these 83 derivations will be built:
  /nix/store/0awwbdmj6inl46yjz1ikrqmf0pxy3hwi-python3.13-nixos-test-lib-1.0.0.drv
  /nix/store/3m2ivk94fala79q173zxxl08pgg62vix-system-path.drv
  /nix/store/ky9f81f2xfy25k724y2717i2i8h9mbl1-dbus-1.drv
  /nix/store/xjr1n6fs627zvgswvnlnkv6yvbws58pl-X-Restart-Triggers-dbus-broker.drv
  /nix/store/2amk5hs06sa7k3dmy7xzmi7x3aw07829-unit-dbus-broker.service.drv
  /nix/store/cggknnhlvvqdh4ns976f1y021falpg69-unit-dbus.service.drv
  /nix/store/ks78vmmvmsd8xh5zv9lr6dspcvkgzkk4-unit-script-nixos-activation-start.drv
  /nix/store/j098p7hlnccaqj92xx224b9vpr136vb6-unit-nixos-activation.service.drv
  /nix/store/0npj3k2snl1rj58876zdvdcmc4f7rcjw-user-units.drv
  /nix/store/0xpximh14ld30sjnqr8y2l6vbjrmml5z-unit-systemd-localed.service.drv
  /nix/store/10xn4n2aacdh8bsqd32lzjfmlmycgxv4-unit-kmod-static-nodes.service.drv
  /nix/store/14fnyalyrd3966xnnj03jszr20q71zlb-Caddyfile.drv
  /nix/store/yzybqlxp21qq899j366xw6y9dcb78ym7-Caddyfile-formatted.drv
  /nix/store/175bzlvfwbbh52vrpamr3ynxkq8kflsc-X-Reload-Triggers-caddy.drv
  /nix/store/1d6w2nx5c0zbs9v0fppz84x3x42g3n0k-unit-systemd-journald.service.drv
  /nix/store/1fjk013hnbdx5y7wd2c2pgw3r282hkl1-unit-user-runtime-dir-.service.drv
  /nix/store/zafqdas79a5bdr8sv60p45nvcp9kpwdz-nix.conf.drv
  /nix/store/hv7qw5786p9f5kbh6p4ilxrxv5zn2w4i-X-Restart-Triggers-nix-daemon.drv
  /nix/store/iyaia0lzr7ahrp76h7yrhgx0gm46ib3s-nss-cacert-3.126.drv
  /nix/store/20ml9bagys7vqjnm1fa4dig2cy94ww4x-unit-nix-daemon.service.drv
  /nix/store/q49fr74gh24dld5cxh2nqv7j9zrfrqhm-string-hosts.drv
  /nix/store/24yxmdrbhfflm8d30a8gkiyy5r6isgvm-hosts.drv
  /nix/store/7vyx9q0rwcws7f996dhj4nfbxxjahmpw-punchcard-19700101.drv
  /nix/store/2lyq0g1bbcxfyrbf72f0c1q585rkn0gp-unit-script-punchcard-punchcard-start.drv
  /nix/store/2s7i29i9940m32dm1j8mdy6r9dazrkly-unit-nix-optimise.service.drv
  /nix/store/49wv385z9ai21z3n9bxhc4dw9fgl2rhm-unit-nscd.service.drv
  /nix/store/4ign9gc6km5r70fw1h1i1h5vp8v5i64k-unit-systemd-makefs-.service.drv
  /nix/store/h9kffr2mkj83jwb8fc9q5n47y0qnvh7y-users-groups.json.drv
  /nix/store/d7iddffprh181ynhr7whb8r8n19qaszk-mount-secret-fs.drv
  /nix/store/hlcnn3jr1qsc7dh4874rgi6rv0l5a8wy-decrypt-age-secrets.drv
  /nix/store/89srbvjz9cmxmbjifq1lapywpb0s8d1x-dry-activate.drv
  /nix/store/85q8vr3gnrj80j0szz4g64vr1z1i9pkj-system-generators.drv
  /nix/store/9wa7lb8cqlb6r06prwa0jkcp1s8g52q4-50-coredump.conf.drv
  /nix/store/ggixwznh0sppy8x7fm9cl8ghfck600l8-nixos-tmpfiles.d.drv
  /nix/store/im71ih1c64lp437067l4bg1zs70iarn4-tmpfiles.d.drv
  /nix/store/568jwmr092ixbhspyjkizbw2inb8y1hi-unit-systemd-fsck-.service.drv
  /nix/store/5brgy50wd2fxdy3wr2809481p1fz7v6i-unit-punchcard-punchcard.service.drv
  /nix/store/5qsnyavbv2vlaf329jaa8j020cp1gkv8-unit-systemd-journald-.service.drv
  /nix/store/60xd0kz2brj0w4hx4575h08j2grgi1rw-unit-reload-systemd-vconsole-setup.service.drv
  /nix/store/6h99dc5bky8gars61w7vad6iby3ky7r6-unit-firewall.service.drv
  /nix/store/7ipxgxy045a6c6vx36ds74f9ijqlfj4j-unit-lastlog2-import.service.drv
