these 250 derivations will be built:
  /nix/store/01i979cvfy1nq1ls8n0g134cfwbiwx9y-etc.drv
  /nix/store/02lcr8m82vgxkbvvpnbk54sqr9imvlbg-unit-script-nix-gc-start.drv
  /nix/store/wrmxhxwydgmzbmmkx9n7mh8lfg5yz3gy-nixos-tmpfiles.d.drv
  /nix/store/06az44p5ki9kih5dqff6np6d3r2vfjk6-tmpfiles.d.drv
  /nix/store/06n7bmmf3b3s9s69nn0ax4vwh4wl05jz-firewall-start.drv
  /nix/store/087n9vkzglknckjl4z2xkhqblk5xv281-X-Restart-Triggers-systemd-tmpfiles-resetup.drv
  /nix/store/xahc5a7qbgywfvdv4290i6ajdqnswvmi-etc-sysctl.d-60-nixos.conf.drv
  /nix/store/81lxwi33dm2qqvq9zlxcn1v9w9rb1mdp-X-Restart-Triggers-systemd-sysctl.drv
  /nix/store/0hr27j0l7j731jg5hbkldxl9xil9c383-unit-systemd-sysctl.service.drv
  /nix/store/0qybjwrr1k317ds16gr9ibb1267j4nlx-unit-nix-gc.service.drv
  /nix/store/0v90mzrdzl536nm47ydvb8bdwvrz3d01-unit-multi-user.target.drv
  /nix/store/0z9gk9bc11zy60397a1q61ai5v2451dk-unit-systemd-logind.service.drv
  /nix/store/28865dmgcza7pzk29fiqiwd1h6lfgmmk-unit-remote-fs.target.drv
  /nix/store/li736qjp2mnpa965jj7fd6hysxx7663y-unit-script-prepare-kexec-start.drv
  /nix/store/2j4kxkywnnk0f2f7636fz9n7h69dlchh-unit-prepare-kexec.service.drv
  /nix/store/n3cj1fqzhdarg3dpnfv7assx0m1vaxv5-etc-systemd-resolved.conf.drv
  /nix/store/bk5314jfavrahd8xb2x0dmmqzl6am0qj-X-Reload-Triggers-systemd-resolved.drv
  /nix/store/3c5pwjr00bk8hydl6swbqbzy498hiikf-unit-systemd-resolved.service.drv
  /nix/store/3y8d9nlgkr0f80399xpjj25m7zhhvlyx-unit-systemd-remount-fs.service.drv
  /nix/store/4gqj9cx1ic0pzgyxfvhvg73fiw7903y6-unit-fs.target.drv
  /nix/store/56w4x014q5yhbxsk83n0ff467f4qsf66-unit-lastlog2-import.service.drv
  /nix/store/5vi1ddx09bg9vfg2l110x2qiarvjch7y-unit-systemd-mkswap-.service.drv
  /nix/store/6sj1sk4qm9s11nm47y7qav4zgas1fb9y-unit-resolvconf.service-disabled.drv
  /nix/store/6wr3fpi6pnvab6jy5nzx6ww9bkf0yqi6-unit-getty-.service.drv
  /nix/store/7fgfh3sdybnbqnb7gr8awb0j0p9ayyky-unit-acme-renew-ca.foo.timer.drv
  /nix/store/7pl6hy4zvyac6ik8v25hrsqnhpqlxw10-unit-systemd-networkd.socket.drv
  /nix/store/86wq5j3hs9pm1g5w9ib1ws2gqf9l27yk-unit-systemd-makefs-.service.drv
  /nix/store/8ascp7ikb3kbgf63cyzws0wk9dn4g6ga-unit-nginx.service.drv
  /nix/store/8kcazd07zzx1dvkpgb17yrr0qvq0nmaj-unit-systemd-bless-boot.service.drv
  /nix/store/aay4cn5ri61x9n5b2fpyk70pf6y70swr-unit-systemd-nspawn-.service.drv
  /nix/store/aj8d05b539kd0kq02434fmwia0cwf0yw-unit-run-wrappers.mount.drv
  /nix/store/amkr1cjsgdxybdsyiif4gq925za5lbyg-unit-sysinit-reactivation.target.drv
  /nix/store/jlqkqh0yv83bma6gibvwvmdw70li47jy-etc-systemd-journald.conf.drv
  /nix/store/nbszndknrhgwf9ba4076lzg07ws809vy-X-Restart-Triggers-systemd-journald.drv
  /nix/store/ax0r8n54gs2d0ddl3mh42hv9dws2f8d2-unit-systemd-journald.service.drv
  /nix/store/az6x0qv7ld6by5s6b4phyb3c7ivanl06-unit-nscd.service.drv
  /nix/store/b9a3msxa8c3fr5hcv062v596sbmyfhcy-unit-systemd-networkd-wait-online.service-disabled.drv
  /nix/store/c5vrl0fadbn4mia2bf6j25ir2kpy7scw-unit-serial-getty-ttyS0.service-disabled.drv
  /nix/store/ca121bwcxxgwm1012b76s2f35zyvaf82-unit-systemd-update-utmp.service.drv
  /nix/store/cg9g065picvk7x6wi5wc9dh9wkjndlly-unit-systemd-oomd.service.drv
  /nix/store/cyid37x97fmyh0zhizmgvy7qxywlhj0l-unit-systemd-user-sessions.service.drv
  /nix/store/f7qmx4742sw4s3pify0hldx0bc6iqgh6-unit-NetworkManager-wait-online.service-disabled.drv
  /nix/store/fnlnxdlf43sq96b9lbf86c2pqqvnndlh-unit-systemd-timedated.service.drv
  /nix/store/g5vwj1bnfs5d2330wbdj8bfxd6q5x2v1-unit-systemd-networkd-varlink-metrics.socket.drv
  /nix/store/g93awir780mz0jrkiznwmqziqfkzfr3r-unit-firewall.service.drv
  /nix/store/gh9c6pi79l1x6ni3hp57md3q7vswrprr-unit-network-local-commands.service-disabled.drv
  /nix/store/gm3yvzgm4f1kxvh37gwlcrcz3s3injkx-unit-console-getty.service.drv
  /nix/store/pqsq3xjvdpm2qi9l09kir1i3x81ppzsw-X-Restart-Triggers-systemd-journald-.drv
  /nix/store/h3vd2w00ygm7ch29k5adzfmiflxk6w3h-unit-systemd-journald-.service.drv
  /nix/store/hfk58iqg7bpishxa4fyicxwkifgay06k-unit-kmod-static-nodes.service.drv
  /nix/store/hihfznh3lsy5w64v98fw9bnvbb0yisyx-unit-run-initramfs.mount.drv
  /nix/store/hipbjhmm62qgsd8ja4k3l10isz0dmwm8-unit-fstrim.timer.drv
  /nix/store/hl559yg024ng16c6djfmwaanlj7dw7ih-unit-local-fs.target.drv
  /nix/store/hva1bsmb8kyar3df9al90msarj42dviw-unit-system.slice.drv
  /nix/store/hxjvvlhgf4y0v8ss9qp7pkq6h54566nq-unit-getty.target.drv
  /nix/store/jayycld0xx477p3znp3zjkdswj7s1m16-unit-systemd-fsck-.service.drv
  /nix/store/jcj453ip511vijwn5c450zwb2fbgiimx-unit-systemd-journald-audit.socket.drv
  /nix/store/jispc0x8vnlzhwvl1c49c709318k8gyp-unit-systemd-localed.service.drv
  /nix/store/jqdq8x76xx2c7svjiwhr0hjx0j2626rk-unit-nix-daemon.socket.drv
  /nix/store/jrdgxdr62z317aqcfn76mx0vd15jmyf1-unit-user-.service.drv
  /nix/store/klwh7577p1kjssp18lnrclvgi08in3bc-unit-container-getty-.service.drv
  /nix/store/l63hrf8c6dlqhplp53v4r7iz2887maj8-unit-systemd-backlight-.service.drv
  /nix/store/llpmxikd8v1qg44xsa9j4qdv698hyi2j-unit-serial-getty-hvc0.service-disabled.drv
  /nix/store/m561lsa0davf0h9v1l4wbbjc20zxcqkz-unit-nix-optimise.service.drv
  /nix/store/mkyhj2hxkbjglpsklrwmlmyrph7wyvmr-unit-systemd-hostnamed.service.drv
  /nix/store/mx7s13chb4r9fmw5l8gngszvxd2gip1f-unit-acme-account-d22a46d9459bf683a338.target.drv
  /nix/store/my34z96dsmrnpwfha9w4b660ak5dicil-unit-serial-getty-.service.drv
  /nix/store/nggfpq283vzm76mn0fs145gpvw1arpng-unit--.slice.drv
  /nix/store/p5c9v9rlznmmmkq5sxq0f16lvjvv3f5v-unit-systemd-boot-random-seed.service.drv
  /nix/store/p7ml425ypqndp64xfrlv9i7xla23616q-unit-systemd-networkd-wait-online-.service.drv
  /nix/store/pbw4jl2w9c7vxhlfdq7f7w359dsg254v-unit-systemd-pstore.service.drv
  /nix/store/q0qb3mw5bjfba4av8j82hyg9cc6jbwa6-unit-keys.target.drv
  /nix/store/0yymripbjm8gx6nqaabqgjpc01xwvw5h-acme-setup-privileged.drv
  /nix/store/d4kmc5542qa119xk2f9a7q132mya5mnj-unit-script-acme-setup-start.drv
  /nix/store/r6lcyjl44wlkwb2zswxlqrpwdmh5f7rh-unit-acme-setup.service.drv
  /nix/store/r7yk3bvmryj6hqy7207xwa51zqqdbcl8-unit-systemd-tmpfiles-resetup.service.drv
  /nix/store/v51phxwwff7kic1zxvsjsl6fwyn3bz1b-unit-script-linger-users-start.drv
  /nix/store/rpwgnkylhl4f2v971nw0shr73q6r80w0-unit-linger-users.service.drv
  /nix/store/rq8yqdrjhhszz0aswzznh37mh2l2z946-unit-dbus-broker.service.drv
  /nix/store/s4scy0l6dm1mpmpkgmyjnsx3s0lbhnwk-unit-dbus.service.drv
  /nix/store/2924khaazk5a15j5wcjkrmqfs8crpy31-unit-script-acme-ca.foo-start.drv
  /nix/store/mbyzmd4ygkizx4d1rrr13cm7dvyqjg26-X-Restart-Triggers-acme-ca.foo.drv
  /nix/store/spyijybsyfavrc19g4smhmb6fxim2hkx-unit-acme-ca.foo.service.drv
  /nix/store/sqabm3kr09xwbxaq424zlcb37w4axlhq-unit-user-runtime-dir-.service.drv
  /nix/store/v7ixjjwsmxhhbzkxcyzsw7fi5p429xry-unit-step-ca.service.drv
  /nix/store/vbvwxgq3lrj1zq7jd65dfzjv0k2prr1a-unit-user.slice.drv
  /nix/store/9w1y24qfij55sk8id5cgjv2n1ad8ms2h-etc-os-release.drv
  /nix/store/v80hxh7wnj10chg1fv3wyylw02yhhr9z-shutdown-ramfs-contents.json.drv
  /nix/store/vx3kxhhc4y6i2xxsln19mj9q5jiyw47r-unit-generate-shutdown-ramfs.service.drv
  /nix/store/wcfhqi5rnczs72w8qhq6pcqcyk1x9qq9-unit-systemd-pcrlogin-.service.drv
  /nix/store/ws87h0wqpqhqcqr90y6a4l6n4xm2kc04-unit-nix-daemon.service.drv
  /nix/store/xyfxg7p1jw4m5z9f18jh88q74x8yycyq-unit-nginx-config-reload.service.drv
  /nix/store/yw9riva8lpj4a280yvng1i73s79wn2br-unit-modprobe-.service.drv
  /nix/store/yyp5ycpyg3bpkn6kcvngwgyxdnnc9hk7-unit-systemd-journal-flush.service.drv
  /nix/store/zi79min6042jcgi2vmimq103sddv6f85-unit-acme-order-renew-ca.foo.service.drv
  /nix/store/zmxpk8y17w55nbx2yvadcs4pp8xbqrnn-unit-systemd-random-seed.service.drv
  /nix/store/zxw6b6v3qiq683qn71lpig74v84c3vh1-unit-systemd-importd.service.drv
  /nix/store/0jxvbg8qailbl2bsvbx79gn2bsdgy2nl-system-units.drv
  /nix/store/0vr6mynqm6rahqpzsx4w3pp0afcrvh5r-user-units.drv
  /nix/store/0xgd64jifmg3l1p98nhww1amy9ak4z7b-etc-nscd.conf.drv
  /nix/store/13f0b7gc0c95s3y4gq88ih989h1d7vhc-login.defs.drv
  /nix/store/hbx9p8s9ckcyibfxfqdkppd6p0g9x7xf-firewall-stop.drv
  /nix/store/qkpdl21x4fzbjnvgkdy8hxg7p0j5d617-firewall-start.drv
  /nix/store/5l1nhwwmxgnqsnqilah3sps6rqcpvjw1-firewall-reload.drv
  /nix/store/1869vrla9411aslz5yxamj11v4xsxv1g-unit-firewall.service.drv
  /nix/store/19gk58ds32fcdc805pv0817d9h39wrc0-etc-lsb-release.drv
  /nix/store/1m20k45gp5q9dzz06pacbdbnx11a9ghg-unit-nixos-fake-graphical-session.target.drv
  /nix/store/202azqxg3vwxhjm2na6zl154jh0wahbf-etc-nanorc.drv
  /nix/store/2rhw9yf30pd0zxpvbh4ldmnb2wfzx9a2-system-generators.drv
  /nix/store/2zxjc2wpll4gxsrv1xycmivc5g3bknv1-user-units.drv
  /nix/store/327mwn0p6h5hfdwql673fqx0ynnb1zwh-unit-systemd-tmpfiles-clean.timer.drv
  /nix/store/3c5085b0a35yp8cqhjvaff3rffv82awr-unit-script-nixos-activation-start.drv
  /nix/store/rlh73jrfiiyxb3hfin8q31m7ggm9y83l-perl-5.42.3-env.drv
  /nix/store/vdgbwkv4xp3yjk0xcb5ngcxwrvg2vi66-users-groups.json.drv
  /nix/store/3jqc4aqr6rhz3s4gkzdsh7pc6vvsgx9l-dry-activate.drv
  /nix/store/3rila2qankh2yjdzmn084w2bapx6ffyq-firewall-reload.drv
  /nix/store/3sd1zppfx2lax1kgl6w8c9bpnjxqx9hs-unit-acme-renew-test.foo.timer.drv
  /nix/store/49br7d892abbd7dlnhygj4rdvnmwrg43-etc-systemd-logind.conf.drv
  /nix/store/4x3s09yjfpjmg0ck1q6ccb43s8mf9fjh-decrypt-age-secrets.drv
  /nix/store/51x52fkz3b93xnhg2avwr0r420ayychr-X-Restart-Triggers-step-ca.drv
  /nix/store/54x1d3n9vrj4lmhyydkjmrvx1isz3rig-unit-40-eth1.network.drv
  /nix/store/6s21ypjlcxa33fygv2yqfgcnzqqd8rhk-local-cmds.drv
  /nix/store/7gxryvz01mwylfk3h41wxwqhfk3swfiv-mounts.sh.drv
  /nix/store/55lw4z4gbqfjplgd47b7ad40kwxcg87d-stage-2-init.sh.drv
  /nix/store/5avqnx2r1ysnvvfifvx403hnz6majacs-unit-nixos-activation.service.drv
  /nix/store/5ps79mvp0kj1yxhxy37a071vkx69l24w-etc-nix-registry.json.drv
  /nix/store/5qjdygh7hl77p2g6b2c1d3xakv7n3bgk-nixos-test-driver-1.1.drv
  /nix/store/5s8qp3yp3z41mpn1xh8sr2ssm8i9ziq7-run-client-nspawn.drv
  /nix/store/5x1lv1750rc24zc25brr46ap1dfv0alm-unit-acme-setup.service.drv
  /nix/store/6fi5cf6qc3jifvw0hb6wb4qx3lr35jq7-string-hosts.drv
  /nix/store/6ia197q5hi71q39hswnn247mb6s7awm1-dry-activate.drv
  /nix/store/6kyqnq5imz113q53kh0pjfyj8la4nf8v-unit-acme-test.foo.service.drv
  /nix/store/l6kadcdgvwdi04a52mwfqh95wqmp1j1m-extra-hosts.drv
  /nix/store/s1v564r25sni1q9lgddd210p07fldx9z-localhost-hosts.drv
  /nix/store/6r15a1x857fb40fz7wwcsdwz6a3757zk-hosts.drv
  /nix/store/6s22dw0msp7f7dqwy78vnfs849xvv58y-unit-nginx-config-reload.service.drv
  /nix/store/6s5z20gxc65v3j5hg5aa3gq7qk8da4az-systemd.drv
  /nix/store/fx7li61xs62lsgvinbsb9w7d9k5nv9i3-nix.conf.drv
  /nix/store/6z45xciqj79qnj7xlq2319rd5rdfpgpl-X-Restart-Triggers-nix-daemon.drv
  /nix/store/7dcb2zs0266y8zw2lfwb3j1hxx54chx2-perl-5.42.3-env.drv
  /nix/store/7pjgkb4005kj6cfpks3i50b0pfhqljxx-etc-systemd-oomd.conf.drv
  /nix/store/7zp8p2yr30jmbb991wf5iy8msm828zpm-X-Reload-Triggers-systemd-networkd.drv
  /nix/store/82bisz0ynr8w3s4g92i5jv6crsvyi1a3-perl-5.42.3-env.drv
  /nix/store/84v3qrlxj8an76hf0vznqvbcbqjr6ykg-hosts.drv
  /nix/store/mdvxnsndzzhzk0gyybkrln53xqhc8mg5-set-environment.drv
  /nix/store/8a2mc9i4x97d1ng80ij3zhpksgwnkdyz-etc-profile.drv
  /nix/store/8nkkjry8zz7f67swfjarm2v8rpjid75m-etc-gai.conf.drv
  /nix/store/8v38rmlfpkvsnq994ycbwdp3wyg646mg-etc-systemd-system-preset-00-nixos.preset.drv
  /nix/store/8vp2jzaqlpky9w4zp9iia7107dr6nhkh-unit-dbus-broker.service.drv
  /nix/store/8yhpmbsayfyl1mc2x160qr5hf21q9vc0-nixos-version.drv
  /nix/store/8z04a6d5i8j5zw9bgj20wfzkw2lj1n4w-etc-bash_logout.drv
  /nix/store/dcrdmwmphfm2dvr8f8m604zghg7q9qx7-cacert-blocklist.txt.drv
  /nix/store/jz2cz3gydqh6v7b5301xysgs63i9dm8s-cacert-extra-certificates-bundle.crt.drv
  /nix/store/90yrz82288f55g9xd71xc29qb7ll6ywz-nss-cacert-3.126.drv
  /nix/store/92f7f137c3fd6a53w4487imbh86xyqql-unit-40-eth1.network.drv
  /nix/store/9gq66qcx5744cca8bdj72sbl1zlrb4yk-run-server-nspawn.drv
  /nix/store/9ivnh65bl34qh8bcxxy5wyxn8m7ybksg-vars-check-certificates.drv
  /nix/store/9l1d951gvbq6i2mll4lkv208480g788a-50-coredump.conf.drv
  /nix/store/9n4q52x4g5dprz4r14hiq08fz9g5xmaj-etc-systemd-coredump.conf.drv
  /nix/store/9nx1a3z1vbnl6qh1laijkkwassvy0wm0-etc-ssh-ssh_known_hosts.drv
  /nix/store/kyqbkbcrvvby6h4v4rbvrz2h73ksjc1l-dbus-1.drv
  /nix/store/9qxljcn6wmhx3z9nj3lbcax5ri71ddag-X-Restart-Triggers-dbus-broker.drv
  /nix/store/jxyaklsnvrr574nglry583hxnc96k1nx-system-path.drv
  /nix/store/vaf5l2y2z9n38a2mqp4zgfrfrcf9jnfn-activate.drv
  /nix/store/gp4d0a43jdfmscii6h3y4rmi2gml5gri-etc-systemd-user-preset-00-nixos.preset.drv
  /nix/store/gzqza1r4qb4ykmby7lw74b5iz44ig247-dbus-1.drv
  /nix/store/i6h2jz4n55mjdcwzar78mxz15gm110i5-nginx-recommended-proxy_set_header-headers.conf.drv
  /nix/store/h1fa9r01n6p8rir4rpnr91d0nidywnhz-nginx.conf.drv
  /nix/store/hab17fzm37d75n6kdl54pd0zbpzb7hsk-ca.json.drv
  /nix/store/hs2dpz3bd72di2rxgs7nm0n896smd71j-fontconfig-etc.drv
  /nix/store/i5x2hliklyi4sqnai7m913nzzyknxsng-etc-systemd-sleep.conf.drv
  /nix/store/if6laczhsz1cl5vzzw7hdlnlix9yra03-useradd.drv
  /nix/store/iy3zma29asm3xpz609sqfql5r0x00ngj-system-shutdown.drv
  /nix/store/j141ifarx5yrfl6pz8z84dxz7rl5vwyd-locale.conf.drv
  /nix/store/kb54l64klaqgc0ly1qhfzxmplf6l0yyi-etc-shells.drv
  /nix/store/l11v427waag4bwgzzy3wxg7kbqxc2532-etc-resolvconf.conf.drv
  /nix/store/lc2phqa2rgv25b7f92151vqfcy6lhxjr-etc-nsswitch.conf.drv
  /nix/store/llcylzmiabv83vgipwm2d8by9sjzsgsh-etc-pam-environment.drv
  /nix/store/mic89kirhrwfxgpzd58sgw1l2vc4drzk-tmpfiles.d.drv
  /nix/store/ncxxcp2pljhxrify0wcajwq8nm9dr4xh-etc-bashrc.drv
  /nix/store/pwzs2ri1vjnqmj9r8dgfhb8y4i3isl1l-etc-systemd-system.conf.drv
  /nix/store/qgb2plcyg1k2d6wkw5jliy49xxzkl1mh-etc-systemd-user.conf.drv
  /nix/store/qvcpxkkb4avixda2fzl6ghigw40w4ra5-etc-netgroup.drv
  /nix/store/s8izvicgccfl64s03xdhmwdq2534fvwa-etc-fstab.drv
  /nix/store/wf1ahiikz13vd11r0z3yyflvvcyhw8l7-etc-ssh-ssh_config.drv
  /nix/store/wx2khjcqa2v7n2d7h8f0mgnffs604al3-issue.drv
  /nix/store/xl8h2fi0751jq251nm5x2i3nz9vwwqg9-user-generators.drv
  /nix/store/xz4ni5847h9yfr5bs42ixnjzgf027xy9-etc-lvm-lvm.conf.drv
  /nix/store/yvvriwr9vykc9mjm9xaiv0vcnyv1bsq7-etc-hostname.drv
  /nix/store/yz72lbx57dfz4vl90r8finc6vq89z6w1-etc-environment.d-50-systemd-path.conf.drv
  /nix/store/z9jnqpnn10pac5k5gc47n9cs436rps1i-etc-host.conf.drv
  /nix/store/y1fnzzw32r0aqpqcbk4bf1ys6lyb312x-etc.drv
  /nix/store/z6xs577nsck823amy20vc2dvqbzqq0pn-ensure-wrapper-integrity.drv
  /nix/store/a43bf0p33rvqhr7nnadmg7y7x3mlaabq-nixos-system-ca-test.drv
  /nix/store/ab1l2flw9dr4id5a50zm40fmg1cf7k2j-dbus-1.drv
  /nix/store/amaacdd3kalprlp0ywqrxpdp7zfv1zna-unit-acme-account-2c44cb477b4787b2cf13.target.drv
  /nix/store/avs93v1wgh4kkf98hhmpxls34ag19l9l-nixos-tmpfiles.d.drv
  /nix/store/b119cpqv42n21809in1w3l1y4yhrw0jn-system-path.drv
  /nix/store/b4rqpcpazs6h1vmigms84s3mj6d3aih9-users-groups.json.drv
  /nix/store/b7mhn3qr1sr6ml2lvij78sihdfzzr20p-X-Restart-Triggers-systemd-tmpfiles-resetup.drv
  /nix/store/bd9yhzh2fcm8ky49vi35sbrgi13ccjrq-users-groups.json.drv
