container-test-run-user-firewall-nftables
checks.aarch64-linux.nixos-test-user-firewall-nftables
· build #641
· raw
1Machine state will be reset. To keep it, pass --keep-machine-state2start all VLans3(finished: start all VLans, in 0.00 seconds)45Test will time out and terminate in 3600.0 seconds6run the VM test script7additionally exposed symbols:8 machine, router,9 vlan1,10 start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh11start all VMs12machine: systemd-nspawn running (pid 52)13router: systemd-nspawn running (pid 53)14machine: Waiting for journal at /build/vm-state-machine/var/log/journal...15router: Waiting for journal at /build/vm-state-router/var/log/journal...16(finished: start all VMs, in 0.00 seconds)17router: waiting for unit multi-user.target18nixos-nspawn(router): TAP vde-tap1 not found; container will be isolated from VDE19nixos-nspawn(router): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.20nixos-nspawn(machine): TAP vde-tap1 not found; container will be isolated from VDE21nixos-nspawn(machine): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.22Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.23Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.24░ Spawning container router on /build/vm-state-router.25░ Spawning container machine on /build/vm-state-machine.26machine # [805542.325344] machine systemd-journald[57]: Journal started27machine # [805542.325400] machine systemd-journald[57]: Runtime Journal (/run/log/journal/7abd66db6eb04d23969932099349c1aa) is 8M, max 2.5G, 2.4G free.28machine # [805542.336769] machine systemd[1]: Finished Apply Kernel Variables.29machine # [805542.350099] machine systemd[1]: Finished Create Static Device Nodes in /dev gracefully.30router # [805542.329286] router systemd-journald[57]: Journal started31router # [805542.329342] router systemd-journald[57]: Runtime Journal (/run/log/journal/1f1e358acc8b467e8c585631d2b696e0) is 8M, max 2.5G, 2.4G free.32router # [805542.337269] router systemd[1]: Finished Apply Kernel Variables.33router # [805542.350331] router systemd[1]: Finished Create Static Device Nodes in /dev gracefully.34router # [805542.366755] router systemd[1]: Starting Flush Journal to Persistent Storage...35machine # [805542.365693] machine systemd[1]: Starting Flush Journal to Persistent Storage...36router # [805542.367762] router systemd[1]: Starting Network Name Resolution...37machine # [805542.366457] machine systemd[1]: Starting Create Static Device Nodes in /dev...38router # [805542.368464] router systemd[1]: Starting Create Static Device Nodes in /dev...39machine # [805542.376986] machine systemd-journald[57]: Time spent on flushing to /var/log/journal/7abd66db6eb04d23969932099349c1aa is 1.511ms for 6 entries.40machine # [805542.376986] machine systemd-journald[57]: System Journal (/var/log/journal/7abd66db6eb04d23969932099349c1aa) is 8M, max 4G, 3.9G free.41machine # [805542.384973] machine systemd[1]: Finished Create Static Device Nodes in /dev.42machine # [805542.385650] machine systemd[1]: Reached target Preparation for Local File Systems.43machine # [805542.385794] machine systemd[1]: Reached target Local File Systems.44machine # [805542.386598] machine systemd[1]: Listening on Boot Loader Control Service Socket.45machine # [805542.386646] machine systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container46machine # [805542.387459] machine systemd[1]: Starting Save Transient machine-id to Disk...47machine # [805542.387490] machine systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys48machine # [805542.398213] machine systemd[1]: Finished Flush Journal to Persistent Storage.49router # [805542.376907] router systemd-journald[57]: Time spent on flushing to /var/log/journal/1f1e358acc8b467e8c585631d2b696e0 is 1.560ms for 7 entries.50machine # [805542.399721] machine systemd[1]: Starting Create System Files and Directories...51router # [805542.376907] router systemd-journald[57]: System Journal (/var/log/journal/1f1e358acc8b467e8c585631d2b696e0) is 8M, max 4G, 3.9G free.52router # [805542.391328] router systemd[1]: Finished Create Static Device Nodes in /dev.53router # [805542.391998] router systemd[1]: Reached target Preparation for Local File Systems.54router # [805542.392139] router systemd[1]: Reached target Local File Systems.55router # [805542.393030] router systemd[1]: Listening on Boot Loader Control