these 134 derivations will be built: /nix/store/03yz9nw9sl878nzs714jph01ll38cqj6-unit-nscd.service.drv /nix/store/1minl7gsasw8nlmjvi7937ib18ccpvh2-unit-run-initramfs.mount.drv /nix/store/1xgwqb1mvg985n2gvnyvps3dxpccm1r5-unit-getty.target.drv /nix/store/2bjf20cs73qj5isbbc5yb9g4v33jdp92-unit-systemd-hostnamed.service.drv /nix/store/2ia5d8nawi7ppgpipv6vx5i8q93kpm5k-X-Restart-Triggers-nix-daemon.drv /nix/store/2vq71yvy42frmlkgc8cny4zzzf1lg8hj-unit-systemd-user-sessions.service.drv /nix/store/k8ag6v85l9726gc6w1hw45mb730nkzc7-users-groups.json.drv /nix/store/35ckwnl73gjw4spv60513hj6i4zf31x5-dry-activate.drv /nix/store/38pvlzsbfn8irdjc13klvj1qd7qxm13b-usermod.pam.drv /nix/store/3c0h9h532ylngdwsn580savbzsmwrcld-getty.drv /nix/store/3dv8skz063g0f1ji28p7vfz044s3dpjb-unit-getty-.service.drv /nix/store/3j7rldz24j9xgcsk94dba5dhgjm23w63-unit-systemd-remount-fs.service.drv /nix/store/3qd2ddn308ivafdmrg31lxsshb7a2w28-unit-keys.target.drv /nix/store/3yia122k3xf4sravd6xkg50hk0sjjd64-passwd.drv /nix/store/gh2n3p2zcr4p7cs883v62smlnymr6gpi-unit-40-eth1.network.drv /nix/store/484c96hslnigqwdays2clbh2swn7aph4-X-Reload-Triggers-systemd-networkd.drv /nix/store/jjiiff59n1vybk4n5dgcjdb5s2j3102f-unit-script-linger-users-start.drv /nix/store/4g2ihr7i8xrhizz46j1rxfvgfvzjvcq4-unit-linger-users.service.drv /nix/store/5fvf8gvk78wvc0d8sv6z454k05643gjl-unit-user-runtime-dir-.service.drv /nix/store/6mibniibbwyb9ii5q7656ybw51ifrg6p-unit-network-local-commands.service.drv /nix/store/8hi3g5a77srqpz3mi9s52rr7qzbcl2fa-unit-user.slice.drv /nix/store/8j9asvfw7hnhvznfvz62d5578wzfj124-unit-local-fs.target.drv /nix/store/8y029f03ab6w4hfl71si848fls37h4kd-unit-serial-getty-.service.drv /nix/store/95id0dwnz91m9pqxsv83nz3hkk6kvcjv-unit-nix-daemon.socket.drv /nix/store/974abblpvsi9wwpvlrfldpjc2ijnb2d2-unit-qemu-guest-agent.service.drv /nix/store/9s4i8yz22a5xac7a3h3jgx87i5drnapn-unit-resolvconf.service-disabled.drv /nix/store/9sahxaq7b2van7k6idiwgmn1i35ypqqk-unit-backdoor.service-disabled.drv /nix/store/ahh6mgz19m2f7n62a4k4fb8qnbsf0rfc-unit-container-getty-.service.drv /nix/store/ahk0smfdr7rg3a6m19lxf4jpba0m26vq-unit-systemd-fsck-.service.drv /nix/store/ai0gnhav6bg8xq7vnzw3ar6sw35n6162-unit-systemd-timedated.service.drv /nix/store/aqbj5ws5c3hk3d537s5ifb046d2jyaqm-unit-serial-getty-hvc0.service-disabled.drv /nix/store/xfbvranlm8gsiwc45m8wwqnwvv5nyk81-command-not-found.drv /nix/store/d4v307zkypx4h5qzn3c9wzi5wrd6j4b3-system-path.drv /nix/store/ra3a42lzpa5ddddnf7xyjr72bn412rqb-dbus-1.drv /nix/store/k2yrhg09sj4s6h1yvgz4bn9gj491q3mk-X-Restart-Triggers-dbus-broker.drv /nix/store/bar18dcghvbrhc2lsz7cyjw0fa65hvb2-unit-dbus-broker.service.drv /nix/store/bm8kv1vbfqiqmyxhskib74n4ik1b1qdv-unit-systemd-backlight-.service.drv /nix/store/bzd3g9c4glfif5yy7syx8b4bjh7hhml2-unit-systemd-nspawn-.service.drv /nix/store/cza12xmxiqhirm8ncrq3fgnx8bqq0jjl-unit-prepare-kexec.service.drv /nix/store/xjkkkxhc21zdyqzljpz1l2r1bf78pvc0-unit-40-eth1.network.drv /nix/store/6cvm48f69f1g7cbgyxzx5z1frar6inqa-X-Reload-Triggers-systemd-networkd.drv /nix/store/d08gnzm2ig08in24qsiagpvxq6gh3n36-unit-systemd-networkd.service.drv /nix/store/rpnwhwh6x7ni96lb0800zy6266f6x0zp-shutdown-ramfs-contents.json.drv /nix/store/dysnk3qlnpjlv47v1g0951dn3s08ayg0-unit-generate-shutdown-ramfs.service.drv /nix/store/f42jag5h561bkb0kfqvl500vz1vwc9r6-unit-systemd-logind.service.drv /nix/store/fbh7jig3zdz7mcbq90z5dfz1mimrvir5-unit-system.slice.drv /nix/store/5q5cczn5g9fxzsd9v8w9skb8ygzy9pzp-nixos-tmpfiles.d.drv /nix/store/ny136gdw14a0hblcsvg9bg0l6h4f0hcq-tmpfiles.d.drv /nix/store/dhfhsa4s2f2mpiv68vd66n0g5zh8dcxn-X-Restart-Triggers-systemd-tmpfiles-resetup.drv /nix/store/fv04s4lcmmmffh6i2yp1jqz5p27rxgsq-unit-systemd-tmpfiles-resetup.service.drv /nix/store/gs73nhlivrxyx6dw4l42ywhqmzciv0d9-unit-kmod-static-nodes.service.drv /nix/store/h1jzansk8v51rq4v3l3jm87pbnq5mx34-unit-nix-optimise.service.drv /nix/store/havns5pz0asldfdi4spkk9f5ja6zhqa6-unit-suid-sgid-wrappers.service-disabled.drv /nix/store/lmfdnbm271v0ci461l2jqqclmz0dv1jl-unit-systemd-networkd.socket.drv /nix/store/lv02yy48rhc4r59zi3mxw45q8a3glf6j-unit-systemd-networkd-wait-online.service.drv /nix/store/mlj60qs3ngz1l4i58xl8hhcxyd329s1j-unit-console-getty.service.drv /nix/store/n65rfsfj1zci2dml5j7y2l0qwxsxplbw-unit-remote-fs.target.drv /nix/store/npsjjg3zq5gsfw2a10ywfpaqmrkx8v1i-unit-systemd-mkswap-.service.drv /nix/store/ny6gmgpxh4fhdnhjv8yqfq8yaf6qac89-unit-run-wrappers.mount.drv /nix/store/p9kvfvdycgklfa2ak61m31hks6ajhzhh-unit-user-.service.drv /nix/store/r8gbsds3clgj4xja1qpdzncm5jy9j632-unit-systemd-networkd-wait-online-.service.drv /nix/store/rfd0zbpd8fb7vs3vhhmvbg46ha0byx53-unit-systemd-localed.service.drv /nix/store/rgx2j7x7n79chabzpbcw28qycxndx60f-unit-systemd-sysctl.service.drv /nix/store/rnfw2z0f2ivraxyyis9a6r2qwgy16way-unit-systemd-networkd-varlink-metrics.socket.drv /nix/store/ry7i3nv2lm03k8kxmhywi9q54jcbr75b-unit-dbus.service.drv /nix/store/sfm4mxp8icv58ph28ffw7hvw18by10ji-unit-nix-daemon.service.drv /nix/store/slk4r88h4ysvl3v1ayx4zz4agwzswbza-unit-systemd-journald-.service.drv /nix/store/srj2dzcyskvpwpnl5crdw3kc5amgk7sm-unit-systemd-journald-audit.socket.drv /nix/store/v4ab2nsda390cnc9fmd3pylx0vb433z4-unit-nix-gc.service.drv /nix/store/v6qah35f75b8812k2yvq8rlcz8cmi10q-unit-register-nix-paths.service.drv /nix/store/vxi3gfjg8ld647krzh4dp7ijb00j4zr2-unit-systemd-makefs-.service.drv /nix/store/w4nzfla8jhkh7d9mp9ds39r71ky1lccp-unit-systemd-importd.service.drv /nix/store/w9zklbfa6zirlw7xs4d90cz8qj73gglg-unit-modprobe-.service.drv /nix/store/wncd6hg9pn60rhq1j0bb2zc5264q2zww-unit-lastlog2-import.service.drv /nix/store/x1zn6c6brzzx08xpff9x60q3qf59yrqr-unit-systemd-journal-flush.service.drv /nix/store/9ri9bi58rzd8aw43076db8q4z0nq07cx-nginx.conf.drv /nix/store/xcv1h79z6apqzk7c7cqkfi688syi4wdf-unit-script-nginx-pre-start.drv /nix/store/x7cxm2mgyyaa5w83d8qzms3qxjnm5pqb-unit-nginx.service.drv /nix/store/v6r9aqf1dfsxivc662bhj7jwlikna8sj-vconsole.conf.drv /nix/store/dw5xqllai7bhgglf9gib8iwbfv79l4wr-X-Restart-Triggers-reload-systemd-vconsole-setup.drv /nix/store/xdngl27hxwks5wp3qw0jrarypzi2lxh6-unit-reload-systemd-vconsole-setup.service.drv /nix/store/z9sdis77s91xfgnnbp9kapr90nhr1yrb-unit-serial-getty-ttyAMA0.service-disabled.drv /nix/store/zmap235yrpi6xqfsybdy0bxrjgn5qmg0-unit-systemd-random-seed.service.drv /nix/store/7581c4pbpb5z6j9v0p6j63m24qvk886h-system-units.drv /nix/store/905c0nhz2bv4wkxzfhwl6va2q5ymwb70-50-coredump.conf.drv /nix/store/blbd9j1y3d3bgc76d7xcawgj2bly180j-vlock.pam.drv /nix/store/dl8l85ljnmhymjzd4hh35rbiykcimxn4-etc-bashrc.drv /nix/store/4whxvf5cfp1g7mik4frb4brabrrv4x18-unit-systemd-tmpfiles-clean.timer.drv /nix/store/5zrwphvis4zk8qan12k3c26l5ngv8ky8-unit-nixos-fake-graphical-session.target.drv /nix/store/cxzfnzvr89hs8wy2x6b8jrm71w7piz6b-unit-dbus.socket.drv /nix/store/d7ssiqgq0wsy7x62pxrif1a9b4kxsjq4-unit-nixos-activation.service.drv /nix/store/q3nr0accaz5pg799jc1cr5d0x9l4zbq6-unit-dbus-broker.service.drv /nix/store/xdgzfxjzz2jaf202pqs1lr3rif7vvwx2-unit-systemd-tmpfiles-setup.service.drv /nix/store/i1jq86ld5mg2brlplg31cqvwb17yrah2-user-units.drv /nix/store/52zd6vx3smb2v0wy9zhc76wl2ff4195c-extra-hosts.drv /nix/store/l0gcx4ijf8q4zsj1zfyy7c2ncqsj25ry-string-hosts.drv /nix/store/k0izgyrq63bjbjbcicb8r0lzk2dyxkv6-hosts.drv /nix/store/lkcq3z27ppnrrj1y85154rrkb74rg2hp-etc-profile.drv /nix/store/w131zy2c47mk21x4cwrr596m0172g985-useradd.drv /nix/store/x9w462544sfyvvjf1rnsflbrr9z95364-userdel.pam.drv /nix/store/diw373xffx6byw1xip6909wgvx2sps52-etc.drv /nix/store/7575f52649aig84nfpg1dadws691zyla-activate.drv /nix/store/4a2a6z69hwjd67fcgp54k592ayl63q6s-nixos-system-router-test.drv /nix/store/vs5mc0pw5xdd5j7b1y3d1kpbnvd5vj55-system-path.drv /nix/store/4il0dgh5vjwrsr70n2jnj1rjmi48fmxc-dbus-1.drv /nix/store/d8n5x8wqxdd24pmsjaki6461mw52k5i1-users-groups.json.drv /nix/store/vljwdy1j68qjlbhiw63mzk5qkkgi5qf5-X-Restart-Triggers-dbus-broker.drv /nix/store/b30r8ah6vicl438jx1zc539c2qd9cphw-unit-dbus-broker.service.drv /nix/store/d3dayw1k5ajj34jz44ws40k2kkz9wny2-user-units.drv /nix/store/76vf3jalj3jjs8m1i82ywhbnwxdcw5p0-unit-dbus-broker.service.drv /nix/store/grbmaqfn15hc5aklbn6gnqk35cdfly7l-nginx.conf.drv /nix/store/wgphk6dfkvgzfa538yqdmhamqjkr8f19-unit-script-nginx-pre-start.drv /nix/store/a0yn2b4krdqvx8md9g52nvnhml0f824w-unit-nginx.service.drv /nix/store/brxh58asa6ajmvi734c1qahxk4wp4vw5-unit-systemd-networkd.service.drv /nix/store/c9c1vdqsiyrwcjm99b4md8q5rhbm1av2-nftables-deletions.drv /nix/store/63xasl64k7hmf67q7gab8y5sjppgcksq-nftables-save-deletions.drv /nix/store/c9sg99byp9niz0vvllfmgdw2xjkhiv1r-nftables-cleanup-deletions.drv /nix/store/qvxdn0qv0nf711jzmcv9i318f2k3i9zb-hosts.drv /nix/store/fvfy5wij6qmgwysgh130lwhi4mpdlmm5-nftables-rules.drv /nix/store/jyd8kzg1847d4wpc309wm608ybkh3ym2-nftables-ensure-deletions.drv /nix/store/w82nl342449n6ms2b16y7lmji6s3z2ap-unit-nftables.service.drv /nix/store/lq19mivaww31i04x9gy387d671x832dv-unit-script-setup-wg0-interface-start.drv /nix/store/x2012vg8zqmmmvbggp8ikfaqk8dr47wv-unit-setup-wg0-interface.service.drv /nix/store/p782n172s28z7cwc48vzq4i09857qrk2-system-units.drv /nix/store/p35c84gxx141155g1256z9wdcqdxc1jm-etc.drv /nix/store/b578grpmnw22lqbj3g8vwfwwfiq077lj-activate.drv /nix/store/v1c261sar4ghycdibqcl705znk23i05d-dry-activate.drv /nix/store/df2xhaif8mp02190w7lps4418yi6yz4d-nixos-system-machine-test.drv /nix/store/qrby3k8bi69im7lvli8g9q23qfdw5dsk-testScript.drv /nix/store/4w4gwz681ikvqbi1lrj997cq4qwz9l6q-closure-info.drv /nix/store/iggys7yiq6cbksh383acl7j3in72wwwz-test-driver-0.0.1.drv /nix/store/mvayam77c4924y255z2xa1s7qjb8jy11-closure-info.drv /nix/store/dxn9n4560ixqxbzmpkmyh72cr8cp2pl1-nixos-test-driver-user-firewall-nftables.drv /nix/store/71qvzf6lsbm3j6cd2f59fzwld2xpgppn-container-test-run-user-firewall-nftables.drv these 2 paths will be fetched (17.9 MiB download, 52.6 MiB unpacked): /nix/store/7r1ss27zg38q6xi6sqyggp2wrbk67b7q-libredirect-0 /nix/store/wwd9jfswd8gh4gvxhjfgpkmhvlajnsdg-lkl-2025-11-13-lib building '/nix/store/qvxdn0qv0nf711jzmcv9i318f2k3i9zb-hosts.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/xjkkkxhc21zdyqzljpz1l2r1bf78pvc0-unit-40-eth1.network.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/c9sg99byp9niz0vvllfmgdw2xjkhiv1r-nftables-cleanup-deletions.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/qvxdn0qv0nf711jzmcv9i318f2k3i9zb-hosts.drv' building '/nix/store/xjkkkxhc21zdyqzljpz1l2r1bf78pvc0-unit-40-eth1.network.drv' building '/nix/store/6cvm48f69f1g7cbgyxzx5z1frar6inqa-X-Reload-Triggers-systemd-networkd.