these 117 derivations will be built: /nix/store/06z3wcb7lp0wdr6mxy43kdh0nsliikgy-unit-systemd-update-utmp.service.drv /nix/store/g33bf1ns23k1pfsf5if2kn3rbssj343r-system-path.drv /nix/store/rmpaj360cfb7179b8ri7xibz287vylcv-dbus-1.drv /nix/store/081aadjfsfncfhbrbxry2hw2infh5wbd-X-Restart-Triggers-dbus-broker.drv /nix/store/prg4lcm3nn6lz8r7j5aig116rrz3md8k-systemd.drv /nix/store/569ap7mf4mxgwb92ncby5iyxqvfnirk3-50-coredump.conf.drv /nix/store/6vyrckhlwv7ic0aw7k0d3qaw141zqsyy-tmpfiles.d.drv /nix/store/dfqb9jk5gihvsdxrx0d4q2kbldal5ij6-systemd-user.pam.drv /nix/store/izbw9xjnqzmkw1i3dwy5pm93n88w6qix-system-path.drv /nix/store/fk6g25pj541k5912jkpl3hzj8ray9s3z-unit-script-nixos-activation-start.drv /nix/store/7dn1x8jyrgc092wbrg3f10zqhpa6m2p2-unit-nixos-activation.service.drv /nix/store/rb01835wlr51c69v9qcflqfjrg0mb05q-dbus-1.drv /nix/store/ybnnf0q4j1n7ysn1bprvarrcwdnqzhyg-X-Restart-Triggers-dbus-broker.drv /nix/store/bsm9w4cbx9dqc4nyaxfrwhs6r1cx892f-unit-dbus-broker.service.drv /nix/store/mbl0pm13a345m6ryc0v6yjmgprsjk5xz-unit-dbus.service.drv /nix/store/x1z05f7fdxgn1z5qj3qrfsyz25rk3cbq-unit-systemd-tmpfiles-setup.service.drv /nix/store/mwx2kfab123c3cxlhjn5m91ys6j79syg-user-units.drv /nix/store/0vmyd0h987ydfi1k85czm2yx0c4bbm0r-unit-systemd-journal-flush.service.drv /nix/store/1j72rn6zdbhv0if7jnxd3wbm9zic469x-unit-systemd-timedated.service.drv /nix/store/3c48i3nfvylldszpxhy2bygs6422g1vr-unit-nginx-config-reload.service.drv /nix/store/3xxd7mps5j56vwdiva03wipbjxg532rw-unit-systemd-remount-fs.service.drv /nix/store/4z80j1yszh8y5i9c7qkfxyf7nzcp13nr-unit-nginx.service.drv /nix/store/n9bndiwh2mnrc31zknqjwm90g9d127r6-shutdown-ramfs-contents.json.drv /nix/store/53myl44d2wrwh94zws83ig5nl10ih21x-unit-generate-shutdown-ramfs.service.drv /nix/store/548ibhah9j6ncnm1gjndx7i2v7vpmkcc-unit-modprobe-.service.drv /nix/store/5kydn0wx4sdk5w5gsfa7afjf5x2x0aq4-unit-nix-optimise.service.drv /nix/store/69i5w07ichz6qn27v2sy4vvjx8bwl1sz-unit-qemu-guest-agent.service.drv /nix/store/77m4f920nyfq0sqf5x9ynafw9fn6bxcx-unit-register-nix-paths.service.drv /nix/store/95v4jrfil64lmampr8lf5avmravjcg2v-unit-nix-gc.service.drv /nix/store/9dk5j1wgw1s7nds0j2id8lvxkvv6qslc-unit-prepare-kexec.service.drv /nix/store/9fplljg8nhnysvw33lzlb4i94375vbwg-unit-systemd-fsck-.service.drv /nix/store/afv8nip0msd661k1mnhimsbv1zmrjm1f-unit-systemd-journald.service.drv /nix/store/ayva24mmlf61rnh8c7k3p91jxbrywfz0-unit-console-getty.service.drv /nix/store/bcyd5hz4rdm63kwa6xiwaixllq9kqzck-unit-systemd-mkswap-.service.drv /nix/store/dcyqy4a0g3fy5nb4jryjjlw5cmsp48rg-unit-nscd.service.drv /nix/store/h8kwcl6rysvrqcii9vrd0wq0q6bc62z8-unit-acme-order-renew-test.foo.service.drv /nix/store/hcak4hwc7w9gd0k433a96qd2cddf9h4l-unit-user-runtime-dir-.service.drv /nix/store/hph51ap3smkmh63g343fgv8pwhkvsrms-unit-lastlog2-import.service.drv /nix/store/i3w8dskilkb7ky7j4i8w3cc0l3r537wj-unit-firewall.service.drv /nix/store/igh4k6vpbmpv5mypfwvi002aizvgw9ca-unit-network-local-commands.service.drv /nix/store/ipiszmi7fmj660pv6wr4s7jwd20b57i7-unit-getty-.service.drv /nix/store/jg4hqihpkqy9r71d0zkv4j64p8lkfa0p-unit-acme-test.foo.service.drv /nix/store/jhk2m9pyrzj24flsg8mzxc49qxmwidxx-unit-systemd-pstore.service.drv /nix/store/jypwl2hvsqi1xipf38bpr3c1z4m868vn-unit-kmod-static-nodes.service.drv /nix/store/mcib4r1xl6s4ydg11i34n9mkr2zhrfz8-unit-acme-setup.service.drv /nix/store/ml11vlk4fh7k9l5dcp3082r4ssg8ym96-unit-dbus-broker.service.drv /nix/store/mw9fzajl1lzh9k9aznc75w8hwlh67gzx-unit-systemd-logind.service.drv /nix/store/n0pgmrcxf58gzhwgalcn4x5n4nb093kb-unit-container-getty-.service.drv /nix/store/bxdx7h248ncz85az65ddr1vcb9rrmcff-X-Restart-Triggers-systemd-sysctl.drv /nix/store/n11h295im48gxqv4bwhrhksdq1iswd1p-unit-systemd-sysctl.service.drv /nix/store/ndyfdmkjrnqbqi8fg2ij52pgv8gsz08r-unit-systemd-journald-.service.drv /nix/store/npc6sx7956gls8z2fa21s0500bjrmw2c-unit-systemd-networkd-wait-online-.service.drv /nix/store/p1p0y7y6apx0npg7xrd6dw2w09dhdgva-unit-systemd-importd.service.drv /nix/store/p3lq8lfsw7n2mlai47dvp30r2j4lzmmk-unit-serial-getty-.service.drv /nix/store/pnz7zp57bdwwqygg0in4znh91ibxdp5z-unit-systemd-hostnamed.service.drv /nix/store/r0wwlpadfgpavfc166cmpqb5l7h3xqrm-unit-systemd-user-sessions.service.drv /nix/store/rg5b59913xfyldr8ibzag6gckssf3byw-unit-reload-systemd-vconsole-setup.service.drv /nix/store/rsv4i4i80zd5zx0w1hcdi9k2v1pwr54y-unit-user-.service.drv /nix/store/sd37wv6msbg9knv39s1har3618mkhrb0-unit-systemd-oomd.service.drv /nix/store/swwfrki13ls7g2f9wwd83i776pwdnq8y-unit-systemd-networkd.service.drv /nix/store/sz1347mr9fj5zzqki8ncnk1m4na1jfi4-unit-systemd-random-seed.service.drv /nix/store/wb9ss2v2skppah7k3j2p04l9c9v95i6y-unit-script-linger-users-start.drv /nix/store/v13lkza31am8hx0144p607d7icysw0pm-unit-linger-users.service.drv /nix/store/w7srq02f7i89sc1f2l6d4pwwwfm657g2-unit-systemd-localed.service.drv /nix/store/wanh0g62y6wv8br0g2x4zlnhp87ns7lj-unit-systemd-makefs-.service.drv /nix/store/i7hws97kv1sls1hbrghby5clwj73ldpz-X-Restart-Triggers-systemd-tmpfiles-resetup.drv /nix/store/xc7p3dsf4lv971n4rvk8g54z0aq6s0bm-unit-systemd-tmpfiles-resetup.service.drv /nix/store/xr0vk9xdva4cgb9diqsjkwna3amkx3dc-unit-systemd-nspawn-.service.drv /nix/store/rzs5cawci21d6n1v45zaclya5q0wnbn7-nss-cacert-3.126.drv /nix/store/y4plv7ngpi9ppb8ghk6igjg66iwck3f4-unit-nix-daemon.service.drv /nix/store/zzn2l2qj3b0p88gp3bhsb0ly0ggssvch-unit-systemd-backlight-.service.drv /nix/store/qzls4izz9bsp4vdwphs9dm0rlvrhibfr-system-units.drv /nix/store/w46d21rwv5cmja3wf1vd66f4g1m24acg-login.pam.drv /nix/store/dilvvl51jd2ilj2qmycrp3glifpl2mn1-etc.drv /nix/store/4cy3zif1idv2kkkla7lzsn9sf0ifgxnf-activate.drv /nix/store/5yp0h37r0645k997ln3ka4ibgb3z316c-nixos-system-server-test.drv /nix/store/sjwi28cqqh2gpjwr1kfnzvqs2n8kbgy6-unit-dbus-broker.service.drv /nix/store/0rnkhpkksh5mbzzj36bm19j0wlx2lyig-user-units.drv /nix/store/155m67ycv8rgdpk0rjck51varpgnrmhc-unit-dbus-broker.service.drv /nix/store/5whdyz5hjg5z7r8rss1dn2x9la7306zm-unit-systemd-networkd.service.drv /nix/store/7gvnb1ncsd5xvcsf1mnpb173s5gl7jy3-unit-firewall.service.drv /nix/store/y91wmf1vhb9kvzf4w57mwn63lx0x06zk-tmpfiles.d.drv /nix/store/1q19bva0rk1xviwaccvvqbpaxib2nkj4-X-Restart-Triggers-systemd-tmpfiles-resetup.drv /nix/store/q6nn6l0qfx58ki48gsl7009y3pznii4b-unit-systemd-tmpfiles-resetup.service.drv /nix/store/ng4y5bcvh2k78l5mb0xfy64jisyclw8z-system-units.drv /nix/store/gjx7zylja6q9z387q4f2c0vbhwprgadh-etc.drv /nix/store/diavcf15lkdfcjdzpismz6z8h1annf2w-activate.drv /nix/store/ki7hs4i3g601yiczxqjjmff4dbldy0qb-nixos-system-client-test.drv /nix/store/ifz9qpq4cpcrg9b5zmaasqnxlxh8cx55-closure-info.drv /nix/store/c06x1v3s20iaa20afxhi8pnip84d92s0-decrypt-age-secrets.drv /nix/store/xjin91dwmvk0ps31f15jqxfdp594qf06-ca.json.drv /nix/store/kw6vbrz7b2vbs7jiaqk8k6psdj723f41-X-Restart-Triggers-step-ca.drv /nix/store/27ka7agkig2jny4qjf2nnv25f1pl26bl-unit-step-ca.service.drv /nix/store/2zf5z9fy7hsvlw0ahdikzbf6m5ciqbfh-unit-acme-ca.foo.service.drv /nix/store/zb52nf5l3d72q9zidixsjvmpfihc3yx4-system-path.drv /nix/store/h599vk16lrgzzwk9gabr7maz5hap33m8-dbus-1.drv /nix/store/dc0431j4k4ypy4nm7vyb50vj7xpscfjd-X-Restart-Triggers-dbus-broker.drv /nix/store/3n50k9s2ppm09f81lkz3djbin5n2a6x1-unit-dbus-broker.service.drv /nix/store/dc2bkzqgp1srmkrhkd0vcvymyfz9p2y7-unit-nginx-config-reload.service.drv /nix/store/f6n199svia85zgv820a2z5kzk5blr4c0-unit-acme-order-renew-ca.foo.service.drv /nix/store/w4knhs23v9gvr01izn9ch5fg42p9c489-nginx.conf.drv /nix/store/bnrn3ii2i009cdv3jbknmqdl7gjh27j3-unit-script-nginx-pre-start.drv /nix/store/g27nj9ndzd8ljglaqx39xazj72l1hmb5-unit-nginx.service.drv /nix/store/grfa0mp2hjcljswyzq3lccddizsir1yq-unit-acme-setup.service.drv /nix/store/iskbx1pszhgqxcaxyvyhb7080n6awqvp-unit-systemd-networkd.service.drv /nix/store/43cfw8z0avb8hwvgvq3kliza8plwsvbh-system-units.drv /nix/store/0vpf90swx7qrvqcr1r4wzcsj9i3a83f0-unit-dbus-broker.service.drv /nix/store/ywrfp2njnj67h4vvsddkahzcpsm64ir3-user-units.drv /nix/store/wf2ffp9cjw2px3khkwa0r2pjknldrk7q-etc.drv /nix/store/6fsnrxprfpisamcq68d7ysvjqas9awaf-activate.drv /nix/store/d9rcsdzpjcb6mvrp3s8j4whx213spg0n-dry-activate.drv /nix/store/ipk1l3x9pnscla00g6idv65gw1cx60jl-nixos-system-ca-test.drv /nix/store/pla1yk00vcfrnplf13k5x02l4a53kyfa-closure-info.drv /nix/store/vrav60zj4kd088rvaym43nw2mjmqy9gy-closure-info.drv /nix/store/xr9421nx88f4pk99p8q429mlqx220d3d-test-driver-0.0.1.drv /nix/store/6xk7kzck6cs954xx2dji5p1fllh7fnh4-nixos-test-driver-certificates.drv /nix/store/0j3daab3a0vgwkspqjvk8wrrbl17sgxn-container-test-run-certificates.drv building '/nix/store/g33bf1ns23k1pfsf5if2kn3rbssj343r-system-path.