these 48 derivations will be built: /nix/store/0vp90bnr9v26cl9q2yqhbmhlcvixa0p3-etc-sysctl.d-60-nixos.conf.drv /nix/store/1252k2n88jrgbmzk0s6ilyvlx2yqklqh-authelia-users-input.json.drv /nix/store/zvqn88xabf2cpmgbb9hnhk1svlkzzdq6-punchcard-19700101.drv /nix/store/z49mxrz5x5cbj0plngpz5kcb3qlkrsxs-unit-script-punchcard-punchcard-start.drv /nix/store/8a64bnmhshcc9pa6iafxdzg8qwafwfwr-unit-punchcard-punchcard.service.drv /nix/store/9bfsdhz3sk791vlvljfgvkybi4kpn9iq-nss-cacert-3.126.drv /nix/store/a0s7nsjp271q127f86db3x9zfghdcpii-unit-nix-daemon.service.drv /nix/store/3rmk3ck085526y1bg34xrn0hh70k3g5a-config.yml.drv /nix/store/v8g17cfmwz5v9mnqq9jfyqxrdbffpndq-oidc-jwks.yaml.drv /nix/store/swmr2n18kwywd881dbf26h35slnhylqm-authelia-oidc-input.json.drv /nix/store/ydlbdxzjd4i87f4bybqf91pj7s6igvxq-unit-script-authelia-authelia-pre-start.drv /nix/store/fqlj1y6vwfgkgcnwrvzbcmai0gpribw9-unit-authelia-authelia.service.drv /nix/store/icdiqf8nbk3afj2zyvdli2bc696yma38-system-path.drv /nix/store/b3k4p1i9l2pgdfsmzwgc3ll6d1yg5kx2-dbus-1.drv /nix/store/wm5ycrwf179dd14mcymddsjw2hmpqf9y-X-Restart-Triggers-dbus-broker.drv /nix/store/i4p72w390vshrprmlbzj7q3q27wb1hwr-unit-dbus-broker.service.drv /nix/store/syy986a1jpi18lacv4av68kpf7l1k388-X-Restart-Triggers-systemd-sysctl.drv /nix/store/iaxmsl8xg6zc0rfzqj5h2jnk172qqh27-unit-systemd-sysctl.service.drv /nix/store/a85cibfgwz8bz81xp5lmnlqgmf987xbs-Caddyfile.drv /nix/store/w6r2iaz2c9p6ibsal4mq9ymgmaz3iijd-Caddyfile-formatted.drv /nix/store/3aw393ga1fkamivl8wgksjs7gcyxzl6j-X-Reload-Triggers-caddy.drv /nix/store/s8pps24nh8p7vrdj1k85l31ffgfk1n1y-unit-caddy.service.drv /nix/store/1wsyd4h8hydiym2ygfxma2i3s50y1i8s-system-units.drv /nix/store/20rmiyyvy0hklipjlx8xvarywj22iya7-extra-hosts.drv /nix/store/32xxxrjdishzm0lsbjxn33yyrvnamf7d-system-generators.drv /nix/store/60wzjsxwhlxzpf5rkx839pk5cddrcj66-generator-cert-auth.drv /nix/store/6c5qvvjbz9gx7fl2rhfkdnry8i8wv49a-unit-dbus-broker.service.drv /nix/store/822r8df39agaghp4j5mqilp67jm654k1-user-generators.drv /nix/store/ax6c5qk5niwqy80777ykwy3qkyfzx5gj-decrypt-age-secrets.drv /nix/store/cjm20ia7r9w8dqhzmy6xxiipfyp1kqg4-string-hosts.drv /nix/store/dand4jbd3344f241kw65bj33sckjmgk3-generator-authelia-user-alice.drv /nix/store/gqz3bs96f0l5mq4qd5i8igpnkqb09anv-generator-authelia.drv /nix/store/hm710l2lr6hq7567jg1s9z8lqjvxd9ay-generator-cert-punchcard.drv /nix/store/jqqa9xzqia8kan925k9nl0xh0705dcqs-testScript.drv /nix/store/i043h84jmcl7df66vm68ks99bvy6hc1f-system-shutdown.drv /nix/store/m5nd5z5in56hv3al6cmyzz7yiik5nan9-user-units.drv /nix/store/qicyjpf25bqd46vvdmjpxznk3gr1gk29-generator-authelia-oidc-punchcard-punchcard.drv /nix/store/zs238jaqzw3gw96k0n6qr5ivmbydgv7x-generator-authelia-user-bob.drv /nix/store/qdxr38xkbnrxgl605wz4nhfa4gbinvb2-vars-check-authelia.drv /nix/store/zaj9f7xi73ycd5w84s6lcybav5ya6qm7-hosts.drv /nix/store/lyz22hpc68p0mkk36fxpyan07jvkjslp-etc.drv /nix/store/jycxcpw75qrj0p6y3mknx7byxg230adq-users-groups.json.drv /nix/store/nqab897avwjaq0ayq0bdanih7m9s3m55-dry-activate.drv /nix/store/w2jzh0b9na7414ck8g3hkffq2h5rg23z-activate.drv /nix/store/kgpx7d1kqnhflpajkzdlg63ki5l63wly-nixos-system-server-test.drv /nix/store/hr3y0gscnvlfxky5kmkksycjmw91w0xr-closure-info.drv /nix/store/kz0jy4hldrwhakynfnczr63fmryhmk0m-nixos-test-driver-authelia.drv /nix/store/khggaiwgw6fz24vabcv08pc50ihln65p-container-test-run-authelia.drv this path will be fetched (15.2 MiB download, 47.1 MiB unpacked): /nix/store/s287b7f29nnn38i0n6nngc1hvivjflvr-authelia-4.39.20 building '/nix/store/cjm20ia7r9w8dqhzmy6xxiipfyp1kqg4-string-hosts.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/v8g17cfmwz5v9mnqq9jfyqxrdbffpndq-oidc-jwks.yaml.