycqnjc3yjpw5qwpway3-unit-dbus-broker.service.drv /nix/store/ajdgbz96ychr48aj1hs3zjdql9ks8adk-user-units.drv /nix/store/r8pwy3n31lw767r2909fxzicazwwc85l-extra-hosts.drv /nix/store/yvrgyd8shwbg8dwzklrh2ssmn5cmsbqk-string-hosts.drv /nix/store/dlv3s24ksnqz0xhflqcrzycs0lmxiay6-hosts.drv /nix/store/dhwphl8nxwbharzzl3088qkkazdq6anx-etc.drv /nix/store/sp380wsfjfl7hzp432pkg3ll4mh7nj9l-activate.drv /nix/store/4aa9r1nx02rqpz8mcydx7d5sxhmvpkpf-nixos-system-server-test.drv /nix/store/q4zvvklqb3kw920irqiabmpa50spcjsr-testScript.drv /nix/store/713nhzz7z4jcf2p4fnp1z84zlpmda0mi-closure-info.drv /nix/store/c6lj7kj8cxs6bxl4l04cs72s8imfhm34-nixos-test-driver-punchcard.drv /nix/store/vgqmda4qr77zxpf6c0jgnm1zwzjwd2d5-container-test-run-punchcard.drv these 17 paths will be fetched (76.1 MiB download, 277.6 MiB unpacked): /nix/store/nybnsmn4ikplgqwlmym47dcrrhv3l8n1-authelia-4.39.20 /nix/store/gbj6xc7544izphbg2mc8c4l3k2iaq36h-ensure-all-wrappers-paths-exist /nix/store/863k45gpmsq0jnjf4kzr7kg6kjwyn7zl-go-1.26.6 /nix/store/q44nn9jww47lgba100jnn0wqgazc6nrd-python3.13-cbor2-5.8.0 /nix/store/fqz8w43mmq5a644a3iz11v89nvgld4jq-python3.13-markdown-it-py-4.0.0 /nix/store/6jf00mnrh3ikdprg0011r6vbci1fprks-python3.13-mdurl-0.1.2 /nix/store/cdkrnwbgbp2h6ayiwwxim4h5sq5mzkz2-python3.13-python-dateutil-2.9.0.post0 /nix/store/pbdnqc0qrkaphqhgkqafzrjz15sz28bz-python3.13-rich-14.3.3 /nix/store/0j5cf45ils1sn6wdmbjgw7m0m0nkij27-python3.13-rich-argparse-1.7.2 /nix/store/xb00k37j80wch2dkn518pd4pgvh2jlyg-python3.13-ruamel-base-1.0.0 /nix/store/48v9gjy014c001lsa6ra94v229s9hsqp-python3.13-ruamel-yaml-0.19.1 /nix/store/h5b92bg0v5v9nxisaqs2c06xs2km2z3j-python3.13-ruamel-yaml-clib-0.2.15 /nix/store/19p3l1r8bjqk8c2mi6mrl8x5qkwsqh2p-python3.13-tomlkit-0.12.5 /nix/store/zz95x0ggv0icwfb31chp8sb1wb483n9y-python3.13-u-msgpack-python-2.8.0 /nix/store/adq8ga9krg9mbrh35yr3xjcw7d2y3lqn-python3.13-xkcdpass-1.30.0 /nix/store/yld410i7bxb5hgj6qwajp4agdfx13jnn-remarshal-0.17.1 /nix/store/qxn0ahcvcn1h9axh2mlip3h115766pdf-systemd-default-tmpfiles building '/nix/store/yvrgyd8shwbg8dwzklrh2ssmn5cmsbqk-string-hosts.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/wxf68fswhyv38kz784ff441ajr4zbqi0-authelia-oidc-input.json.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/lc1cq1lyl691mfrp06lfic1rz3pljs91-authelia-users-input.json.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/wxf68fswhyv38kz784ff441ajr4zbqi0-authelia-oidc-input.json.drv' building '/nix/store/yvrgyd8shwbg8dwzklrh2ssmn5cmsbqk-string-hosts.drv' building '/nix/store/ydcqybmn8na96q8lhrn2bdamwzdpa81l-nss-cacert-3.126.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/qc7i18aijv8rq0vv4xvlrcaxmlpjyacm-state-commands.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/wra2bp7xhyw960xkwzngllxhxn0ip9l6-Caddyfile.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/x22zvhn87mr19xjzy7lwimq85k4av7hn-generator-authelia.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/nlah9428k9qrcrw0y35k7mas8vzxfmyi-generator-cert-punchcard.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/q4zvvklqb3kw920irqiabmpa50spcjsr-testScript.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/dbicnpl7flw7h9gfis5x0gj1c8l4h714-users-groups.json.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/lc1cq1lyl691mfrp06lfic1rz3pljs91-authelia-users-input.json.drv' building '/nix/store/x22zvhn87mr19xjzy7lwimq85k4av7hn-generator-authelia.drv' building '/nix/store/nlah9428k9qrcrw0y35k7mas8vzxfmyi-generator-cert-punchcard.drv' building '/nix/store/q4zvvklqb3kw920irqiabmpa50spcjsr-testScript.drv' building '/nix/store/qc7i18aijv8rq0vv4xvlrcaxmlpjyacm-state-commands.drv' building '/nix/store/9h1p0i8sc9vrq35j5y4j5iyhm2jy92xx-decrypt-age-secrets.