don't know how to build these paths:
  /nix/store/phf37v6d0cifcijkprx84zbfw2y0gpb3-container-test-run-certificates.drv
warning: ignoring the client-specified setting 'store', because it is a restricted setting and you are not a trusted user
building '/nix/store/6pqy9sd6i540zjhcfwicrkbkql6vmqcv-decrypt-age-secrets.drv' on nix-store.geninf.io:50051
decrypt-age-secrets> build01: building 6pqy9sd6i540zjhcfwicrkbkql6vmqcv-decrypt-age-secrets.drv
decrypt-age-secrets> structuredAttrs is enabled
building '/nix/store/za4ma07swxmf5689kckxa9jyyqays4dk-dry-activate.drv' on nix-store.geninf.io:50051
dry-activate> build01: building za4ma07swxmf5689kckxa9jyyqays4dk-dry-activate.drv
building '/nix/store/2maf2zc18zq8s29749j1z4ng1gp70q1x-activate.drv' on nix-store.geninf.io:50051
activate> build01: building 2maf2zc18zq8s29749j1z4ng1gp70q1x-activate.drv
dry-activate> structuredAttrs is enabled
activate> structuredAttrs is enabled
building '/nix/store/cgrmyld7rqjz86fb0f3h7h2k16xwfl4x-nixos-system-ca-test.drv' on nix-store.geninf.io:50051
nixos-system-ca-test> build01: building cgrmyld7rqjz86fb0f3h7h2k16xwfl4x-nixos-system-ca-test.drv
nixos-system-ca-test> structuredAttrs is enabled
building '/nix/store/h7744pklbs2inx5r4xa8l6wbircv13bm-run-ca-nspawn.drv' on nix-store.geninf.io:50051
run-ca-nspawn> build01: building h7744pklbs2inx5r4xa8l6wbircv13bm-run-ca-nspawn.drv
building '/nix/store/v6m0bxqav3qcxfz4bp7ha81r02d3316w-driverConfiguration.json.drv' on nix-store.geninf.io:50051
driverConfiguration.json> build01: building v6m0bxqav3qcxfz4bp7ha81r02d3316w-driverConfiguration.json.drv
driverConfiguration.json> structuredAttrs is enabled
building '/nix/store/k6jhvamrhhc7pmf51zhqzb4gm60l92xs-nixos-test-driver-certificates.drv' on nix-store.geninf.io:50051
nixos-test-driver-certificates> build01: building k6jhvamrhhc7pmf51zhqzb4gm60l92xs-nixos-test-driver-certificates.drv
nixos-test-driver-certificates> Running type check (enable/disable: config.skipTypeCheck)
nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck
nixos-test-driver-certificates> All checks passed!
nixos-test-driver-certificates> Linting test script (enable/disable: config.skipLint)
nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipLint
nixos-test-driver-certificates> All checks passed!
building '/nix/store/phf37v6d0cifcijkprx84zbfw2y0gpb3-container-test-run-certificates.drv' on nix-store.geninf.io:50051
container-test-run-certificates> build01: building phf37v6d0cifcijkprx84zbfw2y0gpb3-container-test-run-certificates.drv
container-test-run-certificates> Machine state will be reset. To keep it, pass --keep-machine-state
container-test-run-certificates> start all VLans
container-test-run-certificates> (finished: start all VLans, in 0.12 seconds)
container-test-run-certificates> Initializing machine ID from random generator.
container-test-run-certificates> Test will time out and terminate in 3600.0 seconds
container-test-run-certificates> run the VM test script
container-test-run-certificates> additionally exposed symbols:
container-test-run-certificates>     ca, client, server,
container-test-run-certificates>     vlan1,
container-test-run-certificates>     start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh
container-test-run-certificates> ca: systemd-nspawn running (pid 50)
container-test-run-certificates> ca: Waiting for journal at /build/vm-state-ca/var/log/journal...
container-test-run-certificates> ca: waiting for unit step-ca.service
container-test-run-certificates> nixos-nspawn(ca): TAP vde-tap1 not found; container will be isolated from VDE
container-test-run-certificates> nixos-nspawn(ca): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.
container-test-run-certificates> Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.
container-test-run-certificates> ░ Spawning container ca on /build/vm-state-ca.
container-test-run-certificates> ca # No journal files were found.
container-test-run-certificates> ca # No journal boot entry found for the specified boot (+0).
container-test-run-certificates> ca # [524359.586392] ca systemd-journald[82]: Journal started
container-test-run-certificates> ca # [524359.586464] ca systemd-journald[82]: Runtime Journal (/run/log/journal/55abcb3ef27440778f68bea658b66d39) is 8M, max 2.5G, 2.4G free.
container-test-run-certificates> ca # [524359.651195] ca systemd[1]: Finished Apply Kernel Variables.
container-test-run-certificates> ca # [524359.675694] ca systemd[1]: Finished Create Static Device Nodes in /dev gracefully.
container-test-run-certificates> ca # [524359.711362] ca systemd[1]: Starting Flush Journal to Persistent Storage...
container-test-run-certificates> ca # [524359.712415] ca systemd[1]: Starting Network Name Resolution...
container-test-run-certificates> ca # [524359.713483] ca systemd[1]: Starting Create Static Device Nodes in /dev...
container-test-run-certificates> ca # [524359.731391] ca systemd-journald[82]: Time spent on flushing to /var/log/journal/55abcb3ef27440778f68bea658b66d39 is 2.309ms for 7 entries.
container-test-run-certificates> ca # [524359.731391] ca systemd-journald[82]: System Journal (/var/log/journal/55abcb3ef27440778f68bea658b66d39) is 8M, max 4G, 3.9G free.
container-test-run-certificates> ca # [524359.802702] ca systemd[1]: Finished Firewall.
container-test-run-certificates> ca # [524359.802979] ca systemd[1]: Finished Flush Journal to Persistent Storage.
container-test-run-certificates> ca # [524359.806696] ca systemd[1]: Finished Create Static Device Nodes in /dev.
container-test-run-certificates> ca # [524359.809235] ca systemd[1]: Reached target Preparation for Local File Systems.
container-test-run-certificates> ca # [524359.809353] ca systemd[1]: Reached target Local File Systems.
container-test-run-certificates> ca # [524359.809414] ca systemd[1]: Reached target Preparation for Network.
container-test-run-certificates> ca # [524359.810364] ca systemd[1]: Listening on Boot Loader Control Service Socket.
container-test-run-certificates> ca # [524359.810589] ca systemd[1]: Listening on Network Management Resolve Hook Socket.
container-test-run-certificates> ca # [524359.810631] ca systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container
container-test-run-certificates> ca # [524359.813497] ca systemd[1]: Starting Save Transient machine-id to Disk...
container-test-run-certificates> ca # [524359.815761] ca systemd[1]: Starting Create System Files and Directories...
container-test-run-certificates> ca # [524359.815829] ca systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys
container-test-run-certificates> ca # [524359.817611] ca systemd[1]: Starting Network Management...
container-test-run-certificates> ca # [524359.874422] ca systemd-tmpfiles[191]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted
container-test-run-certificates> ca # [524359.874682] ca systemd-tmpfiles[191]: fchmod() of /var/log/journal failed: Operation not permitted
container-test-run-certificates> ca # [524359.874794] ca systemd-tmpfiles[191]: fchmod() of /var/log/journal/55abcb3ef27440778f68bea658b66d39 failed: Operation not permitted
container-test-run-certificates> ca # [524359.874958] ca systemd-tmpfiles[191]: fchmod() of /run/log/journal failed: Operation not permitted
container-test-run-certificates> ca # [524359.878122] ca systemd[1]: Finished Create System Files and Directories.
container-test-run-certificates> ca # [524359.879958] ca systemd[1]: Starting Rebuild Journal Catalog...
container-test-run-certificates> ca # [524359.880949] ca systemd[1]: Starting Record System Boot/Shutdown in UTMP...
container-test-run-certificates> ca # [524359.905118] ca systemd[1]: Finished Record System Boot/Shutdown in UTMP.
container-test-run-certificates> ca # [524359.912685] ca systemd[1]: Finished Rebuild Journal Catalog.
container-test-run-certificates> ca # [524359.914082] ca systemd[1]: Starting Update is Completed...
container-test-run-certificates> ca # [524359.927639] ca systemd[1]: Finished Update is Completed.
container-test-run-certificates> ca # [524361.278997] ca systemd-networkd[192]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted
container-test-run-certificates> ca # [524361.279093] ca systemd-networkd[192]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted
container-test-run-certificates> ca # [524361.319091] ca systemd-networkd[192]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.
container-test-run-certificates> ca # [524361.319256] ca systemd-networkd[192]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.
container-test-run-certificates> ca # [524361.319428] ca systemd-networkd[192]: lo: Link UP
container-test-run-certificates> ca # [524361.319433] ca systemd-networkd[192]: lo: Gained carrier
container-test-run-certificates> ca # [524361.319639] ca systemd-networkd[192]: eth1: Configuring with /etc/systemd/network/40-eth1.network.
container-test-run-certificates> ca # [524361.320251] ca systemd[1]: Started Network Management.
container-test-run-certificates> ca # [524361.320268] ca systemd-networkd[192]: eth1: Link UP
container-test-run-certificates> ca # [524361.320525] ca systemd-networkd[192]: eth1: Gained carrier
container-test-run-certificates> ca # [524361.321925] ca systemd[1]: Starting Enable Persistent Storage in systemd-networkd...
container-test-run-certificates> ca # [524361.362647] ca systemd[1]: Finished Enable Persistent Storage in systemd-networkd.
container-test-run-certificates> ca # [524362.433622] ca systemd[1]: etc-machine\x2did.mount: Deactivated successfully.
container-test-run-certificates> ca # [524362.442437] ca systemd[1]: Finished Save Transient machine-id to Disk.
container-test-run-certificates> ca # [524362.556717] ca systemd-networkd[192]: eth1: Gained IPv6LL
container-test-run-certificates> ca # [524362.600486] ca systemd-resolved[146]: Positive Trust Anchors:
container-test-run-certificates> ca # [524362.600505] ca systemd-resolved[146]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d
container-test-run-certificates> ca # [524362.600509] ca systemd-resolved[146]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16
container-test-run-certificates> ca # [524362.600544] ca systemd-resolved[146]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test
container-test-run-certificates> ca # [524362.601268] ca systemd-resolved[146]: Using system hostname 'ca'.
container-test-run-certificates> ca # [524362.604045] ca systemd[1]: Started Network Name Resolution.
container-test-run-certificates> ca # [524362.604147] ca systemd[1]: Reached target Network.
container-test-run-certificates> ca # [524362.604212] ca systemd[1]: Reached target Network is Online.
container-test-run-certificates> ca # [524362.604254] ca systemd[1]: Reached target System Initialization.
container-test-run-certificates> ca # [524362.604477] ca systemd[1]: Started Renew ACME Certificate for ca.foo.
container-test-run-certificates> ca # [524362.604504] ca systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container
container-test-run-certificates> ca # [524362.604530] ca systemd[1]: Started Daily Cleanup of Temporary Directories.
container-test-run-certificates> ca # [524362.604547] ca systemd[1]: Reached target Timer Units.
container-test-run-certificates> ca # [524362.604691] ca systemd[1]: Listening on D-Bus System Message Bus Socket.
container-test-run-certificates> ca # [524362.604803] ca systemd[1]: Listening on Nix Daemon Socket.
container-test-run-certificates> ca # [524362.604906] ca systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.
container-test-run-certificates> ca # [524362.604923] ca systemd[1]: Reached target Socket Units.
container-test-run-certificates> ca # [524362.604963] ca systemd[1]: Reached target Basic System.
container-test-run-certificates> ca # [524362.608059] ca systemd[1]: Starting Set up the ACME certificate renewal infrastructure...
container-test-run-certificates> ca # [524362.610588] ca systemd[1]: Starting Import lastlog data into lastlog2 database...
container-test-run-certificates> ca # [524362.610634] ca systemd[1]: nginx-config-reload.service skipped, unmet condition check ConditionPathExists=/var/lib/acme/ca.foo/fullchain.pem
container-test-run-certificates> ca # [524362.612028] ca systemd[1]: Starting Name Service Cache Daemon (nsncd)...
