these 262 derivations will be built:
  /nix/store/0039d41x6z94z7w2z77hcnzk1qvj3z3l-user-generators.drv
  /nix/store/fbm47qn99xc97gmq9p946r56a4f87a5y-string-hosts.drv
  /nix/store/wbh7q2lj44hfkcnnypmq2y66mbcw4hp2-localhost-hosts.drv
  /nix/store/z1v1lvc6vvb5gmfqmwcp2g9grn0l6a5i-extra-hosts.drv
  /nix/store/00k59p7jr61naajjja59ryccyj7x1zr1-hosts.drv
  /nix/store/04mb34aanc7nmbjjgk7666bpih8iyay3-unit-nixos-fake-graphical-session.target.drv
  /nix/store/0aszd5vw4mjc671kycggcrdkm29qvmy7-etc-shells.drv
  /nix/store/0n8cmklgasrar3nslbjz707d3ap0n3j9-unit-systemd-hostnamed.service.drv
  /nix/store/0w5fzbyj8zj4ki8k6ffhyf2m2kjzfkrv-unit-user-runtime-dir-.service.drv
  /nix/store/f4binmsggy1d5jdvg0v5zzb4v26vkavr-etc-systemd-networkd.conf.drv
  /nix/store/11k2q79s2gb7hr3skm9h08jybsvcr1lz-X-Restart-Triggers-systemd-networkd.drv
  /nix/store/yplfnrpm44g5zk7hx3inrzb68zkfk1gr-string-hosts.drv
  /nix/store/1b7vriqscnmwwdkbfsdsz9hgrq7ifsw3-hosts.drv
  /nix/store/1d67537zx2p92igf18xvxf37kb8qsi5l-unit-getty.target.drv
  /nix/store/1jr3k9r0drjq88caz4fll495xj6qwicm-unit-99-wireless-client-dhcp.network.drv
  /nix/store/8jvhdq3siqrhrqracly8k2ikzbfykk7d-unit-40-eth1.network.drv
  /nix/store/z7w8yyi5h8n5r09vpsh6pyn5ggwkkrga-unit-99-ethernet-default-dhcp.network.drv
  /nix/store/jpizzjgl0w2q7appfv449050cfcl8hbq-X-Reload-Triggers-systemd-networkd.drv
  /nix/store/1f56rgwgini4frrzm5304hf4b08hfl9v-unit-systemd-networkd.service.drv
  /nix/store/3pn7xz3wzl9752ipgmj3nk2ccpn30vq8-nginx.conf.drv
  /nix/store/1mdvb4adnzwbb61w3vlzy8ksm13b5y8q-unit-script-nginx-pre-start.drv
  /nix/store/1sgqk8vn5sza88w3xyq0iqgdrwghp6k5-unit-serial-getty-hvc0.service-disabled.drv
  /nix/store/1x7a3ws85xyf0a62zwmbxr53gshxnwjm-unit-40-eth1.network.drv
  /nix/store/1xvfl32q751p3janl356zqf05n0b1m5j-lessconfig.drv
  /nix/store/24q8g1g9jxhdxg6qn2rjbwmxffhjjqaa-unit-dbus-broker.service.drv
  /nix/store/29v4lpib6givrqb1gb2iksb6896s3wq1-unit-acme-test.foo.service.drv
  /nix/store/2bzlkjijq9axxyjzjv4nl36rwqxsxrxq-unit-serial-getty-.service.drv
  /nix/store/2f1fcaibpyqqb7rl1snx0ck5dcpl1nvk-nixos-tmpfiles.d.drv
  /nix/store/dd07yl7n791kkl8rwmxdlj0skadqjyfy-hashed-password.root.drv
  /nix/store/2hal0gl551lbh3h57nymxd0777yh0i6b-users-groups.json.drv
  /nix/store/2i65vq2i0a1qk174h1a77fwm00kx1yx2-unit-systemd-boot-random-seed.service.drv
  /nix/store/2p46ql5gnlr4zfcmc0nx4l1i23wsrzi2-unit-script-prepare-kexec-start.drv
  /nix/store/35rwiypq352794w4m6c6zs3bfxxcj91k-decrypt-age-secrets.drv
  /nix/store/3631l3lgxpc29v5hpyzxicljxmanlpd4-cacert-blocklist.txt.drv
  /nix/store/36dnyn64v340j95q8jbdy6nmk3674ris-unit-systemd-journald-audit.socket.drv
  /nix/store/3in53ajxrm6na5gaimy3yship8w8kpjx-mounts.sh.drv
  /nix/store/3mwg1i6r1qzd63kki967xchg20k9b5zc-unit-run-wrappers.mount.drv
  /nix/store/3myyzgr2mrdi58248yzzlmwyiycmfimg-set-environment.drv
  /nix/store/3y0ada7fbhc7xw4lw9bcc6aapj5a6wy2-unit-systemd-networkd-wait-online.service-disabled.drv
  /nix/store/44zalczcqjnwing7kp49q7y30pd8l456-etc-bashrc.drv
  /nix/store/499p8hvldx9bl59l96skykc726yhvqzx-firewall-stop.drv
  /nix/store/4bnzb9adb0gjlv2rd2nnc9f8k2siiys0-local-cmds.drv
  /nix/store/4dbbbajr6rsyvi6mkpjrk7alr8r2ik1q-unit-systemd-networkd-varlink-metrics.socket.drv
  /nix/store/4k51qcg7via1m326v56lxmkvp8h2mglc-unit-fs.target.drv
  /nix/store/4kn9hhq85qs3pmqbx7swk1d1x0rggazf-unit-systemd-makefs-.service.drv
  /nix/store/aii0gblmvj6kkwqb3mcd21dlb5v8y014-run-server-nspawn.drv
  /nix/store/96ahf0nva02p5kz2k6kzrg6iii2cy0p8-nixos-system-ca-test.drv
  /nix/store/c743par8l6z3b16m3sj6lrpcnf7nsyzg-run-ca-nspawn.drv
  /nix/store/qzk8y7wzpvpwx7dls83lm28plxn2722c-test-script.drv
  /nix/store/vivv2w2zlrqqqvj4f2aix4s8m1kx51f9-run-client-nspawn.drv
  /nix/store/f871nryjbppvmrmarxcdb027qficl225-driverConfiguration.json.drv
  /nix/store/pzbsghyagv66afzs0i3wg7fqdfj6h8vg-nixos-test-driver-1.1.drv
  /nix/store/4lzzn4nkpkagm22m9rbdrbn0hjzqjzmy-nixos-test-driver-certificates.drv
  /nix/store/4qmgdgqk1skhnij73lhvv8qfxri8dsi7-unit-firewall.service.drv
  /nix/store/4vphy1dc7m81jj477ki55mh7dvyqf80n-etc-nix-registry.json.drv
  /nix/store/4ygm658vqfn2v6bilbqz5g1x5i914dzr-etc-gai.conf.drv
  /nix/store/50zvr80dzq1qanqzhgj598cgyim16sfm-systemd.drv
  /nix/store/52bsa1z0f0pfgcqqiqrbrhgg4pk731gn-unit-dbus-broker.service.drv
  /nix/store/560ns4p4ml044gh8vfiil7qnpkgj1c9k-nixos-tmpfiles.d.drv
  /nix/store/58hkmmmgpkldpf99s6nv3qrxzd20nn60-unit-systemd-importd.service.drv
  /nix/store/5ccl7jmcg0a5dk4h1idhpkr58gsrxnf8-login.defs.drv
  /nix/store/5gcys7yy157v9x4gqv493l7j1mhv9z2n-X-Restart-Triggers-dbus-broker.drv
  /nix/store/5gpdzhznq3w8lnkz92k61381xmxnpzl6-unit-remote-fs.target.drv
  /nix/store/95amsp4dj6hykxwa1pj76kg2l4da97cj-etc-systemd-journald.conf.drv
  /nix/store/za8d20k4lx3yvf9gj53aybpwiq4imvx7-X-Restart-Triggers-systemd-journald.drv
  /nix/store/5n3ww817ldr6ky767qxg6i16k8mrr4l7-unit-systemd-journald.service.drv
  /nix/store/5w99mcc4vx44z5ilcxl2lnii6jpvqgg7-etc-systemd-user-preset-00-nixos.preset.drv
  /nix/store/613rhikgnysfmx2ads5am3k0ajcgwgdn-unit-systemd-nspawn-.service.drv
  /nix/store/66g8jkcrdadql5mnhm1v02fspb28pha8-etc-resolvconf.conf.drv
  /nix/store/6gd4bm27ckbviz0bva1xzgrpqndk7wv4-unit-network-local-commands.service-disabled.drv
  /nix/store/gndhhpmb93jw6fhpf0bddfdcxq5m4plz-10-acme.conf.drv
  /nix/store/6sl3lrnzavp9jqpj1fa00dvwfmvd0fs5-tmpfiles.d.drv
  /nix/store/78wanj2zk2vj3bc87wh1cqw72nld7xry-unit-script-linger-users-start.drv
  /nix/store/6swivfvj37z1sczmw4wrq03bvhl1wvfy-unit-linger-users.service.drv
  /nix/store/6v519bi4baga85r6fq9sm957bb1m45ib-etc-hostname.drv
  /nix/store/6w15pf1s5kaqsjnw3s2xvw6z2rwn32qn-nixos-system-server-test.drv
  /nix/store/78d9w0vrkxikz65yfxr4lk1qxmclvdj3-system-shutdown.drv
  /nix/store/7h9wlvc3415rnv0029sphrak2agg80pc-dbus-1.drv
  /nix/store/7ylqcs78wr8n8bkrmy5zjbf5jsmf9i3f-etc-systemd-oomd.conf.drv
  /nix/store/813zxvv9s12q7dxnpjzxycpjq5xihdg9-unit-systemd-backlight-.service.drv
  /nix/store/82fixqnbkkqyiwnzwc8inaw1gygb7v6p-activate.drv
  /nix/store/83yar0pl0smdjd23fxgqza1ravihfm4d-issue.drv
  /nix/store/8fx574kin6xhwpc42q2405b3nkfyd7yk-decrypt-age-secrets.drv
  /nix/store/8n6sz5qfdqd79z5q75n4vmzr8rwfn2qi-etc-lvm-lvm.conf.drv
  /nix/store/92wcjnacyiv1iw0dlqqsrf40r9225i9d-cacert-extra-certificates-bundle.crt.drv
  /nix/store/9a66pcpfgnkl1znhnfg8n4d34bcpzc1f-useradd.drv
  /nix/store/mzjbxfjiampmbzlv182cq5i54sv12y9k-unit-script-nginx-pre-start.drv
  /nix/store/s6xx1mzb7xjgsg8bwcvhvv7f3xqd8cxv-nginx.conf.drv
  /nix/store/9ay4s848kj1pg40k5zpg3aadw9bs8vlb-unit-nginx.service.drv
  /nix/store/9b82aii9wc5xa4dzw867vh4kqlwqg1ph-system-path.drv
  /nix/store/gsin90h84n7fb919xv9xq17dlmsiszfs-dbus-1.drv
  /nix/store/9d556ks9k63816djxqw0sx464bic1ik6-X-Restart-Triggers-dbus-broker.drv
  /nix/store/9fxcb12z9pmdkvys3jjxd14srfr2zjm4-firewall-start.drv
  /nix/store/9i45ya7xr6nm3hrkvw7kc0a6nkycs9pa-users-groups.json.drv
  /nix/store/9k8l6gcp07sw65ip8dag6b2lq2bfmx64-acme-postrun.drv
  /nix/store/9ljhn1yj6pw4j8ysgsn1y5xgiyd9wnrg-container-test-run-certificates.drv
  /nix/store/9mv75d9ckm3qwvbqqwbwhji9cv1xsxlv-etc-nanorc.drv
  /nix/store/iylp5kwzvq65rvdqfkxbz6dv4z9q8hw0-X-Restart-Triggers-systemd-tmpfiles-resetup.drv
  /nix/store/9q2hiqmzzc7qn6di2nfz1bc4lpz4320z-unit-systemd-tmpfiles-resetup.service.drv
  /nix/store/a20vjsggc284574ljir9csd8g8wnc5a9-unit-acme-ca.foo.service.drv
  /nix/store/a2iyzf543ibf2w1d48w3xhm5dmgsyrz2-unit-container-getty-.service.drv
  /nix/store/a8ym1w8j4k5qj7r1iwgg5kmypc8xj7rj-unit-systemd-tmpfiles-clean.timer.drv
  /nix/store/aak9bhkv90q1x6acpgjxf933pvd69wwy-X-Restart-Triggers-dbus-broker.drv
  /nix/store/afzznr54c25as6nhkv3ckf95ydn8xx7j-unit-systemd-fsck-.service.drv
  /nix/store/dvziygw7z47ki6d7w01jq6nvfa0hyc61-unit-40-eth1.network.drv
  /nix/store/agrxrjiv4zs1rhimrv10r7yf9psq80sd-X-Reload-Triggers-systemd-networkd.drv
  /nix/store/ak9b34b4n5sg1jqjnvja0v30i3l4mvx4-system-path.drv
  /nix/store/anh8md1czmw95917gy4l50d1wsqidndi-etc-systemd-resolved.conf.drv
  /nix/store/aqn9mbj7b2rqkniv8wabci5dzy3f32rx-builder.pl.drv
  /nix/store/ax6rxv3bczchpg6xia9a0l00zxnzr90v-unit-nix-daemon.socket.drv
  /nix/store/ayqic7csh6z78d9vfz319qji17swd8vg-etc-ssh-ssh_known_hosts.drv
  /nix/store/az00gchkq4529jawl69hblh9mzq9cqb4-etc-systemd-system-preset-00-nixos.preset.drv
  /nix/store/b37q5j103ixs85hiib80zh4vww9qh39d-etc.drv
  /nix/store/bb5hj7rymcbkvb5352j9nxxryg34p7kz-etc-systemd-system.conf.drv
  /nix/store/bffsh1f9qq79krv5a665cnq5sb1w83kn-unit-acme-account-2c44cb477b4787b2cf13.target.drv
  /nix/store/vxdbq93bfp9qyskasz7d2c9l66yrklw3-perl-5.42.3-env.drv
  /nix/store/bicpz0n9s6qznp8gqc1faqdlf2brsywc-nixos-generate-config.drv
  /nix/store/blybxrnfmqcscl36s2i0i6ln7hsi6na6-unit-dbus-broker.service.drv
  /nix/store/br1yi0nwh44jdwm8kfmd5h8b677mrcqj-unit-nginx-config-reload.service.drv
  /nix/store/bsh5bsp6ywr2y3ik3v4wmhrg1imnd7k1-etc-systemd-logind.conf.drv
  /nix/store/bys7k7j8d2mvq2fp6kkfi5k61p20897s-activate.drv
  /nix/store/c6p5h891gsnrwp9zmm57qr28sldqxm92-nss-cacert-3.126.drv
  /nix/store/cdl6zm3lpbbz5l6g0xf83wl8s3rq868x-etc-bash_logout.drv
  /nix/store/cngcwjwfasch48jxq8i17269gh5k6kiq-etc-pam-environment.drv
  /nix/store/dj9ihjci3wfl6x2dlir3iy06jchr9gif-etc-fstab.drv
  /nix/store/fjlmi1y6m65s2nr7cp8n0mwygpbg2n6b-50-coredump.conf.drv
  /nix/store/ikgk3bwzmam655m6s11dbqjnfdssjbsa-etc-profile.drv
  /nix/store/ix21l2bmqmwbpic3f57nvjbzgi1ldc10-etc-netgroup.drv
  /nix/store/l6rhzgsql9z76xpaafnygvmw9nggbjyq-etc-os-release.drv
  /nix/store/mmmrr3d8mxp9cnz9kpylpp2myfkcbk5z-nix.conf.drv
  /nix/store/mqf2j6qknpsqlp1jdjlwlxd44i1f1594-etc-nscd.conf.drv
  /nix/store/n2yfl33yzx6lgx7j49kv7p2s4scx9068-etc-nsswitch.conf.drv
  /nix/store/n4i02sfz16caysfqdxisbhrkdhkqdm6c-etc-hostname.drv
  /nix/store/p7iampqn9f5k4g9n9r299s4m7n5z3yr9-etc-environment.d-50-systemd-path.conf.drv
  /nix/store/q2a4nyzpa31i0g0rdxv2mdhvmmi52b8v-vars-check-certificates.drv
  /nix/store/zl1r4452anb2z4ars8s4min4qcjlhivr-shutdown-ramfs-contents.json.drv
  /nix/store/c70fnxircmajbldq80p7mi3gp9lii89r-unit-generate-shutdown-ramfs.service.drv
  /nix/store/ck31mp834wr1fza2yq6lzzx7p095a0iz-unit-modprobe-.service.drv
  /nix/store/da6hyva1q7201bilxa6n6nxryrxhlalr-unit-systemd-pcrlogin-.service.drv
  /nix/store/dbc15pvlzlsrxd8718vmawiixk6ccrq2-unit-fstrim.timer.drv
  /nix/store/dx3igmbz49xs5fvn4qigg3fd5ynbxqvp-unit-systemd-networkd.service.drv
  /nix/store/fhdf8m0dvaih1zhw6hfg0gdlag7fl0a4-unit-prepare-kexec.service.drv
  /nix/store/fq1rwvdckmxq4splji0vclm5mw235zay-unit-nscd.service.drv
  /nix/store/fqbx7ipknqf1va942hy7fzri6535v409-unit-systemd-networkd.socket.drv
  /nix/store/gdl2jy83w6arlg07d84dqnwi8m1wamkq-unit-systemd-logind.service.drv
  /nix/store/gjirzalbwf33ds5470p7a2svp8kzdp1a-unit-lastlog2-import.service.drv
  /nix/store/gvk3i873qljpcm4cg33g016j3560snx6-unit-systemd-journal-flush.service.drv
  /nix/store/gy2n1fdczlr1my7q1avpalapz6k8yv9s-unit-systemd-mkswap-.service.drv
  /nix/store/hvn5ai00rsk130v3zmdmwlji7md9rmx4-unit-sysinit-reactivation.target.drv
  /nix/store/spr4k9h485sh88vqxckm688p1piar8gd-X-Restart-Triggers-nix-daemon.drv
  /nix/store/ia5aaj3i3l8syj0l5d38ys9a5ipigiz0-unit-nix-daemon.service.drv
  /nix/store/ihrrsiyd17fgzmrqxg97flm94nq6hhxi-unit-dbus.service.drv
  /nix/store/j1hhwqxdy8h8ymq644kf0g3wbg89bab7-unit-systemd-localed.service.drv
  /nix/store/jfnyay7arazidyvwaprca0b108lj72h5-unit-systemd-update-utmp.service.drv
  /nix/store/jhxhrxg51fnwahkb5cp099zklpd5hrsp-unit-systemd-bless-boot.service.drv
  /nix/store/kq4pq0sg8zj3s4z05n7f6xxi4gmarv5z-unit-keys.target.drv
  /nix/store/m149gzbnlvhlrcpwsvpqdi6hvx7n0nnb-unit-NetworkManager-wait-online.service-disabled.drv
  /nix/store/m17j8lmx32mwkxja6n54pxg2a7d0shhs-unit-resolvconf.service-disabled.drv
  /nix/store/mnl0icb3qghi65ry9sybrw5p2qpxd6l3-unit-run-initramfs.mount.drv
  /nix/store/n1gdp7bxy14i68gqil0paxp8h1zapz8s-unit-systemd-random-seed.service.drv
  /nix/store/npf2gwfa7dvrvx8dcc5g9d7942g6fcxg-unit--.slice.drv
  /nix/store/nx8akimqkapw98214x7mahrskpjlxlqz-unit-systemd-user-sessions.service.drv
  /nix/store/xr9nfpbsvnss490kalhm7w2dz75f3kai-X-Reload-Triggers-systemd-resolved.drv
  /nix/store/p2i45nlv7xy3pdf9sfjyvvxv0ld1xmqa-unit-systemd-resolved.service.drv
  /nix/store/p94hjhxj15k7gkxka76c9qdiqiy6hrdi-unit-multi-user.target.drv
  /nix/store/pb599zdv1kgwr4y61svbwygd9g7j6vk1-unit-getty-.service.drv
  /nix/store/piz47mrl1d1wl7l5xj0x6ah896958w4d-unit-kmod-static-nodes.service.drv
  /nix/store/pj22aj82b8w54iw17py91xg9894dsjvm-unit-user.slice.drv
  /nix/store/py9crvgk3snway65wn99davznf6i3dpv-unit-acme-renew-test.foo.timer.drv
  /nix/store/q0bgvl8nlmp2kiaq8vgr4kfgnghs80az-unit-systemd-pstore.service.drv
  /nix/store/q63zkkd6ab9d4p2jdg8cv9c17jrjqzy1-unit-systemd-remount-fs.service.drv
  /nix/store/qxnh7p93d779432vn2vjdrl1nlv30ibk-unit-systemd-networkd-wait-online-.service.drv
  /nix/store/r701k3393ckvlwzir2pwll2sq07s1niv-unit-acme-order-renew-test.foo.service.drv
  /nix/store/rg9kgdzmbgspy92n5wy5fqfkr8zffkfr-unit-console-getty.service.drv
  /nix/store/rhw9dyzcq57xc91z5fyiqw0zyggsck34-unit-system.slice.drv
  /nix/store/rwwva2p1cfz5qqvkmp2cgk80a8jx7msz-unit-systemd-oomd.service.drv
  /nix/store/sfxnhgpr842xgi5ibyyjbpl85x75zc5i-unit-systemd-timedated.service.drv
  /nix/store/shczsqk2r433msfnf1psqcbfrwj98lsz-unit-user-.service.drv
  /nix/store/sypkdcirxg2k5blnncv7rbpvvhr1ajx2-unit-acme-setup.service.drv
  /nix/store/n3m9vbfghvn4ha3y93fpnzkxhxr5a0d6-X-Restart-Triggers-systemd-journald-.drv
  /nix/store/vpwk58fzzp64yhpddipa74vnhl2lfymr-unit-systemd-journald-.service.drv
  /nix/store/vrxpkiyrjinywnzmkcqcq68vzqsvxnhm-unit-nginx-config-reload.service.drv
  /nix/store/qd4spmgc58aq2ik8qwff28xm3jlkipwx-unit-script-nix-gc-start.drv
  /nix/store/w79f9m3d1dxqg5451yca8ygjripagpa4-unit-nix-gc.service.drv
  /nix/store/w7lyy4p5yqjqy4a2f9kb7439llmal840-unit-serial-getty-ttyAMA0.service-disabled.drv
  /nix/store/wrxpq1h663ncb585sjcmly4zn1msb91d-unit-nix-optimise.service.drv
  /nix/store/xn4nrhjv00ppar3s4vdplc7srm0jmkn4-unit-local-fs.target.drv
  /nix/store/y1nv7j3vqqblm1093g5k9d9v86p1rcnj-unit-nginx.service.drv
  /nix/store/yarh6iwkw6q2431si612q9ygn2i6qzx6-unit-suid-sgid-wrappers.service-disabled.drv
  /nix/store/zd1qiz6911y0ikh1wpcryz4injwixpn0-etc-sysctl.d-60-nixos.conf.drv
  /nix/store/ygh8d1kwm6naps64d4a1i47w64acxcdd-X-Restart-Triggers-systemd-sysctl.drv
  /nix/store/z43bf0lmyvrxd699jf5f5rn5w6j499xh-unit-systemd-sysctl.service.drv
  /nix/store/rbx5yvbqcpblqkhsl7h89pp45kfrz2qc-system-units.drv
  /nix/store/v11icrywvs11nbsl0hir0z25qms8665w-etc-host.conf.drv
  /nix/store/vjpcz85zk3j86gnqf4zm27nj5w2saj7a-etc-systemd-coredump.conf.drv
  /nix/store/vn3fb31zcznj84zijxi220c7msylcc7c-locale.conf.drv
  /nix/store/w04w8d9mmsvw8a77jya0p95a3g9y5vld-etc-systemd-sleep.conf.drv
  /nix/store/vsa2n8sh2r0qvssl6irmj0zsxssyxmvw-unit-script-nixos-activation-start.drv
  /nix/store/cal44aj1jib2473b0avs8crbdfma0876-unit-nixos-activation.service.drv
  /nix/store/j2nyyfh5fsdmkni6ay0a38pa4cydw95f-unit-dbus.socket.drv
  /nix/store/p5k04ifkpw149nmp6i0k5ifdbax70l53-unit-systemd-tmpfiles-setup.service.drv
  /nix/store/x8igqbgxfypadni6mbx2q4qlhi6yv2h8-user-units.drv
