these 48 derivations will be built:
  /nix/store/2i0dbdwl0ccb2ibr7axcjydk952kbcvp-system-path.drv
  /nix/store/wdvpqwyxiibfx4hjyivwbm5k87n7xc1x-dbus-1.drv
  /nix/store/0mzl3j00smc7nskrkd6zg9jhy68pcv43-X-Restart-Triggers-dbus-broker.drv
  /nix/store/wxf68fswhyv38kz784ff441ajr4zbqi0-authelia-oidc-input.json.drv
  /nix/store/0pslkmwsxp6ars0160jbymvpnccmgjh1-unit-script-authelia-authelia-pre-start.drv
  /nix/store/d2v34b7g3fn897bz4qn0zrwk3cvxylj6-punchcard-19700101.drv
  /nix/store/2xirgwxwdnkfdlgg5vbgzhlzy6fy0hqk-unit-script-punchcard-punchcard-start.drv
  /nix/store/11z2fb06dhbg1vxila8n9vzhy2c6c5s6-unit-punchcard-punchcard.service.drv
  /nix/store/7cfv2w5j8lb2351m77d10id4xwp7pghw-Caddyfile.drv
  /nix/store/42z8nalw4r5cx3hyxqdaaqzvwfpf03dq-Caddyfile-formatted.drv
  /nix/store/1dpwrn06l4r21rd85by8mp69hm6rz6i6-X-Reload-Triggers-caddy.drv
  /nix/store/2978zl6dgp2ilncs6bhnfzs8nx5wjqh7-generator-authelia-oidc-punchcard-punchcard.drv
  /nix/store/2wgp9yd954s5aai17yz0q945w399h2wx-system-shutdown.drv
  /nix/store/5wa7aqd3wdv3hag2mswqkf0wsnbakg5x-tmpfiles.d.drv
  /nix/store/88835gkd6s862fhanzqyhcnsnw2cqf0s-nix.conf.drv
  /nix/store/44wrj9zi1386jb87igfr52j8yk4rkara-unit-caddy.service.drv
  /nix/store/h1jzansk8v51rq4v3l3jm87pbnq5mx34-unit-nix-optimise.service.drv
  /nix/store/imhvnxjx6h2f74hgbg0q40fwyr52svaj-unit-dbus-broker.service.drv
  /nix/store/slwsz9yvi017bbi1l0r9xbjhdg0lhx5a-unit-systemd-sysctl.service.drv
  /nix/store/bxzr69zpnbik9sqcxx9fan98h9k6wd63-unit-script-nix-gc-start.drv
  /nix/store/v4ab2nsda390cnc9fmd3pylx0vb433z4-unit-nix-gc.service.drv
  /nix/store/pngz882ba1h98hdrcxwgzbxzyw5840zy-unit-script-register-nix-paths-start.drv
  /nix/store/v6qah35f75b8812k2yvq8rlcz8cmi10q-unit-register-nix-paths.service.drv
  /nix/store/wf7gablj40fbiyr0abp9wis13dam27g6-X-Restart-Triggers-systemd-tmpfiles-resetup.drv
  /nix/store/vpz0l2k94i5sbb65h4wyik4alfr4m5aa-unit-systemd-tmpfiles-resetup.service.drv
  /nix/store/wdz3v51wdkmpcrj251nndwdwshaj2b2n-unit-authelia-authelia.service.drv
  /nix/store/p2pmzv5pba9gd277h9z999wlai45yr1y-nss-cacert-3.126.drv
  /nix/store/qyzns9qw50xnkszmjdlmypswac9wa1r4-X-Restart-Triggers-nix-daemon.drv
  /nix/store/zc7li3ca8sgp2l70v0zdahc3b7qgfhlr-unit-nix-daemon.service.drv
  /nix/store/amk45rng7dgk6jqzjcm7p26vdnqrz046-system-units.drv
  /nix/store/yvrgyd8shwbg8dwzklrh2ssmn5cmsbqk-string-hosts.drv
  /nix/store/dlv3s24ksnqz0xhflqcrzycs0lmxiay6-hosts.drv
  /nix/store/nvzdp4xa4gji0v7b58rqrkgv6qp1hazv-generator-authelia-user-alice.drv
  /nix/store/ji13nmjy45nlcf7ipndkg4sl2pngp8ha-vars-check-punchcard.drv
  /nix/store/kf5xhprf2sda4zra1yvw2sp44p3wv58c-user-generators.drv
  /nix/store/all4i50r0wv96z5wkpnx51p3bynzdnz8-unit-dbus-broker.service.drv
  /nix/store/qivbqcfpzfwnzgrwwlkx38bc1szf6ziw-user-units.drv
  /nix/store/v8a3nw26ncn8bpf6spa2k225jqxff1fi-system-generators.drv
  /nix/store/3dz4hfk410fld6khj07613pnqsd7l7g8-etc.drv
  /nix/store/k0gc74qx8469hazyv32i9yypwvqf5s36-decrypt-age-secrets.drv
