don't know how to build these paths: /nix/store/asg681699iz01s6dp6h4w48sd7mbq1jl-container-test-run-pocket-id.drv warning: ignoring the client-specified setting 'store', because it is a restricted setting and you are not a trusted user building '/nix/store/my44shnfs9a5qm6mrzzd953flzxla0jy-pocket-id-env-vars.drv' on nix-store.geninf.io:50051 pocket-id-env-vars> build-x86-01: building my44shnfs9a5qm6mrzzd953flzxla0jy-pocket-id-env-vars.drv building '/nix/store/yzgjkzlc4ajvlnhlw2j9paf9jbw0gv3z-pocket-id-clients.json.drv' on nix-store.geninf.io:50051 pocket-id-clients.json> build-x86-01: building yzgjkzlc4ajvlnhlw2j9paf9jbw0gv3z-pocket-id-clients.json.drv building '/nix/store/3n9fnzlaci5qhqnlp32j7362nynpjk41-decrypt-age-secrets.drv' on nix-store.geninf.io:50051 decrypt-age-secrets> build-x86-01: building 3n9fnzlaci5qhqnlp32j7362nynpjk41-decrypt-age-secrets.drv building '/nix/store/7ndiivbsy37ryyhcys1xwv3c3znrksnm-vars-check-pocket-id.drv' on nix-store.geninf.io:50051 vars-check-pocket-id> build-x86-01: building 7ndiivbsy37ryyhcys1xwv3c3znrksnm-vars-check-pocket-id.drv building '/nix/store/gafvqw06mps6kpcs8832kj10dnf039cf-nss-cacert-3.126.drv' on nix-store.geninf.io:50051 nss-cacert-3.126> build-x86-01: building gafvqw06mps6kpcs8832kj10dnf039cf-nss-cacert-3.126.drv building '/nix/store/kar5sisl77xpbv1rj0h0pcl8z2kyn6hs-tmpfiles.d.drv' on nix-store.geninf.io:50051 tmpfiles.d> build-x86-01: building kar5sisl77xpbv1rj0h0pcl8z2kyn6hs-tmpfiles.d.drv building '/nix/store/2bggwp0my7jjsimj7bxc9g3wlvd8bl9m-string-hosts.drv' on nix-store.geninf.io:50051 string-hosts> gi-build-x86-02: building 2bggwp0my7jjsimj7bxc9g3wlvd8bl9m-string-hosts.drv building '/nix/store/wbpwgvdp5qmivgj21lp6gy8xd3qcp2ra-testScript.drv' on nix-store.geninf.io:50051 testScript> gi-build-x86-02: building wbpwgvdp5qmivgj21lp6gy8xd3qcp2ra-testScript.drv building '/nix/store/aa5mblds0dq8pj83g5r3v58vjxwfi965-users-groups.json.drv' on nix-store.geninf.io:50051 users-groups.json> gi-build-x86-02: building aa5mblds0dq8pj83g5r3v58vjxwfi965-users-groups.json.drv building '/nix/store/m05giwdqy81pvx3d5w4inbl0x0y3k9qf-Caddyfile.drv' on nix-store.geninf.io:50051 Caddyfile> gi-build-x86-02: building m05giwdqy81pvx3d5w4inbl0x0y3k9qf-Caddyfile.drv building '/nix/store/ji2lv81103l0vpsp10d101dcp2qn3mn5-system-path.drv' on nix-store.geninf.io:50051 system-path> gi-build-x86-02: building ji2lv81103l0vpsp10d101dcp2qn3mn5-system-path.drv vars-check-pocket-id> Running vars check using Nix-based executor... vars-check-pocket-id> Executing shared generators... vars-check-pocket-id> Executing shared generator: pki-root-ca vars-check-pocket-id> + set -euo pipefail vars-check-pocket-id> + PATH=/nix/store/ndv550fkbmsfvdxax71d4d5d59x4lq80-openssl-3.6.5-bin/bin:/nix/store/bhv6xyvqw6gjs3j488gi1z6wdv18bdpa-coreutils-9.11/bin vars-check-pocket-id> + [[ ! -d /etc ]] vars-check-pocket-id> + mkdir -p /etc vars-check-pocket-id> + cat vars-check-pocket-id> ++ id -g vars-check-pocket-id> + cat vars-check-pocket-id> ++ id -u vars-check-pocket-id> ++ id -g vars-check-pocket-id> + cat vars-check-pocket-id> + openssl genrsa -out /output/ca.key 4096 nss-cacert-3.126> Running phase: unpackPhase nss-cacert-3.126> Running phase: patchPhase nss-cacert-3.126> Running phase: updateAutotoolsGnuConfigScriptsPhase nss-cacert-3.126> Running phase: configurePhase nss-cacert-3.126> no configure script, doing nothing nss-cacert-3.126> Running phase: buildPhase system-path> structuredAttrs