container-test-run-authelia
checks.aarch64-linux.authelia
· build #278
· raw
1build01: building p06vlz5i2zglh65nd6himsk7imyra2qk-container-test-run-authelia.drv2Machine state will be reset. To keep it, pass --keep-machine-state3start all VLans4(finished: start all VLans, in 0.00 seconds)56Test will time out and terminate in 3600.0 seconds7run the VM test script8additionally exposed symbols:9 server,10 vlan1,11 start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh12start all VMs13server: systemd-nspawn running (pid 51)14server: Waiting for journal at /build/vm-state-server/var/log/journal...15(finished: start all VMs, in 0.00 seconds)16??? Warning (UserWarning): wait_for_unit(): passing a bare int/float as a duration is deprecated. Use datetime.timedelta instead.17 File "/nix/store/8xlk88ia8b5yg9kfrg3skndwzgphipvr-nixos-test-driver-1.1/lib/python3.14/site-packages/test_driver/duration.py", line 3918server: waiting for unit authelia-authelia.service19nixos-nspawn(server): TAP vde-tap1 not found; container will be isolated from VDE20nixos-nspawn(server): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.21Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.22░ Spawning container server on /build/vm-state-server.23server # No journal files were found.24server # No journal boot entry found for the specified boot (+0).25server # [137009.417106] server systemd-journald[185]: Journal started26server # [137009.417162] server systemd-journald[185]: Runtime Journal (/run/log/journal/1695e3a7facf4ecdbdad0b27a2a2bd83) is 8M, max 2.5G, 2.4G free.27server # [137009.421219] server systemd[1]: Starting Flush Journal to Persistent Storage...28server # [137009.421984] server systemd[1]: Starting Network Name Resolution...29server # [137009.422819] server systemd[1]: Starting Create Static Device Nodes in /dev...30server # [137009.430244] server systemd-journald[185]: Time spent on flushing to /var/log/journal/1695e3a7facf4ecdbdad0b27a2a2bd83 is 1.008ms for 5 entries.31server # [137009.430244] server systemd-journald[185]: System Journal (/var/log/journal/1695e3a7facf4ecdbdad0b27a2a2bd83) is 8M, max 4G, 3.9G free.32server # [137009.437419] server systemd[1]: Finished Flush Journal to Persistent Storage.33server # [137009.437808] server systemd[1]: Finished Create Static Device Nodes in /dev.34server # [137009.438437] server systemd[1]: Reached target Preparation for Local File Systems.35server # [137009.438555] server systemd[1]: Reached target Local File Systems.36server # [137009.439420] server systemd[1]: Listening on Boot Loader Control Service Socket.37server # [137009.439467] server systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container38server # [137009.440277] server systemd[1]: Starting Save Transient machine-id to Disk...39server # [137009.441354] server systemd[1]: Starting Create System Files and Directories...40server # [137009.441385] server systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys41server # [137009.458386] server systemd-tmpfiles[219]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted42server # [137009.458581] server systemd-tmpfiles[219]: fchmod() of /var/log/journal failed: Operation not permitted43server # [137009.458718] server systemd-tmpfiles[219]: fchmod() of /var/log/journal/1695e3a7facf4ecdbdad0b27a2a2bd83 failed: Operation not permitted44server # [137009.458918] server systemd-tmpfiles[219]: fchmod() of /run/log/journal failed: Operation not permitted45server # [137009.460291] server systemd[1]: Finished Create System Files and Directories.46server # [137009.461386] server systemd[1]: Starting Rebuild Journal Catalog...47server # [137009.462262] server systemd[1]: Starting Record System Boot/Shutdown in UTMP...48server # [137009.476957] server systemd[1]: Finished Record System Boot/Shutdown in UTMP.49server # [137009.485554] server systemd[1]: Finished Rebuild Journal Catalog.50server # [137009.487115] server systemd[1]: Starting Update is Completed...51server # [137009.495344] server systemd[1]: Finished Save Transient machine-id to Disk.52server # [137009.499292] server systemd[1]: Finished Update is Completed.53server # [137009.589568] server systemd[1]: Finished Firewall.54server # [137009.589735] server systemd[1]: Reached target Preparation for Network.55server # [137009.589959] server systemd[1]: Listening on Network Management Resolve Hook Socket.56server # [137009.591039] server systemd[1]: Starting Network Management...57server # [137009.905534] server systemd-networkd[299]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted58server # [137009.905626] server systemd-networkd[299]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted59server # [137009.911926] server systemd-networkd[299]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.60server # [137009.912125] server systemd-networkd[299]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.61server # [137009.912279] server systemd-networkd[299]: lo: Link UP62server # [137009.912283] server systemd-networkd[299]: lo: Gained carrier63server # [137009.912479] server systemd-networkd[299]: eth1: Configuring with /etc/systemd/network/40-eth1.network.64server # [137009.912849] server systemd[1]: Started Network Management.65server # [137009.912933] server systemd-networkd[299]: eth1: Link UP66server # [137009.913263] server systemd-networkd[299]: eth1: Gained carrier67server # [137009.913995] server systemd[1]: Starting Enable Persistent Storage in systemd-networkd...68server # [137009.962441] server systemd-resolved[203]: Positive Trust Anchors:69server # [137009.962451] server systemd-resolved[203]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d70server # [137009.962455] server systemd-resolved[203]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b1671server # [137009.962492] server systemd-resolved[203]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test72server # [137009.977124] server systemd[1]: Finished Enable Persistent Storage in systemd-networkd.73server # [137009.984209] server systemd-resolved[203]: Using system hostname 'server'.74server # [137009.985640] server systemd[1]: Started Network Name Resolution.75server # [137009.985779] server systemd[1]: Reached target Network.76server # [137009.985888] server systemd[1]: Reached target Network is Online.77server # [137009.985974] server systemd[1]: Reached target System Initialization.78server # [137009.986070] server systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container79server # [137009.986121] server systemd[1]: Started Daily Cleanup of Temporary Directories.80server # [137009.986167] server systemd[1]: Reached target Timer Units.81server # [137009.986393] server systemd[1]: Listening on D-Bus System Message Bus Socket.82server # [137009.986625] server systemd[1]: Listening on Nix Daemon Socket.83server # [137009.986851] server systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.84server # [137009.986897] server systemd[1]: Reached target Socket Units.85server # [137009.986986] server systemd[1]: Reached target Basic System.86server # [137009.989203] server systemd[1]: Starting Authelia authentication and authorization server...87server # [137009.990761] server systemd[1]: Starting Caddy...88server # [137009.992108] server systemd[1]: Starting Import lastlog data into lastlog2 database...89server # [137009.993686] server systemd[1]: Starting Name Service Cache Daemon (nsncd)...90server # [137009.995957] server systemd[1]: Starting D-Bus System Message Bus...91server # [137010.014563] server systemd[1]: Finished Import lastlog data into lastlog2 database.92server # [137010.105897] server nsncd[307]: Oct 17 23:26:55.077 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"93server # [137010.105985] server systemd[1]: Started Name Service Cache Daemon (nsncd).94server # [137010.106087] server systemd[1]: Reached target Host and Network Name Lookups.95server # [137010.106196] server systemd[1]: Reached target User and Group Name Lookups.96server # [137010.121563] server systemd[1]: Starting User Login Management...97server # [137010.123102] server systemd[1]: Starting Permit User Sessions...98server # [137010.135232] server systemd[1]: Finished Permit User Sessions.99server # [137010.136978] server systemd[1]: Started Console Getty.100server # [137010.137055] server systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0101server # [137010.137096] server systemd[1]: Reached target Login Prompts.102server # [137010.190148] server dbus-broker-launch[309]: Looking up NSS user entry for 'systemd-timesync'...103server # [137010.191423] server dbus-broker-launch[309]: NSS returned no entry for 'systemd-timesync'104server # [137010.191423] server dbus-broker-launch[309]: Invalid user-name in /nix/store/mdkr41ih7p8vnrf1h0ydrhsca4xq96jj-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"105server # [137010.191888] server systemd[1]: Started D-Bus System Message Bus.106server # [137010.200867] server dbus-broker-launch[309]: Ready107server # [137010.320684] server systemd[1]: Started Caddy.108server # [137010.410723] server systemd[1]: etc-machine\x2did.mount: Deactivated successfully.109server # [137010.551278] server systemd-logind[327]: New seat seat0.110server # [137010.551460] server systemd[1]: Started User Login Management.111server # [137010.553602] server systemd[1]: Starting linger-users.service...112server # [137010.602945] server systemd[1]: linger-users.service: Deactivated successfully.113server # [137010.603246] server systemd[1]: Finished linger-users.service.114server # [137011.084291] server authelia[371]: Configuration parsed and loaded successfully without errors.115server # [137011.292298] server systemd-networkd[299]: eth1: Gained IPv6LL116server: (finished: waiting for unit authelia-authelia.service, in 3.66 seconds)117??? Warning (UserWarning): wait_until_succeeds(): passing a bare int/float as a duration is deprecated. Use datetime.timedelta instead.118 File "/nix/store/8xlk88ia8b5yg9kfrg3skndwzgphipvr-nixos-test-driver-1.1/lib/python3.14/site-packages/test_driver/duration.py", line 39119server: waiting for success: curl -sf http://127.0.0.1:9091/api/health120??? Warning (UserWarning): execute(): passing a bare int/float as a duration is deprecated. Use datetime.timedelta instead.121 File "/nix/store/8xlk88ia8b5yg9kfrg3skndwzgphipvr-nixos-test-driver-1.1/lib/python3.14/site-packages/test_driver/duration.py", line 39122server: (finished: waiting for success: curl -sf http://127.0.0.1:9091/api/health, in 0.02 seconds)123server: must succeed: test -f /run/authelia-authelia/users.json124server: (finished: must succeed: test -f /run/authelia-authelia/users.json, in 0.01 seconds)125server: must succeed: cat /run/authelia-authelia/users.json126server: (finished: must succeed: cat /run/authelia-authelia/users.json, in 0.01 seconds)127server: must succeed: test -f /run/authelia-authelia/oidc.json128server: (finished: must succeed: test -f /run/authelia-authelia/oidc.json, in 0.01 seconds)129server: must succeed: cat /run/authelia-authelia/oidc.json130server: (finished: must succeed: cat /run/authelia-authelia/oidc.json, in 0.01 seconds)131server: waiting for unit caddy.service132server: (finished: waiting for unit caddy.service, in 0.02 seconds)133server: waiting for success: curl -sf https://auth.test.clan/api/health134server # [137011.566962] server systemd[1]: Started Authelia authentication and authorization server.135server # [137011.568886] server systemd[1]: Starting Punchcard time tracking (punchcard)...136server # [137011.611445] server authelia[404]: time="2026-10-17T23:26:56Z" level=info msg="Authelia v4.39.20-nixpkgs is starting"137server # [137011.611930] server authelia[404]: time="2026-10-17T23:26:56Z" level=info msg="Log severity set to info"138server # [137011.642545] server authelia[404]: time="2026-10-17T23:26:56Z" level=info msg="Storage schema is being checked for updates"139server # [137011.644432] server authelia[404]: time="2026-10-17T23:26:56Z" level=info msg="Storage schema migration from 0 to 24 is being attempted"140server # [137011.707959] server authelia[404]: time="2026-10-17T23:26:56Z" level=info msg="Storage schema migration from 0 to 24 is complete"141server # [137011.714711] server systemd-resolved[203]: Switching to fallback DNS server 1.1.1.1#one.one.one.one.142server # [137011.717232] server authelia[404]: time="2026-10-17T23:26:56Z" level=warning msg="Could not determine the clock offset due to an error" error="error occurred during dial: dial udp: lookup time.cloudflare.com: no such host"143server # [137011.723902] server systemd[1]: Started Punchcard time tracking (punchcard).144server # [137011.724144] server systemd[1]: Reached target Multi-User System.145server # [137011.724360] server systemd[1]: Startup finished in 2.748s.146server # [137011.735801] server authelia[404]: time="2026-10-17T23:26:56Z" level=info msg="Startup complete"147server # [137011.735904] server authelia[404]: time="2026-10-17T23:26:56Z" level=info msg="Listening for non-TLS connections on '127.0.0.1:9091' path '/'" server=main service=server148server # [137011.739077] server punchcard-punchcard-start[408]: 2026/10/17 23:26:56 Warning: .env file not found, using environment variables: open .env: no such file or directory149server # [137011.749087] server punchcard-punchcard-start[408]: 2026/10/17 23:26:56 OIDC authentication enabled with issuer: https://auth.test.clan150server # [137011.749087] server punchcard-punchcard-start[408]: 2026/10/17 23:26:56 Redirect URL: https://punchcard.test.clan/callback151server # [137011.750298] server punchcard-punchcard-start[408]: 2026/10/17 23:26:56 Server starting on :8099152server: (finished: waiting for success: curl -sf https://auth.test.clan/api/health, in 0.07 seconds)153server: waiting for success: curl -sf https://auth.test.clan/.well-known/openid-configuration154server: (finished: waiting for success: curl -sf https://auth.test.clan/.well-known/openid-configuration, in 0.10 seconds)155??? Warning (UserWarning): wait_for_unit(): passing a bare int/float as a duration is deprecated. Use datetime.timedelta instead.156 File "/nix/store/8xlk88ia8b5yg9kfrg3skndwzgphipvr-nixos-test-driver-1.1/lib/python3.14/site-packages/test_driver/duration.py", line 39157server: waiting for unit punchcard-punchcard.service158server: (finished: waiting for unit punchcard-punchcard.service, in 0.02 seconds)159server: waiting for success: curl -sf https://punchcard.test.clan/login160server: (finished: waiting for success: curl -sf https://punchcard.test.clan/login, in 0.10 seconds)161server: must succeed: cat /run/secrets/per-machine/server/authelia-user-bob/password162server: (finished: must succeed: cat /run/secrets/per-machine/server/authelia-user-bob/password, in 0.01 seconds)163server: must succeed: curl -s -o /dev/null -w '%{redirect_url}' -c /tmp/pc-cookies https://punchcard.test.clan/login/start164server: (finished: must succeed: curl -s -o /dev/null -w '%{redirect_url}' -c /tmp/pc-cookies https://punchcard.test.clan/login/start, in 0.19 seconds)165server: must succeed: curl -sf -X POST https://auth.test.clan/api/firstfactor -H 'Content-Type: application/json' -c /tmp/auth-cookies -d '{"username": "bob", "password": "status-attentive-wildfire-amaze-dividing-unthread-broken", "keepMeLoggedIn": false}'166server: (finished: must succeed: curl -sf -X POST https://auth.test.clan/api/firstfactor -H 'Content-Type: application/json' -c /tmp/auth-cookies -d '{"username": "bob", "password": "status-attentive-wildfire-amaze-dividing-unthread-broken", "keepMeLoggedIn": false}', in 1.11 seconds)167server: must succeed: curl -s -o /dev/null -w '%{redirect_url}' -b /tmp/auth-cookies -c /tmp/auth-cookies 'https://auth.test.clan/api/oidc/authorization?client_id=punchcard-punchcard&code_challenge=ZQs75ilGJcAqV85nDRlVcfk0k0nwM3xU_kY6Gf8WDzc&code_challenge_method=S256&redirect_uri=https%3A%2F%2Fpunchcard.test.clan%2Fcallback&response_type=code&scope=openid+profile+email&state=zZYw0gRkpbpwYbZlIxb0iIB4lNqa5IVTmUugD5Vf5oU%3D'168server: (finished: must succeed: curl -s -o /dev/null -w '%{redirect_url}' -b /tmp/auth-cookies -c /tmp/auth-cookies 'https://auth.test.clan/api/oidc/authorization?client_id=punchcard-punchcard&code_challenge=ZQs75ilGJcAqV85nDRlVcfk0k0nwM3xU_kY6Gf8WDzc&code_challenge_method=S256&redirect_uri=https%3A%2F%2Fpunchcard.test.clan%2Fcallback&response_type=code&scope=openid+profile+email&state=zZYw0gRkpbpwYbZlIxb0iIB4lNqa5IVTmUugD5Vf5oU%3D', in 0.11 seconds)169server: must succeed: curl -s -o /dev/null -w '%{http_code}' -c /tmp/pc-cookies -b /tmp/pc-cookies 'https://punchcard.test.clan/callback?code=authelia_ac_prTb7pXUwYfcWutJ5KVl7SFN-vbQaThwBRhjmo_WYz4.XFxVbyuHODXa2tAJmAYJ61RlnpCR4kt43QawKyGfpUI&iss=https%3A%2F%2Fauth.test.clan&scope=openid+profile+email&state=zZYw0gRkpbpwYbZlIxb0iIB4lNqa5IVTmUugD5Vf5oU%3D'170server: (finished: must succeed: curl -s -o /dev/null -w '%{http_code}' -c /tmp/pc-cookies -b /tmp/pc-cookies 'https://punchcard.test.clan/callback?code=authelia_ac_prTb7pXUwYfcWutJ5KVl7SFN-vbQaThwBRhjmo_WYz4.XFxVbyuHODXa2tAJmAYJ61RlnpCR4kt43QawKyGfpUI&iss=https%3A%2F%2Fauth.test.clan&scope=openid+profile+email&state=zZYw0gRkpbpwYbZlIxb0iIB4lNqa5IVTmUugD5Vf5oU%3D', in 0.32 seconds)171server: must succeed: curl -s -L -o /dev/null -w '%{http_code}' -b /tmp/pc-cookies -c /tmp/pc-cookies https://punchcard.test.clan/172server: (finished: must succeed: curl -s -L -o /dev/null -w '%{http_code}' -b /tmp/pc-cookies -c /tmp/pc-cookies https://punchcard.test.clan/, in 0.11 seconds)173(finished: run the VM test script, in 5.85 seconds)174test script finished in 5.87s175cleanup176kill NspawnMachine (pid 51)177server # [137013.788217] server authelia[404]: time="2026-10-17T23:26:58Z" level=error msg="Access Request failed with error: Client authentication failed (e.g., unknown client, no client authentication included, or unsupported authentication method). The request was determined to be using 'token_endpoint_auth_method' method 'client_secret_basic', however the OAuth 2.0 client registration does not allow this method. The registered client with id 'punchcard-punchcard' is configured to only support 'token_endpoint_auth_method' method 'client_secret_post'. Either the Authorization Server client registration will need to have the 'token_endpoint_auth_method' updated to 'client_secret_basic' or the Relying Party will need to be configured to use 'client_secret_post'." method=POST path=/api/oidc/token remote_ip="::1"178server # [137014.010185] server punchcard-punchcard-start[408]: 2026/10/17 23:26:58 User () logged in successfully179(finished: cleanup, in 0.11 seconds)180Container server terminated by signal KILL.