vars-check-pki
default.checks.aarch64-linux.pki
· build #393
· raw
1Running vars check using Nix-based executor...2Executing shared generators...3Executing shared generator: pki-root-ca4+ set -euo pipefail5+ PATH=/nix/store/f1gagmli6hbbzgmaz2yciv3cql27piwz-openssl-3.6.3-bin/bin:/nix/store/dqxknsb71lsgzfzcdmn6x7fzssqbdyyx-coreutils-9.11/bin6+ [[ ! -d /etc ]]7+ mkdir -p /etc8+ cat9++ id -g10+ cat11++ id -u12++ id -g13+ cat14+ openssl genrsa -out /output/ca.key 409615+ openssl req -x509 -new -nodes -key /output/ca.key -sha256 -days 3650 -subj '/CN=Clan Root CA' -addext basicConstraints=critical,CA:TRUE -addext keyUsage=critical,keyCertSign,cRLSign -addext subjectKeyIdentifier=hash -out /output/ca.crt16✓ Generated shared file: pki-root-ca/ca.crt17✓ Generated shared file: pki-root-ca/ca.key18✓ Shared Generator pki-root-ca completed19✓ Shared generators completed20Processing machine: caddy21Generator execution order: cert-website.caddy -> state-version22Executing generator: cert-website.caddy23+ set -euo pipefail24+ PATH=/nix/store/f1gagmli6hbbzgmaz2yciv3cql27piwz-openssl-3.6.3-bin/bin:/nix/store/dqxknsb71lsgzfzcdmn6x7fzssqbdyyx-coreutils-9.11/bin25+ [[ ! -d /etc ]]26+ mkdir -p /etc27+ cat28++ id -g29+ cat30++ id -u31++ id -g32+ cat33+ openssl genrsa -out /output/website.caddy.key 409634+ openssl req -new -key /output/website.caddy.key -subj /CN=website.caddy.test -out endpoint.csr35+ printf subjectAltName=DNS:website.caddy.test36+ openssl x509 -req -in endpoint.csr -CA /input/pki-root-ca/ca.crt -CAkey /input/pki-root-ca/ca.key -CAcreateserial -days 365 -sha256 -extfile san.cnf -out /output/website.caddy.crt37Certificate request self-signature ok38subject=CN=website.caddy.test39+ cat /output/website.caddy.crt /input/pki-root-ca/ca.crt40✓ Generated file: cert-website.caddy/website.caddy.crt41✓ Generated file: cert-website.caddy/website.caddy.fullchain.crt42✓ Generated file: cert-website.caddy/website.caddy.key43✓ Generator cert-website.caddy completed44Executing generator: state-version45+ set -euo pipefail46+ PATH=/nix/store/dqxknsb71lsgzfzcdmn6x7fzssqbdyyx-coreutils-9.11/bin47+ [[ ! -d /etc ]]48+ mkdir -p /etc49+ cat50++ id -g51+ cat52++ id -u53++ id -g54+ cat55+ echo -n 26.1156✓ Generated file: state-version/version57✓ Generator state-version completed58✓ Machine caddy completed59Processing machine: client60Generator execution order: state-version61Executing generator: state-version62+ set -euo pipefail63+ PATH=/nix/store/dqxknsb71lsgzfzcdmn6x7fzssqbdyyx-coreutils-9.11/bin64+ [[ ! -d /etc ]]65+ mkdir -p /etc66+ cat67++ id -g68+ cat69++ id -u70++ id -g71+ cat72+ echo -n 26.1173✓ Generated file: state-version/version74✓ Generator state-version completed75✓ Machine client completed76Processing machine: nginx77Generator execution order: cert-website.nginx -> state-version78Executing generator: cert-website.nginx79+ set -euo pipefail80+ PATH=/nix/store/f1gagmli6hbbzgmaz2yciv3cql27piwz-openssl-3.6.3-bin/bin:/nix/store/dqxknsb71lsgzfzcdmn6x7fzssqbdyyx-coreutils-9.11/bin81+ [[ ! -d /etc ]]82+ mkdir -p /etc83+ cat84++ id -g85+ cat86++ id -u87++ id -g88+ cat89+ openssl genrsa -out /output/website.nginx.key 409690+ openssl req -new -key /output/website.nginx.key -subj /CN=website.nginx.test -out endpoint.csr91+ printf subjectAltName=DNS:website.nginx.test92+ openssl x509 -req -in endpoint.csr -CA /input/pki-root-ca/ca.crt -CAkey /input/pki-root-ca/ca.key -CAcreateserial -days 365 -sha256 -extfile san.cnf -out /output/website.nginx.crt93Certificate request self-signature ok94subject=CN=website.nginx.test95+ cat /output/website.nginx.crt /input/pki-root-ca/ca.crt96✓ Generated file: cert-website.nginx/website.nginx.crt97✓ Generated file: cert-website.nginx/website.nginx.fullchain.crt98✓ Generated file: cert-website.nginx/website.nginx.key99✓ Generator cert-website.nginx completed100Executing generator: state-version101+ set -euo pipefail102+ PATH=/nix/store/dqxknsb71lsgzfzcdmn6x7fzssqbdyyx-coreutils-9.11/bin103+ [[ ! -d /etc ]]104+ mkdir -p /etc105+ cat106++ id -g107+ cat108++ id -u109++ id -g110+ cat111+ echo -n 26.11112✓ Generated file: state-version/version113✓ Generator state-version completed114✓ Machine nginx completed115✓ All vars checks completed successfully