these 43 derivations will be built: /nix/store/gq4y4apnihanyqjwd4jbb5k26dkag1mn-system-path.drv /nix/store/73s710jhrl9alx1fkghkphfggcyh5qpp-user-generators.drv /nix/store/y8m3k26jb9msg27ylwskmfl6qsnsx2z9-tmpfiles.d.drv /nix/store/bi0cv004imhn9mlq885f8iyqsvfbi3jd-X-Restart-Triggers-systemd-tmpfiles-resetup.drv /nix/store/7x4mi3gddvq0bfdnmb8l3q824ikbxr5c-unit-systemd-tmpfiles-resetup.service.drv /nix/store/ar6m4dqxi57h6039a5d67s9cia9x5vzg-unit-nix-daemon.service.drv /nix/store/waggpma6jkik9i2lagk84qmd68zsfgid-dbus-1.drv /nix/store/jx482j8wlagnwfgwph885kphb5zk3i02-X-Restart-Triggers-dbus-broker.drv /nix/store/pznf4491q9192a8invxc95fsdgxqldvh-unit-dbus-broker.service.drv /nix/store/76f0jz58ijzrjr245h649ann5g71xnqx-system-units.drv /nix/store/ldf12jpgb6ccimn80bk8xkfil0nfqw0b-unit-dbus-broker.service.drv /nix/store/8pkl9kwbppwzl1mmhzz173l4svxdx318-user-units.drv /nix/store/8r8s1c0w9hkvn6apijqp55dbw84fsm9i-system-generators.drv /nix/store/c7vd4hp5lr9i3rk8mk2ap0lw26gss2b7-system-shutdown.drv /nix/store/kjizg2rx8x3na1jnxzkax8gfzhzwksb7-etc.drv /nix/store/w09gy8gzval51mclsdld6azv4f07n86h-activate.drv /nix/store/gqvcs8mgbwvnjv8c5cgbaq1y1gabjv2g-nixos-system-ca-test.drv /nix/store/0621mr84sfznn55xxjaqbh178i6lblsq-run-ca-nspawn.drv /nix/store/30dgcx7ngns309s9zwb1bym9z81minvl-system-path.drv /nix/store/y7zva3x9hij22x8qxzpgy2hnlg2424ml-dbus-1.drv /nix/store/b6fx8wml019jdpxvr3pj2q4prvbnv5j3-X-Restart-Triggers-dbus-broker.drv /nix/store/gs9a38v5m90717sj68ynx5x16a6jnxvv-unit-dbus-broker.service.drv /nix/store/cn10b8gph2h0bj1iw99sh9zi95fvq3cy-user-units.drv /nix/store/ppg2qrmb49q8rjyww6d0kxbf46cyx72l-unit-dbus-broker.service.drv /nix/store/fvypgfbpil8npnk9vqcdmpkm46qz4inm-system-units.drv /nix/store/vqkdxiyjg98czmgrczdkpxmmcp6qz3zd-etc.drv /nix/store/wsad1nizrd5f3drbn102rph55mx0xawl-activate.drv /nix/store/4jlghvs96p0jnlkn6h4qialscm4fclmp-nixos-system-client-test.drv /nix/store/4az0lvygmfw4bk6qrv10v14zpaghxnib-run-client-nspawn.drv /nix/store/ghcq9lqrgrnqlh5c76ap7sf5hc7llzjl-system-path.drv /nix/store/cf3qw56yjvv7h5bys067xfv6lib795pa-dbus-1.drv /nix/store/1lmha6fj3z5xay2h2msrzaavap4iham6-X-Restart-Triggers-dbus-broker.drv /nix/store/gig3s6lz6l69hwb5f61aw9x5maf612g5-unit-dbus-broker.service.drv /nix/store/w9n6bnxyfa8sscah5vd7mq1ylpgdp9lj-system-units.drv /nix/store/q2m4j8zsryxcwia7fynhkjj17rfqd89w-unit-dbus-broker.service.drv /nix/store/ykwdx0z9vp0rjaj4nx22bds4l1lyzai1-user-units.drv /nix/store/4xrwn3dwwd9j87gcjqsvpif2h734300h-etc.drv /nix/store/3ljka49ivv4s8zvaqaq2xalmybhmimg3-activate.drv /nix/store/w2aqn1r16v0jcfr1592k1s1mnlfrzag1-nixos-system-server-test.drv /nix/store/azy6ffl1apzhqzni5s3j0hcwrxj7zszd-run-server-nspawn.drv /nix/store/j5qkkasg2biy1nhnpr5f8v2dfw3q1rql-driverConfiguration.json.drv /nix/store/z9jjvrcp8pc8yhbpv0a3b9s6zmaf2b0n-nixos-test-driver-certificates.drv /nix/store/0c0kf9f2fih8kjlibq26im8p4yd4d1sd-container-test-run-certificates.drv building '/nix/store/30dgcx7ngns309s9zwb1bym9z81minvl-system-path.drv' building '/nix/store/ghcq9lqrgrnqlh5c76ap7sf5hc7llzjl-system-path.drv' building '/nix/store/gq4y4apnihanyqjwd4jbb5k26dkag1mn-system-path.drv' building '/nix/store/y8m3k26jb9msg27ylwskmfl6qsnsx2z9-tmpfiles.d.drv' building '/nix/store/ar6m4dqxi57h6039a5d67s9cia9x5vzg-unit-nix-daemon.service.drv' system-path> structuredAttrs is enabled system-path> created 1723 symlinks in user environment system-path> structuredAttrs is enabled system-path> structuredAttrs is enabled building '/nix/store/8r8s1c0w9hkvn6apijqp55dbw84fsm9i-system-generators.drv' building '/nix/store/c7vd4hp5lr9i3rk8mk2ap0lw26gss2b7-system-shutdown.drv' building '/nix/store/73s710jhrl9alx1fkghkphfggcyh5qpp-user-generators.drv' system-path> created 1723 symlinks in user environment system-path> created 1723 symlinks in user environment unit-nix-daemon.service> structuredAttrs is enabled building '/nix/store/bi0cv004imhn9mlq885f8iyqsvfbi3jd-X-Restart-Triggers-systemd-tmpfiles-resetup.drv' building '/nix/store/y7zva3x9hij22x8qxzpgy2hnlg2424ml-dbus-1.drv' building '/nix/store/cf3qw56yjvv7h5bys067xfv6lib795pa-dbus-1.drv' building '/nix/store/waggpma6jkik9i2lagk84qmd68zsfgid-dbus-1.drv' building '/nix/store/b6fx8wml019jdpxvr3pj2q4prvbnv5j3-X-Restart-Triggers-dbus-broker.drv' building '/nix/store/7x4mi3gddvq0bfdnmb8l3q824ikbxr5c-unit-systemd-tmpfiles-resetup.service.drv' building '/nix/store/1lmha6fj3z5xay2h2msrzaavap4iham6-X-Restart-Triggers-dbus-broker.drv' building '/nix/store/jx482j8wlagnwfgwph885kphb5zk3i02-X-Restart-Triggers-dbus-broker.drv' unit-systemd-tmpfiles-resetup.service> structuredAttrs is enabled building '/nix/store/gs9a38v5m90717sj68ynx5x16a6jnxvv-unit-dbus-broker.service.drv' building '/nix/store/ppg2qrmb49q8rjyww6d0kxbf46cyx72l-unit-dbus-broker.service.drv' unit-dbus-broker.service> structuredAttrs is enabled building '/nix/store/gig3s6lz6l69hwb5f61aw9x5maf612g5-unit-dbus-broker.service.drv' building '/nix/store/ldf12jpgb6ccimn80bk8xkfil0nfqw0b-unit-dbus-broker.service.drv' building '/nix/store/pznf4491q9192a8invxc95fsdgxqldvh-unit-dbus-broker.service.drv' building '/nix/store/q2m4j8zsryxcwia7fynhkjj17rfqd89w-unit-dbus-broker.service.drv' unit-dbus-broker.service> structuredAttrs is enabled unit-dbus-broker.service> structuredAttrs is enabled unit-dbus-broker.service> structuredAttrs is enabled unit-dbus-broker.service> structuredAttrs is enabled building '/nix/store/cn10b8gph2h0bj1iw99sh9zi95fvq3cy-user-units.drv' unit-dbus-broker.service> structuredAttrs is enabled building '/nix/store/76f0jz58ijzrjr245h649ann5g71xnqx-system-units.drv' building '/nix/store/fvypgfbpil8npnk9vqcdmpkm46qz4inm-system-units.drv' building '/nix/store/w9n6bnxyfa8sscah5vd7mq1ylpgdp9lj-system-units.drv' building '/nix/store/8pkl9kwbppwzl1mmhzz173l4svxdx318-user-units.drv' building '/nix/store/ykwdx0z9vp0rjaj4nx22bds4l1lyzai1-user-units.drv' building '/nix/store/kjizg2rx8x3na1jnxzkax8gfzhzwksb7-etc.drv' building '/nix/store/4xrwn3dwwd9j87gcjqsvpif2h734300h-etc.drv' building '/nix/store/vqkdxiyjg98czmgrczdkpxmmcp6qz3zd-etc.drv' building '/nix/store/w09gy8gzval51mclsdld6azv4f07n86h-activate.drv' building '/nix/store/3ljka49ivv4s8zvaqaq2xalmybhmimg3-activate.drv' building '/nix/store/gqvcs8mgbwvnjv8c5cgbaq1y1gabjv2g-nixos-system-ca-test.drv' building '/nix/store/wsad1nizrd5f3drbn102rph55mx0xawl-activate.drv' building '/nix/store/w2aqn1r16v0jcfr1592k1s1mnlfrzag1-nixos-system-server-test.drv' nixos-system-ca-test> structuredAttrs is enabled building '/nix/store/0621mr84sfznn55xxjaqbh178i6lblsq-run-ca-nspawn.drv' nixos-system-server-test> structuredAttrs is enabled building '/nix/store/4jlghvs96p0jnlkn6h4qialscm4fclmp-nixos-system-client-test.drv' building '/nix/store/azy6ffl1apzhqzni5s3j0hcwrxj7zszd-run-server-nspawn.drv' nixos-system-client-test> structuredAttrs is enabled building '/nix/store/4az0lvygmfw4bk6qrv10v14zpaghxnib-run-client-nspawn.drv' building '/nix/store/j5qkkasg2biy1nhnpr5f8v2dfw3q1rql-driverConfiguration.json.drv' driverConfiguration.json> structuredAttrs is enabled building '/nix/store/z9jjvrcp8pc8yhbpv0a3b9s6zmaf2b0n-nixos-test-driver-certificates.drv' nixos-test-driver-certificates> Running type check (enable/disable: config.skipTypeCheck) nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck nixos-test-driver-certificates> All checks passed! nixos-test-driver-certificates> Linting test script (enable/disable: config.skipLint) nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipLint nixos-test-driver-certificates> All checks passed! building '/nix/store/0c0kf9f2fih8kjlibq26im8p4yd4d1sd-container-test-run-certificates.drv' on 'ssh-ng://builder@build-x86-01.clan.lol' building '/nix/store/0c0kf9f2fih8kjlibq26im8p4yd4d1sd-container-test-run-certificates.drv' container-test-run-certificates> Machine state will be reset. To keep it, pass --keep-machine-state container-test-run-certificates> start all VLans container-test-run-certificates> (finished: start all VLans, in 0.00 seconds) container-test-run-certificates> container-test-run-certificates> Test will time out and terminate in 3600.0 seconds container-test-run-certificates> run the VM test script container-test-run-certificates> additionally exposed symbols: container-test-run-certificates> ca, client, server, container-test-run-certificates> vlan1, container-test-run-certificates> start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh container-test-run-certificates> start all VMs container-test-run-certificates> ca: systemd-nspawn running (pid 53) container-test-run-certificates> ca: Waiting for journal at /build/vm-state-ca/var/log/journal... container-test-run-certificates> client: systemd-nspawn running (pid 54) container-test-run-certificates> server: systemd-nspawn running (pid 55) container-test-run-certificates> client: Waiting for journal at /build/vm-state-client/var/log/journal... container-test-run-certificates> server: Waiting for journal at /build/vm-state-server/var/log/journal... container-test-run-certificates> (finished: start all VMs, in 0.00 seconds) container-test-run-certificates> nixos-nspawn(ca): TAP vde-tap1 not found; container will be isolated from VDE container-test-run-certificates> nixos-nspawn(ca): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths. container-test-run-certificates> nixos-nspawn(server): TAP vde-tap1 not found; container will be isolated from VDE container-test-run-certificates> nixos-nspawn(server): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths. container-test-run-certificates> nixos-nspawn(client): TAP vde-tap1 not found; container will be isolated from VDE container-test-run-certificates> nixos-nspawn(client): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths. container-test-run-certificates> Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file. container-test-run-certificates> Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file. container-test-run-certificates> Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file. container-test-run-certificates> ░ Spawning container server on /build/vm-state-server. container-test-run-certificates> ░ Spawning container ca on /build/vm-state-ca. container-test-run-certificates> ░ Spawning container client on /build/vm-state-client. container-test-run-certificates> ca # [7135447.979466] ca systemd-journald[78]: Journal started container-test-run-certificates> ca # [7135447.979496] ca systemd-journald[78]: Runtime Journal (/run/log/journal/985bf8c3bf0b444fa2ba24d44e2260da) is 8M, max 3.7G, 3.7G free. container-test-run-certificates> ca # [7135447.982871] ca systemd[1]: Finished Create Static Device Nodes in /dev gracefully. container-test-run-certificates> ca # [7135447.990080] ca systemd[1]: Starting Flush Journal to Persistent Storage... container-test-run-certificates> ca # [7135447.990458] ca systemd[1]: Starting Network Name Resolution... container-test-run-certificates> ca # [7135447.990781] ca systemd[1]: Starting Create Static Device Nodes in /dev... container-test-run-certificates> ca # [7135447.994985] ca systemd-journald[78]: Time spent on flushing to /var/log/journal/985bf8c3bf0b444fa2ba24d44e2260da is 1.220ms for 6 entries. container-test-run-certificates> ca # [7135447.994985] ca systemd-journald[78]: System Journal (/var/log/journal/985bf8c3bf0b444fa2ba24d44e2260da) is 8M, max 4G, 3.9G free. container-test-run-certificates> ca # [7135447.999214] ca systemd[1]: Finished Create Static Device Nodes in /dev. container-test-run-certificates> ca # [7135447.999563] ca systemd[1]: Reached target Preparation for Local File Systems. container-test-run-certificates> ca # [7135447.999619] ca systemd[1]: Reached target Local File Systems. container-test-run-certificates> ca # [7135448.000086] ca systemd[1]: Listening on Boot Loader Control Service Socket. container-test-run-certificates> ca # [7135448.000118] ca systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> ca # [7135448.000464] ca systemd[1]: Starting Save Transient machine-id to Disk... container-test-run-certificates> ca # [7135448.000479] ca systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys container-test-run-certificates> ca # [7135448.003658] ca systemd[1]: Finished Flush Journal to Persistent Storage. container-test-run-certificates> ca # [7135448.004455] ca systemd[1]: Starting Create System Files and Directories... container-test-run-certificates> ca # [7135448.015136] ca systemd-tmpfiles[128]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted container-test-run-certificates> ca # [7135448.015292] ca systemd-tmpfiles[128]: fchmod() of /var/log/journal failed: Operation not permitted container-test-run-certificates> ca # [7135448.015399] ca systemd-tmpfiles[128]: fchmod() of /var/log/journal/985bf8c3bf0b444fa2ba24d44e2260da failed: Operation not permitted container-test-run-certificates> ca # [7135448.015557] ca systemd-tmpfiles[128]: fchmod() of /run/log/journal failed: Operation not permitted container-test-run-certificates> ca # [7135448.016413] ca systemd[1]: Finished Create System Files and Directories. container-test-run-certificates> ca # [7135448.017160] ca systemd[1]: Starting Rebuild Journal Catalog... container-test-run-certificates> ca # [7135448.017906] ca systemd[1]: Starting Record System Boot/Shutdown in UTMP... container-test-run-certificates> ca # [7135448.018988] ca systemd[1]: Finished Save Transient machine-id to Disk. container-test-run-certificates> ca # [7135448.026742] ca systemd[1]: Finished Record System Boot/Shutdown in UTMP. container-test-run-certificates> ca # [7135448.033057] ca systemd[1]: Finished Rebuild Journal Catalog. container-test-run-certificates> ca # [7135448.034130] ca systemd[1]: Starting Update is Completed... container-test-run-certificates> ca # [7135448.040944] ca systemd[1]: Finished Update is Completed. container-test-run-certificates> ca # [7135448.076157] ca systemd[1]: Finished Firewall. container-test-run-certificates> ca # [7135448.076254] ca systemd[1]: Reached target Preparation for Network. container-test-run-certificates> ca # [7135448.076423] ca systemd[1]: Listening on Network Management Resolve Hook Socket. container-test-run-certificates> ca # [7135448.077021] ca systemd[1]: Starting Network Management... container-test-run-certificates> ca # [7135448.383675] ca systemd-networkd[196]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted container-test-run-certificates> ca # [7135448.383745] ca systemd-networkd[196]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted container-test-run-certificates> ca # [7135448.388969] ca systemd-networkd[196]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> ca # [7135448.389121] ca systemd-networkd[196]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> ca # [7135448.389183] ca systemd-networkd[196]: lo: Link UP container-test-run-certificates> ca # [7135448.389187] ca systemd-networkd[196]: lo: Gained carrier container-test-run-certificates> ca # [7135448.389297] ca systemd-networkd[196]: eth1: Configuring with /etc/systemd/network/40-eth1.network. container-test-run-certificates> ca # [7135448.389516] ca systemd[1]: Started Network Management. container-test-run-certificates> ca # [7135448.389558] ca systemd-networkd[196]: eth1: Link UP container-test-run-certificates> ca # [7135448.389672] ca systemd-networkd[196]: eth1: Gained carrier container-test-run-certificates> ca # [7135448.390058] ca systemd[1]: Starting Enable Persistent Storage in systemd-networkd... container-test-run-certificates> ca # [7135448.413962] ca systemd[1]: Finished Enable Persistent Storage in systemd-networkd. container-test-run-certificates> client # [7135447.969469] client systemd-journald[69]: Journal started container-test-run-certificates> client # [7135447.969503] client systemd-journald[69]: Runtime Journal (/run/log/journal/dd16dd14a59a45398cc8e419a7be6afe) is 8M, max 3.7G, 3.7G free. container-test-run-certificates> client # [7135447.973393] client systemd[1]: Finished Create Static Device Nodes in /dev gracefully. container-test-run-certificates> client # [7135447.978176] client systemd[1]: Starting Flush Journal to Persistent Storage... container-test-run-certificates> client # [7135447.978558] client systemd[1]: Starting Network Name Resolution... container-test-run-certificates> client # [7135447.978956] client systemd[1]: Starting Create Static Device Nodes in /dev... container-test-run-certificates> client # [7135447.983645] client systemd-journald[69]: Time spent on flushing to /var/log/journal/dd16dd14a59a45398cc8e419a7be6afe is 1.180ms for 6 entries. container-test-run-certificates> client # [7135447.983645] client systemd-journald[69]: System Journal (/var/log/journal/dd16dd14a59a45398cc8e419a7be6afe) is 8M, max 4G, 3.9G free. container-test-run-certificates> client # [7135447.989452] client systemd[1]: Finished Create Static Device Nodes in /dev. container-test-run-certificates> client # [7135447.989677] client systemd[1]: Reached target Preparation for Local File Systems. container-test-run-certificates> client # [7135447.989742] client systemd[1]: Reached target Local File Systems. container-test-run-certificates> client # [7135447.990429] client systemd[1]: Listening on Boot Loader Control Service Socket. container-test-run-certificates> client # [7135447.990467] client systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> client # [7135447.991090] client systemd[1]: Starting Save Transient machine-id to Disk... container-test-run-certificates> client # [7135447.991115] client systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys container-test-run-certificates> client # [7135447.991435] client systemd[1]: Finished Flush Journal to Persistent Storage. container-test-run-certificates> client # [7135447.992545] client systemd[1]: Starting Create System Files and Directories... container-test-run-certificates> client # [7135448.007088] client systemd-tmpfiles[113]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted container-test-run-certificates> client # [7135448.007282] client systemd-tmpfiles[113]: fchmod() of /var/log/journal failed: Operation not permitted container-test-run-certificates> client # [7135448.007403] client systemd-tmpfiles[113]: fchmod() of /var/log/journal/dd16dd14a59a45398cc8e419a7be6afe failed: Operation not permitted container-test-run-certificates> client # [7135448.007596] client systemd-tmpfiles[113]: fchmod() of /run/log/journal failed: Operation not permitted container-test-run-certificates> client # [7135448.009084] client systemd[1]: Finished Create System Files and Directories. container-test-run-certificates> client # [7135448.010062] client systemd[1]: Starting Rebuild Journal Catalog... container-test-run-certificates> client # [7135448.010515] client systemd[1]: Starting Record System Boot/Shutdown in UTMP... container-test-run-certificates> client # [7135448.017956] client systemd[1]: Finished Record System Boot/Shutdown in UTMP. container-test-run-certificates> client # [7135448.018557] client systemd[1]: Finished Save Transient machine-id to Disk. container-test-run-certificates> server # [7135447.977257] server systemd-journald[69]: Journal started container-test-run-certificates> client # [7135448.023409] client systemd[1]: Finished Rebuild Journal Catalog. container-test-run-certificates> server # [7135447.977291] server systemd-journald[69]: Runtime Journal (/run/log/journal/18ee3602345f4200ace5854af7e63010) is 8M, max 3.7G, 3.7G free. container-test-run-certificates> client # [7135448.025564] client systemd[1]: Starting Update is Completed... container-test-run-certificates> server # [7135447.983090] server systemd[1]: Finished Create Static Device Nodes in /dev gracefully. container-test-run-certificates> client # [7135448.032476] client systemd[1]: Finished Update is Completed. container-test-run-certificates> server # [7135447.990898] server systemd[1]: Starting Flush Journal to Persistent Storage... container-test-run-certificates> client # [7135448.066954] client systemd[1]: Finished Firewall. container-test-run-certificates> server # [7135447.991325] server systemd[1]: Starting Network Name Resolution... container-test-run-certificates> client # [7135448.067399] client systemd[1]: Reached target Preparation for Network. container-test-run-certificates> server # [7135447.991665] server systemd[1]: Starting Create Static Device Nodes in /dev... container-test-run-certificates> client # [7135448.067607] client systemd[1]: Listening on Network Management Resolve Hook Socket. container-test-run-certificates> server # [7135447.998419] server systemd-journald[69]: Time spent on flushing to /var/log/journal/18ee3602345f4200ace5854af7e63010 is 1.317ms for 6 entries. container-test-run-certificates> client # [7135448.068294] client systemd[1]: Starting Network Management... container-test-run-certificates> server # [7135447.998419] server systemd-journald[69]: System Journal (/var/log/journal/18ee3602345f4200ace5854af7e63010) is 8M, max 4G, 3.9G free. container-test-run-certificates> client # [7135448.368698] client systemd-networkd[183]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted container-test-run-certificates> server # [7135448.005273] server systemd[1]: Finished Create Static Device Nodes in /dev. container-test-run-certificates> client # [7135448.368777] client systemd-networkd[183]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted container-test-run-certificates> server # [7135448.005959] server systemd[1]: Reached target Preparation for Local File Systems. container-test-run-certificates> client # [7135448.374110] client systemd-networkd[183]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> server # [7135448.006046] server systemd[1]: Reached target Local File Systems. container-test-run-certificates> client # [7135448.374254] client systemd-networkd[183]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> server # [7135448.006549] server systemd[1]: Listening on Boot Loader Control Service Socket. container-test-run-certificates> client # [7135448.374326] client systemd-networkd[183]: lo: Link UP container-test-run-certificates> server # [7135448.006580] server systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> client # [7135448.374328] client systemd-networkd[183]: lo: Gained carrier container-test-run-certificates> server # [7135448.007060] server systemd[1]: Starting Save Transient machine-id to Disk... container-test-run-certificates> client # [7135448.374468] client systemd-networkd[183]: eth1: Configuring with /etc/systemd/network/40-eth1.network. container-test-run-certificates> server # [7135448.007079] server systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys container-test-run-certificates> server # [7135448.009786] server systemd[1]: Finished Flush Journal to Persistent Storage. container-test-run-certificates> server # [7135448.010361] server systemd[1]: Starting Create System Files and Directories... container-test-run-certificates> client # [7135448.374738] client systemd[1]: Started Network Management. container-test-run-certificates> server # [7135448.019492] server systemd[1]: Finished Save Transient machine-id to Disk. container-test-run-certificates> client # [7135448.377140] client systemd-networkd[183]: eth1: Link UP container-test-run-certificates> server # [7135448.023058] server systemd-tmpfiles[124]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted container-test-run-certificates> client # [7135448.377316] client systemd-networkd[183]: eth1: Gained carrier container-test-run-certificates> server # [7135448.023230] server systemd-tmpfiles[124]: fchmod() of /var/log/journal