Machine state will be reset. To keep it, pass --keep-machine-state
start all VLans
(finished: start all VLans, in 0.00 seconds)

Test will time out and terminate in 3600.0 seconds
run the VM test script
additionally exposed symbols:
    server,
    vlan1,
    start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh
start all VMs
server: systemd-nspawn running (pid 51)
server: Waiting for journal at /build/vm-state-server/var/log/journal...
(finished: start all VMs, in 0.00 seconds)
server: waiting for unit multi-user.target
nixos-nspawn(server): TAP vde-tap1 not found; container will be isolated from VDE
nixos-nspawn(server): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.
Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.
░ Spawning container server on /build/vm-state-server.
server # [5660962.412381] server systemd-journald[78]: Journal started
server # [5660962.412434] server systemd-journald[78]: Runtime Journal (/run/log/journal/7c9e597b65ad4946a199ed8ca30a5998) is 8M, max 2.5G, 2.4G free.
server # [5660962.416667] server systemd[1]: Starting Flush Journal to Persistent Storage...
server # [5660962.417449] server systemd[1]: Starting Network Name Resolution...
server # [5660962.418161] server systemd[1]: Starting Create Static Device Nodes in /dev...
server # [5660962.426148] server systemd-journald[78]: Time spent on flushing to /var/log/journal/7c9e597b65ad4946a199ed8ca30a5998 is 1.370ms for 5 entries.
server # [5660962.426148] server systemd-journald[78]: System Journal (/var/log/journal/7c9e597b65ad4946a199ed8ca30a5998) is 8M, max 4G, 3.9G free.
server # [5660962.433298] server systemd[1]: Finished Create Static Device Nodes in /dev.
server # [5660962.433501] server systemd[1]: Reached target Preparation for Local File Systems.
server # [5660962.433580] server systemd[1]: Reached target Local File Systems.
server # [5660962.434281] server systemd[1]: Listening on Boot Loader Control Service Socket.
server # [5660962.434322] server systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container
server # [5660962.435187] server systemd[1]: Starting Save Transient machine-id to Disk...
server # [5660962.435218] server systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys
server # [5660962.436253] server systemd[1]: Starting Network Management...
server # [5660962.439917] server systemd[1]: Finished Flush Journal to Persistent Storage.
server # [5660962.440786] server systemd[1]: Starting Create System Files and Directories...
server # [5660962.458378] server systemd-tmpfiles[93]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted
server # [5660962.458587] server systemd-tmpfiles[93]: fchmod() of /var/log/journal failed: Operation not permitted
server # [5660962.458729] server systemd-tmpfiles[93]: fchmod() of /var/log/journal/7c9e597b65ad4946a199ed8ca30a5998 failed: Operation not permitted
server # [5660962.458945] server systemd-tmpfiles[93]: fchmod() of /run/log/journal failed: Operation not permitted
server # [5660962.460442] server systemd[1]: Finished Create System Files and Directories.
server # [5660962.461618] server systemd[1]: Starting Rebuild Journal Catalog...
server # [5660962.462438] server systemd[1]: Starting Record System Boot/Shutdown in UTMP...
server # [5660962.476244] server systemd[1]: Finished Record System Boot/Shutdown in UTMP.
server # [5660962.484488] server systemd[1]: Finished Save Transient machine-id to Disk.
server # [5660962.484699] server systemd[1]: Finished Rebuild Journal Catalog.
server # [5660962.486302] server systemd[1]: Starting Update is Completed...
server # [5660962.496031] server systemd[1]: Finished Update is Completed.
server # [5660962.810169] server systemd-networkd[91]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted
server # [5660962.810261] server systemd-networkd[91]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted
server # [5660962.816562] server systemd-networkd[91]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.
server # [5660962.816724] server systemd-networkd[91]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.
server # [5660962.816872] server systemd-networkd[91]: lo: Link UP
server # [5660962.816877] server systemd-networkd[91]: lo: Gained carrier
server # [5660962.817045] server systemd-networkd[91]: eth1: Configuring with /etc/systemd/network/40-eth1.network.
server # [5660962.817507] server systemd[1]: Started Network Management.
server # [5660962.817508] server systemd-networkd[91]: eth1: Link UP
server # [5660962.817938] server systemd-networkd[91]: eth1: Gained carrier
server # [5660962.819239] server systemd[1]: Starting Enable Persistent Storage in systemd-networkd...