is enabled building '/nix/store/3bcnqqywj19hyrdddynx5a2bfw1kr4w2-pocket-id-clients-reconcile.drv' on nix-store.geninf.io:50051 pocket-id-clients-reconcile> build-x86-01: building 3bcnqqywj19hyrdddynx5a2bfw1kr4w2-pocket-id-clients-reconcile.drv system-path> created 1814 symlinks in user environment nss-cacert-3.126> Running phase: installPhase nss-cacert-3.126> Running phase: fixupPhase vars-check-pocket-id> + openssl req -x509 -new -nodes -key /output/ca.key -sha256 -days 3650 -subj '/CN=Clan Root CA' -out /output/ca.crt vars-check-pocket-id> ✓ Generated shared file: pki-root-ca/ca.crt vars-check-pocket-id> ✓ Generated shared file: pki-root-ca/ca.key vars-check-pocket-id> ✓ Shared Generator pki-root-ca completed vars-check-pocket-id> ✓ Shared generators completed vars-check-pocket-id> Processing machine: server vars-check-pocket-id> Generator execution order: cert-id -> pocket-id -> state-version vars-check-pocket-id> Executing generator: cert-id nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/jyfpgkawv21laabmhcp7isbs49m2qx91-nss-cacert-3.126 nss-cacert-3.126> checking for references to /build/ in /nix/store/jyfpgkawv21laabmhcp7isbs49m2qx91-nss-cacert-3.126... vars-check-pocket-id> + set -euo pipefail vars-check-pocket-id> + PATH=/nix/store/ndv550fkbmsfvdxax71d4d5d59x4lq80-openssl-3.6.5-bin/bin:/nix/store/bhv6xyvqw6gjs3j488gi1z6wdv18bdpa-coreutils-9.11/bin vars-check-pocket-id> + [[ ! -d /etc ]] vars-check-pocket-id> + mkdir -p /etc vars-check-pocket-id> + cat vars-check-pocket-id> ++ id -g nss-cacert-3.126> patching script interpreter paths in /nix/store/jyfpgkawv21laabmhcp7isbs49m2qx91-nss-cacert-3.126 vars-check-pocket-id> + cat vars-check-pocket-id> ++ id -u nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/lnlzhpn3d2npyjygpjy5j0gs9dbap5g4-nss-cacert-3.126-unbundled vars-check-pocket-id> ++ id -g vars-check-pocket-id> + cat vars-check-pocket-id> + openssl genrsa -out /output/id.key 4096 nss-cacert-3.126> checking for references to /build/ in /nix/store/lnlzhpn3d2npyjygpjy5j0gs9dbap5g4-nss-cacert-3.126-unbundled... nss-cacert-3.126> patching script interpreter paths in /nix/store/lnlzhpn3d2npyjygpjy5j0gs9dbap5g4-nss-cacert-3.126-unbundled nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/afi6wryahdg87ikbwp3x86784lvspdr9-nss-cacert-3.126-p11kit nss-cacert-3.126> checking for references to /build/ in /nix/store/afi6wryahdg87ikbwp3x86784lvspdr9-nss-cacert-3.126-p11kit... nss-cacert-3.126> patching script interpreter paths in /nix/store/afi6wryahdg87ikbwp3x86784lvspdr9-nss-cacert-3.126-p11kit nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/5rqbw6c6jzvivvxzj7qmjj3z66v2l5cs-nss-cacert-3.126-hashed nss-cacert-3.126> checking for references to /build/ in /nix/store/5rqbw6c6jzvivvxzj7qmjj3z66v2l5cs-nss-cacert-3.126-hashed... nss-cacert-3.126> patching script interpreter paths in /nix/store/5rqbw6c6jzvivvxzj7qmjj3z66v2l5cs-nss-cacert-3.126-hashed vars-check-pocket-id> + openssl req -new -key /output/id.key -subj /CN=id.test.clan -out endpoint.csr vars-check-pocket-id> + printf subjectAltName=DNS:id.test.clan vars-check-pocket-id> + openssl x509 -req -in endpoint.csr -CA /input/pki-root-ca/ca.crt -CAkey /input/pki-root-ca/ca.key -CAcreateserial -days 365 -sha256 -extfile san.cnf -out /output/id.crt vars-check-pocket-id> Certificate request self-signature ok vars-check-pocket-id> subject=CN=id.test.clan vars-check-pocket-id> + cat /output/id.crt /input/pki-root-ca/ca.crt