these 109 derivations will be built: /nix/store/blhsplp7hc7icnwxwc86qg0lzjkyx222-system-path.drv /nix/store/0lxfys1n26fyq94fkh183sbhjxdbfra8-dbus-1.drv /nix/store/1ia6iwn550jhvk4v3jml9c5qzm4y0svc-nss-cacert-3.126.drv /nix/store/i869j0s56zqbirg2a5v2r61ay3p3w9qg-generator-step-intermediate-key.drv /nix/store/8is2x6x2gyhkjvcsmq7n63yrpwp1r22q-intermediate.tmpl.drv /nix/store/jvdy8c92vim77mbw4mcv967h6xzx5589-generator-step-intermediate-cert.drv /nix/store/ml6hjdwyfdj7pb2k1c4qw5ffdr5vwjnm-root.tmpl.drv /nix/store/ynsafdzsigj0pk1166fdfp5skrk2nsrx-generator-step-ca.drv /nix/store/7iwi4sj2sy5s03xsd7bwab11s33r0y86-vars-check-certificates.drv /nix/store/1zak04k3b766j5735gwd74hj9s1s7kj6-localhost-hosts.drv /nix/store/2n8rq3wa0liri083c4y7dwmdh2b8zl94-extra-hosts.drv /nix/store/shnwhmbhzw9j0rzwa09yljzdv8vrdq37-string-hosts.drv /nix/store/88155jwdzda0nd8ykwnb3a9v1y0b1np5-hosts.drv /nix/store/y1320xmmad6h9galjcy4ipiz677j08yi-X-Restart-Triggers-dbus-broker.drv /nix/store/fdwai2a6fwnr90jr863idx3gcvrc0g18-unit-dbus-broker.service.drv /nix/store/ff0scdlzmx0hh8bh2clc8qd03pvhdrzc-user-units.drv /nix/store/1xc7zffspdjk07qr0h8fqkqyr3grlpkw-10-acme.conf.drv /nix/store/5q5cczn5g9fxzsd9v8w9skb8ygzy9pzp-nixos-tmpfiles.d.drv /nix/store/ix5mx3s9cb1xsz1m2acmld67ng371x11-tmpfiles.d.drv /nix/store/2l8zq8xxwl3kylfbs4kr065ljr6ial6l-unit-dbus-broker.service.drv /nix/store/p2sgy6p420nr35c6y9kli9nyhnc3y59s-X-Restart-Triggers-systemd-tmpfiles-resetup.drv /nix/store/49xbdwc6vrgq0p7mm859n3a7vxbmii3q-unit-systemd-tmpfiles-resetup.service.drv /nix/store/20qzm2wf5g6k760lmclv601ix2mp4nky-unit-script-acme-setup-start.drv /nix/store/bf4j72bknj4i8cbv39hkidcrh2wal1jq-acme-setup-privileged.drv /nix/store/4a2nhyvlh4b13mf1igrncmfpi81q7jkq-unit-acme-setup.service.drv /nix/store/7pqpaqx67isxfma3pqlal0prnszjy4b6-firewall-start.drv /nix/store/vxy3aj3ng9nrw3ajxj1b4b0h8vcywa35-firewall-reload.drv /nix/store/5hzyhblczxgfgpqaxlp57a2bk71j8l7w-unit-firewall.service.drv /nix/store/1dm3gsi1gl8ql13wf9mzrs73pgakpbva-acme-postrun.drv /nix/store/ilh5hmc78dfhi4x3y8ggap4c9r9fhar1-unit-script-acme-order-renew-test.foo-start.drv /nix/store/6kpf8rv1nf7bphx3rr9lgc69yffhdxpf-unit-acme-order-renew-test.foo.service.drv /nix/store/84zzbngn8adda901ajd29hcz92hzm3w0-unit-nginx-config-reload.service.drv /nix/store/h5wlhc2rr3ma19zgmf8iwhmr0fbd7hd6-nginx.conf.drv /nix/store/prs759b19giy9k95v0d73g4lbl1qjwqz-unit-script-nginx-pre-start.drv /nix/store/9r06hvfv8g6bcrpjr7g01lviw8ppp9p4-unit-nginx.service.drv /nix/store/ba266l0ymscc6grhk01wcmzbxan68kr2-unit-acme-account-2c44cb477b4787b2cf13.target.drv /nix/store/d4x7s5pvlmgj0q3xwbhwhz7a2jk6jdlz-unit-nix-daemon.service.drv /nix/store/lk32x71spwiazf46ilg1ph5i4b4vv6zg-unit-script-acme-test.foo-start.drv /nix/store/xw0pm49n4qgxmy5mff48agfr5lq755dc-X-Restart-Triggers-acme-test.foo.drv /nix/store/g0ghpsn5y3qkf3lf77l3ws97dq2mn3b7-unit-acme-test.foo.service.drv /nix/store/2innarhsb8hy76mi34xp3jmig7pjwvhc-X-Reload-Triggers-systemd-networkd.drv /nix/store/k0yj8h1lhp28ywwdzxcn7cilql4d8mw8-unit-systemd-networkd.service.drv /nix/store/yg044lckf2fnydbm6c8z3iwcx2whika1-unit-acme-renew-test.foo.timer.drv /nix/store/jdrngkdh2rclksr1bl8ry1rdjsajr7ni-system-units.drv /nix/store/5ffgcxpbl605hyg4k94wg38bqj8s3grf-etc.drv /nix/store/4vkm0d98ryy32x38g99zgnmsirdg0wc8-users-groups.json.drv /nix/store/qf5cxq5mvdi3fy70k1pmv0cfh0mqnxp9-decrypt-age-secrets.drv /nix/store/dzwn1cmjc6ip2flnw2qhqwbj268vll4f-activate.drv /nix/store/s7kzqkngcmzqfxy3ys2q3mzs1f855pn5-dry-activate.drv /nix/store/1iccfx0zvjsrvx15ybpn0ls8fsl3clly-nixos-system-server-test.drv /nix/store/fbhgyy99x8wyvv3fcg19srav11ni32jd-testScript.drv /nix/store/059qbbwqg5hd1pxaqlv1fh0ch6wanj5f-closure-info.drv /nix/store/06ndn8hk6shfw90f8jjrffkm789fcdn2-string-hosts.drv /nix/store/0m6pywwh4d6zwh5bb9rhmzj9mmknxhvg-acme-postrun.drv /nix/store/14dljnz02wbl4d33s9wsla47rrl7azk6-system-path.drv /nix/store/wiv7ip4cgma7lzb0f3z0kmg97yr1gymh-dbus-1.drv /nix/store/qsj0kn67qglrbp09yg2hgslkvyjim29m-X-Restart-Triggers-dbus-broker.drv /nix/store/i47cjh5x7zmma3zy0l3lm7pfc98yw8i3-unit-dbus-broker.service.drv /nix/store/1xqyxfaqf3v33ssj7n3kqc7v7xr8jyyy-user-units.drv /nix/store/310b38b82r4sg1dbwj37jx158q3ifyw3-X-Reload-Triggers-systemd-networkd.drv /nix/store/l2n8m2b389bv1b290d40w5qk4cfcqxw0-users-groups.json.drv /nix/store/zj7jj206bjbd6vw5f1090rbib3aqx1jc-decrypt-age-secrets.drv /nix/store/6a6094kzgz3c5dvc92hx5yhqaz3z49jb-dry-activate.drv /nix/store/6mfi9g5r6vkgnlrqk443gdx7434ykvgc-etc-hostname.drv /nix/store/bqlwf1qh27sr1bgqxa4x81f1ix8ka37l-system-shutdown.drv /nix/store/kxycch3s4s97a56l18wd3aqzh9m2fd36-ca.json.drv /nix/store/mfw4gyp6c94hyzg7p2bp54drny6aflix-acme-setup-privileged.drv /nix/store/3qwk3r7g1mny1nq63xgrq1pk5y12d543-unit-acme-setup.service.drv /nix/store/z775sgx2b2v6h0phcpny5sryjqsz23lx-X-Restart-Triggers-step-ca.drv /nix/store/4p62i40vzism1kbbfgpa94hnhww68x50-unit-step-ca.service.drv /nix/store/fq1azng687np3qrlszmpar8895hvg3w9-unit-script-acme-order-renew-ca.foo-start.drv /nix/store/7yznqw6q5h37dj97r651s503k5a92llf-unit-acme-order-renew-ca.foo.service.drv /nix/store/7ni2mzkmfr2ai4gc86m9lynzfmrljxli-unit-script-acme-ca.foo-start.drv /nix/store/qdwi10hbrm1v0l06ndzbvrd3jysy0jzh-X-Restart-Triggers-acme-ca.foo.drv /nix/store/81hzyxiq32jrc7v40d365x0agzm9prkx-unit-acme-ca.foo.service.drv /nix/store/aam2sza0jhybxq7b0zk2jcdrsdd0bksm-nginx-recommended-proxy_set_header-headers.conf.drv /nix/store/k06yqa4qbciwxb1bw1kp64j6r4v3ihhd-nginx.conf.drv /nix/store/vqwx84jbf51jdv5dysydmpf510n9xww5-unit-script-nginx-pre-start.drv /nix/store/8z80fysli6q4fdh3xr64x33hmvg5scys-unit-nginx.service.drv /nix/store/dby0jxan4sifvzrjakjcgy2hi19a4kb2-unit-acme-account-d22a46d9459bf683a338.target.drv /nix/store/ifrybpzrc34938b87vazyz9512kaa635-unit-nginx-config-reload.service.drv /nix/store/mw7gcrwvin1pi62m0v2d1b78p1f3g6ml-unit-acme-renew-ca.foo.timer.drv /nix/store/xdn3nzwwa5fkacs4rl88app2yn5mj9k3-unit-dbus-broker.service.drv /nix/store/l68253xkyj9lqx4mqrvsnqpwfwhk16zs-system-units.drv /nix/store/pjix1kch175czmchlhyasm78kln205vv-system-generators.drv /nix/store/rb2rr6vrr50k2l261kysj69l0wbbxvd3-hosts.drv /nix/store/scf3nm4q9wa6jxi2kil8ybb8lb2mzi07-user-generators.drv /nix/store/9b8if1c5dyxrcrjxhqix9i7dsvpz1rj3-etc.drv /nix/store/avvcqrk4kfmr5xhflxs64i4l11v7g1fx-activate.drv /nix/store/3mp60dd5xzj6ll3yp3651aaa3r1nafcd-nixos-system-ca-test.drv /nix/store/4wq9x54s59rfqk2cxsx76l2f9m259b93-closure-info.drv /nix/store/lbic7k863dqccmbb6nyh30i68bakrjij-unit-systemd-networkd.service.drv /nix/store/sn6kn8nq3l4p9ibvrgy7rgqic80r2psv-system-path.drv /nix/store/8djb5chscv63kh0bpjpy50gsgw44l0ap-dbus-1.drv /nix/store/bjwans0vi1qh4c6nlgc5d9126dckzrx7-X-Restart-Triggers-dbus-broker.drv /nix/store/rf54v4l9mnkwyq3ni600lzic4mbzb6zj-unit-dbus-broker.service.drv /nix/store/7pjqap4jybi3l1jyvyqj5ac0hnwdf9ak-system-units.drv /nix/store/ypddxrn4yh69b0nmpkbyd502vr2h6n4p-unit-dbus-broker.service.drv /nix/store/mq12vq7x102f6nbs5kxkgfj9xfcbqih8-user-units.drv /nix/store/dy3zi08ds6isswxbmhbj5v61lzcc9p2z-string-hosts.drv /nix/store/qlj495lxzg008mm9878kcf0yzfbqah8a-hosts.drv /nix/store/8md032zl8s27m2q5gji2a7ss34cln5bd-etc.drv /nix/store/mzflwp4s66wbds3jxl4r58df00qsszp7-users-groups.json.drv /nix/store/akwx2cl25k56f09nn6c57k9q2jw6d64b-dry-activate.drv /nix/store/zw1l1rnhfnahwajsvr0wa898fh05yzqs-activate.drv /nix/store/7xq9m0fqqi0caiz7vm6lk3fjdm701hcv-nixos-system-client-test.drv /nix/store/cp3yr2m4yplnm42wgnwlszzwb0k8z77h-closure-info.drv /nix/store/pr4zfwq7kzfilasjvh5rl3xlb05agd0j-nixos-test-driver-certificates.drv /nix/store/3xq2kmkzagcwspagp314sz0p1lvnh8nr-container-test-run-certificates.drv these 14 paths will be fetched (56.4 MiB download, 184.3 MiB unpacked): /nix/store/zxqh1cwahj31z7sicjl17kq01izlkhd6-flock-0.4.0 /nix/store/1hbk4vgc0zrxjb07ddwn06c1283bdp21-gixy-0.1.21 /nix/store/fz9w0nbr0650iqkk9a158l5gb6my0sjm-lego-4.35.2 /nix/store/19w66dx854ir0rxc4h7s6bj4vpwnjrd7-minica-1.1.0 /nix/store/l6s5j2zrzgwikr9wgm0bk2n6v9iscdwp-nginx-1.30.4 /nix/store/vyfkvff7mgr3frfa9fid7y8c6x09d5mn-openssl-3.6.3-man /nix/store/nvhrcdyl9ia2s6cfn014xli773q1b4pa-openssl-4.0.1 /nix/store/xmzsl3i8i3qmplwgmjwy1f80rp33ijlh-python3.13-cached-property-2.0.1 /nix/store/45mlhs6dg9n0vh7afbcjimjd1va23hg8-python3.13-configargparse-1.7.1 /nix/store/mfpxp1qab65a125c3ni1v0i8kakrbmwy-python3.13-jinja2-3.1.6 /nix/store/ff8ypvy6byfgpwgiggl7c95wz49ar4y7-python3.13-pyparsing-2.4.7 /nix/store/42wmy4mmf3qppv2fl7vfrdgfr7fm164c-step-ca-0.29.0 /nix/store/sy4vnxggk8djkpif73vkbidwg6cvs83x-step-cli-0.30.2 /nix/store/bnkm9ghwlkg9b2h9akxkz1cgwqv9fd04-zlib-ng-2.3.3 building '/nix/store/6mfi9g5r6vkgnlrqk443gdx7434ykvgc-etc-hostname.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/1xc7zffspdjk07qr0h8fqkqyr3grlpkw-10-acme.conf.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/2n8rq3wa0liri083c4y7dwmdh2b8zl94-extra-hosts.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/5q5cczn5g9fxzsd9v8w9skb8ygzy9pzp-nixos-tmpfiles.d.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/06ndn8hk6shfw90f8jjrffkm789fcdn2-string-hosts.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/ba266l0ymscc6grhk01wcmzbxan68kr2-unit-acme-account-2c44cb477b4787b2cf13.target.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/dby0jxan4sifvzrjakjcgy2hi19a4kb2-unit-acme-account-d22a46d9459bf683a338.target.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/mw7gcrwvin1pi62m0v2d1b78p1f3g6ml-unit-acme-renew-ca.foo.timer.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/yg044lckf2fnydbm6c8z3iwcx2whika1-unit-acme-renew-test.foo.timer.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/84zzbngn8adda901ajd29hcz92hzm3w0-unit-nginx-config-reload.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/ifrybpzrc34938b87vazyz9512kaa635-unit-nginx-config-reload.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/0m6pywwh4d6zwh5bb9rhmzj9mmknxhvg-acme-postrun.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/1dm3gsi1gl8ql13wf9mzrs73pgakpbva-acme-postrun.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/bf4j72bknj4i8cbv39hkidcrh2wal1jq-acme-setup-privileged.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/mfw4gyp6c94hyzg7p2bp54drny6aflix-acme-setup-privileged.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/7pqpaqx67isxfma3pqlal0prnszjy4b6-firewall-start.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/20qzm2wf5g6k760lmclv601ix2mp4nky-unit-script-acme-setup-start.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/aam2sza0jhybxq7b0zk2jcdrsdd0bksm-nginx-recommended-proxy_set_header-headers.conf.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/kxycch3s4s97a56l18wd3aqzh9m2fd36-ca.json.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/1ia6iwn550jhvk4v3jml9c5qzm4y0svc-nss-cacert-3.126.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/pjix1kch175czmchlhyasm78kln205vv-system-generators.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/bqlwf1qh27sr1bgqxa4x81f1ix8ka37l-system-shutdown.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/scf3nm4q9wa6jxi2kil8ybb8lb2mzi07-user-generators.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/6mfi9g5r6vkgnlrqk443gdx7434ykvgc-etc-hostname.drv' building '/nix/store/06ndn8hk6shfw90f8jjrffkm789fcdn2-string-hosts.drv' building '/nix/store/2n8rq3wa0liri083c4y7dwmdh2b8zl94-extra-hosts.drv' building '/nix/store/dby0jxan4sifvzrjakjcgy2hi19a4kb2-unit-acme-account-d22a46d9459bf683a338.target.drv' building '/nix/store/ba266l0ymscc6grhk01wcmzbxan68kr2-unit-acme-account-2c44cb477b4787b2cf13.target.drv' building '/nix/store/1xc7zffspdjk07qr0h8fqkqyr3grlpkw-10-acme.conf.drv' building '/nix/store/5q5cczn5g9fxzsd9v8w9skb8ygzy9pzp-nixos-tmpfiles.d.drv' building '/nix/store/yg044lckf2fnydbm6c8z3iwcx2whika1-unit-acme-renew-test.foo.timer.drv' building '/nix/store/ix5mx3s9cb1xsz1m2acmld67ng371x11-tmpfiles.d.