these 36 derivations will be built:
  /nix/store/1c2i1hhmj2lnc96m2mpj7rix0gfk64a9-users-groups.json.drv
  /nix/store/lpzqsyqjyml11629r2wnjrxsv4migszk-decrypt-age-secrets.drv
  /nix/store/iq4fb4bafkqv1qgvk6lyk6p2xcn46a77-dry-activate.drv
  /nix/store/ln8lc7av97ml26zksqxngnang222p82a-system-path.drv
  /nix/store/5z4iwys74rh7rm3h8i8ikhfj5c5im7zg-vars-check-authelia.drv
  /nix/store/xx99916vwjlhw9c93cvda7yp78hz6g66-dbus-1.drv
  /nix/store/m2531yp17pl5b2ys9jmbwg9ayarpipc3-X-Restart-Triggers-dbus-broker.drv
  /nix/store/6yn7c74pc4flvxnpfc97flhz1vmhmwi7-unit-dbus-broker.service.drv
  /nix/store/gb7h8532ayzi5mmxkwn5a2bbs77c71ay-punchcard-19700101-go-modules.drv
  /nix/store/by1pz3lim6grppzzy7j474bwj2nvnpm2-punchcard-19700101.drv
  /nix/store/5rg6ywxpq7xp49a2mljl8y266szvz0lg-unit-script-punchcard-punchcard-start.drv
  /nix/store/h2h3869cf7vqsdgcaw1fnslzpalsx2da-unit-punchcard-punchcard.service.drv
  /nix/store/a2vblg3lk0m3qkc3m0knqwh72yz8yv8p-nss-cacert-3.126.drv
  /nix/store/kpz7sn6czx6112g3xfpba19q3d0k8q9p-unit-nix-daemon.service.drv
  /nix/store/9ykb93yg4vwy4rzhys2g5pw0jdz6448a-oidc-jwks.yaml.drv
  /nix/store/d7n7366xi0ry10nqb7yk1ixd8y820rq2-config.yml.drv
  /nix/store/bik7fllcr0w0p7v89a84v38y6fsc3n55-authelia-oidc-input.json.drv
  /nix/store/jh5jxzjprvdazjghcjfcz8bkbfr7pzms-authelia-users-input.json.drv
  /nix/store/lgslcanc3d255hfm4rlavp7jd5ypsm74-unit-script-authelia-authelia-pre-start.drv
  /nix/store/naxydhk7kbmyamxl38lmrbc7cyg2jm1c-unit-authelia-authelia.service.drv
  /nix/store/bzrv6sh872w6prd7vjfbk7326qy2xxl0-Caddyfile.drv
  /nix/store/p2jvmjxv74js8vg3696ri3zlw67gnzl5-Caddyfile-formatted.drv
  /nix/store/w35cw25gmcpjpyizf5z3iyshbg28hi2a-X-Reload-Triggers-caddy.drv
  /nix/store/vvi0i98049d5s56byff45pxqiikv3dsh-unit-caddy.service.drv
  /nix/store/8q0m443lj0r425j4w9230y470v372ggm-system-units.drv
  /nix/store/af7lr0w05zdxqkkcj1yd723hrdsdq735-unit-dbus-broker.service.drv
  /nix/store/imkcpg11pvccrkbdg4p604x7p3pji73l-user-units.drv
  /nix/store/v4mccsbms354f9il6r67imjz062q14ca-string-hosts.drv
  /nix/store/nwsqiiqck8fyn6nk5dhbsh1sk42vxqzr-hosts.drv
  /nix/store/qks6yvd2dw6gkdisnzfqfrbxk8i2fvda-etc.drv
  /nix/store/zgjq4rg41ay1xv5i4jwisfymqp2h26rv-activate.drv
  /nix/store/csahpd5z49lgbngvms1z39f8dwd3h1jl-nixos-system-server-test.drv
  /nix/store/6v2y20p05jfhjz65vr7llp9jc9d8dyr8-testScript.drv
  /nix/store/qcp4d1bhm7h34flrchqapfw8j85qg6ki-closure-info.drv
  /nix/store/3z2a50gwp2x9ixvlsbv9n41w0ayl3bcm-nixos-test-driver-authelia.drv
  /nix/store/0hvynil6pjylcjxpp3f9sc181ry7ackd-container-test-run-authelia.drv
these 2 paths will be fetched (137.9 KiB download, 783.8 KiB unpacked):
  /nix/store/ggnxficvw28rdb0j92ld52ch7d7g2ip1-python3.13-tomlkit-0.12.5
  /nix/store/iglb3kvh0439wly157lra1yhxa1xlxqp-remarshal-0.17.1