server # [5660962.858007] server systemd[1]: Finished Enable Persistent Storage in systemd-networkd.
server # [5660963.017232] server systemd-resolved[85]: Positive Trust Anchors:
server # [5660963.017243] server systemd-resolved[85]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d
server # [5660963.017247] server systemd-resolved[85]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16
server # [5660963.017283] server systemd-resolved[85]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test
server # [5660963.038937] server systemd-resolved[85]: Using system hostname 'server'.
server # [5660963.040667] server systemd[1]: Started Network Name Resolution.
server # [5660963.040754] server systemd[1]: Reached target Network.
server # [5660963.040818] server systemd[1]: Reached target Network is Online.
server # [5660963.040862] server systemd[1]: Reached target System Initialization.
server # [5660963.041102] server systemd[1]: Started Renew ACME Certificate for test.example.com.
server # [5660963.041140] server systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container
server # [5660963.041168] server systemd[1]: Started Daily Cleanup of Temporary Directories.
server # [5660963.041189] server systemd[1]: Reached target Timer Units.
server # [5660963.041324] server systemd[1]: Listening on D-Bus System Message Bus Socket.
server # [5660963.041439] server systemd[1]: Listening on Nix Daemon Socket.
server # [5660963.041562] server systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.
server # [5660963.041588] server systemd[1]: Reached target Socket Units.
server # [5660963.041631] server systemd[1]: Reached target Basic System.
server # [5660963.057163] server systemd[1]: Starting Set up the ACME certificate renewal infrastructure...
server # [5660963.058105] server systemd[1]: Starting Dynamic DNS updater...
server # [5660963.059816] server systemd[1]: Starting Import lastlog data into lastlog2 database...
server # [5660963.059864] server systemd[1]: nginx-config-reload.service skipped, unmet condition check ConditionPathExists=/var/lib/acme/test.example.com/fullchain.pem
server # [5660963.060786] server systemd[1]: Starting Name Service Cache Daemon (nsncd)...
server # [5660963.062271] server systemd[1]: Starting D-Bus System Message Bus...
server # [5660963.080878] server systemd[1]: Finished Import lastlog data into lastlog2 database.
server # [5660963.169212] server acme-setup-privileged[106]: + set -euo pipefail
server # [5660963.169212] server acme-setup-privileged[106]: + cd /var/lib/acme
server # [5660963.169212] server acme-setup-privileged[106]: + chmod -R u=rwX,g=,o= .lego/accounts
server # [5660963.171201] server acme-setup-privileged[106]: + chown -R acme .lego/accounts
server # [5660963.173153] server acme-setup-privileged[106]: + for fixpath in test.example.com .lego/test.example.com
server # [5660963.173153] server acme-setup-privileged[106]: + '[' -d test.example.com ']'
server # [5660963.173282] server acme-setup-privileged[106]: + for fixpath in test.example.com .lego/test.example.com
server # [5660963.173282] server acme-setup-privileged[106]: + '[' -d .lego/test.example.com ']'
server # [5660963.182379] server nsncd[109]: Aug 13 11:53:09.235 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"
server # [5660963.182537] server systemd[1]: Started Name Service Cache Daemon (nsncd).
server # [5660963.182639] server systemd[1]: Reached target Host and Network Name Lookups.
server # [5660963.182741] server systemd[1]: Reached target User and Group Name Lookups.
server # [5660963.184571] server systemd[1]: Starting User Login Management...
server # [5660963.185749] server systemd[1]: Starting Permit User Sessions...
server # [5660963.223489] server systemd[1]: Finished Permit User Sessions.
server # [5660963.224575] server systemd[1]: Started Console Getty.
server # [5660963.224614] server systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0
server # [5660963.224632] server systemd[1]: Reached target Login Prompts.
server # [5660963.269696] server dbus-broker-launch[110]: Looking up NSS user entry for 'systemd-timesync'...
server # [5660963.270556] server dbus-broker-launch[110]: NSS returned no entry for 'systemd-timesync'
server # [5660963.270556] server dbus-broker-launch[110]: Invalid user-name in /nix/store/5pfd22cvv3ylw42x0ypm6h5jskba2wll-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"
server # [5660963.271026] server systemd[1]: Started D-Bus System Message Bus.