vars-check-pocket-id> ✓ Generated file: cert-id/id.crt vars-check-pocket-id> ✓ Generated file: cert-id/id.fullchain.crt vars-check-pocket-id> ✓ Generated file: cert-id/id.key vars-check-pocket-id> ✓ Generator cert-id completed vars-check-pocket-id> Executing generator: pocket-id vars-check-pocket-id> + set -euo pipefail vars-check-pocket-id> + PATH=/nix/store/bhv6xyvqw6gjs3j488gi1z6wdv18bdpa-coreutils-9.11/bin:/nix/store/ndv550fkbmsfvdxax71d4d5d59x4lq80-openssl-3.6.5-bin/bin:/nix/store/bhv6xyvqw6gjs3j488gi1z6wdv18bdpa-coreutils-9.11/bin vars-check-pocket-id> + [[ ! -d /etc ]] vars-check-pocket-id> + mkdir -p /etc vars-check-pocket-id> + cat vars-check-pocket-id> ++ id -g vars-check-pocket-id> + cat vars-check-pocket-id> ++ id -u vars-check-pocket-id> ++ id -g vars-check-pocket-id> + cat vars-check-pocket-id> + mkdir -p /output vars-check-pocket-id> + openssl rand -hex 32 vars-check-pocket-id> + tr -d '\n' vars-check-pocket-id> + openssl rand -hex 32 vars-check-pocket-id> + tr -d '\n' vars-check-pocket-id> ✓ Generated file: pocket-id/api-key vars-check-pocket-id> ✓ Generated file: pocket-id/encryption-key vars-check-pocket-id> ✓ Generator pocket-id completed vars-check-pocket-id> Executing generator: state-version vars-check-pocket-id> + set -euo pipefail vars-check-pocket-id> + PATH=/nix/store/bhv6xyvqw6gjs3j488gi1z6wdv18bdpa-coreutils-9.11/bin vars-check-pocket-id> + [[ ! -d /etc ]] vars-check-pocket-id> + mkdir -p /etc vars-check-pocket-id> + cat vars-check-pocket-id> ++ id -g vars-check-pocket-id> + cat vars-check-pocket-id> ++ id -u vars-check-pocket-id> ++ id -g vars-check-pocket-id> + cat vars-check-pocket-id> + echo -n 26.05 vars-check-pocket-id> ✓ Generated file: state-version/version vars-check-pocket-id> ✓ Generator state-version completed vars-check-pocket-id> ✓ Machine server completed vars-check-pocket-id> ✓ All vars checks completed successfully building '/nix/store/6pi53ga3jlb4hy962d62vdw0bi959hqs-unit-script-pocket-id-start.drv' on nix-store.geninf.io:50051 unit-script-pocket-id-start> gi-build-x86-02: building 6pi53ga3jlb4hy962d62vdw0bi959hqs-unit-script-pocket-id-start.drv building '/nix/store/4y4mq4hg2z2wsvk4gilxs3laiza6fb9j-X-Restart-Triggers-pocket-id.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-pocket-id> build-x86-01: building 4y4mq4hg2z2wsvk4gilxs3laiza6fb9j-X-Restart-Triggers-pocket-id.drv building '/nix/store/8xkan1972wd4bwrnsi1q85czwl1cg987-X-Restart-Triggers-pocket-id-clients.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-pocket-id-clients> gi-build-x86-02: building 8xkan1972wd4bwrnsi1q85czwl1cg987-X-Restart-Triggers-pocket-id-clients.drv building '/nix/store/q4zg2rahc6i39d2vp5xzxdzsck5wlsv6-hosts.drv' on nix-store.geninf.io:50051 hosts> gi-build-x86-02: building q4zg2rahc6i39d2vp5xzxdzsck5wlsv6-hosts.drv building '/nix/store/j0qrn4bq7b4xiavvrgvsg28fnxwn486f-X-Restart-Triggers-systemd-tmpfiles-resetup.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-systemd-tmpfiles-resetup> build-x86-01: building j0qrn4bq7b4xiavvrgvsg28fnxwn486f-X-Restart-Triggers-systemd-tmpfiles-resetup.drv building '/nix/store/9pmycp35hqwjdi75qskrn768dfnksqxq-dry-activate.drv' on nix-store.geninf.io:50051 dry-activate> build-x86-01: building 9pmycp35hqwjdi75qskrn768dfnksqxq-dry-activate.drv building '/nix/store/8d0xd67wi2v8vmqksf1rqps482wgid8x-dbus-1.drv' on nix-store.geninf.io:50051 dbus-1> gi-build-x86-02: building 8d0xd67wi2v8vmqksf1rqps482wgid8x-dbus-1.drv