building '/nix/store/v4mccsbms354f9il6r67imjz062q14ca-string-hosts.drv'
building '/nix/store/9ykb93yg4vwy4rzhys2g5pw0jdz6448a-oidc-jwks.yaml.drv'
building '/nix/store/bik7fllcr0w0p7v89a84v38y6fsc3n55-authelia-oidc-input.json.drv'
building '/nix/store/jh5jxzjprvdazjghcjfcz8bkbfr7pzms-authelia-users-input.json.drv'
building '/nix/store/a2vblg3lk0m3qkc3m0knqwh72yz8yv8p-nss-cacert-3.126.drv' on 'ssh-ng://builder@build-x86-01.clan.lol'
building '/nix/store/5z4iwys74rh7rm3h8i8ikhfj5c5im7zg-vars-check-authelia.drv' on 'ssh-ng://builder@build-x86-01.clan.lol'
building '/nix/store/bzrv6sh872w6prd7vjfbk7326qy2xxl0-Caddyfile.drv'
building '/nix/store/6v2y20p05jfhjz65vr7llp9jc9d8dyr8-testScript.drv'
building '/nix/store/nwsqiiqck8fyn6nk5dhbsh1sk42vxqzr-hosts.drv'
building '/nix/store/p2jvmjxv74js8vg3696ri3zlw67gnzl5-Caddyfile-formatted.drv' on 'ssh-ng://builder@build-x86-01.clan.lol'
building '/nix/store/lpzqsyqjyml11629r2wnjrxsv4migszk-decrypt-age-secrets.drv' on 'ssh-ng://builder@build-x86-01.clan.lol'
building '/nix/store/3hisdxlzs1rs3jdmk3n7lrh5xxdb0k5h-punchcard-19700101-go-modules.drv' on 'ssh-ng://builder@build-x86-01.clan.lol'
building '/nix/store/d7n7366xi0ry10nqb7yk1ixd8y820rq2-config.yml.drv'
config.yml> structuredAttrs is enabled
building '/nix/store/lgslcanc3d255hfm4rlavp7jd5ypsm74-unit-script-authelia-authelia-pre-start.drv'
building '/nix/store/naxydhk7kbmyamxl38lmrbc7cyg2jm1c-unit-authelia-authelia.service.drv'
building '/nix/store/a2vblg3lk0m3qkc3m0knqwh72yz8yv8p-nss-cacert-3.126.drv'
nss-cacert-3.126> Running phase: unpackPhase
nss-cacert-3.126> Running phase: patchPhase
nss-cacert-3.126> Running phase: updateAutotoolsGnuConfigScriptsPhase
nss-cacert-3.126> Running phase: configurePhase
nss-cacert-3.126> no configure script, doing nothing
nss-cacert-3.126> Running phase: buildPhase
nss-cacert-3.126> Running phase: installPhase
building '/nix/store/5z4iwys74rh7rm3h8i8ikhfj5c5im7zg-vars-check-authelia.drv'
nss-cacert-3.126> Running phase: fixupPhase
vars-check-authelia> Running vars check using Nix-based executor...
vars-check-authelia> Executing shared generators...
vars-check-authelia> Executing shared generator: authelia-oidc-punchcard-punchcard
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/gph17gb73p6qbrqqjnypfjj5npf0ldyx-coreutils-9.11/bin:/nix/store/gqv7phqvmll7dprdmya6102ph64wvj0h-openssl-3.6.3-bin/bin:/nix/store/d3ra8isyv80vkrpp6z8whx2x9f3xzbid-authelia-4.39.20/bin:/nix/store/svl89366pvzz5s3myh1fjniz9l0x17fh-gnused-4.10/bin:/nix/store/gph17gb73p6qbrqqjnypfjj5npf0ldyx-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/vxf6mj2fmyn0q0indibjydfpqz520yla-nss-cacert-3.126
vars-check-authelia> + cat
vars-check-authelia> ++ id -g
nss-cacert-3.126> checking for references to /build/ in /nix/store/vxf6mj2fmyn0q0indibjydfpqz520yla-nss-cacert-3.126...