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/qdwi10hbrm1v0l06ndzbvrd3jysy0jzh-X-Restart-Triggers-acme-ca.foo.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/xw0pm49n4qgxmy5mff48agfr5lq755dc-X-Restart-Triggers-acme-test.foo.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/zj7jj206bjbd6vw5f1090rbib3aqx1jc-decrypt-age-secrets.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/i869j0s56zqbirg2a5v2r61ay3p3w9qg-generator-step-intermediate-key.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/8is2x6x2gyhkjvcsmq7n63yrpwp1r22q-intermediate.tmpl.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/h5wlhc2rr3ma19zgmf8iwhmr0fbd7hd6-nginx.conf.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/ml6hjdwyfdj7pb2k1c4qw5ffdr5vwjnm-root.tmpl.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/14dljnz02wbl4d33s9wsla47rrl7azk6-system-path.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/mw7gcrwvin1pi62m0v2d1b78p1f3g6ml-unit-acme-renew-ca.foo.timer.drv' building '/nix/store/0m6pywwh4d6zwh5bb9rhmzj9mmknxhvg-acme-postrun.drv' building '/nix/store/1dm3gsi1gl8ql13wf9mzrs73pgakpbva-acme-postrun.drv' building '/nix/store/84zzbngn8adda901ajd29hcz92hzm3w0-unit-nginx-config-reload.service.drv' building '/nix/store/ifrybpzrc34938b87vazyz9512kaa635-unit-nginx-config-reload.service.drv' building '/nix/store/bf4j72bknj4i8cbv39hkidcrh2wal1jq-acme-setup-privileged.drv' building '/nix/store/mfw4gyp6c94hyzg7p2bp54drny6aflix-acme-setup-privileged.drv' building '/nix/store/7pqpaqx67isxfma3pqlal0prnszjy4b6-firewall-start.drv' building '/nix/store/aam2sza0jhybxq7b0zk2jcdrsdd0bksm-nginx-recommended-proxy_set_header-headers.conf.drv' building '/nix/store/vxy3aj3ng9nrw3ajxj1b4b0h8vcywa35-firewall-reload.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/20qzm2wf5g6k760lmclv601ix2mp4nky-unit-script-acme-setup-start.drv' building '/nix/store/k06yqa4qbciwxb1bw1kp64j6r4v3ihhd-nginx.conf.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/kxycch3s4s97a56l18wd3aqzh9m2fd36-ca.json.drv' ca.json> structuredAttrs is enabled building '/nix/store/3qwk3r7g1mny1nq63xgrq1pk5y12d543-unit-acme-setup.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/4a2nhyvlh4b13mf1igrncmfpi81q7jkq-unit-acme-setup.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/z775sgx2b2v6h0phcpny5sryjqsz23lx-X-Restart-Triggers-step-ca.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/1ia6iwn550jhvk4v3jml9c5qzm4y0svc-nss-cacert-3.126.drv' nss-cacert-3.126> Running phase: unpackPhase nss-cacert-3.126> Running phase: patchPhase nss-cacert-3.126> Running phase: updateAutotoolsGnuConfigScriptsPhase nss-cacert-3.126> Running phase: configurePhase nss-cacert-3.126> no configure script, doing nothing nss-cacert-3.126> Running phase: buildPhase nss-cacert-3.126> Running phase: installPhase nss-cacert-3.126> Running phase: fixupPhase nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/irgyv33w6vczbagwrxh8x4r1jamq8v6i-nss-cacert-3.126 nss-cacert-3.126> checking for references to /build/ in /nix/store/irgyv33w6vczbagwrxh8x4r1jamq8v6i-nss-cacert-3.126... nss-cacert-3.126> patching script interpreter paths in /nix/store/irgyv33w6vczbagwrxh8x4r1jamq8v6i-nss-cacert-3.126 nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/4bsqw926vmp9hfqd6d960f4rdmlcpmwq-nss-cacert-3.126-unbundled nss-cacert-3.126> checking for references to /build/ in /nix/store/4bsqw926vmp9hfqd6d960f4rdmlcpmwq-nss-cacert-3.126-unbundled... nss-cacert-3.126> patching script interpreter paths in /nix/store/4bsqw926vmp9hfqd6d960f4rdmlcpmwq-nss-cacert-3.126-unbundled nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/mwwm7ihhldzdg84drhb00kr686m94pm6-nss-cacert-3.126-p11kit nss-cacert-3.126> checking for references to /build/ in /nix/store/mwwm7ihhldzdg84drhb00kr686m94pm6-nss-cacert-3.126-p11kit... nss-cacert-3.126> patching script interpreter paths in /nix/store/mwwm7ihhldzdg84drhb00kr686m94pm6-nss-cacert-3.126-p11kit nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/vb11ljv3lqg7bjhl8dvd9hg9iahxslal-nss-cacert-3.126-hashed nss-cacert-3.126> checking for references to /build/ in /nix/store/vb11ljv3lqg7bjhl8dvd9hg9iahxslal-nss-cacert-3.126-hashed... nss-cacert-3.126> patching script interpreter paths in /nix/store/vb11ljv3lqg7bjhl8dvd9hg9iahxslal-nss-cacert-3.126-hashed building '/nix/store/pjix1kch175czmchlhyasm78kln205vv-system-generators.drv' building '/nix/store/bqlwf1qh27sr1bgqxa4x81f1ix8ka37l-system-shutdown.drv' building '/nix/store/88155jwdzda0nd8ykwnb3a9v1y0b1np5-hosts.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/scf3nm4q9wa6jxi2kil8ybb8lb2mzi07-user-generators.drv' building '/nix/store/d4x7s5pvlmgj0q3xwbhwhz7a2jk6jdlz-unit-nix-daemon.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/ix5mx3s9cb1xsz1m2acmld67ng371x11-tmpfiles.d.drv' building '/nix/store/p2sgy6p420nr35c6y9kli9nyhnc3y59s-X-Restart-Triggers-systemd-tmpfiles-resetup.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/qdwi10hbrm1v0l06ndzbvrd3jysy0jzh-X-Restart-Triggers-acme-ca.foo.drv' building '/nix/store/xw0pm49n4qgxmy5mff48agfr5lq755dc-X-Restart-Triggers-acme-test.foo.drv' building '/nix/store/zj7jj206bjbd6vw5f1090rbib3aqx1jc-decrypt-age-secrets.drv' building '/nix/store/i869j0s56zqbirg2a5v2r61ay3p3w9qg-generator-step-intermediate-key.drv' building '/nix/store/8is2x6x2gyhkjvcsmq7n63yrpwp1r22q-intermediate.tmpl.drv' building '/nix/store/jvdy8c92vim77mbw4mcv967h6xzx5589-generator-step-intermediate-cert.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/ml6hjdwyfdj7pb2k1c4qw5ffdr5vwjnm-root.tmpl.drv' building '/nix/store/h5wlhc2rr3ma19zgmf8iwhmr0fbd7hd6-nginx.conf.drv' building '/nix/store/ynsafdzsigj0pk1166fdfp5skrk2nsrx-generator-step-ca.drv' on 'ssh-ng://builder@build01.clan.lol' nginx.conf> nginx.conf> ==================== Results =================== nginx.conf> No issues found. nginx.conf> nginx.conf> ==================== Summary =================== nginx.conf> Total issues: nginx.conf> Unspecified: 0 nginx.conf> Low: 0 nginx.conf> Medium: 0 nginx.conf> High: 0 nginx.conf> building '/nix/store/prs759b19giy9k95v0d73g4lbl1qjwqz-unit-script-nginx-pre-start.