container-test-run-user-firewall-iptables
checks.aarch64-linux.nixos-test-user-firewall-iptables
· build #441
· raw
1Machine state will be reset. To keep it, pass --keep-machine-state2start all VLans3(finished: start all VLans, in 0.00 seconds)45Test will time out and terminate in 3600.0 seconds6run the VM test script7additionally exposed symbols:8 machine, router,9 vlan1,10 start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh11start all VMs12machine: systemd-nspawn running (pid 52)13router: systemd-nspawn running (pid 53)14machine: Waiting for journal at /build/vm-state-machine/var/log/journal...15router: Waiting for journal at /build/vm-state-router/var/log/journal...16(finished: start all VMs, in 0.00 seconds)17router: waiting for unit multi-user.target18nixos-nspawn(router): TAP vde-tap1 not found; container will be isolated from VDE19nixos-nspawn(router): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.20nixos-nspawn(machine): TAP vde-tap1 not found; container will be isolated from VDE21nixos-nspawn(machine): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.22Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.23Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.24░ Spawning container router on /build/vm-state-router.25░ Spawning container machine on /build/vm-state-machine.26machine # [6241325.091033] machine systemd-journald[54]: Journal started27machine # [6241325.091092] machine systemd-journald[54]: Runtime Journal (/run/log/journal/c14d39e82a20423d8f70f0cac9d148b0) is 8M, max 2.5G, 2.4G free.28machine # [6241325.092784] machine systemd[1]: Finished Create Static Device Nodes in /dev gracefully.29machine # [6241325.102098] machine systemd[1]: Starting Flush Journal to Persistent Storage...30machine # [6241325.102796] machine systemd[1]: Starting Create Static Device Nodes in /dev...31machine # [6241325.113738] machine systemd-journald[54]: Time spent on flushing to /var/log/journal/c14d39e82a20423d8f70f0cac9d148b0 is 1.813ms for 5 entries.32machine # [6241325.113738] machine systemd-journald[54]: System Journal (/var/log/journal/c14d39e82a20423d8f70f0cac9d148b0) is 8M, max 4G, 3.9G free.33machine # [6241325.118298] machine systemd[1]: Finished Create Static Device Nodes in /dev.34machine # [6241325.118542] machine systemd[1]: Reached target Preparation for Local File Systems.35machine # [6241325.118623] machine systemd[1]: Reached target Local File Systems.36machine # [6241325.119339] machine systemd[1]: Listening on Boot Loader Control Service Socket.37machine # [6241325.119378] machine systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container38machine # [6241325.120326] machine systemd[1]: Starting Save Transient machine-id to Disk...39machine # [6241325.120361] machine systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys40machine # [6241325.129596] machine systemd[1]: Finished Flush Journal to Persistent Storage.41machine # [6241325.131201] machine systemd[1]: Starting Create System Files and Directories...42machine # [6241325.149152] machine systemd-tmpfiles[97]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted43machine # [6241325.149371] machine systemd-tmpfiles[97]: fchmod() of /var/log/journal failed: Operation not permitted44machine # [6241325.149517] machine systemd-tmpfiles[97]: fchmod() of /var/log/journal/c14d39e82a20423d8f70f0cac9d148b0 failed: Operation not permitted45machine # [6241325.149741] machine systemd-tmpfiles[97]: fchmod() of /run/log/journal failed: Operation not permitted46machine # [6241325.151230] machine systemd[1]: Finished Create System Files and Directories.47machine # [6241325.152278] machine systemd[1]: Starting Rebuild Journal Catalog...48machine # [6241325.152921] machine systemd[1]: Starting Record System Boot/Shutdown in UTMP...49router # [6241325.101198] router systemd-journald[54]: Journal started50machine # [6241325.165041] machine systemd[1]: Finished Record System Boot/Shutdown in UTMP.51router # [6241325.101256] router systemd-journald[54]: Runtime Journal (/run/log/journal/ee136996679243f9b40f2e8c53d3b4a5) is 8M, max 2.5G, 2.4G free.52machine # [6241325.174065] machine systemd[1]: Finished Rebuild Journal Catalog.53router # [6241325.104228] router systemd[1]: Starting Flush Journal to Persistent Storage...54machine # [6241325.175171] machine systemd[1]: Starting Update is Completed...55router # [6241325.105014] router systemd[1]: Starting Network Name Resolution...56machine # [6241325.185523] machine systemd[1]: Finished Update is Completed.57router # [6241325.105608] router systemd[1]: Starting Create Static Device Nodes in /dev...58router # [6241325.114839] router systemd-journald[54]: Time spent on flushing to /var/log/journal/ee136996679243f9b40f2e8c53d3b4a5 is 1.992ms for 5 entries.59router # [6241325.114839] router systemd-journald[54]: System Journal (/var/log/journal/ee136996679243f9b40f2e8c53d3b4a5) is 8M, max 4G, 3.9G free.60router # [6241325.120627] router systemd[1]: Finished Create Static Device Nodes in /dev.61router # [6241325.120851] router systemd[1]: Reached target Preparation for Local File Systems.62router # [6241325.120936] router systemd[1]: Reached target Local File Systems.63router # [6241325.121640] router systemd[1]: Listening on Boot Loader Control Service Socket.64router # [6241325.121682] router systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container65router # [6241325.122584] router systemd[1]: Starting Save Transient machine-id to Disk...66router # [6241325.122618] router systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys67router # [6241325.123554] router systemd[1]: Starting Network Management...68router # [6241325.130990] router systemd[1]: Finished Flush Journal to Persistent Storage.69router # [6241325.131913] router systemd[1]: Starting Create System Files and Directories...70router # [6241325.148453] router systemd-tmpfiles[70]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted71router # [6241325.148666] router systemd-tmpfiles[70]: fchmod() of /var/log/journal failed: Operation not permitted72router # [6241325.148811] router systemd-tmpfiles[70]: fchmod() of /var/log/journal/ee136996679243f9b40f2e8c53d3b4a5 failed: Operation not permitted73machine # [6241325.185669] machine systemd[1]: Reached target System Initialization.74router # [6241325.149025] router systemd-tmpfiles[70]: fchmod() of /run/log/journal failed: Operation not permitted75machine # [6241325.185740] machine systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container76router # [6241325.150417] router systemd[1]: Finished Create System Files and Directories.77machine # [6241325.185769] machine systemd[1]: Started Daily Cleanup of Temporary Directories.78router # [6241325.151518] router systemd[1]: Starting Rebuild Journal Catalog...79machine # [6241325.185786] machine systemd[1]: Reached target Timer Units.80router # [6241325.152301] router systemd[1]: Starting Record System Boot/Shutdown in UTMP...81machine # [6241325.185888] machine systemd[1]: Listening on D-Bus System Message Bus Socket.82router # [6241325.165219] router systemd[1]: Finished Record System Boot/Shutdown in UTMP.83machine # [6241325.185993] machine systemd[1]: Listening on Nix Daemon Socket.84router # [6241325.174424] router systemd[1]: Finished Rebuild Journal Catalog.85machine # [6241325.186077] machine systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.86router # [6241325.175623] router systemd[1]: Starting Update is Completed...87machine # [6241325.186101] machine systemd[1]: Reached target Socket Units.88router # [6241325.186477] router systemd[1]: Finished Update is Completed.89machine # [6241325.186130] machine systemd[1]: Reached target Basic System.90machine # [6241325.187068] machine systemd[1]: Starting Import lastlog data into lastlog2 database...91machine # [6241325.187833] machine systemd[1]: Starting Name Service Cache Daemon (nsncd)...92machine # [6241325.207190] machine systemd[1]: Finished Import lastlog data into lastlog2 database.93machine # [6241325.264844] machine nsncd[138]: Aug 20 05:05:51.317 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"94machine # [6241325.264885] machine systemd[1]: Started Name Service Cache Daemon (nsncd).95machine # [6241325.264938] machine systemd[1]: Reached target Host and Network Name Lookups.96machine # [6241325.264984] machine systemd[1]: Reached target User and Group Name Lookups.97machine # [6241325.266089] machine systemd[1]: Starting User Login Management...98machine # [6241325.308377] machine systemd[1]: Finished Firewall.99machine # [6241325.308602] machine systemd[1]: Reached target Preparation for Network.100machine # [6241325.309567] machine systemd[1]: Starting Address configuration of eth1...101machine # [6241325.310406] machine systemd[1]: Starting Extra networking commands....102machine # [6241325.311207] machine systemd[1]: Starting Setup wg0 dummy