don't know how to build these paths: /nix/store/53swacqiiyb5bdwgd2xwdq247dch8p1w-container-test-run-authelia.drv warning: ignoring the client-specified setting 'store', because it is a restricted setting and you are not a trusted user building '/nix/store/8rfklb4g4ywbqvcc4hs7hrh55lz9d3wx-nss-cacert-3.126.drv' on nix-store.geninf.io:50051 nss-cacert-3.126> build01: building 8rfklb4g4ywbqvcc4hs7hrh55lz9d3wx-nss-cacert-3.126.drv building '/nix/store/zb76mclwp7v261y6gmylw2x7d2shhj1d-Caddyfile.drv' on nix-store.geninf.io:50051 Caddyfile> build01: building zb76mclwp7v261y6gmylw2x7d2shhj1d-Caddyfile.drv building '/nix/store/py84hibfjg1zfwvphz0dlfdljd5hmxzd-decrypt-age-secrets.drv' on nix-store.geninf.io:50051 decrypt-age-secrets> build01: building py84hibfjg1zfwvphz0dlfdljd5hmxzd-decrypt-age-secrets.drv Caddyfile> structuredAttrs is enabled nss-cacert-3.126> structuredAttrs is enabled decrypt-age-secrets> structuredAttrs is enabled building '/nix/store/vf2xd25cgdqyxmgyh4zy16nrkc8kk291-Caddyfile-formatted.drv' on nix-store.geninf.io:50051 Caddyfile-formatted> build01: building vf2xd25cgdqyxmgyh4zy16nrkc8kk291-Caddyfile-formatted.drv nss-cacert-3.126> Running phase: unpackPhase nss-cacert-3.126> Running phase: patchPhase nss-cacert-3.126> Running phase: updateAutotoolsGnuConfigScriptsPhase nss-cacert-3.126> Running phase: configurePhase nss-cacert-3.126> no configure script, doing nothing nss-cacert-3.126> Running phase: buildPhase building '/nix/store/krcms08m7vwz20pdw7sm5s2l5za3r026-dry-activate.drv' on nix-store.geninf.io:50051 dry-activate> build01: building krcms08m7vwz20pdw7sm5s2l5za3r026-dry-activate.drv dry-activate> structuredAttrs is enabled building '/nix/store/0xjjp7sh4nz01qzk3wpx43wf7xqys8pm-X-Reload-Triggers-caddy.drv' on nix-store.geninf.io:50051 X-Reload-Triggers-caddy> build01: building 0xjjp7sh4nz01qzk3wpx43wf7xqys8pm-X-Reload-Triggers-caddy.drv X-Reload-Triggers-caddy> structuredAttrs is enabled nss-cacert-3.126> Running phase: installPhase nss-cacert-3.126> Running phase: fixupPhase nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/2q3208ahvkla27q3kfllz3k8z5xm7phw-nss-cacert-3.126-p11kit nss-cacert-3.126> checking for references to /build/ in /nix/store/2q3208ahvkla27q3kfllz3k8z5xm7phw-nss-cacert-3.126-p11kit... nss-cacert-3.126> patching script interpreter paths in /nix/store/2q3208ahvkla27q3kfllz3k8z5xm7phw-nss-cacert-3.126-p11kit nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/2h0z6ncdknx2fqxc16drchajh6qikl4z-nss-cacert-3.126-hashed building '/nix/store/riljcsqh3s3qg0gcm1rnavniqfh7g2ii-unit-caddy.service.drv' on nix-store.geninf.io:50051 unit-caddy.service> build01: building riljcsqh3s3qg0gcm1rnavniqfh7g2ii-unit-caddy.service.drv unit-caddy.service> structuredAttrs is enabled nss-cacert-3.126> checking for references to /build/ in /nix/store/2h0z6ncdknx2fqxc16drchajh6qikl4z-nss-cacert-3.126-hashed... nss-cacert-3.126> patching script interpreter paths in /nix/store/2h0z6ncdknx2fqxc16drchajh6qikl4z-nss-cacert-3.126-hashed nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/jz9y40snmf8j8nwr4cmsq34sv4jb9a73-nss-cacert-3.126 nss-cacert-3.126> checking for references to /build/ in /nix/store/jz9y40snmf8j8nwr4cmsq34sv4jb9a73-nss-cacert-3.126... nss-cacert-3.126> patching script interpreter paths in /nix/store/jz9y40snmf8j8nwr4cmsq34sv4jb9a73-nss-cacert-3.126 nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/pkah1vapfmjwp5n2kakr48zpbcrp39kc-nss-cacert-3.126-unbundled nss-cacert-3.126> checking for references to /build/ in /nix/store/pkah1vapfmjwp5n2kakr48zpbcrp39kc-nss-cacert-3.126-unbundled... nss-cacert-3.126> patching script interpreter paths in /nix/store/pkah1vapfmjwp5n2kakr48zpbcrp39kc-nss-cacert-3.126-unbundled building '/nix/store/56ni2d9z8knsf757my1xwzwsk1xrl5b1-etc-pam-environment.drv' on nix-store.geninf.io:50051 