  /nix/store/7rpfnlxn58142az9akg544g7gmdbwnzf-unit-systemd-hostnamed.service.drv
  /nix/store/ag2yw2gwm9b4nhklmk0jcy2zcpsll695-unit-dbus-broker.service.drv
  /nix/store/5kvmfycdblkz4z464kfjyn3nisqwpnl5-unit-script-linger-users-start.drv
  /nix/store/cswpzwv43prr571rs42lpd1i8z2k2gzh-unit-linger-users.service.drv
  /nix/store/cx80hgfi15j6d2wsc26wlv1n8g2rad34-unit-systemd-journal-flush.service.drv
  /nix/store/fa5f1y75qi31j8b2dgw50ggmidf7l8yb-unit-caddy.service.drv
  /nix/store/fpi23cr3jiz7bwjrb0crp1jpgwzrdwvz-unit-modprobe-.service.drv
  /nix/store/fwvkkjhs1rv3ksv7ki5mj4jdm2s09hzq-unit-systemd-networkd.service.drv
  /nix/store/g9h65l38ywbb783lj2d0q0raix6r21s1-unit-serial-getty-.service.drv
  /nix/store/5lai1bk7yxi6y991gw93nm5pcrbn4flw-authelia-oidc-input.json.drv
  /nix/store/fyqhdpbxsi0ykk0ppxz57lj0nmh1bnks-authelia-users-input.json.drv
  /nix/store/jjwq34x9czk7f915sjjsw7y073nz4q8a-oidc-jwks.yaml.drv
  /nix/store/sa2kp5hrg1jklvzr356kicvjsp7v5p3f-config.yml.drv
  /nix/store/fggdzhpaycwl0mc3swy5yk8zzqa12gj5-unit-script-authelia-authelia-pre-start.drv
  /nix/store/gbjm1vzhxvd8qx1x1ck1hy0wf5hcbsym-unit-authelia-authelia.service.drv
  /nix/store/wlhx5hym8l07dvfpjmnxi34nlqdfylj7-unit-script-nix-gc-start.drv
  /nix/store/jan9fiahy3pglz2873fqmc0znfxjm849-unit-nix-gc.service.drv
  /nix/store/jdvwsgpdjvqlhly05lgilmmz7yi211c4-unit-systemd-mkswap-.service.drv
  /nix/store/hfyziamqcvyd61sk806l55hpjzqjyzfh-X-Restart-Triggers-systemd-tmpfiles-resetup.drv
  /nix/store/lhjic704dhrhzlvi82r58kvjf477gawl-unit-systemd-tmpfiles-resetup.service.drv
  /nix/store/npmbjcl1ch381dh1hnplndizil074x2x-unit-systemd-networkd-wait-online-.service.drv
  /nix/store/rygn1xpybf3kyay0lqh4wawq1ridp10x-unit-systemd-backlight-.service.drv
  /nix/store/vpy01y5rkr9x0srmpg23f030nwpxjimf-unit-network-local-commands.service.drv
  /nix/store/wkwxj6g07cwl568hnn9b18cf4sz8ggvp-unit-systemd-logind.service.drv
  /nix/store/wp0cg6wfhyc0cq923gz73z0msqbh9w3n-unit-systemd-sysctl.service.drv
  /nix/store/w88a1pyi6ynni4y7wxh5gwvdmf1q4hvg-unit-script-register-nix-paths-start.drv
  /nix/store/x0c84w1brks3fsflsn28qdyh530pb90x-unit-register-nix-paths.service.drv
  /nix/store/y15jy0bb6kamz3b1n1qa7m5wyhrgd4qm-unit-systemd-importd.service.drv
  /nix/store/y406lj19ybiisbphlnm3aqlip8grs9ip-unit-prepare-kexec.service.drv
  /nix/store/z1q54bbxbfryjlj27qdpva61rzad9brq-unit-qemu-guest-agent.service.drv
  /nix/store/ly3hf81pz5jyq4d6v31anbcslhzqnkr5-system-units.drv
  /nix/store/wq5zgjy83g20v9lf0cdsq59bk7j5vncv-vars-check-authelia.drv
  /nix/store/xph440115q9qhs3lr39npzkryk6niahd-user-generators.drv
  /nix/store/z8bhbqh91d047rbjlx6pkym1dckkywvg-system-shutdown.drv
  /nix/store/xadnmix4p7drr3x8pqcdqj3ybm1lnfj1-etc.drv
  /nix/store/8ckkwnsr9jp2xixncnmxjcl6p9bw1k6s-activate.drv
  /nix/store/4xssxx8qgcap9saij7sf2844ggln9iwr-nixos-system-server-test.drv
  /nix/store/52h0662y33ba2in1iwfbvbc6i127d9nc-testScript.drv
  /nix/store/mq5557w9v88d9c55dqyz04innk6r72ii-test-driver-0.0.1.drv
  /nix/store/nrmdjw7sd9fj7y27ksh7lw54bwh8avzv-closure-info.drv
