these 88 derivations will be built:
  /nix/store/0q1v8r8dfv919miwqznhkx4qs2pspmnp-unit-container-getty-.service.drv
  /nix/store/13kal9v8fxip41b129ifnhca9x62cgwi-generator-cert-auth.drv
  /nix/store/1j6wlci3fnch7ah4cs6wif1rc0g74nwj-Caddyfile.drv
  /nix/store/1aca5zx9wlvyqpdz542pvlf2vp25wj5f-Caddyfile-formatted.drv
  /nix/store/r406gpb9y9w11rhc003k7mfpmsy99969-system-path.drv
  /nix/store/3j057aqcscd264s1hcs96fmaq0jnrcz1-dbus-1.drv
  /nix/store/kmwyb0kvkh252mdq5x99m5fmf4cjggz1-X-Restart-Triggers-dbus-broker.drv
  /nix/store/731y3z0b69cm3gzdlk8d4jflp27jw53z-unit-dbus-broker.service.drv
  /nix/store/2bc2625wvbrqp5cwn81bidx6zlv37qld-user-units.drv
  /nix/store/2gisvgf3srvc4idjrks0vy8cia11cm96-punchcard-19700101.drv
  /nix/store/h1091l5hkmpsgpxmrr2lkbkfsh9f5kvv-users-groups.json.drv
  /nix/store/m2s0z64bsanlfhfpjz2wp9k0hq7ihx3a-decrypt-age-secrets.drv
  /nix/store/3fxf08m380rg6885llfsfm5rlad61ra5-dry-activate.drv
  /nix/store/3mwgkyxlmg6lqjmlawwp1046s908mq18-unit-user-.service.drv
  /nix/store/41kqmw1jvksqcb8pw4cj5ybk24jsd44s-unit-systemd-oomd.service.drv
  /nix/store/5gnfdj83qn9vkkdaqf4ws6hlmiyc1dmx-generator-authelia-user-bob.drv
  /nix/store/5m5ij7njy36jadpzpciwq5yc8qwf4g4g-oidc-jwks.yaml.drv
  /nix/store/66j3bbx11jgydhhbyw72hynhvfikl7ra-system-shutdown.drv
  /nix/store/6p5hjn69dqpw2vnyi3qrnib17nn8frly-unit-systemd-nspawn-.service.drv
  /nix/store/6r4g3wya8i6n36bmc35sb1b1pj2qgcjm-unit-script-punchcard-punchcard-start.drv
  /nix/store/7hakx66qwq5vchnmh9q37mzw2figgj7b-unit-systemd-pstore.service.drv
  /nix/store/890zfshx41h3hsv5j9hnflg6c5h0lkn6-config.yml.drv
  /nix/store/8fvcfc5ia6iyiqzliif9n96x9swl3xzz-generator-authelia-oidc-punchcard-punchcard.drv
  /nix/store/8ks354ssdqha9wjq86p619pvzvn9kbpq-systemd.drv
  /nix/store/ai2c4r5pr6h7li2yl13s969yggg3sz5w-unit-reload-systemd-vconsole-setup.service.drv
  /nix/store/gbk3j68cah9kb02k4qsiwgjnqcsaai9f-testScript.drv
  /nix/store/b9n5rv2494znazj57s8p6l4pqwxhfxcn-systemd-user.pam.drv
  /nix/store/bimxz5j3ds5ligibxi7lh5srkgq5siz0-unit-dbus-broker.service.drv
  /nix/store/ir50v6s0qyx5qshrfyvrzib4zskjsmwh-nss-cacert-3.126.drv
  /nix/store/c1lg12v3faijlxhswkn79nvwqx6lga7n-unit-nix-daemon.service.drv
  /nix/store/cg1bz5x5dxif40dd0kw89d4wyc6apxgf-unit-serial-getty-.service.drv
  /nix/store/cr73mac7qr1g5cnaqq44474wb6621ps5-unit-firewall.service.drv
  /nix/store/d3w7nmmva04xdp5l2izpjxf9bhbyy4y0-unit-systemd-logind.service.drv
  /nix/store/dd44l8982rf2ilw8h63c4345bn15dmyq-unit-systemd-remount-fs.service.drv
  /nix/store/f2pm9wnl667zbalcpjifxir79rz0y1x6-unit-prepare-kexec.service.drv
  /nix/store/fjxvm0512cmnz567canq95clafqr0bac-unit-nscd.service.drv
  /nix/store/iwbw3h0pdlb6dib1m44kw9nkz17pmlzf-etc-sysctl.d-60-nixos.conf.drv
  /nix/store/djvzyjan4rc3fp8y5g109ay1wa45q6hh-X-Restart-Triggers-systemd-sysctl.drv
  /nix/store/flw7cg2mxw4q0r8703cai0v971lyg11z-unit-systemd-sysctl.service.drv
  /nix/store/ggks64g8s48m6bsaizhajndp7hx1qf7r-unit-generate-shutdown-ramfs.service.drv
  /nix/store/gj5xbix5qzlzl05qjjrf7k4ngx7v6sa6-unit-getty-.service.drv
  /nix/store/gkp68vm3nsdfdp8disqkmsaw2lj1f4ap-unit-nix-gc.service.drv
  /nix/store/gvc4b5y9ml1z3k8183wi9knaq19s0390-unit-systemd-random-seed.service.drv
  /nix/store/hiqgszldikfrhzl9ppnygrq6s5hi4bfa-unit-lastlog2-import.service.drv
  /nix/store/hq2048mmyza9lb0j2qwribsjmmslk1yz-unit-register-nix-paths.service.drv
  /nix/store/jlmpsd7vg0m1ypa803dg4j5km144kv4r-unit-network-local-commands.service.drv
  /nix/store/rkx4kcx8a5kpxv1p5ddms2f3crghyqgw-X-Reload-Triggers-caddy.drv
  /nix/store/n8p174pqbkvmm5xksaxg7iv7pdjjyvwd-unit-caddy.service.drv
  /nix/store/p4phpzl8lsqdzaabgn9pdcjrgqyqsq7n-unit-systemd-user-sessions.service.drv