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + mkdir -p /output
vars-check-authelia> + openssl rand -hex 32
nss-cacert-3.126> patching script interpreter paths in /nix/store/vxf6mj2fmyn0q0indibjydfpqz520yla-nss-cacert-3.126
vars-check-authelia> + sed 's/^Digest: //'
vars-check-authelia> ++ cat /output/client_secret
nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/8w1b0a7yid6h571ac5b7l05c18lv3scs-nss-cacert-3.126-unbundled
vars-check-authelia> + authelia crypto hash generate argon2 --password c79bc176a663c5df32cfebdbed201eef5de212a099fd6478dcc0258356fe3cad
nss-cacert-3.126> checking for references to /build/ in /nix/store/8w1b0a7yid6h571ac5b7l05c18lv3scs-nss-cacert-3.126-unbundled...
nss-cacert-3.126> patching script interpreter paths in /nix/store/8w1b0a7yid6h571ac5b7l05c18lv3scs-nss-cacert-3.126-unbundled
nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/gnz43psvdjq3l72gf59cdqywvgwz5msz-nss-cacert-3.126-p11kit
nss-cacert-3.126> checking for references to /build/ in /nix/store/gnz43psvdjq3l72gf59cdqywvgwz5msz-nss-cacert-3.126-p11kit...
nss-cacert-3.126> patching script interpreter paths in /nix/store/gnz43psvdjq3l72gf59cdqywvgwz5msz-nss-cacert-3.126-p11kit
vars-check-authelia> ✓ Generated shared file: authelia-oidc-punchcard-punchcard/client_secret
vars-check-authelia> ✓ Generated shared file: authelia-oidc-punchcard-punchcard/client_secret_hash
vars-check-authelia> ✓ Shared Generator authelia-oidc-punchcard-punchcard completed
vars-check-authelia> Executing shared generator: pki-root-ca
nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/4z96kpgz841189ffjc1n1wdf3yzzgw63-nss-cacert-3.126-hashed
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/gqv7phqvmll7dprdmya6102ph64wvj0h-openssl-3.6.3-bin/bin:/nix/store/gph17gb73p6qbrqqjnypfjj5npf0ldyx-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
vars-check-authelia> + cat
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + openssl genrsa -out /output/ca.key 4096
nss-cacert-3.126> checking for references to /build/ in /nix/store/4z96kpgz841189ffjc1n1wdf3yzzgw63-nss-cacert-3.126-hashed...