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/swmr2n18kwywd881dbf26h35slnhylqm-authelia-oidc-input.json.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/1252k2n88jrgbmzk0s6ilyvlx2yqklqh-authelia-users-input.json.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/3rmk3ck085526y1bg34xrn0hh70k3g5a-config.yml.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/9bfsdhz3sk791vlvljfgvkybi4kpn9iq-nss-cacert-3.126.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/zvqn88xabf2cpmgbb9hnhk1svlkzzdq6-punchcard-19700101.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/a85cibfgwz8bz81xp5lmnlqgmf987xbs-Caddyfile.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/60wzjsxwhlxzpf5rkx839pk5cddrcj66-generator-cert-auth.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/jqqa9xzqia8kan925k9nl0xh0705dcqs-testScript.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/jycxcpw75qrj0p6y3mknx7byxg230adq-users-groups.json.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/dand4jbd3344f241kw65bj33sckjmgk3-generator-authelia-user-alice.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/zs238jaqzw3gw96k0n6qr5ivmbydgv7x-generator-authelia-user-bob.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/ax6c5qk5niwqy80777ykwy3qkyfzx5gj-decrypt-age-secrets.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/cjm20ia7r9w8dqhzmy6xxiipfyp1kqg4-string-hosts.drv' building '/nix/store/1252k2n88jrgbmzk0s6ilyvlx2yqklqh-authelia-users-input.json.drv' building '/nix/store/swmr2n18kwywd881dbf26h35slnhylqm-authelia-oidc-input.json.drv' building '/nix/store/v8g17cfmwz5v9mnqq9jfyqxrdbffpndq-oidc-jwks.yaml.drv' building '/nix/store/zaj9f7xi73ycd5w84s6lcybav5ya6qm7-hosts.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/3rmk3ck085526y1bg34xrn0hh70k3g5a-config.yml.drv' config.yml> structuredAttrs is enabled building '/nix/store/9bfsdhz3sk791vlvljfgvkybi4kpn9iq-nss-cacert-3.126.drv' building '/nix/store/ydlbdxzjd4i87f4bybqf91pj7s6igvxq-unit-script-authelia-authelia-pre-start.drv' on 'ssh-ng://builder@build01.clan.lol' nss-cacert-3.126> Running phase: unpackPhase nss-cacert-3.126> Running phase: patchPhase nss-cacert-3.126> Running phase: updateAutotoolsGnuConfigScriptsPhase nss-cacert-3.126> Running phase: configurePhase nss-cacert-3.126> no configure script, doing nothing nss-cacert-3.126> Running phase: buildPhase nss-cacert-3.126> Running phase: installPhase nss-cacert-3.126> Running phase: fixupPhase nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/225nxw92ql167h0ciizs183yj7md0gzy-nss-cacert-3.126 nss-cacert-3.126> checking for references to /build/ in /nix/store/225nxw92ql167h0ciizs183yj7md0gzy-nss-cacert-3.126... nss-cacert-3.126> patching script interpreter paths in /nix/store/225nxw92ql167h0ciizs183yj7md0gzy-nss-cacert-3.126 nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/557a1371x4iz092sf0zfcvwqa12py7ii-nss-cacert-3.126-unbundled nss-cacert-3.126> checking for references to /build/ in /nix/store/557a1371x4iz092sf0zfcvwqa12py7ii-nss-cacert-3.126-unbundled... nss-cacert-3.126> patching script interpreter paths in /nix/store/557a1371x4iz092sf0zfcvwqa12py7ii-nss-cacert-3.126-unbundled nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/x7dlchlmrljgb4sj3zmafwbr3vg4kn08-nss-cacert-3.126-p11kit nss-cacert-3.126> checking for references to /build/ in /nix/store/x7dlchlmrljgb4sj3zmafwbr3vg4kn08-nss-cacert-3.126-p11kit... nss-cacert-3.126> patching script interpreter paths in /nix/store/x7dlchlmrljgb4sj3zmafwbr3vg4kn08-nss-cacert-3.126-p11kit nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/21zdad2gbdyaffp9ajspmybawrwf4ipm-nss-cacert-3.126-hashed