these 21 derivations will be built:
  /nix/store/xja2sv369lpvd9730pys89l4wrrxp9hz-system-path.drv
  /nix/store/3lvx8f0snd2y0ybrw0nzaqqkfxkls05s-dbus-1.drv
  /nix/store/nv949fvnj8vac67d71x84qk9px5ks5r5-X-Restart-Triggers-dbus-broker.drv
  /nix/store/f85mjhnklzn4qdkzqpx61dszaaaiyy9a-unit-dbus-broker.service.drv
  /nix/store/bskh601yvarvylkqgc8qg46l4n3w61fl-nftables-rules.drv
  /nix/store/fwaisib3dvsr22n4gm3gl556km4g890m-unit-nftables.service.drv
  /nix/store/4mp05rk9fir6cdw44n7c53wws416h5k2-system-units.drv
  /nix/store/cdwlxgf6wxknq242l4phv4f5p9zkgg0c-unit-dbus-broker.service.drv
  /nix/store/9y3ffdc302gg3b7zmhxvqfnb1c9s099w-user-units.drv
  /nix/store/1n7l89mims88v5m3z47zwf4g05fpqi84-etc.drv
  /nix/store/43a364hdr9f1cmvyz14iz325f9f5s17f-system-units.drv
  /nix/store/ig4xgiwbdx2qk2nha144wp0kk4q5m0g4-user-units.drv
  /nix/store/rvmahjlgdgcx4jwba02nh2vq2my7ihw4-etc.drv
  /nix/store/5cjadqf9wglqi5aviggh8884sj8drg05-activate.drv
  /nix/store/kr9gh42jbdry0kj7sg7i09mwk57i7jb3-nixos-system-router-test.drv
  /nix/store/5xqjaxd2l479jhaanzg28kfsc935adz4-closure-info.drv
  /nix/store/achj9ljbmsb0c7zrx9xqvm892b2wqlbm-activate.drv
  /nix/store/b70a4sagx3xxgx615l153ia2dpfpwi7h-nixos-system-machine-test.drv
  /nix/store/l9rvvnpskgg23wspnb04dik76zc97193-closure-info.drv
  /nix/store/b6gg59d0l05prvhd1781lkrdv5qabx7h-nixos-test-driver-user-firewall-nftables.drv
  /nix/store/m7pj7sxmxzy2clcljbxwazsh5c93n9k1-container-test-run-user-firewall-nftables.drv
this path will be fetched (18.1 MiB download, 52.2 MiB unpacked):
  /nix/store/ifc6i0q90fvr7fmjx0kmqaj8i3smxvla-lkl-2025-11-13-lib
building '/nix/store/xja2sv369lpvd9730pys89l4wrrxp9hz-system-path.drv'
system-path> structuredAttrs is enabled
system-path> created 1669 symlinks in user environment
building '/nix/store/bskh601yvarvylkqgc8qg46l4n3w61fl-nftables-rules.drv'
building '/nix/store/3lvx8f0snd2y0ybrw0nzaqqkfxkls05s-dbus-1.drv'
building '/nix/store/fwaisib3dvsr22n4gm3gl556km4g890m-unit-nftables.service.drv'
building '/nix/store/nv949fvnj8vac67d71x84qk9px5ks5r5-X-Restart-Triggers-dbus-broker.drv'
building '/nix/store/cdwlxgf6wxknq242l4phv4f5p9zkgg0c-unit-dbus-broker.service.drv'
building '/nix/store/f85mjhnklzn4qdkzqpx61dszaaaiyy9a-unit-dbus-broker.service.drv'
building '/nix/store/4mp05rk9fir6cdw44n7c53wws416h5k2-system-units.drv'
building '/nix/store/9y3ffdc302gg3b7zmhxvqfnb1c9s099w-user-units.drv'
building '/nix/store/1n7l89mims88v5m3z47zwf4g05fpqi84-etc.drv'
building '/nix/store/achj9ljbmsb0c7zrx9xqvm892b2wqlbm-activate.drv'
building '/nix/store/b70a4sagx3xxgx615l153ia2dpfpwi7h-nixos-system-machine-test.drv'
nixos-system-machine-test> structuredAttrs is enabled
building '/nix/store/l9rvvnpskgg23wspnb04dik76zc97193-closure-info.drv'
closure-info> structuredAttrs is enabled
building '/nix/store/5xqjaxd2l479jhaanzg28kfsc935adz4-closure-info.drv'
closure-info> structuredAttrs is enabled
building '/nix/store/b6gg59d0l05prvhd1781lkrdv5qabx7h-nixos-test-driver-user-firewall-nftables.drv'
nixos-test-driver-user-firewall-nftables> Running type check (enable/disable: config.skipTypeCheck)
nixos-test-driver-user-firewall-nftables> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck
nixos-test-driver-user-firewall-nftables> Success: no issues found in 1 source file
building '/nix/store/m7pj7sxmxzy2clcljbxwazsh5c93n9k1-container-test-run-user-firewall-nftables.drv' on 'ssh-ng://builder@build-x86-01.clan.lol'
building '/nix/store/m7pj7sxmxzy2clcljbxwazsh5c93n9k1-container-test-run-user-firewall-nftables.drv'
container-test-run-user-firewall-nftables> additionally exposed symbols:
container-test-run-user-firewall-nftables>     machine, router,
container-test-run-user-firewall-nftables>     start_all, machines, driver, Machine, wait_for_signal
container-test-run-user-firewall-nftables> Starting machine
container-test-run-user-firewall-nftables> Starting router
container-test-run-user-firewall-nftables> 
container-test-run-user-firewall-nftables> 
container-test-run-user-firewall-nftables> 
container-test-run-user-firewall-nftables> <<< NixOS Stage 2 >>>
container-test-run-user-firewall-nftables> 
container-test-run-user-firewall-nftables> booting system configuration /nix/store/iq5imhrvyfajvnw89b96fk8ys11q0h6y-nixos-system-machine-test
container-test-run-user-firewall-nftables> running activation script...