  /nix/store/xp3l6ybfvxiidl7aipiz2phwcqjj0qi1-etc-ssh-ssh_config.drv
  /nix/store/k6s8k76a7cjwz7axbl4v612rsf2p7xg5-string-hosts.drv
  /nix/store/y7qz1r98ccdi4ym771hjiqlwswcr96hg-hosts.drv
  /nix/store/yzjz07c06ksb2f47cgnrvnhz89ppn22v-fontconfig-etc.drv
  /nix/store/z06frbv45jkv2k9400vh8x6vc60ykx5m-etc-lsb-release.drv
  /nix/store/zqbn047vc3kdqh5ns2ncchxbv6nwcxy3-etc-systemd-user.conf.drv
  /nix/store/c20ml28rgjvb21hcrqzlgsgdvixlzvcc-etc.drv
  /nix/store/cmyjy8c59lha7jhndfwd4p9gfxficdxb-unit-acme-setup.service.drv
  /nix/store/dgr5c31hkf634nmsxjvy52bi7qw0ddi8-ca.json.drv
  /nix/store/gs8ssd0qw7yl28h6j8617bxkjkiz1q90-firewall-start.drv
  /nix/store/dqv09aa6knvp74x8hv0k12fsl5lhx6m7-firewall-reload.drv
  /nix/store/rdyzlvjgmvhzjs98ah5cnaiml0pj5zmy-system-path.drv
  /nix/store/dwnvq56pmmf2csnn13dp61bzvr6k82h7-dbus-1.drv
  /nix/store/dx6b75xyndwr4bw8jd8l0ximcc05bsh0-unit-script-acme-order-renew-test.foo-start.drv
  /nix/store/f11j0c72m7mhlwbd2l1sdmjm6wpabig6-unit-script-acme-setup-start.drv
  /nix/store/fbn99v6s4gr9qamja7nxqp4gcmxvrgpc-etc-hostname.drv
  /nix/store/fgk09px1gr2bcl11l4lnrm6fc4z8dyaz-unit-dbus-broker.service.drv
  /nix/store/ns850kpaz4fcqr84xzzl6n921dc99bh3-perl-5.42.3-env.drv
  /nix/store/wwyxfd108w1yggjc9f9znrd4dg85fzra-users-groups.json.drv
  /nix/store/fy145vkdn6bkg4phww3rj8vykzvxbiz0-dry-activate.drv
  /nix/store/gbpg4adl76gg8s5wvf4m9cn03n6v1h5k-nginx-recommended-proxy_set_header-headers.conf.drv
  /nix/store/h6ggc0zbv8xvycmzw9syizpfq72n8f4d-ensure-wrapper-integrity.drv
  /nix/store/h7diq2brlf4vzlas6x7khbbwx7rnhxxm-unit-dbus-broker.service.drv
  /nix/store/il3qnns3qmn87s11dl9c17kz93l07a3q-firewall-reload.drv
  /nix/store/ya9vdvhj303cdhl2nk23k6q91sym3v43-tmpfiles.d.drv
  /nix/store/x7wvkyf99s07rg0190khm3pgixcqpgi8-X-Restart-Triggers-systemd-tmpfiles-resetup.drv
  /nix/store/ilxxbw8db4xr4183rcspda6l6wvsnkv2-unit-systemd-tmpfiles-resetup.service.drv
  /nix/store/iqi3pkf8vv50xby5hy0knapgfc3ldc93-user-units.drv
  /nix/store/jf0pjr9cfxj16r6vabh6xlbhyfsms8ai-X-Restart-Triggers-acme-ca.foo.drv
  /nix/store/jm2cqm4a7vpd0xmpb14vp4655bffpmyl-system-generators.drv
  /nix/store/jnvp82h3rrs2kknj6kxip3j5ymw76rbx-system-units.drv
  /nix/store/k46pambvv6vjpfrqb4g5074fldq07l2a-dry-activate.drv
  /nix/store/kc86iyrx9p3xrz8qdpxl7wz2ccllbyjb-X-Restart-Triggers-acme-test.foo.drv
  /nix/store/kgxsw62kwwf8gz8nwcf1j51xgly2737m-acme-postrun.drv
  /nix/store/ky2rfxjsy49rcba8i01ggd4c7x8h884g-X-Restart-Triggers-step-ca.drv
  /nix/store/y3v38a6cn5w107icpb3sj7r54qm8sxfx-unit-script-acme-order-renew-ca.foo-start.drv
  /nix/store/kywgmfpr9vfnd1igwnl6ac89zdk5g2xq-unit-acme-order-renew-ca.foo.service.drv
  /nix/store/llxggp8f2ncdwcs28zqc2nigh9430n55-etc.drv
  /nix/store/lnwc7vha17gvrdhabcp9nh6kap4dnv8y-unit-dbus-broker.service.drv
  /nix/store/mdkf178qisqnbwgzxnldzwafv6qy1d1p-user-units.drv
  /nix/store/myydwyynifpdl301bhb0913n05402nvr-unit-acme-account-d22a46d9459bf683a338.target.drv
  /nix/store/n853hz3n24dicns8421rzlvjjnp63i9n-unit-step-ca.service.drv
  /nix/store/na1g3p356z0h1s65md0yb9wfx45lmcvr-unit-firewall.service.drv
  /nix/store/p57vnz65pf5719k9izagcnldsj80ym79-acme-setup-privileged.drv
  /nix/store/pj3f4kh7mrx72911jih3qg8q91j48jac-X-Reload-Triggers-systemd-networkd.drv
  /nix/store/pzwx5iz9qcimbr8x8a9zdw5q55882n1s-activate.drv
  /nix/store/qn0vbxc4x35zmp22yxl757qay32cs48p-nixos-system-client-test.drv
  /nix/store/v7sx4hs5ns7a06nf6wgrd4i27dh8ghyw-unit-script-acme-ca.foo-start.drv
  /nix/store/xy5skfw848746ifi51i2lr0c7q3rsh49-nixos-enter.drv
  /nix/store/vm69hzkb8h87qs04zvvsgxldx7h1c96s-nixos-install.drv
  /nix/store/vs6vrdjd1lfppr4z3nh6g1vgyim13jzv-unit-acme-renew-ca.foo.timer.drv
  /nix/store/x0wmy053ki5pwzxcxwzj9kdla8c6gw0g-dry-activate.drv
  /nix/store/xal53b7rzijsl8ya2xw1l2nk98wr8wvj-nixos-build-vms.drv
  /nix/store/y528rc9za0xrvw0klnbiii5i2a7nqs2d-nixos-version.drv
  /nix/store/ycnv9lva959hwk6vmwjgi0b80a5n8s3l-unit-script-acme-test.foo-start.drv
  /nix/store/yx1a9kr98p8amw0qzskiy7la85hgf87h-stage-2-init.sh.drv
  /nix/store/zh51inywv8zmkb054dwmdvd4sjxqg8li-acme-setup-privileged.drv
  /nix/store/ziz2p4ypj9qb101b3306m82533qws410-system-units.drv
  /nix/store/zsid8qgzqjxfv13wsx75kbmki23dwpwl-unit-systemd-networkd.service.drv
  /nix/store/zxvfv2h52hc6159cv0y01cp8fgfjvj00-perl-5.42.3-env.drv
these 446 paths will be fetched (123.4 MiB download, 1.6 GiB unpacked):
  /nix/store/w06gxsvx0f0ry8gv4gp4vrgpmjkjm2v6-55-nixos-aslr-entropy.conf
  /nix/store/slappcl291sirp91n6a9klnm73iakcs1-ShellCheck-0.11.0
  /nix/store/sc2mdq7cnpwrx63hlyi9nrzrlf91klyw-acl-2.4.0
  /nix/store/3g4cpzjazywyd0bkgygqx8d4jh31rnw8-acl-2.4.0-bin
  /nix/store/vjm9cv4j5ckvf7ylzialc8i4mxqqqhr3-acl-2.4.0-man
  /nix/store/zh4s8mbbvzpv3vll5mlifa61csglv1gl-age-1.3.2
  /nix/store/mha227cdls0rb65v203c6wl7mbigqz6v-attr-2.6.0
  /nix/store/rmj72zihisg70zglcdimvk4qml7qlgd8-attr-2.6.0-bin
  /nix/store/9ppif7w0ka1i5l1lnaffvzdcnpgy5ngz-attr-2.6.0-man
  /nix/store/z34ssr0ajr0a4dsrl7frkvb7sxgdmmif-audit-4.2.1-lib
  /nix/store/5rfadjrak7ii0iv86l443w5r3w8r3zbk-aws-c-auth-1.0.0
  /nix/store/fys2cf66ppdb078bj1s0gymm1wmqxyfw-aws-c-cal-1.0.0
  /nix/store/z22nj7ihb3ziabqs4asd9qa1whxwnsgr-aws-c-common-1.0.0
  /nix/store/aj8s87g6niz9ljqiwswdisrskj1r9qaf-aws-c-compression-1.0.0
  /nix/store/frqwwam1nv0j9nyysl7w93zz461a6i6h-aws-c-event-stream-1.0.0
  /nix/store/cwpfai70ysrmr0268iqn42hmak257v9b-aws-c-http-1.0.0
  /nix/store/x5vs39450wzb9adczwa0pc60w0lxhsw7-aws-c-io-1.0.0
  /nix/store/h4xyxm5dh6wl8ja14ydf9z0fdf3apyxj-aws-c-mqtt-1.0.0
  /nix/store/skzjq3jhh0611769lys4wwnivqryg54q-aws-c-s3-1.1.2
  /nix/store/xdwsk9vxl3zl2b41gcxngqqvdm6r2dba-aws-c-sdkutils-1.0.0
  /nix/store/6bpvv73xd9d98ysgl51vkp9212qnippq-aws-checksums-1.0.0
  /nix/store/ggwniaafi9na0gr9bxfl3m0cyisldw0q-aws-crt-cpp-0.43.6
  /nix/store/czx7cscpnqqmc9nwmbpnv2zcvck64mmf-bash-5.3p20
  /nix/store/56yv6vq3pj21s0sgx5kypn6v8bpw3ari-bash-completion-2.18.0
  /nix/store/brnhnyb8lq3sfkdsdq10i5w85b120imz-bash-interactive-5.3p20
  /nix/store/xfl4kbpd3s2nn4njah8nn4vdfkl5all9-bash-interactive-5.3p20-man
  /nix/store/d96cnyznb6vxp8jzzfvg3rz2fddw6cvh-bcache-tools-1.1
  /nix/store/vw4aawyqf36n3ysdrafyjh7knkb7nbyx-bcachefs-tools-1.39.7
  /nix/store/mbrp5cg2q5p2bzgbwzly0a276g473vn3-bind-9.20.29-dnsutils
  /nix/store/fbvjs7ydn1dky1bcbjkgmspzmp2xx5vj-bind-9.20.29-host
  /nix/store/2rk0g35mwlnrmdiv9whbzj528r768sqv-bind-9.20.29-lib
  /nix/store/bdzrp13aqp0nzbd4rwlidj5lyd87ii2y-binutils-2.46
  /nix/store/wfnb7xlrvv6fvgzpd3638g5cr4c4hmhw-binutils-2.46-lib
  /nix/store/axf7w3k30q4n14mwxms3c2n8glz7lwvd-binutils-wrapper-2.46
  /nix/store/5rmsip4gjrymxfky84dr2yl975y5l98w-boehm-gc-8.2.12
  /nix/store/cg0m7ljcpf9z7h58f3hrc5wh45mc0akf-boost-1.89.0
  /nix/store/cz57r0bgh8az2215msz1yxkq3phqbjzh-brotli-1.2.0-lib
  /nix/store/3n6d0cfl1h5ragarz1ngda85agz0xzcm-btrfs-progs-7.1
  /nix/store/cqn5h5qd4dj43x9576nf61n5gq5v96z0-busybox-1.37.0
  /nix/store/zw8wg4lsihfr4l6cnhr14rwcgqhldnny-bzip2-1.0.8
  /nix/store/ka8s414hk1sv86grrvq5d7b0mwnzhjaw-bzip2-1.0.8-bin
  /nix/store/ah6c2rx14lk5r175k07y1l670z2jg347-bzip2-1.0.8-man
  /nix/store/zb4jqmlz0cw9w37bqyjlcf0mdc324hig-c-dvar-1.2.0
  /nix/store/bzqmgkbr37498nysq7vsckmq3j3sg33l-c-ini-1.1.0
  /nix/store/fy9z82f8f1g1346nxlxwdqnv1j83idjl-c-rbtree-3.2.0
  /nix/store/m08gbwibb6x042yqa4v6ygwp584vbaaw-c-shquote-1.1.0
  /nix/store/xa9h9ikgj85nbyv2ld46b9kr57shsz3l-c-utf8-1.1.0
  /nix/store/rfjs1fcacfd1xysy7cmvxsrb9znz6iln-certdata.txt
  /nix/store/m2ar7c5ylhgg8vp7dfdx9bhjfvki5xdg-coreutils-9.12
  /nix/store/j497rgyq95y6ra5498qq1qmnzbnhgxy2-coreutils-full-9.12
  /nix/store/9ssqa6hsv0whs20kvbm23b0ln3szx77v-cpio-2.15
  /nix/store/pv3pmcjvvmiazz40d2cwf7y0j5mf28m9-cracklib-2.10.3
  /nix/store/rm6rp3p1w137730zfdnjg191nv9zhaas-cryptsetup-2.8.8
  /nix/store/r5w60683qmv7p1lzdj6xd9i0lms8b42i-curl-8.22.0
  /nix/store/nmh3hx6da4i82adfi8z1qsg65ynw112d-curl-8.22.0-bin
  /nix/store/pxjvd1rjykhxp5jlj0aa1gq98plw3f0s-curl-8.22.0-man
  /nix/store/8m6m31aw2ybahqymicb1341s5ahwjlz5-dash-0.5.13.5
  /nix/store/53mh4w1fp4676778i75rcyal8qbx2hwk-db-4.8.30
  /nix/store/xxpdwqvcgk0w4cfja4wxk2hla0rwyhad-db-5.3.28
  /nix/store/y41f5xwsyfzmwh624a5q5xdfaslcv8vf-dbus-1.16.2
  /nix/store/8f3av3dr3v7l7ma4lyrhd9a8mi1b6na0-dbus-1.16.2-lib
  /nix/store/la1nbk0k8akixh1wfzpl419m5f3nwj3z-dbus-1.16.2-man
  /nix/store/9zzkrpcqggjn3qgrykw1blqyyhkg0hwj-dbus-broker-37
  /nix/store/bli3rm8975vv5q9mlnd1lfkp0ss7cf5m-dejavu-fonts-minimal-2.37
  /nix/store/0g5wixhahpvkkl2gjvbdn4brisc1msyj-desktop-file-utils-0.28
  /nix/store/58h4pdw75hcp2xx2x23qv2x977chpw61-die-hook
  /nix/store/460hlcwpjf238sby6sva4nlg059rp31l-diffutils-3.12
  /nix/store/wd8sz1s3ilbb61s5m9vhv9h5ccvighw2-diffutils-3.12
  /nix/store/mfgkwm72mc8y8rwwch90mrq3yz769ar5-dns-root-data-2025-04-14
  /nix/store/yv57hxfmk769c1hs7xnhb4gf1b2gv790-dosfstools-4.2
  /nix/store/by1jvswipyiqjqfp3jnvxvr9fny8mk88-dosfstools-4.2-man
  /nix/store/25ahy2fhibjfszkn5wxvv6rs09ydlaiw-e2fsprogs-1.47.4
  /nix/store/i4g6h69jdav8nw32jxb371ab833nc0c7-e2fsprogs-1.47.4-bin
  /nix/store/zxvqbvipb5j4v1wf7qzc60kg8lh8rdms-ed-1.22.6
  /nix/store/l7jrw7zgmg19mh97syxll91y6cvhxgx4-editline-1.17.1-unstable-2025-05-24
  /nix/store/fkxx27srjahbfi4aizkvd87czyzv2cxr-elfutils-0.195
  /nix/store/364q1aa42ic03niwdyxk0ais7b6gvs0g-ensure-newer-sources-hook
  /nix/store/pwsha050s3qfr06pz4v07842jqza969w-expand-response-params
  /nix/store/l8xpwwa62pxa48ng6bzv18qwskp8ln7s-expat-2.9.0
  /nix/store/51xcysrbsyxlifk9kz9bds0mgscwqann-fc-00-nixos-cache.conf
  /nix/store/71wakcimld457mc4vr46q0b8jlk4dik5-fc-10-nixos-rendering.conf
  /nix/store/qk9lgxdkhkq2f1nxcwvqg9133xgzhkw8-fc-52-nixos-default-fonts.conf
  /nix/store/1wz2xrdwvklbnw1gl5b7bx3kxzj4820p-fc-53-nixos-reject-type1.conf
  /nix/store/s5gmqygskid174ps0v3rznm74h1hw9k1-fc-53-no-bitmaps.conf
  /nix/store/l8k2jvcdfzi3sgp1ksk7lgjf3vn4n12n-fc-53-user-aliases.conf
  /nix/store/4vwp0fmf8p0rmas4gxr2jvbf8bs9pcc1-fc-cache
  /nix/store/3wadfj8gksww215f8k8gl1bymfbnzb03-file-5.48
  /nix/store/r09689yg5gjfsfvrzhrx5jjlar2jc1pl-file-5.48
  /nix/store/xzllsgs5vcyv0smlz22arn6s27s8cl5d-find-xml-catalogs-hook
  /nix/store/3jplw390ifmb9rc4kfv9vvxdfi33mrnq-findutils-4.11.0
  /nix/store/qzw96vdyndz1czr5jpjn8blpj5f00rib-flock-0.4.0
  /nix/store/hcxw4cl6zlca0ci1hdfp2hc1dr5nbbg2-fontconfig-2.18.3
  /nix/store/i2gw7alp0wprpglf69pkikqn3laj160i-fontconfig-2.18.3-bin
  /nix/store/q9zrpmwmzy7nq58avm9656lal00wvy54-fontconfig-2.18.3-lib
  /nix/store/5g6i4p1d87zlyjx6q126528g8q92d6yr-fontconfig-conf
  /nix/store/dqzr6g6hhn2p0b9rg62nfibv2ma37g2a-freetype-2.14.3
  /nix/store/kid6gyf1c48m6ldnq98x0fym81bksj38-fstrm-0.6.1
  /nix/store/dw1m6wyv1zd7v1y5ih0yi06ym21widm8-gawk-5.4.1
  /nix/store/02l5i4dbk9cb560ibyxc4ilsny2z2d31-gawk-5.4.1-man
  /nix/store/812525ks0y12m1nzrxwlrnq945skg7ll-gcc-16.2.0
  /nix/store/nhrkwapk0zzzmc8x1f2k24qpyz9gy5qb-gcc-16.2.0-lib
  /nix/store/c1h1q4h9bfmb5d0w342qwjmhw8cxkxzc-gcc-16.2.0-libgcc
  /nix/store/6gj4dzcv6gaxh5raqyrq7jmy605qaj3z-gcc-wrapper-16.2.0
  /nix/store/v655z7ikx2xr1pi3vrag6r078aqqivqi-gdbm-1.26-lib
  /nix/store/hb8cqs82wayc0iddz7yrvizkyyw28h9y-gen-hostid
  /nix/store/nd1dsjplgsjlnpz23f9sqq2z8a5h1dgm-getconf-glibc-2.44-57
  /nix/store/gwr1xk1q8mqiagmpdx7d80srbbw49gm4-getent-glibc-2.44-57
  /nix/store/qh35hki623iqrj2mqfxnzjqawxn93gk7-gettext-1.0
  /nix/store/3hrp8zy0c6x743d9kmw8jkq7k3l9h87z-giflib-6.1.3
  /nix/store/8gw3yn37j5cw4zx6z5kvb92akcbapw14-git-minimal-2.56.0
  /nix/store/wcx9n62dxdffh7l44ygqiqv4b14hc3zg-gixy-0.1.21
  /nix/store/85yqf7kr2h481yrw3j5ihq2xqh4953i4-glib-2.88.3
  /nix/store/nhphqkv18x8fpf3flz0bsm1h554pawn7-glibc-2.44-57
  /nix/store/zgmaizk43g99ihidpl181wbf5cfgkj3p-glibc-2.44-57-bin
  /nix/store/2gh2kjj22acjw1354if79dgr6l73y3sl-glibc-2.44-57-dev
  /nix/store/qbzvhjmf0jx4j6516rpn84wq90va6fnd-glibc-2.44-57-getent
  /nix/store/19g7wnkrngzfi4n2ls375dbjmqd3akws-glibc-locales-2.44-57
  /nix/store/3ch4ab4m13lbxlamji5csxx8wgn5vpss-gmp-6.3.0
  /nix/store/1jkc0qp9b4vd84n84x1f91pqzcvkhq1j-gmp-with-cxx-6.3.0
  /nix/store/jvgbq6v334yqdpkqqks9cdiqxla39czz-gmp-with-cxx-6.3.0
  /nix/store/20bf9qqanrkkkrjdga3bvkwj048xmdr5-gnu-config-2024-01-01
  /nix/store/74nxb0rnf6lm102ax6ax9b4cpyvrcifq-gnugrep-3.12
  /nix/store/nw265p43zvgsc8153wbrkl7bakdc53nq-gnumake-4.4.1
  /nix/store/mfg35bv10n80y3b2z779kx26nncq7sms-gnupg-2.4.9
  /nix/store/03rgyjxclvhxnif2klf13nkr92rpxqqg-gnused-4.10
  /nix/store/0xhhzmnjfc0ws5vwkvlnyhkaa8f92v65-gnutar-1.35
  /nix/store/awm920jywv9gdjp4lm5r877zdz7xxbcm-gnutar-1.35
  /nix/store/4zw33xl75cq54z5s0v12kbq3687vvkzj-gnutls-3.8.13
  /nix/store/ba2vypr61h3nz0cpb54h3gqmpvb6rl1d-groff-1.24.2
  /nix/store/gm4gzpllicwvrjxyilsm7140nqikxhbx-gzip-1.15
  /nix/store/kma4w9vhvz0259gllsvpq8qskf8ldac4-gzip-1.15-man
  /nix/store/amm861n13kk7bxmvnj6sc29lps8l4irb-hicolor-icon-theme-0.18
  /nix/store/6n86g5q8b3halvndvmzh3q3vdp7x37lc-hostname-debian-3.25
  /nix/store/z72r6wayx45bfhnlhb0b7h1r4g6lvgyx-hostname-debian-3.25-man
  /nix/store/bypi18ibrkb3ymg0pixl6mksxdmb0m4y-hostname-hostname-debian-3.25
  /nix/store/ry5agig61l9j3v0xgmx6zfxv4fvbk2ng-htop-3.5.3
  /nix/store/am782p74b43hn6j595bnjm67wkw25zna-htop-3.5.3-man
  /nix/store/z7dghqs1a21djnrkfc16k6jna5q90v3l-hwinfo-26.0
  /nix/store/69nnsdsf27y5ighkbwlc3wgf7h4v3nik-hwinfo-26.0-lib
  /nix/store/9gran9c501llmzq5awggysld39py81nj-hwloc-2.15.0-lib
  /nix/store/a9l8h2d532wk9zpyvl3qms0v5iwbjp67-iana-etc-20251215
  /nix/store/m9nmssx5b579jv60gqvbdc51bz5cs8gw-icu4c-78.3
  /nix/store/d4688mlllsvjydqz52b6hc2draxgx593-install-shell-files
  /nix/store/llrdwj50xg0csdl0s2aqvlyc6712nywn-iproute2-7.2.0
  /nix/store/7mqpfa3912lyf8hxnl77kc8w3v2dv2zp-iproute2-7.2.0-dev
  /nix/store/ddjidpdzsf7i23jd9p4z6wpzffz247zd-iproute2-7.2.0-man
  /nix/store/7vbawb1z40v3kmf1qkvvvkrclqsg4nji-iptables-1.8.13
  /nix/store/qj5j2595lb8b6528bpfahnaz0ncg3j8b-iptables-1.8.13-lib
  /nix/store/4vnabnpb9xch2rmd9s7bbwdra0ykh843-iptables-1.8.13-man
  /nix/store/7mgs0y09y0y0sg76zjz2fh39f99zmgjh-iputils-20250605
  /nix/store/nqwdj0l5bjdgsr5by0mnz6qb815fnz33-iputils-20250605-man
  /nix/store/ql6s7fvi4r3dkhb4rmhrp9kl268zsmcz-isl-0.20
  /nix/store/z11j4irf794paq48ajv6sc6l2y8flj9v-jbigkit-2.1
  /nix/store/ifd54fxhvb6d6222qq9dy5l6abv6xqyy-jemalloc-5.4.0
  /nix/store/w0m7k4c9hrxq9qn3555bjm6lbb8ydjhk-jemalloc-5.4.0
  /nix/store/x8g0a13kma26kca8f5a1w6f0n54jyp65-jq-1.8.2
  /nix/store/16bc59xb22679a0mdzvlirr9n6i8ca8m-jq-1.8.2-bin
  /nix/store/cnzj4nl177snn6b0chi3xwp87vfk5m7j-jq-1.8.2-dev
  /nix/store/35czxi6qcb15jwlv2n2aksahkx4yr4wd-jq-1.8.2-man
  /nix/store/s4nr29dgjdgbsdymqw73phmjwp4x5bqr-json-c-0.18
  /nix/store/r0dsxsancqc89yppygs2pvqgn39sg8rm-kbd-2.9.0
  /nix/store/bz2ch0w8sadl25r67v20gwin2kpkp914-kexec-tools-2.0.32
  /nix/store/zmzhmxp7mc1dbz2v29i7dd185xw0iqgq-keyutils-1.6.3-lib
  /nix/store/1wssmilqhfri9lq9cykk88niajdbh3fi-kmod-31
  /nix/store/zqh2fk0nhsjb07yfglgvh0h4mbk6c5lf-kmod-31-lib
  /nix/store/kyc6xi95fbcmb904h346k8k3paygq06l-krb5-1.22.2-lib
  /nix/store/89891l61r2yw36zcmynvixazd0fqq2g5-lego-5.5.1
  /nix/store/zydnkh7xz7qmszlz7sfkl44dp2cjpq30-lerc-4.2.0
  /nix/store/j4i74h2a6i8i3jb0ljzai15hgy5w1dk6-less-710
  /nix/store/i5c26s3myy7s1w3xgm99lsh6s6qv8v41-less-710-man
  /nix/store/nyl08py6763rf1235fn5c8rsgln1ccqn-libaio-0.3.113