  /nix/store/5m31pl94q2rmd19frvwz5bpqq04ph57z-activate.drv
  /nix/store/i5s21q50asm30ldx3pwr2q9lvg99f6jm-dry-activate.drv
  /nix/store/aal48nqri1fs3ki1xby9v8yxabp38iwx-nixos-system-server-test.drv
  /nix/store/yf2kvifkr90jm4pbrx8i2a2h09b9zlhq-python3.13-nixos-test-lib-1.0.0.drv
  /nix/store/f3i50g6x09p9kgy9900i2f5lxf8d7ysr-test-driver-0.0.1.drv
  /nix/store/zkbf92bh4ypz38fxqnks0p0axcny86yn-closure-info.drv
  /nix/store/dmfcl3vhdps6k5y9imfpvhlypnfqs08m-nixos-test-driver-punchcard.drv
  /nix/store/acm7x974hns7rympgafx3x8lrqvfywdf-container-test-run-punchcard.drv
these 21 paths will be fetched (15.2 MiB download, 54.4 MiB unpacked):
  /nix/store/bh4sw9gvjnmskn3r5xgii9y0q4hx9j1x-authelia-4.39.20
  /nix/store/kk5yhf0gia1b85zaxk3gc1fn7maavhw2-nix-2.34.8
  /nix/store/m7ak5jv5mcb2nj9qqszjqyhz6pxpcfds-nix-2.34.8
  /nix/store/yvynvhcv8flx7wikbmn2jg1xizqcsghl-nix-2.34.8-dev
  /nix/store/4sb97qz6024qva6pf9z2j2yfb3cl29zi-nix-cmd-2.34.8
  /nix/store/qvphxafca2b3ais8zqbarrn5fq08i7pn-nix-cmd-2.34.8-dev
  /nix/store/igr6hrablg9khkhc5qcrq38by1jyscg3-nix-expr-2.34.8-dev
  /nix/store/jdbiqr64nm1qwps1l1991apxzy1qfn5h-nix-expr-c-2.34.8
  /nix/store/gkcddx18gcz23ijmif2a9wp90blvc0xy-nix-expr-c-2.34.8-dev
  /nix/store/kb797c21cdrwns5bwav187ynf9wsbagh-nix-fetchers-2.34.8-dev
  /nix/store/915w6iqqm8dz6d3a74rjjcp3cdwz89na-nix-fetchers-c-2.34.8
  /nix/store/ffdrnihlnkrakcbdss3sb44yj0cp0861-nix-fetchers-c-2.34.8-dev
  /nix/store/rx618hbjszsx2mlv9d8ax0gv7c743szd-nix-flake-2.34.8
  /nix/store/m4v5h1r3izym8pp60qvp8vipdlas7lyx-nix-flake-2.34.8-dev
  /nix/store/lfxsik642hmyxxbc417nz7mpaah2gj06-nix-flake-c-2.34.8
  /nix/store/rlfjpk0nq4byfcp09f8s893kjsbzzswz-nix-flake-c-2.34.8-dev
  /nix/store/a54i6nmgrc9rwqwkzwq1z8j8avskc6ql-nix-main-2.34.8-dev
  /nix/store/viswb3pvvs5ywlz6jh7yy0c7h0wgnyb0-nix-main-c-2.34.8
  /nix/store/wzsm0ima0njfp672jkjgk6nyhkzjrrpr-nix-main-c-2.34.8-dev
  /nix/store/3a4wsj9p8dzhnc5f9wgsnrxql6rq1s0m-nixos-option
  /nix/store/649q43m2wrhai4gkid1f5njmng2pzl84-nixos-rebuild-ng-26.05
building '/nix/store/slwsz9yvi017bbi1l0r9xbjhdg0lhx5a-unit-systemd-sysctl.service.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/wxf68fswhyv38kz784ff441ajr4zbqi0-authelia-oidc-input.json.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/p2pmzv5pba9gd277h9z999wlai45yr1y-nss-cacert-3.126.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/d2v34b7g3fn897bz4qn0zrwk3cvxylj6-punchcard-19700101.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/7cfv2w5j8lb2351m77d10id4xwp7pghw-Caddyfile.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/k0gc74qx8469hazyv32i9yypwvqf5s36-decrypt-age-secrets.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/slwsz9yvi017bbi1l0r9xbjhdg0lhx5a-unit-systemd-sysctl.service.drv'
