these 95 derivations will be built: /nix/store/61945sfwyfd3rrnnycdi3i01b295vkqp-decrypt-age-secrets.drv /nix/store/n3pcql3kxl7qdz8rznx65ba10340ja0j-users-groups.json.drv /nix/store/07gfaji1q61m0r9xw6cap3kr0k0nxn0g-dry-activate.drv /nix/store/3kyw2xyda8jlbvry7xw0wx6mcavibsqw-ca.json.drv /nix/store/0jrnqy9mb4mpf4m9xa175z5y0vbpbv4j-X-Restart-Triggers-step-ca.drv /nix/store/hzhyn6p7596aacax0n6il7fx747y543j-system-path.drv /nix/store/l3xzz4s6356ydwb2xakxax2zcz32gyl1-dbus-1.drv /nix/store/106a3bfcask61xpjyzhik8ihyjxgfxsn-X-Restart-Triggers-dbus-broker.drv /nix/store/ax4ccrgqi8qk5c9ppx4ycm0xm6xviisi-system-path.drv /nix/store/lm95giifd0dhq1kdq5mb1znhn6x4p6x7-nixos-tmpfiles.d.drv /nix/store/3f21pafjia6ggjsxw17b6bbkw3hwniyi-tmpfiles.d.drv /nix/store/3z64pz59i9qs2j4ibaxf5cgj128pbpbd-X-Restart-Triggers-acme-ca.foo.drv /nix/store/9ih973wng9cbgnw5yibjnv7v433fdncp-unit-script-acme-ca.foo-start.drv /nix/store/22wdlwnfq80a4gf3q30nmczyzn1br71h-unit-acme-ca.foo.service.drv /nix/store/9cd74clc1n9rf0cpabxbryy23kkkxpz4-nss-cacert-3.126.drv /nix/store/2phfgajgd4lpj2r54630ni3bwqpa6pzm-unit-nix-daemon.service.drv /nix/store/rdxhp0awj9fb0vdx5srklv00ii428ccq-firewall-start.drv /nix/store/d97jkgjnw0qa3ficf4fi9rd83kkbqd7m-firewall-reload.drv /nix/store/36hmmd9m408dxc87qiq720gdwbzd9s0b-unit-firewall.service.drv /nix/store/4dzyy8fmxm5z2a65d2gmg0cfnz0xwcmi-acme-postrun.drv /nix/store/kndwyk76bziyv42hdjc47fy545jcjlhy-unit-script-acme-order-renew-ca.foo-start.drv /nix/store/4fsvs6h1wgd8vrq60phvmg538s3v4sib-unit-acme-order-renew-ca.foo.service.drv /nix/store/6hmf8wxyrsw86iyvd95yhcgaxfah02j2-nginx.conf.drv /nix/store/mqf8mgpqgpy6qyyb0aavfvf1c5g0bc1p-unit-script-nginx-pre-start.drv /nix/store/7q1sabn7nvschiqlss14ki9zy56smnbb-unit-nginx.service.drv /nix/store/sascxnqw22b9adqk1kz81gx72vj5a3xv-X-Restart-Triggers-systemd-tmpfiles-resetup.drv /nix/store/8bzah42yn3yj3f2jii15n4sqlcsi6s74-unit-systemd-tmpfiles-resetup.service.drv /nix/store/g4c8l8cqa5vxzam9i9pica0x5008z2kk-dbus-1.drv /nix/store/2v1ln30rqzry16bgifhism227bxrsg5l-X-Restart-Triggers-dbus-broker.drv /nix/store/cakxpxv88cbncq32mis7s67bz73ds9ab-unit-dbus-broker.service.drv /nix/store/lacmwdd44dzgw2x62bsf3j9i2n527pls-unit-nginx-config-reload.service.drv /nix/store/qzrff8d16pllfdkc5f6yz3rkp3sniq2n-unit-step-ca.service.drv /nix/store/nhcgml3c92azgy1l9g42hk91dkp16pyp-acme-setup-privileged.drv /nix/store/s9km8agrqzqzbcns8xyn4ypw7jjkr7af-unit-acme-setup.service.drv /nix/store/vx4k4ah41xarp8mc8y4wjqi5whmr3g9c-unit-acme-renew-ca.foo.timer.drv /nix/store/ws9p9f1ilid28mxihffhl70mkys7m3wj-unit-acme-account-d22a46d9459bf683a338.target.drv /nix/store/5b69jy615x7djplkwn78irpja85vhwsj-system-units.drv /nix/store/h90nzzi0faylcbdgwr1hc7zwkgzxyv1z-unit-dbus-broker.service.drv /nix/store/86qw7xlfw54gm3zmkfwzkl557av240y4-user-units.drv /nix/store/d1fswwvs0xfpn1fjv70mspv1bq2hfjm6-system-shutdown.drv /nix/store/gzlcjzpyd0hsmrchcqa1vicws9smqkmg-user-generators.drv /nix/store/ji5z680ajfdb50340zz888kwws981h0l-etc-hostname.drv /nix/store/msvcmqhmajssll92gjai5phf8jw6pyac-vars-check-certificates.drv /nix/store/n14qd3dpmwqhr1lz7y188inbriphna20-system-generators.drv /nix/store/8600386bxqaa15pag4dvba7696g9zf2n-extra-hosts.drv /nix/store/lnad1cpwsdc1qc9azf0zgx7zjg6625vg-string-hosts.drv /nix/store/x1pznybbws35d4zvijmba9pzq23qg255-hosts.drv /nix/store/c3h8b9m1n9yh24gzqkwmaaypa7miikx0-etc.drv /nix/store/wf4gxdc7bmck84ij2rn6lzwbr1xh9w17-activate.drv /nix/store/1h3qa7975wnbzx8bx3kjvzqwz895q4l4-nixos-system-ca-test.drv /nix/store/hmm2bx0wzw811hrag8g58hj3r5bhd709-X-Restart-Triggers-acme-test.foo.drv /nix/store/v2dkfbyzaflr3vic7zy0dpg1r7zf5sw6-unit-script-acme-test.foo-start.drv /nix/store/1v3vxm3nksax5ha6lgbhxbkyy3dryrln-unit-acme-test.foo.service.drv /nix/store/1zyfa4xzwkrj97a2h95n0cppkvimscqf-test-script.drv /nix/store/31rj4mgq1nwypvkvdpb0v0gcg51l03xz-acme-postrun.drv /nix/store/3mfjg63hxjhyhkspdbcpqydcyaw0k97h-hosts.drv /nix/store/bcmq80lk54w2vla35y6hw3ahirkvnyhh-run-ca-nspawn.drv /nix/store/wm7bhdsgk7maxq6hxb34j1yf9infbqgb-users-groups.json.drv /nix/store/a6f5v1ha6ln4aa1nyzwj5xm3knid64y6-dry-activate.drv /nix/store/kpfsx09pgqwnbiarmcjq7k9lig14352a-system-path.drv /nix/store/x7cvq6hp1rlzws915d0z6qs5hxkvwq3c-dbus-1.drv /nix/store/lvyfmf027gnyxj8hp7ryqy585givbbz0-X-Restart-Triggers-dbus-broker.drv /nix/store/v2dn16sis8z9wh6bqr0654m97cxsl31g-unit-dbus-broker.service.drv /nix/store/d90mfjvcalxq611ghwgc6gk793mwhmcv-user-units.drv /nix/store/p125j5y841vij8f2i3nycjnfkja6sqlh-unit-40-eth1.network.drv /nix/store/ww8y4r13kk1cwgibi3dsf04jk0zk0qpl-nginx.conf.drv /nix/store/nnpcbxx524xdjpj1nff6932h8ay8h3pf-unit-script-nginx-pre-start.drv /nix/store/8f3bcg9nhxcsfhz5jrqn80rsy2h2whjk-unit-nginx.service.drv /nix/store/8w3wfr0x961r4hy2ailivajx4dbg2fvb-unit-acme-renew-test.foo.timer.drv /nix/store/pnalsl2s49yjr48wgvnxagmx8lh49m9p-unit-script-acme-order-renew-test.foo-start.drv /nix/store/9pq23bipqykvy0c10a34z06rsm3v6gsl-unit-acme-order-renew-test.foo.service.drv /nix/store/jp075pp74n5kparfwa0474hgsjz4wnmb-unit-dbus-broker.service.drv /nix/store/lnh2ygxjgqwmhkinkgvvs4cf04s9aakk-unit-nginx-config-reload.service.drv /nix/store/lsyp04hby1xb4dmfmpfvgbxzgh4yl1z6-unit-acme-account-2c44cb477b4787b2cf13.target.drv /nix/store/4inmh5fdqgkrzz6qn5pij4h2vf3vzn6h-X-Reload-Triggers-systemd-networkd.drv /nix/store/m5jrjkdvsckhlq58vrfc85h8hkf99fp4-unit-systemd-networkd.service.drv /nix/store/wajgh70k44pmyjzlf689zf4v98kpfq0s-acme-setup-privileged.drv /nix/store/zrfg1fd7pkck9wnj2c62mynfwch1hb55-unit-acme-setup.service.drv /nix/store/rj7xh2h4ifsh69951zviawjxypgh2hy0-system-units.drv /nix/store/lmy2yc35sgi6diszwhx1knxsq9gcrf88-etc.drv /nix/store/lci5gscc4islbsygy6wvb6ma4wy5njpc-activate.drv /nix/store/qwhm26qls1kh5x0v61z5d3s4z4v52p4f-nixos-system-server-test.drv /nix/store/ns9gcvwibaaqsf33l8bpvfni6vj2iavm-run-server-nspawn.drv /nix/store/6zgwah06s2hnhglgy407pjhviai732fl-unit-dbus-broker.service.drv /nix/store/gii5lmvdsnhh61216sjris35ayk3bhv4-system-units.drv /nix/store/kjjxn1q8w1ibsyafz9hwd3lm668h80cd-hosts.drv /nix/store/wnjz9jqqdp1yyhyy3fmzfhs1xfklbdx2-unit-dbus-broker.service.drv /nix/store/y42jdc0khvg45c6vwahscgg62b9588ra-user-units.drv /nix/store/l5p6rs371s1za2kzl9kx40dkz2v426gd-etc.drv /nix/store/hgcr0gc8nw5pr9sd21yrgca9sxzqrq6c-activate.drv /nix/store/bff0s9dgjmkdl5pb86m3agsxc3c2sljb-nixos-system-client-test.drv /nix/store/yvigcccysffz5ngbggafmngbqa1aqzgb-run-client-nspawn.drv /nix/store/8p0nghisyymkhj0d6sl4a7rrcbchi4xf-driverConfiguration.json.drv /nix/store/498z91q5z2xykllid7lk9p173i0j9nhv-nixos-test-driver-certificates.drv /nix/store/wfsmawq7mjz18fk55q6f0k2z8hhymm4x-container-test-run-certificates.drv these 3 paths will be fetched (24.4 MiB download, 77.3 MiB unpacked): /nix/store/7ax2mr4fszclbz94ky41ia2n5r6q94jn-openssl-3.6.3-man /nix/store/mabj8vrffrvzhnc1m76awgdm04p9zygr-python3.14-buildcatrust-0.5.1 /nix/store/51xw1kjjxjyfkljcqsl879nvvh97vxp0-step-ca-0.30.2 building '/nix/store/1zyfa4xzwkrj97a2h95n0cppkvimscqf-test-script.drv' building '/nix/store/ji5z680ajfdb50340zz888kwws981h0l-etc-hostname.drv' building '/nix/store/6hmf8wxyrsw86iyvd95yhcgaxfah02j2-nginx.conf.drv' building '/nix/store/ww8y4r13kk1cwgibi3dsf04jk0zk0qpl-nginx.conf.drv' building '/nix/store/p125j5y841vij8f2i3nycjnfkja6sqlh-unit-40-eth1.network.drv' building '/nix/store/8600386bxqaa15pag4dvba7696g9zf2n-extra-hosts.drv' building '/nix/store/lm95giifd0dhq1kdq5mb1znhn6x4p6x7-nixos-tmpfiles.d.drv' building '/nix/store/lnad1cpwsdc1qc9azf0zgx7zjg6625vg-string-hosts.drv' building '/nix/store/lsyp04hby1xb4dmfmpfvgbxzgh4yl1z6-unit-acme-account-2c44cb477b4787b2cf13.target.drv' building '/nix/store/ws9p9f1ilid28mxihffhl70mkys7m3wj-unit-acme-account-d22a46d9459bf683a338.target.drv' nginx.conf> structuredAttrs is enabled nginx.conf> structuredAttrs is enabled unit-40-eth1.network> structuredAttrs is enabled unit-acme-account-2c44cb477b4787b2cf13.target> structuredAttrs is enabled unit-acme-account-d22a46d9459bf683a338.target> structuredAttrs is enabled building '/nix/store/3z64pz59i9qs2j4ibaxf5cgj128pbpbd-X-Restart-Triggers-acme-ca.foo.drv' building '/nix/store/rdxhp0awj9fb0vdx5srklv00ii428ccq-firewall-start.drv' nginx.conf> nginx.conf> ==================== Results =================== nginx.conf> No issues found. nginx.conf> nginx.conf> ==================== Summary =================== nginx.conf> Total issues: nginx.conf> Unspecified: 0 nginx.conf> Low: 0 nginx.conf> Medium: 0 nginx.conf> High: 0 nginx.conf> building '/nix/store/9ih973wng9cbgnw5yibjnv7v433fdncp-unit-script-acme-ca.foo-start.drv' building '/nix/store/kndwyk76bziyv42hdjc47fy545jcjlhy-unit-script-acme-order-renew-ca.foo-start.drv' building '/nix/store/pnalsl2s49yjr48wgvnxagmx8lh49m9p-unit-script-acme-order-renew-test.foo-start.drv' building '/nix/store/v2dkfbyzaflr3vic7zy0dpg1r7zf5sw6-unit-script-acme-test.foo-start.drv' building '/nix/store/msvcmqhmajssll92gjai5phf8jw6pyac-vars-check-certificates.drv' on 'ssh-ng://builder@build-x86-01.clan.lol' nginx.conf> nginx.conf> ==================== Results =================== nginx.conf> No issues found. nginx.conf> nginx.conf> ==================== Summary =================== nginx.conf> Total issues: nginx.conf> Unspecified: 0 nginx.conf> Low: 0 nginx.conf> Medium: 0 nginx.conf> High: 0 nginx.conf> building '/nix/store/hmm2bx0wzw811hrag8g58hj3r5bhd709-X-Restart-Triggers-acme-test.foo.drv' building '/nix/store/31rj4mgq1nwypvkvdpb0v0gcg51l03xz-acme-postrun.drv' building '/nix/store/4dzyy8fmxm5z2a65d2gmg0cfnz0xwcmi-acme-postrun.drv' building '/nix/store/nhcgml3c92azgy1l9g42hk91dkp16pyp-acme-setup-privileged.drv' building '/nix/store/wajgh70k44pmyjzlf689zf4v98kpfq0s-acme-setup-privileged.drv' building '/nix/store/vx4k4ah41xarp8mc8y4wjqi5whmr3g9c-unit-acme-renew-ca.foo.timer.drv' building '/nix/store/8w3wfr0x961r4hy2ailivajx4dbg2fvb-unit-acme-renew-test.foo.timer.drv' building '/nix/store/lacmwdd44dzgw2x62bsf3j9i2n527pls-unit-nginx-config-reload.service.drv' building '/nix/store/lnh2ygxjgqwmhkinkgvvs4cf04s9aakk-unit-nginx-config-reload.service.drv' unit-acme-renew-ca.foo.timer> structuredAttrs is enabled unit-acme-renew-test.foo.timer> structuredAttrs is enabled unit-nginx-config-reload.service> structuredAttrs is enabled unit-nginx-config-reload.service> structuredAttrs is enabled building '/nix/store/4inmh5fdqgkrzz6qn5pij4h2vf3vzn6h-X-Reload-Triggers-systemd-networkd.drv' building '/nix/store/d97jkgjnw0qa3ficf4fi9rd83kkbqd7m-firewall-reload.drv' building '/nix/store/kpfsx09pgqwnbiarmcjq7k9lig14352a-system-path.drv' building '/nix/store/3f21pafjia6ggjsxw17b6bbkw3hwniyi-tmpfiles.d.drv' building '/nix/store/n3pcql3kxl7qdz8rznx65ba10340ja0j-users-groups.json.drv' building '/nix/store/wm7bhdsgk7maxq6hxb34j1yf9infbqgb-users-groups.json.drv' system-path> structuredAttrs is enabled building '/nix/store/22wdlwnfq80a4gf3q30nmczyzn1br71h-unit-acme-ca.foo.service.drv' building '/nix/store/9pq23bipqykvy0c10a34z06rsm3v6gsl-unit-acme-order-renew-test.foo.service.drv' building '/nix/store/s9km8agrqzqzbcns8xyn4ypw7jjkr7af-unit-acme-setup.service.drv' building '/nix/store/mqf8mgpqgpy6qyyb0aavfvf1c5g0bc1p-unit-script-nginx-pre-start.drv' building '/nix/store/nnpcbxx524xdjpj1nff6932h8ay8h3pf-unit-script-nginx-pre-start.drv' building '/nix/store/9cd74clc1n9rf0cpabxbryy23kkkxpz4-nss-cacert-3.126.drv' on 'ssh-ng://builder@build-x86-01.clan.lol' building '/nix/store/61945sfwyfd3rrnnycdi3i01b295vkqp-decrypt-age-secrets.drv' on 'ssh-ng://builder@build-x86-01.clan.lol' system-path> created 1723 symlinks in user environment unit-acme-ca.foo.service> structuredAttrs is enabled unit-acme-order-renew-test.foo.service> structuredAttrs is enabled unit-acme-setup.service> structuredAttrs is enabled building '/nix/store/3kyw2xyda8jlbvry7xw0wx6mcavibsqw-ca.json.drv' building '/nix/store/3mfjg63hxjhyhkspdbcpqydcyaw0k97h-hosts.drv' building '/nix/store/kjjxn1q8w1ibsyafz9hwd3lm668h80cd-hosts.drv' building '/nix/store/ax4ccrgqi8qk5c9ppx4ycm0xm6xviisi-system-path.drv' building '/nix/store/hzhyn6p7596aacax0n6il7fx747y543j-system-path.drv' building '/nix/store/1v3vxm3nksax5ha6lgbhxbkyy3dryrln-unit-acme-test.foo.service.drv' ca.json> structuredAttrs is enabled system-path> structuredAttrs is enabled system-path> structuredAttrs is enabled unit-acme-test.foo.service> structuredAttrs is enabled building '/nix/store/a6f5v1ha6ln4aa1nyzwj5xm3knid64y6-dry-activate.drv' building '/nix/store/n14qd3dpmwqhr1lz7y188inbriphna20-system-generators.drv' building '/nix/store/7q1sabn7nvschiqlss14ki9zy56smnbb-unit-nginx.service.drv' building '/nix/store/8f3bcg9nhxcsfhz5jrqn80rsy2h2whjk-unit-nginx.service.drv' building '/nix/store/m5jrjkdvsckhlq58vrfc85h8hkf99fp4-unit-systemd-networkd.service.drv' building '/nix/store/gzlcjzpyd0hsmrchcqa1vicws9smqkmg-user-generators.drv' system-path> created 1723 symlinks in user environment system-path> created 1723 symlinks in user environment unit-nginx.service> structuredAttrs is enabled unit-nginx.service> structuredAttrs is enabled unit-systemd-networkd.service> structuredAttrs is enabled building '/nix/store/x1pznybbws35d4zvijmba9pzq23qg255-hosts.drv' building '/nix/store/d1fswwvs0xfpn1fjv70mspv1bq2hfjm6-system-shutdown.drv' building '/nix/store/4fsvs6h1wgd8vrq60phvmg538s3v4sib-unit-acme-order-renew-ca.foo.service.drv' building '/nix/store/zrfg1fd7pkck9wnj2c62mynfwch1hb55-unit-acme-setup.service.drv' unit-acme-order-renew-ca.foo.service> structuredAttrs is enabled unit-acme-setup.service> structuredAttrs is enabled building '/nix/store/0jrnqy9mb4mpf4m9xa175z5y0vbpbv4j-X-Restart-Triggers-step-ca.drv' building '/nix/store/sascxnqw22b9adqk1kz81gx72vj5a3xv-X-Restart-Triggers-systemd-tmpfiles-resetup.drv' building '/nix/store/x7cvq6hp1rlzws915d0z6qs5hxkvwq3c-dbus-1.drv' building '/nix/store/36hmmd9m408dxc87qiq720gdwbzd9s0b-unit-firewall.service.drv' building '/nix/store/g4c8l8cqa5vxzam9i9pica0x5008z2kk-dbus-1.drv' building '/nix/store/l3xzz4s6356ydwb2xakxax2zcz32gyl1-dbus-1.drv' unit-firewall.service> structuredAttrs is enabled building '/nix/store/2v1ln30rqzry16bgifhism227bxrsg5l-X-Restart-Triggers-dbus-broker.drv' building '/nix/store/lvyfmf027gnyxj8hp7ryqy585givbbz0-X-Restart-Triggers-dbus-broker.drv' building '/nix/store/qzrff8d16pllfdkc5f6yz3rkp3sniq2n-unit-step-ca.service.drv' building '/nix/store/8bzah42yn3yj3f2jii15n4sqlcsi6s74-unit-systemd-tmpfiles-resetup.service.drv' unit-step-ca.service> structuredAttrs is enabled building '/nix/store/106a3bfcask61xpjyzhik8ihyjxgfxsn-X-Restart-Triggers-dbus-broker.drv' unit-systemd-tmpfiles-resetup.service> structuredAttrs is enabled building '/nix/store/cakxpxv88cbncq32mis7s67bz73ds9ab-unit-dbus-broker.service.drv' building '/nix/store/h90nzzi0faylcbdgwr1hc7zwkgzxyv1z-unit-dbus-broker.service.drv' building '/nix/store/jp075pp74n5kparfwa0474hgsjz4wnmb-unit-dbus-broker.service.drv' building '/nix/store/v2dn16sis8z9wh6bqr0654m97cxsl31g-unit-dbus-broker.service.drv' unit-dbus-broker.service> structuredAttrs is enabled unit-dbus-broker.service> structuredAttrs is enabled unit-dbus-broker.service> structuredAttrs is enabled building '/nix/store/6zgwah06s2hnhglgy407pjhviai732fl-unit-dbus-broker.service.drv' building '/nix/store/wnjz9jqqdp1yyhyy3fmzfhs1xfklbdx2-unit-dbus-broker.service.drv' unit-dbus-broker.service> structuredAttrs is enabled unit-dbus-broker.service> structuredAttrs is enabled building '/nix/store/86qw7xlfw54gm3zmkfwzkl557av240y4-user-units.drv' unit-dbus-broker.service> structuredAttrs is enabled building '/nix/store/d90mfjvcalxq611ghwgc6gk793mwhmcv-user-units.drv' building '/nix/store/y42jdc0khvg45c6vwahscgg62b9588ra-user-units.drv' building '/nix/store/msvcmqhmajssll92gjai5phf8jw6pyac-vars-check-certificates.drv' vars-check-certificates> Running vars check using Nix-based executor... vars-check-certificates> ✓ All vars checks completed successfully building '/nix/store/9cd74clc1n9rf0cpabxbryy23kkkxpz4-nss-cacert-3.126.drv' nss-cacert-3.126> structuredAttrs is enabled nss-cacert-3.126> Running phase: unpackPhase nss-cacert-3.126> Running phase: patchPhase nss-cacert-3.126> Running phase: updateAutotoolsGnuConfigScriptsPhase nss-cacert-3.126> Running phase: configurePhase nss-cacert-3.126> no configure script, doing nothing nss-cacert-3.126> Running phase: buildPhase building '/nix/store/61945sfwyfd3rrnnycdi3i01b295vkqp-decrypt-age-secrets.drv' building '/nix/store/07gfaji1q61m0r9xw6cap3kr0k0nxn0g-dry-activate.drv' nss-cacert-3.126> Running phase: installPhase nss-cacert-3.126> Running phase: fixupPhase nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/9cmv8piza7bbv2rakfh1dzi8g2ch6lpf-nss-cacert-3.126-p11kit nss-cacert-3.126> checking for references to /build/ in /nix/store/9cmv8piza7bbv2rakfh1dzi8g2ch6lpf-nss-cacert-3.126-p11kit... nss-cacert-3.126> patching script interpreter paths in /nix/store/9cmv8piza7bbv2rakfh1dzi8g2ch6lpf-nss-cacert-3.126-p11kit nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/1grgdj4sskd0ymqibwvmdbvb6y74ml5b-nss-cacert-3.126-hashed nss-cacert-3.126> checking for references to /build/ in /nix/store/1grgdj4sskd0ymqibwvmdbvb6y74ml5b-nss-cacert-3.126-hashed... nss-cacert-3.126> patching script interpreter paths in /nix/store/1grgdj4sskd0ymqibwvmdbvb6y74ml5b-nss-cacert-3.126-hashed nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/m2hxjdqmgixi6zrd1y5fml8bvmcqsjyi-nss-cacert-3.126 nss-cacert-3.126> checking for references to /build/ in /nix/store/m2hxjdqmgixi6zrd1y5fml8bvmcqsjyi-nss-cacert-3.126... nss-cacert-3.126> patching script interpreter paths in /nix/store/m2hxjdqmgixi6zrd1y5fml8bvmcqsjyi-nss-cacert-3.126 nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/hgsx72qhjys4xaf25ksx1fx6fws0gzh2-nss-cacert-3.126-unbundled nss-cacert-3.126> checking for references to /build/ in /nix/store/hgsx72qhjys4xaf25ksx1fx6fws0gzh2-nss-cacert-3.126-unbundled... nss-cacert-3.126> patching script interpreter paths in /nix/store/hgsx72qhjys4xaf25ksx1fx6fws0gzh2-nss-cacert-3.126-unbundled building '/nix/store/2phfgajgd4lpj2r54630ni3bwqpa6pzm-unit-nix-daemon.service.drv' unit-nix-daemon.service> structuredAttrs is enabled building '/nix/store/5b69jy615x7djplkwn78irpja85vhwsj-system-units.drv' building '/nix/store/gii5lmvdsnhh61216sjris35ayk3bhv4-system-units.drv' building '/nix/store/rj7xh2h4ifsh69951zviawjxypgh2hy0-system-units.drv' building '/nix/store/c3h8b9m1n9yh24gzqkwmaaypa7miikx0-etc.drv' building '/nix/store/l5p6rs371s1za2kzl9kx40dkz2v426gd-etc.drv' building '/nix/store/lmy2yc35sgi6diszwhx1knxsq9gcrf88-etc.drv' building '/nix/store/wf4gxdc7bmck84ij2rn6lzwbr1xh9w17-activate.drv' building '/nix/store/hgcr0gc8nw5pr9sd21yrgca9sxzqrq6c-activate.drv' building '/nix/store/lci5gscc4islbsygy6wvb6ma4wy5njpc-activate.drv' building '/nix/store/1h3qa7975wnbzx8bx3kjvzqwz895q4l4-nixos-system-ca-test.drv' building '/nix/store/bff0s9dgjmkdl5pb86m3agsxc3c2sljb-nixos-system-client-test.drv' building '/nix/store/qwhm26qls1kh5x0v61z5d3s4z4v52p4f-nixos-system-server-test.drv' nixos-system-ca-test> structuredAttrs is enabled nixos-system-client-test> structuredAttrs is enabled building '/nix/store/bcmq80lk54w2vla35y6hw3ahirkvnyhh-run-ca-nspawn.drv' nixos-system-server-test> structuredAttrs is enabled building '/nix/store/yvigcccysffz5ngbggafmngbqa1aqzgb-run-client-nspawn.drv' building '/nix/store/ns9gcvwibaaqsf33l8bpvfni6vj2iavm-run-server-nspawn.drv' building '/nix/store/8p0nghisyymkhj0d6sl4a7rrcbchi4xf-driverConfiguration.json.drv' driverConfiguration.json> structuredAttrs is enabled building '/nix/store/498z91q5z2xykllid7lk9p173i0j9nhv-nixos-test-driver-certificates.drv' nixos-test-driver-certificates> Running type check (enable/disable: config.skipTypeCheck) nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck nixos-test-driver-certificates> All checks passed! nixos-test-driver-certificates> Linting test script (enable/disable: config.skipLint) nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipLint nixos-test-driver-certificates> All checks passed! building '/nix/store/wfsmawq7mjz18fk55q6f0k2z8hhymm4x-container-test-run-certificates.drv' on 'ssh-ng://builder@build-x86-01.clan.lol' building '/nix/store/wfsmawq7mjz18fk55q6f0k2z8hhymm4x-container-test-run-certificates.drv' container-test-run-certificates> Machine state will be reset. To keep it, pass --keep-machine-state container-test-run-certificates> start all VLans container-test-run-certificates> (finished: start all VLans, in 0.00 seconds) container-test-run-certificates> container-test-run-certificates> Test will time out and terminate in 3600.0 seconds container-test-run-certificates> run the VM test script container-test-run-certificates> additionally exposed symbols: container-test-run-certificates> ca, client, server, container-test-run-certificates> vlan1, container-test-run-certificates> start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh container-test-run-certificates> start all VMs container-test-run-certificates> ca: systemd-nspawn running (pid 53) container-test-run-certificates> ca: Waiting for journal at /build/vm-state-ca/var/log/journal... container-test-run-certificates> client: systemd-nspawn running (pid 54) container-test-run-certificates> server: systemd-nspawn running (pid 57) container-test-run-certificates> client: Waiting for journal at /build/vm-state-client/var/log/journal... container-test-run-certificates> server: Waiting for journal at /build/vm-state-server/var/log/journal... container-test-run-certificates> (finished: start all VMs, in 0.00 seconds) container-test-run-certificates> nixos-nspawn(client): TAP vde-tap1 not found; container will be isolated from VDE container-test-run-certificates> nixos-nspawn(client): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths. container-test-run-certificates> nixos-nspawn(ca): TAP vde-tap1 not found; container will be isolated from VDE container-test-run-certificates> nixos-nspawn(ca): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths. container-test-run-certificates> nixos-nspawn(server): TAP vde-tap1 not found; container will be isolated from VDE container-test-run-certificates> nixos-nspawn(server): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths. container-test-run-certificates> Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file. container-test-run-certificates> Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file. container-test-run-certificates> Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file. container-test-run-certificates> ░ Spawning container client on /build/vm-state-client. container-test-run-certificates> ░ Spawning container ca on /build/vm-state-ca. container-test-run-certificates> ░ Spawning container server on /build/vm-state-server. container-test-run-certificates> ca # [7944202.096636] ca systemd-journald[78]: Journal started container-test-run-certificates> client # [7944202.091026] client systemd-journald[69]: Journal started container-test-run-certificates> ca # [7944202.096667] ca systemd-journald[78]: Runtime Journal (/run/log/journal/4d6fc6095b9b4c77a9fef35f383e65c3) is 8M, max 3.7G, 3.7G free. container-test-run-certificates> client # [7944202.091058] client systemd-journald[69]: Runtime Journal (/run/log/journal/8efc0526a91245de805cf655f4bd3e0a) is 8M, max 3.7G, 3.7G free. container-test-run-certificates> ca # [7944202.098345] ca systemd[1]: Finished Create Static Device Nodes in /dev gracefully. container-test-run-certificates> client # [7944202.091501] client systemd[1]: Finished Create Static Device Nodes in /dev gracefully. container-test-run-certificates> ca # [7944202.103421] ca systemd[1]: Starting Flush Journal to Persistent Storage... container-test-run-certificates> client # [7944202.095754] client systemd[1]: Starting Flush Journal to Persistent Storage... container-test-run-certificates> ca # [7944202.103783] ca systemd[1]: Starting Network Name Resolution... container-test-run-certificates> client # [7944202.096106] client systemd[1]: Starting Network Name Resolution... container-test-run-certificates> ca # [7944202.104197] ca systemd[1]: Starting Create Static Device Nodes in /dev... container-test-run-certificates> client # [7944202.096434] client systemd[1]: Starting Create Static Device Nodes in /dev... container-test-run-certificates> client # [7944202.100280] client systemd-journald[69]: Time spent on flushing to /var/log/journal/8efc0526a91245de805cf655f4bd3e0a is 1.081ms for 6 entries. container-test-run-certificates> ca # [7944202.109194] ca systemd-journald[78]: Time spent on flushing to /var/log/journal/4d6fc6095b9b4c77a9fef35f383e65c3 is 1.120ms for 6 entries. container-test-run-certificates> ca # [7944202.109194] ca systemd-journald[78]: System Journal (/var/log/journal/4d6fc6095b9b4c77a9fef35f383e65c3) is 8M, max 4G, 3.9G free. container-test-run-certificates> client # [7944202.100280] client systemd-journald[69]: System Journal (/var/log/journal/8efc0526a91245de805cf655f4bd3e0a) is 8M, max 4G, 3.9G free. container-test-run-certificates> client # [7944202.105702] client systemd[1]: Finished Create Static Device Nodes in /dev. container-test-run-certificates> ca # [7944202.145512] ca systemd[1]: Finished Create Static Device Nodes in /dev. container-test-run-certificates> ca # [7944202.145674] ca systemd[1]: Finished Flush Journal to Persistent Storage. container-test-run-certificates> client # [7944202.105803] client systemd[1]: Reached target Preparation for Local File Systems. container-test-run-certificates> client # [7944202.105855] client systemd[1]: Reached target Local File Systems. container-test-run-certificates> ca # [7944202.146716] ca systemd[1]: Reached target Preparation for Local File Systems. container-test-run-certificates> client # [7944202.106240] client systemd[1]: Listening on Boot Loader Control Service Socket. container-test-run-certificates> ca # [7944202.146794] ca systemd[1]: Reached target Local File Systems. container-test-run-certificates> client # [7944202.106263] client systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> client # [7944202.106592] client systemd[1]: Starting Save Transient machine-id to Disk... container-test-run-certificates> ca # [7944202.147340] ca systemd[1]: Listening on Boot Loader Control Service Socket. container-test-run-certificates> client # [7944202.106705] client systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys container-test-run-certificates> ca # [7944202.147376] ca systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> client # [7944202.107017] client systemd[1]: Finished Flush Journal to Persistent Storage. container-test-run-certificates> ca # [7944202.147922] ca systemd[1]: Starting Save Transient machine-id to Disk... container-test-run-certificates> client # [7944202.107698] client systemd[1]: Starting Create System Files and Directories... container-test-run-certificates> ca # [7944202.148346] ca systemd[1]: Starting Create System Files and Directories... container-test-run-certificates> client # [7944202.149156] client systemd-tmpfiles[109]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted container-test-run-certificates> ca # [7944202.148361] ca systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys container-test-run-certificates> client # [7944202.149363] client systemd-tmpfiles[109]: fchmod() of /var/log/journal failed: Operation not permitted container-test-run-certificates> ca # [7944202.161409] ca systemd-tmpfiles[140]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted container-test-run-certificates> ca # [7944202.161566] ca systemd-tmpfiles[140]: fchmod() of /var/log/journal failed: Operation not permitted container-test-run-certificates> ca # [7944202.161671] ca systemd-tmpfiles[140]: fchmod() of /var/log/journal/4d6fc6095b9b4c77a9fef35f383e65c3 failed: Operation not permitted container-test-run-certificates> ca # [7944202.161824] ca systemd-tmpfiles[140]: fchmod() of /run/log/journal failed: Operation not permitted container-test-run-certificates> client # [7944202.149510] client systemd-tmpfiles[109]: fchmod() of /var/log/journal/8efc0526a91245de805cf655f4bd3e0a failed: Operation not permitted container-test-run-certificates> ca # [7944202.163631] ca systemd[1]: Finished Create System Files and Directories. container-test-run-certificates> client # [7944202.149723] client systemd-tmpfiles[109]: fchmod() of /run/log/journal failed: Operation not permitted