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/14dljnz02wbl4d33s9wsla47rrl7azk6-system-path.drv' system-path> structuredAttrs is enabled system-path> created 1811 symlinks in user environment building '/nix/store/vxy3aj3ng9nrw3ajxj1b4b0h8vcywa35-firewall-reload.drv' building '/nix/store/k06yqa4qbciwxb1bw1kp64j6r4v3ihhd-nginx.conf.drv' building '/nix/store/5hzyhblczxgfgpqaxlp57a2bk71j8l7w-unit-firewall.service.drv' on 'ssh-ng://builder@build01.clan.lol' nginx.conf> nginx.conf> ==================== Results =================== nginx.conf> No issues found. nginx.conf> nginx.conf> ==================== Summary =================== nginx.conf> Total issues: nginx.conf> Unspecified: 0 nginx.conf> Low: 0 nginx.conf> Medium: 0 nginx.conf> High: 0 nginx.conf> building '/nix/store/3qwk3r7g1mny1nq63xgrq1pk5y12d543-unit-acme-setup.service.drv' building '/nix/store/vqwx84jbf51jdv5dysydmpf510n9xww5-unit-script-nginx-pre-start.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/z775sgx2b2v6h0phcpny5sryjqsz23lx-X-Restart-Triggers-step-ca.drv' building '/nix/store/4p62i40vzism1kbbfgpa94hnhww68x50-unit-step-ca.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/4a2nhyvlh4b13mf1igrncmfpi81q7jkq-unit-acme-setup.service.drv' building '/nix/store/wiv7ip4cgma7lzb0f3z0kmg97yr1gymh-dbus-1.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/qlj495lxzg008mm9878kcf0yzfbqah8a-hosts.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/88155jwdzda0nd8ykwnb3a9v1y0b1np5-hosts.drv' building '/nix/store/d4x7s5pvlmgj0q3xwbhwhz7a2jk6jdlz-unit-nix-daemon.service.drv' building '/nix/store/p2sgy6p420nr35c6y9kli9nyhnc3y59s-X-Restart-Triggers-systemd-tmpfiles-resetup.drv' building '/nix/store/49xbdwc6vrgq0p7mm859n3a7vxbmii3q-unit-systemd-tmpfiles-resetup.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/jvdy8c92vim77mbw4mcv967h6xzx5589-generator-step-intermediate-cert.drv' building '/nix/store/prs759b19giy9k95v0d73g4lbl1qjwqz-unit-script-nginx-pre-start.drv' building '/nix/store/9r06hvfv8g6bcrpjr7g01lviw8ppp9p4-unit-nginx.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/ynsafdzsigj0pk1166fdfp5skrk2nsrx-generator-step-ca.drv' building '/nix/store/7iwi4sj2sy5s03xsd7bwab11s33r0y86-vars-check-certificates.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/5hzyhblczxgfgpqaxlp57a2bk71j8l7w-unit-firewall.service.drv' building '/nix/store/vqwx84jbf51jdv5dysydmpf510n9xww5-unit-script-nginx-pre-start.drv' building '/nix/store/8z80fysli6q4fdh3xr64x33hmvg5scys-unit-nginx.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/4p62i40vzism1kbbfgpa94hnhww68x50-unit-step-ca.service.drv' building '/nix/store/wiv7ip4cgma7lzb0f3z0kmg97yr1gymh-dbus-1.drv' building '/nix/store/qsj0kn67qglrbp09yg2hgslkvyjim29m-X-Restart-Triggers-dbus-broker.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/rb2rr6vrr50k2l261kysj69l0wbbxvd3-hosts.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/blhsplp7hc7icnwxwc86qg0lzjkyx222-system-path.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/sn6kn8nq3l4p9ibvrgy7rgqic80r2psv-system-path.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/qlj495lxzg008mm9878kcf0yzfbqah8a-hosts.drv' building '/nix/store/49xbdwc6vrgq0p7mm859n3a7vxbmii3q-unit-systemd-tmpfiles-resetup.service.drv' building '/nix/store/7iwi4sj2sy5s03xsd7bwab11s33r0y86-vars-check-certificates.drv' vars-check-certificates> Running vars check using Nix-based executor... vars-check-certificates> Executing shared generators... vars-check-certificates> Executing shared generator: step-ca vars-check-certificates> + set -euo pipefail vars-check-certificates> + PATH=/nix/store/sy4vnxggk8djkpif73vkbidwg6cvs83x-step-cli-0.30.2/bin:/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin vars-check-certificates> + [[ ! -d /etc ]] vars-check-certificates> + mkdir -p /etc vars-check-certificates> + cat vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> ++ id -u vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> + step certificate create --template /nix/store/8vv6h245996avsva70afrpmnry6sii6z-root.tmpl 'Clan Root CA' /output/ca.crt /output/ca.key --kty EC --curve P-256 --not-after=8760h --not-before=-12h --no-password --insecure vars-check-certificates> Your certificate has been saved in /output/ca.crt. vars-check-certificates> Your private key has been saved in /output/ca.key. vars-check-certificates> ✓ Generated shared file: step-ca/ca.crt vars-check-certificates> ✓ Generated shared file: step-ca/ca.key vars-check-certificates> ✓ Shared Generator step-ca completed vars-check-certificates> ✓ Shared generators completed vars-check-certificates> Processing machine: ca vars-check-certificates> Generator execution order: state-version -> step-intermediate-key -> step-intermediate-cert vars-check-certificates> Executing generator: state-version building '/nix/store/rb2rr6vrr50k2l261kysj69l0wbbxvd3-hosts.drv' vars-check-certificates> + set -euo pipefail vars-check-certificates> + PATH=/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin vars-check-certificates> + [[ ! -d /etc ]] vars-check-certificates> + mkdir -p /etc vars-check-certificates> + cat vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> ++ id -u vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> + echo -n 26.05 vars-check-certificates> ✓ Generated file: state-version/version vars-check-certificates> ✓ Generator state-version completed vars-check-certificates> Executing generator: step-intermediate-key vars-check-certificates> + set -euo pipefail vars-check-certificates> + PATH=/nix/store/sy4vnxggk8djkpif73vkbidwg6cvs83x-step-cli-0.30.2/bin:/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin vars-check-certificates> + [[ ! -d /etc ]] vars-check-certificates> + mkdir -p /etc vars-check-certificates> + cat vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> ++ id -u vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> + step crypto keypair --kty EC --curve P-256 --no-password --insecure /output/intermediate.pub /output/intermediate.key vars-check-certificates> Your public key has been saved in /output/intermediate.pub. vars-check-certificates> Your private key has been saved in /output/intermediate.key. vars-check-certificates> ✓ Generated file: step-intermediate-key/intermediate.key vars-check-certificates> ✓ Generator step-intermediate-key completed vars-check-certificates> Executing generator: step-intermediate-cert warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy vars-check-certificates> + set -euo pipefail vars-check-certificates> + PATH=/nix/store/sy4vnxggk8djkpif73vkbidwg6cvs83x-step-cli-0.30.2/bin:/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin vars-check-certificates> + [[ ! -d /etc ]] vars-check-certificates> + mkdir -p /etc vars-check-certificates> + cat vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> ++ id -u vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> + step certificate create --ca /input/step-ca/ca.crt --ca-key /input/step-ca/ca.key --ca-password-file /dev/null --key /input/step-intermediate-key/intermediate.key --template /nix/store/cicnpfpvb0v95ajjdxdvx004hxk6aivr-intermediate.tmpl --not-after 8760h --not-before=-12h --no-password --insecure 'Clan Intermediate CA' /output/intermediate.crt vars-check-certificates> Your certificate has been saved in /output/intermediate.crt. vars-check-certificates> ✓ Generated file: step-intermediate-cert/intermediate.crt vars-check-certificates> ✓ Generator step-intermediate-cert completed vars-check-certificates> ✓ Machine ca completed vars-check-certificates> Processing machine: client vars-check-certificates> Generator execution order: state-version vars-check-certificates> Executing generator: state-version vars-check-certificates> + set -euo pipefail vars-check-certificates> + PATH=/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin vars-check-certificates> + [[ ! -d /etc ]] vars-check-certificates> + mkdir -p /etc vars-check-certificates> + cat vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> ++ id -u vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> + echo -n 26.05 vars-check-certificates> ✓ Generated file: state-version/version vars-check-certificates> ✓ Generator state-version completed vars-check-certificates> ✓ Machine client completed vars-check-certificates> Processing machine: server vars-check-certificates> Generator execution order: state-version vars-check-certificates> Executing generator: state-version building '/nix/store/fbhgyy99x8wyvv3fcg19srav11ni32jd-testScript.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/7ni2mzkmfr2ai4gc86m9lynzfmrljxli-unit-script-acme-ca.foo-start.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/fq1azng687np3qrlszmpar8895hvg3w9-unit-script-acme-order-renew-ca.foo-start.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/ilh5hmc78dfhi4x3y8ggap4c9r9fhar1-unit-script-acme-order-renew-test.foo-start.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/lk32x71spwiazf46ilg1ph5i4b4vv6zg-unit-script-acme-test.foo-start.drv' on 'ssh-ng://builder@build01.clan.lol' vars-check-certificates> + set -euo pipefail vars-check-certificates> + PATH=/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin vars-check-certificates> + [[ ! -d /etc ]] warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy building '/nix/store/qsj0kn67qglrbp09yg2hgslkvyjim29m-X-Restart-Triggers-dbus-broker.drv' vars-check-certificates> + mkdir -p /etc vars-check-certificates> + cat vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> ++ id -u vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> + echo -n 26.05 vars-check-certificates> ✓ Generated file: state-version/version vars-check-certificates> ✓ Generator state-version completed vars-check-certificates> ✓ Machine server completed vars-check-certificates> ✓ All vars checks completed successfully building '/nix/store/8z80fysli6q4fdh3xr64x33hmvg5scys-unit-nginx.service.drv' building '/nix/store/9r06hvfv8g6bcrpjr7g01lviw8ppp9p4-unit-nginx.service.drv' building '/nix/store/blhsplp7hc7icnwxwc86qg0lzjkyx222-system-path.drv' system-path> structuredAttrs is enabled system-path> created 1811 symlinks in user environment building '/nix/store/i47cjh5x7zmma3zy0l3lm7pfc98yw8i3-unit-dbus-broker.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/xdn3nzwwa5fkacs4rl88app2yn5mj9k3-unit-dbus-broker.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/sn6kn8nq3l4p9ibvrgy7rgqic80r2psv-system-path.drv' system-path> structuredAttrs is enabled system-path> created 1811 symlinks in user environment building '/nix/store/0lxfys1n26fyq94fkh183sbhjxdbfra8-dbus-1.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/7ni2mzkmfr2ai4gc86m9lynzfmrljxli-unit-script-acme-ca.foo-start.drv' building '/nix/store/81hzyxiq32jrc7v40d365x0agzm9prkx-unit-acme-ca.foo.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/8djb5chscv63kh0bpjpy50gsgw44l0ap-dbus-1.drv' on 'ssh-ng://builder@build01.clan.lol' warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy building '/nix/store/fq1azng687np3qrlszmpar8895hvg3w9-unit-script-acme-order-renew-ca.foo-start.drv' building '/nix/store/7yznqw6q5h37dj97r651s503k5a92llf-unit-acme-order-renew-ca.foo.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/fbhgyy99x8wyvv3fcg19srav11ni32jd-testScript.drv' building '/nix/store/4vkm0d98ryy32x38g99zgnmsirdg0wc8-users-groups.json.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/l2n8m2b389bv1b290d40w5qk4cfcqxw0-users-groups.json.