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/izbw9xjnqzmkw1i3dwy5pm93n88w6qix-system-path.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/zb52nf5l3d72q9zidixsjvmpfihc3yx4-system-path.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/2zf5z9fy7hsvlw0ahdikzbf6m5ciqbfh-unit-acme-ca.foo.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/f6n199svia85zgv820a2z5kzk5blr4c0-unit-acme-order-renew-ca.foo.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/xjin91dwmvk0ps31f15jqxfdp594qf06-ca.json.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/c06x1v3s20iaa20afxhi8pnip84d92s0-decrypt-age-secrets.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/w4knhs23v9gvr01izn9ch5fg42p9c489-nginx.conf.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/rzs5cawci21d6n1v45zaclya5q0wnbn7-nss-cacert-3.126.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/h8kwcl6rysvrqcii9vrd0wq0q6bc62z8-unit-acme-order-renew-test.foo.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/grfa0mp2hjcljswyzq3lccddizsir1yq-unit-acme-setup.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/mcib4r1xl6s4ydg11i34n9mkr2zhrfz8-unit-acme-setup.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/jg4hqihpkqy9r71d0zkv4j64p8lkfa0p-unit-acme-test.foo.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/i3w8dskilkb7ky7j4i8w3cc0l3r537wj-unit-firewall.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/3c48i3nfvylldszpxhy2bygs6422g1vr-unit-nginx-config-reload.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/dc2bkzqgp1srmkrhkd0vcvymyfz9p2y7-unit-nginx-config-reload.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/g33bf1ns23k1pfsf5if2kn3rbssj343r-system-path.drv' system-path> structuredAttrs is enabled system-path> created 1811 symlinks in user environment building '/nix/store/izbw9xjnqzmkw1i3dwy5pm93n88w6qix-system-path.drv' system-path> structuredAttrs is enabled system-path> created 1811 symlinks in user environment building '/nix/store/zb52nf5l3d72q9zidixsjvmpfihc3yx4-system-path.drv' system-path> structuredAttrs is enabled system-path> created 1811 symlinks in user environment building '/nix/store/h599vk16lrgzzwk9gabr7maz5hap33m8-dbus-1.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/2zf5z9fy7hsvlw0ahdikzbf6m5ciqbfh-unit-acme-ca.foo.service.drv' building '/nix/store/f6n199svia85zgv820a2z5kzk5blr4c0-unit-acme-order-renew-ca.foo.service.drv' building '/nix/store/xjin91dwmvk0ps31f15jqxfdp594qf06-ca.json.drv' ca.json> structuredAttrs is enabled building '/nix/store/w4knhs23v9gvr01izn9ch5fg42p9c489-nginx.conf.drv' nginx.conf> nginx.conf> ==================== Results =================== nginx.conf> No issues found. nginx.conf> nginx.conf> ==================== Summary =================== nginx.conf> Total issues: nginx.conf> Unspecified: 0 nginx.conf> Low: 0 nginx.conf> Medium: 0 nginx.conf> High: 0 nginx.conf> building '/nix/store/bnrn3ii2i009cdv3jbknmqdl7gjh27j3-unit-script-nginx-pre-start.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/c06x1v3s20iaa20afxhi8pnip84d92s0-decrypt-age-secrets.drv' building '/nix/store/rzs5cawci21d6n1v45zaclya5q0wnbn7-nss-cacert-3.126.drv' building '/nix/store/kw6vbrz7b2vbs7jiaqk8k6psdj723f41-X-Restart-Triggers-step-ca.