  /nix/store/hhvwharzq63bn630yp6pbsvzk0zvxqrg-X-Restart-Triggers-dbus-broker.drv
  /nix/store/bgywqabf4sbhadw6p92wlsgfm064lrml-unit-dbus-broker.service.drv
  /nix/store/bygbqavgw62y5ai2f56ah6ahzzw45fz7-user-units.drv
  /nix/store/yfb6pxv25hscdsiyaw1slxa1z1wgvhha-X-Restart-Triggers-dbus-broker.drv
  /nix/store/ck0wg3phqvvvd1dlpp0cvw0155xdr7q1-unit-dbus-broker.service.drv
  /nix/store/d56c17j7jldh5kdhc7885shvpkyzrxgg-etc-hostname.drv
  /nix/store/f4svi5kxmxp578p9a40jxdwl61kzgq8n-nixos-enter.drv
  /nix/store/l53ds4fkfxw53dbqsvackpcc9h92inw3-X-Reload-Triggers-systemd-networkd.drv
  /nix/store/f80i7gkshj45jszdjbql9sdvpl8qpxab-unit-systemd-networkd.service.drv
  /nix/store/gm9cq7nyqnyc32nwq38rxggj3lkawrgv-unit-systemd-tmpfiles-setup.service.drv
  /nix/store/jn1x5khz2dlnw1haj5k9gywd5pqw3iya-nginx.conf.drv
  /nix/store/gqlm0z6fpbxvx6xfyrr8jxp1a9arygi2-unit-script-nginx-pre-start.drv
  /nix/store/h8csrrlyyw39vbjliwliddx713sxv2hm-nixos-system-server-test.drv
  /nix/store/h8gk3yhznf77j7i08b0gn4hp5qvz2xm7-nixos-build-vms.drv
  /nix/store/hrxdzrjf7pw63pf4wl2fwvm88k6y008j-run-ca-nspawn.drv
  /nix/store/iz7nl3h5brgzfsfzdc3krl8fj9wflkma-unit-systemd-tmpfiles-resetup.service.drv
  /nix/store/j0xxf884j0i2171gzf4fz91k7lw1glgb-nixos-install.drv
  /nix/store/rx4h4cgggcxx0q19gv5azawa4z3a5r04-system-path.drv
  /nix/store/vdyds7zgr27mjig67a26lv12hwc5i1fr-activate.drv
  /nix/store/vx90591vqmad7mih7wm49rhqc29ygpn4-etc.drv
  /nix/store/j87sc8l6dwnab34fxcqgrcfxy9njp658-nixos-system-client-test.drv
  /nix/store/jcgzzjipqzdx365b48n1awmxvhwp2m0g-string-hosts.drv
  /nix/store/jdbpmyxsj1rl0pbsj5j5njyr86nml5rg-dry-activate.drv
  /nix/store/jklw8skwkk71xpjiy3qxdnw14qr93iwm-container-test-run-certificates.drv
  /nix/store/kjm69dv8ldq5yvcnmjnnr8z8c8jl9l10-acme-postrun.drv
  /nix/store/ksih44nd300yaf64lv7zkw0vssdqwdla-etc-hostname.drv
  /nix/store/ldwk7hldsgqzvkxmc60m90s15yqibjd7-X-Restart-Triggers-acme-test.foo.drv
  /nix/store/p5m8f75s62zl875fxwis6ynkbap9g308-unit-nginx.service.drv
  /nix/store/s3zvdh4l1gg5zp390x6fvwhn131m827v-unit-acme-order-renew-test.foo.service.drv
  /nix/store/llqy7azimdzbxffh01m0i3vgfbzdziam-system-units.drv
  /nix/store/mvfn0mz0gxrwksasknwxb27kwzsl0crr-driverConfiguration.json.drv
  /nix/store/yxkjc1cnv31pwwpfs82p2dsxhzvilryc-test-script.drv
  /nix/store/lp3d36i4bvjv760lg2by6asvjby7plah-nixos-test-driver-certificates.drv
  /nix/store/lrww1bsz1sfcnigqv5pcm4p4l1r33y13-hosts.drv
  /nix/store/r0b5r1k7nqxwf6bbfi668qrc9zf2mx3v-unit-dbus-broker.service.drv
  /nix/store/wlzs60pzpiw0w5ymzm437y46lkw6744x-unit-systemd-networkd.service.drv
  /nix/store/pzs9iiqyz4nam65ifhybr2h34i9zvc5y-system-units.drv
  /nix/store/qaa38lswp1658vr657xzmr653zr22gjm-unit-script-acme-order-renew-ca.foo-start.drv
  /nix/store/qja0f0hrc4h0gfijflgy8480hrzvpv1r-acme-setup-privileged.drv
  /nix/store/qrnhv3h9d6z32jn7pdws3z5iwgz8nhki-unit-dbus.socket.drv
  /nix/store/rcwnb2nysd4ch5f365mnc6m7qrd88aad-unit-dbus-broker.service.drv
  /nix/store/rjc917j3c4f39cgbn16dm2avirvnvwsd-activate.drv
  /nix/store/rm2y14dqg0v9n620hpdx5smwnp9w83hb-unit-script-acme-test.foo-start.drv
  /nix/store/s82h9i75qgl0974byspa1n2f9wk3r5c2-unit-script-acme-order-renew-test.foo-start.drv
  /nix/store/w2j8pzk9667sr2j9az8d6sys3ax28fw0-string-hosts.drv
  /nix/store/x7md8nmv4kb2jq93yk2lksb0zl79r3w4-acme-postrun.drv
  /nix/store/xa87fq5d8kh4fhpwbpy7bcia1snw83lz-10-acme.conf.drv
  /nix/store/y4mjpbhdkbh1zv0ygadrq8im1hfbvr0i-nixos-generate-config.drv
  /nix/store/ymrl1gkawzz1jfpyr3byfz2ym3av2cyf-unit-script-nginx-pre-start.drv
these 256 paths will be fetched (63.5 MiB download, 601.5 MiB unpacked):
  /nix/store/s3098zcacji8xj1jrv5x2sbj1ymwlvv9-55-nixos-aslr-entropy.conf
  /nix/store/rszbxwc5p9kgiyb4n2rz5b5dn58qlg4m-acl-2.4.0-bin
  /nix/store/v6mv7b7im0l5ja4cv23a9c5h82z8j1xv-acl-2.4.0-man
  /nix/store/s6r2qc55yxdlj7vncqn6ng7hv4lis3bf-age-1.3.2
  /nix/store/lw3jn2nfx9kl9dnc5cjm2580d2a643xw-attr-2.6.0-bin
  /nix/store/kmfpv2awfanxkx5qnwwk4q73vlm2wg12-attr-2.6.0-man
  /nix/store/8c8136iv39bg6j5jxcn6aqpxc5y2h73n-aws-c-auth-1.0.0
  /nix/store/nzv8kyvdp09pbj7zlcqpscp8ahvmnzcp-aws-c-cal-1.0.0
  /nix/store/aprmri0rsaag6bx7r5s4hkws4vxh1zd1-aws-c-common-1.0.0
  /nix/store/1wqyq71ndzliv6n5043hywfsy5izamh5-aws-c-compression-1.0.0
  /nix/store/cs052dclngcn7m8a8fayqkpw62nf93x2-aws-c-event-stream-1.0.0
  /nix/store/73xml8c1pbrm820sck7x2ca5ha04nbkc-aws-c-http-1.0.0
  /nix/store/lakygh85c5d5ac5h2562b4cr9mln54jj-aws-c-io-1.0.0
  /nix/store/p3ixs7ya2j53whidg3dj6wn0p26zrwmf-aws-c-mqtt-1.0.0
  /nix/store/mpv637275mzl830zx0zvd0i1m4aybi3n-aws-c-s3-1.1.2
  /nix/store/4895yj86v7qlmb1gvas1qk1xf7mim15i-aws-c-sdkutils-1.0.0
  /nix/store/agq11cbvva922qfrdf3h53ibhfl96x03-aws-checksums-1.0.0
  /nix/store/mm0mzyxl89nrsw58hmwv952l2gigh02a-aws-crt-cpp-0.43.6
  /nix/store/sm9x00nj013ws1cic8vbdv7w6iwk7l09-bash-completion-2.18.0
  /nix/store/lgiispyin8621zdwxgl9x89cbnvdkxd6-bash-interactive-5.3p20-man
  /nix/store/a3nxhsv88dfaflqz1x75vyg9cd4p6fk5-bcache-tools-1.1
  /nix/store/d7w69850dwg6ay246d9spxcmkl15b6r2-bcachefs-tools-1.39.7
  /nix/store/qnj2nyps1g98vby6bm4rg2xdz5zd33kn-bind-9.20.29-dnsutils
  /nix/store/5aay2ci7c2mhw6v0ibkf5vbm0shfmwqz-bind-9.20.29-host
  /nix/store/q0dr8xvw7j6h7056bmrn6kjx9pfy6d6n-bind-9.20.29-lib
  /nix/store/f621cpaaawfr8csmlbajj3w0fxkd9781-boehm-gc-8.2.12
  /nix/store/pk8y56vh43ncfzm5ila6srr0bfzyvnz2-boost-1.89.0
  /nix/store/7hslxjynnpvp33iybcin2vm1klxj9gkj-btrfs-progs-7.1
  /nix/store/w69a3h4k85xw4jnr0pvxbifb1sfcgx8a-busybox-1.37.0
  /nix/store/7crm5d4562ix9l2kbgphm98cl78abl8b-bzip2-1.0.8-man
  /nix/store/kl5dp789darcj5yhh5z0vqlzfamb58sm-c-dvar-1.2.0
  /nix/store/1h0j3hqr0xpywsp9iyx3p4nhrp9w2kwf-c-ini-1.1.0
  /nix/store/vrm7j8bwbash7pj3mnv80213avw31i0l-c-rbtree-3.2.0
  /nix/store/3mr9n7234fszg1izv1jpd003jps3q0qd-c-shquote-1.1.0
  /nix/store/2dp1pmh2x0zghsbnr8pgd42bdbsiac0z-c-utf8-1.1.0
  /nix/store/rfjs1fcacfd1xysy7cmvxsrb9znz6iln-certdata.txt
  /nix/store/69gb9b5cb7by2grcwi7wdcafmwsayp11-coreutils-full-9.12
  /nix/store/rnqbwa03knsv367mpjdrjvxvs3b0i8sk-cpio-2.15
  /nix/store/cg4vskbr8139w0nkwbf3bpl3n79vz1d6-db-5.3.28
  /nix/store/yhds9vd6pfgkcdvwgzssck01m000xpkz-dbus-1.16.2-man
  /nix/store/wb7r1ilfxhcxk0w9blxx7cw7l2v8604i-dbus-broker-37
  /nix/store/z632dhp5nbysxwd3m9abkr4cq2582jrr-decrypt-age-secrets
  /nix/store/fs5k81s8yggc1y09rl93n90brvdkc5pw-dejavu-fonts-minimal-2.37
  /nix/store/2yk15wvidbavx4317k5rvnpgzfklxqlx-desktop-file-utils-0.28
  /nix/store/nzsflqrk0zdljly9jhx82l784hl5rmc4-diffutils-3.12
  /nix/store/y1gravakn32yll26y7y6y8zfn19pd16d-dosfstools-4.2
  /nix/store/660vlyww09mskww9952nygmf2c22yn9z-dosfstools-4.2-man
  /nix/store/p59clx5s99znwvjqmmhfnk596qcsndn3-e2fsprogs-1.47.4
  /nix/store/9l2mjms2iidc51mh6sfyjmhzshxa3v8k-e2fsprogs-1.47.4-bin
  /nix/store/h0s2c4157m7bk7asl9djgw85mjgdwcps-editline-1.17.1-unstable-2025-05-24
  /nix/store/nq276ar5w3yswnxy3dgv1wx7r9qcgcxd-fc-00-nixos-cache.conf
  /nix/store/ix1gqxp97lg4qzl83mjjhv9ngmq4ipqx-fc-10-nixos-rendering.conf
  /nix/store/67ksxmd3z8803bw2scbjy3hig44q2fs1-fc-52-nixos-default-fonts.conf
  /nix/store/bz34ma1vbpx3jbmsrgnf9ikw69bbjn46-fc-53-nixos-reject-type1.conf
  /nix/store/zf6wai5jjrkaaw03ljfha4qnz9lb4ffs-fc-53-no-bitmaps.conf
  /nix/store/hfljfg92b87jirighr3rjz06d68c8m3g-fc-53-user-aliases.conf
  /nix/store/xlhdp24y5q88z753x8w3l0x6igchpncb-fc-cache
  /nix/store/3dl20ncpnlxr3ls3235smsg5ln849a1d-file-5.48
  /nix/store/50lngyqcak682x0msmda3rfdjqhdh08f-find-xml-catalogs-hook
  /nix/store/83mz0b56df302i4bsxnkqsr03r2gm7ph-flock-0.4.0
  /nix/store/lzj58f3qfpr8dqfmp9iq98hbybxhvz4q-fontconfig-2.18.3
  /nix/store/p7zanfhhr29x98dy5bjd1zlk2k1ab173-fontconfig-2.18.3-bin
  /nix/store/hxbi1p1xhgkyjxg7zmyi9qwac5yc4i8j-fontconfig-2.18.3-lib
  /nix/store/k7zmfwqhvh1gg2frprg4vcx3716bgqk4-fontconfig-conf
  /nix/store/zj7yb55h1zpmxmw6dp817n6y0370wji0-freetype-2.14.3
  /nix/store/lpf0bisr46im0y3536k9cd8hmkb1hri7-fstrm-0.6.1
  /nix/store/66ffb3i60j03sw09fnfspimd54i9r6ib-gawk-5.4.1-man
  /nix/store/c5rqlda89jqhnpmr4z38d0irlc7x0zyg-gen-hostid
  /nix/store/d2ngs25k1hmzxanxvw1iip47z6g4yk37-getconf-glibc-2.44-57
  /nix/store/0vr3l0sxz3arj2jlk44wsp0f0m4b4yli-getent-glibc-2.44-57
  /nix/store/w31zgyvxajp9sxi12h57cyyqwk473w08-giflib-6.1.3
  /nix/store/2wlays4ahsvdx02v84s3x91ri2623qbl-git-minimal-2.56.0
  /nix/store/fc855ixp6ry1la7q14ipqih2fg18y6s4-gixy-0.1.21
  /nix/store/7i0bhnc6ka10z96sy4fpi3b47gvwmg0x-glib-2.88.3
  /nix/store/6cz4wzbi3x34ii46hgfk3mvs7nal1c5l-glibc-2.44-57-getent
  /nix/store/iwlicfrm0jf16hvb4lrgl1g6g4prvwq0-gnupg-2.4.9
  /nix/store/vwcibaw9av3dfi9cgz0br19mi95cyhqz-groff-1.24.2
  /nix/store/gn8dcx7mpq3vpnkzi4da23ny1ngwk2va-gzip-1.15-man
  /nix/store/9lr06sn0ll1xvrf7rvqka79swjd8flv6-hicolor-icon-theme-0.18
  /nix/store/k9bfm05bnzbmdd02vycknsyksgzdmvi8-hostname-debian-3.25
  /nix/store/3rbycmpvhg60hldwi4qz31flzkwvkgzq-hostname-debian-3.25-man
  /nix/store/kzmcwfwcm23vcip0rmg505jhr9h1faiw-hostname-hostname-debian-3.25
  /nix/store/xakp703la772ynd3msa07h0k378a255r-htop-3.5.3
  /nix/store/4xfczslhns6bgmhwzq2jg3bhpa46smm9-htop-3.5.3-man
  /nix/store/xjkazams4vr729fs4ldidnavmk9gz3p4-hwinfo-26.0
  /nix/store/4n20ll7ykjv6a0k403hb7jvcnggkvg5k-hwinfo-26.0-lib
  /nix/store/0wc63gmrb8fiyhmvz9pr862qjdfj80b2-hwloc-2.15.0-lib
  /nix/store/pkqxj99ylqbxch7maydvdvpzi9ba6xx5-install-shell-files
  /nix/store/1ww3clwns6md3prwdh4knqpwn785fvzy-iproute2-7.2.0
  /nix/store/75zdq6jrmxhvsl96rg0w91nwrgr96wkr-iproute2-7.2.0-dev
  /nix/store/drg5ym40wz8bhfhymk5nq3ahzrqb8c7i-iproute2-7.2.0-man
  /nix/store/frbwz7p5jrsrpznzld1fcif1br8fix6n-iptables-1.8.13
  /nix/store/79jdhn4pc0r7janay6aqzk527gif3nbq-iptables-1.8.13-lib
  /nix/store/j286km4dzm9m091na3v7qp65ivxnkkk0-iptables-1.8.13-man
  /nix/store/1n81sbs00pd7i5j7zjsvhcdcgzq4mnfh-iputils-20250605
  /nix/store/zz8lar1cj03gp26vac8684v2gnmc0z24-iputils-20250605-man
  /nix/store/jh456hfpcy7sz9zg3806yv6sk7vd06hg-jbigkit-2.1
  /nix/store/jp3pfgam24390yqim4fdx99pxp6ni1j2-jemalloc-5.4.0
  /nix/store/36g3l4hw0nchh8wg0cbccj1lh71aw3v2-lego-5.5.1
  /nix/store/xj39gifjxb531dk7rfkld0sg4wfz6w3q-lerc-4.2.0
  /nix/store/s3mk12jzr2dy37m3cksi3j66gzw60lbq-less-710
  /nix/store/fxll1ma80dav12w42hwxvqzxqy9v6zgg-less-710-man
  /nix/store/mbb0057q5q64hlkbvr5pkpc9459jlph3-libaio-0.3.113
  /nix/store/pk3bvvhw0703i80ahgd0mpdk2pwdbh4m-libassuan-3.0.2
  /nix/store/zc9fpalyndx521fbi0hv1zwnbfj77lb7-libblake3-1.8.7
  /nix/store/051iwkzzkkr868x5a42w7jsk3w9a4zdg-libcap-2.78
  /nix/store/r81hqhnfjmgj795bdy0qiy76gh7h2iik-libcap-2.78-lib
  /nix/store/6xr8qfa5cfhgfrikqpc11j6nl3lza6k9-libcap-2.78-man
  /nix/store/dyrr87aqdyjvy7ln449b49f46pg12vmh-libcap-text-verifier-0-unstable
  /nix/store/6506irg2z6m93m9cpw7vg39f18zv4xsl-libcpuid-0.8.1
  /nix/store/39nhjpfdlqkfv14fh65ch7a52r76zq0r-libdeflate-1.26
  /nix/store/y1nq398in32ymm12qhffhjwq5fd8arxi-libgcrypt-1.12.4-lib
  /nix/store/jjs43xcl3bxn027khl3fncfw1kklflaw-libgit2-1.9.7-lib
  /nix/store/w188i9aj0jn0x1r7c3f5dzahpq1nn5cl-libgpg-error-1.61
  /nix/store/y1g9jz6b88872jy7zj8q5hlgphy9j9rj-libice-1.1.2
  /nix/store/aliq9nclm4w66msq9mkjhhv2lg98al2c-libjpeg-turbo-3.2.0
  /nix/store/n98x77rw5dn38jzihippjwkz2vfnpg91-libmnl-1.0.5
  /nix/store/3lydnylg6mzmhmqha5gsr001jnzby3a2-libnetfilter_conntrack-1.1.1
  /nix/store/4k1kyap0izb6gqhc9yy8kv99pl55ldia-libnfnetlink-1.0.2
  /nix/store/7x7fvh0dk0czbl01r27f3gqdfb7wjr5n-libnftnl-1.3.2
  /nix/store/4z1kikmfakz89gbg0lqq50p5xskkkgbz-libnl-3.12.0
  /nix/store/fnv6i98rqlwycnk25a43kniyxjwnfz3p-libpcap-1.10.7-lib
  /nix/store/yj4bgsa7f4217a91a2l52qj14z22jh2a-libpipeline-1.5.8
  /nix/store/f0x9fvndvxhjcr6ggbl0di49ba5alfzm-libpng-apng-1.6.59
  /nix/store/j69iz4xbjcjzjjz71l6h107zwwbph3wp-libressl-4.3.2
  /nix/store/735g73yrzxnxwaaxda2kvpqniznxnkgx-libressl-4.3.2-nc
  /nix/store/slq0bpajkf5n95nhc0lm7a8f8vha8dw5-libselinux-3.11
  /nix/store/plwplfr99gn6bxii119spnrdbm834gsb-libsm-1.2.6
  /nix/store/ylrmlriaq8104pniihwd8iqw8wg2lf23-libsodium-1.0.22-unstable-2026-09-28
  /nix/store/ygpmh9fxjkc5mgxcj88vj4vf3jqnvlda-libtiff-4.7.2
  /nix/store/ikv3piky8wgm9ia0yfb9hi7hmky36z4y-libunwind-1.8.3
  /nix/store/f00m5qmq4sp5mfy1r8j8w47ll16dcw1w-liburcu-0.15.7
  /nix/store/48jp3zrc8rsgn441kfrk0dfx3n11ph26-libwebp-1.6.0
  /nix/store/mbjwvmi51k23nk4yzfbll7s5lbbf8s18-libx86emu-3.7
  /nix/store/jv299gdhi825viip0rxdq10z6iikiigj-libxext-1.3.7
  /nix/store/z2s5a171if42gshc7xhbqyx0y27iknw7-libxmu-1.3.1
  /nix/store/m0f5xgws8lpkja6kz7lvzwl7bb4zm6w5-libxslt-1.1.45
  /nix/store/2ri4m79chw5v4178rfmjlj6h9wky1gbq-libxslt-1.1.45-bin
  /nix/store/cx0jb624gcpbin4x8s1xg79s9gp0jzfj-libxt-1.3.1
  /nix/store/15c5vkz8dsk3hrzpvlbc7pp0imgsslky-libyaml-0.2.5
  /nix/store/10sh55fl6m4kizch8q7mb45g9ljnan5z-linux-pam-1.7.2-man
  /nix/store/0lalp8bqwbvxkrqmvsawagzx2w18w4h5-lm-sensors-3.6.2
  /nix/store/d13ggrbcxgd5m2x97b6kz4m16zra2kav-lowdown-3.0.1-lib
  /nix/store/hfxfmghrymgj3f5kzcpyfv4fvavglzj5-lzo-2.10
  /nix/store/wsmmw9pf0gd3a4r1hygr1xm71k10mqbb-make-binary-wrapper-hook
  /nix/store/qgbinzghclnq11x26y83bhi8xaays8c7-make-initrd-ng-0.1.0
  /nix/store/zw0mlwj6iz4zkyln3qq06d5wzhp9dnjx-man-db-2.13.1
  /nix/store/344r5869h2wrwny2whias302nls8aqsp-mbedtls-3.6.7
  /nix/store/y5ggfl9jnmlf28833bxfijn4hkfm1rz8-minica-1.1.0
  /nix/store/l7xzqjjc62px4ykd2ci54b3z4p3zs63c-mkpasswd-5.6.6
  /nix/store/4v1jr9hygwrr2d0arkaj2q0695ad498f-mkpasswd-5.6.6-man
  /nix/store/gr9hlygaly3bq72day1rza0anwzjndi2-mount-secret-fs
  /nix/store/jzw3js90iva9f4zyplnrm8aqzvrqrb8h-nano-9.2
  /nix/store/z9zmh3ca56x874yvmay0xhyr95sl88r4-nano-9.2-man
  /nix/store/j7jpq1bligg8qvkdh7mki29x9pg2zvwz-ncurses-6.6-man
  /nix/store/7a008qfh6xdbkl0gznl28j5fd0y0k327-netpbm-11.15.3
  /nix/store/bfl42i1lj52wg479kyv5sgjir06a6s5r-netpbm-11.15.3-bin
  /nix/store/7w71wjybxb1vczrxsb9az4aj75r3k049-netpbm-11.15.3-dev
  /nix/store/bpcwls9sj5ba12i8p5j3wmsm2hvzyqcw-nginx-1.30.6
  /nix/store/dsjcss15wygiiyp94c4gxgyif7b8gdzv-nginx-config-formatter-1.4.0
  /nix/store/q126dc3b25khr7q69gn4yadahflna4nf-nix-2.34.9
  /nix/store/z3fxqxbjggzsqa23076csafqyvx042zh-nix-2.34.9
  /nix/store/01vhv9j1cj5945cp1sja9ff1k7lgz195-nix-bash-completions-0.6.8
  /nix/store/9pkjjqapxgqdh0jjyyp5x1b5asxfshcc-nix-cmd-2.34.9
  /nix/store/34qgbr3c1a4sswx5sw67kscajqx45gdm-nix-expr-2.34.9
  /nix/store/bl0z3pbs5hnh4g3g3lzy3xqrzfyzy9mi-nix-fetchers-2.34.9
  /nix/store/rm50aiwmgmm5paqgl6yilbdh81g20sm6-nix-flake-2.34.9
  /nix/store/sd9lmwl6zzm3ngnfv8ngj8sq0l729ywj-nix-info
  /nix/store/p1gzxwygxbw31rz0bmma88fh3kzxqkdb-nix-main-2.34.9
  /nix/store/xqwhki6dmn5skg087ml4i0chdnb0jmyh-nix-nswrapper-2.34.9
  /nix/store/h7av2wrh2l168gcjgm8lcsh9hzyv67ng-nix-store-2.34.9
  /nix/store/lfccfacxhqqzh0cbfadibw98rmv8svnv-nix-util-2.34.9
  /nix/store/i6n65mki546p36vydf8gwwy28bjpldmr-nixos-facter-0.4.4
  /nix/store/gdjn0mbniijzifvwh934ny3rp741fvz6-nixos-firewall-tool-26.11
  /nix/store/xg7yjn10vy06s2lavlv11nyrnh647jn2-nixos-option-26.11
  /nix/store/d6qzw1vrkm79dcxiil4k18n0f9wjs2cj-nixos-rebuild-ng-26.11
  /nix/store/5bq984m2kcw9gidf9nq9yfjaa2bmwydr-npth-1.8