building '/nix/store/5wa7aqd3wdv3hag2mswqkf0wsnbakg5x-tmpfiles.d.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/h1jzansk8v51rq4v3l3jm87pbnq5mx34-unit-nix-optimise.service.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/bxzr69zpnbik9sqcxx9fan98h9k6wd63-unit-script-nix-gc-start.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/2i0dbdwl0ccb2ibr7axcjydk952kbcvp-system-path.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/wxf68fswhyv38kz784ff441ajr4zbqi0-authelia-oidc-input.json.drv'
building '/nix/store/0pslkmwsxp6ars0160jbymvpnccmgjh1-unit-script-authelia-authelia-pre-start.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/p2pmzv5pba9gd277h9z999wlai45yr1y-nss-cacert-3.126.drv'
nss-cacert-3.126> Running phase: unpackPhase
nss-cacert-3.126> Running phase: patchPhase
nss-cacert-3.126> Running phase: updateAutotoolsGnuConfigScriptsPhase
nss-cacert-3.126> Running phase: configurePhase
nss-cacert-3.126> no configure script, doing nothing
nss-cacert-3.126> Running phase: buildPhase
nss-cacert-3.126> Running phase: installPhase
nss-cacert-3.126> Running phase: fixupPhase
nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/sidsd049dwnjvr7kgxja9jgy7dmicp65-nss-cacert-3.126
nss-cacert-3.126> checking for references to /build/ in /nix/store/sidsd049dwnjvr7kgxja9jgy7dmicp65-nss-cacert-3.126...
nss-cacert-3.126> patching script interpreter paths in /nix/store/sidsd049dwnjvr7kgxja9jgy7dmicp65-nss-cacert-3.126
nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/zw0xwxad2nc0nj09nf1k16x0723g8bvp-nss-cacert-3.126-unbundled
nss-cacert-3.126> checking for references to /build/ in /nix/store/zw0xwxad2nc0nj09nf1k16x0723g8bvp-nss-cacert-3.126-unbundled...
nss-cacert-3.126> patching script interpreter paths in /nix/store/zw0xwxad2nc0nj09nf1k16x0723g8bvp-nss-cacert-3.126-unbundled
nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/hyhm1c33cnrwd1s7pxyyxdfknvlv0i34-nss-cacert-3.126-p11kit
nss-cacert-3.126> checking for references to /build/ in /nix/store/hyhm1c33cnrwd1s7pxyyxdfknvlv0i34-nss-cacert-3.126-p11kit...
nss-cacert-3.126> patching script interpreter paths in /nix/store/hyhm1c33cnrwd1s7pxyyxdfknvlv0i34-nss-cacert-3.126-p11kit
nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/0hz6p6ygm0g617q14m1z40kmcfkgmm50-nss-cacert-3.126-hashed
nss-cacert-3.126> checking for references to /build/ in /nix/store/0hz6p6ygm0g617q14m1z40kmcfkgmm50-nss-cacert-3.126-hashed...
nss-cacert-3.126> patching script interpreter paths in /nix/store/0hz6p6ygm0g617q14m1z40kmcfkgmm50-nss-cacert-3.126-hashed
building '/nix/store/d2v34b7g3fn897bz4qn0zrwk3cvxylj6-punchcard-19700101.drv'
punchcard-19700101> Running phase: unpackPhase
punchcard-19700101> unpacking source archive /nix/store/kri9pf91gs36fzj416wkimbclcfaqhcw-kcacsi85z0l10lwkcrcs1sm24ff8az3r-source
punchcard-19700101> source root is kcacsi85z0l10lwkcrcs1sm24ff8az3r-source
punchcard-19700101> Running phase: patchPhase
punchcard-19700101> Running phase: updateAutotoolsGnuConfigScriptsPhase
punchcard-19700101> Running phase: configurePhase
punchcard-19700101> Running phase: buildPhase
punchcard-19700101> Building subPackage ./.
