Machine state will be reset. To keep it, pass --keep-machine-state
start all VLans
(finished: start all VLans, in 0.00 seconds)

Test will time out and terminate in 3600.0 seconds
run the VM test script
additionally exposed symbols:
    server,
    vlan1,
    start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh
start all VMs
server: systemd-nspawn running (pid 51)
server: Waiting for journal at /build/vm-state-server/var/log/journal...
(finished: start all VMs, in 0.00 seconds)
server: waiting for unit multi-user.target
nixos-nspawn(server): TAP vde-tap1 not found; container will be isolated from VDE
nixos-nspawn(server): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.
Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.
░ Spawning container server on /build/vm-state-server.
server # [6900399.161804] server systemd-journald[79]: Journal started
server # [6900399.161860] server systemd-journald[79]: Runtime Journal (/run/log/journal/b7db0321b0eb402ea72fcf9077c0cd18) is 8M, max 2.5G, 2.4G free.
server # [6900399.171731] server systemd[1]: Starting Flush Journal to Persistent Storage...
server # [6900399.172594] server systemd[1]: Starting Network Name Resolution...
server # [6900399.173303] server systemd[1]: Starting Create Static Device Nodes in /dev...
server # [6900399.181953] server systemd-journald[79]: Time spent on flushing to /var/log/journal/b7db0321b0eb402ea72fcf9077c0cd18 is 1.285ms for 5 entries.
server # [6900399.181953] server systemd-journald[79]: System Journal (/var/log/journal/b7db0321b0eb402ea72fcf9077c0cd18) is 8M, max 4G, 3.9G free.
server # [6900399.188444] server systemd[1]: Finished Create Static Device Nodes in /dev.
server # [6900399.188687] server systemd[1]: Reached target Preparation for Local File Systems.
server # [6900399.188781] server systemd[1]: Reached target Local File Systems.
server # [6900399.189644] server systemd[1]: Listening on Boot Loader Control Service Socket.
server # [6900399.189692] server systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container
server # [6900399.190545] server systemd[1]: Starting Save Transient machine-id to Disk...
server # [6900399.190583] server systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys
server # [6900399.191582] server systemd[1]: Starting Network Management...
server # [6900399.204808] server systemd[1]: Finished Flush Journal to Persistent Storage.
server # [6900399.206783] server systemd[1]: Starting Create System Files and Directories...
server # [6900399.223337] server systemd-tmpfiles[95]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted
server # [6900399.223516] server systemd-tmpfiles[95]: fchmod() of /var/log/journal failed: Operation not permitted
server # [6900399.223635] server systemd-tmpfiles[95]: fchmod() of /var/log/journal/b7db0321b0eb402ea72fcf9077c0cd18 failed: Operation not permitted
server # [6900399.223814] server systemd-tmpfiles[95]: fchmod() of /run/log/journal failed: Operation not permitted
server # [6900399.225293] server systemd[1]: Finished Create System Files and Directories.
server # [6900399.226357] server systemd[1]: Starting Rebuild Journal Catalog...
server # [6900399.227074] server systemd[1]: Starting Record System Boot/Shutdown in UTMP...
server # [6900399.241037] server systemd[1]: Finished Record System Boot/Shutdown in UTMP.
server # [6900399.250120] server systemd[1]: Finished Rebuild Journal Catalog.
server # [6900399.251324] server systemd[1]: Starting Update is Completed...
server # [6900399.261468] server systemd[1]: Finished Update is Completed.
server # [6900399.338276] server systemd[1]: Finished Save Transient machine-id to Disk.
server # [6900399.541870] server systemd-networkd[91]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted
server # [6900399.541960] server systemd-networkd[91]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted
server # [6900399.548406] server systemd-networkd[91]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.
server # [6900399.548567] server systemd-networkd[91]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.
server # [6900399.548715] server systemd-networkd[91]: lo: Link UP
server # [6900399.548720] server systemd-networkd[91]: lo: Gained carrier
server # [6900399.548912] server systemd-networkd[91]: eth1: Configuring with /etc/systemd/network/40-eth1.network.
server # [6900399.549250] server systemd[1]: Started Network Management.
server # [6900399.549327] server systemd-networkd[91]: eth1: Link UP
server # [6900399.549578] server systemd-networkd[91]: eth1: Gained carrier
server # [6900399.550422] server systemd[1]: Starting Enable Persistent Storage in systemd-networkd...