  /nix/store/9m44qq7664an3dvllyimg17rr9p6lxac-nixos-test-driver-authelia.drv
  /nix/store/mpn46rrah2i7wwh4l54pnb6vp5y0rkp2-container-test-run-authelia.drv
these 2 paths will be fetched (23.7 KiB download, 188.3 KiB unpacked):
  /nix/store/s6bk3fjnjsqars4f9j2m5zsndk3pbrx8-ensure-all-wrappers-paths-exist
  /nix/store/sr18hggpsc73kx0l7wvmqicljvlyi16r-remarshal-0.17.1
building '/nix/store/jjwq34x9czk7f915sjjsw7y073nz4q8a-oidc-jwks.yaml.drv'
building '/nix/store/5kvmfycdblkz4z464kfjyn3nisqwpnl5-unit-script-linger-users-start.drv'
building '/nix/store/wlhx5hym8l07dvfpjmnxi34nlqdfylj7-unit-script-nix-gc-start.drv'
building '/nix/store/ks78vmmvmsd8xh5zv9lr6dspcvkgzkk4-unit-script-nixos-activation-start.drv'
building '/nix/store/w88a1pyi6ynni4y7wxh5gwvdmf1q4hvg-unit-script-register-nix-paths-start.drv'
building '/nix/store/5lai1bk7yxi6y991gw93nm5pcrbn4flw-authelia-oidc-input.json.drv'
building '/nix/store/fyqhdpbxsi0ykk0ppxz57lj0nmh1bnks-authelia-users-input.json.drv'
building '/nix/store/cswpzwv43prr571rs42lpd1i8z2k2gzh-unit-linger-users.service.drv'
building '/nix/store/jan9fiahy3pglz2873fqmc0znfxjm849-unit-nix-gc.service.drv'
building '/nix/store/j098p7hlnccaqj92xx224b9vpr136vb6-unit-nixos-activation.service.drv'
building '/nix/store/x0c84w1brks3fsflsn28qdyh530pb90x-unit-register-nix-paths.service.drv'
building '/nix/store/iyaia0lzr7ahrp76h7yrhgx0gm46ib3s-nss-cacert-3.126.drv' on 'ssh-ng://builder@build-x86-01.clan.lol'
building '/nix/store/7vyx9q0rwcws7f996dhj4nfbxxjahmpw-punchcard-19700101.drv' on 'ssh-ng://builder@build-x86-01.clan.lol'
building '/nix/store/wq5zgjy83g20v9lf0cdsq59bk7j5vncv-vars-check-authelia.drv' on 'ssh-ng://builder@build-x86-01.clan.lol'
building '/nix/store/14fnyalyrd3966xnnj03jszr20q71zlb-Caddyfile.drv'
building '/nix/store/52h0662y33ba2in1iwfbvbc6i127d9nc-testScript.drv'
building '/nix/store/h9kffr2mkj83jwb8fc9q5n47y0qnvh7y-users-groups.json.drv'
building '/nix/store/yzybqlxp21qq899j366xw6y9dcb78ym7-Caddyfile-formatted.drv' on 'ssh-ng://builder@build-x86-01.clan.lol'
building '/nix/store/sa2kp5hrg1jklvzr356kicvjsp7v5p3f-config.yml.drv'
config.yml> structuredAttrs is enabled
building '/nix/store/fggdzhpaycwl0mc3swy5yk8zzqa12gj5-unit-script-authelia-authelia-pre-start.drv'
building '/nix/store/gbjm1vzhxvd8qx1x1ck1hy0wf5hcbsym-unit-authelia-authelia.service.drv'
building '/nix/store/iyaia0lzr7ahrp76h7yrhgx0gm46ib3s-nss-cacert-3.126.drv'
nss-cacert-3.126> Running phase: unpackPhase
nss-cacert-3.126> Running phase: patchPhase
nss-cacert-3.126> Running phase: updateAutotoolsGnuConfigScriptsPhase
nss-cacert-3.126> Running phase: configurePhase
nss-cacert-3.126> no configure script, doing nothing
nss-cacert-3.126> Running phase: buildPhase
nss-cacert-3.126> Running phase: installPhase
nss-cacert-3.126> Running phase: fixupPhase
nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/k3d2rxa9z0v7szqh1hqxfg27kvgl76pa-nss-cacert-3.126
nss-cacert-3.126> checking for references to /build/ in /nix/store/k3d2rxa9z0v7szqh1hqxfg27kvgl76pa-nss-cacert-3.126...