building '/nix/store/7cfv2w5j8lb2351m77d10id4xwp7pghw-Caddyfile.drv'
building '/nix/store/42z8nalw4r5cx3hyxqdaaqzvwfpf03dq-Caddyfile-formatted.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/5wa7aqd3wdv3hag2mswqkf0wsnbakg5x-tmpfiles.d.drv'
building '/nix/store/wf7gablj40fbiyr0abp9wis13dam27g6-X-Restart-Triggers-systemd-tmpfiles-resetup.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/ji13nmjy45nlcf7ipndkg4sl2pngp8ha-vars-check-punchcard.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/bxzr69zpnbik9sqcxx9fan98h9k6wd63-unit-script-nix-gc-start.drv'
building '/nix/store/h1jzansk8v51rq4v3l3jm87pbnq5mx34-unit-nix-optimise.service.drv'
building '/nix/store/v4ab2nsda390cnc9fmd3pylx0vb433z4-unit-nix-gc.service.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/42z8nalw4r5cx3hyxqdaaqzvwfpf03dq-Caddyfile-formatted.drv'
building '/nix/store/2i0dbdwl0ccb2ibr7axcjydk952kbcvp-system-path.drv'
system-path> structuredAttrs is enabled
system-path> created 1809 symlinks in user environment
building '/nix/store/0pslkmwsxp6ars0160jbymvpnccmgjh1-unit-script-authelia-authelia-pre-start.drv'
building '/nix/store/1dpwrn06l4r21rd85by8mp69hm6rz6i6-X-Reload-Triggers-caddy.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/wdz3v51wdkmpcrj251nndwdwshaj2b2n-unit-authelia-authelia.service.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/wf7gablj40fbiyr0abp9wis13dam27g6-X-Restart-Triggers-systemd-tmpfiles-resetup.drv'
building '/nix/store/k0gc74qx8469hazyv32i9yypwvqf5s36-decrypt-age-secrets.drv'
building '/nix/store/vpz0l2k94i5sbb65h4wyik4alfr4m5aa-unit-systemd-tmpfiles-resetup.service.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/i5s21q50asm30ldx3pwr2q9lvg99f6jm-dry-activate.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/ji13nmjy45nlcf7ipndkg4sl2pngp8ha-vars-check-punchcard.drv'
vars-check-punchcard> Running vars check using Nix-based executor...
vars-check-punchcard> Executing shared generators...
vars-check-punchcard> Executing shared generator: authelia-oidc-punchcard-punchcard
vars-check-punchcard> + set -euo pipefail
vars-check-punchcard> + PATH=/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin:/nix/store/v49dnvwkxyzkpxy5sqclncf54blvjs43-openssl-3.6.3-bin/bin:/nix/store/bh4sw9gvjnmskn3r5xgii9y0q4hx9j1x-authelia-4.39.20/bin:/nix/store/vryxwvapfxidddqmswhfdv9n5dn4k1rq-gnused-4.10/bin:/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin
vars-check-punchcard> + [[ ! -d /etc ]]
vars-check-punchcard> + mkdir -p /etc
vars-check-punchcard> + cat
vars-check-punchcard> ++ id -g
vars-check-punchcard> + cat
vars-check-punchcard> ++ id -u
vars-check-punchcard> ++ id -g
vars-check-punchcard> + cat
vars-check-punchcard> + mkdir -p /output
vars-check-punchcard> + openssl rand -hex 32
vars-check-punchcard> + sed 's/^Digest: //'
vars-check-punchcard> ++ cat /output/client_secret
vars-check-punchcard> + authelia crypto hash generate argon2 --password e8b904f4dfe99725d680fcd0a30cc694cb90f239558a9376212e4b4d4b610fe8
vars-check-punchcard> ✓ Generated shared file: authelia-oidc-punchcard-punchcard/client_secret
vars-check-punchcard> ✓ Generated shared file: authelia-oidc-punchcard-punchcard/client_secret_hash
vars-check-punchcard> ✓ Shared Generator authelia-oidc-punchcard-punchcard completed
vars-check-punchcard> Executing shared generator: pki-root-ca
building '/nix/store/v4ab2nsda390cnc9fmd3pylx0vb433z4-unit-nix-gc.service.drv'
vars-check-punchcard> + set -euo pipefail
vars-check-punchcard> + PATH=/nix/store/v49dnvwkxyzkpxy5sqclncf54blvjs43-openssl-3.6.3-bin/bin:/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin
vars-check-punchcard> + [[ ! -d /etc ]]
vars-check-punchcard> + mkdir -p /etc
vars-check-punchcard> + cat
vars-check-punchcard> ++ id -g
vars-check-punchcard> + cat
vars-check-punchcard> ++ id -u
vars-check-punchcard> ++ id -g
vars-check-punchcard> + cat
vars-check-punchcard> + openssl genrsa -out /output/ca.key 4096
