these 35 derivations will be built: /nix/store/4s5lf3cijs5qr886088wfmk7bkf693b3-system-path.drv /nix/store/69yy69pl0ijzrgwbak5d6h5k6rkrbcq5-dbus-1.drv /nix/store/2v6vi46amcrc0axl9rghzsa9f5s3fj53-X-Restart-Triggers-dbus-broker.drv /nix/store/02aqhqx9d601mhhyajqdwqx4fmgwyrkr-unit-dbus-broker.service.drv /nix/store/7b62aqs463ikxqvvcb8bqj1vzri35kln-user-units.drv /nix/store/1ffclcv4gdrwz26h3nh0cakc307a5854-unit-dbus-broker.service.drv /nix/store/sgiadcs2636j79hlj98whs994kar61xn-system-units.drv /nix/store/rskjsa80jxbsxv0jifvdim3pwqsgr4hf-etc.drv /nix/store/a1mxlbnh8i2v2pvhwydpfvwkh610d0i8-activate.drv /nix/store/0alf6v4ch6jkqdamjwswsr36jp8khjzr-nixos-system-server-test.drv /nix/store/68bb8bvxd34nkmnky2fm0xrgkjkbmjwv-system-path.drv /nix/store/vvki9791nqj8r5z0b5z0ajv967wqarfb-dbus-1.drv /nix/store/n25r6683bznrkcm7dcxbsnjvvy20nasq-X-Restart-Triggers-dbus-broker.drv /nix/store/i8w7cwiq6hbhy3rswfk0jn5vqc0yp16p-unit-dbus-broker.service.drv /nix/store/23lzrmzxx2vbrwy0b512gfjrph31ffwz-system-units.drv /nix/store/qr6yrzlqs6makajdzs4phjpgncypl0l9-unit-dbus-broker.service.drv /nix/store/2r9frah86xgril7hg3174m0hsmfzzwvs-user-units.drv /nix/store/ba4pf1nspagkxyrrz4rf3m52fifyxrk1-system-path.drv /nix/store/i494byydi60xffmlkabxj3nsqg11j2c9-dbus-1.drv /nix/store/jjhkmnmwmz9691rgx0w5cpkp5d1lx6nx-X-Restart-Triggers-dbus-broker.drv /nix/store/rk8m97g3jzv853bqmhkpdji8wp5xrmgr-unit-dbus-broker.service.drv /nix/store/4mkqykfjpfq88ppdi3kwgj9nzwxjmjym-system-units.drv /nix/store/51fikj1yf9vl6wq7dsy325989fx3fmp5-etc.drv /nix/store/mkh27rvamnv7gml1mqsq51sv39db9fmw-closure-info.drv /nix/store/ynw0r3hchkwa70ybwryr46f7d45kx2ad-unit-dbus-broker.service.drv /nix/store/j6ai6wmifw2qvl014kz6y92wlf29f7b9-user-units.drv /nix/store/lcrlwf7cs4kmxj79v2rh8l7llpv9nxfy-etc.drv /nix/store/5rzrxaj7kh1x9g9c1dbifc5xry14c8ww-activate.drv /nix/store/nr39zrywwkn057r0qf0p016b6jhp788f-nixos-system-ca-test.drv /nix/store/9khh7vri2bd4s0rf21hh1c1lq2cgj3ig-activate.drv /nix/store/syirpmi0cyjk14dczh6nafzgcx6a8gib-nixos-system-client-test.drv /nix/store/p29r7844bgi6kz3m9qpiiyspipvqww6j-closure-info.drv /nix/store/qw6ydyy963n01iz0wdyqyz8zhclzixdy-closure-info.drv /nix/store/x6dknx0kwbsfkxz5hwnfmm8r7b629p26-nixos-test-driver-certificates.drv /nix/store/54j1sznqmm058cwjl3crzsdzxfrch32n-container-test-run-certificates.drv building '/nix/store/4s5lf3cijs5qr886088wfmk7bkf693b3-system-path.drv' building '/nix/store/68bb8bvxd34nkmnky2fm0xrgkjkbmjwv-system-path.drv' building '/nix/store/ba4pf1nspagkxyrrz4rf3m52fifyxrk1-system-path.drv' system-path> structuredAttrs is enabled system-path> structuredAttrs is enabled system-path> structuredAttrs is enabled system-path> created 1817 symlinks in user environment system-path> created 1817 symlinks in user environment system-path> created 1817 symlinks in user environment building '/nix/store/69yy69pl0ijzrgwbak5d6h5k6rkrbcq5-dbus-1.drv' building '/nix/store/i494byydi60xffmlkabxj3nsqg11j2c9-dbus-1.drv' building '/nix/store/vvki9791nqj8r5z0b5z0ajv967wqarfb-dbus-1.drv' building '/nix/store/2v6vi46amcrc0axl9rghzsa9f5s3fj53-X-Restart-Triggers-dbus-broker.drv' building '/nix/store/jjhkmnmwmz9691rgx0w5cpkp5d1lx6nx-X-Restart-Triggers-dbus-broker.drv' building '/nix/store/n25r6683bznrkcm7dcxbsnjvvy20nasq-X-Restart-Triggers-dbus-broker.drv' building '/nix/store/02aqhqx9d601mhhyajqdwqx4fmgwyrkr-unit-dbus-broker.service.drv' building '/nix/store/1ffclcv4gdrwz26h3nh0cakc307a5854-unit-dbus-broker.service.drv' building '/nix/store/i8w7cwiq6hbhy3rswfk0jn5vqc0yp16p-unit-dbus-broker.service.drv' building '/nix/store/qr6yrzlqs6makajdzs4phjpgncypl0l9-unit-dbus-broker.service.drv' building '/nix/store/rk8m97g3jzv853bqmhkpdji8wp5xrmgr-unit-dbus-broker.service.drv' building '/nix/store/ynw0r3hchkwa70ybwryr46f7d45kx2ad-unit-dbus-broker.service.drv' building '/nix/store/7b62aqs463ikxqvvcb8bqj1vzri35kln-user-units.drv' building '/nix/store/23lzrmzxx2vbrwy0b512gfjrph31ffwz-system-units.drv' building '/nix/store/4mkqykfjpfq88ppdi3kwgj9nzwxjmjym-system-units.drv' building '/nix/store/sgiadcs2636j79hlj98whs994kar61xn-system-units.drv' building '/nix/store/2r9frah86xgril7hg3174m0hsmfzzwvs-user-units.drv' building '/nix/store/j6ai6wmifw2qvl014kz6y92wlf29f7b9-user-units.drv' building '/nix/store/51fikj1yf9vl6wq7dsy325989fx3fmp5-etc.drv' building '/nix/store/lcrlwf7cs4kmxj79v2rh8l7llpv9nxfy-etc.drv' building '/nix/store/rskjsa80jxbsxv0jifvdim3pwqsgr4hf-etc.drv' building '/nix/store/9khh7vri2bd4s0rf21hh1c1lq2cgj3ig-activate.drv' building '/nix/store/syirpmi0cyjk14dczh6nafzgcx6a8gib-nixos-system-client-test.drv' building '/nix/store/5rzrxaj7kh1x9g9c1dbifc5xry14c8ww-activate.drv' building '/nix/store/a1mxlbnh8i2v2pvhwydpfvwkh610d0i8-activate.drv' nixos-system-client-test> structuredAttrs is enabled building '/nix/store/p29r7844bgi6kz3m9qpiiyspipvqww6j-closure-info.drv' building '/nix/store/nr39zrywwkn057r0qf0p016b6jhp788f-nixos-system-ca-test.drv' building '/nix/store/0alf6v4ch6jkqdamjwswsr36jp8khjzr-nixos-system-server-test.drv' closure-info> structuredAttrs is enabled nixos-system-ca-test> structuredAttrs is enabled building '/nix/store/qw6ydyy963n01iz0wdyqyz8zhclzixdy-closure-info.drv' nixos-system-server-test> structuredAttrs is enabled building '/nix/store/mkh27rvamnv7gml1mqsq51sv39db9fmw-closure-info.drv' closure-info> structuredAttrs is enabled closure-info> structuredAttrs is enabled building '/nix/store/x6dknx0kwbsfkxz5hwnfmm8r7b629p26-nixos-test-driver-certificates.drv' nixos-test-driver-certificates> Running type check (enable/disable: config.skipTypeCheck) nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck nixos-test-driver-certificates> Success: no issues found in 1 source file building '/nix/store/54j1sznqmm058cwjl3crzsdzxfrch32n-container-test-run-certificates.drv' container-test-run-certificates> additionally exposed symbols: container-test-run-certificates> ca, client, server, container-test-run-certificates> start_all, machines, driver, Machine, wait_for_signal container-test-run-certificates> Starting ca container-test-run-certificates> Starting client container-test-run-certificates> Starting server container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/5b42ilwygr1fzs5axg8pfapjmwjzh5v7-nixos-system-ca-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if4: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether 42:06:76:42:a9:8d brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.2 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/gph17gb73p6qbrqqjnypfjj5npf0ldyx-coreutils-9.11/bin/sleep 999999999 && echo dee6a731-1b43-4ae2-91b4-207327447b94' container-test-run-certificates> Running as unit: run-p469-i69023378.service; invocation ID: e9ecbd454e3345d995011d2b06ded504 container-test-run-certificates> To attach to container ca run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*dee6a731-1b43-4ae2-91b4-207327447b94') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/xqnbm0vgqcq9b1b54c80qj9s0qhbwa08-python3-3.13.15/bin/python3.13 /nix/store/3vj9yg33jlwxf0lg73ybh0v6myj1rzvs-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py dee6a731-1b43-4ae2-91b4-207327447b94 container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/8rqwmzh35ffndkz9hi8s5y2vfj7dkkcw-nixos-system-client-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if5: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether 2a:42:35:28:b1:2f brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.2 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/gph17gb73p6qbrqqjnypfjj5npf0ldyx-coreutils-9.11/bin/sleep 999999999 && echo 51bd5031-2397-4621-81ef-e35a1e83b39e' container-test-run-certificates> Running as unit: run-p304-i69023413.service; invocation ID: 784e9764d3ed4a79a35eb921934a9156 container-test-run-certificates> To attach to container client