nss-cacert-3.126> patching script interpreter paths in /nix/store/k3d2rxa9z0v7szqh1hqxfg27kvgl76pa-nss-cacert-3.126
nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/9wc1dr54k7hy7wnmsb2sdpbiqsrdvpl7-nss-cacert-3.126-unbundled
nss-cacert-3.126> checking for references to /build/ in /nix/store/9wc1dr54k7hy7wnmsb2sdpbiqsrdvpl7-nss-cacert-3.126-unbundled...
nss-cacert-3.126> patching script interpreter paths in /nix/store/9wc1dr54k7hy7wnmsb2sdpbiqsrdvpl7-nss-cacert-3.126-unbundled
nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/icmnjh1b60flfxpwhmj3dflkm68fy123-nss-cacert-3.126-p11kit
nss-cacert-3.126> checking for references to /build/ in /nix/store/icmnjh1b60flfxpwhmj3dflkm68fy123-nss-cacert-3.126-p11kit...
nss-cacert-3.126> patching script interpreter paths in /nix/store/icmnjh1b60flfxpwhmj3dflkm68fy123-nss-cacert-3.126-p11kit
nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/x0pj3k75z57r1mggxzs9y5z7jag60kqi-nss-cacert-3.126-hashed
nss-cacert-3.126> checking for references to /build/ in /nix/store/x0pj3k75z57r1mggxzs9y5z7jag60kqi-nss-cacert-3.126-hashed...
nss-cacert-3.126> patching script interpreter paths in /nix/store/x0pj3k75z57r1mggxzs9y5z7jag60kqi-nss-cacert-3.126-hashed
building '/nix/store/20ml9bagys7vqjnm1fa4dig2cy94ww4x-unit-nix-daemon.service.drv'
building '/nix/store/7vyx9q0rwcws7f996dhj4nfbxxjahmpw-punchcard-19700101.drv'
punchcard-19700101> Running phase: unpackPhase
punchcard-19700101> unpacking source archive /nix/store/kri9pf91gs36fzj416wkimbclcfaqhcw-kcacsi85z0l10lwkcrcs1sm24ff8az3r-source
punchcard-19700101> source root is kcacsi85z0l10lwkcrcs1sm24ff8az3r-source
punchcard-19700101> Running phase: patchPhase
punchcard-19700101> Running phase: updateAutotoolsGnuConfigScriptsPhase
punchcard-19700101> Running phase: configurePhase
punchcard-19700101> Running phase: buildPhase
punchcard-19700101> Building subPackage ./.
building '/nix/store/wq5zgjy83g20v9lf0cdsq59bk7j5vncv-vars-check-authelia.drv'
vars-check-authelia> Running vars check using Nix-based executor...
vars-check-authelia> Executing shared generators...
vars-check-authelia> Executing shared generator: authelia-oidc-punchcard-punchcard
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/61685rbaxmpigwi3z23i33sv3jyfl70q-coreutils-9.11/bin:/nix/store/i745smcm5gxy77w5zsib91dc12zyk6gg-openssl-3.6.3-bin/bin:/nix/store/mib4lczpsxyqyzprhf1daq9djf2yr8fy-authelia-4.39.20/bin:/nix/store/cwr0fxlfy7jzfxwz2wyhd30a3bzw7vx1-gnused-4.10/bin:/nix/store/61685rbaxmpigwi3z23i33sv3jyfl70q-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
vars-check-authelia> + cat
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + mkdir -p /output
vars-check-authelia> + openssl rand -hex 32
vars-check-authelia> + sed 's/^Digest: //'
vars-check-authelia> ++ cat /output/client_secret
vars-check-authelia> + authelia crypto hash generate argon2 --password d326c0e4b9b3d92b8dbe722a340e0620b316494b120b417ca557e99468236628
building '/nix/store/yzybqlxp21qq899j366xw6y9dcb78ym7-Caddyfile-formatted.drv'
vars-check-authelia> ✓ Generated shared file: authelia-oidc-punchcard-punchcard/client_secret
vars-check-authelia> ✓ Generated shared file: authelia-oidc-punchcard-punchcard/client_secret_hash
vars-check-authelia> ✓ Shared Generator authelia-oidc-punchcard-punchcard completed
vars-check-authelia> Executing shared generator: pki-root-ca
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/i745smcm5gxy77w5zsib91dc12zyk6gg-openssl-3.6.3-bin/bin:/nix/store/61685rbaxmpigwi3z23i33sv3jyfl70q-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
vars-check-authelia> + cat
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + openssl genrsa -out /output/ca.key 4096
building '/nix/store/175bzlvfwbbh52vrpamr3ynxkq8kflsc-X-Reload-Triggers-caddy.drv'