interface...103machine # [6241325.330128] machine network-addresses-eth1-start[224]: adding address 192.168.1.1/24... done104machine # [6241325.332486] machine systemd[1]: Finished Setup wg0 dummy interface.105machine # [6241325.332944] machine network-addresses-eth1-start[224]: adding address 2001:db8:1::1/64... done106machine # [6241325.338022] machine systemd[1]: Finished Address configuration of eth1.107machine # [6241325.372790] machine systemd[1]: Stopped target Host and Network Name Lookups.108machine # [6241325.372860] machine systemd[1]: Stopping Host and Network Name Lookups...109machine # [6241325.372921] machine systemd[1]: Stopped target User and Group Name Lookups.110machine # [6241325.372952] machine systemd[1]: Stopping User and Group Name Lookups...111machine # [6241325.373156] machine systemd[1]: Stopping Name Service Cache Daemon (nsncd)...112machine # [6241325.376388] machine systemd[1]: nscd.service: Deactivated successfully.113machine # [6241325.376565] machine systemd[1]: Stopped Name Service Cache Daemon (nsncd).114machine # [6241325.378834] machine systemd[1]: Starting Name Service Cache Daemon (nsncd)...115machine # [6241325.387942] machine systemd[1]: Finished Extra networking commands..116machine # [6241325.388258] machine systemd[1]: Reached target Network.117machine # [6241325.389930] machine systemd[1]: Starting Nginx Web Server...118machine # [6241325.459628] machine nsncd[292]: Aug 20 05:05:51.512 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"119machine # [6241325.459782] machine systemd[1]: Started Name Service Cache Daemon (nsncd).120machine # [6241325.459877] machine systemd[1]: Reached target Host and Network Name Lookups.121machine # [6241325.459973] machine systemd[1]: Reached target User and Group Name Lookups.122machine # [6241325.461360] machine systemd[1]: Starting Permit User Sessions...123machine # [6241325.507863] machine systemd[1]: Finished Permit User Sessions.124machine # [6241325.509582] machine systemd[1]: Started Console Getty.125machine # [6241325.509655] machine systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0126machine # [6241325.509693] machine systemd[1]: Reached target Login Prompts.127machine # [6241325.619023] machine systemd[1]: Finished Save Transient machine-id to Disk.128router # [6241325.467272] router systemd-networkd[67]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted129router # [6241325.467362] router systemd-networkd[67]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted130router # [6241325.473615] router systemd-networkd[67]: lo: Link UP131router # [6241325.473624] router systemd-networkd[67]: lo: Gained carrier132router # [6241325.473823] router systemd-networkd[67]: eth1: Configuring with /etc/systemd/network/40-eth1.network.133router # [6241325.474197] router systemd[1]: Started Network Management.134router # [6241325.500381] router systemd-networkd[67]: eth1: Link UP135router # [6241325.500833] router systemd-networkd[67]: eth1: Gained carrier136router # [6241325.501547] router systemd[1]: Starting Enable Persistent Storage in systemd-networkd...137router # [6241325.534517] router systemd[1]: Finished Enable Persistent Storage in systemd-networkd.138router # [6241325.619243] router systemd[1]: Finished Save Transient machine-id to Disk.139router # [6241325.691142] router systemd-resolved[61]: Positive Trust Anchors:140router # [6241325.691153] router systemd-resolved[61]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d141router # [6241325.691156] router systemd-resolved[61]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16142router # [6241325.691191] router systemd-resolved[61]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test143router # [6241325.713177] router systemd-resolved[61]: Using system hostname 'router'.144router # [6241325.714550] router systemd[1]: Started Network Name Resolution.145router # [6241325.714678] router systemd[1]: Reached target Network.146router # [6241325.714799] router systemd[1]: Reached target System Initialization.147router # [6241325.714889] router systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container148router # [6241325.714939] router systemd[1]: Started Daily Cleanup of Temporary Directories.149router # [6241325.714981] router systemd[1]: Reached target Timer Units.150router # [6241325.715325] router systemd[1]: Listening on D-Bus System Message Bus Socket.151router # [6241325.715543] router