  /nix/store/l13rhi4b09jjrp54b3sjcz4lzj24a3wg-libapparmor-5.0.2
  /nix/store/55isz7b95nilhagjk3nza9fpw77bavh6-libarchive-3.8.9-lib
  /nix/store/2kgn20a0qjkn8fmp1fw67010r3wbybbf-libassuan-3.0.2
  /nix/store/wva3hkv7kdvzx6w0g2khl3v8jfyg8n3j-libblake3-1.8.7
  /nix/store/ixzajfsjizfvcjf6x67pza059gdp1lcr-libbpf-1.8.0
  /nix/store/nkhkpk3px93bjayfic8l43gg2ynfhmda-libbsd-0.12.2
  /nix/store/cy5392ar3660jyzax89na778c3n2p1fb-libcap-2.78
  /nix/store/azl7rvcwxp9lp523gbxmyr0gav7v69bi-libcap-2.78-lib
  /nix/store/n2pnpqny661w1x978lzkzpzbi8bn37ss-libcap-2.78-man
  /nix/store/a3b8i3frvq0gnxmh08zz99s0fsz07j46-libcap-ng-0.9.6
  /nix/store/2916j5kprv56sdjm8rd6p2np0c55yycm-libcap-text-verifier-0-unstable
  /nix/store/kr996238bp7k7836jhssszq7bc0yj6bb-libcbor-0.14.0
  /nix/store/lnsr5h6hlr4sg133wzfgcin14x5zsr1k-libdeflate-1.26
  /nix/store/z8kv2d13nvzcxdlm2b591nbyfccbmryf-libedit-20260508-3.1
  /nix/store/l16aqknwk2ijppyzf1zbbnvamvnkk2c7-libevent-2.1.13
  /nix/store/v6jjr80v6d0v1379fyilzi38ava7rygz-libffi-3.8.0
  /nix/store/kjxp0yl2si1ki4c90dsjlf08mmx7rns7-libfido2-1.17.0
  /nix/store/lpjl7g04cd345p1n59wdy338vrvkq8ma-libgcrypt-1.12.4-lib
  /nix/store/vskimv6q4gkmj2bh4q0ig2ndiqh8ij8k-libgit2-1.9.7-lib
  /nix/store/vhfwl1nz1avba47ghkbl8v3v3hhfmlz9-libgpg-error-1.61
  /nix/store/jm7s9l8x0f55w1rjs0cfbrifs9zlfmjv-libice-1.1.2
  /nix/store/wsn07qxxn13gcdcjw5avz47j8lb2zpdv-libidn2-2.3.8
  /nix/store/y7pf3gvzmwpq59fsirl77p1hh180j5h3-libjpeg-turbo-3.2.0
  /nix/store/ikyw3416q9aaw9mnlb26w3bfilnnri9a-libmd-1.3.0
  /nix/store/n74bx1269s0j98jszfcgwxd504ly1k64-libmicrohttpd-1.0.10
  /nix/store/5vam5h0pzyc7i9zs3xydliv9a9sj0rzs-libmnl-1.0.5
  /nix/store/ag5y64wvbw5wbmglclm0f417i3c6ry23-libmpc-1.4.1
  /nix/store/9qlcl2gkjap3pfakxajpfhqv9ifgv7pw-libnetfilter_conntrack-1.1.1
  /nix/store/l4ybcbg4w9cw3hhinmmcm44zrv3gd7jl-libnfnetlink-1.0.2
  /nix/store/dj8mvjv92kzbii1pwlxzc8w3p59cijnr-libnftnl-1.3.2
  /nix/store/2xk6v8q5w39g40067s88wv7k3bcjck64-libnl-3.12.0
  /nix/store/232ryqk32xxf1wzrg7xw5fqg2075p4la-libpcap-1.10.7-lib
  /nix/store/wfpvir38546brzxacndqrdkib4wz07jm-libpipeline-1.5.8
  /nix/store/6prhznz9mhn4021ag2wmx9vn8ssckin5-libpng-apng-1.6.59
  /nix/store/jmpd1nlwmqxyaqci35i6nm6zh7zxwhcc-libpsl-0.21.5
  /nix/store/hnmy2bwxfi5983va6b5067ic0c3frniz-libpwquality-1.4.5-lib
  /nix/store/yz76r1hppaqm3zapfbxjfk626ap5rhid-libressl-4.3.2
  /nix/store/1553icvwp9ryqw3hng22rrah30jw9pn0-libressl-4.3.2-nc
  /nix/store/sdfjjsa4m5m5pddbg7qqd7zymszfpnm3-libseccomp-2.6.1-lib
  /nix/store/si1blcdpp36msy9gnyq4irx9aps97krq-libselinux-3.11
  /nix/store/x8741cfs9yfhgvsm1nqwhyri8qa9lssv-libsm-1.2.6
  /nix/store/10ilj5782b9qnzky4sr90l9bbhzp52xc-libsodium-1.0.22-unstable-2026-09-28
  /nix/store/n08mywvg7fb9p1hzaarvi06iclki4073-libssh2-1.11.1
  /nix/store/zr0pzlsl3kk8g339briq3lfmj63ak5h2-libtasn1-4.21.0
  /nix/store/ygacpxksfxaxqngkcmz5l32my7nl80my-libtiff-4.7.2
  /nix/store/p4vgzc6is93kmfqpgsl3c3rswf8175bk-libtpms-0.10.2-unstable-2026-05-06
  /nix/store/vr8lx1cjz6zw4xhmb4k405v6cqrkslnk-libunistring-1.4.2
  /nix/store/sfvjl08r6hn4sh5196qzwsnpb2l69j8f-libunwind-1.8.3
  /nix/store/kiql30kg615ns6ljh116qggy1zdwgf7x-liburcu-0.15.7
  /nix/store/abw4gw7fgpngkxqknz4hhzawk07f5x2g-libuv-1.53.0
  /nix/store/605q7w5vb87xxwp5203vjakxdxci6bfi-libwebp-1.6.0
  /nix/store/z3zmyjnprxn412i0hsrbxdczwxjbam0p-libx11-1.8.13
  /nix/store/c8cmygjbl4q7cs82w2ris8wbphpfk5yh-libxau-1.0.12
  /nix/store/rnyizbn322pm08wy8j4afr63k59cxww0-libxcb-1.17.0
  /nix/store/zw9m2pj4lznmkc7k46pcjr8wclkqz4b5-libxcrypt-4.5.2
  /nix/store/04zi4xg61xf8h4v6rfayfxgm8szb9n63-libxdmcp-1.1.5
  /nix/store/809amx8c34956qvrglm3pyi7chrnnr7a-libxext-1.3.7
  /nix/store/3biijnc5zjs4zscval0a0qn0gszd5fyh-libxml2-2.15.4
  /nix/store/7c5ndqlkg97iv11z90xi3rv6sj0k2g4f-libxmu-1.3.1
  /nix/store/bn3s3xjdasmmgzy9m9j1dwg90n3n4vs9-libxslt-1.1.45
  /nix/store/1azyaswqk1im1my6mj3rav52v1fq370i-libxslt-1.1.45-bin
  /nix/store/51a86n2affwwk3ppry9q7y5rq356kmwl-libxt-1.3.1
  /nix/store/0120hrb5l13ynqmf66wz1cd6fnsb4s1y-libyaml-0.2.5
  /nix/store/a6rq3q3vrfmxkibglffxcsyhs43kxfri-linux-headers-7.2
  /nix/store/8hps8ixs8m0c4sbfwqjicxaaby003zrc-linux-pam-1.7.2
  /nix/store/3n68v76k850wqgxxlbzx0xf1c4hb83ps-linux-pam-1.7.2-man
  /nix/store/fj9c90nq2c0iwh5c92h6rfd9nk3xy5zc-llhttp-9.4.3
  /nix/store/bnrra570hrjfhjd6yimas9nnk56b9p1p-lm-sensors-3.6.2
  /nix/store/lnzyif7dh3rp0lavxwvv53ghymhy5p5s-lndir-1.0.6
  /nix/store/cs1h0gfhqvgcx0yafjd1cvwy9pgsqah0-lowdown-3.0.1-lib
  /nix/store/bdfby4w38psv4wg1v94pcs5aa3g0a65l-lvm2-2.03.41-lib
  /nix/store/sylwbbl9zayc3603159mzjnj8fr4bcy5-lz4-1.10.0-lib
  /nix/store/1p5avi92fbc9d9q8fma3rw4a8znbyk4y-lzo-2.10
  /nix/store/7kfrkscfmm8p09q9w392p86rxqji8cbf-mailcap-2.1.54
  /nix/store/gm90a07s0n9sjry49bicgl73gm7zsv9q-make-binary-wrapper-hook
  /nix/store/krd6lkwmg4m2mdra42gff3kgq9f7dxi1-make-initrd-ng-0.1.0
  /nix/store/r1dlgsvijivj3j3s8maibhl9fsblbwff-make-shell-wrapper-hook
  /nix/store/bmv660vj1lsamv2h10pg2lyfbdky142l-man-db-2.13.1
  /nix/store/zh4zdp8j6hrila79y31dfas5gw018zgk-mbedtls-3.6.7
  /nix/store/x6p8sikb6zj3adxj52ihylvzcwxm0mqh-minica-1.1.0
  /nix/store/1f703f1pfv5wvsq87k2fpi43x241dxdj-mkpasswd-5.6.6
  /nix/store/0717z48l5073iz5dnaw7xwy0m6nk1n8s-mkpasswd-5.6.6-man
  /nix/store/r6fmz01dx5h4fw6b9ikhqhdg059dap7z-mount-secret-fs
  /nix/store/4c2cgn8fsi52wsmv5y357q6p7kily88f-mpdecimal-4.0.1
  /nix/store/8iz81cpdx9r5c241k7x55k9sa8ziq47c-mpfr-4.2.2
  /nix/store/d78aw9p5rbj600nzff4gr1kjwcq0gmin-nano-9.2
  /nix/store/qdchcxaw7h83lnlj8q0mr6vf6hlm7nr4-nano-9.2-man
  /nix/store/9ahnm6gsklq4dn20fjlz1wn36c34dik0-ncurses-6.6
  /nix/store/3m5fsdaq927nwpma0bkgm9vl8grm04m2-ncurses-6.6-man
  /nix/store/akkac0pzb5j49sam96z7rb1ffvqqgfsm-netpbm-11.15.3
  /nix/store/1agwwqwcsvgzbhbwmdn7gs4z7i1a2mhs-netpbm-11.15.3-bin
  /nix/store/vhf01hgrpwwida1bgj6kyajdg61jd204-netpbm-11.15.3-dev
  /nix/store/7gad1hvh0kjawsfbadzygjm4grj2bmv9-nettle-3.10.2
  /nix/store/vr6k9ydls6wy5ljh7v9g9z77spkfg446-nghttp2-1.70.0-lib
  /nix/store/adw348h6dcv6fchrbxc4ka50h9krmskm-nghttp3-1.18.0
  /nix/store/wa37x4yq7i09lfa35fksfwlb4vgg46nl-nginx-1.30.6
  /nix/store/v4h44fcf1kfzyh415dwzcnl1kgm5c2z5-nginx-config-formatter-1.4.0
  /nix/store/dli4xp5h5h5bgfpzd81qflbafmp252hb-ngtcp2-1.23.0
  /nix/store/7qbq400pd0byq0vhs8b3b6jq9ghczbyq-nix-2.34.9
  /nix/store/py35n5xmrxyz9wy7gxbil7yrrwarjm3l-nix-2.34.9
  /nix/store/rfvjcx17gp02jh3dj011a9482lcnrcwr-nix-bash-completions-0.6.8
  /nix/store/qkfgnrwlhhdda52l5lmknbd31bdzwa65-nix-cmd-2.34.9
  /nix/store/q6rxhfbzqxrlxyfqm4n6c0zgl7i9601v-nix-expr-2.34.9
  /nix/store/2ypcm01qhvhfgcrzibchxcp9pg5mds6f-nix-fetchers-2.34.9
  /nix/store/9mn30ns65lnzlg7qp4w6r8ki08cfsb6x-nix-flake-2.34.9
  /nix/store/h06g84g2c90k2d1y16llrjfnhngiqimz-nix-info
  /nix/store/ln8bw20g74h7g66lqrfl6zamzi5lwk43-nix-main-2.34.9
  /nix/store/ipx2rg1z2bjhcd6ilaxgzsn3gnf5yajj-nix-nswrapper-2.34.9
  /nix/store/ic3pz8v7pbbipjp59x7h86n50di8w5sz-nix-store-2.34.9
  /nix/store/2k1cv8hzaka1bixk0q1kbdip00paxns3-nix-util-2.34.9
  /nix/store/8mqxzb0mfby7f0hiw9r41znfi9m6w1xg-nixos-facter-0.4.4
  /nix/store/1kiywlr4qjnycyn4sahh7cba2nvcx419-nixos-firewall-tool-26.11
  /nix/store/r3j0kr3x6iwrjinpk0hp3l00l4r7qaam-nixos-init-0.1.0
  /nix/store/nc8ay16ikfhla5i409qa38s4kaswvcg1-nixos-option-26.11
  /nix/store/six5hlljfpsfyx81ixjq0d097bhn636b-nixos-rebuild-ng-26.11
  /nix/store/6bl64777nq963did52n522hkqg3f0ji0-npth-1.8
  /nix/store/gbpk4vg0sjfxkl9nr4jcsykcj4x65r33-nsncd-1.5.3
  /nix/store/fdz6vfwjclh4za1cz9yy7m08a77d6gp1-nss-cacert-3.126
  /nix/store/fnbbk0fzhd6zzg3bwfwsx04slck621h6-numactl-2.0.18
  /nix/store/k0icvc42zssic9y56hwpmgh8ggmyjnbl-onetbb-2022.3.0
  /nix/store/nmb2a06z0kpvjy9p920523bn5zf13dhp-oniguruma-6.9.10-lib
  /nix/store/mf6gc71f8f4jfkl5xshyp2j77adp2zjb-openssh-10.6p1
  /nix/store/6indgw4030h7s4mi59fjcwiq8kjn479y-openssh-10.6p1-man
  /nix/store/33r0n37000780rlkipq2zna6yn0aw20f-openssl-3.5.9
  /nix/store/1r53ih2yfqw9h9mcbz56b59yxipg0a9c-openssl-3.5.9-bin
  /nix/store/aakv3bpnadii45ci9h717hww2gjrcbr1-openssl-3.5.9-man
  /nix/store/vs3aywfbbavqyr255zgqm6v3b3mk4q5b-openssl-4.0.3
  /nix/store/4i8dp5ipxbh2c6i4bfn3nfaviccn50l7-p11-kit-0.26.5
  /nix/store/cbijan776fwwhmylw1jndh8ycp0y97qz-pam.d
  /nix/store/2c5bg827mnff0ylsp48k3vk6f9a61d0g-patch-2.8
  /nix/store/jbcx062jzh1gv5rjmbri2rcpc9gjrx3n-patchelf-0.19.2
  /nix/store/3g2mlwyf1wkiwkjcv86hi9j9d73r9xz9-pcre2-10.49
  /nix/store/4y2pcfw5zfabydr1vsqc2mz71kyz3g45-pcsclite-2.4.1-lib
  /nix/store/j3l6i3qacavn6dpmqm14nzsk5c9yl1ib-perl-5.42.3
  /nix/store/nmhqn4cggf2dcwzwyw19x0vhwmyya8n1-perl-5.42.3-man
  /nix/store/dwkpvav59ijiilcm6pn9xnz3bydhaymb-perl5.42.3-Config-IniFiles-3.002000
  /nix/store/xb4662fwhqi83gyv0mvyzy6g2ja3003z-perl5.42.3-File-Slurp-9999.32
  /nix/store/az46w61l9nx2xgllxppljaakraml7xii-perl5.42.3-IO-Stringy-2.113
  /nix/store/x5iqmmim94k45nnb2kjgl02pw78b6vpj-perl5.42.3-JSON-4.10
  /nix/store/zg0j268lds4sqcbyzfh3nm42qylriikf-popt-1.19
  /nix/store/jrhk3caizp3v5nfh76i293jbwqr7ac1l-procps-4.0.7
  /nix/store/w0ws6brjcmadj06lp953xjlv7yrm0n33-procps-4.0.7-man
  /nix/store/1jj1hvc1c8hxv9fbakbppz4c8bvrqhrg-protobuf-c-1.5.2-lib
  /nix/store/plwcg1la5xyzi2kykfb95lir2pg54jpn-publicsuffix-list-0-unstable-2026-09-02
  /nix/store/falx7wm12vcndm7rc8d6cksgk4bi99ag-pypa-build-hook.sh
  /nix/store/dp9zs38mhs7q7dsv58a79ci38rw3awik-pypa-install-hook
  /nix/store/s2v8ql4pbnkayjca76a17vfshx98c4fr-python-catch-conflicts-hook
  /nix/store/6km47ra7pv3la8dlcxfkjjwnm2w2kk83-python-imports-check-hook.sh
  /nix/store/23j7b26ny9r9djn4lcwqsv48zgy4203h-python-namespaces-hook.sh
  /nix/store/d6rcp4gvj1hn495dg64briyx7nv4ik49-python-output-dist-hook
  /nix/store/3w927mmgpaqxwhx07zinzfm5gs07rhk3-python-remove-bin-bytecode-hook
  /nix/store/05lrr64ybbq8rpd17ycpq83lzfwlj5dr-python-remove-tests-dir-hook
  /nix/store/dbnbphn8a4zr5cpm70i9mgdyyrn156mi-python-runtime-deps-check-hook.sh
  /nix/store/lq2fsnmg0q3y0vlxn91w8s8wvj1m6fld-python3-3.14.8
  /nix/store/g56841r9amw3xbg3y59gfnlfcl42v9bx-python3.14-annotated-types-0.7.0
  /nix/store/inyifc9q3mq2vl01c61hva2ldxc1w585-python3.14-appdirs-1.4.4
  /nix/store/m8z0q1mdf4r4dzcbqkwp4h1xqkkgn06k-python3.14-asttokens-3.0.2
  /nix/store/4pgk0v033jj65mvck024fqw1yfvlc20f-python3.14-build-1.5.1
  /nix/store/lr9cs7cpnam9hkisdjlhxjk5ymf2iavv-python3.14-buildcatrust-0.5.1
  /nix/store/pkxaf7a4rfqb0y886pg9ln3hkhh5r5sd-python3.14-cached-property-2.0.1
  /nix/store/iswsbix380bri7zrzjap203dr3lhlnxg-python3.14-colorama-0.4.6
  /nix/store/laid7vj1ghnkyvyjb41ap0rbnv9j0ayh-python3.14-configargparse-1.8.0
  /nix/store/2gywshjy4c980ax2iidvvjisnxphkq2h-python3.14-decorator-5.3.1
  /nix/store/di594s37avq3r9swi50wz5hcpa18g06k-python3.14-executing-2.2.1
  /nix/store/chkqxlfkbaq5yazm86av5z18paxbi3m3-python3.14-installer-1.0.1
  /nix/store/8f2xadqc5b9qcw3lzc8xkz10iylfll86-python3.14-ipython-9.16.1
  /nix/store/si99casw6zn3ppx9fi01lfvaxfksszs5-python3.14-ipython-pygments-lexers-1.1.1
  /nix/store/7wws2vr1rjd93136hw473r59g3z77rid-python3.14-jedi-0.20.0
  /nix/store/50a5a9rg3j1hg7yn5w31kbznn0jmmp9x-python3.14-jinja2-3.1.6
  /nix/store/dqzammib35jvr541lb484czsnkdq56xx-python3.14-junit-xml-1.9
  /nix/store/3dra7w61fc53njlx00xr94jhpf9nkj5h-python3.14-markupsafe-3.0.4
  /nix/store/i36lin5kh9rlp2y8dwg3vd7jrzigdjaz-python3.14-matplotlib-inline-0.2.2
  /nix/store/6j4hsaiwsikwsb94dplyvmsqr5kyxqq9-python3.14-nixos-test-lib-1.0.0
  /nix/store/5y1z86aa227dgbva1gvfjhabr90pa9w2-python3.14-ovmfvartool-unstable-2022-09-04
  /nix/store/lsys4rd3mvv33c1j8y5hdz6kbp8y5mkm-python3.14-packaging-26.3
  /nix/store/anhpsg9ld17bzhsajm2lld7027m18b8n-python3.14-parso-0.8.7
  /nix/store/9g9ppdxbpigdw51kwjk6jp420c84p9rw-python3.14-pexpect-4.9.0
  /nix/store/x7pyi8gxmrny7fw5mic5y01z4fh40ysz-python3.14-prompt-toolkit-3.0.53
  /nix/store/fxq721gzdqpi63wp1mwyc274nabjswym-python3.14-psutil-7.2.2
  /nix/store/dkys1igmpmw8mk56py6332zv9a0djzb1-python3.14-ptpython-3.0.32
  /nix/store/6ffm7n8fb68g54sv5h61dyyj1sq7438v-python3.14-ptyprocess-0.7.0
  /nix/store/w46d9yybm5000d4mhxs90d9c9f2wgijw-python3.14-pure-eval-0.2.3
  /nix/store/jsgd8vwsf21l65qx1wanvkf9jp1ka7hd-python3.14-pydantic-2.13.4
  /nix/store/n12li35wgr7cgcq9bg0nzc7hnn3aglnf-python3.14-pydantic-core-2.46.4
  /nix/store/v2nm4vswd3lydylkblacj1y6r6c4fs86-python3.14-pygments-2.21.0
  /nix/store/bi5zavb8138m98p7yvpp25yfdbdmzs3x-python3.14-pyparsing-2.4.7
  /nix/store/a2dpjnhlf8p2954w824q0hghq627li1n-python3.14-pyproject-hooks-1.2.0
  /nix/store/j8hrf9wkl1w26xglf3giwlvr4rsp4c8q-python3.14-pyyaml-6.0.3
  /nix/store/kqxybljygnaz970v7r3br33d4lld5ygc-python3.14-remote-pdb-2.1.0
  /nix/store/50r15h73hxprd39w8f0bllfaqhix4qhd-python3.14-ruff-0.17.1
  /nix/store/7wqmhkx1lp5j15m2p4mv6vfrw08nzd90-python3.14-setuptools-83.0.0
  /nix/store/xd5z91ils29v498jx1cjsx27qy03vh0c-python3.14-six-1.17.0
  /nix/store/nvlcqdvkhwg2i2ws2qdvl9aaw2ac8mys-python3.14-stack-data-0.6.3
  /nix/store/0ambhrjrmj0dymr8g3m90i6606mpn098-python3.14-toml-0.10.2
  /nix/store/v3j53wmfyw0k7cb6c8f2909cm16bvbsd-python3.14-traitlets-5.15.1
  /nix/store/hbmwrndyns0qscs90vgf1d5bif32j4qx-python3.14-ty-0.0.87
  /nix/store/8h3ckqyald3gh8gnqcmw2hxfg17snb8n-python3.14-typing-extensions-4.16.0
  /nix/store/1zmncv3i2rrhh00wkh5y1ixvrjghqd0y-python3.14-typing-inspection-0.4.3
  /nix/store/8wlx78bnbz5vyppg52s91zpxynwjrlp0-python3.14-wcwidth-0.9.2
  /nix/store/jrsjdqfj4n15nvd7cqsyzzc9bih3n85z-python3.14-wheel-0.47.0
  /nix/store/ffsf7nqd670asj1yr16lsa7ymkjvw1l7-qrencode-4.1.1
  /nix/store/bjcxsdk90yyk1q3zf1dfqypvfg6800ma-rdma-core-65.0
  /nix/store/ir2g9cnz59ab72ylgbnxr31k1vdnbm6c-readline-8.3p3
  /nix/store/l9df4rn0y2qi5s1bmysci5zpvra1mrz3-rsync-3.5.0
  /nix/store/xpyhvg872xcmw35hsiqn86fvzv09h7q2-ruff-0.17.1
  /nix/store/ax3g9ng3jf3p6hdrxfaxqsrjwq43d89m-run-nspawn-1.0
  /nix/store/98qvzjkapph0i711y01kbvb7wzgzc5by-s2n-tls-1.7.9
  /nix/store/45m3ph35fgl1j1jp7xpkknssbc5wfmg7-shadow-4.20.3
  /nix/store/2v0ajj55hdkmk00rg55f3l46zd53fmqh-shadow-4.20.3-man
  /nix/store/5nkqnzvzgidzfvjdb3jgra263i7fn843-shadow-4.20.3-su
  /nix/store/9yhk0k0271j2mzxgqc04cn31kfsw5pp9-shared-mime-info-2.5.1
  /nix/store/0w4smq92a363al2flh93ahy1qz9jih38-socat-1.8.1.3
  /nix/store/pc7dc00h6bzillk8lc4ysh7h985q9663-sound-theme-freedesktop-0.8
  /nix/store/vyjbj4l5msqs1mwdq0wb8q2lmd9m285n-sqlite-3.53.3
  /nix/store/49cnv1lz3hiybz55z8lm8i401iqrpqyw-stdenv-linux
  /nix/store/4rgz2pgx20yk0pxnm03yvl6dq2cay5hi-stdenv-linux-no-cc
  /nix/store/zprllqba8z3d3c3c09qaxqk7690pzg6f-step-ca-0.30.2
  /nix/store/i7kf8dwwvl9y374ljjd4a4qv80p50kab-strace-7.2
  /nix/store/zsiar66paqdjl5iskm7pg1w2dxzv8n9j-strace-7.2-man
  /nix/store/3m9pi2lvw7iliv0zwn41vsabpfgm4223-stub-ld-aarch64-unknown-linux-musl
  /nix/store/20yabzak4g2q17vmyrys5sn1090ahj28-sudo-1.9.17p2
  /nix/store/hhx8r0ay5nk6r843fsagxk7pvgp8nzps-sudo-1.9.17p2-man
  /nix/store/35h995a13vafy5qzalc7r3byllm9npvk-sudoers
  /nix/store/wiv7gc0zj0w9g5mnwn32gdhk7bnz46ly-system-generators
  /nix/store/64skq6nr0wky09dq4kn2kjq4q1xg02sy-system-shutdown
  /nix/store/115gmjp006v2rh6wbyxqxlhng9bqa6q4-systemd-262
  /nix/store/j6lz526h2rlwfs11jq5s3jcc9ia18xxp-systemd-262
  /nix/store/5qycdylnyjwpcgdsbpya2ydq75g4n248-systemd-262-dev
  /nix/store/f17wbpxf3n7wm82bi25a9fg87zrh40if-systemd-262-man
