container-test-run-user-firewall-nftables
checks.aarch64-linux.nixos-test-user-firewall-nftables
· build #1009
· raw
1build01: building v2z280bvxs3z92fp46m2rsa7cl44nhjj-container-test-run-user-firewall-nftables.drv2Machine state will be reset. To keep it, pass --keep-machine-state3start all VLans4(finished: start all VLans, in 0.00 seconds)56Test will time out and terminate in 3600.0 seconds7run the VM test script8additionally exposed symbols:9 machine, router,10 vlan1,11 start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh12start all VMs13machine: systemd-nspawn running (pid 52)14router: systemd-nspawn running (pid 53)15machine: Waiting for journal at /build/vm-state-machine/var/log/journal...16router: Waiting for journal at /build/vm-state-router/var/log/journal...17(finished: start all VMs, in 0.00 seconds)18router: waiting for unit multi-user.target19nixos-nspawn(machine): TAP vde-tap1 not found; container will be isolated from VDE20nixos-nspawn(machine): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.21nixos-nspawn(router): TAP vde-tap1 not found; container will be isolated from VDE22nixos-nspawn(router): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.23Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.24░ Spawning container machine on /build/vm-state-machine.25Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.26░ Spawning container router on /build/vm-state-router.27router # [38508.159756] router systemd-journald[57]: Journal started28machine # [38508.145594] machine systemd-journald[57]: Journal started29router # [38508.159817] router systemd-journald[57]: Runtime Journal (/run/log/journal/515222819f0040d0bba31728f2599693) is 8M, max 2.5G, 2.4G free.30router # [38508.171414] router systemd[1]: Finished Create Static Device Nodes in /dev gracefully.31machine # [38508.145654] machine systemd-journald[57]: Runtime Journal (/run/log/journal/c4f72c469d8743ab9e4c20c5429a3a37) is 8M, max 2.5G, 2.4G free.32router # [38508.183962] router systemd[1]: Starting Flush Journal to Persistent Storage...33machine # [38508.152814] machine systemd[1]: Finished Apply Kernel Variables.34router # [38508.184767] router systemd[1]: Starting Network Name Resolution...35machine # [38508.164672] machine systemd[1]: Finished Create Static Device Nodes in /dev gracefully.36router # [38508.185379] router systemd[1]: Starting Create Static Device Nodes in /dev...37machine # [38508.179418] machine systemd[1]: Starting Flush Journal to Persistent Storage...38router # [38508.192364] router systemd-journald[57]: Time spent on flushing to /var/log/journal/515222819f0040d0bba31728f2599693 is 1.530ms for 6 entries.39machine # [38508.180113] machine systemd[1]: Starting Create Static Device Nodes in /dev...40router # [38508.192364] router systemd-journald[57]: System Journal (/var/log/journal/515222819f0040d0bba31728f2599693) is 8M, max 4G, 3.9G free.41machine # [38508.190156] machine systemd-journald[57]: Time spent on flushing to /var/log/journal/c4f72c469d8743ab9e4c20c5429a3a37 is 1.515ms for 6 entries.42router # [38508.206873] router systemd[1]: Finished Create Static Device Nodes in /dev.43machine # [38508.190156] machine systemd-journald[57]: System Journal (/var/log/journal/c4f72c469d8743ab9e4c20c5429a3a37) is 8M, max 4G, 3.9G free.44router # [38508.207485] router systemd[1]: Reached target Preparation for Local File Systems.45machine # [38508.196962] machine systemd[1]: Finished Create Static Device Nodes in /dev.46router # [38508.207595] router systemd[1]: Reached target Local File Systems.47machine # [38508.197535] machine systemd[1]: Reached target Preparation for Local File Systems.48router # [38508.208462] router systemd[1]: Listening on Boot Loader Control Service Socket.49machine # [38508.197649] machine systemd[1]: Reached target Local File Systems.50router # [38508.208512] router systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container51machine # [38508.198471] machine systemd[1]: Listening on Boot Loader Control Service Socket.52router # [38508.209308] router systemd[1]: Starting Save Transient machine-id to Disk...53machine # [38508.198522] machine systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container54router # [38508.209341] router systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys55machine # [38508.199363] machine systemd[1]: Starting