failed: Operation not permitted container-test-run-certificates> client # [7135448.378124] client systemd[1]: Starting Enable Persistent Storage in systemd-networkd... container-test-run-certificates> server # [7135448.023332] server systemd-tmpfiles[124]: fchmod() of /var/log/journal/18ee3602345f4200ace5854af7e63010 failed: Operation not permitted container-test-run-certificates> client # [7135448.396924] client systemd[1]: Finished Enable Persistent Storage in systemd-networkd. container-test-run-certificates> server # [7135448.023489] server systemd-tmpfiles[124]: fchmod() of /run/log/journal failed: Operation not permitted container-test-run-certificates> server # [7135448.027978] server systemd[1]: Finished Create System Files and Directories. container-test-run-certificates> server # [7135448.028656] server systemd[1]: Starting Rebuild Journal Catalog... container-test-run-certificates> server # [7135448.028981] server systemd[1]: Starting Record System Boot/Shutdown in UTMP... container-test-run-certificates> server # [7135448.034890] server systemd[1]: Finished Record System Boot/Shutdown in UTMP. container-test-run-certificates> server # [7135448.040827] server systemd[1]: Finished Rebuild Journal Catalog. container-test-run-certificates> server # [7135448.041302] server systemd[1]: Starting Update is Completed... container-test-run-certificates> server # [7135448.046577] server systemd[1]: Finished Update is Completed. container-test-run-certificates> server # [7135448.077416] server systemd[1]: Finished Firewall. container-test-run-certificates> server # [7135448.077514] server systemd[1]: Reached target Preparation for Network. container-test-run-certificates> server # [7135448.077648] server systemd[1]: Listening on Network Management Resolve Hook Socket. container-test-run-certificates> server # [7135448.078156] server systemd[1]: Starting Network Management... container-test-run-certificates> server # [7135448.381926] server systemd-networkd[187]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted container-test-run-certificates> server # [7135448.381991] server systemd-networkd[187]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted container-test-run-certificates> server # [7135448.387303] server systemd-networkd[187]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> server # [7135448.387447] server systemd-networkd[187]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> server # [7135448.387506] server systemd-networkd[187]: lo: Link UP container-test-run-certificates> server # [7135448.387509] server systemd-networkd[187]: lo: Gained carrier container-test-run-certificates> server # [7135448.387628] server systemd-networkd[187]: eth1: Configuring with /etc/systemd/network/40-eth1.network. container-test-run-certificates> server # [7135448.387861] server systemd[1]: Started Network Management. container-test-run-certificates> server # [7135448.387882] server systemd-networkd[187]: eth1: Link UP container-test-run-certificates> server # [7135448.387999] server systemd-networkd[187]: eth1: Gained carrier container-test-run-certificates> server # [7135448.388425] server systemd[1]: Starting Enable Persistent Storage in systemd-networkd... container-test-run-certificates> server # [7135448.414928] server systemd[1]: Finished Enable Persistent Storage in systemd-networkd. container-test-run-certificates> server # [7135448.542753] server systemd-resolved[100]: Positive Trust Anchors: container-test-run-certificates> server # [7135448.542759] server systemd-resolved[100]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d container-test-run-certificates> server # [7135448.542763] server systemd-resolved[100]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 container-test-run-certificates> server # [7135448.542781] server systemd-resolved[100]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test container-test-run-certificates> server # [7135448.553192] server systemd-resolved[100]: Using system hostname 'server'. container-test-run-certificates> server # [7135448.554035] server systemd[1]: Started Network Name Resolution. container-test-run-certificates> server # [7135448.554074] server systemd[1]: Reached target Network. container-test-run-certificates> server # [7135448.554102] server systemd[1]: Reached target Network is Online. container-test-run-certificates> server # [7135448.554127] server systemd[1]: Reached target System Initialization. container-test-run-certificates> server # [7135448.554256] server systemd[1]: Started Renew ACME Certificate for test.foo. container-test-run-certificates> server # [7135448.554276] server systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> server # [7135448.554288] server systemd[1]: Started Daily Cleanup of Temporary Directories. container-test-run-certificates> server # [7135448.554298] server systemd[1]: Reached target Timer Units. container-test-run-certificates> server # [7135448.554364] server systemd[1]: Listening on D-Bus System Message Bus Socket. container-test-run-certificates> server # [7135448.554425] server systemd[1]: Listening on Nix Daemon Socket. container-test-run-certificates> server # [7135448.554490] server systemd[1]: Listening on Virtual Machine and Container Registration Service Socket. container-test-run-certificates> server # [7135448.554501] server systemd[1]: Reached target Socket Units. container-test-run-certificates> server # [7135448.554520] server systemd[1]: Reached target Basic System. container-test-run-certificates> server # [7135448.555171] server systemd[1]: Starting Set up the ACME certificate renewal infrastructure... container-test-run-certificates> server # [7135448.555504] server systemd[1]: Starting Import lastlog data into lastlog2 database... container-test-run-certificates> server # [7135448.555520] server systemd[1]: nginx-config-reload.service skipped, unmet condition check ConditionPathExists=/var/lib/acme/test.foo/fullchain.pem container-test-run-certificates> server # [7135448.555906] server systemd[1]: Starting Name Service Cache Daemon (nsncd)... container-test-run-certificates> server # [7135448.556544] server systemd[1]: Starting D-Bus System Message Bus... container-test-run-certificates> server # [7135448.592193] server systemd[1]: Finished Import lastlog data into lastlog2 database. container-test-run-certificates> server # [7135448.647862] server acme-setup-privileged[192]: + set -euo pipefail container-test-run-certificates> server # [7135448.647862] server acme-setup-privileged[192]: + cd /var/lib/acme container-test-run-certificates> server # [7135448.647862] server acme-setup-privileged[192]: + chmod -R u=rwX,g=,o= .lego/accounts container-test-run-certificates> ca # [7135448.554723] ca systemd-resolved[109]: Positive Trust Anchors: container-test-run-certificates> ca # [7135448.554729] ca systemd-resolved[109]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d container-test-run-certificates> ca # [7135448.554733] ca systemd-resolved[109]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 container-test-run-certificates> ca # [7135448.554749] ca systemd-resolved[109]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test container-test-run-certificates> ca # [7135448.566019] ca systemd-resolved[109]: Using system hostname 'ca'. container-test-run-certificates> ca # [7135448.566919] ca systemd[1]: Started Network Name Resolution. container-test-run-certificates> ca # [7135448.566970] ca systemd[1]: Reached target Network. container-test-run-certificates> ca # [7135448.566998] ca systemd[1]: Reached target Network is Online. container-test-run-certificates> ca # [7135448.567033] ca systemd[1]: Reached target System Initialization. container-test-run-certificates> ca # [7135448.567178] ca systemd[1]: Started Renew ACME Certificate for ca.foo. container-test-run-certificates> ca # [7135448.567195] ca systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> ca # [7135448.567207] ca systemd[1]: Started Daily Cleanup of Temporary Directories. container-test-run-certificates> ca # [7135448.567219] ca systemd[1]: Reached target Timer Units. container-test-run-certificates> ca # [7135448.567283] ca systemd[1]: Listening on D-Bus System Message Bus Socket. container-test-run-certificates> ca # [7135448.567341] ca systemd[1]: Listening on Nix Daemon Socket. container-test-run-certificates> ca # [7135448.567410] ca systemd[1]: Listening on Virtual Machine and Container Registration Service Socket. container-test-run-certificates> ca # [7135448.567421] ca systemd[1]: Reached target Socket Units. container-test-run-certificates> ca # [7135448.567441] ca systemd[1]: Reached target Basic System. container-test-run-certificates> ca # [7135448.584349] ca systemd[1]: Starting Set up the ACME certificate renewal infrastructure... container-test-run-certificates> ca # [7135448.584847] ca systemd[1]: Starting Import lastlog data into lastlog2 database... container-test-run-certificates> ca # [7135448.584873] ca systemd[1]: nginx-config-reload.service skipped, unmet condition check ConditionPathExists=/var/lib/acme/ca.foo/fullchain.pem container-test-run-certificates> ca # [7135448.585287] ca systemd[1]: Starting Name Service Cache Daemon (nsncd)... container-test-run-certificates> ca # [7135448.586118] ca systemd[1]: Starting step-ca service... container-test-run-certificates> ca # [7135448.586801] ca systemd[1]: Starting D-Bus System Message Bus... container-test-run-certificates> ca # [7135448.596673] ca systemd[1]: Finished Import lastlog data into lastlog2 database. container-test-run-certificates> ca # [7135448.660843] ca acme-setup-privileged[201]: + set -euo pipefail container-test-run-certificates> ca # [7135448.660843] ca acme-setup-privileged[201]: + cd /var/lib/acme container-test-run-certificates> ca # [7135448.660843] ca acme-setup-privileged[201]: + chmod -R u=rwX,g=,o= .lego/accounts container-test-run-certificates> client # [7135448.551335] client systemd-resolved[93]: Positive Trust Anchors: container-test-run-certificates> client # [7135448.551345] client systemd-resolved[93]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d container-test-run-certificates> client # [7135448.551347] client systemd-resolved[93]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 container-test-run-certificates> client # [7135448.551365] client systemd-resolved[93]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test container-test-run-certificates> client # [7135448.565569] client systemd-resolved[93]: Using system hostname 'client'. container-test-run-certificates> client # [7135448.566656] client systemd[1]: Started Network Name Resolution. container-test-run-certificates> client # [7135448.566713] client systemd[1]: Reached target Network. container-test-run-certificates> client # [7135448.566752] client systemd[1]: Reached target System Initialization. container-test-run-certificates> client # [7135448.566785] client systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> client # [7135448.566800] client systemd[1]: Started Daily Cleanup of Temporary Directories. container-test-run-certificates> client # [7135448.566810] client systemd[1]: Reached target Timer Units. container-test-run-certificates> client # [7135448.566903] client systemd[1]: Listening on D-Bus System Message Bus Socket. container-test-run-certificates> client # [7135448.566993] client systemd[1]: Listening on Nix Daemon Socket. container-test-run-certificates> client # [7135448.567106] client systemd[1]: Listening on Virtual Machine and Container Registration Service Socket. container-test-run-certificates> client # [7135448.567126] client systemd[1]: Reached target Socket Units. container-test-run-certificates> client # [7135448.567156] client systemd[1]: Reached target Basic System. container-test-run-certificates> client # [7135448.584278] client systemd[1]: Starting Import lastlog data into lastlog2 database... container-test-run-certificates> client # [7135448.585007] client systemd[1]: Starting Name Service Cache Daemon (nsncd)... container-test-run-certificates> client # [7135448.585633] client systemd[1]: Starting D-Bus System Message Bus... container-test-run-certificates> client # [7135448.593802] client systemd[1]: Finished Import lastlog data into lastlog2 database. container-test-run-certificates> client # [7135448.673325] client nsncd[189]: Aug 22 00:05:06.038 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket" container-test-run-certificates> client # [7135448.673410] client systemd[1]: Started Name Service Cache Daemon (nsncd). container-test-run-certificates> client # [7135448.673468] client systemd[1]: Reached target Host and Network Name Lookups. container-test-run-certificates> client # [7135448.673516] client systemd[1]: Reached target User and Group Name Lookups. container-test-run-certificates> server # [7135448.648628] server acme-setup-privileged[192]: + chown -R acme .lego/accounts container-test-run-certificates> server # [7135448.650017] server acme-setup-privileged[192]: + for fixpath in test.foo .lego/test.foo container-test-run-certificates> server # [7135448.650051] server acme-setup-privileged[192]: + '[' -d test.foo ']' container-test-run-certificates> server # [7135448.650051] server acme-setup-privileged[192]: + for fixpath in test.foo .lego/test.foo container-test-run-certificates> server # [7135448.650051] server acme-setup-privileged[192]: + '[' -d .lego/test.foo ']' container-test-run-certificates> server # [7135448.663378] server nsncd[194]: Aug 22 00:05:06.029 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket" container-test-run-certificates> server # [7135448.663472] server systemd[1]: Started Name Service Cache Daemon (nsncd). container-test-run-certificates> server # [7135448.663527] server systemd[1]: Reached target Host and Network Name Lookups. container-test-run-certificates> server # [7135448.663757] server systemd[1]: Reached target User and Group Name Lookups. container-test-run-certificates> server # [7135448.676517] server systemd[1]: Starting User Login Management... container-test-run-certificates> server # [7135448.677063] server systemd[1]: Starting Permit User Sessions... container-test-run-certificates> server # [7135448.681811] server systemd[1]: Finished Permit User Sessions. container-test-run-certificates> server # [7135448.682355] server systemd[1]: Started Console Getty. container-test-run-certificates> server # [7135448.682377] server systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0 container-test-run-certificates> server # [7135448.682387] server systemd[1]: Reached target Login Prompts. container-test-run-certificates> server # [7135448.744831] server dbus-broker-launch[195]: Looking up NSS user entry for 'systemd-timesync'... container-test-run-certificates> server # [7135448.745234] server dbus-broker-launch[195]: NSS returned no entry for 'systemd-timesync' container-test-run-certificates> server # [7135448.745234] server dbus-broker-launch[195]: Invalid user-name in /nix/store/s27w242hs9z1hj38qmfv4wi81w7n2l2z-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync" container-test-run-certificates> server # [7135448.745479] server systemd[1]: Started D-Bus System Message Bus. container-test-run-certificates> server # [7135448.748797] server dbus-broker-launch[195]: Ready container-test-run-certificates> client # [7135448.676616] client systemd[1]: Starting User Login Management... container-test-run-certificates> client # [7135448.677044] client systemd[1]: Starting Permit User Sessions... container-test-run-certificates> client # [7135448.681828] client systemd[1]: Finished Permit User Sessions. container-test-run-certificates> client # [7135448.682349] client systemd[1]: Started Console Getty. container-test-run-certificates> client # [7135448.682369] client systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0 container-test-run-certificates> client # [7135448.682379] client systemd[1]: Reached target Login Prompts. container-test-run-certificates> client # [7135448.764160] client dbus-broker-launch[190]: Looking up NSS user entry for 'systemd-timesync'... container-test-run-certificates> client # [7135448.764519] client dbus-broker-launch[190]: NSS returned no entry for 'systemd-timesync' container-test-run-certificates> client # [7135448.764519] client dbus-broker-launch[190]: Invalid user-name in /nix/store/0p3a4ggxl5y5cf6339ffi3wc26bgzwg3-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync" container-test-run-certificates> client # [7135448.764749] client systemd[1]: Started D-Bus System Message Bus. container-test-run-certificates> client # [7135448.768504] client dbus-broker-launch[190]: Ready container-test-run-certificates> ca # [7135448.662027] ca acme-setup-privileged[201]: + chown -R acme .lego/accounts container-test-run-certificates> ca # [7135448.663008] ca acme-setup-privileged[201]: + for fixpath in ca.foo .lego/ca.foo container-test-run-certificates> ca # [7135448.663045] ca acme-setup-privileged[201]: + '[' -d ca.foo ']' container-test-run-certificates> ca # [7135448.663045] ca acme-setup-privileged[201]: + for fixpath in ca.foo .lego/ca.foo container-test-run-certificates> ca # [7135448.663045] ca acme-setup-privileged[201]: + '[' -d .lego/ca.foo ']' container-test-run-certificates> ca # [7135448.667787] ca nsncd[203]: Aug 22 00:05:06.033 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket" container-test-run-certificates> ca # [7135448.676833] ca systemd[1]: Started Name Service Cache Daemon (nsncd). container-test-run-certificates> ca # [7135448.676924] ca systemd[1]: Reached target Host and Network Name Lookups. container-test-run-certificates> ca # [7135448.676961] ca systemd[1]: Reached target User and Group Name Lookups. container-test-run-certificates> ca # [7135448.677583] ca systemd[1]: Starting User Login Management... container-test-run-certificates> ca # [7135448.677921] ca systemd[1]: Starting Permit User Sessions... container-test-run-certificates> ca # [7135448.684339] ca systemd[1]: Finished Permit User Sessions. container-test-run-certificates> ca # [7135448.685051] ca systemd[1]: Started Console Getty. container-test-run-certificates> ca # [7135448.685084] ca systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0 container-test-run-certificates> ca # [7135448.685100] ca systemd[1]: Reached target Login Prompts. container-test-run-certificates> ca # [7135448.759344] ca dbus-broker-launch[205]: Looking up NSS user entry for 'systemd-timesync'... container-test-run-certificates> ca # [7135448.759647] ca dbus-broker-launch[205]: NSS returned no entry for 'systemd-timesync' container-test-run-certificates> ca # [7135448.759647] ca dbus-broker-launch[205]: Invalid user-name in /nix/store/wy9bgq3n8vq6g5xd6f86m5hvmsz1r4fk-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync" container-test-run-certificates> ca # [7135448.759880] ca systemd[1]: Started D-Bus System Message Bus. container-test-run-certificates> ca # [7135448.763175] ca dbus-broker-launch[205]: Ready container-test-run-certificates> ca # [7135448.968083] ca systemd[1]: etc-machine\x2did.mount: Deactivated successfully. container-test-run-certificates> server # [7135448.970402] server systemd[1]: etc-machine\x2did.mount: Deactivated successfully. container-test-run-certificates> client # [7135448.962783] client systemd[1]: etc-machine\x2did.mount: Deactivated successfully. container-test-run-certificates> ca # [7135449.041896] ca systemd-logind[230]: New seat seat0. container-test-run-certificates> client # [7135449.009198] client systemd-logind[205]: New seat seat0. container-test-run-certificates> server # [7135449.031883] server systemd-logind[220]: New seat seat0. container-test-run-certificates> client # [7135449.009302] client systemd[1]: Started User Login Management. container-test-run-certificates> ca # [7135449.042040] ca systemd[1]: Started User Login Management. container-test-run-certificates> client # [7135449.010140] client systemd[1]: Starting linger-users.service... container-test-run-certificates> server # [7135449.031973] server systemd[1]: Started User Login Management. container-test-run-certificates> ca # [7135449.042885] ca systemd[1]: Starting linger-users.service... container-test-run-certificates> client # [7135449.033865] client systemd[1]: linger-users.service: Deactivated successfully. container-test-run-certificates> server # [7135449.032646] server systemd[1]: Starting linger-users.service... container-test-run-certificates> ca # [7135449.049778] ca systemd[1]: linger-users.service: Deactivated successfully. container-test-run-certificates> client # [7135449.033961] client systemd[1]: Finished linger-users.service. container-test-run-certificates> server # [7135449.039541] server systemd[1]: linger-users.service: Deactivated successfully. container-test-run-certificates> ca # [7135449.049893] ca systemd[1]: Finished linger-users.service. container-test-run-certificates> client # [7135449.034194] client systemd[1]: Reached target Multi-User System. container-test-run-certificates> server # [7135449.039593] server systemd[1]: Finished linger-users.service. container-test-run-certificates> client # [7135449.034285] client systemd[1]: Startup finished in 1.335s. container-test-run-certificates> ca # [7135449.061909] ca acme-setup-start[219]: + set -euo pipefail container-test-run-certificates> server # [7135449.058383] server acme-setup-start[208]: + set -euo pipefail container-test-run-certificates> ca # [7135449.061909] ca acme-setup-start[219]: + test -e ca/key.pem container-test-run-certificates> server # [7135449.058383] server acme-setup-start[208]: + test -e ca/key.pem container-test-run-certificates> ca # [7135449.062257] ca acme-setup-start[219]: + minica --ca-key ca/key.pem --ca-cert ca/cert.pem --domains selfsigned.local container-test-run-certificates> server # [7135449.058562] server acme-setup-start[208]: + minica --ca-key ca/key.pem --ca-cert ca/cert.pem --domains selfsigned.local container-test-run-certificates> ca # [7135449.068781] ca systemd[1]: Finished Set up the ACME certificate renewal infrastructure. container-test-run-certificates> server # [7135449.065188] server systemd[1]: Finished Set up the ACME certificate renewal infrastructure. container-test-run-certificates> ca # [7135449.088400] ca systemd[1]: Starting Ensure certificate for ca.foo... container-test-run-certificates> server # [7135449.066106] server systemd[1]: Starting Ensure certificate for test.foo... container-test-run-certificates> ca # [7135449.164432] ca step-ca[204]: badger 2026/08/22 00:05:06 INFO: All 0 tables opened in 0s container-test-run-certificates> ca # [7135449.166275] ca step-ca[204]: 2026/08/22 00:05:06 Building new tls configuration using step-ca x509 Signer Interface container-test-run-certificates> ca # [7135449.168563] ca step-ca[204]: 2026/08/22 00:05:06 Starting Smallstep CA/0.30.2 (linux/amd64) container-test-run-certificates> ca # [7135449.168563] ca step-ca[204]: 2026/08/22 00:05:06 Documentation: https://u.step.sm/docs/ca container-test-run-certificates> ca # [7135449.168563] ca step-ca[204]: 2026/08/22 00:05:06 Community Discord: https://u.step.sm/discord container-test-run-certificates> ca # [7135449.168563] ca step-ca[204]: 2026/08/22 00:05:06 Config file: /etc/smallstep/ca.json container-test-run-certificates> ca # [7135449.168563] ca step-ca[204]: 2026/08/22 00:05:06 The primary server URL is https://ca.foo:1443 container-test-run-certificates> ca # [7135449.168650] ca