container-test-run-user-firewall-nftables
checks.aarch64-linux.nixos-test-user-firewall-nftables
· build #582
· raw
1Machine state will be reset. To keep it, pass --keep-machine-state2start all VLans3(finished: start all VLans, in 0.00 seconds)45Test will time out and terminate in 3600.0 seconds6run the VM test script7additionally exposed symbols:8 machine, router,9 vlan1,10 start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh11start all VMs12machine: systemd-nspawn running (pid 52)13router: systemd-nspawn running (pid 53)14machine: Waiting for journal at /build/vm-state-machine/var/log/journal...15router: Waiting for journal at /build/vm-state-router/var/log/journal...16(finished: start all VMs, in 0.00 seconds)17router: waiting for unit multi-user.target18nixos-nspawn(router): TAP vde-tap1 not found; container will be isolated from VDE19nixos-nspawn(router): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.20nixos-nspawn(machine): TAP vde-tap1 not found; container will be isolated from VDE21nixos-nspawn(machine): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.22Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.23Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.24░ Spawning container router on /build/vm-state-router.25░ Spawning container machine on /build/vm-state-machine.26machine # [27669.064259] machine systemd-journald[54]: Journal started27machine # [27669.064315] machine systemd-journald[54]: Runtime Journal (/run/log/journal/e76c03a13e8746d198a4868bd6884ad1) is 8M, max 2.5G, 2.4G free.28machine # [27669.065858] machine systemd[1]: Finished Create Static Device Nodes in /dev gracefully.29machine # [27669.073850] machine systemd[1]: Starting Flush Journal to Persistent Storage...30machine # [27669.074848] machine systemd[1]: Starting Create Static Device Nodes in /dev...31machine # [27669.085167] machine systemd-journald[54]: Time spent on flushing to /var/log/journal/e76c03a13e8746d198a4868bd6884ad1 is 1.451ms for 5 entries.32machine # [27669.085167] machine systemd-journald[54]: System Journal (/var/log/journal/e76c03a13e8746d198a4868bd6884ad1) is 8M, max 4G, 3.9G free.33machine # [27669.090425] machine systemd[1]: Finished Create Static Device Nodes in /dev.34machine # [27669.091179] machine systemd[1]: Reached target Preparation for Local File Systems.35machine # [27669.091313] machine systemd[1]: Reached target Local File Systems.36machine # [27669.092287] machine systemd[1]: Listening on Boot Loader Control Service Socket.37machine # [27669.092342] machine systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container38machine # [27669.093378] machine systemd[1]: Starting Save Transient machine-id to Disk...39machine # [27669.093423] machine systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys40machine # [27669.123511] machine systemd[1]: Finished Flush Journal to Persistent Storage.41machine # [27669.124712] machine systemd[1]: Starting Create System Files and Directories...42machine # [27669.139006] machine systemd-tmpfiles[66]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted43machine # [27669.139182] machine systemd-tmpfiles[66]: fchmod() of /var/log/journal failed: Operation not permitted44machine # [27669.139300] machine systemd-tmpfiles[66]: fchmod() of /var/log/journal/e76c03a13e8746d198a4868bd6884ad1 failed: Operation not permitted45machine # [27669.139474] machine systemd-tmpfiles[66]: fchmod() of /run/log/journal failed: Operation not permitted46machine # [27669.140840] machine systemd[1]: Finished Create System Files and Directories.47machine # [27669.142022] machine systemd[1]: Starting Rebuild Journal Catalog...48machine # [27669.142852] machine systemd[1]: Starting Record System Boot/Shutdown in UTMP...49machine # [27669.159430] machine systemd[1]: Finished Record System Boot/Shutdown in UTMP.50machine # [27669.163153] machine