Save Transient machine-id to Disk...56machine # [38508.199397] machine systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys57router # [38508.210275] router systemd[1]: Starting Network Management...58machine # [38508.211128] machine systemd[1]: Finished Flush Journal to Persistent Storage.59router # [38508.211050] router systemd[1]: Finished Flush Journal to Persistent Storage.60machine # [38508.212431] machine systemd[1]: Starting Create System Files and Directories...61router # [38508.212428] router systemd[1]: Starting Create System Files and Directories...62machine # [38508.226572] machine systemd-tmpfiles[69]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted63router # [38508.226600] router systemd-tmpfiles[72]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted64machine # [38508.226730] machine systemd-tmpfiles[69]: fchmod() of /var/log/journal failed: Operation not permitted65router # [38508.226758] router systemd-tmpfiles[72]: fchmod() of /var/log/journal failed: Operation not permitted66machine # [38508.226834] machine systemd-tmpfiles[69]: fchmod() of /var/log/journal/c4f72c469d8743ab9e4c20c5429a3a37 failed: Operation not permitted67router # [38508.226863] router systemd-tmpfiles[72]: fchmod() of /var/log/journal/515222819f0040d0bba31728f2599693 failed: Operation not permitted68machine # [38508.226987] machine systemd-tmpfiles[69]: fchmod() of /run/log/journal failed: Operation not permitted69router # [38508.227019] router systemd-tmpfiles[72]: fchmod() of /run/log/journal failed: Operation not permitted70router # [38508.228378] router systemd[1]: Finished Create System Files and Directories.71machine # [38508.228342] machine systemd[1]: Finished Create System Files and Directories.72router # [38508.229438] router systemd[1]: Starting Rebuild Journal Catalog...73machine # [38508.229441] machine systemd[1]: Starting Rebuild Journal Catalog...74router # [38508.230395] router systemd[1]: Starting Record System Boot/Shutdown in UTMP...75machine # [38508.230152] machine systemd[1]: Starting Record System Boot/Shutdown in UTMP...76router # [38508.241880] router systemd[1]: Finished Record System Boot/Shutdown in UTMP.77machine # [38508.242261] machine systemd[1]: Finished Record System Boot/Shutdown in UTMP.78machine # [38508.248427] machine systemd[1]: Finished Rebuild Journal Catalog.79machine # [38508.249479] machine systemd[1]: Starting Update is Completed...80router # [38508.251782] router systemd[1]: Finished Rebuild Journal Catalog.81router # [38508.253010] router systemd[1]: Starting Update is Completed...82router # [38508.264492] router systemd[1]: Finished Update is Completed.83router # [38508.284888] router systemd[1]: Finished Save Transient machine-id to Disk.84machine # [38508.259910] machine systemd[1]: Finished Update is Completed.85machine # [38508.260061] machine systemd[1]: Reached target System Initialization.86machine # [38508.260162] machine systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container87machine # [38508.260219] machine systemd[1]: Started Daily Cleanup of Temporary Directories.88machine # [38508.260243] machine systemd[1]: Reached target Timer Units.89machine # [38508.260369] machine systemd[1]: Listening on D-Bus System Message Bus Socket.90machine # [38508.260483] machine systemd[1]: Listening on Nix Daemon Socket.91machine # [38508.260580] machine systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.92machine # [38508.260601] machine systemd[1]: Reached target Socket Units.93machine # [38508.260634] machine systemd[1]: Reached target Basic System.94machine # [38508.261695] machine systemd[1]: Starting Import lastlog data into lastlog2 database...95machine # [38508.262402] machine systemd[1]: Starting nftables firewall...96machine # [38508.263205] machine systemd[1]: Starting Name Service Cache Daemon (nsncd)...97machine # [38508.280936] machine systemd[1]: Finished Import lastlog data into lastlog2 database.98machine # [38508.284357] machine systemd[1]: Finished Save Transient machine-id to Disk.99machine # [38508.347397] machine systemd[1]: Finished nftables firewall.100machine # [38508.347574] machine systemd[1]: Reached target Preparation for Network.101machine # [38508.348573] machine systemd[1]: Starting Address configuration of eth1...102machine # [38508.349498] machine systemd[1]: Starting Extra networking