server # [5660963.278293] server dbus-broker-launch[110]: Ready
server # [5660963.404157] server systemd[1]: etc-machine\x2did.mount: Deactivated successfully.
server # [5660963.544525] server generate_secret_config.py[107]: Config: {'settings': [{'domain': 'example.com', 'host': 'test', 'password': 'dyndns-namecheap-example.com', 'provider': 'namecheap', 'server': 'dynamicdns.park-your-domain.com'}]}
server # [5660963.635342] server systemd-logind[134]: New seat seat0.
server # [5660963.635526] server systemd[1]: Started User Login Management.
server # [5660963.636811] server systemd[1]: Starting linger-users.service...
server # [5660963.674552] server systemd[1]: linger-users.service: Deactivated successfully.
server # [5660963.674715] server systemd[1]: Finished linger-users.service.
server # [5660963.675794] server acme-setup-start[123]: + set -euo pipefail
server # [5660963.676083] server acme-setup-start[123]: + test -e ca/key.pem
server # [5660963.676083] server acme-setup-start[123]: + minica --ca-key ca/key.pem --ca-cert ca/cert.pem --domains selfsigned.local
server # [5660963.694298] server systemd[1]: Finished Set up the ACME certificate renewal infrastructure.
server # [5660963.695696] server systemd[1]: Starting Ensure certificate for test.example.com...
server # [5660963.845405] server systemd-networkd[91]: eth1: Gained IPv6LL
server # [5660964.030911] server systemd[1]: Started Dynamic DNS updater.
server # [5660964.073569] server ddns-updater[151]: ========================================
server # [5660964.073569] server ddns-updater[151]: ========================================
server # [5660964.073569] server ddns-updater[151]: ============= ddns-updater =============
server # [5660964.073569] server ddns-updater[151]: ========================================
server # [5660964.073569] server ddns-updater[151]: =========== Made with ❤️ by ============
server # [5660964.073569] server ddns-updater[151]: ======= https://github.com/qdm12 =======
server # [5660964.073569] server ddns-updater[151]: ========================================
server # [5660964.073569] server ddns-updater[151]: ========================================
server # [5660964.073569] server ddns-updater[151]: Running version unknown built on an unknown date (commit unknown)
server # [5660964.073569] server ddns-updater[151]: 🔧 Need help? ☕ Discussion? https://github.com/qdm12/ddns-updater/discussions/new/choose
server # [5660964.073569] server ddns-updater[151]: 🐛 Bug? ✨ New feature? https://github.com/qdm12/ddns-updater/issues/new/choose
server # [5660964.073569] server ddns-updater[151]: 💻 Email? quentin.mcgaw@gmail.com
server # [5660964.073569] server ddns-updater[151]: 💰 Help me? https://www.paypal.me/qmcgaw https://github.com/sponsors/qdm12
server # [5660964.074224] server ddns-updater[151]: 2026-08-13T11:53:10Z INFO Settings summary:
server # [5660964.074224] server ddns-updater[151]: ├── HTTP client
server # [5660964.074224] server ddns-updater[151]: |   └── Timeout: 20s
server # [5660964.074224] server ddns-updater[151]: ├── Update
server # [5660964.074224] server ddns-updater[151]: |   ├── Period: 1m0s
server # [5660964.074224] server ddns-updater[151]: |   └── Cooldown: 5m0s
server # [5660964.074224] server ddns-updater[151]: ├── Public IP fetching
server # [5660964.074224] server ddns-updater[151]: |   ├── HTTP enabled: yes
server # [5660964.074224] server ddns-updater[151]: |   ├── HTTP IP providers
server # [5660964.074224] server ddns-updater[151]: |   |   └── all
server # [5660964.074224] server ddns-updater[151]: |   ├── HTTP IPv4 providers
server # [5660964.074224] server ddns-updater[151]: |   |   └── all
server # [5660964.074224] server ddns-updater[151]: |   ├── HTTP IPv6 providers
server # [5660964.074224] server ddns-updater[151]: |   |   └── all
server # [5660964.074224] server ddns-updater[151]: |   ├── DNS enabled: yes
server # [5660964.074224] server ddns-updater[151]: |   ├── DNS timeout: 3s
server # [5660964.074224] server ddns-updater[151]: |   └── DNS over TLS providers
server # [5660964.074224] server ddns-updater[151]: |       └── all
