Machine state will be reset. To keep it, pass --keep-machine-state
start all VLans
(finished: start all VLans, in 0.00 seconds)

Test will time out and terminate in 3600.0 seconds
run the VM test script
additionally exposed symbols:
    server,
    vlan1,
    start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh
start all VMs
server: systemd-nspawn running (pid 51)
server: Waiting for journal at /build/vm-state-server/var/log/journal...
(finished: start all VMs, in 0.00 seconds)
??? Warning (UserWarning): wait_for_unit(): passing a bare int/float as a duration is deprecated. Use datetime.timedelta instead.
    File "/nix/store/8xlk88ia8b5yg9kfrg3skndwzgphipvr-nixos-test-driver-1.1/lib/python3.14/site-packages/test_driver/duration.py", line 39
server: waiting for unit authelia-authelia.service
nixos-nspawn(server): TAP vde-tap1 not found; container will be isolated from VDE
nixos-nspawn(server): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.
Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.
░ Spawning container server on /build/vm-state-server.
server # No journal files were found.
server # No journal boot entry found for the specified boot (+0).
server # [7054845.511155] server systemd-journald[185]: Journal started
server # [7054845.511208] server systemd-journald[185]: Runtime Journal (/run/log/journal/fbfc9b3d587249689f357b31b0248738) is 8M, max 2.5G, 2.4G free.
server # [7054845.515985] server systemd[1]: Starting Flush Journal to Persistent Storage...
server # [7054845.516822] server systemd[1]: Starting Network Name Resolution...
server # [7054845.517789] server systemd[1]: Starting Create Static Device Nodes in /dev...
server # [7054845.526491] server systemd-journald[185]: Time spent on flushing to /var/log/journal/fbfc9b3d587249689f357b31b0248738 is 1.640ms for 5 entries.
server # [7054845.526491] server systemd-journald[185]: System Journal (/var/log/journal/fbfc9b3d587249689f357b31b0248738) is 8M, max 4G, 3.9G free.
server # [7054845.533221] server systemd[1]: Finished Create Static Device Nodes in /dev.
server # [7054845.533437] server systemd[1]: Reached target Preparation for Local File Systems.
server # [7054845.533514] server systemd[1]: Reached target Local File Systems.
server # [7054845.534218] server systemd[1]: Listening on Boot Loader Control Service Socket.
server # [7054845.534258] server systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container
server # [7054845.535146] server systemd[1]: Starting Save Transient machine-id to Disk...
server # [7054845.535178] server systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys
server # [7054845.540643] server systemd[1]: Finished Flush Journal to Persistent Storage.
server # [7054845.541965] server systemd[1]: Starting Create System Files and Directories...
server # [7054845.558943] server systemd-tmpfiles[228]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted
server # [7054845.559144] server systemd-tmpfiles[228]: fchmod() of /var/log/journal failed: Operation not permitted
server # [7054845.559283] server systemd-tmpfiles[228]: fchmod() of /var/log/journal/fbfc9b3d587249689f357b31b0248738 failed: Operation not permitted
server # [7054845.559493] server systemd-tmpfiles[228]: fchmod() of /run/log/journal failed: Operation not permitted
server # [7054845.560782] server systemd[1]: Finished Create System Files and Directories.
server # [7054845.561733] server systemd[1]: Starting Rebuild Journal Catalog...
server # [7054845.562542] server systemd[1]: Starting Record System Boot/Shutdown in UTMP...
server # [7054845.568785] server systemd[1]: Finished Save Transient machine-id to Disk.
server # [7054845.575499] server systemd[1]: Finished Record System Boot/Shutdown in UTMP.
server # [7054845.579708] server systemd[1]: Finished Rebuild Journal Catalog.
server # [7054845.580848] server systemd[1]: Starting Update is Completed...
server # [7054845.593031] server systemd[1]: Finished Update is Completed.
server # [7054845.659735] server systemd[1]: Finished Firewall.
server # [7054845.659876] server systemd[1]: Reached target Preparation for Network.
server # [7054845.660090] server systemd[1]: Listening on Network Management Resolve Hook Socket.
server # [7054845.661213] server systemd[1]: Starting Network Management...
server # [7054846.026983] server systemd-networkd[299]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted
server # [7054846.027069] server systemd-networkd[299]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted
server # [7054846.033305] server systemd-networkd[299]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.
server # [7054846.033465] server systemd-networkd[299]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.
server # [7054846.033607] server systemd-networkd[299]: lo: Link UP
server # [7054846.033611] server systemd-networkd[299]: lo: Gained carrier
server # [7054846.033802] server systemd-networkd[299]: eth1: Configuring with /etc/systemd/network/40-eth1.network.
server # [7054846.034196] server systemd[1]: Started Network Management.