container-test-run-certificates> ca # [7944202.164288] ca systemd[1]: Starting Rebuild Journal Catalog... container-test-run-certificates> ca # [7944202.164723] ca systemd[1]: Starting Record System Boot/Shutdown in UTMP... container-test-run-certificates> ca # [7944202.172130] ca systemd[1]: Finished Record System Boot/Shutdown in UTMP. container-test-run-certificates> client # [7944202.152143] client systemd[1]: Finished Create System Files and Directories. container-test-run-certificates> ca # [7944202.182728] ca systemd[1]: Finished Rebuild Journal Catalog. container-test-run-certificates> ca # [7944202.183464] ca systemd[1]: Starting Update is Completed... container-test-run-certificates> ca # [7944202.188687] ca systemd[1]: Finished Update is Completed. container-test-run-certificates> ca # [7944202.201921] ca systemd[1]: Finished Firewall. container-test-run-certificates> ca # [7944202.202065] ca systemd[1]: Reached target Preparation for Network. container-test-run-certificates> client # [7944202.152619] client systemd[1]: Starting Rebuild Journal Catalog... container-test-run-certificates> ca # [7944202.202218] ca systemd[1]: Listening on Network Management Resolve Hook Socket. container-test-run-certificates> client # [7944202.152968] client systemd[1]: Starting Record System Boot/Shutdown in UTMP... container-test-run-certificates> ca # [7944202.202811] ca systemd[1]: Starting Network Management... container-test-run-certificates> client # [7944202.160070] client systemd[1]: Finished Record System Boot/Shutdown in UTMP. container-test-run-certificates> ca # [7944202.553243] ca systemd-networkd[195]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted container-test-run-certificates> client # [7944202.165667] client systemd[1]: Finished Rebuild Journal Catalog. container-test-run-certificates> ca # [7944202.553337] ca systemd-networkd[195]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted container-test-run-certificates> client # [7944202.166564] client systemd[1]: Starting Update is Completed... container-test-run-certificates> client # [7944202.181568] client systemd[1]: Finished Update is Completed. container-test-run-certificates> client # [7944202.196558] client systemd[1]: Finished Firewall. container-test-run-certificates> client # [7944202.196619] client systemd[1]: Reached target Preparation for Network. container-test-run-certificates> client # [7944202.196787] client systemd[1]: Listening on Network Management Resolve Hook Socket. container-test-run-certificates> client # [7944202.197357] client systemd[1]: Starting Network Management... container-test-run-certificates> client # [7944202.550768] client systemd-networkd[182]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted container-test-run-certificates> client # [7944202.550841] client systemd-networkd[182]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted container-test-run-certificates> client # [7944202.556732] client systemd-networkd[182]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> client # [7944202.556882] client systemd-networkd[182]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> client # [7944202.556966] client systemd-networkd[182]: lo: Link UP container-test-run-certificates> client # [7944202.556968] client systemd-networkd[182]: lo: Gained carrier container-test-run-certificates> client # [7944202.557155] client systemd-networkd[182]: eth1: Configuring with /etc/systemd/network/40-eth1.network. container-test-run-certificates> client # [7944202.557436] client systemd[1]: Started Network Management. container-test-run-certificates> client # [7944202.557466] client systemd-networkd[182]: eth1: Link UP container-test-run-certificates> client # [7944202.557609] client systemd-networkd[182]: eth1: Gained carrier container-test-run-certificates> client # [7944202.558381] client systemd[1]: Starting Enable Persistent Storage in systemd-networkd... container-test-run-certificates> server # [7944202.096312] server systemd-journald[69]: Journal started container-test-run-certificates> server # [7944202.096345] server systemd-journald[69]: Runtime Journal (/run/log/journal/e90f9cafecd6424883d045476f15c99c) is 8M, max 3.7G, 3.7G free. container-test-run-certificates> server # [7944202.100470] server systemd[1]: Finished Create Static Device Nodes in /dev gracefully. container-test-run-certificates> server # [7944202.111763] server systemd[1]: Starting Flush Journal to Persistent Storage... container-test-run-certificates> server # [7944202.112301] server systemd[1]: Starting Network Name Resolution... container-test-run-certificates> server # [7944202.112754] server systemd[1]: Starting Create Static Device Nodes in /dev... container-test-run-certificates> server # [7944202.116800] server systemd-journald[69]: Time spent on flushing to /var/log/journal/e90f9cafecd6424883d045476f15c99c is 1.355ms for 6 entries. container-test-run-certificates> server # [7944202.116800] server systemd-journald[69]: System Journal (/var/log/journal/e90f9cafecd6424883d045476f15c99c) is 8M, max 4G, 3.9G free. container-test-run-certificates> server # [7944202.145616] server systemd[1]: Finished Create Static Device Nodes in /dev. container-test-run-certificates> server # [7944202.145797] server systemd[1]: Reached target Preparation for Local File Systems. container-test-run-certificates> server # [7944202.145840] server systemd[1]: Reached target Local File Systems. container-test-run-certificates> server # [7944202.146289] server systemd[1]: Listening on Boot Loader Control Service Socket. container-test-run-certificates> server # [7944202.146317] server systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> server # [7944202.146749] server systemd[1]: Starting Save Transient machine-id to Disk... container-test-run-certificates> server # [7944202.146768] server systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys container-test-run-certificates> server # [7944202.184834] server systemd[1]: Finished Flush Journal to Persistent Storage. container-test-run-certificates> server # [7944202.185331] server systemd[1]: Starting Create System Files and Directories... container-test-run-certificates> server # [7944202.197174] server systemd-tmpfiles[161]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted container-test-run-certificates> server # [7944202.197329] server systemd-tmpfiles[161]: fchmod() of /var/log/journal failed: Operation not permitted container-test-run-certificates> server # [7944202.197431] server systemd-tmpfiles[161]: fchmod() of /var/log/journal/e90f9cafecd6424883d045476f15c99c failed: Operation not permitted container-test-run-certificates> server # [7944202.197582] server systemd-tmpfiles[161]: fchmod() of /run/log/journal failed: Operation not permitted container-test-run-certificates> server # [7944202.198402] server systemd[1]: Finished Create System Files and Directories. container-test-run-certificates> server # [7944202.198931] server systemd[1]: Starting Rebuild Journal Catalog... container-test-run-certificates> server # [7944202.199291] server systemd[1]: Starting Record System Boot/Shutdown in UTMP... container-test-run-certificates> server # [7944202.203331] server systemd[1]: Finished Firewall. container-test-run-certificates> server # [7944202.203398] server systemd[1]: Reached target Preparation for Network. container-test-run-certificates> server # [7944202.203534] server systemd[1]: Listening on Network Management Resolve Hook Socket. container-test-run-certificates> server # [7944202.204013] server systemd[1]: Starting Network Management... container-test-run-certificates> server # [7944202.207928] server systemd[1]: Finished Record System Boot/Shutdown in UTMP. container-test-run-certificates> server # [7944202.211294] server systemd[1]: Finished Rebuild Journal Catalog. container-test-run-certificates> server # [7944202.212049] server systemd[1]: Starting Update is Completed... container-test-run-certificates> server # [7944202.217099] server systemd[1]: Finished Update is Completed. container-test-run-certificates> client # [7944202.582310] client systemd[1]: Finished Enable Persistent Storage in systemd-networkd. container-test-run-certificates> client # [7944202.772409] client systemd-resolved[92]: Positive Trust Anchors: container-test-run-certificates> client # [7944202.772417] client systemd-resolved[92]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d container-test-run-certificates> client # [7944202.772420] client systemd-resolved[92]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 container-test-run-certificates> client # [7944202.772438] client systemd-resolved[92]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test container-test-run-certificates> client # [7944202.784391] client systemd-resolved[92]: Using system hostname 'client'. container-test-run-certificates> client # [7944202.785296] client systemd[1]: Started Network Name Resolution. container-test-run-certificates> client # [7944202.785354] client systemd[1]: Reached target Network. container-test-run-certificates> client # [7944202.785390] client systemd[1]: Reached target System Initialization. container-test-run-certificates> client # [7944202.785424] client systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> client # [7944202.785439] client systemd[1]: Started Daily Cleanup of Temporary Directories. container-test-run-certificates> client # [7944202.785447] client systemd[1]: Reached target Timer Units. container-test-run-certificates> client # [7944202.785528] client systemd[1]: Listening on D-Bus System Message Bus Socket. container-test-run-certificates> client # [7944202.785590] client systemd[1]: Listening on Nix Daemon Socket. container-test-run-certificates> client # [7944202.785661] client systemd[1]: Listening on Virtual Machine and Container Registration Service Socket. container-test-run-certificates> client # [7944202.785671] client systemd[1]: Reached target Socket Units. container-test-run-certificates> client # [7944202.785693] client systemd[1]: Reached target Basic System. container-test-run-certificates> client # [7944202.786372] client systemd[1]: Starting Import lastlog data into lastlog2 database... container-test-run-certificates> client # [7944202.786841] client systemd[1]: Starting Name Service Cache Daemon (nsncd)... container-test-run-certificates> client # [7944202.787565] client systemd[1]: Starting D-Bus System Message Bus... container-test-run-certificates> ca # [7944202.559109] ca systemd-networkd[195]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> ca # [7944202.559278] ca systemd-networkd[195]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> ca # [7944202.559360] ca systemd-networkd[195]: lo: Link UP container-test-run-certificates> ca # [7944202.559364] ca systemd-networkd[195]: lo: Gained carrier container-test-run-certificates> ca # [7944202.559521] ca systemd-networkd[195]: eth1: Configuring with /etc/systemd/network/40-eth1.network. container-test-run-certificates> ca # [7944202.559768] ca systemd[1]: Started Network Management. container-test-run-certificates> ca # [7944202.559808] ca systemd-networkd[195]: eth1: Link UP container-test-run-certificates> ca # [7944202.559950] ca systemd-networkd[195]: eth1: Gained carrier container-test-run-certificates> ca # [7944202.576224] ca systemd[1]: Starting Enable Persistent Storage in systemd-networkd... container-test-run-certificates> ca # [7944202.582904] ca systemd[1]: Finished Enable Persistent Storage in systemd-networkd. container-test-run-certificates> ca # [7944202.789754] ca systemd-resolved[101]: Positive Trust Anchors: container-test-run-certificates> ca # [7944202.789761] ca systemd-resolved[101]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d container-test-run-certificates> ca # [7944202.789765] ca systemd-resolved[101]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 container-test-run-certificates> ca # [7944202.789782] ca systemd-resolved[101]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test container-test-run-certificates> ca # [7944202.801240] ca systemd-resolved[101]: Using system hostname 'ca'. container-test-run-certificates> ca # [7944202.802371] ca systemd[1]: Started Network Name Resolution. container-test-run-certificates> ca # [7944202.802425] ca systemd[1]: Reached target Network. container-test-run-certificates> ca # [7944202.802454] ca systemd[1]: Reached target Network is Online. container-test-run-certificates> ca # [7944202.802484] ca systemd[1]: Reached target System Initialization. container-test-run-certificates> ca # [7944202.802611] ca systemd[1]: Started Renew ACME Certificate for ca.foo. container-test-run-certificates> ca # [7944202.802627] ca systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> ca # [7944202.802641] ca systemd[1]: Started Daily Cleanup of Temporary Directories. container-test-run-certificates> ca # [7944202.802650] ca systemd[1]: Reached target Timer Units. container-test-run-certificates> ca # [7944202.802722] ca systemd[1]: Listening on D-Bus System Message Bus Socket. container-test-run-certificates> ca # [7944202.802775] ca systemd[1]: Listening on Nix Daemon Socket. container-test-run-certificates> ca # [7944202.802842] ca systemd[1]: Listening on Virtual Machine and Container Registration Service Socket. container-test-run-certificates> ca # [7944202.802851] ca systemd[1]: Reached target Socket Units. container-test-run-certificates> ca # [7944202.802870] ca systemd[1]: Reached target Basic System. container-test-run-certificates> ca # [7944202.804526] ca systemd[1]: Starting Set up the ACME certificate renewal infrastructure... container-test-run-certificates> ca # [7944202.804991] ca systemd[1]: Starting Import lastlog data into lastlog2 database... container-test-run-certificates> ca # [7944202.805019] ca systemd[1]: nginx-config-reload.service skipped, unmet condition check ConditionPathExists=/var/lib/acme/ca.foo/fullchain.pem container-test-run-certificates> server # [7944202.561296] server