these 96 derivations will be built: /nix/store/4416fng1dvfdbwjmx55pas18hkb9wvgk-users-groups.json.drv /nix/store/25h8lbmyydxlvyd1vmflmbh159ymy75v-dry-activate.drv /nix/store/v2jrfnd67j4z75h4b70shd43682zxw7c-nginx.conf.drv /nix/store/byhlpq0fsnvxyqq60sl8rbp1c8wh2ac2-unit-script-nginx-pre-start.drv /nix/store/2v0n4kjyb2x274fkm1ikvwnqax61kvqi-unit-nginx.service.drv /nix/store/ylbgqjq2kfxjqn3nhd0rzpwdn8nja19x-nixos-tmpfiles.d.drv /nix/store/xzpkpihmqmg9hnln73s9ywv747dnvx25-tmpfiles.d.drv /nix/store/x19ivg4f0br7z9ykw648pk1x7raczgby-X-Restart-Triggers-systemd-tmpfiles-resetup.drv /nix/store/5srmghs63sm46vxfy1i01y8nsqn0ll9c-unit-systemd-tmpfiles-resetup.service.drv /nix/store/asi50rg1ya9a9y679bxhc80png3z44b6-firewall-start.drv /nix/store/zn9j2akqdzrjyw62z680njpivs2vdmla-firewall-reload.drv /nix/store/79hhs9n0pki4f8hbjlwdlfzg4vrraxcj-unit-firewall.service.drv /nix/store/rn3651hlmqw2rfspkbh4k4hwcvr80mh6-system-path.drv /nix/store/ymv5d88aalyn04nb1m8jz6mym1xlh6in-dbus-1.drv /nix/store/bsajx2011h0l9j8ca3qwh8ldd55q7fr6-X-Restart-Triggers-dbus-broker.drv /nix/store/7a0dlkyj3rr8lyyman0jbfvj1iz2n5dn-unit-dbus-broker.service.drv /nix/store/98qgbffc7h849ydmg6m9iix8js3l8y2y-unit-nginx-config-reload.service.drv /nix/store/gxra9mibcgjk32arh4vw6c4r3z3qsa9z-unit-acme-account-2c44cb477b4787b2cf13.target.drv /nix/store/hljixjral0sjwl1lk824xc8ag3784x7b-unit-script-acme-order-renew-test.foo-start.drv /nix/store/xfwyjrch2hwj7gwlsaili7yl5xy4bbnx-acme-postrun.drv /nix/store/hyjl3dyijr4l7g5nj58bvxk2m6xa4014-unit-acme-order-renew-test.foo.service.drv /nix/store/jf93jlqckp6sbsd9fx9ajac5m79i4hra-unit-acme-renew-test.foo.timer.drv /nix/store/yxy1cmdjj9kqqzvls1bpadbdpv91p79z-unit-40-eth1.network.drv /nix/store/hv6zd50ijy5h4803pbmym5bpn918xj7j-X-Reload-Triggers-systemd-networkd.drv /nix/store/wvsw1rv1mdlknc6q8gmqwi8dpx1g5d75-unit-systemd-networkd.service.drv /nix/store/1f2j0b7k5gyn9l995v889cyqv8kmrkym-unit-script-acme-test.foo-start.drv /nix/store/f2wry86nkcpcq9lfd7z2fxknl7w1r82f-X-Restart-Triggers-acme-test.foo.drv /nix/store/xh0ag2p3v4qs9wgy6w20k7hym9z7a1rc-unit-acme-test.foo.service.drv /nix/store/kdbxbj28i221dakl71s4rxz925kcr6md-acme-setup-privileged.drv /nix/store/yynq2l26wnvxi7ghbnj0rs49a5bdpmmy-unit-acme-setup.service.drv /nix/store/il4h7yg637vm007p6l72zngbq6v7fhb2-cacert-extra-certificates-bundle.crt.drv /nix/store/x6ccpgh92x17wm7jaqy9m744ad15n4gv-cacert-blocklist.txt.drv /nix/store/xz0mmlzb7njfp83qwmq4f88gph3lgy8x-nss-cacert-3.126.drv /nix/store/zk93y2xy4qzs3cbywl2xaygmb0pxv6df-unit-nix-daemon.service.drv /nix/store/7030av8lcmgsrpvk60rn69qgbh6c9hhp-system-units.drv /nix/store/1s84dja1g88aa0bsgkr6z5w5wd3gq0vx-unit-dbus-broker.service.drv /nix/store/gyv7sj97d6xzjbigiaa9pm9sv388c2g2-user-units.drv /nix/store/j01ch3wh9pjlwbx04bd4xbf4fcz9xzp2-vars-check-certificates.drv /nix/store/yvi3zfy3c2jw7n2wgq6ncy3naqqx3249-extra-hosts.drv /nix/store/k4nzqc4ks4b9mdkjflk4d1d9zdkvv4in-hosts.drv /nix/store/d06d78b7ilvswah9ln2qziyri2xjij2x-etc.drv /nix/store/vh3b34kcnxd9vkgjmwm2963q9wbp926z-activate.drv /nix/store/0ypdnqsdj8z4g9w82mf71adw7i1lyrlc-nixos-system-server-test.drv /nix/store/dk69bx4gx9b6ckmfn2g9jbwrf5ymn4gk-system-path.drv /nix/store/3vm2ym3845g8isxqyzn76zk5hmbshr3f-hosts.drv /nix/store/kqc9gj138fphb4yfbva8nbcsii93kw6b-dbus-1.drv /nix/store/4ihszq2xjdhdpq75jj1djizg8zrg7pcf-X-Restart-Triggers-dbus-broker.drv /nix/store/qfwk1ddhgsi5f305dsq4445w7mvwfxfz-unit-dbus-broker.service.drv /nix/store/pwlzn5dmx2axm1pcff2dpv33a3gby90a-user-units.drv /nix/store/7x1s9s90yv7zl4nn7sf7y7nx6m2a6qml-unit-dbus-broker.service.drv /nix/store/wxmzjfjv52ql8c5j8qwai45fxvxd40bm-system-units.drv /nix/store/n01zfbpm09a8vlax0lc5sr5f859rzrjl-etc.drv /nix/store/hs0vzdj57h5jjkmg7qzn7xhv9h5g54y3-activate.drv /nix/store/q3zcwqrsl3zwh8cp5dd5a2hxs9x8ksbg-nixos-system-client-test.drv /nix/store/xscvc472aihmdvi9k22q1mamrlnihndh-testScript.drv /nix/store/259vxpwf4d1nx98vlxrvh0hpyvwia14w-closure-info.drv /nix/store/2hxca7qymdzx8fwc1z20lqpyy4nb8kql-acme-setup-privileged.drv /nix/store/4zgq3whabg3kknmp1ymkg28ygd4jhabw-users-groups.json.drv /nix/store/klysj4axhf3svm07nw4gjgrnm97dgsnq-decrypt-age-secrets.drv /nix/store/2qfgg1dkhr567vvrbaivwx4lxl53dm7r-dry-activate.drv /nix/store/2sjd8wxa23jqxgwdg40mr77hbj90i0yg-nginx.conf.drv /nix/store/2vf9dxjp1hkhlm7ypi6h4cfiavzrcq1p-user-generators.drv /nix/store/3dxa9p2bhn237l67iv8sins66ds980av-unit-script-acme-ca.foo-start.drv /nix/store/50sbhgplmc28ii9m010i78mmgk8zxdgw-etc-hostname.drv /nix/store/6v9gb77vrjcq5jwp44aw2viwd0v4xbv9-system-generators.drv /nix/store/7rr0gf4mc5413b7hbwrs9yqz06rhb01z-acme-postrun.drv /nix/store/vvl8jsharfixmzydbcshzp1qdx4kgi85-system-path.drv /nix/store/81d8j1s1jqfd94zqchjszm7xqnbva3rw-dbus-1.drv /nix/store/8ykn0nbkxaqq9vg23phznk1nfnmk92vj-ca.json.drv /nix/store/i6xrz57gdabxn5pv3v1cy6wad1lyipd2-unit-script-acme-order-renew-ca.foo-start.drv /nix/store/a9272xljdr7imasbdd7aipjss7zj57fz-unit-acme-order-renew-ca.foo.service.drv /nix/store/azixs9jv8h2gzcn7rwrp084fqc0bk6wl-X-Restart-Triggers-acme-ca.foo.drv /nix/store/fxiyqph4n9ni24m2lxik39ffdz89h0yi-unit-script-nginx-pre-start.drv /nix/store/bn653ws9jmfxlr3vr5yf1w7xwq54j99p-unit-nginx.service.drv /nix/store/davnpi4q6pjjmn3cxvbqfxwaw1y8br0r-unit-acme-account-d22a46d9459bf683a338.target.drv /nix/store/b8h711g3jb7d8s94w96g4qwi1glvibjq-X-Restart-Triggers-dbus-broker.drv /nix/store/i4gkaqj0x2xp8n1z6alg1nsyvhgvx1sr-unit-dbus-broker.service.drv /nix/store/nxbl1kf3by14fxaypx21m9qvgkjrzwj4-unit-acme-ca.foo.service.drv /nix/store/q6ibka8n09b4w5s2z08qk0rhsjkn7l0j-unit-acme-setup.service.drv /nix/store/qbh087l03wfs787rzwyr74gffsvn2kmg-unit-nginx-config-reload.service.drv /nix/store/rsf3wglx09g6j8bzi2rh4v6jx5c4p8pw-unit-acme-renew-ca.foo.timer.drv /nix/store/jyisa9jfqnd9zgiws23z47rjvpz9ybsj-X-Restart-Triggers-step-ca.drv /nix/store/s1fnbp2arh82fli4604v8alvmkcwci3b-unit-step-ca.service.drv /nix/store/dlbglxh53ngwb6h8647ykd6fahnq5plx-system-units.drv /nix/store/dvm072qjlay54cb0ffw4vldfr3aqradc-system-shutdown.drv /nix/store/zaiiqi9239jrbg8nymgj14vy6i83s5xi-string-hosts.drv /nix/store/if7db79spsw0nh28v3xpc4054v48inpg-hosts.drv /nix/store/r63f5gyfjd2rhp0gp8fqnydlgw66z83y-unit-dbus-broker.service.drv /nix/store/zidisygd300x8pkcyl9h0c2bf4rafqz9-user-units.drv /nix/store/b6m30xzrnfn18qmknh05p1plffmh275n-etc.drv /nix/store/r14agwri5436w374k6iar1z8x62dj0mg-closure-info.drv /nix/store/w9m4dz13g8klrmvi5l4pf8dindzd5513-activate.drv /nix/store/wqb7y1nvp6lnp8zylsf66cw7igs36vlg-nixos-system-ca-test.drv /nix/store/xy0xmwns787vqh3x8fj9dy4k8888x4jz-closure-info.drv /nix/store/n0dgspcd8qc6m5dcb473njkaz78d17nc-nixos-test-driver-certificates.drv /nix/store/ws1pkbhf5q03rxwzkcxhd67mdxa7qwrp-container-test-run-certificates.drv these 3 paths will be fetched (24.4 MiB download, 75.8 MiB unpacked): /nix/store/5bw6gj8bhbwsxsjvg2nm2r0b8psm5lm4-openssl-3.6.3-man /nix/store/i26klp5pqlvi7lv8awjmjrpyk2b2apdv-python3.14-buildcatrust-0.5.1 /nix/store/63qj7mmqwpslnqgqjc86jnby1m2a0ckv-step-ca-0.30.2 building '/nix/store/50sbhgplmc28ii9m010i78mmgk8zxdgw-etc-hostname.drv' building '/nix/store/2sjd8wxa23jqxgwdg40mr77hbj90i0yg-nginx.conf.drv' building '/nix/store/v2jrfnd67j4z75h4b70shd43682zxw7c-nginx.conf.drv' building '/nix/store/yxy1cmdjj9kqqzvls1bpadbdpv91p79z-unit-40-eth1.network.drv' building '/nix/store/yvi3zfy3c2jw7n2wgq6ncy3naqqx3249-extra-hosts.drv' building '/nix/store/ylbgqjq2kfxjqn3nhd0rzpwdn8nja19x-nixos-tmpfiles.d.drv' building '/nix/store/zaiiqi9239jrbg8nymgj14vy6i83s5xi-string-hosts.drv' building '/nix/store/gxra9mibcgjk32arh4vw6c4r3z3qsa9z-unit-acme-account-2c44cb477b4787b2cf13.target.drv' building '/nix/store/davnpi4q6pjjmn3cxvbqfxwaw1y8br0r-unit-acme-account-d22a46d9459bf683a338.target.drv' building '/nix/store/rsf3wglx09g6j8bzi2rh4v6jx5c4p8pw-unit-acme-renew-ca.foo.timer.drv' nginx.conf> structuredAttrs is enabled nginx.conf> structuredAttrs is enabled unit-40-eth1.network> structuredAttrs is enabled unit-acme-account-2c44cb477b4787b2cf13.target> structuredAttrs is enabled unit-acme-account-d22a46d9459bf683a338.target> structuredAttrs is enabled unit-acme-renew-ca.foo.timer> structuredAttrs is enabled building '/nix/store/2hxca7qymdzx8fwc1z20lqpyy4nb8kql-acme-setup-privileged.drv' building '/nix/store/asi50rg1ya9a9y679bxhc80png3z44b6-firewall-start.drv' building '/nix/store/3dxa9p2bhn237l67iv8sins66ds980av-unit-script-acme-ca.foo-start.drv' building '/nix/store/i6xrz57gdabxn5pv3v1cy6wad1lyipd2-unit-script-acme-order-renew-ca.foo-start.drv' building '/nix/store/7rr0gf4mc5413b7hbwrs9yqz06rhb01z-acme-postrun.drv' building '/nix/store/xfwyjrch2hwj7gwlsaili7yl5xy4bbnx-acme-postrun.drv' building '/nix/store/3vm2ym3845g8isxqyzn76zk5hmbshr3f-hosts.drv' building '/nix/store/if7db79spsw0nh28v3xpc4054v48inpg-hosts.drv' building '/nix/store/k4nzqc4ks4b9mdkjflk4d1d9zdkvv4in-hosts.drv' building '/nix/store/xzpkpihmqmg9hnln73s9ywv747dnvx25-tmpfiles.d.drv' nginx.conf> nginx.conf> ==================== Results =================== nginx.conf> No issues found. nginx.conf> nginx.conf> ==================== Summary =================== nginx.conf> Total issues: nginx.conf> Unspecified: 0 nginx.conf> Low: 0 nginx.conf> Medium: 0 nginx.conf> High: 0 nginx.conf> nginx.conf> nginx.conf> ==================== Results =================== nginx.conf> No issues found. nginx.conf> nginx.conf> ==================== Summary =================== nginx.conf> Total issues: nginx.conf> Unspecified: 0 nginx.conf> Low: 0 nginx.conf> Medium: 0 nginx.conf> High: 0 nginx.conf> building '/nix/store/hv6zd50ijy5h4803pbmym5bpn918xj7j-X-Reload-Triggers-systemd-networkd.drv' building '/nix/store/azixs9jv8h2gzcn7rwrp084fqc0bk6wl-X-Restart-Triggers-acme-ca.foo.drv' building '/nix/store/f2wry86nkcpcq9lfd7z2fxknl7w1r82f-X-Restart-Triggers-acme-test.foo.drv' building '/nix/store/zn9j2akqdzrjyw62z680njpivs2vdmla-firewall-reload.drv' building '/nix/store/q6ibka8n09b4w5s2z08qk0rhsjkn7l0j-unit-acme-setup.service.drv' building '/nix/store/hljixjral0sjwl1lk824xc8ag3784x7b-unit-script-acme-order-renew-test.foo-start.drv' building '/nix/store/1f2j0b7k5gyn9l995v889cyqv8kmrkym-unit-script-acme-test.foo-start.drv' building '/nix/store/j01ch3wh9pjlwbx04bd4xbf4fcz9xzp2-vars-check-certificates.drv' on 'ssh-ng://builder@build-x86-01.clan.lol' unit-acme-setup.service> structuredAttrs is enabled building '/nix/store/kdbxbj28i221dakl71s4rxz925kcr6md-acme-setup-privileged.drv' building '/nix/store/8ykn0nbkxaqq9vg23phznk1nfnmk92vj-ca.json.drv' building '/nix/store/x6ccpgh92x17wm7jaqy9m744ad15n4gv-cacert-blocklist.txt.drv' building '/nix/store/il4h7yg637vm007p6l72zngbq6v7fhb2-cacert-extra-certificates-bundle.crt.drv' building '/nix/store/xscvc472aihmdvi9k22q1mamrlnihndh-testScript.drv' building '/nix/store/jf93jlqckp6sbsd9fx9ajac5m79i4hra-unit-acme-renew-test.foo.timer.drv' building '/nix/store/98qgbffc7h849ydmg6m9iix8js3l8y2y-unit-nginx-config-reload.service.drv' building '/nix/store/qbh087l03wfs787rzwyr74gffsvn2kmg-unit-nginx-config-reload.service.drv' building '/nix/store/4zgq3whabg3kknmp1ymkg28ygd4jhabw-users-groups.json.drv' ca.json> structuredAttrs is enabled unit-acme-renew-test.foo.timer> structuredAttrs is enabled unit-nginx-config-reload.service> structuredAttrs is enabled unit-nginx-config-reload.service> structuredAttrs is enabled building '/nix/store/x19ivg4f0br7z9ykw648pk1x7raczgby-X-Restart-Triggers-systemd-tmpfiles-resetup.drv' building '/nix/store/dk69bx4gx9b6ckmfn2g9jbwrf5ymn4gk-system-path.drv' building '/nix/store/nxbl1kf3by14fxaypx21m9qvgkjrzwj4-unit-acme-ca.foo.service.drv' building '/nix/store/hyjl3dyijr4l7g5nj58bvxk2m6xa4014-unit-acme-order-renew-test.foo.service.drv' building '/nix/store/79hhs9n0pki4f8hbjlwdlfzg4vrraxcj-unit-firewall.service.drv' building '/nix/store/byhlpq0fsnvxyqq60sl8rbp1c8wh2ac2-unit-script-nginx-pre-start.drv' system-path> structuredAttrs is enabled unit-acme-ca.foo.service> structuredAttrs is enabled unit-acme-order-renew-test.foo.service> structuredAttrs is enabled unit-firewall.service> structuredAttrs is enabled building '/nix/store/rn3651hlmqw2rfspkbh4k4hwcvr80mh6-system-path.drv' building '/nix/store/vvl8jsharfixmzydbcshzp1qdx4kgi85-system-path.drv' building '/nix/store/a9272xljdr7imasbdd7aipjss7zj57fz-unit-acme-order-renew-ca.foo.service.drv' building '/nix/store/fxiyqph4n9ni24m2lxik39ffdz89h0yi-unit-script-nginx-pre-start.drv' building '/nix/store/wvsw1rv1mdlknc6q8gmqwi8dpx1g5d75-unit-systemd-networkd.service.drv' building '/nix/store/klysj4axhf3svm07nw4gjgrnm97dgsnq-decrypt-age-secrets.drv' on 'ssh-ng://builder@build-x86-01.clan.lol' system-path> created 1822 symlinks in user environment system-path> structuredAttrs is enabled system-path> created 1822 symlinks in user environment system-path> structuredAttrs is enabled system-path> created 1822 symlinks in user environment unit-acme-order-renew-ca.foo.service> structuredAttrs is enabled unit-systemd-networkd.service> structuredAttrs is enabled building '/nix/store/jyisa9jfqnd9zgiws23z47rjvpz9ybsj-X-Restart-Triggers-step-ca.drv' building '/nix/store/yynq2l26wnvxi7ghbnj0rs49a5bdpmmy-unit-acme-setup.service.drv' building '/nix/store/xh0ag2p3v4qs9wgy6w20k7hym9z7a1rc-unit-acme-test.foo.service.drv' building '/nix/store/5srmghs63sm46vxfy1i01y8nsqn0ll9c-unit-systemd-tmpfiles-resetup.service.drv' building '/nix/store/4416fng1dvfdbwjmx55pas18hkb9wvgk-users-groups.json.drv' building '/nix/store/xz0mmlzb7njfp83qwmq4f88gph3lgy8x-nss-cacert-3.126.drv' on 'ssh-ng://builder@build-x86-01.clan.lol' unit-acme-setup.service> structuredAttrs is enabled unit-acme-test.foo.service> structuredAttrs is enabled unit-systemd-tmpfiles-resetup.service> structuredAttrs is enabled building '/nix/store/2v0n4kjyb2x274fkm1ikvwnqax61kvqi-unit-nginx.service.drv' building '/nix/store/bn653ws9jmfxlr3vr5yf1w7xwq54j99p-unit-nginx.service.drv' building '/nix/store/81d8j1s1jqfd94zqchjszm7xqnbva3rw-dbus-1.drv' building '/nix/store/kqc9gj138fphb4yfbva8nbcsii93kw6b-dbus-1.drv' building '/nix/store/ymv5d88aalyn04nb1m8jz6mym1xlh6in-dbus-1.drv' building '/nix/store/25h8lbmyydxlvyd1vmflmbh159ymy75v-dry-activate.drv' unit-nginx.service> structuredAttrs is enabled unit-nginx.service> structuredAttrs is enabled building '/nix/store/b8h711g3jb7d8s94w96g4qwi1glvibjq-X-Restart-Triggers-dbus-broker.drv' building '/nix/store/6v9gb77vrjcq5jwp44aw2viwd0v4xbv9-system-generators.drv' building '/nix/store/dvm072qjlay54cb0ffw4vldfr3aqradc-system-shutdown.drv' building '/nix/store/s1fnbp2arh82fli4604v8alvmkcwci3b-unit-step-ca.service.drv' building '/nix/store/2vf9dxjp1hkhlm7ypi6h4cfiavzrcq1p-user-generators.drv' unit-step-ca.service> structuredAttrs is enabled building '/nix/store/4ihszq2xjdhdpq75jj1djizg8zrg7pcf-X-Restart-Triggers-dbus-broker.drv' building '/nix/store/bsajx2011h0l9j8ca3qwh8ldd55q7fr6-X-Restart-Triggers-dbus-broker.drv' building '/nix/store/i4gkaqj0x2xp8n1z6alg1nsyvhgvx1sr-unit-dbus-broker.service.drv' building '/nix/store/r63f5gyfjd2rhp0gp8fqnydlgw66z83y-unit-dbus-broker.service.drv' unit-dbus-broker.service> structuredAttrs is enabled building '/nix/store/1s84dja1g88aa0bsgkr6z5w5wd3gq0vx-unit-dbus-broker.service.drv' building '/nix/store/7a0dlkyj3rr8lyyman0jbfvj1iz2n5dn-unit-dbus-broker.service.drv' building '/nix/store/7x1s9s90yv7zl4nn7sf7y7nx6m2a6qml-unit-dbus-broker.service.drv' building '/nix/store/qfwk1ddhgsi5f305dsq4445w7mvwfxfz-unit-dbus-broker.service.drv' unit-dbus-broker.service> structuredAttrs is enabled unit-dbus-broker.service> structuredAttrs is enabled unit-dbus-broker.service> structuredAttrs is enabled unit-dbus-broker.service> structuredAttrs is enabled unit-dbus-broker.service> structuredAttrs is enabled building '/nix/store/gyv7sj97d6xzjbigiaa9pm9sv388c2g2-user-units.drv' building '/nix/store/zidisygd300x8pkcyl9h0c2bf4rafqz9-user-units.drv' building '/nix/store/pwlzn5dmx2axm1pcff2dpv33a3gby90a-user-units.drv' building '/nix/store/j01ch3wh9pjlwbx04bd4xbf4fcz9xzp2-vars-check-certificates.drv' vars-check-certificates> Running vars check using Nix-based executor... vars-check-certificates> Executing shared generators... vars-check-certificates> Executing shared generator: step-ca vars-check-certificates> + set -euo pipefail vars-check-certificates> + PATH=/nix/store/pgzpycl8jd6xa0cmjd66jl6fjzgjawmr-step-cli-0.30.6/bin:/nix/store/di26b1kkbammy0sj70nq5qzvfrh78wxl-coreutils-9.11/bin vars-check-certificates> + [[ ! -d /etc ]] vars-check-certificates> + mkdir -p /etc vars-check-certificates> + cat vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> ++ id -u vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> + step certificate create --template /nix/store/m4kyinn4ra33v6lrcrvkj88xlqdss2wh-root.tmpl 'Clan Root CA' /output/ca.crt /output/ca.key --kty EC --curve P-256 --not-after=8760h --not-before=-12h --no-password --insecure vars-check-certificates> Your certificate has been saved in /output/ca.crt. vars-check-certificates> Your private key has been saved in /output/ca.key. vars-check-certificates> ✓ Generated shared file: step-ca/ca.crt vars-check-certificates> ✓ Generated shared file: step-ca/ca.key vars-check-certificates> ✓ Shared Generator step-ca completed vars-check-certificates> ✓ Shared generators completed vars-check-certificates> Processing machine: ca vars-check-certificates> Generator execution order: state-version -> step-intermediate-key -> step-intermediate-cert vars-check-certificates> Executing generator: state-version vars-check-certificates> + set -euo pipefail vars-check-certificates> + PATH=/nix/store/di26b1kkbammy0sj70nq5qzvfrh78wxl-coreutils-9.11/bin vars-check-certificates> + [[ ! -d /etc ]] vars-check-certificates> + mkdir -p /etc vars-check-certificates> + cat vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> ++ id -u vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> + echo -n 26.11 vars-check-certificates> ✓ Generated file: state-version/version vars-check-certificates> ✓ Generator state-version completed vars-check-certificates> Executing generator: step-intermediate-key vars-check-certificates> + set -euo pipefail vars-check-certificates> + PATH=/nix/store/pgzpycl8jd6xa0cmjd66jl6fjzgjawmr-step-cli-0.30.6/bin:/nix/store/di26b1kkbammy0sj70nq5qzvfrh78wxl-coreutils-9.11/bin vars-check-certificates> + [[ ! -d /etc ]] vars-check-certificates> + mkdir -p /etc vars-check-certificates> + cat building '/nix/store/klysj4axhf3svm07nw4gjgrnm97dgsnq-decrypt-age-secrets.drv' vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> ++ id -u vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> + step crypto keypair --kty EC --curve P-256 --no-password --insecure /output/intermediate.pub /output/intermediate.key vars-check-certificates> Your public key has been saved in /output/intermediate.pub. vars-check-certificates> Your private key has been saved in /output/intermediate.key. vars-check-certificates> ✓ Generated file: step-intermediate-key/intermediate.key vars-check-certificates> ✓ Generator step-intermediate-key completed vars-check-certificates> Executing generator: step-intermediate-cert vars-check-certificates> + set -euo pipefail vars-check-certificates> + PATH=/nix/store/pgzpycl8jd6xa0cmjd66jl6fjzgjawmr-step-cli-0.30.6/bin:/nix/store/di26b1kkbammy0sj70nq5qzvfrh78wxl-coreutils-9.11/bin vars-check-certificates> + [[ ! -d /etc ]] vars-check-certificates> + mkdir -p /etc vars-check-certificates> + cat vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> ++ id -u vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> + step certificate create --ca /input/step-ca/ca.crt --ca-key /input/step-ca/ca.key --ca-password-file /dev/null --key /input/step-intermediate-key/intermediate.key --template /nix/store/cwbinx0vqcq4xz35fghr4s6sck8a6qhm-intermediate.tmpl --not-after 8760h --not-before=-12h --no-password --insecure 'Clan Intermediate CA' /output/intermediate.crt vars-check-certificates> Your certificate has been saved in /output/intermediate.crt. vars-check-certificates> ✓ Generated file: step-intermediate-cert/intermediate.crt vars-check-certificates> ✓ Generator step-intermediate-cert completed vars-check-certificates> ✓ Machine ca completed vars-check-certificates> Processing machine: client vars-check-certificates> Generator execution order: state-version vars-check-certificates> Executing generator: state-version vars-check-certificates> + set -euo pipefail vars-check-certificates> + PATH=/nix/store/di26b1kkbammy0sj70nq5qzvfrh78wxl-coreutils-9.11/bin vars-check-certificates> + [[ ! -d /etc ]] vars-check-certificates> + mkdir -p /etc vars-check-certificates> + cat vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> ++ id -u vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> + echo -n 26.11 vars-check-certificates> ✓ Generated file: state-version/version vars-check-certificates> ✓ Generator state-version completed vars-check-certificates> ✓ Machine client completed vars-check-certificates> Processing machine: server vars-check-certificates> Generator execution order: state-version vars-check-certificates> Executing generator: state-version vars-check-certificates> + set -euo pipefail vars-check-certificates> + PATH=/nix/store/di26b1kkbammy0sj70nq5qzvfrh78wxl-coreutils-9.11/bin vars-check-certificates> + [[ ! -d /etc ]] vars-check-certificates> + mkdir -p /etc vars-check-certificates> + cat vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> ++ id -u vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> + echo -n 26.11 vars-check-certificates> ✓ Generated file: state-version/version vars-check-certificates> ✓ Generator state-version completed vars-check-certificates> ✓ Machine server completed vars-check-certificates> ✓ All vars checks completed successfully building '/nix/store/2qfgg1dkhr567vvrbaivwx4lxl53dm7r-dry-activate.drv' building '/nix/store/xz0mmlzb7njfp83qwmq4f88gph3lgy8x-nss-cacert-3.126.drv' nss-cacert-3.126> Running phase: unpackPhase nss-cacert-3.126> Running phase: patchPhase nss-cacert-3.126> Running