server # [6900399.605484] server systemd[1]: Finished Enable Persistent Storage in systemd-networkd.
server # [6900399.753806] server systemd-resolved[86]: Positive Trust Anchors:
server # [6900399.753817] server systemd-resolved[86]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d
server # [6900399.753822] server systemd-resolved[86]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16
server # [6900399.753855] server systemd-resolved[86]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test
server # [6900399.775496] server systemd-resolved[86]: Using system hostname 'server'.
server # [6900399.776914] server systemd[1]: Started Network Name Resolution.
server # [6900399.777052] server systemd[1]: Reached target Network.
server # [6900399.777155] server systemd[1]: Reached target Network is Online.
server # [6900399.777254] server systemd[1]: Reached target System Initialization.
server # [6900399.777645] server systemd[1]: Started Renew ACME Certificate for test.example.com.
server # [6900399.777707] server systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container
server # [6900399.777752] server systemd[1]: Started Daily Cleanup of Temporary Directories.
server # [6900399.777792] server systemd[1]: Reached target Timer Units.
server # [6900399.778010] server systemd[1]: Listening on D-Bus System Message Bus Socket.
server # [6900399.778224] server systemd[1]: Listening on Nix Daemon Socket.
server # [6900399.778444] server systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.
server # [6900399.778496] server systemd[1]: Reached target Socket Units.
server # [6900399.778576] server systemd[1]: Reached target Basic System.
server # [6900399.780778] server systemd[1]: Starting Set up the ACME certificate renewal infrastructure...
server # [6900399.782206] server systemd[1]: Starting Dynamic DNS updater...
server # [6900399.783390] server systemd[1]: Starting Import lastlog data into lastlog2 database...
server # [6900399.783452] server systemd[1]: nginx-config-reload.service skipped, unmet condition check ConditionPathExists=/var/lib/acme/test.example.com/fullchain.pem
server # [6900399.784791] server systemd[1]: Starting Name Service Cache Daemon (nsncd)...
server # [6900399.786859] server systemd[1]: Starting D-Bus System Message Bus...
server # [6900399.802281] server systemd[1]: Finished Import lastlog data into lastlog2 database.
server # [6900399.865037] server acme-setup-privileged[107]: + set -euo pipefail
server # [6900399.865037] server acme-setup-privileged[107]: + cd /var/lib/acme
server # [6900399.865417] server acme-setup-privileged[107]: + chmod -R u=rwX,g=,o= .lego/accounts
server # [6900399.866368] server acme-setup-privileged[107]: + chown -R acme .lego/accounts
server # [6900399.868121] server acme-setup-privileged[107]: + for fixpath in test.example.com .lego/test.example.com
server # [6900399.868121] server acme-setup-privileged[107]: + '[' -d test.example.com ']'
server # [6900399.868121] server acme-setup-privileged[107]: + for fixpath in test.example.com .lego/test.example.com
server # [6900399.868121] server acme-setup-privileged[107]: + '[' -d .lego/test.example.com ']'
server # [6900399.879687] server nsncd[110]: Aug 27 20:10:25.932 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"
server # [6900399.879798] server systemd[1]: Started Name Service Cache Daemon (nsncd).
server # [6900399.879866] server systemd[1]: Reached target Host and Network Name Lookups.
server # [6900399.879924] server systemd[1]: Reached target User and Group Name Lookups.
server # [6900399.913107] server systemd[1]: Starting User Login Management...
server # [6900399.913946] server systemd[1]: Starting Permit User Sessions...
server # [6900399.925920] server systemd[1]: Finished Permit User Sessions.
server # [6900399.927668] server systemd[1]: Started Console Getty.
server # [6900399.927743] server systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0
server # [6900399.927778] server systemd[1]: Reached target Login Prompts.
server # [6900399.950329] server dbus-broker-launch[111]: Looking up NSS user entry for 'systemd-timesync'...
server # [6900399.951817] server dbus-broker-launch[111]: NSS returned no entry for 'systemd-timesync'
server # [6900399.951817] server dbus-broker-launch[111]: Invalid user-name in /nix/store/9hmzqw7jdd8k7i7ssmbk79qmbhcyajbj-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"
server # [6900399.952291] server systemd[1]: Started D-Bus System Message Bus.