systemd[1]: Finished Rebuild Journal Catalog.51machine # [27669.164358] machine systemd[1]: Starting Update is Completed...52router # [27669.065097] router systemd-journald[54]: Journal started53router # [27669.065148] router systemd-journald[54]: Runtime Journal (/run/log/journal/83e86f8aea0e4d1d8fc8833963694d50) is 8M, max 2.5G, 2.4G free.54router # [27669.074223] router systemd[1]: Finished Create Static Device Nodes in /dev gracefully.55router # [27669.083849] router systemd[1]: Starting Flush Journal to Persistent Storage...56router # [27669.084791] router systemd[1]: Starting Network Name Resolution...57router # [27669.085495] router systemd[1]: Starting Create Static Device Nodes in /dev...58router # [27669.094149] router systemd-journald[54]: Time spent on flushing to /var/log/journal/83e86f8aea0e4d1d8fc8833963694d50 is 1.496ms for 6 entries.59router # [27669.094149] router systemd-journald[54]: System Journal (/var/log/journal/83e86f8aea0e4d1d8fc8833963694d50) is 8M, max 4G, 3.9G free.60router # [27669.101028] router systemd[1]: Finished Create Static Device Nodes in /dev.61router # [27669.101257] router systemd[1]: Reached target Preparation for Local File Systems.62router # [27669.101353] router systemd[1]: Reached target Local File Systems.63router # [27669.102088] router systemd[1]: Listening on Boot Loader Control Service Socket.64router # [27669.102132] router systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container65router # [27669.103138] router systemd[1]: Starting Save Transient machine-id to Disk...66router # [27669.103171] router systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys67router # [27669.104410] router systemd[1]: Starting Network Management...68router # [27669.114844] router systemd[1]: Finished Flush Journal to Persistent Storage.69router # [27669.116342] router systemd[1]: Starting Create System Files and Directories...70router # [27669.132338] router systemd-tmpfiles[70]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted71router # [27669.132520] router systemd-tmpfiles[70]: fchmod() of /var/log/journal failed: Operation not permitted72router # [27669.132635] router systemd-tmpfiles[70]: fchmod() of /var/log/journal/83e86f8aea0e4d1d8fc8833963694d50 failed: Operation not permitted73router # [27669.132807] router systemd-tmpfiles[70]: fchmod() of /run/log/journal failed: Operation not permitted74router # [27669.134098] router systemd[1]: Finished Create System Files and Directories.75router # [27669.135229] router systemd[1]: Starting Rebuild Journal Catalog...76router # [27669.136170] router systemd[1]: Starting Record System Boot/Shutdown in UTMP...77router # [27669.149500] router systemd[1]: Finished Record System Boot/Shutdown in UTMP.78router # [27669.158522] router systemd[1]: Finished Rebuild Journal Catalog.79router # [27669.160326] router systemd[1]: Starting Update is Completed...80router # [27669.171437] router systemd[1]: Finished Update is Completed.81machine # [27669.175298] machine systemd[1]: Finished Update is Completed.82machine # [27669.175476] machine systemd[1]: Reached target System Initialization.83machine # [27669.175564] machine systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container84machine # [27669.175603] machine systemd[1]: Started Daily Cleanup of Temporary Directories.85machine # [27669.175623] machine systemd[1]: Reached target Timer Units.86machine # [27669.175726] machine systemd[1]: Listening on D-Bus System Message Bus Socket.87machine # [27669.175853] machine systemd[1]: Listening on Nix Daemon Socket.88machine # [27669.175961] machine systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.89machine # [27669.175985] machine systemd[1]: Reached target Socket Units.90machine # [27669.176030] machine systemd[1]: Reached target Basic System.91machine # [27669.177126] machine