Machine state will be reset. To keep it, pass --keep-machine-state start all VLans (finished: start all VLans, in 0.00 seconds) Test will time out and terminate in 3600.0 seconds run the VM test script additionally exposed symbols: machine, router, vlan1, start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh start all VMs router: systemd-nspawn running (pid 53) machine: systemd-nspawn running (pid 52) router: Waiting for journal at /build/vm-state-router/var/log/journal... machine: Waiting for journal at /build/vm-state-machine/var/log/journal... (finished: start all VMs, in 0.00 seconds) router: waiting for unit multi-user.target nixos-nspawn(router): TAP vde-tap1 not found; container will be isolated from VDE nixos-nspawn(router): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths. nixos-nspawn(machine): TAP vde-tap1 not found; container will be isolated from VDE nixos-nspawn(machine): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths. Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file. ░ Spawning container router on /build/vm-state-router. Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file. ░ Spawning container machine on /build/vm-state-machine. router # [5660968.789246] router systemd-journald[54]: Journal started router # [5660968.789299] router systemd-journald[54]: Runtime Journal (/run/log/journal/f9c16b29fb84450c841bc28a9dc2fe8a) is 8M, max 2.5G, 2.4G free. router # [5660968.798481] router systemd[1]: Finished Apply Kernel Variables. router # [5660968.806944] router systemd[1]: Finished Create Static Device Nodes in /dev gracefully. router # [5660968.816844] router systemd[1]: Starting Flush Journal to Persistent Storage... router # [5660968.817650] router systemd[1]: Starting Network Name Resolution... machine # [5660968.802957] machine systemd-journald[54]: Journal started router # [5660968.818432] router systemd[1]: Starting Create Static Device Nodes in /dev... machine # [5660968.803013] machine systemd-journald[54]: Runtime Journal (/run/log/journal/8ab1b0f8db024fbd9796347bb30b4afe) is 8M, max 2.5G, 2.4G free. router # [5660968.825505] router systemd-journald[54]: Time spent on flushing to /var/log/journal/f9c16b29fb84450c841bc28a9dc2fe8a is 3.066ms for 7 entries. machine # [5660968.806043] machine systemd[1]: Finished Apply Kernel Variables. router # [5660968.825505] router systemd-journald[54]: System Journal (/var/log/journal/f9c16b29fb84450c841bc28a9dc2fe8a) is 8M, max 4G, 3.9G free. machine # [5660968.814002] machine systemd[1]: Finished Create Static Device Nodes in /dev gracefully. router # [5660968.834938] router systemd[1]: Finished Create Static Device Nodes in /dev. machine # [5660968.823317] machine systemd[1]: Starting Flush Journal to Persistent Storage... router # [5660968.835542] router systemd[1]: Reached target Preparation for Local File Systems. machine # [5660968.824033] machine systemd[1]: Starting Create Static Device Nodes in /dev... router # [5660968.835659] router systemd[1]: Reached target Local File Systems. machine # [5660968.833846] machine systemd-journald[54]: Time spent on flushing to /var/log/journal/8ab1b0f8db024fbd9796347bb30b4afe is 1.507ms for 6 entries. router # [5660968.836450] router systemd[1]: Listening on Boot Loader Control Service Socket. machine # [5660968.833846] machine systemd-journald[54]: System Journal (/var/log/journal/8ab1b0f8db024fbd9796347bb30b4afe) is 8M, max 4G, 3.9G free. router # [5660968.836494] router systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container machine # [5660968.841698] machine systemd[1]: Finished Create Static Device Nodes in /dev. router # [5660968.837275] router systemd[1]: Starting Save Transient machine-id to Disk... machine # [5660968.841923] machine systemd[1]: Reached target Preparation for Local File Systems. router # [5660968.837309] router systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys machine # [5660968.842002] machine systemd[1]: Reached target Local File Systems. router # [5660968.838274] router systemd[1]: Starting Network Management... machine # [5660968.842713] machine systemd[1]: Listening on Boot Loader Control Service Socket. router # [5660968.888249] router systemd[1]: Finished Flush Journal to Persistent Storage. machine # [5660968.842759] machine systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container