  /nix/store/kydn1m81bycy4903khgmz4hs07snr9qn-systemd-default-tmpfiles
  /nix/store/iz8ascvhcxzpilcn5sdmrifpk2mf82rx-systemd-generator-environment.json
  /nix/store/gdvix6m2w7m3xiglxhib9lcifmna8xv7-systemd-minimal-262
  /nix/store/0pccgl1hspv34592bhh88b6618090fsr-systemd-minimal-libs-262
  /nix/store/wp6fh7mjy09c1z6r8kcq52rlnb87a4g1-tcb-1.2
  /nix/store/dnnc87xapqd39llgyx8sh3bdqwf2sqgy-tcpdump-4.99.7
  /nix/store/myw2f4kjv4zl7iwgk3gf7bq3jg4n2r84-time-1.10
  /nix/store/8diim0qx4aigblwzrdhzs7l6izljyqk7-tpm2-tss-4.2.0
  /nix/store/5im578d606x0gwi57qi6nv2xdvpwzs0z-ty-0.0.87
  /nix/store/ad9h5b41f7x4fvk22axfjvxykisyjc15-tzdata-2026e
  /nix/store/l0cd9vkdz1r2bvpmlfjjn9q82km47553-unbound-1.26.1-lib
  /nix/store/kvg9ycx7pwbxj4zqvr7bcy0wclln2vvh-update-autotools-gnu-config-scripts-hook
  /nix/store/j03bvdxp4hxmi4xn0nkz7zhfiic4y1x0-user-generators
  /nix/store/qx1j4iqp1pbadshjs6m94lncag9v0vkx-util-linux-2.42.4
  /nix/store/i7d1is6ha5q8ag7zdg70j0z9i7k25maz-util-linux-2.42.4-bin
  /nix/store/0zkw67sqm6cfsy2sjcc860va02amarp3-util-linux-2.42.4-dev
  /nix/store/93hjf5j0jpmn2nrjbqqvf4jk749kmk8q-util-linux-2.42.4-lastlog
  /nix/store/yll8jid7z53niibrabd32lyqrzakad8q-util-linux-2.42.4-lib
  /nix/store/jhj895azirlaaxg1j5ihy0s519q02bav-util-linux-2.42.4-login
  /nix/store/gs2nxlmzvxkkij4n0cnj7v8hmbp35nxd-util-linux-2.42.4-man
  /nix/store/ym5zfrsf9hk67ahjvk37hq8pi5jbv4vc-util-linux-2.42.4-mount
  /nix/store/bakplm1sz5gvxnxg24rc1hzj4pm8kmdy-util-linux-2.42.4-swap
  /nix/store/xsg3d3a33srvfyw6isq3k98k9szk1b8p-util-linux-minimal-2.42.4-bin
  /nix/store/a2f8s7l9wlbqdsi6wblxrhnnav5j33jc-util-linux-minimal-2.42.4-lib
  /nix/store/wsv7fvzmr9d8didrym4ds4ynjis8v2n1-util-linux-minimal-2.42.4-login
  /nix/store/sqgjbb0lv0wl9j14201rh6aj5mgriq19-util-linux-minimal-2.42.4-mount
  /nix/store/y6038fcb26vgq3mynff45bg4ar3vic2p-util-linux-minimal-2.42.4-swap
  /nix/store/awxk7hi8znny1zy6rf3hmr8fc5j6xmw9-vde2-2.3.3
  /nix/store/l511b8ic47jw0xscxkv98kk0vj7mxgcb-vhost-device-vsock-0.3.0
  /nix/store/27lf9xzc6jh82df5ypf1l1vyvzh806jp-which-2.25
  /nix/store/vx0cfnd7yn1pl5b9vgszxmqgdmbp4nl3-which-2.25-man
  /nix/store/fg5pf8rm35nil870b0n0pcnwca88mxxf-wrap-python-hook
  /nix/store/ym567p0ww6iz78n2f0rwd7zqyc1di4v7-xauth-1.1.5
  /nix/store/09mqjwlgdr2jchjchwpgff2vryn4zc4q-xgcc-16.2.0-libgcc
  /nix/store/3rf5354jr3s8386npqkn4ra1hy56c46n-xwininfo-1.1.6
  /nix/store/jjd503sp5z75bkqgb6j8jjcagz3v79xj-xxhash-0.8.3
  /nix/store/linhs507yd8g96sxp5n0lg8x211xxn18-xz-5.8.4
  /nix/store/j9a98d3bs0wjwg0v4hrz8kfsmrxgdg7c-xz-5.8.4-bin
  /nix/store/xh06pw5rl6s0wwpnk5fwlqzbbav2aslg-xz-5.8.4-man
  /nix/store/nw9zbfc171gdsali7fcgl6rayfy5ykkx-zlib-1.3.2
  /nix/store/spcmllkf6z3bvx3zpr2qz9k25hpdn76f-zlib-1.3.2-static
  /nix/store/lfv3g76j0vjs071ka3nk77x2l3mryy99-zlib-ng-2.3.3
  /nix/store/wl3d2qbnjm8h45hi56613zgb1yjd2j0g-zlib-ng-2.3.3
  /nix/store/91qsbvx8w31rd255w8ikficjqg4v3fh4-zstd-1.5.7
  /nix/store/3advb2s77lmajxkks58va12s2bfafhwy-zstd-1.5.7-bin
  /nix/store/64yd8hz4y469c9h7dh9blbrvmfpwaykb-zstd-1.5.7-man
warning: ignoring the client-specified setting 'store', because it is a restricted setting and you are not a trusted user
building '/nix/store/dgr5c31hkf634nmsxjvy52bi7qw0ddi8-ca.json.drv' on nix-store.geninf.io:50051
ca.json> build01: building dgr5c31hkf634nmsxjvy52bi7qw0ddi8-ca.json.drv
ca.json> structuredAttrs is enabled
building '/nix/store/9b82aii9wc5xa4dzw867vh4kqlwqg1ph-system-path.drv' on nix-store.geninf.io:50051
system-path> build01: building 9b82aii9wc5xa4dzw867vh4kqlwqg1ph-system-path.drv
building '/nix/store/ak9b34b4n5sg1jqjnvja0v30i3l4mvx4-system-path.drv' on nix-store.geninf.io:50051
system-path> build01: building ak9b34b4n5sg1jqjnvja0v30i3l4mvx4-system-path.drv
building '/nix/store/dx6b75xyndwr4bw8jd8l0ximcc05bsh0-unit-script-acme-order-renew-test.foo-start.drv' on nix-store.geninf.io:50051
unit-script-acme-order-renew-test.foo-start> build01: building dx6b75xyndwr4bw8jd8l0ximcc05bsh0-unit-script-acme-order-renew-test.foo-start.drv
building '/nix/store/jf0pjr9cfxj16r6vabh6xlbhyfsms8ai-X-Restart-Triggers-acme-ca.foo.drv' on nix-store.geninf.io:50051
X-Restart-Triggers-acme-ca.foo> build01: building jf0pjr9cfxj16r6vabh6xlbhyfsms8ai-X-Restart-Triggers-acme-ca.foo.drv
building '/nix/store/9k8l6gcp07sw65ip8dag6b2lq2bfmx64-acme-postrun.drv' on nix-store.geninf.io:50051
acme-postrun> build01: building 9k8l6gcp07sw65ip8dag6b2lq2bfmx64-acme-postrun.drv
building '/nix/store/3pn7xz3wzl9752ipgmj3nk2ccpn30vq8-nginx.conf.drv' on nix-store.geninf.io:50051
nginx.conf> build01: building 3pn7xz3wzl9752ipgmj3nk2ccpn30vq8-nginx.conf.drv
building '/nix/store/kc86iyrx9p3xrz8qdpxl7wz2ccllbyjb-X-Restart-Triggers-acme-test.foo.drv' on nix-store.geninf.io:50051
X-Restart-Triggers-acme-test.foo> build01: building kc86iyrx9p3xrz8qdpxl7wz2ccllbyjb-X-Restart-Triggers-acme-test.foo.drv
building '/nix/store/kgxsw62kwwf8gz8nwcf1j51xgly2737m-acme-postrun.drv' on nix-store.geninf.io:50051
acme-postrun> build01: building kgxsw62kwwf8gz8nwcf1j51xgly2737m-acme-postrun.drv
unit-script-acme-order-renew-test.foo-start> structuredAttrs is enabled
acme-postrun> structuredAttrs is enabled
X-Restart-Triggers-acme-ca.foo> structuredAttrs is enabled
X-Restart-Triggers-acme-test.foo> structuredAttrs is enabled
nginx.conf> structuredAttrs is enabled
acme-postrun> structuredAttrs is enabled
system-path> structuredAttrs is enabled
system-path> structuredAttrs is enabled
system-path> created 1722 symlinks in user environment
building '/nix/store/s6xx1mzb7xjgsg8bwcvhvv7f3xqd8cxv-nginx.conf.drv' on nix-store.geninf.io:50051
nginx.conf> build01: building s6xx1mzb7xjgsg8bwcvhvv7f3xqd8cxv-nginx.conf.drv
system-path> created 1722 symlinks in user environment
building '/nix/store/agrxrjiv4zs1rhimrv10r7yf9psq80sd-X-Reload-Triggers-systemd-networkd.drv' on nix-store.geninf.io:50051
X-Reload-Triggers-systemd-networkd> build01: building agrxrjiv4zs1rhimrv10r7yf9psq80sd-X-Reload-Triggers-systemd-networkd.drv
building '/nix/store/9fxcb12z9pmdkvys3jjxd14srfr2zjm4-firewall-start.drv' on nix-store.geninf.io:50051
firewall-start> build01: building 9fxcb12z9pmdkvys3jjxd14srfr2zjm4-firewall-start.drv
building '/nix/store/p57vnz65pf5719k9izagcnldsj80ym79-acme-setup-privileged.drv' on nix-store.geninf.io:50051
acme-setup-privileged> build01: building p57vnz65pf5719k9izagcnldsj80ym79-acme-setup-privileged.drv
building '/nix/store/v7sx4hs5ns7a06nf6wgrd4i27dh8ghyw-unit-script-acme-ca.foo-start.drv' on nix-store.geninf.io:50051
unit-script-acme-ca.foo-start> build01: building v7sx4hs5ns7a06nf6wgrd4i27dh8ghyw-unit-script-acme-ca.foo-start.drv
building '/nix/store/fbm47qn99xc97gmq9p946r56a4f87a5y-string-hosts.drv' on nix-store.geninf.io:50051
string-hosts> build01: building fbm47qn99xc97gmq9p946r56a4f87a5y-string-hosts.drv
building '/nix/store/myydwyynifpdl301bhb0913n05402nvr-unit-acme-account-d22a46d9459bf683a338.target.drv' on nix-store.geninf.io:50051
unit-acme-account-d22a46d9459bf683a338.target> build01: building myydwyynifpdl301bhb0913n05402nvr-unit-acme-account-d22a46d9459bf683a338.target.drv
nginx.conf> structuredAttrs is enabled
X-Reload-Triggers-systemd-networkd> structuredAttrs is enabled
acme-setup-privileged> structuredAttrs is enabled
firewall-start> structuredAttrs is enabled
unit-script-acme-ca.foo-start> structuredAttrs is enabled
string-hosts> structuredAttrs is enabled
unit-acme-account-d22a46d9459bf683a338.target> structuredAttrs is enabled
building '/nix/store/py9crvgk3snway65wn99davznf6i3dpv-unit-acme-renew-test.foo.timer.drv' on nix-store.geninf.io:50051
unit-acme-renew-test.foo.timer> build01: building py9crvgk3snway65wn99davznf6i3dpv-unit-acme-renew-test.foo.timer.drv
building '/nix/store/vrxpkiyrjinywnzmkcqcq68vzqsvxnhm-unit-nginx-config-reload.service.drv' on nix-store.geninf.io:50051
unit-nginx-config-reload.service> build01: building vrxpkiyrjinywnzmkcqcq68vzqsvxnhm-unit-nginx-config-reload.service.drv
building '/nix/store/bffsh1f9qq79krv5a665cnq5sb1w83kn-unit-acme-account-2c44cb477b4787b2cf13.target.drv' on nix-store.geninf.io:50051
unit-acme-account-2c44cb477b4787b2cf13.target> build01: building bffsh1f9qq79krv5a665cnq5sb1w83kn-unit-acme-account-2c44cb477b4787b2cf13.target.drv
unit-acme-renew-test.foo.timer> structuredAttrs is enabled
unit-acme-account-2c44cb477b4787b2cf13.target> structuredAttrs is enabled
unit-nginx-config-reload.service> structuredAttrs is enabled
nginx.conf> 
nginx.conf> ==================== Results ===================
nginx.conf> No issues found.
nginx.conf> 
nginx.conf> ==================== Summary ===================
nginx.conf> Total issues:
nginx.conf>     Unspecified: 0
nginx.conf>     Low: 0
nginx.conf>     Medium: 0
nginx.conf>     High: 0
nginx.conf> 
building '/nix/store/ycnv9lva959hwk6vmwjgi0b80a5n8s3l-unit-script-acme-test.foo-start.drv' on nix-store.geninf.io:50051
unit-script-acme-test.foo-start> build01: building ycnv9lva959hwk6vmwjgi0b80a5n8s3l-unit-script-acme-test.foo-start.drv
building '/nix/store/rdyzlvjgmvhzjs98ah5cnaiml0pj5zmy-system-path.drv' on nix-store.geninf.io:50051
system-path> build01: building rdyzlvjgmvhzjs98ah5cnaiml0pj5zmy-system-path.drv
unit-script-acme-test.foo-start> structuredAttrs is enabled
system-path> structuredAttrs is enabled
building '/nix/store/6v519bi4baga85r6fq9sm957bb1m45ib-etc-hostname.drv' on nix-store.geninf.io:50051
etc-hostname> build01: building 6v519bi4baga85r6fq9sm957bb1m45ib-etc-hostname.drv
building '/nix/store/q2a4nyzpa31i0g0rdxv2mdhvmmi52b8v-vars-check-certificates.drv' on nix-store.geninf.io:50051
vars-check-certificates> build01: building q2a4nyzpa31i0g0rdxv2mdhvmmi52b8v-vars-check-certificates.drv
etc-hostname> structuredAttrs is enabled
nginx.conf> 
nginx.conf> ==================== Results ===================
nginx.conf> No issues found.
nginx.conf> 
nginx.conf> ==================== Summary ===================
nginx.conf> Total issues:
nginx.conf>     Unspecified: 0
nginx.conf>     Low: 0
nginx.conf>     Medium: 0
nginx.conf>     High: 0
nginx.conf> 
system-path> created 1722 symlinks in user environment
vars-check-certificates> Running vars check using Nix-based executor...
vars-check-certificates> ✓ All vars checks completed successfully
building '/nix/store/78d9w0vrkxikz65yfxr4lk1qxmclvdj3-system-shutdown.drv' on nix-store.geninf.io:50051
system-shutdown> build01: building 78d9w0vrkxikz65yfxr4lk1qxmclvdj3-system-shutdown.drv
building '/nix/store/vs6vrdjd1lfppr4z3nh6g1vgyim13jzv-unit-acme-renew-ca.foo.timer.drv' on nix-store.geninf.io:50051
unit-acme-renew-ca.foo.timer> build01: building vs6vrdjd1lfppr4z3nh6g1vgyim13jzv-unit-acme-renew-ca.foo.timer.drv
unit-acme-renew-ca.foo.timer> structuredAttrs is enabled
building '/nix/store/br1yi0nwh44jdwm8kfmd5h8b677mrcqj-unit-nginx-config-reload.service.drv' on nix-store.geninf.io:50051
unit-nginx-config-reload.service> build01: building br1yi0nwh44jdwm8kfmd5h8b677mrcqj-unit-nginx-config-reload.service.drv
building '/nix/store/2hal0gl551lbh3h57nymxd0777yh0i6b-users-groups.json.drv' on nix-store.geninf.io:50051
users-groups.json> build01: building 2hal0gl551lbh3h57nymxd0777yh0i6b-users-groups.json.drv
building '/nix/store/9i45ya7xr6nm3hrkvw7kc0a6nkycs9pa-users-groups.json.drv' on nix-store.geninf.io:50051
users-groups.json> build01: building 9i45ya7xr6nm3hrkvw7kc0a6nkycs9pa-users-groups.json.drv
users-groups.json> structuredAttrs is enabled
users-groups.json> structuredAttrs is enabled
unit-nginx-config-reload.service> structuredAttrs is enabled
building '/nix/store/0039d41x6z94z7w2z77hcnzk1qvj3z3l-user-generators.drv' on nix-store.geninf.io:50051
user-generators> build01: building 0039d41x6z94z7w2z77hcnzk1qvj3z3l-user-generators.drv
building '/nix/store/qzk8y7wzpvpwx7dls83lm28plxn2722c-test-script.drv' on nix-store.geninf.io:50051
test-script> build01: building qzk8y7wzpvpwx7dls83lm28plxn2722c-test-script.drv
test-script> structuredAttrs is enabled
building '/nix/store/y3v38a6cn5w107icpb3sj7r54qm8sxfx-unit-script-acme-order-renew-ca.foo-start.drv' on nix-store.geninf.io:50051
unit-script-acme-order-renew-ca.foo-start> build01: building y3v38a6cn5w107icpb3sj7r54qm8sxfx-unit-script-acme-order-renew-ca.foo-start.drv
building '/nix/store/8fx574kin6xhwpc42q2405b3nkfyd7yk-decrypt-age-secrets.drv' on nix-store.geninf.io:50051
decrypt-age-secrets> build01: building 8fx574kin6xhwpc42q2405b3nkfyd7yk-decrypt-age-secrets.drv
building '/nix/store/jm2cqm4a7vpd0xmpb14vp4655bffpmyl-system-generators.drv' on nix-store.geninf.io:50051
system-generators> build01: building jm2cqm4a7vpd0xmpb14vp4655bffpmyl-system-generators.drv
building '/nix/store/c6p5h891gsnrwp9zmm57qr28sldqxm92-nss-cacert-3.126.drv' on nix-store.geninf.io:50051
nss-cacert-3.126> build01: building c6p5h891gsnrwp9zmm57qr28sldqxm92-nss-cacert-3.126.drv
unit-script-acme-order-renew-ca.foo-start> structuredAttrs is enabled
nss-cacert-3.126> structuredAttrs is enabled
decrypt-age-secrets> structuredAttrs is enabled
nss-cacert-3.126> Running phase: unpackPhase
nss-cacert-3.126> Running phase: patchPhase
nss-cacert-3.126> Running phase: updateAutotoolsGnuConfigScriptsPhase
nss-cacert-3.126> Running phase: configurePhase
building '/nix/store/z1v1lvc6vvb5gmfqmwcp2g9grn0l6a5i-extra-hosts.drv' on nix-store.geninf.io:50051
extra-hosts> build01: building z1v1lvc6vvb5gmfqmwcp2g9grn0l6a5i-extra-hosts.drv
nss-cacert-3.126> no configure script, doing nothing
nss-cacert-3.126> Running phase: buildPhase
extra-hosts> structuredAttrs is enabled
building '/nix/store/zh51inywv8zmkb054dwmdvd4sjxqg8li-acme-setup-privileged.drv' on nix-store.geninf.io:50051
acme-setup-privileged> build01: building zh51inywv8zmkb054dwmdvd4sjxqg8li-acme-setup-privileged.drv
acme-setup-privileged> structuredAttrs is enabled
nss-cacert-3.126> Running phase: installPhase
nss-cacert-3.126> Running phase: fixupPhase
nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/fdy61jfaydi0fh93yqzcz5iv4xk0ifmb-nss-cacert-3.126-p11kit
nss-cacert-3.126> checking for references to /build/ in /nix/store/fdy61jfaydi0fh93yqzcz5iv4xk0ifmb-nss-cacert-3.126-p11kit...
nss-cacert-3.126> patching script interpreter paths in /nix/store/fdy61jfaydi0fh93yqzcz5iv4xk0ifmb-nss-cacert-3.126-p11kit
nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/3czdd11gqqngh5jkr5kwl3r9f6cwc14s-nss-cacert-3.126-hashed
nss-cacert-3.126> checking for references to /build/ in /nix/store/3czdd11gqqngh5jkr5kwl3r9f6cwc14s-nss-cacert-3.126-hashed...
nss-cacert-3.126> patching script interpreter paths in /nix/store/3czdd11gqqngh5jkr5kwl3r9f6cwc14s-nss-cacert-3.126-hashed
nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/wxlwkzdaqzrpb2bk19jxszyh7sd7d1jk-nss-cacert-3.126
nss-cacert-3.126> checking for references to /build/ in /nix/store/wxlwkzdaqzrpb2bk19jxszyh7sd7d1jk-nss-cacert-3.126...
nss-cacert-3.126> patching script interpreter paths in /nix/store/wxlwkzdaqzrpb2bk19jxszyh7sd7d1jk-nss-cacert-3.126
nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/845571c4r6qshpy4ai1k7psblwrkzzz2-nss-cacert-3.126-unbundled
nss-cacert-3.126> checking for references to /build/ in /nix/store/845571c4r6qshpy4ai1k7psblwrkzzz2-nss-cacert-3.126-unbundled...