nss-cacert-3.126> patching script interpreter paths in /nix/store/4z96kpgz841189ffjc1n1wdf3yzzgw63-nss-cacert-3.126-hashed
building '/nix/store/p2jvmjxv74js8vg3696ri3zlw67gnzl5-Caddyfile-formatted.drv'
building '/nix/store/w35cw25gmcpjpyizf5z3iyshbg28hi2a-X-Reload-Triggers-caddy.drv'
building '/nix/store/vvi0i98049d5s56byff45pxqiikv3dsh-unit-caddy.service.drv'
building '/nix/store/lpzqsyqjyml11629r2wnjrxsv4migszk-decrypt-age-secrets.drv'
building '/nix/store/iq4fb4bafkqv1qgvk6lyk6p2xcn46a77-dry-activate.drv'
building '/nix/store/3hisdxlzs1rs3jdmk3n7lrh5xxdb0k5h-punchcard-19700101-go-modules.drv'
punchcard-19700101-go-modules> Running phase: unpackPhase
punchcard-19700101-go-modules> unpacking source archive /nix/store/kri9pf91gs36fzj416wkimbclcfaqhcw-kcacsi85z0l10lwkcrcs1sm24ff8az3r-source
punchcard-19700101-go-modules> source root is kcacsi85z0l10lwkcrcs1sm24ff8az3r-source
punchcard-19700101-go-modules> Running phase: patchPhase
punchcard-19700101-go-modules> Running phase: updateAutotoolsGnuConfigScriptsPhase
punchcard-19700101-go-modules> Running phase: configurePhase
punchcard-19700101-go-modules> Running phase: buildPhase
punchcard-19700101-go-modules> go: downloading github.com/mattn/go-sqlite3 v1.14.19
punchcard-19700101-go-modules> go: downloading github.com/coreos/go-oidc/v3 v3.10.0
punchcard-19700101-go-modules> go: downloading github.com/jackc/pgx/v5 v5.10.0
punchcard-19700101-go-modules> go: downloading github.com/joho/godotenv v1.5.1
punchcard-19700101-go-modules> go: downloading github.com/gorilla/mux v1.8.1
punchcard-19700101-go-modules> go: downloading golang.org/x/oauth2 v0.18.0
vars-check-authelia> + openssl req -x509 -new -nodes -key /output/ca.key -sha256 -days 3650 -subj '/CN=Clan Root CA' -out /output/ca.crt
vars-check-authelia> ✓ Generated shared file: pki-root-ca/ca.crt
vars-check-authelia> ✓ Generated shared file: pki-root-ca/ca.key
vars-check-authelia> ✓ Shared Generator pki-root-ca completed
vars-check-authelia> ✓ Shared generators completed
vars-check-authelia> Processing machine: server
vars-check-authelia> Generator execution order: authelia -> authelia-user-alice -> authelia-user-bob -> cert-auth -> cert-punchcard -> state-version
vars-check-authelia> Executing generator: authelia
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/gph17gb73p6qbrqqjnypfjj5npf0ldyx-coreutils-9.11/bin:/nix/store/gqv7phqvmll7dprdmya6102ph64wvj0h-openssl-3.6.3-bin/bin:/nix/store/gph17gb73p6qbrqqjnypfjj5npf0ldyx-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
vars-check-authelia> + cat
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + mkdir -p /output
vars-check-authelia> + openssl rand -hex 64
vars-check-authelia> + openssl rand -hex 64
vars-check-authelia> + openssl rand -hex 64
vars-check-authelia> + openssl rand -hex 64
vars-check-authelia> + openssl genrsa -out /output/oidc-jwks-key 4096
punchcard-19700101-go-modules> go: downloading github.com/go-jose/go-jose/v4 v4.0.1
punchcard-19700101-go-modules> go: downloading google.golang.org/appengine v1.6.8
punchcard-19700101-go-modules> go: downloading github.com/jackc/puddle/v2 v2.2.2
punchcard-19700101-go-modules> go: downloading github.com/jackc/pgpassfile v1.0.0
punchcard-19700101-go-modules> go: downloading github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761
punchcard-19700101-go-modules> go: downloading golang.org/x/text v0.29.0
punchcard-19700101-go-modules> go: downloading golang.org/x/crypto v0.19.0
punchcard-19700101-go-modules> go: downloading golang.org/x/sync v0.17.0