nss-cacert-3.126> checking for references to /build/ in /nix/store/21zdad2gbdyaffp9ajspmybawrwf4ipm-nss-cacert-3.126-hashed... nss-cacert-3.126> patching script interpreter paths in /nix/store/21zdad2gbdyaffp9ajspmybawrwf4ipm-nss-cacert-3.126-hashed building '/nix/store/zvqn88xabf2cpmgbb9hnhk1svlkzzdq6-punchcard-19700101.drv' punchcard-19700101> Running phase: unpackPhase punchcard-19700101> unpacking source archive /nix/store/kri9pf91gs36fzj416wkimbclcfaqhcw-kcacsi85z0l10lwkcrcs1sm24ff8az3r-source punchcard-19700101> source root is kcacsi85z0l10lwkcrcs1sm24ff8az3r-source punchcard-19700101> Running phase: patchPhase punchcard-19700101> Running phase: updateAutotoolsGnuConfigScriptsPhase punchcard-19700101> Running phase: configurePhase punchcard-19700101> Running phase: buildPhase punchcard-19700101> Building subPackage ./. building '/nix/store/jqqa9xzqia8kan925k9nl0xh0705dcqs-testScript.drv' building '/nix/store/a85cibfgwz8bz81xp5lmnlqgmf987xbs-Caddyfile.drv' building '/nix/store/60wzjsxwhlxzpf5rkx839pk5cddrcj66-generator-cert-auth.drv' building '/nix/store/w6r2iaz2c9p6ibsal4mq9ymgmaz3iijd-Caddyfile-formatted.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/jycxcpw75qrj0p6y3mknx7byxg230adq-users-groups.json.drv' building '/nix/store/a0s7nsjp271q127f86db3x9zfghdcpii-unit-nix-daemon.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/dand4jbd3344f241kw65bj33sckjmgk3-generator-authelia-user-alice.drv' building '/nix/store/zs238jaqzw3gw96k0n6qr5ivmbydgv7x-generator-authelia-user-bob.drv' building '/nix/store/qdxr38xkbnrxgl605wz4nhfa4gbinvb2-vars-check-authelia.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/ax6c5qk5niwqy80777ykwy3qkyfzx5gj-decrypt-age-secrets.drv' building '/nix/store/nqab897avwjaq0ayq0bdanih7m9s3m55-dry-activate.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/zaj9f7xi73ycd5w84s6lcybav5ya6qm7-hosts.drv' building '/nix/store/ydlbdxzjd4i87f4bybqf91pj7s6igvxq-unit-script-authelia-authelia-pre-start.drv' building '/nix/store/fqlj1y6vwfgkgcnwrvzbcmai0gpribw9-unit-authelia-authelia.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/w6r2iaz2c9p6ibsal4mq9ymgmaz3iijd-Caddyfile-formatted.drv' building '/nix/store/a0s7nsjp271q127f86db3x9zfghdcpii-unit-nix-daemon.service.drv' building '/nix/store/3aw393ga1fkamivl8wgksjs7gcyxzl6j-X-Reload-Triggers-caddy.drv' on 'ssh-ng://builder@build01.clan.lol' warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy building '/nix/store/nqab897avwjaq0ayq0bdanih7m9s3m55-dry-activate.drv' building '/nix/store/qdxr38xkbnrxgl605wz4nhfa4gbinvb2-vars-check-authelia.drv' vars-check-authelia> Running vars check using Nix-based executor... vars-check-authelia> Executing shared generators... vars-check-authelia> Executing shared generator: authelia-oidc-punchcard-punchcard vars-check-authelia> + set -euo pipefail vars-check-authelia> + PATH=/nix/store/fl0k50cdb33a5xxzlzmz5782yw66rj4r-coreutils-9.11/bin:/nix/store/v3kfa1bm33bp6l95jfc2wj6zbz7gpdd6-openssl-3.6.4-bin/bin:/nix/store/s287b7f29nnn38i0n6nngc1hvivjflvr-authelia-4.39.20/bin:/nix/store/k1niaby0ybj5y1kpl8x7r17c0g7xn05w-gnused-4.10/bin:/nix/store/fl0k50cdb33a5xxzlzmz5782yw66rj4r-coreutils-9.11/bin vars-check-authelia> + [[ ! -d /etc ]] vars-check-authelia> + mkdir -p /etc vars-check-authelia> + cat vars-check-authelia> ++ id -g vars-check-authelia> + cat vars-check-authelia> ++ id -u vars-check-authelia> ++ id -g vars-check-authelia> + cat vars-check-authelia> + mkdir -p /output vars-check-authelia> + openssl rand -hex 32 vars-check-authelia> + sed 's/^Digest: //' vars-check-authelia> ++ cat /output/client_secret vars-check-authelia> + authelia crypto hash generate argon2 --password ed702428dbb56cce2bbf9bd80342dea9647c851fe457cc5a25934b5ee86bea19 vars-check-authelia> ✓ Generated shared file: authelia-oidc-punchcard-punchcard/client_secret vars-check-authelia> ✓ Generated shared file: authelia-oidc-punchcard-punchcard/client_secret_hash vars-check-authelia> ✓ Shared Generator authelia-oidc-punchcard-punchcard completed vars-check-authelia> Executing shared generator: pki-root-ca vars-check-authelia> + set -euo pipefail vars-check-authelia> + PATH=/nix/store/v3kfa1bm33bp6l95jfc2wj6zbz7gpdd6-openssl-3.6.4-bin/bin:/nix/store/fl0k50cdb33a5xxzlzmz5782yw66rj4r-coreutils-9.11/bin vars-check-authelia> + [[ ! -d /etc ]] vars-check-authelia> + mkdir -p /etc vars-check-authelia> + cat vars-check-authelia> ++ id -g vars-check-authelia> + cat vars-check-authelia> ++ id -u vars-check-authelia> ++ id -g vars-check-authelia> + cat vars-check-authelia> + openssl genrsa -out /output/ca.key 4096 vars-check-authelia> + openssl req -x509 -new -nodes -key /output/ca.key -sha256 -days 3650 -subj '/CN=Clan Root CA' -out /output/ca.crt vars-check-authelia> ✓ Generated shared file: pki-root-ca/ca.crt vars-check-authelia> ✓ Generated shared file: pki-root-ca/ca.key vars-check-authelia> ✓ Shared Generator pki-root-ca completed vars-check-authelia> ✓ Shared generators completed vars-check-authelia> Processing machine: server vars-check-authelia> Generator execution order: authelia -> authelia-user-alice -> authelia-user-bob -> cert-auth -> cert-punchcard -> state-version vars-check-authelia> Executing generator: authelia vars-check-authelia> + set -euo pipefail vars-check-authelia> + PATH=/nix/store/fl0k50cdb33a5xxzlzmz5782yw66rj4r-coreutils-9.11/bin:/nix/store/v3kfa1bm33bp6l95jfc2wj6zbz7gpdd6-openssl-3.6.4-bin/bin:/nix/store/fl0k50cdb33a5xxzlzmz5782yw66rj4r-coreutils-9.11/bin vars-check-authelia> + [[ ! -d /etc ]] vars-check-authelia> + mkdir -p /etc vars-check-authelia> + cat vars-check-authelia> ++ id -g vars-check-authelia> + cat vars-check-authelia> ++ id -u vars-check-authelia> ++ id -g vars-check-authelia> + cat vars-check-authelia> + mkdir -p /output vars-check-authelia> + openssl rand -hex 64 vars-check-authelia> + openssl rand -hex 64 vars-check-authelia> + openssl rand -hex 64 vars-check-authelia> + openssl rand -hex 64 vars-check-authelia> + openssl genrsa -out /output/oidc-jwks-key 4096 vars-check-authelia> ✓ Generated file: authelia/jwt-secret vars-check-authelia> ✓ Generated file: authelia/oidc-hmac-secret vars-check-authelia> ✓ Generated file: authelia/oidc-jwks-key vars-check-authelia> ✓ Generated file: authelia/session-secret vars-check-authelia> ✓ Generated file: authelia/storage-encryption-key vars-check-authelia> ✓ Generator authelia completed vars-check-authelia> Executing generator: authelia-user-alice vars-check-authelia> + set -euo pipefail vars-check-authelia> + PATH=/nix/store/fl0k50cdb33a5xxzlzmz5782yw66rj4r-coreutils-9.11/bin:/nix/store/s287b7f29nnn38i0n6nngc1hvivjflvr-authelia-4.39.20/bin:/nix/store/myj4vm0zkv2xab9jv4vhh8f0asb9ppfm-python3.13-xkcdpass-1.30.0/bin:/nix/store/k1niaby0ybj5y1kpl8x7r17c0g7xn05w-gnused-4.10/bin:/nix/store/fl0k50cdb33a5xxzlzmz5782yw66rj4r-coreutils-9.11/bin vars-check-authelia> + [[ ! -d /etc ]] vars-check-authelia> + mkdir -p /etc vars-check-authelia> + cat vars-check-authelia> ++ id -g vars-check-authelia> + cat vars-check-authelia> ++ id -u vars-check-authelia> ++ id -g vars-check-authelia> + cat vars-check-authelia> + mkdir -p /output vars-check-authelia> + xkcdpass -n 7 -d- vars-check-authelia> + sed 