commands....103machine # [38508.350279] machine systemd[1]: Starting Setup wg0 dummy interface...104machine # [38508.366569] machine network-addresses-eth1-start[95]: adding address 192.168.1.1/24... done105machine # [38508.368391] machine systemd[1]: Finished Setup wg0 dummy interface.106machine # [38508.369119] machine network-addresses-eth1-start[95]: adding address 2001:db8:1::1/64... done107machine # [38508.373235] machine systemd[1]: Finished Address configuration of eth1.108machine # [38508.389606] machine nsncd[79]: Oct 16 20:05:13.361 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"109machine # [38508.389707] machine systemd[1]: Started Name Service Cache Daemon (nsncd).110machine # [38508.389814] machine systemd[1]: Reached target Host and Network Name Lookups.111machine # [38508.389916] machine systemd[1]: Reached target User and Group Name Lookups.112machine # [38508.391894] machine systemd[1]: Starting User Login Management...113machine # [38508.410483] machine systemd[1]: Stopped target Host and Network Name Lookups.114machine # [38508.410553] machine systemd[1]: Stopping Host and Network Name Lookups...115machine # [38508.410610] machine systemd[1]: Stopped target User and Group Name Lookups.116machine # [38508.410640] machine systemd[1]: Stopping User and Group Name Lookups...117machine # [38508.410823] machine systemd[1]: Stopping Name Service Cache Daemon (nsncd)...118machine # [38508.415090] machine systemd[1]: nscd.service: Deactivated successfully.119machine # [38508.415318] machine systemd[1]: Stopped Name Service Cache Daemon (nsncd).120machine # [38508.417949] machine systemd[1]: Starting Name Service Cache Daemon (nsncd)...121machine # [38508.424912] machine systemd[1]: Finished Extra networking commands..122machine # [38508.425069] machine systemd[1]: Reached target Network.123machine # [38508.426108] machine systemd[1]: Starting Nginx Web Server...124machine # [38508.544620] machine systemd[1]: Started Name Service Cache Daemon (nsncd).125machine # [38508.544797] machine nsncd[177]: Oct 16 20:05:13.516 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"126machine # [38508.544673] machine systemd[1]: Reached target Host and Network Name Lookups.127machine # [38508.544733] machine systemd[1]: Reached target User and Group Name Lookups.128machine # [38508.545929] machine systemd[1]: Starting Permit User Sessions...129machine # [38508.588227] machine systemd[1]: Finished Permit User Sessions.130machine # [38508.589935] machine systemd[1]: Started Console Getty.131machine # [38508.590009] machine systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0132machine # [38508.590042] machine systemd[1]: Reached target Login Prompts.133router # [38508.866050] router systemd-networkd[70]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted134router # [38508.866148] router systemd-networkd[70]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted135router # [38508.877277] router systemd-networkd[70]: lo: Link UP136router # [38508.877283] router systemd-networkd[70]: lo: Gained carrier137router # [38508.877474] router systemd-networkd[70]: eth1: Configuring with /etc/systemd/network/40-eth1.network.138router # [38508.877868] router systemd[1]: Started Network Management.139router # [38508.877912] router systemd-networkd[70]: eth1: Link UP140router # [38508.878118] router systemd-networkd[70]: eth1: Gained carrier141router # [38508.879557] router systemd[1]: Starting Enable Persistent Storage in systemd-networkd...142router # [38508.940476] router systemd[1]: Finished Enable Persistent Storage in systemd-networkd.143router # [38509.156076] router systemd[1]: etc-machine\x2did.mount: Deactivated successfully.144router # [38509.365224] router systemd-resolved[64]: Positive Trust Anchors:145router # [38509.365236] router systemd-resolved[64]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d146router # [38509.365240] router systemd-resolved[64]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16147router # [38509.365274] router systemd-resolved[64]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test148router # [38509.385896] router systemd-resolved[64]: Using system hostname 'router'.149router # [38509.387229] router systemd[1]: Started Network Name Resolution.150router # [38509.387357] router systemd[1]: Reached target Network.151router # [38509.387469] router systemd[1]: Reached target System Initialization.152router # [38509.387572] router systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container153router # [38509.387621] router systemd[1]: Started Daily Cleanup of Temporary Directories.154router # [38509.387656] router systemd[1]: Reached target Timer Units.155router # [38509.387872] router systemd[1]: Listening on D-Bus System Message Bus Socket.156router # [38509.388101] router systemd[1]: Listening on Nix Daemon Socket.157router # [38509.388334] router systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.158router # [38509.388379] router systemd[1]: Reached target Socket Units.159router # [38509.388459] router systemd[1]: Reached target Basic System.160router # [38509.390123] router systemd[1]: Starting Import lastlog data into lastlog2 database...161router # [38509.391467] router systemd[1]: Starting Nginx Web Server...162router # [38509.392785] router systemd[1]: Starting Name Service Cache Daemon (nsncd)...163router # [38509.394856] router systemd[1]: Starting D-Bus System Message Bus...164router # [38509.410640] router systemd[1]: Finished Import lastlog data into lastlog2 database.165machine # [38509.161500] machine systemd[1]: etc-machine\x2did.mount: Deactivated successfully.166machine # [38509.180315] machine systemd-logind[148]: New seat seat0.167machine # [38509.180517] machine systemd[1]: Started User Login Management.168machine # [38509.182173] machine systemd[1]: Starting D-Bus System Message Bus...169machine # [38509.183442] machine systemd[1]: Starting linger-users.service...170machine # [38509.250797] machine systemd[1]: linger-users.service: Deactivated successfully.171machine # [38509.251146] machine systemd[1]: Finished linger-users.service.172machine # [38509.323244] machine nginx-pre-start[206]: nginx: the configuration file /nix/store/igv3h4h68mplhnch7x33xlb9lx7l9lrd-nginx.conf syntax is ok173machine # [38509.323585] machine nginx-pre-start[206]: nginx: configuration file /nix/store/igv3h4h68mplhnch7x33xlb9lx7l9lrd-nginx.conf test is successful174machine # [38509.329904] machine systemd[1]: Started Nginx Web Server.175machine # [38509.330245] machine systemd[1]: Reached target Multi-User System.176router # [38509.589929] router nsncd[87]: Oct 16 20:05:14.561 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"177router # [38509.589959] router systemd[1]: Started Name Service Cache Daemon (nsncd).178router # [38509.590069] router systemd[1]: Reached target Host and Network Name Lookups.179router # [38509.590162] router systemd[1]: Reached target User and Group Name Lookups.180router # [38509.624512] router systemd[1]: Starting User Login Management...181router # [38509.625934] router systemd[1]: Starting Permit User Sessions...182router # [38509.637130] router systemd[1]: Finished Permit User Sessions.183router # [38509.639157] router systemd[1]: Started Console Getty.184router # [38509.639265] router systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0185router # [38509.639311] router systemd[1]: Reached target Login Prompts.186machine # [38509.603879] machine dbus-broker-launch[202]: Looking up NSS user entry for 'systemd-timesync'...187machine # [38509.605161] machine dbus-broker-launch[202]: NSS returned no entry for 'systemd-timesync'188machine # [38509.605161] machine dbus-broker-launch[202]: Invalid user-name in /nix/store/6sbna6vqn2qb1ijb8pxka4i0czpbncc9-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"189machine # [38509.605770] machine systemd[1]: Started D-Bus System Message Bus.190machine # [38509.606354] machine systemd[1]: Startup finished in 1.901s.191machine # [38509.613029] machine dbus-broker-launch[202]: Ready192router # [38509.739710] router dbus-broker-launch[88]: Looking up NSS user entry for 'systemd-timesync'...193router # [38509.740570] router dbus-broker-launch[88]: NSS returned no entry for 'systemd-timesync'194router # [38509.740570] router dbus-broker-launch[88]: Invalid user-name in /nix/store/a79fa80l9qik8lpm82dzcwhfm748vl75-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"195router # [38509.741277] router systemd[1]: Started D-Bus System Message Bus.196router # [38509.749709] router dbus-broker-launch[88]: Ready197router # [38510.108289] router systemd-networkd[70]: eth1: Gained IPv6LL198router # [38510.433728] router