router # [5660968.889888] router systemd[1]: Starting Create System Files and Directories... machine # [5660968.843597] machine systemd[1]: Starting Save Transient machine-id to Disk... router # [5660968.907086] router systemd-tmpfiles[70]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted machine # [5660968.843630] machine systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys router # [5660968.907313] router systemd-tmpfiles[70]: fchmod() of /var/log/journal failed: Operation not permitted machine # [5660968.885414] machine systemd[1]: Finished Flush Journal to Persistent Storage. router # [5660968.907493] router systemd-tmpfiles[70]: fchmod() of /var/log/journal/f9c16b29fb84450c841bc28a9dc2fe8a failed: Operation not permitted machine # [5660968.886953] machine systemd[1]: Starting Create System Files and Directories... router # [5660968.907715] router systemd-tmpfiles[70]: fchmod() of /run/log/journal failed: Operation not permitted machine # [5660968.905361] machine systemd-tmpfiles[66]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted router # [5660968.910994] router systemd[1]: Finished Create System Files and Directories. machine # [5660968.905585] machine systemd-tmpfiles[66]: fchmod() of /var/log/journal failed: Operation not permitted router # [5660968.912320] router systemd[1]: Starting Rebuild Journal Catalog... machine # [5660968.905732] machine systemd-tmpfiles[66]: fchmod() of /var/log/journal/8ab1b0f8db024fbd9796347bb30b4afe failed: Operation not permitted router # [5660968.913034] router systemd[1]: Starting Record System Boot/Shutdown in UTMP... machine # [5660968.905956] machine systemd-tmpfiles[66]: fchmod() of /run/log/journal failed: Operation not permitted router # [5660968.925913] router systemd[1]: Finished Record System Boot/Shutdown in UTMP. machine # [5660968.908598] machine systemd[1]: Finished Create System Files and Directories. router # [5660968.936437] router systemd[1]: Finished Rebuild Journal Catalog. machine # [5660968.910515] machine systemd[1]: Starting Rebuild Journal Catalog... router # [5660968.937523] router systemd[1]: Starting Update is Completed... machine # [5660968.911503] machine systemd[1]: Starting Record System Boot/Shutdown in UTMP... router # [5660968.946991] router systemd[1]: Finished Save Transient machine-id to Disk. machine # [5660968.926103] machine systemd[1]: Finished Record System Boot/Shutdown in UTMP. router # [5660968.947986] router systemd[1]: Finished Update is Completed. machine # [5660968.936442] machine systemd[1]: Finished Rebuild Journal Catalog. machine # [5660968.937516] machine systemd[1]: Starting Update is Completed... machine # [5660968.947274] machine systemd[1]: Finished Save Transient machine-id to Disk. machine # [5660968.948333] machine systemd[1]: Finished Update is Completed. machine # [5660968.948498] machine systemd[1]: Reached target System Initialization. machine # [5660968.948574] machine systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container machine # [5660968.948602] machine systemd[1]: Started Daily Cleanup of Temporary Directories. machine # [5660968.948621] machine systemd[1]: Reached target Timer Units. machine # [5660968.948739] machine systemd[1]: Listening on D-Bus System Message Bus Socket. machine # [5660968.948855] machine systemd[1]: Listening on Nix Daemon Socket. machine # [5660968.948964] machine systemd[1]: Listening on Virtual Machine and Container Registration Service Socket. machine # [5660968.948991] machine systemd[1]: Reached target Socket Units. machine # [5660968.949033] machine systemd[1]: Reached target Basic System. machine # [5660968.950108] machine systemd[1]: Starting Import lastlog data into lastlog2 database... machine # [5660968.950858] machine systemd[1]: Starting nftables firewall... machine # [5660968.951686] machine systemd[1]: Starting Name Service Cache Daemon (nsncd)... machine # [5660968.967354] machine systemd[1]: Finished Import lastlog data into lastlog2 database. machine # [5660969.021751] machine nsncd[77]: Aug 13 11:53:15.074 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket" machine # [5660969.021933] machine systemd[1]: Started Name Service Cache Daemon (nsncd). machine # [5660969.022045] machine systemd[1]: Reached target Host and Network Name