systemd-networkd[182]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted container-test-run-certificates> server # [7944202.561392] server systemd-networkd[182]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted container-test-run-certificates> server # [7944202.567143] server systemd-networkd[182]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> server # [7944202.567315] server systemd-networkd[182]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> server # [7944202.567402] server systemd-networkd[182]: lo: Link UP container-test-run-certificates> server # [7944202.567407] server systemd-networkd[182]: lo: Gained carrier container-test-run-certificates> server # [7944202.567568] server systemd-networkd[182]: eth1: Configuring with /etc/systemd/network/40-eth1.network. container-test-run-certificates> server # [7944202.567811] server systemd[1]: Started Network Management. container-test-run-certificates> server # [7944202.576221] server systemd[1]: Starting Enable Persistent Storage in systemd-networkd... container-test-run-certificates> server # [7944202.576223] server systemd-networkd[182]: eth1: Link UP container-test-run-certificates> server # [7944202.576428] server systemd-networkd[182]: eth1: Gained carrier container-test-run-certificates> server # [7944202.593256] server systemd[1]: Finished Enable Persistent Storage in systemd-networkd. container-test-run-certificates> server # [7944202.797123] server systemd-resolved[101]: Positive Trust Anchors: container-test-run-certificates> server # [7944202.797131] server systemd-resolved[101]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d container-test-run-certificates> server # [7944202.797134] server systemd-resolved[101]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 container-test-run-certificates> server # [7944202.797148] server systemd-resolved[101]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test container-test-run-certificates> server # [7944202.807628] server systemd-resolved[101]: Using system hostname 'server'. container-test-run-certificates> server # [7944202.808502] server systemd[1]: Started Network Name Resolution. container-test-run-certificates> server # [7944202.808559] server systemd[1]: Reached target Network. container-test-run-certificates> server # [7944202.808591] server systemd[1]: Reached target Network is Online. container-test-run-certificates> server # [7944202.808619] server systemd[1]: Reached target System Initialization. container-test-run-certificates> server # [7944202.808780] server systemd[1]: Started Renew ACME Certificate for test.foo. container-test-run-certificates> server # [7944202.808806] server systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> server # [7944202.808823] server systemd[1]: Started Daily Cleanup of Temporary Directories. container-test-run-certificates> server # [7944202.808837] server systemd[1]: Reached target Timer Units. container-test-run-certificates> server # [7944202.808938] server systemd[1]: Listening on D-Bus System Message Bus Socket. container-test-run-certificates> server # [7944202.809035] server systemd[1]: Listening on Nix Daemon Socket. container-test-run-certificates> server # [7944202.809116] server systemd[1]: Listening on Virtual Machine and Container Registration Service Socket. container-test-run-certificates> server # [7944202.809130] server systemd[1]: Reached target Socket Units. container-test-run-certificates> server # [7944202.809150] server systemd[1]: Reached target Basic System. container-test-run-certificates> server # [7944202.809870] server systemd[1]: Starting Set up the ACME certificate renewal infrastructure... container-test-run-certificates> server # [7944202.810325] server systemd[1]: Starting Import lastlog data into lastlog2 database... container-test-run-certificates> server # [7944202.810345] server systemd[1]: nginx-config-reload.service skipped, unmet condition check ConditionPathExists=/var/lib/acme/test.foo/fullchain.pem container-test-run-certificates> server # [7944202.810721] server systemd[1]: Starting Name Service Cache Daemon (nsncd)... container-test-run-certificates> server # [7944202.811348] server systemd[1]: Starting D-Bus System Message Bus... container-test-run-certificates> ca # [7944202.805515] ca systemd[1]: Starting Name Service Cache Daemon (nsncd)... container-test-run-certificates> client # [7944202.814726] client systemd[1]: Finished Import lastlog data into lastlog2 database. container-test-run-certificates> server # [7944202.815762] server systemd[1]: lastlog2-import.service: Failed to spawn executor: No such file or directory container-test-run-certificates> client # [7944202.889455] client nsncd[188]: Aug 31 08:44:20.255 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket" container-test-run-certificates> ca # [7944202.806081] ca systemd[1]: Starting step-ca service... container-test-run-certificates> client # [7944202.889521] client systemd[1]: Started Name Service Cache Daemon (nsncd). container-test-run-certificates> ca # [7944202.806856] ca systemd[1]: Starting D-Bus System Message Bus... container-test-run-certificates> client # [7944202.889596] client systemd[1]: Reached target Host and Network Name Lookups. container-test-run-certificates> ca # [7944202.815393] ca systemd[1]: Finished Import lastlog data into lastlog2 database. container-test-run-certificates> server # [7944202.815774] server systemd[1]: lastlog2-import.service: Failed to spawn 'start-post' task: No such file or directory container-test-run-certificates> ca # [7944202.883598] ca acme-setup-privileged[200]: + set -euo pipefail container-test-run-certificates> client # [7944202.889629] client systemd[1]: Reached target User and Group Name Lookups. container-test-run-certificates> ca # [7944202.883598] ca acme-setup-privileged[200]: + cd /var/lib/acme container-test-run-certificates> client # [7944202.890415] client systemd[1]: Starting User Login Management... container-test-run-certificates> ca # [7944202.883874] ca acme-setup-privileged[200]: + chmod -R u=rwX,g=,o= .lego/accounts container-test-run-certificates> server # [7944202.815800] server systemd[1]: lastlog2-import.service: Failed with result 'resources'. container-test-run-certificates> ca # [7944202.884400] ca acme-setup-privileged[200]: + chown -R acme .lego/accounts container-test-run-certificates> server # [7944202.815833] server systemd[1]: Failed to start Import lastlog data into lastlog2 database. container-test-run-certificates> ca # [7944202.885223] ca acme-setup-privileged[200]: + for fixpath in ca.foo .lego/ca.foo container-test-run-certificates> client # [7944202.890975] client systemd[1]: Starting Permit User Sessions... container-test-run-certificates> ca # [7944202.885243] ca acme-setup-privileged[200]: + '[' -d ca.foo ']' container-test-run-certificates> server # [7944202.867695] server acme-setup-privileged[191]: + set -euo pipefail container-test-run-certificates> ca # [7944202.885243] ca acme-setup-privileged[200]: + for fixpath in ca.foo .lego/ca.foo container-test-run-certificates> client # [7944202.896379] client systemd[1]: Finished Permit User Sessions. container-test-run-certificates> ca # [7944202.885243] ca acme-setup-privileged[200]: + '[' -d .lego/ca.foo ']' container-test-run-certificates> server # [7944202.867695] server acme-setup-privileged[191]: + cd /var/lib/acme container-test-run-certificates> ca # [7944202.896053] ca nsncd[202]: Aug 31 08:44:20.261 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket" container-test-run-certificates> server # [7944202.867891] server acme-setup-privileged[191]: + chmod -R u=rwX,g=,o= .lego/accounts container-test-run-certificates> ca # [7944202.896152] ca systemd[1]: Started Name Service Cache Daemon (nsncd). container-test-run-certificates> client # [7944202.896855] client systemd[1]: Started Console Getty. container-test-run-certificates> ca # [7944202.896206] ca systemd[1]: Reached target Host and Network Name Lookups. container-test-run-certificates> server # [7944202.868602] server acme-setup-privileged[191]: + chown -R acme .lego/accounts container-test-run-certificates> ca # [7944202.896246] ca systemd[1]: Reached target User and Group Name Lookups. container-test-run-certificates> server # [7944202.869452] server acme-setup-privileged[191]: + for fixpath in test.foo .lego/test.foo container-test-run-certificates> ca # [7944202.896899] ca systemd[1]: Starting User Login Management... container-test-run-certificates> server # [7944202.869484] server acme-setup-privileged[191]: + '[' -d test.foo ']' container-test-run-certificates> ca # [7944202.897231] ca systemd[1]: Starting Permit User Sessions... container-test-run-certificates> client # [7944202.896875] client systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0 container-test-run-certificates> ca # [7944202.903703] ca systemd[1]: Finished Permit User Sessions. container-test-run-certificates> server # [7944202.869484] server acme-setup-privileged[191]: + for fixpath in test.foo .lego/test.foo container-test-run-certificates> ca # [7944202.904211] ca systemd[1]: Started Console Getty. container-test-run-certificates> client # [7944202.896885] client systemd[1]: Reached target Login Prompts. container-test-run-certificates> ca # [7944202.904229] ca systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0 container-test-run-certificates> client # [7944202.982430] client dbus-broker-launch[189]: Looking up NSS user entry for 'systemd-timesync'... container-test-run-certificates> ca # [7944202.904240] ca systemd[1]: Reached target Login Prompts. container-test-run-certificates> server # [7944202.869484] server acme-setup-privileged[191]: + '[' -d .lego/test.foo ']' container-test-run-certificates> ca # [7944202.977061] ca dbus-broker-launch[204]: Looking up NSS user entry for 'systemd-timesync'... container-test-run-certificates> client # [7944202.982844] client dbus-broker-launch[189]: NSS returned no entry for 'systemd-timesync' container-test-run-certificates> ca # [7944202.977439] ca dbus-broker-launch[204]: NSS returned no entry for 'systemd-timesync' container-test-run-certificates> server # [7944202.893033] server nsncd[193]: Aug 31 08:44:20.258 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket" container-test-run-certificates> client # [7944202.982844] client dbus-broker-launch[189]: Invalid user-name in /nix/store/91l6d2rr3446jkw7ll0r95z9ca8qijjq-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync" container-test-run-certificates> ca # [7944202.977439] ca dbus-broker-launch[204]: Invalid user-name in /nix/store/gpdxpznvl5s3x1lll78m5sc9cdp1kx2s-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync" container-test-run-certificates> client # [7944202.983078] client systemd[1]: Started D-Bus System Message Bus. container-test-run-certificates> ca # [7944202.977751] ca systemd[1]: Started D-Bus System Message Bus. container-test-run-certificates> server # [7944202.893210] server systemd[1]: Started Name Service Cache Daemon (nsncd). container-test-run-certificates> ca # [7944202.981792] ca dbus-broker-launch[204]: Ready container-test-run-certificates> client # [7944202.989057] client dbus-broker-launch[189]: Ready container-test-run-certificates> server # [7944202.893248] server systemd[1]: Reached target Host and Network Name Lookups. container-test-run-certificates> server # [7944202.893285] server systemd[1]: Reached target User and Group Name Lookups. container-test-run-certificates> server # [7944202.893818] server systemd[1]: Starting User Login Management... container-test-run-certificates> server # [7944202.894183] server systemd[1]: Starting Permit User Sessions... container-test-run-certificates> server # [7944202.900266] server systemd[1]: Finished Permit User Sessions. container-test-run-certificates> server # [7944202.900843] server systemd[1]: Started Console Getty. container-test-run-certificates> server # [7944202.900869] server systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0 container-test-run-certificates> server # [7944202.900883] server systemd[1]: Reached target Login Prompts. container-test-run-certificates> server # [7944202.976955] server dbus-broker-launch[194]: Looking up NSS user entry for 'systemd-timesync'... container-test-run-certificates> server # [7944202.977425] server dbus-broker-launch[194]: NSS returned no entry for 'systemd-timesync' container-test-run-certificates> server # [7944202.977425] server dbus-broker-launch[194]: Invalid user-name in /nix/store/0pgc9air17alr427hx1lc5x9wnyi4fv0-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync" container-test-run-certificates> server # [7944202.977715] server systemd[1]: Started D-Bus System Message Bus. container-test-run-certificates> server # [7944202.982035] server dbus-broker-launch[194]: Ready container-test-run-certificates> server # [7944203.286305] server systemd-logind[221]: New seat seat0. container-test-run-certificates> server # [7944203.286430] server systemd[1]: Started User Login Management. container-test-run-certificates> server # [7944203.287088] server systemd[1]: Starting linger-users.service... container-test-run-certificates> server # [7944203.314098] server systemd[1]: linger-users.service: Deactivated successfully. container-test-run-certificates> server # [7944203.314206] server systemd[1]: Finished linger-users.service. container-test-run-certificates> server # [7944203.322181] server acme-setup-start[205]: + set -euo pipefail container-test-run-certificates> server # [7944203.322181] server acme-setup-start[205]: + test -e ca/key.pem container-test-run-certificates> server # [7944203.322476] server acme-setup-start[205]: + minica --ca-key ca/key.pem --ca-cert ca/cert.pem --domains selfsigned.local container-test-run-certificates> server # [7944203.329542] server systemd[1]: Finished Set up the ACME certificate renewal infrastructure. container-test-run-certificates> server # [7944203.330629] server systemd[1]: Starting Ensure certificate for test.foo... container-test-run-certificates> client # [7944203.285916] client