this derivation will be built: /nix/store/42qwi0530y70qs0rqy8dm7nmwisgv5md-container-test-run-pocket-id.drv these 42 paths will be fetched (0.0 KiB download, 84.6 MiB unpacked): /nix/store/z4k5iihzfa9kwn7q9f6nkladxiyj39wk-Caddyfile-formatted /nix/store/b1az91pa4ym6ilkaa9nd81c27hycglpc-X-Reload-Triggers-caddy /nix/store/rbqwizdirwqpgwazhz11y601rmpmay95-X-Restart-Triggers-dbus-broker /nix/store/9jzrb3ldj8fb8qnsqjqfmnqcsabaxca6-X-Restart-Triggers-pocket-id /nix/store/367p2r598bm66006pvsj2n8w73jdnl73-X-Restart-Triggers-pocket-id-clients /nix/store/4p5rhgazfsb36s8il5pjpgrr9fycm5aq-X-Restart-Triggers-systemd-sysctl /nix/store/y7wv695j052pnz989bzsvpdjissn9z0r-X-Restart-Triggers-systemd-tmpfiles-resetup /nix/store/rwiinhj6750y5d1qzvlrcc4n0kpr3yxs-closure-info /nix/store/gxq92sz9jrzqs4fc0s09dyph81bay87z-dbus-1 /nix/store/gn6acdqxdj2wra18fznl9nfkzsc04xxg-decrypt-age-secrets /nix/store/z11rpw7mcxjcjfrj2wc8vxpzvf0v29g4-etc /nix/store/klkagk27gwagn9anl5bw8szw9ahcl5hl-etc-bashrc /nix/store/p659b9qlva2qxv92c7h9zrhv4bgjjcy4-etc-sysctl.d-60-nixos.conf /nix/store/pm9yh3kdnmqgmm25hc964nwk8d79igf3-hosts /nix/store/sbr44sy2y23rs3nm2nqr236gdq01k20f-nixos-system-server-test /nix/store/jdb9q2982ymgm69vziqv9ipcmkq1v2nk-nixos-test-driver-pocket-id /nix/store/nxqck5vry8diqafllsmb3p6rrq9x208q-nixos-tmpfiles.d /nix/store/q2wfpiz45ncsi2vj45pa2m2z855xl2r5-nss-cacert-3.126 /nix/store/8vril1qpad1v47mdlll7ykh6wkgisdb0-nss-cacert-3.126-p11kit /nix/store/q5c8ww61c1v1spn7qm181j0zpngvnlik-pocket-id-2.16.0 /nix/store/f78frk7x7vmn6bp322wh72df3frqw1a6-pocket-id-clients-reconcile /nix/store/wkpfa1b7ll3zz65b3762054azll8mzan-pocket-id-clients.json /nix/store/dmpkxl6n9zwl6n9i1xpz4qr9669083lv-pocket-id-env-vars /nix/store/f9zsskhxpvgw7zpfvx8666bq7cza3qiq-system-generators /nix/store/fl38r7skcq95456sq4f1zqsdcs7ki9xb-system-path /nix/store/x51dhvn4ghmlqzrfnqi8z9z449zs65k2-system-shutdown /nix/store/jwly1ml0i5434kb3ssm63gsc7j01sn0q-system-units /nix/store/v1p01ik1h33m3y158703p6arh9vynxda-testScript /nix/store/j5div6v5jb62dk7iw11qixk3za4gzarv-tmpfiles.d /nix/store/ga3ymlgiw3j8s1f3a67r005wparigqyg-unit-caddy.service /nix/store/3ca8lr96m1s387kmrmwl4hhvy31m88g3-unit-dbus-broker.service /nix/store/gbf01r96a9bdfj75qimfv1qr8zqdlvq7-unit-dbus-broker.service /nix/store/8rhyqs93ig9p71g10z4xlh8qsiscbndp-unit-nix-daemon.service /nix/store/xvyadqqxfma2cdm6i1jz3q1fq253xjhc-unit-pocket-id-clients.service /nix/store/qisr8n7as9bz7sz2l0zfwmphal3nhmyh-unit-pocket-id.service /nix/store/q3ck7cbjlracqxwrbqi86j15x3p8065g-unit-script-pocket-id-start /nix/store/7ig5rnd7qqqblxnvacns6icvliq93z8r-unit-systemd-sysctl.service /nix/store/zpw5n0r4isnr1dmaa3d7r94jvlqrbdwg-unit-systemd-tmpfiles-resetup.service /nix/store/1ybi32d7gmz8fl8gla62a8clnsnq8ysf-user-generators /nix/store/j2ch2da82sqc84qrf6jpg430gwqzwldl-user-units /nix/store/bl4zpk9n40wpszxryr9h1f6hqbkp9mdl-users-groups.json /nix/store/n74k88d9sz3i6gxnwzrs2digzz7jg45x-vars-check-pocket-id warning: ignoring the client-specified setting 'store', because it is a restricted setting and you are not a trusted user building '/nix/store/42qwi0530y70qs0rqy8dm7nmwisgv5md-container-test-run-pocket-id.drv' on nix-store.geninf.io:50051 container-test-run-pocket-id> build-x86-01: building 