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/ilh5hmc78dfhi4x3y8ggap4c9r9fhar1-unit-script-acme-order-renew-test.foo-start.drv' building '/nix/store/6kpf8rv1nf7bphx3rr9lgc69yffhdxpf-unit-acme-order-renew-test.foo.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/lk32x71spwiazf46ilg1ph5i4b4vv6zg-unit-script-acme-test.foo-start.drv' building '/nix/store/i47cjh5x7zmma3zy0l3lm7pfc98yw8i3-unit-dbus-broker.service.drv' building '/nix/store/xdn3nzwwa5fkacs4rl88app2yn5mj9k3-unit-dbus-broker.service.drv' building '/nix/store/g0ghpsn5y3qkf3lf77l3ws97dq2mn3b7-unit-acme-test.foo.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/1xqyxfaqf3v33ssj7n3kqc7v7xr8jyyy-user-units.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/0lxfys1n26fyq94fkh183sbhjxdbfra8-dbus-1.drv' building '/nix/store/8djb5chscv63kh0bpjpy50gsgw44l0ap-dbus-1.drv' building '/nix/store/y1320xmmad6h9galjcy4ipiz677j08yi-X-Restart-Triggers-dbus-broker.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/l2n8m2b389bv1b290d40w5qk4cfcqxw0-users-groups.json.drv' building '/nix/store/bjwans0vi1qh4c6nlgc5d9126dckzrx7-X-Restart-Triggers-dbus-broker.drv' on 'ssh-ng://builder@build01.clan.lol' warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy building '/nix/store/4vkm0d98ryy32x38g99zgnmsirdg0wc8-users-groups.json.drv' building '/nix/store/s7kzqkngcmzqfxy3ys2q3mzs1f855pn5-dry-activate.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/6a6094kzgz3c5dvc92hx5yhqaz3z49jb-dry-activate.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/6kpf8rv1nf7bphx3rr9lgc69yffhdxpf-unit-acme-order-renew-test.foo.service.drv' building '/nix/store/81hzyxiq32jrc7v40d365x0agzm9prkx-unit-acme-ca.foo.service.drv' building '/nix/store/7yznqw6q5h37dj97r651s503k5a92llf-unit-acme-order-renew-ca.foo.service.drv' building '/nix/store/l68253xkyj9lqx4mqrvsnqpwfwhk16zs-system-units.drv' on 'ssh-ng://builder@build01.clan.lol' warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy building '/nix/store/y1320xmmad6h9galjcy4ipiz677j08yi-X-Restart-Triggers-dbus-broker.drv' building '/nix/store/bjwans0vi1qh4c6nlgc5d9126dckzrx7-X-Restart-Triggers-dbus-broker.drv' warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy building '/nix/store/g0ghpsn5y3qkf3lf77l3ws97dq2mn3b7-unit-acme-test.foo.service.drv' building '/nix/store/s7kzqkngcmzqfxy3ys2q3mzs1f855pn5-dry-activate.drv' warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy building '/nix/store/2l8zq8xxwl3kylfbs4kr065ljr6ial6l-unit-dbus-broker.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/fdwai2a6fwnr90jr863idx3gcvrc0g18-unit-dbus-broker.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/6a6094kzgz3c5dvc92hx5yhqaz3z49jb-dry-activate.drv' building '/nix/store/2l8zq8xxwl3kylfbs4kr065ljr6ial6l-unit-dbus-broker.service.drv' warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy building '/nix/store/rf54v4l9mnkwyq3ni600lzic4mbzb6zj-unit-dbus-broker.service.drv' on 'ssh-ng://builder@build01.clan.lol' warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy building '/nix/store/fdwai2a6fwnr90jr863idx3gcvrc0g18-unit-dbus-broker.service.drv' warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy building '/nix/store/rf54v4l9mnkwyq3ni600lzic4mbzb6zj-unit-dbus-broker.service.drv' building '/nix/store/ff0scdlzmx0hh8bh2clc8qd03pvhdrzc-user-units.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/7pjqap4jybi3l1jyvyqj5ac0hnwdf9ak-system-units.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/jdrngkdh2rclksr1bl8ry1rdjsajr7ni-system-units.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/l68253xkyj9lqx4mqrvsnqpwfwhk16zs-system-units.drv' building '/nix/store/1xqyxfaqf3v33ssj7n3kqc7v7xr8jyyy-user-units.drv' building '/nix/store/ypddxrn4yh69b0nmpkbyd502vr2h6n4p-unit-dbus-broker.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/9b8if1c5dyxrcrjxhqix9i7dsvpz1rj3-etc.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/ff0scdlzmx0hh8bh2clc8qd03pvhdrzc-user-units.drv' building '/nix/store/7pjqap4jybi3l1jyvyqj5ac0hnwdf9ak-system-units.drv' building '/nix/store/jdrngkdh2rclksr1bl8ry1rdjsajr7ni-system-units.drv' building '/nix/store/5ffgcxpbl605hyg4k94wg38bqj8s3grf-etc.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/ypddxrn4yh69b0nmpkbyd502vr2h6n4p-unit-dbus-broker.service.drv' building '/nix/store/mq12vq7x102f6nbs5kxkgfj9xfcbqih8-user-units.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/9b8if1c5dyxrcrjxhqix9i7dsvpz1rj3-etc.drv' building '/nix/store/avvcqrk4kfmr5xhflxs64i4l11v7g1fx-activate.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/mq12vq7x102f6nbs5kxkgfj9xfcbqih8-user-units.drv' building '/nix/store/5ffgcxpbl605hyg4k94wg38bqj8s3grf-etc.drv' building '/nix/store/8md032zl8s27m2q5gji2a7ss34cln5bd-etc.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/dzwn1cmjc6ip2flnw2qhqwbj268vll4f-activate.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/avvcqrk4kfmr5xhflxs64i4l11v7g1fx-activate.drv' warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy building '/nix/store/3mp60dd5xzj6ll3yp3651aaa3r1nafcd-nixos-system-ca-test.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/dzwn1cmjc6ip2flnw2qhqwbj268vll4f-activate.drv' warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy building '/nix/store/8md032zl8s27m2q5gji2a7ss34cln5bd-etc.drv' warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy building '/nix/store/zw1l1rnhfnahwajsvr0wa898fh05yzqs-activate.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/3mp60dd5xzj6ll3yp3651aaa3r1nafcd-nixos-system-ca-test.drv' nixos-system-ca-test> structuredAttrs is enabled building '/nix/store/1iccfx0zvjsrvx15ybpn0ls8fsl3clly-nixos-system-server-test.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/4wq9x54s59rfqk2cxsx76l2f9m259b93-closure-info.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/zw1l1rnhfnahwajsvr0wa898fh05yzqs-activate.drv' warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy building '/nix/store/7xq9m0fqqi0caiz7vm6lk3fjdm701hcv-nixos-system-client-test.