server # [6900399.959873] server dbus-broker-launch[111]: Ready
server # [6900400.154442] server systemd[1]: etc-machine\x2did.mount: Deactivated successfully.
server # [6900400.236225] server generate_secret_config.py[108]: Config: {'settings': [{'domain': 'example.com', 'host': 'test', 'password': 'dyndns-namecheap-example.com', 'provider': 'namecheap', 'server': 'dynamicdns.park-your-domain.com'}]}
server # [6900400.317451] server systemd-logind[136]: New seat seat0.
server # [6900400.317757] server systemd[1]: Started User Login Management.
server # [6900400.319815] server systemd[1]: Starting linger-users.service...
server # [6900400.330549] server systemd[1]: linger-users.service: Deactivated successfully.
server # [6900400.330714] server systemd[1]: Finished linger-users.service.
server # [6900400.380389] server acme-setup-start[124]: + set -euo pipefail
server # [6900400.380389] server acme-setup-start[124]: + test -e ca/key.pem
server # [6900400.380734] server acme-setup-start[124]: + minica --ca-key ca/key.pem --ca-cert ca/cert.pem --domains selfsigned.local
server # [6900400.402366] server systemd[1]: Finished Set up the ACME certificate renewal infrastructure.
server # [6900400.404938] server systemd[1]: Starting Ensure certificate for test.example.com...
server # [6900400.686556] server systemd[1]: Started Dynamic DNS updater.
server # [6900400.719504] server ddns-updater[152]: ========================================
server # [6900400.719504] server ddns-updater[152]: ========================================
server # [6900400.719504] server ddns-updater[152]: ============= ddns-updater =============
server # [6900400.719504] server ddns-updater[152]: ========================================
server # [6900400.719504] server ddns-updater[152]: =========== Made with ❤️ by ============
server # [6900400.719504] server ddns-updater[152]: ======= https://github.com/qdm12 =======
server # [6900400.719504] server ddns-updater[152]: ========================================
server # [6900400.719504] server ddns-updater[152]: ========================================
server # [6900400.719504] server ddns-updater[152]: Running version unknown built on an unknown date (commit unknown)
server # [6900400.719504] server ddns-updater[152]: 🔧 Need help? ☕ Discussion? https://github.com/qdm12/ddns-updater/discussions/new/choose
server # [6900400.719504] server ddns-updater[152]: 🐛 Bug? ✨ New feature? https://github.com/qdm12/ddns-updater/issues/new/choose
server # [6900400.719504] server ddns-updater[152]: 💻 Email? quentin.mcgaw@gmail.com
server # [6900400.719504] server ddns-updater[152]: 💰 Help me? https://www.paypal.me/qmcgaw https://github.com/sponsors/qdm12
server # [6900400.719997] server ddns-updater[152]: 2026-08-27T20:10:26Z INFO Settings summary:
server # [6900400.719997] server ddns-updater[152]: ├── HTTP client
server # [6900400.719997] server ddns-updater[152]: |   └── Timeout: 20s
server # [6900400.719997] server ddns-updater[152]: ├── Update
server # [6900400.719997] server ddns-updater[152]: |   ├── Period: 1m0s
server # [6900400.719997] server ddns-updater[152]: |   └── Cooldown: 5m0s
server # [6900400.719997] server ddns-updater[152]: ├── Public IP fetching
server # [6900400.719997] server ddns-updater[152]: |   ├── HTTP enabled: yes
server # [6900400.719997] server ddns-updater[152]: |   ├── HTTP IP providers
server # [6900400.719997] server ddns-updater[152]: |   |   └── all
server # [6900400.719997] server ddns-updater[152]: |   ├── HTTP IPv4 providers
server # [6900400.719997] server ddns-updater[152]: |   |   └── all
server # [6900400.719997] server ddns-updater[152]: |   ├── HTTP IPv6 providers
server # [6900400.719997] server ddns-updater[152]: |   |   └── all
server # [6900400.719997] server ddns-updater[152]: |   ├── DNS enabled: yes
server # [6900400.719997] server ddns-updater[152]: |   ├── DNS timeout: 3s
server # [6900400.719997] server ddns-updater[152]: |   └── DNS over TLS providers
server # [6900400.719997] server ddns-updater[152]: |       └── all
server # [6900400.719997] server ddns-updater[152]: ├── Resolver: use Go default resolver