's/^Digest: //' vars-check-authelia> ++ cat /output/password vars-check-authelia> + authelia crypto hash generate argon2 --password muskiness-germicide-gestation-scoff-passerby-rewrite-unending vars-check-authelia> ✓ Generated file: authelia-user-alice/password vars-check-authelia> ✓ Generated file: authelia-user-alice/password-hash vars-check-authelia> ✓ Generator authelia-user-alice completed vars-check-authelia> Executing generator: authelia-user-bob vars-check-authelia> + set -euo pipefail vars-check-authelia> + PATH=/nix/store/fl0k50cdb33a5xxzlzmz5782yw66rj4r-coreutils-9.11/bin:/nix/store/s287b7f29nnn38i0n6nngc1hvivjflvr-authelia-4.39.20/bin:/nix/store/myj4vm0zkv2xab9jv4vhh8f0asb9ppfm-python3.13-xkcdpass-1.30.0/bin:/nix/store/k1niaby0ybj5y1kpl8x7r17c0g7xn05w-gnused-4.10/bin:/nix/store/fl0k50cdb33a5xxzlzmz5782yw66rj4r-coreutils-9.11/bin vars-check-authelia> + [[ ! -d /etc ]] vars-check-authelia> + mkdir -p /etc vars-check-authelia> + cat vars-check-authelia> ++ id -g vars-check-authelia> + cat vars-check-authelia> ++ id -u vars-check-authelia> ++ id -g vars-check-authelia> + cat vars-check-authelia> + mkdir -p /output vars-check-authelia> + xkcdpass -n 7 -d- vars-check-authelia> + sed 's/^Digest: //' vars-check-authelia> ++ cat /output/password vars-check-authelia> + authelia crypto hash generate argon2 --password shoplift-snowfield-vanish-chrome-state-kilowatt-monthly vars-check-authelia> ✓ Generated file: authelia-user-bob/password vars-check-authelia> ✓ Generated file: authelia-user-bob/password-hash vars-check-authelia> ✓ Generator authelia-user-bob completed vars-check-authelia> Executing generator: cert-auth vars-check-authelia> + set -euo pipefail vars-check-authelia> + PATH=/nix/store/v3kfa1bm33bp6l95jfc2wj6zbz7gpdd6-openssl-3.6.4-bin/bin:/nix/store/fl0k50cdb33a5xxzlzmz5782yw66rj4r-coreutils-9.11/bin vars-check-authelia> + [[ ! -d /etc ]] vars-check-authelia> + mkdir -p /etc vars-check-authelia> + cat vars-check-authelia> ++ id -g vars-check-authelia> + cat vars-check-authelia> ++ id -u vars-check-authelia> ++ id -g vars-check-authelia> + cat vars-check-authelia> + openssl genrsa -out /output/auth.key 4096 vars-check-authelia> + openssl req -new -key /output/auth.key -subj /CN=auth.test.clan -out endpoint.csr vars-check-authelia> + printf subjectAltName=DNS:auth.test.clan vars-check-authelia> + openssl x509 -req -in endpoint.csr -CA /input/pki-root-ca/ca.crt -CAkey /input/pki-root-ca/ca.key -CAcreateserial -days 365 -sha256 -extfile san.cnf -out /output/auth.crt vars-check-authelia> Certificate request self-signature ok vars-check-authelia> subject=CN=auth.test.clan vars-check-authelia> + cat /output/auth.crt /input/pki-root-ca/ca.crt vars-check-authelia> ✓ Generated file: cert-auth/auth.crt vars-check-authelia> ✓ Generated file: cert-auth/auth.fullchain.crt vars-check-authelia> ✓ Generated file: cert-auth/auth.key vars-check-authelia> ✓ Generator cert-auth completed vars-check-authelia> Executing generator: cert-punchcard vars-check-authelia> + set -euo pipefail vars-check-authelia> + PATH=/nix/store/v3kfa1bm33bp6l95jfc2wj6zbz7gpdd6-openssl-3.6.4-bin/bin:/nix/store/fl0k50cdb33a5xxzlzmz5782yw66rj4r-coreutils-9.11/bin vars-check-authelia> + [[ ! -d /etc ]] vars-check-authelia> + mkdir -p /etc vars-check-authelia> + cat vars-check-authelia> ++ id -g vars-check-authelia> + cat vars-check-authelia> ++ id -u vars-check-authelia> ++ id -g vars-check-authelia> + cat vars-check-authelia> + openssl genrsa -out /output/punchcard.key 4096 building '/nix/store/3aw393ga1fkamivl8wgksjs7gcyxzl6j-X-Reload-Triggers-caddy.drv' building '/nix/store/fqlj1y6vwfgkgcnwrvzbcmai0gpribw9-unit-authelia-authelia.service.drv' vars-check-authelia> + openssl req -new -key /output/punchcard.key -subj /CN=punchcard.test.clan -out endpoint.csr vars-check-authelia> + printf subjectAltName=DNS:punchcard.test.clan vars-check-authelia> + openssl x509 -req -in endpoint.csr -CA /input/pki-root-ca/ca.crt -CAkey /input/pki-root-ca/ca.key -CAcreateserial -days 365 -sha256 -extfile san.cnf -out /output/punchcard.crt vars-check-authelia> Certificate request self-signature ok vars-check-authelia> subject=CN=punchcard.test.clan vars-check-authelia> + cat /output/punchcard.crt /input/pki-root-ca/ca.crt vars-check-authelia> ✓ Generated file: cert-punchcard/punchcard.crt vars-check-authelia> ✓ Generated file: cert-punchcard/punchcard.fullchain.crt vars-check-authelia> ✓ Generated file: cert-punchcard/punchcard.key vars-check-authelia> ✓ Generator cert-punchcard completed vars-check-authelia> Executing generator: state-version vars-check-authelia> + set -euo pipefail vars-check-authelia> + PATH=/nix/store/fl0k50cdb33a5xxzlzmz5782yw66rj4r-coreutils-9.11/bin vars-check-authelia> + [[ ! -d /etc ]] vars-check-authelia> + mkdir -p /etc vars-check-authelia> + cat vars-check-authelia> ++ id -g vars-check-authelia> + cat vars-check-authelia> ++ id -u vars-check-authelia> ++ id -g vars-check-authelia> + cat vars-check-authelia> + echo -n 26.05 vars-check-authelia> ✓ Generated file: state-version/version vars-check-authelia> ✓ Generator state-version completed vars-check-authelia> ✓ Machine server completed vars-check-authelia> ✓ All vars checks completed successfully building '/nix/store/s8pps24nh8p7vrdj1k85l31ffgfk1n1y-unit-caddy.service.drv' on 'ssh-ng://builder@build01.clan.lol' warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy building '/nix/store/s8pps24nh8p7vrdj1k85l31ffgfk1n1y-unit-caddy.service.drv' punchcard-19700101> buildPhase completed in 1 minutes 3 seconds punchcard-19700101> Running phase: checkPhase punchcard-19700101> ok punchcard 0.051s punchcard-19700101> checkPhase completed in 1 minutes 0 seconds punchcard-19700101> Running phase: installPhase punchcard-19700101> Running phase: fixupPhase punchcard-19700101> shrinking RPATHs of ELF executables and libraries in /nix/store/vri0brgjrr2aqxzsp81d290pvgdnmcvj-punchcard-19700101 punchcard-19700101> shrinking /nix/store/vri0brgjrr2aqxzsp81d290pvgdnmcvj-punchcard-19700101/bin/punchcard punchcard-19700101> checking for references to /build/ in /nix/store/vri0brgjrr2aqxzsp81d290pvgdnmcvj-punchcard-19700101... punchcard-19700101> patching script interpreter paths in /nix/store/vri0brgjrr2aqxzsp81d290pvgdnmcvj-punchcard-19700101 punchcard-19700101> stripping (with command strip and flags -S -p) in /nix/store/vri0brgjrr2aqxzsp81d290pvgdnmcvj-punchcard-19700101/bin building '/nix/store/z49mxrz5x5cbj0plngpz5kcb3qlkrsxs-unit-script-punchcard-punchcard-start.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/z49mxrz5x5cbj0plngpz5kcb3qlkrsxs-unit-script-punchcard-punchcard-start.drv' building '/nix/store/8a64bnmhshcc9pa6iafxdzg8qwafwfwr-unit-punchcard-punchcard.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/8a64bnmhshcc9pa6iafxdzg8qwafwfwr-unit-punchcard-punchcard.service.drv' building '/nix/store/1wsyd4h8hydiym2ygfxma2i3s50y1i8s-system-units.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/1wsyd4h8hydiym2ygfxma2i3s50y1i8s-system-units.drv' building '/nix/store/lyz22hpc68p0mkk36fxpyan07jvkjslp-etc.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/lyz22hpc68p0mkk36fxpyan07jvkjslp-etc.drv' building '/nix/store/w2jzh0b9na7414ck8g3hkffq2h5rg23z-activate.