these 71 derivations will be built: /nix/store/51rccv3fxrwmq8wiai3c39lm2rwxqrcc-nftables-deletions.drv /nix/store/0k7qg6f9g36017z8gf4wmr0szbrmgdm2-nftables-save-deletions.drv /nix/store/0mxp1ip9lw1mvdzxcv0vv9zh2gkr4jzw-localhost-hosts.drv /nix/store/0s3wkj168cpsgmvbkdxqk2xhl19kahzi-system-path.drv /nix/store/1aw3qnd1v486ivdcg5y7wmnnjgswfa2h-activate.drv /nix/store/1jcambgkrkwa76320w20l3mqs0k97vh5-extra-hosts.drv /nix/store/4bdyiv300qd78qxwyxc28q4rg05n59bn-system-path.drv /nix/store/hlksbmhzxb02ca8zbfylryiabcj164cw-users-groups.json.drv /nix/store/3zxdi4d9x0hkkh0rcbzhmvp1vwv7z3v0-dbus-1.drv /nix/store/9xz3k3n6c0ijsqr2qymzhkcg07czy73a-command-not-found.drv /nix/store/6xb13v9wdspik42xy7abhm8p5zaax8n2-etc-bashrc.drv /nix/store/9hqd6ys7iv76hwx12pabjplyvzsa6hl1-nix.conf.drv /nix/store/csm2kghmmv5ayvf7m28bz5fmcxs44mfd-system-units.drv /nix/store/hwkshp72a7pc7cq1kdhnmrsndmswvnx5-etc-hostname.drv /nix/store/mb4dnx5x2m1sqr8dmj607950glrr6wq7-user-units.drv /nix/store/rkvxx67b1mnxllrrw52dm9h6x8cv609f-nixos-tmpfiles.d.drv /nix/store/ph2wmqjx75wg1pg6gbd8ggj9lgkcqpq9-tmpfiles.d.drv /nix/store/qr083xcjvnqz1xyla7zryicd6j8gwfjb-etc-sysctl.d-60-nixos.conf.drv /nix/store/yy73zhynpbk6sqavvck7wybww6q4yvxa-string-hosts.drv /nix/store/raqjfx56fb5hhi68ccn75zwyf1za876w-hosts.drv /nix/store/pidxg08p0wv9h5xnn20fiw9d8h1pgmh4-etc.drv /nix/store/7s6gqw8ya2m3ibmlc66c9vhrqinfflkq-activate.drv /nix/store/zgpvmcpxaz5fi29ylhsm89zawxw6786c-builder.pl.drv /nix/store/dnamn2r97cfbq6ksr0kxl4jr72m9g5c1-perl-5.42.3-env.drv /nix/store/x5waxyyn9pk3429ni4wiw0djpsh9q0bd-stage-2-init.sh.drv /nix/store/1mdnjib0rbghwbgvqqmwgshvyvxkbaj4-nixos-system-machine-test.drv /nix/store/qpzii0qhzzf26v8frv653v0fj32z04a1-X-Restart-Triggers-systemd-sysctl.drv /nix/store/5isk4sw5ikkn7dplc1z2xw7pbc2xy8wr-unit-systemd-sysctl.service.drv /nix/store/72iw71l4fl3p2j1alqb087h20hkhsvrc-string-hosts.drv /nix/store/gc4kd57skbhdi7gic47b5kl4ma0zqd1p-dbus-1.drv /nix/store/7g0nrwngdbw96j5cmyc2h0lnc8dc5idz-X-Restart-Triggers-dbus-broker.drv /nix/store/88s6nxnzd3ayds89a9najn92inh2ngar-X-Reload-Triggers-systemd-networkd.drv /nix/store/925c2wdbvy52hpzmvdbjp4n584d2i4m4-nginx.conf.drv /nix/store/hiil7nrayk8qjbf6b928z383si75qfdq-X-Restart-Triggers-systemd-tmpfiles-resetup.drv /nix/store/98kqkml75szkyvvdaxjs0d8vradi90bs-unit-systemd-tmpfiles-resetup.service.drv /nix/store/a1ziryxf0izdlw6b0n7hml8vpc2cv201-testScript.drv /nix/store/jbb0lgk0k1fnr43xy3h6j3v1373k6yc2-unit-dbus-broker.service.drv /nix/store/a6zqhwjvdsd7p23v6k3ip1x8bj3rzd72-user-units.drv /nix/store/dxmn9141ywizzgfkacwi5j0k0598af2j-hosts.drv /nix/store/inrgnybk613izqvgi6dx18p2z54938vk-unit-40-eth1.network.drv /nix/store/qx9wvxxkdnvsr7j1425dyw5m8d3lw0rc-etc-hostname.drv /nix/store/fxzkd54nn7cfnxv1ns9xiz241k6g6bqy-unit-systemd-networkd-wait-online.service.drv /nix/store/jq32ma78ak1d95j0k6wrv04s8clsqwjs-X-Reload-Triggers-systemd-networkd.drv /nix/store/jhnv870dfrp5yqqr6kd0qf28i4aj3vj3-unit-systemd-networkd.service.drv /nix/store/q9mw7nx2ln728908fd7wasimfnp1f93s-unit-script-nginx-pre-start.drv /nix/store/l0b7v6p6qgr3wrlrr9hlq0i6wsy8rs50-unit-nginx.service.drv /nix/store/pcfrhz7643zixrc7jy1b3hfiivmxyfsm-unit-dbus-broker.service.drv /nix/store/z1fkhb1406gw94v49x7fz4dszqc85dqc-X-Restart-Triggers-nix-daemon.drv /nix/store/v2h1b3gjm353fgayy6gcfd5f5drqg6fh-unit-nix-daemon.service.drv /nix/store/rkhyca8gvm1rxi19ymry3yncdchdgifm-system-units.drv /nix/store/y7mzwnqz32v7np4vwxfngsa97pdcqg9s-etc.drv /nix/store/g7gr8vdm0szjxxsy71jwcasjazamiq42-nixos-system-router-test.drv /nix/store/99lvlfdsgzhmnp76smm4rkzfk6g9pac7-closure-info.drv /nix/store/av9j4yxagbzpmdh1aiaxj1r7vd8cijcl-unit-script-setup-wg0-interface-start.drv /nix/store/9l7yf57swhh3akglfn7lgxwq4zksb7fk-unit-setup-wg0-interface.service.drv /nix/store/ak6mi4xks7r8ryccs555y8lcmh3jjpys-X-Restart-Triggers-dbus-broker.drv /nix/store/f1clj9v7ziqg6i8m4fmayxlri4pw43aq-nftables-ensure-deletions.drv /nix/store/hyzlj29gaxa8ljn5g3yzlp051jsy9704-nftables-cleanup-deletions.drv /nix/store/wp7vsl9lkzi9im9kzqgd6l7xv30q4r2z-passwd.drv /nix/store/v22dq80iypxyjw0qhgshyvb9nyzg8fwx-nftables-rules.drv /nix/store/clp0rffdd5miaw4660br32a8gn3qlp89-unit-nftables.service.drv /nix/store/i0czicbjn9qqn7qg7q76ygycnjc2b8ya-unit-systemd-networkd.service.drv /nix/store/j6ff94z7ipxwcvvsazndj25il22dmfv8-users-groups.json.drv /nix/store/p5cd3d1msahbla7js5n2icjcfm2n50fy-closure-info.drv /nix/store/sw0qill9vzfyw8g25xai2fh8biyqzj5v-nixos-test-driver-user-firewall-nftables.drv /nix/store/n5fmis6arj6qg6apdl84lydzqx5b55lr-container-test-run-user-firewall-nftables.drv /nix/store/rpq9yzsi11z3nwn5sqgs5a8xbmkvym8p-nginx.conf.drv /nix/store/r2ppss6kgq7l6l0khda44hk21ccn9h1g-unit-script-nginx-pre-start.drv /nix/store/pv1fm1hcwnxa6pc6d351s3b0p554plr9-unit-nginx.service.drv /nix/store/qf56d89r6pj7cwdczqf2i2cgfnfxdfci-unit-dbus-broker.service.drv /nix/store/sgrj2zvybi9bjxkkcdakipxpmwwxkv75-unit-dbus-broker.service.drv these 68 paths will be fetched (0.0 KiB download, 140.4 MiB unpacked): /nix/store/wd8070gqyv58kmlg9zq156frp8q0l6kz-acl-2.4.0-man /nix/store/fpq4vpsmdy3xzx1hbfcayfn59ja948c4-attr-2.6.0-man /nix/store/ql4m597i0j53jj0b30jbc4qlrv2x2n6p-bash-interactive-5.3p9-man /nix/store/jy83l8cp4jafqq36mmg6wq3ym5kppym7-bzip2-1.0.8-man /nix/store/86h60daxqvclraj4xril7ffjrsagy4gf-curl-8.22.0-man /nix/store/rvhwwg7zsh264c5bhd7bhd1aim7751qv-dbus-1.16.2-man /nix/store/k9z9jzv4vz189nsqjm6g90dswxl5sjw0-desktop-file-utils-0.28 /nix/store/zvw47i1by13mm49sk8frxbw206z6gbjw-die-hook /nix/store/i9xql56bscmqa7fqvlb31jccirimjjxd-dosfstools-4.2-man /nix/store/xklk723s0ipylv195cvxvsndfzzaaid1-dry-activate /nix/store/y9zd3pqin5vzxm6f4wpmmp26iqrdqh8m-dry-activate /nix/store/fs9jgrs883rfj85pixynfv2d6spa3kjx-e2fsprogs-1.47.4-man /nix/store/pp9yw36974ffz5kv5x2690gyp0svwalv-ensure-all-wrappers-paths-exist /nix/store/4khybwqcyla8cnn8pxbr723ar9gl404m-find-xml-catalogs-hook /nix/store/dnsq12bx4rxyx5vsa1blm63p905myvnv-gawk-5.4.1-man /nix/store/nwi3a85amn68r1cdix1nkvlcykvzn549-getconf-glibc-2.42-100 /nix/store/9ijhpv6jzkm9yfj86s0nhpq0dl9wzbd8-gixy-0.1.21 /nix/store/bfiz9r1i6qw4cn7v8m5nll3qn8ggirp4-gzip-1.14-man /nix/store/a614fa1wl1f3jafavzdyh7adi346p9fn-iputils-20250605-man /nix/store/m5j6xhzcvdmpjyi0dq94ij6w8z7xvvjk-jansson-2.15.0 /nix/store/x0l0zg4x40qry8vz7ayxd462ng24rqzg-jq-1.8.2-dev /nix/store/fwywdqy9m5wmcxa1nylqjn6w39yqbiyz-kbd-2.9.0-man /nix/store/j703xh4n8cy9xnmdjarm58310a5irnjw-less-692-man /nix/store/zgc1cydwx2bvzn9vd0rb7bvi5pqzqqak-libcap-2.77-man /nix/store/p945j2xjzppn0fdrgsi73lp0f7mj677c-libredirect-0 /nix/store/xlygmxkik5zhzrh5gki80nh9337q3c9w-libxslt-1.1.45 /nix/store/nbrgmn9ivxa65d0s6xqg8i86g5d9rh5m-libxslt-1.1.45-bin /nix/store/mfrmqs8fxbam0bbm7z5pjkk7328533ij-linux-pam-1.7.2-man /nix/store/h4m3i0xqi981cng1z22ly8l8z5qrqrgq-lkl-2025-11-13-lib /nix/store/smriw9hf43mvqp4v7nrn4d0wgny9yvk0-lndir-1.0.5 /nix/store/01gh6jng9881dmkwr055p0z3x15jvk8c-make-binary-wrapper-hook /nix/store/7whrgb2wib2q83wgbs78xsq9h25lf3aw-make-shell-wrapper-hook /nix/store/z515ppll75pmzz9i89vs7c78m5rnbf9v-mkpasswd-5.6.6-man /nix/store/7f8796w7h68k0az1bh3184jzjf33g580-nano-9.2-man /nix/store/n4izsmvfifqdkn7a0zliwlxda3qdqwy1-ncurses-6.6-man /nix/store/z9rscg9c2ak1fcaxsr6bp8dc3l33gpg8-nftables-1.1.6 /nix/store/smpkfhyjj22b4zy1f0cprzfhr0nimllr-nginx-1.30.6 /nix/store/6x3vic5vm4jzp29yna1qkp0xmf3qm35i-nss-cacert-3.126 /nix/store/wb64sws1hiapzq0q91crrfb29ad6nb4r-nss-cacert-3.126-p11kit /nix/store/dbjbmxxr6ssqwghr6hddafp2vifwwwwv-openssh-10.5p1-man /nix/store/3i5w573pi9i9vjhc33mj35f442f8s0hj-openssl-4.0.3 /nix/store/x0xbps02nvn95d156cgdif0dmm6j7zmp-python3.13-cached-property-2.0.1 /nix/store/s4rbbsm0iw1zzyj1c7sdsq35kry26608-python3.13-configargparse-1.7.1 /nix/store/cp40xfa2ijq534gdlzidb9czzx3xn8yf-python3.13-flit-core-3.12.0 /nix/store/yvblbka1is0bafkkxxv846wjrvbyv2a2-python3.13-jinja2-3.1.6 /nix/store/bb9di7brlfwb7ldha71h86nswf7bpg3y-python3.13-librt-0.9.0 /nix/store/wd3a6wzjn56dsm0fsjm5h59kv3281zg7-python3.13-markupsafe-3.0.3 /nix/store/15d5ydl635mfjg23kymbmddmr8h5yxn3-python3.13-mypy-1.20.1 /nix/store/nahcxr9dqfw9mi9dlfwjfgw81b3rlkps-python3.13-mypy-extensions-1.1.0 /nix/store/pbwv2maja9gpg1kmrwvx6m4f238rfmbc-python3.13-pathspec-1.0.4 /nix/store/96mrw546sc39lyyvcwfb43bigrl1r5bb-python3.13-pyparsing-2.4.7 /nix/store/7xafm41qhsb9zw8f2qfa3bcwrbrbfm5b-python3.13-typing-extensions-4.15.0 /nix/store/qhks5yhqf1cym7pkwsliqk69jag0pymx-shadow-4.19.4-man /nix/store/8brlp7nlpw4rbkpn2xv5rba1y19pi45i-strace-7.2-man /nix/store/67438rcxwsv848ly1rbah3ayf6367b43-sudo-1.9.17p2-man /nix/store/y870vf7asxrn47byq93dwhljq64y6j0n-system-generators /nix/store/i2vbp6nq8641yxw7dg3kygmwnzwp77g2-system-shutdown /nix/store/ja8zmkh5d6lsd5bzhqafhbxpg6j9j672-systemd-260.5-man /nix/store/yg20cdcdcv3rjnlr0nkvgrrgh8hdinys-systemd-default-tmpfiles /nix/store/6jnggf6m858k8z7zqi58zm7jpwfqav9j-test-driver-0.0.1 /nix/store/4wv19qx8fq6d2iv6mva7c0yib48f4jk7-user-generators /nix/store/hz0ybr07flgz5f9fcad1ddrv2m3cyjxs-users-groups.json /nix/store/iph211gq6cswdxsbav5h3i3f9yskfb2b-users-groups.json /nix/store/f227ga437vnmny8dqqlsk0fhkjc5gkmq-util-linux-2.42.3-man /nix/store/6x9g6v1syd7bsrsrdskfa4353mhvwr1z-which-2.23-man /nix/store/15mlpz0nv6dwi8v1z7mx0dpvcmnhd7ql-xz-5.8.4-man /nix/store/dzjbrs1dwpg2rk4784jpckw617g5y1dh-zlib-ng-2.3.3 /nix/store/4d2k230fhyxb8qab8amyk011m7pmpcrz-zstd-1.5.7-man warning: ignoring the client-specified setting 'store', because it is a restricted setting and you are not a trusted user