container-test-run-certificates> ca # [524362.613636] ca systemd[1]: Starting step-ca service...
container-test-run-certificates> ca # [524362.618517] ca systemd[1]: Starting D-Bus System Message Bus...
container-test-run-certificates> ca # [524362.799972] ca systemd[1]: Finished Import lastlog data into lastlog2 database.
container-test-run-certificates> ca # [524363.012143] ca acme-setup-privileged[205]: + set -euo pipefail
container-test-run-certificates> ca # [524363.012143] ca acme-setup-privileged[205]: + cd /var/lib/acme
container-test-run-certificates> ca # [524363.012143] ca acme-setup-privileged[205]: + chmod -R u=rwX,g=,o= .lego/accounts
container-test-run-certificates> ca # [524363.013630] ca acme-setup-privileged[205]: + chown -R acme .lego/accounts
container-test-run-certificates> ca # [524363.015266] ca acme-setup-privileged[205]: + for fixpath in ca.foo .lego/ca.foo
container-test-run-certificates> ca # [524363.015299] ca acme-setup-privileged[205]: + '[' -d ca.foo ']'
container-test-run-certificates> ca # [524363.015299] ca acme-setup-privileged[205]: + for fixpath in ca.foo .lego/ca.foo
container-test-run-certificates> ca # [524363.015299] ca acme-setup-privileged[205]: + '[' -d .lego/ca.foo ']'
container-test-run-certificates> ca # [524363.058046] ca systemd[1]: Started Name Service Cache Daemon (nsncd).
container-test-run-certificates> ca # [524363.058134] ca systemd[1]: Reached target Host and Network Name Lookups.
container-test-run-certificates> ca # [524363.059516] ca nsncd[207]: Oct 22 11:02:48.031 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"
container-test-run-certificates> ca # [524363.058189] ca systemd[1]: Reached target User and Group Name Lookups.
container-test-run-certificates> ca # [524363.060038] ca systemd[1]: Starting User Login Management...
container-test-run-certificates> ca # [524363.062142] ca systemd[1]: Starting Permit User Sessions...
container-test-run-certificates> ca # [524363.084237] ca systemd[1]: Finished Permit User Sessions.
container-test-run-certificates> ca # [524363.086114] ca systemd[1]: Started Console Getty.
container-test-run-certificates> ca # [524363.086167] ca systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0
container-test-run-certificates> ca # [524363.086187] ca systemd[1]: Reached target Login Prompts.
container-test-run-certificates> ca # [524363.299129] ca dbus-broker-launch[209]: Looking up NSS user entry for 'systemd-timesync'...
container-test-run-certificates> ca # [524363.301148] ca dbus-broker-launch[209]: NSS returned no entry for 'systemd-timesync'
container-test-run-certificates> ca # [524363.301148] ca dbus-broker-launch[209]: Invalid user-name in /nix/store/762dabv6ay349aizy81pwx5miflrybxy-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"
container-test-run-certificates> ca # [524363.302351] ca systemd[1]: Started D-Bus System Message Bus.
container-test-run-certificates> ca # [524363.315160] ca dbus-broker-launch[209]: Ready
container-test-run-certificates> ca # [524364.319876] ca systemd-logind[231]: New seat seat0.
container-test-run-certificates> ca # [524364.320278] ca systemd[1]: Started User Login Management.
container-test-run-certificates> ca # [524364.322498] ca systemd[1]: Starting linger-users.service...
container-test-run-certificates> ca # [524364.420784] ca systemd[1]: linger-users.service: Failed to read pids.max for control group /system.slice/linger-users.service, ignoring: No data available
container-test-run-certificates> ca # [524364.420820] ca systemd[1]: linger-users.service: Failed to read pids.max for control group /system.slice/linger-users.service, ignoring: No data available
container-test-run-certificates> ca # [524364.420847] ca systemd[1]: linger-users.service: Deactivated successfully.
container-test-run-certificates> ca # [524364.421051] ca systemd[1]: Finished linger-users.service.
container-test-run-certificates> ca # [524364.548246] ca acme-setup-start[223]: + set -euo pipefail
container-test-run-certificates> ca # [524364.548246] ca acme-setup-start[223]: + test -e ca/key.pem
container-test-run-certificates> ca # [524364.548972] ca acme-setup-start[223]: + minica --ca-key ca/key.pem --ca-cert ca/cert.pem --domains selfsigned.local
container-test-run-certificates> ca # [524364.602280] ca systemd[1]: Finished Set up the ACME certificate renewal infrastructure.
container-test-run-certificates> ca # [524364.605604] ca systemd[1]: Starting Ensure certificate for ca.foo...
container-test-run-certificates> ca # [524365.027065] ca step-ca[208]: badger 2026/10/22 11:02:49 INFO: All 0 tables opened in 0s
container-test-run-certificates> ca # [524365.041462] ca step-ca[208]: 2026/10/22 11:02:50 Building new tls configuration using step-ca x509 Signer Interface
container-test-run-certificates> ca # [524365.048644] ca step-ca[208]: 2026/10/22 11:02:50 Starting Smallstep CA/0.30.2 (linux/arm64)
container-test-run-certificates> ca # [524365.048644] ca step-ca[208]: 2026/10/22 11:02:50 Documentation: https://u.step.sm/docs/ca
container-test-run-certificates> ca # [524365.048644] ca step-ca[208]: 2026/10/22 11:02:50 Community Discord: https://u.step.sm/discord
container-test-run-certificates> ca # [524365.048644] ca step-ca[208]: 2026/10/22 11:02:50 Config file: /etc/smallstep/ca.json
container-test-run-certificates> ca # [524365.048644] ca step-ca[208]: 2026/10/22 11:02:50 The primary server URL is https://ca.foo:1443
container-test-run-certificates> ca # [524365.048644] ca step-ca[208]: 2026/10/22 11:02:50 Root certificates are available at https://ca.foo:1443/roots.pem
container-test-run-certificates> ca # [524365.048929] ca step-ca[208]: 2026/10/22 11:02:50 X.509 Root Fingerprint: 1cb765a327ce0d31958272ad91c44f7aef1cde110f3adea896b51c34bf5b6d7b
container-test-run-certificates> ca # [524365.050696] ca systemd[1]: Started step-ca service.
container-test-run-certificates> ca # [524365.051591] ca step-ca[208]: 2026/10/22 11:02:50 Serving HTTPS on 0.0.0.0:1443 ...
container-test-run-certificates> ca # [524366.147753] ca acme-ca.foo-start[264]: Waiting to acquire lock in /run/acme/
container-test-run-certificates> ca # [524366.151195] ca acme-ca.foo-start[264]: + '[' -e out/acme-success ']'
container-test-run-certificates> ca # [524366.151292] ca acme-ca.foo-start[264]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=ca.foo --ip-addresses=
container-test-run-certificates> ca # [524366.193993] ca acme-ca.foo-start[294]: + cd ca.foo
container-test-run-certificates> ca # [524366.194465] ca acme-ca.foo-start[294]: + cp -vp cert.pem ../out/cert.pem
container-test-run-certificates> ca # [524366.195604] ca acme-ca.foo-start[295]: 'cert.pem' -> '../out/cert.pem'
container-test-run-certificates> ca # [524366.195855] ca acme-ca.foo-start[294]: + cp -vp key.pem ../out/key.pem
container-test-run-certificates> ca # [524366.197409] ca acme-ca.foo-start[294]: 'key.pem' -> '../out/key.pem'
container-test-run-certificates> ca # [524366.197681] ca acme-ca.foo-start[264]: + cat out/cert.pem ca/cert.pem
container-test-run-certificates> ca # [524366.199374] ca acme-ca.foo-start[264]: + cp ca/cert.pem out/chain.pem
container-test-run-certificates> ca # [524366.201392] ca acme-ca.foo-start[264]: + cat out/key.pem out/fullchain.pem
container-test-run-certificates> ca # [524366.203405] ca acme-ca.foo-start[264]: + for fixpath in out certificates
container-test-run-certificates> ca # [524366.203437] ca acme-ca.foo-start[264]: + '[' -d out ']'
container-test-run-certificates> ca # [524366.203437] ca acme-ca.foo-start[264]: + chmod -R u=rwX,g=rX,o= out
container-test-run-certificates> ca # [524366.205185] ca acme-ca.foo-start[264]: + chown -R acme:nginx out
container-test-run-certificates> ca # [524366.208092] ca acme-ca.foo-start[264]: + for fixpath in out certificates
container-test-run-certificates> ca # [524366.208092] ca acme-ca.foo-start[264]: + '[' -d certificates ']'
container-test-run-certificates> ca # [524366.213740] ca systemd[1]: Finished Ensure certificate for ca.foo.
container-test-run-certificates> ca # [524366.217469] ca systemd[1]: Starting Nginx Web Server...
container-test-run-certificates> ca # [524367.401611] ca nginx-pre-start[306]: nginx: the configuration file /nix/store/qh7pxb0gkbaqaf5srf9jz6ivq2rzfrzv-nginx.conf syntax is ok
container-test-run-certificates> ca # [524367.402438] ca nginx-pre-start[306]: nginx: configuration file /nix/store/qh7pxb0gkbaqaf5srf9jz6ivq2rzfrzv-nginx.conf test is successful
container-test-run-certificates> ca # [524367.411771] ca systemd[1]: Started Nginx Web Server.
container-test-run-certificates> ca # [524367.412281] ca systemd[1]: Reached target Multi-User System.
container-test-run-certificates> ca # [524367.413598] ca systemd[1]: Starting Order (and renew) ACME certificate for ca.foo...
container-test-run-certificates> ca: still waiting for container 'ca' to reach ready state...
container-test-run-certificates> ca # [524368.553309] ca acme-order-renew-ca.foo-start[309]: Waiting to acquire lock in /run/acme/
container-test-run-certificates> ca # [524368.556462] ca acme-order-renew-ca.foo-start[309]: + set -euo pipefail
container-test-run-certificates> ca # [524368.560498] ca acme-order-renew-ca.foo-start[309]: + exec
container-test-run-certificates> ca # [524368.560498] ca acme-order-renew-ca.foo-start[309]: + /nix/store/qzw96vdyndz1czr5jpjn8blpj5f00rib-flock-0.4.0/bin/flock 11
container-test-run-certificates> ca # [524368.561789] ca acme-order-renew-ca.foo-start[320]: ++ find accounts -path '*/keys/*.key' -print -quit
container-test-run-certificates> ca # [524368.564357] ca acme-order-renew-ca.foo-start[309]: + '[' -n '' ']'
container-test-run-certificates> ca # [524368.564450] ca acme-order-renew-ca.foo-start[309]: + exec
container-test-run-certificates> ca # [524368.564666] ca acme-order-renew-ca.foo-start[309]: + '[' -e certificates/ca.foo.key ']'
container-test-run-certificates> ca # [524368.564711] ca acme-order-renew-ca.foo-start[309]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo:1443/acme/acme/directory --key-type ec256 -d ca.foo --no-random-sleep --renew-force --ari-disable --force-cert-domains
container-test-run-certificates> ca # [524368.822291] ca acme-order-renew-ca.foo-start[321]: 2026-10-22T11:02:53.794073794Z INFO  Private key saved. filepath=accounts/ca.foo_1443/none@none.tld/none@none.tld.key
container-test-run-certificates> ca # [524368.874143] ca step-ca[208]: time="2026-10-22T11:02:53Z" level=info duration=1.569221ms duration-ns=1569221 fields.time="2026-10-22T11:02:53Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=1244c7cc-727c-4418-bc36-ae3a1f327485 response="{\"newNonce\":\"https://ca.foo:1443/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo:1443/acme/acme/new-account\",\"newOrder\":\"https://ca.foo:1443/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo:1443/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo:1443/acme/acme/key-change\"}" size=277 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [524368.875591] ca acme-order-renew-ca.foo-start[321]: 2026-10-22T11:02:53.847308005Z INFO  Registering the account. email=none@none.tld
container-test-run-certificates> ca # [524368.895119] ca step-ca[208]: time="2026-10-22T11:02:53Z" level=info duration=18.978581ms duration-ns=18978581 fields.time="2026-10-22T11:02:53Z" method=HEAD name=ca nonce=S2lsMnhoNWNDTnBHaTlKakRpWFl3Tmt5U2NHTzlNZlU path=/acme/acme/new-nonce protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=1cc07566-fd41-4f3d-aff8-bcda4d786178 size=0 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [524368.906010] ca step-ca[208]: time="2026-10-22T11:02:53Z" level=info duration=9.554611ms duration-ns=9554611 fields.time="2026-10-22T11:02:53Z" method=POST name=ca nonce=TnQ1WTRYdXM1eUVVSUtLdzdyZEpZZjkyQ3hLM0M2R3Y path=/acme/acme/new-account protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=c33f6a4a-c6d3-4ecb-acc0-510a0aba3b4d response="{\"contact\":[\"mailto:none@none.tld\"],\"status\":\"valid\",\"orders\":\"https://ca.foo:1443/acme/acme/account/KBZv4vbMMVBPv0Wjh1odprnBD8TS0a3A/orders\"}" size=143 status=201 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [524368.906595] ca acme-order-renew-ca.foo-start[321]: 2026-10-22T11:02:53.878446952Z WARN  !!!! HEADS UP !!!!