nss-cacert-3.126> patching script interpreter paths in /nix/store/845571c4r6qshpy4ai1k7psblwrkzzz2-nss-cacert-3.126-unbundled
building '/nix/store/r701k3393ckvlwzir2pwll2sq07s1niv-unit-acme-order-renew-test.foo.service.drv' on nix-store.geninf.io:50051
unit-acme-order-renew-test.foo.service> build01: building r701k3393ckvlwzir2pwll2sq07s1niv-unit-acme-order-renew-test.foo.service.drv
unit-acme-order-renew-test.foo.service> structuredAttrs is enabled
building '/nix/store/7h9wlvc3415rnv0029sphrak2agg80pc-dbus-1.drv' on nix-store.geninf.io:50051
dbus-1> build01: building 7h9wlvc3415rnv0029sphrak2agg80pc-dbus-1.drv
building '/nix/store/ky2rfxjsy49rcba8i01ggd4c7x8h884g-X-Restart-Triggers-step-ca.drv' on nix-store.geninf.io:50051
X-Restart-Triggers-step-ca> build01: building ky2rfxjsy49rcba8i01ggd4c7x8h884g-X-Restart-Triggers-step-ca.drv
X-Restart-Triggers-step-ca> structuredAttrs is enabled
building '/nix/store/gsin90h84n7fb919xv9xq17dlmsiszfs-dbus-1.drv' on nix-store.geninf.io:50051
dbus-1> build01: building gsin90h84n7fb919xv9xq17dlmsiszfs-dbus-1.drv
building '/nix/store/a20vjsggc284574ljir9csd8g8wnc5a9-unit-acme-ca.foo.service.drv' on nix-store.geninf.io:50051
unit-acme-ca.foo.service> build01: building a20vjsggc284574ljir9csd8g8wnc5a9-unit-acme-ca.foo.service.drv
building '/nix/store/1mdvb4adnzwbb61w3vlzy8ksm13b5y8q-unit-script-nginx-pre-start.drv' on nix-store.geninf.io:50051
unit-script-nginx-pre-start> build01: building 1mdvb4adnzwbb61w3vlzy8ksm13b5y8q-unit-script-nginx-pre-start.drv
unit-script-nginx-pre-start> structuredAttrs is enabled
unit-acme-ca.foo.service> structuredAttrs is enabled
building '/nix/store/29v4lpib6givrqb1gb2iksb6896s3wq1-unit-acme-test.foo.service.drv' on nix-store.geninf.io:50051
unit-acme-test.foo.service> build01: building 29v4lpib6givrqb1gb2iksb6896s3wq1-unit-acme-test.foo.service.drv
unit-acme-test.foo.service> structuredAttrs is enabled
building '/nix/store/mzjbxfjiampmbzlv182cq5i54sv12y9k-unit-script-nginx-pre-start.drv' on nix-store.geninf.io:50051
unit-script-nginx-pre-start> build01: building mzjbxfjiampmbzlv182cq5i54sv12y9k-unit-script-nginx-pre-start.drv
building '/nix/store/dx3igmbz49xs5fvn4qigg3fd5ynbxqvp-unit-systemd-networkd.service.drv' on nix-store.geninf.io:50051
unit-systemd-networkd.service> build01: building dx3igmbz49xs5fvn4qigg3fd5ynbxqvp-unit-systemd-networkd.service.drv
building '/nix/store/dwnvq56pmmf2csnn13dp61bzvr6k82h7-dbus-1.drv' on nix-store.geninf.io:50051
dbus-1> build01: building dwnvq56pmmf2csnn13dp61bzvr6k82h7-dbus-1.drv
building '/nix/store/1b7vriqscnmwwdkbfsdsz9hgrq7ifsw3-hosts.drv' on nix-store.geninf.io:50051
hosts> build01: building 1b7vriqscnmwwdkbfsdsz9hgrq7ifsw3-hosts.drv
building '/nix/store/sypkdcirxg2k5blnncv7rbpvvhr1ajx2-unit-acme-setup.service.drv' on nix-store.geninf.io:50051
unit-acme-setup.service> build01: building sypkdcirxg2k5blnncv7rbpvvhr1ajx2-unit-acme-setup.service.drv
unit-script-nginx-pre-start> structuredAttrs is enabled
building '/nix/store/cmyjy8c59lha7jhndfwd4p9gfxficdxb-unit-acme-setup.service.drv' on nix-store.geninf.io:50051
unit-acme-setup.service> build01: building cmyjy8c59lha7jhndfwd4p9gfxficdxb-unit-acme-setup.service.drv
unit-systemd-networkd.service> structuredAttrs is enabled
unit-acme-setup.service> structuredAttrs is enabled
unit-acme-setup.service> structuredAttrs is enabled
building '/nix/store/il3qnns3qmn87s11dl9c17kz93l07a3q-firewall-reload.drv' on nix-store.geninf.io:50051
firewall-reload> build01: building il3qnns3qmn87s11dl9c17kz93l07a3q-firewall-reload.drv
firewall-reload> structuredAttrs is enabled
building '/nix/store/kywgmfpr9vfnd1igwnl6ac89zdk5g2xq-unit-acme-order-renew-ca.foo.service.drv' on nix-store.geninf.io:50051
unit-acme-order-renew-ca.foo.service> build01: building kywgmfpr9vfnd1igwnl6ac89zdk5g2xq-unit-acme-order-renew-ca.foo.service.drv
building '/nix/store/y7qz1r98ccdi4ym771hjiqlwswcr96hg-hosts.drv' on nix-store.geninf.io:50051
hosts> build01: building y7qz1r98ccdi4ym771hjiqlwswcr96hg-hosts.drv
building '/nix/store/k46pambvv6vjpfrqb4g5074fldq07l2a-dry-activate.drv' on nix-store.geninf.io:50051
dry-activate> build01: building k46pambvv6vjpfrqb4g5074fldq07l2a-dry-activate.drv
building '/nix/store/x0wmy053ki5pwzxcxwzj9kdla8c6gw0g-dry-activate.drv' on nix-store.geninf.io:50051
dry-activate> build01: building x0wmy053ki5pwzxcxwzj9kdla8c6gw0g-dry-activate.drv
unit-acme-order-renew-ca.foo.service> structuredAttrs is enabled
dry-activate> structuredAttrs is enabled
dry-activate> structuredAttrs is enabled
building '/nix/store/ia5aaj3i3l8syj0l5d38ys9a5ipigiz0-unit-nix-daemon.service.drv' on nix-store.geninf.io:50051
unit-nix-daemon.service> build01: building ia5aaj3i3l8syj0l5d38ys9a5ipigiz0-unit-nix-daemon.service.drv
building '/nix/store/00k59p7jr61naajjja59ryccyj7x1zr1-hosts.drv' on nix-store.geninf.io:50051
hosts> build01: building 00k59p7jr61naajjja59ryccyj7x1zr1-hosts.drv
unit-nix-daemon.service> structuredAttrs is enabled
building '/nix/store/4qmgdgqk1skhnij73lhvv8qfxri8dsi7-unit-firewall.service.drv' on nix-store.geninf.io:50051
unit-firewall.service> build01: building 4qmgdgqk1skhnij73lhvv8qfxri8dsi7-unit-firewall.service.drv
building '/nix/store/aak9bhkv90q1x6acpgjxf933pvd69wwy-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051
X-Restart-Triggers-dbus-broker> build01: building aak9bhkv90q1x6acpgjxf933pvd69wwy-X-Restart-Triggers-dbus-broker.drv
unit-firewall.service> structuredAttrs is enabled
X-Restart-Triggers-dbus-broker> structuredAttrs is enabled
building '/nix/store/9d556ks9k63816djxqw0sx464bic1ik6-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051
X-Restart-Triggers-dbus-broker> build01: building 9d556ks9k63816djxqw0sx464bic1ik6-X-Restart-Triggers-dbus-broker.drv
building '/nix/store/n853hz3n24dicns8421rzlvjjnp63i9n-unit-step-ca.service.drv' on nix-store.geninf.io:50051
unit-step-ca.service> build01: building n853hz3n24dicns8421rzlvjjnp63i9n-unit-step-ca.service.drv
building '/nix/store/y1nv7j3vqqblm1093g5k9d9v86p1rcnj-unit-nginx.service.drv' on nix-store.geninf.io:50051
unit-nginx.service> build01: building y1nv7j3vqqblm1093g5k9d9v86p1rcnj-unit-nginx.service.drv
unit-nginx.service> structuredAttrs is enabled
unit-step-ca.service> structuredAttrs is enabled
X-Restart-Triggers-dbus-broker> structuredAttrs is enabled
building '/nix/store/5gcys7yy157v9x4gqv493l7j1mhv9z2n-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051
X-Restart-Triggers-dbus-broker> build01: building 5gcys7yy157v9x4gqv493l7j1mhv9z2n-X-Restart-Triggers-dbus-broker.drv
X-Restart-Triggers-dbus-broker> structuredAttrs is enabled
building '/nix/store/9ay4s848kj1pg40k5zpg3aadw9bs8vlb-unit-nginx.service.drv' on nix-store.geninf.io:50051
unit-nginx.service> build01: building 9ay4s848kj1pg40k5zpg3aadw9bs8vlb-unit-nginx.service.drv
unit-nginx.service> structuredAttrs is enabled
building '/nix/store/52bsa1z0f0pfgcqqiqrbrhgg4pk731gn-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051
unit-dbus-broker.service> build01: building 52bsa1z0f0pfgcqqiqrbrhgg4pk731gn-unit-dbus-broker.service.drv
unit-dbus-broker.service> structuredAttrs is enabled
building '/nix/store/blybxrnfmqcscl36s2i0i6ln7hsi6na6-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051
unit-dbus-broker.service> build01: building blybxrnfmqcscl36s2i0i6ln7hsi6na6-unit-dbus-broker.service.drv
unit-dbus-broker.service> structuredAttrs is enabled
building '/nix/store/24q8g1g9jxhdxg6qn2rjbwmxffhjjqaa-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051
unit-dbus-broker.service> build01: building 24q8g1g9jxhdxg6qn2rjbwmxffhjjqaa-unit-dbus-broker.service.drv
unit-dbus-broker.service> structuredAttrs is enabled
building '/nix/store/fgk09px1gr2bcl11l4lnrm6fc4z8dyaz-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051
unit-dbus-broker.service> build01: building fgk09px1gr2bcl11l4lnrm6fc4z8dyaz-unit-dbus-broker.service.drv
unit-dbus-broker.service> structuredAttrs is enabled
building '/nix/store/lnwc7vha17gvrdhabcp9nh6kap4dnv8y-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051
unit-dbus-broker.service> build01: building lnwc7vha17gvrdhabcp9nh6kap4dnv8y-unit-dbus-broker.service.drv
building '/nix/store/h7diq2brlf4vzlas6x7khbbwx7rnhxxm-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051
unit-dbus-broker.service> build01: building h7diq2brlf4vzlas6x7khbbwx7rnhxxm-unit-dbus-broker.service.drv
unit-dbus-broker.service> structuredAttrs is enabled
unit-dbus-broker.service> structuredAttrs is enabled
building '/nix/store/x8igqbgxfypadni6mbx2q4qlhi6yv2h8-user-units.drv' on nix-store.geninf.io:50051
user-units> build01: building x8igqbgxfypadni6mbx2q4qlhi6yv2h8-user-units.drv
building '/nix/store/rbx5yvbqcpblqkhsl7h89pp45kfrz2qc-system-units.drv' on nix-store.geninf.io:50051
system-units> build01: building rbx5yvbqcpblqkhsl7h89pp45kfrz2qc-system-units.drv
building '/nix/store/iqi3pkf8vv50xby5hy0knapgfc3ldc93-user-units.drv' on nix-store.geninf.io:50051
user-units> build01: building iqi3pkf8vv50xby5hy0knapgfc3ldc93-user-units.drv
building '/nix/store/jnvp82h3rrs2kknj6kxip3j5ymw76rbx-system-units.drv' on nix-store.geninf.io:50051
system-units> build01: building jnvp82h3rrs2kknj6kxip3j5ymw76rbx-system-units.drv
building '/nix/store/mdkf178qisqnbwgzxnldzwafv6qy1d1p-user-units.drv' on nix-store.geninf.io:50051
user-units> build01: building mdkf178qisqnbwgzxnldzwafv6qy1d1p-user-units.drv
building '/nix/store/ziz2p4ypj9qb101b3306m82533qws410-system-units.drv' on nix-store.geninf.io:50051
system-units> build01: building ziz2p4ypj9qb101b3306m82533qws410-system-units.drv
building '/nix/store/c20ml28rgjvb21hcrqzlgsgdvixlzvcc-etc.drv' on nix-store.geninf.io:50051
etc> build01: building c20ml28rgjvb21hcrqzlgsgdvixlzvcc-etc.drv
building '/nix/store/b37q5j103ixs85hiib80zh4vww9qh39d-etc.drv' on nix-store.geninf.io:50051
etc> build01: building b37q5j103ixs85hiib80zh4vww9qh39d-etc.drv
building '/nix/store/llxggp8f2ncdwcs28zqc2nigh9430n55-etc.drv' on nix-store.geninf.io:50051
etc> build01: building llxggp8f2ncdwcs28zqc2nigh9430n55-etc.drv
building '/nix/store/82fixqnbkkqyiwnzwc8inaw1gygb7v6p-activate.drv' on nix-store.geninf.io:50051
activate> build01: building 82fixqnbkkqyiwnzwc8inaw1gygb7v6p-activate.drv
activate> structuredAttrs is enabled
building '/nix/store/bys7k7j8d2mvq2fp6kkfi5k61p20897s-activate.drv' on nix-store.geninf.io:50051
activate> build01: building bys7k7j8d2mvq2fp6kkfi5k61p20897s-activate.drv
activate> structuredAttrs is enabled
building '/nix/store/6w15pf1s5kaqsjnw3s2xvw6z2rwn32qn-nixos-system-server-test.drv' on nix-store.geninf.io:50051
nixos-system-server-test> build01: building 6w15pf1s5kaqsjnw3s2xvw6z2rwn32qn-nixos-system-server-test.drv
nixos-system-server-test> structuredAttrs is enabled
building '/nix/store/pzwx5iz9qcimbr8x8a9zdw5q55882n1s-activate.drv' on nix-store.geninf.io:50051
activate> build01: building pzwx5iz9qcimbr8x8a9zdw5q55882n1s-activate.drv
activate> structuredAttrs is enabled
building '/nix/store/96ahf0nva02p5kz2k6kzrg6iii2cy0p8-nixos-system-ca-test.drv' on nix-store.geninf.io:50051
nixos-system-ca-test> build01: building 96ahf0nva02p5kz2k6kzrg6iii2cy0p8-nixos-system-ca-test.drv
nixos-system-ca-test> structuredAttrs is enabled
building '/nix/store/aii0gblmvj6kkwqb3mcd21dlb5v8y014-run-server-nspawn.drv' on nix-store.geninf.io:50051
run-server-nspawn> build01: building aii0gblmvj6kkwqb3mcd21dlb5v8y014-run-server-nspawn.drv
building '/nix/store/qn0vbxc4x35zmp22yxl757qay32cs48p-nixos-system-client-test.drv' on nix-store.geninf.io:50051
nixos-system-client-test> build01: building qn0vbxc4x35zmp22yxl757qay32cs48p-nixos-system-client-test.drv
nixos-system-client-test> structuredAttrs is enabled
building '/nix/store/c743par8l6z3b16m3sj6lrpcnf7nsyzg-run-ca-nspawn.drv' on nix-store.geninf.io:50051
run-ca-nspawn> build01: building c743par8l6z3b16m3sj6lrpcnf7nsyzg-run-ca-nspawn.drv
building '/nix/store/vivv2w2zlrqqqvj4f2aix4s8m1kx51f9-run-client-nspawn.drv' on nix-store.geninf.io:50051
run-client-nspawn> build01: building vivv2w2zlrqqqvj4f2aix4s8m1kx51f9-run-client-nspawn.drv
building '/nix/store/f871nryjbppvmrmarxcdb027qficl225-driverConfiguration.json.drv' on nix-store.geninf.io:50051
driverConfiguration.json> build01: building f871nryjbppvmrmarxcdb027qficl225-driverConfiguration.json.drv
driverConfiguration.json> structuredAttrs is enabled
building '/nix/store/4lzzn4nkpkagm22m9rbdrbn0hjzqjzmy-nixos-test-driver-certificates.drv' on nix-store.geninf.io:50051
nixos-test-driver-certificates> build01: building 4lzzn4nkpkagm22m9rbdrbn0hjzqjzmy-nixos-test-driver-certificates.drv
nixos-test-driver-certificates> Running type check (enable/disable: config.skipTypeCheck)
nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck
nixos-test-driver-certificates> All checks passed!
nixos-test-driver-certificates> Linting test script (enable/disable: config.skipLint)
nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipLint
nixos-test-driver-certificates> All checks passed!
building '/nix/store/9ljhn1yj6pw4j8ysgsn1y5xgiyd9wnrg-container-test-run-certificates.drv' on nix-store.geninf.io:50051
container-test-run-certificates> build01: building 9ljhn1yj6pw4j8ysgsn1y5xgiyd9wnrg-container-test-run-certificates.drv
container-test-run-certificates> Machine state will be reset. To keep it, pass --keep-machine-state
container-test-run-certificates> start all VLans
container-test-run-certificates> (finished: start all VLans, in 0.00 seconds)
container-test-run-certificates> Initializing machine ID from random generator.
container-test-run-certificates> Test will time out and terminate in 3600.0 seconds
container-test-run-certificates> run the VM test script
container-test-run-certificates> additionally exposed symbols:
container-test-run-certificates>     ca, client, server,
container-test-run-certificates>     vlan1,
container-test-run-certificates>     start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh
container-test-run-certificates> ca: systemd-nspawn running (pid 50)
container-test-run-certificates> ca: Waiting for journal at /build/vm-state-ca/var/log/journal...
container-test-run-certificates> ca: waiting for unit step-ca.service
container-test-run-certificates> nixos-nspawn(ca): TAP vde-tap1 not found; container will be isolated from VDE
container-test-run-certificates> nixos-nspawn(ca): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.
container-test-run-certificates> Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.
container-test-run-certificates> ░ Spawning container ca on /build/vm-state-ca.
container-test-run-certificates> ca # [312647.421879] ca systemd-journald[82]: Journal started
container-test-run-certificates> ca # [312647.421932] ca systemd-journald[82]: Runtime Journal (/run/log/journal/05f7c28aadb347bc9fa2e6b532fe0a06) is 8M, max 2.5G, 2.4G free.
container-test-run-certificates> ca # [312647.432331] ca systemd[1]: Finished Apply Kernel Variables.
container-test-run-certificates> ca # [312647.445036] ca systemd[1]: Finished Create Static Device Nodes in /dev gracefully.
container-test-run-certificates> ca # [312647.459519] ca systemd[1]: Starting Flush Journal to Persistent Storage...
container-test-run-certificates> ca # [312647.460387] ca systemd[1]: Starting Network Name Resolution...
container-test-run-certificates> ca # [312647.461188] ca systemd[1]: Starting Create Static Device Nodes in /dev...
container-test-run-certificates> ca # [312647.471299] ca systemd-journald[82]: Time spent on flushing to /var/log/journal/05f7c28aadb347bc9fa2e6b532fe0a06 is 1.083ms for 7 entries.
container-test-run-certificates> ca # [312647.471299] ca systemd-journald[82]: System Journal (/var/log/journal/05f7c28aadb347bc9fa2e6b532fe0a06) is 8M, max 4G, 3.9G free.
container-test-run-certificates> ca # [312647.487923] ca systemd[1]: Finished Create Static Device Nodes in /dev.
container-test-run-certificates> ca # [312647.489368] ca systemd[1]: Finished Flush Journal to Persistent Storage.
container-test-run-certificates> ca # [312647.489651] ca systemd[1]: Reached target Preparation for Local File Systems.
container-test-run-certificates> ca # [312647.489742] ca systemd[1]: Reached target Local File Systems.
container-test-run-certificates> ca # [312647.490439] ca systemd[1]: Listening on Boot Loader Control Service Socket.
container-test-run-certificates> ca # [312647.490493] ca systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container
container-test-run-certificates> ca # [312647.491658] ca systemd[1]: Starting Save Transient machine-id to Disk...
container-test-run-certificates> ca # [312647.492557] ca systemd[1]: Starting Create System Files and Directories...
container-test-run-certificates> ca # [312647.492602] ca systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys
container-test-run-certificates> ca # [312647.508043] ca systemd-tmpfiles[134]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted
container-test-run-certificates> ca # [312647.508222] ca systemd-tmpfiles[134]: fchmod() of /var/log/journal failed: Operation not permitted
container-test-run-certificates> ca # [312647.508329] ca systemd-tmpfiles[134]: fchmod() of /var/log/journal/05f7c28aadb347bc9fa2e6b532fe0a06 failed: Operation not permitted
container-test-run-certificates> ca # [312647.508497] ca systemd-tmpfiles[134]: fchmod() of /run/log/journal failed: Operation not permitted
container-test-run-certificates> ca # [312647.509829] ca systemd[1]: Finished Create System Files and Directories.
container-test-run-certificates> ca # [312647.510883] ca systemd[1]: Starting Rebuild Journal Catalog...
container-test-run-certificates> ca # [312647.511589] ca systemd[1]: Starting Record System Boot/Shutdown in UTMP...
container-test-run-certificates> ca # [312647.523413] ca systemd[1]: Finished Record System Boot/Shutdown in UTMP.
container-test-run-certificates> ca # [312647.529212] ca systemd[1]: Finished Rebuild Journal Catalog.
container-test-run-certificates> ca # [312647.530275] ca systemd[1]: Starting Update is Completed...
container-test-run-certificates> ca # [312647.541788] ca systemd[1]: Finished Update is Completed.
container-test-run-certificates> ca # [312647.612376] ca systemd[1]: Finished Firewall.
container-test-run-certificates> ca # [312647.612551] ca systemd[1]: Reached target Preparation for Network.
container-test-run-certificates> ca # [312647.612783] ca systemd[1]: Listening on Network Management Resolve Hook Socket.
container-test-run-certificates> ca # [312647.613995] ca systemd[1]: Starting Network Management...
container-test-run-certificates> ca # [312648.273056] ca systemd-networkd[199]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted
container-test-run-certificates> ca # [312648.273146] ca systemd-networkd[199]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted
container-test-run-certificates> ca # [312648.282735] ca systemd-networkd[199]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.
container-test-run-certificates> ca # [312648.282897] ca systemd-networkd[199]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.
container-test-run-certificates> ca # [312648.283059] ca systemd-networkd[199]: lo: Link UP
container-test-run-certificates> ca # [312648.283064] ca systemd-networkd[199]: lo: Gained carrier
container-test-run-certificates> ca # [312648.283239] ca systemd-networkd[199]: eth1: Configuring with /etc/systemd/network/40-eth1.network.
container-test-run-certificates> ca # [312648.283806] ca systemd[1]: Started Network Management.
container-test-run-certificates> ca # [312648.296593] ca systemd-networkd[199]: eth1: Link UP
container-test-run-certificates> ca # [312648.296907] ca systemd-networkd[199]: eth1: Gained carrier
container-test-run-certificates> ca # [312648.297196] ca systemd[1]: Starting Enable Persistent Storage in systemd-networkd...
container-test-run-certificates> ca # [312648.354460] ca systemd[1]: Finished Enable Persistent Storage in systemd-networkd.
container-test-run-certificates> ca # [312648.638998] ca systemd-resolved[113]: Positive Trust Anchors:
container-test-run-certificates> ca # [312648.639011] ca systemd-resolved[113]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d
container-test-run-certificates> ca # [312648.639014] ca systemd-resolved[113]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16
container-test-run-certificates> ca # [312648.639050] ca systemd-resolved[113]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test
container-test-run-certificates> ca # [312648.639798] ca systemd-resolved[113]: Using system hostname 'ca'.
container-test-run-certificates> ca # [312648.641297] ca systemd[1]: Started Network Name Resolution.
container-test-run-certificates> ca # [312648.641393] ca systemd[1]: Reached target Network.
container-test-run-certificates> ca # [312648.641464] ca systemd[1]: Reached target Network is Online.
container-test-run-certificates> ca # [312648.641518] ca systemd[1]: Reached target System Initialization.
container-test-run-certificates> ca # [312648.641787] ca systemd[1]: Started Renew ACME Certificate for ca.foo.
container-test-run-certificates> ca # [312648.641822] ca systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container
container-test-run-certificates> ca # [312648.641854] ca systemd[1]: Started Daily Cleanup of Temporary Directories.
container-test-run-certificates> ca # [312648.641875] ca systemd[1]: Reached target Timer Units.
container-test-run-certificates> ca # [312648.642017] ca systemd[1]: Listening on D-Bus System Message Bus Socket.
container-test-run-certificates> ca # [312648.642160] ca systemd[1]: Listening on Nix Daemon Socket.
container-test-run-certificates> ca # [312648.642290] ca systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.
container-test-run-certificates> ca # [312648.642315] ca systemd[1]: Reached target Socket Units.
container-test-run-certificates> ca # [312648.642367] ca systemd[1]: Reached target Basic System.
container-test-run-certificates> ca # [312648.643847] ca systemd[1]: Starting Set up the ACME certificate renewal infrastructure...
container-test-run-certificates> ca # [312648.644811] ca systemd[1]: Starting Import lastlog data into lastlog2 database...
container-test-run-certificates> ca # [312648.644859] ca systemd[1]: nginx-config-reload.service skipped, unmet condition check ConditionPathExists=/var/lib/acme/ca.foo/fullchain.pem
container-test-run-certificates> ca # [312648.645972] ca systemd[1]: Starting Name Service Cache Daemon (nsncd)...
container-test-run-certificates> ca # [312648.647329] ca systemd[1]: Starting step-ca service...
container-test-run-certificates> ca # [312648.649073] ca systemd[1]: Starting D-Bus System Message Bus...
container-test-run-certificates> ca # [312648.723138] ca systemd[1]: Finished Import lastlog data into lastlog2 database.
container-test-run-certificates> ca # [312648.890108] ca acme-setup-privileged[204]: + set -euo pipefail
container-test-run-certificates> ca # [312648.890108] ca acme-setup-privileged[204]: + cd /var/lib/acme
container-test-run-certificates> ca # [312648.890108] ca acme-setup-privileged[204]: + chmod -R u=rwX,g=,o= .lego/accounts
container-test-run-certificates> ca # [312648.892357] ca acme-setup-privileged[204]: + chown -R acme .lego/accounts
container-test-run-certificates> ca # [312648.894268] ca acme-setup-privileged[204]: + for fixpath in ca.foo .lego/ca.foo
container-test-run-certificates> ca # [312648.894326] ca acme-setup-privileged[204]: + '[' -d ca.foo ']'
container-test-run-certificates> ca # [312648.894326] ca acme-setup-privileged[204]: + for fixpath in ca.foo .lego/ca.foo
container-test-run-certificates> ca # [312648.894326] ca acme-setup-privileged[204]: + '[' -d .lego/ca.foo ']'
container-test-run-certificates> ca # [312648.983039] ca systemd[1]: Started Name Service Cache Daemon (nsncd).
container-test-run-certificates> ca # [312648.983172] ca systemd[1]: Reached target Host and Network Name Lookups.
container-test-run-certificates> ca # [312648.983299] ca systemd[1]: Reached target User and Group Name Lookups.
container-test-run-certificates> ca # [312648.983628] ca nsncd[206]: Oct 20 00:14:13.955 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"
container-test-run-certificates> ca # [312648.985597] ca systemd[1]: Starting User Login Management...
container-test-run-certificates> ca # [312648.986983] ca systemd[1]: Starting Permit User Sessions...
container-test-run-certificates> ca # [312648.999364] ca systemd[1]: Finished Permit User Sessions.
container-test-run-certificates> ca # [312649.000887] ca systemd[1]: Started Console Getty.
container-test-run-certificates> ca # [312649.000948] ca systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0
container-test-run-certificates> ca # [312649.000977] ca systemd[1]: Reached target Login Prompts.
container-test-run-certificates> ca # [312649.126594] ca dbus-broker-launch[208]: Looking up NSS user entry for 'systemd-timesync'...
container-test-run-certificates> ca # [312649.128079] ca dbus-broker-launch[208]: NSS returned no entry for 'systemd-timesync'
container-test-run-certificates> ca # [312649.128079] ca dbus-broker-launch[208]: Invalid user-name in /nix/store/aams1pq88y7rzvmmq5x4cdrshafgizcp-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"
container-test-run-certificates> ca # [312649.128556] ca systemd[1]: Started D-Bus System Message Bus.
container-test-run-certificates> ca # [312649.135760] ca dbus-broker-launch[208]: Ready
container-test-run-certificates> ca # [312649.788226] ca systemd-networkd[199]: eth1: Gained IPv6LL
container-test-run-certificates> ca # [312649.855468] ca systemd-logind[238]: New seat seat0.
container-test-run-certificates> ca # [312649.855920] ca systemd[1]: Started User Login Management.
container-test-run-certificates> ca # [312649.858242] ca systemd[1]: Starting linger-users.service...
container-test-run-certificates> ca # [312649.872812] ca systemd[1]: linger-users.service: Failed to read pids.max for control group /system.slice/linger-users.service, ignoring: No data available
container-test-run-certificates> ca # [312649.872909] ca systemd[1]: linger-users.service: Failed to read pids.max for control group /system.slice/linger-users.service, ignoring: No data available
container-test-run-certificates> ca # [312649.872962] ca systemd[1]: linger-users.service: Deactivated successfully.
container-test-run-certificates> ca # [312649.873289] ca systemd[1]: Finished linger-users.service.
container-test-run-certificates> ca # [312649.917990] ca acme-setup-start[222]: + set -euo pipefail
container-test-run-certificates> ca # [312649.917990] ca acme-setup-start[222]: + test -e ca/key.pem
container-test-run-certificates> ca # [312649.918483] ca acme-setup-start[222]: + minica --ca-key ca/key.pem --ca-cert ca/cert.pem --domains selfsigned.local
container-test-run-certificates> ca # [312649.940631] ca systemd[1]: Finished Set up the ACME certificate renewal infrastructure.
container-test-run-certificates> ca # [312649.943274] ca systemd[1]: Starting Ensure certificate for ca.foo...