server # [7054846.034236] server systemd-networkd[299]: eth1: Link UP
server # [7054846.034497] server systemd-networkd[299]: eth1: Gained carrier
server # [7054846.035786] server systemd[1]: Starting Enable Persistent Storage in systemd-networkd...
server # [7054846.071271] server systemd-resolved[207]: Positive Trust Anchors:
server # [7054846.071285] server systemd-resolved[207]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d
server # [7054846.071288] server systemd-resolved[207]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16
server # [7054846.071325] server systemd-resolved[207]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test
server # [7054846.092921] server systemd-resolved[207]: Using system hostname 'server'.
server # [7054846.094309] server systemd[1]: Started Network Name Resolution.
server # [7054846.094436] server systemd[1]: Reached target Network.
server # [7054846.094540] server systemd[1]: Reached target Network is Online.
server # [7054846.094627] server systemd[1]: Reached target System Initialization.
server # [7054846.094714] server systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container
server # [7054846.094764] server systemd[1]: Started Daily Cleanup of Temporary Directories.
server # [7054846.094807] server systemd[1]: Reached target Timer Units.
server # [7054846.095182] server systemd[1]: Listening on D-Bus System Message Bus Socket.
server # [7054846.095418] server systemd[1]: Listening on Nix Daemon Socket.
server # [7054846.095642] server systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.
server # [7054846.095694] server systemd[1]: Reached target Socket Units.
server # [7054846.095781] server systemd[1]: Reached target Basic System.
server # [7054846.097923] server systemd[1]: Starting Authelia authentication and authorization server...
server # [7054846.099248] server systemd[1]: Starting Caddy...
server # [7054846.100481] server systemd[1]: Starting Import lastlog data into lastlog2 database...
server # [7054846.101909] server systemd[1]: Starting Name Service Cache Daemon (nsncd)...
server # [7054846.102459] server systemd[1]: Finished Enable Persistent Storage in systemd-networkd.
server # [7054846.105986] server systemd[1]: Starting D-Bus System Message Bus...
server # [7054846.122132] server systemd[1]: Finished Import lastlog data into lastlog2 database.
server # [7054846.209440] server systemd[1]: Started Name Service Cache Daemon (nsncd).
server # [7054846.209533] server systemd[1]: Reached target Host and Network Name Lookups.
server # [7054846.209585] server nsncd[306]: Aug 29 15:04:32.262 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"
server # [7054846.209625] server systemd[1]: Reached target User and Group Name Lookups.
server # [7054846.211419] server systemd[1]: Starting User Login Management...
server # [7054846.212593] server systemd[1]: Starting Permit User Sessions...
server # [7054846.246858] server systemd[1]: Finished Permit User Sessions.
server # [7054846.247856] server systemd[1]: Started Console Getty.
server # [7054846.247894] server systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0
server # [7054846.247910] server systemd[1]: Reached target Login Prompts.
server # [7054846.282789] server dbus-broker-launch[312]: Looking up NSS user entry for 'systemd-timesync'...
server # [7054846.284025] server dbus-broker-launch[312]: NSS returned no entry for 'systemd-timesync'
server # [7054846.284025] server dbus-broker-launch[312]: Invalid user-name in /nix/store/mdkr41ih7p8vnrf1h0ydrhsca4xq96jj-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"
server # [7054846.284486] server systemd[1]: Started D-Bus System Message Bus.
server # [7054846.293068] server dbus-broker-launch[312]: Ready
server # [7054846.417919] server systemd[1]: Started Caddy.
server # [7054846.502636] server systemd[1]: etc-machine\x2did.mount: Deactivated successfully.
server # [7054846.641248] server systemd-logind[327]: New seat seat0.
server # [7054846.641454] server systemd[1]: Started User Login Management.
server # [7054846.643461] server systemd[1]: Starting linger-users.service...
server # [7054846.677830] server systemd[1]: linger-users.service: Deactivated successfully.
server # [7054846.678083] server systemd[1]: Finished linger-users.service.
server # [7054847.234694] server authelia[373]: Configuration parsed and loaded successfully without errors.
server # [7054847.588159] server systemd-networkd[299]: eth1: Gained IPv6LL
server # [7054847.732578] server systemd[1]: Started Authelia authentication and authorization server.
server # [7054847.734890] server systemd[1]: Starting Punchcard time tracking (punchcard)...
server # [7054847.778756] server authelia[405]: time="2026-08-29T15:04:33Z" level=info msg="Authelia v4.39.20-nixpkgs is starting"
server # [7054847.779284] server authelia[405]: time="2026-08-29T15:04:33Z" level=info msg="Log severity set to info"
server # [7054847.799636] server authelia[405]: time="2026-08-29T15:04:33Z" level=info msg="Storage schema is being checked for updates"
server # [7054847.800911] server authelia[405]: time="2026-08-29T15:04:33Z" level=info msg="Storage schema migration from 0 to 24 is being attempted"
server # [7054847.876421] server systemd[1]: Started Punchcard time tracking (punchcard).
server: (finished: waiting for unit authelia-authelia.service, in 3.66 seconds)
??? Warning (UserWarning): wait_until_succeeds(): passing a bare int/float as a duration is deprecated. Use datetime.timedelta instead.
