these 49 derivations will be built:
  /nix/store/2i0dbdwl0ccb2ibr7axcjydk952kbcvp-system-path.drv
  /nix/store/wdvpqwyxiibfx4hjyivwbm5k87n7xc1x-dbus-1.drv
  /nix/store/0mzl3j00smc7nskrkd6zg9jhy68pcv43-X-Restart-Triggers-dbus-broker.drv
  /nix/store/vj7k58h551bff84w4bg2zv3ymf5ms149-punchcard-19700101-go-modules.drv
  /nix/store/d2v34b7g3fn897bz4qn0zrwk3cvxylj6-punchcard-19700101.drv
  /nix/store/2xirgwxwdnkfdlgg5vbgzhlzy6fy0hqk-unit-script-punchcard-punchcard-start.drv
  /nix/store/11z2fb06dhbg1vxila8n9vzhy2c6c5s6-unit-punchcard-punchcard.service.drv
  /nix/store/2978zl6dgp2ilncs6bhnfzs8nx5wjqh7-generator-authelia-oidc-punchcard-punchcard.drv
  /nix/store/2wgp9yd954s5aai17yz0q945w399h2wx-system-shutdown.drv
  /nix/store/65hnh5z7vc6mgdia7i54jkpsgy6lb7km-config.yml.drv
  /nix/store/wkdvnawf53bc9lx3jcb8as2yv4carqa2-etc-sysctl.d-60-nixos.conf.drv
  /nix/store/6igxldc2whjdmb2qfc9kkxwkim37kdhn-X-Restart-Triggers-systemd-sysctl.drv
  /nix/store/7rl5l097950p120frxd182aiapd71k1a-nss-cacert-3.126.drv
  /nix/store/all4i50r0wv96z5wkpnx51p3bynzdnz8-unit-dbus-broker.service.drv
  /nix/store/cb7lqcx6hh1a27hbczdgrhsy10vwci28-Caddyfile.drv
  /nix/store/csvdb61smgw8g2kc3z44693g0b07zaw5-unit-nix-daemon.service.drv
  /nix/store/cxmddbk09qby73df8i1jnx39xz605hws-generator-cert-auth.drv
  /nix/store/d35vmfmh4382frmjy6gn9i7syf323f34-testScript.drv
  /nix/store/d89a7h0n8wy43h27ydx5rb7jzfy6rvbn-decrypt-age-secrets.drv
  /nix/store/dbicnpl7flw7h9gfis5x0gj1c8l4h714-users-groups.json.drv
  /nix/store/r8pwy3n31lw767r2909fxzicazwwc85l-extra-hosts.drv
  /nix/store/yvrgyd8shwbg8dwzklrh2ssmn5cmsbqk-string-hosts.drv
  /nix/store/dlv3s24ksnqz0xhflqcrzycs0lmxiay6-hosts.drv
  /nix/store/nlah9428k9qrcrw0y35k7mas8vzxfmyi-generator-cert-punchcard.drv
  /nix/store/nvzdp4xa4gji0v7b58rqrkgv6qp1hazv-generator-authelia-user-alice.drv
  /nix/store/v39cfqxj9f5wbl0n64kyzgg90m7mll4w-generator-authelia-user-bob.drv
  /nix/store/x22zvhn87mr19xjzy7lwimq85k4av7hn-generator-authelia.drv
  /nix/store/hkl5wnf94xmgmzzl9aafc7aypjkh61ba-vars-check-authelia.drv
  /nix/store/kf5xhprf2sda4zra1yvw2sp44p3wv58c-user-generators.drv
  /nix/store/qivbqcfpzfwnzgrwwlkx38bc1szf6ziw-user-units.drv
  /nix/store/qzkzq8xz2akbbydhpcnlh1vqi4k1rmaq-oidc-jwks.yaml.drv
  /nix/store/l9zv1zhpca2raqxx6xry5fmc3fjzk44q-authelia-users-input.json.drv
  /nix/store/p9jxmj9l2y0y6lcn6f9b8fzlxxzcxyay-authelia-oidc-input.json.drv
  /nix/store/wlcb2i3hmplvmp9flh41sjvlqgbagc0c-unit-script-authelia-authelia-pre-start.drv
  /nix/store/ijs5ql59w95siacydzyiszq7kjbp237r-unit-authelia-authelia.service.drv
  /nix/store/imhvnxjx6h2f74hgbg0q40fwyr52svaj-unit-dbus-broker.service.drv
  /nix/store/spzcci2fbg698s82lpfzdk38rygnx5cy-Caddyfile-formatted.drv
  /nix/store/zwd6bl9v8vwlbzcnkgn8mrd5wgr4k6ik-X-Reload-Triggers-caddy.drv
  /nix/store/q0rg8mdjflpk9ixg6ffyrrcsjjm003y1-unit-caddy.service.drv
  /nix/store/slwsz9yvi017bbi1l0r9xbjhdg0lhx5a-unit-systemd-sysctl.service.drv
  /nix/store/s5rqqjga9769jzn12fwqia81r7sdc74p-system-units.drv
  /nix/store/v8a3nw26ncn8bpf6spa2k225jqxff1fi-system-generators.drv
  /nix/store/lwc6bza9gvi1frlkjgvh93651cxjqfsg-etc.drv
