container-test-run-authelia
checks.x86_64-linux.authelia
· build #74
· raw
1Machine state will be reset. To keep it, pass --keep-machine-state2start all VLans3(finished: start all VLans, in 0.00 seconds)45Test will time out and terminate in 3600.0 seconds6run the VM test script7additionally exposed symbols:8 server,9 vlan1,10 start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh11start all VMs12server: systemd-nspawn running (pid 51)13server: Waiting for journal at /build/vm-state-server/var/log/journal...14(finished: start all VMs, in 0.00 seconds)15??? Warning (UserWarning): wait_for_unit(): passing a bare int/float as a duration is deprecated. Use datetime.timedelta instead.16 File "/nix/store/1gmw8bgbrpviggj9g7blni0fay676653-nixos-test-driver-1.1/lib/python3.14/site-packages/test_driver/duration.py", line 3917server: waiting for unit authelia-authelia.service18nixos-nspawn(server): TAP vde-tap1 not found; container will be isolated from VDE19nixos-nspawn(server): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.20Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.21░ Spawning container server on /build/vm-state-server.22server # [7621422.405926] server systemd-journald[186]: Journal started23server # [7621422.405955] server systemd-journald[186]: Runtime Journal (/run/log/journal/096e89be0acc46999d2c6bf7633895af) is 8M, max 3.7G, 3.7G free.24server # [7621422.407038] server systemd[1]: Finished Create Static Device Nodes in /dev gracefully.25server # [7621422.411075] server systemd[1]: Starting Flush Journal to Persistent Storage...26server # [7621422.411420] server systemd[1]: Starting Network Name Resolution...27server # [7621422.411691] server systemd[1]: Starting Create Static Device Nodes in /dev...28server # [7621422.415621] server systemd-journald[186]: Time spent on flushing to /var/log/journal/096e89be0acc46999d2c6bf7633895af is 1.062ms for 6 entries.29server # [7621422.415621] server systemd-journald[186]: System Journal (/var/log/journal/096e89be0acc46999d2c6bf7633895af) is 8M, max 4G, 3.9G free.30server # [7621422.418980] server systemd[1]: Finished Create Static Device Nodes in /dev.31server # [7621422.419085] server systemd[1]: Reached target Preparation for Local File Systems.32server # [7621422.419124] server systemd[1]: Reached target Local File Systems.33server # [7621422.419504] server systemd[1]: Listening on Boot Loader Control Service Socket.34server # [7621422.419525] server systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container35server # [7621422.419854] server systemd[1]: Starting Save Transient machine-id to Disk...36server # [7621422.419869] server systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys37server # [7621422.420585] server systemd[1]: Finished Flush Journal to Persistent Storage.38server # [7621422.420911] server systemd[1]: Starting Create System Files and Directories...39server # [7621422.435754] server systemd-tmpfiles[224]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted40server # [7621422.435889] server systemd-tmpfiles[224]: fchmod() of /var/log/journal failed: Operation not permitted41server # [7621422.435979] server systemd[1]: Finished Save Transient machine-id to Disk.42server # [7621422.435985] server systemd-tmpfiles[224]: fchmod() of /var/log/journal/096e89be0acc46999d2c6bf7633895af failed: Operation not permitted43server # [7621422.436132] server systemd-tmpfiles[224]: fchmod() of /run/log/journal failed: Operation not permitted44server # [7621422.436990] server systemd[1]: Finished Create System Files and Directories.45server # [7621422.437428] server systemd[1]: Starting Rebuild Journal Catalog...46server # [7621422.437757] server systemd[1]: Starting Record System Boot/Shutdown in UTMP...47server # [7621422.444165] server systemd[1]: Finished Record System Boot/Shutdown in UTMP.48server # [7621422.449201] server systemd[1]: Finished Rebuild Journal Catalog.49server # [7621422.449601] server systemd[1]: Starting Update is Completed...50server # [7621422.454488] server systemd[1]: Finished Update is Completed.51server # [7621422.484327] server systemd[1]: Finished Firewall.52server # [7621422.484440] server systemd[1]: Reached target Preparation for Network.53server # [7621422.484584] server systemd[1]: Listening on Network Management Resolve Hook Socket.54server # [7621422.485070] server systemd[1]: Starting Network Management...55server # [7621422.697608] server systemd-networkd[300]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted56server # [7621422.697689] server systemd-networkd[300]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted57server # [7621422.702427] server