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/dbicnpl7flw7h9gfis5x0gj1c8l4h714-users-groups.json.drv' building '/nix/store/wra2bp7xhyw960xkwzngllxhxn0ip9l6-Caddyfile.drv' building '/nix/store/d08lf6bdnqgn0rj725zwv5j80cdnsw8q-system-path.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/y6nh7wyrx6cjgi279x7w9zp546qbdn9j-Caddyfile-formatted.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/ydcqybmn8na96q8lhrn2bdamwzdpa81l-nss-cacert-3.126.drv' nss-cacert-3.126> Running phase: unpackPhase nss-cacert-3.126> Running phase: patchPhase nss-cacert-3.126> Running phase: updateAutotoolsGnuConfigScriptsPhase nss-cacert-3.126> Running phase: configurePhase nss-cacert-3.126> no configure script, doing nothing nss-cacert-3.126> Running phase: buildPhase nss-cacert-3.126> Running phase: installPhase nss-cacert-3.126> Running phase: fixupPhase nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/aad791x8p52i8nn35skky2nh1lr1brbn-nss-cacert-3.126 nss-cacert-3.126> checking for references to /build/ in /nix/store/aad791x8p52i8nn35skky2nh1lr1brbn-nss-cacert-3.126... nss-cacert-3.126> patching script interpreter paths in /nix/store/aad791x8p52i8nn35skky2nh1lr1brbn-nss-cacert-3.126 nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/4msbmmgw8v94j3x9ljyqr0lh5p4zj716-nss-cacert-3.126-unbundled nss-cacert-3.126> checking for references to /build/ in /nix/store/4msbmmgw8v94j3x9ljyqr0lh5p4zj716-nss-cacert-3.126-unbundled... nss-cacert-3.126> patching script interpreter paths in /nix/store/4msbmmgw8v94j3x9ljyqr0lh5p4zj716-nss-cacert-3.126-unbundled nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/5v50vnw6iljamx8cfalxh1w1wpmsri4k-nss-cacert-3.126-p11kit nss-cacert-3.126> checking for references to /build/ in /nix/store/5v50vnw6iljamx8cfalxh1w1wpmsri4k-nss-cacert-3.126-p11kit... nss-cacert-3.126> patching script interpreter paths in /nix/store/5v50vnw6iljamx8cfalxh1w1wpmsri4k-nss-cacert-3.126-p11kit nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/vnbryykgjm93gyqdr1sygm107lkx8a0g-nss-cacert-3.126-hashed nss-cacert-3.126> checking for references to /build/ in /nix/store/vnbryykgjm93gyqdr1sygm107lkx8a0g-nss-cacert-3.126-hashed... nss-cacert-3.126> patching script interpreter paths in /nix/store/vnbryykgjm93gyqdr1sygm107lkx8a0g-nss-cacert-3.126-hashed building '/nix/store/65hnh5z7vc6mgdia7i54jkpsgy6lb7km-config.yml.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/8gbb6zq2473mawzfl1fdsr79jm2hysmm-unit-nix-daemon.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/d2v34b7g3fn897bz4qn0zrwk3cvxylj6-punchcard-19700101.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/y6nh7wyrx6cjgi279x7w9zp546qbdn9j-Caddyfile-formatted.drv' building '/nix/store/d08lf6bdnqgn0rj725zwv5j80cdnsw8q-system-path.drv' system-path> structuredAttrs is enabled system-path> created 1809 symlinks in user environment building '/nix/store/9nimql87z4xjqcngwn8mlllrdfkcg3pz-X-Reload-Triggers-caddy.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/dlv3s24ksnqz0xhflqcrzycs0lmxiay6-hosts.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/2slmzn0salaribig43kbrwkyf5x9c24f-vars-check-punchcard.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/65hnh5z7vc6mgdia7i54jkpsgy6lb7km-config.yml.drv' config.yml> structuredAttrs is enabled building '/nix/store/lna5z6lxs4p947jxahcz8hiydlcc6844-unit-script-authelia-authelia-pre-start.