container-test-run-certificates> ca # [524368.906595] ca acme-order-renew-ca.foo-start[321]: Your account credentials have been saved in your
container-test-run-certificates> ca # [524368.906595] ca acme-order-renew-ca.foo-start[321]: configuration directory at "accounts".
container-test-run-certificates> ca # [524368.906595] ca acme-order-renew-ca.foo-start[321]: You should make a secure backup of this folder now. This
container-test-run-certificates> ca # [524368.906595] ca acme-order-renew-ca.foo-start[321]: configuration directory will also contain private keys
container-test-run-certificates> ca # [524368.906595] ca acme-order-renew-ca.foo-start[321]: generated by lego and certificates obtained from the ACME
container-test-run-certificates> ca # [524368.906595] ca acme-order-renew-ca.foo-start[321]: server. Making regular backups of this folder is ideal.
container-test-run-certificates> ca # [524368.906754] ca acme-order-renew-ca.foo-start[321]: 2026-10-22T11:02:53.878593434Z INFO  Obtaining bundled SAN certificate. domains=ca.foo
container-test-run-certificates> ca # [524368.914829] ca step-ca[208]: time="2026-10-22T11:02:53Z" level=info duration=7.539263ms duration-ns=7539263 fields.time="2026-10-22T11:02:53Z" method=POST name=ca nonce=WlBvT0h4VEJ5djYxYjF3NmxHYWVSUlZhUEFhcmc1WHA path=/acme/acme/new-order protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=fac0ab2d-3e1c-4128-90f0-71301d07b68a response="{\"id\":\"Uo6ZMjDu1gKN2tS6DoxfHXJH9WpMvDqk\",\"status\":\"pending\",\"expires\":\"2026-10-23T11:02:53Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"ca.foo\"}],\"notBefore\":\"2026-10-22T11:01:53Z\",\"notAfter\":\"2027-01-20T11:02:53Z\",\"authorizations\":[\"https://ca.foo:1443/acme/acme/authz/vomYwUKzQuXRewYKSSAQaR9fFr8XkzLi\"],\"finalize\":\"https://ca.foo:1443/acme/acme/order/Uo6ZMjDu1gKN2tS6DoxfHXJH9WpMvDqk/finalize\"}" size=392 status=201 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [524368.984491] ca step-ca[208]: time="2026-10-22T11:02:53Z" level=info duration=12.163607ms duration-ns=12163607 fields.time="2026-10-22T11:02:53Z" method=POST name=ca nonce=emNTQ2I4MDNsdFRlM3hLM0tFUXNiRlFmaldPaTdSZVY path=/acme/acme/authz/vomYwUKzQuXRewYKSSAQaR9fFr8XkzLi protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=0f13b3bb-3ed7-4fb9-8c04-f1ae543a9c80 response="{\"identifier\":{\"type\":\"dns\",\"value\":\"ca.foo\"},\"status\":\"pending\",\"challenges\":[{\"type\":\"dns-01\",\"status\":\"pending\",\"token\":\"0KCEw9mi3hlfWPyT0bEOmfG9xndxF4JA\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/vomYwUKzQuXRewYKSSAQaR9fFr8XkzLi/Yp37KoQ6Mf1hLZfaNsQtDVfksOEY6VbT\"},{\"type\":\"http-01\",\"status\":\"pending\",\"token\":\"0KCEw9mi3hlfWPyT0bEOmfG9xndxF4JA\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/vomYwUKzQuXRewYKSSAQaR9fFr8XkzLi/438QxjkM0Cbym62dOvjrmAeMiSsMlrSG\"},{\"type\":\"tls-alpn-01\",\"status\":\"pending\",\"token\":\"0KCEw9mi3hlfWPyT0bEOmfG9xndxF4JA\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/vomYwUKzQuXRewYKSSAQaR9fFr8XkzLi/qQPljwVMHRSbZxex0JuSqFJvwGcJoaCl\"}],\"wildcard\":false,\"expires\":\"2026-10-23T11:02:53Z\"}" size=719 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [524368.985197] ca acme-order-renew-ca.foo-start[321]: 2026-10-22T11:02:53.957027471Z INFO  Use solver. domain=ca.foo type=http-01
container-test-run-certificates> ca # [524368.985251] ca acme-order-renew-ca.foo-start[321]: 2026-10-22T11:02:53.957084231Z INFO  http01: Trying to solve HTTP-01. domain=ca.foo
container-test-run-certificates> ca # [524368.995479] ca step-ca[208]: time="2026-10-22T11:02:53Z" level=info duration=9.425889ms duration-ns=9425889 fields.time="2026-10-22T11:02:53Z" method=POST name=ca nonce=djJxWkJRdGlLQVpnOFZNSlJVeVpJMWRxdnRuQk5QOFA path=/acme/acme/challenge/vomYwUKzQuXRewYKSSAQaR9fFr8XkzLi/438QxjkM0Cbym62dOvjrmAeMiSsMlrSG protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=37c9b5b2-b5ef-4014-8a15-a44e1d28250c response="{\"type\":\"http-01\",\"status\":\"valid\",\"token\":\"0KCEw9mi3hlfWPyT0bEOmfG9xndxF4JA\",\"validated\":\"2026-10-22T11:02:53Z\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/vomYwUKzQuXRewYKSSAQaR9fFr8XkzLi/438QxjkM0Cbym62dOvjrmAeMiSsMlrSG\"}" size=228 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [524368.995875] ca acme-order-renew-ca.foo-start[321]: 2026-10-22T11:02:53.967724377Z INFO  The server validated our request. domain=ca.foo
container-test-run-certificates> ca # [524368.996119] ca acme-order-renew-ca.foo-start[321]: 2026-10-22T11:02:53.967984501Z INFO  Validations succeeded; requesting certificates. domains=ca.foo
container-test-run-certificates> ca # [524369.005512] ca step-ca[208]: time="2026-10-22T11:02:53Z" level=info duration=8.500797ms duration-ns=8500797 fields.time="2026-10-22T11:02:53Z" method=POST name=ca nonce=N3ljZFVJZEFxRWFJTWxGVmZSY0NsSDdIS0RTS0FZd3U path=/acme/acme/order/Uo6ZMjDu1gKN2tS6DoxfHXJH9WpMvDqk/finalize protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=f59ba6af-fbdf-46fd-ac00-90e47788fe28 response="{\"id\":\"Uo6ZMjDu1gKN2tS6DoxfHXJH9WpMvDqk\",\"status\":\"valid\",\"expires\":\"2026-10-23T11:02:53Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"ca.foo\"}],\"notBefore\":\"2026-10-22T11:01:53Z\",\"notAfter\":\"2027-01-20T11:02:53Z\",\"authorizations\":[\"https://ca.foo:1443/acme/acme/authz/vomYwUKzQuXRewYKSSAQaR9fFr8XkzLi\"],\"finalize\":\"https://ca.foo:1443/acme/acme/order/Uo6ZMjDu1gKN2tS6DoxfHXJH9WpMvDqk/finalize\",\"certificate\":\"https://ca.foo:1443/acme/acme/certificate/HkalKLng0QgufLi8SvfJv8zTcCRvuKKR\"}" size=481 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [524369.007699] ca step-ca[208]: time="2026-10-22T11:02:53Z" level=info certificate="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" duration=1.46246ms duration-ns=1462460 fields.time="2026-10-22T11:02:53Z" issuer="Clan Intermediate CA" method=POST name=ca nonce=djRWaDRxZkgyYm5WSDZraEpjYlBFdWtXVHlWSzI5dm0 path=/acme/acme/certificate/HkalKLng0QgufLi8SvfJv8zTcCRvuKKR protocol=HTTP/1.1 provisioner=acme public-key="ECDSA P-256" referer= remote-address="2001:db8:1::1" request-id=1c54a661-a070-4f82-b26a-acc79de64f99 sans="map[dns:[ca.foo]]" serial=119612743529957693078778818179718567380 size=1344 status=200 subject=ca.foo user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= valid-from="2026-10-22T11:01:53Z" valid-to="2027-01-20T11:02:53Z"
container-test-run-certificates> ca # [524369.008032] ca acme-order-renew-ca.foo-start[321]: 2026-10-22T11:02:53.979866464Z INFO  Server responded with a certificate. domains=ca.foo
container-test-run-certificates> ca # [524369.008099] ca acme-order-renew-ca.foo-start[321]: 2026-10-22T11:02:53.979966225Z INFO  Writing file. filepath=certificates/ca.foo.crt
container-test-run-certificates> ca # [524369.008222] ca acme-order-renew-ca.foo-start[321]: 2026-10-22T11:02:53.980087027Z INFO  Writing file. filepath=certificates/ca.foo.issuer.crt
container-test-run-certificates> ca # [524369.008260] ca acme-order-renew-ca.foo-start[321]: 2026-10-22T11:02:53.980128348Z INFO  Writing file. filepath=certificates/ca.foo.key
container-test-run-certificates> ca # [524369.008340] ca acme-order-renew-ca.foo-start[321]: 2026-10-22T11:02:53.980208589Z INFO  Writing file. filepath=certificates/ca.foo.json
container-test-run-certificates> ca # [524369.018866] ca acme-order-renew-ca.foo-start[309]: + touch out/acme-success
container-test-run-certificates> ca # [524369.021516] ca acme-order-renew-ca.foo-start[309]: + cmp -s certificates/ca.foo.crt out/fullchain.pem
container-test-run-certificates> ca # [524369.023672] ca acme-order-renew-ca.foo-start[309]: + touch out/renewed
container-test-run-certificates> ca # [524369.025803] ca acme-order-renew-ca.foo-start[309]: + echo Installing new certificate
container-test-run-certificates> ca # [524369.025803] ca acme-order-renew-ca.foo-start[309]: Installing new certificate
container-test-run-certificates> ca # [524369.025852] ca acme-order-renew-ca.foo-start[309]: + cp -vp certificates/ca.foo.crt out/fullchain.pem
container-test-run-certificates> ca # [524369.028137] ca acme-order-renew-ca.foo-start[430]: 'certificates/ca.foo.crt' -> 'out/fullchain.pem'
container-test-run-certificates> ca # [524369.029116] ca acme-order-renew-ca.foo-start[309]: + cp -vp certificates/ca.foo.key out/key.pem
container-test-run-certificates> ca # [524369.031157] ca acme-order-renew-ca.foo-start[431]: 'certificates/ca.foo.key' -> 'out/key.pem'
container-test-run-certificates> ca # [524369.031446] ca acme-order-renew-ca.foo-start[309]: + cp -vp certificates/ca.foo.issuer.crt out/chain.pem
container-test-run-certificates> ca # [524369.032942] ca acme-order-renew-ca.foo-start[432]: 'certificates/ca.foo.issuer.crt' -> 'out/chain.pem'
container-test-run-certificates> ca # [524369.033211] ca acme-order-renew-ca.foo-start[309]: + ln -sf fullchain.pem out/cert.pem
container-test-run-certificates> ca # [524369.035407] ca acme-order-renew-ca.foo-start[309]: + cat out/key.pem out/fullchain.pem
container-test-run-certificates> ca # [524369.037335] ca acme-order-renew-ca.foo-start[309]: + for fixpath in out certificates
container-test-run-certificates> ca # [524369.037373] ca acme-order-renew-ca.foo-start[309]: + '[' -d out ']'
container-test-run-certificates> ca # [524369.037373] ca acme-order-renew-ca.foo-start[309]: + chmod -R u=rwX,g=rX,o= out
container-test-run-certificates> ca # [524369.039100] ca acme-order-renew-ca.foo-start[309]: + chown -R acme:nginx out
container-test-run-certificates> ca # [524369.059029] ca acme-order-renew-ca.foo-start[309]: + for fixpath in out certificates
container-test-run-certificates> ca # [524369.059083] ca acme-order-renew-ca.foo-start[309]: + '[' -d certificates ']'
container-test-run-certificates> ca # [524369.059083] ca acme-order-renew-ca.foo-start[309]: + chmod -R u=rwX,g=rX,o= certificates
container-test-run-certificates> ca # [524369.061143] ca acme-order-renew-ca.foo-start[309]: + chown -R acme:nginx certificates
container-test-run-certificates> ca # [524369.072157] ca acme-order-renew-ca.foo-start[309]: + chmod -R u=rwX,g=,o= accounts/.