step-ca[204]: 2026/08/22 00:05:06 Root certificates are available at https://ca.foo:1443/roots.pem container-test-run-certificates> ca # [7135449.168650] ca step-ca[204]: 2026/08/22 00:05:06 X.509 Root Fingerprint: 8f791a8e9aa3e1383375820291f03d0c59adbdb0533fafb596c3a49a5860a708 container-test-run-certificates> ca # [7135449.168769] ca systemd[1]: Started step-ca service. container-test-run-certificates> ca # [7135449.168816] ca step-ca[204]: 2026/08/22 00:05:06 Serving HTTPS on 0.0.0.0:1443 ... container-test-run-certificates> ca # [7135449.443865] ca acme-ca.foo-start[256]: Waiting to acquire lock in /run/acme/ container-test-run-certificates> ca # [7135449.445694] ca acme-ca.foo-start[256]: + '[' -e out/acme-success ']' container-test-run-certificates> ca # [7135449.445694] ca acme-ca.foo-start[256]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=ca.foo --ip-addresses= container-test-run-certificates> ca # [7135449.450707] ca acme-ca.foo-start[282]: + cd ca.foo container-test-run-certificates> ca # [7135449.450868] ca acme-ca.foo-start[282]: + cp -vp cert.pem ../out/cert.pem container-test-run-certificates> ca # [7135449.451697] ca acme-ca.foo-start[283]: 'cert.pem' -> '../out/cert.pem' container-test-run-certificates> ca # [7135449.451875] ca acme-ca.foo-start[282]: + cp -vp key.pem ../out/key.pem container-test-run-certificates> ca # [7135449.452493] ca acme-ca.foo-start[282]: 'key.pem' -> '../out/key.pem' container-test-run-certificates> ca # [7135449.452624] ca acme-ca.foo-start[256]: + cat out/cert.pem ca/cert.pem container-test-run-certificates> ca # [7135449.453683] ca acme-ca.foo-start[256]: + cp ca/cert.pem out/chain.pem container-test-run-certificates> ca # [7135449.454519] ca acme-ca.foo-start[256]: + cat out/key.pem out/fullchain.pem container-test-run-certificates> ca # [7135449.455344] ca acme-ca.foo-start[256]: + for fixpath in out certificates container-test-run-certificates> ca # [7135449.455368] ca acme-ca.foo-start[256]: + '[' -d out ']' container-test-run-certificates> ca # [7135449.455368] ca acme-ca.foo-start[256]: + chmod -R u=rwX,g=rX,o= out container-test-run-certificates> ca # [7135449.456182] ca acme-ca.foo-start[256]: + chown -R acme:nginx out container-test-run-certificates> ca # [7135449.457678] ca acme-ca.foo-start[256]: + for fixpath in out certificates container-test-run-certificates> ca # [7135449.457701] ca acme-ca.foo-start[256]: + '[' -d certificates ']' container-test-run-certificates> ca # [7135449.469140] ca systemd[1]: Finished Ensure certificate for ca.foo. container-test-run-certificates> ca # [7135449.470102] ca systemd[1]: Starting Nginx Web Server... container-test-run-certificates> ca # [7135449.534063] ca systemd-networkd[196]: eth1: Gained IPv6LL container-test-run-certificates> server # [7135449.432991] server acme-test.foo-start[245]: Waiting to acquire lock in /run/acme/ container-test-run-certificates> server # [7135449.434602] server acme-test.foo-start[245]: + '[' -e out/acme-success ']' container-test-run-certificates> server # [7135449.434620] server acme-test.foo-start[245]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=test.foo --ip-addresses= container-test-run-certificates> server # [7135449.439581] server acme-test.foo-start[255]: + cd test.foo container-test-run-certificates> server # [7135449.439840] server acme-test.foo-start[255]: + cp -vp cert.pem ../out/cert.pem container-test-run-certificates> server # [7135449.440905] server acme-test.foo-start[256]: 'cert.pem' -> '../out/cert.pem' container-test-run-certificates> server # [7135449.441073] server acme-test.foo-start[255]: + cp -vp key.pem ../out/key.pem container-test-run-certificates> server # [7135449.441684] server acme-test.foo-start[255]: 'key.pem' -> '../out/key.pem' container-test-run-certificates> server # [7135449.441835] server acme-test.foo-start[245]: + cat out/cert.pem ca/cert.pem container-test-run-certificates> server # [7135449.442741] server acme-test.foo-start[245]: + cp ca/cert.pem out/chain.pem container-test-run-certificates> server # [7135449.443566] server acme-test.foo-start[245]: + cat out/key.pem out/fullchain.pem container-test-run-certificates> server # [7135449.444438] server acme-test.foo-start[245]: + for fixpath in out certificates container-test-run-certificates> server # [7135449.444438] server acme-test.foo-start[245]: + '[' -d out ']' container-test-run-certificates> server # [7135449.444489] server acme-test.foo-start[245]: + chmod -R u=rwX,g=rX,o= out container-test-run-certificates> server # [7135449.445429] server acme-test.foo-start[245]: + chown -R acme:nginx out container-test-run-certificates> server # [7135449.446853] server acme-test.foo-start[245]: + for fixpath in out certificates container-test-run-certificates> server # [7135449.446865] server acme-test.foo-start[245]: + '[' -d certificates ']' container-test-run-certificates> server # [7135449.448572] server systemd[1]: Finished Ensure certificate for test.foo. container-test-run-certificates> server # [7135449.449456] server systemd[1]: Starting Nginx Web Server... container-test-run-certificates> server # [7135449.597109] server systemd-networkd[187]: eth1: Gained IPv6LL container-test-run-certificates> server # [7135449.895937] server nginx-pre-start[267]: nginx: the configuration file /nix/store/wkxz4hka5qs8dgkzynp4dx3grs3s3mw2-nginx.conf syntax is ok container-test-run-certificates> server # [7135449.896287] server nginx-pre-start[267]: nginx: configuration file /nix/store/wkxz4hka5qs8dgkzynp4dx3grs3s3mw2-nginx.conf test is successful container-test-run-certificates> server # [7135449.898863] server systemd[1]: Started Nginx Web Server. container-test-run-certificates> server # [7135449.900192] server systemd[1]: Reached target Multi-User System. container-test-run-certificates> server # [7135449.901811] server systemd[1]: Starting Order (and renew) ACME certificate for test.foo... container-test-run-certificates> ca # [7135449.904465] ca nginx-pre-start[294]: nginx: the configuration file /nix/store/1zya8130szardq7b35zp58jlj3jil439-nginx.conf syntax is ok container-test-run-certificates> ca # [7135449.904899] ca nginx-pre-start[294]: nginx: configuration file /nix/store/1zya8130szardq7b35zp58jlj3jil439-nginx.conf test is successful container-test-run-certificates> ca # [7135449.915193] ca systemd[1]: Started Nginx Web Server. container-test-run-certificates> ca # [7135449.915523] ca systemd[1]: Reached target Multi-User System. container-test-run-certificates> ca # [7135449.916354] ca systemd[1]: Starting Order (and renew) ACME certificate for ca.foo... container-test-run-certificates> ca: must succeed: systemctl restart acme-order-renew-ca.foo.service container-test-run-certificates> client # [7135450.046136] client systemd-networkd[183]: eth1: Gained IPv6LL container-test-run-certificates> ca # [7135450.277309] ca acme-order-renew-ca.foo-start[297]: Waiting to acquire lock in /run/acme/ container-test-run-certificates> ca # [7135450.278920] ca acme-order-renew-ca.foo-start[297]: + set -euo pipefail container-test-run-certificates> ca # [7135450.278961] ca acme-order-renew-ca.foo-start[297]: + echo 88dc4fc401a6091a1bd9 container-test-run-certificates> ca # [7135450.279026] ca acme-order-renew-ca.foo-start[297]: + cmp -s domainhash.txt certificates/domainhash.txt container-test-run-certificates> ca # [7135450.279643] ca acme-order-renew-ca.foo-start[297]: + lego --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo:1443/acme/acme/directory --key-type ec256 -d ca.foo run container-test-run-certificates> ca # [7135450.288687] ca acme-order-renew-ca.foo-start[308]: 2026/08/22 00:05:07 No key found for account none@none.tld. Generating a P256 key. container-test-run-certificates> ca # [7135450.288891] ca acme-order-renew-ca.foo-start[308]: 2026/08/22 00:05:07 Saved key to accounts/ca.foo_1443/none@none.tld/keys/none@none.tld.key container-test-run-certificates> ca # [7135450.302752] ca step-ca[204]: time="2026-08-22T00:05:07Z" level=info duration="103.305µs" duration-ns=103305 fields.time="2026-08-22T00:05:07Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=724d11a1-8c5c-481a-b805-05e803220c9e response="{\"newNonce\":\"https://ca.foo:1443/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo:1443/acme/acme/new-account\",\"newOrder\":\"https://ca.foo:1443/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo:1443/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo:1443/acme/acme/key-change\"}" size=277 status=200 user-agent="lego-cli/4.35.2 xenolf-acme/4.35.2 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [7135450.303064] ca acme-order-renew-ca.foo-start[308]: 2026/08/22 00:05:07 [INFO] acme: Registering account for none@none.tld container-test-run-certificates> ca # [7135450.307859] ca step-ca[204]: time="2026-08-22T00:05:07Z" level=info duration=4.78437ms duration-ns=4784370 fields.time="2026-08-22T00:05:07Z" method=HEAD name=ca nonce=M29CdGxaMXhoc0dWWEhCSEpwUGpZOVFwSFJ4SmZ4Zzg path=/acme/acme/new-nonce protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=1ffd477a-7b8b-4cad-90d6-5de96ebd5a8d size=0 status=200 user-agent="lego-cli/4.35.2 xenolf-acme/4.35.2 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [7135450.309292] ca step-ca[204]: time="2026-08-22T00:05:07Z" level=info duration=1.011255ms duration-ns=1011255 fields.time="2026-08-22T00:05:07Z" method=POST name=ca nonce=Q0tBUEhnRTIxS05IQk9iVmhHSWtsbDFTQktOZEZsNUg path=/acme/acme/new-account protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=41835eb5-19bf-4571-b6eb-d7bf3bf7ce31 response="{\"contact\":[\"mailto:none@none.tld\"],\"status\":\"valid\",\"orders\":\"https://ca.foo:1443/acme/acme/account/6YPDhXoK6mAfko5FFjnISzKrF4EFHVi0/orders\"}" size=143 status=201 user-agent="lego-cli/4.35.2 xenolf-acme/4.35.2 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [7135450.309444] ca acme-order-renew-ca.foo-start[308]: !!!! HEADS UP !!!! container-test-run-certificates> ca # [7135450.309444] ca acme-order-renew-ca.foo-start[308]: Your account credentials have been saved in your container-test-run-certificates> ca # [7135450.309444] ca acme-order-renew-ca.foo-start[308]: configuration directory at "accounts". container-test-run-certificates> ca # [7135450.309444] ca acme-order-renew-ca.foo-start[308]: You should make a secure backup of this folder now. This container-test-run-certificates> ca # [7135450.309444] ca acme-order-renew-ca.foo-start[308]: configuration directory will also contain private keys container-test-run-certificates> ca # [7135450.309444] ca acme-order-renew-ca.foo-start[308]: generated by lego and certificates obtained from the ACME container-test-run-certificates> ca # [7135450.309444] ca acme-order-renew-ca.foo-start[308]: server. Making regular backups of this folder is ideal. container-test-run-certificates> ca # [7135450.309555] ca acme-order-renew-ca.foo-start[308]: 2026/08/22 00:05:07 [INFO] [ca.foo] acme: Obtaining bundled SAN certificate container-test-run-certificates> ca # [7135450.311262] ca step-ca[204]: time="2026-08-22T00:05:07Z" level=info duration=1.60372ms duration-ns=1603720 fields.time="2026-08-22T00:05:07Z" method=POST name=ca nonce=cUNYM2F1elJWTFJRWDdYSnBsUFNJcFRDT256VzlsbDM path=/acme/acme/new-order protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=8d66a478-c5c4-4e3a-ba7a-32f1f8538cff response="{\"id\":\"GsMjZrmasOjByStLGgDV9OVTpahQivEx\",\"status\":\"pending\",\"expires\":\"2026-08-23T00:05:07Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"ca.foo\"}],\"notBefore\":\"2026-08-22T00:04:07Z\",\"notAfter\":\"2026-11-20T00:05:07Z\",\"authorizations\":[\"https://ca.foo:1443/acme/acme/authz/OrcBhIy8kAOKSabvup1rR841Te19VTEW\"],\"finalize\":\"https://ca.foo:1443/acme/acme/order/GsMjZrmasOjByStLGgDV9OVTpahQivEx/finalize\"}" size=392 