  /nix/store/pvzk2cwr3ywy99b0wr1lmklygaa3z5yk-unit-modprobe-.service.drv
  /nix/store/g69p96gvpfhrrxwbr4qpjmyk2rv34j05-unit-script-linger-users-start.drv
  /nix/store/r6nfkva1py0gxyaazhg5hik2j30f4s4s-unit-linger-users.service.drv
  /nix/store/ra030475mch5srf9qrz030r76j7jg3k7-unit-systemd-journald-.service.drv
  /nix/store/vcsf1nscmbf4sz2ihpqmyy5rn64vnrrd-unit-systemd-journal-flush.service.drv
  /nix/store/gc813ncislaxc73zcmjg2ah4njdhzdk0-authelia-users-input.json.drv
  /nix/store/wav3npc2wp4rqrg7q01gay7siiix3m8z-authelia-oidc-input.json.drv
  /nix/store/ixk3g28v3cpp4pk119sivk2cbvvp3s4c-unit-script-authelia-authelia-pre-start.drv
  /nix/store/vjpq38s43m9m9l4qdzpyh6iginq27m0w-unit-authelia-authelia.service.drv
  /nix/store/vpl6dvv632j4v3i5gfrx318dn1nrpnx0-unit-nix-optimise.service.drv
  /nix/store/vrip5fvs5s9s2h1vpa14mq1pmyavfmhl-unit-systemd-importd.service.drv
  /nix/store/w3fhn8f3gb9gj8vda1k8y50r9v9v359g-unit-systemd-update-utmp.service.drv
  /nix/store/w48sz4n9l31ph0y55mpcg9ypy14bz7sn-unit-systemd-networkd.service.drv
  /nix/store/wrwsl1jfpz1ciazmzss2xrmyfl16slq1-unit-punchcard-punchcard.service.drv
  /nix/store/y48cmniw0j0gq63pr77kvs63yaznfsh1-unit-systemd-fsck-.service.drv
  /nix/store/yg6f2zjayl07qzrfhglpjxcxc4a8mrvw-unit-user-runtime-dir-.service.drv
  /nix/store/ykv6nklp9pi1w6ai0hvabm46sp75ry4n-unit-systemd-journald.service.drv
  /nix/store/zb7nqwsmim7w85x73byw0xw3jxhah4xp-unit-qemu-guest-agent.service.drv
  /nix/store/zk0pi53bb0d2pwq1h0s5dqna0mlc0crf-unit-systemd-hostnamed.service.drv
  /nix/store/zsi6wfiw0nvr7hf257k2gfsc7mngjk4i-unit-kmod-static-nodes.service.drv
  /nix/store/hmfqc3f29qp0jifp8xqzrk5lzdklxc1y-system-units.drv
  /nix/store/pv6jsdm4pdc0kp5j44mgk868iz8wkalx-generator-authelia-user-alice.drv
  /nix/store/v25gfz089ppj3ykjp8dasyfpk7hw1n5a-generator-authelia.drv
  /nix/store/yhfk11y74ldgvny130rx5fp6jy9w8626-generator-cert-punchcard.drv
  /nix/store/jm9ihxcfvmlskc3vy9irh22mhn8s3ab6-vars-check-authelia.drv
  /nix/store/mp51x96y29bw5c67znvzm5cq643spcs3-login.pam.drv
  /nix/store/r5dhc7diygli5ixsyf4wj86yaixk9q72-system-generators.drv
  /nix/store/sba2k0vvh1ahhfmm9n796jnb1gz4baxb-user-generators.drv
  /nix/store/vj0p0vhsvsxm6ca88aqpj2c5gfw94b3q-50-coredump.conf.drv
  /nix/store/hcrvzvncclw1z11nn6486b0bl9x0qq74-string-hosts.drv
  /nix/store/rany37jwarhg03862xzl11ig9jcx30x2-extra-hosts.drv
  /nix/store/yz8whq4szg45qpjl2zm1pj1hfaqpa61z-hosts.drv
  /nix/store/alh1mafrzgrzg79dynaw3yssiaagvkn7-etc.drv
  /nix/store/ljk94cdf3gq6r8vaqk4g38zy2g38q5xb-activate.drv
  /nix/store/giprkvjxs3s884vw16shwxw836lq06lg-nixos-system-server-test.drv
  /nix/store/ajbxrfsjmp4agag1mzjrlcdwdz43lysr-closure-info.drv
  /nix/store/qfjwgnfkajz6lsv75sbs3baasyxbf8dq-test-driver-0.0.1.drv
  /nix/store/qs296l7zsf1cdywypjx0wbgvrd23daaq-nixos-test-driver-authelia.drv
  /nix/store/cfaj1cydh9ylbq7pqm46ma6ck53nx0ik-container-test-run-authelia.drv
these 2 paths will be fetched (15.5 MiB download, 48.2 MiB unpacked):
  /nix/store/5g0g63dw01q9wf05hm578z0vnqg8cy41-authelia-4.39.20
  /nix/store/10fxrinky9yccx6lrv6njw9d3zci8w0v-qemu-host-cpu-only-for-vm-tests-10.2.4-ga
building '/nix/store/hcrvzvncclw1z11nn6486b0bl9x0qq74-string-hosts.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/3mwgkyxlmg6lqjmlawwp1046s908mq18-unit-user-.service.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/g69p96gvpfhrrxwbr4qpjmyk2rv34j05-unit-script-linger-users-start.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/wav3npc2wp4rqrg7q01gay7siiix3m8z-authelia-oidc-input.json.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/1j6wlci3fnch7ah4cs6wif1rc0g74nwj-Caddyfile.