this derivation will be built: /nix/store/wffxy4glgj48xdg958jxgzjvck4zz3w1-container-test-run-pocket-id.drv these 42 paths will be fetched (0.0 KiB download, 82.0 MiB unpacked): /nix/store/z4k5iihzfa9kwn7q9f6nkladxiyj39wk-Caddyfile-formatted /nix/store/b1az91pa4ym6ilkaa9nd81c27hycglpc-X-Reload-Triggers-caddy /nix/store/x10vg1crg7wvn7216sl2v8fvac5zq7jn-X-Restart-Triggers-dbus-broker /nix/store/s1ham9wb4k8dr08jpdr3vbm9gmr5wqyf-X-Restart-Triggers-pocket-id /nix/store/367p2r598bm66006pvsj2n8w73jdnl73-X-Restart-Triggers-pocket-id-clients /nix/store/4p5rhgazfsb36s8il5pjpgrr9fycm5aq-X-Restart-Triggers-systemd-sysctl /nix/store/y7wv695j052pnz989bzsvpdjissn9z0r-X-Restart-Triggers-systemd-tmpfiles-resetup /nix/store/4agxaymvqqlbnmz725g41qqx3acfwl5l-closure-info /nix/store/i9ms5fjr64a5943s5lvrm54c63fh65dz-dbus-1 /nix/store/gn6acdqxdj2wra18fznl9nfkzsc04xxg-decrypt-age-secrets /nix/store/90rv69kknq3mb2k1s2rjc2722im0zmcv-etc /nix/store/p659b9qlva2qxv92c7h9zrhv4bgjjcy4-etc-sysctl.d-60-nixos.conf /nix/store/pm9yh3kdnmqgmm25hc964nwk8d79igf3-hosts /nix/store/7pm7jh7gjivmcrdk38xqd8chg9llcwfb-iproute2-7.0.0-dev /nix/store/xhsxqg1ysyj50qmf3vgyz6dfvwaczcw1-nixos-system-server-test /nix/store/r3yljzpc4jjgzgm9wpz51vginii2f97d-nixos-test-driver-pocket-id /nix/store/nxqck5vry8diqafllsmb3p6rrq9x208q-nixos-tmpfiles.d /nix/store/q2wfpiz45ncsi2vj45pa2m2z855xl2r5-nss-cacert-3.126 /nix/store/8vril1qpad1v47mdlll7ykh6wkgisdb0-nss-cacert-3.126-p11kit /nix/store/235686d5wb80z8pip2cmlvlbi81gdzn7-pocket-id-2.14.0 /nix/store/f78frk7x7vmn6bp322wh72df3frqw1a6-pocket-id-clients-reconcile /nix/store/wkpfa1b7ll3zz65b3762054azll8mzan-pocket-id-clients.json /nix/store/dmpkxl6n9zwl6n9i1xpz4qr9669083lv-pocket-id-env-vars /nix/store/f9zsskhxpvgw7zpfvx8666bq7cza3qiq-system-generators /nix/store/jwa0y2shylh69505m7z1vf8svyc2gvi6-system-path /nix/store/x51dhvn4ghmlqzrfnqi8z9z449zs65k2-system-shutdown /nix/store/7s523a7qzq38pwy8abn4nf5sw07jshqn-system-units /nix/store/v1p01ik1h33m3y158703p6arh9vynxda-testScript /nix/store/j5div6v5jb62dk7iw11qixk3za4gzarv-tmpfiles.d /nix/store/ga3ymlgiw3j8s1f3a67r005wparigqyg-unit-caddy.service /nix/store/fdyc3amjfayyc13kwx2r3dq02fcjlk7n-unit-dbus-broker.service /nix/store/vic1cg3dd989a5ijsqdjnwq3bv92qcxp-unit-dbus-broker.service /nix/store/8rhyqs93ig9p71g10z4xlh8qsiscbndp-unit-nix-daemon.service /nix/store/xvyadqqxfma2cdm6i1jz3q1fq253xjhc-unit-pocket-id-clients.service /nix/store/1hip1f1h9b62f4b7jfa6696n42qxq011-unit-pocket-id.service /nix/store/zsgkz01yf7g7j36phj9l906p94zwx54b-unit-script-pocket-id-start /nix/store/7ig5rnd7qqqblxnvacns6icvliq93z8r-unit-systemd-sysctl.service /nix/store/zpw5n0r4isnr1dmaa3d7r94jvlqrbdwg-unit-systemd-tmpfiles-resetup.service /nix/store/1ybi32d7gmz8fl8gla62a8clnsnq8ysf-user-generators /nix/store/sqd1kfbddrf0638gh021f0xih70hxjm7-user-units /nix/store/bl4zpk9n40wpszxryr9h1f6hqbkp9mdl-users-groups.json /nix/store/n74k88d9sz3i6gxnwzrs2digzz7jg45x-vars-check-pocket-id warning: ignoring the client-specified setting 'store', because it is a restricted setting and you are not a trusted user building '/nix/store/wffxy4glgj48xdg958jxgzjvck4zz3w1-container-test-run-pocket-id.drv' on nix-store.geninf.io:50051 container-test-run-pocket-id> build-x86-01: building