punchcard-19700101-go-modules> go: downloading github.com/golang/protobuf v1.5.3
vars-check-authelia> ✓ Generated file: authelia/jwt-secret
vars-check-authelia> ✓ Generated file: authelia/oidc-hmac-secret
vars-check-authelia> ✓ Generated file: authelia/oidc-jwks-key
vars-check-authelia> ✓ Generated file: authelia/session-secret
vars-check-authelia> ✓ Generated file: authelia/storage-encryption-key
vars-check-authelia> ✓ Generator authelia completed
vars-check-authelia> Executing generator: authelia-user-alice
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/gph17gb73p6qbrqqjnypfjj5npf0ldyx-coreutils-9.11/bin:/nix/store/d3ra8isyv80vkrpp6z8whx2x9f3xzbid-authelia-4.39.20/bin:/nix/store/pgbl42r1nhkpqjjnb0fism6sw58p1s2j-python3.13-xkcdpass-1.30.0/bin:/nix/store/svl89366pvzz5s3myh1fjniz9l0x17fh-gnused-4.10/bin:/nix/store/gph17gb73p6qbrqqjnypfjj5npf0ldyx-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
vars-check-authelia> + cat
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + mkdir -p /output
vars-check-authelia> + xkcdpass -n 7 -d-
building '/nix/store/kpz7sn6czx6112g3xfpba19q3d0k8q9p-unit-nix-daemon.service.drv'
punchcard-19700101-go-modules> go: downloading google.golang.org/protobuf v1.31.0
vars-check-authelia> + sed 's/^Digest: //'
vars-check-authelia> ++ cat /output/password
vars-check-authelia> + authelia crypto hash generate argon2 --password elusive-unsheathe-footage-amaretto-irritable-vagabond-revoke
vars-check-authelia> ✓ Generated file: authelia-user-alice/password
vars-check-authelia> ✓ Generated file: authelia-user-alice/password-hash
vars-check-authelia> ✓ Generator authelia-user-alice completed
vars-check-authelia> Executing generator: authelia-user-bob
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/gph17gb73p6qbrqqjnypfjj5npf0ldyx-coreutils-9.11/bin:/nix/store/d3ra8isyv80vkrpp6z8whx2x9f3xzbid-authelia-4.39.20/bin:/nix/store/pgbl42r1nhkpqjjnb0fism6sw58p1s2j-python3.13-xkcdpass-1.30.0/bin:/nix/store/svl89366pvzz5s3myh1fjniz9l0x17fh-gnused-4.10/bin:/nix/store/gph17gb73p6qbrqqjnypfjj5npf0ldyx-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
vars-check-authelia> + cat
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + mkdir -p /output
vars-check-authelia> + xkcdpass -n 7 -d-
vars-check-authelia> + sed 's/^Digest: //'
vars-check-authelia> ++ cat /output/password
vars-check-authelia> + authelia crypto hash generate argon2 --password spotlight-kindling-parkway-dayroom-handiness-goofy-idealism
vars-check-authelia> ✓ Generated file: authelia-user-bob/password
vars-check-authelia> ✓ Generated file: authelia-user-bob/password-hash
vars-check-authelia> ✓ Generator authelia-user-bob completed
vars-check-authelia> Executing generator: cert-auth
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/gqv7phqvmll7dprdmya6102ph64wvj0h-openssl-3.6.3-bin/bin:/nix/store/gph17gb73p6qbrqqjnypfjj5npf0ldyx-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
vars-check-authelia> + cat
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + openssl genrsa -out /output/auth.key 4096
punchcard-19700101-go-modules> Running phase: installPhase
vars-check-authelia> + openssl req -new -key /output/auth.key -subj /CN=auth.test.clan -out endpoint.csr
vars-check-authelia> + printf subjectAltName=DNS:auth.test.clan
vars-check-authelia> + openssl x509 -req -in endpoint.csr -CA /input/pki-root-ca/ca.crt -CAkey /input/pki-root-ca/ca.key -CAcreateserial -days 365 -sha256 -extfile san.cnf -out /output/auth.crt
vars-check-authelia> Certificate request self-signature ok
vars-check-authelia> subject=CN=auth.test.clan