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/gc813ncislaxc73zcmjg2ah4njdhzdk0-authelia-users-input.json.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/890zfshx41h3hsv5j9hnflg6c5h0lkn6-config.yml.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/m2s0z64bsanlfhfpjz2wp9k0hq7ihx3a-decrypt-age-secrets.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/gbk3j68cah9kb02k4qsiwgjnqcsaai9f-testScript.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/sba2k0vvh1ahhfmm9n796jnb1gz4baxb-user-generators.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/hcrvzvncclw1z11nn6486b0bl9x0qq74-string-hosts.drv'
building '/nix/store/yz8whq4szg45qpjl2zm1pj1hfaqpa61z-hosts.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/3mwgkyxlmg6lqjmlawwp1046s908mq18-unit-user-.service.drv'
building '/nix/store/g69p96gvpfhrrxwbr4qpjmyk2rv34j05-unit-script-linger-users-start.drv'
building '/nix/store/r6nfkva1py0gxyaazhg5hik2j30f4s4s-unit-linger-users.service.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/wav3npc2wp4rqrg7q01gay7siiix3m8z-authelia-oidc-input.json.drv'
building '/nix/store/8fvcfc5ia6iyiqzliif9n96x9swl3xzz-generator-authelia-oidc-punchcard-punchcard.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/5gnfdj83qn9vkkdaqf4ws6hlmiyc1dmx-generator-authelia-user-bob.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/1j6wlci3fnch7ah4cs6wif1rc0g74nwj-Caddyfile.drv'
building '/nix/store/1aca5zx9wlvyqpdz542pvlf2vp25wj5f-Caddyfile-formatted.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/gc813ncislaxc73zcmjg2ah4njdhzdk0-authelia-users-input.json.drv'
building '/nix/store/890zfshx41h3hsv5j9hnflg6c5h0lkn6-config.yml.drv'
config.yml> structuredAttrs is enabled
building '/nix/store/gbk3j68cah9kb02k4qsiwgjnqcsaai9f-testScript.drv'
building '/nix/store/yz8whq4szg45qpjl2zm1pj1hfaqpa61z-hosts.drv'
building '/nix/store/ixk3g28v3cpp4pk119sivk2cbvvp3s4c-unit-script-authelia-authelia-pre-start.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/sba2k0vvh1ahhfmm9n796jnb1gz4baxb-user-generators.drv'
building '/nix/store/r6nfkva1py0gxyaazhg5hik2j30f4s4s-unit-linger-users.service.drv'
building '/nix/store/ir50v6s0qyx5qshrfyvrzib4zskjsmwh-nss-cacert-3.126.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/2gisvgf3srvc4idjrks0vy8cia11cm96-punchcard-19700101.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/h1091l5hkmpsgpxmrr2lkbkfsh9f5kvv-users-groups.json.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/m2s0z64bsanlfhfpjz2wp9k0hq7ihx3a-decrypt-age-secrets.drv'
building '/nix/store/8fvcfc5ia6iyiqzliif9n96x9swl3xzz-generator-authelia-oidc-punchcard-punchcard.drv'
building '/nix/store/5gnfdj83qn9vkkdaqf4ws6hlmiyc1dmx-generator-authelia-user-bob.drv'
building '/nix/store/1aca5zx9wlvyqpdz542pvlf2vp25wj5f-Caddyfile-formatted.drv'
building '/nix/store/ixk3g28v3cpp4pk119sivk2cbvvp3s4c-unit-script-authelia-authelia-pre-start.drv'
building '/nix/store/vjpq38s43m9m9l4qdzpyh6iginq27m0w-unit-authelia-authelia.service.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/ir50v6s0qyx5qshrfyvrzib4zskjsmwh-nss-cacert-3.126.drv'
nss-cacert-3.126> Running phase: unpackPhase
nss-cacert-3.126> Running phase: patchPhase
nss-cacert-3.126> Running phase: updateAutotoolsGnuConfigScriptsPhase
nss-cacert-3.126> Running phase: configurePhase
nss-cacert-3.126> no configure script, doing nothing
nss-cacert-3.126> Running phase: buildPhase
nss-cacert-3.126> Running phase: installPhase
nss-cacert-3.126> Running phase: fixupPhase
nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/xpyr3v0wj0p8a127yjvmwq2rk9iacdc9-nss-cacert-3.126
nss-cacert-3.126> checking for references to /build/ in /nix/store/xpyr3v0wj0p8a127yjvmwq2rk9iacdc9-nss-cacert-3.126...