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/7xq9m0fqqi0caiz7vm6lk3fjdm701hcv-nixos-system-client-test.drv' nixos-system-client-test> structuredAttrs is enabled warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy building '/nix/store/1iccfx0zvjsrvx15ybpn0ls8fsl3clly-nixos-system-server-test.drv' nixos-system-server-test> structuredAttrs is enabled building '/nix/store/059qbbwqg5hd1pxaqlv1fh0ch6wanj5f-closure-info.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/cp3yr2m4yplnm42wgnwlszzwb0k8z77h-closure-info.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/4wq9x54s59rfqk2cxsx76l2f9m259b93-closure-info.drv' closure-info> structuredAttrs is enabled warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy building '/nix/store/cp3yr2m4yplnm42wgnwlszzwb0k8z77h-closure-info.drv' closure-info> structuredAttrs is enabled warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy building '/nix/store/059qbbwqg5hd1pxaqlv1fh0ch6wanj5f-closure-info.drv' closure-info> structuredAttrs is enabled building '/nix/store/pr4zfwq7kzfilasjvh5rl3xlb05agd0j-nixos-test-driver-certificates.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/pr4zfwq7kzfilasjvh5rl3xlb05agd0j-nixos-test-driver-certificates.drv' nixos-test-driver-certificates> Running type check (enable/disable: config.skipTypeCheck) nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck nixos-test-driver-certificates> Success: no issues found in 1 source file building '/nix/store/3xq2kmkzagcwspagp314sz0p1lvnh8nr-container-test-run-certificates.drv' on 'ssh-ng://builder@build01.clan.lol' warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy building '/nix/store/3xq2kmkzagcwspagp314sz0p1lvnh8nr-container-test-run-certificates.drv' container-test-run-certificates> additionally exposed symbols: container-test-run-certificates> ca, client, server, container-test-run-certificates> start_all, machines, driver, Machine, wait_for_signal container-test-run-certificates> Starting ca container-test-run-certificates> Starting client container-test-run-certificates> Starting server container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/4av2qg141glwzfgkv43gjk07j2rj5w0a-nixos-system-ca-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if4: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether 42:06:76:42:a9:8d brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.2 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture arm64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (aarch64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin/sleep 999999999 && echo 075f7d55-d105-48d5-9f30-b5c79c9d140d' container-test-run-certificates> Running as unit: run-p471-i114733314.service; invocation ID: fdcdc22d8ff74b07a5244ec321d5e441 container-test-run-certificates> To attach to container ca run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*075f7d55-d105-48d5-9f30-b5c79c9d140d') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/d6kq2phq0zy5invmkfgg8h35zxaf13s9-python3-3.13.15/bin/python3.13 /nix/store/f4nvkcws5x7zcpbn7zsscrdviq2jxrpi-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py 075f7d55-d105-48d5-9f30-b5c79c9d140d container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/6z8hyglllark51kmpfvc8l6xprrad9jr-nixos-system-client-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if5: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether 2a:42:35:28:b1:2f brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.2 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture arm64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (aarch64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin/sleep 999999999 && echo 565400f0-b717-4a38-85b7-c67ee2466e1d' container-test-run-certificates> Running as unit: run-p304-i114733321.service; invocation ID: 3b000616ee0f43a2b5bfa6833deffda5 container-test-run-certificates> To attach to container client run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*565400f0-b717-4a38-85b7-c67ee2466e1d') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/d6kq2phq0zy5invmkfgg8h35zxaf13s9-python3-3.13.15/bin/python3.13 /nix/store/f4nvkcws5x7zcpbn7zsscrdviq2jxrpi-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py 565400f0-b717-4a38-85b7-c67ee2466e1d container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/n95vlkc674fkxy6ckkx0igm7hscnlxwl-nixos-system-server-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if3: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether be:aa:dd:39:86:e7 brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.2 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture arm64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (aarch64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/hlc4nqfx0l06f6p7z7lmd77qcwszi7wc-coreutils-9.11/bin/sleep 999999999 && echo 3322faec-a5a2-49b4-a92f-c9a72fa1a63e' container-test-run-certificates> Running as unit: run-p397-i114733330.service; invocation ID: 4fd694fd67df40c99a8b813b159364f8 container-test-run-certificates> To attach to container server run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*3322faec-a5a2-49b4-a92f-c9a72fa1a63e') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/d6kq2phq0zy5invmkfgg8h35zxaf13s9-python3-3.13.15/bin/python3.13 /nix/store/f4nvkcws5x7zcpbn7zsscrdviq2jxrpi-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py 3322faec-a5a2-49b4-a92f-c9a72fa1a63e container-test-run-certificates> + systemctl restart acme-order-renew-ca.foo.service container-test-run-certificates> + systemctl restart acme-test.foo.service container-test-run-certificates> client: waiting for success: curl -v https://test.foo container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1010 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [111 