building '/nix/store/4bdyiv300qd78qxwyxc28q4rg05n59bn-system-path.drv' on nix-store.geninf.io:50051 system-path> gi-build-x86-02: building 4bdyiv300qd78qxwyxc28q4rg05n59bn-system-path.drv system-path> structuredAttrs is enabled system-path> created 1669 symlinks in user environment building '/nix/store/rkhyca8gvm1rxi19ymry3yncdchdgifm-system-units.drv' on nix-store.geninf.io:50051 system-units> gi-build-x86-02: building rkhyca8gvm1rxi19ymry3yncdchdgifm-system-units.drv building '/nix/store/3zxdi4d9x0hkkh0rcbzhmvp1vwv7z3v0-dbus-1.drv' on nix-store.geninf.io:50051 dbus-1> gi-build-x86-02: building 3zxdi4d9x0hkkh0rcbzhmvp1vwv7z3v0-dbus-1.drv building '/nix/store/a6zqhwjvdsd7p23v6k3ip1x8bj3rzd72-user-units.drv' on nix-store.geninf.io:50051 user-units> attached to the build already running on this worker user-units> build-x86-01: building a6zqhwjvdsd7p23v6k3ip1x8bj3rzd72-user-units.drv building '/nix/store/y7mzwnqz32v7np4vwxfngsa97pdcqg9s-etc.drv' on nix-store.geninf.io:50051 etc> build-x86-01: building y7mzwnqz32v7np4vwxfngsa97pdcqg9s-etc.drv building '/nix/store/1aw3qnd1v486ivdcg5y7wmnnjgswfa2h-activate.drv' on nix-store.geninf.io:50051 activate> attached to the build already running on this worker activate> build-x86-01: building 1aw3qnd1v486ivdcg5y7wmnnjgswfa2h-activate.drv building '/nix/store/g7gr8vdm0szjxxsy71jwcasjazamiq42-nixos-system-router-test.drv' on nix-store.geninf.io:50051 nixos-system-router-test> attached to the build already running on this worker nixos-system-router-test> build-x86-01: building g7gr8vdm0szjxxsy71jwcasjazamiq42-nixos-system-router-test.drv nixos-system-router-test> structuredAttrs is enabled building '/nix/store/99lvlfdsgzhmnp76smm4rkzfk6g9pac7-closure-info.drv' on nix-store.geninf.io:50051 closure-info> build-x86-01: building 99lvlfdsgzhmnp76smm4rkzfk6g9pac7-closure-info.drv closure-info> structuredAttrs is enabled building '/nix/store/ak6mi4xks7r8ryccs555y8lcmh3jjpys-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-dbus-broker> gi-build-x86-02: building ak6mi4xks7r8ryccs555y8lcmh3jjpys-X-Restart-Triggers-dbus-broker.drv building '/nix/store/sgrj2zvybi9bjxkkcdakipxpmwwxkv75-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> gi-build-x86-02: building sgrj2zvybi9bjxkkcdakipxpmwwxkv75-unit-dbus-broker.service.drv building '/nix/store/qf56d89r6pj7cwdczqf2i2cgfnfxdfci-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> web01: building qf56d89r6pj7cwdczqf2i2cgfnfxdfci-unit-dbus-broker.service.drv building '/nix/store/mb4dnx5x2m1sqr8dmj607950glrr6wq7-user-units.drv' on nix-store.geninf.io:50051 user-units> gi-build-x86-01: building mb4dnx5x2m1sqr8dmj607950glrr6wq7-user-units.drv building '/nix/store/csm2kghmmv5ayvf7m28bz5fmcxs44mfd-system-units.drv' on nix-store.geninf.io:50051 system-units> gi-build-x86-02: building csm2kghmmv5ayvf7m28bz5fmcxs44mfd-system-units.drv building '/nix/store/pidxg08p0wv9h5xnn20fiw9d8h1pgmh4-etc.drv' on nix-store.geninf.io:50051 etc> gi-build-x86-02: building pidxg08p0wv9h5xnn20fiw9d8h1pgmh4-etc.drv building '/nix/store/7s6gqw8ya2m3ibmlc66c9vhrqinfflkq-activate.drv' on nix-store.geninf.io:50051 