nss-cacert-3.126> patching script interpreter paths in /nix/store/xpyr3v0wj0p8a127yjvmwq2rk9iacdc9-nss-cacert-3.126
nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/6d5w7198ir7rs02q9v1cdxj3czdzkkv6-nss-cacert-3.126-unbundled
nss-cacert-3.126> checking for references to /build/ in /nix/store/6d5w7198ir7rs02q9v1cdxj3czdzkkv6-nss-cacert-3.126-unbundled...
nss-cacert-3.126> patching script interpreter paths in /nix/store/6d5w7198ir7rs02q9v1cdxj3czdzkkv6-nss-cacert-3.126-unbundled
nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/zh7m3ap4gpp038wq2yfdd4harinkjzq4-nss-cacert-3.126-p11kit
nss-cacert-3.126> checking for references to /build/ in /nix/store/zh7m3ap4gpp038wq2yfdd4harinkjzq4-nss-cacert-3.126-p11kit...
nss-cacert-3.126> patching script interpreter paths in /nix/store/zh7m3ap4gpp038wq2yfdd4harinkjzq4-nss-cacert-3.126-p11kit
nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/93y02gvbx2kg5m2x0j3maxsz5dyhkpwz-nss-cacert-3.126-hashed
nss-cacert-3.126> checking for references to /build/ in /nix/store/93y02gvbx2kg5m2x0j3maxsz5dyhkpwz-nss-cacert-3.126-hashed...
nss-cacert-3.126> patching script interpreter paths in /nix/store/93y02gvbx2kg5m2x0j3maxsz5dyhkpwz-nss-cacert-3.126-hashed
building '/nix/store/h1091l5hkmpsgpxmrr2lkbkfsh9f5kvv-users-groups.json.drv'
building '/nix/store/2gisvgf3srvc4idjrks0vy8cia11cm96-punchcard-19700101.drv'
punchcard-19700101> Running phase: unpackPhase
punchcard-19700101> unpacking source archive /nix/store/kri9pf91gs36fzj416wkimbclcfaqhcw-kcacsi85z0l10lwkcrcs1sm24ff8az3r-source
punchcard-19700101> source root is kcacsi85z0l10lwkcrcs1sm24ff8az3r-source
punchcard-19700101> Running phase: patchPhase
punchcard-19700101> Running phase: updateAutotoolsGnuConfigScriptsPhase
punchcard-19700101> Running phase: configurePhase
punchcard-19700101> Running phase: buildPhase
punchcard-19700101> Building subPackage ./.
building '/nix/store/c1lg12v3faijlxhswkn79nvwqx6lga7n-unit-nix-daemon.service.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/rkx4kcx8a5kpxv1p5ddms2f3crghyqgw-X-Reload-Triggers-caddy.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/3fxf08m380rg6885llfsfm5rlad61ra5-dry-activate.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/vjpq38s43m9m9l4qdzpyh6iginq27m0w-unit-authelia-authelia.service.drv'
building '/nix/store/jm9ihxcfvmlskc3vy9irh22mhn8s3ab6-vars-check-authelia.drv' on 'ssh-ng://builder@build01.clan.lol'
punchcard-19700101> buildPhase completed in 1 minutes 2 seconds
punchcard-19700101> Running phase: checkPhase
building '/nix/store/c1lg12v3faijlxhswkn79nvwqx6lga7n-unit-nix-daemon.service.drv'
building '/nix/store/rkx4kcx8a5kpxv1p5ddms2f3crghyqgw-X-Reload-Triggers-caddy.drv'
building '/nix/store/n8p174pqbkvmm5xksaxg7iv7pdjjyvwd-unit-caddy.service.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/3fxf08m380rg6885llfsfm5rlad61ra5-dry-activate.drv'
building '/nix/store/jm9ihxcfvmlskc3vy9irh22mhn8s3ab6-vars-check-authelia.drv'
vars-check-authelia> Running vars check using Nix-based executor...
vars-check-authelia> Executing shared generators...