server # [6900400.719997] server ddns-updater[152]: ├── Server
server # [6900400.719997] server ddns-updater[152]: |   ├── Listening address: :54805
server # [6900400.719997] server ddns-updater[152]: |   └── Root URL: /
server # [6900400.719997] server ddns-updater[152]: ├── Health
server # [6900400.719997] server ddns-updater[152]: |   └── Server is disabled
server # [6900400.719997] server ddns-updater[152]: ├── Paths
server # [6900400.719997] server ddns-updater[152]: |   ├── Data directory: ./data
server # [6900400.719997] server ddns-updater[152]: |   ├── Config file: data/config.json
server # [6900400.719997] server ddns-updater[152]: |   └── Umask: system default
server # [6900400.719997] server ddns-updater[152]: ├── Backup: disabled
server # [6900400.719997] server ddns-updater[152]: └── Logger
server # [6900400.719997] server ddns-updater[152]:     ├── Level: INFO
server # [6900400.719997] server ddns-updater[152]:     └── Caller: hidden
server # [6900400.719997] server ddns-updater[152]: 2026-08-27T20:10:26Z INFO reading JSON config from file data/config.json
server # [6900400.720493] server ddns-updater[152]: 2026-08-27T20:10:26Z WARN you can specify the owner "test" directly in the domain field as "test.example.com"
server # [6900400.720493] server ddns-updater[152]: 2026-08-27T20:10:26Z ERROR validating provider specific settings: password is not valid: password "mock-prompt-value-dyndns-namecheap-example.com" does not match regex "^[a-f0-9]{32}$"
server # [6900400.720493] server ddns-updater[152]: 2026-08-27T20:10:26Z INFO Shutdown successful
server # [6900400.723956] server systemd[1]: dyndns.service: Main process exited, code=exited, status=1/FAILURE
server # [6900400.724095] server systemd[1]: dyndns.service: Failed with result 'exit-code'.
server # [6900400.868155] server systemd-networkd[91]: eth1: Gained IPv6LL
server # [6900400.868606] server acme-test.example.com-start[163]: Waiting to acquire lock in /run/acme/
server # [6900400.871495] server acme-test.example.com-start[163]: + '[' -e out/acme-success ']'
server # [6900400.871555] server acme-test.example.com-start[163]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=test.example.com --ip-addresses=
server # [6900400.886711] server acme-test.example.com-start[202]: + cd test.example.com
server # [6900400.886906] server acme-test.example.com-start[202]: + cp -vp cert.pem ../out/cert.pem
server # [6900400.888149] server acme-test.example.com-start[203]: 'cert.pem' -> '../out/cert.pem'
server # [6900400.888286] server acme-test.example.com-start[202]: + cp -vp key.pem ../out/key.pem
server # [6900400.889365] server acme-test.example.com-start[202]: 'key.pem' -> '../out/key.pem'
server # [6900400.889557] server acme-test.example.com-start[163]: + cat out/cert.pem ca/cert.pem
server # [6900400.891289] server acme-test.example.com-start[163]: + cp ca/cert.pem out/chain.pem
server # [6900400.892793] server acme-test.example.com-start[163]: + cat out/key.pem out/fullchain.pem
server # [6900400.894583] server acme-test.example.com-start[163]: + for fixpath in out certificates
server # [6900400.894609] server acme-test.example.com-start[163]: + '[' -d out ']'
server # [6900400.894609] server acme-test.example.com-start[163]: + chmod -R u=rwX,g=rX,o= out
server # [6900400.896370] server acme-test.example.com-start[163]: + chown -R acme:nginx out
server # [6900400.899793] server acme-test.example.com-start[163]: + for fixpath in out certificates
server # [6900400.899822] server acme-test.example.com-start[163]: + '[' -d certificates ']'
server # [6900400.903036] server systemd[1]: Finished Ensure certificate for test.example.com.
server # [6900400.904706] server systemd[1]: Starting Nginx Web Server...
server # [6900401.387312] server nginx-pre-start[214]: nginx: the configuration file /nix/store/x5mvy1shb8cj32nzzh21zk4qcqrwjl7r-nginx.conf syntax is ok
server # [6900401.387669] server nginx-pre-start[214]: nginx: configuration file /nix/store/x5mvy1shb8cj32nzzh21zk4qcqrwjl7r-nginx.conf test is successful
server # [6900401.392827] server systemd[1]: Started Nginx Web Server.