  /nix/store/ps8bbp5d5i3iad7cm8s4xpw5yqfpll9n-dry-activate.drv
  /nix/store/v0cradpbdmc0zn12skpv3hmzm710ddyh-activate.drv
  /nix/store/v26yhx0qfq2g080hismvq9vqbl33vv9b-nixos-system-server-test.drv
  /nix/store/hjy1p8b8xw8sy2x233mz933f6lbc01dw-closure-info.drv
  /nix/store/wza9r8qrydh3874qs8qdfwsbbx2lcp7n-nixos-test-driver-authelia.drv
  /nix/store/qnjnxbxq3j5pdmapqr3zgcqi3mzpf74c-container-test-run-authelia.drv
these 3 paths will be fetched (15.3 MiB download, 47.8 MiB unpacked):
  /nix/store/bh4sw9gvjnmskn3r5xgii9y0q4hx9j1x-authelia-4.39.20
  /nix/store/19p3l1r8bjqk8c2mi6mrl8x5qkwsqh2p-python3.13-tomlkit-0.12.5
  /nix/store/yld410i7bxb5hgj6qwajp4agdfx13jnn-remarshal-0.17.1
building '/nix/store/qzkzq8xz2akbbydhpcnlh1vqi4k1rmaq-oidc-jwks.yaml.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/p9jxmj9l2y0y6lcn6f9b8fzlxxzcxyay-authelia-oidc-input.json.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/l9zv1zhpca2raqxx6xry5fmc3fjzk44q-authelia-users-input.json.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/7rl5l097950p120frxd182aiapd71k1a-nss-cacert-3.126.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/cb7lqcx6hh1a27hbczdgrhsy10vwci28-Caddyfile.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/x22zvhn87mr19xjzy7lwimq85k4av7hn-generator-authelia.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/d35vmfmh4382frmjy6gn9i7syf323f34-testScript.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/dbicnpl7flw7h9gfis5x0gj1c8l4h714-users-groups.json.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/2978zl6dgp2ilncs6bhnfzs8nx5wjqh7-generator-authelia-oidc-punchcard-punchcard.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/v39cfqxj9f5wbl0n64kyzgg90m7mll4w-generator-authelia-user-bob.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/qzkzq8xz2akbbydhpcnlh1vqi4k1rmaq-oidc-jwks.yaml.drv'
building '/nix/store/d89a7h0n8wy43h27ydx5rb7jzfy6rvbn-decrypt-age-secrets.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/p9jxmj9l2y0y6lcn6f9b8fzlxxzcxyay-authelia-oidc-input.json.drv'
warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy
building '/nix/store/l9zv1zhpca2raqxx6xry5fmc3fjzk44q-authelia-users-input.json.drv'
warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy
building '/nix/store/7rl5l097950p120frxd182aiapd71k1a-nss-cacert-3.126.drv'
nss-cacert-3.126> Running phase: unpackPhase
nss-cacert-3.126> Running phase: patchPhase
nss-cacert-3.126> Running phase: updateAutotoolsGnuConfigScriptsPhase
nss-cacert-3.126> Running phase: configurePhase
nss-cacert-3.126> no configure script, doing nothing
nss-cacert-3.126> Running phase: buildPhase
building '/nix/store/cb7lqcx6hh1a27hbczdgrhsy10vwci28-Caddyfile.drv'
nss-cacert-3.126> Running phase: installPhase
nss-cacert-3.126> Running phase: fixupPhase
building '/nix/store/spzcci2fbg698s82lpfzdk38rygnx5cy-Caddyfile-formatted.drv' on 'ssh-ng://builder@build01.clan.lol'
nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/vi694glkr9zc55ws724fbaak33ricgwa-nss-cacert-3.126
nss-cacert-3.126> checking for references to /build/ in /nix/store/vi694glkr9zc55ws724fbaak33ricgwa-nss-cacert-3.126...