wffxy4glgj48xdg958jxgzjvck4zz3w1-container-test-run-pocket-id.drv container-test-run-pocket-id> additionally exposed symbols: container-test-run-pocket-id> server, container-test-run-pocket-id> start_all, machines, driver, Machine, wait_for_signal container-test-run-pocket-id> Starting server container-test-run-pocket-id> container-test-run-pocket-id> container-test-run-pocket-id> <<< NixOS Stage 2 >>> container-test-run-pocket-id> container-test-run-pocket-id> booting system configuration /nix/store/xhsxqg1ysyj50qmf3vgyz6dfvwaczcw1-nixos-system-server-test container-test-run-pocket-id> running activation script... container-test-run-pocket-id> setting up /etc... container-test-run-pocket-id> 2: host0@if3: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-pocket-id> link/ether be:aa:dd:39:86:e7 brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-pocket-id> setting up age secrets... container-test-run-pocket-id> starting systemd... container-test-run-pocket-id> systemd 260.4 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-pocket-id> Detected virtualization systemd-nspawn. container-test-run-pocket-id> Detected architecture x86-64. container-test-run-pocket-id> Detected first boot. container-test-run-pocket-id> Initializing machine ID from container UUID. container-test-run-pocket-id> Applying preset policy. container-test-run-pocket-id> Populated /etc with preset unit settings. container-test-run-pocket-id> Queued start job for default target Multi-User System. container-test-run-pocket-id> container-test-run-pocket-id> container-test-run-pocket-id> container-test-run-pocket-id> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-pocket-id> + systemd-run /bin/sh -c '/nix/store/833invqvsk7anqnqrki5hqncrcllj825-coreutils-9.11/bin/sleep 999999999 && echo cb30d954-44f4-43ad-b04b-0e4bca5ec298' container-test-run-pocket-id> Running as unit: run-p393-i19476086.service; invocation ID: 5262af698fb9463fbc08bcd6f1cc6c43 container-test-run-pocket-id> To attach to container server run on the same machine that runs the test: container-test-run-pocket-id> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*cb30d954-44f4-43ad-b04b-0e4bca5ec298') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-pocket-id> container-test-run-pocket-id> To inject external network and continue test, run: container-test-run-pocket-id> sudo /nix/store/9r02ykx9y35lf4gk6gc30gnag1y8ncp7-python3-3.13.15/bin/python3.13 /nix/store/7pcwg3l52sff9p90k03qhavpaqk1zhfi-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py cb30d954-44f4-43ad-b04b-0e4bca5ec298 container-test-run-pocket-id> + systemctl --no-pager show pocket-id.service container-test-run-pocket-id> server: waiting for success: curl -sf http://127.0.0.1:1411/healthz container-test-run-pocket-id> + curl -sf http://127.0.0.1:1411/healthz container-test-run-pocket-id> (finished: waiting for success: curl -sf http://127.0.0.1:1411/healthz, in 0.01 seconds) container-test-run-pocket-id> server: waiting for success: curl -sf http://127.0.0.1:1411/.well-known/openid-configuration container-test-run-pocket-id> + curl -sf http://127.0.0.1:1411/.well-known/openid-configuration container-test-run-pocket-id> (finished: waiting for success: curl -sf