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/9h1p0i8sc9vrq35j5y4j5iyhm2jy92xx-decrypt-age-secrets.drv' building '/nix/store/1n6cmvnnqh7442l73989j42h5rbaqhrz-dry-activate.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/v6pkblzw123vc7cab51prs77ic3j0pr5-dbus-1.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/8gbb6zq2473mawzfl1fdsr79jm2hysmm-unit-nix-daemon.service.drv' building '/nix/store/9nimql87z4xjqcngwn8mlllrdfkcg3pz-X-Reload-Triggers-caddy.drv' building '/nix/store/d2v34b7g3fn897bz4qn0zrwk3cvxylj6-punchcard-19700101.drv' punchcard-19700101> Running phase: unpackPhase punchcard-19700101> unpacking source archive /nix/store/kri9pf91gs36fzj416wkimbclcfaqhcw-kcacsi85z0l10lwkcrcs1sm24ff8az3r-source punchcard-19700101> source root is kcacsi85z0l10lwkcrcs1sm24ff8az3r-source punchcard-19700101> Running phase: patchPhase punchcard-19700101> Running phase: updateAutotoolsGnuConfigScriptsPhase punchcard-19700101> Running phase: configurePhase punchcard-19700101> Running phase: buildPhase punchcard-19700101> Building subPackage ./. building '/nix/store/fjyl7r62jc3j4ql98aalp5giilnmaimg-unit-caddy.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/dlv3s24ksnqz0xhflqcrzycs0lmxiay6-hosts.drv' building '/nix/store/2slmzn0salaribig43kbrwkyf5x9c24f-vars-check-punchcard.drv' vars-check-punchcard> Running vars check using Nix-based executor... vars-check-punchcard> Executing shared generators... vars-check-punchcard> Executing shared generator: authelia-oidc-punchcard-punchcard vars-check-punchcard> + set -euo pipefail vars-check-punchcard> + PATH=/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin:/nix/store/v49dnvwkxyzkpxy5sqclncf54blvjs43-openssl-3.6.3-bin/bin:/nix/store/nybnsmn4ikplgqwlmym47dcrrhv3l8n1-authelia-4.39.20/bin:/nix/store/vryxwvapfxidddqmswhfdv9n5dn4k1rq-gnused-4.10/bin:/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin vars-check-punchcard> + [[ ! -d /etc ]] vars-check-punchcard> + mkdir -p /etc vars-check-punchcard> + cat vars-check-punchcard> ++ id -g vars-check-punchcard> + cat vars-check-punchcard> ++ id -u vars-check-punchcard> ++ id -g vars-check-punchcard> + cat vars-check-punchcard> + mkdir -p /output vars-check-punchcard> + openssl rand -hex 32 vars-check-punchcard> + sed 's/^Digest: //' vars-check-punchcard> ++ cat /output/client_secret vars-check-punchcard> + authelia crypto hash generate argon2 --password ef3acd83f7fc1ad76e0b0363831495040f3010b8483a43317024bc5e527f2fa8 vars-check-punchcard> ✓ Generated shared file: authelia-oidc-punchcard-punchcard/client_secret vars-check-punchcard> ✓ Generated shared file: authelia-oidc-punchcard-punchcard/client_secret_hash vars-check-punchcard> ✓ Shared Generator authelia-oidc-punchcard-punchcard completed vars-check-punchcard> Executing shared generator: pki-root-ca vars-check-punchcard> + set -euo pipefail vars-check-punchcard> + PATH=/nix/store/v49dnvwkxyzkpxy5sqclncf54blvjs43-openssl-3.6.3-bin/bin:/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin vars-check-punchcard> + [[ ! -d /etc ]] vars-check-punchcard> + mkdir -p /etc vars-check-punchcard> + cat vars-check-punchcard> ++ id -g vars-check-punchcard> + cat vars-check-punchcard> ++ id -u vars-check-punchcard> ++ id -g vars-check-punchcard> + cat vars-check-punchcard> + openssl genrsa -out /output/ca.key 4096 building '/nix/store/1n6cmvnnqh7442l73989j42h5rbaqhrz-dry-activate.drv' building '/nix/store/lna5z6lxs4p947jxahcz8hiydlcc6844-unit-script-authelia-authelia-pre-start.drv' building '/nix/store/yfp9msrv4mk89bicwxx7rnwrvjg6bgiq-unit-authelia-authelia.service.drv' on 'ssh-ng://builder@build01.clan.lol' vars-check-punchcard> + openssl req -x509 -new -nodes -key /output/ca.key -sha256 -days 3650 -subj '/CN=Clan Root CA' -out /output/ca.crt vars-check-punchcard> ✓ Generated shared file: pki-root-ca/ca.crt vars-check-punchcard> ✓ Generated shared file: pki-root-ca/ca.key vars-check-punchcard> ✓ Shared Generator pki-root-ca completed vars-check-punchcard> ✓ Shared generators completed vars-check-punchcard> Processing machine: server vars-check-punchcard> Generator execution order: authelia -> authelia-user-alice -> cert-auth -> cert-punchcard -> state-version vars-check-punchcard> Executing generator: authelia vars-check-punchcard> + set -euo pipefail vars-check-punchcard> + PATH=/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin:/nix/store/v49dnvwkxyzkpxy5sqclncf54blvjs43-openssl-3.6.3-bin/bin:/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin vars-check-punchcard> + [[ ! -d /etc ]] vars-check-punchcard> + mkdir -p /etc vars-check-punchcard> + cat vars-check-punchcard> ++ id -g vars-check-punchcard> + cat vars-check-punchcard> ++ id -u vars-check-punchcard> ++ id -g vars-check-punchcard> + cat vars-check-punchcard> + mkdir -p /output vars-check-punchcard> + openssl rand -hex 64 vars-check-punchcard> + openssl rand -hex 64 vars-check-punchcard> + openssl rand -hex 64 vars-check-punchcard> + openssl rand -hex 64 vars-check-punchcard> + openssl genrsa -out /output/oidc-jwks-key 4096 building '/nix/store/fjyl7r62jc3j4ql98aalp5giilnmaimg-unit-caddy.service.drv' building '/nix/store/yfp9msrv4mk89bicwxx7rnwrvjg6bgiq-unit-authelia-authelia.service.drv' vars-check-punchcard> ✓ Generated file: authelia/jwt-secret vars-check-punchcard> ✓ Generated file: authelia/oidc-hmac-secret vars-check-punchcard> ✓ Generated file: authelia/oidc-jwks-key vars-check-punchcard> ✓ Generated file: authelia/session-secret vars-check-punchcard> ✓ Generated file: authelia/storage-encryption-key vars-check-punchcard> ✓ Generator authelia completed vars-check-punchcard> Executing generator: authelia-user-alice vars-check-punchcard> + set -euo pipefail vars-check-punchcard> + PATH=/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin:/nix/store/nybnsmn4ikplgqwlmym47dcrrhv3l8n1-authelia-4.39.20/bin:/nix/store/adq8ga9krg9mbrh35yr3xjcw7d2y3lqn-python3.13-xkcdpass-1.30.0/bin:/nix/store/vryxwvapfxidddqmswhfdv9n5dn4k1rq-gnused-4.10/bin:/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin vars-check-punchcard> + [[ ! -d /etc ]] vars-check-punchcard> + mkdir -p /etc vars-check-punchcard> + cat vars-check-punchcard> ++ id -g vars-check-punchcard> + cat vars-check-punchcard> ++ id -u vars-check-punchcard> ++ id -g vars-check-punchcard> + cat vars-check-punchcard> + mkdir -p /output vars-check-punchcard> + xkcdpass -n 7 -d- vars-check-punchcard> + sed 's/^Digest: //' vars-check-punchcard> ++ cat /output/password vars-check-punchcard> + authelia crypto hash generate argon2 --password width-crafty-avenge-germicide-quickness-famished-uptight vars-check-punchcard> ✓ Generated file: authelia-user-alice/password vars-check-punchcard> ✓ Generated file: authelia-user-alice/password-hash vars-check-punchcard> ✓ Generator authelia-user-alice completed vars-check-punchcard> Executing generator: cert-auth vars-check-punchcard> + set -euo pipefail vars-check-punchcard> + PATH=/nix/store/v49dnvwkxyzkpxy5sqclncf54blvjs43-openssl-3.6.3-bin/bin:/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin vars-check-punchcard> + [[ ! -d /etc ]] vars-check-punchcard> + mkdir -p /etc vars-check-punchcard> + cat vars-check-punchcard> ++ id -g vars-check-punchcard> + cat vars-check-punchcard> ++ id -u vars-check-punchcard> ++ id -g vars-check-punchcard> + cat vars-check-punchcard> + openssl genrsa -out /output/auth.key 4096 warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy vars-check-punchcard> + openssl req -new -key /output/auth.key -subj /CN=auth.test.clan -out endpoint.csr vars-check-punchcard> + printf subjectAltName=DNS:auth.test.clan vars-check-punchcard> + openssl x509 -req -in endpoint.csr -CA /input/pki-root-ca/ca.crt -CAkey /input/pki-root-ca/ca.key -CAcreateserial -days 365 -sha256 -extfile san.cnf -out /output/auth.crt vars-check-punchcard> Certificate request self-signature ok vars-check-punchcard> subject=CN=auth.test.clan vars-check-punchcard> + cat /output/auth.crt /input/pki-root-ca/ca.crt vars-check-punchcard> ✓ Generated file: cert-auth/auth.crt vars-check-punchcard> ✓ Generated file: cert-auth/auth.fullchain.crt vars-check-punchcard> ✓ Generated file: cert-auth/auth.key vars-check-punchcard> ✓ Generator cert-auth completed vars-check-punchcard> Executing generator: cert-punchcard vars-check-punchcard> + set -euo pipefail vars-check-punchcard> + PATH=/nix/store/v49dnvwkxyzkpxy5sqclncf54blvjs43-openssl-3.6.3-bin/bin:/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin vars-check-punchcard> + [[ ! -d /etc ]] vars-check-punchcard> + mkdir -p /etc vars-check-punchcard> + cat vars-check-punchcard> ++ id -g vars-check-punchcard> + cat vars-check-punchcard> ++ id -u vars-check-punchcard> ++ id -g vars-check-punchcard> + cat vars-check-punchcard> + openssl genrsa -out /output/punchcard.key 4096 vars-check-punchcard> + openssl req -new -key /output/punchcard.key -subj /CN=punchcard.test.clan -out endpoint.csr vars-check-punchcard> + printf subjectAltName=DNS:punchcard.test.clan vars-check-punchcard> + openssl x509 -req -in endpoint.csr -CA /input/pki-root-ca/ca.crt -CAkey /input/pki-root-ca/ca.key -CAcreateserial -days 365 -sha256 -extfile san.cnf -out /output/punchcard.crt vars-check-punchcard> Certificate request self-signature ok vars-check-punchcard> subject=CN=punchcard.test.clan vars-check-punchcard> + cat /output/punchcard.crt /input/pki-root-ca/ca.crt vars-check-punchcard> ✓ Generated file: cert-punchcard/punchcard.crt vars-check-punchcard> ✓ Generated file: cert-punchcard/punchcard.fullchain.crt vars-check-punchcard> ✓ Generated file: cert-punchcard/punchcard.key vars-check-punchcard> ✓ Generator cert-punchcard completed vars-check-punchcard> Executing generator: state-version vars-check-punchcard> + set -euo pipefail vars-check-punchcard> + PATH=/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin vars-check-punchcard> + [[ ! -d /etc ]] vars-check-punchcard> + mkdir -p /etc vars-check-punchcard> + cat vars-check-punchcard> ++ id -g vars-check-punchcard> + cat vars-check-punchcard> ++ id -u vars-check-punchcard> ++ id -g vars-check-punchcard> + cat vars-check-punchcard> + echo -n 26.05 vars-check-punchcard> ✓ Generated file: state-version/version vars-check-punchcard> ✓ Generator state-version completed vars-check-punchcard> ✓ Machine server completed vars-check-punchcard> ✓ All vars checks completed successfully building '/nix/store/v6pkblzw123vc7cab51prs77ic3j0pr5-dbus-1.drv' building '/nix/store/aqy3790kxr1c2w5x8wk51zwng0703hi8-X-Restart-Triggers-dbus-broker.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/aqy3790kxr1c2w5x8wk51zwng0703hi8-X-Restart-Triggers-dbus-broker.drv' building '/nix/store/d4zp8bx0827xzycqnjc3yjpw5qwpway3-unit-dbus-broker.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/pcpkdczkwg4232hv7896gkm6cgaac7wm-unit-dbus-broker.