building '/nix/store/wdvpqwyxiibfx4hjyivwbm5k87n7xc1x-dbus-1.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/1dpwrn06l4r21rd85by8mp69hm6rz6i6-X-Reload-Triggers-caddy.drv'
building '/nix/store/44wrj9zi1386jb87igfr52j8yk4rkara-unit-caddy.service.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/wdz3v51wdkmpcrj251nndwdwshaj2b2n-unit-authelia-authelia.service.drv'
building '/nix/store/zc7li3ca8sgp2l70v0zdahc3b7qgfhlr-unit-nix-daemon.service.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/vpz0l2k94i5sbb65h4wyik4alfr4m5aa-unit-systemd-tmpfiles-resetup.service.drv'
building '/nix/store/44wrj9zi1386jb87igfr52j8yk4rkara-unit-caddy.service.drv'
building '/nix/store/wdvpqwyxiibfx4hjyivwbm5k87n7xc1x-dbus-1.drv'
warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy
building '/nix/store/zc7li3ca8sgp2l70v0zdahc3b7qgfhlr-unit-nix-daemon.service.drv'
warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy
warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy
warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy
building '/nix/store/i5s21q50asm30ldx3pwr2q9lvg99f6jm-dry-activate.drv'
building '/nix/store/0mzl3j00smc7nskrkd6zg9jhy68pcv43-X-Restart-Triggers-dbus-broker.drv' on 'ssh-ng://builder@build01.clan.lol'
vars-check-punchcard> + openssl req -x509 -new -nodes -key /output/ca.key -sha256 -days 3650 -subj '/CN=Clan Root CA' -out /output/ca.crt
vars-check-punchcard> ✓ Generated shared file: pki-root-ca/ca.crt
vars-check-punchcard> ✓ Generated shared file: pki-root-ca/ca.key
vars-check-punchcard> ✓ Shared Generator pki-root-ca completed
vars-check-punchcard> ✓ Shared generators completed
vars-check-punchcard> Processing machine: server
vars-check-punchcard> Generator execution order: authelia -> authelia-user-alice -> cert-auth -> cert-punchcard -> state-version
vars-check-punchcard> Executing generator: authelia
vars-check-punchcard> + set -euo pipefail
vars-check-punchcard> + PATH=/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin:/nix/store/v49dnvwkxyzkpxy5sqclncf54blvjs43-openssl-3.6.3-bin/bin:/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin
vars-check-punchcard> + [[ ! -d /etc ]]
vars-check-punchcard> + mkdir -p /etc
vars-check-punchcard> + cat
vars-check-punchcard> ++ id -g
vars-check-punchcard> + cat
vars-check-punchcard> ++ id -u
vars-check-punchcard> ++ id -g
vars-check-punchcard> + cat
vars-check-punchcard> + mkdir -p /output
vars-check-punchcard> + openssl rand -hex 64
vars-check-punchcard> + openssl rand -hex 64
vars-check-punchcard> + openssl rand -hex 64
vars-check-punchcard> + openssl rand -hex 64
vars-check-punchcard> + openssl genrsa -out /output/oidc-jwks-key 4096
building '/nix/store/0mzl3j00smc7nskrkd6zg9jhy68pcv43-X-Restart-Triggers-dbus-broker.drv'
building '/nix/store/all4i50r0wv96z5wkpnx51p3bynzdnz8-unit-dbus-broker.service.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/imhvnxjx6h2f74hgbg0q40fwyr52svaj-unit-dbus-broker.service.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/all4i50r0wv96z5wkpnx51p3bynzdnz8-unit-dbus-broker.service.drv'
building '/nix/store/imhvnxjx6h2f74hgbg0q40fwyr52svaj-unit-dbus-broker.service.drv'
building '/nix/store/qivbqcfpzfwnzgrwwlkx38bc1szf6ziw-user-units.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/qivbqcfpzfwnzgrwwlkx38bc1szf6ziw-user-units.drv'
vars-check-punchcard> ✓ Generated file: authelia/jwt-secret
vars-check-punchcard> ✓ Generated file: authelia/oidc-hmac-secret
vars-check-punchcard> ✓ Generated file: authelia/oidc-jwks-key
vars-check-punchcard> ✓ Generated file: authelia/session-secret
vars-check-punchcard> ✓ Generated file: authelia/storage-encryption-key
vars-check-punchcard> ✓ Generator authelia completed
vars-check-punchcard> Executing generator: authelia-user-alice
vars-check-punchcard> + set -euo pipefail
vars-check-punchcard> + PATH=/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin:/nix/store/bh4sw9gvjnmskn3r5xgii9y0q4hx9j1x-authelia-4.39.20/bin:/nix/store/adq8ga9krg9mbrh35yr3xjcw7d2y3lqn-python3.13-xkcdpass-1.30.0/bin:/nix/store/vryxwvapfxidddqmswhfdv9n5dn4k1rq-gnused-4.10/bin:/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin
vars-check-punchcard> + [[ ! -d /etc ]]
vars-check-punchcard> + mkdir -p /etc
vars-check-punchcard> + cat
vars-check-punchcard> ++ id -g
vars-check-punchcard> + cat
vars-check-punchcard> ++ id -u
vars-check-punchcard> ++ id -g
vars-check-punchcard> + cat
vars-check-punchcard> + mkdir -p /output
vars-check-punchcard> + xkcdpass -n 7 -d-
vars-check-punchcard> + sed 's/^Digest: //'
vars-check-punchcard> ++ cat /output/password
vars-check-punchcard> + authelia crypto hash generate argon2 --password scalded-certified-resale-ovary-bunion-vocation-feast
vars-check-punchcard> ✓ Generated file: authelia-user-alice/password
vars-check-punchcard> ✓ Generated file: authelia-user-alice/password-hash
vars-check-punchcard> ✓ Generator authelia-user-alice completed
vars-check-punchcard> Executing generator: cert-auth
vars-check-punchcard> + set -euo pipefail
vars-check-punchcard> + PATH=/nix/store/v49dnvwkxyzkpxy5sqclncf54blvjs43-openssl-3.6.3-bin/bin:/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin
vars-check-punchcard> + [[ ! -d /etc ]]
vars-check-punchcard> + mkdir -p /etc
vars-check-punchcard> + cat
vars-check-punchcard> ++ id -g
vars-check-punchcard> + cat
vars-check-punchcard> ++ id -u
vars-check-punchcard> ++ id -g
vars-check-punchcard> + cat
vars-check-punchcard> + openssl genrsa -out /output/auth.key 4096
vars-check-punchcard> + openssl req -new -key /output/auth.key -subj /CN=auth.test.clan -out endpoint.csr
vars-check-punchcard> + printf subjectAltName=DNS:auth.test.clan
vars-check-punchcard> + openssl x509 -req -in endpoint.csr -CA /input/pki-root-ca/ca.crt -CAkey /input/pki-root-ca/ca.key -CAcreateserial -days 365 -sha256 -extfile san.cnf -out /output/auth.crt
vars-check-punchcard> Certificate request self-signature ok
vars-check-punchcard> subject=CN=auth.test.clan
vars-check-punchcard> + cat /output/auth.crt /input/pki-root-ca/ca.crt
vars-check-punchcard> ✓ Generated file: cert-auth/auth.crt
vars-check-punchcard> ✓ Generated file: cert-auth/auth.fullchain.crt
vars-check-punchcard> ✓ Generated file: cert-auth/auth.key
vars-check-punchcard> ✓ Generator cert-auth completed
vars-check-punchcard> Executing generator: cert-punchcard
vars-check-punchcard> + set -euo pipefail
vars-check-punchcard> + PATH=/nix/store/v49dnvwkxyzkpxy5sqclncf54blvjs43-openssl-3.6.3-bin/bin:/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin
vars-check-punchcard> + [[ ! -d /etc ]]
vars-check-punchcard> + mkdir -p /etc
vars-check-punchcard> + cat
vars-check-punchcard> ++ id -g
vars-check-punchcard> + cat
vars-check-punchcard> ++ id -u
vars-check-punchcard> ++ id -g
vars-check-punchcard> + cat
vars-check-punchcard> + openssl genrsa -out /output/punchcard.key 4096
vars-check-punchcard> + openssl req -new -key /output/punchcard.key -subj /CN=punchcard.test.clan -out endpoint.csr
vars-check-punchcard> + printf subjectAltName=DNS:punchcard.test.clan
vars-check-punchcard> + openssl x509 -req -in endpoint.csr -CA /input/pki-root-ca/ca.crt -CAkey /input/pki-root-ca/ca.key -CAcreateserial -days 365 -sha256 -extfile san.cnf -out /output/punchcard.crt
vars-check-punchcard> Certificate request self-signature ok
vars-check-punchcard> subject=CN=punchcard.test.clan
vars-check-punchcard> + cat /output/punchcard.crt /input/pki-root-ca/ca.crt
vars-check-punchcard> ✓ Generated file: cert-punchcard/punchcard.crt
vars-check-punchcard> ✓ Generated file: cert-punchcard/punchcard.fullchain.crt
vars-check-punchcard> ✓ Generated file: cert-punchcard/punchcard.key
vars-check-punchcard> ✓ Generator cert-punchcard completed
vars-check-punchcard> Executing generator: state-version
vars-check-punchcard> + set -euo pipefail
vars-check-punchcard> + PATH=/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin
vars-check-punchcard> + [[ ! -d /etc ]]
vars-check-punchcard> + mkdir -p /etc
vars-check-punchcard> + cat