vars-check-authelia> Executing shared generator: authelia-oidc-punchcard-punchcard
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/wjm08iz4sdw5qgmx58dimv8ch7gbyyaj-coreutils-9.11/bin:/nix/store/13qkh2scg0zxxw7fgc5jab7g9rksahcs-openssl-3.6.3-bin/bin:/nix/store/5g0g63dw01q9wf05hm578z0vnqg8cy41-authelia-4.39.20/bin:/nix/store/23i8l42pjlqvnfr5y80if221d3in9v8s-gnused-4.10/bin:/nix/store/wjm08iz4sdw5qgmx58dimv8ch7gbyyaj-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
vars-check-authelia> + cat
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + mkdir -p /output
vars-check-authelia> + openssl rand -hex 32
vars-check-authelia> + sed 's/^Digest: //'
vars-check-authelia> ++ cat /output/client_secret
vars-check-authelia> + authelia crypto hash generate argon2 --password ade8941ae03eb24468efd85a31e401aaa65732ba0f94d79f73b9501eaf428212
vars-check-authelia> ✓ Generated shared file: authelia-oidc-punchcard-punchcard/client_secret
vars-check-authelia> ✓ Generated shared file: authelia-oidc-punchcard-punchcard/client_secret_hash
vars-check-authelia> ✓ Shared Generator authelia-oidc-punchcard-punchcard completed
vars-check-authelia> Executing shared generator: pki-root-ca
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/13qkh2scg0zxxw7fgc5jab7g9rksahcs-openssl-3.6.3-bin/bin:/nix/store/wjm08iz4sdw5qgmx58dimv8ch7gbyyaj-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
vars-check-authelia> + cat
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + openssl genrsa -out /output/ca.key 4096
vars-check-authelia> + openssl req -x509 -new -nodes -key /output/ca.key -sha256 -days 3650 -subj '/CN=Clan Root CA' -out /output/ca.crt
vars-check-authelia> ✓ Generated shared file: pki-root-ca/ca.crt
vars-check-authelia> ✓ Generated shared file: pki-root-ca/ca.key
vars-check-authelia> ✓ Shared Generator pki-root-ca completed
vars-check-authelia> ✓ Shared generators completed
vars-check-authelia> Processing machine: server
vars-check-authelia> Generator execution order: authelia -> authelia-user-alice -> authelia-user-bob -> cert-auth -> cert-punchcard -> state-version
vars-check-authelia> Executing generator: authelia
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/wjm08iz4sdw5qgmx58dimv8ch7gbyyaj-coreutils-9.11/bin:/nix/store/13qkh2scg0zxxw7fgc5jab7g9rksahcs-openssl-3.6.3-bin/bin:/nix/store/wjm08iz4sdw5qgmx58dimv8ch7gbyyaj-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
vars-check-authelia> + cat
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + mkdir -p /output
vars-check-authelia> + openssl rand -hex 64
vars-check-authelia> + openssl rand -hex 64
vars-check-authelia> + openssl rand -hex 64
vars-check-authelia> + openssl rand -hex 64
vars-check-authelia> + openssl genrsa -out /output/oidc-jwks-key 4096
vars-check-authelia> ✓ Generated file: authelia/jwt-secret
vars-check-authelia> ✓ Generated file: authelia/oidc-hmac-secret
vars-check-authelia> ✓ Generated file: authelia/oidc-jwks-key
vars-check-authelia> ✓ Generated file: authelia/session-secret
vars-check-authelia> ✓ Generated file: authelia/storage-encryption-key
vars-check-authelia> ✓ Generator authelia completed
vars-check-authelia> Executing generator: authelia-user-alice
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/wjm08iz4sdw5qgmx58dimv8ch7gbyyaj-coreutils-9.11/bin:/nix/store/5g0g63dw01q9wf05hm578z0vnqg8cy41-authelia-4.39.20/bin:/nix/store/wglsn5d8gyd8gz314jlx51fb88ydy3is-python3.13-xkcdpass-1.30.0/bin:/nix/store/23i8l42pjlqvnfr5y80if221d3in9v8s-gnused-4.10/bin:/nix/store/wjm08iz4sdw5qgmx58dimv8ch7gbyyaj-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
vars-check-authelia> + cat
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + mkdir -p /output
vars-check-authelia> + xkcdpass -n 7 -d-
vars-check-authelia> + sed 's/^Digest: //'
vars-check-authelia> ++ cat /output/password
vars-check-authelia> + authelia crypto hash generate argon2 --password afterlife-activate-customize-daintily-glass-image-neuron
vars-check-authelia> ✓ Generated file: authelia-user-alice/password
vars-check-authelia> ✓ Generated file: authelia-user-alice/password-hash
vars-check-authelia> ✓ Generator authelia-user-alice completed
vars-check-authelia> Executing generator: authelia-user-bob