phase: updateAutotoolsGnuConfigScriptsPhase nss-cacert-3.126> Running phase: configurePhase nss-cacert-3.126> no configure script, doing nothing nss-cacert-3.126> Running phase: buildPhase nss-cacert-3.126> Running phase: installPhase nss-cacert-3.126> Running phase: fixupPhase nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/yp0nanx9lfq145zwah3ai8cjcgngjgyh-nss-cacert-3.126 nss-cacert-3.126> checking for references to /build/ in /nix/store/yp0nanx9lfq145zwah3ai8cjcgngjgyh-nss-cacert-3.126... nss-cacert-3.126> patching script interpreter paths in /nix/store/yp0nanx9lfq145zwah3ai8cjcgngjgyh-nss-cacert-3.126 nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/hf3xyka2mh39nvdmc7ql7s9f5m43avhq-nss-cacert-3.126-unbundled nss-cacert-3.126> checking for references to /build/ in /nix/store/hf3xyka2mh39nvdmc7ql7s9f5m43avhq-nss-cacert-3.126-unbundled... nss-cacert-3.126> patching script interpreter paths in /nix/store/hf3xyka2mh39nvdmc7ql7s9f5m43avhq-nss-cacert-3.126-unbundled nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/sjg5y6jbj5g6cfy6w62hz60fqk9c96ff-nss-cacert-3.126-p11kit nss-cacert-3.126> checking for references to /build/ in /nix/store/sjg5y6jbj5g6cfy6w62hz60fqk9c96ff-nss-cacert-3.126-p11kit... nss-cacert-3.126> patching script interpreter paths in /nix/store/sjg5y6jbj5g6cfy6w62hz60fqk9c96ff-nss-cacert-3.126-p11kit nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/7kmsmi4jpax6amk6zc5wmdll4hyyamqn-nss-cacert-3.126-hashed nss-cacert-3.126> checking for references to /build/ in /nix/store/7kmsmi4jpax6amk6zc5wmdll4hyyamqn-nss-cacert-3.126-hashed... nss-cacert-3.126> patching script interpreter paths in /nix/store/7kmsmi4jpax6amk6zc5wmdll4hyyamqn-nss-cacert-3.126-hashed building '/nix/store/zk93y2xy4qzs3cbywl2xaygmb0pxv6df-unit-nix-daemon.service.drv' unit-nix-daemon.service> structuredAttrs is enabled building '/nix/store/7030av8lcmgsrpvk60rn69qgbh6c9hhp-system-units.drv' building '/nix/store/dlbglxh53ngwb6h8647ykd6fahnq5plx-system-units.drv' building '/nix/store/wxmzjfjv52ql8c5j8qwai45fxvxd40bm-system-units.drv' building '/nix/store/d06d78b7ilvswah9ln2qziyri2xjij2x-etc.drv' building '/nix/store/b6m30xzrnfn18qmknh05p1plffmh275n-etc.drv' building '/nix/store/n01zfbpm09a8vlax0lc5sr5f859rzrjl-etc.drv' building '/nix/store/vh3b34kcnxd9vkgjmwm2963q9wbp926z-activate.drv' building '/nix/store/0ypdnqsdj8z4g9w82mf71adw7i1lyrlc-nixos-system-server-test.drv' building '/nix/store/hs0vzdj57h5jjkmg7qzn7xhv9h5g54y3-activate.drv' building '/nix/store/w9m4dz13g8klrmvi5l4pf8dindzd5513-activate.drv' nixos-system-server-test> structuredAttrs is enabled building '/nix/store/r14agwri5436w374k6iar1z8x62dj0mg-closure-info.drv' building '/nix/store/wqb7y1nvp6lnp8zylsf66cw7igs36vlg-nixos-system-ca-test.drv' building '/nix/store/q3zcwqrsl3zwh8cp5dd5a2hxs9x8ksbg-nixos-system-client-test.drv' closure-info> structuredAttrs is enabled nixos-system-ca-test> structuredAttrs is enabled nixos-system-client-test> structuredAttrs is enabled building '/nix/store/xy0xmwns787vqh3x8fj9dy4k8888x4jz-closure-info.drv' building '/nix/store/259vxpwf4d1nx98vlxrvh0hpyvwia14w-closure-info.drv' closure-info> structuredAttrs is enabled closure-info> structuredAttrs is enabled building '/nix/store/n0dgspcd8qc6m5dcb473njkaz78d17nc-nixos-test-driver-certificates.drv' nixos-test-driver-certificates> Running type check (enable/disable: config.skipTypeCheck) nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck nixos-test-driver-certificates> Success: no issues found in 1 source file building '/nix/store/ws1pkbhf5q03rxwzkcxhd67mdxa7qwrp-container-test-run-certificates.drv' on 'ssh-ng://builder@build-x86-01.clan.lol' building '/nix/store/ws1pkbhf5q03rxwzkcxhd67mdxa7qwrp-container-test-run-certificates.drv' container-test-run-certificates> additionally exposed symbols: container-test-run-certificates> ca, client, server, container-test-run-certificates> start_all, machines, driver, Machine, wait_for_signal container-test-run-certificates> Starting ca container-test-run-certificates> Starting client container-test-run-certificates> Starting server container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/b0xfh1j0dr3sl947nhnal14gjchxj4ki-nixos-system-ca-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if3: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether 42:06:76:42:a9:8d brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 