42qwi0530y70qs0rqy8dm7nmwisgv5md-container-test-run-pocket-id.drv container-test-run-pocket-id> additionally exposed symbols: container-test-run-pocket-id> server, container-test-run-pocket-id> start_all, machines, driver, Machine, wait_for_signal container-test-run-pocket-id> Starting server container-test-run-pocket-id> container-test-run-pocket-id> container-test-run-pocket-id> <<< NixOS Stage 2 >>> container-test-run-pocket-id> container-test-run-pocket-id> booting system configuration /nix/store/sbr44sy2y23rs3nm2nqr236gdq01k20f-nixos-system-server-test container-test-run-pocket-id> running activation script... container-test-run-pocket-id> setting up /etc... container-test-run-pocket-id> 2: host0@if3: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-pocket-id> link/ether be:aa:dd:39:86:e7 brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-pocket-id> setting up age secrets... container-test-run-pocket-id> starting systemd... container-test-run-pocket-id> systemd 260.4 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-pocket-id> Detected virtualization systemd-nspawn. container-test-run-pocket-id> Detected architecture x86-64. container-test-run-pocket-id> Detected first boot. container-test-run-pocket-id> Initializing machine ID from container UUID. container-test-run-pocket-id> Applying preset policy. container-test-run-pocket-id> Populated /etc with preset unit settings. container-test-run-pocket-id> Queued start job for default target Multi-User System. container-test-run-pocket-id> container-test-run-pocket-id> container-test-run-pocket-id> container-test-run-pocket-id> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-pocket-id> + systemd-run /bin/sh -c '/nix/store/833invqvsk7anqnqrki5hqncrcllj825-coreutils-9.11/bin/sleep 999999999 && echo 5f969af5-9a56-4c8f-8f0c-8d5c9fc539b4' container-test-run-pocket-id> Running as unit: run-p393-i27410622.service; invocation ID: c44c04ac550c48acbccad3a61b02a83a container-test-run-pocket-id> To attach to container server run on the same machine that runs the test: container-test-run-pocket-id> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*5f969af5-9a56-4c8f-8f0c-8d5c9fc539b4') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-pocket-id> container-test-run-pocket-id> To inject external network and continue test, run: container-test-run-pocket-id> sudo /nix/store/9r02ykx9y35lf4gk6gc30gnag1y8ncp7-python3-3.13.15/bin/python3.13 /nix/store/7pcwg3l52sff9p90k03qhavpaqk1zhfi-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py 5f969af5-9a56-4c8f-8f0c-8d5c9fc539b4 container-test-run-pocket-id> + systemctl --no-pager show pocket-id.service container-test-run-pocket-id> server: waiting for success: curl -sf http://127.0.0.1:1411/healthz container-test-run-pocket-id> + curl -sf http://127.0.0.1:1411/healthz container-test-run-pocket-id> (finished: waiting for success: curl -sf http://127.0.0.1:1411/healthz, in 0.01 seconds) container-test-run-pocket-id> server: waiting for success: curl -sf http://127.0.0.1:1411/.well-known/openid-configuration container-test-run-pocket-id> + curl -sf http://127.0.0.1:1411/.well-known/openid-configuration container-test-run-pocket-id> (finished: waiting for success: curl -sf