nss-cacert-3.126> patching script interpreter paths in /nix/store/vi694glkr9zc55ws724fbaak33ricgwa-nss-cacert-3.126
nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/v5lf2r3ayi0i784kk0vfxb788nd9dss3-nss-cacert-3.126-unbundled
nss-cacert-3.126> checking for references to /build/ in /nix/store/v5lf2r3ayi0i784kk0vfxb788nd9dss3-nss-cacert-3.126-unbundled...
nss-cacert-3.126> patching script interpreter paths in /nix/store/v5lf2r3ayi0i784kk0vfxb788nd9dss3-nss-cacert-3.126-unbundled
nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/jpmq1kb5c8rrjxqzgphyfj7snpg3qyd1-nss-cacert-3.126-p11kit
nss-cacert-3.126> checking for references to /build/ in /nix/store/jpmq1kb5c8rrjxqzgphyfj7snpg3qyd1-nss-cacert-3.126-p11kit...
nss-cacert-3.126> patching script interpreter paths in /nix/store/jpmq1kb5c8rrjxqzgphyfj7snpg3qyd1-nss-cacert-3.126-p11kit
nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/qk2hpvlv7b890924kdvlh981w88x6p2a-nss-cacert-3.126-hashed
nss-cacert-3.126> checking for references to /build/ in /nix/store/qk2hpvlv7b890924kdvlh981w88x6p2a-nss-cacert-3.126-hashed...
building '/nix/store/dbicnpl7flw7h9gfis5x0gj1c8l4h714-users-groups.json.drv'
building '/nix/store/x22zvhn87mr19xjzy7lwimq85k4av7hn-generator-authelia.drv'
nss-cacert-3.126> patching script interpreter paths in /nix/store/qk2hpvlv7b890924kdvlh981w88x6p2a-nss-cacert-3.126-hashed
building '/nix/store/2978zl6dgp2ilncs6bhnfzs8nx5wjqh7-generator-authelia-oidc-punchcard-punchcard.drv'
building '/nix/store/d35vmfmh4382frmjy6gn9i7syf323f34-testScript.drv'
building '/nix/store/v39cfqxj9f5wbl0n64kyzgg90m7mll4w-generator-authelia-user-bob.drv'
building '/nix/store/csvdb61smgw8g2kc3z44693g0b07zaw5-unit-nix-daemon.service.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/hkl5wnf94xmgmzzl9aafc7aypjkh61ba-vars-check-authelia.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/spzcci2fbg698s82lpfzdk38rygnx5cy-Caddyfile-formatted.drv'
building '/nix/store/csvdb61smgw8g2kc3z44693g0b07zaw5-unit-nix-daemon.service.drv'
warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy
warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy
building '/nix/store/zwd6bl9v8vwlbzcnkgn8mrd5wgr4k6ik-X-Reload-Triggers-caddy.drv' on 'ssh-ng://builder@build01.clan.lol'
warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy
building '/nix/store/hkl5wnf94xmgmzzl9aafc7aypjkh61ba-vars-check-authelia.drv'
vars-check-authelia> Running vars check using Nix-based executor...
vars-check-authelia> Executing shared generators...