container-test-run-certificates> ca # [312650.150862] ca step-ca[207]: badger 2026/10/20 00:14:15 INFO: All 0 tables opened in 0s
container-test-run-certificates> ca # [312650.159688] ca step-ca[207]: 2026/10/20 00:14:15 Building new tls configuration using step-ca x509 Signer Interface
container-test-run-certificates> ca # [312650.171802] ca step-ca[207]: 2026/10/20 00:14:15 Starting Smallstep CA/0.30.2 (linux/arm64)
container-test-run-certificates> ca # [312650.171802] ca step-ca[207]: 2026/10/20 00:14:15 Documentation: https://u.step.sm/docs/ca
container-test-run-certificates> ca # [312650.171802] ca step-ca[207]: 2026/10/20 00:14:15 Community Discord: https://u.step.sm/discord
container-test-run-certificates> ca # [312650.171920] ca step-ca[207]: 2026/10/20 00:14:15 Config file: /etc/smallstep/ca.json
container-test-run-certificates> ca # [312650.171920] ca step-ca[207]: 2026/10/20 00:14:15 The primary server URL is https://ca.foo:1443
container-test-run-certificates> ca # [312650.171920] ca step-ca[207]: 2026/10/20 00:14:15 Root certificates are available at https://ca.foo:1443/roots.pem
container-test-run-certificates> ca # [312650.171920] ca step-ca[207]: 2026/10/20 00:14:15 X.509 Root Fingerprint: 1cb765a327ce0d31958272ad91c44f7aef1cde110f3adea896b51c34bf5b6d7b
container-test-run-certificates> ca # [312650.172331] ca systemd[1]: Started step-ca service.
container-test-run-certificates> ca # [312650.172482] ca step-ca[207]: 2026/10/20 00:14:15 Serving HTTPS on 0.0.0.0:1443 ...
container-test-run-certificates> ca # [312650.345599] ca systemd[1]: etc-machine\x2did.mount: Deactivated successfully.
container-test-run-certificates> ca # [312650.356271] ca systemd[1]: Finished Save Transient machine-id to Disk.
container-test-run-certificates> ca # [312650.809583] ca acme-ca.foo-start[259]: Waiting to acquire lock in /run/acme/
container-test-run-certificates> ca # [312650.812194] ca acme-ca.foo-start[259]: + '[' -e out/acme-success ']'
container-test-run-certificates> ca # [312650.812234] ca acme-ca.foo-start[259]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=ca.foo --ip-addresses=
container-test-run-certificates> ca # [312650.822943] ca acme-ca.foo-start[297]: + cd ca.foo
container-test-run-certificates> ca # [312650.823162] ca acme-ca.foo-start[297]: + cp -vp cert.pem ../out/cert.pem
container-test-run-certificates> ca # [312650.824661] ca acme-ca.foo-start[298]: 'cert.pem' -> '../out/cert.pem'
container-test-run-certificates> ca # [312650.824879] ca acme-ca.foo-start[297]: + cp -vp key.pem ../out/key.pem
container-test-run-certificates> ca # [312650.825981] ca acme-ca.foo-start[297]: 'key.pem' -> '../out/key.pem'
container-test-run-certificates> ca # [312650.826183] ca acme-ca.foo-start[259]: + cat out/cert.pem ca/cert.pem
container-test-run-certificates> ca # [312650.827687] ca acme-ca.foo-start[259]: + cp ca/cert.pem out/chain.pem
container-test-run-certificates> ca # [312650.829449] ca acme-ca.foo-start[259]: + cat out/key.pem out/fullchain.pem
container-test-run-certificates> ca # [312650.831416] ca acme-ca.foo-start[259]: + for fixpath in out certificates
container-test-run-certificates> ca # [312650.831445] ca acme-ca.foo-start[259]: + '[' -d out ']'
container-test-run-certificates> ca # [312650.831445] ca acme-ca.foo-start[259]: + chmod -R u=rwX,g=rX,o= out
container-test-run-certificates> ca # [312650.832823] ca acme-ca.foo-start[259]: + chown -R acme:nginx out
container-test-run-certificates> ca # [312650.835691] ca acme-ca.foo-start[259]: + for fixpath in out certificates
container-test-run-certificates> ca # [312650.835712] ca acme-ca.foo-start[259]: + '[' -d certificates ']'
container-test-run-certificates> ca # [312650.839931] ca systemd[1]: Finished Ensure certificate for ca.foo.
container-test-run-certificates> ca # [312650.841413] ca systemd[1]: Starting Nginx Web Server...
container-test-run-certificates> ca # [312651.750295] ca nginx-pre-start[309]: nginx: the configuration file /nix/store/k7yv5610y8fd8yz8mxc5xq4krp0pfr9l-nginx.conf syntax is ok
container-test-run-certificates> ca # [312651.750750] ca nginx-pre-start[309]: nginx: configuration file /nix/store/k7yv5610y8fd8yz8mxc5xq4krp0pfr9l-nginx.conf test is successful
container-test-run-certificates> ca # [312651.756447] ca systemd[1]: Started Nginx Web Server.
container-test-run-certificates> ca # [312651.757069] ca systemd[1]: Reached target Multi-User System.
container-test-run-certificates> ca # [312651.758668] ca systemd[1]: Starting Order (and renew) ACME certificate for ca.foo...
container-test-run-certificates> ca # [312652.710144] ca acme-order-renew-ca.foo-start[312]: Waiting to acquire lock in /run/acme/
container-test-run-certificates> ca # [312652.714102] ca acme-order-renew-ca.foo-start[312]: + set -euo pipefail
container-test-run-certificates> ca # [312652.714246] ca acme-order-renew-ca.foo-start[312]: + exec
container-test-run-certificates> ca # [312652.714338] ca acme-order-renew-ca.foo-start[312]: + /nix/store/qzw96vdyndz1czr5jpjn8blpj5f00rib-flock-0.4.0/bin/flock 11
container-test-run-certificates> ca # [312652.715832] ca acme-order-renew-ca.foo-start[324]: ++ find accounts -path '*/keys/*.key' -print -quit
container-test-run-certificates> ca # [312652.718024] ca acme-order-renew-ca.foo-start[312]: + '[' -n '' ']'
container-test-run-certificates> ca # [312652.718106] ca acme-order-renew-ca.foo-start[312]: + exec
container-test-run-certificates> ca # [312652.718162] ca acme-order-renew-ca.foo-start[312]: + '[' -e certificates/ca.foo.key ']'
container-test-run-certificates> ca # [312652.718227] ca acme-order-renew-ca.foo-start[312]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo:1443/acme/acme/directory --key-type ec256 -d ca.foo --no-random-sleep --renew-force --ari-disable --force-cert-domains
container-test-run-certificates> ca # [312652.742545] ca acme-order-renew-ca.foo-start[325]: 2026-10-20T00:14:17.714355221Z INFO  Private key saved. filepath=accounts/ca.foo_1443/none@none.tld/none@none.tld.key
container-test-run-certificates> ca # [312652.772530] ca step-ca[207]: time="2026-10-20T00:14:17Z" level=info duration="161.122µs" duration-ns=161122 fields.time="2026-10-20T00:14:17Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=4a3a44f3-de69-42a6-ba82-fc8bbad74ae2 response="{\"newNonce\":\"https://ca.foo:1443/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo:1443/acme/acme/new-account\",\"newOrder\":\"https://ca.foo:1443/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo:1443/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo:1443/acme/acme/key-change\"}" size=277 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [312652.773217] ca acme-order-renew-ca.foo-start[325]: 2026-10-20T00:14:17.745070318Z INFO  Registering the account. email=none@none.tld
container-test-run-certificates> ca # [312652.782697] ca step-ca[207]: time="2026-10-20T00:14:17Z" level=info duration=9.157164ms duration-ns=9157164 fields.time="2026-10-20T00:14:17Z" method=HEAD name=ca nonce=MTRnSkhFWmVoZXpnSXkxYjh4TzBmVWJ3YVgzTzNqeEk path=/acme/acme/new-nonce protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=826cd0f6-dae5-471b-b598-9df4cf188cb4 size=0 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [312652.792009] ca step-ca[207]: time="2026-10-20T00:14:17Z" level=info duration=8.248912ms duration-ns=8248912 fields.time="2026-10-20T00:14:17Z" method=POST name=ca nonce=SzNHMUJIakpXVGI5NGFPUklXSUxRRXJKVGxNcWMybVo path=/acme/acme/new-account protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=3d7a8699-b847-4fc2-bc47-0933e3a64ca2 response="{\"contact\":[\"mailto:none@none.tld\"],\"status\":\"valid\",\"orders\":\"https://ca.foo:1443/acme/acme/account/571wD6LN38HX0CxFcL5ZHoygabVUwZyn/orders\"}" size=143 status=201 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [312652.792432] ca acme-order-renew-ca.foo-start[325]: 2026-10-20T00:14:17.764270019Z WARN  !!!! HEADS UP !!!!
container-test-run-certificates> ca # [312652.792432] ca acme-order-renew-ca.foo-start[325]: Your account credentials have been saved in your
container-test-run-certificates> ca # [312652.792432] ca acme-order-renew-ca.foo-start[325]: configuration directory at "accounts".
container-test-run-certificates> ca # [312652.792432] ca acme-order-renew-ca.foo-start[325]: You should make a secure backup of this folder now. This
container-test-run-certificates> ca # [312652.792432] ca acme-order-renew-ca.foo-start[325]: configuration directory will also contain private keys
container-test-run-certificates> ca # [312652.792432] ca acme-order-renew-ca.foo-start[325]: generated by lego and certificates obtained from the ACME
container-test-run-certificates> ca # [312652.792432] ca acme-order-renew-ca.foo-start[325]: server. Making regular backups of this folder is ideal.
container-test-run-certificates> ca # [312652.792858] ca acme-order-renew-ca.foo-start[325]: 2026-10-20T00:14:17.764400221Z INFO  Obtaining bundled SAN certificate. domains=ca.foo
container-test-run-certificates> ca # [312652.799209] ca step-ca[207]: time="2026-10-20T00:14:17Z" level=info duration=6.051722ms duration-ns=6051722 fields.time="2026-10-20T00:14:17Z" method=POST name=ca nonce=NzlxckIxRDhPSHhCZ1VlcHZSR1lGbDdZZnU1Y3RhVk4 path=/acme/acme/new-order protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=ce554b31-42a1-463c-9872-740af9384ec9 response="{\"id\":\"4Zr3nq6tLmxLQl9ZGrTzaZXBSkBSyDo6\",\"status\":\"pending\",\"expires\":\"2026-10-21T00:14:17Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"ca.foo\"}],\"notBefore\":\"2026-10-20T00:13:17Z\",\"notAfter\":\"2027-01-18T00:14:17Z\",\"authorizations\":[\"https://ca.foo:1443/acme/acme/authz/Sv9me42w4klqIdV8B0H5UGMyQ2MHV2WW\"],\"finalize\":\"https://ca.foo:1443/acme/acme/order/4Zr3nq6tLmxLQl9ZGrTzaZXBSkBSyDo6/finalize\"}" size=392 status=201 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [312652.863366] ca step-ca[207]: time="2026-10-20T00:14:17Z" level=info duration=6.65157ms duration-ns=6651570 fields.time="2026-10-20T00:14:17Z" method=POST name=ca nonce=ZGFJUXAzOUMxNHRXdm5VNloyeHREVW5QNW5rU0ZPMTg path=/acme/acme/authz/Sv9me42w4klqIdV8B0H5UGMyQ2MHV2WW protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=b6abea68-6d4d-4900-a44e-3b6b503d8b38 response="{\"identifier\":{\"type\":\"dns\",\"value\":\"ca.foo\"},\"status\":\"pending\",\"challenges\":[{\"type\":\"dns-01\",\"status\":\"pending\",\"token\":\"xtkKtwgGyzchw9Lzaex63W5M7QemYKvO\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/Sv9me42w4klqIdV8B0H5UGMyQ2MHV2WW/sBtqLvpIkDg79K0F5TWdIyvQWtQ9Psf6\"},{\"type\":\"http-01\",\"status\":\"pending\",\"token\":\"xtkKtwgGyzchw9Lzaex63W5M7QemYKvO\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/Sv9me42w4klqIdV8B0H5UGMyQ2MHV2WW/KfZCp0WZcxwvfqudvuKmXc5JOH4hXhQj\"},{\"type\":\"tls-alpn-01\",\"status\":\"pending\",\"token\":\"xtkKtwgGyzchw9Lzaex63W5M7QemYKvO\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/Sv9me42w4klqIdV8B0H5UGMyQ2MHV2WW/Rg7KIkVqls5tJ9DVSfKDsooImyE8oGzu\"}],\"wildcard\":false,\"expires\":\"2026-10-21T00:14:17Z\"}" size=719 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [312652.863930] ca acme-order-renew-ca.foo-start[325]: 2026-10-20T00:14:17.835675149Z INFO  Use solver. domain=ca.foo type=http-01
container-test-run-certificates> ca # [312652.863930] ca acme-order-renew-ca.foo-start[325]: 2026-10-20T00:14:17.835725150Z INFO  http01: Trying to solve HTTP-01. domain=ca.foo
container-test-run-certificates> ca # [312652.872017] ca step-ca[207]: time="2026-10-20T00:14:17Z" level=info duration=7.259939ms duration-ns=7259939 fields.time="2026-10-20T00:14:17Z" method=POST name=ca nonce=U2pvbENZRmdqNExKY0FtZ1RxdGl6TVRWbm4zSG5wWEo path=/acme/acme/challenge/Sv9me42w4klqIdV8B0H5UGMyQ2MHV2WW/KfZCp0WZcxwvfqudvuKmXc5JOH4hXhQj protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=dac39560-756b-4ed9-8b20-a2c92f6c9508 response="{\"type\":\"http-01\",\"status\":\"valid\",\"token\":\"xtkKtwgGyzchw9Lzaex63W5M7QemYKvO\",\"validated\":\"2026-10-20T00:14:17Z\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/Sv9me42w4klqIdV8B0H5UGMyQ2MHV2WW/KfZCp0WZcxwvfqudvuKmXc5JOH4hXhQj\"}" size=228 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [312652.872515] ca acme-order-renew-ca.foo-start[325]: 2026-10-20T00:14:17.844347827Z INFO  The server validated our request. domain=ca.foo
container-test-run-certificates> ca # [312652.872632] ca acme-order-renew-ca.foo-start[325]: 2026-10-20T00:14:17.844484709Z INFO  Validations succeeded; requesting certificates. domains=ca.foo
container-test-run-certificates> ca # [312652.887109] ca step-ca[207]: time="2026-10-20T00:14:17Z" level=info duration=12.616891ms duration-ns=12616891 fields.time="2026-10-20T00:14:17Z" method=POST name=ca nonce=ZlpSMThTaVRXRzlpaTc2TlR0YzJKT1BCQ2RGUkVwMU0 path=/acme/acme/order/4Zr3nq6tLmxLQl9ZGrTzaZXBSkBSyDo6/finalize protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=f9cdc83e-64f0-4ab1-be67-5c64bcd59d21 response="{\"id\":\"4Zr3nq6tLmxLQl9ZGrTzaZXBSkBSyDo6\",\"status\":\"valid\",\"expires\":\"2026-10-21T00:14:17Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"ca.foo\"}],\"notBefore\":\"2026-10-20T00:13:17Z\",\"notAfter\":\"2027-01-18T00:14:17Z\",\"authorizations\":[\"https://ca.foo:1443/acme/acme/authz/Sv9me42w4klqIdV8B0H5UGMyQ2MHV2WW\"],\"finalize\":\"https://ca.foo:1443/acme/acme/order/4Zr3nq6tLmxLQl9ZGrTzaZXBSkBSyDo6/finalize\",\"certificate\":\"https://ca.foo:1443/acme/acme/certificate/qkLd7ke00PM7dGHbLY2JkzER3rYyyXl0\"}" size=481 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [312652.890610] ca step-ca[207]: time="2026-10-20T00:14:17Z" level=info certificate="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" duration=2.418232ms duration-ns=2418232 fields.time="2026-10-20T00:14:17Z" issuer="Clan Intermediate CA" method=POST name=ca nonce=TWNsTkc2Tm1zanpCNDAwT3hVNXhlMExONU9JaldQWmQ path=/acme/acme/certificate/qkLd7ke00PM7dGHbLY2JkzER3rYyyXl0 protocol=HTTP/1.1 provisioner=acme public-key="ECDSA P-256" referer= remote-address="2001:db8:1::1" request-id=52e916c6-c55f-43c6-84c0-b7aab3d3d9e3 sans="map[dns:[ca.foo]]" serial=329004358397028187487669161078706802205 size=1344 status=200 subject=ca.foo user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= valid-from="2026-10-20T00:13:17Z" valid-to="2027-01-18T00:14:17Z"
container-test-run-certificates> ca # [312652.890954] ca acme-order-renew-ca.foo-start[325]: 2026-10-20T00:14:17.862788517Z INFO  Server responded with a certificate. domains=ca.foo
container-test-run-certificates> ca # [312652.891040] ca acme-order-renew-ca.foo-start[325]: 2026-10-20T00:14:17.862890839Z INFO  Writing file. filepath=certificates/ca.foo.crt
container-test-run-certificates> ca # [312652.891203] ca acme-order-renew-ca.foo-start[325]: 2026-10-20T00:14:17.863056161Z INFO  Writing file. filepath=certificates/ca.foo.issuer.crt
container-test-run-certificates> ca # [312652.891271] ca acme-order-renew-ca.foo-start[325]: 2026-10-20T00:14:17.863134722Z INFO  Writing file. filepath=certificates/ca.foo.key
container-test-run-certificates> ca # [312652.891443] ca acme-order-renew-ca.foo-start[325]: 2026-10-20T00:14:17.863295724Z INFO  Writing file. filepath=certificates/ca.foo.json
container-test-run-certificates> ca # [312652.895485] ca acme-order-renew-ca.foo-start[312]: + touch out/acme-success
container-test-run-certificates> ca # [312652.897761] ca acme-order-renew-ca.foo-start[312]: + cmp -s certificates/ca.foo.crt out/fullchain.pem
container-test-run-certificates> ca # [312652.899355] ca acme-order-renew-ca.foo-start[312]: + touch out/renewed
container-test-run-certificates> ca # [312652.901150] ca acme-order-renew-ca.foo-start[312]: + echo Installing new certificate
container-test-run-certificates> ca # [312652.901150] ca acme-order-renew-ca.foo-start[312]: Installing new certificate
container-test-run-certificates> ca # [312652.901150] ca acme-order-renew-ca.foo-start[312]: + cp -vp certificates/ca.foo.crt out/fullchain.pem
container-test-run-certificates> ca # [312652.902789] ca acme-order-renew-ca.foo-start[356]: 'certificates/ca.foo.crt' -> 'out/fullchain.pem'
container-test-run-certificates> ca # [312652.903171] ca acme-order-renew-ca.foo-start[312]: + cp -vp certificates/ca.foo.key out/key.pem
container-test-run-certificates> ca # [312652.904949] ca acme-order-renew-ca.foo-start[357]: 'certificates/ca.foo.key' -> 'out/key.pem'
container-test-run-certificates> ca # [312652.905279] ca acme-order-renew-ca.foo-start[312]: + cp -vp certificates/ca.foo.issuer.crt out/chain.pem
container-test-run-certificates> ca # [312652.906961] ca acme-order-renew-ca.foo-start[358]: 'certificates/ca.foo.issuer.crt' -> 'out/chain.pem'
container-test-run-certificates> ca # [312652.907285] ca acme-order-renew-ca.foo-start[312]: + ln -sf fullchain.pem out/cert.pem
container-test-run-certificates> ca # [312652.909431] ca acme-order-renew-ca.foo-start[312]: + cat out/key.pem out/fullchain.pem
container-test-run-certificates> ca # [312652.911424] ca acme-order-renew-ca.foo-start[312]: + for fixpath in out certificates
container-test-run-certificates> ca # [312652.911424] ca acme-order-renew-ca.foo-start[312]: + '[' -d out ']'
container-test-run-certificates> ca # [312652.911521] ca acme-order-renew-ca.foo-start[312]: + chmod -R u=rwX,g=rX,o= out
container-test-run-certificates> ca # [312652.913210] ca acme-order-renew-ca.foo-start[312]: + chown -R acme:nginx out
container-test-run-certificates> ca # [312652.916644] ca acme-order-renew-ca.foo-start[312]: + for fixpath in out certificates
container-test-run-certificates> ca # [312652.916644] ca acme-order-renew-ca.foo-start[312]: + '[' -d certificates ']'
container-test-run-certificates> ca # [312652.916796] ca acme-order-renew-ca.foo-start[312]: + chmod -R u=rwX,g=rX,o= certificates
container-test-run-certificates> ca # [312652.918244] ca acme-order-renew-ca.foo-start[312]: + chown -R acme:nginx certificates
container-test-run-certificates> ca # [312652.921515] ca acme-order-renew-ca.foo-start[312]: + chmod -R u=rwX,g=,o= accounts/.
container-test-run-certificates> ca # [312653.125172] ca systemd[1]: Reloading Nginx Web Server...
container-test-run-certificates> ca # [312653.131160] ca systemd[1]: acme-order-renew-ca.foo.service: Failed to read pids.max for control group /system.slice/acme-order-renew-ca.foo.service, ignoring: No data available
container-test-run-certificates> ca # [312653.131213] ca systemd[1]: acme-order-renew-ca.foo.service: Failed to read pids.max for control group /system.slice/acme-order-renew-ca.foo.service, ignoring: No data available
container-test-run-certificates> ca # [312653.131242] ca systemd[1]: acme-order-renew-ca.foo.service: Deactivated successfully.
container-test-run-certificates> ca # [312653.168247] ca systemd[1]: Finished Order (and renew) ACME certificate for ca.foo.
container-test-run-certificates> ca # [312653.168593] ca systemd[1]: acme-order-renew-ca.foo.service: Consumed 1.177s CPU time over 1.372s wall clock time.
container-test-run-certificates> ca # [312654.169306] ca nginx[374]: nginx: the configuration file /nix/store/k7yv5610y8fd8yz8mxc5xq4krp0pfr9l-nginx.conf syntax is ok
container-test-run-certificates> ca # [312654.169872] ca nginx[374]: nginx: configuration file /nix/store/k7yv5610y8fd8yz8mxc5xq4krp0pfr9l-nginx.conf test is successful
container-test-run-certificates> ca # [312655.120120] ca systemd[1]: Reloaded Nginx Web Server.
container-test-run-certificates> ca # [312655.120620] ca systemd[1]: Startup finished in 8.102s.
container-test-run-certificates> ca: (finished: waiting for unit step-ca.service, in 9.15 seconds)
container-test-run-certificates> ca: waiting for file '/var/lib/acme/ca.foo/fullchain.pem'
container-test-run-certificates> ca: (finished: waiting for file '/var/lib/acme/ca.foo/fullchain.pem', in 0.00 seconds)
container-test-run-certificates> ca: must succeed: systemctl restart nginx.service
container-test-run-certificates> ca # [312655.636983] ca systemd[1]: Stopping Nginx Web Server...
container-test-run-certificates> ca # [312655.708631] ca systemd[1]: nginx.service: Failed to read pids.max for control group /system.slice/nginx.service, ignoring: No data available
container-test-run-certificates> ca # [312655.708668] ca systemd[1]: nginx.service: Deactivated successfully.
container-test-run-certificates> ca # [312655.708932] ca systemd[1]: Stopped Nginx Web Server.
container-test-run-certificates> ca # [312655.708957] ca systemd[1]: nginx.service: Consumed 3.564s CPU time over 4.867s wall clock time.
container-test-run-certificates> ca # [312655.711694] ca systemd[1]: Starting Nginx Web Server...
container-test-run-certificates> ca: (finished: must succeed: systemctl restart nginx.service, in 1.07 seconds)
container-test-run-certificates> server: systemd-nspawn running (pid 467)
container-test-run-certificates> server: Waiting for journal at /build/vm-state-server/var/log/journal...
container-test-run-certificates> client: systemd-nspawn running (pid 470)
container-test-run-certificates> client: Waiting for journal at /build/vm-state-client/var/log/journal...
container-test-run-certificates> server: waiting for file '/var/lib/acme/test.foo/fullchain.pem'
container-test-run-certificates> nixos-nspawn(client): TAP vde-tap1 not found; container will be isolated from VDE
container-test-run-certificates> nixos-nspawn(client): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.
container-test-run-certificates> nixos-nspawn(server): TAP vde-tap1 not found; container will be isolated from VDE
container-test-run-certificates> nixos-nspawn(server): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.
container-test-run-certificates> Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.
container-test-run-certificates> ░ Spawning container client on /build/vm-state-client.
container-test-run-certificates> Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.
container-test-run-certificates> ░ Spawning container server on /build/vm-state-server.
container-test-run-certificates> ca # [312656.688004] ca nginx-pre-start[398]: nginx: the configuration file /nix/store/k7yv5610y8fd8yz8mxc5xq4krp0pfr9l-nginx.conf syntax is ok
container-test-run-certificates> ca # [312656.688590] ca nginx-pre-start[398]: nginx: configuration file /nix/store/k7yv5610y8fd8yz8mxc5xq4krp0pfr9l-nginx.conf test is successful
container-test-run-certificates> ca # [312656.693821] ca systemd[1]: Started Nginx Web Server.
container-test-run-certificates> server # [312657.507938] server systemd-journald[73]: Journal started
container-test-run-certificates> server # [312657.507990] server systemd-journald[73]: Runtime Journal (/run/log/journal/b892c555585441548da9f602550b47ab) is 8M, max 2.5G, 2.4G free.
container-test-run-certificates> server # [312657.519333] server systemd[1]: Finished Apply Kernel Variables.
container-test-run-certificates> server # [312657.532296] server systemd[1]: Finished Create Static Device Nodes in /dev gracefully.
container-test-run-certificates> server # [312657.546431] server systemd[1]: Starting Flush Journal to Persistent Storage...
container-test-run-certificates> server # [312657.547252] server systemd[1]: Starting Network Name Resolution...
container-test-run-certificates> server # [312657.548237] server systemd[1]: Starting Create Static Device Nodes in /dev...
container-test-run-certificates> server # [312657.556032] server systemd-journald[73]: Time spent on flushing to /var/log/journal/b892c555585441548da9f602550b47ab is 1.306ms for 7 entries.
container-test-run-certificates> server # [312657.556032] server systemd-journald[73]: System Journal (/var/log/journal/b892c555585441548da9f602550b47ab) is 8M, max 4G, 3.9G free.
container-test-run-certificates> server # [312657.581172] server systemd[1]: Finished Flush Journal to Persistent Storage.