container-test-run-certificates> ca # [524369.306523] ca systemd[1]: Reloading Nginx Web Server...
container-test-run-certificates> ca # [524369.320880] ca systemd[1]: acme-order-renew-ca.foo.service: Failed to read pids.max for control group /system.slice/acme-order-renew-ca.foo.service, ignoring: No data available
container-test-run-certificates> ca # [524369.320918] ca systemd[1]: acme-order-renew-ca.foo.service: Failed to read pids.max for control group /system.slice/acme-order-renew-ca.foo.service, ignoring: No data available
container-test-run-certificates> ca # [524369.320941] ca systemd[1]: acme-order-renew-ca.foo.service: Deactivated successfully.
container-test-run-certificates> ca # [524369.390580] ca systemd[1]: Finished Order (and renew) ACME certificate for ca.foo.
container-test-run-certificates> ca # [524369.390975] ca systemd[1]: acme-order-renew-ca.foo.service: Consumed 1.934s CPU time over 1.907s wall clock time.
container-test-run-certificates> ca # [524370.942787] ca nginx[448]: nginx: the configuration file /nix/store/qh7pxb0gkbaqaf5srf9jz6ivq2rzfrzv-nginx.conf syntax is ok
container-test-run-certificates> ca # [524370.971667] ca nginx[448]: nginx: configuration file /nix/store/qh7pxb0gkbaqaf5srf9jz6ivq2rzfrzv-nginx.conf test is successful
container-test-run-certificates> ca: (finished: waiting for unit step-ca.service, in 15.29 seconds)
container-test-run-certificates> ca: waiting for file '/var/lib/acme/ca.foo/fullchain.pem'
container-test-run-certificates> ca: (finished: waiting for file '/var/lib/acme/ca.foo/fullchain.pem', in 0.05 seconds)
container-test-run-certificates> ca: must succeed: systemctl restart nginx.service
container-test-run-certificates> ca # [524373.351918] ca systemd[1]: Reloaded Nginx Web Server.
container-test-run-certificates> ca # [524373.356589] ca systemd[1]: Startup finished in 14.308s.
container-test-run-certificates> ca # [524373.614335] ca systemd[1]: Stopping Nginx Web Server...
container-test-run-certificates> ca # [524373.633648] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.633648] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.633648] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.633648] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.633648] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.633648] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.633648] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.633648] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.633648] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.633648] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.633648] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.633648] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.633648] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634317] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634317] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634317] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634317] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634317] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634317] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634317] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634317] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634317] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634317] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634317] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634317] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634317] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634317] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634317] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634317] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634317] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634317] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634317] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634317] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634317] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634597] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634597] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634597] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634597] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634597] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634597] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634597] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634597] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634597] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634597] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634597] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634597] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634597] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634597] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634597] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634597] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634597] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634597] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634597] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634597] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634597] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634876] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634876] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634876] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634876] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634876] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634876] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634876] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634876] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634876] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634876] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634876] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634876] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634876] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634876] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634876] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634876] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634876] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634876] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634876] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634876] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.634876] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635145] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635145] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635145] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635145] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635145] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635145] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635145] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635145] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635145] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635145] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635145] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635145] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635145] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635145] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635145] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635145] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635145] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635145] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635145] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635145] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635145] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635421] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635421] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635421] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635421] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635421] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635421] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635421] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635421] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635421] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635421] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635421] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635421] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635421] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635421] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635421] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635421] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635421] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635421] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635421] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635421] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635421] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635703] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635703] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635703] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635703] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635703] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635703] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635703] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635703] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635703] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635703] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635703] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635703] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635703] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635703] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635703] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635703] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635703] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635703] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635703] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635703] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635703] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635976] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635976] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635976] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635976] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635976] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635976] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635976] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635976] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635976] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635976] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635976] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635976] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635976] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635976] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635976] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635976] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635976] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635976] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635976] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635976] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.635976] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636292] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636292] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636292] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636292] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636292] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636292] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636292] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636292] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636292] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636292] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636292] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636292] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636292] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636292] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636292] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636292] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636292] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636292] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636292] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636292] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636292] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636571] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636571] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636571] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636571] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636571] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636571] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636571] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636571] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636571] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636571] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636571] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636571] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636571] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636571] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636571] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636571] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636571] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636571] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636571] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636571] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636571] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636848] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636848] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636848] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636848] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636848] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636848] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636848] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636848] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636848] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636848] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636848] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636848] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636848] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.636848] ca nginx[308]: 2026/10/22 11:02:58 [alert] 308#308: sendmsg() failed (109: Too many references: cannot splice)
container-test-run-certificates> ca # [524373.858256] ca systemd[1]: nginx.service: Failed to read pids.max for control group /system.slice/nginx.service, ignoring: No data available
container-test-run-certificates> ca # [524373.858331] ca systemd[1]: nginx.service: Deactivated successfully.
container-test-run-certificates> ca # [524373.859341] ca systemd[1]: Stopped Nginx Web Server.
container-test-run-certificates> ca # [524373.859394] ca systemd[1]: nginx.service: Consumed 5.706s CPU time over 7.640s wall clock time.
container-test-run-certificates> ca # [524373.866569] ca systemd[1]: Starting Nginx Web Server...
container-test-run-certificates> ca: (finished: must succeed: systemctl restart nginx.service, in 1.98 seconds)
container-test-run-certificates> server: systemd-nspawn running (pid 621)
container-test-run-certificates> server: Waiting for journal at /build/vm-state-server/var/log/journal...
container-test-run-certificates> client: systemd-nspawn running (pid 627)
container-test-run-certificates> client: Waiting for journal at /build/vm-state-client/var/log/journal...
container-test-run-certificates> server: waiting for file '/var/lib/acme/test.foo/fullchain.pem'
container-test-run-certificates> nixos-nspawn(server): TAP vde-tap1 not found; container will be isolated from VDE
container-test-run-certificates> nixos-nspawn(server): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.
container-test-run-certificates> Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.
container-test-run-certificates> ░ Spawning container server on /build/vm-state-server.
container-test-run-certificates> nixos-nspawn(client): TAP vde-tap1 not found; container will be isolated from VDE
container-test-run-certificates> nixos-nspawn(client): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.
container-test-run-certificates> Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.
container-test-run-certificates> ░ Spawning container client on /build/vm-state-client.
container-test-run-certificates> ca # [524375.535859] ca nginx-pre-start[551]: nginx: the configuration file /nix/store/qh7pxb0gkbaqaf5srf9jz6ivq2rzfrzv-nginx.conf syntax is ok
container-test-run-certificates> ca # [524375.538493] ca nginx-pre-start[551]: nginx: configuration file /nix/store/qh7pxb0gkbaqaf5srf9jz6ivq2rzfrzv-nginx.conf test is successful
container-test-run-certificates> ca # [524375.543574] ca systemd[1]: Started Nginx Web Server.
container-test-run-certificates> server # No journal files were found.
container-test-run-certificates> server # No journal boot entry found for the specified boot (+0).
container-test-run-certificates> client # No journal files were found.
container-test-run-certificates> client # No journal boot entry found for the specified boot (+0).
container-test-run-certificates> server # [524376.852356] server systemd-journald[73]: Journal started
container-test-run-certificates> server # [524376.852413] server systemd-journald[73]: Runtime Journal (/run/log/journal/96bd543319d84dcc891a5934f2a8e9b4) is 8M, max 2.5G, 2.4G free.
container-test-run-certificates> server # [524376.909725] server systemd[1]: Finished Apply Kernel Variables.
container-test-run-certificates> server # [524376.930197] server systemd[1]: Finished Create Static Device Nodes in /dev gracefully.
container-test-run-certificates> server # [524376.950675] server systemd[1]: Starting Flush Journal to Persistent Storage...
container-test-run-certificates> server # [524376.951717] server systemd[1]: Starting Network Name Resolution...
container-test-run-certificates> server # [524376.952867] server systemd[1]: Starting Create Static Device Nodes in /dev...
container-test-run-certificates> server # [524377.000034] server systemd-journald[73]: Time spent on flushing to /var/log/journal/96bd543319d84dcc891a5934f2a8e9b4 is 1.653ms for 7 entries.
container-test-run-certificates> server # [524377.000034] server systemd-journald[73]: System Journal (/var/log/journal/96bd543319d84dcc891a5934f2a8e9b4) is 8M, max 4G, 3.9G free.
container-test-run-certificates> server # [524377.020371] server systemd[1]: Finished Create Static Device Nodes in /dev.
container-test-run-certificates> server # [524377.021125] server systemd[1]: Reached target Preparation for Local File Systems.
container-test-run-certificates> server # [524377.021274] server systemd[1]: Reached target Local File Systems.
container-test-run-certificates> server # [524377.022188] server systemd[1]: Listening on Boot Loader Control Service Socket.
container-test-run-certificates> server # [524377.022263] server systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container
container-test-run-certificates> server # [524377.023380] server systemd[1]: Starting Save Transient machine-id to Disk...
container-test-run-certificates> server # [524377.023426] server systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys
container-test-run-certificates> server # [524377.026958] server systemd[1]: Finished Firewall.
container-test-run-certificates> server # [524377.027127] server systemd[1]: Reached target Preparation for Network.
container-test-run-certificates> server # [524377.027444] server systemd[1]: Listening on Network Management Resolve Hook Socket.
container-test-run-certificates> server # [524377.028637] server systemd[1]: Starting Network Management...
container-test-run-certificates> server # [524377.029005] server systemd[1]: Finished Flush Journal to Persistent Storage.
container-test-run-certificates> server # [524377.030772] server systemd[1]: Starting Create System Files and Directories...
container-test-run-certificates> server # [524377.046823] server systemd-tmpfiles[183]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted
container-test-run-certificates> server # [524377.046985] server systemd-tmpfiles[183]: fchmod() of /var/log/journal failed: Operation not permitted
container-test-run-certificates> server # [524377.047090] server systemd-tmpfiles[183]: fchmod() of /var/log/journal/96bd543319d84dcc891a5934f2a8e9b4 failed: Operation not permitted
container-test-run-certificates> server # [524377.047248] server systemd-tmpfiles[183]: fchmod() of /run/log/journal failed: Operation not permitted
container-test-run-certificates> server # [524377.051448] server systemd[1]: Finished Create System Files and Directories.
container-test-run-certificates> server # [524377.053320] server systemd[1]: Starting Rebuild Journal Catalog...
container-test-run-certificates> server # [524377.054574] server systemd[1]: Starting Record System Boot/Shutdown in UTMP...
container-test-run-certificates> server # [524377.068766] server systemd[1]: Finished Record System Boot/Shutdown in UTMP.
container-test-run-certificates> server # [524377.074232] server systemd[1]: Finished Rebuild Journal Catalog.
container-test-run-certificates> server # [524377.075483] server systemd[1]: Starting Update is Completed...
container-test-run-certificates> server # [524377.086854] server systemd[1]: Finished Update is Completed.
container-test-run-certificates> server # [524377.087116] server systemd[1]: Finished Save Transient machine-id to Disk.
container-test-run-certificates> client # [524376.861190] client systemd-journald[73]: Journal started
container-test-run-certificates> client # [524376.861245] client systemd-journald[73]: Runtime Journal (/run/log/journal/45fc70ac936a45b4a1cd513dd9a630a1) is 8M, max 2.5G, 2.4G free.