server # [5660964.074224] server ddns-updater[151]: ├── Resolver: use Go default resolver
server # [5660964.074224] server ddns-updater[151]: ├── Server
server # [5660964.074224] server ddns-updater[151]: |   ├── Listening address: :54805
server # [5660964.074224] server ddns-updater[151]: |   └── Root URL: /
server # [5660964.074224] server ddns-updater[151]: ├── Health
server # [5660964.074224] server ddns-updater[151]: |   └── Server is disabled
server # [5660964.074224] server ddns-updater[151]: ├── Paths
server # [5660964.074224] server ddns-updater[151]: |   ├── Data directory: ./data
server # [5660964.074224] server ddns-updater[151]: |   ├── Config file: data/config.json
server # [5660964.074224] server ddns-updater[151]: |   └── Umask: system default
server # [5660964.074224] server ddns-updater[151]: ├── Backup: disabled
server # [5660964.074224] server ddns-updater[151]: └── Logger
server # [5660964.074224] server ddns-updater[151]:     ├── Level: INFO
server # [5660964.074224] server ddns-updater[151]:     └── Caller: hidden
server # [5660964.074224] server ddns-updater[151]: 2026-08-13T11:53:10Z INFO reading JSON config from file data/config.json
server # [5660964.074976] server ddns-updater[151]: 2026-08-13T11:53:10Z WARN you can specify the owner "test" directly in the domain field as "test.example.com"
server # [5660964.074976] server ddns-updater[151]: 2026-08-13T11:53:10Z ERROR validating provider specific settings: password is not valid: password "mock-prompt-value-dyndns-namecheap-example.com" does not match regex "^[a-f0-9]{32}$"
server # [5660964.074976] server ddns-updater[151]: 2026-08-13T11:53:10Z INFO Shutdown successful
server # [5660964.078858] server systemd[1]: dyndns.service: Main process exited, code=exited, status=1/FAILURE
server # [5660964.079045] server systemd[1]: dyndns.service: Failed with result 'exit-code'.
server # [5660964.163706] server acme-test.example.com-start[162]: Waiting to acquire lock in /run/acme/
server # [5660964.167413] server acme-test.example.com-start[162]: + '[' -e out/acme-success ']'
server # [5660964.167466] server acme-test.example.com-start[162]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=test.example.com --ip-addresses=
server # [5660964.180812] server acme-test.example.com-start[201]: + cd test.example.com
server # [5660964.181166] server acme-test.example.com-start[201]: + cp -vp cert.pem ../out/cert.pem
server # [5660964.182632] server acme-test.example.com-start[202]: 'cert.pem' -> '../out/cert.pem'
server # [5660964.182883] server acme-test.example.com-start[201]: + cp -vp key.pem ../out/key.pem
server # [5660964.184149] server acme-test.example.com-start[201]: 'key.pem' -> '../out/key.pem'
server # [5660964.184374] server acme-test.example.com-start[162]: + cat out/cert.pem ca/cert.pem
server # [5660964.186312] server acme-test.example.com-start[162]: + cp ca/cert.pem out/chain.pem
server # [5660964.187777] server acme-test.example.com-start[162]: + cat out/key.pem out/fullchain.pem
server # [5660964.189552] server acme-test.example.com-start[162]: + for fixpath in out certificates
server # [5660964.189590] server acme-test.example.com-start[162]: + '[' -d out ']'
server # [5660964.189590] server acme-test.example.com-start[162]: + chmod -R u=rwX,g=rX,o= out
server # [5660964.191084] server acme-test.example.com-start[162]: + chown -R acme:nginx out
server # [5660964.194440] server acme-test.example.com-start[162]: + for fixpath in out certificates
server # [5660964.194472] server acme-test.example.com-start[162]: + '[' -d certificates ']'
server # [5660964.197922] server systemd[1]: Finished Ensure certificate for test.example.com.
server # [5660964.200432] server systemd[1]: Starting Nginx Web Server...
server # [5660964.712699] server nginx-pre-start[213]: nginx: the configuration file /nix/store/a4db180qwsa65qfpa5i9lqwiih5w2kjp-nginx.conf syntax is ok
server # [5660964.713102] server nginx-pre-start[213]: nginx: configuration file /nix/store/a4db180qwsa65qfpa5i9lqwiih5w2kjp-nginx.conf test is successful
server # [5660964.717726] server systemd[1]: Started Nginx Web Server.