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/wjm08iz4sdw5qgmx58dimv8ch7gbyyaj-coreutils-9.11/bin:/nix/store/5g0g63dw01q9wf05hm578z0vnqg8cy41-authelia-4.39.20/bin:/nix/store/wglsn5d8gyd8gz314jlx51fb88ydy3is-python3.13-xkcdpass-1.30.0/bin:/nix/store/23i8l42pjlqvnfr5y80if221d3in9v8s-gnused-4.10/bin:/nix/store/wjm08iz4sdw5qgmx58dimv8ch7gbyyaj-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
vars-check-authelia> + cat
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + mkdir -p /output
vars-check-authelia> + xkcdpass -n 7 -d-
vars-check-authelia> + sed 's/^Digest: //'
vars-check-authelia> ++ cat /output/password
vars-check-authelia> + authelia crypto hash generate argon2 --password scrubbed-molar-arise-snowdrift-dejected-sensitive-simplify
vars-check-authelia> ✓ Generated file: authelia-user-bob/password
vars-check-authelia> ✓ Generated file: authelia-user-bob/password-hash
vars-check-authelia> ✓ Generator authelia-user-bob completed
vars-check-authelia> Executing generator: cert-auth
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/13qkh2scg0zxxw7fgc5jab7g9rksahcs-openssl-3.6.3-bin/bin:/nix/store/wjm08iz4sdw5qgmx58dimv8ch7gbyyaj-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
vars-check-authelia> + cat
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + openssl genrsa -out /output/auth.key 4096
vars-check-authelia> + openssl req -new -key /output/auth.key -subj /CN=auth.test.clan -out endpoint.csr
vars-check-authelia> + printf subjectAltName=DNS:auth.test.clan
vars-check-authelia> + openssl x509 -req -in endpoint.csr -CA /input/pki-root-ca/ca.crt -CAkey /input/pki-root-ca/ca.key -CAcreateserial -days 365 -sha256 -extfile san.cnf -out /output/auth.crt
vars-check-authelia> Certificate request self-signature ok
vars-check-authelia> subject=CN=auth.test.clan
vars-check-authelia> + cat /output/auth.crt /input/pki-root-ca/ca.crt
vars-check-authelia> ✓ Generated file: cert-auth/auth.crt
vars-check-authelia> ✓ Generated file: cert-auth/auth.fullchain.crt
vars-check-authelia> ✓ Generated file: cert-auth/auth.key
vars-check-authelia> ✓ Generator cert-auth completed
vars-check-authelia> Executing generator: cert-punchcard
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/13qkh2scg0zxxw7fgc5jab7g9rksahcs-openssl-3.6.3-bin/bin:/nix/store/wjm08iz4sdw5qgmx58dimv8ch7gbyyaj-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
vars-check-authelia> + cat
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + openssl genrsa -out /output/punchcard.key 4096
vars-check-authelia> + openssl req -new -key /output/punchcard.key -subj /CN=punchcard.test.clan -out endpoint.csr
vars-check-authelia> + printf subjectAltName=DNS:punchcard.test.clan
vars-check-authelia> + openssl x509 -req -in endpoint.csr -CA /input/pki-root-ca/ca.crt -CAkey /input/pki-root-ca/ca.key -CAcreateserial -days 365 -sha256 -extfile san.cnf -out /output/punchcard.crt
vars-check-authelia> Certificate request self-signature ok
vars-check-authelia> subject=CN=punchcard.test.clan
vars-check-authelia> + cat /output/punchcard.crt /input/pki-root-ca/ca.crt
vars-check-authelia> ✓ Generated file: cert-punchcard/punchcard.crt
vars-check-authelia> ✓ Generated file: cert-punchcard/punchcard.fullchain.crt
vars-check-authelia> ✓ Generated file: cert-punchcard/punchcard.key
vars-check-authelia> ✓ Generator cert-punchcard completed
vars-check-authelia> Executing generator: state-version
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/wjm08iz4sdw5qgmx58dimv8ch7gbyyaj-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
vars-check-authelia> + cat
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + echo -n 26.05
vars-check-authelia> ✓ Generated file: state-version/version
vars-check-authelia> ✓ Generator state-version completed
vars-check-authelia> ✓ Machine server completed
vars-check-authelia> ✓ All vars checks completed successfully
building '/nix/store/n8p174pqbkvmm5xksaxg7iv7pdjjyvwd-unit-caddy.service.drv'
punchcard-19700101> ok  	punchcard	0.047s
punchcard-19700101> checkPhase completed in 1 minutes 4 seconds
punchcard-19700101> Running phase: installPhase
punchcard-19700101> Running phase: fixupPhase
punchcard-19700101> shrinking RPATHs of ELF executables and libraries in /nix/store/2nn58qhbw21v6f2y82k1rvi2wb5la6dq-punchcard-19700101
punchcard-19700101> shrinking /nix/store/2nn58qhbw21v6f2y82k1rvi2wb5la6dq-punchcard-19700101/bin/punchcard
punchcard-19700101> checking for references to /build/ in /nix/store/2nn58qhbw21v6f2y82k1rvi2wb5la6dq-punchcard-19700101...