261.1 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/di26b1kkbammy0sj70nq5qzvfrh78wxl-coreutils-9.11/bin/sleep 999999999 && echo a8942141-5cc6-4dcd-85cf-d328006e43ab' container-test-run-certificates> Running as unit: run-p448-i67581217.service; invocation ID: 30f1a5b38e4a4cd98ccd0d655ff8639d container-test-run-certificates> To attach to container ca run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*a8942141-5cc6-4dcd-85cf-d328006e43ab') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/gxzhl7aaiid7zp3y47jqqiq7zg5mqpwp-python3-3.14.6/bin/python3.14 /nix/store/s7xzzws7ckb1gzm2fpvx0j66bkbf1wws-test-driver-0.0.1/lib/python3.14/site-packages/test_driver/inject_network.py a8942141-5cc6-4dcd-85cf-d328006e43ab container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/sk2i8k9qdlldyiaah91iz4y193qdgqqr-nixos-system-client-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if4: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether 2a:42:35:28:b1:2f brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 261.1 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/di26b1kkbammy0sj70nq5qzvfrh78wxl-coreutils-9.11/bin/sleep 999999999 && echo 28a32103-93c1-4cf2-8e2f-cfa0c9b1d553' container-test-run-certificates> Running as unit: run-p305-i67581220.service; invocation ID: 1ad9f52826594b7b8cdd76b420c78c23 container-test-run-certificates> To attach to container client run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*28a32103-93c1-4cf2-8e2f-cfa0c9b1d553') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/gxzhl7aaiid7zp3y47jqqiq7zg5mqpwp-python3-3.14.6/bin/python3.14 /nix/store/s7xzzws7ckb1gzm2fpvx0j66bkbf1wws-test-driver-0.0.1/lib/python3.14/site-packages/test_driver/inject_network.py 28a32103-93c1-4cf2-8e2f-cfa0c9b1d553 container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/a8fv99zx81qlk4s90gsfpsq3q8q4m865-nixos-system-server-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if5: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether be:aa:dd:39:86:e7 brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 261.1 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/di26b1kkbammy0sj70nq5qzvfrh78wxl-coreutils-9.11/bin/sleep 999999999 && echo 5566857e-0433-4f79-b6ff-29294f504c00' container-test-run-certificates> Running as unit: run-p388-i67581223.service; invocation ID: 13a5242b469d4c51b2eefb84de497956 container-test-run-certificates> To attach to container server run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*5566857e-0433-4f79-b6ff-29294f504c00') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/gxzhl7aaiid7zp3y47jqqiq7zg5mqpwp-python3-3.14.6/bin/python3.14 /nix/store/s7xzzws7ckb1gzm2fpvx0j66bkbf1wws-test-driver-0.0.1/lib/python3.14/site-packages/test_driver/inject_network.py 5566857e-0433-4f79-b6ff-29294f504c00 container-test-run-certificates> + systemctl restart acme-order-renew-ca.foo.service container-test-run-certificates> + systemctl restart acme-test.foo.service container-test-run-certificates> client: waiting for success: curl -v https://test.foo container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1009 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [112 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Aug 9 15:04:57 2026 GMT container-test-run-certificates> * expire date: Sep 8 15:04:57 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 5eb406 container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1009 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [112 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Aug 9 15:04:57 2026 GMT container-test-run-certificates> * expire date: Sep 8 15:04:57 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 5eb406 container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [930 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [80 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Aug 9 15:04:08 2026 GMT container-test-run-certificates> * expire date: Nov 7 15:05:08 2026 GMT container-test-run-certificates> * issuer: CN=Clan Intermediate CA container-test-run-certificates> * Certificate level 0: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 1: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 2: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 0 container-test-run-certificates> * SSL certificate verified via