systemd-networkd[300]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.58server # [7621422.702568] server systemd-networkd[300]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.59server # [7621422.702626] server systemd-networkd[300]: lo: Link UP60server # [7621422.702627] server systemd-networkd[300]: lo: Gained carrier61server # [7621422.702815] server systemd-networkd[300]: eth1: Configuring with /etc/systemd/network/40-eth1.network.62server # [7621422.703131] server systemd[1]: Started Network Management.63server # [7621422.703205] server systemd-networkd[300]: eth1: Link UP64server # [7621422.703378] server systemd-networkd[300]: eth1: Gained carrier65server # [7621422.703597] server systemd[1]: Starting Enable Persistent Storage in systemd-networkd...66server # [7621422.729563] server systemd[1]: Finished Enable Persistent Storage in systemd-networkd.67server # [7621422.810676] server systemd-resolved[207]: Positive Trust Anchors:68server # [7621422.810685] server systemd-resolved[207]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d69server # [7621422.810686] server systemd-resolved[207]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b1670server # [7621422.810703] server systemd-resolved[207]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test71server # [7621422.820702] server systemd-resolved[207]: Using system hostname 'server'.72server # [7621422.821528] server systemd[1]: Started Network Name Resolution.73server # [7621422.821575] server systemd[1]: Reached target Network.74server # [7621422.821603] server systemd[1]: Reached target Network is Online.75server # [7621422.821627] server systemd[1]: Reached target System Initialization.76server # [7621422.821657] server systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container77server # [7621422.821673] server systemd[1]: Started Daily Cleanup of Temporary Directories.78server # [7621422.821682] server systemd[1]: Reached target Timer Units.79server # [7621422.821746] server systemd[1]: Listening on D-Bus System Message Bus Socket.80server # [7621422.821810] server systemd[1]: Listening on Nix Daemon Socket.81server # [7621422.821950] server systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.82server # [7621422.821969] server systemd[1]: Reached target Socket Units.83server # [7621422.821996] server systemd[1]: Reached target Basic System.84server # [7621422.822798] server systemd[1]: Starting Authelia authentication and authorization server...85server # [7621422.823213] server systemd[1]: Starting Caddy...86server # [7621422.823547] server systemd[1]: Starting Import lastlog data into lastlog2 database...87server # [7621422.823918] server systemd[1]: Starting Name Service Cache Daemon (nsncd)...88server # [7621422.824561] server systemd[1]: Starting D-Bus System Message Bus...89server # [7621422.856785] server systemd[1]: Finished Import lastlog data into lastlog2 database.90server # [7621422.910165] server nsncd[308]: Aug 27 15:04:40.275 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"91server # [7621422.910178] server systemd[1]: Started Name Service Cache Daemon (nsncd).92server # [7621422.910205] server systemd[1]: Reached target Host and Network Name Lookups.93server # [7621422.910231] server systemd[1]: Reached target User and Group Name Lookups.94server # [7621422.910776] server systemd[1]: Starting User Login Management...95server # [7621422.911160] server systemd[1]: Starting Permit User Sessions...96server # [7621422.941486] server systemd[1]: Finished Permit User Sessions.97server # [7621422.941938] server systemd[1]: Started Console Getty.98server # [7621422.941959] server systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty099server # [7621422.941972] server systemd[1]: Reached target Login Prompts.100server # [7621422.955206] server dbus-broker-launch[309]: Looking up NSS user entry for 'systemd-timesync'...101server # [7621422.955664] server dbus-broker-launch[309]: NSS returned no entry for 'systemd-timesync'102server # [7621422.955664] server dbus-broker-launch[309]: Invalid user-name in /nix/store/mv02fkr9ckdrb8j8zcn5fbahbxx36w78-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"103server # [7621422.955951] server systemd[1]: Started D-Bus System Message Bus.104server # [7621422.959341] server dbus-broker-launch[309]: Ready105server # [7621423.029546] server systemd[1]: Started Caddy.106server # [7621423.193107] server systemd-logind[328]: New seat seat0.107server # [7621423.193247] server systemd[1]: Started User Login Management.108server # [7621423.193945] server systemd[1]: Starting linger-users.service...109server # [7621423.216678] server systemd[1]: linger-users.service: Deactivated