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/c9sg99byp9niz0vvllfmgdw2xjkhiv1r-nftables-cleanup-deletions.drv' building '/nix/store/6cvm48f69f1g7cbgyxzx5z1frar6inqa-X-Reload-Triggers-systemd-networkd.drv' building '/nix/store/d08gnzm2ig08in24qsiagpvxq6gh3n36-unit-systemd-networkd.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/c9c1vdqsiyrwcjm99b4md8q5rhbm1av2-nftables-deletions.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/d08gnzm2ig08in24qsiagpvxq6gh3n36-unit-systemd-networkd.service.drv' building '/nix/store/c9c1vdqsiyrwcjm99b4md8q5rhbm1av2-nftables-deletions.drv' building '/nix/store/63xasl64k7hmf67q7gab8y5sjppgcksq-nftables-save-deletions.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/jyd8kzg1847d4wpc309wm608ybkh3ym2-nftables-ensure-deletions.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/grbmaqfn15hc5aklbn6gnqk35cdfly7l-nginx.conf.drv' on 'ssh-ng://builder@build01.clan.lol' warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy building '/nix/store/63xasl64k7hmf67q7gab8y5sjppgcksq-nftables-save-deletions.drv' building '/nix/store/jyd8kzg1847d4wpc309wm608ybkh3ym2-nftables-ensure-deletions.drv' building '/nix/store/3yia122k3xf4sravd6xkg50hk0sjjd64-passwd.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/grbmaqfn15hc5aklbn6gnqk35cdfly7l-nginx.conf.drv' nginx.conf> nginx.conf> ==================== Results =================== nginx.conf> No issues found. nginx.conf> nginx.conf> ==================== Summary =================== nginx.conf> Total issues: nginx.conf> Unspecified: 0 nginx.conf> Low: 0 nginx.conf> Medium: 0 nginx.conf> High: 0 nginx.conf> building '/nix/store/wgphk6dfkvgzfa538yqdmhamqjkr8f19-unit-script-nginx-pre-start.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/vs5mc0pw5xdd5j7b1y3d1kpbnvd5vj55-system-path.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/qrby3k8bi69im7lvli8g9q23qfdw5dsk-testScript.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/3yia122k3xf4sravd6xkg50hk0sjjd64-passwd.drv' building '/nix/store/wgphk6dfkvgzfa538yqdmhamqjkr8f19-unit-script-nginx-pre-start.drv' building '/nix/store/fvfy5wij6qmgwysgh130lwhi4mpdlmm5-nftables-rules.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/vs5mc0pw5xdd5j7b1y3d1kpbnvd5vj55-system-path.drv' system-path> structuredAttrs is enabled system-path> created 1663 symlinks in user environment building '/nix/store/qrby3k8bi69im7lvli8g9q23qfdw5dsk-testScript.drv' building '/nix/store/fvfy5wij6qmgwysgh130lwhi4mpdlmm5-nftables-rules.drv' building '/nix/store/4il0dgh5vjwrsr70n2jnj1rjmi48fmxc-dbus-1.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/w82nl342449n6ms2b16y7lmji6s3z2ap-unit-nftables.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/4il0dgh5vjwrsr70n2jnj1rjmi48fmxc-dbus-1.drv' building '/nix/store/vljwdy1j68qjlbhiw63mzk5qkkgi5qf5-X-Restart-Triggers-dbus-broker.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/w82nl342449n6ms2b16y7lmji6s3z2ap-unit-nftables.service.drv' warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy building '/nix/store/vljwdy1j68qjlbhiw63mzk5qkkgi5qf5-X-Restart-Triggers-dbus-broker.drv' building '/nix/store/76vf3jalj3jjs8m1i82ywhbnwxdcw5p0-unit-dbus-broker.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/b30r8ah6vicl438jx1zc539c2qd9cphw-unit-dbus-broker.service.drv' on 'ssh-ng://builder@build01.clan.lol' warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy building '/nix/store/76vf3jalj3jjs8m1i82ywhbnwxdcw5p0-unit-dbus-broker.service.drv' building '/nix/store/p782n172s28z7cwc48vzq4i09857qrk2-system-units.