systemd[1]: Starting Import lastlog data into lastlog2 database...92machine # [27669.177916] machine systemd[1]: Starting nftables firewall...93machine # [27669.178917] machine systemd[1]: Starting Name Service Cache Daemon (nsncd)...94machine # [27669.197877] machine systemd[1]: Finished Import lastlog data into lastlog2 database.95machine # [27669.254361] machine nsncd[76]: Sep 04 15:08:09.240 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"96machine # [27669.254363] machine systemd[1]: Started Name Service Cache Daemon (nsncd).97machine # [27669.254468] machine systemd[1]: Reached target Host and Network Name Lookups.98machine # [27669.254580] machine systemd[1]: Reached target User and Group Name Lookups.99machine # [27669.256627] machine systemd[1]: Starting User Login Management...100router # [27669.494334] router systemd-networkd[66]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted101router # [27669.494428] router systemd-networkd[66]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted102router # [27669.500934] router systemd-networkd[66]: lo: Link UP103router # [27669.500940] router systemd-networkd[66]: lo: Gained carrier104router # [27669.501116] router systemd-networkd[66]: eth1: Configuring with /etc/systemd/network/40-eth1.network.105router # [27669.501493] router systemd[1]: Started Network Management.106router # [27669.501622] router systemd-networkd[66]: eth1: Link UP107router # [27669.501899] router systemd-networkd[66]: eth1: Gained carrier108router # [27669.503281] router systemd[1]: Starting Enable Persistent Storage in systemd-networkd...109router # [27669.546212] router systemd[1]: Finished Enable Persistent Storage in systemd-networkd.110router # [27669.731648] router systemd-resolved[61]: Positive Trust Anchors:111router # [27669.731658] router systemd-resolved[61]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d112router # [27669.731662] router systemd-resolved[61]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16113router # [27669.731696] router systemd-resolved[61]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test114machine # [27669.502730] machine systemd[1]: Finished nftables firewall.115machine # [27669.503450] machine systemd[1]: Reached target Preparation for Network.116machine # [27669.504634] machine systemd[1]: Starting Address configuration of eth1...117machine # [27669.505731] machine systemd[1]: Starting Extra networking commands....118machine # [27669.506782] machine systemd[1]: Starting Setup wg0 dummy interface...119machine # [27669.524789] machine network-addresses-eth1-start[108]: adding address 192.168.1.1/24... done120machine # [27669.527970] machine network-addresses-eth1-start[108]: adding address 2001:db8:1::1/64... done121machine # [27669.530074] machine systemd[1]: Finished Setup wg0 dummy interface.122machine # [27669.533348] machine systemd[1]: Finished Address configuration of eth1.123machine # [27669.569051] machine systemd[1]: Stopped target Host and Network Name Lookups.124machine # [27669.569127] machine systemd[1]: Stopping Host and Network Name Lookups...125machine # [27669.569188] machine systemd[1]: Stopped target User and Group Name Lookups.126machine # [27669.569222] machine systemd[1]: Stopping User and Group Name Lookups...127machine # [27669.570673] machine systemd[1]: Stopping Name Service Cache Daemon (nsncd)...128machine # [27669.574100] machine systemd[1]: nscd.service: Deactivated successfully.129machine # [27669.574284] machine systemd[1]: Stopped Name Service Cache Daemon (nsncd).130machine # [27669.576568] machine systemd[1]: Starting Name Service Cache Daemon (nsncd)...131machine # [27669.586267] machine systemd[1]: Finished Extra networking commands..132machine # [27669.586578] machine systemd[1]: Reached target Network.133machine # [27669.588402] machine systemd[1]: Starting Nginx Web