Lookups. machine # [5660969.022154] machine systemd[1]: Reached target User and Group Name Lookups. machine # [5660969.024280] machine systemd[1]: Starting User Login Management... machine # [5660969.032017] machine systemd[1]: Finished nftables firewall. machine # [5660969.032748] machine systemd[1]: Reached target Preparation for Network. machine # [5660969.034227] machine systemd[1]: Starting Address configuration of eth1... machine # [5660969.035705] machine systemd[1]: Starting Extra networking commands.... machine # [5660969.036995] machine systemd[1]: Starting Setup wg0 dummy interface... machine # [5660969.090927] machine systemd[1]: Stopped target Host and Network Name Lookups. machine # [5660969.090988] machine systemd[1]: Stopping Host and Network Name Lookups... machine # [5660969.091040] machine systemd[1]: Stopped target User and Group Name Lookups. machine # [5660969.091067] machine systemd[1]: Stopping User and Group Name Lookups... machine # [5660969.091232] machine systemd[1]: Stopping Name Service Cache Daemon (nsncd)... machine # [5660969.093435] machine systemd[1]: nscd.service: Deactivated successfully. machine # [5660969.093595] machine systemd[1]: Stopped Name Service Cache Daemon (nsncd). machine # [5660969.096310] machine systemd[1]: Starting Name Service Cache Daemon (nsncd)... machine # [5660969.106781] machine systemd[1]: Finished Extra networking commands.. machine # [5660969.134205] machine network-addresses-eth1-start[109]: adding address 192.168.1.1/24... done machine # [5660969.136443] machine systemd[1]: Finished Setup wg0 dummy interface. machine # [5660969.136837] machine network-addresses-eth1-start[109]: adding address 2001:db8:1::1/64... done machine # [5660969.141883] machine systemd[1]: Finished Address configuration of eth1. machine # [5660969.142077] machine systemd[1]: Reached target Network. machine # [5660969.143443] machine systemd[1]: Starting Nginx Web Server... machine # [5660969.202865] machine nsncd[161]: Aug 13 11:53:15.256 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket" machine # [5660969.202963] machine systemd[1]: Started Name Service Cache Daemon (nsncd). machine # [5660969.203023] machine systemd[1]: Reached target Host and Network Name Lookups. machine # [5660969.203081] machine systemd[1]: Reached target User and Group Name Lookups. machine # [5660969.204174] machine systemd[1]: Starting Permit User Sessions... machine # [5660969.214335] machine systemd[1]: Finished Permit User Sessions. machine # [5660969.216332] machine systemd[1]: Started Console Getty. machine # [5660969.216406] machine systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0 machine # [5660969.216450] machine systemd[1]: Reached target Login Prompts. router # [5660969.256996] router systemd-networkd[66]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted router # [5660969.257087] router systemd-networkd[66]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted router # [5660969.264794] router systemd-networkd[66]: lo: Link UP router # [5660969.264799] router systemd-networkd[66]: lo: Gained carrier router # [5660969.264979] router systemd-networkd[66]: eth1: Configuring with /etc/systemd/network/40-eth1.network. router # [5660969.265378] router systemd[1]: Started Network Management. router # [5660969.265611] router systemd-networkd[66]: eth1: Link UP router # [5660969.265795] router systemd-networkd[66]: eth1: Gained carrier router # [5660969.266605] router systemd[1]: Starting Enable Persistent Storage in systemd-networkd... router # [5660969.314190] router systemd[1]: Finished Enable Persistent Storage in systemd-networkd. router # [5660969.478455] router systemd-resolved[61]: Positive Trust Anchors: router # [5660969.478466] router systemd-resolved[61]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d router # [5660969.478469] router systemd-resolved[61]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 router # [5660969.478504] router systemd-resolved[61]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test router # [5660969.500150] router systemd-resolved[61]: Using system hostname 'router'. router # [5660969.501445] router systemd[1]: Started Network Name Resolution. router # [5660969.501527] router systemd[1]: Reached target Network. router # [5660969.501597] router systemd[1]: Reached