building '/nix/store/fa5f1y75qi31j8b2dgw50ggmidf7l8yb-unit-caddy.service.drv'
vars-check-authelia> + openssl req -x509 -new -nodes -key /output/ca.key -sha256 -days 3650 -subj '/CN=Clan Root CA' -out /output/ca.crt
vars-check-authelia> ✓ Generated shared file: pki-root-ca/ca.crt
vars-check-authelia> ✓ Generated shared file: pki-root-ca/ca.key
vars-check-authelia> ✓ Shared Generator pki-root-ca completed
vars-check-authelia> ✓ Shared generators completed
vars-check-authelia> Processing machine: server
vars-check-authelia> Generator execution order: authelia -> authelia-user-alice -> authelia-user-bob -> cert-auth -> cert-punchcard -> state-version
vars-check-authelia> Executing generator: authelia
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/61685rbaxmpigwi3z23i33sv3jyfl70q-coreutils-9.11/bin:/nix/store/i745smcm5gxy77w5zsib91dc12zyk6gg-openssl-3.6.3-bin/bin:/nix/store/61685rbaxmpigwi3z23i33sv3jyfl70q-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
vars-check-authelia> + cat
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + mkdir -p /output
vars-check-authelia> + openssl rand -hex 64
vars-check-authelia> + openssl rand -hex 64
vars-check-authelia> + openssl rand -hex 64
vars-check-authelia> + openssl rand -hex 64
vars-check-authelia> + openssl genrsa -out /output/oidc-jwks-key 4096
vars-check-authelia> ✓ Generated file: authelia/jwt-secret
vars-check-authelia> ✓ Generated file: authelia/oidc-hmac-secret
vars-check-authelia> ✓ Generated file: authelia/oidc-jwks-key
vars-check-authelia> ✓ Generated file: authelia/session-secret
vars-check-authelia> ✓ Generated file: authelia/storage-encryption-key
vars-check-authelia> ✓ Generator authelia completed
vars-check-authelia> Executing generator: authelia-user-alice
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/61685rbaxmpigwi3z23i33sv3jyfl70q-coreutils-9.11/bin:/nix/store/mib4lczpsxyqyzprhf1daq9djf2yr8fy-authelia-4.39.20/bin:/nix/store/x5y073jnmvh6p1b0n2pvkrgqhz0y5yvp-python3.13-xkcdpass-1.30.0/bin:/nix/store/cwr0fxlfy7jzfxwz2wyhd30a3bzw7vx1-gnused-4.10/bin:/nix/store/61685rbaxmpigwi3z23i33sv3jyfl70q-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
vars-check-authelia> + cat
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + mkdir -p /output
vars-check-authelia> + xkcdpass -n 7 -d-
vars-check-authelia> + sed 's/^Digest: //'
vars-check-authelia> ++ cat /output/password
vars-check-authelia> + authelia crypto hash generate argon2 --password helping-oversight-yelling-blustery-boney-filtrate-easiest
vars-check-authelia> ✓ Generated file: authelia-user-alice/password
vars-check-authelia> ✓ Generated file: authelia-user-alice/password-hash
vars-check-authelia> ✓ Generator authelia-user-alice completed
vars-check-authelia> Executing generator: authelia-user-bob
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/61685rbaxmpigwi3z23i33sv3jyfl70q-coreutils-9.11/bin:/nix/store/mib4lczpsxyqyzprhf1daq9djf2yr8fy-authelia-4.39.20/bin:/nix/store/x5y073jnmvh6p1b0n2pvkrgqhz0y5yvp-python3.13-xkcdpass-1.30.0/bin:/nix/store/cwr0fxlfy7jzfxwz2wyhd30a3bzw7vx1-gnused-4.10/bin:/nix/store/61685rbaxmpigwi3z23i33sv3jyfl70q-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
vars-check-authelia> + cat
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + mkdir -p /output
vars-check-authelia> + xkcdpass -n 7 -d-
vars-check-authelia> + sed 's/^Digest: //'
vars-check-authelia> ++ cat /output/password
vars-check-authelia> + authelia crypto hash generate argon2 --password overcome-emotion-majorette-courier-corner-treachery-quarterly
vars-check-authelia> ✓ Generated file: authelia-user-bob/password
vars-check-authelia> ✓ Generated file: authelia-user-bob/password-hash
vars-check-authelia> ✓ Generator authelia-user-bob completed
