these 96 derivations will be built: /nix/store/03zvn59vcnic8g2gy4bpjs58raqg1mz9-system-path.drv /nix/store/1f2j0b7k5gyn9l995v889cyqv8kmrkym-unit-script-acme-test.foo-start.drv /nix/store/3zllzb2nccjyvwds1xj06sik6ipymfpg-dbus-1.drv /nix/store/vls2yiivy6yqsc7j9s5y68vnywj1vpwb-X-Restart-Triggers-dbus-broker.drv /nix/store/1vpzqicr0g4q065pdlwnsj68vx9rvfkx-unit-dbus-broker.service.drv /nix/store/4416fng1dvfdbwjmx55pas18hkb9wvgk-users-groups.json.drv /nix/store/25h8lbmyydxlvyd1vmflmbh159ymy75v-dry-activate.drv /nix/store/qrnbzx5yxzy35d5yknbsnmvxyy11c8af-system-path.drv /nix/store/ay8bm3yyjlx44vsj082p9m9xqsb9isbb-dbus-1.drv /nix/store/f2xnlr89vazpg4lh5c02w6yjr1xswld4-X-Restart-Triggers-dbus-broker.drv /nix/store/2ism18qh7p5ziw5vz052jhn3l85rv074-unit-dbus-broker.service.drv /nix/store/7rv4b5mgxrc79nsddh9wdhm4qywv0ya2-user-units.drv /nix/store/il4h7yg637vm007p6l72zngbq6v7fhb2-cacert-extra-certificates-bundle.crt.drv /nix/store/x6ccpgh92x17wm7jaqy9m744ad15n4gv-cacert-blocklist.txt.drv /nix/store/grf3rg810wm40mdd6xhgajfwwgzzkv4m-nss-cacert-3.126.drv /nix/store/j01ch3wh9pjlwbx04bd4xbf4fcz9xzp2-vars-check-certificates.drv /nix/store/yvi3zfy3c2jw7n2wgq6ncy3naqqx3249-extra-hosts.drv /nix/store/k4nzqc4ks4b9mdkjflk4d1d9zdkvv4in-hosts.drv /nix/store/kw1gk1pn3y2c32ps5adr8178snvnpgd5-nginx.conf.drv /nix/store/rqd83d3gaxwzlkcv16hsvdx3x4hgddl2-unit-script-nginx-pre-start.drv /nix/store/2wvya9s7dvxc9c0cw54qk39x8gwa93yk-unit-nginx.service.drv /nix/store/ylbgqjq2kfxjqn3nhd0rzpwdn8nja19x-nixos-tmpfiles.d.drv /nix/store/xzpkpihmqmg9hnln73s9ywv747dnvx25-tmpfiles.d.drv /nix/store/x19ivg4f0br7z9ykw648pk1x7raczgby-X-Restart-Triggers-systemd-tmpfiles-resetup.drv /nix/store/5srmghs63sm46vxfy1i01y8nsqn0ll9c-unit-systemd-tmpfiles-resetup.service.drv /nix/store/asi50rg1ya9a9y679bxhc80png3z44b6-firewall-start.drv /nix/store/zn9j2akqdzrjyw62z680njpivs2vdmla-firewall-reload.drv /nix/store/79hhs9n0pki4f8hbjlwdlfzg4vrraxcj-unit-firewall.service.drv /nix/store/7c5d2sb1wlgyzlw0fns42s05m2ccr6p8-unit-nix-daemon.service.drv /nix/store/98qgbffc7h849ydmg6m9iix8js3l8y2y-unit-nginx-config-reload.service.drv /nix/store/ffkqs8ipny3xh4v1v2wyws7w6gdvl4gf-unit-dbus-broker.service.drv /nix/store/gxra9mibcgjk32arh4vw6c4r3z3qsa9z-unit-acme-account-2c44cb477b4787b2cf13.target.drv /nix/store/hljixjral0sjwl1lk824xc8ag3784x7b-unit-script-acme-order-renew-test.foo-start.drv /nix/store/xfwyjrch2hwj7gwlsaili7yl5xy4bbnx-acme-postrun.drv /nix/store/hyjl3dyijr4l7g5nj58bvxk2m6xa4014-unit-acme-order-renew-test.foo.service.drv /nix/store/jf93jlqckp6sbsd9fx9ajac5m79i4hra-unit-acme-renew-test.foo.timer.drv /nix/store/yxy1cmdjj9kqqzvls1bpadbdpv91p79z-unit-40-eth1.network.drv /nix/store/hv6zd50ijy5h4803pbmym5bpn918xj7j-X-Reload-Triggers-systemd-networkd.drv /nix/store/wvsw1rv1mdlknc6q8gmqwi8dpx1g5d75-unit-systemd-networkd.service.drv /nix/store/f2wry86nkcpcq9lfd7z2fxknl7w1r82f-X-Restart-Triggers-acme-test.foo.drv /nix/store/xh0ag2p3v4qs9wgy6w20k7hym9z7a1rc-unit-acme-test.foo.service.drv /nix/store/kdbxbj28i221dakl71s4rxz925kcr6md-acme-setup-privileged.drv /nix/store/yynq2l26wnvxi7ghbnj0rs49a5bdpmmy-unit-acme-setup.service.drv /nix/store/qxqr18rmy6cf7mynng9f5f0zmwly5l9a-system-units.drv /nix/store/z04c92va4mm479l4kwla00a844vqvsg9-etc.drv /nix/store/dnnlvxwpbp4ij4sya6r4k7v4vnmlz43n-activate.drv /nix/store/2fl92p9ybryal0bpw9k6gg71aksjmhh0-nixos-system-server-test.drv /nix/store/2hxca7qymdzx8fwc1z20lqpyy4nb8kql-acme-setup-privileged.drv /nix/store/4zgq3whabg3kknmp1ymkg28ygd4jhabw-users-groups.json.drv /nix/store/klysj4axhf3svm07nw4gjgrnm97dgsnq-decrypt-age-secrets.drv /nix/store/2qfgg1dkhr567vvrbaivwx4lxl53dm7r-dry-activate.drv /nix/store/2vf9dxjp1hkhlm7ypi6h4cfiavzrcq1p-user-generators.drv /nix/store/3dxa9p2bhn237l67iv8sins66ds980av-unit-script-acme-ca.foo-start.drv /nix/store/3vm2ym3845g8isxqyzn76zk5hmbshr3f-hosts.drv /nix/store/4cqyywryd2jcgv15qk8arylnhmr6k1qv-nginx.conf.drv /nix/store/50sbhgplmc28ii9m010i78mmgk8zxdgw-etc-hostname.drv /nix/store/p53gcjahfabad7rg90b7l2dq4xprvv7f-system-path.drv /nix/store/s5mmmjybayz30k0mirzh1myy6nac80ms-dbus-1.drv /nix/store/s39ma8b993wgszh0rx7g48pqwaard28y-X-Restart-Triggers-dbus-broker.drv /nix/store/5qd3rr656m09w5jk955vsh7drwaza34p-unit-dbus-broker.service.drv /nix/store/6v9gb77vrjcq5jwp44aw2viwd0v4xbv9-system-generators.drv /nix/store/7rr0gf4mc5413b7hbwrs9yqz06rhb01z-acme-postrun.drv /nix/store/ky1s66kq9adfqmf2636vfgacpa96cm2c-unit-dbus-broker.service.drv /nix/store/9h3p0sn1sxp09gjjqd510nh4g1qj2mr7-user-units.drv /nix/store/wx49d5s66x0d330yh8c8gnqp9fgk223v-system-units.drv /nix/store/dpqvip0m51km2723g8q27scvnqzjb3ar-etc.drv /nix/store/88sm1w6q742kjm12n2lic7lflzsab7sb-activate.drv /nix/store/dvm072qjlay54cb0ffw4vldfr3aqradc-system-shutdown.drv /nix/store/zaiiqi9239jrbg8nymgj14vy6i83s5xi-string-hosts.drv /nix/store/if7db79spsw0nh28v3xpc4054v48inpg-hosts.drv /nix/store/krpsxaii19cydipi267n2pv3ds1rmrw0-user-units.drv /nix/store/s81zwcwn4igkhdwsc602sh2vm4hpysqh-ca.json.drv /nix/store/i6xrz57gdabxn5pv3v1cy6wad1lyipd2-unit-script-acme-order-renew-ca.foo-start.drv /nix/store/a9272xljdr7imasbdd7aipjss7zj57fz-unit-acme-order-renew-ca.foo.service.drv /nix/store/davnpi4q6pjjmn3cxvbqfxwaw1y8br0r-unit-acme-account-d22a46d9459bf683a338.target.drv /nix/store/dg1mll4aavpbc3aj090f2xf13xryq8z4-unit-dbus-broker.service.drv /nix/store/y3fyawzc7dihinsnjq3jb1sgas37kpl0-X-Restart-Triggers-step-ca.drv /nix/store/drss5607dx92z8009r90wlrdm48kraw5-unit-step-ca.service.drv /nix/store/rs3bcq0j383a8qszgdp2brx8ywlkqraw-unit-script-nginx-pre-start.drv /nix/store/iiyk2cgicwgzcj157nwjkxid8w63lcp9-unit-nginx.service.drv /nix/store/azixs9jv8h2gzcn7rwrp084fqc0bk6wl-X-Restart-Triggers-acme-ca.foo.drv /nix/store/nxbl1kf3by14fxaypx21m9qvgkjrzwj4-unit-acme-ca.foo.service.drv /nix/store/q6ibka8n09b4w5s2z08qk0rhsjkn7l0j-unit-acme-setup.service.drv /nix/store/qbh087l03wfs787rzwyr74gffsvn2kmg-unit-nginx-config-reload.service.drv /nix/store/rsf3wglx09g6j8bzi2rh4v6jx5c4p8pw-unit-acme-renew-ca.foo.timer.drv /nix/store/yrrnclby904rh95vlkxpz7sf0n2304cr-system-units.drv /nix/store/pkh19zalgf1y8wibjxs4c0n1dnd6ps37-etc.drv /nix/store/pfji3c12h6asrijzdq3n25am8dz9ljjq-activate.drv /nix/store/b2q3k4ls94snhqcpdf2764fr7hq5mnr3-nixos-system-ca-test.drv /nix/store/xscvc472aihmdvi9k22q1mamrlnihndh-testScript.drv /nix/store/a5qpbw44vvlfyilxw4g82yy83j0xfxxv-closure-info.drv /nix/store/b1h8gafk54m4raxcz5b6qa1kz6wbm0kw-closure-info.drv /nix/store/qk0jdiqk93gb87qghmbvn8ws3g78ya3d-nixos-system-client-test.drv /nix/store/cs1dvzapg5dc037vnnjqhwy2s006l7gi-closure-info.drv /nix/store/jdg1n8l8qqfwhxh58py1xb9g9kvrndih-nixos-test-driver-certificates.drv /nix/store/ilbvs6xgh71vyyjinzcnlmcpc1mfkfpk-container-test-run-certificates.drv these 3 paths will be fetched (24.4 MiB download, 75.8 MiB unpacked): /nix/store/5bw6gj8bhbwsxsjvg2nm2r0b8psm5lm4-openssl-3.6.3-man /nix/store/i26klp5pqlvi7lv8awjmjrpyk2b2apdv-python3.14-buildcatrust-0.5.1 /nix/store/63qj7mmqwpslnqgqjc86jnby1m2a0ckv-step-ca-0.30.2 building '/nix/store/50sbhgplmc28ii9m010i78mmgk8zxdgw-etc-hostname.drv' building '/nix/store/4cqyywryd2jcgv15qk8arylnhmr6k1qv-nginx.conf.drv' building '/nix/store/kw1gk1pn3y2c32ps5adr8178snvnpgd5-nginx.conf.drv' building '/nix/store/yxy1cmdjj9kqqzvls1bpadbdpv91p79z-unit-40-eth1.network.drv' building '/nix/store/yvi3zfy3c2jw7n2wgq6ncy3naqqx3249-extra-hosts.drv' building '/nix/store/ylbgqjq2kfxjqn3nhd0rzpwdn8nja19x-nixos-tmpfiles.d.drv' building '/nix/store/zaiiqi9239jrbg8nymgj14vy6i83s5xi-string-hosts.drv' building '/nix/store/gxra9mibcgjk32arh4vw6c4r3z3qsa9z-unit-acme-account-2c44cb477b4787b2cf13.target.drv' building '/nix/store/davnpi4q6pjjmn3cxvbqfxwaw1y8br0r-unit-acme-account-d22a46d9459bf683a338.target.drv' building '/nix/store/rsf3wglx09g6j8bzi2rh4v6jx5c4p8pw-unit-acme-renew-ca.foo.timer.drv' nginx.conf> structuredAttrs is enabled nginx.conf> structuredAttrs is enabled unit-40-eth1.network> structuredAttrs is enabled unit-acme-account-2c44cb477b4787b2cf13.target> structuredAttrs is enabled unit-acme-account-d22a46d9459bf683a338.target> structuredAttrs is enabled unit-acme-renew-ca.foo.timer> structuredAttrs is enabled building '/nix/store/jf93jlqckp6sbsd9fx9ajac5m79i4hra-unit-acme-renew-test.foo.timer.drv' building '/nix/store/98qgbffc7h849ydmg6m9iix8js3l8y2y-unit-nginx-config-reload.service.drv' building '/nix/store/3dxa9p2bhn237l67iv8sins66ds980av-unit-script-acme-ca.foo-start.drv' building '/nix/store/1f2j0b7k5gyn9l995v889cyqv8kmrkym-unit-script-acme-test.foo-start.drv' unit-acme-renew-test.foo.timer> structuredAttrs is enabled unit-nginx-config-reload.service> structuredAttrs is enabled building '/nix/store/3vm2ym3845g8isxqyzn76zk5hmbshr3f-hosts.drv' building '/nix/store/if7db79spsw0nh28v3xpc4054v48inpg-hosts.drv' building '/nix/store/k4nzqc4ks4b9mdkjflk4d1d9zdkvv4in-hosts.drv' building '/nix/store/xzpkpihmqmg9hnln73s9ywv747dnvx25-tmpfiles.d.drv' nginx.conf> nginx.conf> ==================== Results =================== nginx.conf> No issues found. nginx.conf> nginx.conf> ==================== Summary =================== nginx.conf> Total issues: nginx.conf> Unspecified: 0 nginx.conf> Low: 0 nginx.conf> Medium: 0 nginx.conf> High: 0 nginx.conf> nginx.conf> nginx.conf> ==================== Results =================== nginx.conf> No issues found. nginx.conf> nginx.conf> ==================== Summary =================== nginx.conf> Total issues: nginx.conf> Unspecified: 0 nginx.conf> Low: 0 nginx.conf> Medium: 0 nginx.conf> High: 0 nginx.conf> building '/nix/store/hv6zd50ijy5h4803pbmym5bpn918xj7j-X-Reload-Triggers-systemd-networkd.drv' building '/nix/store/7rr0gf4mc5413b7hbwrs9yqz06rhb01z-acme-postrun.drv' building '/nix/store/xfwyjrch2hwj7gwlsaili7yl5xy4bbnx-acme-postrun.drv' building '/nix/store/2hxca7qymdzx8fwc1z20lqpyy4nb8kql-acme-setup-privileged.drv' building '/nix/store/kdbxbj28i221dakl71s4rxz925kcr6md-acme-setup-privileged.drv' building '/nix/store/asi50rg1ya9a9y679bxhc80png3z44b6-firewall-start.drv' building '/nix/store/j01ch3wh9pjlwbx04bd4xbf4fcz9xzp2-vars-check-certificates.drv' on 'ssh-ng://builder@build-x86-01.clan.lol' building '/nix/store/azixs9jv8h2gzcn7rwrp084fqc0bk6wl-X-Restart-Triggers-acme-ca.foo.drv' building '/nix/store/f2wry86nkcpcq9lfd7z2fxknl7w1r82f-X-Restart-Triggers-acme-test.foo.drv' building '/nix/store/s81zwcwn4igkhdwsc602sh2vm4hpysqh-ca.json.drv' building '/nix/store/il4h7yg637vm007p6l72zngbq6v7fhb2-cacert-extra-certificates-bundle.crt.drv' building '/nix/store/xscvc472aihmdvi9k22q1mamrlnihndh-testScript.drv' building '/nix/store/qbh087l03wfs787rzwyr74gffsvn2kmg-unit-nginx-config-reload.service.drv' building '/nix/store/i6xrz57gdabxn5pv3v1cy6wad1lyipd2-unit-script-acme-order-renew-ca.foo-start.drv' building '/nix/store/hljixjral0sjwl1lk824xc8ag3784x7b-unit-script-acme-order-renew-test.foo-start.drv' building '/nix/store/4416fng1dvfdbwjmx55pas18hkb9wvgk-users-groups.json.drv' building '/nix/store/4zgq3whabg3kknmp1ymkg28ygd4jhabw-users-groups.json.drv' ca.json> structuredAttrs is enabled unit-nginx-config-reload.service> structuredAttrs is enabled building '/nix/store/x6ccpgh92x17wm7jaqy9m744ad15n4gv-cacert-blocklist.txt.drv' building '/nix/store/6v9gb77vrjcq5jwp44aw2viwd0v4xbv9-system-generators.drv' building '/nix/store/p53gcjahfabad7rg90b7l2dq4xprvv7f-system-path.drv' building '/nix/store/qrnbzx5yxzy35d5yknbsnmvxyy11c8af-system-path.drv' building '/nix/store/rqd83d3gaxwzlkcv16hsvdx3x4hgddl2-unit-script-nginx-pre-start.drv' building '/nix/store/rs3bcq0j383a8qszgdp2brx8ywlkqraw-unit-script-nginx-pre-start.drv' building '/nix/store/wvsw1rv1mdlknc6q8gmqwi8dpx1g5d75-unit-systemd-networkd.service.drv' building '/nix/store/2vf9dxjp1hkhlm7ypi6h4cfiavzrcq1p-user-generators.drv' system-path> structuredAttrs is enabled system-path> structuredAttrs is enabled unit-systemd-networkd.service> structuredAttrs is enabled building '/nix/store/25h8lbmyydxlvyd1vmflmbh159ymy75v-dry-activate.drv' building '/nix/store/dvm072qjlay54cb0ffw4vldfr3aqradc-system-shutdown.drv' building '/nix/store/nxbl1kf3by14fxaypx21m9qvgkjrzwj4-unit-acme-ca.foo.service.drv' building '/nix/store/a9272xljdr7imasbdd7aipjss7zj57fz-unit-acme-order-renew-ca.foo.service.drv' building '/nix/store/hyjl3dyijr4l7g5nj58bvxk2m6xa4014-unit-acme-order-renew-test.foo.service.drv' building '/nix/store/xh0ag2p3v4qs9wgy6w20k7hym9z7a1rc-unit-acme-test.foo.service.drv' building '/nix/store/grf3rg810wm40mdd6xhgajfwwgzzkv4m-nss-cacert-3.126.drv' on 'ssh-ng://builder@build-x86-01.clan.lol' building '/nix/store/klysj4axhf3svm07nw4gjgrnm97dgsnq-decrypt-age-secrets.drv' on 'ssh-ng://builder@build-x86-01.clan.lol' system-path> created 1822 symlinks in user environment system-path> created 1822 symlinks in user environment unit-acme-ca.foo.service> structuredAttrs is enabled unit-acme-order-renew-ca.foo.service> structuredAttrs is enabled unit-acme-order-renew-test.foo.service> structuredAttrs is enabled unit-acme-test.foo.service> structuredAttrs is enabled building '/nix/store/x19ivg4f0br7z9ykw648pk1x7raczgby-X-Restart-Triggers-systemd-tmpfiles-resetup.drv' building '/nix/store/03zvn59vcnic8g2gy4bpjs58raqg1mz9-system-path.drv' building '/nix/store/q6ibka8n09b4w5s2z08qk0rhsjkn7l0j-unit-acme-setup.service.drv' building '/nix/store/yynq2l26wnvxi7ghbnj0rs49a5bdpmmy-unit-acme-setup.service.drv' system-path> structuredAttrs is enabled unit-acme-setup.service> structuredAttrs is enabled building '/nix/store/y3fyawzc7dihinsnjq3jb1sgas37kpl0-X-Restart-Triggers-step-ca.drv' building '/nix/store/zn9j2akqdzrjyw62z680njpivs2vdmla-firewall-reload.drv' building '/nix/store/2wvya9s7dvxc9c0cw54qk39x8gwa93yk-unit-nginx.service.drv' building '/nix/store/iiyk2cgicwgzcj157nwjkxid8w63lcp9-unit-nginx.service.drv' building '/nix/store/ay8bm3yyjlx44vsj082p9m9xqsb9isbb-dbus-1.drv' building '/nix/store/s5mmmjybayz30k0mirzh1myy6nac80ms-dbus-1.drv' building '/nix/store/5srmghs63sm46vxfy1i01y8nsqn0ll9c-unit-systemd-tmpfiles-resetup.service.drv' system-path> created 1822 symlinks in user environment unit-acme-setup.service> structuredAttrs is enabled unit-nginx.service> structuredAttrs is enabled unit-nginx.service> structuredAttrs is enabled building '/nix/store/f2xnlr89vazpg4lh5c02w6yjr1xswld4-X-Restart-Triggers-dbus-broker.drv' building '/nix/store/79hhs9n0pki4f8hbjlwdlfzg4vrraxcj-unit-firewall.service.drv' building '/nix/store/drss5607dx92z8009r90wlrdm48kraw5-unit-step-ca.service.drv' unit-firewall.service> structuredAttrs is enabled unit-systemd-tmpfiles-resetup.service> structuredAttrs is enabled building '/nix/store/s39ma8b993wgszh0rx7g48pqwaard28y-X-Restart-Triggers-dbus-broker.drv' building '/nix/store/3zllzb2nccjyvwds1xj06sik6ipymfpg-dbus-1.drv' unit-step-ca.service> structuredAttrs is enabled building '/nix/store/2ism18qh7p5ziw5vz052jhn3l85rv074-unit-dbus-broker.service.drv' building '/nix/store/ffkqs8ipny3xh4v1v2wyws7w6gdvl4gf-unit-dbus-broker.service.drv' unit-dbus-broker.service> structuredAttrs is enabled building '/nix/store/vls2yiivy6yqsc7j9s5y68vnywj1vpwb-X-Restart-Triggers-dbus-broker.drv' building '/nix/store/5qd3rr656m09w5jk955vsh7drwaza34p-unit-dbus-broker.service.drv' building '/nix/store/ky1s66kq9adfqmf2636vfgacpa96cm2c-unit-dbus-broker.service.drv' unit-dbus-broker.service> structuredAttrs is enabled unit-dbus-broker.service> structuredAttrs is enabled building '/nix/store/1vpzqicr0g4q065pdlwnsj68vx9rvfkx-unit-dbus-broker.service.drv' building '/nix/store/dg1mll4aavpbc3aj090f2xf13xryq8z4-unit-dbus-broker.service.drv' building '/nix/store/7rv4b5mgxrc79nsddh9wdhm4qywv0ya2-user-units.drv' unit-dbus-broker.service> structuredAttrs is enabled unit-dbus-broker.service> structuredAttrs is enabled unit-dbus-broker.service> structuredAttrs is enabled building '/nix/store/9h3p0sn1sxp09gjjqd510nh4g1qj2mr7-user-units.drv' building '/nix/store/krpsxaii19cydipi267n2pv3ds1rmrw0-user-units.drv' building '/nix/store/j01ch3wh9pjlwbx04bd4xbf4fcz9xzp2-vars-check-certificates.drv' vars-check-certificates> Running vars check using Nix-based executor... vars-check-certificates> Executing shared generators... vars-check-certificates> Executing shared generator: step-ca vars-check-certificates> + set -euo pipefail vars-check-certificates> + PATH=/nix/store/pgzpycl8jd6xa0cmjd66jl6fjzgjawmr-step-cli-0.30.6/bin:/nix/store/di26b1kkbammy0sj70nq5qzvfrh78wxl-coreutils-9.11/bin vars-check-certificates> + [[ ! -d /etc ]] vars-check-certificates> + mkdir -p /etc vars-check-certificates> + cat vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> ++ id -u vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> + step certificate create --template /nix/store/m4kyinn4ra33v6lrcrvkj88xlqdss2wh-root.tmpl 'Clan Root CA' /output/ca.crt /output/ca.key --kty EC --curve P-256 --not-after=8760h --not-before=-12h --no-password --insecure vars-check-certificates> Your certificate has been saved in /output/ca.crt. vars-check-certificates> Your private key has been saved in /output/ca.key. vars-check-certificates> ✓ Generated shared file: step-ca/ca.crt vars-check-certificates> ✓ Generated shared file: step-ca/ca.key vars-check-certificates> ✓ Shared Generator step-ca completed vars-check-certificates> ✓ Shared generators completed vars-check-certificates> Processing machine: ca vars-check-certificates> Generator execution order: state-version -> step-intermediate-key -> step-intermediate-cert vars-check-certificates> Executing generator: state-version vars-check-certificates> + set -euo pipefail vars-check-certificates> + PATH=/nix/store/di26b1kkbammy0sj70nq5qzvfrh78wxl-coreutils-9.11/bin vars-check-certificates> + [[ ! -d /etc ]] vars-check-certificates> + mkdir -p /etc vars-check-certificates> + cat vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> ++ id -u vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> + echo -n 26.11 vars-check-certificates> ✓ Generated file: state-version/version vars-check-certificates> ✓ Generator state-version completed vars-check-certificates> Executing generator: step-intermediate-key vars-check-certificates> + set -euo pipefail vars-check-certificates> + PATH=/nix/store/pgzpycl8jd6xa0cmjd66jl6fjzgjawmr-step-cli-0.30.6/bin:/nix/store/di26b1kkbammy0sj70nq5qzvfrh78wxl-coreutils-9.11/bin vars-check-certificates> + [[ ! -d /etc ]] vars-check-certificates> + mkdir -p /etc vars-check-certificates> + cat vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> ++ id -u vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> + step crypto keypair --kty EC --curve P-256 --no-password --insecure /output/intermediate.pub /output/intermediate.key vars-check-certificates> Your public key has been saved in /output/intermediate.pub. vars-check-certificates> Your private key has been saved in /output/intermediate.key. vars-check-certificates> ✓ Generated file: step-intermediate-key/intermediate.key vars-check-certificates> ✓ Generator step-intermediate-key completed vars-check-certificates> Executing generator: step-intermediate-cert vars-check-certificates> + set -euo pipefail vars-check-certificates> + PATH=/nix/store/pgzpycl8jd6xa0cmjd66jl6fjzgjawmr-step-cli-0.30.6/bin:/nix/store/di26b1kkbammy0sj70nq5qzvfrh78wxl-coreutils-9.11/bin vars-check-certificates> + [[ ! -d /etc ]] vars-check-certificates> + mkdir -p /etc vars-check-certificates> + cat vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> ++ id -u vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> + step certificate create --ca /input/step-ca/ca.crt --ca-key /input/step-ca/ca.key --ca-password-file /dev/null --key /input/step-intermediate-key/intermediate.key --template /nix/store/cwbinx0vqcq4xz35fghr4s6sck8a6qhm-intermediate.tmpl --not-after 8760h --not-before=-12h --no-password --insecure 'Clan Intermediate CA' /output/intermediate.crt vars-check-certificates> Your certificate has been saved in /output/intermediate.crt. vars-check-certificates> ✓ Generated file: step-intermediate-cert/intermediate.crt vars-check-certificates> ✓ Generator step-intermediate-cert completed vars-check-certificates> ✓ Machine ca completed vars-check-certificates> Processing machine: client vars-check-certificates> Generator execution order: state-version vars-check-certificates> Executing generator: state-version vars-check-certificates> + set -euo pipefail vars-check-certificates> + PATH=/nix/store/di26b1kkbammy0sj70nq5qzvfrh78wxl-coreutils-9.11/bin vars-check-certificates> + [[ ! -d /etc ]] vars-check-certificates> + mkdir -p /etc vars-check-certificates> + cat vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> ++ id -u vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> + echo -n 26.11 vars-check-certificates> ✓ Generated file: state-version/version vars-check-certificates> ✓ Generator state-version completed vars-check-certificates> ✓ Machine client completed vars-check-certificates> Processing machine: server vars-check-certificates> Generator execution order: state-version vars-check-certificates> Executing generator: state-version vars-check-certificates> + set -euo pipefail vars-check-certificates> + PATH=/nix/store/di26b1kkbammy0sj70nq5qzvfrh78wxl-coreutils-9.11/bin vars-check-certificates> + [[ ! -d /etc ]] vars-check-certificates> + mkdir -p /etc vars-check-certificates> + cat vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> ++ id -u vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> + echo -n 26.11 vars-check-certificates> ✓ Generated file: state-version/version vars-check-certificates> ✓ Generator state-version completed vars-check-certificates> ✓ Machine server completed vars-check-certificates> ✓ All vars checks completed successfully building '/nix/store/grf3rg810wm40mdd6xhgajfwwgzzkv4m-nss-cacert-3.126.drv' nss-cacert-3.126> Running phase: unpackPhase nss-cacert-3.126> Running phase: patchPhase nss-cacert-3.126> Running phase: updateAutotoolsGnuConfigScriptsPhase nss-cacert-3.126> Running phase: configurePhase nss-cacert-3.126> no configure script, doing nothing