status=201 user-agent="lego-cli/4.35.2 xenolf-acme/4.35.2 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [7135450.369945] ca step-ca[204]: time="2026-08-22T00:05:07Z" level=info duration=2.032608ms duration-ns=2032608 fields.time="2026-08-22T00:05:07Z" method=POST name=ca nonce=M3l4R1ExSkk4WWtlMzZRcFVxVjJ6aVVJVlRSNWJZSDA path=/acme/acme/authz/OrcBhIy8kAOKSabvup1rR841Te19VTEW protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=2e3cc5f3-fbe2-430f-9648-1613131f2377 response="{\"identifier\":{\"type\":\"dns\",\"value\":\"ca.foo\"},\"status\":\"pending\",\"challenges\":[{\"type\":\"dns-01\",\"status\":\"pending\",\"token\":\"JcDCEJDlFwsNDbkTVP5XXdhXpwwRYsW8\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/OrcBhIy8kAOKSabvup1rR841Te19VTEW/exr1PqwXAcYkeS1ogHiwunm3q4fh4ZmY\"},{\"type\":\"http-01\",\"status\":\"pending\",\"token\":\"JcDCEJDlFwsNDbkTVP5XXdhXpwwRYsW8\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/OrcBhIy8kAOKSabvup1rR841Te19VTEW/P6KGTj3I7JaTSZasruSVO4HrzX5p8Dav\"},{\"type\":\"tls-alpn-01\",\"status\":\"pending\",\"token\":\"JcDCEJDlFwsNDbkTVP5XXdhXpwwRYsW8\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/OrcBhIy8kAOKSabvup1rR841Te19VTEW/mOHVljJSqCHIKgwMywsX0U3uOMHCTDnJ\"}],\"wildcard\":false,\"expires\":\"2026-08-23T00:05:07Z\"}" size=719 status=200 user-agent="lego-cli/4.35.2 xenolf-acme/4.35.2 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [7135450.370128] ca acme-order-renew-ca.foo-start[308]: 2026/08/22 00:05:07 [INFO] [ca.foo] AuthURL: https://ca.foo:1443/acme/acme/authz/OrcBhIy8kAOKSabvup1rR841Te19VTEW container-test-run-certificates> ca # [7135450.370128] ca acme-order-renew-ca.foo-start[308]: 2026/08/22 00:05:07 [INFO] [ca.foo] acme: Could not find solver for: tls-alpn-01 container-test-run-certificates> ca # [7135450.370128] ca acme-order-renew-ca.foo-start[308]: 2026/08/22 00:05:07 [INFO] [ca.foo] acme: use http-01 solver container-test-run-certificates> ca # [7135450.370199] ca acme-order-renew-ca.foo-start[308]: 2026/08/22 00:05:07 [INFO] [ca.foo] acme: Trying to solve HTTP-01 container-test-run-certificates> ca # [7135450.371816] ca step-ca[204]: time="2026-08-22T00:05:07Z" level=info duration=1.429733ms duration-ns=1429733 fields.time="2026-08-22T00:05:07Z" method=POST name=ca nonce=NEVtNEtITXRLeGpQUk5ocHo3dHMxT09vMzBQTzd3eko path=/acme/acme/challenge/OrcBhIy8kAOKSabvup1rR841Te19VTEW/P6KGTj3I7JaTSZasruSVO4HrzX5p8Dav protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=e787549b-e000-46f4-81da-0e2c49964982 response="{\"type\":\"http-01\",\"status\":\"valid\",\"token\":\"JcDCEJDlFwsNDbkTVP5XXdhXpwwRYsW8\",\"validated\":\"2026-08-22T00:05:07Z\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/OrcBhIy8kAOKSabvup1rR841Te19VTEW/P6KGTj3I7JaTSZasruSVO4HrzX5p8Dav\"}" size=228 status=200 user-agent="lego-cli/4.35.2 xenolf-acme/4.35.2 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [7135450.371930] ca acme-order-renew-ca.foo-start[308]: 2026/08/22 00:05:07 [INFO] [ca.foo] The server validated our request container-test-run-certificates> ca # [7135450.371966] ca acme-order-renew-ca.foo-start[308]: 2026/08/22 00:05:07 [INFO] [ca.foo] acme: Validations succeeded; requesting certificates container-test-run-certificates> ca # [7135450.374498] ca step-ca[204]: time="2026-08-22T00:05:07Z" level=info duration=2.19345ms duration-ns=2193450 fields.time="2026-08-22T00:05:07Z" method=POST name=ca nonce=SlFXeThBbklmTXkxQXczYjFENnU5RlZxSWc4YmswdGc path=/acme/acme/order/GsMjZrmasOjByStLGgDV9OVTpahQivEx/finalize protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=15c8200a-5fda-4a7a-9e8a-cd4a06b43d71 response="{\"id\":\"GsMjZrmasOjByStLGgDV9OVTpahQivEx\",\"status\":\"valid\",\"expires\":\"2026-08-23T00:05:07Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"ca.foo\"}],\"notBefore\":\"2026-08-22T00:04:07Z\",\"notAfter\":\"2026-11-20T00:05:07Z\",\"authorizations\":[\"https://ca.foo:1443/acme/acme/authz/OrcBhIy8kAOKSabvup1rR841Te19VTEW\"],\"finalize\":\"https://ca.foo:1443/acme/acme/order/GsMjZrmasOjByStLGgDV9OVTpahQivEx/finalize\",\"certificate\":\"https://ca.foo:1443/acme/acme/certificate/Eaow6lTzsMLr3MBLdIDfNHKHTHHYUUhH\"}" size=481 status=200 user-agent="lego-cli/4.35.2 xenolf-acme/4.35.2 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [7135450.375198] ca step-ca[204]: time="2026-08-22T00:05:07Z" level=info certificate="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" duration="472.39µs" duration-ns=472390 fields.time="2026-08-22T00:05:07Z" issuer="Clan Intermediate CA" method=POST name=ca nonce=dktmSkFKS2M3dkpheEp3OE1UNGZWcDNVQll2RHhWd0c path=/acme/acme/certificate/Eaow6lTzsMLr3MBLdIDfNHKHTHHYUUhH protocol=HTTP/1.1 provisioner=acme public-key="ECDSA P-256" referer= remote-address="2001:db8:1::1" request-id=3f70776b-e108-491a-97f2-4c0f57767e05 sans="map[dns:[ca.foo]]" serial=56873831042072759360684584065024072165 size=1344 status=200 subject=ca.foo user-agent="lego-cli/4.35.2 xenolf-acme/4.35.2 (release; linux; amd64)" user-id= valid-from="2026-08-22T00:04:07Z" valid-to="2026-11-20T00:05:07Z" container-test-run-certificates> ca # [7135450.375321] ca acme-order-renew-ca.foo-start[308]: 2026/08/22 00:05:07 [INFO] [ca.foo] Server responded with a certificate. container-test-run-certificates> ca # [7135450.377114] ca acme-order-renew-ca.foo-start[297]: + mv domainhash.txt certificates/ container-test-run-certificates> ca # [7135450.378030] ca acme-order-renew-ca.foo-start[297]: + touch out/acme-success container-test-run-certificates> ca # [7135450.378763] ca acme-order-renew-ca.foo-start[297]: + cmp -s certificates/ca.foo.crt out/fullchain.pem container-test-run-certificates> ca # [7135450.379581] ca acme-order-renew-ca.foo-start[297]: + touch out/renewed container-test-run-certificates> ca # [7135450.380355] ca acme-order-renew-ca.foo-start[297]: + echo Installing new certificate container-test-run-certificates> ca # [7135450.380355] ca acme-order-renew-ca.foo-start[297]: Installing new certificate container-test-run-certificates> ca # [7135450.380382] ca acme-order-renew-ca.foo-start[297]: + cp -vp certificates/ca.foo.crt out/fullchain.pem container-test-run-certificates> ca # [7135450.381352] ca acme-order-renew-ca.foo-start[328]: 'certificates/ca.foo.crt' -> 'out/fullchain.pem' container-test-run-certificates> ca # [7135450.381514] ca acme-order-renew-ca.foo-start[297]: + cp -vp certificates/ca.foo.key out/key.pem container-test-run-certificates> ca # [7135450.382246] ca acme-order-renew-ca.foo-start[329]: 'certificates/ca.foo.key' -> 'out/key.pem' container-test-run-certificates> ca # [7135450.382383] ca acme-order-renew-ca.foo-start[297]: + cp -vp certificates/ca.foo.issuer.crt out/chain.pem container-test-run-certificates> ca # [7135450.383164] ca acme-order-renew-ca.foo-start[330]: 'certificates/ca.foo.issuer.crt' -> 'out/chain.pem' container-test-run-certificates> ca # [7135450.383297] ca acme-order-renew-ca.foo-start[297]: + ln -sf fullchain.pem out/cert.pem container-test-run-certificates> ca # [7135450.384144] ca acme-order-renew-ca.foo-start[297]: + cat out/key.pem out/fullchain.pem container-test-run-certificates> ca # [7135450.385182] ca acme-order-renew-ca.foo-start[297]: + for fixpath in out certificates container-test-run-certificates> ca # [7135450.385194] ca acme-order-renew-ca.foo-start[297]: + '[' -d out ']' container-test-run-certificates> ca # [7135450.385194] ca acme-order-renew-ca.foo-start[297]: + chmod -R u=rwX,g=rX,o= out container-test-run-certificates> ca # [7135450.386051] ca acme-order-renew-ca.foo-start[297]: + chown -R acme:nginx out container-test-run-certificates> ca # [7135450.387353] ca acme-order-renew-ca.foo-start[297]: + for fixpath in out certificates container-test-run-certificates> ca # [7135450.387374] ca acme-order-renew-ca.foo-start[297]: + '[' -d certificates ']' container-test-run-certificates> ca # [7135450.387374] ca acme-order-renew-ca.foo-start[297]: + chmod -R u=rwX,g=rX,o= certificates container-test-run-certificates> ca # [7135450.388137] ca acme-order-renew-ca.foo-start[297]: + chown -R acme:nginx certificates container-test-run-certificates> ca # [7135450.389271] ca acme-order-renew-ca.foo-start[297]: + chmod -R u=rwX,g=,o= accounts/. container-test-run-certificates> ca # [7135450.468928] ca systemd[1]: Reloading Nginx Web Server... container-test-run-certificates> ca # [7135450.470903] ca systemd[1]: acme-order-renew-ca.foo.service: Deactivated successfully. container-test-run-certificates> ca # [7135450.471038] ca systemd[1]: Finished Order (and renew) ACME certificate for ca.foo. container-test-run-certificates> server # [7135450.316801] server acme-order-renew-test.foo-start[270]: Waiting to acquire lock in /run/acme/ container-test-run-certificates> server # [7135450.318555] server acme-order-renew-test.foo-start[270]: + set -euo pipefail container-test-run-certificates> server # [7135450.318595] server acme-order-renew-test.foo-start[270]: + echo ad12aa6741ce4bd2c108 container-test-run-certificates> server # [7135450.318655] server acme-order-renew-test.foo-start[270]: + cmp -s domainhash.txt certificates/domainhash.txt container-test-run-certificates> server # [7135450.319270] server acme-order-renew-test.foo-start[270]: + lego --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo/acme/acme/directory --key-type ec256 -d test.foo run container-test-run-certificates> server # [7135450.326732] server acme-order-renew-test.foo-start[282]: 2026/08/22 00:05:07 No key found for account none@none.tld. Generating a P256 key. container-test-run-certificates> server # [7135450.326890] server acme-order-renew-test.foo-start[282]: 2026/08/22 00:05:07 Saved key to accounts/ca.foo/none@none.tld/keys/none@none.tld.key container-test-run-certificates> ca # [7135450.848756] ca nginx[346]: nginx: the configuration file /nix/store/1zya8130szardq7b35zp58jlj3jil439-nginx.conf syntax is ok container-test-run-certificates> ca # [7135450.849049] ca nginx[346]: nginx: configuration file /nix/store/1zya8130szardq7b35zp58jlj3jil439-nginx.conf test is successful container-test-run-certificates> ca # [7135451.202218] ca systemd[1]: Reloaded Nginx Web Server. container-test-run-certificates> ca # [7135451.202433] ca systemd[1]: Startup finished in 3.494s. container-test-run-certificates> ca # [7135451.340358] ca step-ca[204]: time="2026-08-22T00:05:08Z" level=info duration="34.244µs" duration-ns=34244 fields.time="2026-08-22T00:05:08Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="::1" request-id=def2fed2-0dd4-4ca3-b1ec-dfab22ac3334 response="{\"newNonce\":\"https://ca.foo/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo/acme/acme/new-account\",\"newOrder\":\"https://ca.foo/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo/acme/acme/key-change\"}" size=252 status=200 user-agent="lego-cli/4.35.2 xenolf-acme/4.35.2 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [7135451.342636] ca step-ca[204]: time="2026-08-22T00:05:08Z" level=info duration=1.350253ms duration-ns=1350253 fields.time="2026-08-22T00:05:08Z" method=HEAD name=ca nonce=alRIUjlTNnhTdkRLVDB1dUc3QVcxRDdxSGlsMEVsNVA path=/acme/acme/new-nonce protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=f538b030-c132-4b4b-838e-d7b52f7e8c29 size=0 status=200 user-agent="lego-cli/4.35.2 xenolf-acme/4.35.2 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [7135451.344123] ca step-ca[204]: time="2026-08-22T00:05:08Z" level=info duration="681.193µs" duration-ns=681193 fields.time="2026-08-22T00:05:08Z" method=POST name=ca nonce=ZHczSEFqekJYWGZCWVBtY1RtTHEzUWpBSW5BcGJZUm8 path=/acme/acme/new-account protocol=HTTP/1.1 referer= remote-address="::1" request-id=fab62981-d119-4ffd-a8ba-937226abb502 response="{\"contact\":[\"mailto:none@none.tld\"],\"status\":\"valid\",\"orders\":\"https://ca.foo/acme/acme/account/JYVxJmKf5TKMLB2ZlXdgrosmINahWt9U/orders\"}" size=138 