vars-check-authelia> Executing generator: cert-auth
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/i745smcm5gxy77w5zsib91dc12zyk6gg-openssl-3.6.3-bin/bin:/nix/store/61685rbaxmpigwi3z23i33sv3jyfl70q-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
vars-check-authelia> + cat
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + openssl genrsa -out /output/auth.key 4096
vars-check-authelia> + openssl req -new -key /output/auth.key -subj /CN=auth.test.clan -out endpoint.csr
vars-check-authelia> + printf subjectAltName=DNS:auth.test.clan
vars-check-authelia> + openssl x509 -req -in endpoint.csr -CA /input/pki-root-ca/ca.crt -CAkey /input/pki-root-ca/ca.key -CAcreateserial -days 365 -sha256 -extfile san.cnf -out /output/auth.crt
vars-check-authelia> Certificate request self-signature ok
vars-check-authelia> subject=CN=auth.test.clan
vars-check-authelia> + cat /output/auth.crt /input/pki-root-ca/ca.crt
vars-check-authelia> ✓ Generated file: cert-auth/auth.crt
vars-check-authelia> ✓ Generated file: cert-auth/auth.fullchain.crt
vars-check-authelia> ✓ Generated file: cert-auth/auth.key
vars-check-authelia> ✓ Generator cert-auth completed
vars-check-authelia> Executing generator: cert-punchcard
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/i745smcm5gxy77w5zsib91dc12zyk6gg-openssl-3.6.3-bin/bin:/nix/store/61685rbaxmpigwi3z23i33sv3jyfl70q-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
vars-check-authelia> + cat
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + openssl genrsa -out /output/punchcard.key 4096
vars-check-authelia> + openssl req -new -key /output/punchcard.key -subj /CN=punchcard.test.clan -out endpoint.csr
vars-check-authelia> + printf subjectAltName=DNS:punchcard.test.clan
vars-check-authelia> + openssl x509 -req -in endpoint.csr -CA /input/pki-root-ca/ca.crt -CAkey /input/pki-root-ca/ca.key -CAcreateserial -days 365 -sha256 -extfile san.cnf -out /output/punchcard.crt
vars-check-authelia> Certificate request self-signature ok
vars-check-authelia> subject=CN=punchcard.test.clan
vars-check-authelia> + cat /output/punchcard.crt /input/pki-root-ca/ca.crt
vars-check-authelia> ✓ Generated file: cert-punchcard/punchcard.crt
vars-check-authelia> ✓ Generated file: cert-punchcard/punchcard.fullchain.crt
vars-check-authelia> ✓ Generated file: cert-punchcard/punchcard.key
vars-check-authelia> ✓ Generator cert-punchcard completed
vars-check-authelia> Executing generator: state-version
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/61685rbaxmpigwi3z23i33sv3jyfl70q-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
vars-check-authelia> + cat
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + echo -n 26.05
vars-check-authelia> ✓ Generated file: state-version/version
vars-check-authelia> ✓ Generator state-version completed
vars-check-authelia> ✓ Machine server completed
vars-check-authelia> ✓ All vars checks completed successfully
building '/nix/store/hlcnn3jr1qsc7dh4874rgi6rv0l5a8wy-decrypt-age-secrets.drv' on 'ssh-ng://builder@build-x86-01.clan.lol'
building '/nix/store/hlcnn3jr1qsc7dh4874rgi6rv0l5a8wy-decrypt-age-secrets.drv'
building '/nix/store/89srbvjz9cmxmbjifq1lapywpb0s8d1x-dry-activate.drv'
punchcard-19700101> Running phase: checkPhase
punchcard-19700101> ok  	punchcard	0.019s
punchcard-19700101> Running phase: installPhase
punchcard-19700101> Running phase: fixupPhase
punchcard-19700101> shrinking RPATHs of ELF executables and libraries in /nix/store/dipqq19s5vkvynx3sj115p2pdxcidcp3-punchcard-19700101
punchcard-19700101> shrinking /nix/store/dipqq19s5vkvynx3sj115p2pdxcidcp3-punchcard-19700101/bin/punchcard
punchcard-19700101> checking for references to /build/ in /nix/store/dipqq19s5vkvynx3sj115p2pdxcidcp3-punchcard-19700101...