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/rb01835wlr51c69v9qcflqfjrg0mb05q-dbus-1.drv' on 'ssh-ng://builder@build01.clan.lol' nss-cacert-3.126> Running phase: unpackPhase nss-cacert-3.126> Running phase: patchPhase nss-cacert-3.126> Running phase: updateAutotoolsGnuConfigScriptsPhase nss-cacert-3.126> Running phase: configurePhase nss-cacert-3.126> no configure script, doing nothing nss-cacert-3.126> Running phase: buildPhase nss-cacert-3.126> Running phase: installPhase nss-cacert-3.126> Running phase: fixupPhase nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/45b0qp3cqndsjmzrhcz63q5w6np3cphv-nss-cacert-3.126 nss-cacert-3.126> checking for references to /build/ in /nix/store/45b0qp3cqndsjmzrhcz63q5w6np3cphv-nss-cacert-3.126... nss-cacert-3.126> patching script interpreter paths in /nix/store/45b0qp3cqndsjmzrhcz63q5w6np3cphv-nss-cacert-3.126 nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/adzj8m41546bjkj0fyjgrjrxqpxxaymc-nss-cacert-3.126-unbundled building '/nix/store/h8kwcl6rysvrqcii9vrd0wq0q6bc62z8-unit-acme-order-renew-test.foo.service.drv' nss-cacert-3.126> checking for references to /build/ in /nix/store/adzj8m41546bjkj0fyjgrjrxqpxxaymc-nss-cacert-3.126-unbundled... nss-cacert-3.126> patching script interpreter paths in /nix/store/adzj8m41546bjkj0fyjgrjrxqpxxaymc-nss-cacert-3.126-unbundled nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/88lwz1lxa5s30yk8a6jpci1blw97qprr-nss-cacert-3.126-p11kit nss-cacert-3.126> checking for references to /build/ in /nix/store/88lwz1lxa5s30yk8a6jpci1blw97qprr-nss-cacert-3.126-p11kit... nss-cacert-3.126> patching script interpreter paths in /nix/store/88lwz1lxa5s30yk8a6jpci1blw97qprr-nss-cacert-3.126-p11kit nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/yr1m8cgqbzn2iyqpy99sjqrhf664d8if-nss-cacert-3.126-hashed nss-cacert-3.126> checking for references to /build/ in /nix/store/yr1m8cgqbzn2iyqpy99sjqrhf664d8if-nss-cacert-3.126-hashed... nss-cacert-3.126> patching script interpreter paths in /nix/store/yr1m8cgqbzn2iyqpy99sjqrhf664d8if-nss-cacert-3.126-hashed building '/nix/store/y4plv7ngpi9ppb8ghk6igjg66iwck3f4-unit-nix-daemon.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/grfa0mp2hjcljswyzq3lccddizsir1yq-unit-acme-setup.service.drv' building '/nix/store/mcib4r1xl6s4ydg11i34n9mkr2zhrfz8-unit-acme-setup.service.drv' building '/nix/store/jg4hqihpkqy9r71d0zkv4j64p8lkfa0p-unit-acme-test.foo.service.drv' building '/nix/store/i3w8dskilkb7ky7j4i8w3cc0l3r537wj-unit-firewall.service.drv' building '/nix/store/3c48i3nfvylldszpxhy2bygs6422g1vr-unit-nginx-config-reload.service.drv' building '/nix/store/dc2bkzqgp1srmkrhkd0vcvymyfz9p2y7-unit-nginx-config-reload.service.drv' building '/nix/store/rmpaj360cfb7179b8ri7xibz287vylcv-dbus-1.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/d9rcsdzpjcb6mvrp3s8j4whx213spg0n-dry-activate.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/4z80j1yszh8y5i9c7qkfxyf7nzcp13nr-unit-nginx.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/swwfrki13ls7g2f9wwd83i776pwdnq8y-unit-systemd-networkd.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/h599vk16lrgzzwk9gabr7maz5hap33m8-dbus-1.drv' building '/nix/store/dc0431j4k4ypy4nm7vyb50vj7xpscfjd-X-Restart-Triggers-dbus-broker.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/bnrn3ii2i009cdv3jbknmqdl7gjh27j3-unit-script-nginx-pre-start.drv' building '/nix/store/g27nj9ndzd8ljglaqx39xazj72l1hmb5-unit-nginx.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/kw6vbrz7b2vbs7jiaqk8k6psdj723f41-X-Restart-Triggers-step-ca.drv' building '/nix/store/27ka7agkig2jny4qjf2nnv25f1pl26bl-unit-step-ca.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/y4plv7ngpi9ppb8ghk6igjg66iwck3f4-unit-nix-daemon.service.drv' building '/nix/store/rb01835wlr51c69v9qcflqfjrg0mb05q-dbus-1.drv' building '/nix/store/ybnnf0q4j1n7ysn1bprvarrcwdnqzhyg-X-Restart-Triggers-dbus-broker.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/rmpaj360cfb7179b8ri7xibz287vylcv-dbus-1.drv' building '/nix/store/081aadjfsfncfhbrbxry2hw2infh5wbd-X-Restart-Triggers-dbus-broker.