http://127.0.0.1:1411/.well-known/openid-configuration, in 0.01 seconds) container-test-run-pocket-id> + systemctl --no-pager show pocket-id-clients.service container-test-run-pocket-id> + systemctl --lines 0 status pocket-id-clients.service container-test-run-pocket-id> + journalctl -u pocket-id-clients.service --no-pager container-test-run-pocket-id> container-test-run-pocket-id> Traceback (most recent call last): container-test-run-pocket-id> File "/nix/store/7pcwg3l52sff9p90k03qhavpaqk1zhfi-test-driver-0.0.1/bin/.nixos-test-driver-wrapped", line 9, in container-test-run-pocket-id> sys.exit(main()) container-test-run-pocket-id> ~~~~^^ container-test-run-pocket-id> File "/nix/store/7pcwg3l52sff9p90k03qhavpaqk1zhfi-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/__init__.py", line 764, in main container-test-run-pocket-id> driver.run_tests() container-test-run-pocket-id> ~~~~~~~~~~~~~~~~^^ container-test-run-pocket-id> File "/nix/store/7pcwg3l52sff9p90k03qhavpaqk1zhfi-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/__init__.py", line 700, in run_tests container-test-run-pocket-id> self.test_script() container-test-run-pocket-id> ~~~~~~~~~~~~~~~~^^ container-test-run-pocket-id> File "/nix/store/7pcwg3l52sff9p90k03qhavpaqk1zhfi-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/__init__.py", line 696, in test_script container-test-run-pocket-id> exec(self.testscript, self.test_symbols(), None) # noqa: S102 container-test-run-pocket-id> ~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ container-test-run-pocket-id> File "", line 22, in container-test-run-pocket-id> File "/nix/store/7pcwg3l52sff9p90k03qhavpaqk1zhfi-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/__init__.py", line 467, in wait_for_unit container-test-run-pocket-id> retry(check_active, timeout) container-test-run-pocket-id> ~~~~~^^^^^^^^^^^^^^^^^^^^^^^ container-test-run-pocket-id> File "/nix/store/7pcwg3l52sff9p90k03qhavpaqk1zhfi-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/__init__.py", line 195, in retry container-test-run-pocket-id> if fn(last_call): container-test-run-pocket-id> ~~^^^^^^^^^^^ container-test-run-pocket-id> File "/nix/store/7pcwg3l52sff9p90k03qhavpaqk1zhfi-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/__init__.py", line 455, in check_active container-test-run-pocket-id> raise Error(msg) container-test-run-pocket-id> test_driver.Error: unit "pocket-id-clients.service" reached state "failed": container-test-run-pocket-id> × pocket-id-clients.service - Reconcile Pocket ID OIDC clients against the clan-declared spec container-test-run-pocket-id> Loaded: loaded (/etc/systemd/system/pocket-id-clients.service; enabled; preset: ignored) container-test-run-pocket-id> Active: failed (Result: exit-code) since Mon 2026-09-28 10:01:29 UTC; 1s ago container-test-run-pocket-id> Invocation: 2de0faccf5bf43b5b82ecda02717ccd4 container-test-run-pocket-id> Process: 315 ExecStart=/nix/store/f78frk7x7vmn6bp322wh72df3frqw1a6-pocket-id-clients-reconcile/bin/pocket-id-clients-reconcile (code=exited, status=22) container-test-run-pocket-id> Main PID: 315 (code=exited, status=22) container-test-run-pocket-id> CPU: 38ms container-test-run-pocket-id> container-test-run-pocket-id> Sep 28 