systemd[1]: Listening on Nix Daemon Socket.152router # [6241325.715761] router systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.153router # [6241325.715836] router systemd[1]: Reached target Socket Units.154router # [6241325.715926] router systemd[1]: Reached target Basic System.155router # [6241325.717780] router systemd[1]: Starting Import lastlog data into lastlog2 database...156machine # [6241325.714095] machine systemd-logind[200]: New seat seat0.157machine # [6241325.714524] machine systemd[1]: Started User Login Management.158machine # [6241325.716194] machine systemd[1]: Starting D-Bus System Message Bus...159machine # [6241325.717456] machine systemd[1]: Starting linger-users.service...160machine # [6241325.779490] machine systemd[1]: linger-users.service: Deactivated successfully.161machine # [6241325.779778] machine systemd[1]: Finished linger-users.service.162machine # [6241325.850153] machine nginx-pre-start[323]: nginx: the configuration file /nix/store/f6bz7fb6kqyk1j719hra7mgz5f5dynlv-nginx.conf syntax is ok163machine # [6241325.850153] machine nginx-pre-start[323]: nginx: configuration file /nix/store/f6bz7fb6kqyk1j719hra7mgz5f5dynlv-nginx.conf test is successful164machine # [6241325.856402] machine systemd[1]: Started Nginx Web Server.165machine # [6241325.856698] machine systemd[1]: Reached target Multi-User System.166machine # [6241325.951892] machine dbus-broker-launch[319]: Looking up NSS user entry for 'systemd-timesync'...167machine # [6241325.953207] machine dbus-broker-launch[319]: NSS returned no entry for 'systemd-timesync'168machine # [6241325.953207] machine dbus-broker-launch[319]: Invalid user-name in /nix/store/6sxd1m5zq429m31qjhs79mw71n2yyln2-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"169machine # [6241325.953658] machine systemd[1]: Started D-Bus System Message Bus.170machine # [6241325.962508] machine dbus-broker-launch[319]: Ready171machine # [6241325.963159] machine systemd[1]: Startup finished in 1.214s.172machine # [6241326.081972] machine systemd[1]: etc-machine\x2did.mount: Deactivated successfully.173router # [6241325.719256] router systemd[1]: Starting Nginx Web Server...174router # [6241325.768588] router systemd[1]: Starting Name Service Cache Daemon (nsncd)...175router # [6241325.770947] router systemd[1]: Starting D-Bus System Message Bus...176router # [6241325.786050] router systemd[1]: Finished Import lastlog data into lastlog2 database.177router # [6241325.872158] router nsncd[84]: Aug 20 05:05:51.925 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"178router # [6241325.872167] router systemd[1]: Started Name Service Cache Daemon (nsncd).179router # [6241325.872263] router systemd[1]: Reached target Host and Network Name Lookups.180router # [6241325.872363] router systemd[1]: Reached target User and Group Name Lookups.181router # [6241325.896446] router systemd[1]: Starting User Login Management...182router # [6241325.897966] router systemd[1]: Starting Permit User Sessions...183router # [6241325.910227] router systemd[1]: Finished Permit User Sessions.184router # [6241325.911820] router systemd[1]: Started Console Getty.185router # [6241325.911896] router systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0186router # [6241325.911940] router systemd[1]: Reached target Login Prompts.187router # [6241325.945264] router dbus-broker-launch[88]: Looking up NSS user entry for 'systemd-timesync'...188router # [6241325.946498] router dbus-broker-launch[88]: NSS returned no entry for 'systemd-timesync'189router # [6241325.946498] router dbus-broker-launch[88]: Invalid user-name in /nix/store/i3vwn6i16yaczblcskv1irvqmw5k0pns-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"190router # [6241325.946954] router systemd[1]: Started D-Bus System Message Bus.191router # [6241325.954676] router dbus-broker-launch[88]: Ready192router # [6241326.091258] router systemd[1]: etc-machine\x2did.mount: Deactivated successfully.193router # [6241326.298796] router nginx-pre-start[114]: nginx: the configuration file /nix/store/qrsah5s67snpprkgwckqjvb52f8z9ciz-nginx.conf syntax is ok194router # [6241326.299400] router nginx-pre-start[114]: nginx: configuration file /nix/store/qrsah5s67snpprkgwckqjvb52f8z9ciz-nginx.conf test is successful195router # [6241326.304114] router systemd[1]: Started Nginx Web Server.196router # [6241326.313419] router systemd-logind[103]: New seat seat0.197router # [6241326.313642] router systemd[1]: Started User Login Management.198router: (finished: waiting for unit multi-user.target, in 2.15 seconds)199router: waiting for unit nginx.service200router: (finished: waiting for unit nginx.service, in 0.02 seconds)201machine: waiting for unit multi-user.target202machine: (finished: waiting for unit multi-user.target, in 0.02 seconds)203machine: waiting for unit nginx.service204machine: (finished: waiting for unit nginx.service, in 0.02 seconds)205router: must succeed: ip -4 addr show eth1 | grep -oP '(?