activate> gi-build-x86-02: building 7s6gqw8ya2m3ibmlc66c9vhrqinfflkq-activate.drv building '/nix/store/1mdnjib0rbghwbgvqqmwgshvyvxkbaj4-nixos-system-machine-test.drv' on nix-store.geninf.io:50051 nixos-system-machine-test> gi-build-x86-02: building 1mdnjib0rbghwbgvqqmwgshvyvxkbaj4-nixos-system-machine-test.drv nixos-system-machine-test> structuredAttrs is enabled building '/nix/store/p5cd3d1msahbla7js5n2icjcfm2n50fy-closure-info.drv' on nix-store.geninf.io:50051 closure-info> gi-build-x86-02: building p5cd3d1msahbla7js5n2icjcfm2n50fy-closure-info.drv closure-info> structuredAttrs is enabled building '/nix/store/sw0qill9vzfyw8g25xai2fh8biyqzj5v-nixos-test-driver-user-firewall-nftables.drv' on nix-store.geninf.io:50051 nixos-test-driver-user-firewall-nftables> gi-build-x86-02: building sw0qill9vzfyw8g25xai2fh8biyqzj5v-nixos-test-driver-user-firewall-nftables.drv nixos-test-driver-user-firewall-nftables> Running type check (enable/disable: config.skipTypeCheck) nixos-test-driver-user-firewall-nftables> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck nixos-test-driver-user-firewall-nftables> Success: no issues found in 1 source file building '/nix/store/n5fmis6arj6qg6apdl84lydzqx5b55lr-container-test-run-user-firewall-nftables.drv' on nix-store.geninf.io:50051 container-test-run-user-firewall-nftables> build-x86-01: building n5fmis6arj6qg6apdl84lydzqx5b55lr-container-test-run-user-firewall-nftables.drv container-test-run-user-firewall-nftables> additionally exposed symbols: container-test-run-user-firewall-nftables> machine, router, container-test-run-user-firewall-nftables> start_all, machines, driver, Machine, wait_for_signal container-test-run-user-firewall-nftables> Starting machine container-test-run-user-firewall-nftables> Starting router container-test-run-user-firewall-nftables> ░ Spawning container machine on /build/tmpmelsuw4n/machine. container-test-run-user-firewall-nftables> ░ Spawning container router on /build/tmpmelsuw4n/router. container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> <<< NixOS Stage 2 >>> container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> booting system configuration /nix/store/7zqx5i68ychiwlaa1vk2h5jc6kq7v2i4-nixos-system-machine-test container-test-run-user-firewall-nftables> running activation script... container-test-run-user-firewall-nftables> setting up /etc... container-test-run-user-firewall-nftables> 2: host0@if3: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-user-firewall-nftables> link/ether 0e:74:26:22:81:c2 brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-user-firewall-nftables> starting systemd... container-test-run-user-firewall-nftables> systemd 260.5 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-user-firewall-nftables> Detected virtualization systemd-nspawn. container-test-run-user-firewall-nftables> Detected architecture x86-64. container-test-run-user-firewall-nftables> Detected first boot. container-test-run-user-firewall-nftables> Initializing machine ID from container UUID. container-test-run-user-firewall-nftables> Applying preset policy. container-test-run-user-firewall-nftables> Populated /etc with preset unit settings. container-test-run-user-firewall-nftables> Queued start job for default target Multi-User System. container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-user-firewall-nftables> + systemd-run /bin/sh -c '/nix/store/bhv6xyvqw6gjs3j488gi1z6wdv18bdpa-coreutils-9.11/bin/sleep 999999999 && echo 0146bdc5-1f18-476b-98ee-e99f73d8f8f3' container-test-run-user-firewall-nftables> Running as unit: run-p226-i3032647.service; invocation ID: 5c9e99fc436643b984f1258b866cf045 container-test-run-user-firewall-nftables> To attach to container machine run on the same machine that runs the test: container-test-run-user-firewall-nftables> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*0146bdc5-1f18-476b-98ee-e99f73d8f8f3') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> To inject external network and continue test, run: container-test-run-user-firewall-nftables> sudo /nix/store/jy00n3jp5xj8s40n1fbldmkcr5n7avxc-python3-3.13.15/bin/python3.13 /nix/store/6jnggf6m858k8z7zqi58zm7jpwfqav9j-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py 0146bdc5-1f18-476b-98ee-e99f73d8f8f3 container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> <<< NixOS Stage 2 >>> container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> booting system configuration /nix/store/s2yk4hyd7mx26l48gdlgni9k1xys1a40-nixos-system-router-test container-test-run-user-firewall-nftables> running activation script... container-test-run-user-firewall-nftables> setting up /etc... container-test-run-user-firewall-nftables> 2: host0@if4: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-user-firewall-nftables> link/ether a6:24:31:fe:b9:6d brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-user-firewall-nftables> starting systemd... container-test-run-user-firewall-nftables> systemd 260.5 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-user-firewall-nftables> Detected virtualization systemd-nspawn. container-test-run-user-firewall-nftables> Detected architecture x86-64. container-test-run-user-firewall-nftables> Detected first boot. container-test-run-user-firewall-nftables> Initializing machine ID from container UUID. container-test-run-user-firewall-nftables> Applying preset policy. container-test-run-user-firewall-nftables> Populated /etc with preset unit settings. container-test-run-user-firewall-nftables> Queued start job for default target Multi-User System. container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-user-firewall-nftables> + systemd-run /bin/sh -c '/nix/store/bhv6xyvqw6gjs3j488gi1z6wdv18bdpa-coreutils-9.11/bin/sleep 999999999 && echo da5ebe63-94f7-4784-a39b-75b8c1da0d0a' container-test-run-user-firewall-nftables> Running as unit: run-p209-i3032650.service; invocation ID: 2046e948774f4a3f885bbbf4e8b071dc container-test-run-user-firewall-nftables> To attach to container router run on the same machine that runs the test: container-test-run-user-firewall-nftables> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*da5ebe63-94f7-4784-a39b-75b8c1da0d0a') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> To inject