container-test-run-certificates> server # [312657.581559] server systemd[1]: Finished Create Static Device Nodes in /dev.
container-test-run-certificates> server # [312657.582677] server systemd[1]: Reached target Preparation for Local File Systems.
container-test-run-certificates> server # [312657.582779] server systemd[1]: Reached target Local File Systems.
container-test-run-certificates> server # [312657.583485] server systemd[1]: Listening on Boot Loader Control Service Socket.
container-test-run-certificates> server # [312657.583539] server systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container
container-test-run-certificates> server # [312657.584436] server systemd[1]: Starting Save Transient machine-id to Disk...
container-test-run-certificates> server # [312657.585140] server systemd[1]: Starting Create System Files and Directories...
container-test-run-certificates> server # [312657.585171] server systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys
container-test-run-certificates> server # [312657.599148] server systemd-tmpfiles[137]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted
container-test-run-certificates> server # [312657.599309] server systemd-tmpfiles[137]: fchmod() of /var/log/journal failed: Operation not permitted
container-test-run-certificates> server # [312657.599414] server systemd-tmpfiles[137]: fchmod() of /var/log/journal/b892c555585441548da9f602550b47ab failed: Operation not permitted
container-test-run-certificates> server # [312657.599568] server systemd-tmpfiles[137]: fchmod() of /run/log/journal failed: Operation not permitted
container-test-run-certificates> server # [312657.600432] server systemd[1]: Finished Create System Files and Directories.
container-test-run-certificates> server # [312657.601998] server systemd[1]: Starting Rebuild Journal Catalog...
container-test-run-certificates> server # [312657.602794] server systemd[1]: Starting Record System Boot/Shutdown in UTMP...
container-test-run-certificates> server # [312657.614552] server systemd[1]: Finished Record System Boot/Shutdown in UTMP.
container-test-run-certificates> server # [312657.620748] server systemd[1]: Finished Rebuild Journal Catalog.
container-test-run-certificates> server # [312657.621839] server systemd[1]: Starting Update is Completed...
container-test-run-certificates> server # [312657.632420] server systemd[1]: Finished Update is Completed.
container-test-run-certificates> server # [312657.665169] server systemd[1]: Finished Firewall.
container-test-run-certificates> server # [312657.665321] server systemd[1]: Reached target Preparation for Network.
container-test-run-certificates> server # [312657.665534] server systemd[1]: Listening on Network Management Resolve Hook Socket.
container-test-run-certificates> server # [312657.666561] server systemd[1]: Starting Network Management...
container-test-run-certificates> client # [312657.506972] client systemd-journald[73]: Journal started
container-test-run-certificates> client # [312657.507025] client systemd-journald[73]: Runtime Journal (/run/log/journal/68c41a5771404f63ae02ec074fb89151) is 8M, max 2.5G, 2.4G free.
container-test-run-certificates> client # [312657.522280] client systemd[1]: Finished Apply Kernel Variables.
container-test-run-certificates> client # [312657.535203] client systemd[1]: Finished Create Static Device Nodes in /dev gracefully.
container-test-run-certificates> client # [312657.549149] client systemd[1]: Starting Flush Journal to Persistent Storage...
container-test-run-certificates> client # [312657.549914] client systemd[1]: Starting Network Name Resolution...
container-test-run-certificates> client # [312657.550534] client systemd[1]: Starting Create Static Device Nodes in /dev...
container-test-run-certificates> client # [312657.558499] client systemd-journald[73]: Time spent on flushing to /var/log/journal/68c41a5771404f63ae02ec074fb89151 is 1.061ms for 7 entries.
container-test-run-certificates> client # [312657.558499] client systemd-journald[73]: System Journal (/var/log/journal/68c41a5771404f63ae02ec074fb89151) is 8M, max 4G, 3.9G free.
container-test-run-certificates> client # [312657.582474] client systemd[1]: Finished Flush Journal to Persistent Storage.
container-test-run-certificates> client # [312657.582761] client systemd[1]: Finished Create Static Device Nodes in /dev.
container-test-run-certificates> client # [312657.583815] client systemd[1]: Reached target Preparation for Local File Systems.
container-test-run-certificates> client # [312657.583909] client systemd[1]: Reached target Local File Systems.
container-test-run-certificates> client # [312657.584622] client systemd[1]: Listening on Boot Loader Control Service Socket.
container-test-run-certificates> client # [312657.584674] client systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container
container-test-run-certificates> client # [312657.585464] client systemd[1]: Starting Save Transient machine-id to Disk...
container-test-run-certificates> client # [312657.586201] client systemd[1]: Starting Create System Files and Directories...
container-test-run-certificates> client # [312657.586230] client systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys
container-test-run-certificates> client # [312657.600727] client systemd-tmpfiles[136]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted
container-test-run-certificates> client # [312657.600877] client systemd-tmpfiles[136]: fchmod() of /var/log/journal failed: Operation not permitted
container-test-run-certificates> client # [312657.600985] client systemd-tmpfiles[136]: fchmod() of /var/log/journal/68c41a5771404f63ae02ec074fb89151 failed: Operation not permitted
container-test-run-certificates> client # [312657.601149] client systemd-tmpfiles[136]: fchmod() of /run/log/journal failed: Operation not permitted
container-test-run-certificates> client # [312657.602550] client systemd[1]: Finished Create System Files and Directories.
container-test-run-certificates> client # [312657.603729] client systemd[1]: Starting Rebuild Journal Catalog...
container-test-run-certificates> client # [312657.604451] client systemd[1]: Starting Record System Boot/Shutdown in UTMP...
container-test-run-certificates> client # [312657.616752] client systemd[1]: Finished Record System Boot/Shutdown in UTMP.
container-test-run-certificates> client # [312657.624239] client systemd[1]: Finished Rebuild Journal Catalog.
container-test-run-certificates> client # [312657.625489] client systemd[1]: Starting Update is Completed...
container-test-run-certificates> client # [312657.635315] client systemd[1]: Finished Update is Completed.
container-test-run-certificates> client # [312657.662493] client systemd[1]: Finished Firewall.
container-test-run-certificates> client # [312657.662648] client systemd[1]: Reached target Preparation for Network.
container-test-run-certificates> client # [312657.662872] client systemd[1]: Listening on Network Management Resolve Hook Socket.
container-test-run-certificates> client # [312657.663880] client systemd[1]: Starting Network Management...
container-test-run-certificates> client # [312657.800638] client systemd[1]: Finished Save Transient machine-id to Disk.
container-test-run-certificates> server # [312657.798073] server systemd[1]: Finished Save Transient machine-id to Disk.
container-test-run-certificates> client # [312658.373792] client systemd-networkd[186]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted
container-test-run-certificates> client # [312658.373881] client systemd-networkd[186]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted
container-test-run-certificates> client # [312658.392801] client systemd-networkd[186]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.
container-test-run-certificates> client # [312658.392962] client systemd-networkd[186]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.
container-test-run-certificates> client # [312658.393127] client systemd-networkd[186]: lo: Link UP
container-test-run-certificates> client # [312658.393132] client systemd-networkd[186]: lo: Gained carrier
container-test-run-certificates> client # [312658.393308] client systemd-networkd[186]: eth1: Configuring with /etc/systemd/network/40-eth1.network.
container-test-run-certificates> client # [312658.393792] client systemd-networkd[186]: eth1: Link UP
container-test-run-certificates> server # [312658.395656] server systemd-networkd[190]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted
container-test-run-certificates> server # [312658.395742] server systemd-networkd[190]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted
container-test-run-certificates> server # [312658.405342] server systemd-networkd[190]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.
container-test-run-certificates> client # [312658.393818] client systemd[1]: Started Network Management.
container-test-run-certificates> server # [312658.405505] server systemd-networkd[190]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.
container-test-run-certificates> client # [312658.394118] client systemd-networkd[186]: eth1: Gained carrier
container-test-run-certificates> server # [312658.405662] server systemd-networkd[190]: lo: Link UP
container-test-run-certificates> client # [312658.394933] client systemd[1]: Starting Enable Persistent Storage in systemd-networkd...
container-test-run-certificates> server # [312658.405667] server systemd-networkd[190]: lo: Gained carrier
container-test-run-certificates> client # [312658.460103] client systemd[1]: Finished Enable Persistent Storage in systemd-networkd.
container-test-run-certificates> server # [312658.405857] server systemd-networkd[190]: eth1: Configuring with /etc/systemd/network/40-eth1.network.
container-test-run-certificates> client # [312658.521216] client systemd[1]: etc-machine\x2did.mount: Deactivated successfully.
container-test-run-certificates> server # [312658.406546] server systemd[1]: Started Network Management.
container-test-run-certificates> server # [312658.448357] server systemd-networkd[190]: eth1: Link UP
container-test-run-certificates> server # [312658.448599] server systemd[1]: Starting Enable Persistent Storage in systemd-networkd...
container-test-run-certificates> server # [312658.448848] server systemd-networkd[190]: eth1: Gained carrier
container-test-run-certificates> server # [312658.489986] server systemd[1]: Finished Enable Persistent Storage in systemd-networkd.
container-test-run-certificates> server # [312658.509641] server systemd[1]: etc-machine\x2did.mount: Deactivated successfully.
container-test-run-certificates> client # [312658.757589] client systemd-resolved[111]: Positive Trust Anchors:
container-test-run-certificates> client # [312658.757603] client systemd-resolved[111]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d
container-test-run-certificates> client # [312658.757608] client systemd-resolved[111]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16
container-test-run-certificates> client # [312658.757641] client systemd-resolved[111]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test
container-test-run-certificates> client # [312658.758332] client systemd-resolved[111]: Using system hostname 'client'.
container-test-run-certificates> client # [312658.759735] client systemd[1]: Started Network Name Resolution.
container-test-run-certificates> client # [312658.759816] client systemd[1]: Reached target Network.
container-test-run-certificates> client # [312658.759890] client systemd[1]: Reached target System Initialization.
container-test-run-certificates> client # [312658.759944] client systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container
container-test-run-certificates> client # [312658.759980] client systemd[1]: Started Daily Cleanup of Temporary Directories.
container-test-run-certificates> client # [312658.760007] client systemd[1]: Reached target Timer Units.
container-test-run-certificates> client # [312658.760160] client systemd[1]: Listening on D-Bus System Message Bus Socket.
container-test-run-certificates> client # [312658.760289] client systemd[1]: Listening on Nix Daemon Socket.
container-test-run-certificates> client # [312658.760406] client systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.
container-test-run-certificates> client # [312658.760428] client systemd[1]: Reached target Socket Units.
container-test-run-certificates> client # [312658.760471] client systemd[1]: Reached target Basic System.
container-test-run-certificates> client # [312658.761774] client systemd[1]: Starting Import lastlog data into lastlog2 database...
container-test-run-certificates> client # [312658.762655] client systemd[1]: Starting Name Service Cache Daemon (nsncd)...
container-test-run-certificates> client # [312658.764040] client systemd[1]: Starting D-Bus System Message Bus...
container-test-run-certificates> client # [312658.818397] client systemd[1]: Finished Import lastlog data into lastlog2 database.
container-test-run-certificates> client # [312659.020113] client systemd[1]: Started Name Service Cache Daemon (nsncd).
container-test-run-certificates> client # [312659.020188] client systemd[1]: Reached target Host and Network Name Lookups.
container-test-run-certificates> server # [312658.781917] server systemd-resolved[110]: Positive Trust Anchors:
container-test-run-certificates> server # [312658.781931] server systemd-resolved[110]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d
container-test-run-certificates> server # [312658.781934] server systemd-resolved[110]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16
container-test-run-certificates> server # [312658.781969] server systemd-resolved[110]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test
container-test-run-certificates> server # [312658.782681] server systemd-resolved[110]: Using system hostname 'server'.
container-test-run-certificates> server # [312658.784144] server systemd[1]: Started Network Name Resolution.
container-test-run-certificates> server # [312658.784227] server systemd[1]: Reached target Network.
container-test-run-certificates> server # [312658.784292] server systemd[1]: Reached target Network is Online.
container-test-run-certificates> server # [312658.784333] server systemd[1]: Reached target System Initialization.
container-test-run-certificates> server # [312658.784563] server systemd[1]: Started Renew ACME Certificate for test.foo.
container-test-run-certificates> server # [312658.784595] server systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container
container-test-run-certificates> server # [312658.784616] server systemd[1]: Started Daily Cleanup of Temporary Directories.
container-test-run-certificates> server # [312658.784637] server systemd[1]: Reached target Timer Units.
container-test-run-certificates> server # [312658.784766] server systemd[1]: Listening on D-Bus System Message Bus Socket.
container-test-run-certificates> server # [312658.784868] server systemd[1]: Listening on Nix Daemon Socket.
container-test-run-certificates> server # [312658.784973] server systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.
container-test-run-certificates> server # [312658.784996] server systemd[1]: Reached target Socket Units.
container-test-run-certificates> server # [312658.785029] server systemd[1]: Reached target Basic System.
container-test-run-certificates> server # [312658.801564] server systemd[1]: Starting Set up the ACME certificate renewal infrastructure...
container-test-run-certificates> server # [312658.802487] server systemd[1]: Starting Import lastlog data into lastlog2 database...
container-test-run-certificates> server # [312658.802531] server systemd[1]: nginx-config-reload.service skipped, unmet condition check ConditionPathExists=/var/lib/acme/test.foo/fullchain.pem
container-test-run-certificates> server # [312658.803529] server systemd[1]: Starting Name Service Cache Daemon (nsncd)...
container-test-run-certificates> server # [312658.804782] server systemd[1]: Starting D-Bus System Message Bus...
container-test-run-certificates> server # [312658.822483] server systemd[1]: Finished Import lastlog data into lastlog2 database.
container-test-run-certificates> server # [312658.974799] server acme-setup-privileged[196]: + set -euo pipefail
container-test-run-certificates> server # [312658.974799] server acme-setup-privileged[196]: + cd /var/lib/acme
container-test-run-certificates> server # [312658.975167] server acme-setup-privileged[196]: + chmod -R u=rwX,g=,o= .lego/accounts
container-test-run-certificates> server # [312658.976319] server acme-setup-privileged[196]: + chown -R acme .lego/accounts
container-test-run-certificates> server # [312658.978289] server acme-setup-privileged[196]: + for fixpath in test.foo .lego/test.foo
container-test-run-certificates> server # [312658.978330] server acme-setup-privileged[196]: + '[' -d test.foo ']'
container-test-run-certificates> server # [312658.978330] server acme-setup-privileged[196]: + for fixpath in test.foo .lego/test.foo
container-test-run-certificates> server # [312658.978330] server acme-setup-privileged[196]: + '[' -d .lego/test.foo ']'
container-test-run-certificates> server # [312659.030763] server nsncd[198]: Oct 20 00:14:24.001 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"
container-test-run-certificates> server # [312659.029645] server systemd[1]: Started Name Service Cache Daemon (nsncd).
container-test-run-certificates> server # [312659.029738] server systemd[1]: Reached target Host and Network Name Lookups.
container-test-run-certificates> server # [312659.029817] server systemd[1]: Reached target User and Group Name Lookups.
container-test-run-certificates> server # [312659.031294] server systemd[1]: Starting User Login Management...
container-test-run-certificates> server # [312659.032163] server systemd[1]: Starting Permit User Sessions...
container-test-run-certificates> client # [312659.020548] client nsncd[193]: Oct 20 00:14:23.992 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"
container-test-run-certificates> server # [312659.043036] server systemd[1]: Finished Permit User Sessions.
container-test-run-certificates> client # [312659.020260] client systemd[1]: Reached target User and Group Name Lookups.
container-test-run-certificates> server # [312659.045037] server systemd[1]: Started Console Getty.
container-test-run-certificates> client # [312659.021945] client systemd[1]: Starting User Login Management...
container-test-run-certificates> server # [312659.045115] server systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0
container-test-run-certificates> client # [312659.023272] client systemd[1]: Starting Permit User Sessions...
container-test-run-certificates> server # [312659.045160] server systemd[1]: Reached target Login Prompts.
container-test-run-certificates> client # [312659.034184] client systemd[1]: Finished Permit User Sessions.
container-test-run-certificates> server # [312659.206909] server dbus-broker-launch[199]: Looking up NSS user entry for 'systemd-timesync'...
container-test-run-certificates> client # [312659.035419] client systemd[1]: Started Console Getty.
container-test-run-certificates> server # [312659.207983] server dbus-broker-launch[199]: NSS returned no entry for 'systemd-timesync'
container-test-run-certificates> client # [312659.035474] client systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0
container-test-run-certificates> server # [312659.207983] server dbus-broker-launch[199]: Invalid user-name in /nix/store/0a39dzsm4hcj9zq28bd8mppx6i5azxa0-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"
container-test-run-certificates> client # [312659.035501] client systemd[1]: Reached target Login Prompts.
container-test-run-certificates> server # [312659.208755] server systemd[1]: Started D-Bus System Message Bus.
container-test-run-certificates> server # [312659.215366] server dbus-broker-launch[199]: Ready
container-test-run-certificates> client # [312659.239236] client dbus-broker-launch[194]: Looking up NSS user entry for 'systemd-timesync'...
container-test-run-certificates> client # [312659.240276] client dbus-broker-launch[194]: NSS returned no entry for 'systemd-timesync'
container-test-run-certificates> client # [312659.240276] client dbus-broker-launch[194]: Invalid user-name in /nix/store/z00c82rpj27syw5dc0wncas1b6jssb4b-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"
container-test-run-certificates> client # [312659.241425] client systemd[1]: Started D-Bus System Message Bus.
container-test-run-certificates> client # [312659.247792] client dbus-broker-launch[194]: Ready
container-test-run-certificates> server # [312659.856735] server systemd-logind[228]: New seat seat0.
container-test-run-certificates> server # [312659.857188] server systemd[1]: Started User Login Management.
container-test-run-certificates> server # [312659.888557] server systemd[1]: Starting linger-users.service...
container-test-run-certificates> server # [312659.900841] server systemd[1]: linger-users.service: Failed to read pids.max for control group /system.slice/linger-users.service, ignoring: No data available
container-test-run-certificates> server # [312659.900937] server systemd[1]: linger-users.service: Failed to read pids.max for control group /system.slice/linger-users.service, ignoring: No data available
container-test-run-certificates> server # [312659.900999] server systemd[1]: linger-users.service: Deactivated successfully.
container-test-run-certificates> server # [312659.901260] server systemd[1]: Finished linger-users.service.
container-test-run-certificates> server # [312659.936775] server acme-setup-start[212]: + set -euo pipefail
container-test-run-certificates> server # [312659.937112] server acme-setup-start[212]: + test -e ca/key.pem
container-test-run-certificates> server # [312659.937112] server acme-setup-start[212]: + minica --ca-key ca/key.pem --ca-cert ca/cert.pem --domains selfsigned.local
container-test-run-certificates> server # [312659.960115] server systemd[1]: Finished Set up the ACME certificate renewal infrastructure.
container-test-run-certificates> server # [312659.961969] server systemd[1]: Starting Ensure certificate for test.foo...
container-test-run-certificates> client # [312659.847138] client systemd-logind[209]: New seat seat0.
container-test-run-certificates> client # [312659.847769] client systemd[1]: Started User Login Management.
container-test-run-certificates> client # [312659.849962] client systemd[1]: Starting linger-users.service...
container-test-run-certificates> client # [312659.896417] client systemd[1]: linger-users.service: Failed to read pids.max for control group /system.slice/linger-users.service, ignoring: No data available
container-test-run-certificates> client # [312659.896522] client systemd[1]: linger-users.service: Failed to read pids.max for control group /system.slice/linger-users.service, ignoring: No data available
container-test-run-certificates> client # [312659.896584] client systemd[1]: linger-users.service: Deactivated successfully.
container-test-run-certificates> client # [312659.896880] client systemd[1]: Finished linger-users.service.
container-test-run-certificates> client # [312659.897799] client systemd[1]: Reached target Multi-User System.
container-test-run-certificates> client # [312659.898135] client systemd[1]: Startup finished in 2.736s.
container-test-run-certificates> server # [312660.284250] server systemd-networkd[190]: eth1: Gained IPv6LL
container-test-run-certificates> client # [312660.288256] client systemd-networkd[186]: eth1: Gained IPv6LL
container-test-run-certificates> server # [312660.818685] server acme-test.foo-start[250]: Waiting to acquire lock in /run/acme/
container-test-run-certificates> server # [312660.821624] server acme-test.foo-start[250]: + '[' -e out/acme-success ']'
container-test-run-certificates> server # [312660.821624] server acme-test.foo-start[250]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=test.foo --ip-addresses=
container-test-run-certificates> server # [312660.833346] server acme-test.foo-start[259]: + cd test.foo
container-test-run-certificates> server # [312660.833992] server acme-test.foo-start[259]: + cp -vp cert.pem ../out/cert.pem
container-test-run-certificates> server # [312660.834863] server acme-test.foo-start[260]: 'cert.pem' -> '../out/cert.pem'
container-test-run-certificates> server # [312660.835188] server acme-test.foo-start[259]: + cp -vp key.pem ../out/key.pem
container-test-run-certificates> server # [312660.836485] server acme-test.foo-start[259]: 'key.pem' -> '../out/key.pem'
container-test-run-certificates> server # [312660.836744] server acme-test.foo-start[250]: + cat out/cert.pem ca/cert.pem
container-test-run-certificates> server # [312660.838305] server acme-test.foo-start[250]: + cp ca/cert.pem out/chain.pem
container-test-run-certificates> server # [312660.839685] server acme-test.foo-start[250]: + cat out/key.pem out/fullchain.pem
container-test-run-certificates> server # [312660.841666] server acme-test.foo-start[250]: + for fixpath in out certificates
container-test-run-certificates> server # [312660.841701] server acme-test.foo-start[250]: + '[' -d out ']'
container-test-run-certificates> server # [312660.841701] server acme-test.foo-start[250]: + chmod -R u=rwX,g=rX,o= out
container-test-run-certificates> server # [312660.843150] server acme-test.foo-start[250]: + chown -R acme:nginx out
container-test-run-certificates> server # [312660.846252] server acme-test.foo-start[250]: + for fixpath in out certificates
container-test-run-certificates> server # [312660.846280] server acme-test.foo-start[250]: + '[' -d certificates ']'
container-test-run-certificates> server # [312660.850973] server systemd[1]: Finished Ensure certificate for test.foo.
container-test-run-certificates> server # [312660.853028] server systemd[1]: Starting Nginx Web Server...
container-test-run-certificates> server # [312661.993846] server nginx-pre-start[271]: nginx: the configuration file /nix/store/blk4g7rl6g4ymddg61fcldiw4qnl5834-nginx.conf syntax is ok
container-test-run-certificates> server # [312661.994247] server nginx-pre-start[271]: nginx: configuration file /nix/store/blk4g7rl6g4ymddg61fcldiw4qnl5834-nginx.conf test is successful
container-test-run-certificates> server # [312662.000105] server systemd[1]: Started Nginx Web Server.
container-test-run-certificates> server # [312662.000627] server systemd[1]: Reached target Multi-User System.
container-test-run-certificates> server # [312662.002137] server systemd[1]: Starting Order (and renew) ACME certificate for test.foo...
container-test-run-certificates> server # [312663.115127] server acme-order-renew-test.foo-start[274]: Waiting to acquire lock in /run/acme/
container-test-run-certificates> server # [312663.118659] server acme-order-renew-test.foo-start[274]: + set -euo pipefail
container-test-run-certificates> server # [312663.118821] server acme-order-renew-test.foo-start[274]: + exec
container-test-run-certificates> server # [312663.118912] server acme-order-renew-test.foo-start[274]: + /nix/store/qzw96vdyndz1czr5jpjn8blpj5f00rib-flock-0.4.0/bin/flock 11
container-test-run-certificates> server # [312663.120581] server acme-order-renew-test.foo-start[285]: ++ find accounts -path '*/keys/*.key' -print -quit
container-test-run-certificates> server # [312663.122901] server acme-order-renew-test.foo-start[274]: + '[' -n '' ']'
container-test-run-certificates> server # [312663.123010] server acme-order-renew-test.foo-start[274]: + exec
container-test-run-certificates> server # [312663.123072] server acme-order-renew-test.foo-start[274]: + '[' -e certificates/test.foo.key ']'
container-test-run-certificates> server # [312663.123072] server acme-order-renew-test.foo-start[274]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo/acme/acme/directory --key-type ec256 -d test.foo --no-random-sleep --renew-force --ari-disable --force-cert-domains
container-test-run-certificates> server # [312663.144700] server acme-order-renew-test.foo-start[286]: 2026-10-20T00:14:28.116515608Z INFO  Private key saved. filepath=accounts/ca.foo/none@none.tld/none@none.tld.key
container-test-run-certificates> server # [312663.169804] server acme-order-renew-test.foo-start[286]: 2026-10-20T00:14:28.141631989Z INFO  Registering the account. email=none@none.tld
container-test-run-certificates> server # [312663.178333] server acme-order-renew-test.foo-start[286]: 2026-10-20T00:14:28.150178625Z WARN  !!!! HEADS UP !!!!
container-test-run-certificates> server # [312663.178333] server acme-order-renew-test.foo-start[286]: Your account credentials have been saved in your
container-test-run-certificates> server # [312663.178333] server acme-order-renew-test.foo-start[286]: configuration directory at "accounts".
container-test-run-certificates> server # [312663.178333] server acme-order-renew-test.foo-start[286]: You should make a secure backup of this folder now. This
container-test-run-certificates> server # [312663.178333] server acme-order-renew-test.foo-start[286]: configuration directory will also contain private keys
container-test-run-certificates> server # [312663.178333] server acme-order-renew-test.foo-start[286]: generated by lego and certificates obtained from the ACME
container-test-run-certificates> server # [312663.178333] server acme-order-renew-test.foo-start[286]: server. Making regular backups of this folder is ideal.