http://127.0.0.1:1411/.well-known/openid-configuration, in 0.01 seconds) container-test-run-pocket-id> + systemctl --no-pager show pocket-id-clients.service container-test-run-pocket-id> + systemctl --lines 0 status pocket-id-clients.service container-test-run-pocket-id> + journalctl -u pocket-id-clients.service --no-pager container-test-run-pocket-id> container-test-run-pocket-id> Traceback (most recent call last): container-test-run-pocket-id> File "/nix/store/7pcwg3l52sff9p90k03qhavpaqk1zhfi-test-driver-0.0.1/bin/.nixos-test-driver-wrapped", line 9, in container-test-run-pocket-id> sys.exit(main()) container-test-run-pocket-id> ~~~~^^ container-test-run-pocket-id> File "/nix/store/7pcwg3l52sff9p90k03qhavpaqk1zhfi-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/__init__.py", line 764, in main container-test-run-pocket-id> driver.run_tests() container-test-run-pocket-id> ~~~~~~~~~~~~~~~~^^ container-test-run-pocket-id> File "/nix/store/7pcwg3l52sff9p90k03qhavpaqk1zhfi-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/__init__.py", line 700, in run_tests container-test-run-pocket-id> self.test_script() container-test-run-pocket-id> ~~~~~~~~~~~~~~~~^^ container-test-run-pocket-id> File "/nix/store/7pcwg3l52sff9p90k03qhavpaqk1zhfi-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/__init__.py", line 696, in test_script container-test-run-pocket-id> exec(self.testscript, self.test_symbols(), None) # noqa: S102 container-test-run-pocket-id> ~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ container-test-run-pocket-id> File "", line 22, in container-test-run-pocket-id> File "/nix/store/7pcwg3l52sff9p90k03qhavpaqk1zhfi-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/__init__.py", line 467, in wait_for_unit container-test-run-pocket-id> retry(check_active, timeout) container-test-run-pocket-id> ~~~~~^^^^^^^^^^^^^^^^^^^^^^^ container-test-run-pocket-id> File "/nix/store/7pcwg3l52sff9p90k03qhavpaqk1zhfi-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/__init__.py", line 195, in retry container-test-run-pocket-id> if fn(last_call): container-test-run-pocket-id> ~~^^^^^^^^^^^ container-test-run-pocket-id> File "/nix/store/7pcwg3l52sff9p90k03qhavpaqk1zhfi-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/__init__.py", line 455, in check_active container-test-run-pocket-id> raise Error(msg) container-test-run-pocket-id> test_driver.Error: unit "pocket-id-clients.service" reached state "failed": container-test-run-pocket-id> × pocket-id-clients.service - Reconcile Pocket ID OIDC clients against the clan-declared spec container-test-run-pocket-id> Loaded: loaded (/etc/systemd/system/pocket-id-clients.service; enabled; preset: ignored) container-test-run-pocket-id> Active: failed (Result: exit-code) since Thu 2026-10-08 10:04:15 UTC; 1s ago container-test-run-pocket-id> Invocation: 6e42ac82a72e4cb7bde8d3318c241ce2 container-test-run-pocket-id> Process: 316 ExecStart=/nix/store/f78frk7x7vmn6bp322wh72df3frqw1a6-pocket-id-clients-reconcile/bin/pocket-id-clients-reconcile (code=exited, status=22) container-test-run-pocket-id> Main PID: 316 (code=exited, status=22) container-test-run-pocket-id> CPU: 41ms container-test-run-pocket-id> container-test-run-pocket-id> Oct 08 