Service Socket.56router # [805542.393081] router systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container57router # [805542.393886] router systemd[1]: Starting Save Transient machine-id to Disk...58router # [805542.393922] router systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys59router # [805542.394879] router systemd[1]: Starting Network Management...60router # [805542.398064] router systemd[1]: Finished Flush Journal to Persistent Storage.61router # [805542.399208] router systemd[1]: Starting Create System Files and Directories...62router # [805542.417072] router systemd-tmpfiles[72]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted63router # [805542.417290] router systemd-tmpfiles[72]: fchmod() of /var/log/journal failed: Operation not permitted64router # [805542.417435] router systemd-tmpfiles[72]: fchmod() of /var/log/journal/1f1e358acc8b467e8c585631d2b696e0 failed: Operation not permitted65router # [805542.417651] router systemd-tmpfiles[72]: fchmod() of /run/log/journal failed: Operation not permitted66router # [805542.419131] router systemd[1]: Finished Create System Files and Directories.67router # [805542.420164] router systemd[1]: Starting Rebuild Journal Catalog...68router # [805542.420870] router systemd[1]: Starting Record System Boot/Shutdown in UTMP...69machine # [805542.417157] machine systemd-tmpfiles[69]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted70machine # [805542.417373] machine systemd-tmpfiles[69]: fchmod() of /var/log/journal failed: Operation not permitted71machine # [805542.417527] machine systemd-tmpfiles[69]: fchmod() of /var/log/journal/7abd66db6eb04d23969932099349c1aa failed: Operation not permitted72machine # [805542.417746] machine systemd-tmpfiles[69]: fchmod() of /run/log/journal failed: Operation not permitted73machine # [805542.419093] machine systemd[1]: Finished Create System Files and Directories.74machine # [805542.420386] machine systemd[1]: Starting Rebuild Journal Catalog...75machine # [805542.421047] machine systemd[1]: Starting Record System Boot/Shutdown in UTMP...76machine # [805542.438748] machine systemd[1]: Finished Record System Boot/Shutdown in UTMP.77machine # [805542.440104] machine systemd[1]: Finished Rebuild Journal Catalog.78machine # [805542.441648] machine systemd[1]: Starting Update is Completed...79machine # [805542.442807] machine systemd[1]: Finished Save Transient machine-id to Disk.80machine # [805542.452470] machine systemd[1]: Finished Update is Completed.81machine # [805542.452636] machine systemd[1]: Reached target System Initialization.82machine # [805542.452718] machine systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container83machine # [805542.452746] machine systemd[1]: Started Daily Cleanup of Temporary Directories.84machine # [805542.452765] machine systemd[1]: Reached target Timer Units.85machine # [805542.452866] machine systemd[1]: Listening on D-Bus System Message Bus Socket.86machine # [805542.452976] machine systemd[1]: Listening on Nix Daemon Socket.87machine # [805542.453078] machine systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.88machine # [805542.453100] machine systemd[1]: Reached target Socket Units.89machine # [805542.453130] machine systemd[1]: Reached target Basic System.90machine # [805542.454143] machine systemd[1]: Starting Import lastlog data into lastlog2 database...91machine # [805542.454848] machine systemd[1]: Starting nftables firewall...92machine # [805542.455644] machine systemd[1]: Starting Name Service Cache Daemon (nsncd)...93machine # [805542.470664] machine systemd[1]: Finished Import lastlog data into lastlog2 database.94machine # [805542.533645] machine systemd[1]: Finished nftables firewall.95machine # [805542.533803] machine systemd[1]: Reached target Preparation for Network.96machine # [805542.534724] machine systemd[1]: Starting Address configuration of eth1...97machine # [805542.535514] machine systemd[1]: Starting Extra networking commands....98machine # [805542.536691] machine systemd[1]: Starting Setup wg0 dummy interface...99machine # [805542.554700] machine network-addresses-eth1-start[95]: adding address 192.168.1.1/24... done100machine # [805542.556324] machine systemd[1]: Finished Setup wg0 dummy interface.101machine # [805542.557066] machine network-addresses-eth1-start[95]: adding address 2001:db8:1::1/64... done102machine # [805542.560248] machine systemd[1]: Finished Address configuration of eth1.103machine # [805542.589560] machine nsncd[80]: Sep 13 15:12:42.575 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"104machine # [805542.589730] machine systemd[1]: Started Name Service Cache Daemon (nsncd).105machine # [805542.589845] machine systemd[1]: Reached target Host and Network Name Lookups.106machine # [805542.589953] machine systemd[1]: Reached target User and Group Name Lookups.107machine # [805542.591953] machine systemd[1]: Starting User Login Management...108machine # [805542.595354] machine systemd[1]: Stopped target Host and Network Name Lookups.109machine # [805542.595420] machine systemd[1]: Stopping Host and Network Name Lookups...110machine # [805542.595482] machine systemd[1]: Stopped target User and Group Name Lookups.111machine # [805542.595515] machine systemd[1]: Stopping User and Group Name Lookups...112machine # [805542.595705] machine systemd[1]: Stopping Name Service Cache Daemon (nsncd)...113machine # [805542.600758] machine systemd[1]: nscd.service: Deactivated successfully.114machine # [805542.600980] machine systemd[1]: Stopped Name Service Cache Daemon (nsncd).115machine # [805542.603588] machine systemd[1]: Starting Name Service Cache Daemon (nsncd)...116machine # [805542.610626] machine systemd[1]: Finished Extra networking commands..117machine # [805542.610837] machine systemd[1]: Reached target Network.118machine # [805542.612136] machine systemd[1]: Starting Nginx Web Server...119router # [805542.432887] router systemd[1]: Finished Record System Boot/Shutdown in UTMP.120router # [805542.442787] router systemd[1]: Finished Save Transient machine-id to Disk.121router # [805542.443009] router systemd[1]: Finished Rebuild Journal Catalog.122router # [805542.444766] router systemd[1]: Starting Update is Completed...123router # [805542.455989] router systemd[1]: Finished Update is Completed.124machine # [805542.732649] machine systemd[1]: Started Name Service Cache Daemon (nsncd).125machine # [805542.733148] machine nsncd[178]: Sep 13 15:12:42.718 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"126machine # [805542.732724] machine systemd[1]: Reached target Host and Network Name Lookups.127machine # [805542.732772] machine systemd[1]: Reached target User and Group Name Lookups.128machine # [805542.733774] machine systemd[1]: Starting Permit User Sessions...129machine # [805542.772464] machine systemd[1]: Finished Permit User Sessions.130machine # [805542.774107] machine systemd[1]: Started Console Getty.131machine # [805542.774179] machine systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0132machine # [805542.774220] machine systemd[1]: Reached target Login Prompts.133router # [805543.072598] router systemd-networkd[70]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted134router # [805543.072689] router systemd-networkd[70]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted135router # [805543.081763] router systemd-networkd[70]: lo: Link UP136router # [805543.081769] router systemd-networkd[70]: lo: Gained carrier137router # [805543.081934] router systemd-networkd[70]: eth1: Configuring with /etc/systemd/network/40-eth1.network.138router # [805543.082368] router systemd[1]: Started Network Management.139router # [805543.082551] router systemd-networkd[70]: eth1: Link UP140router # [805543.082772] router systemd-networkd[70]: eth1: Gained carrier141router # [805543.083802] router systemd[1]: Starting Enable Persistent Storage in systemd-networkd...142router # [805543.146415] router systemd[1]: Finished Enable Persistent Storage in systemd-networkd.143router # [805543.341097] router systemd[1]: etc-machine\x2did.mount: Deactivated successfully.144router # [805543.553548] router systemd-resolved[64]: Positive Trust Anchors:145router # [805543.553561] router systemd-resolved[64]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d146router # [805543.553563] router systemd-resolved[64]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16147router # [805543.553598] router systemd-resolved[64]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test148router # [805543.575113] router systemd-resolved[64]: Using system hostname 'router'.149router # [805543.576447] router systemd[1]: Started Network Name Resolution.150router # [805543.576528] router systemd[1]: Reached target