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/w2jzh0b9na7414ck8g3hkffq2h5rg23z-activate.drv' building '/nix/store/kgpx7d1kqnhflpajkzdlg63ki5l63wly-nixos-system-server-test.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/kgpx7d1kqnhflpajkzdlg63ki5l63wly-nixos-system-server-test.drv' nixos-system-server-test> structuredAttrs is enabled building '/nix/store/hr3y0gscnvlfxky5kmkksycjmw91w0xr-closure-info.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/hr3y0gscnvlfxky5kmkksycjmw91w0xr-closure-info.drv' closure-info> structuredAttrs is enabled building '/nix/store/kz0jy4hldrwhakynfnczr63fmryhmk0m-nixos-test-driver-authelia.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/kz0jy4hldrwhakynfnczr63fmryhmk0m-nixos-test-driver-authelia.drv' nixos-test-driver-authelia> Running type check (enable/disable: config.skipTypeCheck) nixos-test-driver-authelia> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck nixos-test-driver-authelia> Success: no issues found in 1 source file building '/nix/store/khggaiwgw6fz24vabcv08pc50ihln65p-container-test-run-authelia.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/khggaiwgw6fz24vabcv08pc50ihln65p-container-test-run-authelia.drv' container-test-run-authelia> additionally exposed symbols: container-test-run-authelia> server, container-test-run-authelia> start_all, machines, driver, Machine, wait_for_signal container-test-run-authelia> Starting server container-test-run-authelia> container-test-run-authelia> container-test-run-authelia> <<< NixOS Stage 2 >>> container-test-run-authelia> container-test-run-authelia> booting system configuration /nix/store/27rhzvn6cjha4m3r16j628nk777adawa-nixos-system-server-test container-test-run-authelia> running activation script... container-test-run-authelia> setting up /etc... container-test-run-authelia> 2: host0@if3: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-authelia> link/ether be:aa:dd:39:86:e7 brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-authelia> setting up age secrets... container-test-run-authelia> starting systemd... container-test-run-authelia> systemd 260.4 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-authelia> Detected virtualization systemd-nspawn. container-test-run-authelia> Detected architecture arm64. container-test-run-authelia> Detected first boot. container-test-run-authelia> Initializing machine ID from container UUID. container-test-run-authelia> Applying preset policy. container-test-run-authelia> Populated /etc with preset unit settings. container-test-run-authelia> Queued start job for default target Multi-User System. container-test-run-authelia> container-test-run-authelia> container-test-run-authelia> container-test-run-authelia> <<< Welcome to NixOS test (aarch64) - console >>> container-test-run-authelia> + systemd-run /bin/sh -c '/nix/store/fl0k50cdb33a5xxzlzmz5782yw66rj4r-coreutils-9.11/bin/sleep 999999999 && echo fc164f04-4cff-4328-b584-c6410458c5d3' container-test-run-authelia> Running as unit: run-p549-i18760206.service; invocation ID: 7b3068d6e9b747ccb121bcd4671d4c56 container-test-run-authelia> To attach to container server run on the same machine that runs the test: container-test-run-authelia> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*fc164f04-4cff-4328-b584-c6410458c5d3') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-authelia> container-test-run-authelia> To inject external network and continue test, run: container-test-run-authelia> sudo /nix/store/76jq0mngg7m8zv5yjz1qgg0xspzi8x2w-python3-3.13.15/bin/python3.13 /nix/store/1v002aslhnn1b7kr1fq8m14lldran2b0-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py fc164f04-4cff-4328-b584-c6410458c5d3 container-test-run-authelia> + systemctl --no-pager show authelia-authelia.service container-test-run-authelia> server: waiting for success: curl -sf http://127.0.0.1:9091/api/health container-test-run-authelia> + curl -sf http://127.0.0.1:9091/api/health container-test-run-authelia> (finished: waiting for success: curl -sf http://127.0.0.1:9091/api/health, in 0.02 seconds) container-test-run-authelia> + test -f /run/authelia-authelia/users.json container-test-run-authelia> + cat /run/authelia-authelia/users.json container-test-run-authelia> + test -f /run/authelia-authelia/oidc.json container-test-run-authelia> + cat /run/authelia-authelia/oidc.json container-test-run-authelia> + systemctl --no-pager show caddy.service container-test-run-authelia> server: waiting for success: curl -sf https://auth.test.clan/api/health container-test-run-authelia> + curl -sf https://auth.test.clan/api/health container-test-run-authelia> (finished: waiting for success: curl -sf https://auth.test.clan/api/health, in 0.10 seconds) container-test-run-authelia> server: waiting for success: curl -sf https://auth.test.clan/.well-known/openid-configuration container-test-run-authelia> + curl -sf https://auth.test.clan/.well-known/openid-configuration container-test-run-authelia> (finished: waiting for success: curl -sf https://auth.test.clan/.well-known/openid-configuration, in 0.10 seconds) container-test-run-authelia> + systemctl --no-pager show punchcard-punchcard.service container-test-run-authelia> server: waiting for success: curl -sf https://punchcard.test.clan/login container-test-run-authelia> + curl -sf https://punchcard.test.clan/login container-test-run-authelia> (finished: waiting for success: curl -sf https://punchcard.test.clan/login, in 0.07 seconds) container-test-run-authelia> + cat /run/secrets/authelia-user-bob/password container-test-run-authelia> + curl -s -o /dev/null -w '%{redirect_url}' -c /tmp/pc-cookies https://punchcard.test.clan/login/start container-test-run-authelia> + curl -sf -X POST https://auth.test.clan/api/firstfactor -H 'Content-Type: application/json' -c /tmp/auth-cookies -d '{"username": "bob", "password": "coastal-unsealed-unhitched-hardcore-emcee-french-aviation", "keepMeLoggedIn": false}' container-test-run-authelia> + curl -s -o /dev/null -w '%{redirect_url}' -b /tmp/auth-cookies -c /tmp/auth-cookies 'https://auth.test.clan/api/oidc/authorization?client_id=punchcard-punchcard&code_challenge=b-sYicrPFOzdR8IEMIWzIITEUm0uvybGpGIjGPXe1jQ&code_challenge_method=S256&redirect_uri=https%3A%2F%2Fpunchcard.test.clan%2Fcallback&response_type=code&scope=openid+profile+email&state=YNWYnk6WGf4P835W0LzXq4syKhLpGbU_CnIL6rLjijU%3D' container-test-run-authelia> + curl -s -o /dev/null -w '%{http_code}' -c /tmp/pc-cookies -b /tmp/pc-cookies 'https://punchcard.test.clan/callback?code=authelia_ac_Uh7PrhfpRfmzt9qDCZwzbOvY7Nkgdmexg7i8YIG-SRY.EpKZ704YHIFYQFPmATUJcb4BP9bfcWmdV5KakZmLjpA&iss=https%3A%2F%2Fauth.test.clan&scope=openid+profile+email&state=YNWYnk6WGf4P835W0LzXq4syKhLpGbU_CnIL6rLjijU%3D' container-test-run-authelia> + curl -s -L -o /dev/null -w '%{http_code}' -b /tmp/pc-cookies -c /tmp/pc-cookies https://punchcard.test.clan/ container-test-run-authelia> post-build step Upload to niks3: ok time=2026-09-21T00:04:40.630Z level=INFO msg="Uploading 0 paths to niks3.clan.lol (1 already cached)" time=2026-09-21T00:04:40.894Z level=INFO msg="Uploading 1 narinfos" time=2026-09-21T00:04:41.281Z level=INFO msg="Upload complete. (713ms)"