run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*51bd5031-2397-4621-81ef-e35a1e83b39e') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/xqnbm0vgqcq9b1b54c80qj9s0qhbwa08-python3-3.13.15/bin/python3.13 /nix/store/3vj9yg33jlwxf0lg73ybh0v6myj1rzvs-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py 51bd5031-2397-4621-81ef-e35a1e83b39e container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/yaifbwfjal7qpaci656h7wv5dcma2n1r-nixos-system-server-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if3: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether be:aa:dd:39:86:e7 brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.2 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/gph17gb73p6qbrqqjnypfjj5npf0ldyx-coreutils-9.11/bin/sleep 999999999 && echo f847edae-dee5-4ff2-afcc-d485aa4888ed' container-test-run-certificates> Running as unit: run-p401-i69023471.service; invocation ID: 9a1b709232da484cbf4034d736cb573e container-test-run-certificates> To attach to container server run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*f847edae-dee5-4ff2-afcc-d485aa4888ed') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/xqnbm0vgqcq9b1b54c80qj9s0qhbwa08-python3-3.13.15/bin/python3.13 /nix/store/3vj9yg33jlwxf0lg73ybh0v6myj1rzvs-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py f847edae-dee5-4ff2-afcc-d485aa4888ed container-test-run-certificates> + systemctl restart acme-order-renew-ca.foo.service container-test-run-certificates> + systemctl restart acme-test.foo.service container-test-run-certificates> client: waiting for success: curl -v https://test.foo container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1008 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [112 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Aug 30 15:03:59 2026 GMT container-test-run-certificates> * expire date: Sep 29 15:03:59 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 3d73c7 container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1008 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [110 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Aug 30 15:03:59 2026 GMT container-test-run-certificates> * expire date: Sep 29 15:03:59 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 3d73c7 container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1008 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [111 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Aug 30 15:03:59 2026 GMT container-test-run-certificates> * expire date: Sep 29 15:03:59 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 3d73c7 container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1008 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [112 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Aug 30 15:03:59 2026 GMT container-test-run-certificates> * expire date: Sep 29 15:03:59 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 3d73c7 container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [930 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [78 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Aug 30 15:03:13 2026 GMT container-test-run-certificates> * expire date: Nov 28 15:04:13 2026 GMT container-test-run-certificates> * issuer: CN=Clan Intermediate CA container-test-run-certificates> * Certificate level 0: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 1: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 2: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 0 container-test-run-certificates> * SSL certificate verified via OpenSSL. container-test-run-certificates> * Established connection to test.foo (192.168.1.3 port 443) from 192.168.1.2 port 45758 container-test-run-certificates> % Total % Received % Xferd Average Speed Time Time Time Current container-test-run-certificates> Dload Upload Total Spent Left Speed container-test-run-certificates> 0 0 0 0 0 0 0 0 0* using HTTP/2 container-test-run-certificates> * [HTTP/2] [1] OPENED stream for https://test.foo/ container-test-run-certificates> * [HTTP/2] [1] [:method: GET] container-test-run-certificates> * [HTTP/2] [1] [:scheme: https] container-test-run-certificates> * [HTTP/2] [1] [:authority: test.foo] container-test-run-certificates> * [HTTP/2] [1] [:path: /] container-test-run-certificates> * [HTTP/2] [1] [user-agent: curl/8.21.0] container-test-run-certificates> * [HTTP/2] [1] [accept: */*] container-test-run-certificates> } [5 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> * Request completely sent off container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> { [5 bytes data] container-test-run-certificates> 100 20 100 20 0 0 1243 0 0 container-test-run-certificates> * Connection #0 to host test.foo:443 left intact container-test-run-certificates> (finished: waiting for success: curl -v https://test.foo, in 4.14 seconds) container-test-run-certificates> + openssl s_client -connect test.foo:443 -servername test.foo container-test-run-certificates> + openssl x509 -text -noout container-test-run-certificates> Certificate: container-test-run-certificates> Data: container-test-run-certificates> Version: 3 (0x2) container-test-run-certificates> Serial Number: container-test-run-certificates> c9:63:61:dc:96:a3:08:44:ba:9a:02:16:94:8e:71:3f container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Issuer: CN=Clan Intermediate CA container-test-run-certificates> Validity container-test-run-certificates> Not Before: Aug 30 15:03:13 2026 GMT container-test-run-certificates> Not After : Nov 28 15:04:13 2026 GMT container-test-run-certificates> Subject: CN=test.foo container-test-run-certificates> Subject Public Key Info: container-test-run-certificates> Public Key Algorithm: id-ecPublicKey container-test-run-certificates> Public-Key: (256 bit) container-test-run-certificates> pub: container-test-run-certificates> 04:68:10:13:f6:c6:c7:41:4f:bb:9c:5d:5a:fb:ce: container-test-run-certificates> e0:a8:05:97:fd:73:60:aa:34:b9:f6:22:ba:84:d9: container-test-run-certificates> 52:2f:61:37:3d:90:c6:15:52:b6:42:ce:d1:00:82: container-test-run-certificates> 14:fd:86:ef:02:c5:b5:1b:6a:3f:d8:37:90:ae:34: container-test-run-certificates> 6d:e0:fa:c0:db container-test-run-certificates> ASN1 OID: prime256v1 container-test-run-certificates> NIST CURVE: P-256 container-test-run-certificates> X509v3 extensions: container-test-run-certificates> X509v3 Key Usage: critical container-test-run-certificates> Digital Signature container-test-run-certificates> X509v3 Extended Key Usage: container-test-run-certificates> TLS Web Server Authentication, TLS Web Client Authentication container-test-run-certificates> X509v3 Subject Key Identifier: container-test-run-certificates> A3:E9:5B:CC:A3:A3:06:53:89:BB:A6:F7:E7:2E:FD:7E:CC:CD:D0:58 container-test-run-certificates> X509v3 Authority Key Identifier: container-test-run-certificates> 61:B6:91:DE:EA:FA:45:86:F8:70:80:89:46:D9:68:F6:09:6F:1D:AD container-test-run-certificates> X509v3 Subject Alternative Name: container-test-run-certificates> DNS:test.foo container-test-run-certificates> 1.3.6.1.4.1.37476.9000.64.1: container-test-run-certificates> 0......acme.. container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Signature Value: container-test-run-certificates> 30:44:02:20:57:9f:72:34:53:72:ba:a6:98:c7:d0:61:e4:f8: container-test-run-certificates> 19:f6:b0:de:af:78:a8:be:20:94:4b:ec:b1:95:09:d4:ae:60: container-test-run-certificates> 02:20:29:9b:1a:02:5e:7f:86:07:78:84:2b:79:7c:37:55:72: container-test-run-certificates> f2:87:2f:6a:67:58:b3:73:b7:97:f3:4b:10:d2:dd:09 container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> post-build step Upload to niks3: ok time=2026-08-30T15:04:17.647Z level=INFO msg="Uploading 0 paths to niks3.clan.lol (1 already cached)" time=2026-08-30T15:04:18.485Z level=INFO msg="Uploading 1 narinfos" time=2026-08-30T15:04:19.401Z level=INFO msg="Upload complete. (1.831s)"