nss-cacert-3.126> Running phase: buildPhase building '/nix/store/klysj4axhf3svm07nw4gjgrnm97dgsnq-decrypt-age-secrets.drv' nss-cacert-3.126> Running phase: installPhase nss-cacert-3.126> Running phase: fixupPhase nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/gpmixhz9spk2g7j0068nvhzvl295awnk-nss-cacert-3.126 nss-cacert-3.126> checking for references to /build/ in /nix/store/gpmixhz9spk2g7j0068nvhzvl295awnk-nss-cacert-3.126... nss-cacert-3.126> patching script interpreter paths in /nix/store/gpmixhz9spk2g7j0068nvhzvl295awnk-nss-cacert-3.126 nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/8wy0zy968l45psbr2h6zix3qd63srpz1-nss-cacert-3.126-unbundled nss-cacert-3.126> checking for references to /build/ in /nix/store/8wy0zy968l45psbr2h6zix3qd63srpz1-nss-cacert-3.126-unbundled... nss-cacert-3.126> patching script interpreter paths in /nix/store/8wy0zy968l45psbr2h6zix3qd63srpz1-nss-cacert-3.126-unbundled nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/0dpg9ck406nnj8s693mz9m761pyrrzka-nss-cacert-3.126-p11kit nss-cacert-3.126> checking for references to /build/ in /nix/store/0dpg9ck406nnj8s693mz9m761pyrrzka-nss-cacert-3.126-p11kit... nss-cacert-3.126> patching script interpreter paths in /nix/store/0dpg9ck406nnj8s693mz9m761pyrrzka-nss-cacert-3.126-p11kit nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/d6gayxzgw67gclyzgz2q1yfyvwdmc66v-nss-cacert-3.126-hashed nss-cacert-3.126> checking for references to /build/ in /nix/store/d6gayxzgw67gclyzgz2q1yfyvwdmc66v-nss-cacert-3.126-hashed... nss-cacert-3.126> patching script interpreter paths in /nix/store/d6gayxzgw67gclyzgz2q1yfyvwdmc66v-nss-cacert-3.126-hashed building '/nix/store/2qfgg1dkhr567vvrbaivwx4lxl53dm7r-dry-activate.drv' building '/nix/store/7c5d2sb1wlgyzlw0fns42s05m2ccr6p8-unit-nix-daemon.service.drv' unit-nix-daemon.service> structuredAttrs is enabled building '/nix/store/qxqr18rmy6cf7mynng9f5f0zmwly5l9a-system-units.drv' building '/nix/store/wx49d5s66x0d330yh8c8gnqp9fgk223v-system-units.drv' building '/nix/store/yrrnclby904rh95vlkxpz7sf0n2304cr-system-units.drv' building '/nix/store/z04c92va4mm479l4kwla00a844vqvsg9-etc.drv' building '/nix/store/dpqvip0m51km2723g8q27scvnqzjb3ar-etc.drv' building '/nix/store/pkh19zalgf1y8wibjxs4c0n1dnd6ps37-etc.drv' building '/nix/store/dnnlvxwpbp4ij4sya6r4k7v4vnmlz43n-activate.drv' building '/nix/store/88sm1w6q742kjm12n2lic7lflzsab7sb-activate.drv' building '/nix/store/pfji3c12h6asrijzdq3n25am8dz9ljjq-activate.drv' building '/nix/store/2fl92p9ybryal0bpw9k6gg71aksjmhh0-nixos-system-server-test.drv' building '/nix/store/qk0jdiqk93gb87qghmbvn8ws3g78ya3d-nixos-system-client-test.drv' nixos-system-server-test> structuredAttrs is enabled building '/nix/store/b2q3k4ls94snhqcpdf2764fr7hq5mnr3-nixos-system-ca-test.drv' nixos-system-client-test> structuredAttrs is enabled building '/nix/store/b1h8gafk54m4raxcz5b6qa1kz6wbm0kw-closure-info.drv' nixos-system-ca-test> structuredAttrs is enabled building '/nix/store/cs1dvzapg5dc037vnnjqhwy2s006l7gi-closure-info.drv' closure-info> structuredAttrs is enabled building '/nix/store/a5qpbw44vvlfyilxw4g82yy83j0xfxxv-closure-info.drv' closure-info> structuredAttrs is enabled closure-info> structuredAttrs is enabled building '/nix/store/jdg1n8l8qqfwhxh58py1xb9g9kvrndih-nixos-test-driver-certificates.drv' nixos-test-driver-certificates> Running type check (enable/disable: config.skipTypeCheck) nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck nixos-test-driver-certificates> Success: no issues found in 1 source file building '/nix/store/ilbvs6xgh71vyyjinzcnlmcpc1mfkfpk-container-test-run-certificates.drv' on 'ssh-ng://builder@build-x86-01.clan.lol' building '/nix/store/ilbvs6xgh71vyyjinzcnlmcpc1mfkfpk-container-test-run-certificates.drv' container-test-run-certificates> additionally exposed symbols: container-test-run-certificates> ca, client, server, container-test-run-certificates> start_all, machines, driver, Machine, wait_for_signal container-test-run-certificates> Starting ca container-test-run-certificates> Starting client container-test-run-certificates> Starting server container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/dwcmjzykpkazyxi0wbq906729y1vlx86-nixos-system-ca-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if4: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether 42:06:76:42:a9:8d brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 261.1 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/di26b1kkbammy0sj70nq5qzvfrh78wxl-coreutils-9.11/bin/sleep 999999999 && echo 276e3c3b-a963-456c-8b82-ee56c82b69f9' container-test-run-certificates> Running as unit: run-p447-i64509695.service; invocation ID: 78849ca63c10450da4212e716a37ab4e container-test-run-certificates> To attach to container ca run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*276e3c3b-a963-456c-8b82-ee56c82b69f9') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/gxzhl7aaiid7zp3y47jqqiq7zg5mqpwp-python3-3.14.6/bin/python3.14 /nix/store/s7xzzws7ckb1gzm2fpvx0j66bkbf1wws-test-driver-0.0.1/lib/python3.14/site-packages/test_driver/inject_network.py 276e3c3b-a963-456c-8b82-ee56c82b69f9 container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/1833gri5322ifyzbjwgjmr3n52019k1l-nixos-system-client-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if3: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether 2a:42:35:28:b1:2f brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 261.1 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/di26b1kkbammy0sj70nq5qzvfrh78wxl-coreutils-9.11/bin/sleep 999999999 && echo d05ade42-3d9f-4a9c-8a20-10ec0f63cf00' container-test-run-certificates> Running as unit: run-p305-i64509698.service; invocation ID: 35d1138b92924a2f88e60415c8085c44 container-test-run-certificates> To attach to container client run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*d05ade42-3d9f-4a9c-8a20-10ec0f63cf00') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/gxzhl7aaiid7zp3y47jqqiq7zg5mqpwp-python3-3.14.6/bin/python3.14 /nix/store/s7xzzws7ckb1gzm2fpvx0j66bkbf1wws-test-driver-0.0.1/lib/python3.14/site-packages/test_driver/inject_network.py d05ade42-3d9f-4a9c-8a20-10ec0f63cf00 container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/3nwmrgf4dfany6kc6z04cavr71z0310b-nixos-system-server-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if5: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether be:aa:dd:39:86:e7 brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 261.1 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/di26b1kkbammy0sj70nq5qzvfrh78wxl-coreutils-9.11/bin/sleep 999999999 && echo faf48d7f-74e5-4542-abe2-5bef435f5fb7' container-test-run-certificates> Running as unit: run-p386-i64509701.service; invocation ID: f1d158d37aa145849145a7f164b3ba59 container-test-run-certificates> To attach to container server run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*faf48d7f-74e5-4542-abe2-5bef435f5fb7') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/gxzhl7aaiid7zp3y47jqqiq7zg5mqpwp-python3-3.14.6/bin/python3.14 /nix/store/s7xzzws7ckb1gzm2fpvx0j66bkbf1wws-test-driver-0.0.1/lib/python3.14/site-packages/test_driver/inject_network.py faf48d7f-74e5-4542-abe2-5bef435f5fb7 container-test-run-certificates> + systemctl restart acme-order-renew-ca.foo.service container-test-run-certificates> + systemctl restart acme-test.foo.service container-test-run-certificates> client: waiting for success: curl -v https://test.foo container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1009 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [111 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Aug 5 05:03:27 2026 GMT container-test-run-certificates> * expire date: Sep 4 05:03:27 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 6e6a33 container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1009 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [111 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Aug 5 05:03:27 2026 GMT container-test-run-certificates> * expire date: Sep 4 05:03:27 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 6e6a33 container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [931 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [79 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Aug 5 05:02:39 2026 GMT container-test-run-certificates> * expire date: Nov 3 05:03:39 2026 GMT container-test-run-certificates> * issuer: CN=Clan Intermediate CA container-test-run-certificates> * Certificate level 0: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 1: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 2: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 0 container-test-run-certificates> * SSL certificate verified