Server...134machine # [27669.661756] machine nsncd[172]: Sep 04 15:08:09.647 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"135machine # [27669.661950] machine systemd[1]: Started Name Service Cache Daemon (nsncd).136machine # [27669.662052] machine systemd[1]: Reached target Host and Network Name Lookups.137machine # [27669.662151] machine systemd[1]: Reached target User and Group Name Lookups.138machine # [27669.663578] machine systemd[1]: Starting Permit User Sessions...139machine # [27669.724522] machine systemd[1]: Finished Permit User Sessions.140machine # [27669.725736] machine systemd[1]: Started Console Getty.141machine # [27669.725784] machine systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0142machine # [27669.725809] machine systemd[1]: Reached target Login Prompts.143machine # [27669.768306] machine systemd-logind[96]: New seat seat0.144machine # [27669.768627] machine systemd[1]: Started User Login Management.145router # [27669.753943] router systemd-resolved[61]: Using system hostname 'router'.146router # [27669.755366] router systemd[1]: Started Network Name Resolution.147router # [27669.755464] router systemd[1]: Reached target Network.148router # [27669.755543] router systemd[1]: Reached target System Initialization.149router # [27669.755608] router systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container150router # [27669.755638] router systemd[1]: Started Daily Cleanup of Temporary Directories.151router # [27669.755662] router systemd[1]: Reached target Timer Units.152router # [27669.755811] router systemd[1]: Listening on D-Bus System Message Bus Socket.153router # [27669.755970] router systemd[1]: Listening on Nix Daemon Socket.154router # [27669.756140] router systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.155router # [27669.756165] router systemd[1]: Reached target Socket Units.156router # [27669.756215] router systemd[1]: Reached target Basic System.157router # [27669.757723] router systemd[1]: Starting Import lastlog data into lastlog2 database...158router # [27669.758806] router systemd[1]: Starting Nginx Web Server...159router # [27669.759886] router systemd[1]: Starting Name Service Cache Daemon (nsncd)...160router # [27669.761430] router systemd[1]: Starting D-Bus System Message Bus...161router # [27669.777742] router systemd[1]: Finished Import lastlog data into lastlog2 database.162router # [27669.868344] router systemd[1]: Started Name Service Cache Daemon (nsncd).163router # [27669.868531] router nsncd[83]: Sep 04 15:08:09.854 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"164router # [27669.868420] router systemd[1]: Reached target Host and Network Name Lookups.165router # [27669.868489] router systemd[1]: Reached target User and Group Name Lookups.166router # [27669.884408] router systemd[1]: Starting User Login Management...167router # [27669.885571] router systemd[1]: Starting Permit User Sessions...168router # [27669.897122] router systemd[1]: Finished Permit User Sessions.169router # [27669.898188] router systemd[1]: Started Console Getty.170router # [27669.898232] router systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0171router # [27669.898255] router systemd[1]: Reached target Login Prompts.172router # [27669.981547] router dbus-broker-launch[84]: Looking up NSS user entry for 'systemd-timesync'...173router # [27669.982913] router dbus-broker-launch[84]: NSS returned no entry for 'systemd-timesync'174router # [27669.982913] router dbus-broker-launch[84]: Invalid user-name in /nix/store/26r70s5a1vfrfk94qlly4j12llp2x8yc-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"175router # [27669.983373] router systemd[1]: Started D-Bus System Message Bus.176router # [27669.990742] router dbus-broker-launch[84]: Ready177machine # [27669.770364] machine systemd[1]: Starting D-Bus System Message