target System Initialization. router # [5660969.501651] router systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container router # [5660969.501680] router systemd[1]: Started Daily Cleanup of Temporary Directories. router # [5660969.501700] router systemd[1]: Reached target Timer Units. router # [5660969.502147] router systemd[1]: Listening on D-Bus System Message Bus Socket. router # [5660969.502442] router systemd[1]: Listening on Nix Daemon Socket. router # [5660969.502582] router systemd[1]: Listening on Virtual Machine and Container Registration Service Socket. router # [5660969.502613] router systemd[1]: Reached target Socket Units. router # [5660969.502657] router systemd[1]: Reached target Basic System. router # [5660969.512831] router systemd[1]: Starting Import lastlog data into lastlog2 database... router # [5660969.513649] router systemd[1]: Starting Nginx Web Server... router # [5660969.514390] router systemd[1]: Starting Name Service Cache Daemon (nsncd)... router # [5660969.515521] router systemd[1]: Starting D-Bus System Message Bus... router # [5660969.533225] router systemd[1]: Finished Import lastlog data into lastlog2 database. router # [5660969.608950] router systemd[1]: Started Name Service Cache Daemon (nsncd). router # [5660969.609406] router nsncd[84]: Aug 13 11:53:15.662 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket" router # [5660969.609027] router systemd[1]: Reached target Host and Network Name Lookups. router # [5660969.609091] router systemd[1]: Reached target User and Group Name Lookups. router # [5660969.611745] router systemd[1]: Starting User Login Management... router # [5660969.612999] router systemd[1]: Starting Permit User Sessions... router # [5660969.668900] router systemd[1]: Finished Permit User Sessions. router # [5660969.670916] router systemd[1]: Started Console Getty. router # [5660969.670985] router systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0 router # [5660969.671022] router systemd[1]: Reached target Login Prompts. router # [5660969.694110] router dbus-broker-launch[85]: Looking up NSS user entry for 'systemd-timesync'... router # [5660969.695000] router dbus-broker-launch[85]: NSS returned no entry for 'systemd-timesync' router # [5660969.695000] router dbus-broker-launch[85]: Invalid user-name in /nix/store/wrrbx1x8p8kwfpl9jpb7v3f34rjs7g9l-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync" router # [5660969.695456] router systemd[1]: Started D-Bus System Message Bus. router # [5660969.702920] router dbus-broker-launch[85]: Ready router # [5660969.782111] router systemd[1]: etc-machine\x2did.mount: Deactivated successfully. machine # [5660969.474266] machine systemd-logind[100]: New seat seat0. machine # [5660969.474573] machine systemd[1]: Started User Login Management. machine # [5660969.476280] machine systemd[1]: Starting D-Bus System Message Bus... machine # [5660969.477421] machine systemd[1]: Starting linger-users.service... machine # [5660969.519883] machine systemd[1]: linger-users.service: Deactivated successfully. machine # [5660969.520065] machine systemd[1]: Finished linger-users.service. machine # [5660969.668673] machine nginx-pre-start[203]: nginx: the configuration file /nix/store/f6bz7fb6kqyk1j719hra7mgz5f5dynlv-nginx.conf syntax is ok machine # [5660969.668986] machine nginx-pre-start[203]: nginx: configuration file /nix/store/f6bz7fb6kqyk1j719hra7mgz5f5dynlv-nginx.conf test is successful machine # [5660969.673275] machine systemd[1]: Started Nginx Web Server. machine # [5660969.673464] machine systemd[1]: Reached target Multi-User System. machine # [5660969.699641] machine dbus-broker-launch[199]: Looking up NSS user entry for 'systemd-timesync'... machine # [5660969.700275] machine dbus-broker-launch[199]: NSS returned no entry for 'systemd-timesync' machine # [5660969.700275] machine dbus-broker-launch[199]: Invalid user-name in /nix/store/rjaza082gj90dvkzj8dcc9kry4lcy8qm-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync" machine # [5660969.700676] machine systemd[1]: Started D-Bus System Message Bus. machine # [5660969.708552] machine dbus-broker-launch[199]: Ready machine # [5660969.709153] machine systemd[1]: Startup finished in 1.380s. machine # [5660969.784479] machine systemd[1]: etc-machine\x2did.mount: Deactivated