container-test-run-user-firewall-nftables> setting up /etc...
container-test-run-user-firewall-nftables> 2: host0@if4: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
container-test-run-user-firewall-nftables>     link/ether 0e:74:26:22:81:c2 brd ff:ff:ff:ff:ff:ff link-netnsid 0
container-test-run-user-firewall-nftables> starting systemd...
container-test-run-user-firewall-nftables> systemd 260.2 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE)
container-test-run-user-firewall-nftables> Detected virtualization systemd-nspawn.
container-test-run-user-firewall-nftables> Detected architecture x86-64.
container-test-run-user-firewall-nftables> Detected first boot.
container-test-run-user-firewall-nftables> Initializing machine ID from container UUID.
container-test-run-user-firewall-nftables> Applying preset policy.
container-test-run-user-firewall-nftables> Populated /etc with preset unit settings.
container-test-run-user-firewall-nftables> Queued start job for default target Multi-User System.
container-test-run-user-firewall-nftables> 
container-test-run-user-firewall-nftables> 
container-test-run-user-firewall-nftables> 
container-test-run-user-firewall-nftables> <<< Welcome to NixOS test (x86_64) - console >>>
container-test-run-user-firewall-nftables> + systemd-run /bin/sh -c '/nix/store/61685rbaxmpigwi3z23i33sv3jyfl70q-coreutils-9.11/bin/sleep 999999999 && echo e748aa57-5d98-4cc3-b1f2-85ca0a4a661d'
container-test-run-user-firewall-nftables> Running as unit: run-p226-i3097452.service; invocation ID: 3bfb7c63e34a4e8e9c1912f78e8ac7a7
container-test-run-user-firewall-nftables> To attach to container machine run on the same machine that runs the test:
container-test-run-user-firewall-nftables>   sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*e748aa57-5d98-4cc3-b1f2-85ca0a4a661d') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash 
container-test-run-user-firewall-nftables> 
container-test-run-user-firewall-nftables> To inject external network and continue test, run:
container-test-run-user-firewall-nftables> sudo /nix/store/h3l4z7p6wny3phbckwwhy1i2g52pdnj4-python3-3.13.15/bin/python3.13 /nix/store/5ijkjs9kfarlbxq2nhp8ln1ndrq1jx1s-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py e748aa57-5d98-4cc3-b1f2-85ca0a4a661d
container-test-run-user-firewall-nftables> 
container-test-run-user-firewall-nftables> <<< NixOS Stage 2 >>>
container-test-run-user-firewall-nftables> 
container-test-run-user-firewall-nftables> booting system configuration /nix/store/9azkrnf7srm218i4qdwqck9cy259jpi6-nixos-system-router-test
container-test-run-user-firewall-nftables> running activation script...
container-test-run-user-firewall-nftables> setting up /etc...
container-test-run-user-firewall-nftables> 2: host0@if3: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
container-test-run-user-firewall-nftables>     link/ether a6:24:31:fe:b9:6d brd ff:ff:ff:ff:ff:ff link-netnsid 0
container-test-run-user-firewall-nftables> starting systemd...
container-test-run-user-firewall-nftables> systemd 260.2 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE)
container-test-run-user-firewall-nftables> Detected virtualization systemd-nspawn.
container-test-run-user-firewall-nftables> Detected architecture x86-64.
container-test-run-user-firewall-nftables> Detected first boot.
container-test-run-user-firewall-nftables> Initializing machine ID from container UUID.