container-test-run-certificates> client # [524376.916675] client systemd[1]: Finished Apply Kernel Variables.
container-test-run-certificates> client # [524376.935874] client systemd[1]: Finished Create Static Device Nodes in /dev gracefully.
container-test-run-certificates> client # [524376.992790] client systemd[1]: Starting Flush Journal to Persistent Storage...
container-test-run-certificates> client # [524376.994408] client systemd[1]: Starting Network Name Resolution...
container-test-run-certificates> client # [524376.999233] client systemd[1]: Starting Create Static Device Nodes in /dev...
container-test-run-certificates> client # [524377.004738] client systemd-journald[73]: Time spent on flushing to /var/log/journal/45fc70ac936a45b4a1cd513dd9a630a1 is 1.704ms for 7 entries.
container-test-run-certificates> client # [524377.004738] client systemd-journald[73]: System Journal (/var/log/journal/45fc70ac936a45b4a1cd513dd9a630a1) is 8M, max 4G, 3.9G free.
container-test-run-certificates> client # [524377.062318] client systemd[1]: Finished Firewall.
container-test-run-certificates> client # [524377.062462] client systemd[1]: Finished Flush Journal to Persistent Storage.
container-test-run-certificates> client # [524377.063027] client systemd[1]: Finished Create Static Device Nodes in /dev.
container-test-run-certificates> client # [524377.065850] client systemd[1]: Reached target Preparation for Local File Systems.
container-test-run-certificates> client # [524377.065963] client systemd[1]: Reached target Local File Systems.
container-test-run-certificates> client # [524377.066017] client systemd[1]: Reached target Preparation for Network.
container-test-run-certificates> client # [524377.066770] client systemd[1]: Listening on Boot Loader Control Service Socket.
container-test-run-certificates> client # [524377.066952] client systemd[1]: Listening on Network Management Resolve Hook Socket.
container-test-run-certificates> client # [524377.066993] client systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container
container-test-run-certificates> client # [524377.068035] client systemd[1]: Starting Save Transient machine-id to Disk...
container-test-run-certificates> client # [524377.068997] client systemd[1]: Starting Create System Files and Directories...
container-test-run-certificates> client # [524377.069031] client systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys
container-test-run-certificates> client # [524377.069944] client systemd[1]: Starting Network Management...
container-test-run-certificates> client # [524377.085953] client systemd-tmpfiles[178]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted
container-test-run-certificates> client # [524377.086118] client systemd-tmpfiles[178]: fchmod() of /var/log/journal failed: Operation not permitted
container-test-run-certificates> client # [524377.086225] client systemd-tmpfiles[178]: fchmod() of /var/log/journal/45fc70ac936a45b4a1cd513dd9a630a1 failed: Operation not permitted
container-test-run-certificates> client # [524377.086386] client systemd-tmpfiles[178]: fchmod() of /run/log/journal failed: Operation not permitted
container-test-run-certificates> client # [524377.092233] client systemd[1]: Finished Create System Files and Directories.
container-test-run-certificates> client # [524377.093588] client systemd[1]: Starting Rebuild Journal Catalog...
container-test-run-certificates> client # [524377.094364] client systemd[1]: Starting Record System Boot/Shutdown in UTMP...
container-test-run-certificates> client # [524377.104763] client systemd[1]: Finished Save Transient machine-id to Disk.
container-test-run-certificates> client # [524377.109935] client systemd[1]: Finished Record System Boot/Shutdown in UTMP.
container-test-run-certificates> client # [524377.118337] client systemd[1]: Finished Rebuild Journal Catalog.
container-test-run-certificates> client # [524377.119531] client systemd[1]: Starting Update is Completed...
container-test-run-certificates> client # [524377.131378] client systemd[1]: Finished Update is Completed.
container-test-run-certificates> server # [524377.844770] server systemd[1]: etc-machine\x2did.mount: Deactivated successfully.
container-test-run-certificates> client # [524377.859592] client systemd[1]: etc-machine\x2did.mount: Deactivated successfully.
container-test-run-certificates> server # [524379.127583] server systemd-networkd[181]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted
container-test-run-certificates> server # [524379.127701] server systemd-networkd[181]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted
container-test-run-certificates> server # [524379.141683] server systemd-networkd[181]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.
container-test-run-certificates> server # [524379.141849] server systemd-networkd[181]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.
container-test-run-certificates> server # [524379.142036] server systemd-networkd[181]: lo: Link UP
container-test-run-certificates> server # [524379.142041] server systemd-networkd[181]: lo: Gained carrier
container-test-run-certificates> server # [524379.142249] server systemd-networkd[181]: eth1: Configuring with /etc/systemd/network/40-eth1.network.
container-test-run-certificates> server # [524379.142769] server systemd-networkd[181]: eth1: Link UP
container-test-run-certificates> server # [524379.142770] server systemd[1]: Started Network Management.
container-test-run-certificates> server # [524379.142979] server systemd-networkd[181]: eth1: Gained carrier
container-test-run-certificates> server # [524379.143851] server systemd[1]: Starting Enable Persistent Storage in systemd-networkd...
container-test-run-certificates> server # [524379.178301] server systemd[1]: Finished Enable Persistent Storage in systemd-networkd.
container-test-run-certificates> client # [524379.192523] client systemd-networkd[179]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted
container-test-run-certificates> client # [524379.192626] client systemd-networkd[179]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted
container-test-run-certificates> client # [524379.203132] client systemd-networkd[179]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.
container-test-run-certificates> client # [524379.203297] client systemd-networkd[179]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.
container-test-run-certificates> client # [524379.203481] client systemd-networkd[179]: lo: Link UP
container-test-run-certificates> client # [524379.203486] client systemd-networkd[179]: lo: Gained carrier
container-test-run-certificates> client # [524379.203701] client systemd-networkd[179]: eth1: Configuring with /etc/systemd/network/40-eth1.network.
container-test-run-certificates> client # [524379.204226] client systemd-networkd[179]: eth1: Link UP
container-test-run-certificates> client # [524379.204285] client systemd[1]: Started Network Management.
container-test-run-certificates> client # [524379.204465] client systemd-networkd[179]: eth1: Gained carrier
container-test-run-certificates> client # [524379.205405] client systemd[1]: Starting Enable Persistent Storage in systemd-networkd...
container-test-run-certificates> client # [524379.252034] client systemd[1]: Finished Enable Persistent Storage in systemd-networkd.
container-test-run-certificates> client # [524379.645357] client systemd-resolved[155]: Positive Trust Anchors:
container-test-run-certificates> client # [524379.645372] client systemd-resolved[155]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d
container-test-run-certificates> client # [524379.645376] client systemd-resolved[155]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16
container-test-run-certificates> client # [524379.645410] client systemd-resolved[155]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test
container-test-run-certificates> client # [524379.646356] client systemd-resolved[155]: Using system hostname 'client'.
container-test-run-certificates> client # [524379.647917] client systemd[1]: Started Network Name Resolution.
container-test-run-certificates> client # [524379.648062] client systemd[1]: Reached target Network.
container-test-run-certificates> client # [524379.648137] client systemd[1]: Reached target System Initialization.
container-test-run-certificates> client # [524379.648202] client systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container
container-test-run-certificates> client # [524379.648239] client systemd[1]: Started Daily Cleanup of Temporary Directories.
container-test-run-certificates> client # [524379.648258] client systemd[1]: Reached target Timer Units.
container-test-run-certificates> client # [524379.648416] client systemd[1]: Listening on D-Bus System Message Bus Socket.
container-test-run-certificates> client # [524379.648571] client systemd[1]: Listening on Nix Daemon Socket.
container-test-run-certificates> client # [524379.648709] client systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.
container-test-run-certificates> client # [524379.648739] client systemd[1]: Reached target Socket Units.
container-test-run-certificates> client # [524379.648788] client systemd[1]: Reached target Basic System.
container-test-run-certificates> client # [524379.650109] client systemd[1]: Starting Import lastlog data into lastlog2 database...
container-test-run-certificates> client # [524379.651099] client systemd[1]: Starting Name Service Cache Daemon (nsncd)...
container-test-run-certificates> client # [524379.652528] client systemd[1]: Starting D-Bus System Message Bus...
container-test-run-certificates> client # [524379.709036] client systemd[1]: Finished Import lastlog data into lastlog2 database.
container-test-run-certificates> client # [524379.886792] client nsncd[193]: Oct 22 11:03:04.858 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"
container-test-run-certificates> client # [524379.886770] client systemd[1]: Started Name Service Cache Daemon (nsncd).
container-test-run-certificates> client # [524379.886854] client systemd[1]: Reached target Host and Network Name Lookups.
container-test-run-certificates> client # [524379.886915] client systemd[1]: Reached target User and Group Name Lookups.
container-test-run-certificates> client # [524379.888534] client systemd[1]: Starting User Login Management...
container-test-run-certificates> client # [524379.889483] client systemd[1]: Starting Permit User Sessions...
container-test-run-certificates> server # [524379.739215] server systemd-resolved[138]: Positive Trust Anchors:
container-test-run-certificates> server # [524379.739232] server systemd-resolved[138]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d
container-test-run-certificates> server # [524379.739236] server systemd-resolved[138]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16
container-test-run-certificates> server # [524379.739272] server systemd-resolved[138]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test
container-test-run-certificates> server # [524379.740284] server systemd-resolved[138]: Using system hostname 'server'.
container-test-run-certificates> server # [524379.741834] server systemd[1]: Started Network Name Resolution.
container-test-run-certificates> server # [524379.741938] server systemd[1]: Reached target Network.
container-test-run-certificates> server # [524379.742000] server systemd[1]: Reached target Network is Online.
container-test-run-certificates> server # [524379.742045] server systemd[1]: Reached target System Initialization.
container-test-run-certificates> server # [524379.742269] server systemd[1]: Started Renew ACME Certificate for test.foo.
container-test-run-certificates> server # [524379.742305] server systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container
container-test-run-certificates> server # [524379.742340] server systemd[1]: Started Daily Cleanup of Temporary Directories.
container-test-run-certificates> server # [524379.742359] server systemd[1]: Reached target Timer Units.
container-test-run-certificates> server # [524379.742493] server systemd[1]: Listening on D-Bus System Message Bus Socket.
container-test-run-certificates> server # [524379.742604] server systemd[1]: Listening on Nix Daemon Socket.
container-test-run-certificates> server # [524379.742720] server systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.
container-test-run-certificates> server # [524379.742772] server systemd[1]: Reached target Socket Units.
container-test-run-certificates> server # [524379.742818] server systemd[1]: Reached target Basic System.
container-test-run-certificates> server # [524379.744201] server systemd[1]: Starting Set up the ACME certificate renewal infrastructure...
container-test-run-certificates> server # [524379.745033] server systemd[1]: Starting Import lastlog data into lastlog2 database...
container-test-run-certificates> server # [524379.745073] server systemd[1]: nginx-config-reload.service skipped, unmet condition check ConditionPathExists=/var/lib/acme/test.foo/fullchain.pem
container-test-run-certificates> server # [524379.746326] server systemd[1]: Starting Name Service Cache Daemon (nsncd)...
container-test-run-certificates> server # [524379.747569] server systemd[1]: Starting D-Bus System Message Bus...
container-test-run-certificates> server # [524379.765133] server systemd[1]: Finished Import lastlog data into lastlog2 database.
container-test-run-certificates> server # [524379.882602] server acme-setup-privileged[196]: + set -euo pipefail
container-test-run-certificates> server # [524379.882602] server acme-setup-privileged[196]: + cd /var/lib/acme
container-test-run-certificates> server # [524379.883075] server acme-setup-privileged[196]: + chmod -R u=rwX,g=,o= .lego/accounts
container-test-run-certificates> server # [524379.884401] server acme-setup-privileged[196]: + chown -R acme .lego/accounts
container-test-run-certificates> server # [524379.886583] server acme-setup-privileged[196]: + for fixpath in test.foo .lego/test.foo
container-test-run-certificates> server # [524379.886620] server acme-setup-privileged[196]: + '[' -d test.foo ']'
container-test-run-certificates> server # [524379.886620] server acme-setup-privileged[196]: + for fixpath in test.foo .lego/test.foo
container-test-run-certificates> server # [524379.886620] server acme-setup-privileged[196]: + '[' -d .lego/test.foo ']'
container-test-run-certificates> server # [524379.925587] server nsncd[198]: Oct 22 11:03:04.897 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"
container-test-run-certificates> server # [524379.925648] server systemd[1]: Started Name Service Cache Daemon (nsncd).