nginx-pre-start[117]: nginx: the configuration file /nix/store/2g0hvsm6n3kgv0hla49sznf8i564sipb-nginx.conf syntax is ok199router # [38510.434282] router nginx-pre-start[117]: nginx: configuration file /nix/store/2g0hvsm6n3kgv0hla49sznf8i564sipb-nginx.conf test is successful200router # [38510.442686] router systemd[1]: Started Nginx Web Server.201router # [38510.515287] router systemd-logind[106]: New seat seat0.202router # [38510.515440] router systemd[1]: Started User Login Management.203router # [38510.516990] router systemd[1]: Starting linger-users.service...204router # [38510.531902] router systemd[1]: linger-users.service: Deactivated successfully.205router # [38510.532202] router systemd[1]: Finished linger-users.service.206router # [38510.532749] router systemd[1]: Reached target Multi-User System.207router # [38510.533064] router systemd[1]: Startup finished in 2.819s.208router: (finished: waiting for unit multi-user.target, in 3.65 seconds)209router: waiting for TCP port 80 on localhost210Connection to localhost (::1) 80 port [tcp/http] succeeded!211router: (finished: waiting for TCP port 80 on localhost, in 1.02 seconds)212machine: waiting for unit multi-user.target213machine: (finished: waiting for unit multi-user.target, in 0.02 seconds)214machine: waiting for unit nginx.service215machine: (finished: waiting for unit nginx.service, in 0.02 seconds)216router: must succeed: ip -4 addr show eth1 | grep -oP '(?<=inet\s)\d+(\.\d+){3}'217router: (finished: must succeed: ip -4 addr show eth1 | grep -oP '(?<=inet\s)\d+(\.\d+){3}', in 0.01 seconds)218router: must succeed: ip -6 addr show eth1 | grep -oP '(?<=inet6\s)[0-9a-f:]+' | grep -v '^fe80' | head -1219router: (finished: must succeed: ip -6 addr show eth1 | grep -oP '(?<=inet6\s)[0-9a-f:]+' | grep -v '^fe80' | head -1, in 0.01 seconds)220Router IPv4: 192.168.1.2221Router IPv6: 2001:db8:1::2222machine: must succeed: systemctl restart nftables223machine: (finished: must succeed: systemctl restart nftables, in 0.24 seconds)224machine: waiting for unit nftables.service225machine: (finished: waiting for unit nftables.service, in 0.01 seconds)226machine: must succeed: nft list table inet user-firewall >&2227table inet user-firewall {228 chain output {229 type filter hook output priority filter; policy accept;230 oifname "lo" counter packets 0 bytes 0 accept comment "allow lo"231 oifname "tun*" counter packets 0 bytes 0 accept comment "allow tun*"232 oifname "tap*" counter packets 0 bytes 0 accept comment "allow tap*"233 oifname "wg*" counter packets 0 bytes 0 accept comment "allow wg*"234 oifname "tailscale*" counter packets 0 bytes 0 accept comment "allow tailscale*"235 oifname "zt*" counter packets 0 bytes 0 accept comment "allow zt*"236 oifname "vpn*" counter packets 0 bytes 0 accept comment "allow vpn*"237 oifname "ipsec*" counter packets 0 bytes 0 accept comment "allow ipsec*"238 oifname "nebula*" counter packets 0 bytes 0 accept comment "allow nebula*"239 oifname "tinc*" counter packets 0 bytes 0 accept comment "allow tinc*"240 oifname "edge*" counter packets 0 bytes 0 accept comment "allow edge*"241 oifname "hyprspace" counter packets 0 bytes 0 accept comment "allow hyprspace"242 oifname "ham0" counter packets 0 bytes 0 accept comment "allow ham0"243 oifname "easytier" counter packets 0 bytes 0 accept comment "allow easytier"244 oifname "mycelium" counter packets 0 bytes 0 accept comment "allow mycelium"245 meta skuid 1002 counter packets 0 bytes 0 reject comment "blocked user bob"246 }247}248machine: (finished: must succeed: nft list table inet user-firewall >&2, in 0.01 seconds)249machine: waiting for success: runuser -u alice -- curl -s http://127.0.0.1:8080250machine # [38511.990972] machine systemd[1]: Stopping nftables firewall...251machine # [38512.138937] machine systemd[1]: nftables.service: Deactivated successfully.252machine # [38512.139301] machine systemd[1]: Stopped nftables firewall.253machine # [38512.141611] machine systemd[1]: Starting nftables firewall...254machine # [38512.221268] machine systemd[1]: Finished nftables firewall.255machine: (finished: waiting for success: runuser -u alice -- curl -s http://127.0.0.1:8080, in 0.02 seconds)256machine: must succeed: runuser -u alice -- curl -s http://192.168.1.2257machine: (finished: must succeed: runuser -u alice -- curl -s http://192.168.1.2, in 0.02 seconds)258machine: must succeed: runuser -u alice -- curl -s http://[2001:db8:1::2]259machine: (finished: must succeed: runuser -u alice -- curl -s http://[2001:db8:1::2], in 0.02 seconds)260machine: must succeed: runuser -u bob -- curl -s http://127.0.0.1:8080261machine: (finished: must succeed: runuser -u bob -- curl -s http://127.0.0.1:8080, in 0.02 seconds)262machine: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://192.168.1.2 2>&1 || echo 'EXIT_CODE='$?263machine: (finished: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://192.168.1.2 2>&1 || echo 'EXIT_CODE='$?, in 0.02 seconds)264machine: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://[2001:db8:1::2] 2>&1 || echo 'EXIT_CODE='$?265machine # [38512.256712] machine runuser[238]: pam_unix(runuser:session): session opened for user alice(uid=1001) by (uid=0)266machine # [38512.267093] machine runuser[238]: pam_unix(runuser:session): session closed for user alice267machine # [38512.276426] machine runuser[240]: pam_unix(runuser:session): session opened for user alice(uid=1001) by (uid=0)268machine # [38512.286711] machine runuser[240]: pam_unix(runuser:session): session closed for user alice269machine # [38512.294633] machine runuser[242]: pam_unix(runuser:session): session opened for user alice(uid=1001) by (uid=0)270machine # [38512.302432] machine runuser[242]: pam_unix(runuser:session): session closed for user alice271machine # [38512.312044] machine runuser[244]: pam_unix(runuser:session): session opened for user bob(uid=1002) by (uid=0)272machine # [38512.322205] machine runuser[244]: pam_unix(runuser:session): session closed for user bob273machine # [38512.332381] machine runuser[247]: pam_unix(runuser:session): session opened for user bob(uid=1002) by (uid=0)274machine # [38512.342416] machine runuser[247]: pam_unix(runuser:session): session closed for user bob275machine # [38512.351649] machine runuser[250]: pam_unix(runuser:session): session opened for user bob(uid=1002) by (uid=0)276machine: (finished: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://[2001:db8:1::2] 2>&1 || echo 'EXIT_CODE='$?, in 1.04 seconds)277machine: must succeed: nft list table inet user-firewall278machine: (finished: must succeed: nft list table inet user-firewall, in 0.01 seconds)279machine: waiting for unit setup-wg0-interface.service280machine: (finished: waiting for unit setup-wg0-interface.service, in 0.01 seconds)281machine: waiting for unit nginx.service282machine: (finished: waiting for unit nginx.service, in 0.01 seconds)283machine: waiting for TCP port 8081 on 10.100.0.2284Connection to 10.100.0.2 8081 port [tcp/sunproxyadmin] succeeded!285machine: (finished: waiting for TCP port 8081 on 10.100.0.2, in 0.01 seconds)286machine: must succeed: ip link show wg0287machine: (finished: must succeed: ip link show wg0, in 0.01 seconds)288machine: must succeed: ip addr show wg0289machine: (finished: must succeed: ip addr show wg0, in 0.01 seconds)290machine: must succeed: runuser -u alice -- curl -s --interface wg0 http://10.100.0.2:8081/291machine: (finished: must succeed: runuser -u alice -- curl -s --interface wg0 http://10.100.0.2:8081/, in 0.02 seconds)292machine: must succeed: runuser -u alice -- curl -s --interface wg0 http://[fd00::2]:8081/293machine: (finished: must succeed: runuser -u alice -- curl -s --interface wg0 http://[fd00::2]:8081/, in 0.02 seconds)294machine: must succeed: runuser -u bob -- curl -s --interface wg0 http://10.100.0.2:8081/295machine: (finished: must succeed: runuser -u bob -- curl -s --interface wg0 http://10.100.0.2:8081/, in 0.02 seconds)296machine: must succeed: runuser -u bob -- curl -s --interface wg0 http://[fd00::2]:8081/297machine: (finished: must succeed: runuser -u bob -- curl -s --interface wg0 http://[fd00::2]:8081/, in 0.02 seconds)298machine: must succeed: nft list table inet user-firewall | grep -E 'oifname.*wg' >&2299 oifname "wg*" counter packets 1 bytes 56 accept comment "allow wg*"300machine: (finished: must succeed: nft list table inet user-firewall | grep -E 'oifname.*wg' >&2, in 0.01 seconds)301(finished: run the VM test script, in 6.29 seconds)302test script finished in 6.35s303cleanup304kill NspawnMachine (pid 52)305kill NspawnMachine (pid 53)306Container machine terminated by signal KILL.307Container router terminated by signal KILL.308(finished: cleanup, in 0.38 seconds)