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/b30r8ah6vicl438jx1zc539c2qd9cphw-unit-dbus-broker.service.drv' building '/nix/store/d3dayw1k5ajj34jz44ws40k2kkz9wny2-user-units.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/p782n172s28z7cwc48vzq4i09857qrk2-system-units.drv' building '/nix/store/mvayam77c4924y255z2xa1s7qjb8jy11-closure-info.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/d3dayw1k5ajj34jz44ws40k2kkz9wny2-user-units.drv' warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy building '/nix/store/mvayam77c4924y255z2xa1s7qjb8jy11-closure-info.drv' closure-info> structuredAttrs is enabled building '/nix/store/p35c84gxx141155g1256z9wdcqdxc1jm-etc.drv' on 'ssh-ng://builder@build01.clan.lol' warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy building '/nix/store/p35c84gxx141155g1256z9wdcqdxc1jm-etc.drv' building '/nix/store/b578grpmnw22lqbj3g8vwfwwfiq077lj-activate.drv' on 'ssh-ng://builder@build01.clan.lol' warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy building '/nix/store/b578grpmnw22lqbj3g8vwfwwfiq077lj-activate.drv' building '/nix/store/df2xhaif8mp02190w7lps4418yi6yz4d-nixos-system-machine-test.drv' on 'ssh-ng://builder@build01.clan.lol' warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy building '/nix/store/df2xhaif8mp02190w7lps4418yi6yz4d-nixos-system-machine-test.drv' nixos-system-machine-test> structuredAttrs is enabled warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy building '/nix/store/4w4gwz681ikvqbi1lrj997cq4qwz9l6q-closure-info.drv' on 'ssh-ng://builder@build01.clan.lol' warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy building '/nix/store/4w4gwz681ikvqbi1lrj997cq4qwz9l6q-closure-info.drv' closure-info> structuredAttrs is enabled building '/nix/store/dxn9n4560ixqxbzmpkmyh72cr8cp2pl1-nixos-test-driver-user-firewall-nftables.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/dxn9n4560ixqxbzmpkmyh72cr8cp2pl1-nixos-test-driver-user-firewall-nftables.drv' nixos-test-driver-user-firewall-nftables> Running type check (enable/disable: config.skipTypeCheck) nixos-test-driver-user-firewall-nftables> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck nixos-test-driver-user-firewall-nftables> Success: no issues found in 1 source file warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy building '/nix/store/71qvzf6lsbm3j6cd2f59fzwld2xpgppn-container-test-run-user-firewall-nftables.drv' on 'ssh-ng://builder@build01.clan.lol' warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy building '/nix/store/71qvzf6lsbm3j6cd2f59fzwld2xpgppn-container-test-run-user-firewall-nftables.drv' container-test-run-user-firewall-nftables> additionally exposed symbols: container-test-run-user-firewall-nftables> machine, router, container-test-run-user-firewall-nftables> start_all, machines, driver, Machine, wait_for_signal container-test-run-user-firewall-nftables> Starting machine container-test-run-user-firewall-nftables> Starting router container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> <<< NixOS Stage 2 >>> container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> booting system configuration /nix/store/kpyv1fswczc9g48i9vanq22b28x346j3-nixos-system-machine-test container-test-run-user-firewall-nftables> running activation script... container-test-run-user-firewall-nftables> setting up /etc... container-test-run-user-firewall-nftables> 