container-test-run-certificates> server # [524379.925732] server systemd[1]: Reached target Host and Network Name Lookups.
container-test-run-certificates> server # [524379.925825] server systemd[1]: Reached target User and Group Name Lookups.
container-test-run-certificates> server # [524379.927305] server systemd[1]: Starting User Login Management...
container-test-run-certificates> server # [524379.928049] server systemd[1]: Starting Permit User Sessions...
container-test-run-certificates> server # [524379.938108] server systemd[1]: Finished Permit User Sessions.
container-test-run-certificates> server # [524379.939144] server systemd[1]: Started Console Getty.
container-test-run-certificates> server # [524379.939183] server systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0
container-test-run-certificates> server # [524379.939204] server systemd[1]: Reached target Login Prompts.
container-test-run-certificates> client # [524379.931766] client systemd[1]: Finished Permit User Sessions.
container-test-run-certificates> client # [524379.932879] client systemd[1]: Started Console Getty.
container-test-run-certificates> client # [524379.932926] client systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0
container-test-run-certificates> client # [524379.932945] client systemd[1]: Reached target Login Prompts.
container-test-run-certificates> client # [524380.072496] client dbus-broker-launch[194]: Looking up NSS user entry for 'systemd-timesync'...
container-test-run-certificates> client # [524380.073391] client dbus-broker-launch[194]: NSS returned no entry for 'systemd-timesync'
container-test-run-certificates> client # [524380.073391] client dbus-broker-launch[194]: Invalid user-name in /nix/store/zdh24qgv3mrr5fw8yda2rk9637jb292d-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"
container-test-run-certificates> client # [524380.074702] client systemd[1]: Started D-Bus System Message Bus.
container-test-run-certificates> client # [524380.081200] client dbus-broker-launch[194]: Ready
container-test-run-certificates> server # [524380.114977] server dbus-broker-launch[199]: Looking up NSS user entry for 'systemd-timesync'...
container-test-run-certificates> server # [524380.115757] server dbus-broker-launch[199]: NSS returned no entry for 'systemd-timesync'
container-test-run-certificates> server # [524380.115757] server dbus-broker-launch[199]: Invalid user-name in /nix/store/3y9asvwb2yn70jkig61zk5h055nis700-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"
container-test-run-certificates> server # [524380.117738] server systemd[1]: Started D-Bus System Message Bus.
container-test-run-certificates> server # [524380.124542] server dbus-broker-launch[199]: Ready
container-test-run-certificates> client # [524380.444378] client systemd-networkd[179]: eth1: Gained IPv6LL
container-test-run-certificates> server # [524380.572269] server systemd-networkd[181]: eth1: Gained IPv6LL
container-test-run-certificates> client # [524381.485115] client systemd-logind[209]: New seat seat0.
container-test-run-certificates> client # [524381.485448] client systemd[1]: Started User Login Management.
container-test-run-certificates> client # [524381.486863] client systemd[1]: Starting linger-users.service...
container-test-run-certificates> client # [524381.501194] client systemd[1]: linger-users.service: Failed to read pids.max for control group /system.slice/linger-users.service, ignoring: No data available
container-test-run-certificates> client # [524381.501230] client systemd[1]: linger-users.service: Failed to read pids.max for control group /system.slice/linger-users.service, ignoring: No data available
container-test-run-certificates> client # [524381.501269] client systemd[1]: linger-users.service: Deactivated successfully.
container-test-run-certificates> client # [524381.501522] client systemd[1]: Finished linger-users.service.
container-test-run-certificates> client # [524381.501952] client systemd[1]: Reached target Multi-User System.
container-test-run-certificates> client # [524381.502121] client systemd[1]: Startup finished in 5.189s.
container-test-run-certificates> server # [524381.543234] server systemd-logind[225]: New seat seat0.
container-test-run-certificates> server # [524381.543563] server systemd[1]: Started User Login Management.
container-test-run-certificates> server # [524381.545027] server systemd[1]: Starting linger-users.service...
container-test-run-certificates> server # [524381.589067] server systemd[1]: linger-users.service: Failed to read pids.max for control group /system.slice/linger-users.service, ignoring: No data available
container-test-run-certificates> server # [524381.589104] server systemd[1]: linger-users.service: Failed to read pids.max for control group /system.slice/linger-users.service, ignoring: No data available
container-test-run-certificates> server # [524381.589130] server systemd[1]: linger-users.service: Deactivated successfully.
container-test-run-certificates> server # [524381.589352] server systemd[1]: Finished linger-users.service.
container-test-run-certificates> server # [524381.615788] server acme-setup-start[212]: + set -euo pipefail
container-test-run-certificates> server # [524381.615788] server acme-setup-start[212]: + test -e ca/key.pem
container-test-run-certificates> server # [524381.616207] server acme-setup-start[212]: + minica --ca-key ca/key.pem --ca-cert ca/cert.pem --domains selfsigned.local
container-test-run-certificates> server # [524381.636426] server systemd[1]: Finished Set up the ACME certificate renewal infrastructure.
container-test-run-certificates> server # [524381.638000] server systemd[1]: Starting Ensure certificate for test.foo...
container-test-run-certificates> server # [524383.642727] server acme-test.foo-start[249]: Waiting to acquire lock in /run/acme/
container-test-run-certificates> server # [524383.645741] server acme-test.foo-start[249]: + '[' -e out/acme-success ']'
container-test-run-certificates> server # [524383.645847] server acme-test.foo-start[249]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=test.foo --ip-addresses=
container-test-run-certificates> server # [524383.657053] server acme-test.foo-start[259]: + cd test.foo
container-test-run-certificates> server # [524383.657458] server acme-test.foo-start[259]: + cp -vp cert.pem ../out/cert.pem
container-test-run-certificates> server # [524383.658577] server acme-test.foo-start[260]: 'cert.pem' -> '../out/cert.pem'
container-test-run-certificates> server # [524383.658772] server acme-test.foo-start[259]: + cp -vp key.pem ../out/key.pem
container-test-run-certificates> server # [524383.659895] server acme-test.foo-start[259]: 'key.pem' -> '../out/key.pem'
container-test-run-certificates> server # [524383.660237] server acme-test.foo-start[249]: + cat out/cert.pem ca/cert.pem
container-test-run-certificates> server # [524383.661879] server acme-test.foo-start[249]: + cp ca/cert.pem out/chain.pem
container-test-run-certificates> server # [524383.663409] server acme-test.foo-start[249]: + cat out/key.pem out/fullchain.pem
container-test-run-certificates> server # [524383.665048] server acme-test.foo-start[249]: + for fixpath in out certificates
container-test-run-certificates> server # [524383.665048] server acme-test.foo-start[249]: + '[' -d out ']'
container-test-run-certificates> server # [524383.665112] server acme-test.foo-start[249]: + chmod -R u=rwX,g=rX,o= out
container-test-run-certificates> server # [524383.666458] server acme-test.foo-start[249]: + chown -R acme:nginx out
container-test-run-certificates> server # [524383.668861] server acme-test.foo-start[249]: + for fixpath in out certificates
container-test-run-certificates> server # [524383.668884] server acme-test.foo-start[249]: + '[' -d certificates ']'
container-test-run-certificates> server # [524383.673399] server systemd[1]: Finished Ensure certificate for test.foo.
container-test-run-certificates> server # [524383.675054] server systemd[1]: Starting Nginx Web Server...
container-test-run-certificates> server # [524384.757447] server nginx-pre-start[271]: nginx: the configuration file /nix/store/az8mvx3xy76ih9zlbva3cgs9jp0nf43k-nginx.conf syntax is ok
container-test-run-certificates> server # [524384.757911] server nginx-pre-start[271]: nginx: configuration file /nix/store/az8mvx3xy76ih9zlbva3cgs9jp0nf43k-nginx.conf test is successful
container-test-run-certificates> server # [524384.765104] server systemd[1]: Started Nginx Web Server.
container-test-run-certificates> server # [524384.765560] server systemd[1]: Reached target Multi-User System.
container-test-run-certificates> server # [524384.766933] server systemd[1]: Starting Order (and renew) ACME certificate for test.foo...
container-test-run-certificates> server: still waiting for container 'server' to reach ready state...
container-test-run-certificates> server # [524386.733847] server acme-order-renew-test.foo-start[274]: Waiting to acquire lock in /run/acme/
container-test-run-certificates> server # [524386.737338] server acme-order-renew-test.foo-start[274]: + set -euo pipefail
container-test-run-certificates> server # [524386.737493] server acme-order-renew-test.foo-start[274]: + exec
container-test-run-certificates> server # [524386.737548] server acme-order-renew-test.foo-start[274]: + /nix/store/qzw96vdyndz1czr5jpjn8blpj5f00rib-flock-0.4.0/bin/flock 11
container-test-run-certificates> server # [524386.738958] server acme-order-renew-test.foo-start[365]: ++ find accounts -path '*/keys/*.key' -print -quit
container-test-run-certificates> server # [524386.741414] server acme-order-renew-test.foo-start[274]: + '[' -n '' ']'
container-test-run-certificates> server # [524386.741467] server acme-order-renew-test.foo-start[274]: + exec
container-test-run-certificates> server # [524386.741535] server acme-order-renew-test.foo-start[274]: + '[' -e certificates/test.foo.key ']'
container-test-run-certificates> server # [524386.741578] server acme-order-renew-test.foo-start[274]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo/acme/acme/directory --key-type ec256 -d test.foo --no-random-sleep --renew-force --ari-disable --force-cert-domains
container-test-run-certificates> server # [524386.809043] server acme-order-renew-test.foo-start[366]: 2026-10-22T11:03:11.780864647Z INFO  Private key saved. filepath=accounts/ca.foo/none@none.tld/none@none.tld.key
container-test-run-certificates> server # [524386.849574] server acme-order-renew-test.foo-start[366]: 2026-10-22T11:03:11.821403123Z INFO  Registering the account. email=none@none.tld
container-test-run-certificates> server # [524386.913226] server acme-order-renew-test.foo-start[366]: 2026-10-22T11:03:11.885060157Z WARN  !!!! HEADS UP !!!!
container-test-run-certificates> server # [524386.913226] server acme-order-renew-test.foo-start[366]: Your account credentials have been saved in your
container-test-run-certificates> server # [524386.913226] server acme-order-renew-test.foo-start[366]: configuration directory at "accounts".
container-test-run-certificates> server # [524386.913226] server acme-order-renew-test.foo-start[366]: You should make a secure backup of this folder now. This
container-test-run-certificates> server # [524386.913226] server acme-order-renew-test.foo-start[366]: configuration directory will also contain private keys
container-test-run-certificates> server # [524386.913226] server acme-order-renew-test.foo-start[366]: generated by lego and certificates obtained from the ACME
container-test-run-certificates> server # [524386.913226] server acme-order-renew-test.foo-start[366]: server. Making regular backups of this folder is ideal.