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Sep 1 10:06:43 2026 GMT container-test-run-certificates> * expire date: Oct 1 10:06:43 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 3c7c21 container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1010 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [112 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Sep 1 10:06:43 2026 GMT container-test-run-certificates> * expire date: Oct 1 10:06:43 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 3c7c21 container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1010 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [111 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Sep 1 10:06:43 2026 GMT container-test-run-certificates> * expire date: Oct 1 10:06:43 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 3c7c21 container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [929 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [79 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Sep 1 10:05:58 2026 GMT container-test-run-certificates> * expire date: Nov 30 10:06:58 2026 GMT container-test-run-certificates> * issuer: CN=Clan Intermediate CA container-test-run-certificates> * Certificate level 0: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 1: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 2: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 0 container-test-run-certificates> * SSL certificate verified via OpenSSL. container-test-run-certificates> * Established connection to test.foo (192.168.1.3 port 443) from 192.168.1.2 port 51482 container-test-run-certificates> % Total % Received % Xferd Average Speed Time Time Time Current container-test-run-certificates> Dload Upload Total Spent Left Speed container-test-run-certificates> 0 0 0 0 0 0 0 0 0* using HTTP/2 container-test-run-certificates> * [HTTP/2] [1] OPENED stream for https://test.foo/ container-test-run-certificates> * [HTTP/2] [1] [:method: GET] container-test-run-certificates> * [HTTP/2] [1] [:scheme: https] container-test-run-certificates> * [HTTP/2] [1] [:authority: test.foo] container-test-run-certificates> * [HTTP/2] [1] [:path: /] container-test-run-certificates> * [HTTP/2] [1] [user-agent: curl/8.21.0] container-test-run-certificates> * [HTTP/2] [1] [accept: */*] container-test-run-certificates> } [5 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> * Request completely sent off container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> { [5 bytes data] container-test-run-certificates> 100 20 100 20 0 0 667 0 0 container-test-run-certificates> * Connection #0 to host test.foo:443 left intact container-test-run-certificates> (finished: waiting for success: curl -v https://test.foo, in 3.17 seconds) container-test-run-certificates> + openssl s_client -connect test.foo:443 -servername test.foo container-test-run-certificates> + openssl x509 -text -noout container-test-run-certificates> Certificate: container-test-run-certificates> Data: container-test-run-certificates> Version: 3 (0x2) container-test-run-certificates> Serial Number: container-test-run-certificates> 33:75:ce:95:61:4d:43:84:df:95:3f:90:b7:90:9a:8a container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Issuer: CN=Clan Intermediate CA container-test-run-certificates> Validity container-test-run-certificates> Not Before: Sep 1 10:05:58 2026 GMT container-test-run-certificates> Not After : Nov 30 10:06:58 2026 GMT container-test-run-certificates> Subject: CN=test.foo container-test-run-certificates> Subject Public Key Info: container-test-run-certificates> Public Key Algorithm: id-ecPublicKey container-test-run-certificates> Public-Key: (256 bit) container-test-run-certificates> pub: container-test-run-certificates> 04:2f:0c:68:49:0b:3e:6f:26:ce:9e:39:80:13:d0: container-test-run-certificates> 45:cc:98:e5:8a:1e:e3:cb:d8:dd:c5:d5:18:e2:52: container-test-run-certificates> 09:3e:3e:b4:c5:73:d8:07:ba:a4:bd:51:18:1c:71: container-test-run-certificates> c9:9f:e3:af:98:4c:f0:d7:82:fe:17:79:7a:6c:44: container-test-run-certificates> f9:e6:cd:63:28 container-test-run-certificates> ASN1 OID: prime256v1 container-test-run-certificates> NIST CURVE: P-256 container-test-run-certificates> X509v3 extensions: container-test-run-certificates> X509v3 Key Usage: critical container-test-run-certificates> Digital Signature container-test-run-certificates> X509v3 Extended Key Usage: container-test-run-certificates> TLS Web Server Authentication, TLS Web Client Authentication container-test-run-certificates> X509v3 Subject Key Identifier: container-test-run-certificates> F4:83:47:05:82:4A:BF:AB:AE:11:31:2D:2F:10:99:38:32:B8:A6:DA container-test-run-certificates> X509v3 Authority Key Identifier: container-test-run-certificates> 03:AB:CE:25:94:8C:DD:76:7A:3F:6B:F9:FE:E1:F7:3A:96:75:99:3E container-test-run-certificates> X509v3 Subject Alternative Name: container-test-run-certificates> DNS:test.foo container-test-run-certificates> 1.3.6.1.4.1.37476.9000.64.1: container-test-run-certificates> 0......acme.. container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Signature Value: container-test-run-certificates> 30:45:02:21:00:8c:3a:11:a5:dd:ee:42:5a:4c:c2:b0:2b:d5: container-test-run-certificates> 99:24:5b:f1:b1:b8:01:bb:4a:44:3a:46:60:42:ae:4d:3c:6f: container-test-run-certificates> b1:02:20:25:f5:05:db:f0:64:84:e4:e2:4d:10:08:48:a1:40: container-test-run-certificates> 0b:17:b7:85:bd:07:f8:77:d2:70:20:9f:63:2a:68:19:65 container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> post-build step Upload to niks3: ok time=2026-09-01T10:07:01.486Z level=INFO msg="Uploading 0 paths to niks3.clan.lol (1 already cached)" time=2026-09-01T10:07:01.781Z level=INFO msg="Uploading 1 narinfos" time=2026-09-01T10:07:02.120Z level=INFO msg="Upload complete. (688ms)"