successfully. router # [5660970.005294] router nginx-pre-start[114]: nginx: the configuration file /nix/store/qrsah5s67snpprkgwckqjvb52f8z9ciz-nginx.conf syntax is ok router # [5660970.005655] router nginx-pre-start[114]: nginx: configuration file /nix/store/qrsah5s67snpprkgwckqjvb52f8z9ciz-nginx.conf test is successful router # [5660970.020484] router systemd[1]: Started Nginx Web Server. router # [5660970.103626] router systemd-logind[103]: New seat seat0. router # [5660970.103842] router systemd[1]: Started User Login Management. router # [5660970.104943] router systemd[1]: Starting linger-users.service... router # [5660970.156250] router systemd[1]: linger-users.service: Deactivated successfully. router # [5660970.156427] router systemd[1]: Finished linger-users.service. router # [5660970.156804] router systemd[1]: Reached target Multi-User System. router # [5660970.157020] router systemd[1]: Startup finished in 1.809s. router # [5660970.304222] router systemd-networkd[66]: eth1: Gained IPv6LL router: (finished: waiting for unit multi-user.target, in 2.66 seconds) router: waiting for TCP port 80 on localhost Connection to localhost (::1) 80 port [tcp/http] succeeded! router: (finished: waiting for TCP port 80 on localhost, in 0.01 seconds) machine: waiting for unit multi-user.target machine: (finished: waiting for unit multi-user.target, in 0.02 seconds) machine: waiting for unit nginx.service machine: (finished: waiting for unit nginx.service, in 0.01 seconds) router: must succeed: ip -4 addr show eth1 | grep -oP '(?<=inet\s)\d+(\.\d+){3}' router: (finished: must succeed: ip -4 addr show eth1 | grep -oP '(?<=inet\s)\d+(\.\d+){3}', in 0.01 seconds) router: must succeed: ip -6 addr show eth1 | grep -oP '(?<=inet6\s)[0-9a-f:]+' | grep -v '^fe80' | head -1 router: (finished: must succeed: ip -6 addr show eth1 | grep -oP '(?<=inet6\s)[0-9a-f:]+' | grep -v '^fe80' | head -1, in 0.01 seconds) Router IPv4: 192.168.1.2 Router IPv6: 2001:db8:1::2 machine: must succeed: systemctl restart nftables machine: (finished: must succeed: systemctl restart nftables, in 0.16 seconds) machine: waiting for unit nftables.service machine: (finished: waiting for unit nftables.service, in 0.01 seconds) machine: must succeed: nft list table inet user-firewall >&2 table inet user-firewall { chain output { type filter hook output priority filter; policy accept; oifname "lo" counter packets 0 bytes 0 accept comment "allow lo" oifname "tun*" counter packets 0 bytes 0 accept comment "allow tun*" oifname "tap*" counter packets 0 bytes 0 accept comment "allow tap*" oifname "wg*" counter packets 0 bytes 0 accept comment "allow wg*" oifname "tailscale*" counter packets 0 bytes 0 accept comment "allow tailscale*" oifname "zt*" counter packets 0 bytes 0 accept comment "allow zt*" oifname "vpn*" counter packets 0 bytes 0 accept comment "allow vpn*" oifname "ipsec*" counter packets 0 bytes 0 accept comment "allow ipsec*" oifname "nebula*" counter packets 0 bytes 0 accept comment "allow nebula*" oifname "tinc*" counter packets 0 bytes 0 accept comment "allow tinc*" oifname "edge*" counter packets 0 bytes 0 accept comment "allow edge*" oifname "hyprspace" counter packets 0 bytes 0 accept comment "allow hyprspace" oifname "ham0" counter packets 0 bytes 0 accept comment "allow ham0" oifname "easytier" counter packets 0 bytes 0 accept comment "allow easytier" oifname "mycelium" counter packets 0 bytes 0 accept comment "allow mycelium" meta skuid 1002 counter packets 0 bytes 0 reject comment "blocked user bob" } } machine: (finished: must succeed: nft list table inet user-firewall >&2, in 0.01 seconds) machine: waiting for success: runuser -u alice -- curl -s http://127.0.0.1:8080 machine: (finished: waiting for success: runuser -u alice -- curl -s http://127.0.0.1:8080, in 0.02 seconds) machine: must succeed: runuser -u alice -- curl -s http://192.168.1.2 machine: (finished: must succeed: runuser -u alice -- curl -s http://192.168.1.2, in 0.02 seconds) machine: must succeed: runuser -u alice -- curl -s http://[2001:db8:1::2] machine: (finished: must succeed: runuser -u alice -- curl -s http://[2001:db8:1::2], in 0.02 seconds) machine: must succeed: runuser -u bob -- curl -s http://127.0.0.1:8080 machine: (finished: must succeed: runuser -u bob -- curl -s http://127.0.0.1:8080, in 0.02 