server # [6900401.393748] server systemd[1]: Reached target Multi-User System.
server # [6900401.396246] server systemd[1]: Starting Order (and renew) ACME certificate for test.example.com...
server # [6900401.846165] server acme-order-renew-test.example.com-start[217]: Waiting to acquire lock in /run/acme/
server # [6900401.850040] server acme-order-renew-test.example.com-start[217]: + set -euo pipefail
server # [6900401.850120] server acme-order-renew-test.example.com-start[217]: + echo bb6387b8f605b9fac186
server # [6900401.850231] server acme-order-renew-test.example.com-start[217]: + cmp -s domainhash.txt certificates/domainhash.txt
server # [6900401.851696] server acme-order-renew-test.example.com-start[217]: + lego --accept-tos --path . --email test@example.com --http --http.webroot /var/lib/acme/acme-challenge --server https://localhost:14000/dir --key-type ec256 -d test.example.com run
server # [6900401.883488] server acme-order-renew-test.example.com-start[228]: 2026/08/27 20:10:27 No key found for account test@example.com. Generating a P256 key.
server # [6900401.883873] server acme-order-renew-test.example.com-start[228]: 2026/08/27 20:10:27 Saved key to accounts/localhost_14000/test@example.com/keys/test@example.com.key
server: still waiting for container 'server' to reach ready state...
server: still waiting for container 'server' to reach ready state...
server: still waiting for container 'server' to reach ready state...
server: (finished: waiting for unit multi-user.target, in 34.67 seconds)
server: waiting for unit nginx.service
server: (finished: waiting for unit nginx.service, in 0.02 seconds)
server: waiting for TCP port 80 on localhost
Connection to localhost (::1) 80 port [tcp/http] succeeded!
server: (finished: waiting for TCP port 80 on localhost, in 0.01 seconds)
server: waiting for TCP port 443 on localhost
Connection to localhost (::1) 443 port [tcp/https] succeeded!
server: (finished: waiting for TCP port 443 on localhost, in 0.01 seconds)
server: must succeed: test -d /var/lib/dyndns
server: (finished: must succeed: test -d /var/lib/dyndns, in 0.01 seconds)
server: must succeed: /nix/store/02x438lhk40svzvmv4yxfccvq2jr00c4-nginx-1.30.4/bin/nginx -t
nginx: the configuration file /nix/store/02x438lhk40svzvmv4yxfccvq2jr00c4-nginx-1.30.4/conf/nginx.conf syntax is ok
nginx: configuration file /nix/store/02x438lhk40svzvmv4yxfccvq2jr00c4-nginx-1.30.4/conf/nginx.conf test is successful
server: (finished: must succeed: /nix/store/02x438lhk40svzvmv4yxfccvq2jr00c4-nginx-1.30.4/bin/nginx -t, in 0.01 seconds)
All tests passed!
(finished: run the VM test script, in 34.72 seconds)
server # [6900432.919188] server acme-order-renew-test.example.com-start[228]: 2026/08/27 20:10:58 Could not create client: get directory at 'https://localhost:14000/dir': Get "https://localhost:14000/dir": GET https://localhost:14000/dir giving up after 6 attempt(s): Get "https://localhost:14000/dir": dial tcp [::1]:14000: connect: connection refused
server # [6900432.922268] server acme-order-renew-test.example.com-start[217]: + echo Failed to fetch certificates. This may mean your DNS records are set up incorrectly. Self-signed certs are in place and dependant services will still start.
server # [6900432.922268] server acme-order-renew-test.example.com-start[217]: Failed to fetch certificates. This may mean your DNS records are set up incorrectly. Self-signed certs are in place and dependant services will still start.
server # [6900432.922268] server acme-order-renew-test.example.com-start[217]: + exit 10
server # [6900432.925210] server systemd[1]: acme-order-renew-test.example.com.service: Main process exited, code=exited, status=10/n/a
server # [6900432.925331] server systemd[1]: acme-order-renew-test.example.com.service: Failed with result 'exit-code'.
server # [6900432.925629] server systemd[1]: Failed to start Order (and renew) ACME certificate for test.example.com.
server # [6900432.944236] server systemd[1]: Startup finished in 34.166s.
test script finished in 35.04s
cleanup
kill NspawnMachine (pid 51)
Container server terminated by signal KILL.
(finished: cleanup, in 0.21 seconds)