Running vars check using Nix-based executor...
Executing shared generators...
Executing shared generator: pki-root-ca
+ set -euo pipefail
+ PATH=/nix/store/gqv7phqvmll7dprdmya6102ph64wvj0h-openssl-3.6.3-bin/bin:/nix/store/gph17gb73p6qbrqqjnypfjj5npf0ldyx-coreutils-9.11/bin
+ [[ ! -d /etc ]]
+ mkdir -p /etc
+ cat
++ id -g
+ cat
++ id -u
++ id -g
+ cat
+ openssl genrsa -out /output/ca.key 4096
+ openssl req -x509 -new -nodes -key /output/ca.key -sha256 -days 3650 -subj '/CN=Clan Root CA' -out /output/ca.crt
✓ Generated shared file: pki-root-ca/ca.crt
✓ Generated shared file: pki-root-ca/ca.key
✓ Shared Generator pki-root-ca completed
✓ Shared generators completed
Processing machine: server
Generator execution order: cert-id -> pocket-id -> state-version
Executing generator: cert-id
+ set -euo pipefail
+ PATH=/nix/store/gqv7phqvmll7dprdmya6102ph64wvj0h-openssl-3.6.3-bin/bin:/nix/store/gph17gb73p6qbrqqjnypfjj5npf0ldyx-coreutils-9.11/bin
+ [[ ! -d /etc ]]
+ mkdir -p /etc
+ cat
++ id -g
+ cat
++ id -u
++ id -g
+ cat
+ openssl genrsa -out /output/id.key 4096
+ openssl req -new -key /output/id.key -subj /CN=id.test.clan -out endpoint.csr
+ printf subjectAltName=DNS:id.test.clan
+ openssl x509 -req -in endpoint.csr -CA /input/pki-root-ca/ca.crt -CAkey /input/pki-root-ca/ca.key -CAcreateserial -days 365 -sha256 -extfile san.cnf -out /output/id.crt
Certificate request self-signature ok
subject=CN=id.test.clan
+ cat /output/id.crt /input/pki-root-ca/ca.crt
✓ Generated file: cert-id/id.crt
✓ Generated file: cert-id/id.fullchain.crt
✓ Generated file: cert-id/id.key
✓ Generator cert-id completed
Executing generator: pocket-id
+ set -euo pipefail
+ PATH=/nix/store/gph17gb73p6qbrqqjnypfjj5npf0ldyx-coreutils-9.11/bin:/nix/store/gqv7phqvmll7dprdmya6102ph64wvj0h-openssl-3.6.3-bin/bin:/nix/store/gph17gb73p6qbrqqjnypfjj5npf0ldyx-coreutils-9.11/bin
+ [[ ! -d /etc ]]
+ mkdir -p /etc
+ cat
++ id -g
+ cat
++ id -u
++ id -g
+ cat
+ mkdir -p /output
+ openssl rand -hex 32
+ tr -d '\n'
+ openssl rand -hex 32
+ tr -d '\n'
✓ Generated file: pocket-id/api-key
✓ Generated file: pocket-id/encryption-key
✓ Generator pocket-id completed
Executing generator: state-version
+ set -euo pipefail
+ PATH=/nix/store/gph17gb73p6qbrqqjnypfjj5npf0ldyx-coreutils-9.11/bin
+ [[ ! -d /etc ]]
+ mkdir -p /etc
+ cat
++ id -g
+ cat
++ id -u
++ id -g
+ cat
+ echo -n 26.05
✓ Generated file: state-version/version
✓ Generator state-version completed
✓ Machine server completed
✓ All vars checks completed successfully