building '/nix/store/8l5ddzj0im3dlnnmfz20wsi66fzjjnb4-Caddyfile-formatted.drv' on nix-store.geninf.io:50051 Caddyfile-formatted> gi-build-x86-02: building 8l5ddzj0im3dlnnmfz20wsi66fzjjnb4-Caddyfile-formatted.drv building '/nix/store/0b4z16nf0fl8c47sk11cv43mjqv86m0l-unit-pocket-id.service.drv' on nix-store.geninf.io:50051 unit-pocket-id.service> build-x86-01: building 0b4z16nf0fl8c47sk11cv43mjqv86m0l-unit-pocket-id.service.drv building '/nix/store/9s5cgqlzcc0kb099whm8ydmjyw220ksk-unit-nix-daemon.service.drv' on nix-store.geninf.io:50051 unit-nix-daemon.service> build-x86-01: building 9s5cgqlzcc0kb099whm8ydmjyw220ksk-unit-nix-daemon.service.drv building '/nix/store/lllxr61vrf0d6dc3fn71ffbfp33inxxs-unit-pocket-id-clients.service.drv' on nix-store.geninf.io:50051 unit-pocket-id-clients.service> gi-build-x86-02: building lllxr61vrf0d6dc3fn71ffbfp33inxxs-unit-pocket-id-clients.service.drv building '/nix/store/zni92lxnb6slxahwsamp7j5grv18raqh-unit-systemd-tmpfiles-resetup.service.drv' on nix-store.geninf.io:50051 unit-systemd-tmpfiles-resetup.service> build-x86-01: building zni92lxnb6slxahwsamp7j5grv18raqh-unit-systemd-tmpfiles-resetup.service.drv building '/nix/store/h8xh82vz8k73m5lsvizys85sdb9gia9f-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-dbus-broker> gi-build-x86-02: building h8xh82vz8k73m5lsvizys85sdb9gia9f-X-Restart-Triggers-dbus-broker.drv building '/nix/store/ka3dwcx8h2p4fwxg9vd8q38fjcszl6wy-X-Reload-Triggers-caddy.drv' on nix-store.geninf.io:50051 X-Reload-Triggers-caddy> gi-build-x86-02: building ka3dwcx8h2p4fwxg9vd8q38fjcszl6wy-X-Reload-Triggers-caddy.drv building '/nix/store/l9rbnzx92m17p97s8b8bcl9pydfq6rrd-unit-caddy.service.drv' on nix-store.geninf.io:50051 unit-caddy.service> build-x86-01: building l9rbnzx92m17p97s8b8bcl9pydfq6rrd-unit-caddy.service.drv building '/nix/store/2w67fkq5h1vl68fpyz0p7pn81aznczil-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> gi-build-x86-02: building 2w67fkq5h1vl68fpyz0p7pn81aznczil-unit-dbus-broker.service.drv building '/nix/store/a80kjajzqq3pz921v823qd3iwhi12163-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> gi-build-x86-02: building a80kjajzqq3pz921v823qd3iwhi12163-unit-dbus-broker.service.drv building '/nix/store/vpb2f346ymqvl6fs45ia4crcj2km2bz1-user-units.drv' on nix-store.geninf.io:50051 user-units> build-x86-01: building vpb2f346ymqvl6fs45ia4crcj2km2bz1-user-units.drv building '/nix/store/fal8llj7n1flp0rg6g0zfnj7wv1am7q3-system-units.drv' on nix-store.geninf.io:50051 system-units> gi-build-x86-02: building fal8llj7n1flp0rg6g0zfnj7wv1am7q3-system-units.drv building '/nix/store/dqh7640vh8czm8rpwkj4pvj1172ksbkh-etc.drv' on nix-store.geninf.io:50051 etc> gi-build-x86-02: building dqh7640vh8czm8rpwkj4pvj1172ksbkh-etc.drv building '/nix/store/w3pr4dcbgdblmydig9z5jykdgrmqb94n-activate.drv' on nix-store.geninf.io:50051 activate> gi-build-x86-02: building w3pr4dcbgdblmydig9z5jykdgrmqb94n-activate.drv building '/nix/store/35dghkxp7w832c38df39p099pw8q9rr5-nixos-system-server-test.drv' on nix-store.geninf.io:50051 nixos-system-server-test> gi-build-x86-02: building 35dghkxp7w832c38df39p099pw8q9rr5-nixos-system-server-test.drv nixos-system-server-test> structuredAttrs is enabled building '/nix/store/7v0n6bzi0ji8mz2sc90srpihlbhzjxjx-closure-info.drv' on nix-store.geninf.io:50051 closure-info> build-x86-01: building 7v0n6bzi0ji8mz2sc90srpihlbhzjxjx-closure-info.drv closure-info> structuredAttrs is enabled building '/nix/store/xw2swvq7hdd1qdsd1fwv4px9mvjq23pc-nixos-test-driver-pocket-id.drv' on nix-store.geninf.io:50051 nixos-test-driver-pocket-id> build-x86-01: building xw2swvq7hdd1qdsd1fwv4px9mvjq23pc-nixos-test-driver-pocket-id.drv nixos-test-driver-pocket-id> Running type check (enable/disable: config.skipTypeCheck) nixos-test-driver-pocket-id> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck nixos-test-driver-pocket-id> Success: no issues found in 1 source file building '/nix/store/asg681699iz01s6dp6h4w48sd7mbq1jl-container-test-run-pocket-id.drv' on nix-store.geninf.io:50051 container-test-run-pocket-id> build-x86-01: building asg681699iz01s6dp6h4w48sd7mbq1jl-container-test-run-pocket-id.drv container-test-run-pocket-id> additionally exposed symbols: container-test-run-pocket-id> server, container-test-run-pocket-id> start_all, machines, driver, Machine, wait_for_signal container-test-run-pocket-id> Starting server container-test-run-pocket-id> container-test-run-pocket-id> container-test-run-pocket-id> <<< NixOS Stage 2 >>> container-test-run-pocket-id> container-test-run-pocket-id> booting system configuration /nix/store/xk6px991w5damrjv6d0rhh64nsqs77wm-nixos-system-server-test container-test-run-pocket-id> running activation script... container-test-run-pocket-id> setting up /etc... container-test-run-pocket-id> 2: host0@if3: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-pocket-id> link/ether be:aa:dd:39:86:e7 brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-pocket-id> setting up age secrets... container-test-run-pocket-id> starting systemd... container-test-run-pocket-id> systemd 260.5 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-pocket-id> Detected virtualization systemd-nspawn. container-test-run-pocket-id> Detected architecture x86-64. container-test-run-pocket-id> Detected first boot. container-test-run-pocket-id> Initializing machine ID from container UUID. container-test-run-pocket-id> Applying preset policy. container-test-run-pocket-id> Populated /etc with preset unit settings. container-test-run-pocket-id> Queued start job for default target Multi-User System. container-test-run-pocket-id> container-test-run-pocket-id> container-test-run-pocket-id> container-test-run-pocket-id> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-pocket-id> + systemd-run /bin/sh -c '/nix/store/bhv6xyvqw6gjs3j488gi1z6wdv18bdpa-coreutils-9.11/bin/sleep 999999999 && echo e0b662b1-117f-4dd7-b995-3182e345a482' container-test-run-pocket-id> Running as unit: run-p398-i2066266.service; invocation ID: 7986f1fe06734af587697bba85c5a65f container-test-run-pocket-id> To attach to container server run on the same machine that runs the test: container-test-run-pocket-id> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*e0b662b1-117f-4dd7-b995-3182e345a482') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-pocket-id> container-test-run-pocket-id> To inject external network and continue test, run: container-test-run-pocket-id> sudo /nix/store/jy00n3jp5xj8s40n1fbldmkcr5n7avxc-python3-3.13.15/bin/python3.13 /nix/store/410clzrdvksxqd6ldmmbsf7z00208kgj-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py e0b662b1-117f-4dd7-b995-3182e345a482 container-test-run-pocket-id> + systemctl --no-pager show pocket-id.service container-test-run-pocket-id> server: waiting for success: curl -sf http://127.0.0.1:1411/healthz container-test-run-pocket-id> + curl -sf http://127.0.0.1:1411/healthz