vars-check-authelia> Executing shared generator: authelia-oidc-punchcard-punchcard
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin:/nix/store/v49dnvwkxyzkpxy5sqclncf54blvjs43-openssl-3.6.3-bin/bin:/nix/store/bh4sw9gvjnmskn3r5xgii9y0q4hx9j1x-authelia-4.39.20/bin:/nix/store/vryxwvapfxidddqmswhfdv9n5dn4k1rq-gnused-4.10/bin:/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
vars-check-authelia> + cat
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + mkdir -p /output
vars-check-authelia> + openssl rand -hex 32
vars-check-authelia> + sed 's/^Digest: //'
vars-check-authelia> ++ cat /output/client_secret
vars-check-authelia> + authelia crypto hash generate argon2 --password 9c11d44625b5ccb2cde8e8df428862d3dba0a92677b8befba4e4843d5d68e5d8
vars-check-authelia> ✓ Generated shared file: authelia-oidc-punchcard-punchcard/client_secret
vars-check-authelia> ✓ Generated shared file: authelia-oidc-punchcard-punchcard/client_secret_hash
vars-check-authelia> ✓ Shared Generator authelia-oidc-punchcard-punchcard completed
vars-check-authelia> Executing shared generator: pki-root-ca
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/v49dnvwkxyzkpxy5sqclncf54blvjs43-openssl-3.6.3-bin/bin:/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
vars-check-authelia> + cat
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + openssl genrsa -out /output/ca.key 4096
building '/nix/store/wlcb2i3hmplvmp9flh41sjvlqgbagc0c-unit-script-authelia-authelia-pre-start.drv' on 'ssh-ng://builder@build01.clan.lol'
vars-check-authelia> + openssl req -x509 -new -nodes -key /output/ca.key -sha256 -days 3650 -subj '/CN=Clan Root CA' -out /output/ca.crt
vars-check-authelia> ✓ Generated shared file: pki-root-ca/ca.crt
vars-check-authelia> ✓ Generated shared file: pki-root-ca/ca.key
vars-check-authelia> ✓ Shared Generator pki-root-ca completed
vars-check-authelia> ✓ Shared generators completed
vars-check-authelia> Processing machine: server
vars-check-authelia> Generator execution order: authelia -> authelia-user-alice -> authelia-user-bob -> cert-auth -> cert-punchcard -> state-version
vars-check-authelia> Executing generator: authelia
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin:/nix/store/v49dnvwkxyzkpxy5sqclncf54blvjs43-openssl-3.6.3-bin/bin:/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
vars-check-authelia> + cat
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + mkdir -p /output
vars-check-authelia> + openssl rand -hex 64
vars-check-authelia> + openssl rand -hex 64
vars-check-authelia> + openssl rand -hex 64
vars-check-authelia> + openssl rand -hex 64
vars-check-authelia> + openssl genrsa -out /output/oidc-jwks-key 4096
building '/nix/store/zwd6bl9v8vwlbzcnkgn8mrd5wgr4k6ik-X-Reload-Triggers-caddy.drv'
vars-check-authelia> ✓ Generated file: authelia/jwt-secret
vars-check-authelia> ✓ Generated file: authelia/oidc-hmac-secret
vars-check-authelia> ✓ Generated file: authelia/oidc-jwks-key
vars-check-authelia> ✓ Generated file: authelia/session-secret
vars-check-authelia> ✓ Generated file: authelia/storage-encryption-key
vars-check-authelia> ✓ Generator authelia completed
vars-check-authelia> Executing generator: authelia-user-alice
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin:/nix/store/bh4sw9gvjnmskn3r5xgii9y0q4hx9j1x-authelia-4.39.20/bin:/nix/store/adq8ga9krg9mbrh35yr3xjcw7d2y3lqn-python3.13-xkcdpass-1.30.0/bin:/nix/store/vryxwvapfxidddqmswhfdv9n5dn4k1rq-gnused-4.10/bin:/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
vars-check-authelia> + cat
building '/nix/store/wlcb2i3hmplvmp9flh41sjvlqgbagc0c-unit-script-authelia-authelia-pre-start.drv'
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + mkdir -p /output
vars-check-authelia> + xkcdpass -n 7 -d-
vars-check-authelia> + sed 's/^Digest: //'
vars-check-authelia> ++ cat /output/password
vars-check-authelia> + authelia crypto hash generate argon2 --password supper-bloating-carpentry-boxer-staging-slept-twisty
warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy
vars-check-authelia> ✓ Generated file: authelia-user-alice/password
vars-check-authelia> ✓ Generated file: authelia-user-alice/password-hash
vars-check-authelia> ✓ Generator authelia-user-alice completed
vars-check-authelia> Executing generator: authelia-user-bob
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin:/nix/store/bh4sw9gvjnmskn3r5xgii9y0q4hx9j1x-authelia-4.39.20/bin:/nix/store/adq8ga9krg9mbrh35yr3xjcw7d2y3lqn-python3.13-xkcdpass-1.30.0/bin:/nix/store/vryxwvapfxidddqmswhfdv9n5dn4k1rq-gnused-4.10/bin:/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
vars-check-authelia> + cat
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + mkdir -p /output
vars-check-authelia> + xkcdpass -n 7 -d-
vars-check-authelia> + sed 's/^Digest: //'
vars-check-authelia> ++ cat /output/password
vars-check-authelia> + authelia crypto hash generate argon2 --password urging-ember-underage-hertz-fifth-motocross-monitor
vars-check-authelia> ✓ Generated file: authelia-user-bob/password
vars-check-authelia> ✓ Generated file: authelia-user-bob/password-hash
vars-check-authelia> ✓ Generator authelia-user-bob completed
vars-check-authelia> Executing generator: cert-auth
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/v49dnvwkxyzkpxy5sqclncf54blvjs43-openssl-3.6.3-bin/bin:/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
building '/nix/store/q0rg8mdjflpk9ixg6ffyrrcsjjm003y1-unit-caddy.service.drv' on 'ssh-ng://builder@build01.clan.lol'
vars-check-authelia> + cat
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + openssl genrsa -out /output/auth.key 4096
warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy
vars-check-authelia> + openssl req -new -key /output/auth.key -subj /CN=auth.test.clan -out endpoint.csr
vars-check-authelia> + printf subjectAltName=DNS:auth.test.clan
vars-check-authelia> + openssl x509 -req -in endpoint.csr -CA /input/pki-root-ca/ca.crt -CAkey /input/pki-root-ca/ca.key -CAcreateserial -days 365 -sha256 -extfile san.cnf -out /output/auth.crt
vars-check-authelia> Certificate request self-signature ok
vars-check-authelia> subject=CN=auth.test.clan
vars-check-authelia> + cat /output/auth.crt /input/pki-root-ca/ca.crt
vars-check-authelia> ✓ Generated file: cert-auth/auth.crt
vars-check-authelia> ✓ Generated file: cert-auth/auth.fullchain.crt
vars-check-authelia> ✓ Generated file: cert-auth/auth.key
vars-check-authelia> ✓ Generator cert-auth completed
vars-check-authelia> Executing generator: cert-punchcard
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/v49dnvwkxyzkpxy5sqclncf54blvjs43-openssl-3.6.3-bin/bin:/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
vars-check-authelia> + cat
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + openssl genrsa -out /output/punchcard.key 4096
warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy
building '/nix/store/ijs5ql59w95siacydzyiszq7kjbp237r-unit-authelia-authelia.service.drv' on 'ssh-ng://builder@build01.clan.lol'
vars-check-authelia> + openssl req -new -key /output/punchcard.key -subj /CN=punchcard.test.clan -out endpoint.csr
vars-check-authelia> + printf subjectAltName=DNS:punchcard.test.clan
vars-check-authelia> + openssl x509 -req -in endpoint.csr -CA /input/pki-root-ca/ca.crt -CAkey /input/pki-root-ca/ca.key -CAcreateserial -days 365 -sha256 -extfile san.cnf -out /output/punchcard.crt
vars-check-authelia> Certificate request self-signature ok
vars-check-authelia> subject=CN=punchcard.test.clan
vars-check-authelia> + cat /output/punchcard.crt /input/pki-root-ca/ca.crt
vars-check-authelia> ✓ Generated file: cert-punchcard/punchcard.crt
vars-check-authelia> ✓ Generated file: cert-punchcard/punchcard.fullchain.crt
vars-check-authelia> ✓ Generated file: cert-punchcard/punchcard.key
vars-check-authelia> ✓ Generator cert-punchcard completed
vars-check-authelia> Executing generator: state-version
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