server # [5660964.718337] server systemd[1]: Reached target Multi-User System.
server # [5660964.720065] server systemd[1]: Starting Order (and renew) ACME certificate for test.example.com...
server # [5660965.160789] server acme-order-renew-test.example.com-start[216]: Waiting to acquire lock in /run/acme/
server # [5660965.163649] server acme-order-renew-test.example.com-start[216]: + set -euo pipefail
server # [5660965.163723] server acme-order-renew-test.example.com-start[216]: + echo bb6387b8f605b9fac186
server # [5660965.163839] server acme-order-renew-test.example.com-start[216]: + cmp -s domainhash.txt certificates/domainhash.txt
server # [5660965.165061] server acme-order-renew-test.example.com-start[216]: + lego --accept-tos --path . --email test@example.com --http --http.webroot /var/lib/acme/acme-challenge --server https://localhost:14000/dir --key-type ec256 -d test.example.com run
server # [5660965.203660] server acme-order-renew-test.example.com-start[227]: 2026/08/13 11:53:11 No key found for account test@example.com. Generating a P256 key.
server # [5660965.204083] server acme-order-renew-test.example.com-start[227]: 2026/08/13 11:53:11 Saved key to accounts/localhost_14000/test@example.com/keys/test@example.com.key
server: still waiting for container 'server' to reach ready state...
server: still waiting for container 'server' to reach ready state...
server: still waiting for container 'server' to reach ready state...
server: (finished: waiting for unit multi-user.target, in 34.67 seconds)
server: waiting for unit nginx.service
server: (finished: waiting for unit nginx.service, in 0.02 seconds)
server: waiting for TCP port 80 on localhost
Connection to localhost (::1) 80 port [tcp/http] succeeded!
server: (finished: waiting for TCP port 80 on localhost, in 0.01 seconds)
server: waiting for TCP port 443 on localhost
Connection to localhost (::1) 443 port [tcp/https] succeeded!
server: (finished: waiting for TCP port 443 on localhost, in 0.01 seconds)
server: must succeed: test -d /var/lib/dyndns
server: (finished: must succeed: test -d /var/lib/dyndns, in 0.01 seconds)
server: must succeed: /nix/store/pjqhdi88bpspx4a01qlsw96jn2isl11k-nginx-1.30.4/bin/nginx -t
nginx: the configuration file /nix/store/pjqhdi88bpspx4a01qlsw96jn2isl11k-nginx-1.30.4/conf/nginx.conf syntax is ok
nginx: configuration file /nix/store/pjqhdi88bpspx4a01qlsw96jn2isl11k-nginx-1.30.4/conf/nginx.conf test is successful
server: (finished: must succeed: /nix/store/pjqhdi88bpspx4a01qlsw96jn2isl11k-nginx-1.30.4/bin/nginx -t, in 0.02 seconds)
All tests passed!
(finished: run the VM test script, in 34.73 seconds)
server # [5660996.239394] server acme-order-renew-test.example.com-start[227]: 2026/08/13 11:53:42 Could not create client: get directory at 'https://localhost:14000/dir': Get "https://localhost:14000/dir": GET https://localhost:14000/dir giving up after 6 attempt(s): Get "https://localhost:14000/dir": dial tcp [::1]:14000: connect: connection refused
server # [5660996.243614] server acme-order-renew-test.example.com-start[216]: + echo Failed to fetch certificates. This may mean your DNS records are set up incorrectly. Self-signed certs are in place and dependant services will still start.
server # [5660996.243614] server acme-order-renew-test.example.com-start[216]: Failed to fetch certificates. This may mean your DNS records are set up incorrectly. Self-signed certs are in place and dependant services will still start.
server # [5660996.243614] server acme-order-renew-test.example.com-start[216]: + exit 10
server # [5660996.252697] server systemd[1]: acme-order-renew-test.example.com.service: Main process exited, code=exited, status=10/n/a
server # [5660996.252828] server systemd[1]: acme-order-renew-test.example.com.service: Failed with result 'exit-code'.
server # [5660996.253128] server systemd[1]: Failed to start Order (and renew) ACME certificate for test.example.com.
server # [5660996.253664] server systemd[1]: Startup finished in 34.185s.
test script finished in 46.02s
cleanup
kill NspawnMachine (pid 51)
(finished: cleanup, in 0.26 seconds)
Container server terminated by signal KILL.