systemd-logind[204]: New seat seat0. container-test-run-certificates> ca # [7944203.314639] ca systemd-logind[234]: New seat seat0. container-test-run-certificates> client # [7944203.286057] client systemd[1]: Started User Login Management. container-test-run-certificates> ca # [7944203.314794] ca systemd[1]: Started User Login Management. container-test-run-certificates> client # [7944203.287084] client systemd[1]: Starting linger-users.service... container-test-run-certificates> ca # [7944203.315956] ca systemd[1]: Starting linger-users.service... container-test-run-certificates> client # [7944203.314148] client systemd[1]: linger-users.service: Deactivated successfully. container-test-run-certificates> ca # [7944203.322304] ca systemd[1]: linger-users.service: Deactivated successfully. container-test-run-certificates> client # [7944203.314234] client systemd[1]: Finished linger-users.service. container-test-run-certificates> ca # [7944203.322407] ca systemd[1]: Finished linger-users.service. container-test-run-certificates> client # [7944203.314535] client systemd[1]: Reached target Multi-User System. container-test-run-certificates> ca # [7944203.350674] ca acme-setup-start[218]: + set -euo pipefail container-test-run-certificates> ca # [7944203.350674] ca acme-setup-start[218]: + test -e ca/key.pem container-test-run-certificates> ca # [7944203.350674] ca acme-setup-start[218]: + minica --ca-key ca/key.pem --ca-cert ca/cert.pem --domains selfsigned.local container-test-run-certificates> ca # [7944203.357388] ca systemd[1]: Finished Set up the ACME certificate renewal infrastructure. container-test-run-certificates> ca # [7944203.358168] ca systemd[1]: Starting Ensure certificate for ca.foo... container-test-run-certificates> ca # [7944203.556408] ca step-ca[203]: badger 2026/08/31 08:44:20 INFO: All 0 tables opened in 0s container-test-run-certificates> ca # [7944203.582272] ca step-ca[203]: 2026/08/31 08:44:20 Building new tls configuration using step-ca x509 Signer Interface container-test-run-certificates> ca # [7944203.585416] ca step-ca[203]: 2026/08/31 08:44:20 Starting Smallstep CA/0.30.2 (linux/amd64) container-test-run-certificates> ca # [7944203.585416] ca step-ca[203]: 2026/08/31 08:44:20 Documentation: https://u.step.sm/docs/ca container-test-run-certificates> ca # [7944203.585416] ca step-ca[203]: 2026/08/31 08:44:20 Community Discord: https://u.step.sm/discord container-test-run-certificates> ca # [7944203.585416] ca step-ca[203]: 2026/08/31 08:44:20 Config file: /etc/smallstep/ca.json container-test-run-certificates> ca # [7944203.585416] ca step-ca[203]: 2026/08/31 08:44:20 The primary server URL is https://ca.foo:1443 container-test-run-certificates> ca # [7944203.585416] ca step-ca[203]: 2026/08/31 08:44:20 Root certificates are available at https://ca.foo:1443/roots.pem container-test-run-certificates> ca # [7944203.585416] ca step-ca[203]: 2026/08/31 08:44:20 X.509 Root Fingerprint: 5653d78a51d16518e561fe8f531aaa76cbf2a92fb91869cad775bf52736019b4 container-test-run-certificates> ca # [7944203.585569] ca systemd[1]: Started step-ca service. container-test-run-certificates> ca # [7944203.585651] ca step-ca[203]: 2026/08/31 08:44:20 Serving HTTPS on 0.0.0.0:1443 ... container-test-run-certificates> ca # [7944203.763593] ca acme-ca.foo-start[256]: Waiting to acquire lock in /run/acme/ container-test-run-certificates> ca # [7944203.764846] ca acme-ca.foo-start[256]: + '[' -e out/acme-success ']' container-test-run-certificates> ca # [7944203.764870] ca acme-ca.foo-start[256]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=ca.foo --ip-addresses= container-test-run-certificates> ca # [7944203.768887] ca acme-ca.foo-start[283]: + cd ca.foo container-test-run-certificates> ca # [7944203.769044] ca acme-ca.foo-start[283]: + cp -vp cert.pem ../out/cert.pem container-test-run-certificates> ca # [7944203.769716] ca acme-ca.foo-start[284]: 'cert.pem' -> '../out/cert.pem' container-test-run-certificates> ca # [7944203.769824] ca acme-ca.foo-start[283]: + cp -vp key.pem ../out/key.pem container-test-run-certificates> ca # [7944203.770403] ca acme-ca.foo-start[283]: 'key.pem' -> '../out/key.pem' container-test-run-certificates> ca # [7944203.770525] ca acme-ca.foo-start[256]: + cat out/cert.pem ca/cert.pem container-test-run-certificates> ca # [7944203.771312] ca acme-ca.foo-start[256]: + cp ca/cert.pem out/chain.pem container-test-run-certificates> ca # [7944203.772066] ca acme-ca.foo-start[256]: + cat out/key.pem out/fullchain.pem container-test-run-certificates> ca # [7944203.773074] ca acme-ca.foo-start[256]: + for fixpath in out certificates container-test-run-certificates> ca # [7944203.773074] ca acme-ca.foo-start[256]: + '[' -d out ']' container-test-run-certificates> ca # [7944203.773112] ca acme-ca.foo-start[256]: + chmod -R u=rwX,g=rX,o= out container-test-run-certificates> ca # [7944203.773859] ca acme-ca.foo-start[256]: + chown -R acme:nginx out container-test-run-certificates> ca # [7944203.775089] ca acme-ca.foo-start[256]: + for fixpath in out certificates container-test-run-certificates> ca # [7944203.775089] ca acme-ca.foo-start[256]: + '[' -d certificates ']' container-test-run-certificates> ca # [7944203.776437] ca systemd[1]: Finished Ensure certificate for ca.foo. container-test-run-certificates> ca # [7944203.777253] ca systemd[1]: Starting Nginx Web Server... container-test-run-certificates> server # [7944203.724345] server acme-test.foo-start[243]: Waiting to acquire lock in /run/acme/ container-test-run-certificates> server # [7944203.725789] server acme-test.foo-start[243]: + '[' -e out/acme-success ']' container-test-run-certificates> server # [7944203.725810] server acme-test.foo-start[243]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=test.foo --ip-addresses= container-test-run-certificates> server # [7944203.730018] server acme-test.foo-start[253]: + cd test.foo container-test-run-certificates> server # [7944203.730179] server acme-test.foo-start[253]: + cp -vp cert.pem ../out/cert.pem container-test-run-certificates> server # [7944203.730778] server acme-test.foo-start[254]: 'cert.pem' -> '../out/cert.pem' container-test-run-certificates> server # [7944203.730887] server acme-test.foo-start[253]: + cp -vp key.pem ../out/key.pem container-test-run-certificates> server # [7944203.731481] server acme-test.foo-start[253]: 'key.pem' -> '../out/key.pem' container-test-run-certificates> server # [7944203.731596] server acme-test.foo-start[243]: + cat out/cert.pem ca/cert.pem container-test-run-certificates> server # [7944203.732445] server acme-test.foo-start[243]: + cp ca/cert.pem out/chain.pem container-test-run-certificates> server # [7944203.733190] server acme-test.foo-start[243]: + cat out/key.pem out/fullchain.pem container-test-run-certificates> server # [7944203.733935] server acme-test.foo-start[243]: + for fixpath in out certificates container-test-run-certificates> server # [7944203.733935] server acme-test.foo-start[243]: + '[' -d out ']' container-test-run-certificates> server # [7944203.733979] server acme-test.foo-start[243]: + chmod -R u=rwX,g=rX,o= out container-test-run-certificates> server # [7944203.734682] server acme-test.foo-start[243]: + chown -R acme:nginx out container-test-run-certificates> server # [7944203.735982] server acme-test.foo-start[243]: + for fixpath in out certificates container-test-run-certificates> server # [7944203.735982] server acme-test.foo-start[243]: + '[' -d certificates ']' container-test-run-certificates> server # [7944203.737474] server systemd[1]: Finished Ensure certificate for test.foo. container-test-run-certificates> server # [7944203.738296] server systemd[1]: Starting Nginx Web Server... container-test-run-certificates> server # [7944203.774196] server systemd-networkd[182]: eth1: Gained IPv6LL container-test-run-certificates> client # [7944203.774107] client systemd-networkd[182]: eth1: Gained IPv6LL container-test-run-certificates> ca # [7944204.138412] ca nginx-pre-start[295]: nginx: the configuration file /nix/store/0bpd9d9d88cnqdcanf7cxb217v7jpvn6-nginx.conf syntax is ok container-test-run-certificates> server # [7944204.129160] server nginx-pre-start[265]: nginx: the configuration file /nix/store/i3shb91swdhxxybfsz96km99fkcdhisp-nginx.conf syntax is ok container-test-run-certificates> ca # [7944204.138672] ca nginx-pre-start[295]: nginx: configuration file /nix/store/0bpd9d9d88cnqdcanf7cxb217v7jpvn6-nginx.conf test is successful container-test-run-certificates> server # [7944204.129416] server nginx-pre-start[265]: nginx: configuration file /nix/store/i3shb91swdhxxybfsz96km99fkcdhisp-nginx.conf test is successful container-test-run-certificates> ca # [7944204.159259] ca systemd[1]: Started Nginx Web Server. container-test-run-certificates> server # [7944204.131410] server systemd[1]: Started Nginx Web Server. container-test-run-certificates> ca # [7944204.159596] ca systemd[1]: Reached target Multi-User System. container-test-run-certificates> server # [7944204.131621] server systemd[1]: Reached target Multi-User System. container-test-run-certificates> ca # [7944204.160463] ca systemd[1]: Starting Order (and renew) ACME certificate for ca.foo... container-test-run-certificates> server # [7944204.132228] server systemd[1]: Starting Order (and renew) ACME certificate for test.foo... container-test-run-certificates> ca: must succeed: systemctl restart acme-order-renew-ca.foo.service container-test-run-certificates> ca # [7944204.478092] ca systemd-networkd[195]: eth1: Gained IPv6LL container-test-run-certificates> ca # [7944204.597080] ca acme-order-renew-ca.foo-start[298]: Waiting to acquire lock in /run/acme/ container-test-run-certificates> ca # [7944204.598814] ca acme-order-renew-ca.foo-start[298]: + set -euo pipefail container-test-run-certificates> ca # [7944204.598855] ca acme-order-renew-ca.foo-start[298]: + echo 88dc4fc401a6091a1bd9 container-test-run-certificates> ca # [7944204.598913] ca acme-order-renew-ca.foo-start[298]: + cmp -s domainhash.txt certificates/domainhash.txt container-test-run-certificates> ca # [7944204.599578] ca acme-order-renew-ca.foo-start[298]: + lego --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo:1443/acme/acme/directory --key-type ec256 -d ca.foo run container-test-run-certificates> ca # [7944204.608526] ca acme-order-renew-ca.foo-start[310]: 2026/08/31 08:44:21 No key found for account none@none.tld. Generating a P256 key. container-test-run-certificates> ca # [7944204.608833] ca acme-order-renew-ca.foo-start[310]: 2026/08/31 08:44:21 Saved key to accounts/ca.foo_1443/none@none.tld/keys/none@none.tld.key container-test-run-certificates> ca # [7944204.620754] ca step-ca[203]: time="2026-08-31T08:44:21Z" level=info duration="95.6µs" duration-ns=95600 fields.time="2026-08-31T08:44:21Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=40afd213-3e14-4c40-b837-2e723ef73caf response="{\"newNonce\":\"https://ca.foo:1443/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo:1443/acme/acme/new-account\",\"newOrder\":\"https://ca.foo:1443/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo:1443/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo:1443/acme/acme/key-change\"}" size=277 status=200 user-agent="lego-cli/4.35.2 xenolf-acme/4.35.2 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [7944204.624965] ca acme-order-renew-ca.foo-start[310]: 2026/08/31 08:44:21 [INFO] acme: Registering account for none@none.tld container-test-run-certificates> ca # [7944204.665132] ca step-ca[203]: time="2026-08-31T08:44:22Z" level=info duration=44.033649ms duration-ns=44033649 fields.time="2026-08-31T08:44:21Z" method=HEAD name=ca nonce=bGJSRnJBaFBQS3F5Z0ZFU2hSMFZlQzNRZ1JIbWZxSm0 path=/acme/acme/new-nonce protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=011970fa-c5e8-4c1a-802a-8cc258372597 size=0 status=200 user-agent="lego-cli/4.35.2 xenolf-acme/4.35.2 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [7944204.693015] ca step-ca[203]: time="2026-08-31T08:44:22Z" level=info duration=27.271611ms duration-ns=27271611 fields.time="2026-08-31T08:44:22Z" method=POST name=ca nonce=VjhFYmdGd3pmcjByZnVzTm9OMERQTjFjZTY2eUU4UGw path=/acme/acme/new-account protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=74a43679-cce8-4d88-aae9-3a1c7d3e1f89 response="{\"contact\":[\"mailto:none@none.tld\"],\"status\":\"valid\",\"orders\":\"https://ca.foo:1443/acme/acme/account/AMG4dUxkqKGgwT9UQ5S8JbXBsB8exffT/orders\"}" size=143 status=201 user-agent="lego-cli/4.35.2 xenolf-acme/4.35.2 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [7944204.693319] ca acme-order-renew-ca.foo-start[310]: !!!! HEADS UP !!!! container-test-run-certificates> ca # [7944204.693319] ca acme-order-renew-ca.foo-start[310]: Your account credentials have been saved in your container-test-run-certificates> ca # [7944204.693319] ca acme-order-renew-ca.foo-start[310]: configuration directory at "accounts". container-test-run-certificates> ca # [7944204.693319] ca acme-order-renew-ca.foo-start[310]: You should make a secure backup of this folder now. This container-test-run-certificates> ca # [7944204.693319] ca acme-order-renew-ca.foo-start[310]: configuration directory will also contain private keys container-test-run-certificates> ca # [7944204.693319] ca acme-order-renew-ca.foo-start[310]: generated by lego and certificates obtained from the ACME container-test-run-certificates> ca # [7944204.693319] ca acme-order-renew-ca.foo-start[310]: server. Making regular backups of this folder is ideal. container-test-run-certificates> ca # [7944204.693441] ca acme-order-renew-ca.foo-start[310]: 2026/08/31 08:44:22 [INFO] [ca.foo] acme: Obtaining bundled SAN certificate container-test-run-certificates> ca # [7944204.726048] ca step-ca[203]: time="2026-08-31T08:44:22Z" level=info duration=32.373329ms duration-ns=32373329 fields.time="2026-08-31T08:44:22Z" method=POST name=ca nonce=dk5zRm13aEFnYlRreUV1cmNBdUo0SmNyaEI3TTRqS2o path=/acme/acme/new-order protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=b09838e1-11d1-4275-a982-85a756d21ce3 