punchcard-19700101> patching script interpreter paths in /nix/store/2nn58qhbw21v6f2y82k1rvi2wb5la6dq-punchcard-19700101
punchcard-19700101> stripping (with command strip and flags -S -p) in  /nix/store/2nn58qhbw21v6f2y82k1rvi2wb5la6dq-punchcard-19700101/bin
building '/nix/store/6r4g3wya8i6n36bmc35sb1b1pj2qgcjm-unit-script-punchcard-punchcard-start.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/6r4g3wya8i6n36bmc35sb1b1pj2qgcjm-unit-script-punchcard-punchcard-start.drv'
building '/nix/store/wrwsl1jfpz1ciazmzss2xrmyfl16slq1-unit-punchcard-punchcard.service.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/wrwsl1jfpz1ciazmzss2xrmyfl16slq1-unit-punchcard-punchcard.service.drv'
building '/nix/store/hmfqc3f29qp0jifp8xqzrk5lzdklxc1y-system-units.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/hmfqc3f29qp0jifp8xqzrk5lzdklxc1y-system-units.drv'
building '/nix/store/alh1mafrzgrzg79dynaw3yssiaagvkn7-etc.drv' on 'ssh-ng://builder@build01.clan.lol'
warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy
building '/nix/store/alh1mafrzgrzg79dynaw3yssiaagvkn7-etc.drv'
building '/nix/store/ljk94cdf3gq6r8vaqk4g38zy2g38q5xb-activate.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/ljk94cdf3gq6r8vaqk4g38zy2g38q5xb-activate.drv'
building '/nix/store/giprkvjxs3s884vw16shwxw836lq06lg-nixos-system-server-test.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/giprkvjxs3s884vw16shwxw836lq06lg-nixos-system-server-test.drv'
nixos-system-server-test> structuredAttrs is enabled
building '/nix/store/ajbxrfsjmp4agag1mzjrlcdwdz43lysr-closure-info.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/ajbxrfsjmp4agag1mzjrlcdwdz43lysr-closure-info.drv'
closure-info> structuredAttrs is enabled
building '/nix/store/qs296l7zsf1cdywypjx0wbgvrd23daaq-nixos-test-driver-authelia.drv' on 'ssh-ng://builder@build01.clan.lol'
warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy
building '/nix/store/qs296l7zsf1cdywypjx0wbgvrd23daaq-nixos-test-driver-authelia.drv'
nixos-test-driver-authelia> Running type check (enable/disable: config.skipTypeCheck)
nixos-test-driver-authelia> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck
nixos-test-driver-authelia> Success: no issues found in 1 source file
building '/nix/store/cfaj1cydh9ylbq7pqm46ma6ck53nx0ik-container-test-run-authelia.drv' on 'ssh-ng://builder@build01.clan.lol'
warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy
building '/nix/store/cfaj1cydh9ylbq7pqm46ma6ck53nx0ik-container-test-run-authelia.drv'
container-test-run-authelia> additionally exposed symbols:
container-test-run-authelia>     server,
container-test-run-authelia>     start_all, machines, driver, Machine, wait_for_signal
container-test-run-authelia> Starting server
container-test-run-authelia> 
container-test-run-authelia> 
container-test-run-authelia> <<< NixOS Stage 2 >>>
container-test-run-authelia> 
container-test-run-authelia> booting system configuration /nix/store/06a821kvmjmla9nb72z5c9aydqsbn4zc-nixos-system-server-test
container-test-run-authelia> running activation script...
container-test-run-authelia> setting up /etc...
container-test-run-authelia> 2: host0@if3: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
container-test-run-authelia>     link/ether be:aa:dd:39:86:e7 brd ff:ff:ff:ff:ff:ff link-netnsid 0
container-test-run-authelia> setting up age secrets...
container-test-run-authelia> starting systemd...
container-test-run-authelia> systemd 260.2 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE)
container-test-run-authelia> Detected virtualization systemd-nspawn.
container-test-run-authelia> Detected architecture arm64.
container-test-run-authelia> Detected first boot.
container-test-run-authelia> Initializing machine ID from container UUID.
container-test-run-authelia> Applying preset policy.
container-test-run-authelia> Populated /etc with preset unit settings.
container-test-run-authelia> Queued start job for default target Multi-User System.