external network and continue test, run: container-test-run-user-firewall-nftables> sudo /nix/store/jy00n3jp5xj8s40n1fbldmkcr5n7avxc-python3-3.13.15/bin/python3.13 /nix/store/6jnggf6m858k8z7zqi58zm7jpwfqav9j-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py da5ebe63-94f7-4784-a39b-75b8c1da0d0a container-test-run-user-firewall-nftables> + systemctl --no-pager show multi-user.target container-test-run-user-firewall-nftables> + systemctl --no-pager show nginx.service container-test-run-user-firewall-nftables> + systemctl --no-pager show multi-user.target container-test-run-user-firewall-nftables> + systemctl --no-pager show nginx.service container-test-run-user-firewall-nftables> + ip -4 addr show eth1 container-test-run-user-firewall-nftables> + grep -oP '(?<=inet\s)\d+(\.\d+){3}' container-test-run-user-firewall-nftables> + ip -6 addr show eth1 container-test-run-user-firewall-nftables> + grep -oP '(?<=inet6\s)[0-9a-f:]+' container-test-run-user-firewall-nftables> + grep -v '^fe80' container-test-run-user-firewall-nftables> + head -1 container-test-run-user-firewall-nftables> Router IPv4: 192.168.1.2 container-test-run-user-firewall-nftables> Router IPv6: 2001:db8:1::2 container-test-run-user-firewall-nftables> + systemctl restart nftables container-test-run-user-firewall-nftables> + systemctl --no-pager show nftables.service container-test-run-user-firewall-nftables> + nft list table inet user-firewall container-test-run-user-firewall-nftables> table inet user-firewall { container-test-run-user-firewall-nftables> chain output { container-test-run-user-firewall-nftables> type filter hook output priority filter; policy accept; container-test-run-user-firewall-nftables> oifname "lo" counter packets 0 bytes 0 accept comment "allow lo" container-test-run-user-firewall-nftables> oifname "tun*" counter packets 0 bytes 0 accept comment "allow tun*" container-test-run-user-firewall-nftables> oifname "tap*" counter packets 0 bytes 0 accept comment "allow tap*" container-test-run-user-firewall-nftables> oifname "wg*" counter packets 0 bytes 0 accept comment "allow wg*" container-test-run-user-firewall-nftables> oifname "tailscale*" counter packets 0 bytes 0 accept comment "allow tailscale*" container-test-run-user-firewall-nftables> oifname "zt*" counter packets 0 bytes 0 accept comment "allow zt*" container-test-run-user-firewall-nftables> oifname "vpn*" counter packets 0 bytes 0 accept comment "allow vpn*" container-test-run-user-firewall-nftables> oifname "ipsec*" counter packets 0 bytes 0 accept comment "allow ipsec*" container-test-run-user-firewall-nftables> oifname "nebula*" counter packets 0 bytes 0 accept comment "allow nebula*" container-test-run-user-firewall-nftables> oifname "tinc*" counter packets 0 bytes 0 accept comment "allow tinc*" container-test-run-user-firewall-nftables> oifname "edge*" counter packets 0 bytes 0 accept comment "allow edge*" container-test-run-user-firewall-nftables> oifname "hyprspace" counter packets 0 bytes 0 accept comment "allow hyprspace" container-test-run-user-firewall-nftables> oifname "ham0" counter packets 0 bytes 0 accept