  /nix/store/ypaar2zxnnl6dyzqxrgi8z9lyzcsk8am-nsncd-1.5.3
  /nix/store/xl2y3kkdjshb2z05y8kfvqj7b628jkgd-nss-cacert-3.126
  /nix/store/mag6f2agnbf0m64jvbgr4dwgrjy4k08n-onetbb-2022.3.0
  /nix/store/cy1kp9s0vklml5di3hddw0x4k38bixv6-openssh-10.6p1
  /nix/store/cw9mcxybpp75m6r7b9m8dzwkaamvcxzm-openssh-10.6p1-man
  /nix/store/93m0p3cd6x015pb45zy19m4x86mwhpac-openssl-3.5.9-man
  /nix/store/59ncs2y11qkc133y8xp1786vjf08gqw4-openssl-4.0.3
  /nix/store/nynmhxlsp2nsrj79444hf4qn553dly0a-pam.d
  /nix/store/1lc82z0p9gngakx1p1mx10s6h95vq37c-perl-5.42.3-man
  /nix/store/gpm7p74zcpgsydxvb9fsxvb84kd8v93w-perl5.42.3-Config-IniFiles-3.002000
  /nix/store/zpsb48faadcrxmmppks34wis9xbl9pca-perl5.42.3-File-Slurp-9999.32
  /nix/store/9hfq39f4sg9n7z6x037635d8s6arzsx3-perl5.42.3-IO-Stringy-2.113
  /nix/store/pnlxz7cpsdiwnhykqv3zym6hf1m1cmhx-perl5.42.3-JSON-4.10
  /nix/store/2x2k0zpy7nvnqn26l55naziicj3gyf9w-popt-1.19
  /nix/store/y733samykhd49crbck70qzsl315zq3hw-procps-4.0.7
  /nix/store/4v6x7ihvq3smw2g983l5aqcyaw3xd131-procps-4.0.7-man
  /nix/store/2aw4ss9v3pnchkkv4gkx613gsnyl64gh-protobuf-c-1.5.2-lib
  /nix/store/03g0csag5p98hwxfhg8bqcr3m9fh06rq-python3.14-annotated-types-0.7.0
  /nix/store/0bw3msf71rdnl92lff2dv05dyjb74bc8-python3.14-appdirs-1.4.4
  /nix/store/v51p69g092y9z8g1pi03v5960j1mblc6-python3.14-buildcatrust-0.5.1
  /nix/store/wq0rz7x8nmpxyvvgl6j8in5mzmaqlqjq-python3.14-cached-property-2.0.1
  /nix/store/r9a6wywx9jwc06pa4gksqv7n5gp3zzzz-python3.14-colorama-0.4.6
  /nix/store/gn7ipiqnxa01ismg0hkqyd3d4dkis8f8-python3.14-configargparse-1.8.0
  /nix/store/vs7vim6hikgc35m7gl2a4vys6dg99kd0-python3.14-jinja2-3.1.6
  /nix/store/12hf3zq0f4bg2sx9z0pvdca8rn2psrkb-python3.14-junit-xml-1.9
  /nix/store/av34r8329dk7ibn1ijn6qdczbj6m2syk-python3.14-markupsafe-3.0.4
  /nix/store/aa88l22gd10x13zvh548saixi8kk60g9-python3.14-nixos-test-lib-1.0.0
  /nix/store/qcrihg4p63mrnm8ikfpvyxgbd53qcgdq-python3.14-ovmfvartool-unstable-2022-09-04
  /nix/store/pj1g2j0m05z5isyzjw36k4a09hv264l7-python3.14-ptpython-3.0.32
  /nix/store/z3lp8xlc8iby3pd3sxlyzssx4hm2fdyp-python3.14-pydantic-2.13.4
  /nix/store/9ihrqwywak1bmic3b160fffxbir6bpk0-python3.14-pydantic-core-2.46.4
  /nix/store/ndmiph0bgmviy9pypnjari65m2qwkc8g-python3.14-pyparsing-2.4.7
  /nix/store/4w3qqylc0gssfarw7ydjm4r73n7b97wm-python3.14-pyyaml-6.0.3
  /nix/store/x0d2ixmgb1093q1zpmaw4avhsz2adgyw-python3.14-remote-pdb-2.1.0
  /nix/store/kgmdwspfdw0cmdv7ia1i5m61ds1dn2yj-python3.14-ruff-0.17.1
  /nix/store/3lc9v39gw3zfzi2ibk76f017vhx8hfw6-python3.14-six-1.17.0
  /nix/store/v6v61apzb0pjqrghg3cviqgb14jmadw3-python3.14-ty-0.0.87
  /nix/store/3vwqwh5j1b88m9s3lh39sldzhyqn2mr1-python3.14-typing-inspection-0.4.3
  /nix/store/qs4x0rk39zy80mg3rj3n3ndr8m5mcyf9-rdma-core-65.0
  /nix/store/hsv6gv4p5cvlgzqgj0ylszssifr2vh6x-rsync-3.5.0
  /nix/store/1f77pvf0r8x3iz3pnf2pmm9hv1jp5nz2-run-nspawn-1.0
  /nix/store/10sy8yf9malb0lnz2zv6rz56b0pgdag3-s2n-tls-1.7.9
  /nix/store/vrkcq13zpnxxga89yz85sa8qgb7wrdwz-shadow-4.20.3-man
  /nix/store/92y32awaiyp58scb9dbyvl3p8d0m5gxi-shadow-4.20.3-su
  /nix/store/syk07qc4pksl78bqgig5f2x2d272ghz8-shared-mime-info-2.5.1
  /nix/store/k562gy1wa1rwyhlp6ma2cp37zlc0mspl-socat-1.8.1.3
  /nix/store/0fz06lc15iknl2xpvnifghvfyz3nvyn5-sound-theme-freedesktop-0.8
  /nix/store/2cvvxfxli2j7w5qz5z0k80d8bfqdz263-step-ca-0.30.2
  /nix/store/78jn0lxqjgz4ahjzvvh4rvan7p607xph-strace-7.2
  /nix/store/5js0wzhlssqs7vxxpfdyvcfd9xvz1dmx-strace-7.2-man
  /nix/store/6pls8r962nj63m6vn9qn61n1wvhqv091-stub-ld-x86_64-unknown-linux-musl
  /nix/store/1x9bnv0f62nxm35z64lcgx13n36ds230-sudo-1.9.17p2
  /nix/store/n5janpishfshhhvfw219c2mdmnxvrx97-sudo-1.9.17p2-man
  /nix/store/g881fy8rmrb5bsvdq0i7aaw4zkqvjfc1-sudoers
  /nix/store/kxsyqczzarpigpkrp16y9cwabn6q35jn-system-generators
  /nix/store/avccgi0ff6nfj559kjpnihk36qa9ciaz-system-shutdown
  /nix/store/fmg6kh4sx6ljgwqnxccc5j7y1ps572j5-systemd-262
  /nix/store/0hy2nf8jpi8vyl93jn8djlg8b40m7ih0-systemd-262-dev
  /nix/store/kak612jyix1hjfqkxm3jsihs2rx9isw0-systemd-262-man
  /nix/store/9jcj15arnmrp9b082x19jnivda71y682-systemd-default-tmpfiles
  /nix/store/ys6f0whm8qdrhpb40man5aasr8nb1jcc-systemd-generator-environment.json
  /nix/store/3l54ibz1cm2axw2gg4a8703qvw85iyrs-tcpdump-4.99.7
  /nix/store/b140qkky12n2fskhviv352sh9hphx0m9-time-1.10
  /nix/store/s983ljv9qnqc4yfzkvm1zqcbjhaxxjfw-ty-0.0.87
  /nix/store/5l1wpc5fxa9yvng5yvfd99xhhixjjxv3-user-generators
  /nix/store/kwr0m60slsw7vr4r0v8fm3jlkc4v3xv9-util-linux-2.42.4
  /nix/store/0aqmqd8xfnxchvnpifqw3l4i89rymc07-util-linux-2.42.4-dev
  /nix/store/q2ix5q2bj1s8r4r8azwzcnad4vvihcx6-util-linux-2.42.4-man
  /nix/store/kbvhbz33v5y8zmcmyamj05ziri5rx5l6-vde2-2.3.3
  /nix/store/m63dspx1h8llchiqkm1j5imj1b88ki24-vhost-device-vsock-0.3.0
  /nix/store/bxaddvz98rw7pn24gcrjix69q6np2gq8-which-2.25
  /nix/store/xk0mz9h8fqwi1n3rasg6jr313im6dizr-which-2.25-man
  /nix/store/alryma2as4x0saw3is4lns39axnvpmly-xauth-1.1.5
  /nix/store/grwd77fm4f19rjypc13354qcd26ycdp7-xwininfo-1.1.6
  /nix/store/0m97g185g3y0f9dp77jdcxj0jpqds14w-xxhash-0.8.3
  /nix/store/mjl9zilz8asw9abyjkrmz76srii74q3r-xz-5.8.4-man
  /nix/store/fdp0mgrylps95y49hdpx8qhz8sp9vwax-zlib-ng-2.3.3
  /nix/store/yqgkjczmmxsp6l26nwriry7h3kq981vi-zstd-1.5.7-bin
  /nix/store/mi49iqdp5i46877a404f6a0iggyz10pm-zstd-1.5.7-man
warning: ignoring the client-specified setting 'store', because it is a restricted setting and you are not a trusted user
building '/nix/store/l6kadcdgvwdi04a52mwfqh95wqmp1j1m-extra-hosts.drv' on nix-store.geninf.io:50051
extra-hosts> web01: building l6kadcdgvwdi04a52mwfqh95wqmp1j1m-extra-hosts.drv
building '/nix/store/yvvriwr9vykc9mjm9xaiv0vcnyv1bsq7-etc-hostname.drv' on nix-store.geninf.io:50051
etc-hostname> web01: building yvvriwr9vykc9mjm9xaiv0vcnyv1bsq7-etc-hostname.drv
building '/nix/store/qaa38lswp1658vr657xzmr653zr22gjm-unit-script-acme-order-renew-ca.foo-start.drv' on nix-store.geninf.io:50051
unit-script-acme-order-renew-ca.foo-start> web01: building qaa38lswp1658vr657xzmr653zr22gjm-unit-script-acme-order-renew-ca.foo-start.drv
building '/nix/store/bd9yhzh2fcm8ky49vi35sbrgi13ccjrq-users-groups.json.drv' on nix-store.geninf.io:50051
users-groups.json> gi-build-x86-01: building bd9yhzh2fcm8ky49vi35sbrgi13ccjrq-users-groups.json.drv
extra-hosts> structuredAttrs is enabled
etc-hostname> structuredAttrs is enabled
unit-script-acme-order-renew-ca.foo-start> structuredAttrs is enabled
building '/nix/store/x7md8nmv4kb2jq93yk2lksb0zl79r3w4-acme-postrun.drv' on nix-store.geninf.io:50051
acme-postrun> gi-build-x86-01: building x7md8nmv4kb2jq93yk2lksb0zl79r3w4-acme-postrun.drv
building '/nix/store/ldwk7hldsgqzvkxmc60m90s15yqibjd7-X-Restart-Triggers-acme-test.foo.drv' on nix-store.geninf.io:50051
X-Restart-Triggers-acme-test.foo> gi-build-x86-01: building ldwk7hldsgqzvkxmc60m90s15yqibjd7-X-Restart-Triggers-acme-test.foo.drv
building '/nix/store/kjm69dv8ldq5yvcnmjnnr8z8c8jl9l10-acme-postrun.drv' on nix-store.geninf.io:50051
acme-postrun> gi-build-x86-01: building kjm69dv8ldq5yvcnmjnnr8z8c8jl9l10-acme-postrun.drv
users-groups.json> structuredAttrs is enabled
acme-postrun> structuredAttrs is enabled
acme-postrun> structuredAttrs is enabled
X-Restart-Triggers-acme-test.foo> structuredAttrs is enabled
building '/nix/store/jdbpmyxsj1rl0pbsj5j5njyr86nml5rg-dry-activate.drv' on nix-store.geninf.io:50051
dry-activate> gi-build-x86-01: building jdbpmyxsj1rl0pbsj5j5njyr86nml5rg-dry-activate.drv
dry-activate> structuredAttrs is enabled
building '/nix/store/6s22dw0msp7f7dqwy78vnfs849xvv58y-unit-nginx-config-reload.service.drv' on nix-store.geninf.io:50051
unit-nginx-config-reload.service> build-x86-01: building 6s22dw0msp7f7dqwy78vnfs849xvv58y-unit-nginx-config-reload.service.drv
building '/nix/store/4x3s09yjfpjmg0ck1q6ccb43s8mf9fjh-decrypt-age-secrets.drv' on nix-store.geninf.io:50051
decrypt-age-secrets> build-x86-01: building 4x3s09yjfpjmg0ck1q6ccb43s8mf9fjh-decrypt-age-secrets.drv
building '/nix/store/rm2y14dqg0v9n620hpdx5smwnp9w83hb-unit-script-acme-test.foo-start.drv' on nix-store.geninf.io:50051
unit-script-acme-test.foo-start> build-x86-01: building rm2y14dqg0v9n620hpdx5smwnp9w83hb-unit-script-acme-test.foo-start.drv
building '/nix/store/3sd1zppfx2lax1kgl6w8c9bpnjxqx9hs-unit-acme-renew-test.foo.timer.drv' on nix-store.geninf.io:50051
unit-acme-renew-test.foo.timer> build-x86-01: building 3sd1zppfx2lax1kgl6w8c9bpnjxqx9hs-unit-acme-renew-test.foo.timer.drv
building '/nix/store/7fgfh3sdybnbqnb7gr8awb0j0p9ayyky-unit-acme-renew-ca.foo.timer.drv' on nix-store.geninf.io:50051
unit-acme-renew-ca.foo.timer> build-x86-01: building 7fgfh3sdybnbqnb7gr8awb0j0p9ayyky-unit-acme-renew-ca.foo.timer.drv
building '/nix/store/6fi5cf6qc3jifvw0hb6wb4qx3lr35jq7-string-hosts.drv' on nix-store.geninf.io:50051
string-hosts> build-x86-01: building 6fi5cf6qc3jifvw0hb6wb4qx3lr35jq7-string-hosts.drv
building '/nix/store/2924khaazk5a15j5wcjkrmqfs8crpy31-unit-script-acme-ca.foo-start.drv' on nix-store.geninf.io:50051
unit-script-acme-ca.foo-start> build-x86-01: building 2924khaazk5a15j5wcjkrmqfs8crpy31-unit-script-acme-ca.foo-start.drv
building '/nix/store/amaacdd3kalprlp0ywqrxpdp7zfv1zna-unit-acme-account-2c44cb477b4787b2cf13.target.drv' on nix-store.geninf.io:50051
unit-acme-account-2c44cb477b4787b2cf13.target> build-x86-01: building amaacdd3kalprlp0ywqrxpdp7zfv1zna-unit-acme-account-2c44cb477b4787b2cf13.target.drv
building '/nix/store/0yymripbjm8gx6nqaabqgjpc01xwvw5h-acme-setup-privileged.drv' on nix-store.geninf.io:50051
acme-setup-privileged> build-x86-01: building 0yymripbjm8gx6nqaabqgjpc01xwvw5h-acme-setup-privileged.drv
building '/nix/store/mbyzmd4ygkizx4d1rrr13cm7dvyqjg26-X-Restart-Triggers-acme-ca.foo.drv' on nix-store.geninf.io:50051
X-Restart-Triggers-acme-ca.foo> build-x86-01: building mbyzmd4ygkizx4d1rrr13cm7dvyqjg26-X-Restart-Triggers-acme-ca.foo.drv
building '/nix/store/b4rqpcpazs6h1vmigms84s3mj6d3aih9-users-groups.json.drv' on nix-store.geninf.io:50051
users-groups.json> build-x86-01: building b4rqpcpazs6h1vmigms84s3mj6d3aih9-users-groups.json.drv
building '/nix/store/06n7bmmf3b3s9s69nn0ax4vwh4wl05jz-firewall-start.drv' on nix-store.geninf.io:50051
firewall-start> build-x86-01: building 06n7bmmf3b3s9s69nn0ax4vwh4wl05jz-firewall-start.drv
unit-script-acme-test.foo-start> structuredAttrs is enabled
unit-acme-renew-ca.foo.timer> structuredAttrs is enabled
unit-acme-renew-test.foo.timer> structuredAttrs is enabled
string-hosts> structuredAttrs is enabled
unit-nginx-config-reload.service> structuredAttrs is enabled
unit-acme-account-2c44cb477b4787b2cf13.target> structuredAttrs is enabled
unit-script-acme-ca.foo-start> structuredAttrs is enabled
acme-setup-privileged> structuredAttrs is enabled
X-Restart-Triggers-acme-ca.foo> structuredAttrs is enabled
users-groups.json> structuredAttrs is enabled
firewall-start> structuredAttrs is enabled
decrypt-age-secrets> structuredAttrs is enabled
building '/nix/store/rx4h4cgggcxx0q19gv5azawa4z3a5r04-system-path.drv' on nix-store.geninf.io:50051
system-path> gi-build-x86-01: building rx4h4cgggcxx0q19gv5azawa4z3a5r04-system-path.drv
system-path> structuredAttrs is enabled
system-path> created 1727 symlinks in user environment
building '/nix/store/ab1l2flw9dr4id5a50zm40fmg1cf7k2j-dbus-1.drv' on nix-store.geninf.io:50051
dbus-1> gi-build-x86-01: building ab1l2flw9dr4id5a50zm40fmg1cf7k2j-dbus-1.drv
building '/nix/store/yfb6pxv25hscdsiyaw1slxa1z1wgvhha-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051
X-Restart-Triggers-dbus-broker> gi-build-x86-01: building yfb6pxv25hscdsiyaw1slxa1z1wgvhha-X-Restart-Triggers-dbus-broker.drv
building '/nix/store/2rhw9yf30pd0zxpvbh4ldmnb2wfzx9a2-system-generators.drv' on nix-store.geninf.io:50051
system-generators> build-x86-01: building 2rhw9yf30pd0zxpvbh4ldmnb2wfzx9a2-system-generators.drv
building '/nix/store/s82h9i75qgl0974byspa1n2f9wk3r5c2-unit-script-acme-order-renew-test.foo-start.drv' on nix-store.geninf.io:50051
unit-script-acme-order-renew-test.foo-start> web01: building s82h9i75qgl0974byspa1n2f9wk3r5c2-unit-script-acme-order-renew-test.foo-start.drv
X-Restart-Triggers-dbus-broker> structuredAttrs is enabled
unit-script-acme-order-renew-test.foo-start> structuredAttrs is enabled
building '/nix/store/jxyaklsnvrr574nglry583hxnc96k1nx-system-path.drv' on nix-store.geninf.io:50051
system-path> build-x86-01: building jxyaklsnvrr574nglry583hxnc96k1nx-system-path.drv
building '/nix/store/xl8h2fi0751jq251nm5x2i3nz9vwwqg9-user-generators.drv' on nix-store.geninf.io:50051
user-generators> build-x86-01: building xl8h2fi0751jq251nm5x2i3nz9vwwqg9-user-generators.drv
building '/nix/store/h1fa9r01n6p8rir4rpnr91d0nidywnhz-nginx.conf.drv' on nix-store.geninf.io:50051
nginx.conf> build-x86-01: building h1fa9r01n6p8rir4rpnr91d0nidywnhz-nginx.conf.drv
building '/nix/store/r0b5r1k7nqxwf6bbfi668qrc9zf2mx3v-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051
unit-dbus-broker.service> gi-build-x86-01: building r0b5r1k7nqxwf6bbfi668qrc9zf2mx3v-unit-dbus-broker.service.drv
system-path> structuredAttrs is enabled
building '/nix/store/ck0wg3phqvvvd1dlpp0cvw0155xdr7q1-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051
unit-dbus-broker.service> gi-build-x86-01: building ck0wg3phqvvvd1dlpp0cvw0155xdr7q1-unit-dbus-broker.service.drv
nginx.conf> structuredAttrs is enabled
building '/nix/store/90yrz82288f55g9xd71xc29qb7ll6ywz-nss-cacert-3.126.drv' on nix-store.geninf.io:50051
nss-cacert-3.126> build-x86-01: building 90yrz82288f55g9xd71xc29qb7ll6ywz-nss-cacert-3.126.drv
building '/nix/store/6kyqnq5imz113q53kh0pjfyj8la4nf8v-unit-acme-test.foo.service.drv' on nix-store.geninf.io:50051
unit-acme-test.foo.service> build-x86-01: building 6kyqnq5imz113q53kh0pjfyj8la4nf8v-unit-acme-test.foo.service.drv
unit-acme-test.foo.service> structuredAttrs is enabled
system-path> created 1727 symlinks in user environment
building '/nix/store/zi79min6042jcgi2vmimq103sddv6f85-unit-acme-order-renew-ca.foo.service.drv' on nix-store.geninf.io:50051
unit-acme-order-renew-ca.foo.service> gi-build-x86-01: building zi79min6042jcgi2vmimq103sddv6f85-unit-acme-order-renew-ca.foo.service.drv
building '/nix/store/iy3zma29asm3xpz609sqfql5r0x00ngj-system-shutdown.drv' on nix-store.geninf.io:50051
system-shutdown> web01: building iy3zma29asm3xpz609sqfql5r0x00ngj-system-shutdown.drv
unit-dbus-broker.service> structuredAttrs is enabled
unit-dbus-broker.service> structuredAttrs is enabled
nss-cacert-3.126> structuredAttrs is enabled
nss-cacert-3.126> Running phase: unpackPhase
nss-cacert-3.126> Running phase: patchPhase
nss-cacert-3.126> Running phase: updateAutotoolsGnuConfigScriptsPhase
nss-cacert-3.126> Running phase: configurePhase
nss-cacert-3.126> no configure script, doing nothing
nss-cacert-3.126> Running phase: buildPhase
unit-acme-order-renew-ca.foo.service> structuredAttrs is enabled
nginx.conf> 
nginx.conf> ==================== Results ===================
nginx.conf> No issues found.