container-test-run-certificates> server # [524386.913467] server acme-order-renew-test.foo-start[366]: 2026-10-22T11:03:11.885326560Z INFO  Obtaining bundled SAN certificate. domains=test.foo
container-test-run-certificates> server # [524386.994346] server acme-order-renew-test.foo-start[366]: 2026-10-22T11:03:11.966111029Z INFO  Use solver. domain=test.foo type=http-01
container-test-run-certificates> server # [524386.994346] server acme-order-renew-test.foo-start[366]: 2026-10-22T11:03:11.966174270Z INFO  http01: Trying to solve HTTP-01. domain=test.foo
container-test-run-certificates> ca # [524386.848719] ca step-ca[208]: time="2026-10-22T11:03:11Z" level=info duration="133.482µs" duration-ns=133482 fields.time="2026-10-22T11:03:11Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="::1" request-id=d194b294-c5f6-47d3-a472-b24666822f46 response="{\"newNonce\":\"https://ca.foo/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo/acme/acme/new-account\",\"newOrder\":\"https://ca.foo/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo/acme/acme/key-change\"}" size=252 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [524386.892725] ca step-ca[208]: time="2026-10-22T11:03:11Z" level=info duration=40.752159ms duration-ns=40752159 fields.time="2026-10-22T11:03:11Z" method=HEAD name=ca nonce=a1F3V1liYnd1YmhLaFVLTldGZXk3ZXRDZjRzVEJtYWQ path=/acme/acme/new-nonce protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=63a21cbc-08f8-4639-adfa-80f2948f5e8f size=0 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [524386.911187] ca step-ca[208]: time="2026-10-22T11:03:11Z" level=info duration=14.329357ms duration-ns=14329357 fields.time="2026-10-22T11:03:11Z" method=POST name=ca nonce=M3FiRmlKall4VTlyTkVpM3R0cTNxVkhjN2JackxPZUM path=/acme/acme/new-account protocol=HTTP/1.1 referer= remote-address="::1" request-id=ad7ce0e5-79d7-41e8-9b31-16f93a2971d8 response="{\"contact\":[\"mailto:none@none.tld\"],\"status\":\"valid\",\"orders\":\"https://ca.foo/acme/acme/account/ChmQzdtbLhf9tfEHJhXvUyvB1AQAmwcr/orders\"}" size=138 status=201 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [524386.925471] ca step-ca[208]: time="2026-10-22T11:03:11Z" level=info duration=8.476596ms duration-ns=8476596 fields.time="2026-10-22T11:03:11Z" method=POST name=ca nonce=bTJhS1h6dDlNNnpmcmlFRVhMRE1nMkNHTlB6WXZxcXk path=/acme/acme/new-order protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=14590167-1fb4-4f9a-a753-a865ca89346d response="{\"id\":\"JU7Ra7cei37SN5IQjou3np9q1da9OPaN\",\"status\":\"pending\",\"expires\":\"2026-10-23T11:03:11Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"test.foo\"}],\"notBefore\":\"2026-10-22T11:02:11Z\",\"notAfter\":\"2027-01-20T11:03:11Z\",\"authorizations\":[\"https://ca.foo/acme/acme/authz/uuzOYnYzNkJIGsqsAlmswVc0WxdkZgCr\"],\"finalize\":\"https://ca.foo/acme/acme/order/JU7Ra7cei37SN5IQjou3np9q1da9OPaN/finalize\"}" size=384 status=201 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [524386.993147] ca step-ca[208]: time="2026-10-22T11:03:11Z" level=info duration=7.800428ms duration-ns=7800428 fields.time="2026-10-22T11:03:11Z" method=POST name=ca nonce=dGZJN0hmTXJQZHRyNnpHb3ZWMDR0ZXQ4bjg5QkpXcUg path=/acme/acme/authz/uuzOYnYzNkJIGsqsAlmswVc0WxdkZgCr protocol=HTTP/1.1 referer= remote-address="::1" request-id=d9b511f0-9ecd-4e54-b070-e5af3f69e620 response="{\"identifier\":{\"type\":\"dns\",\"value\":\"test.foo\"},\"status\":\"pending\",\"challenges\":[{\"type\":\"dns-01\",\"status\":\"pending\",\"token\":\"fqdPsATLWO9uvlucjRy6qdq5hAHfcJEq\",\"url\":\"https://ca.foo/acme/acme/challenge/uuzOYnYzNkJIGsqsAlmswVc0WxdkZgCr/jZ00NcYsSPko3CWwLfWMis8ewbC3snX4\"},{\"type\":\"http-01\",\"status\":\"pending\",\"token\":\"fqdPsATLWO9uvlucjRy6qdq5hAHfcJEq\",\"url\":\"https://ca.foo/acme/acme/challenge/uuzOYnYzNkJIGsqsAlmswVc0WxdkZgCr/zqAkJvEjikhcRZWL4QZRKbG58RAS9AkL\"},{\"type\":\"tls-alpn-01\",\"status\":\"pending\",\"token\":\"fqdPsATLWO9uvlucjRy6qdq5hAHfcJEq\",\"url\":\"https://ca.foo/acme/acme/challenge/uuzOYnYzNkJIGsqsAlmswVc0WxdkZgCr/8mRmn1B5xNpw130OB369RsT2m317Gkdk\"}],\"wildcard\":false,\"expires\":\"2026-10-23T11:03:11Z\"}" size=706 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [524387.001442] ca step-ca[208]: time="2026-10-22T11:03:11Z" level=info duration=5.08687ms duration-ns=5086870 fields.time="2026-10-22T11:03:11Z" method=POST name=ca nonce=dW5LSVhXMmZMaVc2eEY0bUI4M2p3c2ozdjFsOVd3aVA path=/acme/acme/challenge/uuzOYnYzNkJIGsqsAlmswVc0WxdkZgCr/zqAkJvEjikhcRZWL4QZRKbG58RAS9AkL protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=ecdcaa2d-bb71-4125-9e47-a7c642b21bf9 response="{\"type\":\"http-01\",\"status\":\"valid\",\"token\":\"fqdPsATLWO9uvlucjRy6qdq5hAHfcJEq\",\"validated\":\"2026-10-22T11:03:11Z\",\"url\":\"https://ca.foo/acme/acme/challenge/uuzOYnYzNkJIGsqsAlmswVc0WxdkZgCr/zqAkJvEjikhcRZWL4QZRKbG58RAS9AkL\"}" size=223 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [524387.014145] ca step-ca[208]: time="2026-10-22T11:03:11Z" level=info duration=9.865455ms duration-ns=9865455 fields.time="2026-10-22T11:03:11Z" method=POST name=ca nonce=cUJDSmVxNUs1V1lQSjFJWWpJMlVhMUVqNFUzS3VYT2k path=/acme/acme/order/JU7Ra7cei37SN5IQjou3np9q1da9OPaN/finalize protocol=HTTP/1.1 referer= remote-address="::1" request-id=4e7ce4cd-9603-4d85-bb6a-37f42deafad6 response="{\"id\":\"JU7Ra7cei37SN5IQjou3np9q1da9OPaN\",\"status\":\"valid\",\"expires\":\"2026-10-23T11:03:11Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"test.foo\"}],\"notBefore\":\"2026-10-22T11:02:11Z\",\"notAfter\":\"2027-01-20T11:03:11Z\",\"authorizations\":[\"https://ca.foo/acme/acme/authz/uuzOYnYzNkJIGsqsAlmswVc0WxdkZgCr\"],\"finalize\":\"https://ca.foo/acme/acme/order/JU7Ra7cei37SN5IQjou3np9q1da9OPaN/finalize\",\"certificate\":\"https://ca.foo/acme/acme/certificate/BBPgbIs6AbLKjmpS0S2mDPvQtvF9DIE6\"}" size=468 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [524387.018957] ca step-ca[208]: time="2026-10-22T11:03:11Z" level=info certificate="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" duration=2.505194ms duration-ns=2505194 fields.time="2026-10-22T11:03:11Z" issuer="Clan Intermediate CA" method=POST name=ca nonce=d3VyaGxmSXZTR2NOTFpteHUxZjg0Q2w3V2lSaGFPYTM path=/acme/acme/certificate/BBPgbIs6AbLKjmpS0S2mDPvQtvF9DIE6 protocol=HTTP/1.1 provisioner=acme public-key="ECDSA P-256" referer= remote-address=127.0.0.1 request-id=a88bd5d8-bd7d-488e-b6a0-4ebd0c493323 sans="map[dns:[test.foo]]" serial=242372354983583160516315839779969393721 size=1348 status=200 subject=test.foo user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= valid-from="2026-10-22T11:02:11Z" valid-to="2027-01-20T11:03:11Z"
container-test-run-certificates> server # [524387.001964] server acme-order-renew-test.foo-start[366]: 2026-10-22T11:03:11.973811335Z INFO  The server validated our request. domain=test.foo
container-test-run-certificates> server # [524387.002059] server acme-order-renew-test.foo-start[366]: 2026-10-22T11:03:11.973911976Z INFO  Validations succeeded; requesting certificates. domains=test.foo
container-test-run-certificates> server # [524387.019987] server acme-order-renew-test.foo-start[366]: 2026-10-22T11:03:11.991365976Z INFO  Server responded with a certificate. domains=test.foo
container-test-run-certificates> server # [524387.019987] server acme-order-renew-test.foo-start[366]: 2026-10-22T11:03:11.991475697Z INFO  Writing file. filepath=certificates/test.foo.crt
container-test-run-certificates> server # [524387.019987] server acme-order-renew-test.foo-start[366]: 2026-10-22T11:03:11.991645660Z INFO  Writing file. filepath=certificates/test.foo.issuer.crt
container-test-run-certificates> server # [524387.019987] server acme-order-renew-test.foo-start[366]: 2026-10-22T11:03:11.991719221Z INFO  Writing file. filepath=certificates/test.foo.key
container-test-run-certificates> server # [524387.019987] server acme-order-renew-test.foo-start[366]: 2026-10-22T11:03:11.991869703Z INFO  Writing file. filepath=certificates/test.foo.json
container-test-run-certificates> server # [524387.025541] server acme-order-renew-test.foo-start[274]: + touch out/acme-success
container-test-run-certificates> server # [524387.027446] server acme-order-renew-test.foo-start[274]: + cmp -s certificates/test.foo.crt out/fullchain.pem
container-test-run-certificates> server # [524387.029346] server acme-order-renew-test.foo-start[274]: + touch out/renewed
container-test-run-certificates> server # [524387.031158] server acme-order-renew-test.foo-start[274]: + echo Installing new certificate
container-test-run-certificates> server # [524387.031158] server acme-order-renew-test.foo-start[274]: Installing new certificate
container-test-run-certificates> server # [524387.031213] server acme-order-renew-test.foo-start[274]: + cp -vp certificates/test.foo.crt out/fullchain.pem
container-test-run-certificates> server # [524387.032832] server acme-order-renew-test.foo-start[396]: 'certificates/test.foo.crt' -> 'out/fullchain.pem'
container-test-run-certificates> server # [524387.033106] server acme-order-renew-test.foo-start[274]: + cp -vp certificates/test.foo.key out/key.pem
container-test-run-certificates> server # [524387.034739] server acme-order-renew-test.foo-start[397]: 'certificates/test.foo.key' -> 'out/key.pem'
container-test-run-certificates> server # [524387.034992] server acme-order-renew-test.foo-start[274]: + cp -vp certificates/test.foo.issuer.crt out/chain.pem
container-test-run-certificates> server # [524387.036471] server acme-order-renew-test.foo-start[398]: 'certificates/test.foo.issuer.crt' -> 'out/chain.pem'
container-test-run-certificates> server # [524387.036707] server acme-order-renew-test.foo-start[274]: + ln -sf fullchain.pem out/cert.pem
container-test-run-certificates> server # [524387.039205] server acme-order-renew-test.foo-start[274]: + cat out/key.pem out/fullchain.pem
container-test-run-certificates> server # [524387.041148] server acme-order-renew-test.foo-start[274]: + for fixpath in out certificates
container-test-run-certificates> server # [524387.041182] server acme-order-renew-test.foo-start[274]: + '[' -d out ']'
container-test-run-certificates> server # [524387.041182] server acme-order-renew-test.foo-start[274]: + chmod -R u=rwX,g=rX,o= out
container-test-run-certificates> server # [524387.042813] server acme-order-renew-test.foo-start[274]: + chown -R acme:nginx out
container-test-run-certificates> server # [524387.046153] server acme-order-renew-test.foo-start[274]: + for fixpath in out certificates
container-test-run-certificates> server # [524387.046177] server acme-order-renew-test.foo-start[274]: + '[' -d certificates ']'
container-test-run-certificates> server # [524387.046196] server acme-order-renew-test.foo-start[274]: + chmod -R u=rwX,g=rX,o= certificates
container-test-run-certificates> server # [524387.048575] server acme-order-renew-test.foo-start[274]: + chown -R acme:nginx certificates
container-test-run-certificates> server # [524387.051623] server acme-order-renew-test.foo-start[274]: + chmod -R u=rwX,g=,o= accounts/.
container-test-run-certificates> server # [524387.417755] server systemd[1]: Reloading Nginx Web Server...