response="{\"id\":\"aMGh8rB4W5dkqbE8bwZNX8xfhfpcANt3\",\"status\":\"pending\",\"expires\":\"2026-09-01T08:44:22Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"ca.foo\"}],\"notBefore\":\"2026-08-31T08:43:22Z\",\"notAfter\":\"2026-11-29T08:44:22Z\",\"authorizations\":[\"https://ca.foo:1443/acme/acme/authz/z8MPidthgsWmIh24gwygTOrU5BeymFBg\"],\"finalize\":\"https://ca.foo:1443/acme/acme/order/aMGh8rB4W5dkqbE8bwZNX8xfhfpcANt3/finalize\"}" size=392 status=201 user-agent="lego-cli/4.35.2 xenolf-acme/4.35.2 (release; linux; amd64)" user-id= container-test-run-certificates> server # [7944204.598096] server acme-order-renew-test.foo-start[268]: Waiting to acquire lock in /run/acme/ container-test-run-certificates> server # [7944204.599536] server acme-order-renew-test.foo-start[268]: + set -euo pipefail container-test-run-certificates> server # [7944204.599575] server acme-order-renew-test.foo-start[268]: + echo ad12aa6741ce4bd2c108 container-test-run-certificates> server # [7944204.599628] server acme-order-renew-test.foo-start[268]: + cmp -s domainhash.txt certificates/domainhash.txt container-test-run-certificates> server # [7944204.600277] server acme-order-renew-test.foo-start[268]: + lego --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo/acme/acme/directory --key-type ec256 -d test.foo run container-test-run-certificates> server # [7944204.608526] server acme-order-renew-test.foo-start[280]: 2026/08/31 08:44:21 No key found for account none@none.tld. Generating a P256 key. container-test-run-certificates> server # [7944204.608845] server acme-order-renew-test.foo-start[280]: 2026/08/31 08:44:21 Saved key to accounts/ca.foo/none@none.tld/keys/none@none.tld.key container-test-run-certificates> server # [7944204.622768] server acme-order-renew-test.foo-start[280]: 2026/08/31 08:44:21 Could not create client: get directory at 'https://ca.foo/acme/acme/directory': Get "https://ca.foo/acme/acme/directory": GET https://ca.foo/acme/acme/directory giving up after 1 attempt(s): Get "https://ca.foo/acme/acme/directory": tls: failed to verify certificate: x509: certificate signed by unknown authority container-test-run-certificates> server # [7944204.624920] server acme-order-renew-test.foo-start[268]: + echo Failed to fetch certificates. This may mean your DNS records are set up incorrectly. Self-signed certs are in place and dependant services will still start. container-test-run-certificates> server # [7944204.624920] server acme-order-renew-test.foo-start[268]: Failed to fetch certificates. This may mean your DNS records are set up incorrectly. Self-signed certs are in place and dependant services will still start. container-test-run-certificates> server # [7944204.624920] server acme-order-renew-test.foo-start[268]: + exit 10 container-test-run-certificates> server # [7944204.627332] server systemd[1]: acme-order-renew-test.foo.service: Main process exited, code=exited, status=10/n/a container-test-run-certificates> server # [7944204.627423] server systemd[1]: acme-order-renew-test.foo.service: Failed with result 'exit-code'. container-test-run-certificates> server # [7944204.627602] server systemd[1]: Failed to start Order (and renew) ACME certificate for test.foo. container-test-run-certificates> server # [7944204.847168] server systemd[1]: etc-machine\x2did.mount: Deactivated successfully. container-test-run-certificates> server # [7944204.847852] server systemd[1]: Finished Save Transient machine-id to Disk. container-test-run-certificates> server # [7944204.847979] server systemd[1]: Startup finished in 3.014s. container-test-run-certificates> client # [7944204.847967] client systemd[1]: etc-machine\x2did.mount: Deactivated successfully. container-test-run-certificates> client # [7944204.848564] client systemd[1]: Finished Save Transient machine-id to Disk. container-test-run-certificates> client # [7944204.848682] client systemd[1]: Startup finished in 3.013s. container-test-run-certificates> ca # [7944204.793170] ca step-ca[203]: time="2026-08-31T08:44:22Z" level=info duration=10.345765ms duration-ns=10345765 fields.time="2026-08-31T08:44:22Z" method=POST name=ca nonce=a1Z5MGVndXJyU0J2dnlhU3VjS0xhQUhqUXlHdTJCRzk path=/acme/acme/authz/z8MPidthgsWmIh24gwygTOrU5BeymFBg protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=c21f0580-5b8d-4115-aae8-7054a18dce7e response="{\"identifier\":{\"type\":\"dns\",\"value\":\"ca.foo\"},\"status\":\"pending\",\"challenges\":[{\"type\":\"dns-01\",\"status\":\"pending\",\"token\":\"cHMjMhz4mWNh7CuKAqfBaJJqaHgYmLjN\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/z8MPidthgsWmIh24gwygTOrU5BeymFBg/QBNVJRQiun0VqCbS7vOoJTYovRw2Vhr2\"},{\"type\":\"http-01\",\"status\":\"pending\",\"token\":\"cHMjMhz4mWNh7CuKAqfBaJJqaHgYmLjN\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/z8MPidthgsWmIh24gwygTOrU5BeymFBg/LuZNdzy4uIcyhDRhF3fuVqzKhfOZQKeA\"},{\"type\":\"tls-alpn-01\",\"status\":\"pending\",\"token\":\"cHMjMhz4mWNh7CuKAqfBaJJqaHgYmLjN\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/z8MPidthgsWmIh24gwygTOrU5BeymFBg/Yee0ppWk2fJmFtqDTHaV1IHiEdCyqURf\"}],\"wildcard\":false,\"expires\":\"2026-09-01T08:44:22Z\"}" size=719 status=200 user-agent="lego-cli/4.35.2 xenolf-acme/4.35.2 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [7944204.793454] ca acme-order-renew-ca.foo-start[310]: 2026/08/31 08:44:22 [INFO] [ca.foo] AuthURL: https://ca.foo:1443/acme/acme/authz/z8MPidthgsWmIh24gwygTOrU5BeymFBg container-test-run-certificates> ca # [7944204.793494] ca acme-order-renew-ca.foo-start[310]: 2026/08/31 08:44:22 [INFO] [ca.foo] acme: Could not find solver for: tls-alpn-01 container-test-run-certificates> ca # [7944204.793494] ca acme-order-renew-ca.foo-start[310]: 2026/08/31 08:44:22 [INFO] [ca.foo] acme: use http-01 solver container-test-run-certificates> ca # [7944204.793494] ca acme-order-renew-ca.foo-start[310]: 2026/08/31 08:44:22 [INFO] [ca.foo] acme: Trying to solve HTTP-01 container-test-run-certificates> ca # [7944204.815389] ca step-ca[203]: time="2026-08-31T08:44:22Z" level=info duration=21.562319ms duration-ns=21562319 fields.time="2026-08-31T08:44:22Z" method=POST name=ca nonce=WjRvWEhCYmZTUDd5bXFHbTMwRWdhRUhxZ1lJNGtrVGU path=/acme/acme/challenge/z8MPidthgsWmIh24gwygTOrU5BeymFBg/LuZNdzy4uIcyhDRhF3fuVqzKhfOZQKeA protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=99968ab1-2a89-4530-9c11-85a6a8d62368 response="{\"type\":\"http-01\",\"status\":\"valid\",\"token\":\"cHMjMhz4mWNh7CuKAqfBaJJqaHgYmLjN\",\"validated\":\"2026-08-31T08:44:22Z\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/z8MPidthgsWmIh24gwygTOrU5BeymFBg/LuZNdzy4uIcyhDRhF3fuVqzKhfOZQKeA\"}" size=228 status=200 user-agent="lego-cli/4.35.2 xenolf-acme/4.35.2 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [7944204.817113] ca acme-order-renew-ca.foo-start[310]: 2026/08/31 08:44:22 [INFO] [ca.foo] The server validated our request container-test-run-certificates> ca # [7944204.817113] ca acme-order-renew-ca.foo-start[310]: 2026/08/31 08:44:22 [INFO] [ca.foo] acme: Validations succeeded; requesting certificates container-test-run-certificates> ca # [7944204.838817] ca step-ca[203]: time="2026-08-31T08:44:22Z" level=info duration=21.332616ms duration-ns=21332616 fields.time="2026-08-31T08:44:22Z" method=POST name=ca nonce=ZUQ3RVdnWTFJbld0STFFMUY0b1BodGt3TWdtVFVNRzQ path=/acme/acme/order/aMGh8rB4W5dkqbE8bwZNX8xfhfpcANt3/finalize protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=cbe63ed3-ce30-4ca9-80f2-45bc52006ec7 response="{\"id\":\"aMGh8rB4W5dkqbE8bwZNX8xfhfpcANt3\",\"status\":\"valid\",\"expires\":\"2026-09-01T08:44:22Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"ca.foo\"}],\"notBefore\":\"2026-08-31T08:43:22Z\",\"notAfter\":\"2026-11-29T08:44:22Z\",\"authorizations\":[\"https://ca.foo:1443/acme/acme/authz/z8MPidthgsWmIh24gwygTOrU5BeymFBg\"],\"finalize\":\"https://ca.foo:1443/acme/acme/order/aMGh8rB4W5dkqbE8bwZNX8xfhfpcANt3/finalize\",\"certificate\":\"https://ca.foo:1443/acme/acme/certificate/B1EPcsID0Dp8OkiWHrKvw5tSfaqBJuq9\"}" size=481 status=200 user-agent="lego-cli/4.35.2 xenolf-acme/4.35.2 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [7944204.840114] ca step-ca[203]: time="2026-08-31T08:44:22Z" level=info certificate=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 duration="859.378µs" duration-ns=859378 fields.time="2026-08-31T08:44:22Z" issuer="Clan Intermediate CA" method=POST name=ca nonce=eDVqVGxJNkJmT1NrTllWOFYxbG90aTFzSUZVUTN5dzI path=/acme/acme/certificate/B1EPcsID0Dp8OkiWHrKvw5tSfaqBJuq9 protocol=HTTP/1.1 provisioner=acme public-key="ECDSA P-256" referer= remote-address="2001:db8:1::1" request-id=44821dd7-7873-4ccc-aeb3-b9cd346539f4 sans="map[dns:[ca.foo]]" serial=119867908654169154009546936612809372443 size=1340 status=200 subject=ca.foo user-agent="lego-cli/4.35.2 xenolf-acme/4.35.2 (release; linux; amd64)" user-id= valid-from="2026-08-31T08:43:22Z" valid-to="2026-11-29T08:44:22Z" container-test-run-certificates> ca # [7944204.840261] ca acme-order-renew-ca.foo-start[310]: 2026/08/31 08:44:22 [INFO] [ca.foo] Server responded with a certificate. container-test-run-certificates> ca # [7944204.842174] ca acme-order-renew-ca.foo-start[298]: + mv domainhash.txt certificates/ container-test-run-certificates> ca # [7944204.843434] ca acme-order-renew-ca.foo-start[298]: + touch out/acme-success container-test-run-certificates> ca # [7944204.844378] ca acme-order-renew-ca.foo-start[298]: + cmp -s certificates/ca.foo.crt out/fullchain.pem container-test-run-certificates> ca # [7944204.845045] ca acme-order-renew-ca.foo-start[298]: + touch out/renewed container-test-run-certificates> ca # [7944204.845895] ca acme-order-renew-ca.foo-start[298]: + echo Installing new certificate container-test-run-certificates> ca # [7944204.845895] ca acme-order-renew-ca.foo-start[298]: Installing new certificate container-test-run-certificates> ca # [7944204.845949] ca acme-order-renew-ca.foo-start[298]: + cp -vp certificates/ca.foo.crt out/fullchain.pem container-test-run-certificates> ca # [7944204.846733] ca acme-order-renew-ca.foo-start[331]: 'certificates/ca.foo.crt' -> 'out/fullchain.pem' container-test-run-certificates> ca # [7944204.846905] ca acme-order-renew-ca.foo-start[298]: + cp -vp certificates/ca.foo.key out/key.pem container-test-run-certificates> ca # [7944204.847648] ca acme-order-renew-ca.foo-start[332]: 'certificates/ca.foo.key' -> 'out/key.pem' container-test-run-certificates> ca # [7944204.847785] ca acme-order-renew-ca.foo-start[298]: + cp -vp certificates/ca.foo.issuer.crt out/chain.pem container-test-run-certificates> ca # [7944204.848046] ca systemd[1]: etc-machine\x2did.mount: Deactivated successfully. container-test-run-certificates> ca # [7944204.848616] ca systemd[1]: Finished Save Transient machine-id to Disk. container-test-run-certificates> ca # [7944204.848777] ca acme-order-renew-ca.foo-start[333]: 'certificates/ca.foo.issuer.crt' -> 'out/chain.pem' container-test-run-certificates> ca # [7944204.848924] ca acme-order-renew-ca.foo-start[298]: + ln -sf fullchain.pem out/cert.pem container-test-run-certificates> ca # [7944204.850007] ca acme-order-renew-ca.foo-start[298]: + cat out/key.pem out/fullchain.pem container-test-run-certificates> ca # [7944204.850935] ca acme-order-renew-ca.foo-start[298]: + for fixpath in out certificates container-test-run-certificates> ca # [7944204.850948] ca acme-order-renew-ca.foo-start[298]: + '[' -d out ']' container-test-run-certificates> ca # [7944204.850958] ca acme-order-renew-ca.foo-start[298]: + chmod -R u=rwX,g=rX,o= out container-test-run-certificates> ca # [7944204.851980] ca acme-order-renew-ca.foo-start[298]: + chown -R acme:nginx out container-test-run-certificates> ca # [7944204.853449] ca acme-order-renew-ca.foo-start[298]: + for fixpath in out certificates container-test-run-certificates> ca # [7944204.853460] ca acme-order-renew-ca.foo-start[298]: + '[' -d certificates ']' container-test-run-certificates> ca # [7944204.853477] ca acme-order-renew-ca.foo-start[298]: + chmod -R u=rwX,g=rX,o= certificates container-test-run-certificates> ca # [7944204.854359] ca acme-order-renew-ca.foo-start[298]: + chown -R acme:nginx certificates container-test-run-certificates> ca # [7944204.855847] ca acme-order-renew-ca.foo-start[298]: + chmod -R u=rwX,g=,o= accounts/. container-test-run-certificates> ca # [7944204.926600] ca systemd[1]: Reloading Nginx Web Server... container-test-run-certificates> ca # [7944204.928623] ca systemd[1]: acme-order-renew-ca.foo.service: Deactivated successfully. container-test-run-certificates> ca # [7944204.928722] ca systemd[1]: Finished Order (and renew) ACME certificate for ca.foo. container-test-run-certificates> ca # [7944205.328501] ca nginx[350]: nginx: the configuration file /nix/store/0bpd9d9d88cnqdcanf7cxb217v7jpvn6-nginx.conf syntax is ok container-test-run-certificates> ca # [7944205.328710] ca nginx[350]: nginx: configuration file /nix/store/0bpd9d9d88cnqdcanf7cxb217v7jpvn6-nginx.conf test is successful container-test-run-certificates> ca # [7944205.711238] ca systemd[1]: Reloaded Nginx Web Server. container-test-run-certificates> ca # [7944205.711405] ca systemd[1]: Startup finished in 3.871s. container-test-run-certificates> ca # [7944206.197057] ca systemd[1]: Starting Order (and renew) ACME certificate for ca.foo... container-test-run-certificates> ca # [7944206.715469] ca acme-order-renew-ca.foo-start[365]: Waiting to acquire lock in /run/acme/ container-test-run-certificates> ca # [7944206.717369] ca acme-order-renew-ca.foo-start[365]: + set -euo pipefail container-test-run-certificates> ca # [7944206.717511] ca acme-order-renew-ca.foo-start[365]: + echo 88dc4fc401a6091a1bd9 container-test-run-certificates> ca # [7944206.717554] ca acme-order-renew-ca.foo-start[365]: + cmp -s domainhash.txt certificates/domainhash.txt container-test-run-certificates> ca # [7944206.718441] ca acme-order-renew-ca.foo-start[365]: + '[' -e certificates/ca.foo.key ']' container-test-run-certificates> ca # [7944206.718502] ca acme-order-renew-ca.foo-start[365]: + '[' -e