vars-check-authelia> + cat
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + echo -n 26.05
vars-check-authelia> ✓ Generated file: state-version/version
vars-check-authelia> ✓ Generator state-version completed
vars-check-authelia> ✓ Machine server completed
vars-check-authelia> ✓ All vars checks completed successfully
building '/nix/store/q0rg8mdjflpk9ixg6ffyrrcsjjm003y1-unit-caddy.service.drv'
building '/nix/store/d89a7h0n8wy43h27ydx5rb7jzfy6rvbn-decrypt-age-secrets.drv'
building '/nix/store/ps8bbp5d5i3iad7cm8s4xpw5yqfpll9n-dry-activate.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/ps8bbp5d5i3iad7cm8s4xpw5yqfpll9n-dry-activate.drv'
warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy
building '/nix/store/ijs5ql59w95siacydzyiszq7kjbp237r-unit-authelia-authelia.service.drv'
warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy
warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy
building '/nix/store/s5rqqjga9769jzn12fwqia81r7sdc74p-system-units.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/s5rqqjga9769jzn12fwqia81r7sdc74p-system-units.drv'
building '/nix/store/lwc6bza9gvi1frlkjgvh93651cxjqfsg-etc.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/lwc6bza9gvi1frlkjgvh93651cxjqfsg-etc.drv'
building '/nix/store/v0cradpbdmc0zn12skpv3hmzm710ddyh-activate.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/v0cradpbdmc0zn12skpv3hmzm710ddyh-activate.drv'
building '/nix/store/v26yhx0qfq2g080hismvq9vqbl33vv9b-nixos-system-server-test.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/v26yhx0qfq2g080hismvq9vqbl33vv9b-nixos-system-server-test.drv'
nixos-system-server-test> structuredAttrs is enabled
building '/nix/store/hjy1p8b8xw8sy2x233mz933f6lbc01dw-closure-info.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/hjy1p8b8xw8sy2x233mz933f6lbc01dw-closure-info.drv'
closure-info> structuredAttrs is enabled
building '/nix/store/wza9r8qrydh3874qs8qdfwsbbx2lcp7n-nixos-test-driver-authelia.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/wza9r8qrydh3874qs8qdfwsbbx2lcp7n-nixos-test-driver-authelia.drv'
nixos-test-driver-authelia> Running type check (enable/disable: config.skipTypeCheck)
nixos-test-driver-authelia> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck
nixos-test-driver-authelia> Success: no issues found in 1 source file
building '/nix/store/qnjnxbxq3j5pdmapqr3zgcqi3mzpf74c-container-test-run-authelia.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/qnjnxbxq3j5pdmapqr3zgcqi3mzpf74c-container-test-run-authelia.drv'
container-test-run-authelia> additionally exposed symbols:
container-test-run-authelia>     server,
container-test-run-authelia>     start_all, machines, driver, Machine, wait_for_signal
container-test-run-authelia> Starting server
container-test-run-authelia> 
container-test-run-authelia> 
container-test-run-authelia> <<< NixOS Stage 2 >>>
container-test-run-authelia> 
container-test-run-authelia> booting system configuration /nix/store/r3i28hr5i6mj7idr9ymaax8bi0kvnsld-nixos-system-server-test
container-test-run-authelia> running activation script...
container-test-run-authelia> setting up /etc...
container-test-run-authelia> 2: host0@if3: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
container-test-run-authelia>     link/ether be:aa:dd:39:86:e7 brd ff:ff:ff:ff:ff:ff link-netnsid 0
container-test-run-authelia> setting up age secrets...
container-test-run-authelia> starting systemd...
container-test-run-authelia> systemd 260.2 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE)
container-test-run-authelia> Detected virtualization systemd-nspawn.
container-test-run-authelia> Detected architecture arm64.
container-test-run-authelia> Detected first boot.
container-test-run-authelia> Initializing machine ID from container UUID.
container-test-run-authelia> Applying preset policy.
container-test-run-authelia> Populated /etc with preset unit settings.
container-test-run-authelia> Queued start job for default target Multi-User System.
