container-test-run-authelia
checks.aarch64-linux.authelia
· build #49
· raw
1Machine state will be reset. To keep it, pass --keep-machine-state2start all VLans3(finished: start all VLans, in 0.00 seconds)45Test will time out and terminate in 3600.0 seconds6run the VM test script7additionally exposed symbols:8 server,9 vlan1,10 start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh11start all VMs12server: systemd-nspawn running (pid 51)13server: Waiting for journal at /build/vm-state-server/var/log/journal...14(finished: start all VMs, in 0.00 seconds)15??? Warning (UserWarning): wait_for_unit(): passing a bare int/float as a duration is deprecated. Use datetime.timedelta instead.16 File "/nix/store/258dmf26bj4wx2idmzbn2vz4hzlmk8bh-nixos-test-driver-1.1/lib/python3.14/site-packages/test_driver/duration.py", line 3917server: waiting for unit authelia-authelia.service18nixos-nspawn(server): TAP vde-tap1 not found; container will be isolated from VDE19nixos-nspawn(server): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.20Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.21░ Spawning container server on /build/vm-state-server.22server # No journal files were found.23server # No journal boot entry found for the specified boot (+0).24server # [6519794.947312] server systemd-journald[186]: Journal started25server # [6519794.947373] server systemd-journald[186]: Runtime Journal (/run/log/journal/3f49af853fe74671985fd4c439fb18ab) is 8M, max 2.5G, 2.4G free.26server # [6519794.950065] server systemd[1]: Starting Flush Journal to Persistent Storage...27server # [6519794.950830] server systemd[1]: Starting Network Name Resolution...28server # [6519794.951508] server systemd[1]: Starting Create Static Device Nodes in /dev...29server # [6519794.960488] server systemd-journald[186]: Time spent on flushing to /var/log/journal/3f49af853fe74671985fd4c439fb18ab is 1.636ms for 5 entries.30server # [6519794.960488] server systemd-journald[186]: System Journal (/var/log/journal/3f49af853fe74671985fd4c439fb18ab) is 8M, max 4G, 3.9G free.31server # [6519794.966721] server systemd[1]: Finished Create Static Device Nodes in /dev.32server # [6519794.966907] server systemd[1]: Reached target Preparation for Local File Systems.33server # [6519794.966984] server systemd[1]: Reached target Local File Systems.34server # [6519794.967683] server systemd[1]: Listening on Boot Loader Control Service Socket.35server # [6519794.967721] server systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container36server # [6519794.968532] server systemd[1]: Starting Save Transient machine-id to Disk...37server # [6519794.968564] server systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys38server # [6519794.974787] server systemd[1]: Finished Flush Journal to Persistent Storage.39server # [6519794.976121] server systemd[1]: Starting Create System Files and Directories...40server # [6519794.993979] server systemd-tmpfiles[228]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted41server # [6519794.994174] server systemd-tmpfiles[228]: fchmod() of /var/log/journal failed: Operation not permitted42server # [6519794.994314] server systemd-tmpfiles[228]: fchmod() of /var/log/journal/3f49af853fe74671985fd4c439fb18ab failed: Operation not permitted43server # [6519794.994431] server systemd[1]: Finished Save Transient machine-id to Disk.44server # [6519794.994523] server systemd-tmpfiles[228]: fchmod() of /run/log/journal failed: Operation not permitted45server # [6519794.995808] server systemd[1]: Finished Create System Files and Directories.46server # [6519794.996784] server systemd[1]: Starting Rebuild Journal Catalog...47server # [6519794.997552] server systemd[1]: Starting Record System Boot/Shutdown in