these 27 derivations will be built: /nix/store/vng9d0jf36sll26h81vp8m817j00q713-nss-cacert-3.126.drv /nix/store/7wxgc91r9br5nbh27kpwm4jd0yi05k33-unit-nix-daemon.service.drv /nix/store/49r8ikxl0zyymdv81i5s8nd3v2fkll3q-system-units.drv /nix/store/jy383vlm49w4p3hv0w118r4gbb8z93zy-etc.drv /nix/store/1qmg0p3znf5jvx060dgjyi5q6wp1yz58-activate.drv /nix/store/k8h26qgb2hmnwk5xr1mlydchsr81qd7p-nginx.conf.drv /nix/store/kkr2lk0j9wldmq5jdv2jmsd443xmrvyi-unit-script-nginx-pre-start.drv /nix/store/h7izv6bsgw1j6q90bkl3fmilbxc56qng-unit-nginx.service.drv /nix/store/6zsabmr9vx06xwwllhcwgs08z5q6ghm0-ca.json.drv /nix/store/h11n9rm3hch3x3iyg2y8fvh7lssgixa4-X-Restart-Triggers-step-ca.drv /nix/store/p92h8bwg9bfhfmn3qm5gj6ywk45fmnld-unit-step-ca.service.drv /nix/store/6kzgmvafjfl35imcq5s1ykz2wld9lh7v-system-units.drv /nix/store/cysk5bv6xdcl1w50vj4kzn8dbnz65dwa-etc.drv /nix/store/h76qakg5yxfar1wwz7krgp0yqxfzhp6w-decrypt-age-secrets.drv /nix/store/3ddbpfvkpja1ikjxax90c0ql04g55817-activate.drv /nix/store/4ad9slz4nbsvilrg9nzpkzb1rm07gnc8-system-units.drv /nix/store/k21q2f9d03km6hnwzmv3rs1w4chj03zs-etc.drv /nix/store/754pwnkllmm4aqixlkw44i8mwbghkj83-activate.drv /nix/store/55ksnhvdzqxxrd3ar04v0zg0fqmkg4ff-nixos-system-server-test.drv /nix/store/bnijyvpk60wzqza8fpqbd1kf3ds1nbd7-nixos-system-client-test.drv /nix/store/gnnaydp75jz7hqhhymlnsw3kcmi1ni23-closure-info.drv /nix/store/i1cv2pcpik4x0965ay7v2jx8lhg1c9k5-closure-info.drv /nix/store/fnyqwd5nimwzrg8fnfcisfyc72305ibm-dry-activate.drv /nix/store/yjxqkcir2bv01ivlw3325cscfy0rq1cz-nixos-system-ca-test.drv /nix/store/l5q9w4yn68yx3g7rgwvkqbss6k44341v-closure-info.drv /nix/store/jvcg8ibn2z9ap7il6z16zpgk05afpx17-nixos-test-driver-certificates.drv /nix/store/5z1xzai8v5skgx3c19b602zcik2cj5q3-container-test-run-certificates.drv building '/nix/store/k8h26qgb2hmnwk5xr1mlydchsr81qd7p-nginx.conf.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/6zsabmr9vx06xwwllhcwgs08z5q6ghm0-ca.json.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/vng9d0jf36sll26h81vp8m817j00q713-nss-cacert-3.126.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/h76qakg5yxfar1wwz7krgp0yqxfzhp6w-decrypt-age-secrets.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/k8h26qgb2hmnwk5xr1mlydchsr81qd7p-nginx.conf.drv' nginx.conf> nginx.conf> ==================== Results =================== nginx.conf> No issues found. nginx.conf> nginx.conf> ==================== Summary =================== nginx.conf> Total issues: nginx.conf> Unspecified: 0 nginx.conf> Low: 0 nginx.conf> Medium: 0 nginx.conf> High: 0 nginx.conf> building '/nix/store/kkr2lk0j9wldmq5jdv2jmsd443xmrvyi-unit-script-nginx-pre-start.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/6zsabmr9vx06xwwllhcwgs08z5q6ghm0-ca.json.drv' ca.json> structuredAttrs is enabled building '/nix/store/h11n9rm3hch3x3iyg2y8fvh7lssgixa4-X-Restart-Triggers-step-ca.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/vng9d0jf36sll26h81vp8m817j00q713-nss-cacert-3.126.drv' nss-cacert-3.126> Running phase: unpackPhase nss-cacert-3.126> Running phase: patchPhase nss-cacert-3.126> Running phase: updateAutotoolsGnuConfigScriptsPhase nss-cacert-3.126> Running phase: configurePhase nss-cacert-3.126> no configure script, doing nothing nss-cacert-3.126> Running phase: buildPhase nss-cacert-3.126> Running phase: installPhase nss-cacert-3.126> Running phase: fixupPhase nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/3j1nfyf30wkxax4ggwx263vrwgm8hdi4-nss-cacert-3.126 nss-cacert-3.126> checking for references to /build/ in /nix/store/3j1nfyf30wkxax4ggwx263vrwgm8hdi4-nss-cacert-3.126... nss-cacert-3.126> patching script interpreter paths in /nix/store/3j1nfyf30wkxax4ggwx263vrwgm8hdi4-nss-cacert-3.126 nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/15x2lw7d29mcnipaqrzhp4l03vcdm6yf-nss-cacert-3.126-unbundled nss-cacert-3.126> checking for references to /build/ in /nix/store/15x2lw7d29mcnipaqrzhp4l03vcdm6yf-nss-cacert-3.126-unbundled... nss-cacert-3.126> patching script interpreter paths in /nix/store/15x2lw7d29mcnipaqrzhp4l03vcdm6yf-nss-cacert-3.126-unbundled nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/pr4v9r0nvkgh5w1vnnfr8363fjwcm339-nss-cacert-3.126-p11kit nss-cacert-3.126> checking for references to /build/ in /nix/store/pr4v9r0nvkgh5w1vnnfr8363fjwcm339-nss-cacert-3.126-p11kit... nss-cacert-3.126> patching script interpreter paths in /nix/store/pr4v9r0nvkgh5w1vnnfr8363fjwcm339-nss-cacert-3.126-p11kit building '/nix/store/h76qakg5yxfar1wwz7krgp0yqxfzhp6w-decrypt-age-secrets.drv' nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/5rsjgn5rb2skbgbi425m69hl03pyhjhy-nss-cacert-3.126-hashed nss-cacert-3.126> checking for references to /build/ in /nix/store/5rsjgn5rb2skbgbi425m69hl03pyhjhy-nss-cacert-3.126-hashed... nss-cacert-3.126> patching script interpreter paths in /nix/store/5rsjgn5rb2skbgbi425m69hl03pyhjhy-nss-cacert-3.126-hashed building '/nix/store/fnyqwd5nimwzrg8fnfcisfyc72305ibm-dry-activate.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/7wxgc91r9br5nbh27kpwm4jd0yi05k33-unit-nix-daemon.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/h11n9rm3hch3x3iyg2y8fvh7lssgixa4-X-Restart-Triggers-step-ca.drv' building '/nix/store/p92h8bwg9bfhfmn3qm5gj6ywk45fmnld-unit-step-ca.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/kkr2lk0j9wldmq5jdv2jmsd443xmrvyi-unit-script-nginx-pre-start.drv' building '/nix/store/h7izv6bsgw1j6q90bkl3fmilbxc56qng-unit-nginx.service.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/fnyqwd5nimwzrg8fnfcisfyc72305ibm-dry-activate.drv' building '/nix/store/7wxgc91r9br5nbh27kpwm4jd0yi05k33-unit-nix-daemon.service.drv' building '/nix/store/49r8ikxl0zyymdv81i5s8nd3v2fkll3q-system-units.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/4ad9slz4nbsvilrg9nzpkzb1rm07gnc8-system-units.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/p92h8bwg9bfhfmn3qm5gj6ywk45fmnld-unit-step-ca.service.drv' building '/nix/store/h7izv6bsgw1j6q90bkl3fmilbxc56qng-unit-nginx.service.drv' building '/nix/store/6kzgmvafjfl35imcq5s1ykz2wld9lh7v-system-units.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/49r8ikxl0zyymdv81i5s8nd3v2fkll3q-system-units.drv' building '/nix/store/jy383vlm49w4p3hv0w118r4gbb8z93zy-etc.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/4ad9slz4nbsvilrg9nzpkzb1rm07gnc8-system-units.drv' building '/nix/store/k21q2f9d03km6hnwzmv3rs1w4chj03zs-etc.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/6kzgmvafjfl35imcq5s1ykz2wld9lh7v-system-units.drv' building '/nix/store/cysk5bv6xdcl1w50vj4kzn8dbnz65dwa-etc.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/jy383vlm49w4p3hv0w118r4gbb8z93zy-etc.drv' building '/nix/store/1qmg0p3znf5jvx060dgjyi5q6wp1yz58-activate.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/k21q2f9d03km6hnwzmv3rs1w4chj03zs-etc.drv' building '/nix/store/754pwnkllmm4aqixlkw44i8mwbghkj83-activate.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/cysk5bv6xdcl1w50vj4kzn8dbnz65dwa-etc.drv' building '/nix/store/3ddbpfvkpja1ikjxax90c0ql04g55817-activate.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/1qmg0p3znf5jvx060dgjyi5q6wp1yz58-activate.drv' building '/nix/store/bnijyvpk60wzqza8fpqbd1kf3ds1nbd7-nixos-system-client-test.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/754pwnkllmm4aqixlkw44i8mwbghkj83-activate.drv' building '/nix/store/55ksnhvdzqxxrd3ar04v0zg0fqmkg4ff-nixos-system-server-test.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/3ddbpfvkpja1ikjxax90c0ql04g55817-activate.drv' building '/nix/store/yjxqkcir2bv01ivlw3325cscfy0rq1cz-nixos-system-ca-test.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/bnijyvpk60wzqza8fpqbd1kf3ds1nbd7-nixos-system-client-test.drv' nixos-system-client-test> structuredAttrs is enabled building '/nix/store/gnnaydp75jz7hqhhymlnsw3kcmi1ni23-closure-info.