nginx.conf> 
nginx.conf> ==================== Summary ===================
nginx.conf> Total issues:
nginx.conf>     Unspecified: 0
nginx.conf>     Low: 0
nginx.conf>     Medium: 0
nginx.conf>     High: 0
nginx.conf> 
nss-cacert-3.126> Running phase: installPhase
nss-cacert-3.126> Running phase: fixupPhase
nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/2vf1xxwhk1lss03i6pvgl56rv9xfv9qb-nss-cacert-3.126-p11kit
nss-cacert-3.126> checking for references to /build/ in /nix/store/2vf1xxwhk1lss03i6pvgl56rv9xfv9qb-nss-cacert-3.126-p11kit...
nss-cacert-3.126> patching script interpreter paths in /nix/store/2vf1xxwhk1lss03i6pvgl56rv9xfv9qb-nss-cacert-3.126-p11kit
nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/1mzg8dn17ybz9q1j788ra8yfq41v73lk-nss-cacert-3.126-hashed
nss-cacert-3.126> checking for references to /build/ in /nix/store/1mzg8dn17ybz9q1j788ra8yfq41v73lk-nss-cacert-3.126-hashed...
nss-cacert-3.126> patching script interpreter paths in /nix/store/1mzg8dn17ybz9q1j788ra8yfq41v73lk-nss-cacert-3.126-hashed
nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/pz4x55rsfwm7y5skyshzp2dngha4a8y3-nss-cacert-3.126
nss-cacert-3.126> checking for references to /build/ in /nix/store/pz4x55rsfwm7y5skyshzp2dngha4a8y3-nss-cacert-3.126...
nss-cacert-3.126> patching script interpreter paths in /nix/store/pz4x55rsfwm7y5skyshzp2dngha4a8y3-nss-cacert-3.126
nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/8ik7gi48j6gi9451fxxdxpmfm8zig7y4-nss-cacert-3.126-unbundled
building '/nix/store/s3zvdh4l1gg5zp390x6fvwhn131m827v-unit-acme-order-renew-test.foo.service.drv' on nix-store.geninf.io:50051
unit-acme-order-renew-test.foo.service> web01: building s3zvdh4l1gg5zp390x6fvwhn131m827v-unit-acme-order-renew-test.foo.service.drv
nss-cacert-3.126> checking for references to /build/ in /nix/store/8ik7gi48j6gi9451fxxdxpmfm8zig7y4-nss-cacert-3.126-unbundled...
building '/nix/store/0vr6mynqm6rahqpzsx4w3pp0afcrvh5r-user-units.drv' on nix-store.geninf.io:50051
user-units> gi-build-x86-01: building 0vr6mynqm6rahqpzsx4w3pp0afcrvh5r-user-units.drv
nss-cacert-3.126> patching script interpreter paths in /nix/store/8ik7gi48j6gi9451fxxdxpmfm8zig7y4-nss-cacert-3.126-unbundled
unit-acme-order-renew-test.foo.service> structuredAttrs is enabled
building '/nix/store/r6lcyjl44wlkwb2zswxlqrpwdmh5f7rh-unit-acme-setup.service.drv' on nix-store.geninf.io:50051
unit-acme-setup.service> build-x86-01: building r6lcyjl44wlkwb2zswxlqrpwdmh5f7rh-unit-acme-setup.service.drv
unit-acme-setup.service> structuredAttrs is enabled
building '/nix/store/6r15a1x857fb40fz7wwcsdwz6a3757zk-hosts.drv' on nix-store.geninf.io:50051
hosts> build-x86-01: building 6r15a1x857fb40fz7wwcsdwz6a3757zk-hosts.drv
building '/nix/store/84v3qrlxj8an76hf0vznqvbcbqjr6ykg-hosts.drv' on nix-store.geninf.io:50051
hosts> build-x86-01: building 84v3qrlxj8an76hf0vznqvbcbqjr6ykg-hosts.drv
building '/nix/store/spyijybsyfavrc19g4smhmb6fxim2hkx-unit-acme-ca.foo.service.drv' on nix-store.geninf.io:50051
unit-acme-ca.foo.service> build-x86-01: building spyijybsyfavrc19g4smhmb6fxim2hkx-unit-acme-ca.foo.service.drv
unit-acme-ca.foo.service> structuredAttrs is enabled
building '/nix/store/lrww1bsz1sfcnigqv5pcm4p4l1r33y13-hosts.drv' on nix-store.geninf.io:50051
hosts> build-x86-01: building lrww1bsz1sfcnigqv5pcm4p4l1r33y13-hosts.drv
building '/nix/store/3rila2qankh2yjdzmn084w2bapx6ffyq-firewall-reload.drv' on nix-store.geninf.io:50051
firewall-reload> build-x86-01: building 3rila2qankh2yjdzmn084w2bapx6ffyq-firewall-reload.drv
building '/nix/store/6ia197q5hi71q39hswnn247mb6s7awm1-dry-activate.drv' on nix-store.geninf.io:50051
dry-activate> build-x86-01: building 6ia197q5hi71q39hswnn247mb6s7awm1-dry-activate.drv
building '/nix/store/ymrl1gkawzz1jfpyr3byfz2ym3av2cyf-unit-script-nginx-pre-start.drv' on nix-store.geninf.io:50051
unit-script-nginx-pre-start> build-x86-01: building ymrl1gkawzz1jfpyr3byfz2ym3av2cyf-unit-script-nginx-pre-start.drv
firewall-reload> structuredAttrs is enabled
unit-script-nginx-pre-start> structuredAttrs is enabled
building '/nix/store/gzqza1r4qb4ykmby7lw74b5iz44ig247-dbus-1.drv' on nix-store.geninf.io:50051
dbus-1> build-x86-01: building gzqza1r4qb4ykmby7lw74b5iz44ig247-dbus-1.drv
dry-activate> structuredAttrs is enabled
building '/nix/store/ws87h0wqpqhqcqr90y6a4l6n4xm2kc04-unit-nix-daemon.service.drv' on nix-store.geninf.io:50051
unit-nix-daemon.service> build-x86-01: building ws87h0wqpqhqcqr90y6a4l6n4xm2kc04-unit-nix-daemon.service.drv
unit-nix-daemon.service> structuredAttrs is enabled
building '/nix/store/g93awir780mz0jrkiznwmqziqfkzfr3r-unit-firewall.service.drv' on nix-store.geninf.io:50051
unit-firewall.service> build-x86-01: building g93awir780mz0jrkiznwmqziqfkzfr3r-unit-firewall.service.drv
unit-firewall.service> structuredAttrs is enabled
building '/nix/store/8ascp7ikb3kbgf63cyzws0wk9dn4g6ga-unit-nginx.service.drv' on nix-store.geninf.io:50051
unit-nginx.service> build-x86-01: building 8ascp7ikb3kbgf63cyzws0wk9dn4g6ga-unit-nginx.service.drv
unit-nginx.service> structuredAttrs is enabled
building '/nix/store/hhvwharzq63bn630yp6pbsvzk0zvxqrg-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051
X-Restart-Triggers-dbus-broker> build-x86-01: building hhvwharzq63bn630yp6pbsvzk0zvxqrg-X-Restart-Triggers-dbus-broker.drv
X-Restart-Triggers-dbus-broker> structuredAttrs is enabled
building '/nix/store/pzs9iiqyz4nam65ifhybr2h34i9zvc5y-system-units.drv' on nix-store.geninf.io:50051
system-units> build-x86-01: building pzs9iiqyz4nam65ifhybr2h34i9zvc5y-system-units.drv
building '/nix/store/rq8yqdrjhhszz0aswzznh37mh2l2z946-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051
unit-dbus-broker.service> build-x86-01: building rq8yqdrjhhszz0aswzznh37mh2l2z946-unit-dbus-broker.service.drv
unit-dbus-broker.service> structuredAttrs is enabled
building '/nix/store/bgywqabf4sbhadw6p92wlsgfm064lrml-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051
unit-dbus-broker.service> build-x86-01: building bgywqabf4sbhadw6p92wlsgfm064lrml-unit-dbus-broker.service.drv
unit-dbus-broker.service> structuredAttrs is enabled
building '/nix/store/2zxjc2wpll4gxsrv1xycmivc5g3bknv1-user-units.drv' on nix-store.geninf.io:50051
user-units> build-x86-01: building 2zxjc2wpll4gxsrv1xycmivc5g3bknv1-user-units.drv
building '/nix/store/yxkjc1cnv31pwwpfs82p2dsxhzvilryc-test-script.drv' on nix-store.geninf.io:50051
test-script> gi-build-x86-02: building yxkjc1cnv31pwwpfs82p2dsxhzvilryc-test-script.drv
building '/nix/store/mx7s13chb4r9fmw5l8gngszvxd2gip1f-unit-acme-account-d22a46d9459bf683a338.target.drv' on nix-store.geninf.io:50051
unit-acme-account-d22a46d9459bf683a338.target> gi-build-x86-02: building mx7s13chb4r9fmw5l8gngszvxd2gip1f-unit-acme-account-d22a46d9459bf683a338.target.drv
building '/nix/store/qja0f0hrc4h0gfijflgy8480hrzvpv1r-acme-setup-privileged.drv' on nix-store.geninf.io:50051
acme-setup-privileged> gi-build-x86-02: building qja0f0hrc4h0gfijflgy8480hrzvpv1r-acme-setup-privileged.drv
building '/nix/store/xyfxg7p1jw4m5z9f18jh88q74x8yycyq-unit-nginx-config-reload.service.drv' on nix-store.geninf.io:50051
unit-nginx-config-reload.service> gi-build-x86-02: building xyfxg7p1jw4m5z9f18jh88q74x8yycyq-unit-nginx-config-reload.service.drv
building '/nix/store/hab17fzm37d75n6kdl54pd0zbpzb7hsk-ca.json.drv' on nix-store.geninf.io:50051
ca.json> gi-build-x86-02: building hab17fzm37d75n6kdl54pd0zbpzb7hsk-ca.json.drv
building '/nix/store/9ivnh65bl34qh8bcxxy5wyxn8m7ybksg-vars-check-certificates.drv' on nix-store.geninf.io:50051
vars-check-certificates> gi-build-x86-02: building 9ivnh65bl34qh8bcxxy5wyxn8m7ybksg-vars-check-certificates.drv
test-script> structuredAttrs is enabled
unit-acme-account-d22a46d9459bf683a338.target> structuredAttrs is enabled
acme-setup-privileged> structuredAttrs is enabled
unit-nginx-config-reload.service> structuredAttrs is enabled
building '/nix/store/jn1x5khz2dlnw1haj5k9gywd5pqw3iya-nginx.conf.drv' on nix-store.geninf.io:50051
nginx.conf> gi-build-x86-02: building jn1x5khz2dlnw1haj5k9gywd5pqw3iya-nginx.conf.drv
nginx.conf> structuredAttrs is enabled
ca.json> structuredAttrs is enabled
vars-check-certificates> Running vars check using Nix-based executor...
vars-check-certificates> ✓ All vars checks completed successfully
building '/nix/store/b119cpqv42n21809in1w3l1y4yhrw0jn-system-path.drv' on nix-store.geninf.io:50051
system-path> gi-build-x86-02: building b119cpqv42n21809in1w3l1y4yhrw0jn-system-path.drv
nginx.conf> 
nginx.conf> ==================== Results ===================
nginx.conf> No issues found.
nginx.conf> 
nginx.conf> ==================== Summary ===================
nginx.conf> Total issues:
nginx.conf>     Unspecified: 0
nginx.conf>     Low: 0
nginx.conf>     Medium: 0
nginx.conf>     High: 0
nginx.conf> 
system-path> structuredAttrs is enabled
system-path> created 1727 symlinks in user environment
building '/nix/store/5x1lv1750rc24zc25brr46ap1dfv0alm-unit-acme-setup.service.drv' on nix-store.geninf.io:50051
unit-acme-setup.service> gi-build-x86-02: building 5x1lv1750rc24zc25brr46ap1dfv0alm-unit-acme-setup.service.drv
unit-acme-setup.service> structuredAttrs is enabled
building '/nix/store/gqlm0z6fpbxvx6xfyrr8jxp1a9arygi2-unit-script-nginx-pre-start.drv' on nix-store.geninf.io:50051
unit-script-nginx-pre-start> gi-build-x86-02: building gqlm0z6fpbxvx6xfyrr8jxp1a9arygi2-unit-script-nginx-pre-start.drv
building '/nix/store/51x52fkz3b93xnhg2avwr0r420ayychr-X-Restart-Triggers-step-ca.drv' on nix-store.geninf.io:50051
X-Restart-Triggers-step-ca> gi-build-x86-02: building 51x52fkz3b93xnhg2avwr0r420ayychr-X-Restart-Triggers-step-ca.drv
building '/nix/store/kyqbkbcrvvby6h4v4rbvrz2h73ksjc1l-dbus-1.drv' on nix-store.geninf.io:50051
dbus-1> gi-build-x86-02: building kyqbkbcrvvby6h4v4rbvrz2h73ksjc1l-dbus-1.drv
X-Restart-Triggers-step-ca> structuredAttrs is enabled
unit-script-nginx-pre-start> structuredAttrs is enabled
building '/nix/store/vx90591vqmad7mih7wm49rhqc29ygpn4-etc.drv' on nix-store.geninf.io:50051
etc> gi-build-x86-02: building vx90591vqmad7mih7wm49rhqc29ygpn4-etc.drv
building '/nix/store/v7ixjjwsmxhhbzkxcyzsw7fi5p429xry-unit-step-ca.service.drv' on nix-store.geninf.io:50051
unit-step-ca.service> gi-build-x86-02: building v7ixjjwsmxhhbzkxcyzsw7fi5p429xry-unit-step-ca.service.drv
building '/nix/store/p5m8f75s62zl875fxwis6ynkbap9g308-unit-nginx.service.drv' on nix-store.geninf.io:50051
unit-nginx.service> gi-build-x86-02: building p5m8f75s62zl875fxwis6ynkbap9g308-unit-nginx.service.drv
unit-step-ca.service> structuredAttrs is enabled
unit-nginx.service> structuredAttrs is enabled
building '/nix/store/9qxljcn6wmhx3z9nj3lbcax5ri71ddag-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051
X-Restart-Triggers-dbus-broker> gi-build-x86-02: building 9qxljcn6wmhx3z9nj3lbcax5ri71ddag-X-Restart-Triggers-dbus-broker.drv
X-Restart-Triggers-dbus-broker> structuredAttrs is enabled
building '/nix/store/vdyds7zgr27mjig67a26lv12hwc5i1fr-activate.drv' on nix-store.geninf.io:50051
activate> gi-build-x86-02: building vdyds7zgr27mjig67a26lv12hwc5i1fr-activate.drv
activate> structuredAttrs is enabled
building '/nix/store/8vp2jzaqlpky9w4zp9iia7107dr6nhkh-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051
unit-dbus-broker.service> gi-build-x86-02: building 8vp2jzaqlpky9w4zp9iia7107dr6nhkh-unit-dbus-broker.service.drv
unit-dbus-broker.service> structuredAttrs is enabled
building '/nix/store/j87sc8l6dwnab34fxcqgrcfxy9njp658-nixos-system-client-test.drv' on nix-store.geninf.io:50051
nixos-system-client-test> gi-build-x86-02: building j87sc8l6dwnab34fxcqgrcfxy9njp658-nixos-system-client-test.drv
nixos-system-client-test> structuredAttrs is enabled
building '/nix/store/0jxvbg8qailbl2bsvbx79gn2bsdgy2nl-system-units.drv' on nix-store.geninf.io:50051
system-units> gi-build-x86-02: building 0jxvbg8qailbl2bsvbx79gn2bsdgy2nl-system-units.drv
building '/nix/store/rcwnb2nysd4ch5f365mnc6m7qrd88aad-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051
unit-dbus-broker.service> build-x86-01: building rcwnb2nysd4ch5f365mnc6m7qrd88aad-unit-dbus-broker.service.drv
unit-dbus-broker.service> structuredAttrs is enabled
building '/nix/store/bygbqavgw62y5ai2f56ah6ahzzw45fz7-user-units.drv' on nix-store.geninf.io:50051
user-units> build-x86-01: building bygbqavgw62y5ai2f56ah6ahzzw45fz7-user-units.drv
building '/nix/store/5s8qp3yp3z41mpn1xh8sr2ssm8i9ziq7-run-client-nspawn.drv' on nix-store.geninf.io:50051
run-client-nspawn> gi-build-x86-02: building 5s8qp3yp3z41mpn1xh8sr2ssm8i9ziq7-run-client-nspawn.drv
building '/nix/store/llqy7azimdzbxffh01m0i3vgfbzdziam-system-units.drv' on nix-store.geninf.io:50051
system-units> gi-build-x86-02: building llqy7azimdzbxffh01m0i3vgfbzdziam-system-units.drv
building '/nix/store/y1fnzzw32r0aqpqcbk4bf1ys6lyb312x-etc.drv' on nix-store.geninf.io:50051
etc> gi-build-x86-02: building y1fnzzw32r0aqpqcbk4bf1ys6lyb312x-etc.drv
building '/nix/store/01i979cvfy1nq1ls8n0g134cfwbiwx9y-etc.drv' on nix-store.geninf.io:50051
etc> gi-build-x86-02: building 01i979cvfy1nq1ls8n0g134cfwbiwx9y-etc.drv
building '/nix/store/vaf5l2y2z9n38a2mqp4zgfrfrcf9jnfn-activate.drv' on nix-store.geninf.io:50051
activate> gi-build-x86-02: building vaf5l2y2z9n38a2mqp4zgfrfrcf9jnfn-activate.drv
activate> structuredAttrs is enabled
building '/nix/store/rjc917j3c4f39cgbn16dm2avirvnvwsd-activate.drv' on nix-store.geninf.io:50051
activate> gi-build-x86-02: building rjc917j3c4f39cgbn16dm2avirvnvwsd-activate.drv
building '/nix/store/a43bf0p33rvqhr7nnadmg7y7x3mlaabq-nixos-system-ca-test.drv' on nix-store.geninf.io:50051
nixos-system-ca-test> build-x86-01: building a43bf0p33rvqhr7nnadmg7y7x3mlaabq-nixos-system-ca-test.drv
nixos-system-ca-test> structuredAttrs is enabled
activate> structuredAttrs is enabled
building '/nix/store/hrxdzrjf7pw63pf4wl2fwvm88k6y008j-run-ca-nspawn.drv' on nix-store.geninf.io:50051
run-ca-nspawn> build-x86-01: building hrxdzrjf7pw63pf4wl2fwvm88k6y008j-run-ca-nspawn.drv
building '/nix/store/h8csrrlyyw39vbjliwliddx713sxv2hm-nixos-system-server-test.drv' on nix-store.geninf.io:50051
nixos-system-server-test> gi-build-x86-02: building h8csrrlyyw39vbjliwliddx713sxv2hm-nixos-system-server-test.drv
nixos-system-server-test> structuredAttrs is enabled
building '/nix/store/9gq66qcx5744cca8bdj72sbl1zlrb4yk-run-server-nspawn.drv' on nix-store.geninf.io:50051
run-server-nspawn> build-x86-01: building 9gq66qcx5744cca8bdj72sbl1zlrb4yk-run-server-nspawn.drv
building '/nix/store/mvfn0mz0gxrwksasknwxb27kwzsl0crr-driverConfiguration.json.drv' on nix-store.geninf.io:50051
driverConfiguration.json> build-x86-01: building mvfn0mz0gxrwksasknwxb27kwzsl0crr-driverConfiguration.json.drv
driverConfiguration.json> structuredAttrs is enabled
building '/nix/store/lp3d36i4bvjv760lg2by6asvjby7plah-nixos-test-driver-certificates.drv' on nix-store.geninf.io:50051
nixos-test-driver-certificates> build-x86-01: building lp3d36i4bvjv760lg2by6asvjby7plah-nixos-test-driver-certificates.drv
nixos-test-driver-certificates> Running type check (enable/disable: config.skipTypeCheck)
nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck
nixos-test-driver-certificates> All checks passed!