Bus...178machine # [27669.771731] machine systemd[1]: Starting linger-users.service...179machine # [27669.784731] machine systemd[1]: linger-users.service: Deactivated successfully.180machine # [27669.784917] machine systemd[1]: Finished linger-users.service.181machine # [27669.949359] machine dbus-broker-launch[198]: Looking up NSS user entry for 'systemd-timesync'...182machine # [27669.950341] machine dbus-broker-launch[198]: NSS returned no entry for 'systemd-timesync'183machine # [27669.950341] machine dbus-broker-launch[198]: Invalid user-name in /nix/store/dmflg8qn0vjph4dizdn0q1rk74gk5vc8-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"184machine # [27669.950767] machine systemd[1]: Started D-Bus System Message Bus.185machine # [27669.959664] machine dbus-broker-launch[198]: Ready186machine # [27670.105911] machine nginx-pre-start[203]: nginx: the configuration file /nix/store/3j90525w07app6y97h71z8gzyxq70s3s-nginx.conf syntax is ok187machine # [27670.106585] machine nginx-pre-start[203]: nginx: configuration file /nix/store/3j90525w07app6y97h71z8gzyxq70s3s-nginx.conf test is successful188machine # [27670.137664] machine systemd[1]: Started Nginx Web Server.189machine # [27670.138494] machine systemd[1]: Reached target Multi-User System.190router # [27670.287901] router nginx-pre-start[113]: nginx: the configuration file /nix/store/7yhiwkgp65sf3lcmchgbyplj3qkscspp-nginx.conf syntax is ok191router # [27670.288341] router nginx-pre-start[113]: nginx: configuration file /nix/store/7yhiwkgp65sf3lcmchgbyplj3qkscspp-nginx.conf test is successful192router # [27670.294403] router systemd[1]: Started Nginx Web Server.193router # [27670.345542] router systemd-logind[102]: New seat seat0.194router # [27670.345803] router systemd[1]: Started User Login Management.195router # [27670.347533] router systemd[1]: Starting linger-users.service...196router # [27670.360630] router systemd[1]: linger-users.service: Deactivated successfully.197router # [27670.360845] router systemd[1]: Finished linger-users.service.198router # [27670.361372] router systemd[1]: Reached target Multi-User System.199router # [27670.405845] router systemd[1]: etc-machine\x2did.mount: Deactivated successfully.200router # [27670.407468] router systemd[1]: Finished Save Transient machine-id to Disk.201router # [27670.428232] router systemd[1]: Startup finished in 1.818s.202machine # [27670.406305] machine systemd[1]: etc-machine\x2did.mount: Deactivated successfully.203machine # [27670.407545] machine systemd[1]: Finished Save Transient machine-id to Disk.204machine # [27670.422460] machine systemd[1]: Startup finished in 1.805s.205router: (finished: waiting for unit multi-user.target, in 2.65 seconds)206router: waiting for TCP port 80 on localhost207router # [27671.040185] router systemd-networkd[66]: eth1: Gained IPv6LL208Connection to localhost (::1) 80 port [tcp/http] succeeded!209router: (finished: waiting for TCP port 80 on localhost, in 1.02 seconds)210machine: waiting for unit multi-user.target211machine: (finished: waiting for unit multi-user.target, in 0.02 seconds)212machine: waiting for unit nginx.service213machine: (finished: waiting for unit nginx.service, in 0.02 seconds)214router: must succeed: ip -4 addr show eth1 | grep -oP '(?<=inet\s)\d+(\.\d+){3}'215router: (finished: must succeed: ip -4 addr show eth1 | grep -oP '(?<=inet\s)\d+(\.\d+){3}', in 0.01 seconds)216router: must succeed: ip -6 addr show eth1 | grep -oP '(?<=inet6\s)[0-9a-f:]+' | grep -v '^fe80' | head -1217router: (finished: must succeed: ip -6 addr show eth1 | grep -oP '(?