container-test-run-certificates> server # [312663.178872] server acme-order-renew-test.foo-start[286]: 2026-10-20T00:14:28.150290467Z INFO  Obtaining bundled SAN certificate. domains=test.foo
container-test-run-certificates> server # [312663.247827] server acme-order-renew-test.foo-start[286]: 2026-10-20T00:14:28.219653129Z INFO  Use solver. domain=test.foo type=http-01
container-test-run-certificates> server # [312663.247827] server acme-order-renew-test.foo-start[286]: 2026-10-20T00:14:28.219708090Z INFO  http01: Trying to solve HTTP-01. domain=test.foo
container-test-run-certificates> server # [312663.253900] server acme-order-renew-test.foo-start[286]: 2026-10-20T00:14:28.225736572Z INFO  The server validated our request. domain=test.foo
container-test-run-certificates> server # [312663.254012] server acme-order-renew-test.foo-start[286]: 2026-10-20T00:14:28.225832773Z INFO  Validations succeeded; requesting certificates. domains=test.foo
container-test-run-certificates> server # [312663.269373] server acme-order-renew-test.foo-start[286]: 2026-10-20T00:14:28.241216742Z INFO  Server responded with a certificate. domains=test.foo
container-test-run-certificates> server # [312663.269482] server acme-order-renew-test.foo-start[286]: 2026-10-20T00:14:28.241288423Z INFO  Writing file. filepath=certificates/test.foo.crt
container-test-run-certificates> server # [312663.269541] server acme-order-renew-test.foo-start[286]: 2026-10-20T00:14:28.241401265Z INFO  Writing file. filepath=certificates/test.foo.issuer.crt
container-test-run-certificates> server # [312663.269605] server acme-order-renew-test.foo-start[286]: 2026-10-20T00:14:28.241443945Z INFO  Writing file. filepath=certificates/test.foo.key
container-test-run-certificates> server # [312663.269673] server acme-order-renew-test.foo-start[286]: 2026-10-20T00:14:28.241534346Z INFO  Writing file. filepath=certificates/test.foo.json
container-test-run-certificates> server # [312663.275263] server acme-order-renew-test.foo-start[274]: + touch out/acme-success
container-test-run-certificates> server # [312663.277440] server acme-order-renew-test.foo-start[274]: + cmp -s certificates/test.foo.crt out/fullchain.pem
container-test-run-certificates> server # [312663.278760] server acme-order-renew-test.foo-start[274]: + touch out/renewed
container-test-run-certificates> server # [312663.280815] server acme-order-renew-test.foo-start[274]: + echo Installing new certificate
container-test-run-certificates> server # [312663.280815] server acme-order-renew-test.foo-start[274]: Installing new certificate
container-test-run-certificates> server # [312663.280815] server acme-order-renew-test.foo-start[274]: + cp -vp certificates/test.foo.crt out/fullchain.pem
container-test-run-certificates> server # [312663.282236] server acme-order-renew-test.foo-start[317]: 'certificates/test.foo.crt' -> 'out/fullchain.pem'
container-test-run-certificates> server # [312663.282504] server acme-order-renew-test.foo-start[274]: + cp -vp certificates/test.foo.key out/key.pem
container-test-run-certificates> server # [312663.283800] server acme-order-renew-test.foo-start[318]: 'certificates/test.foo.key' -> 'out/key.pem'
container-test-run-certificates> server # [312663.284148] server acme-order-renew-test.foo-start[274]: + cp -vp certificates/test.foo.issuer.crt out/chain.pem
container-test-run-certificates> server # [312663.285259] server acme-order-renew-test.foo-start[319]: 'certificates/test.foo.issuer.crt' -> 'out/chain.pem'
container-test-run-certificates> server # [312663.285586] server acme-order-renew-test.foo-start[274]: + ln -sf fullchain.pem out/cert.pem
container-test-run-certificates> server # [312663.286952] server acme-order-renew-test.foo-start[274]: + cat out/key.pem out/fullchain.pem
container-test-run-certificates> server # [312663.289274] server acme-order-renew-test.foo-start[274]: + for fixpath in out certificates
container-test-run-certificates> server # [312663.289274] server acme-order-renew-test.foo-start[274]: + '[' -d out ']'
container-test-run-certificates> server # [312663.289393] server acme-order-renew-test.foo-start[274]: + chmod -R u=rwX,g=rX,o= out
container-test-run-certificates> server # [312663.290870] server acme-order-renew-test.foo-start[274]: + chown -R acme:nginx out
container-test-run-certificates> server # [312663.293578] server acme-order-renew-test.foo-start[274]: + for fixpath in out certificates
container-test-run-certificates> server # [312663.293578] server acme-order-renew-test.foo-start[274]: + '[' -d certificates ']'
container-test-run-certificates> server # [312663.293674] server acme-order-renew-test.foo-start[274]: + chmod -R u=rwX,g=rX,o= certificates
container-test-run-certificates> server # [312663.295296] server acme-order-renew-test.foo-start[274]: + chown -R acme:nginx certificates
container-test-run-certificates> server # [312663.298193] server acme-order-renew-test.foo-start[274]: + chmod -R u=rwX,g=,o= accounts/.
container-test-run-certificates> ca # [312663.169330] ca step-ca[207]: time="2026-10-20T00:14:28Z" level=info duration="47.201µs" duration-ns=47201 fields.time="2026-10-20T00:14:28Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="::1" request-id=c9efd575-5447-481c-9e78-95fbd183588e response="{\"newNonce\":\"https://ca.foo/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo/acme/acme/new-account\",\"newOrder\":\"https://ca.foo/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo/acme/acme/key-change\"}" size=252 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [312663.172749] ca step-ca[207]: time="2026-10-20T00:14:28Z" level=info duration=1.000173ms duration-ns=1000173 fields.time="2026-10-20T00:14:28Z" method=HEAD name=ca nonce=YVNhNktaRTBINE0zZ2Qxa1dqVjQzRGNsMFR1SnFyYUU path=/acme/acme/new-nonce protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=1ee542c8-29f3-45b5-a143-6db4c004bfc2 size=0 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [312663.177789] ca step-ca[207]: time="2026-10-20T00:14:28Z" level=info duration=2.419553ms duration-ns=2419553 fields.time="2026-10-20T00:14:28Z" method=POST name=ca nonce=SGUwbDVraHZaUG85QWQxQTQyb3BCMkM4SXZVNGh6SVA path=/acme/acme/new-account protocol=HTTP/1.1 referer= remote-address="::1" request-id=dc265410-5eec-45d0-8471-cf91977023e4 response="{\"contact\":[\"mailto:none@none.tld\"],\"status\":\"valid\",\"orders\":\"https://ca.foo/acme/acme/account/3pEf902kTaIUdpPaZelhJvztn8qHRQrO/orders\"}" size=138 status=201 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [312663.185155] ca step-ca[207]: time="2026-10-20T00:14:28Z" level=info duration=3.969094ms duration-ns=3969094 fields.time="2026-10-20T00:14:28Z" method=POST name=ca nonce=MUMzSGlKNWxQQmpmcnA2VmQ1NFhRQ3NqcGtqZVJ2UzQ path=/acme/acme/new-order protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=9bc976f4-ee11-4385-8729-a75eaf14dcdd response="{\"id\":\"4oV3r7hqqUWpgTvdQIqBDeDyjFmFDYVT\",\"status\":\"pending\",\"expires\":\"2026-10-21T00:14:28Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"test.foo\"}],\"notBefore\":\"2026-10-20T00:13:28Z\",\"notAfter\":\"2027-01-18T00:14:28Z\",\"authorizations\":[\"https://ca.foo/acme/acme/authz/UU5Bc1ajCFxBhOXTlHShyzS4Yr6Nt1KP\"],\"finalize\":\"https://ca.foo/acme/acme/order/4oV3r7hqqUWpgTvdQIqBDeDyjFmFDYVT/finalize\"}" size=384 status=201 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [312663.247204] ca step-ca[207]: time="2026-10-20T00:14:28Z" level=info duration=3.219884ms duration-ns=3219884 fields.time="2026-10-20T00:14:28Z" method=POST name=ca nonce=M3luR0tlbnNZQmU3NnFkNUJTVmxDdUEzRkl0cjRyVmo path=/acme/acme/authz/UU5Bc1ajCFxBhOXTlHShyzS4Yr6Nt1KP protocol=HTTP/1.1 referer= remote-address="::1" request-id=c5371617-507e-4880-857f-7e8e49e0af1f response="{\"identifier\":{\"type\":\"dns\",\"value\":\"test.foo\"},\"status\":\"pending\",\"challenges\":[{\"type\":\"dns-01\",\"status\":\"pending\",\"token\":\"5H0ZW8rdaVIDv8vpykCXuINH70DU1WiQ\",\"url\":\"https://ca.foo/acme/acme/challenge/UU5Bc1ajCFxBhOXTlHShyzS4Yr6Nt1KP/CfITLHcwhhb42oMjGAIHGfxFslK0krbY\"},{\"type\":\"http-01\",\"status\":\"pending\",\"token\":\"5H0ZW8rdaVIDv8vpykCXuINH70DU1WiQ\",\"url\":\"https://ca.foo/acme/acme/challenge/UU5Bc1ajCFxBhOXTlHShyzS4Yr6Nt1KP/UnMHSv6faY2fByY33NyO80nBIpZQpq9u\"},{\"type\":\"tls-alpn-01\",\"status\":\"pending\",\"token\":\"5H0ZW8rdaVIDv8vpykCXuINH70DU1WiQ\",\"url\":\"https://ca.foo/acme/acme/challenge/UU5Bc1ajCFxBhOXTlHShyzS4Yr6Nt1KP/wEAUeaReeKvdpl5rt2oP1w5swPJEekvo\"}],\"wildcard\":false,\"expires\":\"2026-10-21T00:14:28Z\"}" size=706 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [312663.253427] ca step-ca[207]: time="2026-10-20T00:14:28Z" level=info duration=3.372526ms duration-ns=3372526 fields.time="2026-10-20T00:14:28Z" method=POST name=ca nonce=bmhTcW05QzhQT1ppb2Y1YUJ3TW95bkhZWG1QWWczcEs path=/acme/acme/challenge/UU5Bc1ajCFxBhOXTlHShyzS4Yr6Nt1KP/UnMHSv6faY2fByY33NyO80nBIpZQpq9u protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=b9e2c1e1-5169-4fe8-a7d0-c78258268754 response="{\"type\":\"http-01\",\"status\":\"valid\",\"token\":\"5H0ZW8rdaVIDv8vpykCXuINH70DU1WiQ\",\"validated\":\"2026-10-20T00:14:28Z\",\"url\":\"https://ca.foo/acme/acme/challenge/UU5Bc1ajCFxBhOXTlHShyzS4Yr6Nt1KP/UnMHSv6faY2fByY33NyO80nBIpZQpq9u\"}" size=223 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [312663.265278] ca step-ca[207]: time="2026-10-20T00:14:28Z" level=info duration=8.951562ms duration-ns=8951562 fields.time="2026-10-20T00:14:28Z" method=POST name=ca nonce=TGZ5YkhKcTZCbTJ5ajdhSFVXTUVkN2dVdnlnektGa00 path=/acme/acme/order/4oV3r7hqqUWpgTvdQIqBDeDyjFmFDYVT/finalize protocol=HTTP/1.1 referer= remote-address="::1" request-id=de7c55d9-5314-485d-9035-3bbbf0c07cc3 response="{\"id\":\"4oV3r7hqqUWpgTvdQIqBDeDyjFmFDYVT\",\"status\":\"valid\",\"expires\":\"2026-10-21T00:14:28Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"test.foo\"}],\"notBefore\":\"2026-10-20T00:13:28Z\",\"notAfter\":\"2027-01-18T00:14:28Z\",\"authorizations\":[\"https://ca.foo/acme/acme/authz/UU5Bc1ajCFxBhOXTlHShyzS4Yr6Nt1KP\"],\"finalize\":\"https://ca.foo/acme/acme/order/4oV3r7hqqUWpgTvdQIqBDeDyjFmFDYVT/finalize\",\"certificate\":\"https://ca.foo/acme/acme/certificate/AjaY8SDvWRui6uxhZieJ28a5V5HUpvZJ\"}" size=468 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [312663.268989] ca step-ca[207]: time="2026-10-20T00:14:28Z" level=info certificate=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 duration=1.49254ms duration-ns=1492540 fields.time="2026-10-20T00:14:28Z" issuer="Clan Intermediate CA" method=POST name=ca nonce=OVRIZXFFWk10anF5akExaWNIcnprdndScFpLZVhuMHA path=/acme/acme/certificate/AjaY8SDvWRui6uxhZieJ28a5V5HUpvZJ protocol=HTTP/1.1 provisioner=acme public-key="ECDSA P-256" referer= remote-address=127.0.0.1 request-id=45a1ec5d-7154-4897-b1cf-7779626809a5 sans="map[dns:[test.foo]]" serial=207879155218471069505531732190245550683 size=1348 status=200 subject=test.foo user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= valid-from="2026-10-20T00:13:28Z" valid-to="2027-01-18T00:14:28Z"
container-test-run-certificates> server # [312663.482812] server systemd[1]: Reloading Nginx Web Server...
container-test-run-certificates> server # [312663.487993] server systemd[1]: acme-order-renew-test.foo.service: Failed to read pids.max for control group /system.slice/acme-order-renew-test.foo.service, ignoring: No data available
container-test-run-certificates> server # [312663.488082] server systemd[1]: acme-order-renew-test.foo.service: Failed to read pids.max for control group /system.slice/acme-order-renew-test.foo.service, ignoring: No data available
container-test-run-certificates> server # [312663.488114] server systemd[1]: acme-order-renew-test.foo.service: Deactivated successfully.
container-test-run-certificates> server # [312663.488398] server systemd[1]: Finished Order (and renew) ACME certificate for test.foo.
container-test-run-certificates> server # [312663.488709] server systemd[1]: acme-order-renew-test.foo.service: Consumed 1.155s CPU time over 1.486s wall clock time.
container-test-run-certificates> server # [312664.534752] server nginx[335]: nginx: the configuration file /nix/store/blk4g7rl6g4ymddg61fcldiw4qnl5834-nginx.conf syntax is ok
container-test-run-certificates> server # [312664.535086] server nginx[335]: nginx: configuration file /nix/store/blk4g7rl6g4ymddg61fcldiw4qnl5834-nginx.conf test is successful
container-test-run-certificates> server # [312665.461730] server systemd[1]: Reloaded Nginx Web Server.
container-test-run-certificates> server # [312665.462245] server systemd[1]: Startup finished in 8.288s.
container-test-run-certificates> server: (finished: waiting for file '/var/lib/acme/test.foo/fullchain.pem', in 9.15 seconds)
container-test-run-certificates> server: must succeed: systemctl restart nginx.service
container-test-run-certificates> server # [312665.861243] server systemd[1]: Stopping Nginx Web Server...
container-test-run-certificates> server # [312665.923650] server systemd[1]: nginx.service: Failed to read pids.max for control group /system.slice/nginx.service, ignoring: No data available
container-test-run-certificates> server # [312665.923735] server systemd[1]: nginx.service: Deactivated successfully.
container-test-run-certificates> server # [312665.924156] server systemd[1]: Stopped Nginx Web Server.
container-test-run-certificates> server # [312665.924252] server systemd[1]: nginx.service: Consumed 5.310s CPU time over 5.070s wall clock time.
container-test-run-certificates> server # [312665.928558] server systemd[1]: Starting Nginx Web Server...
container-test-run-certificates> server: (finished: must succeed: systemctl restart nginx.service, in 1.81 seconds)
container-test-run-certificates> client: waiting for success: curl -v https://test.foo
container-test-run-certificates> * Host test.foo:443 was resolved.
container-test-run-certificates> * IPv6: 2001:db8:1::3
container-test-run-certificates> * IPv4: 192.168.1.3
container-test-run-certificates> *   Trying [2001:db8:1::3]:443...
container-test-run-certificates> * connect to 2001:db8:1::3 port 443 from 2001:db8:1::2 port 51158 failed: Connection refused
container-test-run-certificates> *   Trying 192.168.1.3:443...
container-test-run-certificates> * connect to 192.168.1.3 port 443 from 192.168.1.2 port 33670 failed: Connection refused
container-test-run-certificates> * Failed to connect to test.foo:443 after 1 ms: Could not connect to server
container-test-run-certificates> * closing connection #0
container-test-run-certificates> curl: (7) Failed to connect to test.foo:443 after 1 ms: Could not connect to server
container-test-run-certificates> server # [312667.651510] server nginx-pre-start[358]: nginx: the configuration file /nix/store/blk4g7rl6g4ymddg61fcldiw4qnl5834-nginx.conf syntax is ok
container-test-run-certificates> server # [312667.651895] server nginx-pre-start[358]: nginx: configuration file /nix/store/blk4g7rl6g4ymddg61fcldiw4qnl5834-nginx.conf test is successful
container-test-run-certificates> server # [312667.657428] server systemd[1]: Started Nginx Web Server.
container-test-run-certificates> *   Trying [2001:db8:1::3]:443...
container-test-run-certificates> * Host test.foo:443 was resolved.
container-test-run-certificates> * IPv6: 2001:db8:1::3
container-test-run-certificates> * IPv4: 192.168.1.3
container-test-run-certificates> * connect to 2001:db8:1::3 port 443 from 2001:db8:1::2 port 51164 failed: Connection refused
container-test-run-certificates> *   Trying 192.168.1.3:443...
container-test-run-certificates> * connect to 192.168.1.3 port 443 from 192.168.1.2 port 33676 failed: Connection refused
container-test-run-certificates> * Failed to connect to test.foo:443 after 1 ms: Could not connect to server
container-test-run-certificates> * closing connection #0
container-test-run-certificates> curl: (7) Failed to connect to test.foo:443 after 1 ms: Could not connect to server
container-test-run-certificates> *   Trying [2001:db8:1::3]:443...
container-test-run-certificates> * Host test.foo:443 was resolved.
container-test-run-certificates> * IPv6: 2001:db8:1::3
container-test-run-certificates> * IPv4: 192.168.1.3
container-test-run-certificates> * ALPN: curl offers h2,http/1.1
container-test-run-certificates> } [5 bytes data]
container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1):
container-test-run-certificates> } [1554 bytes data]
container-test-run-certificates> * SSL Trust Anchors:
container-test-run-certificates> *   OpenSSL default paths (fallback)
container-test-run-certificates> { [5 bytes data]
container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2):
container-test-run-certificates> { [1210 bytes data]
container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):
container-test-run-certificates> { [1 bytes data]
container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
container-test-run-certificates> { [19 bytes data]
container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11):
container-test-run-certificates> { [932 bytes data]
container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15):
container-test-run-certificates> { [79 bytes data]
container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20):
container-test-run-certificates> { [52 bytes data]
container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
container-test-run-certificates> } [1 bytes data]
container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20):
container-test-run-certificates> } [52 bytes data]
container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey
container-test-run-certificates> * ALPN: server accepted h2
container-test-run-certificates> * Server certificate:
container-test-run-certificates> *   subject: CN=test.foo
container-test-run-certificates> *   start date: Oct 20 00:13:28 2026 GMT
container-test-run-certificates> *   expire date: Jan 18 00:14:28 2027 GMT
container-test-run-certificates> *   issuer: CN=Clan Intermediate CA
container-test-run-certificates> *   Certificate level 0: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256
container-test-run-certificates> *   Certificate level 1: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256
container-test-run-certificates> *   Certificate level 2: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256
container-test-run-certificates> *   subjectAltName: "test.foo" matches cert's "test.foo"
container-test-run-certificates> * OpenSSL verify result: 0
container-test-run-certificates> * SSL certificate verified via OpenSSL.
container-test-run-certificates> * Established connection to test.foo (2001:db8:1::3 port 443) from 2001:db8:1::2 port 51180 
container-test-run-certificates>   % Total    % Received % Xferd  Average Speed  Time    Time    Time   Current
container-test-run-certificates>                                  Dload  Upload  Total   Spent   Left   Speed
container-test-run-certificates>   0      0   0      0   0      0      0      0                              0* using HTTP/2
container-test-run-certificates> * [HTTP/2] [1] OPENED stream for https://test.foo/
container-test-run-certificates> * [HTTP/2] [1] [:method: GET]
container-test-run-certificates> * [HTTP/2] [1] [:scheme: https]
container-test-run-certificates> * [HTTP/2] [1] [:authority: test.foo]
container-test-run-certificates> * [HTTP/2] [1] [:path: /]
container-test-run-certificates> * [HTTP/2] [1] [user-agent: curl/8.22.0]
container-test-run-certificates> * [HTTP/2] [1] [accept: */*]
container-test-run-certificates> } [5 bytes data]
container-test-run-certificates> > GET / HTTP/2
container-test-run-certificates> > Host: test.foo
container-test-run-certificates> > User-Agent: curl/8.22.0
container-test-run-certificates> > Accept: */*
container-test-run-certificates> > 
container-test-run-certificates> * Request completely sent off
container-test-run-certificates> { [5 bytes data]
container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
container-test-run-certificates> { [265 bytes data]
container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
container-test-run-certificates> { [265 bytes data]
container-test-run-certificates> < HTTP/2 200 
container-test-run-certificates> < server: nginx
container-test-run-certificates> < date: Tue, 20 Oct 2026 00:14:34 GMT
container-test-run-certificates> < content-type: application/octet-stream
container-test-run-certificates> < content-length: 20
container-test-run-certificates> < content-type: text/plain
container-test-run-certificates> < 
container-test-run-certificates> { [5 bytes data]
container-test-run-certificates> 100     20 100     20   0      0    804      0                              0
container-test-run-certificates> * Connection #0 to host test.foo:443 left intact
container-test-run-certificates> client: (finished: waiting for success: curl -v https://test.foo, in 2.07 seconds)
container-test-run-certificates> client: must succeed: openssl s_client -connect test.foo:443 -servername test.foo </dev/null 2>/dev/null | openssl x509 -text -noout 1>&2
container-test-run-certificates> Certificate:
container-test-run-certificates>     Data:
container-test-run-certificates>         Version: 3 (0x2)
container-test-run-certificates>         Serial Number:
container-test-run-certificates>             9c:64:11:a8:fe:dc:d1:9f:aa:e6:d5:81:d7:9d:fa:5b
container-test-run-certificates>         Signature Algorithm: ecdsa-with-SHA256
container-test-run-certificates>         Issuer: CN=Clan Intermediate CA
container-test-run-certificates>         Validity
container-test-run-certificates>             Not Before: Oct 20 00:13:28 2026 GMT
container-test-run-certificates>             Not After : Jan 18 00:14:28 2027 GMT
container-test-run-certificates>         Subject: CN=test.foo
container-test-run-certificates>         Subject Public Key Info:
container-test-run-certificates>             Public Key Algorithm: id-ecPublicKey
container-test-run-certificates>                 Public-Key: (256 bit)
container-test-run-certificates>                 pub:
container-test-run-certificates>                     04:9d:25:f5:9a:f9:a6:89:76:92:18:ca:ea:86:7f:
container-test-run-certificates>                     fe:59:97:6e:5c:70:3d:4f:9c:54:a0:b2:0c:86:4e:
container-test-run-certificates>                     69:06:d9:a8:60:51:69:03:09:f4:60:fd:b3:66:f8:
container-test-run-certificates>                     27:01:97:6c:65:6b:43:a0:f4:aa:d3:25:ac:49:04:
container-test-run-certificates>                     fc:cc:ba:60:87
container-test-run-certificates>                 ASN1 OID: prime256v1
container-test-run-certificates>                 NIST CURVE: P-256
container-test-run-certificates>         X509v3 extensions:
container-test-run-certificates>             X509v3 Key Usage: critical
container-test-run-certificates>                 Digital Signature
container-test-run-certificates>             X509v3 Extended Key Usage: 
container-test-run-certificates>                 TLS Web Server Authentication, TLS Web Client Authentication
container-test-run-certificates>             X509v3 Subject Key Identifier: 
container-test-run-certificates>                 B5:1E:B6:FF:9B:7F:A4:47:9B:40:FF:AD:4A:3B:7E:0E:C5:35:EA:4E
container-test-run-certificates>             X509v3 Authority Key Identifier: 
container-test-run-certificates>                 EF:61:18:6E:58:BE:FF:A2:D6:29:C2:D8:F0:96:ED:00:11:15:E3:70
container-test-run-certificates>             X509v3 Subject Alternative Name: 
container-test-run-certificates>                 DNS:test.foo
container-test-run-certificates>             1.3.6.1.4.1.37476.9000.64.1: 
container-test-run-certificates>                 0......acme..
container-test-run-certificates>     Signature Algorithm: ecdsa-with-SHA256
container-test-run-certificates>     Signature Value:
container-test-run-certificates>         30:46:02:21:00:cf:98:f9:a2:df:a8:62:62:6b:39:fc:1b:56:
container-test-run-certificates>         5d:54:c3:9f:2f:28:06:07:35:f0:45:a7:2f:b2:7b:b4:36:cd:
container-test-run-certificates>         fc:02:21:00:cb:51:4e:c8:7e:7a:52:e7:27:ad:aa:09:5f:09:
container-test-run-certificates>         16:15:fb:86:9c:64:46:69:53:31:47:db:6b:5f:d1:75:74:3c
container-test-run-certificates> client: (finished: must succeed: openssl s_client -connect test.foo:443 -servername test.foo </dev/null 2>/dev/null | openssl x509 -text -noout 1>&2, in 0.03 seconds)
container-test-run-certificates> (finished: run the VM test script, in 23.30 seconds)
container-test-run-certificates> test script finished in 24.71s
container-test-run-certificates> cleanup
container-test-run-certificates> kill NspawnMachine (pid 50)
container-test-run-certificates> kill NspawnMachine (pid 470)
container-test-run-certificates> Container ca terminated by signal KILL.
container-test-run-certificates> kill NspawnMachine (pid 467)
container-test-run-certificates> Container client terminated by signal KILL.
container-test-run-certificates> (finished: cleanup, in 0.54 seconds)
container-test-run-certificates> Container server terminated by signal KILL.