nixos-test-driver-certificates> Linting test script (enable/disable: config.skipLint)
nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipLint
nixos-test-driver-certificates> All checks passed!
building '/nix/store/jklw8skwkk71xpjiy3qxdnw14qr93iwm-container-test-run-certificates.drv' on nix-store.geninf.io:50051
container-test-run-certificates> build-x86-01: building jklw8skwkk71xpjiy3qxdnw14qr93iwm-container-test-run-certificates.drv
container-test-run-certificates> Machine state will be reset. To keep it, pass --keep-machine-state
container-test-run-certificates> start all VLans
container-test-run-certificates> (finished: start all VLans, in 0.00 seconds)
container-test-run-certificates> Initializing machine ID from random generator.
container-test-run-certificates> Test will time out and terminate in 3600.0 seconds
container-test-run-certificates> run the VM test script
container-test-run-certificates> additionally exposed symbols:
container-test-run-certificates>     ca, client, server,
container-test-run-certificates>     vlan1,
container-test-run-certificates>     start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh
container-test-run-certificates> ca: systemd-nspawn running (pid 50)
container-test-run-certificates> ca: Waiting for journal at /build/vm-state-ca/var/log/journal...
container-test-run-certificates> ca: waiting for unit step-ca.service
container-test-run-certificates> nixos-nspawn(ca): TAP vde-tap1 not found; container will be isolated from VDE
container-test-run-certificates> nixos-nspawn(ca): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.
container-test-run-certificates> Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.
container-test-run-certificates> ░ Spawning container ca on /build/vm-state-ca.
container-test-run-certificates> ca # No journal files were found.
container-test-run-certificates> ca # No journal boot entry found for the specified boot (+0).
container-test-run-certificates> ca # [313737.864688] ca systemd-journald[82]: Journal started
container-test-run-certificates> ca # [313737.864722] ca systemd-journald[82]: Runtime Journal (/run/log/journal/1be3c43f6cc44a348081bbdff4eedf14) is 8M, max 3.7G, 3.7G free.
container-test-run-certificates> ca # [313737.900013] ca systemd[1]: Finished Apply Kernel Variables.
container-test-run-certificates> ca # [313738.194666] ca systemd[1]: Finished Firewall.
container-test-run-certificates> ca # [313738.195473] ca systemd[1]: Finished Create Static Device Nodes in /dev gracefully.
container-test-run-certificates> ca # [313738.268079] ca systemd[1]: Reached target Preparation for Network.
container-test-run-certificates> ca # [313738.268395] ca systemd[1]: Listening on Network Management Resolve Hook Socket.
container-test-run-certificates> ca # [313738.269132] ca systemd[1]: Starting Flush Journal to Persistent Storage...
container-test-run-certificates> ca # [313738.269743] ca systemd[1]: Starting Network Name Resolution...
container-test-run-certificates> ca # [313738.270183] ca systemd[1]: Starting Create Static Device Nodes in /dev...
container-test-run-certificates> ca # [313738.295611] ca systemd-journald[82]: Time spent on flushing to /var/log/journal/1be3c43f6cc44a348081bbdff4eedf14 is 984us for 10 entries.
container-test-run-certificates> ca # [313738.295611] ca systemd-journald[82]: System Journal (/var/log/journal/1be3c43f6cc44a348081bbdff4eedf14) is 8M, max 4G, 3.9G free.
container-test-run-certificates> ca # [313738.311556] ca systemd[1]: Finished Flush Journal to Persistent Storage.
container-test-run-certificates> ca # [313738.311807] ca systemd[1]: Finished Create Static Device Nodes in /dev.
container-test-run-certificates> ca # [313738.312717] ca systemd[1]: Reached target Preparation for Local File Systems.
container-test-run-certificates> ca # [313738.312784] ca systemd[1]: Reached target Local File Systems.
container-test-run-certificates> ca # [313738.313319] ca systemd[1]: Listening on Boot Loader Control Service Socket.
container-test-run-certificates> ca # [313738.313354] ca systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container
container-test-run-certificates> ca # [313738.314027] ca systemd[1]: Starting Save Transient machine-id to Disk...
container-test-run-certificates> ca # [313738.314512] ca systemd[1]: Starting Create System Files and Directories...
container-test-run-certificates> ca # [313738.314532] ca systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys
container-test-run-certificates> ca # [313738.315150] ca systemd[1]: Starting Network Management...
container-test-run-certificates> ca # [313738.326457] ca systemd-tmpfiles[191]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted
container-test-run-certificates> ca # [313738.326695] ca systemd-tmpfiles[191]: fchmod() of /var/log/journal failed: Operation not permitted
container-test-run-certificates> ca # [313738.326834] ca systemd-tmpfiles[191]: fchmod() of /var/log/journal/1be3c43f6cc44a348081bbdff4eedf14 failed: Operation not permitted
container-test-run-certificates> ca # [313738.327034] ca systemd-tmpfiles[191]: fchmod() of /run/log/journal failed: Operation not permitted
container-test-run-certificates> ca # [313738.329285] ca systemd[1]: Finished Create System Files and Directories.
container-test-run-certificates> ca # [313738.330133] ca systemd[1]: Starting Rebuild Journal Catalog...
container-test-run-certificates> ca # [313738.330783] ca systemd[1]: Starting Record System Boot/Shutdown in UTMP...
container-test-run-certificates> ca # [313738.339380] ca systemd[1]: Finished Record System Boot/Shutdown in UTMP.
container-test-run-certificates> ca # [313738.343299] ca systemd[1]: Finished Rebuild Journal Catalog.
container-test-run-certificates> ca # [313738.343942] ca systemd[1]: Starting Update is Completed...
container-test-run-certificates> ca # [313738.350811] ca systemd[1]: Finished Update is Completed.
container-test-run-certificates> ca # [313738.367006] ca systemd[1]: Finished Save Transient machine-id to Disk.
container-test-run-certificates> ca # [313738.866911] ca systemd[1]: etc-machine\x2did.mount: Deactivated successfully.
container-test-run-certificates> ca # [313740.755753] ca systemd-networkd[192]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted
container-test-run-certificates> ca # [313740.755860] ca systemd-networkd[192]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted
container-test-run-certificates> ca # [313740.773568] ca systemd-networkd[192]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.
container-test-run-certificates> ca # [313740.773775] ca systemd-networkd[192]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.
container-test-run-certificates> ca # [313740.773875] ca systemd-networkd[192]: lo: Link UP
container-test-run-certificates> ca # [313740.773879] ca systemd-networkd[192]: lo: Gained carrier
container-test-run-certificates> ca # [313740.774088] ca systemd-networkd[192]: eth1: Configuring with /etc/systemd/network/40-eth1.network.
container-test-run-certificates> ca # [313740.774435] ca systemd-networkd[192]: eth1: Link UP
container-test-run-certificates> ca # [313740.774524] ca systemd[1]: Started Network Management.
container-test-run-certificates> ca # [313740.774607] ca systemd-networkd[192]: eth1: Gained carrier
container-test-run-certificates> ca # [313740.775462] ca systemd[1]: Starting Enable Persistent Storage in systemd-networkd...
container-test-run-certificates> ca # [313740.809347] ca systemd[1]: Finished Enable Persistent Storage in systemd-networkd.
container-test-run-certificates> ca # [313741.509395] ca systemd-resolved[184]: Positive Trust Anchors:
container-test-run-certificates> ca # [313741.509409] ca systemd-resolved[184]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d
container-test-run-certificates> ca # [313741.509413] ca systemd-resolved[184]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16
container-test-run-certificates> ca # [313741.509439] ca systemd-resolved[184]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test
container-test-run-certificates> ca # [313741.510216] ca systemd-resolved[184]: Using system hostname 'ca'.
container-test-run-certificates> ca # [313741.511600] ca systemd[1]: Started Network Name Resolution.
container-test-run-certificates> ca # [313741.511681] ca systemd[1]: Reached target Network.
container-test-run-certificates> ca # [313741.511725] ca systemd[1]: Reached target Network is Online.
container-test-run-certificates> ca # [313741.511760] ca systemd[1]: Reached target System Initialization.
container-test-run-certificates> ca # [313741.511967] ca systemd[1]: Started Renew ACME Certificate for ca.foo.
container-test-run-certificates> ca # [313741.511986] ca systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container
container-test-run-certificates> ca # [313741.512017] ca systemd[1]: Started Daily Cleanup of Temporary Directories.
container-test-run-certificates> ca # [313741.512030] ca systemd[1]: Reached target Timer Units.
container-test-run-certificates> ca # [313741.512137] ca systemd[1]: Listening on D-Bus System Message Bus Socket.
container-test-run-certificates> ca # [313741.512219] ca systemd[1]: Listening on Nix Daemon Socket.
container-test-run-certificates> ca # [313741.512313] ca systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.
container-test-run-certificates> ca # [313741.512342] ca systemd[1]: Reached target Socket Units.
container-test-run-certificates> ca # [313741.512371] ca systemd[1]: Reached target Basic System.
container-test-run-certificates> ca # [313741.513427] ca systemd[1]: Starting Set up the ACME certificate renewal infrastructure...
container-test-run-certificates> ca # [313741.514059] ca systemd[1]: Starting Import lastlog data into lastlog2 database...
container-test-run-certificates> ca # [313741.514085] ca systemd[1]: nginx-config-reload.service skipped, unmet condition check ConditionPathExists=/var/lib/acme/ca.foo/fullchain.pem
container-test-run-certificates> ca # [313741.514590] ca systemd[1]: Starting Name Service Cache Daemon (nsncd)...
container-test-run-certificates> ca # [313741.515181] ca systemd[1]: Starting step-ca service...
container-test-run-certificates> ca # [313741.516057] ca systemd[1]: Starting D-Bus System Message Bus...
container-test-run-certificates> ca # [313741.612121] ca systemd[1]: Finished Import lastlog data into lastlog2 database.
container-test-run-certificates> ca # [313741.733828] ca acme-setup-privileged[205]: + set -euo pipefail
container-test-run-certificates> ca # [313741.733828] ca acme-setup-privileged[205]: + cd /var/lib/acme
container-test-run-certificates> ca # [313741.733828] ca acme-setup-privileged[205]: + chmod -R u=rwX,g=,o= .lego/accounts
container-test-run-certificates> ca # [313741.734823] ca acme-setup-privileged[205]: + chown -R acme .lego/accounts
container-test-run-certificates> ca # [313741.735794] ca acme-setup-privileged[205]: + for fixpath in ca.foo .lego/ca.foo
container-test-run-certificates> ca # [313741.735794] ca acme-setup-privileged[205]: + '[' -d ca.foo ']'
container-test-run-certificates> ca # [313741.735855] ca acme-setup-privileged[205]: + for fixpath in ca.foo .lego/ca.foo
container-test-run-certificates> ca # [313741.735855] ca acme-setup-privileged[205]: + '[' -d .lego/ca.foo ']'
container-test-run-certificates> ca # [313741.832919] ca nsncd[207]: Oct 20 00:18:10.777 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"
container-test-run-certificates> ca # [313741.833038] ca systemd[1]: Started Name Service Cache Daemon (nsncd).
container-test-run-certificates> ca # [313741.833120] ca systemd[1]: Reached target Host and Network Name Lookups.
container-test-run-certificates> ca # [313741.833167] ca systemd[1]: Reached target User and Group Name Lookups.
container-test-run-certificates> ca # [313741.834190] ca systemd[1]: Starting User Login Management...
container-test-run-certificates> ca # [313741.834563] ca systemd[1]: Starting Permit User Sessions...
container-test-run-certificates> ca # [313741.871800] ca systemd[1]: Finished Permit User Sessions.
container-test-run-certificates> ca # [313741.872633] ca systemd[1]: Started Console Getty.
container-test-run-certificates> ca # [313741.872657] ca systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0
container-test-run-certificates> ca # [313741.872671] ca systemd[1]: Reached target Login Prompts.
container-test-run-certificates> ca # [313742.110677] ca dbus-broker-launch[209]: Looking up NSS user entry for 'systemd-timesync'...
container-test-run-certificates> ca # [313742.111126] ca dbus-broker-launch[209]: NSS returned no entry for 'systemd-timesync'
container-test-run-certificates> ca # [313742.111126] ca dbus-broker-launch[209]: Invalid user-name in /nix/store/m1l14hc9fjkx762yjn2ak289vb01lgkq-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"
container-test-run-certificates> ca # [313742.111567] ca systemd[1]: Started D-Bus System Message Bus.
container-test-run-certificates> ca # [313742.115757] ca dbus-broker-launch[209]: Ready
container-test-run-certificates> ca # [313742.782126] ca systemd-networkd[192]: eth1: Gained IPv6LL
container-test-run-certificates> ca # [313743.583519] ca systemd-logind[239]: New seat seat0.
container-test-run-certificates> ca # [313743.583901] ca systemd[1]: Started User Login Management.
container-test-run-certificates> ca # [313743.585298] ca systemd[1]: Starting linger-users.service...
container-test-run-certificates> ca # [313743.622140] ca systemd[1]: linger-users.service: Failed to read pids.max for control group /system.slice/linger-users.service, ignoring: No data available
container-test-run-certificates> ca # [313743.622183] ca systemd[1]: linger-users.service: Failed to read pids.max for control group /system.slice/linger-users.service, ignoring: No data available
container-test-run-certificates> ca # [313743.622210] ca systemd[1]: linger-users.service: Deactivated successfully.
container-test-run-certificates> ca # [313743.622389] ca systemd[1]: Finished linger-users.service.
container-test-run-certificates> ca # [313743.692838] ca acme-setup-start[223]: + set -euo pipefail
container-test-run-certificates> ca # [313743.692838] ca acme-setup-start[223]: + test -e ca/key.pem
container-test-run-certificates> ca # [313743.693288] ca acme-setup-start[223]: + minica --ca-key ca/key.pem --ca-cert ca/cert.pem --domains selfsigned.local
container-test-run-certificates> ca # [313743.708816] ca systemd[1]: Finished Set up the ACME certificate renewal infrastructure.
container-test-run-certificates> ca # [313743.710135] ca systemd[1]: Starting Ensure certificate for ca.foo...
container-test-run-certificates> ca # [313744.265857] ca step-ca[208]: badger 2026/10/20 00:18:13 INFO: All 0 tables opened in 0s
container-test-run-certificates> ca # [313744.267855] ca step-ca[208]: 2026/10/20 00:18:13 Building new tls configuration using step-ca x509 Signer Interface
container-test-run-certificates> ca # [313744.270233] ca step-ca[208]: 2026/10/20 00:18:13 Starting Smallstep CA/0.30.2 (linux/amd64)
container-test-run-certificates> ca # [313744.270233] ca step-ca[208]: 2026/10/20 00:18:13 Documentation: https://u.step.sm/docs/ca
container-test-run-certificates> ca # [313744.270233] ca step-ca[208]: 2026/10/20 00:18:13 Community Discord: https://u.step.sm/discord
container-test-run-certificates> ca # [313744.270233] ca step-ca[208]: 2026/10/20 00:18:13 Config file: /etc/smallstep/ca.json
container-test-run-certificates> ca # [313744.270233] ca step-ca[208]: 2026/10/20 00:18:13 The primary server URL is https://ca.foo:1443
container-test-run-certificates> ca # [313744.270233] ca step-ca[208]: 2026/10/20 00:18:13 Root certificates are available at https://ca.foo:1443/roots.pem
container-test-run-certificates> ca # [313744.270355] ca step-ca[208]: 2026/10/20 00:18:13 X.509 Root Fingerprint: e0dc91dbbba9ec4729f287bb59f7a9d3e8c19daf237c39a59b1f2bd390fbc386
container-test-run-certificates> ca # [313744.270378] ca systemd[1]: Started step-ca service.
container-test-run-certificates> ca # [313744.270422] ca step-ca[208]: 2026/10/20 00:18:13 Serving HTTPS on 0.0.0.0:1443 ...
container-test-run-certificates> ca # [313745.826588] ca acme-ca.foo-start[260]: Waiting to acquire lock in /run/acme/
container-test-run-certificates> ca # [313745.828327] ca acme-ca.foo-start[260]: + '[' -e out/acme-success ']'
container-test-run-certificates> ca # [313745.828361] ca acme-ca.foo-start[260]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=ca.foo --ip-addresses=
container-test-run-certificates> ca # [313745.832970] ca acme-ca.foo-start[286]: + cd ca.foo
container-test-run-certificates> ca # [313745.833243] ca acme-ca.foo-start[286]: + cp -vp cert.pem ../out/cert.pem
container-test-run-certificates> ca # [313745.834559] ca acme-ca.foo-start[287]: 'cert.pem' -> '../out/cert.pem'
container-test-run-certificates> ca # [313745.834869] ca acme-ca.foo-start[286]: + cp -vp key.pem ../out/key.pem
container-test-run-certificates> ca # [313745.835643] ca acme-ca.foo-start[286]: 'key.pem' -> '../out/key.pem'
container-test-run-certificates> ca # [313745.835792] ca acme-ca.foo-start[260]: + cat out/cert.pem ca/cert.pem
container-test-run-certificates> ca # [313745.836660] ca acme-ca.foo-start[260]: + cp ca/cert.pem out/chain.pem
container-test-run-certificates> ca # [313745.837506] ca acme-ca.foo-start[260]: + cat out/key.pem out/fullchain.pem
container-test-run-certificates> ca # [313745.838317] ca acme-ca.foo-start[260]: + for fixpath in out certificates
container-test-run-certificates> ca # [313745.838317] ca acme-ca.foo-start[260]: + '[' -d out ']'
container-test-run-certificates> ca # [313745.838367] ca acme-ca.foo-start[260]: + chmod -R u=rwX,g=rX,o= out
container-test-run-certificates> ca # [313745.839134] ca acme-ca.foo-start[260]: + chown -R acme:nginx out
container-test-run-certificates> ca # [313745.840694] ca acme-ca.foo-start[260]: + for fixpath in out certificates
container-test-run-certificates> ca # [313745.840721] ca acme-ca.foo-start[260]: + '[' -d certificates ']'
container-test-run-certificates> ca # [313745.843051] ca systemd[1]: Finished Ensure certificate for ca.foo.
container-test-run-certificates> ca # [313745.844170] ca systemd[1]: Starting Nginx Web Server...
container-test-run-certificates> ca: still waiting for container 'ca' to reach ready state...
container-test-run-certificates> ca # [313747.115392] ca nginx-pre-start[298]: nginx: the configuration file /nix/store/9pmhkcpdsnh2xw1nyc4z81kirzbryw7m-nginx.conf syntax is ok
container-test-run-certificates> ca # [313747.115804] ca nginx-pre-start[298]: nginx: configuration file /nix/store/9pmhkcpdsnh2xw1nyc4z81kirzbryw7m-nginx.conf test is successful
container-test-run-certificates> ca # [313747.119261] ca systemd[1]: Started Nginx Web Server.
container-test-run-certificates> ca # [313747.119637] ca systemd[1]: Reached target Multi-User System.
container-test-run-certificates> ca # [313747.120637] ca systemd[1]: Starting Order (and renew) ACME certificate for ca.foo...
container-test-run-certificates> ca # [313748.913503] ca acme-order-renew-ca.foo-start[301]: Waiting to acquire lock in /run/acme/
container-test-run-certificates> ca # [313748.915570] ca acme-order-renew-ca.foo-start[301]: + set -euo pipefail
container-test-run-certificates> ca # [313748.915655] ca acme-order-renew-ca.foo-start[301]: + exec
container-test-run-certificates> ca # [313748.915655] ca acme-order-renew-ca.foo-start[301]: + /nix/store/83mz0b56df302i4bsxnkqsr03r2gm7ph-flock-0.4.0/bin/flock 11
container-test-run-certificates> ca # [313748.916487] ca acme-order-renew-ca.foo-start[312]: ++ find accounts -path '*/keys/*.key' -print -quit
container-test-run-certificates> ca # [313748.918023] ca acme-order-renew-ca.foo-start[301]: + '[' -n '' ']'
container-test-run-certificates> ca # [313748.918065] ca acme-order-renew-ca.foo-start[301]: + exec
container-test-run-certificates> ca # [313748.918089] ca acme-order-renew-ca.foo-start[301]: + '[' -e certificates/ca.foo.key ']'
container-test-run-certificates> ca # [313748.918111] ca acme-order-renew-ca.foo-start[301]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo:1443/acme/acme/directory --key-type ec256 -d ca.foo --no-random-sleep --renew-force --ari-disable --force-cert-domains
container-test-run-certificates> ca # [313748.932929] ca acme-order-renew-ca.foo-start[313]: 2026-10-20T00:18:17.877743414Z INFO  Private key saved. filepath=accounts/ca.foo_1443/none@none.tld/none@none.tld.key
container-test-run-certificates> ca # [313748.947501] ca step-ca[208]: time="2026-10-20T00:18:17Z" level=info duration="127.72µs" duration-ns=127720 fields.time="2026-10-20T00:18:17Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=ba45a1e4-8123-4598-b996-0324a6bd5665 response="{\"newNonce\":\"https://ca.foo:1443/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo:1443/acme/acme/new-account\",\"newOrder\":\"https://ca.foo:1443/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo:1443/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo:1443/acme/acme/key-change\"}" size=277 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; amd64)" user-id=
container-test-run-certificates> ca # [313748.947908] ca acme-order-renew-ca.foo-start[313]: 2026-10-20T00:18:17.892565593Z INFO  Registering the account. email=none@none.tld
container-test-run-certificates> ca # [313748.955073] ca step-ca[208]: time="2026-10-20T00:18:17Z" level=info duration=7.19405ms duration-ns=7194050 fields.time="2026-10-20T00:18:17Z" method=HEAD name=ca nonce=VGRRRnZ2dkxCNHpreWhFbnR6VDdPTmZRSWZFS3NMeXM path=/acme/acme/new-nonce protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=de1ec265-0431-4875-849f-7de36a435831 size=0 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; amd64)" user-id=
container-test-run-certificates> ca # [313748.956611] ca step-ca[208]: time="2026-10-20T00:18:17Z" level=info duration=1.203688ms duration-ns=1203688 fields.time="2026-10-20T00:18:17Z" method=POST name=ca nonce=NUNCZ2tYNWVFU3REaVZ1VXdrTGxtSVZ1UGxqOHkzSHM path=/acme/acme/new-account protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=8967f31f-718a-4ae5-ae19-a2261152d297 response="{\"contact\":[\"mailto:none@none.tld\"],\"status\":\"valid\",\"orders\":\"https://ca.foo:1443/acme/acme/account/ufQMUpN0S6gjt0PfvOtL5L6tKtcadMN3/orders\"}" size=143 status=201 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; amd64)" user-id=
container-test-run-certificates> ca # [313748.956801] ca acme-order-renew-ca.foo-start[313]: 2026-10-20T00:18:17.901639735Z WARN  !!!! HEADS UP !!!!
container-test-run-certificates> ca # [313748.956801] ca acme-order-renew-ca.foo-start[313]: Your account credentials have been saved in your
container-test-run-certificates> ca # [313748.956801] ca acme-order-renew-ca.foo-start[313]: configuration directory at "accounts".