successfully.110server # [7621423.216765] server systemd[1]: Finished linger-users.service.111server # [7621423.399604] server systemd[1]: etc-machine\x2did.mount: Deactivated successfully.112server # [7621423.630029] server authelia[361]: Configuration parsed and loaded successfully without errors.113server # [7621423.998264] server systemd[1]: Started Authelia authentication and authorization server.114server # [7621423.998793] server systemd[1]: Starting Punchcard time tracking (punchcard)...115server # [7621424.022047] server authelia[383]: time="2026-08-27T15:04:41Z" level=info msg="Authelia v4.39.20-nixpkgs is starting"116server # [7621424.022047] server authelia[383]: time="2026-08-27T15:04:41Z" level=info msg="Log severity set to info"117server # [7621424.030639] server authelia[383]: time="2026-08-27T15:04:41Z" level=info msg="Storage schema is being checked for updates"118server # [7621424.031186] server authelia[383]: time="2026-08-27T15:04:41Z" level=info msg="Storage schema migration from 0 to 24 is being attempted"119server # [7621424.049187] server authelia[383]: time="2026-08-27T15:04:41Z" level=info msg="Storage schema migration from 0 to 24 is complete"120server # [7621424.051178] server systemd-resolved[207]: Switching to fallback DNS server 1.1.1.1#one.one.one.one.121server # [7621424.051843] server authelia[383]: time="2026-08-27T15:04:41Z" level=warning msg="Could not determine the clock offset due to an error" error="error occurred during dial: dial udp: lookup time.cloudflare.com: no such host"122server # [7621424.055531] server authelia[383]: time="2026-08-27T15:04:41Z" level=info msg="Startup complete"123server # [7621424.055557] server authelia[383]: time="2026-08-27T15:04:41Z" level=info msg="Listening for non-TLS connections on '127.0.0.1:9091' path '/'" server=main service=server124server # [7621424.083888] server systemd[1]: Started Punchcard time tracking (punchcard).125server # [7621424.084054] server systemd[1]: Reached target Multi-User System.126server # [7621424.084194] server systemd[1]: Startup finished in 1.892s.127server # [7621424.088531] server punchcard-punchcard-start[387]: 2026/08/27 15:04:41 Warning: .env file not found, using environment variables: open .env: no such file or directory128server # [7621424.093365] server punchcard-punchcard-start[387]: 2026/08/27 15:04:41 OIDC authentication enabled with issuer: https://auth.test.clan129server # [7621424.093365] server punchcard-punchcard-start[387]: 2026/08/27 15:04:41 Redirect URL: https://punchcard.test.clan/callback130server # [7621424.093700] server punchcard-punchcard-start[387]: 2026/08/27 15:04:41 Server starting on :8099131server # [7621424.125132] server systemd-networkd[300]: eth1: Gained IPv6LL132server: (finished: waiting for unit authelia-authelia.service, in 2.64 seconds)133??? Warning (UserWarning): wait_until_succeeds(): passing a bare int/float as a duration is deprecated. Use datetime.timedelta instead.134 File "/nix/store/1gmw8bgbrpviggj9g7blni0fay676653-nixos-test-driver-1.1/lib/python3.14/site-packages/test_driver/duration.py", line 39135server: waiting for success: curl -sf http://127.0.0.1:9091/api/health136??? Warning (UserWarning): execute(): passing a bare int/float as a duration is deprecated. Use datetime.timedelta instead.137 File "/nix/store/1gmw8bgbrpviggj9g7blni0fay676653-nixos-test-driver-1.1/lib/python3.14/site-packages/test_driver/duration.py", line 39138server: (finished: waiting for success: curl -sf http://127.0.0.1:9091/api/health, in 0.01 seconds)139server: must succeed: test -f /run/authelia-authelia/users.json140server: (finished: must succeed: test -f /run/authelia-authelia/users.json, in 0.00 seconds)141server: must succeed: cat /run/authelia-authelia/users.json142server: (finished: must succeed: cat /run/authelia-authelia/users.json, in 0.00 seconds)143server: must succeed: test -f /run/authelia-authelia/oidc.json144server: (finished: must succeed: test -f /run/authelia-authelia/oidc.json, in 0.00 seconds)145server: must succeed: cat /run/authelia-authelia/oidc.json146server: (finished: must succeed: cat /run/authelia-authelia/oidc.json, in 0.00 seconds)147server: waiting for unit caddy.service148server: (finished: waiting for unit caddy.service, in 0.01 seconds)149server: waiting for success: curl -sf https://auth.test.clan/api/health150server: (finished: waiting for success: curl -sf https://auth.test.clan/api/health, in 0.02 seconds)151server: waiting for success: curl -sf https://auth.test.clan/.well-known/openid-configuration152server: (finished: waiting for success: curl -sf https://auth.test.clan/.well-known/openid-configuration, in 0.02 seconds)153??? Warning (UserWarning): wait_for_unit(): passing a bare int/float as a duration is deprecated. Use datetime.timedelta instead.154 File "/nix/store/1gmw8bgbrpviggj9g7blni0fay676653-nixos-test-driver-1.1/lib/python3.14/site-packages/test_driver/duration.py", line 39155server: waiting for unit punchcard-punchcard.service156server: (finished: waiting for unit punchcard-punchcard.service, in 0.01 seconds)157server: waiting for success: curl -sf https://punchcard.test.clan/login158server: (finished: waiting for success: curl -sf https://punchcard.test.clan/login, in 0.02 seconds)159server: must succeed: cat /run/secrets/per-machine/server/authelia-user-bob/password160server: (finished: must succeed: cat /run/secrets/per-machine/server/authelia-user-bob/password, in 0.00 seconds)161server: must succeed: curl -s -o /dev/null -w '%{redirect_url}' -c /tmp/pc-cookies https://punchcard.test.clan/login/start162server: (finished: must succeed: curl -s -o /dev/null -w '%{redirect_url}' -c /tmp/pc-cookies https://punchcard.test.clan/login/start, in 0.04 seconds)163server: must succeed: curl -sf -X POST https://auth.test.clan/api/firstfactor -H 'Content-Type: application/json' -c /tmp/auth-cookies -d '{"username": "bob", "password": "confess-unbitten-founding-reverb-starless-tackiness-scuttle", "keepMeLoggedIn": false}'164server: (finished: must succeed: curl -sf -X POST https://auth.test.clan/api/firstfactor -H 'Content-Type: application/json' -c /tmp/auth-cookies -d '{"username": "bob", "password": "confess-unbitten-founding-reverb-starless-tackiness-scuttle", "keepMeLoggedIn": false}', in 1.07 seconds)165server: must succeed: curl -s -o /dev/null -w '%{redirect_url}' -b /tmp/auth-cookies -c /tmp/auth-cookies 'https://auth.test.clan/api/oidc/authorization?client_id=punchcard-punchcard&code_challenge=N9f1JGflKCxw2mxzLfCRcq9j-hW7wf3Tgia43TrPQHo&code_challenge_method=S256&redirect_uri=https%3A%2F%2Fpunchcard.test.clan%2Fcallback&response_type=code&scope=openid+profile+email&state=WZVXJRa9-wSdYae4OPiVyRh2LlKKjkAtHEnrc3MeqAk%3D'166server: (finished: must succeed: curl -s -o /dev/null -w '%{redirect_url}' -b /tmp/auth-cookies -c /tmp/auth-cookies 'https://auth.test.clan/api/oidc/authorization?client_id=punchcard-punchcard&code_challenge=N9f1JGflKCxw2mxzLfCRcq9j-hW7wf3Tgia43TrPQHo&code_challenge_method=S256&redirect_uri=https%3A%2F%2Fpunchcard.test.clan%2Fcallback&response_type=code&scope=openid+profile+email&state=WZVXJRa9-wSdYae4OPiVyRh2LlKKjkAtHEnrc3MeqAk%3D', in 0.03 seconds)167server: must succeed: curl -s -o /dev/null -w '%{http_code}' -c /tmp/pc-cookies -b /tmp/pc-cookies 'https://punchcard.test.clan/callback?code=authelia_ac_8vRTnc5PvQa2UpSv4nYJ2v7Y1MHXr9LtLOo9L9baumQ.oWNOm2oSusiBiP6qyhQuehI4kz2valebsUysmyVEZzo&iss=https%3A%2F%2Fauth.test.clan&scope=openid+profile+email&state=WZVXJRa9-wSdYae4OPiVyRh2LlKKjkAtHEnrc3MeqAk%3D'168server: (finished: must succeed: curl -s -o /dev/null -w '%{http_code}' -c /tmp/pc-cookies -b /tmp/pc-cookies 'https://punchcard.test.clan/callback?code=authelia_ac_8vRTnc5PvQa2UpSv4nYJ2v7Y1MHXr9LtLOo9L9baumQ.oWNOm2oSusiBiP6qyhQuehI4kz2valebsUysmyVEZzo&iss=https%3A%2F%2Fauth.test.clan&scope=openid+profile+email&state=WZVXJRa9-wSdYae4OPiVyRh2LlKKjkAtHEnrc3MeqAk%3D', in 0.08 seconds)169server: must succeed: curl -s -L -o /dev/null -w '%{http_code}' -b /tmp/pc-cookies -c /tmp/pc-cookies https://punchcard.test.clan/170server: (finished: must succeed: curl -s -L -o /dev/null -w '%{http_code}' -b /tmp/pc-cookies -c /tmp/pc-cookies https://punchcard.test.clan/, in 0.02 seconds)171(finished: run the VM test script, in 3.97 seconds)172server # [7621425.738863] server authelia[383]: time="2026-08-27T15:04:43Z" level=error msg="Access Request failed with error: Client authentication failed (e.g., unknown client, no client authentication included, or unsupported authentication method). The request was determined to be using 'token_endpoint_auth_method' method 'client_secret_basic', however the OAuth 2.0 client registration does not allow this method. The registered client with id 'punchcard-punchcard' is configured to only support 'token_endpoint_auth_method' method 'client_secret_post'. Either the Authorization Server client registration will need to have the 'token_endpoint_auth_method' updated to 'client_secret_basic' or the Relying Party will need to be configured to use 'client_secret_post'." method=POST path=/api/oidc/token remote_ip="::1"173server # [7621425.795869] server punchcard-punchcard-start[387]: 2026/08/27 15:04:43 User () logged in successfully174test script finished in 4.36s175cleanup176kill NspawnMachine (pid 51)177Container server terminated by signal KILL.178(finished: cleanup, in 0.11 seconds)