10:01:28 server systemd[1]: Starting Reconcile Pocket ID OIDC clients against the clan-declared spec... container-test-run-pocket-id> Sep 28 10:01:28 server pocket-id-clients-reconcile[320]: curl: (7) Failed to connect to 127.0.0.1:1411 after 0 ms: Could not connect to server container-test-run-pocket-id> Sep 28 10:01:29 server pocket-id-clients-reconcile[383]: [dashboard] create container-test-run-pocket-id> Sep 28 10:01:29 server pocket-id-clients-reconcile[390]: curl: (22) The requested URL returned error: 404 container-test-run-pocket-id> Sep 28 10:01:29 server systemd[1]: pocket-id-clients.service: Main process exited, code=exited, status=22/n/a container-test-run-pocket-id> Sep 28 10:01:29 server systemd[1]: pocket-id-clients.service: Failed with result 'exit-code'. container-test-run-pocket-id> Sep 28 10:01:29 server systemd[1]: Failed to start Reconcile Pocket ID OIDC clients against the clan-declared spec. container-test-run-pocket-id> error: Cannot build '/nix/store/wffxy4glgj48xdg958jxgzjvck4zz3w1-container-test-run-pocket-id.drv'. Reason: builder failed with exit code 1. Output paths: /nix/store/signzzhgpx5g1gfjqkwplaxb3y7vg8fk-container-test-run-pocket-id Last 25 log lines: > File "/nix/store/7pcwg3l52sff9p90k03qhavpaqk1zhfi-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/__init__.py", line 467, in wait_for_unit > retry(check_active, timeout) > ~~~~~^^^^^^^^^^^^^^^^^^^^^^^ > File "/nix/store/7pcwg3l52sff9p90k03qhavpaqk1zhfi-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/__init__.py", line 195, in retry > if fn(last_call): > ~~^^^^^^^^^^^ > File "/nix/store/7pcwg3l52sff9p90k03qhavpaqk1zhfi-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/__init__.py", line 455, in check_active > raise Error(msg) > test_driver.Error: unit "pocket-id-clients.service" reached state "failed": > × pocket-id-clients.service - Reconcile Pocket ID OIDC clients against the clan-declared spec > Loaded: loaded (/etc/systemd/system/pocket-id-clients.service; enabled; preset: ignored) > Active: failed (Result: exit-code) since Mon 2026-09-28 10:01:29 UTC; 1s ago > Invocation: 2de0faccf5bf43b5b82ecda02717ccd4 > Process: 315 ExecStart=/nix/store/f78frk7x7vmn6bp322wh72df3frqw1a6-pocket-id-clients-reconcile/bin/pocket-id-clients-reconcile (code=exited, status=22) > Main PID: 315 (code=exited, status=22) > CPU: 38ms > > Sep 28 10:01:28 server systemd[1]: Starting Reconcile Pocket ID OIDC clients against the clan-declared spec... > Sep 28 10:01:28 server pocket-id-clients-reconcile[320]: curl: (7) Failed to connect to 127.0.0.1:1411 after 0 ms: Could not connect to server > Sep 28 10:01:29 server pocket-id-clients-reconcile[383]: [dashboard] create > Sep 28 10:01:29 server pocket-id-clients-reconcile[390]: curl: (22) The requested URL returned error: 404 > Sep 28 10:01:29 server systemd[1]: pocket-id-clients.service: Main process exited, code=exited, status=22/n/a > Sep 28 10:01:29 server systemd[1]: pocket-id-clients.service: Failed with result 'exit-code'. > Sep 28 10:01:29 server systemd[1]: Failed to start Reconcile Pocket ID OIDC clients against the clan-declared spec. > For full logs, run: nix log /nix/store/wffxy4glgj48xdg958jxgzjvck4zz3w1-container-test-run-pocket-id.drv