etc-pam-environment> build01: building 56ni2d9z8knsf757my1xwzwsk1xrl5b1-etc-pam-environment.drv building '/nix/store/fjlawaqaxjq6dv1lzln67v7mr9gvra9v-unit-nix-daemon.service.drv' on nix-store.geninf.io:50051 unit-nix-daemon.service> build01: building fjlawaqaxjq6dv1lzln67v7mr9gvra9v-unit-nix-daemon.service.drv building '/nix/store/fhjlsqah0kmwza88wvzxh5qkwqmwilvb-set-environment.drv' on nix-store.geninf.io:50051 set-environment> build01: building fhjlsqah0kmwza88wvzxh5qkwqmwilvb-set-environment.drv etc-pam-environment> structuredAttrs is enabled set-environment> structuredAttrs is enabled unit-nix-daemon.service> structuredAttrs is enabled building '/nix/store/9ah54fm9wpy717zrnrhs38nqd7h924j1-etc-profile.drv' on nix-store.geninf.io:50051 etc-profile> build01: building 9ah54fm9wpy717zrnrhs38nqd7h924j1-etc-profile.drv building '/nix/store/5yqi45yn2ypngdwj4qb7gpplyky6jpyi-system-units.drv' on nix-store.geninf.io:50051 system-units> build01: building 5yqi45yn2ypngdwj4qb7gpplyky6jpyi-system-units.drv etc-profile> structuredAttrs is enabled building '/nix/store/zlzvvjb9hkmvr06wkyrzb42ydnfcv08p-etc.drv' on nix-store.geninf.io:50051 etc> build01: building zlzvvjb9hkmvr06wkyrzb42ydnfcv08p-etc.drv building '/nix/store/1awznhr3laba7yrf3dwprab39irz2nmp-activate.drv' on nix-store.geninf.io:50051 activate> build01: building 1awznhr3laba7yrf3dwprab39irz2nmp-activate.drv activate> structuredAttrs is enabled building '/nix/store/cla6mpcy6fawnminqz56g2h6y95fy20n-nixos-system-server-test.drv' on nix-store.geninf.io:50051 nixos-system-server-test> build01: building cla6mpcy6fawnminqz56g2h6y95fy20n-nixos-system-server-test.drv nixos-system-server-test> structuredAttrs is enabled building '/nix/store/lqhrg6jh0wwcdnryaqqbsms9y4msaf3a-run-server-nspawn.drv' on nix-store.geninf.io:50051 run-server-nspawn> build01: building lqhrg6jh0wwcdnryaqqbsms9y4msaf3a-run-server-nspawn.drv building '/nix/store/5hycp25lxkcy46xz5mi8qbds0y27gf1h-driverConfiguration.json.drv' on nix-store.geninf.io:50051 driverConfiguration.json> build01: building 5hycp25lxkcy46xz5mi8qbds0y27gf1h-driverConfiguration.json.drv driverConfiguration.json> structuredAttrs is enabled building '/nix/store/dqb0z4m5ng8v1mdj2bpz09xmi7rdg06i-nixos-test-driver-authelia.drv' on nix-store.geninf.io:50051 nixos-test-driver-authelia> build01: building dqb0z4m5ng8v1mdj2bpz09xmi7rdg06i-nixos-test-driver-authelia.drv nixos-test-driver-authelia> Running type check (enable/disable: config.skipTypeCheck) nixos-test-driver-authelia> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck nixos-test-driver-authelia> All checks passed! nixos-test-driver-authelia> Linting test script (enable/disable: config.skipLint) nixos-test-driver-authelia> See https://nixos.org/manual/nixos/stable/#test-opt-skipLint nixos-test-driver-authelia> All checks passed! building '/nix/store/53swacqiiyb5bdwgd2xwdq247dch8p1w-container-test-run-authelia.drv' on nix-store.geninf.io:50051 container-test-run-authelia> build01: building 53swacqiiyb5bdwgd2xwdq247dch8p1w-container-test-run-authelia.drv container-test-run-authelia> Machine state will be reset. To keep it, pass --keep-machine-state container-test-run-authelia> start all VLans container-test-run-authelia> (finished: start all VLans, in 0.00 seconds) container-test-run-authelia> container-test-run-authelia> Test will time out and terminate in 3600.0 seconds container-test-run-authelia> run the VM test script container-test-run-authelia> additionally exposed symbols: container-test-run-authelia> server, container-test-run-authelia> vlan1, container-test-run-authelia> start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh container-test-run-authelia> start all VMs container-test-run-authelia> server: systemd-nspawn running (pid 51) container-test-run-authelia> server: Waiting for journal at /build/vm-state-server/var/log/journal... container-test-run-authelia> (finished: start all VMs, in 0.00 seconds) container-test-run-authelia> ??? Warning (UserWarning): wait_for_unit(): passing a bare int/float as a duration is deprecated. Use datetime.timedelta instead. container-test-run-authelia> File "/nix/store/95nipdc5w3jx72qjsm3qrdj7c0kz7xl1-nixos-test-driver-1.1/lib/python3.14/site-packages/test_driver/duration.py", line 39 container-test-run-authelia> server: waiting for unit authelia-authelia.service container-test-run-authelia> nixos-nspawn(server): TAP vde-tap1 not found; container will be isolated from VDE container-test-run-authelia> nixos-nspawn(server): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths. container-test-run-authelia> Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file. container-test-run-authelia> ░ Spawning container server on /build/vm-state-server. container-test-run-authelia> server # No journal files were found. container-test-run-authelia> server # No journal boot entry found for the specified boot (+0). container-test-run-authelia> server # [134423.085832] server systemd-journald[189]: Journal started container-test-run-authelia> server # [134423.085890] server systemd-journald[189]: Runtime Journal (/run/log/journal/64a3d875a98448549ee9969d2e35723d) is 8M, max 2.5G, 2.4G free. container-test-run-authelia> server # [134423.087372] server systemd[1]: Finished Apply Kernel Variables. container-test-run-authelia> server # [134423.097670] server systemd[1]: Finished Create Static Device Nodes in /dev gracefully. container-test-run-authelia> server # [134423.109376] server systemd[1]: Starting Flush Journal to Persistent Storage... container-test-run-authelia> server # [134423.110253] server systemd[1]: Starting Network Name Resolution... container-test-run-authelia> server # [134423.111156] server systemd[1]: Starting Create Static Device Nodes in /dev... container-test-run-authelia> server # [134423.120231] server systemd-journald[189]: Time spent on flushing to /var/log/journal/64a3d875a98448549ee9969d2e35723d is 1.457ms for 7 entries. container-test-run-authelia> server # [134423.120231] server systemd-journald[189]: System Journal (/var/log/journal/64a3d875a98448549ee9969d2e35723d) is 8M, max 4G, 3.9G free. container-test-run-authelia> server # [134423.127744] server systemd[1]: Finished Create Static Device Nodes in /dev. container-test-run-authelia> server # [134423.128278] server systemd[1]: Reached target Preparation for Local File Systems. container-test-run-authelia> server # [134423.128395] server systemd[1]: Reached target Local File Systems. container-test-run-authelia> server # [134423.129225] server systemd[1]: Listening on Boot Loader Control Service Socket. container-test-run-authelia> server # [134423.129269] server systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container container-test-run-authelia> server # [134423.130068] server systemd[1]: Starting Save Transient machine-id to Disk... container-test-run-authelia> server # [134423.130101] server systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys container-test-run-authelia> server # [134423.133450] server systemd[1]: Finished Flush Journal to Persistent Storage. container-test-run-authelia> server # [134423.134449] server systemd[1]: Starting Create System Files and Directories... container-test-run-authelia> server # [134423.152366] server systemd-tmpfiles[236]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted container-test-run-authelia> server # [134423.152569] server systemd-tmpfiles[236]: fchmod() of /var/log/journal failed: Operation not permitted container-test-run-authelia> server # [134423.152700] server systemd-tmpfiles[236]: fchmod() of /var/log/journal/64a3d875a98448549ee9969d2e35723d failed: Operation not permitted container-test-run-authelia> server # [134423.152902] server systemd-tmpfiles[236]: fchmod() of /run/log/journal failed: Operation not permitted container-test-run-authelia> server # [134423.154216] server systemd[1]: Finished Create System Files and Directories. container-test-run-authelia> server # [134423.155463] server systemd[1]: Starting Rebuild Journal Catalog... container-test-run-authelia> server # [134423.156294] server systemd[1]: Starting Record System Boot/Shutdown in UTMP... container-test-run-authelia> server # [134423.170604] server systemd[1]: Finished Record System Boot/Shutdown in UTMP. container-test-run-authelia> server # [134423.179608] server systemd[1]: Finished Rebuild Journal Catalog. container-test-run-authelia> server # [134423.180654] server systemd[1]: Starting Update is Completed... container-test-run-authelia> server # [134423.192336] server systemd[1]: Finished Update is Completed. container-test-run-authelia> server # [134423.254488] server systemd[1]: Finished Firewall. container-test-run-authelia> server # [134423.254662] server systemd[1]: Reached target Preparation for Network. container-test-run-authelia> server # [134423.254899] server systemd[1]: Listening on Network Management Resolve Hook Socket. container-test-run-authelia> server # [134423.256170] server systemd[1]: Starting Network Management... container-test-run-authelia> server # [134423.272791] server systemd[1]: Finished Save Transient machine-id to Disk. container-test-run-authelia> server # [134423.788666] server systemd-networkd[302]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted container-test-run-authelia> server # [134423.788757] server systemd-networkd[302]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted container-test-run-authelia> server # [134423.797035] server systemd-networkd[302]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-authelia> server # [134423.797202] server systemd-networkd[302]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-authelia> server # [134423.797333] server systemd-networkd[302]: lo: Link UP container-test-run-authelia> server # [134423.797338] server systemd-networkd[302]: lo: Gained carrier container-test-run-authelia> server # [134423.797521] server systemd-networkd[302]: eth1: Configuring with /etc/systemd/network/40-eth1.network. container-test-run-authelia> server # [134423.797927] server systemd-networkd[302]: eth1: Link UP container-test-run-authelia> server # [134423.797938] server systemd[1]: Started Network Management. container-test-run-authelia> server # [134423.798176] server systemd-networkd[302]: eth1: Gained carrier container-test-run-authelia> server # [134423.799619] server systemd[1]: Starting Enable Persistent Storage in systemd-networkd... container-test-run-authelia> server # [134423.840470] server systemd[1]: Finished Enable Persistent Storage in systemd-networkd. container-test-run-authelia> server # [134424.023563] server systemd-resolved[217]: Positive Trust Anchors: container-test-run-authelia> server # [134424.023574] server systemd-resolved[217]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d container-test-run-authelia> server # [134424.023577] server systemd-resolved[217]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 container-test-run-authelia> server # [134424.023611] server systemd-resolved[217]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test container-test-run-authelia> server # [134424.043369] server systemd-resolved[217]: Using system hostname 'server'. container-test-run-authelia> server # [134424.044715] server systemd[1]: Started Network Name Resolution. container-test-run-authelia> server # [134424.044860] server systemd[1]: Reached target Network. container-test-run-authelia> server # [134424.044971] server systemd[1]: Reached target Network is Online. container-test-run-authelia> server # [134424.045070] server systemd[1]: Reached target System Initialization. container-test-run-authelia> server # [134424.045168] server systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container container-test-run-authelia> server # [134424.045218] server systemd[1]: Started Daily Cleanup of Temporary Directories. container-test-run-authelia> server # [134424.045261] server systemd[1]: Reached target Timer Units. container-test-run-authelia> server # [134424.045477] server systemd[1]: Listening on D-Bus System Message Bus Socket. container-test-run-authelia> server # [134424.045682] server systemd[1]: Listening on Nix Daemon Socket. container-test-run-authelia> server # [134424.045892] server systemd[1]: Listening on Virtual Machine and Container Registration Service Socket. container-test-run-authelia> server # [134424.045955] server systemd[1]: Reached target Socket Units. container-test-run-authelia> server # [134424.046039] server systemd[1]: Reached target Basic System. container-test-run-authelia> server # [134424.048234] server systemd[1]: Starting Authelia authentication and authorization server... container-test-run-authelia> server # [134424.049740] server systemd[1]: Starting Caddy... container-test-run-authelia> server # [134424.051126] server systemd[1]: Starting Import lastlog data into lastlog2 database... container-test-run-authelia> server # [134424.052779] server systemd[1]: Starting Name Service Cache Daemon (nsncd)... container-test-run-authelia> server # [134424.096490] server systemd[1]: Starting D-Bus System Message Bus... container-test-run-authelia> server # [134424.152424] server systemd[1]: etc-machine\x2did.mount: Deactivated successfully. container-test-run-authelia> server # [134424.234830] server systemd[1]: Finished Import lastlog data into lastlog2 database. container-test-run-authelia> server # [134424.277401] server systemd[1]: Started Name Service Cache Daemon (nsncd). container-test-run-authelia> server # [134424.277503] server systemd[1]: Reached target Host and Network Name Lookups. container-test-run-authelia> server # [134424.277565] server nsncd[311]: Oct 17 22:43:49.249 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket" container-test-run-authelia> server # [134424.277608] server systemd[1]: Reached target User and Group Name Lookups. container-test-run-authelia> server # [134424.279789] server systemd[1]: Starting User Login Management... container-test-run-authelia> server # [134424.281152] server systemd[1]: Starting Permit User Sessions... container-test-run-authelia> server # [134424.327978] server systemd[1]: Finished Permit User Sessions. container-test-run-authelia> server # [134424.329614] server systemd[1]: Started Console Getty. container-test-run-authelia> server # [134424.329689] server systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0 container-test-run-authelia> server # [134424.329732] server systemd[1]: Reached target Login Prompts. container-test-run-authelia> server # [134424.391734] server dbus-broker-launch[312]: Looking up NSS user entry for 'systemd-timesync'... container-test-run-authelia> server # [134424.393041] server dbus-broker-launch[312]: NSS returned no entry for 'systemd-timesync' container-test-run-authelia> server # [134424.393041] server dbus-broker-launch[312]: Invalid user-name in /nix/store/wpfmif0q8564lgb3bamfckfkw4ig83hl-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync" container-test-run-authelia> server # [134424.393487] server systemd[1]: Started D-Bus System Message Bus. container-test-run-authelia> server # [134424.402168] server dbus-broker-launch[312]: Ready container-test-run-authelia> server # [134424.594735] server systemd[1]: Started Caddy. container-test-run-authelia> server # [134424.977545] server systemd-logind[331]: New seat seat0. container-test-run-authelia> server # [134424.977751] server systemd[1]: Started User Login Management. container-test-run-authelia> server # [134424.979939] server systemd[1]: Starting linger-users.service... container-test-run-authelia> server # [134425.014483] server systemd[1]: linger-users.service: Deactivated successfully. container-test-run-authelia> server # [134425.014778] server systemd[1]: Finished linger-users.service. container-test-run-authelia> server # [134425.628118] server systemd-networkd[302]: eth1: Gained IPv6LL container-test-run-authelia> server # [134425.813045] server authelia[375]: Configuration parsed and loaded successfully without errors. container-test-run-authelia> server # [134426.619994] server systemd[1]: Started Authelia authentication and authorization server. container-test-run-authelia> server # [134426.621429] server systemd[1]: Starting Punchcard time tracking (punchcard)... container-test-run-authelia> server # [134426.665143] server authelia[407]: time="2026-10-17T22:43:51Z" level=info msg="Authelia v4.39.28-nixpkgs is starting" container-test-run-authelia> server # [134426.665718] server authelia[407]: time="2026-10-17T22:43:51Z" level=info msg="Log severity set to info" container-test-run-authelia> server # [134426.687780] server authelia[407]: time="2026-10-17T22:43:51Z" level=info msg="Storage schema is being checked for updates" container-test-run-authelia> server # [134426.689650] server authelia[407]: time="2026-10-17T22:43:51Z" level=info msg="Storage schema migration from 0 to 29 is being attempted" container-test-run-authelia> server # [134426.758893] server authelia[407]: time="2026-10-17T22:43:51Z" level=info msg="Storage schema migration from 0 to 29 is complete" container-test-run-authelia> server # [134426.768460] server systemd-resolved[217]: Switching to fallback DNS server 1.1.1.1#one.one.one.one. container-test-run-authelia> server # [134426.771059] server authelia[407]: time="2026-10-17T22:43:51Z" level=warning msg="Could not determine the clock offset due to an error" error="error occurred during dial: dial udp: lookup time.cloudflare.com: no such host" container-test-run-authelia> server # [134426.801236] server systemd[1]: Started Punchcard time tracking (punchcard). container-test-run-authelia> server # [134426.801628] server systemd[1]: Reached target Multi-User System. container-test-run-authelia> server # [134426.802100] server systemd[1]: Startup finished in 4.155s. container-test-run-authelia> server # [134426.816800] server punchcard-punchcard-start[411]: 2026/10/17 22:43:51 Warning: .env file not found, using environment variables: open .env: no such file or directory container-test-run-authelia> server # [134426.828513] server punchcard-punchcard-start[411]: 2026/10/17 22:43:51 OIDC authentication enabled with issuer: https://auth.test.clan container-test-run-authelia> server # [134426.828513] server punchcard-punchcard-start[411]: 2026/10/17 22:43:51 Redirect URL: https://punchcard.test.clan/callback container-test-run-authelia> server # [134426.829117] server punchcard-punchcard-start[411]: 2026/10/17 22:43:51 Server starting on :8099 container-test-run-authelia> server # [134427.013458] server authelia[407]: time="2026-10-17T22:43:51Z" level=info msg="Startup complete" container-test-run-authelia> server # [134427.013458] server authelia[407]: time="2026-10-17T22:43:51Z" level=info msg="Listening for non-TLS connections on '127.0.0.1:9091' path '/'" server=main service=server container-test-run-authelia> server: (finished: waiting for unit authelia-authelia.service, in 5.16 seconds) container-test-run-authelia> ??? Warning (UserWarning): wait_until_succeeds(): passing a bare int/float as a duration is deprecated. Use datetime.timedelta instead. container-test-run-authelia> File "/nix/store/95nipdc5w3jx72qjsm3qrdj7c0kz7xl1-nixos-test-driver-1.1/lib/python3.14/site-packages/test_driver/duration.py", line 39 container-test-run-authelia> server: waiting for success: curl -sf http://127.0.0.1:9091/api/health container-test-run-authelia> ??? Warning (UserWarning): execute(): passing a bare int/float as a duration is deprecated. Use datetime.timedelta instead. container-test-run-authelia> File "/nix/store/95nipdc5w3jx72qjsm3qrdj7c0kz7xl1-nixos-test-driver-1.1/lib/python3.14/site-packages/test_driver/duration.py", line 39 container-test-run-authelia> server: (finished: waiting for success: curl -sf http://127.0.0.1:9091/api/health, in 0.02 seconds) container-test-run-authelia> server: must succeed: test -f /run/authelia-authelia/users.json container-test-run-authelia> server: (finished: must succeed: test -f /run/authelia-authelia/users.json, in 0.01 seconds) container-test-run-authelia> server: must succeed: cat /run/authelia-authelia/users.json container-test-run-authelia> server: (finished: must succeed: cat /run/authelia-authelia/users.json, in 0.01 seconds) container-test-run-authelia> server: must succeed: test -f /run/authelia-authelia/oidc.json container-test-run-authelia> server: (finished: must succeed: test -f /run/authelia-authelia/oidc.json, in 0.01 seconds) container-test-run-authelia> server: must succeed: cat /run/authelia-authelia/oidc.json container-test-run-authelia> server: (finished: must succeed: cat /run/authelia-authelia/oidc.json, in 0.01 seconds) container-test-run-authelia> server: waiting for unit caddy.service container-test-run-authelia> server: (finished: waiting for unit caddy.service, in 0.01 seconds) container-test-run-authelia> server: waiting for success: curl -sf https://auth.test.clan/api/health container-test-run-authelia> server: (finished: waiting for success: curl -sf https://auth.test.clan/api/health, in 0.07 seconds) container-test-run-authelia> server: waiting for success: curl -sf https://auth.test.clan/.well-known/openid-configuration container-test-run-authelia> server: (finished: waiting for success: curl -sf https://auth.test.clan/.well-known/openid-configuration, in 0.10 seconds) container-test-run-authelia> ??? Warning (UserWarning): wait_for_unit(): passing a bare int/float as a duration is deprecated. Use datetime.timedelta instead. container-test-run-authelia> File "/nix/store/95nipdc5w3jx72qjsm3qrdj7c0kz7xl1-nixos-test-driver-1.1/lib/python3.14/site-packages/test_driver/duration.py", line 39 container-test-run-authelia> server: waiting for unit punchcard-punchcard.service container-test-run-authelia> server: (finished: waiting for unit punchcard-punchcard.service, in 0.02 seconds) container-test-run-authelia> server: waiting for success: curl -sf https://punchcard.test.clan/login container-test-run-authelia> server: (finished: waiting for success: curl -sf https://punchcard.test.clan/login, in 0.10 seconds) container-test-run-authelia> server: must succeed: cat /run/secrets/per-machine/server/authelia-user-bob/password container-test-run-authelia> server: (finished: must succeed: cat /run/secrets/per-machine/server/authelia-user-bob/password, in 0.01 seconds) container-test-run-authelia> server: must succeed: curl -s -o /dev/null -w '%{redirect_url}' -c /tmp/pc-cookies https://punchcard.test.clan/login/start container-test-run-authelia> server: (finished: must succeed: curl -s -o /dev/null -w '%{redirect_url}' -c /tmp/pc-cookies https://punchcard.test.clan/login/start, in 0.19 seconds) container-test-run-authelia> server: must succeed: curl -sf -X POST https://auth.test.clan/api/firstfactor -H 'Content-Type: application/json' -c /tmp/auth-cookies -d '{"username": "bob", "password": "payphone-oxford-blurred-squash-retrain-untoasted-reprogram", "keepMeLoggedIn": false}' container-test-run-authelia> server: (finished: must succeed: curl -sf -X POST https://auth.test.clan/api/firstfactor -H 'Content-Type: application/json' -c /tmp/auth-cookies -d '{"username": "bob", "password": "payphone-oxford-blurred-squash-retrain-untoasted-reprogram", "keepMeLoggedIn": false}', in 1.18 seconds) container-test-run-authelia> server: must succeed: curl -s -o /dev/null -w '%{redirect_url}' -b /tmp/auth-cookies -c /tmp/auth-cookies 'https://auth.test.clan/api/oidc/authorization?client_id=punchcard-punchcard&code_challenge=V4RBNzwTkNVH3IMEwRL0yZ1IrEPXYAfw4aBTuNc0thY&code_challenge_method=S256&redirect_uri=https%3A%2F%2Fpunchcard.test.clan%2Fcallback&response_type=code&scope=openid+profile+email&state=JNGZZaHc2PCyBq6GTXXakepZuflpc8pmjXdKcPtshRA%3D' container-test-run-authelia> server: (finished: must succeed: curl -s -o /dev/null -w '%{redirect_url}' -b /tmp/auth-cookies -c /tmp/auth-cookies 'https://auth.test.clan/api/oidc/authorization?client_id=punchcard-punchcard&code_challenge=V4RBNzwTkNVH3IMEwRL0yZ1IrEPXYAfw4aBTuNc0thY&code_challenge_method=S256&redirect_uri=https%3A%2F%2Fpunchcard.test.clan%2Fcallback&response_type=code&scope=openid+profile+email&state=JNGZZaHc2PCyBq6GTXXakepZuflpc8pmjXdKcPtshRA%3D', in 0.09 seconds) container-test-run-authelia> server: must succeed: curl -s -o /dev/null -w '%{http_code}' -c /tmp/pc-cookies -b /tmp/pc-cookies 'https://punchcard.test.clan/callback?code=authelia_ac_AFt1yVPDAHyVSW0ZiSVgLDzxBc1jJJK9aU8iMunIJsU.UM0G_THI3jP2ERolibOQTtPh00LeK99yo_EDi3cQ4tY&iss=https%3A%2F%2Fauth.test.clan&scope=openid+profile+email&state=JNGZZaHc2PCyBq6GTXXakepZuflpc8pmjXdKcPtshRA%3D' container-test-run-authelia> server: (finished: must succeed: curl -s -o /dev/null -w '%{http_code}' -c /tmp/pc-cookies -b /tmp/pc-cookies 'https://punchcard.test.clan/callback?code=authelia_ac_AFt1yVPDAHyVSW0ZiSVgLDzxBc1jJJK9aU8iMunIJsU.UM0G_THI3jP2ERolibOQTtPh00LeK99yo_EDi3cQ4tY&iss=https%3A%2F%2Fauth.test.clan&scope=openid+profile+email&state=JNGZZaHc2PCyBq6GTXXakepZuflpc8pmjXdKcPtshRA%3D', in 0.32 seconds) container-test-run-authelia> server: must succeed: curl -s -L -o /dev/null -w '%{http_code}' -b /tmp/pc-cookies -c /tmp/pc-cookies https://punchcard.test.clan/ container-test-run-authelia> server # [134428.988666] server authelia[407]: time="2026-10-17T22:43:53Z" level=error msg="Access Request failed with error: Client authentication failed (e.g., unknown client, no client authentication included, or unsupported authentication method). The required credentials were not found, used an unknown method, could not be parsed, were otherwise malformed, or were otherwise incorrect. The request was determined to be using 'token_endpoint_auth_method' method 'client_secret_basic', however the registered client with id 'punchcard-punchcard' is configured to only support 'token_endpoint_auth_method' method 'client_secret_post'. Either the Authorization Server client registration will need to have the 'token_endpoint_auth_method' updated to 'client_secret_basic' or the Relying Party will need to be configured to use 'client_secret_post'." method=POST path=/api/oidc/token remote_ip="::1" container-test-run-authelia> server # [134429.210504] server punchcard-punchcard-start[411]: 2026/10/17 22:43:54 User () logged in successfully container-test-run-authelia> server: (finished: must succeed: curl -s -L -o /dev/null -w '%{http_code}' -b /tmp/pc-cookies -c /tmp/pc-cookies https://punchcard.test.clan/, in 0.11 seconds) container-test-run-authelia> (finished: run the VM test script, in 7.41 seconds) container-test-run-authelia> test script finished in 7.45s container-test-run-authelia> cleanup container-test-run-authelia> kill NspawnMachine (pid 51) container-test-run-authelia> (finished: cleanup, in 0.16 seconds) container-test-run-authelia> Container server terminated by signal KILL.