UTMP...48server # [6519795.011083] server systemd[1]: Finished Record System Boot/Shutdown in UTMP.49server # [6519795.020184] server systemd[1]: Finished Rebuild Journal Catalog.50server # [6519795.021233] server systemd[1]: Starting Update is Completed...51server # [6519795.033484] server systemd[1]: Finished Update is Completed.52server # [6519795.091635] server systemd[1]: Finished Firewall.53server # [6519795.091733] server systemd[1]: Reached target Preparation for Network.54server # [6519795.091946] server systemd[1]: Listening on Network Management Resolve Hook Socket.55server # [6519795.092940] server systemd[1]: Starting Network Management...56server # [6519795.473699] server systemd-networkd[300]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted57server # [6519795.473785] server systemd-networkd[300]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted58server # [6519795.479992] server systemd-networkd[300]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.59server # [6519795.480166] server systemd-networkd[300]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.60server # [6519795.480307] server systemd-networkd[300]: lo: Link UP61server # [6519795.480312] server systemd-networkd[300]: lo: Gained carrier62server # [6519795.480475] server systemd-networkd[300]: eth1: Configuring with /etc/systemd/network/40-eth1.network.63server # [6519795.480924] server systemd-networkd[300]: eth1: Link UP64server # [6519795.481223] server systemd[1]: Started Network Management.65server # [6519795.482723] server systemd-networkd[300]: eth1: Gained carrier66server # [6519795.482762] server systemd[1]: Starting Enable Persistent Storage in systemd-networkd...67server # [6519795.522331] server systemd[1]: Finished Enable Persistent Storage in systemd-networkd.68server # [6519795.526788] server systemd-resolved[207]: Positive Trust Anchors:69server # [6519795.526800] server systemd-resolved[207]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d70server # [6519795.526803] server systemd-resolved[207]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b1671server # [6519795.526837] server systemd-resolved[207]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test72server # [6519795.548654] server systemd-resolved[207]: Using system hostname 'server'.73server # [6519795.550031] server systemd[1]: Started Network Name Resolution.74server # [6519795.550152] server systemd[1]: Reached target Network.75server # [6519795.550256] server systemd[1]: Reached target Network is Online.76server # [6519795.550333] server systemd[1]: Reached target System Initialization.77server # [6519795.550425] server systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container78server # [6519795.550476] server systemd[1]: Started Daily Cleanup of Temporary Directories.79server # [6519795.550513] server systemd[1]: Reached target Timer Units.80server # [6519795.550727] server systemd[1]: Listening on D-Bus System Message Bus Socket.81server # [6519795.550955] server systemd[1]: Listening on Nix Daemon Socket.82server # [6519795.551172] server systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.83server # [6519795.551224] server systemd[1]: Reached target Socket Units.84server # [6519795.551311] server systemd[1]: Reached target Basic System.85server # [6519795.553564] server systemd[1]: Starting Authelia authentication and authorization server...86server # [6519795.555035] server systemd[1]: Starting Caddy...87server # [6519795.556369] server systemd[1]: Starting Import lastlog data into lastlog2 database...88server # [6519795.557765] server systemd[1]: Starting Name Service Cache Daemon (nsncd)...89server # [6519795.584663] server systemd[1]: Starting D-Bus System Message Bus...90server # [6519795.602158] server systemd[1]: Finished Import lastlog data into lastlog2 database.91server # [6519795.699854] server systemd[1]: Started Name Service Cache Daemon (nsncd).92server # [6519795.700136] server nsncd[308]: Aug 23 10:27:01.753 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"93server # [6519795.699962] server systemd[1]: Reached target Host and Network Name Lookups.94server # [6519795.700097] server systemd[1]: Reached target User and Group Name Lookups.95server # [6519795.702073] server systemd[1]: Starting User Login Management...96server # [6519795.703437] server systemd[1]: Starting Permit User Sessions...97server # [6519795.739724] server systemd[1]: Finished Permit User Sessions.98server # [6519795.741277] server systemd[1]: Started Console Getty.99server # [6519795.741353] server systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0100server # [6519795.741390] server systemd[1]: Reached target Login Prompts.101server # [6519795.761296] server dbus-broker-launch[309]: Looking up NSS user entry for 'systemd-timesync'...102server # [6519795.762507] server dbus-broker-launch[309]: NSS returned no entry for 'systemd-timesync'103server # [6519795.762507] server dbus-broker-launch[309]: Invalid user-name in /nix/store/94iqbg9ygs7bb52n39xy1ffhd8jl63gm-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"104server # [6519795.762955] server systemd[1]: Started D-Bus System Message Bus.105server # [6519795.771870] server dbus-broker-launch[309]: Ready106server # [6519795.905793] server systemd[1]: Started Caddy.107server # [6519795.937886] server systemd[1]: etc-machine\x2did.mount: Deactivated successfully.108server # [6519796.150582] server systemd-logind[328]: New seat seat0.109server # [6519796.150791] server systemd[1]: Started User Login Management.110server # [6519796.151907] server systemd[1]: Starting linger-users.service...111server # [6519796.215086] server systemd[1]: linger-users.service: Deactivated successfully.112server # [6519796.215456] server systemd[1]: Finished linger-users.service.113server # [6519796.722601] server authelia[372]: Configuration parsed and loaded successfully without errors.114server # [6519796.960296] server systemd-networkd[300]: eth1: Gained IPv6LL115server: (finished: waiting for unit authelia-authelia.service, in 3.66 seconds)116??? Warning (UserWarning): wait_until_succeeds(): passing a bare int/float as a duration is deprecated. Use datetime.timedelta instead.117 File "/nix/store/258dmf26bj4wx2idmzbn2vz4hzlmk8bh-nixos-test-driver-1.1/lib/python3.14/site-packages/test_driver/duration.py", line 39118server: waiting for success: curl -sf http://127.0.0.1:9091/api/health119??? Warning (UserWarning): execute(): passing a bare int/float as a duration is deprecated. Use datetime.timedelta instead.120 File "/nix/store/258dmf26bj4wx2idmzbn2vz4hzlmk8bh-nixos-test-driver-1.1/lib/python3.14/site-packages/test_driver/duration.py", line 39121server: (finished: waiting for success: curl -sf http://127.0.0.1:9091/api/health, in 0.02 seconds)122server: must succeed: test -f /run/authelia-authelia/users.json123server: (finished: must succeed: test -f /run/authelia-authelia/users.json, in 0.01 seconds)124server: must succeed: cat /run/authelia-authelia/users.json125server: (finished: must succeed: cat /run/authelia-authelia/users.json, in 0.01 seconds)126server: must succeed: test -f /run/authelia-authelia/oidc.json127server: (finished: must succeed: test -f /run/authelia-authelia/oidc.json, in 0.01 seconds)128server: must succeed: cat /run/authelia-authelia/oidc.json129server: (finished: must succeed: cat /run/authelia-authelia/oidc.json, in 0.01 seconds)130server: waiting for unit caddy.service131server: (finished: waiting for