container-test-run-authelia> 
container-test-run-authelia> 
container-test-run-authelia> 
container-test-run-authelia> <<< Welcome to NixOS test (aarch64) - console >>>
container-test-run-authelia> + systemd-run /bin/sh -c '/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin/sleep 999999999 && echo af3d6514-a689-45bf-998e-fc15a5200427'
container-test-run-authelia> Running as unit: run-p548-i101649250.service; invocation ID: 3d11bc82797c419597d097099278e9c5
container-test-run-authelia> To attach to container server run on the same machine that runs the test:
container-test-run-authelia>   sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*af3d6514-a689-45bf-998e-fc15a5200427') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash 
container-test-run-authelia> 
container-test-run-authelia> To inject external network and continue test, run:
container-test-run-authelia> sudo /nix/store/d6kq2phq0zy5invmkfgg8h35zxaf13s9-python3-3.13.15/bin/python3.13 /nix/store/hvjpsqwpzj163wzy0fhlnf8iwgcwfzr9-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py af3d6514-a689-45bf-998e-fc15a5200427
container-test-run-authelia> + systemctl --no-pager show authelia-authelia.service
container-test-run-authelia> server: waiting for success: curl -sf http://127.0.0.1:9091/api/health
container-test-run-authelia> + curl -sf http://127.0.0.1:9091/api/health
container-test-run-authelia> (finished: waiting for success: curl -sf http://127.0.0.1:9091/api/health, in 0.02 seconds)
container-test-run-authelia> + test -f /run/authelia-authelia/users.json
container-test-run-authelia> + cat /run/authelia-authelia/users.json
container-test-run-authelia> + test -f /run/authelia-authelia/oidc.json
container-test-run-authelia> + cat /run/authelia-authelia/oidc.json
container-test-run-authelia> + systemctl --no-pager show caddy.service
container-test-run-authelia> server: waiting for success: curl -sf https://auth.test.clan/api/health
container-test-run-authelia> + curl -sf https://auth.test.clan/api/health
container-test-run-authelia> (finished: waiting for success: curl -sf https://auth.test.clan/api/health, in 0.10 seconds)
container-test-run-authelia> server: waiting for success: curl -sf https://auth.test.clan/.well-known/openid-configuration
container-test-run-authelia> + curl -sf https://auth.test.clan/.well-known/openid-configuration
container-test-run-authelia> (finished: waiting for success: curl -sf https://auth.test.clan/.well-known/openid-configuration, in 0.10 seconds)
container-test-run-authelia> + systemctl --no-pager show punchcard-punchcard.service
container-test-run-authelia> server: waiting for success: curl -sf https://punchcard.test.clan/login
container-test-run-authelia> + curl -sf https://punchcard.test.clan/login
container-test-run-authelia> (finished: waiting for success: curl -sf https://punchcard.test.clan/login, in 0.10 seconds)
container-test-run-authelia> + cat /run/secrets/authelia-user-bob/password
container-test-run-authelia> + curl -s -o /dev/null -w '%{redirect_url}' -c /tmp/pc-cookies https://punchcard.test.clan/login/start
container-test-run-authelia> + curl -sf -X POST https://auth.test.clan/api/firstfactor -H 'Content-Type: application/json' -c /tmp/auth-cookies -d '{"username": "bob", "password": "pretext-proven-gesture-cornfield-audibly-shriek-imply", "keepMeLoggedIn": false}'
container-test-run-authelia> + curl -s -o /dev/null -w '%{redirect_url}' -b /tmp/auth-cookies -c /tmp/auth-cookies 'https://auth.test.clan/api/oidc/authorization?client_id=punchcard-punchcard&code_challenge=tAKn7WF2aP0KWCkJIuZ1XhJGy_I_Z45DFmruv7LiejI&code_challenge_method=S256&redirect_uri=https%3A%2F%2Fpunchcard.test.clan%2Fcallback&response_type=code&scope=openid+profile+email&state=LZ9MjnOMoWc3SgYsWCJbGvgIBzzp60O8AB6ysqPaFQA%3D'
container-test-run-authelia> + curl -s -o /dev/null -w '%{http_code}' -c /tmp/pc-cookies -b /tmp/pc-cookies 'https://punchcard.test.clan/callback?code=authelia_ac_zTZLX4rK5va4l7FZ0tV0FtkhpNHux6hG27mdm9dZPsM.Q9ZvKr3J6BiIP6YqA88TErb00cTzgvfjkD5cm3qdCN0&iss=https%3A%2F%2Fauth.test.clan&scope=openid+profile+email&state=LZ9MjnOMoWc3SgYsWCJbGvgIBzzp60O8AB6ysqPaFQA%3D'
container-test-run-authelia> + curl -s -L -o /dev/null -w '%{http_code}' -b /tmp/pc-cookies -c /tmp/pc-cookies https://punchcard.test.clan/
container-test-run-authelia> 

post-build step Upload to niks3: ok
time=2026-08-22T05:09:41.597Z level=INFO msg="Uploading 0 paths to niks3.clan.lol (1 already cached)"
time=2026-08-22T05:09:42.150Z level=INFO msg="Uploading 1 narinfos"
time=2026-08-22T05:09:42.890Z level=INFO msg="Upload complete. (1.344s)"