    File "/nix/store/8xlk88ia8b5yg9kfrg3skndwzgphipvr-nixos-test-driver-1.1/lib/python3.14/site-packages/test_driver/duration.py", line 39
server: waiting for success: curl -sf http://127.0.0.1:9091/api/health
??? Warning (UserWarning): execute(): passing a bare int/float as a duration is deprecated. Use datetime.timedelta instead.
    File "/nix/store/8xlk88ia8b5yg9kfrg3skndwzgphipvr-nixos-test-driver-1.1/lib/python3.14/site-packages/test_driver/duration.py", line 39
server: (finished: waiting for success: curl -sf http://127.0.0.1:9091/api/health, in 0.02 seconds)
server: must succeed: test -f /run/authelia-authelia/users.json
server: (finished: must succeed: test -f /run/authelia-authelia/users.json, in 0.01 seconds)
server: must succeed: cat /run/authelia-authelia/users.json
server: (finished: must succeed: cat /run/authelia-authelia/users.json, in 0.01 seconds)
server: must succeed: test -f /run/authelia-authelia/oidc.json
server: (finished: must succeed: test -f /run/authelia-authelia/oidc.json, in 0.01 seconds)
server: must succeed: cat /run/authelia-authelia/oidc.json
server: (finished: must succeed: cat /run/authelia-authelia/oidc.json, in 0.01 seconds)
server: waiting for unit caddy.service
server: (finished: waiting for unit caddy.service, in 0.02 seconds)
server: waiting for success: curl -sf https://auth.test.clan/api/health
server # [7054847.876907] server systemd[1]: Reached target Multi-User System.
server # [7054847.877469] server systemd[1]: Startup finished in 2.806s.
server # [7054847.884181] server authelia[405]: time="2026-08-29T15:04:33Z" level=info msg="Storage schema migration from 0 to 24 is complete"
server # [7054847.884378] server punchcard-punchcard-start[409]: 2026/08/29 15:04:33 Warning: .env file not found, using environment variables: open .env: no such file or directory
server # [7054847.891563] server systemd-resolved[207]: Switching to fallback DNS server 1.1.1.1#one.one.one.one.
server # [7054847.893854] server authelia[405]: time="2026-08-29T15:04:33Z" level=warning msg="Could not determine the clock offset due to an error" error="error occurred during dial: dial udp: lookup time.cloudflare.com: no such host"
server # [7054847.894570] server punchcard-punchcard-start[409]: 2026/08/29 15:04:33 OIDC authentication enabled with issuer: https://auth.test.clan
server # [7054847.894570] server punchcard-punchcard-start[409]: 2026/08/29 15:04:33 Redirect URL: https://punchcard.test.clan/callback
server # [7054847.895129] server punchcard-punchcard-start[409]: 2026/08/29 15:04:33 Server starting on :8099
server # [7054847.905130] server authelia[405]: time="2026-08-29T15:04:33Z" level=info msg="Startup complete"
server # [7054847.905213] server authelia[405]: time="2026-08-29T15:04:33Z" level=info msg="Listening for non-TLS connections on '127.0.0.1:9091' path '/'" server=main service=server
server: (finished: waiting for success: curl -sf https://auth.test.clan/api/health, in 0.10 seconds)
server: waiting for success: curl -sf https://auth.test.clan/.well-known/openid-configuration
server: (finished: waiting for success: curl -sf https://auth.test.clan/.well-known/openid-configuration, in 0.10 seconds)
??? Warning (UserWarning): wait_for_unit(): passing a bare int/float as a duration is deprecated. Use datetime.timedelta instead.