punchcard-19700101> patching script interpreter paths in /nix/store/dipqq19s5vkvynx3sj115p2pdxcidcp3-punchcard-19700101
punchcard-19700101> stripping (with command strip and flags -S -p) in  /nix/store/dipqq19s5vkvynx3sj115p2pdxcidcp3-punchcard-19700101/bin
building '/nix/store/2lyq0g1bbcxfyrbf72f0c1q585rkn0gp-unit-script-punchcard-punchcard-start.drv'
building '/nix/store/5brgy50wd2fxdy3wr2809481p1fz7v6i-unit-punchcard-punchcard.service.drv'
building '/nix/store/ly3hf81pz5jyq4d6v31anbcslhzqnkr5-system-units.drv'
building '/nix/store/xadnmix4p7drr3x8pqcdqj3ybm1lnfj1-etc.drv'
building '/nix/store/8ckkwnsr9jp2xixncnmxjcl6p9bw1k6s-activate.drv'
building '/nix/store/4xssxx8qgcap9saij7sf2844ggln9iwr-nixos-system-server-test.drv'
nixos-system-server-test> structuredAttrs is enabled
building '/nix/store/nrmdjw7sd9fj7y27ksh7lw54bwh8avzv-closure-info.drv'
closure-info> structuredAttrs is enabled
building '/nix/store/9m44qq7664an3dvllyimg17rr9p6lxac-nixos-test-driver-authelia.drv'
nixos-test-driver-authelia> Running type check (enable/disable: config.skipTypeCheck)
nixos-test-driver-authelia> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck
nixos-test-driver-authelia> Success: no issues found in 1 source file
building '/nix/store/mpn46rrah2i7wwh4l54pnb6vp5y0rkp2-container-test-run-authelia.drv' on 'ssh-ng://builder@build-x86-01.clan.lol'
building '/nix/store/mpn46rrah2i7wwh4l54pnb6vp5y0rkp2-container-test-run-authelia.drv'
container-test-run-authelia> additionally exposed symbols:
container-test-run-authelia>     server,
container-test-run-authelia>     start_all, machines, driver, Machine, wait_for_signal
container-test-run-authelia> Starting server
container-test-run-authelia> 
container-test-run-authelia> 
container-test-run-authelia> <<< NixOS Stage 2 >>>
container-test-run-authelia> 
container-test-run-authelia> booting system configuration /nix/store/n5mndkq7mgxz80p5yqgaj6bp1aqy8i6m-nixos-system-server-test
container-test-run-authelia> running activation script...
container-test-run-authelia> setting up /etc...
container-test-run-authelia> 2: host0@if3: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
container-test-run-authelia>     link/ether be:aa:dd:39:86:e7 brd ff:ff:ff:ff:ff:ff link-netnsid 0
container-test-run-authelia> setting up age secrets...
container-test-run-authelia> starting systemd...
container-test-run-authelia> systemd 260.2 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE)
container-test-run-authelia> Detected virtualization systemd-nspawn.
container-test-run-authelia> Detected architecture x86-64.
container-test-run-authelia> Detected first boot.
container-test-run-authelia> Initializing machine ID from container UUID.
container-test-run-authelia> Applying preset policy.
container-test-run-authelia> Populated /etc with preset unit settings.
container-test-run-authelia> Queued start job for default target Multi-User System.
container-test-run-authelia> 
container-test-run-authelia> 
container-test-run-authelia> 
container-test-run-authelia> <<< Welcome to NixOS test (x86_64) - console >>>
container-test-run-authelia> + systemd-run /bin/sh -c '/nix/store/61685rbaxmpigwi3z23i33sv3jyfl70q-coreutils-9.11/bin/sleep 999999999 && echo 770645c4-12d2-46c4-a6c6-ccd33f049ef2'
container-test-run-authelia> Running as unit: run-p507-i3073316.service; invocation ID: 551d8e6a7ee443ccb232264ad13c1847
container-test-run-authelia> To attach to container server run on the same machine that runs the test:
container-test-run-authelia>   sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*770645c4-12d2-46c4-a6c6-ccd33f049ef2') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash 
container-test-run-authelia> 
container-test-run-authelia> To inject external network and continue test, run:
container-test-run-authelia> sudo /nix/store/h3l4z7p6wny3phbckwwhy1i2g52pdnj4-python3-3.13.15/bin/python3.13 /nix/store/f960jm4nawb9zr6cb9d0vfpb7hifp96b-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py 770645c4-12d2-46c4-a6c6-ccd33f049ef2
container-test-run-authelia> + systemctl --no-pager show authelia-authelia.service
container-test-run-authelia> server: waiting for success: curl -sf http://127.0.0.1:9091/api/health