2: host0@if4: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-user-firewall-nftables> link/ether 0e:74:26:22:81:c2 brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-user-firewall-nftables> starting systemd... container-test-run-user-firewall-nftables> systemd 260.2 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-user-firewall-nftables> Detected virtualization systemd-nspawn. container-test-run-user-firewall-nftables> Detected architecture arm64. container-test-run-user-firewall-nftables> Detected first boot. container-test-run-user-firewall-nftables> Initializing machine ID from container UUID. container-test-run-user-firewall-nftables> Applying preset policy. container-test-run-user-firewall-nftables> Populated /etc with preset unit settings. container-test-run-user-firewall-nftables> Queued start job for default target Multi-User System. container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> <<< Welcome to NixOS test (aarch64) - console >>> container-test-run-user-firewall-nftables> + systemd-run /bin/sh -c '/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin/sleep 999999999 && echo 05bd7c72-a8fc-48bb-afbd-4eb02e910e66' container-test-run-user-firewall-nftables> Running as unit: run-p224-i96484987.service; invocation ID: 27cff914f520493ea9c2d30bb319ea62 container-test-run-user-firewall-nftables> To attach to container machine run on the same machine that runs the test: container-test-run-user-firewall-nftables> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*05bd7c72-a8fc-48bb-afbd-4eb02e910e66') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> To inject external network and continue test, run: container-test-run-user-firewall-nftables> sudo /nix/store/d6kq2phq0zy5invmkfgg8h35zxaf13s9-python3-3.13.15/bin/python3.13 /nix/store/dblq90iykl807j32b583z18kdk4b6sd5-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py 05bd7c72-a8fc-48bb-afbd-4eb02e910e66 container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> <<< NixOS Stage 2 >>> container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> booting system configuration /nix/store/rh9ij0n6xrygxdcb5pgq7r98s3190x3m-nixos-system-router-test container-test-run-user-firewall-nftables> running activation script... container-test-run-user-firewall-nftables> setting up /etc... container-test-run-user-firewall-nftables> 2: host0@if3: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-user-firewall-nftables> link/ether a6:24:31:fe:b9:6d brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-user-firewall-nftables> starting systemd... container-test-run-user-firewall-nftables> systemd 260.2 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-user-firewall-nftables> Detected virtualization systemd-nspawn. container-test-run-user-firewall-nftables> Detected architecture arm64. container-test-run-user-firewall-nftables> Detected first boot. container-test-run-user-firewall-nftables> Initializing machine ID from container UUID. container-test-run-user-firewall-nftables> Applying preset policy. container-test-run-user-firewall-nftables> Populated /etc with preset unit settings. container-test-run-user-firewall-nftables> Queued start job for default target Multi-User System. container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> <<< Welcome to NixOS test (aarch64) - console >>> container-test-run-user-firewall-nftables> + systemd-run /bin/sh -c '/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin/sleep 