certificates/ca.foo.crt ']' container-test-run-certificates> ca # [7944206.718750] ca acme-order-renew-ca.foo-start[373]: ++ find accounts -name none@none.tld.key container-test-run-certificates> ca # [7944206.721304] ca acme-order-renew-ca.foo-start[365]: + '[' -n accounts/ca.foo_1443/none@none.tld/keys/none@none.tld.key ']' container-test-run-certificates> ca # [7944206.721362] ca acme-order-renew-ca.foo-start[365]: + lego --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo:1443/acme/acme/directory --key-type ec256 -d ca.foo renew --no-random-sleep --dynamic container-test-run-certificates> ca # [7944206.746193] ca step-ca[203]: time="2026-08-31T08:44:24Z" level=info duration="74.32µs" duration-ns=74320 fields.time="2026-08-31T08:44:24Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=bf3c4cd8-fa00-4b51-afb7-70c16a79ef9b response="{\"newNonce\":\"https://ca.foo:1443/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo:1443/acme/acme/new-account\",\"newOrder\":\"https://ca.foo:1443/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo:1443/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo:1443/acme/acme/key-change\"}" size=277 status=200 user-agent="lego-cli/4.35.2 xenolf-acme/4.35.2 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [7944206.746528] ca acme-order-renew-ca.foo-start[374]: 2026/08/31 08:44:24 [WARN] [ca.foo] acme: renewalInfo[get/post]: server does not advertise a renewal info endpoint container-test-run-certificates> ca # [7944206.746528] ca acme-order-renew-ca.foo-start[374]: 2026/08/31 08:44:24 [INFO] [ca.foo] The certificate expires at 2026-11-29T08:44:22Z, the renewal can be performed in 1439h59m37.88786461s: no renewal. container-test-run-certificates> ca # [7944206.747552] ca acme-order-renew-ca.foo-start[365]: + mv domainhash.txt certificates/ container-test-run-certificates> ca # [7944206.748730] ca acme-order-renew-ca.foo-start[365]: + touch out/acme-success container-test-run-certificates> ca # [7944206.749641] ca acme-order-renew-ca.foo-start[365]: + cmp -s certificates/ca.foo.crt out/fullchain.pem container-test-run-certificates> ca # [7944206.750351] ca acme-order-renew-ca.foo-start[365]: + for fixpath in out certificates container-test-run-certificates> ca # [7944206.750351] ca acme-order-renew-ca.foo-start[365]: + '[' -d out ']' container-test-run-certificates> ca # [7944206.750387] ca acme-order-renew-ca.foo-start[365]: + chmod -R u=rwX,g=rX,o= out container-test-run-certificates> ca # [7944206.751334] ca acme-order-renew-ca.foo-start[365]: + chown -R acme:nginx out container-test-run-certificates> ca # [7944206.752823] ca acme-order-renew-ca.foo-start[365]: + for fixpath in out certificates container-test-run-certificates> ca # [7944206.752823] ca acme-order-renew-ca.foo-start[365]: + '[' -d certificates ']' container-test-run-certificates> ca # [7944206.752868] ca acme-order-renew-ca.foo-start[365]: + chmod -R u=rwX,g=rX,o= certificates container-test-run-certificates> ca # [7944206.753845] ca acme-order-renew-ca.foo-start[365]: + chown -R acme:nginx certificates container-test-run-certificates> ca # [7944206.755558] ca acme-order-renew-ca.foo-start[365]: + chmod -R u=rwX,g=,o= accounts/. container-test-run-certificates> ca: (finished: must succeed: systemctl restart acme-order-renew-ca.foo.service , in 2.43 seconds) container-test-run-certificates> ca # [7944206.987747] ca systemd[1]: acme-order-renew-ca.foo.service: Deactivated successfully. container-test-run-certificates> ca # [7944206.987874] ca systemd[1]: Finished Order (and renew) ACME certificate for ca.foo. container-test-run-certificates> server: must succeed: systemctl restart acme-test.foo.service container-test-run-certificates> server # [7944209.997363] server systemd[1]: acme-test.foo.service: Deactivated successfully. container-test-run-certificates> server # [7944209.997482] server systemd[1]: Stopped Ensure certificate for test.foo. container-test-run-certificates> server # [7944209.998200] server systemd[1]: Stopping Ensure certificate for test.foo... container-test-run-certificates> server # [7944209.999245] server systemd[1]: Starting Ensure certificate for test.foo... container-test-run-certificates> server: (finished: must succeed: systemctl restart acme-test.foo.service, in 1.15 seconds) container-test-run-certificates> client: waiting for success: curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: 2001:db8:1::3 container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying [2001:db8:1::3]:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1009 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [110 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Aug 31 08:44:21 2026 GMT container-test-run-certificates> * expire date: Sep 30 08:44:21 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 0a89a5 container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> server # [7944211.125820] server acme-test.foo-start[304]: Waiting to acquire lock in /run/acme/ container-test-run-certificates> server # [7944211.127729] server acme-test.foo-start[304]: + '[' -e out/acme-success ']' container-test-run-certificates> server # [7944211.127729] server acme-test.foo-start[304]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=test.foo --ip-addresses= container-test-run-certificates> server # [7944211.133189] server acme-test.foo-start[314]: + cd test.foo container-test-run-certificates> server # [7944211.133402] server acme-test.foo-start[314]: + cp -vp cert.pem ../out/cert.pem container-test-run-certificates> server # [7944211.134403] server acme-test.foo-start[315]: 'cert.pem' -> '../out/cert.pem' container-test-run-certificates> server # [7944211.134704] server acme-test.foo-start[314]: + cp -vp key.pem ../out/key.pem container-test-run-certificates> server # [7944211.135473] server acme-test.foo-start[314]: 'key.pem' -> '../out/key.pem' container-test-run-certificates> server # [7944211.135636] server acme-test.foo-start[304]: + cat out/cert.pem ca/cert.pem container-test-run-certificates> server # [7944211.136759] server acme-test.foo-start[304]: + cp ca/cert.pem out/chain.pem container-test-run-certificates> server # [7944211.137604] server acme-test.foo-start[304]: + cat out/key.pem out/fullchain.pem container-test-run-certificates> server # [7944211.138393] server acme-test.foo-start[304]: + for fixpath in out certificates container-test-run-certificates> server # [7944211.138393] server acme-test.foo-start[304]: + '[' -d out ']' container-test-run-certificates> server # [7944211.138435] server acme-test.foo-start[304]: + chmod -R u=rwX,g=rX,o= out container-test-run-certificates> server # [7944211.139181] server acme-test.foo-start[304]: + chown -R acme:nginx out container-test-run-certificates> server # [7944211.140919] server acme-test.foo-start[304]: + for fixpath in out certificates container-test-run-certificates> server # [7944211.140919] server acme-test.foo-start[304]: + '[' -d certificates ']' container-test-run-certificates> server # [7944211.143521] server systemd[1]: Finished Ensure certificate for test.foo. container-test-run-certificates> server # [7944211.145466] server systemd[1]: Starting Order (and renew) ACME certificate for test.foo... container-test-run-certificates> * Trying [2001:db8:1::3]:443... container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: 2001:db8:1::3 container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1009 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [111 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Aug 31 08:44:21 2026 GMT container-test-run-certificates> * expire date: Sep 30 08:44:21 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 0a89a5 container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> server # [7944212.032274] server acme-order-renew-test.foo-start[322]: Waiting to acquire lock in /run/acme/ container-test-run-certificates> server # [7944212.034120] server acme-order-renew-test.foo-start[322]: + set -euo pipefail container-test-run-certificates> server # [7944212.034193] server acme-order-renew-test.foo-start[322]: + echo ad12aa6741ce4bd2c108 container-test-run-certificates> server # [7944212.034212] server acme-order-renew-test.foo-start[322]: + cmp -s domainhash.txt certificates/domainhash.txt container-test-run-certificates> server # [7944212.035020] server acme-order-renew-test.foo-start[322]: + lego --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo/acme/acme/directory --key-type ec256 -d test.foo run container-test-run-certificates> server # [7944212.061070] server acme-order-renew-test.foo-start[330]: 2026/08/31 08:44:29 [INFO] acme: Registering account for none@none.tld container-test-run-certificates> server # [7944212.068784] server acme-order-renew-test.foo-start[330]: !!!! HEADS UP !!!! container-test-run-certificates> server # [7944212.068784] server acme-order-renew-test.foo-start[330]: Your account credentials have been saved in your container-test-run-certificates> server # [7944212.068784] server acme-order-renew-test.foo-start[330]: configuration directory at "accounts". container-test-run-certificates> server # [7944212.068784] server acme-order-renew-test.foo-start[330]: You should make a secure backup of this folder now. This container-test-run-certificates> server # [7944212.068784] server acme-order-renew-test.foo-start[330]: configuration directory will also contain private keys container-test-run-certificates> server # [7944212.068784] server acme-order-renew-test.foo-start[330]: generated by lego and certificates obtained from the ACME container-test-run-certificates> server # [7944212.068784] server acme-order-renew-test.foo-start[330]: server. Making regular backups of this folder is ideal. container-test-run-certificates> server # [7944212.069020] server acme-order-renew-test.foo-start[330]: 2026/08/31 08:44:29 [INFO] [test.foo] acme: Obtaining bundled SAN certificate container-test-run-certificates> server # [7944212.130616] server acme-order-renew-test.foo-start[330]: 2026/08/31 08:44:29 [INFO] [test.foo] AuthURL: https://ca.foo/acme/acme/authz/9ifMlC8QdYCG1WVRgAlKlMFBmxSXhYs9 container-test-run-certificates> server # [7944212.130616] server acme-order-renew-test.foo-start[330]: 2026/08/31 08:44:29 [INFO] [test.foo] acme: Could not find solver for: tls-alpn-01 container-test-run-certificates> server # [7944212.130616] server acme-order-renew-test.foo-start[330]: 2026/08/31 08:44:29 [INFO] [test.foo] acme: use http-01 solver container-test-run-certificates> server # [7944212.130616] server acme-order-renew-test.foo-start[330]: 2026/08/31 08:44:29 [INFO] [test.foo] acme: Trying to solve HTTP-01 container-test-run-certificates> server # [7944212.134345] server acme-order-renew-test.foo-start[330]: 2026/08/31 08:44:29 [INFO] [test.foo] The server validated our request container-test-run-certificates> server # [7944212.134409] server acme-order-renew-test.foo-start[330]: 2026/08/31 08:44:29 [INFO] [test.foo] acme: Validations succeeded; requesting certificates container-test-run-certificates> server # [7944212.140068] server acme-order-renew-test.foo-start[330]: 2026/08/31 08:44:29 [INFO] [test.foo] Server responded with a certificate. container-test-run-certificates> server # [7944212.144192] server acme-order-renew-test.foo-start[322]: + mv domainhash.txt certificates/ container-test-run-certificates> server # [7944212.145356] server acme-order-renew-test.foo-start[322]: + touch out/acme-success container-test-run-certificates> server # [7944212.147151] server acme-order-renew-test.foo-start[322]: + cmp -s certificates/test.foo.crt out/fullchain.pem container-test-run-certificates> server # [7944212.148078] server acme-order-renew-test.foo-start[322]: + touch out/renewed container-test-run-certificates> server # [7944212.149064] server acme-order-renew-test.foo-start[322]: + echo Installing new certificate container-test-run-certificates> server # [7944212.149064] server acme-order-renew-test.foo-start[322]: Installing new certificate container-test-run-certificates> server # [7944212.149138] server acme-order-renew-test.foo-start[322]: + cp -vp certificates/test.foo.crt out/fullchain.pem container-test-run-certificates> server # [7944212.150178] server acme-order-renew-test.foo-start[350]: 'certificates/test.foo.crt' -> 'out/fullchain.pem' container-test-run-certificates> server # [7944212.150383] server acme-order-renew-test.foo-start[322]: + cp -vp certificates/test.foo.key out/key.pem container-test-run-certificates> server # [7944212.151131] server acme-order-renew-test.foo-start[351]: 'certificates/test.foo.key' -> 'out/key.pem' container-test-run-certificates> server # [7944212.151309] server acme-order-renew-test.foo-start[322]: + cp -vp certificates/test.foo.issuer.crt out/chain.pem container-test-run-certificates> server # [7944212.152153] server acme-order-renew-test.foo-start[352]: 'certificates/test.foo.issuer.crt' -> 'out/chain.pem' container-test-run-certificates> server # [7944212.152316] server acme-order-renew-test.foo-start[322]: + ln -sf fullchain.pem out/cert.pem container-test-run-certificates> server # [7944212.153280] server acme-order-renew-test.foo-start[322]: + cat out/key.pem out/fullchain.pem container-test-run-certificates> server # [7944212.154283] server acme-order-renew-test.foo-start[322]: + for fixpath in out certificates container-test-run-certificates> server # [7944212.154283] server acme-order-renew-test.foo-start[322]: + '[' -d out ']' container-test-run-certificates> server # [7944212.154326] server acme-order-renew-test.foo-start[322]: + chmod -R u=rwX,g=rX,o= out container-test-run-certificates> server # [7944212.155122] server acme-order-renew-test.foo-start[322]: + chown -R acme:nginx out container-test-run-certificates> server # [7944212.156632] server acme-order-renew-test.foo-start[322]: + for fixpath in out certificates container-test-run-certificates> server # [7944212.156663] server acme-order-renew-test.foo-start[322]: + '[' -d certificates ']' container-test-run-certificates> server # [7944212.156663] server