unit caddy.service, in 0.02 seconds)132server: waiting for success: curl -sf https://auth.test.clan/api/health133server # [6519797.213533] server systemd[1]: Started Authelia authentication and authorization server.134server # [6519797.214722] server systemd[1]: Starting Punchcard time tracking (punchcard)...135server # [6519797.262891] server authelia[406]: time="2026-08-23T10:27:03Z" level=info msg="Authelia v4.39.20-nixpkgs is starting"136server # [6519797.263432] server authelia[406]: time="2026-08-23T10:27:03Z" level=info msg="Log severity set to info"137server # [6519797.289633] server authelia[406]: time="2026-08-23T10:27:03Z" level=info msg="Storage schema is being checked for updates"138server # [6519797.293117] server authelia[406]: time="2026-08-23T10:27:03Z" level=info msg="Storage schema migration from 0 to 24 is being attempted"139server # [6519797.341415] server systemd[1]: Started Punchcard time tracking (punchcard).140server # [6519797.342079] server systemd[1]: Reached target Multi-User System.141server # [6519797.342635] server systemd[1]: Startup finished in 2.800s.142server # [6519797.349812] server punchcard-punchcard-start[410]: 2026/08/23 10:27:03 Warning: .env file not found, using environment variables: open .env: no such file or directory143server # [6519797.361517] server punchcard-punchcard-start[410]: 2026/08/23 10:27:03 OIDC authentication enabled with issuer: https://auth.test.clan144server # [6519797.361517] server punchcard-punchcard-start[410]: 2026/08/23 10:27:03 Redirect URL: https://punchcard.test.clan/callback145server # [6519797.362060] server punchcard-punchcard-start[410]: 2026/08/23 10:27:03 Server starting on :8099146server # [6519797.362674] server authelia[406]: time="2026-08-23T10:27:03Z" level=info msg="Storage schema migration from 0 to 24 is complete"147server # [6519797.366388] server systemd-resolved[207]: Switching to fallback DNS server 1.1.1.1#one.one.one.one.148server # [6519797.368649] server authelia[406]: time="2026-08-23T10:27:03Z" level=warning msg="Could not determine the clock offset due to an error" error="error occurred during dial: dial udp: lookup time.cloudflare.com: no such host"149server # [6519797.385580] server authelia[406]: time="2026-08-23T10:27:03Z" level=info msg="Startup complete"150server # [6519797.385734] server authelia[406]: time="2026-08-23T10:27:03Z" level=info msg="Listening for non-TLS connections on '127.0.0.1:9091' path '/'" server=main service=server151server: (finished: waiting for success: curl -sf https://auth.test.clan/api/health, in 0.10 seconds)152server: waiting for success: curl -sf https://auth.test.clan/.well-known/openid-configuration153server: (finished: waiting for success: curl -sf https://auth.test.clan/.well-known/openid-configuration, in 0.10 seconds)154??? Warning (UserWarning): wait_for_unit(): passing a bare int/float as a duration is deprecated. Use datetime.timedelta instead.155 File "/nix/store/258dmf26bj4wx2idmzbn2vz4hzlmk8bh-nixos-test-driver-1.1/lib/python3.14/site-packages/test_driver/duration.py", line 39156server: waiting for unit punchcard-punchcard.service157server: (finished: waiting for unit punchcard-punchcard.service, in 0.02 seconds)158server: waiting for success: curl -sf https://punchcard.test.clan/login159server: (finished: waiting for success: curl -sf https://punchcard.test.clan/login, in 0.10 seconds)160server: must succeed: cat /run/secrets/per-machine/server/authelia-user-bob/password161server: (finished: must succeed: cat /run/secrets/per-machine/server/authelia-user-bob/password, in 0.01 seconds)162server: must succeed: curl -s -o /dev/null -w '%{redirect_url}' -c /tmp/pc-cookies https://punchcard.test.clan/login/start163server: (finished: must succeed: curl -s -o /dev/null -w '%{redirect_url}' -c /tmp/pc-cookies https://punchcard.test.clan/login/start, in 0.21 seconds)164server: must succeed: curl -sf -X POST https://auth.test.clan/api/firstfactor -H 'Content-Type: application/json' -c /tmp/auth-cookies -d '{"username": "bob", "password": "kilowatt-acuteness-transpose-pummel-barista-tipper-shaded", "keepMeLoggedIn": false}'165server: (finished: must succeed: curl -sf -X POST https://auth.test.clan/api/firstfactor -H 'Content-Type: application/json' -c /tmp/auth-cookies -d '{"username": "bob", "password": "kilowatt-acuteness-transpose-pummel-barista-tipper-shaded", "keepMeLoggedIn": false}', in 1.15 seconds)166server: must succeed: curl -s -o /dev/null -w '%{redirect_url}' -b /tmp/auth-cookies -c /tmp/auth-cookies 'https://auth.test.clan/api/oidc/authorization?client_id=punchcard-punchcard&code_challenge=gbYPHLQLeOpEoNgjLcf6vqDFLTJ73G5BU-VuBukzfXw&code_challenge_method=S256&redirect_uri=https%3A%2F%2Fpunchcard.test.clan%2Fcallback&response_type=code&scope=openid+profile+email&state=cMsOcwj2MvgUddudq4HLIdemrI1cjEwFmBbf_Uf8yGA%3D'167server: (finished: must succeed: curl -s -o /dev/null -w '%{redirect_url}' -b /tmp/auth-cookies -c /tmp/auth-cookies 'https://auth.test.clan/api/oidc/authorization?client_id=punchcard-punchcard&code_challenge=gbYPHLQLeOpEoNgjLcf6vqDFLTJ73G5BU-VuBukzfXw&code_challenge_method=S256&redirect_uri=https%3A%2F%2Fpunchcard.test.clan%2Fcallback&response_type=code&scope=openid+profile+email&state=cMsOcwj2MvgUddudq4HLIdemrI1cjEwFmBbf_Uf8yGA%3D', in 0.12 seconds)168server: must succeed: curl -s -o /dev/null -w '%{http_code}' -c /tmp/pc-cookies -b /tmp/pc-cookies 'https://punchcard.test.clan/callback?code=authelia_ac_U4MT5nMsoTDq4FI3ukFjxO9fC2wLM5bVMZPzUWTuH8M.bKFqXd3ZExJhP7fNKAE5UNunAshH3DhJwlqJN0nB8Xc&iss=https%3A%2F%2Fauth.test.clan&scope=openid+profile+email&state=cMsOcwj2MvgUddudq4HLIdemrI1cjEwFmBbf_Uf8yGA%3D'169server: (finished: must succeed: curl -s -o /dev/null -w '%{http_code}' -c /tmp/pc-cookies -b /tmp/pc-cookies 'https://punchcard.test.clan/callback?code=authelia_ac_U4MT5nMsoTDq4FI3ukFjxO9fC2wLM5bVMZPzUWTuH8M.bKFqXd3ZExJhP7fNKAE5UNunAshH3DhJwlqJN0nB8Xc&iss=https%3A%2F%2Fauth.test.clan&scope=openid+profile+email&state=cMsOcwj2MvgUddudq4HLIdemrI1cjEwFmBbf_Uf8yGA%3D', in 0.32 seconds)170server: must succeed: curl -s -L -o /dev/null -w '%{http_code}' -b /tmp/pc-cookies -c /tmp/pc-cookies https://punchcard.test.clan/171server: (finished: must succeed: curl -s -L -o /dev/null -w '%{http_code}' -b /tmp/pc-cookies -c /tmp/pc-cookies https://punchcard.test.clan/, in 0.11 seconds)172(finished: run the VM test script, in 5.95 seconds)173test script finished in 5.97s174cleanup175kill NspawnMachine (pid 51)176server # [6519799.485539] server authelia[406]: time="2026-08-23T10:27:05Z" level=error msg="Access Request failed with error: Client authentication failed (e.g., unknown client, no client authentication included, or unsupported authentication method). The request was determined to be using 'token_endpoint_auth_method' method 'client_secret_basic', however the OAuth 2.0 client registration does not allow this method. The registered client with id 'punchcard-punchcard' is configured to only support 'token_endpoint_auth_method' method 'client_secret_post'. Either the Authorization Server client registration will need to have the 'token_endpoint_auth_method' updated to 'client_secret_basic' or the Relying Party will need to be configured to use 'client_secret_post'." method=POST path=/api/oidc/token remote_ip="::1"177server # [6519799.709586] server punchcard-punchcard-start[410]: 2026/08/23 10:27:05 User () logged in successfully178(finished: cleanup, in 0.16 seconds)179Container server terminated by signal KILL.