via OpenSSL. container-test-run-certificates> * Established connection to test.foo (192.168.1.3 port 443) from 192.168.1.2 port 36168 container-test-run-certificates> % Total % Received % Xferd Average Speed Time Time Time Current container-test-run-certificates> Dload Upload Total Spent Left Speed container-test-run-certificates> 0 0 0 0 0 0 0 0 0* using HTTP/2 container-test-run-certificates> * [HTTP/2] [1] OPENED stream for https://test.foo/ container-test-run-certificates> * [HTTP/2] [1] [:method: GET] container-test-run-certificates> * [HTTP/2] [1] [:scheme: https] container-test-run-certificates> * [HTTP/2] [1] [:authority: test.foo] container-test-run-certificates> * [HTTP/2] [1] [:path: /] container-test-run-certificates> * [HTTP/2] [1] [user-agent: curl/8.21.0] container-test-run-certificates> * [HTTP/2] [1] [accept: */*] container-test-run-certificates> } [5 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> * Request completely sent off container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> { [5 bytes data] container-test-run-certificates> 100 20 100 20 0 0 1829 0 0 container-test-run-certificates> * Connection #0 to host test.foo:443 left intact container-test-run-certificates> (finished: waiting for success: curl -v https://test.foo, in 2.06 seconds) container-test-run-certificates> + openssl s_client -connect test.foo:443 -servername test.foo container-test-run-certificates> + openssl x509 -text -noout container-test-run-certificates> Certificate: container-test-run-certificates> Data: container-test-run-certificates> Version: 3 (0x2) container-test-run-certificates> Serial Number: container-test-run-certificates> 13:e7:97:80:48:f4:ab:7d:e0:a6:84:c4:20:a3:ff:ff container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Issuer: CN=Clan Intermediate CA container-test-run-certificates> Validity container-test-run-certificates> Not Before: Aug 5 05:02:39 2026 GMT container-test-run-certificates> Not After : Nov 3 05:03:39 2026 GMT container-test-run-certificates> Subject: CN=test.foo container-test-run-certificates> Subject Public Key Info: container-test-run-certificates> Public Key Algorithm: id-ecPublicKey container-test-run-certificates> Public-Key: (256 bit) container-test-run-certificates> pub: container-test-run-certificates> 04:39:6e:63:da:37:7e:94:98:e9:70:18:c3:74:36: container-test-run-certificates> f4:5b:1a:4e:fb:0c:06:76:4e:b1:a5:f7:02:ec:1f: container-test-run-certificates> c9:61:36:2c:39:49:f6:a4:1e:d0:3e:a9:59:94:f2: container-test-run-certificates> 6a:47:d8:6c:eb:68:17:9a:62:2b:f9:a1:52:76:9e: container-test-run-certificates> 47:39:25:26:79 container-test-run-certificates> ASN1 OID: prime256v1 container-test-run-certificates> NIST CURVE: P-256 container-test-run-certificates> X509v3 extensions: container-test-run-certificates> X509v3 Key Usage: critical container-test-run-certificates> Digital Signature container-test-run-certificates> X509v3 Extended Key Usage: container-test-run-certificates> TLS Web Server Authentication, TLS Web Client Authentication container-test-run-certificates> X509v3 Subject Key Identifier: container-test-run-certificates> 3F:9C:DA:8B:C4:AD:AE:7F:11:2C:37:97:45:59:D2:81:AD:AA:EF:3C container-test-run-certificates> X509v3 Authority Key Identifier: container-test-run-certificates> 32:56:15:2A:85:8E:67:EC:E4:DF:D1:B7:31:0E:86:36:E8:65:F9:C3 container-test-run-certificates> X509v3 Subject Alternative Name: container-test-run-certificates> DNS:test.foo container-test-run-certificates> 1.3.6.1.4.1.37476.9000.64.1: container-test-run-certificates> 0......acme.. container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Signature Value: container-test-run-certificates> 30:44:02:20:76:cb:04:aa:f3:00:b0:bc:95:62:0e:39:2d:32: container-test-run-certificates> 2e:08:18:11:74:39:41:c5:11:45:d0:e3:a3:5d:8c:72:95:24: container-test-run-certificates> 02:20:64:a7:d4:c1:de:da:42:3a:bb:97:b6:23:cf:48:0e:d0: container-test-run-certificates> 39:1f:3a:b3:77:ed:a3:e9:17:89:5a:ee:1c:b1:a7:bb container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> post-build step Upload to niks3: ok time=2026-08-05T05:03:41.998Z level=INFO msg="Uploading 0 paths to niks3.clan.lol (1 already cached)" time=2026-08-05T05:03:42.469Z level=INFO msg="Uploading 1 narinfos" time=2026-08-05T05:03:42.761Z level=INFO msg="Upload complete. (811ms)"