vars-check-punchcard> ++ id -g
vars-check-punchcard> + cat
vars-check-punchcard> ++ id -u
vars-check-punchcard> ++ id -g
vars-check-punchcard> + cat
vars-check-punchcard> + echo -n 26.05
vars-check-punchcard> ✓ Generated file: state-version/version
vars-check-punchcard> ✓ Generator state-version completed
vars-check-punchcard> ✓ Machine server completed
vars-check-punchcard> ✓ All vars checks completed successfully
punchcard-19700101> buildPhase completed in 1 minutes 2 seconds
punchcard-19700101> Running phase: checkPhase
punchcard-19700101> ok  	punchcard	0.048s
punchcard-19700101> checkPhase completed in 1 minutes 0 seconds
punchcard-19700101> Running phase: installPhase
punchcard-19700101> Running phase: fixupPhase
punchcard-19700101> shrinking RPATHs of ELF executables and libraries in /nix/store/9v3xgkzab892l332bqbbn9sz95v437n3-punchcard-19700101
punchcard-19700101> shrinking /nix/store/9v3xgkzab892l332bqbbn9sz95v437n3-punchcard-19700101/bin/punchcard
punchcard-19700101> checking for references to /build/ in /nix/store/9v3xgkzab892l332bqbbn9sz95v437n3-punchcard-19700101...
punchcard-19700101> patching script interpreter paths in /nix/store/9v3xgkzab892l332bqbbn9sz95v437n3-punchcard-19700101
punchcard-19700101> stripping (with command strip and flags -S -p) in  /nix/store/9v3xgkzab892l332bqbbn9sz95v437n3-punchcard-19700101/bin
building '/nix/store/2xirgwxwdnkfdlgg5vbgzhlzy6fy0hqk-unit-script-punchcard-punchcard-start.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/2xirgwxwdnkfdlgg5vbgzhlzy6fy0hqk-unit-script-punchcard-punchcard-start.drv'
building '/nix/store/11z2fb06dhbg1vxila8n9vzhy2c6c5s6-unit-punchcard-punchcard.service.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/11z2fb06dhbg1vxila8n9vzhy2c6c5s6-unit-punchcard-punchcard.service.drv'
building '/nix/store/amk45rng7dgk6jqzjcm7p26vdnqrz046-system-units.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/amk45rng7dgk6jqzjcm7p26vdnqrz046-system-units.drv'
building '/nix/store/3dz4hfk410fld6khj07613pnqsd7l7g8-etc.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/3dz4hfk410fld6khj07613pnqsd7l7g8-etc.drv'
building '/nix/store/5m31pl94q2rmd19frvwz5bpqq04ph57z-activate.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/5m31pl94q2rmd19frvwz5bpqq04ph57z-activate.drv'
building '/nix/store/aal48nqri1fs3ki1xby9v8yxabp38iwx-nixos-system-server-test.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/aal48nqri1fs3ki1xby9v8yxabp38iwx-nixos-system-server-test.drv'
nixos-system-server-test> structuredAttrs is enabled
building '/nix/store/zkbf92bh4ypz38fxqnks0p0axcny86yn-closure-info.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/zkbf92bh4ypz38fxqnks0p0axcny86yn-closure-info.drv'
closure-info> structuredAttrs is enabled
building '/nix/store/dmfcl3vhdps6k5y9imfpvhlypnfqs08m-nixos-test-driver-punchcard.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/dmfcl3vhdps6k5y9imfpvhlypnfqs08m-nixos-test-driver-punchcard.drv'
nixos-test-driver-punchcard> Running type check (enable/disable: config.skipTypeCheck)
nixos-test-driver-punchcard> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck
nixos-test-driver-punchcard> Success: no issues found in 1 source file
building '/nix/store/acm7x974hns7rympgafx3x8lrqvfywdf-container-test-run-punchcard.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/acm7x974hns7rympgafx3x8lrqvfywdf-container-test-run-punchcard.drv'
container-test-run-punchcard> additionally exposed symbols:
container-test-run-punchcard>     server,
container-test-run-punchcard>     start_all, machines, driver, Machine, wait_for_signal
container-test-run-punchcard> Starting server
container-test-run-punchcard> 
container-test-run-punchcard> 
container-test-run-punchcard> <<< NixOS Stage 2 >>>
container-test-run-punchcard> 
container-test-run-punchcard> booting system configuration /nix/store/hshi0si4isb1bjv8pvmn404kj0993nik-nixos-system-server-test
container-test-run-punchcard> running activation script...