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/d4zp8bx0827xzycqnjc3yjpw5qwpway3-unit-dbus-broker.service.drv' building '/nix/store/pcpkdczkwg4232hv7896gkm6cgaac7wm-unit-dbus-broker.service.drv' building '/nix/store/ajdgbz96ychr48aj1hs3zjdql9ks8adk-user-units.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/ajdgbz96ychr48aj1hs3zjdql9ks8adk-user-units.drv' punchcard-19700101> buildPhase completed in 1 minutes 3 seconds punchcard-19700101> Running phase: checkPhase punchcard-19700101> ok punchcard 0.050s punchcard-19700101> checkPhase completed in 1 minutes 0 seconds punchcard-19700101> Running phase: installPhase punchcard-19700101> Running phase: fixupPhase punchcard-19700101> shrinking RPATHs of ELF executables and libraries in /nix/store/9v3xgkzab892l332bqbbn9sz95v437n3-punchcard-19700101 punchcard-19700101> shrinking /nix/store/9v3xgkzab892l332bqbbn9sz95v437n3-punchcard-19700101/bin/punchcard punchcard-19700101> checking for references to /build/ in /nix/store/9v3xgkzab892l332bqbbn9sz95v437n3-punchcard-19700101... punchcard-19700101> patching script interpreter paths in /nix/store/9v3xgkzab892l332bqbbn9sz95v437n3-punchcard-19700101 punchcard-19700101> stripping (with command strip and flags -S -p) in /nix/store/9v3xgkzab892l332bqbbn9sz95v437n3-punchcard-19700101/bin building '/nix/store/2xirgwxwdnkfdlgg5vbgzhlzy6fy0hqk-unit-script-punchcard-punchcard-start.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/2xirgwxwdnkfdlgg5vbgzhlzy6fy0hqk-unit-script-punchcard-punchcard-start.drv' building '/nix/store/11z2fb06dhbg1vxila8n9vzhy2c6c5s6-unit-punchcard-punchcard.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/11z2fb06dhbg1vxila8n9vzhy2c6c5s6-unit-punchcard-punchcard.service.drv' building '/nix/store/51249f15d1jr6iba564h2mxjj9pg6jz1-system-units.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/51249f15d1jr6iba564h2mxjj9pg6jz1-system-units.drv' building '/nix/store/dhwphl8nxwbharzzl3088qkkazdq6anx-etc.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/dhwphl8nxwbharzzl3088qkkazdq6anx-etc.drv' building '/nix/store/sp380wsfjfl7hzp432pkg3ll4mh7nj9l-activate.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/sp380wsfjfl7hzp432pkg3ll4mh7nj9l-activate.drv' building '/nix/store/4aa9r1nx02rqpz8mcydx7d5sxhmvpkpf-nixos-system-server-test.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/4aa9r1nx02rqpz8mcydx7d5sxhmvpkpf-nixos-system-server-test.drv' nixos-system-server-test> structuredAttrs is enabled building '/nix/store/713nhzz7z4jcf2p4fnp1z84zlpmda0mi-closure-info.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/713nhzz7z4jcf2p4fnp1z84zlpmda0mi-closure-info.drv' closure-info> structuredAttrs is enabled building '/nix/store/c6lj7kj8cxs6bxl4l04cs72s8imfhm34-nixos-test-driver-punchcard.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/c6lj7kj8cxs6bxl4l04cs72s8imfhm34-nixos-test-driver-punchcard.drv' nixos-test-driver-punchcard> Running type check (enable/disable: config.skipTypeCheck) nixos-test-driver-punchcard> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck nixos-test-driver-punchcard> Success: no issues found in 1 source file building '/nix/store/vgqmda4qr77zxpf6c0jgnm1zwzjwd2d5-container-test-run-punchcard.