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/d9rcsdzpjcb6mvrp3s8j4whx213spg0n-dry-activate.drv' building '/nix/store/4z80j1yszh8y5i9c7qkfxyf7nzcp13nr-unit-nginx.service.drv' building '/nix/store/swwfrki13ls7g2f9wwd83i776pwdnq8y-unit-systemd-networkd.service.drv' building '/nix/store/dc0431j4k4ypy4nm7vyb50vj7xpscfjd-X-Restart-Triggers-dbus-broker.drv' building '/nix/store/0vpf90swx7qrvqcr1r4wzcsj9i3a83f0-unit-dbus-broker.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/3n50k9s2ppm09f81lkz3djbin5n2a6x1-unit-dbus-broker.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/g27nj9ndzd8ljglaqx39xazj72l1hmb5-unit-nginx.service.drv' building '/nix/store/27ka7agkig2jny4qjf2nnv25f1pl26bl-unit-step-ca.service.drv' building '/nix/store/ybnnf0q4j1n7ysn1bprvarrcwdnqzhyg-X-Restart-Triggers-dbus-broker.drv' building '/nix/store/bsm9w4cbx9dqc4nyaxfrwhs6r1cx892f-unit-dbus-broker.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/ml11vlk4fh7k9l5dcp3082r4ssg8ym96-unit-dbus-broker.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/081aadjfsfncfhbrbxry2hw2infh5wbd-X-Restart-Triggers-dbus-broker.drv' building '/nix/store/155m67ycv8rgdpk0rjck51varpgnrmhc-unit-dbus-broker.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/sjwi28cqqh2gpjwr1kfnzvqs2n8kbgy6-unit-dbus-broker.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/3n50k9s2ppm09f81lkz3djbin5n2a6x1-unit-dbus-broker.service.drv' building '/nix/store/43cfw8z0avb8hwvgvq3kliza8plwsvbh-system-units.drv' on 'ssh-ng://builder@build01.clan.lol' warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy building '/nix/store/0vpf90swx7qrvqcr1r4wzcsj9i3a83f0-unit-dbus-broker.service.drv' building '/nix/store/ywrfp2njnj67h4vvsddkahzcpsm64ir3-user-units.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/ml11vlk4fh7k9l5dcp3082r4ssg8ym96-unit-dbus-broker.service.drv' building '/nix/store/bsm9w4cbx9dqc4nyaxfrwhs6r1cx892f-unit-dbus-broker.service.drv' building '/nix/store/mwx2kfab123c3cxlhjn5m91ys6j79syg-user-units.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/qzls4izz9bsp4vdwphs9dm0rlvrhibfr-system-units.drv' on 'ssh-ng://builder@build01.clan.lol' warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy building '/nix/store/sjwi28cqqh2gpjwr1kfnzvqs2n8kbgy6-unit-dbus-broker.service.drv' building '/nix/store/0rnkhpkksh5mbzzj36bm19j0wlx2lyig-user-units.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/155m67ycv8rgdpk0rjck51varpgnrmhc-unit-dbus-broker.service.drv' building '/nix/store/ng4y5bcvh2k78l5mb0xfy64jisyclw8z-system-units.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/43cfw8z0avb8hwvgvq3kliza8plwsvbh-system-units.drv' building '/nix/store/ywrfp2njnj67h4vvsddkahzcpsm64ir3-user-units.drv' building '/nix/store/wf2ffp9cjw2px3khkwa0r2pjknldrk7q-etc.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/mwx2kfab123c3cxlhjn5m91ys6j79syg-user-units.drv' building '/nix/store/qzls4izz9bsp4vdwphs9dm0rlvrhibfr-system-units.drv' building '/nix/store/dilvvl51jd2ilj2qmycrp3glifpl2mn1-etc.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/0rnkhpkksh5mbzzj36bm19j0wlx2lyig-user-units.drv' building '/nix/store/ng4y5bcvh2k78l5mb0xfy64jisyclw8z-system-units.drv' building '/nix/store/gjx7zylja6q9z387q4f2c0vbhwprgadh-etc.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/wf2ffp9cjw2px3khkwa0r2pjknldrk7q-etc.drv' building '/nix/store/6fsnrxprfpisamcq68d7ysvjqas9awaf-activate.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/dilvvl51jd2ilj2qmycrp3glifpl2mn1-etc.drv' building '/nix/store/4cy3zif1idv2kkkla7lzsn9sf0ifgxnf-activate.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/gjx7zylja6q9z387q4f2c0vbhwprgadh-etc.drv' building '/nix/store/diavcf15lkdfcjdzpismz6z8h1annf2w-activate.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/6fsnrxprfpisamcq68d7ysvjqas9awaf-activate.drv' building '/nix/store/ipk1l3x9pnscla00g6idv65gw1cx60jl-nixos-system-ca-test.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/4cy3zif1idv2kkkla7lzsn9sf0ifgxnf-activate.drv' building '/nix/store/5yp0h37r0645k997ln3ka4ibgb3z316c-nixos-system-server-test.