container-test-run-certificates> ca # [313748.956801] ca acme-order-renew-ca.foo-start[313]: You should make a secure backup of this folder now. This
container-test-run-certificates> ca # [313748.956801] ca acme-order-renew-ca.foo-start[313]: configuration directory will also contain private keys
container-test-run-certificates> ca # [313748.956801] ca acme-order-renew-ca.foo-start[313]: generated by lego and certificates obtained from the ACME
container-test-run-certificates> ca # [313748.956801] ca acme-order-renew-ca.foo-start[313]: server. Making regular backups of this folder is ideal.
container-test-run-certificates> ca # [313748.957713] ca acme-order-renew-ca.foo-start[313]: 2026-10-20T00:18:17.901722461Z INFO  Obtaining bundled SAN certificate. domains=ca.foo
container-test-run-certificates> ca # [313748.958633] ca step-ca[208]: time="2026-10-20T00:18:17Z" level=info duration=1.518209ms duration-ns=1518209 fields.time="2026-10-20T00:18:17Z" method=POST name=ca nonce=Y0R2bmNSMVRFelBsWENHSzUyWmQxQnQyV3BSMEozaEw path=/acme/acme/new-order protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=b70dcc43-bf90-4bcc-b9d8-c658352c60e1 response="{\"id\":\"DdH5QAvf75v4fOoDk4ZsQa9PEN2pfalK\",\"status\":\"pending\",\"expires\":\"2026-10-21T00:18:17Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"ca.foo\"}],\"notBefore\":\"2026-10-20T00:17:17Z\",\"notAfter\":\"2027-01-18T00:18:17Z\",\"authorizations\":[\"https://ca.foo:1443/acme/acme/authz/XA5bzN2A9w6aA4hsnirG7YJzhkeDe0uh\"],\"finalize\":\"https://ca.foo:1443/acme/acme/order/DdH5QAvf75v4fOoDk4ZsQa9PEN2pfalK/finalize\"}" size=392 status=201 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; amd64)" user-id=
container-test-run-certificates> ca # [313749.018796] ca step-ca[208]: time="2026-10-20T00:18:17Z" level=info duration=3.494933ms duration-ns=3494933 fields.time="2026-10-20T00:18:17Z" method=POST name=ca nonce=N0o1VnR1UHRUeWtPQWpMdnplM0pJWnVvSnZaVVY0ZzI path=/acme/acme/authz/XA5bzN2A9w6aA4hsnirG7YJzhkeDe0uh protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=d0c8b786-e685-4992-99aa-4d739857fd9f response="{\"identifier\":{\"type\":\"dns\",\"value\":\"ca.foo\"},\"status\":\"pending\",\"challenges\":[{\"type\":\"dns-01\",\"status\":\"pending\",\"token\":\"oz79TBoh3UdUBI9PTh4j5HRylPx79ySY\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/XA5bzN2A9w6aA4hsnirG7YJzhkeDe0uh/377OqH9CD0dx3niTUtsm6p4X7kmff44V\"},{\"type\":\"http-01\",\"status\":\"pending\",\"token\":\"oz79TBoh3UdUBI9PTh4j5HRylPx79ySY\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/XA5bzN2A9w6aA4hsnirG7YJzhkeDe0uh/h7eB18SNpF5SOq03kxqM0PsVV42Z0wWo\"},{\"type\":\"tls-alpn-01\",\"status\":\"pending\",\"token\":\"oz79TBoh3UdUBI9PTh4j5HRylPx79ySY\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/XA5bzN2A9w6aA4hsnirG7YJzhkeDe0uh/ZuEtvZRWiLEOwfO6UqthnrnNHQrBksBn\"}],\"wildcard\":false,\"expires\":\"2026-10-21T00:18:17Z\"}" size=719 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; amd64)" user-id=
container-test-run-certificates> ca # [313749.019037] ca acme-order-renew-ca.foo-start[313]: 2026-10-20T00:18:17.963869950Z INFO  Use solver. domain=ca.foo type=http-01
container-test-run-certificates> ca # [313749.019072] ca acme-order-renew-ca.foo-start[313]: 2026-10-20T00:18:17.963891060Z INFO  http01: Trying to solve HTTP-01. domain=ca.foo
container-test-run-certificates> ca # [313749.021117] ca step-ca[208]: time="2026-10-20T00:18:17Z" level=info duration=1.786866ms duration-ns=1786866 fields.time="2026-10-20T00:18:17Z" method=POST name=ca nonce=R0R0U0txczNRN0ZFb1JIc1cxOW1hdUFaQVpKVktOaGE path=/acme/acme/challenge/XA5bzN2A9w6aA4hsnirG7YJzhkeDe0uh/h7eB18SNpF5SOq03kxqM0PsVV42Z0wWo protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=5b90d5a6-67b1-4540-9649-e941e79b34a3 response="{\"type\":\"http-01\",\"status\":\"valid\",\"token\":\"oz79TBoh3UdUBI9PTh4j5HRylPx79ySY\",\"validated\":\"2026-10-20T00:18:17Z\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/XA5bzN2A9w6aA4hsnirG7YJzhkeDe0uh/h7eB18SNpF5SOq03kxqM0PsVV42Z0wWo\"}" size=228 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; amd64)" user-id=
container-test-run-certificates> ca # [313749.021244] ca acme-order-renew-ca.foo-start[313]: 2026-10-20T00:18:17.966084491Z INFO  The server validated our request. domain=ca.foo
container-test-run-certificates> ca # [313749.021276] ca acme-order-renew-ca.foo-start[313]: 2026-10-20T00:18:17.966122573Z INFO  Validations succeeded; requesting certificates. domains=ca.foo
container-test-run-certificates> ca # [313749.023968] ca step-ca[208]: time="2026-10-20T00:18:17Z" level=info duration=2.357551ms duration-ns=2357551 fields.time="2026-10-20T00:18:17Z" method=POST name=ca nonce=ZnluREN1TFJUbzZWOVJnaHVzeG13ZnltMW5mY3RHcEY path=/acme/acme/order/DdH5QAvf75v4fOoDk4ZsQa9PEN2pfalK/finalize protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=ff7d8b4a-df0d-4fa2-a38e-60ff2f7f54a8 response="{\"id\":\"DdH5QAvf75v4fOoDk4ZsQa9PEN2pfalK\",\"status\":\"valid\",\"expires\":\"2026-10-21T00:18:17Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"ca.foo\"}],\"notBefore\":\"2026-10-20T00:17:17Z\",\"notAfter\":\"2027-01-18T00:18:17Z\",\"authorizations\":[\"https://ca.foo:1443/acme/acme/authz/XA5bzN2A9w6aA4hsnirG7YJzhkeDe0uh\"],\"finalize\":\"https://ca.foo:1443/acme/acme/order/DdH5QAvf75v4fOoDk4ZsQa9PEN2pfalK/finalize\",\"certificate\":\"https://ca.foo:1443/acme/acme/certificate/fNVGIbF0tzwPx8Fy56aIZ5zDb2K3TfcR\"}" size=481 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; amd64)" user-id=
container-test-run-certificates> ca # [313749.024779] ca step-ca[208]: time="2026-10-20T00:18:17Z" level=info certificate="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" duration="539.276µs" duration-ns=539276 fields.time="2026-10-20T00:18:17Z" issuer="Clan Intermediate CA" method=POST name=ca nonce=aDYyUXB1V0REdlM4ZlhrSm1tRDVVN2g4MlU4aWlPQlY path=/acme/acme/certificate/fNVGIbF0tzwPx8Fy56aIZ5zDb2K3TfcR protocol=HTTP/1.1 provisioner=acme public-key="ECDSA P-256" referer= remote-address="2001:db8:1::1" request-id=22a5996b-a855-496c-b69e-ddc98b68414d sans="map[dns:[ca.foo]]" serial=134638804066663868794807972010724945030 size=1344 status=200 subject=ca.foo user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; amd64)" user-id= valid-from="2026-10-20T00:17:17Z" valid-to="2027-01-18T00:18:17Z"
container-test-run-certificates> ca # [313749.024893] ca acme-order-renew-ca.foo-start[313]: 2026-10-20T00:18:17.969737682Z INFO  Server responded with a certificate. domains=ca.foo
container-test-run-certificates> ca # [313749.024929] ca acme-order-renew-ca.foo-start[313]: 2026-10-20T00:18:17.969776405Z INFO  Writing file. filepath=certificates/ca.foo.crt
container-test-run-certificates> ca # [313749.024981] ca acme-order-renew-ca.foo-start[313]: 2026-10-20T00:18:17.969827742Z INFO  Writing file. filepath=certificates/ca.foo.issuer.crt
container-test-run-certificates> ca # [313749.025010] ca acme-order-renew-ca.foo-start[313]: 2026-10-20T00:18:17.969857047Z INFO  Writing file. filepath=certificates/ca.foo.key
container-test-run-certificates> ca # [313749.025063] ca acme-order-renew-ca.foo-start[313]: 2026-10-20T00:18:17.969909886Z INFO  Writing file. filepath=certificates/ca.foo.json
container-test-run-certificates> ca # [313749.028487] ca acme-order-renew-ca.foo-start[301]: + touch out/acme-success
container-test-run-certificates> ca # [313749.029598] ca acme-order-renew-ca.foo-start[301]: + cmp -s certificates/ca.foo.crt out/fullchain.pem
container-test-run-certificates> ca # [313749.030338] ca acme-order-renew-ca.foo-start[301]: + touch out/renewed
container-test-run-certificates> ca # [313749.031213] ca acme-order-renew-ca.foo-start[301]: + echo Installing new certificate
container-test-run-certificates> ca # [313749.031213] ca acme-order-renew-ca.foo-start[301]: Installing new certificate
container-test-run-certificates> ca # [313749.031277] ca acme-order-renew-ca.foo-start[301]: + cp -vp certificates/ca.foo.crt out/fullchain.pem
container-test-run-certificates> ca # [313749.032063] ca acme-order-renew-ca.foo-start[334]: 'certificates/ca.foo.crt' -> 'out/fullchain.pem'
container-test-run-certificates> ca # [313749.032219] ca acme-order-renew-ca.foo-start[301]: + cp -vp certificates/ca.foo.key out/key.pem
container-test-run-certificates> ca # [313749.033052] ca acme-order-renew-ca.foo-start[335]: 'certificates/ca.foo.key' -> 'out/key.pem'
container-test-run-certificates> ca # [313749.033219] ca acme-order-renew-ca.foo-start[301]: + cp -vp certificates/ca.foo.issuer.crt out/chain.pem
container-test-run-certificates> ca # [313749.034205] ca acme-order-renew-ca.foo-start[336]: 'certificates/ca.foo.issuer.crt' -> 'out/chain.pem'
container-test-run-certificates> ca # [313749.034343] ca acme-order-renew-ca.foo-start[301]: + ln -sf fullchain.pem out/cert.pem
container-test-run-certificates> ca # [313749.036876] ca acme-order-renew-ca.foo-start[301]: + cat out/key.pem out/fullchain.pem
container-test-run-certificates> ca # [313749.037804] ca acme-order-renew-ca.foo-start[301]: + for fixpath in out certificates
container-test-run-certificates> ca # [313749.037804] ca acme-order-renew-ca.foo-start[301]: + '[' -d out ']'
container-test-run-certificates> ca # [313749.037838] ca acme-order-renew-ca.foo-start[301]: + chmod -R u=rwX,g=rX,o= out
container-test-run-certificates> ca # [313749.038647] ca acme-order-renew-ca.foo-start[301]: + chown -R acme:nginx out
container-test-run-certificates> ca # [313749.040189] ca acme-order-renew-ca.foo-start[301]: + for fixpath in out certificates
container-test-run-certificates> ca # [313749.040189] ca acme-order-renew-ca.foo-start[301]: + '[' -d certificates ']'
container-test-run-certificates> ca # [313749.040231] ca acme-order-renew-ca.foo-start[301]: + chmod -R u=rwX,g=rX,o= certificates
container-test-run-certificates> ca # [313749.041007] ca acme-order-renew-ca.foo-start[301]: + chown -R acme:nginx certificates
container-test-run-certificates> ca # [313749.042337] ca acme-order-renew-ca.foo-start[301]: + chmod -R u=rwX,g=,o= accounts/.
container-test-run-certificates> ca # [313749.241806] ca systemd[1]: Reloading Nginx Web Server...
container-test-run-certificates> ca # [313749.249037] ca systemd[1]: acme-order-renew-ca.foo.service: Failed to read pids.max for control group /system.slice/acme-order-renew-ca.foo.service, ignoring: No data available
container-test-run-certificates> ca # [313749.249081] ca systemd[1]: acme-order-renew-ca.foo.service: Failed to read pids.max for control group /system.slice/acme-order-renew-ca.foo.service, ignoring: No data available
container-test-run-certificates> ca # [313749.249104] ca systemd[1]: acme-order-renew-ca.foo.service: Deactivated successfully.
container-test-run-certificates> ca # [313749.262177] ca systemd[1]: Finished Order (and renew) ACME certificate for ca.foo.
container-test-run-certificates> ca # [313749.262403] ca systemd[1]: acme-order-renew-ca.foo.service: Consumed 1.013s CPU time over 2.128s wall clock time.
container-test-run-certificates> ca # [313751.414704] ca nginx[352]: nginx: the configuration file /nix/store/9pmhkcpdsnh2xw1nyc4z81kirzbryw7m-nginx.conf syntax is ok
container-test-run-certificates> ca # [313751.415021] ca nginx[352]: nginx: configuration file /nix/store/9pmhkcpdsnh2xw1nyc4z81kirzbryw7m-nginx.conf test is successful
container-test-run-certificates> ca: (finished: waiting for unit step-ca.service, in 17.15 seconds)
container-test-run-certificates> ca: waiting for file '/var/lib/acme/ca.foo/fullchain.pem'
container-test-run-certificates> ca: (finished: waiting for file '/var/lib/acme/ca.foo/fullchain.pem', in 0.00 seconds)
container-test-run-certificates> ca: must succeed: systemctl restart nginx.service
container-test-run-certificates> ca # [313754.012279] ca systemd[1]: Reloaded Nginx Web Server.
container-test-run-certificates> ca # [313754.012601] ca systemd[1]: Startup finished in 16.646s.
container-test-run-certificates> ca # [313754.082144] ca systemd[1]: Stopping Nginx Web Server...
container-test-run-certificates> ca # [313754.123578] ca systemd[1]: nginx.service: Failed to read pids.max for control group /system.slice/nginx.service, ignoring: No data available
container-test-run-certificates> ca # [313754.123607] ca systemd[1]: nginx.service: Deactivated successfully.
container-test-run-certificates> ca # [313754.123777] ca systemd[1]: Stopped Nginx Web Server.
container-test-run-certificates> ca # [313754.123797] ca systemd[1]: nginx.service: Consumed 3.608s CPU time over 8.279s wall clock time.
container-test-run-certificates> ca # [313754.125905] ca systemd[1]: Starting Nginx Web Server...
container-test-run-certificates> ca: (finished: must succeed: systemctl restart nginx.service, in 1.96 seconds)
container-test-run-certificates> server: systemd-nspawn running (pid 446)
container-test-run-certificates> server: Waiting for journal at /build/vm-state-server/var/log/journal...
container-test-run-certificates> client: systemd-nspawn running (pid 449)
container-test-run-certificates> client: Waiting for journal at /build/vm-state-client/var/log/journal...
container-test-run-certificates> server: waiting for file '/var/lib/acme/test.foo/fullchain.pem'
container-test-run-certificates> nixos-nspawn(client): TAP vde-tap1 not found; container will be isolated from VDE
container-test-run-certificates> nixos-nspawn(client): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.
container-test-run-certificates> nixos-nspawn(server): TAP vde-tap1 not found; container will be isolated from VDE
container-test-run-certificates> nixos-nspawn(server): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.
container-test-run-certificates> Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.
container-test-run-certificates> ░ Spawning container client on /build/vm-state-client.
container-test-run-certificates> Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.
container-test-run-certificates> ░ Spawning container server on /build/vm-state-server.
container-test-run-certificates> ca # [313756.025372] ca nginx-pre-start[376]: nginx: the configuration file /nix/store/9pmhkcpdsnh2xw1nyc4z81kirzbryw7m-nginx.conf syntax is ok
container-test-run-certificates> ca # [313756.025715] ca nginx-pre-start[376]: nginx: configuration file /nix/store/9pmhkcpdsnh2xw1nyc4z81kirzbryw7m-nginx.conf test is successful
container-test-run-certificates> ca # [313756.030427] ca systemd[1]: Started Nginx Web Server.
container-test-run-certificates> server # [313756.701370] server systemd-journald[73]: Journal started
container-test-run-certificates> server # [313756.701421] server systemd-journald[73]: Runtime Journal (/run/log/journal/cf7289f2431e40b7a9c7281c9c3f3d08) is 8M, max 3.7G, 3.7G free.
container-test-run-certificates> server # [313756.717133] server systemd[1]: Finished Apply Kernel Variables.
container-test-run-certificates> server # [313756.732846] server systemd[1]: Finished Create Static Device Nodes in /dev gracefully.
container-test-run-certificates> server # [313756.749440] server systemd[1]: Starting Flush Journal to Persistent Storage...
container-test-run-certificates> server # [313756.750029] server systemd[1]: Starting Network Name Resolution...
container-test-run-certificates> server # [313756.750460] server systemd[1]: Starting Create Static Device Nodes in /dev...
container-test-run-certificates> server # [313756.781763] server systemd-journald[73]: Time spent on flushing to /var/log/journal/cf7289f2431e40b7a9c7281c9c3f3d08 is 1.362ms for 7 entries.
container-test-run-certificates> server # [313756.781763] server systemd-journald[73]: System Journal (/var/log/journal/cf7289f2431e40b7a9c7281c9c3f3d08) is 8M, max 4G, 3.9G free.
container-test-run-certificates> server # [313756.846406] server systemd[1]: Finished Firewall.
container-test-run-certificates> server # [313756.846654] server systemd[1]: Finished Flush Journal to Persistent Storage.
container-test-run-certificates> server # [313756.848180] server systemd[1]: Finished Create Static Device Nodes in /dev.
container-test-run-certificates> server # [313756.850906] server systemd[1]: Reached target Preparation for Local File Systems.
container-test-run-certificates> server # [313756.852130] server systemd[1]: Reached target Local File Systems.
container-test-run-certificates> server # [313756.852180] server systemd[1]: Reached target Preparation for Network.
container-test-run-certificates> server # [313756.852780] server systemd[1]: Listening on Boot Loader Control Service Socket.
container-test-run-certificates> server # [313756.852948] server systemd[1]: Listening on Network Management Resolve Hook Socket.
container-test-run-certificates> server # [313756.852982] server systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container
container-test-run-certificates> server # [313756.854222] server systemd[1]: Starting Save Transient machine-id to Disk...
container-test-run-certificates> server # [313756.854706] server systemd[1]: Starting Create System Files and Directories...
container-test-run-certificates> server # [313756.854727] server systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys
container-test-run-certificates> server # [313756.855340] server systemd[1]: Starting Network Management...
container-test-run-certificates> server # [313756.900132] server systemd-tmpfiles[182]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted
container-test-run-certificates> server # [313756.900295] server systemd-tmpfiles[182]: fchmod() of /var/log/journal failed: Operation not permitted
container-test-run-certificates> server # [313756.900406] server systemd-tmpfiles[182]: fchmod() of /var/log/journal/cf7289f2431e40b7a9c7281c9c3f3d08 failed: Operation not permitted
container-test-run-certificates> server # [313756.900564] server systemd-tmpfiles[182]: fchmod() of /run/log/journal failed: Operation not permitted
container-test-run-certificates> server # [313756.902300] server systemd[1]: Finished Create System Files and Directories.
container-test-run-certificates> server # [313756.904016] server systemd[1]: Starting Rebuild Journal Catalog...
container-test-run-certificates> server # [313756.904494] server systemd[1]: Starting Record System Boot/Shutdown in UTMP...
container-test-run-certificates> server # [313756.910913] server systemd[1]: Finished Record System Boot/Shutdown in UTMP.
container-test-run-certificates> server # [313756.917903] server systemd[1]: Finished Rebuild Journal Catalog.
container-test-run-certificates> server # [313756.918779] server systemd[1]: Starting Update is Completed...
container-test-run-certificates> server # [313756.918971] server systemd[1]: Finished Save Transient machine-id to Disk.
container-test-run-certificates> server # [313756.924508] server systemd[1]: Finished Update is Completed.
container-test-run-certificates> client # [313756.707564] client systemd-journald[73]: Journal started
container-test-run-certificates> client # [313756.707603] client systemd-journald[73]: Runtime Journal (/run/log/journal/8cecc0f83ee84fce9dae53dedb061e16) is 8M, max 3.7G, 3.7G free.
container-test-run-certificates> client # [313756.720453] client systemd[1]: Finished Apply Kernel Variables.
container-test-run-certificates> client # [313756.735541] client systemd[1]: Finished Create Static Device Nodes in /dev gracefully.
container-test-run-certificates> client # [313756.751301] client systemd[1]: Starting Flush Journal to Persistent Storage...
container-test-run-certificates> client # [313756.751917] client systemd[1]: Starting Network Name Resolution...
container-test-run-certificates> client # [313756.752335] client systemd[1]: Starting Create Static Device Nodes in /dev...
container-test-run-certificates> client # [313756.781792] client systemd-journald[73]: Time spent on flushing to /var/log/journal/8cecc0f83ee84fce9dae53dedb061e16 is 1.511ms for 7 entries.
container-test-run-certificates> client # [313756.781792] client systemd-journald[73]: System Journal (/var/log/journal/8cecc0f83ee84fce9dae53dedb061e16) is 8M, max 4G, 3.9G free.
container-test-run-certificates> client # [313756.846406] client systemd[1]: Finished Firewall.
container-test-run-certificates> client # [313756.846661] client systemd[1]: Finished Flush Journal to Persistent Storage.
container-test-run-certificates> client # [313756.851165] client systemd[1]: Finished Create Static Device Nodes in /dev.
container-test-run-certificates> client # [313756.853501] client systemd[1]: Reached target Preparation for Local File Systems.
container-test-run-certificates> client # [313756.853583] client systemd[1]: Reached target Local File Systems.
container-test-run-certificates> client # [313756.853627] client systemd[1]: Reached target Preparation for Network.
container-test-run-certificates> client # [313756.854229] client systemd[1]: Listening on Boot Loader Control Service Socket.
container-test-run-certificates> client # [313756.854382] client systemd[1]: Listening on Network Management Resolve Hook Socket.
container-test-run-certificates> client # [313756.854414] client systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container
container-test-run-certificates> client # [313756.855195] client systemd[1]: Starting Save Transient machine-id to Disk...
container-test-run-certificates> client # [313756.855621] client systemd[1]: Starting Create System Files and Directories...
container-test-run-certificates> client # [313756.855644] client systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys
container-test-run-certificates> client # [313756.856226] client systemd[1]: Starting Network Management...