container-test-run-certificates> server # [524387.425651] server systemd[1]: acme-order-renew-test.foo.service: Failed to read pids.max for control group /system.slice/acme-order-renew-test.foo.service, ignoring: No data available
container-test-run-certificates> server # [524387.425703] server systemd[1]: acme-order-renew-test.foo.service: Failed to read pids.max for control group /system.slice/acme-order-renew-test.foo.service, ignoring: No data available
container-test-run-certificates> server # [524387.425728] server systemd[1]: acme-order-renew-test.foo.service: Deactivated successfully.
container-test-run-certificates> server # [524387.460325] server systemd[1]: Finished Order (and renew) ACME certificate for test.foo.
container-test-run-certificates> server # [524387.460616] server systemd[1]: acme-order-renew-test.foo.service: Consumed 1.302s CPU time over 2.658s wall clock time.
container-test-run-certificates> server # [524389.501040] server nginx[414]: nginx: the configuration file /nix/store/az8mvx3xy76ih9zlbva3cgs9jp0nf43k-nginx.conf syntax is ok
container-test-run-certificates> server # [524389.501471] server nginx[414]: nginx: configuration file /nix/store/az8mvx3xy76ih9zlbva3cgs9jp0nf43k-nginx.conf test is successful
container-test-run-certificates> server # [524391.420395] server systemd[1]: Reloaded Nginx Web Server.
container-test-run-certificates> server # [524391.420849] server systemd[1]: Startup finished in 15.097s.
container-test-run-certificates> server: (finished: waiting for file '/var/lib/acme/test.foo/fullchain.pem', in 16.16 seconds)
container-test-run-certificates> server: must succeed: systemctl restart nginx.service
container-test-run-certificates> server # [524391.831207] server systemd[1]: Stopping Nginx Web Server...
container-test-run-certificates> server # [524391.955501] server systemd[1]: nginx.service: Failed to read pids.max for control group /system.slice/nginx.service, ignoring: No data available
container-test-run-certificates> server # [524391.955547] server systemd[1]: nginx.service: Deactivated successfully.
container-test-run-certificates> server # [524391.955783] server systemd[1]: Stopped Nginx Web Server.
container-test-run-certificates> server # [524391.955820] server systemd[1]: nginx.service: Consumed 7.181s CPU time over 8.280s wall clock time.
container-test-run-certificates> server # [524391.959278] server systemd[1]: Starting Nginx Web Server...
container-test-run-certificates> server: (finished: must succeed: systemctl restart nginx.service, in 1.57 seconds)
container-test-run-certificates> client: waiting for success: curl -v https://test.foo
container-test-run-certificates> * Host test.foo:443 was resolved.
container-test-run-certificates> * IPv6: 2001:db8:1::3
container-test-run-certificates> * IPv4: 192.168.1.3
container-test-run-certificates> *   Trying [2001:db8:1::3]:443...
container-test-run-certificates> * connect to 2001:db8:1::3 port 443 from 2001:db8:1::2 port 46000 failed: Connection refused
container-test-run-certificates> *   Trying 192.168.1.3:443...
container-test-run-certificates> * connect to 192.168.1.3 port 443 from 192.168.1.2 port 57736 failed: Connection refused
container-test-run-certificates> * Failed to connect to test.foo:443 after 2 ms: Could not connect to server
container-test-run-certificates> * closing connection #0
container-test-run-certificates> curl: (7) Failed to connect to test.foo:443 after 2 ms: Could not connect to server
container-test-run-certificates> server # [524393.377210] server nginx-pre-start[516]: nginx: the configuration file /nix/store/az8mvx3xy76ih9zlbva3cgs9jp0nf43k-nginx.conf syntax is ok
container-test-run-certificates> server # [524393.377827] server nginx-pre-start[516]: nginx: configuration file /nix/store/az8mvx3xy76ih9zlbva3cgs9jp0nf43k-nginx.conf test is successful
container-test-run-certificates> server # [524393.384981] server systemd[1]: Started Nginx Web Server.
container-test-run-certificates> * Host test.foo:443 was resolved.
container-test-run-certificates> * IPv6: 2001:db8:1::3
container-test-run-certificates> * IPv4: 192.168.1.3
container-test-run-certificates> *   Trying [2001:db8:1::3]:443...
container-test-run-certificates> * ALPN: curl offers h2,http/1.1
container-test-run-certificates> } [5 bytes data]
container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1):
container-test-run-certificates> } [1554 bytes data]
container-test-run-certificates> * SSL Trust Anchors:
container-test-run-certificates> *   OpenSSL default paths (fallback)
container-test-run-certificates> { [5 bytes data]
container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2):
container-test-run-certificates> { [1210 bytes data]
container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):
container-test-run-certificates> { [1 bytes data]
container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
container-test-run-certificates> { [19 bytes data]
container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11):
container-test-run-certificates> { [931 bytes data]
container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15):
container-test-run-certificates> { [78 bytes data]
container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20):
container-test-run-certificates> { [52 bytes data]
container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
container-test-run-certificates> } [1 bytes data]
container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20):
container-test-run-certificates> } [52 bytes data]
container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey
container-test-run-certificates> * ALPN: server accepted h2
container-test-run-certificates> * Server certificate:
container-test-run-certificates> *   subject: CN=test.foo
container-test-run-certificates> *   start date: Oct 22 11:02:11 2026 GMT
container-test-run-certificates> *   expire date: Jan 20 11:03:11 2027 GMT
container-test-run-certificates> *   issuer: CN=Clan Intermediate CA
container-test-run-certificates> *   Certificate level 0: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256
container-test-run-certificates> *   Certificate level 1: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256
container-test-run-certificates> *   Certificate level 2: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256
container-test-run-certificates> *   subjectAltName: "test.foo" matches cert's "test.foo"
container-test-run-certificates> * OpenSSL verify result: 0
container-test-run-certificates> * SSL certificate verified via OpenSSL.
container-test-run-certificates> * Established connection to test.foo (2001:db8:1::3 port 443) from 2001:db8:1::2 port 46002 
container-test-run-certificates>   % Total    % Received % Xferd  Average Speed  Time    Time    Time   Current
container-test-run-certificates>                                  Dload  Upload  Total   Spent   Left   Speed
container-test-run-certificates>   0      0   0      0   0      0      0      0                              0* using HTTP/2
container-test-run-certificates> * [HTTP/2] [1] OPENED stream for https://test.foo/
container-test-run-certificates> * [HTTP/2] [1] [:method: GET]
container-test-run-certificates> * [HTTP/2] [1] [:scheme: https]
container-test-run-certificates> * [HTTP/2] [1] [:authority: test.foo]
container-test-run-certificates> * [HTTP/2] [1] [:path: /]
container-test-run-certificates> * [HTTP/2] [1] [user-agent: curl/8.22.0]
container-test-run-certificates> * [HTTP/2] [1] [accept: */*]
container-test-run-certificates> } [5 bytes data]
container-test-run-certificates> > GET / HTTP/2
container-test-run-certificates> > Host: test.foo
container-test-run-certificates> > User-Agent: curl/8.22.0
container-test-run-certificates> > Accept: */*
container-test-run-certificates> > 
container-test-run-certificates> * Request completely sent off
container-test-run-certificates> { [5 bytes data]
container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
container-test-run-certificates> { [265 bytes data]
container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
container-test-run-certificates> { [265 bytes data]
container-test-run-certificates> < HTTP/2 200 
container-test-run-certificates> < server: nginx
container-test-run-certificates> < date: Thu, 22 Oct 2026 11:03:19 GMT
container-test-run-certificates> < content-type: application/octet-stream
container-test-run-certificates> < content-length: 20
container-test-run-certificates> < content-type: text/plain
container-test-run-certificates> < 
container-test-run-certificates> { [5 bytes data]
container-test-run-certificates> 100     20 100     20   0      0    914      0                              0
container-test-run-certificates> * Connection #0 to host test.foo:443 left intact
container-test-run-certificates> client: (finished: waiting for success: curl -v https://test.foo, in 1.06 seconds)
container-test-run-certificates> client: must succeed: openssl s_client -connect test.foo:443 -servername test.foo </dev/null 2>/dev/null | openssl x509 -text -noout 1>&2
container-test-run-certificates> Certificate:
container-test-run-certificates>     Data:
container-test-run-certificates>         Version: 3 (0x2)
container-test-run-certificates>         Serial Number:
container-test-run-certificates>             b6:57:37:b5:a5:78:30:47:fd:15:b5:00:cb:93:64:39
container-test-run-certificates>         Signature Algorithm: ecdsa-with-SHA256
container-test-run-certificates>         Issuer: CN=Clan Intermediate CA
container-test-run-certificates>         Validity
container-test-run-certificates>             Not Before: Oct 22 11:02:11 2026 GMT
container-test-run-certificates>             Not After : Jan 20 11:03:11 2027 GMT
container-test-run-certificates>         Subject: CN=test.foo
container-test-run-certificates>         Subject Public Key Info:
container-test-run-certificates>             Public Key Algorithm: id-ecPublicKey
container-test-run-certificates>                 Public-Key: (256 bit)
container-test-run-certificates>                 pub:
container-test-run-certificates>                     04:eb:30:ee:32:af:14:ca:bd:07:6d:0a:86:b4:21:
container-test-run-certificates>                     88:e2:fa:67:1f:10:5e:61:d0:39:8b:ef:bf:cd:28:
container-test-run-certificates>                     fb:c1:87:16:4d:3e:03:a7:90:65:e9:d5:dc:9d:22:
container-test-run-certificates>                     e6:71:8d:cc:3c:2c:1e:37:76:41:19:fe:13:58:f6:
container-test-run-certificates>                     2d:5b:72:76:cc
container-test-run-certificates>                 ASN1 OID: prime256v1
container-test-run-certificates>                 NIST CURVE: P-256
container-test-run-certificates>         X509v3 extensions:
container-test-run-certificates>             X509v3 Key Usage: critical
container-test-run-certificates>                 Digital Signature
container-test-run-certificates>             X509v3 Extended Key Usage: 
container-test-run-certificates>                 TLS Web Server Authentication, TLS Web Client Authentication
container-test-run-certificates>             X509v3 Subject Key Identifier: 
container-test-run-certificates>                 0A:8F:65:BE:0B:A7:B6:A5:CB:B7:2E:C0:31:34:2A:FE:1D:C3:9C:86
container-test-run-certificates>             X509v3 Authority Key Identifier: 
container-test-run-certificates>                 EF:61:18:6E:58:BE:FF:A2:D6:29:C2:D8:F0:96:ED:00:11:15:E3:70
container-test-run-certificates>             X509v3 Subject Alternative Name: 
container-test-run-certificates>                 DNS:test.foo
container-test-run-certificates>             1.3.6.1.4.1.37476.9000.64.1: 
container-test-run-certificates>                 0......acme..
container-test-run-certificates>     Signature Algorithm: ecdsa-with-SHA256
container-test-run-certificates>     Signature Value:
container-test-run-certificates>         30:45:02:20:5b:e9:d5:c1:e3:45:52:3f:bd:76:44:b3:23:c2:
container-test-run-certificates>         3f:58:83:db:fd:b7:ed:af:7d:c2:ef:93:be:9e:ac:29:e8:00:
container-test-run-certificates>         02:21:00:e3:fa:7c:eb:62:54:a1:c5:c5:48:99:b5:84:50:2f:
container-test-run-certificates>         f8:54:da:f9:00:6b:de:b9:10:02:ec:1c:57:88:27:65:31
container-test-run-certificates> client: (finished: must succeed: openssl s_client -connect test.foo:443 -servername test.foo </dev/null 2>/dev/null | openssl x509 -text -noout 1>&2, in 0.05 seconds)
container-test-run-certificates> (finished: run the VM test script, in 36.25 seconds)
container-test-run-certificates> test script finished in 36.43s
container-test-run-certificates> cleanup
container-test-run-certificates> kill NspawnMachine (pid 50)
container-test-run-certificates> kill NspawnMachine (pid 627)
container-test-run-certificates> Container ca terminated by signal KILL.
container-test-run-certificates> kill NspawnMachine (pid 621)
container-test-run-certificates> Container client terminated by signal KILL.
container-test-run-certificates> (finished: cleanup, in 0.49 seconds)
container-test-run-certificates> Container server terminated by signal KILL.