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/diavcf15lkdfcjdzpismz6z8h1annf2w-activate.drv' building '/nix/store/ki7hs4i3g601yiczxqjjmff4dbldy0qb-nixos-system-client-test.drv' on 'ssh-ng://builder@build01.clan.lol' warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy building '/nix/store/ipk1l3x9pnscla00g6idv65gw1cx60jl-nixos-system-ca-test.drv' nixos-system-ca-test> structuredAttrs is enabled building '/nix/store/5yp0h37r0645k997ln3ka4ibgb3z316c-nixos-system-server-test.drv' nixos-system-server-test> structuredAttrs is enabled building '/nix/store/vrav60zj4kd088rvaym43nw2mjmqy9gy-closure-info.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/pla1yk00vcfrnplf13k5x02l4a53kyfa-closure-info.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/ki7hs4i3g601yiczxqjjmff4dbldy0qb-nixos-system-client-test.drv' nixos-system-client-test> structuredAttrs is enabled building '/nix/store/ifz9qpq4cpcrg9b5zmaasqnxlxh8cx55-closure-info.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/vrav60zj4kd088rvaym43nw2mjmqy9gy-closure-info.drv' closure-info> structuredAttrs is enabled building '/nix/store/pla1yk00vcfrnplf13k5x02l4a53kyfa-closure-info.drv' closure-info> structuredAttrs is enabled building '/nix/store/ifz9qpq4cpcrg9b5zmaasqnxlxh8cx55-closure-info.drv' closure-info> structuredAttrs is enabled building '/nix/store/6xk7kzck6cs954xx2dji5p1fllh7fnh4-nixos-test-driver-certificates.drv' on 'ssh-ng://builder@build01.clan.lol' warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy building '/nix/store/6xk7kzck6cs954xx2dji5p1fllh7fnh4-nixos-test-driver-certificates.drv' nixos-test-driver-certificates> Running type check (enable/disable: config.skipTypeCheck) nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck nixos-test-driver-certificates> Success: no issues found in 1 source file building '/nix/store/0j3daab3a0vgwkspqjvk8wrrbl17sgxn-container-test-run-certificates.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/0j3daab3a0vgwkspqjvk8wrrbl17sgxn-container-test-run-certificates.drv' container-test-run-certificates> additionally exposed symbols: container-test-run-certificates> ca, client, server, container-test-run-certificates> start_all, machines, driver, Machine, wait_for_signal container-test-run-certificates> Starting ca container-test-run-certificates> Starting client container-test-run-certificates> Starting server container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/b36w9855lcq41m04w8jzjwy0zlrln62p-nixos-system-ca-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if3: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether 42:06:76:42:a9:8d brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.2 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture arm64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (aarch64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/vpnizxs18sv6agrsqplsvaml9y3bfx0k-coreutils-9.11/bin/sleep 999999999 && echo bda7d4db-866a-458a-af54-6bd0bc063d39' container-test-run-certificates> Running as unit: run-p468-i80604975.service; invocation ID: ea6cbf390e7f4d279468293c26183e98 container-test-run-certificates> To attach to container ca run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*bda7d4db-866a-458a-af54-6bd0bc063d39') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/1bhl5b9821ifsz1dbfm4wxbjbfywmsaq-python3-3.13.14/bin/python3.13 /nix/store/lf6lngb6dzima2m8nqbna4lc6bm1qw85-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py bda7d4db-866a-458a-af54-6bd0bc063d39 container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/6h7kv611j5j6cj2ll59brnn3226kbr7g-nixos-system-client-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if4: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether 2a:42:35:28:b1:2f brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.2 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture arm64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (aarch64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/vpnizxs18sv6agrsqplsvaml9y3bfx0k-coreutils-9.11/bin/sleep 