container-test-run-certificates> client # [313756.901276] client systemd-tmpfiles[178]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted
container-test-run-certificates> client # [313756.901455] client systemd-tmpfiles[178]: fchmod() of /var/log/journal failed: Operation not permitted
container-test-run-certificates> client # [313756.901592] client systemd-tmpfiles[178]: fchmod() of /var/log/journal/8cecc0f83ee84fce9dae53dedb061e16 failed: Operation not permitted
container-test-run-certificates> client # [313756.901791] client systemd-tmpfiles[178]: fchmod() of /run/log/journal failed: Operation not permitted
container-test-run-certificates> client # [313756.911381] client systemd[1]: Finished Create System Files and Directories.
container-test-run-certificates> client # [313756.912595] client systemd[1]: Starting Rebuild Journal Catalog...
container-test-run-certificates> client # [313756.913079] client systemd[1]: Starting Record System Boot/Shutdown in UTMP...
container-test-run-certificates> client # [313756.917836] client systemd[1]: Finished Save Transient machine-id to Disk.
container-test-run-certificates> client # [313756.920790] client systemd[1]: Finished Record System Boot/Shutdown in UTMP.
container-test-run-certificates> client # [313756.927597] client systemd[1]: Finished Rebuild Journal Catalog.
container-test-run-certificates> client # [313756.928226] client systemd[1]: Starting Update is Completed...
container-test-run-certificates> client # [313756.933409] client systemd[1]: Finished Update is Completed.
container-test-run-certificates> server # [313757.692045] server systemd[1]: etc-machine\x2did.mount: Deactivated successfully.
container-test-run-certificates> client # [313757.698538] client systemd[1]: etc-machine\x2did.mount: Deactivated successfully.
container-test-run-certificates> server # [313758.029571] server systemd-networkd[183]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted
container-test-run-certificates> server # [313758.029656] server systemd-networkd[183]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted
container-test-run-certificates> server # [313758.039905] server systemd-networkd[183]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.
container-test-run-certificates> server # [313758.040063] server systemd-networkd[183]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.
container-test-run-certificates> server # [313758.040147] server systemd-networkd[183]: lo: Link UP
container-test-run-certificates> server # [313758.040150] server systemd-networkd[183]: lo: Gained carrier
container-test-run-certificates> server # [313758.040301] server systemd-networkd[183]: eth1: Configuring with /etc/systemd/network/40-eth1.network.
container-test-run-certificates> server # [313758.040582] server systemd-networkd[183]: eth1: Link UP
container-test-run-certificates> server # [313758.040626] server systemd[1]: Started Network Management.
container-test-run-certificates> server # [313758.040783] server systemd-networkd[183]: eth1: Gained carrier
container-test-run-certificates> server # [313758.041319] server systemd[1]: Starting Enable Persistent Storage in systemd-networkd...
container-test-run-certificates> server # [313758.064499] server systemd[1]: Finished Enable Persistent Storage in systemd-networkd.
container-test-run-certificates> client # [313758.034417] client systemd-networkd[179]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted
container-test-run-certificates> client # [313758.034506] client systemd-networkd[179]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted
container-test-run-certificates> client # [313758.042142] client systemd-networkd[179]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.
container-test-run-certificates> client # [313758.042288] client systemd-networkd[179]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.
container-test-run-certificates> client # [313758.042356] client systemd-networkd[179]: lo: Link UP
container-test-run-certificates> client # [313758.042358] client systemd-networkd[179]: lo: Gained carrier
container-test-run-certificates> client # [313758.042478] client systemd-networkd[179]: eth1: Configuring with /etc/systemd/network/40-eth1.network.
container-test-run-certificates> client # [313758.042728] client systemd-networkd[179]: eth1: Link UP
container-test-run-certificates> client # [313758.042828] client systemd[1]: Started Network Management.
container-test-run-certificates> client # [313758.042875] client systemd-networkd[179]: eth1: Gained carrier
container-test-run-certificates> client # [313758.043632] client systemd[1]: Starting Enable Persistent Storage in systemd-networkd...
container-test-run-certificates> client # [313758.062650] client systemd[1]: Finished Enable Persistent Storage in systemd-networkd.
container-test-run-certificates> server # [313758.492251] server systemd-resolved[124]: Positive Trust Anchors:
container-test-run-certificates> server # [313758.492262] server systemd-resolved[124]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d
container-test-run-certificates> server # [313758.492264] server systemd-resolved[124]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16
container-test-run-certificates> server # [313758.492282] server systemd-resolved[124]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test
container-test-run-certificates> server # [313758.492844] server systemd-resolved[124]: Using system hostname 'server'.
container-test-run-certificates> server # [313758.493899] server systemd[1]: Started Network Name Resolution.
container-test-run-certificates> server # [313758.493964] server systemd[1]: Reached target Network.
container-test-run-certificates> server # [313758.493997] server systemd[1]: Reached target Network is Online.
container-test-run-certificates> server # [313758.494030] server systemd[1]: Reached target System Initialization.
container-test-run-certificates> server # [313758.494172] server systemd[1]: Started Renew ACME Certificate for test.foo.
container-test-run-certificates> server # [313758.494189] server systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container
container-test-run-certificates> server # [313758.494202] server systemd[1]: Started Daily Cleanup of Temporary Directories.
container-test-run-certificates> server # [313758.494213] server systemd[1]: Reached target Timer Units.
container-test-run-certificates> server # [313758.494293] server systemd[1]: Listening on D-Bus System Message Bus Socket.
container-test-run-certificates> server # [313758.494352] server systemd[1]: Listening on Nix Daemon Socket.
container-test-run-certificates> server # [313758.494420] server systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.
container-test-run-certificates> server # [313758.494438] server systemd[1]: Reached target Socket Units.
container-test-run-certificates> server # [313758.494459] server systemd[1]: Reached target Basic System.
container-test-run-certificates> server # [313758.495220] server systemd[1]: Starting Set up the ACME certificate renewal infrastructure...
container-test-run-certificates> server # [313758.495653] server systemd[1]: Starting Import lastlog data into lastlog2 database...
container-test-run-certificates> server # [313758.495671] server systemd[1]: nginx-config-reload.service skipped, unmet condition check ConditionPathExists=/var/lib/acme/test.foo/fullchain.pem
container-test-run-certificates> server # [313758.496044] server systemd[1]: Starting Name Service Cache Daemon (nsncd)...
container-test-run-certificates> server # [313758.496661] server systemd[1]: Starting D-Bus System Message Bus...
container-test-run-certificates> server # [313758.527141] server systemd[1]: Finished Import lastlog data into lastlog2 database.
container-test-run-certificates> server # [313758.732689] server acme-setup-privileged[196]: + set -euo pipefail
container-test-run-certificates> server # [313758.732689] server acme-setup-privileged[196]: + cd /var/lib/acme
container-test-run-certificates> server # [313758.732996] server acme-setup-privileged[196]: + chmod -R u=rwX,g=,o= .lego/accounts
container-test-run-certificates> server # [313758.733880] server acme-setup-privileged[196]: + chown -R acme .lego/accounts
container-test-run-certificates> server # [313758.734849] server acme-setup-privileged[196]: + for fixpath in test.foo .lego/test.foo
container-test-run-certificates> server # [313758.734849] server acme-setup-privileged[196]: + '[' -d test.foo ']'
container-test-run-certificates> server # [313758.734899] server acme-setup-privileged[196]: + for fixpath in test.foo .lego/test.foo
container-test-run-certificates> server # [313758.734899] server acme-setup-privileged[196]: + '[' -d .lego/test.foo ']'
container-test-run-certificates> server # [313758.742021] server nsncd[198]: Oct 20 00:18:27.686 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"
container-test-run-certificates> server # [313758.742054] server systemd[1]: Started Name Service Cache Daemon (nsncd).
container-test-run-certificates> server # [313758.742094] server systemd[1]: Reached target Host and Network Name Lookups.
container-test-run-certificates> server # [313758.742126] server systemd[1]: Reached target User and Group Name Lookups.
container-test-run-certificates> server # [313758.765177] server systemd[1]: Starting User Login Management...
container-test-run-certificates> server # [313758.765530] server systemd[1]: Starting Permit User Sessions...
container-test-run-certificates> client # [313758.522077] client systemd-resolved[123]: Positive Trust Anchors:
container-test-run-certificates> client # [313758.522084] client systemd-resolved[123]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d
container-test-run-certificates> client # [313758.522086] client systemd-resolved[123]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16
container-test-run-certificates> client # [313758.522104] client systemd-resolved[123]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test
container-test-run-certificates> client # [313758.522713] client systemd-resolved[123]: Using system hostname 'client'.
container-test-run-certificates> client # [313758.523751] client systemd[1]: Started Network Name Resolution.
container-test-run-certificates> client # [313758.523808] client systemd[1]: Reached target Network.
container-test-run-certificates> client # [313758.523842] client systemd[1]: Reached target System Initialization.
container-test-run-certificates> client # [313758.523875] client systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container
container-test-run-certificates> client # [313758.523888] client systemd[1]: Started Daily Cleanup of Temporary Directories.
container-test-run-certificates> client # [313758.523899] client systemd[1]: Reached target Timer Units.
container-test-run-certificates> client # [313758.523975] client systemd[1]: Listening on D-Bus System Message Bus Socket.
container-test-run-certificates> client # [313758.524059] client systemd[1]: Listening on Nix Daemon Socket.
container-test-run-certificates> client # [313758.524132] client systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.
container-test-run-certificates> client # [313758.524144] client systemd[1]: Reached target Socket Units.
container-test-run-certificates> client # [313758.524165] client systemd[1]: Reached target Basic System.
container-test-run-certificates> client # [313758.525033] client systemd[1]: Starting Import lastlog data into lastlog2 database...
container-test-run-certificates> client # [313758.525501] client systemd[1]: Starting Name Service Cache Daemon (nsncd)...
container-test-run-certificates> client # [313758.526089] client systemd[1]: Starting D-Bus System Message Bus...
container-test-run-certificates> client # [313758.534041] client systemd[1]: Finished Import lastlog data into lastlog2 database.
container-test-run-certificates> client # [313758.757514] client nsncd[193]: Oct 20 00:18:27.702 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"
container-test-run-certificates> client # [313758.757597] client systemd[1]: Started Name Service Cache Daemon (nsncd).
container-test-run-certificates> client # [313758.757650] client systemd[1]: Reached target Host and Network Name Lookups.
container-test-run-certificates> client # [313758.757686] client systemd[1]: Reached target User and Group Name Lookups.
container-test-run-certificates> client # [313758.765149] client systemd[1]: Starting User Login Management...
container-test-run-certificates> client # [313758.765496] client systemd[1]: Starting Permit User Sessions...
container-test-run-certificates> client # [313758.771110] client systemd[1]: Finished Permit User Sessions.
container-test-run-certificates> client # [313758.771643] client systemd[1]: Started Console Getty.
container-test-run-certificates> client # [313758.771669] client systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0
container-test-run-certificates> client # [313758.771683] client systemd[1]: Reached target Login Prompts.
container-test-run-certificates> server # [313758.772181] server systemd[1]: Finished Permit User Sessions.
container-test-run-certificates> server # [313758.772901] server systemd[1]: Started Console Getty.
container-test-run-certificates> server # [313758.772924] server systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0
container-test-run-certificates> server # [313758.772940] server systemd[1]: Reached target Login Prompts.
container-test-run-certificates> server # [313758.953136] server dbus-broker-launch[199]: Looking up NSS user entry for 'systemd-timesync'...
container-test-run-certificates> server # [313758.953587] server dbus-broker-launch[199]: NSS returned no entry for 'systemd-timesync'
container-test-run-certificates> server # [313758.953587] server dbus-broker-launch[199]: Invalid user-name in /nix/store/wcyk5b2xkfx5dfxrcns8yvfn2vh0ghnp-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"
container-test-run-certificates> server # [313758.954121] server systemd[1]: Started D-Bus System Message Bus.
container-test-run-certificates> server # [313758.957483] server dbus-broker-launch[199]: Ready
container-test-run-certificates> client # [313758.970867] client dbus-broker-launch[194]: Looking up NSS user entry for 'systemd-timesync'...
container-test-run-certificates> client # [313758.971453] client dbus-broker-launch[194]: NSS returned no entry for 'systemd-timesync'
container-test-run-certificates> client # [313758.971453] client dbus-broker-launch[194]: Invalid user-name in /nix/store/90s1r897g0kd6d9msmfxza3w23q9msd3-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"
container-test-run-certificates> client # [313758.971955] client systemd[1]: Started D-Bus System Message Bus.
container-test-run-certificates> client # [313758.975328] client dbus-broker-launch[194]: Ready
container-test-run-certificates> client # [313759.295150] client systemd-networkd[179]: eth1: Gained IPv6LL
container-test-run-certificates> server # [313759.603602] server systemd-logind[223]: New seat seat0.
container-test-run-certificates> server # [313759.603777] server systemd[1]: Started User Login Management.
container-test-run-certificates> server # [313759.604512] server systemd[1]: Starting linger-users.service...
container-test-run-certificates> server # [313759.636393] server systemd[1]: linger-users.service: Failed to read pids.max for control group /system.slice/linger-users.service, ignoring: No data available
container-test-run-certificates> server # [313759.636441] server systemd[1]: linger-users.service: Failed to read pids.max for control group /system.slice/linger-users.service, ignoring: No data available
container-test-run-certificates> server # [313759.636470] server systemd[1]: linger-users.service: Deactivated successfully.
container-test-run-certificates> server # [313759.636642] server systemd[1]: Finished linger-users.service.
container-test-run-certificates> server # [313759.679066] server systemd-networkd[183]: eth1: Gained IPv6LL
container-test-run-certificates> server # [313759.712115] server acme-setup-start[212]: + set -euo pipefail
container-test-run-certificates> server # [313759.712276] server acme-setup-start[212]: + test -e ca/key.pem
container-test-run-certificates> server # [313759.712276] server acme-setup-start[212]: + minica --ca-key ca/key.pem --ca-cert ca/cert.pem --domains selfsigned.local
container-test-run-certificates> server # [313759.719347] server systemd[1]: Finished Set up the ACME certificate renewal infrastructure.
container-test-run-certificates> server # [313759.720094] server systemd[1]: Starting Ensure certificate for test.foo...
container-test-run-certificates> client # [313759.642272] client systemd-logind[209]: New seat seat0.
container-test-run-certificates> client # [313759.642489] client systemd[1]: Started User Login Management.
container-test-run-certificates> client # [313759.643496] client systemd[1]: Starting linger-users.service...
container-test-run-certificates> client # [313759.680684] client systemd[1]: linger-users.service: Failed to read pids.max for control group /system.slice/linger-users.service, ignoring: No data available
container-test-run-certificates> client # [313759.680718] client systemd[1]: linger-users.service: Failed to read pids.max for control group /system.slice/linger-users.service, ignoring: No data available
container-test-run-certificates> client # [313759.680739] client systemd[1]: linger-users.service: Deactivated successfully.
container-test-run-certificates> client # [313759.680839] client systemd[1]: Finished linger-users.service.
container-test-run-certificates> client # [313759.681058] client systemd[1]: Reached target Multi-User System.
container-test-run-certificates> client # [313759.681143] client systemd[1]: Startup finished in 3.315s.
container-test-run-certificates> server # [313760.791845] server acme-test.foo-start[249]: Waiting to acquire lock in /run/acme/
container-test-run-certificates> server # [313760.793220] server acme-test.foo-start[249]: + '[' -e out/acme-success ']'
container-test-run-certificates> server # [313760.793284] server acme-test.foo-start[249]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=test.foo --ip-addresses=
container-test-run-certificates> server # [313760.798866] server acme-test.foo-start[259]: + cd test.foo
container-test-run-certificates> server # [313760.799054] server acme-test.foo-start[259]: + cp -vp cert.pem ../out/cert.pem
container-test-run-certificates> server # [313760.799579] server acme-test.foo-start[260]: 'cert.pem' -> '../out/cert.pem'
container-test-run-certificates> server # [313760.799706] server acme-test.foo-start[259]: + cp -vp key.pem ../out/key.pem
container-test-run-certificates> server # [313760.800272] server acme-test.foo-start[259]: 'key.pem' -> '../out/key.pem'
container-test-run-certificates> server # [313760.800383] server acme-test.foo-start[249]: + cat out/cert.pem ca/cert.pem
container-test-run-certificates> server # [313760.801160] server acme-test.foo-start[249]: + cp ca/cert.pem out/chain.pem
container-test-run-certificates> server # [313760.801935] server acme-test.foo-start[249]: + cat out/key.pem out/fullchain.pem
container-test-run-certificates> server # [313760.802685] server acme-test.foo-start[249]: + for fixpath in out certificates
container-test-run-certificates> server # [313760.802685] server acme-test.foo-start[249]: + '[' -d out ']'
container-test-run-certificates> server # [313760.802734] server acme-test.foo-start[249]: + chmod -R u=rwX,g=rX,o= out
container-test-run-certificates> server # [313760.803429] server acme-test.foo-start[249]: + chown -R acme:nginx out
container-test-run-certificates> server # [313760.806257] server acme-test.foo-start[249]: + for fixpath in out certificates
container-test-run-certificates> server # [313760.806257] server acme-test.foo-start[249]: + '[' -d certificates ']'
container-test-run-certificates> server # [313760.808286] server systemd[1]: Finished Ensure certificate for test.foo.
container-test-run-certificates> server # [313760.809215] server systemd[1]: Starting Nginx Web Server...
container-test-run-certificates> server # [313761.464587] server nginx-pre-start[271]: nginx: the configuration file /nix/store/5hfbcsxjnn2jg16by394mg4sxwhvc7n1-nginx.conf syntax is ok
container-test-run-certificates> server # [313761.464837] server nginx-pre-start[271]: nginx: configuration file /nix/store/5hfbcsxjnn2jg16by394mg4sxwhvc7n1-nginx.conf test is successful
container-test-run-certificates> server # [313761.468621] server systemd[1]: Started Nginx Web Server.
container-test-run-certificates> server # [313761.468934] server systemd[1]: Reached target Multi-User System.
container-test-run-certificates> server # [313761.469885] server systemd[1]: Starting Order (and renew) ACME certificate for test.foo...