Network.151router # [805543.576596] router systemd[1]: Reached target System Initialization.152router # [805543.576649] router systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container153router # [805543.576676] router systemd[1]: Started Daily Cleanup of Temporary Directories.154router # [805543.576698] router systemd[1]: Reached target Timer Units.155router # [805543.576827] router systemd[1]: Listening on D-Bus System Message Bus Socket.156router # [805543.576953] router systemd[1]: Listening on Nix Daemon Socket.157router # [805543.577075] router systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.158router # [805543.577098] router systemd[1]: Reached target Socket Units.159router # [805543.577140] router systemd[1]: Reached target Basic System.160router # [805543.578589] router systemd[1]: Starting Import lastlog data into lastlog2 database...161router # [805543.579444] router systemd[1]: Starting Nginx Web Server...162router # [805543.580332] router systemd[1]: Starting Name Service Cache Daemon (nsncd)...163router # [805543.581496] router systemd[1]: Starting D-Bus System Message Bus...164machine # [805543.319994] machine systemd[1]: etc-machine\x2did.mount: Deactivated successfully.165machine # [805543.324972] machine systemd-logind[162]: New seat seat0.166machine # [805543.325961] machine systemd[1]: Starting D-Bus System Message Bus...167machine # [805543.326056] machine systemd[1]: Started User Login Management.168machine # [805543.326863] machine systemd[1]: Starting linger-users.service...169machine # [805543.370623] machine systemd[1]: linger-users.service: Deactivated successfully.170machine # [805543.370950] machine systemd[1]: Finished linger-users.service.171machine # [805543.492255] machine nginx-pre-start[206]: nginx: the configuration file /nix/store/54r7cn7nf1lhg8h93a748wrhvk75qy93-nginx.conf syntax is ok172machine # [805543.492876] machine nginx-pre-start[206]: nginx: configuration file /nix/store/54r7cn7nf1lhg8h93a748wrhvk75qy93-nginx.conf test is successful173machine # [805543.497730] machine systemd[1]: Started Nginx Web Server.174machine # [805543.498745] machine systemd[1]: Reached target Multi-User System.175router # [805543.599455] router systemd[1]: Finished Import lastlog data into lastlog2 database.176router # [805543.762585] router nsncd[87]: Sep 13 15:12:43.748 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"177router # [805543.762765] router systemd[1]: Started Name Service Cache Daemon (nsncd).178router # [805543.762872] router systemd[1]: Reached target Host and Network Name Lookups.179router # [805543.762977] router systemd[1]: Reached target User and Group Name Lookups.180router # [805543.788507] router systemd[1]: Starting User Login Management...181router # [805543.789787] router systemd[1]: Starting Permit User Sessions...182router # [805543.802397] router systemd[1]: Finished Permit User Sessions.183router # [805543.804110] router systemd[1]: Started Console Getty.184router # [805543.804183] router systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0185router # [805543.804223] router systemd[1]: Reached target Login Prompts.186machine # [805543.674570] machine dbus-broker-launch[202]: Looking up NSS user entry for 'systemd-timesync'...187machine # [805543.675329] machine dbus-broker-launch[202]: NSS returned no entry for 'systemd-timesync'188machine # [805543.675329] machine dbus-broker-launch[202]: Invalid user-name in /nix/store/jsvhnxdp6wph9dix78aixw2ljf3ln2k1-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"189machine # [805543.676077] machine systemd[1]: Started D-Bus System Message Bus.190machine # [805543.676651] machine systemd[1]: Startup finished in 1.811s.191machine # [805543.684264] machine dbus-broker-launch[202]: Ready192router # [805543.926430] router dbus-broker-launch[88]: Looking up NSS user entry for 'systemd-timesync'...193router # [805543.927623] router dbus-broker-launch[88]: NSS returned no entry for 'systemd-timesync'194router # [805543.927623] router dbus-broker-launch[88]: Invalid user-name in /nix/store/c77qyf0705hhphj05i1nb2p97d3fvsn2-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"195router # [805543.928131] router systemd[1]: Started D-Bus System Message Bus.196router # [805543.936610] router dbus-broker-launch[88]: Ready197router # [805544.352223] router systemd-networkd[70]: eth1: Gained IPv6LL198router # [805544.573859] router nginx-pre-start[117]: nginx: the configuration file /nix/store/9wr2iyk1slkr8d7izahmx7myb8ijpipb-nginx.conf syntax is ok199router # [805544.574275] router nginx-pre-start[117]: nginx: configuration file /nix/store/9wr2iyk1slkr8d7izahmx7myb8ijpipb-nginx.conf test is successful200router # [805544.580525] router systemd[1]: Started Nginx Web Server.201router # [805544.651356] router systemd-logind[106]: New seat seat0.202router # [805544.651584] router systemd[1]: Started User Login Management.203router # [805544.672829] router systemd[1]: Starting linger-users.service...204router # [805544.686343] router systemd[1]: linger-users.service: Deactivated successfully.205router # [805544.686523] router systemd[1]: Finished linger-users.service.206router # [805544.686935] router systemd[1]: Reached target Multi-User System.207router # [805544.687214] router systemd[1]: Startup finished in 2.830s.208router: (finished: waiting for unit multi-user.target, in 3.65 seconds)209router: waiting for TCP port 80 on localhost210Connection to localhost (::1) 80 port [tcp/http] succeeded!211router: (finished: waiting for TCP port 80 on localhost, in 1.02 seconds)212machine: waiting for unit multi-user.target213machine: (finished: waiting for unit multi-user.target, in 0.02 seconds)214machine: waiting for unit nginx.service215machine: (finished: waiting for unit nginx.service, in 0.01 seconds)216router: must succeed: ip -4 addr show eth1 | grep -oP '(?<=inet\s)\d+(\.\d+){3}'217router: (finished: must succeed: ip -4 addr show eth1 | grep -oP '(?<=inet\s)\d+(\.\d+){3}', in 0.01 seconds)218router: must succeed: ip -6 addr show eth1 | grep -oP '(?<=inet6\s)[0-9a-f:]+' | grep -v '^fe80' | head -1219router: (finished: must succeed: ip -6 addr show eth1 | grep -oP '(?<=inet6\s)[0-9a-f:]+' | grep -v '^fe80' | head -1, in 0.01 seconds)220Router IPv4: 192.168.1.2221Router IPv6: 2001:db8:1::2222machine: must succeed: systemctl restart nftables223machine: (finished: must succeed: systemctl restart nftables, in 0.17 seconds)224machine: waiting for unit nftables.service225machine: (finished: waiting for unit nftables.service, in 0.02 seconds)226machine: must succeed: nft list table inet user-firewall >&2227table inet user-firewall {228 chain output {229 type filter hook output priority filter; policy accept;230 oifname "lo" counter packets 0 bytes 0 accept comment "allow lo"231 oifname "tun*" counter packets 0 bytes 0 accept comment "allow tun*"232 oifname "tap*" counter packets 0 bytes 0 accept comment "allow tap*"233 oifname "wg*" counter packets 0 bytes 0 accept comment "allow wg*"234 oifname "tailscale*" counter packets 0 bytes 0 accept comment "allow tailscale*"235 oifname "zt*" counter packets 0 bytes 0 accept comment "allow zt*"236 oifname "vpn*" counter packets 0 bytes 0 accept comment "allow vpn*"237 oifname "ipsec*" counter packets 0 bytes 0 accept comment "allow ipsec*"238 oifname "nebula*" counter packets 0 bytes 0 accept comment "allow nebula*"239 oifname "tinc*" counter packets 0 bytes 0 accept comment "allow tinc*"240 oifname "edge*" counter packets 0 bytes 0 accept comment "allow edge*"241 oifname "hyprspace" counter packets 0 bytes 0 accept comment "allow hyprspace"242 oifname "ham0" counter packets 0 bytes 0 accept comment "allow ham0"243 oifname "easytier" counter packets 0 bytes 0 accept comment "allow easytier"244 oifname "mycelium" counter packets 0 bytes 0 accept comment "allow mycelium"245 meta skuid 1002 counter packets 0 bytes 0 reject comment "blocked user bob"246 }247}248machine: (finished: must succeed: nft list table inet user-firewall >&2, in 0.01 seconds)249machine: waiting for success: runuser -u alice -- curl -s http://127.0.0.1:8080250machine: (finished: waiting for success: runuser -u alice -- curl -s http://127.0.0.1:8080, in 0.02 seconds)251machine: must succeed: runuser -u alice -- curl -s http://192.168.1.2252machine: (finished: must succeed: runuser -u alice -- curl -s http://192.168.1.2, in 0.02 seconds)253machine: must succeed: runuser -u alice -- curl -s http://[2001:db8:1::2]254machine: (finished: must succeed: runuser -u alice -- curl -s http://[2001:db8:1::2], in 0.02 seconds)255machine: must succeed: runuser -u bob -- curl -s http://127.0.0.1:8080256machine # [805546.150442] machine systemd[1]: Stopping nftables firewall...257machine # [805546.218298] machine systemd[1]: nftables.service: Deactivated successfully.258machine # [805546.218496] machine systemd[1]: Stopped nftables firewall.259machine # [805546.219853] machine systemd[1]: Starting nftables firewall...260machine # [805546.305262] machine systemd[1]: Finished nftables firewall.261machine # [805546.342747] machine runuser[238]: pam_unix(runuser:session): session opened for user alice(uid=1001) by (uid=0)262machine # [805546.352179] machine runuser[238]: pam_unix(runuser:session): session closed for user alice263machine # [805546.360984] machine runuser[240]: pam_unix(runuser:session): session opened for user alice(uid=1001) by (uid=0)264machine # [805546.371634] machine runuser[240]: pam_unix(runuser:session): session closed for user alice265machine # [805546.381239] machine runuser[242]: pam_unix(runuser:session): session opened for user alice(uid=1001) by (uid=0)266machine # [805546.391759] machine runuser[242]: pam_unix(runuser:session): session closed for user alice267machine: (finished: must succeed: runuser -u bob -- curl -s http://127.0.0.1:8080, in 0.02 seconds)268machine: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://192.168.1.2 2>&1 || echo 'EXIT_CODE='$?269machine: (finished: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://192.168.1.2 2>&1 || echo 'EXIT_CODE='$?, in 0.02 seconds)270machine: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://[2001:db8:1::2] 2>&1 || echo 'EXIT_CODE='$?271machine # [805546.401706] machine runuser[244]: pam_unix(runuser:session): session opened for user bob(uid=1002) by (uid=0)272machine # [805546.412425] machine runuser[244]: pam_unix(runuser:session): session closed for user bob273machine # [805546.421449] machine runuser[247]: pam_unix(runuser:session): session opened for user bob(uid=1002) by (uid=0)274machine # [805546.430832] machine runuser[247]: pam_unix(runuser:session): session closed for user bob275machine # [805546.439907] machine runuser[250]: pam_unix(runuser:session): session opened for user bob(uid=1002) by (uid=0)276machine: (finished: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://[2001:db8:1::2] 2>&1 || echo 'EXIT_CODE='$?, in 1.03 seconds)277machine: must succeed: nft list table inet user-firewall278machine: (finished: must succeed: nft list table inet user-firewall, in 0.01 seconds)279machine: waiting for unit setup-wg0-interface.service280machine: (finished: waiting for unit setup-wg0-interface.service, in 0.02 seconds)281machine: waiting for unit nginx.service282machine: (finished: waiting for unit nginx.service, in 0.02 seconds)283machine: waiting for TCP port 8081 on 10.100.0.2284Connection to 10.100.0.2 8081 port [tcp/sunproxyadmin] succeeded!285machine: (finished: waiting for TCP port 8081 on 10.100.0.2, in 0.01 seconds)286machine: must succeed: ip link show wg0287machine: (finished: must succeed: ip link show wg0, in 0.01 seconds)288machine: must succeed: ip addr show wg0289machine: (finished: must succeed: ip addr show wg0, in 0.01 seconds)290machine: must succeed: runuser -u alice -- curl -s --interface wg0 http://10.100.0.2:8081/291machine: (finished: must succeed: runuser -u alice -- curl -s --interface wg0 http://10.100.0.2:8081/, in 0.02 seconds)292machine: must succeed: runuser -u alice -- curl -s --interface wg0 http://[fd00::2]:8081/293machine: (finished: must succeed: runuser -u alice -- curl -s --interface wg0 http://[fd00::2]:8081/, in 0.02 seconds)294machine: must succeed: runuser -u bob -- curl -s --interface wg0 http://10.100.0.2:8081/295machine: (finished: must succeed: runuser -u bob -- curl -s --interface wg0 http://10.100.0.2:8081/, in 0.02 seconds)296machine: must succeed: runuser -u bob -- curl -s --interface wg0 http://[fd00::2]:8081/297machine: (finished: must succeed: runuser -u bob -- curl -s --interface wg0 http://[fd00::2]:8081/, in 0.02 seconds)298machine: must succeed: nft list table inet user-firewall | grep -E 'oifname.*wg' >&2299 oifname "wg*" counter packets 1 bytes 56 accept comment "allow wg*"300machine: (finished: must succeed: nft list table inet user-firewall | grep -E 'oifname.*wg' >&2, in 0.01 seconds)301(finished: run the VM test script, in 6.20 seconds)302test script finished in 6.26s303cleanup304kill NspawnMachine (pid 52)305kill NspawnMachine (pid 53)306Container machine terminated by signal KILL.307Container router terminated by signal KILL.308(finished: cleanup, in 0.43 seconds)