999999999 && echo 22ba3020-602f-4d2b-a739-b330ea9a0d72' container-test-run-certificates> Running as unit: run-p304-i80604989.service; invocation ID: 66976f25bcb1410d93f74e4ca9836d5b container-test-run-certificates> To attach to container client run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*22ba3020-602f-4d2b-a739-b330ea9a0d72') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/1bhl5b9821ifsz1dbfm4wxbjbfywmsaq-python3-3.13.14/bin/python3.13 /nix/store/lf6lngb6dzima2m8nqbna4lc6bm1qw85-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py 22ba3020-602f-4d2b-a739-b330ea9a0d72 container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/rndbp8pj7qbvah7y11i7jzbgrbp2fzqk-nixos-system-server-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if5: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether be:aa:dd:39:86:e7 brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.2 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture arm64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (aarch64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/vpnizxs18sv6agrsqplsvaml9y3bfx0k-coreutils-9.11/bin/sleep 999999999 && echo d0418fc6-955b-49f2-b5dd-f9a56f079f48' container-test-run-certificates> Running as unit: run-p394-i80605003.service; invocation ID: 5ec6da9e0a6347da990c3b2fd1ab01e4 container-test-run-certificates> To attach to container server run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*d0418fc6-955b-49f2-b5dd-f9a56f079f48') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/1bhl5b9821ifsz1dbfm4wxbjbfywmsaq-python3-3.13.14/bin/python3.13 /nix/store/lf6lngb6dzima2m8nqbna4lc6bm1qw85-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py d0418fc6-955b-49f2-b5dd-f9a56f079f48 container-test-run-certificates> + systemctl restart acme-order-renew-ca.foo.service container-test-run-certificates> + systemctl restart acme-test.foo.service container-test-run-certificates> client: waiting for success: curl -v https://test.foo container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1009 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [112 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Aug 9 00:11:21 2026 GMT container-test-run-certificates> * expire date: Sep 8 00:11:21 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 308aaf container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1009 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [110 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Aug 9 00:11:21 2026 GMT container-test-run-certificates> * expire date: Sep 8 00:11:21 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 308aaf container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1009 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [111 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Aug 9 00:11:21 2026 GMT container-test-run-certificates> * expire date: Sep 8 00:11:21 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 308aaf container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [931 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [80 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Aug 9 00:10:35 2026 GMT container-test-run-certificates> * expire date: Nov 7 00:11:35 2026 GMT container-test-run-certificates> * issuer: CN=Clan Intermediate CA container-test-run-certificates> * Certificate level 0: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 1: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 2: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 0 container-test-run-certificates> * SSL certificate verified via OpenSSL. container-test-run-certificates> * Established connection to test.foo (192.168.1.3 port 443) from 192.168.1.2 port 39690 container-test-run-certificates> % Total % Received % Xferd Average Speed Time Time Time Current container-test-run-certificates> Dload Upload Total Spent Left Speed container-test-run-certificates> 0 0 0 0 0 0 0 0 0* using HTTP/2 