container-test-run-punchcard> setting up /etc...
container-test-run-punchcard> 2: host0@if3: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
container-test-run-punchcard>     link/ether be:aa:dd:39:86:e7 brd ff:ff:ff:ff:ff:ff link-netnsid 0
container-test-run-punchcard> setting up age secrets...
container-test-run-punchcard> starting systemd...
container-test-run-punchcard> systemd 260.2 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE)
container-test-run-punchcard> Detected virtualization systemd-nspawn.
container-test-run-punchcard> Detected architecture arm64.
container-test-run-punchcard> Detected first boot.
container-test-run-punchcard> Initializing machine ID from container UUID.
container-test-run-punchcard> Applying preset policy.
container-test-run-punchcard> Populated /etc with preset unit settings.
container-test-run-punchcard> Queued start job for default target Multi-User System.
container-test-run-punchcard> 
container-test-run-punchcard> 
container-test-run-punchcard> 
container-test-run-punchcard> <<< Welcome to NixOS test (aarch64) - console >>>
container-test-run-punchcard> + systemd-run /bin/sh -c '/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin/sleep 999999999 && echo 84305750-4c88-4e4b-92e9-f2c14c8e17b4'
container-test-run-punchcard> Running as unit: run-p530-i103163870.service; invocation ID: e474aadecf704d618913daa910bf122f
container-test-run-punchcard> To attach to container server run on the same machine that runs the test:
container-test-run-punchcard>   sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*84305750-4c88-4e4b-92e9-f2c14c8e17b4') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash 
container-test-run-punchcard> 
container-test-run-punchcard> To inject external network and continue test, run:
container-test-run-punchcard> sudo /nix/store/d6kq2phq0zy5invmkfgg8h35zxaf13s9-python3-3.13.15/bin/python3.13 /nix/store/hvjpsqwpzj163wzy0fhlnf8iwgcwfzr9-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py 84305750-4c88-4e4b-92e9-f2c14c8e17b4
container-test-run-punchcard> + systemctl --no-pager show authelia-authelia.service
container-test-run-punchcard> server: waiting for success: curl -sf http://127.0.0.1:9091/api/health
container-test-run-punchcard> + curl -sf http://127.0.0.1:9091/api/health
container-test-run-punchcard> (finished: waiting for success: curl -sf http://127.0.0.1:9091/api/health, in 0.02 seconds)
container-test-run-punchcard> + systemctl --no-pager show caddy.service
container-test-run-punchcard> + systemctl --no-pager show punchcard-punchcard.service
container-test-run-punchcard> server: waiting for success: curl -sf https://punchcard.test.clan/login
container-test-run-punchcard> + curl -sf https://punchcard.test.clan/login
container-test-run-punchcard> (finished: waiting for success: curl -sf https://punchcard.test.clan/login, in 0.10 seconds)
container-test-run-punchcard> + curl -s -o /dev/null -w '%{redirect_url}' -c /tmp/pc-cookies https://punchcard.test.clan/login/start
container-test-run-punchcard> 

post-build step Upload to niks3: ok
time=2026-08-24T00:11:42.388Z level=INFO msg="Uploading 0 paths to niks3.clan.lol (1 already cached)"
time=2026-08-24T00:11:43.058Z level=INFO msg="Uploading 1 narinfos"
time=2026-08-24T00:11:44.013Z level=INFO msg="Upload complete. (1.681s)"