container-test-run-authelia> + curl -sf http://127.0.0.1:9091/api/health
container-test-run-authelia> (finished: waiting for success: curl -sf http://127.0.0.1:9091/api/health, in 0.01 seconds)
container-test-run-authelia> + test -f /run/authelia-authelia/users.json
container-test-run-authelia> + cat /run/authelia-authelia/users.json
container-test-run-authelia> + test -f /run/authelia-authelia/oidc.json
container-test-run-authelia> + cat /run/authelia-authelia/oidc.json
container-test-run-authelia> + systemctl --no-pager show caddy.service
container-test-run-authelia> server: waiting for success: curl -sf https://auth.test.clan/api/health
container-test-run-authelia> + curl -sf https://auth.test.clan/api/health
container-test-run-authelia> (finished: waiting for success: curl -sf https://auth.test.clan/api/health, in 0.02 seconds)
container-test-run-authelia> server: waiting for success: curl -sf https://auth.test.clan/.well-known/openid-configuration
container-test-run-authelia> + curl -sf https://auth.test.clan/.well-known/openid-configuration
container-test-run-authelia> (finished: waiting for success: curl -sf https://auth.test.clan/.well-known/openid-configuration, in 0.02 seconds)
container-test-run-authelia> + systemctl --no-pager show punchcard-punchcard.service
container-test-run-authelia> server: waiting for success: curl -sf https://punchcard.test.clan/login
container-test-run-authelia> + curl -sf https://punchcard.test.clan/login
container-test-run-authelia> (finished: waiting for success: curl -sf https://punchcard.test.clan/login, in 0.02 seconds)
container-test-run-authelia> + cat /run/secrets/authelia-user-bob/password
container-test-run-authelia> + curl -s -o /dev/null -w '%{redirect_url}' -c /tmp/pc-cookies https://punchcard.test.clan/login/start
container-test-run-authelia> + curl -sf -X POST https://auth.test.clan/api/firstfactor -H 'Content-Type: application/json' -c /tmp/auth-cookies -d '{"username": "bob", "password": "obstruct-idealize-clinic-deduct-ruined-eclair-moonscape", "keepMeLoggedIn": false}'
container-test-run-authelia> + curl -s -o /dev/null -w '%{redirect_url}' -b /tmp/auth-cookies -c /tmp/auth-cookies 'https://auth.test.clan/api/oidc/authorization?client_id=punchcard-punchcard&code_challenge=5c0NIffyq3qdr-jyHQ8LDOVVlErsRu5br2N3ZK3AhdE&code_challenge_method=S256&redirect_uri=https%3A%2F%2Fpunchcard.test.clan%2Fcallback&response_type=code&scope=openid+profile+email&state=RKHfgiILTSMZsjgtnCi3TCf0pP_n_d04SOson-Vwjqs%3D'
container-test-run-authelia> + curl -s -o /dev/null -w '%{http_code}' -c /tmp/pc-cookies -b /tmp/pc-cookies 'https://punchcard.test.clan/callback?code=authelia_ac_SMepEjjgjkxnzwdl2OmnYCFsesPNQq5ODP6mghU5oEA.eBZmzvWJ38tLDIipnxvqg2xOcysvjvyZ1r2-gG2_sjA&iss=https%3A%2F%2Fauth.test.clan&scope=openid+profile+email&state=RKHfgiILTSMZsjgtnCi3TCf0pP_n_d04SOson-Vwjqs%3D'
container-test-run-authelia> + curl -s -L -o /dev/null -w '%{http_code}' -b /tmp/pc-cookies -c /tmp/pc-cookies https://punchcard.test.clan/
container-test-run-authelia> 

upload niks3: failed
time=2026-09-09T00:16:45.564Z level=WARN msg="Request returned retryable status, retrying" attempt=1 max_attempts=6 backoff=100ms status=504 url=https://niks3.clan.lol/api/pending_closures
time=2026-09-09T00:21:45.665Z level=WARN msg="Request returned retryable status, retrying" attempt=2 max_attempts=6 backoff=194.852146ms status=504 url=https://niks3.clan.lol/api/pending_closures
time=2026-09-09T00:26:45.862Z level=WARN msg="Request returned retryable status, retrying" attempt=3 max_attempts=6 backoff=430.412196ms status=504 url=https://niks3.clan.lol/api/pending_closures
time=2026-09-09T00:31:46.294Z level=WARN msg="Request returned retryable status, retrying" attempt=4 max_attempts=6 backoff=816.064064ms status=504 url=https://niks3.clan.lol/api/pending_closures
time=2026-09-09T00:36:47.112Z level=WARN msg="Request returned retryable status, retrying" attempt=5 max_attempts=6 backoff=1.534920561s status=504 url=https://niks3.clan.lol/api/pending_closures
time=2026-09-09T00:41:48.649Z level=ERROR msg="Fatal error" error="pushing paths: creating pending closures: creating pending closure: server returned 504: "