container-test-run-user-firewall-nftables> Applying preset policy.
container-test-run-user-firewall-nftables> Populated /etc with preset unit settings.
container-test-run-user-firewall-nftables> Queued start job for default target Multi-User System.
container-test-run-user-firewall-nftables> 
container-test-run-user-firewall-nftables> 
container-test-run-user-firewall-nftables> 
container-test-run-user-firewall-nftables> <<< Welcome to NixOS test (x86_64) - console >>>
container-test-run-user-firewall-nftables> + systemd-run /bin/sh -c '/nix/store/61685rbaxmpigwi3z23i33sv3jyfl70q-coreutils-9.11/bin/sleep 999999999 && echo f50c65a1-3355-4e6b-adb7-a89e09f44c2b'
container-test-run-user-firewall-nftables> Running as unit: run-p209-i3097455.service; invocation ID: 4f241c76a8524f14b6651ec4ad44a447
container-test-run-user-firewall-nftables> To attach to container router run on the same machine that runs the test:
container-test-run-user-firewall-nftables>   sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*f50c65a1-3355-4e6b-adb7-a89e09f44c2b') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash 
container-test-run-user-firewall-nftables> 
container-test-run-user-firewall-nftables> To inject external network and continue test, run:
container-test-run-user-firewall-nftables> sudo /nix/store/h3l4z7p6wny3phbckwwhy1i2g52pdnj4-python3-3.13.15/bin/python3.13 /nix/store/5ijkjs9kfarlbxq2nhp8ln1ndrq1jx1s-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py f50c65a1-3355-4e6b-adb7-a89e09f44c2b
container-test-run-user-firewall-nftables> + systemctl --no-pager show multi-user.target
container-test-run-user-firewall-nftables> + systemctl --no-pager show nginx.service
container-test-run-user-firewall-nftables> + systemctl --no-pager show multi-user.target
container-test-run-user-firewall-nftables> + systemctl --no-pager show nginx.service
container-test-run-user-firewall-nftables> + ip -4 addr show eth1
container-test-run-user-firewall-nftables> + grep -oP '(?<=inet\s)\d+(\.\d+){3}'
container-test-run-user-firewall-nftables> + ip -6 addr show eth1
container-test-run-user-firewall-nftables> + grep -oP '(?<=inet6\s)[0-9a-f:]+'
container-test-run-user-firewall-nftables> + grep -v '^fe80'
container-test-run-user-firewall-nftables> + head -1
container-test-run-user-firewall-nftables> Router IPv4: 192.168.1.2
container-test-run-user-firewall-nftables> Router IPv6: 2001:db8:1::2
container-test-run-user-firewall-nftables> + systemctl restart nftables
container-test-run-user-firewall-nftables> + systemctl --no-pager show nftables.service
container-test-run-user-firewall-nftables> + nft list table inet user-firewall
container-test-run-user-firewall-nftables> table inet user-firewall {
container-test-run-user-firewall-nftables> 	chain output {
container-test-run-user-firewall-nftables> 		type filter hook output priority filter; policy accept;
container-test-run-user-firewall-nftables> 		oifname "lo" counter packets 0 bytes 0 accept comment "allow lo"
container-test-run-user-firewall-nftables> 		oifname "tun*" counter packets 0 bytes 0 accept comment "allow tun*"
container-test-run-user-firewall-nftables> 		oifname "tap*" counter packets 0 bytes 0 accept comment "allow tap*"
container-test-run-user-firewall-nftables> 		oifname "wg*" counter packets 0 bytes 0 accept comment "allow wg*"
container-test-run-user-firewall-nftables> 		oifname "tailscale*" counter packets 0 bytes 0 accept comment "allow tailscale*"
container-test-run-user-firewall-nftables> 		oifname "zt*" counter packets 0 bytes 0 accept comment "allow zt*"
container-test-run-user-firewall-nftables> 		oifname "vpn*" counter packets 0 bytes 0 accept comment "allow vpn*"
container-test-run-user-firewall-nftables> 		oifname "ipsec*" counter packets 0 bytes 0 accept comment "allow ipsec*"
container-test-run-user-firewall-nftables> 		oifname "nebula*" counter packets 0 bytes 0 accept comment "allow nebula*"
container-test-run-user-firewall-nftables> 		oifname "tinc*" counter packets 0 bytes 0 accept comment "allow tinc*"
container-test-run-user-firewall-nftables> 		oifname "edge*" counter packets 0 bytes 0 accept comment "allow edge*"
container-test-run-user-firewall-nftables> 		oifname "hyprspace" counter packets 0 bytes 0 accept comment "allow hyprspace"