vars-check-authelia> + cat /output/auth.crt /input/pki-root-ca/ca.crt
vars-check-authelia> ✓ Generated file: cert-auth/auth.crt
vars-check-authelia> ✓ Generated file: cert-auth/auth.fullchain.crt
vars-check-authelia> ✓ Generated file: cert-auth/auth.key
vars-check-authelia> ✓ Generator cert-auth completed
vars-check-authelia> Executing generator: cert-punchcard
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/gqv7phqvmll7dprdmya6102ph64wvj0h-openssl-3.6.3-bin/bin:/nix/store/gph17gb73p6qbrqqjnypfjj5npf0ldyx-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
vars-check-authelia> + cat
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + openssl genrsa -out /output/punchcard.key 4096
building '/nix/store/by1pz3lim6grppzzy7j474bwj2nvnpm2-punchcard-19700101.drv' on 'ssh-ng://builder@build-x86-01.clan.lol'
vars-check-authelia> + openssl req -new -key /output/punchcard.key -subj /CN=punchcard.test.clan -out endpoint.csr
vars-check-authelia> + printf subjectAltName=DNS:punchcard.test.clan
vars-check-authelia> + openssl x509 -req -in endpoint.csr -CA /input/pki-root-ca/ca.crt -CAkey /input/pki-root-ca/ca.key -CAcreateserial -days 365 -sha256 -extfile san.cnf -out /output/punchcard.crt
vars-check-authelia> Certificate request self-signature ok
vars-check-authelia> subject=CN=punchcard.test.clan
vars-check-authelia> + cat /output/punchcard.crt /input/pki-root-ca/ca.crt
vars-check-authelia> ✓ Generated file: cert-punchcard/punchcard.crt
vars-check-authelia> ✓ Generated file: cert-punchcard/punchcard.fullchain.crt
vars-check-authelia> ✓ Generated file: cert-punchcard/punchcard.key
vars-check-authelia> ✓ Generator cert-punchcard completed
vars-check-authelia> Executing generator: state-version
vars-check-authelia> + set -euo pipefail
vars-check-authelia> + PATH=/nix/store/gph17gb73p6qbrqqjnypfjj5npf0ldyx-coreutils-9.11/bin
vars-check-authelia> + [[ ! -d /etc ]]
vars-check-authelia> + mkdir -p /etc
vars-check-authelia> + cat
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> ++ id -u
vars-check-authelia> ++ id -g
vars-check-authelia> + cat
vars-check-authelia> + echo -n 26.05
vars-check-authelia> ✓ Generated file: state-version/version
vars-check-authelia> ✓ Generator state-version completed
vars-check-authelia> ✓ Machine server completed
vars-check-authelia> ✓ All vars checks completed successfully
building '/nix/store/by1pz3lim6grppzzy7j474bwj2nvnpm2-punchcard-19700101.drv'
punchcard-19700101> Running phase: unpackPhase
punchcard-19700101> unpacking source archive /nix/store/kri9pf91gs36fzj416wkimbclcfaqhcw-kcacsi85z0l10lwkcrcs1sm24ff8az3r-source
punchcard-19700101> source root is kcacsi85z0l10lwkcrcs1sm24ff8az3r-source
punchcard-19700101> Running phase: patchPhase
punchcard-19700101> Running phase: updateAutotoolsGnuConfigScriptsPhase
punchcard-19700101> Running phase: configurePhase
punchcard-19700101> Running phase: buildPhase
punchcard-19700101> Building subPackage ./.
punchcard-19700101> buildPhase completed in 34 seconds
punchcard-19700101> Running phase: checkPhase
punchcard-19700101> ok  	punchcard	0.021s
punchcard-19700101> checkPhase completed in 30 seconds
punchcard-19700101> Running phase: installPhase
punchcard-19700101> Running phase: fixupPhase
punchcard-19700101> shrinking RPATHs of ELF executables and libraries in /nix/store/c7a5aiw7hcz434s91s2zqzqwmvbba4m5-punchcard-19700101
punchcard-19700101> shrinking /nix/store/c7a5aiw7hcz434s91s2zqzqwmvbba4m5-punchcard-19700101/bin/punchcard
punchcard-19700101> checking for references to /build/ in /nix/store/c7a5aiw7hcz434s91s2zqzqwmvbba4m5-punchcard-19700101...