status=201 user-agent="lego-cli/4.35.2 xenolf-acme/4.35.2 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [7135451.346262] ca step-ca[204]: time="2026-08-22T00:05:08Z" level=info duration=1.31654ms duration-ns=1316540 fields.time="2026-08-22T00:05:08Z" method=POST name=ca nonce=Qmg1MGc3bkJXc2M1Wm9iZFVjODlteGRuWlg1REpTTlQ path=/acme/acme/new-order protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=a8c956dc-a25f-421b-9807-d3b1b777de09 response="{\"id\":\"TriNne0e3j7SEpKi2mh9ZkwwbmTV72at\",\"status\":\"pending\",\"expires\":\"2026-08-23T00:05:08Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"test.foo\"}],\"notBefore\":\"2026-08-22T00:04:08Z\",\"notAfter\":\"2026-11-20T00:05:08Z\",\"authorizations\":[\"https://ca.foo/acme/acme/authz/LJURRiAp6fpXNEnkgVnUzc1k5dmiHMdS\"],\"finalize\":\"https://ca.foo/acme/acme/order/TriNne0e3j7SEpKi2mh9ZkwwbmTV72at/finalize\"}" size=384 status=201 user-agent="lego-cli/4.35.2 xenolf-acme/4.35.2 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [7135451.403988] ca step-ca[204]: time="2026-08-22T00:05:08Z" level=info duration="495.633µs" duration-ns=495633 fields.time="2026-08-22T00:05:08Z" method=POST name=ca nonce=QlRPcVdGdUZBZTY2T0xuSG9pYXVCN2hWUVM3VDZLMUM path=/acme/acme/authz/LJURRiAp6fpXNEnkgVnUzc1k5dmiHMdS protocol=HTTP/1.1 referer= remote-address="::1" request-id=ca66a692-91be-413e-9b18-77fca40093c8 response="{\"identifier\":{\"type\":\"dns\",\"value\":\"test.foo\"},\"status\":\"pending\",\"challenges\":[{\"type\":\"dns-01\",\"status\":\"pending\",\"token\":\"91XoAz21cp0nbGb1ppzHLDywmOL2N0ES\",\"url\":\"https://ca.foo/acme/acme/challenge/LJURRiAp6fpXNEnkgVnUzc1k5dmiHMdS/gWBUc1rKRWPPDFNrZD9R7NUo2ui74eBV\"},{\"type\":\"http-01\",\"status\":\"pending\",\"token\":\"91XoAz21cp0nbGb1ppzHLDywmOL2N0ES\",\"url\":\"https://ca.foo/acme/acme/challenge/LJURRiAp6fpXNEnkgVnUzc1k5dmiHMdS/tXBpvhF0dyNDOtaVSIszJkZOs97VHlR7\"},{\"type\":\"tls-alpn-01\",\"status\":\"pending\",\"token\":\"91XoAz21cp0nbGb1ppzHLDywmOL2N0ES\",\"url\":\"https://ca.foo/acme/acme/challenge/LJURRiAp6fpXNEnkgVnUzc1k5dmiHMdS/AwC8mWHf7D8isvhQfyml9lXcuvoHVcqr\"}],\"wildcard\":false,\"expires\":\"2026-08-23T00:05:08Z\"}" size=706 status=200 user-agent="lego-cli/4.35.2 xenolf-acme/4.35.2 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [7135451.405772] ca step-ca[204]: time="2026-08-22T00:05:08Z" level=info duration=1.025672ms duration-ns=1025672 fields.time="2026-08-22T00:05:08Z" method=POST name=ca nonce=VG53RGRJcXc0bXhUWDFUYjBuVTdHR05oT2o2OUEyNDk path=/acme/acme/challenge/LJURRiAp6fpXNEnkgVnUzc1k5dmiHMdS/tXBpvhF0dyNDOtaVSIszJkZOs97VHlR7 protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=ad68485f-49bf-4901-a8b3-cfba7437be8d response="{\"type\":\"http-01\",\"status\":\"valid\",\"token\":\"91XoAz21cp0nbGb1ppzHLDywmOL2N0ES\",\"validated\":\"2026-08-22T00:05:08Z\",\"url\":\"https://ca.foo/acme/acme/challenge/LJURRiAp6fpXNEnkgVnUzc1k5dmiHMdS/tXBpvhF0dyNDOtaVSIszJkZOs97VHlR7\"}" size=223 status=200 user-agent="lego-cli/4.35.2 xenolf-acme/4.35.2 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [7135451.408364] ca step-ca[204]: time="2026-08-22T00:05:08Z" level=info duration=1.69386ms duration-ns=1693860 fields.time="2026-08-22T00:05:08Z" method=POST name=ca nonce=NjNVbE9UU2ozbzBJS1doSm4yOVN6VjFFb2VEaG43Z2M path=/acme/acme/order/TriNne0e3j7SEpKi2mh9ZkwwbmTV72at/finalize protocol=HTTP/1.1 referer= remote-address="::1" request-id=b166f1a2-5eb7-44c0-9d94-53178318369c response="{\"id\":\"TriNne0e3j7SEpKi2mh9ZkwwbmTV72at\",\"status\":\"valid\",\"expires\":\"2026-08-23T00:05:08Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"test.foo\"}],\"notBefore\":\"2026-08-22T00:04:08Z\",\"notAfter\":\"2026-11-20T00:05:08Z\",\"authorizations\":[\"https://ca.foo/acme/acme/authz/LJURRiAp6fpXNEnkgVnUzc1k5dmiHMdS\"],\"finalize\":\"https://ca.foo/acme/acme/order/TriNne0e3j7SEpKi2mh9ZkwwbmTV72at/finalize\",\"certificate\":\"https://ca.foo/acme/acme/certificate/WoVDvkGhtz5GdxxzpXBOcRddQhez1Jiy\"}" size=468 status=200 user-agent="lego-cli/4.35.2 xenolf-acme/4.35.2 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [7135451.409692] ca step-ca[204]: time="2026-08-22T00:05:08Z" level=info certificate=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 duration="377.981µs" duration-ns=377981 fields.time="2026-08-22T00:05:08Z" issuer="Clan Intermediate CA" method=POST name=ca nonce=V3ZtQXQ4U09NQzlKTjNZcWdwVHJ1QzVpakNhWHJlVHk path=/acme/acme/certificate/WoVDvkGhtz5GdxxzpXBOcRddQhez1Jiy protocol=HTTP/1.1 provisioner=acme public-key="ECDSA P-256" referer= remote-address=127.0.0.1 request-id=73e8fb24-9938-45c2-958e-846a943e62d6 sans="map[dns:[test.foo]]" serial=271928972426468752400172448272937126099 size=1348 status=200 subject=test.foo user-agent="lego-cli/4.35.2 xenolf-acme/4.35.2 (release; linux; amd64)" user-id= valid-from="2026-08-22T00:04:08Z" valid-to="2026-11-20T00:05:08Z" container-test-run-certificates> server # [7135451.340567] server acme-order-renew-test.foo-start[282]: 2026/08/22 00:05:08 [INFO] acme: Registering account for none@none.tld container-test-run-certificates> server # [7135451.344287] server acme-order-renew-test.foo-start[282]: !!!! HEADS UP !!!! container-test-run-certificates> server # [7135451.344287] server acme-order-renew-test.foo-start[282]: Your account credentials have been saved in your container-test-run-certificates> server # [7135451.344287] server acme-order-renew-test.foo-start[282]: configuration directory at "accounts". container-test-run-certificates> server # [7135451.344287] server acme-order-renew-test.foo-start[282]: You should make a secure backup of this folder now. This container-test-run-certificates> server # [7135451.344287] server acme-order-renew-test.foo-start[282]: configuration directory will also contain private keys container-test-run-certificates> server # [7135451.344287] server acme-order-renew-test.foo-start[282]: generated by lego and certificates obtained from the ACME container-test-run-certificates> server # [7135451.344287] server acme-order-renew-test.foo-start[282]: server. Making regular backups of this folder is ideal. container-test-run-certificates> server # [7135451.344392] server acme-order-renew-test.foo-start[282]: 2026/08/22 00:05:08 [INFO] [test.foo] acme: Obtaining bundled SAN certificate container-test-run-certificates> server # [7135451.404134] server acme-order-renew-test.foo-start[282]: 2026/08/22 00:05:08 [INFO] [test.foo] AuthURL: https://ca.foo/acme/acme/authz/LJURRiAp6fpXNEnkgVnUzc1k5dmiHMdS container-test-run-certificates> server # [7135451.404134] server acme-order-renew-test.foo-start[282]: 2026/08/22 00:05:08 [INFO] [test.foo] acme: Could not find solver for: tls-alpn-01 container-test-run-certificates> server # [7135451.404134] server acme-order-renew-test.foo-start[282]: 2026/08/22 00:05:08 [INFO] [test.foo] acme: use http-01 solver container-test-run-certificates> server # [7135451.404134] server acme-order-renew-test.foo-start[282]: 2026/08/22 00:05:08 [INFO] [test.foo] acme: Trying to solve HTTP-01 container-test-run-certificates> server # [7135451.405920] server acme-order-renew-test.foo-start[282]: 2026/08/22 00:05:08 [INFO] [test.foo] The server validated our request container-test-run-certificates> server # [7135451.405946] server acme-order-renew-test.foo-start[282]: 2026/08/22 00:05:08 [INFO] [test.foo] acme: Validations succeeded; requesting certificates container-test-run-certificates> server # [7135451.409797] server acme-order-renew-test.foo-start[282]: 2026/08/22 00:05:08 [INFO] [test.foo] Server responded with a certificate. container-test-run-certificates> server # [7135451.412236] server acme-order-renew-test.foo-start[270]: + mv domainhash.txt certificates/ container-test-run-certificates> server # [7135451.413503] server acme-order-renew-test.foo-start[270]: + touch out/acme-success container-test-run-certificates> server # [7135451.414291] server acme-order-renew-test.foo-start[270]: + cmp -s certificates/test.foo.crt out/fullchain.pem container-test-run-certificates> server # [7135451.414828] server acme-order-renew-test.foo-start[270]: + touch out/renewed container-test-run-certificates> server # [7135451.415577] server acme-order-renew-test.foo-start[270]: + echo Installing new certificate container-test-run-certificates> server # [7135451.415577] server acme-order-renew-test.foo-start[270]: Installing new certificate container-test-run-certificates> server # [7135451.415596] server acme-order-renew-test.foo-start[270]: + cp -vp certificates/test.foo.crt out/fullchain.pem container-test-run-certificates> server # [7135451.416301] server acme-order-renew-test.foo-start[302]: 'certificates/test.foo.crt' -> 'out/fullchain.pem' container-test-run-certificates> server # [7135451.416448] server acme-order-renew-test.foo-start[270]: + cp -vp certificates/test.foo.key out/key.pem container-test-run-certificates> server # [7135451.417487] server acme-order-renew-test.foo-start[303]: 'certificates/test.foo.key' -> 'out/key.pem' container-test-run-certificates> server # [7135451.417697] server acme-order-renew-test.foo-start[270]: + cp -vp certificates/test.foo.issuer.crt out/chain.pem container-test-run-certificates> server # [7135451.418411] server acme-order-renew-test.foo-start[304]: 'certificates/test.foo.issuer.crt' -> 'out/chain.pem' container-test-run-certificates> server # [7135451.418522] server acme-order-renew-test.foo-start[270]: + ln -sf fullchain.pem out/cert.pem container-test-run-certificates> server # [7135451.419279] server acme-order-renew-test.foo-start[270]: + cat out/key.pem out/fullchain.pem container-test-run-certificates> server # [7135451.420052] server acme-order-renew-test.foo-start[270]: + for fixpath in out certificates container-test-run-certificates> server # [7135451.420063] server acme-order-renew-test.foo-start[270]: + '[' -d out ']' container-test-run-certificates> server # [7135451.420063] server acme-order-renew-test.foo-start[270]: + chmod -R u=rwX,g=rX,o= out container-test-run-certificates> server # [7135451.420805] server acme-order-renew-test.foo-start[270]: + chown -R acme:nginx out container-test-run-certificates> server # [7135451.422090] server acme-order-renew-test.foo-start[270]: + for fixpath in out certificates container-test-run-certificates> server # [7135451.422090] server acme-order-renew-test.foo-start[270]: + '[' -d certificates ']' container-test-run-certificates> server # [7135451.422123] server acme-order-renew-test.foo-start[270]: + chmod -R u=rwX,g=rX,o= certificates container-test-run-certificates> server # [7135451.422819] server acme-order-renew-test.foo-start[270]: + chown -R acme:nginx certificates container-test-run-certificates> server # [7135451.423909] server acme-order-renew-test.foo-start[270]: + chmod -R u=rwX,g=,o= accounts/. container-test-run-certificates> server # [7135451.507291] server systemd[1]: Reloading Nginx Web Server... container-test-run-certificates> server # [7135451.509669] server systemd[1]: acme-order-renew-test.foo.service: Deactivated successfully. container-test-run-certificates> server # [7135451.509786] server systemd[1]: Finished Order (and renew) ACME certificate for test.foo. container-test-run-certificates> ca # [7135451.591134] ca systemd[1]: Starting Order (and renew) ACME certificate for ca.foo... container-test-run-certificates> ca: (finished: must succeed: systemctl restart acme-order-renew-ca.foo.service , in 1.63 seconds) container-test-run-certificates> server # [7135451.873744] server nginx[320]: nginx: the configuration file /nix/store/wkxz4hka5qs8dgkzynp4dx3grs3s3mw2-nginx.conf syntax is ok container-test-run-certificates> server # [7135451.874096] server nginx[320]: nginx: configuration file /nix/store/wkxz4hka5qs8dgkzynp4dx3grs3s3mw2-nginx.conf test is successful container-test-run-certificates> ca # [7135451.972798] ca acme-order-renew-ca.foo-start[361]: Waiting to acquire lock in /run/acme/ container-test-run-certificates> ca # [7135451.974478] ca acme-order-renew-ca.foo-start[361]: + set -euo pipefail container-test-run-certificates> ca # [7135451.974530] ca acme-order-renew-ca.foo-start[361]: + echo 88dc4fc401a6091a1bd9 container-test-run-certificates> ca # [7135451.974575] ca acme-order-renew-ca.foo-start[361]: + cmp -s domainhash.txt certificates/domainhash.txt container-test-run-certificates> ca # [7135451.975249] ca acme-order-renew-ca.foo-start[361]: + '[' -e certificates/ca.foo.key ']' container-test-run-certificates> ca # [7135451.975262] ca acme-order-renew-ca.foo-start[361]: + '[' -e certificates/ca.foo.crt ']' container-test-run-certificates> ca # [7135451.975459] ca acme-order-renew-ca.foo-start[369]: ++ find accounts -name none@none.tld.key container-test-run-certificates> ca # [7135451.976831] ca acme-order-renew-ca.foo-start[361]: + '[' -n accounts/ca.foo_1443/none@none.tld/keys/none@none.tld.key ']' container-test-run-certificates> ca # [7135451.976854] ca acme-order-renew-ca.foo-start[361]: + lego --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo:1443/acme/acme/directory --key-type ec256 -d ca.foo renew --no-random-sleep --dynamic container-test-run-certificates> ca # [7135451.996439] ca step-ca[204]: time="2026-08-22T00:05:09Z" level=info duration="36.679µs" duration-ns=36679 fields.time="2026-08-22T00:05:09Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=7f6bb7fe-3825-4e7f-9bf5-ca157a2f327e response="{\"newNonce\":\"https://ca.foo:1443/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo:1443/acme/acme/new-account\",\"newOrder\":\"https://ca.foo:1443/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo:1443/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo:1443/acme/acme/key-change\"}" size=277 status=200 user-agent="lego-cli/4.35.2 xenolf-acme/4.35.2 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [7135451.996577] ca acme-order-renew-ca.foo-start[370]: 2026/08/22 00:05:09 [WARN] [ca.foo] acme: renewalInfo[get/post]: server does not advertise a renewal info endpoint container-test-run-certificates> ca # [7135451.996727] ca acme-order-renew-ca.foo-start[370]: 2026/08/22 00:05:09 [INFO] [ca.foo] The certificate expires at 2026-11-20T00:05:07Z, the renewal can be performed in 1439h59m37.637730528s: no renewal. container-test-run-certificates> ca # [7135451.996811] ca acme-order-renew-ca.foo-start[361]: + mv domainhash.txt certificates/ container-test-run-certificates> ca # [7135451.997730] ca acme-order-renew-ca.foo-start[361]: + touch out/acme-success container-test-run-certificates> ca # [7135451.998490] ca acme-order-renew-ca.foo-start[361]: + cmp -s certificates/ca.foo.crt out/fullchain.pem container-test-run-certificates> ca # [7135451.999060] ca acme-order-renew-ca.foo-start[361]: + for fixpath in out certificates container-test-run-certificates> ca # [7135451.999073] ca acme-order-renew-ca.foo-start[361]: + '[' -d out ']' container-test-run-certificates> ca # [7135451.999073] ca acme-order-renew-ca.foo-start[361]: + chmod -R u=rwX,g=rX,o= out container-test-run-certificates> ca # [7135451.999989] ca acme-order-renew-ca.foo-start[361]: + chown -R acme:nginx out container-test-run-certificates> ca # [7135452.001213] ca acme-order-renew-ca.foo-start[361]: + for fixpath in out certificates container-test-run-certificates> ca # [7135452.001224] ca acme-order-renew-ca.foo-start[361]: + '[' -d certificates ']' container-test-run-certificates> ca # [7135452.001233] ca acme-order-renew-ca.foo-start[361]: + chmod -R u=rwX,g=rX,o= certificates container-test-run-certificates> ca # [7135452.001969] ca acme-order-renew-ca.foo-start[361]: + chown -R acme:nginx certificates container-test-run-certificates> ca # [7135452.003195] ca acme-order-renew-ca.foo-start[361]: + chmod -R u=rwX,g=,o= accounts/. container-test-run-certificates> ca # [7135452.076009] ca systemd[1]: acme-order-renew-ca.foo.service: Deactivated successfully. container-test-run-certificates> ca # [7135452.076193] ca systemd[1]: Finished Order (and renew) ACME certificate for ca.foo. container-test-run-certificates> server # [7135452.211678] server systemd[1]: Reloaded Nginx Web Server. container-test-run-certificates> server # [7135452.211844] server systemd[1]: Startup finished in 4.512s. container-test-run-certificates> server: must succeed: systemctl restart acme-test.foo.service container-test-run-certificates> server # [7135455.085559] server systemd[1]: acme-test.foo.service: Deactivated successfully. container-test-run-certificates> server # [7135455.085641] server systemd[1]: Stopped Ensure certificate for test.foo. container-test-run-certificates> server # [7135455.086228] server systemd[1]: Stopping Ensure certificate for test.foo... container-test-run-certificates> server # [7135455.086974] server systemd[1]: Starting Ensure certificate for test.foo... container-test-run-certificates> server: (finished: must succeed: systemctl restart acme-test.foo.service, in 0.37 seconds) container-test-run-certificates> client: waiting for success: curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: 2001:db8:1::3 container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying [2001:db8:1::3]:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [933 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [80 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Aug 22 00:04:08 2026 GMT container-test-run-certificates> * expire date: Nov 20 00:05:08 2026 GMT container-test-run-certificates> * issuer: CN=Clan Intermediate CA container-test-run-certificates> * Certificate level 0: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 1: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 2: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 0 container-test-run-certificates> * SSL certificate verified via OpenSSL. container-test-run-certificates> * Established connection to test.foo (2001:db8:1::3 port 443) from 2001:db8:1::2 port 60610 container-test-run-certificates> % Total % Received % Xferd Average Speed Time Time Time Current container-test-run-certificates> Dload Upload Total Spent Left Speed container-test-run-certificates> 0 0 0 0 0 0 0 0 0* using HTTP/2 container-test-run-certificates> * [HTTP/2] [1] OPENED stream for https://test.foo/ container-test-run-certificates> * [HTTP/2] [1] [:method: GET] container-test-run-certificates> * [HTTP/2] [1] [:scheme: https] container-test-run-certificates> * [HTTP/2] [1] [:authority: test.foo] container-test-run-certificates> * [HTTP/2] [1] [:path: /] container-test-run-certificates> * [HTTP/2] [1] [user-agent: curl/8.21.0] container-test-run-certificates> * [HTTP/2] [1] [accept: */*] container-test-run-certificates> } [5 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> * Request completely sent off container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> { [5 bytes data] container-test-run-certificates> 100 20 100 20 0 0 1712 0 0 container-test-run-certificates> * Connection #0 to host test.foo:443 left intact container-test-run-certificates> client: (finished: waiting for success: curl -v https://test.foo, in 0.02 seconds) container-test-run-certificates> client: must succeed: openssl s_client -connect test.foo:443 -servername test.foo /dev/null | openssl x509 -text -noout 1>&2 container-test-run-certificates> Certificate: container-test-run-certificates> Data: container-test-run-certificates> Version: 3 (0x2) container-test-run-certificates> Serial Number: container-test-run-certificates> cc:93:9d:75:81:b1:cb:82:86:e3:5a:1d:48:cc:08:d3 container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Issuer: CN=Clan Intermediate CA container-test-run-certificates> Validity container-test-run-certificates> Not Before: Aug 22 00:04:08 2026 GMT container-test-run-certificates> Not After : Nov 20 00:05:08 2026 GMT container-test-run-certificates> Subject: CN=test.foo container-test-run-certificates> Subject Public Key Info: container-test-run-certificates> Public Key Algorithm: id-ecPublicKey container-test-run-certificates> Public-Key: (256 bit) container-test-run-certificates> pub: container-test-run-certificates> 04:2a:ac:84:f2:65:fa:0c:1e:f5:3e:af:b7:41:31: container-test-run-certificates> ed:1b:6d:cc:fe:b0:f0:d2:fa:ae:c9:39:e7:83:98: container-test-run-certificates> 94:b2:cf:43:9e:4a:50:30:54:26:c9:fa:a9:fc:91: container-test-run-certificates> 7a:d4:4e:57:be:3e:d2:7e:2f:0f:2a:d7:97:e2:18: container-test-run-certificates> 29:f1:31:81:79 container-test-run-certificates> ASN1 OID: prime256v1 container-test-run-certificates> NIST CURVE: P-256 container-test-run-certificates> X509v3 extensions: container-test-run-certificates> X509v3 Key Usage: critical container-test-run-certificates> Digital Signature container-test-run-certificates> X509v3 Extended Key Usage: container-test-run-certificates> TLS Web Server Authentication, TLS Web Client Authentication container-test-run-certificates> X509v3 Subject Key Identifier: container-test-run-certificates> 70:6B:41:8C:8C:ED:15:D7:4A:C7:C8:82:29:93:61:4B:D8:7F:25:C2 container-test-run-certificates> X509v3 Authority Key Identifier: container-test-run-certificates> F4:A8:21:54:30:2C:89:EB:3D:0C:29:1E:E7:A9:7D:A5:94:14:4C:CF container-test-run-certificates> X509v3 Subject Alternative Name: container-test-run-certificates> DNS:test.foo container-test-run-certificates> 1.3.6.1.4.1.37476.9000.64.1: container-test-run-certificates> 0......acme.. container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Signature Value: container-test-run-certificates> 30:46:02:21:00:d2:3a:2c:0c:d0:be:bd:38:8f:47:e0:76:c0: container-test-run-certificates> 4b:f3:f5:db:b5:6d:86:5d:28:e0:b9:3f:bd:0a:89:3a:16:e8: container-test-run-certificates> f1:02:21:00:95:25:52:44:29:dc:81:52:a1:f0:6f:1d:5e:f3: container-test-run-certificates> d3:7e:c1:53:14:8c:08:7c:70:94:46:9d:87:23:2c:f1:64:4b container-test-run-certificates> client: (finished: must succeed: openssl s_client -connect test.foo:443 -servername test.foo /dev/null | openssl x509 -text -noout 1>&2, in 0.02 seconds) container-test-run-certificates> (finished: run the VM test script, in 8.04 seconds) container-test-run-certificates> test script finished in 8.19s container-test-run-certificates> cleanup container-test-run-certificates> kill NspawnMachine (pid 53) container-test-run-certificates> kill NspawnMachine (pid 54) container-test-run-certificates> Container ca terminated by signal KILL. container-test-run-certificates> kill NspawnMachine (pid 55) container-test-run-certificates> server # [7135455.446419] server acme-test.foo-start[337]: Waiting to acquire lock in /run/acme/ container-test-run-certificates> server # [7135455.448176] server acme-test.foo-start[337]: + '[' -e out/acme-success ']' container-test-run-certificates> server # [7135455.448176] server acme-test.foo-start[337]: + exit 0 container-test-run-certificates> server # [7135455.450718] server systemd[1]: Finished Ensure certificate for test.foo. container-test-run-certificates> server # [7135455.452679] server systemd[1]: Starting Order (and renew) ACME certificate for test.foo... container-test-run-certificates> Container client terminated by signal KILL. container-test-run-certificates> Container server terminated by signal KILL. container-test-run-certificates> (finished: cleanup, in 0.29 seconds) post-build step Upload to niks3: ok time=2026-08-22T00:05:13.794Z level=INFO msg="Uploading 0 paths to niks3.clan.lol (1 already cached)" time=2026-08-22T00:05:14.188Z level=INFO msg="Uploading 1 narinfos" time=2026-08-22T00:05:14.733Z level=INFO msg="Upload complete. (996ms)"