10:04:14 server systemd[1]: Starting Reconcile Pocket ID OIDC clients against the clan-declared spec... container-test-run-pocket-id> Oct 08 10:04:14 server pocket-id-clients-reconcile[321]: curl: (7) Failed to connect to 127.0.0.1:1411 after 0 ms: Could not connect to server container-test-run-pocket-id> Oct 08 10:04:15 server pocket-id-clients-reconcile[383]: [dashboard] create container-test-run-pocket-id> Oct 08 10:04:15 server pocket-id-clients-reconcile[390]: curl: (22) The requested URL returned error: 404 container-test-run-pocket-id> Oct 08 10:04:15 server systemd[1]: pocket-id-clients.service: Main process exited, code=exited, status=22/n/a container-test-run-pocket-id> Oct 08 10:04:15 server systemd[1]: pocket-id-clients.service: Failed with result 'exit-code'. container-test-run-pocket-id> Oct 08 10:04:15 server systemd[1]: Failed to start Reconcile Pocket ID OIDC clients against the clan-declared spec. container-test-run-pocket-id> error: Cannot build '/nix/store/42qwi0530y70qs0rqy8dm7nmwisgv5md-container-test-run-pocket-id.drv'. Reason: builder failed with exit code 1. Output paths: /nix/store/sf7hd2q0hki1ssyj4q1x1bwhhwpw0fgi-container-test-run-pocket-id Last 25 log lines: > File "/nix/store/7pcwg3l52sff9p90k03qhavpaqk1zhfi-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/__init__.py", line 467, in wait_for_unit > retry(check_active, timeout) > ~~~~~^^^^^^^^^^^^^^^^^^^^^^^ > File "/nix/store/7pcwg3l52sff9p90k03qhavpaqk1zhfi-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/__init__.py", line 195, in retry > if fn(last_call): > ~~^^^^^^^^^^^ > File "/nix/store/7pcwg3l52sff9p90k03qhavpaqk1zhfi-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/__init__.py", line 455, in check_active > raise Error(msg) > test_driver.Error: unit "pocket-id-clients.service" reached state "failed": > × pocket-id-clients.service - Reconcile Pocket ID OIDC clients against the clan-declared spec > Loaded: loaded (/etc/systemd/system/pocket-id-clients.service; enabled; preset: ignored) > Active: failed (Result: exit-code) since Thu 2026-10-08 10:04:15 UTC; 1s ago > Invocation: 6e42ac82a72e4cb7bde8d3318c241ce2 > Process: 316 ExecStart=/nix/store/f78frk7x7vmn6bp322wh72df3frqw1a6-pocket-id-clients-reconcile/bin/pocket-id-clients-reconcile (code=exited, status=22) > Main PID: 316 (code=exited, status=22) > CPU: 41ms > > Oct 08 10:04:14 server systemd[1]: Starting Reconcile Pocket ID OIDC clients against the clan-declared spec... > Oct 08 10:04:14 server pocket-id-clients-reconcile[321]: curl: (7) Failed to connect to 127.0.0.1:1411 after 0 ms: Could not connect to server > Oct 08 10:04:15 server pocket-id-clients-reconcile[383]: [dashboard] create > Oct 08 10:04:15 server pocket-id-clients-reconcile[390]: curl: (22) The requested URL returned error: 404 > Oct 08 10:04:15 server systemd[1]: pocket-id-clients.service: Main process exited, code=exited, status=22/n/a > Oct 08 10:04:15 server systemd[1]: pocket-id-clients.service: Failed with result 'exit-code'. > Oct 08 10:04:15 server systemd[1]: Failed to start Reconcile Pocket ID OIDC clients against the clan-declared spec. > For full logs, run: nix log /nix/store/42qwi0530y70qs0rqy8dm7nmwisgv5md-container-test-run-pocket-id.drv