Running vars check using Nix-based executor...
Executing shared generators...
Executing shared generator: authelia-oidc-punchcard-punchcard
+ set -euo pipefail
+ PATH=/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin:/nix/store/v49dnvwkxyzkpxy5sqclncf54blvjs43-openssl-3.6.3-bin/bin:/nix/store/bh4sw9gvjnmskn3r5xgii9y0q4hx9j1x-authelia-4.39.20/bin:/nix/store/vryxwvapfxidddqmswhfdv9n5dn4k1rq-gnused-4.10/bin:/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin
+ [[ ! -d /etc ]]
+ mkdir -p /etc
+ cat
++ id -g
+ cat
++ id -u
++ id -g
+ cat
+ mkdir -p /output
+ openssl rand -hex 32
+ sed 's/^Digest: //'
++ cat /output/client_secret
+ authelia crypto hash generate argon2 --password fe083be03ef2ff9adf00f8f78722bb3c73c7b1eeb0d989114894ef9eac8b07bd
✓ Generated shared file: authelia-oidc-punchcard-punchcard/client_secret
✓ Generated shared file: authelia-oidc-punchcard-punchcard/client_secret_hash
✓ Shared Generator authelia-oidc-punchcard-punchcard completed
Executing shared generator: pki-root-ca
+ set -euo pipefail
+ PATH=/nix/store/v49dnvwkxyzkpxy5sqclncf54blvjs43-openssl-3.6.3-bin/bin:/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin
+ [[ ! -d /etc ]]
+ mkdir -p /etc
+ cat
++ id -g
+ cat
++ id -u
++ id -g
+ cat
+ openssl genrsa -out /output/ca.key 4096
+ openssl req -x509 -new -nodes -key /output/ca.key -sha256 -days 3650 -subj '/CN=Clan Root CA' -out /output/ca.crt
✓ Generated shared file: pki-root-ca/ca.crt
✓ Generated shared file: pki-root-ca/ca.key
✓ Shared Generator pki-root-ca completed
✓ Shared generators completed
Processing machine: server
Generator execution order: authelia -> authelia-user-alice -> cert-auth -> cert-punchcard -> state-version
Executing generator: authelia
+ set -euo pipefail
+ PATH=/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin:/nix/store/v49dnvwkxyzkpxy5sqclncf54blvjs43-openssl-3.6.3-bin/bin:/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin
+ [[ ! -d /etc ]]
+ mkdir -p /etc
+ cat
++ id -g
+ cat
++ id -u
++ id -g
+ cat
+ mkdir -p /output
+ openssl rand -hex 64
+ openssl rand -hex 64
+ openssl rand -hex 64
+ openssl rand -hex 64
+ openssl genrsa -out /output/oidc-jwks-key 4096
✓ Generated file: authelia/jwt-secret
✓ Generated file: authelia/oidc-hmac-secret
✓ Generated file: authelia/oidc-jwks-key
✓ Generated file: authelia/session-secret
✓ Generated file: authelia/storage-encryption-key
✓ Generator authelia completed
Executing generator: authelia-user-alice
+ set -euo pipefail
+ PATH=/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin:/nix/store/bh4sw9gvjnmskn3r5xgii9y0q4hx9j1x-authelia-4.39.20/bin:/nix/store/adq8ga9krg9mbrh35yr3xjcw7d2y3lqn-python3.13-xkcdpass-1.30.0/bin:/nix/store/vryxwvapfxidddqmswhfdv9n5dn4k1rq-gnused-4.10/bin:/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin
+ [[ ! -d /etc ]]
+ mkdir -p /etc
+ cat
++ id -g
+ cat
++ id -u
++ id -g
+ cat
+ mkdir -p /output
+ xkcdpass -n 7 -d-
+ sed 's/^Digest: //'
++ cat /output/password
+ authelia crypto hash generate argon2 --password swarm-venture-wrath-unwitting-idiom-porous-gauze
✓ Generated file: authelia-user-alice/password
✓ Generated file: authelia-user-alice/password-hash
✓ Generator authelia-user-alice completed
Executing generator: cert-auth
+ set -euo pipefail
+ PATH=/nix/store/v49dnvwkxyzkpxy5sqclncf54blvjs43-openssl-3.6.3-bin/bin:/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin
+ [[ ! -d /etc ]]
+ mkdir -p /etc
+ cat
++ id -g
+ cat
++ id -u
++ id -g
+ cat
+ openssl genrsa -out /output/auth.key 4096
+ openssl req -new -key /output/auth.key -subj /CN=auth.test.clan -out endpoint.csr
+ printf subjectAltName=DNS:auth.test.clan
+ openssl x509 -req -in endpoint.csr -CA /input/pki-root-ca/ca.crt -CAkey /input/pki-root-ca/ca.key -CAcreateserial -days 365 -sha256 -extfile san.cnf -out /output/auth.crt
Certificate request self-signature ok
subject=CN=auth.test.clan
+ cat /output/auth.crt /input/pki-root-ca/ca.crt
✓ Generated file: cert-auth/auth.crt
✓ Generated file: cert-auth/auth.fullchain.crt
✓ Generated file: cert-auth/auth.key
✓ Generator cert-auth completed
Executing generator: cert-punchcard
+ set -euo pipefail
+ PATH=/nix/store/v49dnvwkxyzkpxy5sqclncf54blvjs43-openssl-3.6.3-bin/bin:/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin
+ [[ ! -d /etc ]]
+ mkdir -p /etc
+ cat
++ id -g
+ cat
++ id -u
++ id -g
+ cat
+ openssl genrsa -out /output/punchcard.key 4096
+ openssl req -new -key /output/punchcard.key -subj /CN=punchcard.test.clan -out endpoint.csr
+ printf subjectAltName=DNS:punchcard.test.clan
+ openssl x509 -req -in endpoint.csr -CA /input/pki-root-ca/ca.crt -CAkey /input/pki-root-ca/ca.key -CAcreateserial -days 365 -sha256 -extfile san.cnf -out /output/punchcard.crt
Certificate request self-signature ok
subject=CN=punchcard.test.clan
+ cat /output/punchcard.crt /input/pki-root-ca/ca.crt
✓ Generated file: cert-punchcard/punchcard.crt
✓ Generated file: cert-punchcard/punchcard.fullchain.crt
✓ Generated file: cert-punchcard/punchcard.key
✓ Generator cert-punchcard completed
Executing generator: state-version
+ set -euo pipefail
+ PATH=/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin
+ [[ ! -d /etc ]]
+ mkdir -p /etc
+ cat
++ id -g
+ cat
++ id -u
++ id -g
+ cat
+ echo -n 26.05
✓ Generated file: state-version/version
✓ Generator state-version completed
✓ Machine server completed
✓ All vars checks completed successfully