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/55ksnhvdzqxxrd3ar04v0zg0fqmkg4ff-nixos-system-server-test.drv' nixos-system-server-test> structuredAttrs is enabled building '/nix/store/i1cv2pcpik4x0965ay7v2jx8lhg1c9k5-closure-info.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/yjxqkcir2bv01ivlw3325cscfy0rq1cz-nixos-system-ca-test.drv' nixos-system-ca-test> structuredAttrs is enabled building '/nix/store/l5q9w4yn68yx3g7rgwvkqbss6k44341v-closure-info.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/gnnaydp75jz7hqhhymlnsw3kcmi1ni23-closure-info.drv' closure-info> structuredAttrs is enabled building '/nix/store/i1cv2pcpik4x0965ay7v2jx8lhg1c9k5-closure-info.drv' closure-info> structuredAttrs is enabled building '/nix/store/l5q9w4yn68yx3g7rgwvkqbss6k44341v-closure-info.drv' closure-info> structuredAttrs is enabled building '/nix/store/jvcg8ibn2z9ap7il6z16zpgk05afpx17-nixos-test-driver-certificates.drv' on 'ssh-ng://builder@build01.clan.lol' warning: SQLite database '/nix/var/nix/db/db.sqlite' is busy building '/nix/store/jvcg8ibn2z9ap7il6z16zpgk05afpx17-nixos-test-driver-certificates.drv' nixos-test-driver-certificates> Running type check (enable/disable: config.skipTypeCheck) nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck nixos-test-driver-certificates> Success: no issues found in 1 source file building '/nix/store/5z1xzai8v5skgx3c19b602zcik2cj5q3-container-test-run-certificates.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/5z1xzai8v5skgx3c19b602zcik2cj5q3-container-test-run-certificates.drv' container-test-run-certificates> additionally exposed symbols: container-test-run-certificates> ca, client, server, container-test-run-certificates> start_all, machines, driver, Machine, wait_for_signal container-test-run-certificates> Starting ca container-test-run-certificates> Starting client container-test-run-certificates> Starting server container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/gfa06bliwx12q5p6b9nyhxic9y568w4x-nixos-system-ca-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if4: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether 42:06:76:42:a9:8d brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.4 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture arm64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (aarch64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/fl0k50cdb33a5xxzlzmz5782yw66rj4r-coreutils-9.11/bin/sleep 999999999 && echo ce5c2435-3d6e-43a4-84a1-2b6ed4d4676a' container-test-run-certificates> Running as unit: run-p468-i18836163.service; invocation ID: be88d01bab34478b9dfaa3a33c27de53 container-test-run-certificates> To attach to container ca run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*ce5c2435-3d6e-43a4-84a1-2b6ed4d4676a') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/76jq0mngg7m8zv5yjz1qgg0xspzi8x2w-python3-3.13.15/bin/python3.13 /nix/store/1v002aslhnn1b7kr1fq8m14lldran2b0-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py ce5c2435-3d6e-43a4-84a1-2b6ed4d4676a container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/l9qi9pwd9wyi8yg0gl96g6b2wmzw7m97-nixos-system-client-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if5: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether 2a:42:35:28:b1:2f brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.4 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture arm64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (aarch64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/fl0k50cdb33a5xxzlzmz5782yw66rj4r-coreutils-9.11/bin/sleep 999999999 && echo b3e72f27-9db8-4c16-94da-69f37960c95d' container-test-run-certificates> Running as unit: run-p304-i18836166.service; invocation ID: 41ed8065c6c749a49bccd353b4c0c329 container-test-run-certificates> To attach to container