999999999 && echo dd3a4937-1427-4e1d-ada1-aac3ad89dc29' container-test-run-user-firewall-nftables> Running as unit: run-p209-i96484997.service; invocation ID: cbae809af85243ad862394b88bae3098 container-test-run-user-firewall-nftables> To attach to container router run on the same machine that runs the test: container-test-run-user-firewall-nftables> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*dd3a4937-1427-4e1d-ada1-aac3ad89dc29') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> To inject external network and continue test, run: container-test-run-user-firewall-nftables> sudo /nix/store/d6kq2phq0zy5invmkfgg8h35zxaf13s9-python3-3.13.15/bin/python3.13 /nix/store/dblq90iykl807j32b583z18kdk4b6sd5-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py dd3a4937-1427-4e1d-ada1-aac3ad89dc29 container-test-run-user-firewall-nftables> + systemctl --no-pager show multi-user.target container-test-run-user-firewall-nftables> + systemctl --no-pager show nginx.service container-test-run-user-firewall-nftables> + systemctl --no-pager show multi-user.target container-test-run-user-firewall-nftables> + systemctl --no-pager show nginx.service container-test-run-user-firewall-nftables> + grep -oP '(?<=inet\s)\d+(\.\d+){3}' container-test-run-user-firewall-nftables> + ip -4 addr show eth1 container-test-run-user-firewall-nftables> + ip -6 addr show eth1 container-test-run-user-firewall-nftables> + grep -oP '(?<=inet6\s)[0-9a-f:]+' container-test-run-user-firewall-nftables> + grep -v '^fe80' container-test-run-user-firewall-nftables> + head -1 container-test-run-user-firewall-nftables> Router IPv4: 192.168.1.2 container-test-run-user-firewall-nftables> Router IPv6: 2001:db8:1::2 container-test-run-user-firewall-nftables> + systemctl restart nftables container-test-run-user-firewall-nftables> + systemctl --no-pager show nftables.service container-test-run-user-firewall-nftables> + nft list table inet user-firewall container-test-run-user-firewall-nftables> table inet user-firewall { container-test-run-user-firewall-nftables> chain output { container-test-run-user-firewall-nftables> type filter hook output priority filter; policy accept; container-test-run-user-firewall-nftables> oifname "lo" counter packets 0 bytes 0 accept comment "allow lo" container-test-run-user-firewall-nftables> oifname "tun*" counter packets 0 bytes 0 accept comment "allow tun*" container-test-run-user-firewall-nftables> oifname "tap*" counter packets 0 bytes 0 accept comment "allow tap*" container-test-run-user-firewall-nftables> oifname "wg*" counter packets 0 bytes 0 accept comment "allow wg*" container-test-run-user-firewall-nftables> oifname "tailscale*" counter packets 0 bytes 0 accept comment "allow tailscale*" container-test-run-user-firewall-nftables> oifname "zt*" counter packets 0 bytes 0 accept comment "allow zt*" container-test-run-user-firewall-nftables> oifname "vpn*" counter packets 0 bytes 0 accept comment "allow vpn*" container-test-run-user-firewall-nftables> oifname "ipsec*" counter packets 0 bytes 0 accept comment "allow ipsec*" container-test-run-user-firewall-nftables> oifname "nebula*" counter packets 0 bytes 0 accept comment "allow nebula*" container-test-run-user-firewall-nftables> oifname "tinc*" counter packets 0 bytes 0 accept comment "allow tinc*" container-test-run-user-firewall-nftables> oifname "edge*" counter packets 0 bytes 0 accept comment "allow edge*" container-test-run-user-firewall-nftables> oifname "hyprspace" counter packets 0 bytes 0 accept comment "allow hyprspace" container-test-run-user-firewall-nftables> oifname "ham0" counter packets 0 bytes 0 accept comment "allow ham0" container-test-run-user-firewall-nftables> oifname "easytier" counter packets 0 bytes 0 accept comment "allow easytier" container-test-run-user-firewall-nftables> oifname "mycelium" counter packets 0 bytes 0 accept comment "allow mycelium" container-test-run-user-firewall-nftables> meta skuid 1002 counter packets 0 bytes 0 reject comment "blocked user bob" container-test-run-user-firewall-nftables> } container-test-run-user-firewall-nftables> } container-test-run-user-firewall-nftables> machine: waiting for success: runuser -u alice -- curl -s http://127.0.0.1:8080 container-test-run-user-firewall-nftables> + runuser -u alice -- curl -s http://127.0.0.1:8080 container-test-run-user-firewall-nftables> (finished: waiting for success: runuser -u alice -- curl -s http://127.0.0.1:8080, in 0.02 seconds) container-test-run-user-firewall-nftables> + runuser -u alice -- curl -s http://192.168.1.2 container-test-run-user-firewall-nftables> + runuser -u alice -- curl -s 'http://[2001:db8:1::2]' container-test-run-user-firewall-nftables> + runuser -u bob -- curl -s http://127.0.0.1:8080 container-test-run-user-firewall-nftables> + runuser -u bob -- curl -s --connect-timeout 2 http://192.168.1.2 container-test-run-user-firewall-nftables> + echo EXIT_CODE=7 container-test-run-user-firewall-nftables> + runuser -u bob -- curl -s --connect-timeout 2 'http://[2001:db8:1::2]' container-test-run-user-firewall-nftables> + echo EXIT_CODE=7 container-test-run-user-firewall-nftables> + nft list table inet user-firewall container-test-run-user-firewall-nftables> + systemctl --no-pager show setup-wg0-interface.service container-test-run-user-firewall-nftables> + systemctl --no-pager show nginx.service container-test-run-user-firewall-nftables> machine: waiting for success: nc -z 10.100.0.2 8081 container-test-run-user-firewall-nftables> + nc -z 10.100.0.2 8081 container-test-run-user-firewall-nftables> Connection to 10.100.0.2 8081 port [tcp/sunproxyadmin] succeeded! container-test-run-user-firewall-nftables> (finished: waiting for success: nc -z 10.100.0.2 8081, in 0.01 seconds) container-test-run-user-firewall-nftables> + ip link show wg0 container-test-run-user-firewall-nftables> + ip addr show wg0 container-test-run-user-firewall-nftables> + runuser -u alice -- curl -s --interface wg0 http://10.100.0.2:8081/ container-test-run-user-firewall-nftables> + runuser -u alice -- curl -s --interface wg0 'http://[fd00::2]:8081/' container-test-run-user-firewall-nftables> + runuser -u bob -- curl -s --interface wg0 http://10.100.0.2:8081/ container-test-run-user-firewall-nftables> + runuser -u bob -- curl -s --interface wg0 'http://[fd00::2]:8081/' container-test-run-user-firewall-nftables> + nft list table inet user-firewall container-test-run-user-firewall-nftables> + grep -E 'oifname.*wg' container-test-run-user-firewall-nftables> oifname "wg*" counter packets 1 bytes 56 accept comment "allow wg*" container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> post-build step Upload to niks3: ok time=2026-08-18T20:30:42.118Z level=INFO msg="Uploading 0 paths to niks3.clan.lol (1 already cached)" time=2026-08-18T20:30:42.738Z level=INFO msg="Uploading 1 narinfos" time=2026-08-18T20:30:43.274Z level=INFO msg="Upload complete. (1.208s)"