comment "allow ham0" container-test-run-user-firewall-nftables> oifname "easytier" counter packets 0 bytes 0 accept comment "allow easytier" container-test-run-user-firewall-nftables> oifname "mycelium" counter packets 0 bytes 0 accept comment "allow mycelium" container-test-run-user-firewall-nftables> meta skuid 1002 counter packets 0 bytes 0 reject comment "blocked user bob" container-test-run-user-firewall-nftables> } container-test-run-user-firewall-nftables> } container-test-run-user-firewall-nftables> machine: waiting for success: runuser -u alice -- curl -s http://127.0.0.1:8080 container-test-run-user-firewall-nftables> + runuser -u alice -- curl -s http://127.0.0.1:8080 container-test-run-user-firewall-nftables> (finished: waiting for success: runuser -u alice -- curl -s http://127.0.0.1:8080, in 0.01 seconds) container-test-run-user-firewall-nftables> + runuser -u alice -- curl -s http://192.168.1.2 container-test-run-user-firewall-nftables> + runuser -u alice -- curl -s 'http://[2001:db8:1::2]' container-test-run-user-firewall-nftables> + runuser -u bob -- curl -s http://127.0.0.1:8080 container-test-run-user-firewall-nftables> + runuser -u bob -- curl -s --connect-timeout 2 http://192.168.1.2 container-test-run-user-firewall-nftables> + echo EXIT_CODE=7 container-test-run-user-firewall-nftables> + runuser -u bob -- curl -s --connect-timeout 2 'http://[2001:db8:1::2]' container-test-run-user-firewall-nftables> + echo EXIT_CODE=7 container-test-run-user-firewall-nftables> + nft list table inet user-firewall container-test-run-user-firewall-nftables> + systemctl --no-pager show setup-wg0-interface.service container-test-run-user-firewall-nftables> + systemctl --no-pager show nginx.service container-test-run-user-firewall-nftables> machine: waiting for success: nc -z 10.100.0.2 8081 container-test-run-user-firewall-nftables> + nc -z 10.100.0.2 8081 container-test-run-user-firewall-nftables> Connection to 10.100.0.2 8081 port [tcp/sunproxyadmin] succeeded! container-test-run-user-firewall-nftables> (finished: waiting for success: nc -z 10.100.0.2 8081, in 0.00 seconds) container-test-run-user-firewall-nftables> + ip link show wg0 container-test-run-user-firewall-nftables> + ip addr show wg0 container-test-run-user-firewall-nftables> + runuser -u alice -- curl -s --interface wg0 http://10.100.0.2:8081/ container-test-run-user-firewall-nftables> + runuser -u alice -- curl -s --interface wg0 'http://[fd00::2]:8081/' container-test-run-user-firewall-nftables> + runuser -u bob -- curl -s --interface wg0 http://10.100.0.2:8081/ container-test-run-user-firewall-nftables> + runuser -u bob -- curl -s --interface wg0 'http://[fd00::2]:8081/' container-test-run-user-firewall-nftables> + nft list table inet user-firewall container-test-run-user-firewall-nftables> + grep -E 'oifname.*wg' container-test-run-user-firewall-nftables> oifname "wg*" counter packets 1 bytes 56 accept comment "allow wg*" container-test-run-user-firewall-nftables> Container machine terminated by signal KILL. container-test-run-user-firewall-nftables> Container router terminated by signal KILL.