container-test-run-user-firewall-nftables> 		oifname "ham0" counter packets 0 bytes 0 accept comment "allow ham0"
container-test-run-user-firewall-nftables> 		oifname "easytier" counter packets 0 bytes 0 accept comment "allow easytier"
container-test-run-user-firewall-nftables> 		oifname "mycelium" counter packets 0 bytes 0 accept comment "allow mycelium"
container-test-run-user-firewall-nftables> 		meta skuid 1002 counter packets 0 bytes 0 reject comment "blocked user bob"
container-test-run-user-firewall-nftables> 	}
container-test-run-user-firewall-nftables> }
container-test-run-user-firewall-nftables> machine: waiting for success: runuser -u alice -- curl -s http://127.0.0.1:8080
container-test-run-user-firewall-nftables> + runuser -u alice -- curl -s http://127.0.0.1:8080
container-test-run-user-firewall-nftables> (finished: waiting for success: runuser -u alice -- curl -s http://127.0.0.1:8080, in 0.01 seconds)
container-test-run-user-firewall-nftables> + runuser -u alice -- curl -s http://192.168.1.2
container-test-run-user-firewall-nftables> + runuser -u alice -- curl -s 'http://[2001:db8:1::2]'
container-test-run-user-firewall-nftables> + runuser -u bob -- curl -s http://127.0.0.1:8080
container-test-run-user-firewall-nftables> + runuser -u bob -- curl -s --connect-timeout 2 http://192.168.1.2
container-test-run-user-firewall-nftables> + echo EXIT_CODE=7
container-test-run-user-firewall-nftables> + runuser -u bob -- curl -s --connect-timeout 2 'http://[2001:db8:1::2]'
container-test-run-user-firewall-nftables> + echo EXIT_CODE=7
container-test-run-user-firewall-nftables> + nft list table inet user-firewall
container-test-run-user-firewall-nftables> + systemctl --no-pager show setup-wg0-interface.service
container-test-run-user-firewall-nftables> + systemctl --no-pager show nginx.service
container-test-run-user-firewall-nftables> machine: waiting for success: nc -z 10.100.0.2 8081
container-test-run-user-firewall-nftables> + nc -z 10.100.0.2 8081
container-test-run-user-firewall-nftables> Connection to 10.100.0.2 8081 port [tcp/sunproxyadmin] succeeded!
container-test-run-user-firewall-nftables> (finished: waiting for success: nc -z 10.100.0.2 8081, in 0.01 seconds)
container-test-run-user-firewall-nftables> + ip link show wg0
container-test-run-user-firewall-nftables> + ip addr show wg0
container-test-run-user-firewall-nftables> + runuser -u alice -- curl -s --interface wg0 http://10.100.0.2:8081/
container-test-run-user-firewall-nftables> + runuser -u alice -- curl -s --interface wg0 'http://[fd00::2]:8081/'
container-test-run-user-firewall-nftables> + runuser -u bob -- curl -s --interface wg0 http://10.100.0.2:8081/
container-test-run-user-firewall-nftables> + runuser -u bob -- curl -s --interface wg0 'http://[fd00::2]:8081/'
container-test-run-user-firewall-nftables> + nft list table inet user-firewall
container-test-run-user-firewall-nftables> + grep -E 'oifname.*wg'
container-test-run-user-firewall-nftables> 		oifname "wg*" counter packets 0 bytes 0 accept comment "allow wg*"
container-test-run-user-firewall-nftables> 
container-test-run-user-firewall-nftables> 

upload niks3: failed
time=2026-09-09T00:16:45.564Z level=WARN msg="Request returned retryable status, retrying" attempt=1 max_attempts=6 backoff=100ms status=504 url=https://niks3.clan.lol/api/pending_closures
time=2026-09-09T00:21:45.665Z level=WARN msg="Request returned retryable status, retrying" attempt=2 max_attempts=6 backoff=194.852146ms status=504 url=https://niks3.clan.lol/api/pending_closures
time=2026-09-09T00:26:45.862Z level=WARN msg="Request returned retryable status, retrying" attempt=3 max_attempts=6 backoff=430.412196ms status=504 url=https://niks3.clan.lol/api/pending_closures
time=2026-09-09T00:31:46.294Z level=WARN msg="Request returned retryable status, retrying" attempt=4 max_attempts=6 backoff=816.064064ms status=504 url=https://niks3.clan.lol/api/pending_closures
time=2026-09-09T00:36:47.112Z level=WARN msg="Request returned retryable status, retrying" attempt=5 max_attempts=6 backoff=1.534920561s status=504 url=https://niks3.clan.lol/api/pending_closures
time=2026-09-09T00:41:48.649Z level=ERROR msg="Fatal error" error="pushing paths: creating pending closures: creating pending closure: server returned 504: "