container-test-run-pocket-id> (finished: waiting for success: curl -sf http://127.0.0.1:1411/healthz, in 0.01 seconds) container-test-run-pocket-id> server: waiting for success: curl -sf http://127.0.0.1:1411/.well-known/openid-configuration container-test-run-pocket-id> + curl -sf http://127.0.0.1:1411/.well-known/openid-configuration container-test-run-pocket-id> (finished: waiting for success: curl -sf http://127.0.0.1:1411/.well-known/openid-configuration, in 0.01 seconds) container-test-run-pocket-id> + systemctl --no-pager show pocket-id-clients.service container-test-run-pocket-id> + systemctl --lines 0 status pocket-id-clients.service container-test-run-pocket-id> + journalctl -u pocket-id-clients.service --no-pager container-test-run-pocket-id> container-test-run-pocket-id> Traceback (most recent call last): container-test-run-pocket-id> File "/nix/store/410clzrdvksxqd6ldmmbsf7z00208kgj-test-driver-0.0.1/bin/.nixos-test-driver-wrapped", line 9, in container-test-run-pocket-id> sys.exit(main()) container-test-run-pocket-id> ~~~~^^ container-test-run-pocket-id> File "/nix/store/410clzrdvksxqd6ldmmbsf7z00208kgj-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/__init__.py", line 764, in main container-test-run-pocket-id> driver.run_tests() container-test-run-pocket-id> ~~~~~~~~~~~~~~~~^^ container-test-run-pocket-id> File "/nix/store/410clzrdvksxqd6ldmmbsf7z00208kgj-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/__init__.py", line 700, in run_tests container-test-run-pocket-id> self.test_script() container-test-run-pocket-id> ~~~~~~~~~~~~~~~~^^ container-test-run-pocket-id> File "/nix/store/410clzrdvksxqd6ldmmbsf7z00208kgj-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/__init__.py", line 696, in test_script container-test-run-pocket-id> exec(self.testscript, self.test_symbols(), None) # noqa: S102 container-test-run-pocket-id> ~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ container-test-run-pocket-id> File "", line 22, in container-test-run-pocket-id> File "/nix/store/410clzrdvksxqd6ldmmbsf7z00208kgj-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/__init__.py", line 467, in wait_for_unit container-test-run-pocket-id> retry(check_active, timeout) container-test-run-pocket-id> ~~~~~^^^^^^^^^^^^^^^^^^^^^^^ container-test-run-pocket-id> File "/nix/store/410clzrdvksxqd6ldmmbsf7z00208kgj-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/__init__.py", line 195, in retry container-test-run-pocket-id> if fn(last_call): container-test-run-pocket-id> ~~^^^^^^^^^^^ container-test-run-pocket-id> File "/nix/store/410clzrdvksxqd6ldmmbsf7z00208kgj-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/__init__.py", line 455, in check_active container-test-run-pocket-id> raise Error(msg) container-test-run-pocket-id> test_driver.Error: unit "pocket-id-clients.service" reached state "failed": container-test-run-pocket-id> × pocket-id-clients.service - Reconcile Pocket ID OIDC clients against the clan-declared spec container-test-run-pocket-id> Loaded: loaded (/etc/systemd/system/pocket-id-clients.service; enabled; preset: ignored) container-test-run-pocket-id> Active: failed (Result: exit-code) since Mon 2026-10-19 15:02:52 UTC; 1s ago container-test-run-pocket-id> Invocation: ede42bbe71b049fbb01aa876b81de292 container-test-run-pocket-id> Process: 316 ExecStart=/nix/store/g8ys63byxa6mlhds3hxrd6jrdan35qlm-pocket-id-clients-reconcile/bin/pocket-id-clients-reconcile (code=exited, status=22) container-test-run-pocket-id> Main PID: 316 (code=exited, status=22) container-test-run-pocket-id> CPU: 42ms container-test-run-pocket-id> container-test-run-pocket-id> Oct 19 15:02:51 server systemd[1]: Starting Reconcile Pocket ID OIDC clients against the clan-declared spec... container-test-run-pocket-id> Oct 19 15:02:51 server pocket-id-clients-reconcile[321]: curl: (7) Failed to connect to 127.0.0.1:1411 after 0 ms: Could not connect to server container-test-run-pocket-id> Oct 19 15:02:52 server pocket-id-clients-reconcile[388]: [dashboard] create container-test-run-pocket-id> Oct 19 15:02:52 server pocket-id-clients-reconcile[395]: curl: (22) The requested URL returned error: 404 container-test-run-pocket-id> Oct 19 15:02:52 server systemd[1]: pocket-id-clients.service: Main process exited, code=exited, status=22/n/a container-test-run-pocket-id> Oct 19 15:02:52 server systemd[1]: pocket-id-clients.service: Failed with result 'exit-code'. container-test-run-pocket-id> Oct 19 15:02:52 server systemd[1]: Failed to start Reconcile Pocket ID OIDC clients against the clan-declared spec. container-test-run-pocket-id> error: Cannot build '/nix/store/asg681699iz01s6dp6h4w48sd7mbq1jl-container-test-run-pocket-id.drv'. Reason: builder failed with exit code 1. Output paths: /nix/store/45g55w6apkd5cvyvs8z6q5mq8518imj8-container-test-run-pocket-id Last 25 log lines: > File "/nix/store/410clzrdvksxqd6ldmmbsf7z00208kgj-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/__init__.py", line 467, in wait_for_unit > retry(check_active, timeout) > ~~~~~^^^^^^^^^^^^^^^^^^^^^^^ > File "/nix/store/410clzrdvksxqd6ldmmbsf7z00208kgj-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/__init__.py", line 195, in retry > if fn(last_call): > ~~^^^^^^^^^^^ > File "/nix/store/410clzrdvksxqd6ldmmbsf7z00208kgj-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/__init__.py", line 455, in check_active > raise Error(msg) > test_driver.Error: unit "pocket-id-clients.service" reached state "failed": > × pocket-id-clients.service - Reconcile Pocket ID OIDC clients against the clan-declared spec > Loaded: loaded (/etc/systemd/system/pocket-id-clients.service; enabled; preset: ignored) > Active: failed (Result: exit-code) since Mon 2026-10-19 15:02:52 UTC; 1s ago > Invocation: ede42bbe71b049fbb01aa876b81de292 > Process: 316 ExecStart=/nix/store/g8ys63byxa6mlhds3hxrd6jrdan35qlm-pocket-id-clients-reconcile/bin/pocket-id-clients-reconcile (code=exited, status=22) > Main PID: 316 (code=exited, status=22) > CPU: 42ms > > Oct 19 15:02:51 server systemd[1]: Starting Reconcile Pocket ID OIDC clients against the clan-declared spec... > Oct 19 15:02:51 server pocket-id-clients-reconcile[321]: curl: (7) Failed to connect to 127.0.0.1:1411 after 0 ms: Could not connect to server > Oct 19 15:02:52 server pocket-id-clients-reconcile[388]: [dashboard] create > Oct 19 15:02:52 server pocket-id-clients-reconcile[395]: curl: (22) The requested URL returned error: 404 > Oct 19 15:02:52 server systemd[1]: pocket-id-clients.service: Main process exited, code=exited, status=22/n/a > Oct 19 15:02:52 server systemd[1]: pocket-id-clients.service: Failed with result 'exit-code'. > Oct 19 15:02:52 server systemd[1]: Failed to start Reconcile Pocket ID OIDC clients against the clan-declared spec. > For full logs, run: nix log /nix/store/asg681699iz01s6dp6h4w48sd7mbq1jl-container-test-run-pocket-id.drv