    File "/nix/store/8xlk88ia8b5yg9kfrg3skndwzgphipvr-nixos-test-driver-1.1/lib/python3.14/site-packages/test_driver/duration.py", line 39
server: waiting for unit punchcard-punchcard.service
server: (finished: waiting for unit punchcard-punchcard.service, in 0.02 seconds)
server: waiting for success: curl -sf https://punchcard.test.clan/login
server: (finished: waiting for success: curl -sf https://punchcard.test.clan/login, in 0.10 seconds)
server: must succeed: cat /run/secrets/per-machine/server/authelia-user-bob/password
server: (finished: must succeed: cat /run/secrets/per-machine/server/authelia-user-bob/password, in 0.01 seconds)
server: must succeed: curl -s -o /dev/null -w '%{redirect_url}' -c /tmp/pc-cookies https://punchcard.test.clan/login/start
server: (finished: must succeed: curl -s -o /dev/null -w '%{redirect_url}' -c /tmp/pc-cookies https://punchcard.test.clan/login/start, in 0.21 seconds)
server: must succeed: curl -sf -X POST https://auth.test.clan/api/firstfactor -H 'Content-Type: application/json' -c /tmp/auth-cookies -d '{"username": "bob", "password": "pedicure-unvaried-boney-hacksaw-ethanol-deceiving-sessions", "keepMeLoggedIn": false}'
server: (finished: must succeed: curl -sf -X POST https://auth.test.clan/api/firstfactor -H 'Content-Type: application/json' -c /tmp/auth-cookies -d '{"username": "bob", "password": "pedicure-unvaried-boney-hacksaw-ethanol-deceiving-sessions", "keepMeLoggedIn": false}', in 1.14 seconds)
server: must succeed: curl -s -o /dev/null -w '%{redirect_url}' -b /tmp/auth-cookies -c /tmp/auth-cookies 'https://auth.test.clan/api/oidc/authorization?client_id=punchcard-punchcard&code_challenge=sC0i-EWqOpkAyojy5Q8MWYkSlETIGDpz6y8ZAYAYkxY&code_challenge_method=S256&redirect_uri=https%3A%2F%2Fpunchcard.test.clan%2Fcallback&response_type=code&scope=openid+profile+email&state=ODjzD0gBb-jhfHn3VgUZSa5CmR1IHhBHmzxshE3rt9k%3D'
server: (finished: must succeed: curl -s -o /dev/null -w '%{redirect_url}' -b /tmp/auth-cookies -c /tmp/auth-cookies 'https://auth.test.clan/api/oidc/authorization?client_id=punchcard-punchcard&code_challenge=sC0i-EWqOpkAyojy5Q8MWYkSlETIGDpz6y8ZAYAYkxY&code_challenge_method=S256&redirect_uri=https%3A%2F%2Fpunchcard.test.clan%2Fcallback&response_type=code&scope=openid+profile+email&state=ODjzD0gBb-jhfHn3VgUZSa5CmR1IHhBHmzxshE3rt9k%3D', in 0.11 seconds)
server: must succeed: curl -s -o /dev/null -w '%{http_code}' -c /tmp/pc-cookies -b /tmp/pc-cookies 'https://punchcard.test.clan/callback?code=authelia_ac_vxx-L0TnORHwnodMqd-ZCLlrZC-LKUt-c4aS43u_EDc.1D6iGfL0UpZdJQiWtScDhUZMCRN3CLJa-cub3T69B_4&iss=https%3A%2F%2Fauth.test.clan&scope=openid+profile+email&state=ODjzD0gBb-jhfHn3VgUZSa5CmR1IHhBHmzxshE3rt9k%3D'
server: (finished: must succeed: curl -s -o /dev/null -w '%{http_code}' -c /tmp/pc-cookies -b /tmp/pc-cookies 'https://punchcard.test.clan/callback?code=authelia_ac_vxx-L0TnORHwnodMqd-ZCLlrZC-LKUt-c4aS43u_EDc.1D6iGfL0UpZdJQiWtScDhUZMCRN3CLJa-cub3T69B_4&iss=https%3A%2F%2Fauth.test.clan&scope=openid+profile+email&state=ODjzD0gBb-jhfHn3VgUZSa5CmR1IHhBHmzxshE3rt9k%3D', in 0.32 seconds)
server: must succeed: curl -s -L -o /dev/null -w '%{http_code}' -b /tmp/pc-cookies -c /tmp/pc-cookies https://punchcard.test.clan/
server: (finished: must succeed: curl -s -L -o /dev/null -w '%{http_code}' -b /tmp/pc-cookies -c /tmp/pc-cookies https://punchcard.test.clan/, in 0.11 seconds)
(finished: run the VM test script, in 5.95 seconds)
test script finished in 5.97s
cleanup
kill NspawnMachine (pid 51)
server # [7054850.004591] server authelia[405]: time="2026-08-29T15:04:36Z" level=error msg="Access Request failed with error: Client authentication failed (e.g., unknown client, no client authentication included, or unsupported authentication method). The request was determined to be using 'token_endpoint_auth_method' method 'client_secret_basic', however the OAuth 2.0 client registration does not allow this method. The registered client with id 'punchcard-punchcard' is configured to only support 'token_endpoint_auth_method' method 'client_secret_post'. Either the Authorization Server client registration will need to have the 'token_endpoint_auth_method' updated to 'client_secret_basic' or the Relying Party will need to be configured to use 'client_secret_post'." method=POST path=/api/oidc/token remote_ip="::1"
server # [7054850.223683] server punchcard-punchcard-start[409]: 2026/08/29 15:04:36 User  () logged in successfully
(finished: cleanup, in 0.22 seconds)
Container server terminated by signal KILL.