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/vgqmda4qr77zxpf6c0jgnm1zwzjwd2d5-container-test-run-punchcard.drv' container-test-run-punchcard> additionally exposed symbols: container-test-run-punchcard> server, container-test-run-punchcard> start_all, machines, driver, Machine, wait_for_signal container-test-run-punchcard> Starting server container-test-run-punchcard> container-test-run-punchcard> container-test-run-punchcard> <<< NixOS Stage 2 >>> container-test-run-punchcard> container-test-run-punchcard> booting system configuration /nix/store/2m1r5j461prpixn79ayvkjdhshb1lcmf-nixos-system-server-test container-test-run-punchcard> running activation script... container-test-run-punchcard> setting up /etc... container-test-run-punchcard> 2: host0@if3: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-punchcard> link/ether be:aa:dd:39:86:e7 brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-punchcard> setting up age secrets... container-test-run-punchcard> starting systemd... container-test-run-punchcard> systemd 260.2 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-punchcard> Detected virtualization systemd-nspawn. container-test-run-punchcard> Detected architecture arm64. container-test-run-punchcard> Detected first boot. container-test-run-punchcard> Initializing machine ID from container UUID. container-test-run-punchcard> Applying preset policy. container-test-run-punchcard> Populated /etc with preset unit settings. container-test-run-punchcard> Queued start job for default target Multi-User System. container-test-run-punchcard> container-test-run-punchcard> container-test-run-punchcard> container-test-run-punchcard> <<< Welcome to NixOS test (aarch64) - console >>> container-test-run-punchcard> + systemd-run /bin/sh -c '/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin/sleep 999999999 && echo e05c56cc-0225-477e-83d5-2fd7cc87fb74' container-test-run-punchcard> Running as unit: run-p531-i816638.service; invocation ID: a59c7edb39324222b00b6574273a670d container-test-run-punchcard> To attach to container server run on the same machine that runs the test: container-test-run-punchcard> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*e05c56cc-0225-477e-83d5-2fd7cc87fb74') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-punchcard> container-test-run-punchcard> To inject external network and continue test, run: container-test-run-punchcard> sudo /nix/store/d6kq2phq0zy5invmkfgg8h35zxaf13s9-python3-3.13.15/bin/python3.13 /nix/store/f4nvkcws5x7zcpbn7zsscrdviq2jxrpi-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py e05c56cc-0225-477e-83d5-2fd7cc87fb74 container-test-run-punchcard> + systemctl --no-pager show authelia-authelia.service container-test-run-punchcard> server: waiting for success: curl -sf http://127.0.0.1:9091/api/health container-test-run-punchcard> + curl -sf http://127.0.0.1:9091/api/health container-test-run-punchcard> (finished: waiting for success: curl -sf http://127.0.0.1:9091/api/health, in 0.02 seconds) container-test-run-punchcard> + systemctl --no-pager show caddy.service container-test-run-punchcard> + systemctl --no-pager show punchcard-punchcard.service container-test-run-punchcard> server: waiting for success: curl -sf https://punchcard.test.clan/login container-test-run-punchcard> + curl -sf https://punchcard.test.clan/login container-test-run-punchcard> (finished: waiting for success: curl -sf https://punchcard.test.clan/login, in 0.10 seconds) container-test-run-punchcard> + curl -s -o /dev/null -w '%{redirect_url}' -c /tmp/pc-cookies https://punchcard.test.clan/login/start container-test-run-punchcard> post-build step Upload to niks3: ok time=2026-09-05T05:07:15.675Z level=INFO msg="Uploading 0 paths to niks3.clan.lol (1 already cached)" time=2026-09-05T05:07:15.952Z level=INFO msg="Uploading 1 narinfos" time=2026-09-05T05:07:16.277Z level=INFO msg="Upload complete. (651ms)"