<=inet\s)\d+(\.\d+){3}'206router: (finished: must succeed: ip -4 addr show eth1 | grep -oP '(?<=inet\s)\d+(\.\d+){3}', in 0.01 seconds)207router: must succeed: ip -6 addr show eth1 | grep -oP '(?<=inet6\s)[0-9a-f:]+' | grep -v '^fe80' | head -1208router: (finished: must succeed: ip -6 addr show eth1 | grep -oP '(?<=inet6\s)[0-9a-f:]+' | grep -v '^fe80' | head -1, in 0.01 seconds)209Router IPv4: 192.168.1.2210Router IPv6: 2001:db8:1::2211machine: must succeed: systemctl restart firewall212router # [6241326.353476] router systemd[1]: Starting linger-users.service...213router # [6241326.368168] router systemd[1]: linger-users.service: Deactivated successfully.214router # [6241326.368491] router systemd[1]: Finished linger-users.service.215router # [6241326.369296] router systemd[1]: Reached target Multi-User System.216router # [6241326.369583] router systemd[1]: Startup finished in 1.623s.217machine # [6241326.580533] machine systemd[1]: Stopping Firewall...218machine # [6241327.025400] machine systemd[1]: firewall.service: Deactivated successfully.219machine # [6241327.025653] machine systemd[1]: Stopped Firewall.220machine # [6241327.027198] machine systemd[1]: Starting Firewall...221router # [6241327.008211] router systemd-networkd[67]: eth1: Gained IPv6LL222machine: (finished: must succeed: systemctl restart firewall, in 1.42 seconds)223machine: waiting for unit firewall.service224machine: (finished: waiting for unit firewall.service, in 0.01 seconds)225machine: must succeed: iptables -L user-firewall-output >&2226Chain user-firewall-output (1 references)227target prot opt source destination 228RETURN all -- anywhere anywhere 229RETURN all -- anywhere anywhere 230RETURN all -- anywhere anywhere 231RETURN all -- anywhere anywhere 232RETURN all -- anywhere anywhere 233RETURN all -- anywhere anywhere 234RETURN all -- anywhere anywhere 235RETURN all -- anywhere anywhere 236RETURN all -- anywhere anywhere 237RETURN all -- anywhere anywhere 238RETURN all -- anywhere anywhere 239RETURN all -- anywhere anywhere 240RETURN all -- anywhere anywhere 241RETURN all -- anywhere anywhere 242RETURN all -- anywhere anywhere 243REJECT all -- anywhere anywhere owner UID match bob reject-with icmp-port-unreachable244RETURN all -- anywhere anywhere 245machine: (finished: must succeed: iptables -L user-firewall-output >&2, in 0.01 seconds)246machine: waiting for success: runuser -u alice -- curl -s http://127.0.0.1:8080247machine: (finished: waiting for success: runuser -u alice -- curl -s http://127.0.0.1:8080, in 0.02 seconds)248machine: must succeed: runuser -u alice -- curl -s http://192.168.1.2249machine: (finished: must succeed: runuser -u alice -- curl -s http://192.168.1.2, in 0.02 seconds)250machine: must succeed: runuser -u alice -- curl -s http://[2001:db8:1::2]251machine: (finished: must succeed: runuser -u alice -- curl -s http://[2001:db8:1::2], in 0.02 seconds)252machine: must succeed: runuser -u bob -- curl -s http://127.0.0.1:8080253machine: (finished: must succeed: runuser -u bob -- curl -s http://127.0.0.1:8080, in 0.02 seconds)254machine: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://192.168.1.2 2>&1 || echo 'EXIT_CODE='$?255machine: (finished: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://192.168.1.2 2>&1 || echo 'EXIT_CODE='$?, in 0.02 seconds)256machine: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://[2001:db8:1::2] 2>&1 || echo 'EXIT_CODE='$?257machine # [6241327.979618] machine systemd[1]: Finished Firewall.258machine # [6241328.013804] machine runuser[482]: pam_unix(runuser:session): session opened for user alice(uid=1001) by (uid=0)259machine # [6241328.024528] machine runuser[482]: pam_unix(runuser:session): session closed for user alice260machine # [6241328.034050] machine runuser[484]: pam_unix(runuser:session): session opened for user alice(uid=1001) by (uid=0)261machine # [6241328.045469] machine runuser[484]: pam_unix(runuser:session): session closed for user alice262machine # [6241328.055272] machine runuser[486]: pam_unix(runuser:session): session opened for user alice(uid=1001) by (uid=0)263machine # [6241328.065481] machine runuser[486]: pam_unix(runuser:session): session closed for user alice264machine # [6241328.073260] machine runuser[488]: pam_unix(runuser:session): session opened for user bob(uid=1002) by (uid=0)265machine # [6241328.083278] machine runuser[488]: pam_unix(runuser:session): session closed for user bob266machine # [6241328.093353] machine runuser[491]: pam_unix(runuser:session): session opened for user bob(uid=1002) by (uid=0)267machine # [6241328.103047] machine runuser[491]: pam_unix(runuser:session): session closed for user bob268machine # [6241328.112416] machine runuser[494]: pam_unix(runuser:session): session opened for user bob(uid=1002) by (uid=0)269machine: (finished: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://[2001:db8:1::2] 2>&1 || echo 'EXIT_CODE='$?, in 1.05 seconds)270machine: must succeed: iptables -L user-firewall-output -n -v271machine: (finished: must succeed: iptables -L user-firewall-output -n -v, in 0.01 seconds)272machine: must succeed: ip6tables -L user-firewall-output -n -v273machine: (finished: must succeed: ip6tables -L user-firewall-output -n -v, in 0.01 seconds)274machine: waiting for unit setup-wg0-interface.service275machine: (finished: waiting for unit setup-wg0-interface.service, in 0.02 seconds)276machine: waiting for unit nginx.service277machine: (finished: waiting for unit nginx.service, in 0.01 seconds)278machine: waiting for TCP port 8081 on 10.100.0.2279Connection to 10.100.0.2 8081 port [tcp/sunproxyadmin] succeeded!280machine: (finished: waiting for TCP port 8081 on 10.100.0.2, in 0.01 seconds)281machine: must succeed: ip link show wg0282machine: (finished: must succeed: ip link show wg0, in 0.01 seconds)283machine: must succeed: ip addr show wg0284machine: (finished: must succeed: ip addr show wg0, in 0.01 seconds)285machine: must succeed: runuser -u alice -- curl -s --interface wg0 http://10.100.0.2:8081/286machine: (finished: must succeed: runuser -u alice -- curl -s --interface wg0 http://10.100.0.2:8081/, in 0.02 seconds)287machine: must succeed: runuser -u alice -- curl -s --interface wg0 http://[fd00::2]:8081/288machine: (finished: must succeed: runuser -u alice -- curl -s --interface wg0 http://[fd00::2]:8081/, in 0.02 seconds)289machine: must succeed: runuser -u bob -- curl -s --interface wg0 http://10.100.0.2:8081/290machine: (finished: must succeed: runuser -u bob -- curl -s --interface wg0 http://10.100.0.2:8081/, in 0.02 seconds)291machine: must succeed: runuser -u bob -- curl -s --interface wg0 http://[fd00::2]:8081/292machine: (finished: must succeed: runuser -u bob -- curl -s --interface wg0 http://[fd00::2]:8081/, in 0.02 seconds)293machine: must succeed: iptables -L user-firewall-output -n -v | grep -E 'wg0|wg\+' >&2294 0 0 RETURN all -- * wg+ 0.0.0.0/0 0.0.0.0/0 295machine: (finished: must succeed: iptables -L user-firewall-output -n -v | grep -E 'wg0|wg\+' >&2, in 0.01 seconds)296(finished: run the VM test script, in 4.99 seconds)297machine # [6241329.154447] machine runuser[494]: pam_unix(runuser:session): session closed for user bob298machine # [6241329.237365] machine runuser[503]: pam_unix(runuser:session): session opened for user alice(uid=1001) by (uid=0)299machine # [6241329.246660] machine runuser[503]: pam_unix(runuser:session): session closed for user alice300machine # [6241329.256135] machine runuser[505]: pam_unix(runuser:session): session opened for user alice(uid=1001) by (uid=0)301machine # [6241329.266689] machine runuser[505]: pam_unix(runuser:session): session closed for user alice302machine # [6241329.276509] machine runuser[507]: pam_unix(runuser:session): session opened for user bob(uid=1002) by (uid=0)303machine # [6241329.287761] machine runuser[507]: pam_unix(runuser:session): session closed for user bob304machine # [6241329.296343] machine runuser[509]: pam_unix(runuser:session): session opened for user bob(uid=1002) by (uid=0)305machine # [6241329.306576] machine runuser[509]: pam_unix(runuser:session): session closed for user bob306test script finished in 5.16s307cleanup308kill NspawnMachine (pid 52)309kill NspawnMachine (pid 53)310Container machine terminated by signal KILL.311Container router terminated by signal KILL.312(finished: cleanup, in 0.38 seconds)