acme-order-renew-test.foo-start[322]: + chmod -R u=rwX,g=rX,o= certificates container-test-run-certificates> server # [7944212.157500] server acme-order-renew-test.foo-start[322]: + chown -R acme:nginx certificates container-test-run-certificates> server # [7944212.159270] server acme-order-renew-test.foo-start[322]: + chmod -R u=rwX,g=,o= accounts/. container-test-run-certificates> server # [7944212.286504] server systemd[1]: Reloading Nginx Web Server... container-test-run-certificates> ca # [7944212.060751] ca step-ca[203]: time="2026-08-31T08:44:29Z" level=info duration="42.329µs" duration-ns=42329 fields.time="2026-08-31T08:44:29Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="::1" request-id=503dbe73-22c6-4d97-89eb-675d624b9f63 response="{\"newNonce\":\"https://ca.foo/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo/acme/acme/new-account\",\"newOrder\":\"https://ca.foo/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo/acme/acme/key-change\"}" size=252 status=200 user-agent="lego-cli/4.35.2 xenolf-acme/4.35.2 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [7944212.065937] ca step-ca[203]: time="2026-08-31T08:44:29Z" level=info duration=3.826386ms duration-ns=3826386 fields.time="2026-08-31T08:44:29Z" method=HEAD name=ca nonce=UzZieWhUZU0wM3pGM2R4TkpFOHg0aVZnZ2hyMERTM3g path=/acme/acme/new-nonce protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=d169328c-ea09-4f0d-b8a4-4be6bed18b8f size=0 status=200 user-agent="lego-cli/4.35.2 xenolf-acme/4.35.2 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [7944212.068315] ca step-ca[203]: time="2026-08-31T08:44:29Z" level=info duration=1.084322ms duration-ns=1084322 fields.time="2026-08-31T08:44:29Z" method=POST name=ca nonce=RWIyTzFrRmg1UWJxYmxXT3EyTG5TbDZpQkl6V0l4bm4 path=/acme/acme/new-account protocol=HTTP/1.1 referer= remote-address="::1" request-id=e8f772cd-6e97-428c-9c66-89aa2ce13d34 response="{\"contact\":[\"mailto:none@none.tld\"],\"status\":\"valid\",\"orders\":\"https://ca.foo/acme/acme/account/f97lNkQQQpHryQCbxJ5vwLd2myYjOg8d/orders\"}" size=138 status=201 user-agent="lego-cli/4.35.2 xenolf-acme/4.35.2 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [7944212.071433] ca step-ca[203]: time="2026-08-31T08:44:29Z" level=info duration=1.55056ms duration-ns=1550560 fields.time="2026-08-31T08:44:29Z" method=POST name=ca nonce=YXJ3bzZTRzFuQmFwa1lZd2FTd2lPWnVlNXhkS1lVc3I path=/acme/acme/new-order protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=2e502ba1-a38f-453b-8009-76bc138f983d response="{\"id\":\"sLl5uEKZX39QVOpwfzS7Z4HXNlMzk16S\",\"status\":\"pending\",\"expires\":\"2026-09-01T08:44:29Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"test.foo\"}],\"notBefore\":\"2026-08-31T08:43:29Z\",\"notAfter\":\"2026-11-29T08:44:29Z\",\"authorizations\":[\"https://ca.foo/acme/acme/authz/9ifMlC8QdYCG1WVRgAlKlMFBmxSXhYs9\"],\"finalize\":\"https://ca.foo/acme/acme/order/sLl5uEKZX39QVOpwfzS7Z4HXNlMzk16S/finalize\"}" size=384 status=201 user-agent="lego-cli/4.35.2 xenolf-acme/4.35.2 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [7944212.130128] ca step-ca[203]: time="2026-08-31T08:44:29Z" level=info duration=1.145597ms duration-ns=1145597 fields.time="2026-08-31T08:44:29Z" method=POST name=ca nonce=VjJ5ejhDR24yT3BjUlgwNUR0cFhKWEkwRW4xVnk0c04 path=/acme/acme/authz/9ifMlC8QdYCG1WVRgAlKlMFBmxSXhYs9 protocol=HTTP/1.1 referer= remote-address="::1" request-id=383c1388-d901-48a6-9e80-6316440d072c response="{\"identifier\":{\"type\":\"dns\",\"value\":\"test.foo\"},\"status\":\"pending\",\"challenges\":[{\"type\":\"dns-01\",\"status\":\"pending\",\"token\":\"a6Z9PY0ChMVx4eGsSP0WFcJQZy7cOz2E\",\"url\":\"https://ca.foo/acme/acme/challenge/9ifMlC8QdYCG1WVRgAlKlMFBmxSXhYs9/NsMLikMsRTXBSrXtO3mCMVfcdgezBLGF\"},{\"type\":\"http-01\",\"status\":\"pending\",\"token\":\"a6Z9PY0ChMVx4eGsSP0WFcJQZy7cOz2E\",\"url\":\"https://ca.foo/acme/acme/challenge/9ifMlC8QdYCG1WVRgAlKlMFBmxSXhYs9/BRBNdkugH59EXogGIAYfcGZEQmJx5QPo\"},{\"type\":\"tls-alpn-01\",\"status\":\"pending\",\"token\":\"a6Z9PY0ChMVx4eGsSP0WFcJQZy7cOz2E\",\"url\":\"https://ca.foo/acme/acme/challenge/9ifMlC8QdYCG1WVRgAlKlMFBmxSXhYs9/jQFy1unQQprdOFdZ863RXeetfxV3AEZ5\"}],\"wildcard\":false,\"expires\":\"2026-09-01T08:44:29Z\"}" size=706 status=200 user-agent="lego-cli/4.35.2 xenolf-acme/4.35.2 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [7944212.134075] ca step-ca[203]: time="2026-08-31T08:44:29Z" level=info duration=2.138598ms duration-ns=2138598 fields.time="2026-08-31T08:44:29Z" method=POST name=ca nonce=akh3WThXa1NjakNxQmJ6Wk5lcThrc3RNQTgyQzNIR2U path=/acme/acme/challenge/9ifMlC8QdYCG1WVRgAlKlMFBmxSXhYs9/BRBNdkugH59EXogGIAYfcGZEQmJx5QPo protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=02d3665c-724b-42dd-bfdb-95db891f5d9b response="{\"type\":\"http-01\",\"status\":\"valid\",\"token\":\"a6Z9PY0ChMVx4eGsSP0WFcJQZy7cOz2E\",\"validated\":\"2026-08-31T08:44:29Z\",\"url\":\"https://ca.foo/acme/acme/challenge/9ifMlC8QdYCG1WVRgAlKlMFBmxSXhYs9/BRBNdkugH59EXogGIAYfcGZEQmJx5QPo\"}" size=223 status=200 user-agent="lego-cli/4.35.2 xenolf-acme/4.35.2 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [7944212.138081] ca step-ca[203]: time="2026-08-31T08:44:29Z" level=info duration=2.496191ms duration-ns=2496191 fields.time="2026-08-31T08:44:29Z" method=POST name=ca nonce=NFBQVGdCRnp1dFlvelZ6R09JY25yc2VuR1JISjI2ZGQ path=/acme/acme/order/sLl5uEKZX39QVOpwfzS7Z4HXNlMzk16S/finalize protocol=HTTP/1.1 referer= remote-address="::1" request-id=27b7255c-7af7-4745-abff-97fa465a72e7 response="{\"id\":\"sLl5uEKZX39QVOpwfzS7Z4HXNlMzk16S\",\"status\":\"valid\",\"expires\":\"2026-09-01T08:44:29Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"test.foo\"}],\"notBefore\":\"2026-08-31T08:43:29Z\",\"notAfter\":\"2026-11-29T08:44:29Z\",\"authorizations\":[\"https://ca.foo/acme/acme/authz/9ifMlC8QdYCG1WVRgAlKlMFBmxSXhYs9\"],\"finalize\":\"https://ca.foo/acme/acme/order/sLl5uEKZX39QVOpwfzS7Z4HXNlMzk16S/finalize\",\"certificate\":\"https://ca.foo/acme/acme/certificate/CIm8sgiayBScQvP9mWKoMSRdPjq8LIig\"}" size=468 status=200 user-agent="lego-cli/4.35.2 xenolf-acme/4.35.2 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [7944212.139840] ca step-ca[203]: time="2026-08-31T08:44:29Z" level=info certificate="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" duration="716.93µs" duration-ns=716930 fields.time="2026-08-31T08:44:29Z" issuer="Clan Intermediate CA" method=POST name=ca nonce=UUg1Q0NTTEo0NExCbFNNNUJQSkYzaTNaRUhmODdTVDY path=/acme/acme/certificate/CIm8sgiayBScQvP9mWKoMSRdPjq8LIig protocol=HTTP/1.1 provisioner=acme public-key="ECDSA P-256" referer= remote-address=127.0.0.1 request-id=1e3e5cce-5322-4902-a3c7-c926a0e67122 sans="map[dns:[test.foo]]" serial=86212737492699096121158190807785374114 size=1348 status=200 subject=test.foo user-agent="lego-cli/4.35.2 xenolf-acme/4.35.2 (release; linux; amd64)" user-id= valid-from="2026-08-31T08:43:29Z" valid-to="2026-11-29T08:44:29Z" container-test-run-certificates> server # [7944212.289732] server systemd[1]: acme-order-renew-test.foo.service: Deactivated successfully. container-test-run-certificates> server # [7944212.289905] server systemd[1]: Finished Order (and renew) ACME certificate for test.foo. container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: 2001:db8:1::3 container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying [2001:db8:1::3]:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1009 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [111 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Aug 31 08:44:21 2026 GMT container-test-run-certificates> * expire date: Sep 30 08:44:21 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 0a89a5 container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> server # [7944213.057290] server nginx[368]: nginx: the configuration file /nix/store/i3shb91swdhxxybfsz96km99fkcdhisp-nginx.conf syntax is ok container-test-run-certificates> server # [7944213.057561] server nginx[368]: nginx: configuration file /nix/store/i3shb91swdhxxybfsz96km99fkcdhisp-nginx.conf test is successful container-test-run-certificates> server # [7944213.838935] server systemd[1]: Reloaded Nginx Web Server. container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: 2001:db8:1::3 container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying [2001:db8:1::3]:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [930 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [80 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Aug 31 08:43:29 2026 GMT container-test-run-certificates> * expire date: Nov 29 08:44:29 2026 GMT container-test-run-certificates> * issuer: CN=Clan Intermediate CA container-test-run-certificates> * Certificate level 0: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 1: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 2: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 0 container-test-run-certificates> * SSL certificate verified via OpenSSL. container-test-run-certificates> * Established connection to test.foo (2001:db8:1::3 port 443) from 2001:db8:1::2 port 47246 container-test-run-certificates> % Total % Received % Xferd Average Speed Time Time Time Current container-test-run-certificates> Dload Upload Total Spent Left Speed container-test-run-certificates> 0 0 0 0 0 0 0 0 0* using HTTP/2 container-test-run-certificates> * [HTTP/2] [1] OPENED stream for https://test.foo/ container-test-run-certificates> * [HTTP/2] [1] [:method: GET] container-test-run-certificates> * [HTTP/2] [1] [:scheme: https] container-test-run-certificates> * [HTTP/2] [1] [:authority: test.foo] container-test-run-certificates> * [HTTP/2] [1] [:path: /] container-test-run-certificates> * [HTTP/2] [1] [user-agent: curl/8.21.0] container-test-run-certificates> * [HTTP/2] [1] [accept: */*] container-test-run-certificates> } [5 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> * Request completely sent off container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> { [5 bytes data] container-test-run-certificates> 100 20 100 20 0 0 1716 0 0 container-test-run-certificates> * Connection #0 to host test.foo:443 left intact container-test-run-certificates> client: (finished: waiting for success: curl -v https://test.foo, in 3.09 seconds) container-test-run-certificates> client: must succeed: openssl s_client -connect test.foo:443 -servername test.foo /dev/null | openssl x509 -text -noout 1>&2 container-test-run-certificates> Certificate: container-test-run-certificates> Data: container-test-run-certificates> Version: 3 (0x2) container-test-run-certificates> Serial Number: container-test-run-certificates> 40:db:f8:22:3d:bc:36:af:e1:91:4b:bf:ee:0b:81:a2 container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Issuer: CN=Clan Intermediate CA container-test-run-certificates> Validity container-test-run-certificates> Not Before: Aug 31 08:43:29 2026 GMT container-test-run-certificates> Not After : Nov 29 08:44:29 2026 GMT container-test-run-certificates> Subject: CN=test.foo container-test-run-certificates> Subject Public Key Info: container-test-run-certificates> Public Key Algorithm: id-ecPublicKey container-test-run-certificates> Public-Key: (256 bit) container-test-run-certificates> pub: container-test-run-certificates> 04:7d:cf:13:d8:dc:19:ce:a2:b6:20:8c:43:4f:4f: container-test-run-certificates> f7:c1:2d:4a:c8:ad:01:0f:44:31:61:9f:07:f7:6c: container-test-run-certificates> 1f:00:1d:a2:18:ca:cc:32:8e:6d:e8:63:3b:94:e7: container-test-run-certificates> d3:c9:af:74:86:ae:96:9e:ea:d4:e7:2a:5a:4f:41: container-test-run-certificates> 28:7e:ea:0c:90 container-test-run-certificates> ASN1 OID: prime256v1 container-test-run-certificates> NIST CURVE: P-256 container-test-run-certificates> X509v3 extensions: container-test-run-certificates> X509v3 Key Usage: critical container-test-run-certificates> Digital Signature container-test-run-certificates> X509v3 Extended Key Usage: container-test-run-certificates> TLS Web Server Authentication, TLS Web Client Authentication container-test-run-certificates> X509v3 Subject Key Identifier: container-test-run-certificates> DD:49:5F:94:9E:76:6D:6A:7E:9F:E8:0A:6E:39:8F:32:1A:3A:D4:5E container-test-run-certificates> X509v3 Authority Key Identifier: container-test-run-certificates> 36:2A:04:C9:C4:3C:7A:3E:78:E7:23:61:99:25:79:DF:A2:7F:93:7B container-test-run-certificates> X509v3 Subject Alternative Name: container-test-run-certificates> DNS:test.foo container-test-run-certificates> 1.3.6.1.4.1.37476.9000.64.1: container-test-run-certificates> 0......acme.. container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Signature Value: container-test-run-certificates> 30:45:02:20:55:79:14:b3:08:71:16:d6:66:98:e0:c5:69:00: container-test-run-certificates> fe:d3:9f:bb:ca:f3:86:49:bb:d6:89:fe:61:54:e3:84:f6:0e: container-test-run-certificates> 02:21:00:83:3f:82:62:76:59:d2:ee:3d:63:22:a8:f1:75:ff: container-test-run-certificates> 20:00:b5:3a:2e:97:03:9f:72:1d:ce:04:ba:34:7f:0e:1f container-test-run-certificates> client: (finished: must succeed: openssl s_client -connect test.foo:443 -servername test.foo /dev/null | openssl x509 -text -noout 1>&2, in 0.02 seconds) container-test-run-certificates> (finished: run the VM test script, in 12.70 seconds) container-test-run-certificates> test script finished in 12.79s container-test-run-certificates> cleanup container-test-run-certificates> kill NspawnMachine (pid 53) container-test-run-certificates> kill NspawnMachine (pid 54) container-test-run-certificates> Container ca terminated by signal KILL. container-test-run-certificates> kill NspawnMachine (pid 57) container-test-run-certificates> Container client terminated by signal KILL. container-test-run-certificates> Container server terminated by signal KILL. container-test-run-certificates> (finished: cleanup, in 0.24 seconds) post-build step Upload to niks3: ok time=2026-08-31T08:44:32.472Z level=INFO msg="Uploading 0 paths to niks3.clan.lol (1 already cached)" time=2026-08-31T08:44:33.009Z level=INFO msg="Uploading 1 narinfos" time=2026-08-31T08:44:33.584Z level=INFO msg="Upload complete. (1.179s)"