container-test-run-certificates> ca # [313762.150636] ca step-ca[208]: time="2026-10-20T00:18:31Z" level=info duration="38.152µs" duration-ns=38152 fields.time="2026-10-20T00:18:31Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="::1" request-id=b645c72a-8def-40f2-865e-011881cee81d response="{\"newNonce\":\"https://ca.foo/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo/acme/acme/new-account\",\"newOrder\":\"https://ca.foo/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo/acme/acme/key-change\"}" size=252 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; amd64)" user-id=
container-test-run-certificates> ca # [313762.151937] ca step-ca[208]: time="2026-10-20T00:18:31Z" level=info duration="335.512µs" duration-ns=335512 fields.time="2026-10-20T00:18:31Z" method=HEAD name=ca nonce=NWVOWGxsSXlUcXlST05mWjFpeEViTVBCMVliUExLT1M path=/acme/acme/new-nonce protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=6c01106b-2e20-47d2-bbdd-1f837b0975c4 size=0 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; amd64)" user-id=
container-test-run-certificates> ca # [313762.153357] ca step-ca[208]: time="2026-10-20T00:18:31Z" level=info duration="670.042µs" duration-ns=670042 fields.time="2026-10-20T00:18:31Z" method=POST name=ca nonce=Qnc4WkhJME9Lcm5Qd3BZUTh5ZFRUeFJXcXZyZTRxemM path=/acme/acme/new-account protocol=HTTP/1.1 referer= remote-address="::1" request-id=e737ab1e-330b-4e13-a966-3cbed2356c35 response="{\"contact\":[\"mailto:none@none.tld\"],\"status\":\"valid\",\"orders\":\"https://ca.foo/acme/acme/account/khkNIOUx2ulou9mOxA3GpX1z9Xc7o3R6/orders\"}" size=138 status=201 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; amd64)" user-id=
container-test-run-certificates> ca # [313762.155388] ca step-ca[208]: time="2026-10-20T00:18:31Z" level=info duration=1.109801ms duration-ns=1109801 fields.time="2026-10-20T00:18:31Z" method=POST name=ca nonce=WHA2d3JNbHI5OUFReDBaUGUzSVBaTmgyNGtiSzlOMGo path=/acme/acme/new-order protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=c0c0302a-fb03-48d3-b8de-541fb56a210b response="{\"id\":\"59XwweAuVj4Hyg39HhP6SaqedufBcKc3\",\"status\":\"pending\",\"expires\":\"2026-10-21T00:18:31Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"test.foo\"}],\"notBefore\":\"2026-10-20T00:17:31Z\",\"notAfter\":\"2027-01-18T00:18:31Z\",\"authorizations\":[\"https://ca.foo/acme/acme/authz/ylNroqv4XnH3bgHjATZbkylKHScou6hR\"],\"finalize\":\"https://ca.foo/acme/acme/order/59XwweAuVj4Hyg39HhP6SaqedufBcKc3/finalize\"}" size=384 status=201 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; amd64)" user-id=
container-test-run-certificates> ca # [313762.212833] ca step-ca[208]: time="2026-10-20T00:18:31Z" level=info duration="386.908µs" duration-ns=386908 fields.time="2026-10-20T00:18:31Z" method=POST name=ca nonce=YXlmeE5RdGxVRWExRDJPcld0TXQyM3gwT3Z4T05kZTQ path=/acme/acme/authz/ylNroqv4XnH3bgHjATZbkylKHScou6hR protocol=HTTP/1.1 referer= remote-address="::1" request-id=184b0bac-cd8d-4f02-8c33-39d573528664 response="{\"identifier\":{\"type\":\"dns\",\"value\":\"test.foo\"},\"status\":\"pending\",\"challenges\":[{\"type\":\"dns-01\",\"status\":\"pending\",\"token\":\"2G3AIuUKFxE2SLUGKj5jtMOfKEX8EgZo\",\"url\":\"https://ca.foo/acme/acme/challenge/ylNroqv4XnH3bgHjATZbkylKHScou6hR/zG2XnZHfrG0mSX410xMpZVKf2Y3EHzTy\"},{\"type\":\"http-01\",\"status\":\"pending\",\"token\":\"2G3AIuUKFxE2SLUGKj5jtMOfKEX8EgZo\",\"url\":\"https://ca.foo/acme/acme/challenge/ylNroqv4XnH3bgHjATZbkylKHScou6hR/99km2an5X5YgsfxGJSiFcYt0RWCqGm7V\"},{\"type\":\"tls-alpn-01\",\"status\":\"pending\",\"token\":\"2G3AIuUKFxE2SLUGKj5jtMOfKEX8EgZo\",\"url\":\"https://ca.foo/acme/acme/challenge/ylNroqv4XnH3bgHjATZbkylKHScou6hR/pSFsMnuiUQH85S0zMTOnxASnrmOTnpDa\"}],\"wildcard\":false,\"expires\":\"2026-10-21T00:18:31Z\"}" size=706 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; amd64)" user-id=
container-test-run-certificates> ca # [313762.215390] ca step-ca[208]: time="2026-10-20T00:18:31Z" level=info duration=1.764374ms duration-ns=1764374 fields.time="2026-10-20T00:18:31Z" method=POST name=ca nonce=Y0N3VjM5VTlyYVFqSGh0OTFKQ0QybEx0Q0tORGRaVTM path=/acme/acme/challenge/ylNroqv4XnH3bgHjATZbkylKHScou6hR/99km2an5X5YgsfxGJSiFcYt0RWCqGm7V protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=35b293cd-6a2b-41aa-9c0b-c2b82c3e1a29 response="{\"type\":\"http-01\",\"status\":\"valid\",\"token\":\"2G3AIuUKFxE2SLUGKj5jtMOfKEX8EgZo\",\"validated\":\"2026-10-20T00:18:31Z\",\"url\":\"https://ca.foo/acme/acme/challenge/ylNroqv4XnH3bgHjATZbkylKHScou6hR/99km2an5X5YgsfxGJSiFcYt0RWCqGm7V\"}" size=223 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; amd64)" user-id=
container-test-run-certificates> ca # [313762.217971] ca step-ca[208]: time="2026-10-20T00:18:31Z" level=info duration=1.693199ms duration-ns=1693199 fields.time="2026-10-20T00:18:31Z" method=POST name=ca nonce=MkhYVThHRWlCdXZmU3RUTTFaeENBUmp5ZmczaDVERWE path=/acme/acme/order/59XwweAuVj4Hyg39HhP6SaqedufBcKc3/finalize protocol=HTTP/1.1 referer= remote-address="::1" request-id=48938353-0aff-47d4-94d3-a74040f60533 response="{\"id\":\"59XwweAuVj4Hyg39HhP6SaqedufBcKc3\",\"status\":\"valid\",\"expires\":\"2026-10-21T00:18:31Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"test.foo\"}],\"notBefore\":\"2026-10-20T00:17:31Z\",\"notAfter\":\"2027-01-18T00:18:31Z\",\"authorizations\":[\"https://ca.foo/acme/acme/authz/ylNroqv4XnH3bgHjATZbkylKHScou6hR\"],\"finalize\":\"https://ca.foo/acme/acme/order/59XwweAuVj4Hyg39HhP6SaqedufBcKc3/finalize\",\"certificate\":\"https://ca.foo/acme/acme/certificate/gmwFmgiZk6XeTPQK9U7c0vU9IXkzk7SB\"}" size=468 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; amd64)" user-id=
container-test-run-certificates> ca # [313762.219063] ca step-ca[208]: time="2026-10-20T00:18:31Z" level=info certificate=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 duration="411.255µs" duration-ns=411255 fields.time="2026-10-20T00:18:31Z" issuer="Clan Intermediate CA" method=POST name=ca nonce=S3kwdlg0OXdSUnNvaXBtSkpOaHBVT1U0OVBLZ043UHE path=/acme/acme/certificate/gmwFmgiZk6XeTPQK9U7c0vU9IXkzk7SB protocol=HTTP/1.1 provisioner=acme public-key="ECDSA P-256" referer= remote-address=127.0.0.1 request-id=d593ab7b-198e-4308-82f8-d71621630359 sans="map[dns:[test.foo]]" serial=324365784443654579254212225500332347999 size=1348 status=200 subject=test.foo user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; amd64)" user-id= valid-from="2026-10-20T00:17:31Z" valid-to="2027-01-18T00:18:31Z"
container-test-run-certificates> server # [313762.124355] server acme-order-renew-test.foo-start[274]: Waiting to acquire lock in /run/acme/
container-test-run-certificates> server # [313762.126265] server acme-order-renew-test.foo-start[274]: + set -euo pipefail
container-test-run-certificates> server # [313762.126298] server acme-order-renew-test.foo-start[274]: + exec
container-test-run-certificates> server # [313762.126321] server acme-order-renew-test.foo-start[274]: + /nix/store/83mz0b56df302i4bsxnkqsr03r2gm7ph-flock-0.4.0/bin/flock 11
container-test-run-certificates> server # [313762.127046] server acme-order-renew-test.foo-start[286]: ++ find accounts -path '*/keys/*.key' -print -quit
container-test-run-certificates> server # [313762.128372] server acme-order-renew-test.foo-start[274]: + '[' -n '' ']'
container-test-run-certificates> server # [313762.128372] server acme-order-renew-test.foo-start[274]: + exec
container-test-run-certificates> server # [313762.128425] server acme-order-renew-test.foo-start[274]: + '[' -e certificates/test.foo.key ']'
container-test-run-certificates> server # [313762.128443] server acme-order-renew-test.foo-start[274]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo/acme/acme/directory --key-type ec256 -d test.foo --no-random-sleep --renew-force --ari-disable --force-cert-domains
container-test-run-certificates> server # [313762.137882] server acme-order-renew-test.foo-start[287]: 2026-10-20T00:18:31.082712905Z INFO  Private key saved. filepath=accounts/ca.foo/none@none.tld/none@none.tld.key
container-test-run-certificates> server # [313762.150827] server acme-order-renew-test.foo-start[287]: 2026-10-20T00:18:31.095667876Z INFO  Registering the account. email=none@none.tld
container-test-run-certificates> server # [313762.153530] server acme-order-renew-test.foo-start[287]: 2026-10-20T00:18:31.098375296Z WARN  !!!! HEADS UP !!!!
container-test-run-certificates> server # [313762.153530] server acme-order-renew-test.foo-start[287]: Your account credentials have been saved in your
container-test-run-certificates> server # [313762.153530] server acme-order-renew-test.foo-start[287]: configuration directory at "accounts".
container-test-run-certificates> server # [313762.153530] server acme-order-renew-test.foo-start[287]: You should make a secure backup of this folder now. This
container-test-run-certificates> server # [313762.153530] server acme-order-renew-test.foo-start[287]: configuration directory will also contain private keys
container-test-run-certificates> server # [313762.153530] server acme-order-renew-test.foo-start[287]: generated by lego and certificates obtained from the ACME
container-test-run-certificates> server # [313762.153530] server acme-order-renew-test.foo-start[287]: server. Making regular backups of this folder is ideal.
container-test-run-certificates> server # [313762.153621] server acme-order-renew-test.foo-start[287]: 2026-10-20T00:18:31.098422775Z INFO  Obtaining bundled SAN certificate. domains=test.foo
container-test-run-certificates> server # [313762.212993] server acme-order-renew-test.foo-start[287]: 2026-10-20T00:18:31.157837026Z INFO  Use solver. domain=test.foo type=http-01
container-test-run-certificates> server # [313762.212993] server acme-order-renew-test.foo-start[287]: 2026-10-20T00:18:31.157845532Z INFO  http01: Trying to solve HTTP-01. domain=test.foo
container-test-run-certificates> server # [313762.215545] server acme-order-renew-test.foo-start[287]: 2026-10-20T00:18:31.160390055Z INFO  The server validated our request. domain=test.foo
container-test-run-certificates> server # [313762.215576] server acme-order-renew-test.foo-start[287]: 2026-10-20T00:18:31.160422827Z INFO  Validations succeeded; requesting certificates. domains=test.foo
container-test-run-certificates> server # [313762.219190] server acme-order-renew-test.foo-start[287]: 2026-10-20T00:18:31.164035762Z INFO  Server responded with a certificate. domains=test.foo
container-test-run-certificates> server # [313762.219207] server acme-order-renew-test.foo-start[287]: 2026-10-20T00:18:31.164054337Z INFO  Writing file. filepath=certificates/test.foo.crt
container-test-run-certificates> server # [313762.219239] server acme-order-renew-test.foo-start[287]: 2026-10-20T00:18:31.164086848Z INFO  Writing file. filepath=certificates/test.foo.issuer.crt
container-test-run-certificates> server # [313762.219257] server acme-order-renew-test.foo-start[287]: 2026-10-20T00:18:31.164105633Z INFO  Writing file. filepath=certificates/test.foo.key
container-test-run-certificates> server # [313762.219289] server acme-order-renew-test.foo-start[287]: 2026-10-20T00:18:31.164138075Z INFO  Writing file. filepath=certificates/test.foo.json
container-test-run-certificates> server # [313762.221914] server acme-order-renew-test.foo-start[274]: + touch out/acme-success
container-test-run-certificates> server # [313762.222780] server acme-order-renew-test.foo-start[274]: + cmp -s certificates/test.foo.crt out/fullchain.pem
container-test-run-certificates> server # [313762.223352] server acme-order-renew-test.foo-start[274]: + touch out/renewed
container-test-run-certificates> server # [313762.224094] server acme-order-renew-test.foo-start[274]: + echo Installing new certificate
container-test-run-certificates> server # [313762.224094] server acme-order-renew-test.foo-start[274]: Installing new certificate
container-test-run-certificates> server # [313762.224094] server acme-order-renew-test.foo-start[274]: + cp -vp certificates/test.foo.crt out/fullchain.pem
container-test-run-certificates> server # [313762.224787] server acme-order-renew-test.foo-start[306]: 'certificates/test.foo.crt' -> 'out/fullchain.pem'
container-test-run-certificates> server # [313762.224899] server acme-order-renew-test.foo-start[274]: + cp -vp certificates/test.foo.key out/key.pem
container-test-run-certificates> server # [313762.225556] server acme-order-renew-test.foo-start[307]: 'certificates/test.foo.key' -> 'out/key.pem'
container-test-run-certificates> server # [313762.225670] server acme-order-renew-test.foo-start[274]: + cp -vp certificates/test.foo.issuer.crt out/chain.pem
container-test-run-certificates> server # [313762.226324] server acme-order-renew-test.foo-start[308]: 'certificates/test.foo.issuer.crt' -> 'out/chain.pem'
container-test-run-certificates> server # [313762.226445] server acme-order-renew-test.foo-start[274]: + ln -sf fullchain.pem out/cert.pem
container-test-run-certificates> server # [313762.227218] server acme-order-renew-test.foo-start[274]: + cat out/key.pem out/fullchain.pem
container-test-run-certificates> server # [313762.227988] server acme-order-renew-test.foo-start[274]: + for fixpath in out certificates
container-test-run-certificates> server # [313762.228004] server acme-order-renew-test.foo-start[274]: + '[' -d out ']'
container-test-run-certificates> server # [313762.228004] server acme-order-renew-test.foo-start[274]: + chmod -R u=rwX,g=rX,o= out
container-test-run-certificates> server # [313762.228741] server acme-order-renew-test.foo-start[274]: + chown -R acme:nginx out
container-test-run-certificates> server # [313762.229981] server acme-order-renew-test.foo-start[274]: + for fixpath in out certificates
container-test-run-certificates> server # [313762.229981] server acme-order-renew-test.foo-start[274]: + '[' -d certificates ']'
container-test-run-certificates> server # [313762.230014] server acme-order-renew-test.foo-start[274]: + chmod -R u=rwX,g=rX,o= certificates
container-test-run-certificates> server # [313762.230736] server acme-order-renew-test.foo-start[274]: + chown -R acme:nginx certificates
container-test-run-certificates> server # [313762.231804] server acme-order-renew-test.foo-start[274]: + chmod -R u=rwX,g=,o= accounts/.
container-test-run-certificates> server # [313762.346024] server systemd[1]: Reloading Nginx Web Server...
container-test-run-certificates> server # [313762.348356] server systemd[1]: acme-order-renew-test.foo.service: Failed to read pids.max for control group /system.slice/acme-order-renew-test.foo.service, ignoring: No data available
container-test-run-certificates> server # [313762.348388] server systemd[1]: acme-order-renew-test.foo.service: Failed to read pids.max for control group /system.slice/acme-order-renew-test.foo.service, ignoring: No data available
container-test-run-certificates> server # [313762.348407] server systemd[1]: acme-order-renew-test.foo.service: Deactivated successfully.
container-test-run-certificates> server # [313762.348508] server systemd[1]: Finished Order (and renew) ACME certificate for test.foo.
container-test-run-certificates> server # [313763.124239] server nginx[324]: nginx: the configuration file /nix/store/5hfbcsxjnn2jg16by394mg4sxwhvc7n1-nginx.conf syntax is ok
container-test-run-certificates> server # [313763.124448] server nginx[324]: nginx: configuration file /nix/store/5hfbcsxjnn2jg16by394mg4sxwhvc7n1-nginx.conf test is successful
container-test-run-certificates> server # [313763.736049] server systemd[1]: Reloaded Nginx Web Server.
container-test-run-certificates> server # [313763.736207] server systemd[1]: Startup finished in 7.358s.
container-test-run-certificates> server: (finished: waiting for file '/var/lib/acme/test.foo/fullchain.pem', in 8.14 seconds)
container-test-run-certificates> server: must succeed: systemctl restart nginx.service
container-test-run-certificates> server # [313764.177488] server systemd[1]: Stopping Nginx Web Server...
container-test-run-certificates> server # [313764.208813] server systemd[1]: nginx.service: Failed to read pids.max for control group /system.slice/nginx.service, ignoring: No data available
container-test-run-certificates> server # [313764.208837] server systemd[1]: nginx.service: Deactivated successfully.
container-test-run-certificates> server # [313764.208929] server systemd[1]: Stopped Nginx Web Server.
container-test-run-certificates> server # [313764.208948] server systemd[1]: nginx.service: Consumed 4.431s CPU time over 3.399s wall clock time.
container-test-run-certificates> server # [313764.210272] server systemd[1]: Starting Nginx Web Server...
container-test-run-certificates> server: (finished: must succeed: systemctl restart nginx.service, in 0.66 seconds)
container-test-run-certificates> client: waiting for success: curl -v https://test.foo
container-test-run-certificates> * Host test.foo:443 was resolved.
container-test-run-certificates> * IPv6: 2001:db8:1::3
container-test-run-certificates> * IPv4: 192.168.1.3
container-test-run-certificates> *   Trying [2001:db8:1::3]:443...
container-test-run-certificates> * connect to 2001:db8:1::3 port 443 from 2001:db8:1::2 port 52604 failed: Connection refused
container-test-run-certificates> *   Trying 192.168.1.3:443...
container-test-run-certificates> * connect to 192.168.1.3 port 443 from 192.168.1.2 port 43544 failed: Connection refused
container-test-run-certificates> * Failed to connect to test.foo:443 after 1 ms: Could not connect to server
container-test-run-certificates> * closing connection #0
container-test-run-certificates> curl: (7) Failed to connect to test.foo:443 after 1 ms: Could not connect to server
container-test-run-certificates> server # [313764.828844] server nginx-pre-start[347]: nginx: the configuration file /nix/store/5hfbcsxjnn2jg16by394mg4sxwhvc7n1-nginx.conf syntax is ok
container-test-run-certificates> server # [313764.829080] server nginx-pre-start[347]: nginx: configuration file /nix/store/5hfbcsxjnn2jg16by394mg4sxwhvc7n1-nginx.conf test is successful
container-test-run-certificates> server # [313764.831605] server systemd[1]: Started Nginx Web Server.
container-test-run-certificates> *   Trying [2001:db8:1::3]:443...
container-test-run-certificates> * Host test.foo:443 was resolved.
container-test-run-certificates> * IPv6: 2001:db8:1::3
container-test-run-certificates> * IPv4: 192.168.1.3
container-test-run-certificates> * ALPN: curl offers h2,http/1.1
container-test-run-certificates> } [5 bytes data]
container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1):
container-test-run-certificates> } [1554 bytes data]
container-test-run-certificates> * SSL Trust Anchors:
container-test-run-certificates> *   OpenSSL default paths (fallback)
container-test-run-certificates> { [5 bytes data]
container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2):
container-test-run-certificates> { [1210 bytes data]
container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):
container-test-run-certificates> { [1 bytes data]
container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
container-test-run-certificates> { [19 bytes data]
container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11):
container-test-run-certificates> { [933 bytes data]
container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15):
container-test-run-certificates> { [79 bytes data]
container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20):
container-test-run-certificates> { [52 bytes data]
container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
container-test-run-certificates> } [1 bytes data]
container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20):
container-test-run-certificates> } [52 bytes data]
container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey
container-test-run-certificates> * ALPN: server accepted h2
container-test-run-certificates> * Server certificate:
container-test-run-certificates> *   subject: CN=test.foo
container-test-run-certificates> *   start date: Oct 20 00:17:31 2026 GMT
container-test-run-certificates> *   expire date: Jan 18 00:18:31 2027 GMT
container-test-run-certificates> *   issuer: CN=Clan Intermediate CA
container-test-run-certificates> *   Certificate level 0: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256
container-test-run-certificates> *   Certificate level 1: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256
container-test-run-certificates> *   Certificate level 2: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256
container-test-run-certificates> *   subjectAltName: "test.foo" matches cert's "test.foo"
container-test-run-certificates> * OpenSSL verify result: 0
container-test-run-certificates> * SSL certificate verified via OpenSSL.
container-test-run-certificates> * Established connection to test.foo (2001:db8:1::3 port 443) from 2001:db8:1::2 port 52612 
container-test-run-certificates>   % Total    % Received % Xferd  Average Speed  Time    Time    Time   Current
container-test-run-certificates>                                  Dload  Upload  Total   Spent   Left   Speed
container-test-run-certificates>   0      0   0      0   0      0      0      0                              0* using HTTP/2
container-test-run-certificates> * [HTTP/2] [1] OPENED stream for https://test.foo/
container-test-run-certificates> * [HTTP/2] [1] [:method: GET]
container-test-run-certificates> * [HTTP/2] [1] [:scheme: https]
container-test-run-certificates> * [HTTP/2] [1] [:authority: test.foo]
container-test-run-certificates> * [HTTP/2] [1] [:path: /]
container-test-run-certificates> * [HTTP/2] [1] [user-agent: curl/8.22.0]
container-test-run-certificates> * [HTTP/2] [1] [accept: */*]
container-test-run-certificates> } [5 bytes data]
container-test-run-certificates> > GET / HTTP/2
container-test-run-certificates> > Host: test.foo
container-test-run-certificates> > User-Agent: curl/8.22.0
container-test-run-certificates> > Accept: */*
container-test-run-certificates> > 
container-test-run-certificates> * Request completely sent off
container-test-run-certificates> { [5 bytes data]
container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
container-test-run-certificates> { [265 bytes data]
container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
container-test-run-certificates> { [265 bytes data]
container-test-run-certificates> < HTTP/2 200 
container-test-run-certificates> < server: nginx
container-test-run-certificates> < date: Tue, 20 Oct 2026 00:18:34 GMT
container-test-run-certificates> < content-type: application/octet-stream
container-test-run-certificates> < content-length: 20
container-test-run-certificates> < content-type: text/plain
container-test-run-certificates> < 
container-test-run-certificates> { [5 bytes data]
container-test-run-certificates> 100     20 100     20   0      0   1822      0                              0
container-test-run-certificates> * Connection #0 to host test.foo:443 left intact
container-test-run-certificates> client: (finished: waiting for success: curl -v https://test.foo, in 1.03 seconds)
container-test-run-certificates> client: must succeed: openssl s_client -connect test.foo:443 -servername test.foo </dev/null 2>/dev/null | openssl x509 -text -noout 1>&2
container-test-run-certificates> Certificate:
container-test-run-certificates>     Data:
container-test-run-certificates>         Version: 3 (0x2)
container-test-run-certificates>         Serial Number:
container-test-run-certificates>             f4:06:93:e5:6c:51:87:ab:a4:a5:72:1b:36:ae:d2:5f
container-test-run-certificates>         Signature Algorithm: ecdsa-with-SHA256
container-test-run-certificates>         Issuer: CN=Clan Intermediate CA
container-test-run-certificates>         Validity
container-test-run-certificates>             Not Before: Oct 20 00:17:31 2026 GMT
container-test-run-certificates>             Not After : Jan 18 00:18:31 2027 GMT
container-test-run-certificates>         Subject: CN=test.foo
container-test-run-certificates>         Subject Public Key Info:
container-test-run-certificates>             Public Key Algorithm: id-ecPublicKey
container-test-run-certificates>                 Public-Key: (256 bit)
container-test-run-certificates>                 pub:
container-test-run-certificates>                     04:3c:f8:f3:fd:e7:51:90:f8:a3:d9:70:8e:65:64:
container-test-run-certificates>                     1f:54:bf:31:c4:35:1e:c4:a7:6f:24:93:54:a6:8f:
container-test-run-certificates>                     b0:f9:22:d2:cb:df:a2:5d:24:bf:2f:63:c7:5c:35:
container-test-run-certificates>                     1f:78:60:9a:39:cd:36:5c:a4:7f:57:4e:7e:63:ed:
container-test-run-certificates>                     fc:5d:2a:81:8e
container-test-run-certificates>                 ASN1 OID: prime256v1
container-test-run-certificates>                 NIST CURVE: P-256
container-test-run-certificates>         X509v3 extensions:
container-test-run-certificates>             X509v3 Key Usage: critical
container-test-run-certificates>                 Digital Signature
container-test-run-certificates>             X509v3 Extended Key Usage: 
container-test-run-certificates>                 TLS Web Server Authentication, TLS Web Client Authentication
container-test-run-certificates>             X509v3 Subject Key Identifier: 
container-test-run-certificates>                 19:40:43:DD:BB:D5:7B:ED:64:4D:82:2E:15:94:5D:48:26:A7:F9:FB
container-test-run-certificates>             X509v3 Authority Key Identifier: 
container-test-run-certificates>                 48:8F:78:44:54:88:0B:36:3B:B8:2E:26:87:4B:85:0A:4A:BE:27:CC
container-test-run-certificates>             X509v3 Subject Alternative Name: 
container-test-run-certificates>                 DNS:test.foo
container-test-run-certificates>             1.3.6.1.4.1.37476.9000.64.1: 
container-test-run-certificates>                 0......acme..
container-test-run-certificates>     Signature Algorithm: ecdsa-with-SHA256
container-test-run-certificates>     Signature Value:
container-test-run-certificates>         30:46:02:21:00:f8:63:eb:29:06:04:90:99:c3:a6:f7:73:5a:
container-test-run-certificates>         9e:8d:ec:f0:fd:b2:d7:d9:07:d0:eb:62:12:d0:b2:65:cd:06:
container-test-run-certificates>         62:02:21:00:ef:44:d1:2f:0c:7b:b9:9d:6e:9c:01:ee:55:08:
container-test-run-certificates>         e8:9a:1d:90:d3:de:50:ab:08:fb:2f:05:77:25:3c:09:2c:48
container-test-run-certificates> client: (finished: must succeed: openssl s_client -connect test.foo:443 -servername test.foo </dev/null 2>/dev/null | openssl x509 -text -noout 1>&2, in 0.02 seconds)
container-test-run-certificates> (finished: run the VM test script, in 28.95 seconds)
container-test-run-certificates> test script finished in 28.97s
container-test-run-certificates> cleanup
container-test-run-certificates> kill NspawnMachine (pid 50)
container-test-run-certificates> kill NspawnMachine (pid 449)
container-test-run-certificates> kill NspawnMachine (pid 446)
container-test-run-certificates> Container ca terminated by signal KILL.
container-test-run-certificates> (finished: cleanup, in 0.16 seconds)
container-test-run-certificates> Container client terminated by signal KILL.
container-test-run-certificates> Container server terminated by signal KILL.