client run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*b3e72f27-9db8-4c16-94da-69f37960c95d') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/76jq0mngg7m8zv5yjz1qgg0xspzi8x2w-python3-3.13.15/bin/python3.13 /nix/store/1v002aslhnn1b7kr1fq8m14lldran2b0-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py b3e72f27-9db8-4c16-94da-69f37960c95d container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/334yy3dcg9igk24mziiyacwpck7phq5z-nixos-system-server-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if3: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether be:aa:dd:39:86:e7 brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.4 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture arm64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (aarch64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/fl0k50cdb33a5xxzlzmz5782yw66rj4r-coreutils-9.11/bin/sleep 999999999 && echo c60e2bfb-70cd-4362-9fdc-c69ac746ff66' container-test-run-certificates> Running as unit: run-p394-i18836170.service; invocation ID: f80bf16e3ddc494eac04310a085c995a container-test-run-certificates> To attach to container server run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*c60e2bfb-70cd-4362-9fdc-c69ac746ff66') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/76jq0mngg7m8zv5yjz1qgg0xspzi8x2w-python3-3.13.15/bin/python3.13 /nix/store/1v002aslhnn1b7kr1fq8m14lldran2b0-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py c60e2bfb-70cd-4362-9fdc-c69ac746ff66 container-test-run-certificates> + systemctl restart acme-order-renew-ca.foo.service container-test-run-certificates> + systemctl restart acme-test.foo.service container-test-run-certificates> client: waiting for success: curl -v https://test.foo container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1007 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [111 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Sep 21 00:09:32 2026 GMT container-test-run-certificates> * expire date: Oct 21 00:09:32 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 585aa7 container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1007 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [111 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Sep 21 00:09:32 2026 GMT container-test-run-certificates> * expire date: Oct 21 00:09:32 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 585aa7 container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1007 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [112 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Sep 21 00:09:32 2026 GMT container-test-run-certificates> * expire date: Oct 21 00:09:32 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 585aa7 container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [932 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [78 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Sep 21 00:08:46 2026 GMT container-test-run-certificates> * expire date: Dec 20 00:09:46 2026 GMT container-test-run-certificates> * issuer: CN=Clan Intermediate CA container-test-run-certificates> * Certificate level 0: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 1: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 2: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 0 container-test-run-certificates> * SSL certificate verified via OpenSSL. container-test-run-certificates> * Established connection to test.foo (192.168.1.3 port 443) from 192.168.1.2 port 59698 container-test-run-certificates> % Total % Received % Xferd Average Speed Time Time Time Current container-test-run-certificates> Dload Upload Total Spent Left Speed container-test-run-certificates> 0 0 0 0 0 0 0 0 0* using HTTP/2 container-test-run-certificates> * [HTTP/2] [1] OPENED stream for https://test.foo/ container-test-run-certificates> * [HTTP/2] [1] [:method: GET] container-test-run-certificates> * [HTTP/2] [1] [:scheme: https] container-test-run-certificates> * [HTTP/2] [1] [:authority: test.foo] container-test-run-certificates> * [HTTP/2] [1] [:path: /] container-test-run-certificates> * [HTTP/2] [1] [user-agent: curl/8.22.0] container-test-run-certificates> * [HTTP/2] [1] [accept: */*] container-test-run-certificates> } [5 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> * Request completely sent off container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> { [5 bytes data] container-test-run-certificates> 100 20 100 20 0 0 671 0 0 container-test-run-certificates> * Connection #0 to host test.foo:443 left intact container-test-run-certificates> (finished: waiting for success: curl -v https://test.foo, in 3.20 seconds) container-test-run-certificates> + openssl s_client -connect test.foo:443 -servername test.foo container-test-run-certificates> + openssl x509 -text -noout container-test-run-certificates> Certificate: container-test-run-certificates> Data: container-test-run-certificates> Version: 3 (0x2) container-test-run-certificates> Serial Number: container-test-run-certificates> 12:3e:de:e5:28:7e:a7:43:bf:d9:82:8b:2f:9c:4f:cb container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Issuer: CN=Clan Intermediate CA container-test-run-certificates> Validity container-test-run-certificates> Not Before: Sep 21 00:08:46 2026 GMT container-test-run-certificates> Not After : Dec 20 00:09:46 2026 GMT container-test-run-certificates> Subject: CN=test.foo container-test-run-certificates> Subject Public Key Info: container-test-run-certificates> Public Key Algorithm: id-ecPublicKey container-test-run-certificates> Public-Key: (256 bit) container-test-run-certificates> pub: container-test-run-certificates> 04:e4:7e:98:00:76:73:a4:ea:c3:8a:85:1e:57:63: container-test-run-certificates> 32:9a:38:59:cf:a2:1a:5c:ce:f2:1e:b0:8c:a9:2e: container-test-run-certificates> 34:a6:ab:fd:76:8a:42:18:32:88:3e:41:e9:0d:49: container-test-run-certificates> ee:9d:0a:c0:76:d8:2b:69:21:f7:c2:14:2c:ca:bf: container-test-run-certificates> c0:c9:d0:77:a9 container-test-run-certificates> ASN1 OID: prime256v1 container-test-run-certificates> NIST CURVE: P-256 container-test-run-certificates> X509v3 extensions: container-test-run-certificates> X509v3 Key Usage: critical container-test-run-certificates> Digital Signature container-test-run-certificates> X509v3 Extended Key Usage: container-test-run-certificates> TLS Web Server Authentication, TLS Web Client Authentication container-test-run-certificates> X509v3 Subject Key Identifier: container-test-run-certificates> BF:25:C0:06:39:4D:8E:ED:AF:DF:3C:7D:0E:38:D2:D6:1D:A7:51:57 container-test-run-certificates> X509v3 Authority Key Identifier: container-test-run-certificates> 75:2C:C5:60:38:64:86:10:3E:3A:81:DA:99:6A:8D:E8:29:67:C0:54 container-test-run-certificates> X509v3 Subject Alternative Name: container-test-run-certificates> DNS:test.foo container-test-run-certificates> 1.3.6.1.4.1.37476.9000.64.1: container-test-run-certificates> 0......acme.. container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Signature Value: container-test-run-certificates> 30:46:02:21:00:98:10:f8:b5:32:b3:6f:33:a1:c6:0f:63:78: container-test-run-certificates> d6:45:c7:a4:13:0d:14:b6:c8:8c:22:cd:08:79:d6:b4:3e:14: container-test-run-certificates> 27:02:21:00:f3:86:f9:a5:70:88:b2:b9:31:00:c9:88:af:c8: container-test-run-certificates> bd:9b:e7:89:14:8a:65:40:05:77:76:3a:91:6c:25:4f:bf:ca container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> post-build step Upload to niks3: ok time=2026-09-21T00:09:50.294Z level=INFO msg="Uploading 0 paths to niks3.clan.lol (1 already cached)" time=2026-09-21T00:09:50.667Z level=INFO msg="Uploading 1 narinfos" time=2026-09-21T00:09:51.267Z level=INFO msg="Upload complete. (1.054s)"