punchcard-19700101> patching script interpreter paths in /nix/store/c7a5aiw7hcz434s91s2zqzqwmvbba4m5-punchcard-19700101
punchcard-19700101> stripping (with command strip and flags -S -p) in  /nix/store/c7a5aiw7hcz434s91s2zqzqwmvbba4m5-punchcard-19700101/bin
building '/nix/store/5rg6ywxpq7xp49a2mljl8y266szvz0lg-unit-script-punchcard-punchcard-start.drv'
building '/nix/store/h2h3869cf7vqsdgcaw1fnslzpalsx2da-unit-punchcard-punchcard.service.drv'
building '/nix/store/8q0m443lj0r425j4w9230y470v372ggm-system-units.drv'
building '/nix/store/qks6yvd2dw6gkdisnzfqfrbxk8i2fvda-etc.drv'
building '/nix/store/zgjq4rg41ay1xv5i4jwisfymqp2h26rv-activate.drv'
building '/nix/store/csahpd5z49lgbngvms1z39f8dwd3h1jl-nixos-system-server-test.drv'
nixos-system-server-test> structuredAttrs is enabled
building '/nix/store/qcp4d1bhm7h34flrchqapfw8j85qg6ki-closure-info.drv'
closure-info> structuredAttrs is enabled
building '/nix/store/3z2a50gwp2x9ixvlsbv9n41w0ayl3bcm-nixos-test-driver-authelia.drv'
nixos-test-driver-authelia> Running type check (enable/disable: config.skipTypeCheck)
nixos-test-driver-authelia> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck
nixos-test-driver-authelia> Success: no issues found in 1 source file
building '/nix/store/0hvynil6pjylcjxpp3f9sc181ry7ackd-container-test-run-authelia.drv' on 'ssh-ng://builder@build-x86-01.clan.lol'
building '/nix/store/0hvynil6pjylcjxpp3f9sc181ry7ackd-container-test-run-authelia.drv'
container-test-run-authelia> additionally exposed symbols:
container-test-run-authelia>     server,
container-test-run-authelia>     start_all, machines, driver, Machine, wait_for_signal
container-test-run-authelia> Starting server
container-test-run-authelia> 
container-test-run-authelia> 
container-test-run-authelia> <<< NixOS Stage 2 >>>
container-test-run-authelia> 
container-test-run-authelia> booting system configuration /nix/store/2ij54m0b5fk6n8x2mqifkpvq34ac262d-nixos-system-server-test
container-test-run-authelia> running activation script...
container-test-run-authelia> setting up /etc...
container-test-run-authelia> 2: host0@if3: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
container-test-run-authelia>     link/ether be:aa:dd:39:86:e7 brd ff:ff:ff:ff:ff:ff link-netnsid 0
container-test-run-authelia> setting up age secrets...
container-test-run-authelia> starting systemd...
container-test-run-authelia> systemd 260.2 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE)
container-test-run-authelia> Detected virtualization systemd-nspawn.
container-test-run-authelia> Detected architecture x86-64.
container-test-run-authelia> Detected first boot.
container-test-run-authelia> Initializing machine ID from container UUID.
container-test-run-authelia> Applying preset policy.
container-test-run-authelia> Populated /etc with preset unit settings.
container-test-run-authelia> Queued start job for default target Multi-User System.
container-test-run-authelia> 
container-test-run-authelia> 
container-test-run-authelia> 
container-test-run-authelia> <<< Welcome to NixOS test (x86_64) - console >>>
container-test-run-authelia> + systemd-run /bin/sh -c '/nix/store/gph17gb73p6qbrqqjnypfjj5npf0ldyx-coreutils-9.11/bin/sleep 999999999 && echo a83c5fdc-af51-4a56-9789-9bbeb3f10271'
container-test-run-authelia> Running as unit: run-p503-i83143065.service; invocation ID: 491a73b3afff4a69b283215d910776ee
container-test-run-authelia> To attach to container server run on the same machine that runs the test:
container-test-run-authelia>   sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*a83c5fdc-af51-4a56-9789-9bbeb3f10271') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash 
container-test-run-authelia> 
container-test-run-authelia> To inject external network and continue test, run:
container-test-run-authelia> sudo /nix/store/xqnbm0vgqcq9b1b54c80qj9s0qhbwa08-python3-3.13.15/bin/python3.13 /nix/store/kyds13d9fxdrlcwyd1al9cjkwy8mplac-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py a83c5fdc-af51-4a56-9789-9bbeb3f10271
container-test-run-authelia> + systemctl --no-pager show authelia-authelia.service
container-test-run-authelia> server: waiting for success: curl -sf http://127.0.0.1:9091/api/health
container-test-run-authelia> + curl -sf http://127.0.0.1:9091/api/health
container-test-run-authelia> (finished: waiting for success: curl -sf http://127.0.0.1:9091/api/health, in 0.01 seconds)
container-test-run-authelia> + test -f /run/authelia-authelia/users.json
container-test-run-authelia> + cat /run/authelia-authelia/users.json
container-test-run-authelia> + test -f /run/authelia-authelia/oidc.json
container-test-run-authelia> + cat /run/authelia-authelia/oidc.json
container-test-run-authelia> + systemctl --no-pager show caddy.service
container-test-run-authelia> server: waiting for success: curl -sf https://auth.test.clan/api/health
container-test-run-authelia> + curl -sf https://auth.test.clan/api/health
container-test-run-authelia> (finished: waiting for success: curl -sf https://auth.test.clan/api/health, in 0.02 seconds)
container-test-run-authelia> server: waiting for success: curl -sf https://auth.test.clan/.well-known/openid-configuration
container-test-run-authelia> + curl -sf https://auth.test.clan/.well-known/openid-configuration
container-test-run-authelia> (finished: waiting for success: curl -sf https://auth.test.clan/.well-known/openid-configuration, in 0.02 seconds)
container-test-run-authelia> + systemctl --no-pager show punchcard-punchcard.service
container-test-run-authelia> server: waiting for success: curl -sf https://punchcard.test.clan/login
container-test-run-authelia> + curl -sf https://punchcard.test.clan/login
container-test-run-authelia> (finished: waiting for success: curl -sf https://punchcard.test.clan/login, in 0.02 seconds)
container-test-run-authelia> + cat /run/secrets/authelia-user-bob/password
container-test-run-authelia> + curl -s -o /dev/null -w '%{redirect_url}' -c /tmp/pc-cookies https://punchcard.test.clan/login/start
container-test-run-authelia> + curl -sf -X POST https://auth.test.clan/api/firstfactor -H 'Content-Type: application/json' -c /tmp/auth-cookies -d '{"username": "bob", "password": "pretext-proven-gesture-cornfield-audibly-shriek-imply", "keepMeLoggedIn": false}'
container-test-run-authelia> + curl -s -o /dev/null -w '%{redirect_url}' -b /tmp/auth-cookies -c /tmp/auth-cookies 'https://auth.test.clan/api/oidc/authorization?client_id=punchcard-punchcard&code_challenge=mR2ZbZsLcDuY-NUA3RFL1TwQsRQux5nAE1HpX4FV4EU&code_challenge_method=S256&redirect_uri=https%3A%2F%2Fpunchcard.test.clan%2Fcallback&response_type=code&scope=openid+profile+email&state=f09h6svVaqCndVD49fvX1ykrSsCcTTEQ0sPq4WXOLoI%3D'
container-test-run-authelia> + curl -s -o /dev/null -w '%{http_code}' -c /tmp/pc-cookies -b /tmp/pc-cookies 'https://punchcard.test.clan/callback?code=authelia_ac_vkXxuQpAZPie0IupWpp-8tcQg6VwS-6KMKmywAJxrvc.FthRMpGv8MJzCDDoulenC2k9IMP3eStnnsHK4LSV7NE&iss=https%3A%2F%2Fauth.test.clan&scope=openid+profile+email&state=f09h6svVaqCndVD49fvX1ykrSsCcTTEQ0sPq4WXOLoI%3D'
container-test-run-authelia> + curl -s -L -o /dev/null -w '%{http_code}' -b /tmp/pc-cookies -c /tmp/pc-cookies https://punchcard.test.clan/
container-test-run-authelia> 

post-build step Upload to niks3: ok
time=2026-08-22T05:08:17.816Z level=INFO msg="Uploading 0 paths to niks3.clan.lol (1 already cached)"
time=2026-08-22T05:08:17.993Z level=INFO msg="Uploading 1 narinfos"
time=2026-08-22T05:08:18.623Z level=INFO msg="Upload complete. (857ms)"