vars-check-pki
checks.aarch64-linux.pki
· build #1043
· raw
1build01: building sn39xn34hy1220iq8szdgq49isg7vw4g-vars-check-pki.drv2Running vars check using Nix-based executor...3Executing shared generators...4Executing shared generator: pki-root-ca5+ set -euo pipefail6+ PATH=/nix/store/1r53ih2yfqw9h9mcbz56b59yxipg0a9c-openssl-3.5.9-bin/bin:/nix/store/m2ar7c5ylhgg8vp7dfdx9bhjfvki5xdg-coreutils-9.12/bin7+ [[ ! -d /etc ]]8+ mkdir -p /etc9+ cat10++ id -g11+ cat12++ id -u13++ id -g14+ cat15+ openssl genrsa -out /output/ca.key 409616+ openssl req -x509 -new -nodes -key /output/ca.key -sha256 -days 3650 -subj '/CN=Clan Root CA' -addext basicConstraints=critical,CA:TRUE -addext keyUsage=critical,keyCertSign,cRLSign -addext subjectKeyIdentifier=hash -out /output/ca.crt17✓ Generated shared file: pki-root-ca/ca.crt18✓ Generated shared file: pki-root-ca/ca.key19✓ Shared Generator pki-root-ca completed20✓ Shared generators completed21Processing machine: caddy22Generator execution order: cert-website.caddy -> state-version23Executing generator: cert-website.caddy24+ set -euo pipefail25+ PATH=/nix/store/1r53ih2yfqw9h9mcbz56b59yxipg0a9c-openssl-3.5.9-bin/bin:/nix/store/m2ar7c5ylhgg8vp7dfdx9bhjfvki5xdg-coreutils-9.12/bin26+ [[ ! -d /etc ]]27+ mkdir -p /etc28+ cat29++ id -g30+ cat31++ id -u32++ id -g33+ cat34+ openssl genrsa -out /output/website.caddy.key 409635+ openssl req -new -key /output/website.caddy.key -subj /CN=website.caddy.test -out endpoint.csr36+ printf subjectAltName=DNS:website.caddy.test37+ openssl x509 -req -in endpoint.csr -CA /input/pki-root-ca/ca.crt -CAkey /input/pki-root-ca/ca.key -CAcreateserial -days 365 -sha256 -extfile san.cnf -out /output/website.caddy.crt38Certificate request self-signature ok39subject=CN=website.caddy.test40+ cat /output/website.caddy.crt /input/pki-root-ca/ca.crt41✓ Generated file: cert-website.caddy/website.caddy.crt42✓ Generated file: cert-website.caddy/website.caddy.fullchain.crt43✓ Generated file: cert-website.caddy/website.caddy.key44✓ Generator cert-website.caddy completed45Executing generator: state-version46+ set -euo pipefail47+ PATH=/nix/store/m2ar7c5ylhgg8vp7dfdx9bhjfvki5xdg-coreutils-9.12/bin48+ [[ ! -d /etc ]]49+ mkdir -p /etc50+ cat51++ id -g52+ cat53++ id -u54++ id -g55+ cat56+ echo -n 26.1157✓ Generated file: state-version/version58✓ Generator state-version completed59✓ Machine caddy completed60Processing machine: client61Generator execution order: state-version62Executing generator: state-version63+ set -euo pipefail64+ PATH=/nix/store/m2ar7c5ylhgg8vp7dfdx9bhjfvki5xdg-coreutils-9.12/bin65+ [[ ! -d /etc ]]66+ mkdir -p /etc67+ cat68++ id -g69+ cat70++ id -u71++ id -g72+ cat73+ echo -n 26.1174✓ Generated file: state-version/version75✓ Generator state-version completed76✓ Machine client completed77Processing machine: nginx78Generator execution order: cert-website.nginx -> state-version79Executing generator: cert-website.nginx80+ set -euo pipefail81+ PATH=/nix/store/1r53ih2yfqw9h9mcbz56b59yxipg0a9c-openssl-3.5.9-bin/bin:/nix/store/m2ar7c5ylhgg8vp7dfdx9bhjfvki5xdg-coreutils-9.12/bin82+ [[ ! -d /etc ]]83+ mkdir -p /etc84+ cat85++ id -g86+ cat87++ id -u88++ id -g89+ cat90+ openssl genrsa -out /output/website.nginx.key 409691+ openssl req -new -key /output/website.nginx.key -subj /CN=website.nginx.test -out endpoint.csr92+ printf subjectAltName=DNS:website.nginx.test93+ openssl x509 -req -in endpoint.csr -CA /input/pki-root-ca/ca.crt -CAkey /input/pki-root-ca/ca.key -CAcreateserial -days 365 -sha256 -extfile san.cnf -out /output/website.nginx.crt94Certificate request self-signature ok95subject=CN=website.nginx.test96+ cat /output/website.nginx.crt /input/pki-root-ca/ca.crt97✓ Generated file: cert-website.nginx/website.nginx.crt98✓ Generated file: cert-website.nginx/website.nginx.fullchain.crt99✓ Generated file: cert-website.nginx/website.nginx.key100✓ Generator cert-website.nginx completed101Executing generator: state-version102+ set -euo pipefail103+ PATH=/nix/store/m2ar7c5ylhgg8vp7dfdx9bhjfvki5xdg-coreutils-9.12/bin104+ [[ ! -d /etc ]]105+ mkdir -p /etc106+ cat107++ id -g108+ cat109++ id -u110++ id -g111+ cat112+ echo -n 26.11113✓ Generated file: state-version/version114✓ Generator state-version completed115✓ Machine nginx completed116✓ All vars checks completed successfully