container-test-run-certificates> * [HTTP/2] [1] OPENED stream for https://test.foo/ container-test-run-certificates> * [HTTP/2] [1] [:method: GET] container-test-run-certificates> * [HTTP/2] [1] [:scheme: https] container-test-run-certificates> * [HTTP/2] [1] [:authority: test.foo] container-test-run-certificates> * [HTTP/2] [1] [:path: /] container-test-run-certificates> * [HTTP/2] [1] [user-agent: curl/8.21.0] container-test-run-certificates> * [HTTP/2] [1] [accept: */*] container-test-run-certificates> } [5 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> * Request completely sent off container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> { [5 bytes data] container-test-run-certificates> 100 20 100 20 0 0 674 0 0 container-test-run-certificates> * Connection #0 to host test.foo:443 left intact container-test-run-certificates> (finished: waiting for success: curl -v https://test.foo, in 3.19 seconds) container-test-run-certificates> + openssl s_client -connect test.foo:443 -servername test.foo container-test-run-certificates> + openssl x509 -text -noout container-test-run-certificates> Certificate: container-test-run-certificates> Data: container-test-run-certificates> Version: 3 (0x2) container-test-run-certificates> Serial Number: container-test-run-certificates> b6:55:12:26:0b:eb:34:1d:39:42:39:cb:ba:1a:1c:ea container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Issuer: CN=Clan Intermediate CA container-test-run-certificates> Validity container-test-run-certificates> Not Before: Aug 9 00:10:35 2026 GMT container-test-run-certificates> Not After : Nov 7 00:11:35 2026 GMT container-test-run-certificates> Subject: CN=test.foo container-test-run-certificates> Subject Public Key Info: container-test-run-certificates> Public Key Algorithm: id-ecPublicKey container-test-run-certificates> Public-Key: (256 bit) container-test-run-certificates> pub: container-test-run-certificates> 04:04:32:78:06:c2:1c:b4:14:41:9c:c4:e8:29:1c: container-test-run-certificates> 11:3d:ce:32:6b:29:56:25:80:bc:01:c5:35:e0:81: container-test-run-certificates> d2:e9:a1:d7:a7:6a:5a:96:ab:4e:ba:0d:46:ba:38: container-test-run-certificates> 87:b3:a7:2e:2a:0c:2b:9e:7f:6a:2e:ae:22:7d:cd: container-test-run-certificates> 58:d5:25:14:2a container-test-run-certificates> ASN1 OID: prime256v1 container-test-run-certificates> NIST CURVE: P-256 container-test-run-certificates> X509v3 extensions: container-test-run-certificates> X509v3 Key Usage: critical container-test-run-certificates> Digital Signature container-test-run-certificates> X509v3 Extended Key Usage: container-test-run-certificates> TLS Web Server Authentication, TLS Web Client Authentication container-test-run-certificates> X509v3 Subject Key Identifier: container-test-run-certificates> C6:70:1D:4D:74:71:98:32:80:46:54:1B:C2:46:01:46:83:6E:DD:9D container-test-run-certificates> X509v3 Authority Key Identifier: container-test-run-certificates> EC:53:EE:F5:B2:F2:FF:AB:F5:A0:3C:F7:E9:88:5F:B8:8F:83:2B:52 container-test-run-certificates> X509v3 Subject Alternative Name: container-test-run-certificates> DNS:test.foo container-test-run-certificates> 1.3.6.1.4.1.37476.9000.64.1: container-test-run-certificates> 0......acme.. container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Signature Value: container-test-run-certificates> 30:44:02:20:5f:93:68:05:fa:86:de:1b:c8:17:90:5e:a5:b6: container-test-run-certificates> 9b:26:48:ff:5c:9b:03:73:c2:3f:a7:c5:89:48:f8:4d:ee:97: container-test-run-certificates> 02:20:2b:96:dc:5d:88:0c:4c:90:f0:5f:b2:f4:84:e6:87:19: container-test-run-certificates> 15:38:7a:f2:89:c9:90:c2:58:06:e9:7a:56:03:70:f7 container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> post-build step Upload to niks3: ok time=2026-08-09T00:11:38.750Z level=INFO msg="Uploading 0 paths to niks3.clan.lol (1 already cached)" time=2026-08-09T00:11:39.475Z level=INFO msg="Uploading 1 narinfos" time=2026-08-09T00:11:40.338Z level=INFO msg="Upload complete. (1.641s)"