container-test-run-authelia> 
container-test-run-authelia> 
container-test-run-authelia> 
container-test-run-authelia> <<< Welcome to NixOS test (aarch64) - console >>>
container-test-run-authelia> + systemd-run /bin/sh -c '/nix/store/wjm08iz4sdw5qgmx58dimv8ch7gbyyaj-coreutils-9.11/bin/sleep 999999999 && echo c145484f-c36c-4630-996c-9d03c198d5c8'
container-test-run-authelia> Running as unit: run-p549-i5229843.service; invocation ID: 547feb0605a8484f9348035db1c0d1c4
container-test-run-authelia> To attach to container server run on the same machine that runs the test:
container-test-run-authelia>   sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*c145484f-c36c-4630-996c-9d03c198d5c8') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash 
container-test-run-authelia> 
container-test-run-authelia> To inject external network and continue test, run:
container-test-run-authelia> sudo /nix/store/akbq19lqha5w5h9hcchn309znqm94pq0-python3-3.13.15/bin/python3.13 /nix/store/qrxpb4s36qq6d4f5n5c5d78f1y3lvyhy-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py c145484f-c36c-4630-996c-9d03c198d5c8
container-test-run-authelia> + systemctl --no-pager show authelia-authelia.service
container-test-run-authelia> server: waiting for success: curl -sf http://127.0.0.1:9091/api/health
container-test-run-authelia> + curl -sf http://127.0.0.1:9091/api/health
container-test-run-authelia> (finished: waiting for success: curl -sf http://127.0.0.1:9091/api/health, in 0.02 seconds)
container-test-run-authelia> + test -f /run/authelia-authelia/users.json
container-test-run-authelia> + cat /run/authelia-authelia/users.json
container-test-run-authelia> + test -f /run/authelia-authelia/oidc.json
container-test-run-authelia> + cat /run/authelia-authelia/oidc.json
container-test-run-authelia> + systemctl --no-pager show caddy.service
container-test-run-authelia> server: waiting for success: curl -sf https://auth.test.clan/api/health
container-test-run-authelia> + curl -sf https://auth.test.clan/api/health
container-test-run-authelia> (finished: waiting for success: curl -sf https://auth.test.clan/api/health, in 0.06 seconds)
container-test-run-authelia> server: waiting for success: curl -sf https://auth.test.clan/.well-known/openid-configuration
container-test-run-authelia> + curl -sf https://auth.test.clan/.well-known/openid-configuration
container-test-run-authelia> (finished: waiting for success: curl -sf https://auth.test.clan/.well-known/openid-configuration, in 0.10 seconds)
container-test-run-authelia> + systemctl --no-pager show punchcard-punchcard.service
container-test-run-authelia> server: waiting for success: curl -sf https://punchcard.test.clan/login
container-test-run-authelia> + curl -sf https://punchcard.test.clan/login
container-test-run-authelia> (finished: waiting for success: curl -sf https://punchcard.test.clan/login, in 0.10 seconds)
container-test-run-authelia> + cat /run/secrets/authelia-user-bob/password
container-test-run-authelia> + curl -s -o /dev/null -w '%{redirect_url}' -c /tmp/pc-cookies https://punchcard.test.clan/login/start
container-test-run-authelia> + curl -sf -X POST https://auth.test.clan/api/firstfactor -H 'Content-Type: application/json' -c /tmp/auth-cookies -d '{"username": "bob", "password": "obstruct-idealize-clinic-deduct-ruined-eclair-moonscape", "keepMeLoggedIn": false}'
container-test-run-authelia> + curl -s -o /dev/null -w '%{redirect_url}' -b /tmp/auth-cookies -c /tmp/auth-cookies 'https://auth.test.clan/api/oidc/authorization?client_id=punchcard-punchcard&code_challenge=0v-quhyRSh5rPlGHlx1RATT00kc9Tuk-eDyBSzTD-Pc&code_challenge_method=S256&redirect_uri=https%3A%2F%2Fpunchcard.test.clan%2Fcallback&response_type=code&scope=openid+profile+email&state=z3SHyAyamBek7JrExUK_5BStlO3SFjLef8UsX7RRSXQ%3D'
container-test-run-authelia> + curl -s -o /dev/null -w '%{http_code}' -c /tmp/pc-cookies -b /tmp/pc-cookies 'https://punchcard.test.clan/callback?code=authelia_ac_GrjJNpWLphZ9XFwmrh9vI6HW-R6Sospq6707ahRfg2w.v_pBpBaGRzT4CJIcx5Vb649L0hdTPLIl_phQf35v3YM&iss=https%3A%2F%2Fauth.test.clan&scope=openid+profile+email&state=z3SHyAyamBek7JrExUK_5BStlO3SFjLef8UsX7RRSXQ%3D'
container-test-run-authelia> + curl -s -L -o /dev/null -w '%{http_code}' -b /tmp/pc-cookies -c /tmp/pc-cookies https://punchcard.test.clan/
container-test-run-authelia> 

upload niks3: failed
time=2026-09-09T01:46:21.849Z level=WARN msg="Request returned retryable status, retrying" attempt=1 max_attempts=6 backoff=100ms status=502 url=https://niks3.clan.lol/api/pending_closures
time=2026-09-09T01:48:07.381Z level=WARN msg="Request returned retryable status, retrying" attempt=2 max_attempts=6 backoff=207.974579ms status=502 url=https://niks3.clan.lol/api/pending_closures
time=2026-09-09T01:49:58.329Z level=WARN msg="Request returned retryable status, retrying" attempt=3 max_attempts=6 backoff=386.543601ms status=502 url=https://niks3.clan.lol/api/pending_closures
time=2026-09-09T01:51:31.337Z level=WARN msg="Request returned retryable status, retrying" attempt=4 max_attempts=6 backoff=846.093756ms status=502 url=https://niks3.clan.lol/api/pending_closures
time=2026-09-09T01:53:06.437Z level=WARN msg="Request returned retryable status, retrying" attempt=5 max_attempts=6 backoff=1.507387946s status=502 url=https://niks3.clan.lol/api/pending_closures
time=2026-09-09T01:55:00.092Z level=ERROR msg="Fatal error" error="pushing paths: creating pending closures: creating pending closure: server returned 502: "