<=inet6\s)[0-9a-f:]+' | grep -v '^fe80' | head -1, in 0.01 seconds)218Router IPv4: 192.168.1.2219Router IPv6: 2001:db8:1::2220machine: must succeed: systemctl restart nftables221machine: (finished: must succeed: systemctl restart nftables, in 0.22 seconds)222machine: waiting for unit nftables.service223machine: (finished: waiting for unit nftables.service, in 0.01 seconds)224machine: must succeed: nft list table inet user-firewall >&2225table inet user-firewall {226 chain output {227 type filter hook output priority filter; policy accept;228 oifname "lo" counter packets 0 bytes 0 accept comment "allow lo"229 oifname "tun*" counter packets 0 bytes 0 accept comment "allow tun*"230 oifname "tap*" counter packets 0 bytes 0 accept comment "allow tap*"231 oifname "wg*" counter packets 0 bytes 0 accept comment "allow wg*"232 oifname "tailscale*" counter packets 0 bytes 0 accept comment "allow tailscale*"233 oifname "zt*" counter packets 0 bytes 0 accept comment "allow zt*"234 oifname "vpn*" counter packets 0 bytes 0 accept comment "allow vpn*"235 oifname "ipsec*" counter packets 0 bytes 0 accept comment "allow ipsec*"236 oifname "nebula*" counter packets 0 bytes 0 accept comment "allow nebula*"237 oifname "tinc*" counter packets 0 bytes 0 accept comment "allow tinc*"238 oifname "edge*" counter packets 0 bytes 0 accept comment "allow edge*"239 oifname "hyprspace" counter packets 0 bytes 0 accept comment "allow hyprspace"240 oifname "ham0" counter packets 0 bytes 0 accept comment "allow ham0"241 oifname "easytier" counter packets 0 bytes 0 accept comment "allow easytier"242 oifname "mycelium" counter packets 0 bytes 0 accept comment "allow mycelium"243 meta skuid 1002 counter packets 0 bytes 0 reject comment "blocked user bob"244 }245}246machine: (finished: must succeed: nft list table inet user-firewall >&2, in 0.01 seconds)247machine: waiting for success: runuser -u alice -- curl -s http://127.0.0.1:8080248machine: (finished: waiting for success: runuser -u alice -- curl -s http://127.0.0.1:8080, in 0.02 seconds)249machine: must succeed: runuser -u alice -- curl -s http://192.168.1.2250machine # [27671.900542] machine systemd[1]: Stopping nftables firewall...251machine # [27671.972876] machine systemd[1]: nftables.service: Deactivated successfully.252machine # [27671.973113] machine systemd[1]: Stopped nftables firewall.253machine # [27671.974658] machine systemd[1]: Starting nftables firewall...254machine # [27672.106300] machine systemd[1]: Finished nftables firewall.255machine # [27672.142820] machine runuser[235]: pam_unix(runuser:session): session opened for user alice(uid=1001) by (uid=0)256machine # [27672.150970] machine runuser[235]: pam_unix(runuser:session): session closed for user alice257machine: (finished: must succeed: runuser -u alice -- curl -s http://192.168.1.2, in 0.02 seconds)258machine: must succeed: runuser -u alice -- curl -s http://[2001:db8:1::2]259machine: (finished: must succeed: runuser -u alice -- curl -s http://[2001:db8:1::2], in 0.02 seconds)260machine: must succeed: runuser -u bob -- curl -s http://127.0.0.1:8080261machine: (finished: must succeed: runuser -u bob -- curl -s http://127.0.0.1:8080, in 0.02 seconds)262machine: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://192.168.1.2 2>&1 || echo 'EXIT_CODE='$?263machine: (finished: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://192.168.1.2 2>&1 || echo 'EXIT_CODE='$?, in 0.02 seconds)264machine: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://[2001:db8:1::2] 2>&1 || echo 'EXIT_CODE='$?265machine # [27672.160604] machine runuser[237]: pam_unix(runuser:session): session opened for user alice(uid=1001) by (uid=0)266machine # [27672.171330] machine runuser[237]: pam_unix(runuser:session): session closed for user alice267machine # [27672.180501] machine runuser[239]: pam_unix(runuser:session): session opened for user alice(uid=1001) by (uid=0)268machine # [27672.188832] machine runuser[239]: pam_unix(runuser:session): session closed for user alice269machine # [27672.197919] machine runuser[241]: pam_unix(runuser:session): session opened for user bob(uid=1002) by (uid=0)270machine # [27672.206113] machine runuser[241]: pam_unix(runuser:session): session closed for user bob271machine # [27672.214259] machine runuser[244]: pam_unix(runuser:session): session opened for user bob(uid=1002) by (uid=0)272machine # [27672.222280] machine runuser[244]: pam_unix(runuser:session): session closed for user bob273machine # [27672.230474] machine runuser[247]: pam_unix(runuser:session): session opened for user bob(uid=1002) by (uid=0)274machine: (finished: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://[2001:db8:1::2] 2>&1 || echo 'EXIT_CODE='$?, in 1.03 seconds)275machine: must succeed: nft list table inet user-firewall276machine: (finished: must succeed: nft list table inet user-firewall, in 0.01 seconds)277machine: waiting for unit setup-wg0-interface.service278machine: (finished: waiting for unit setup-wg0-interface.service, in 0.01 seconds)279machine: waiting for unit nginx.service280machine: (finished: waiting for unit nginx.service, in 0.01 seconds)281machine: waiting for TCP port 8081 on 10.100.0.2282Connection to 10.100.0.2 8081 port [tcp/sunproxyadmin] succeeded!283machine: (finished: waiting for TCP port 8081 on 10.100.0.2, in 0.01 seconds)284machine: must succeed: ip link show wg0285machine: (finished: must succeed: ip link show wg0, in 0.01 seconds)286machine: must succeed: ip addr show wg0287machine: (finished: must succeed: ip addr show wg0, in 0.01 seconds)288machine: must succeed: runuser -u alice -- curl -s --interface wg0 http://10.100.0.2:8081/289machine: (finished: must succeed: runuser -u alice -- curl -s --interface wg0 http://10.100.0.2:8081/, in 0.02 seconds)290machine: must succeed: runuser -u alice -- curl -s --interface wg0 http://[fd00::2]:8081/291machine: (finished: must succeed: runuser -u alice -- curl -s --interface wg0 http://[fd00::2]:8081/, in 0.02 seconds)292machine: must succeed: runuser -u bob -- curl -s --interface wg0 http://10.100.0.2:8081/293machine: (finished: must succeed: runuser -u bob -- curl -s --interface wg0 http://10.100.0.2:8081/, in 0.02 seconds)294machine: must succeed: runuser -u bob -- curl -s --interface wg0 http://[fd00::2]:8081/295machine: (finished: must succeed: runuser -u bob -- curl -s --interface wg0 http://[fd00::2]:8081/, in 0.02 seconds)296machine: must succeed: nft list table inet user-firewall | grep -E 'oifname.*wg' >&2297 oifname "wg*" counter packets 0 bytes 0 accept comment "allow wg*"298machine: (finished: must succeed: nft list table inet user-firewall | grep -E 'oifname.*wg' >&2, in 0.01 seconds)299(finished: run the VM test script, in 5.24 seconds)300machine # [27673.250529] machine runuser[247]: pam_unix(runuser:session): session closed for user bob301machine # [27673.321443] machine runuser[255]: pam_unix(runuser:session): session opened for user alice(uid=1001) by (uid=0)302machine # [27673.332080] machine runuser[255]: pam_unix(runuser:session): session closed for user alice303machine # [27673.342765] machine runuser[257]: pam_unix(runuser:session): session opened for user alice(uid=1001) by (uid=0)304machine # [27673.353514] machine runuser[257]: pam_unix(runuser:session): session closed for user alice305machine # [27673.362301] machine runuser[259]: pam_unix(runuser:session): session opened for user bob(uid=1002) by (uid=0)306machine # [27673.372715] machine runuser[259]: pam_unix(runuser:session): session closed for user bob307machine # [27673.382233] machine runuser[261]: pam_unix(runuser:session): session opened for user bob(uid=1002) by (uid=0)308machine # [27673.392169] machine runuser[261]: pam_unix(runuser:session): session closed for user bob309test script finished in 5.47s310cleanup311kill NspawnMachine (pid 52)312kill NspawnMachine (pid 53)313Container machine terminated by signal KILL.314Container router terminated by signal KILL.315(finished: cleanup, in 0.38 seconds)