seconds) machine: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://192.168.1.2 2>&1 || echo 'EXIT_CODE='$? machine # [5660970.688177] machine systemd[1]: Stopping nftables firewall... machine # [5660970.754482] machine systemd[1]: nftables.service: Deactivated successfully. machine # [5660970.754742] machine systemd[1]: Stopped nftables firewall. machine # [5660970.756424] machine systemd[1]: Starting nftables firewall... machine # [5660970.835489] machine systemd[1]: Finished nftables firewall. machine # [5660970.868929] machine runuser[235]: pam_unix(runuser:session): session opened for user alice(uid=1001) by (uid=0) machine # [5660970.879794] machine runuser[235]: pam_unix(runuser:session): session closed for user alice machine # [5660970.889154] machine runuser[237]: pam_unix(runuser:session): session opened for user alice(uid=1001) by (uid=0) machine # [5660970.899705] machine runuser[237]: pam_unix(runuser:session): session closed for user alice machine # [5660970.907825] machine runuser[239]: pam_unix(runuser:session): session opened for user alice(uid=1001) by (uid=0) machine # [5660970.915415] machine runuser[239]: pam_unix(runuser:session): session closed for user alice machine # [5660970.924310] machine runuser[241]: pam_unix(runuser:session): session opened for user bob(uid=1002) by (uid=0) machine # [5660970.934620] machine runuser[241]: pam_unix(runuser:session): session closed for user bob machine: (finished: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://192.168.1.2 2>&1 || echo 'EXIT_CODE='$?, in 0.02 seconds) machine: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://[2001:db8:1::2] 2>&1 || echo 'EXIT_CODE='$? machine # [5660970.943084] machine runuser[244]: pam_unix(runuser:session): session opened for user bob(uid=1002) by (uid=0) machine # [5660970.952628] machine runuser[244]: pam_unix(runuser:session): session closed for user bob machine # [5660970.960811] machine runuser[247]: pam_unix(runuser:session): session opened for user bob(uid=1002) by (uid=0) machine: (finished: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://[2001:db8:1::2] 2>&1 || echo 'EXIT_CODE='$?, in 1.02 seconds) machine: must succeed: nft list table inet user-firewall machine: (finished: must succeed: nft list table inet user-firewall, in 0.01 seconds) machine: waiting for unit setup-wg0-interface.service machine: (finished: waiting for unit setup-wg0-interface.service, in 0.01 seconds) machine: waiting for unit nginx.service machine: (finished: waiting for unit nginx.service, in 0.01 seconds) machine: waiting for TCP port 8081 on 10.100.0.2 Connection to 10.100.0.2 8081 port [tcp/sunproxyadmin] succeeded! machine: (finished: waiting for TCP port 8081 on 10.100.0.2, in 0.01 seconds) machine: must succeed: ip link show wg0 machine: (finished: must succeed: ip link show wg0, in 0.01 seconds) machine: must succeed: ip addr show wg0 machine: (finished: must succeed: ip addr show wg0, in 0.01 seconds) machine: must succeed: runuser -u alice -- curl -s --interface wg0 http://10.100.0.2:8081/ machine: (finished: must succeed: runuser -u alice -- curl -s --interface wg0 http://10.100.0.2:8081/, in 0.02 seconds) machine: must succeed: runuser -u alice -- curl -s --interface wg0 http://[fd00::2]:8081/ machine: (finished: must succeed: runuser -u alice -- curl -s --interface wg0 http://[fd00::2]:8081/, in 0.02 seconds) machine: must succeed: runuser -u bob -- curl -s --interface wg0 http://10.100.0.2:8081/ machine: (finished: must succeed: runuser -u bob -- curl -s --interface wg0 http://10.100.0.2:8081/, in 0.01 seconds) machine: must succeed: runuser -u bob -- curl -s --interface wg0 http://[fd00::2]:8081/ machine: (finished: must succeed: runuser -u bob -- curl -s --interface wg0 http://[fd00::2]:8081/, in 0.02 seconds) machine: must succeed: nft list table inet user-firewall | grep -E 'oifname.*wg' >&2 oifname "wg*" counter packets 0 bytes 0 accept comment "allow wg*" machine: (finished: must succeed: nft list table inet user-firewall | grep -E 'oifname.*wg' >&2, in 0.01 seconds) (finished: run the VM test script, in 4.15 seconds) test script finished in 4.17s cleanup kill NspawnMachine (pid 52) kill NspawnMachine (pid 53) Container machine terminated by signal KILL. Container router terminated by signal KILL. (finished: cleanup, in 0.53 seconds)