OpenSSL. container-test-run-certificates> * Established connection to test.foo (192.168.1.3 port 443) from 192.168.1.2 port 56764 container-test-run-certificates> % Total % Received % Xferd Average Speed Time Time Time Current container-test-run-certificates> Dload Upload Total Spent Left Speed container-test-run-certificates> 0 0 0 0 0 0 0 0 0* using HTTP/2 container-test-run-certificates> * [HTTP/2] [1] OPENED stream for https://test.foo/ container-test-run-certificates> * [HTTP/2] [1] [:method: GET] container-test-run-certificates> * [HTTP/2] [1] [:scheme: https] container-test-run-certificates> * [HTTP/2] [1] [:authority: test.foo] container-test-run-certificates> * [HTTP/2] [1] [:path: /] container-test-run-certificates> * [HTTP/2] [1] [user-agent: curl/8.21.0] container-test-run-certificates> * [HTTP/2] [1] [accept: */*] container-test-run-certificates> } [5 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> * Request completely sent off container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> { [5 bytes data] container-test-run-certificates> 100 20 100 20 0 0 1795 0 0 container-test-run-certificates> * Connection #0 to host test.foo:443 left intact container-test-run-certificates> (finished: waiting for success: curl -v https://test.foo, in 2.06 seconds) container-test-run-certificates> + openssl s_client -connect test.foo:443 -servername test.foo container-test-run-certificates> + openssl x509 -text -noout container-test-run-certificates> Certificate: container-test-run-certificates> Data: container-test-run-certificates> Version: 3 (0x2) container-test-run-certificates> Serial Number: container-test-run-certificates> 15:29:c2:aa:e2:6a:8c:30:eb:22:d2:29:1a:e2:34:71 container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Issuer: CN=Clan Intermediate CA container-test-run-certificates> Validity container-test-run-certificates> Not Before: Aug 9 15:04:08 2026 GMT container-test-run-certificates> Not After : Nov 7 15:05:08 2026 GMT container-test-run-certificates> Subject: CN=test.foo container-test-run-certificates> Subject Public Key Info: container-test-run-certificates> Public Key Algorithm: id-ecPublicKey container-test-run-certificates> Public-Key: (256 bit) container-test-run-certificates> pub: container-test-run-certificates> 04:2d:16:ee:c4:9b:98:d6:27:84:b6:15:dc:d8:33: container-test-run-certificates> 56:6f:f7:38:57:8b:95:3b:18:d0:18:d7:ab:8f:18: container-test-run-certificates> 59:4f:d9:92:45:57:f7:5e:f4:ca:09:33:7a:6b:87: container-test-run-certificates> 64:23:b5:8b:7c:5b:ff:92:14:f6:00:3c:e2:52:08: container-test-run-certificates> 85:8f:d5:96:1f container-test-run-certificates> ASN1 OID: prime256v1 container-test-run-certificates> NIST CURVE: P-256 container-test-run-certificates> X509v3 extensions: container-test-run-certificates> X509v3 Key Usage: critical container-test-run-certificates> Digital Signature container-test-run-certificates> X509v3 Extended Key Usage: container-test-run-certificates> TLS Web Server Authentication, TLS Web Client Authentication container-test-run-certificates> X509v3 Subject Key Identifier: container-test-run-certificates> 67:B0:28:ED:C1:DF:1A:36:13:59:86:1C:92:7B:87:DB:3F:05:E4:EE container-test-run-certificates> X509v3 Authority Key Identifier: container-test-run-certificates> 42:1B:B1:F1:C7:D0:04:81:93:DD:A6:DE:FF:26:BA:7C:B7:C8:72:35 container-test-run-certificates> X509v3 Subject Alternative Name: container-test-run-certificates> DNS:test.foo container-test-run-certificates> 1.3.6.1.4.1.37476.9000.64.1: container-test-run-certificates> 0......acme.. container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Signature Value: container-test-run-certificates> 30:46:02:21:00:d3:aa:04:3f:21:f7:b6:0a:a0:b1:43:4b:7d: container-test-run-certificates> 55:55:f1:91:4d:3d:e0:c1:ac:79:62:c4:a8:6c:ea:e6:ab:b7: container-test-run-certificates> 1e:02:21:00:d9:ff:94:2f:af:07:1b:2f:fd:c3:4e:4e:81:61: container-test-run-certificates> e7:9c:f0:d9:1f:5a:bf:e2:95:83:32:cc:86:1d:68:d2:fd:0a container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> post-build step Upload to niks3: ok time=2026-08-09T15:05:10.642Z level=INFO msg="Uploading 0 paths to niks3.clan.lol (1 already cached)" time=2026-08-09T15:05:22.486Z level=INFO msg="Uploading 1 narinfos" time=2026-08-09T15:05:23.716Z level=INFO msg="Upload complete. (13.133s)"