these 98 derivations will be built: /nix/store/027zd470i67kd3cry02h21hzf4xyghwb-firewall-start.drv /nix/store/6msm6j949n45b8g90idg1bgxzgc068hl-system-path.drv /nix/store/z8rmlbdsagnb07pj23nrzflx7dkkp29y-dbus-1.drv /nix/store/0775k4cvwl2dwxpqdzlmii53nv0wliia-X-Restart-Triggers-dbus-broker.drv /nix/store/0cxd5cv5gll0m47xq1g3cc7yr3mlrr8r-users-groups.json.drv /nix/store/94gc3k1fdq1hlrsncdglp0r538gj8adb-string-hosts.drv /nix/store/bin6q8vg2iq44dk2mmrf3p2p6i5cgz5j-extra-hosts.drv /nix/store/0pfgq0982c1lcxmqwwylrnazd04xw0fb-hosts.drv /nix/store/jjah74p364n2d9l16h6pdgvjrjc6yk8a-nginx.conf.drv /nix/store/0vb7d99sydvy15zs44lj5vmdahnhf951-unit-script-nginx-pre-start.drv /nix/store/1dvr2dncn0pdn6akg08r488ldvaaakrd-string-hosts.drv /nix/store/11x5w69yns8ss0ib3yg2zmvzmhcknmd1-hosts.drv /nix/store/3ij7nazyxni3jjkgzh6pvzryykdi543q-unit-script-acme-ca.foo-start.drv /nix/store/z8f3zyr16gq4ha8mv560f3d2p3g4z4c8-X-Restart-Triggers-acme-ca.foo.drv /nix/store/5cd9cdbrnwy7x20w7mqyy2snc1ghyj94-unit-acme-ca.foo.service.drv /nix/store/ffi9inm3kdr63qr1cr2alwqj0bqlrngw-firewall-reload.drv /nix/store/723sfplqmz2ala7f6mvz8izwbrc13sif-unit-firewall.service.drv /nix/store/9s1vzis0v0cfc49q95vhjbxckmwlmvi9-unit-acme-renew-ca.foo.timer.drv /nix/store/fp2in0k0gk79jxnfvyz2fz29iqa4y27h-cacert-extra-certificates-bundle.crt.drv /nix/store/whky6szigr17iqdxr04k2j3ddk96afk3-cacert-blocklist.txt.drv /nix/store/cll406mih5p4iilp2s5yl4zfdf64yy0z-nss-cacert-3.126.drv /nix/store/b76c6a10l09r45c2gbpw6fs97kk4wj9p-unit-nix-daemon.service.drv /nix/store/gg206ryqzk5nj6y0v9rb660w1zgrr2ls-nixos-tmpfiles.d.drv /nix/store/9663888i3idg8pa0czqxvl7lyk0s0lhh-tmpfiles.d.drv /nix/store/3w4cw75nsibp1j10p62sfq507vfsp59m-X-Restart-Triggers-systemd-tmpfiles-resetup.drv /nix/store/ccfv870v6nagy9brm49akxcxxlrrv8dc-unit-systemd-tmpfiles-resetup.service.drv /nix/store/j7rfjd3ml948qzk7w53l2p7lwinbjyn4-ca.json.drv /nix/store/64gr21j8v5b5jhj8jdvzch1szb9y5kv6-X-Restart-Triggers-step-ca.drv /nix/store/f8h02ik95q7aj0hyds1ad8r24paqhfq0-unit-step-ca.service.drv /nix/store/fn4g4rwdy65c51c61wh8357mx60w5qdm-unit-acme-account-d22a46d9459bf683a338.target.drv /nix/store/h8gsny059y20z5wkh9fv7rn8l13gv0n6-unit-nginx-config-reload.service.drv /nix/store/fwdhmj5h94jzn3sxkl62daxxwh5awsxi-acme-setup-privileged.drv /nix/store/j43pxqdpsac7bkn7zxca23hwbgbcq8c8-unit-acme-setup.service.drv /nix/store/81j4m9kqqglam2y00ir2ddv289x3rpw7-acme-postrun.drv /nix/store/bvphg1c0va1h62nmw8c3i7c6yxsp7a22-unit-script-acme-order-renew-ca.foo-start.drv /nix/store/qv49fz9603d5xyyr6ds3bbcpsdjfzba0-unit-acme-order-renew-ca.foo.service.drv /nix/store/z9prqd2cr5r4f299436xhpnldij9wkcy-nginx.conf.drv /nix/store/7557fygs4rxxb7vcl3csr2ch81kbvdsb-unit-script-nginx-pre-start.drv /nix/store/s0qjvdwv2bf3g9qqppxz5ph7qbw7ckf9-unit-nginx.service.drv /nix/store/axcxh6vbr244z6aavv571v16vx8aabbj-system-path.drv /nix/store/vp4awma13kdlcn41yksnfkmz6kar3yyc-dbus-1.drv /nix/store/9xn7qrhpszghk5yxjbwp04irczh9w9kq-X-Restart-Triggers-dbus-broker.drv /nix/store/s5h3fgl2xs4i3n5ns0hxlqpw5cy8yqx5-unit-dbus-broker.service.drv /nix/store/1bc27lzd0zz9piv48c7hfgdwq5cmmxbf-system-units.drv /nix/store/309jp4cqaasd131isp36i4nsd74zj23d-etc-hostname.drv /nix/store/664k9kqspgr3fbsc97adraja6qq1j8zf-unit-40-eth1.network.drv /nix/store/7wnyrsbm9m43s31wqqzcx5fc9vrdx2si-system-path.drv /nix/store/r3d0f59np1kq8cghwval1z8gpgk0mp9j-dbus-1.drv /nix/store/yf2vzfz1hqq0apsrvi1g7d6kbzjbnbzm-X-Restart-Triggers-dbus-broker.drv /nix/store/7dg5q7mxkl3243g1zmmhybk3j4sg5h96-unit-dbus-broker.service.drv /nix/store/9rmkg9d08q456n5wj4r8szsfihijnix0-user-units.drv /nix/store/9k3yn74rfmdsq82ykyyk959y02klmvi5-acme-setup-privileged.drv /nix/store/1zqg4nps0s028jy4pqcnmq4f513hysv5-unit-acme-setup.service.drv /nix/store/1p6g6y731g8f3wpvszznb63nm1xp19jy-acme-postrun.drv /nix/store/vhyn4qhn19vlkcf5xqi2w6g4pkd9fjwh-unit-script-acme-order-renew-test.foo-start.drv /nix/store/8x7ch619622ah11p62ilfbg9kfl9rq9c-unit-acme-order-renew-test.foo.service.drv /nix/store/9yzv2bryd6cwh0qcgg09gyzd6c1d2a5b-unit-script-acme-test.foo-start.drv /nix/store/gc3c5a3kddxihv6v254iq1ni5d5xpblb-X-Restart-Triggers-acme-test.foo.drv /nix/store/b63fi8cnrijyz4vdvw63lhw0gm8gs3ws-unit-acme-test.foo.service.drv /nix/store/dqszp0ypiwx03bayl09avwlkjr9awpjh-unit-nginx-config-reload.service.drv /nix/store/i95v9bl274mgmra8nwddfv89dgy5k21g-unit-acme-account-2c44cb477b4787b2cf13.target.drv /nix/store/jwmg8w6fzhvi52x331q04zw2za60p1iw-unit-dbus-broker.service.drv /nix/store/mxrvds6sg2zibqf8snwzlnqkv2jklcrr-unit-nginx.service.drv /nix/store/q76xn0fvifqzh836kf2p5zv1q92857wn-X-Reload-Triggers-systemd-networkd.drv /nix/store/qsdm6239ijj9b2svmazkcj4by6f4piaq-unit-systemd-networkd.service.drv /nix/store/w1m78zzsg0dlzb1bqr9f9k60wsdzrndm-unit-acme-renew-test.foo.timer.drv /nix/store/ivkgi008ifndlpdhcndy2c6vchz5qvvg-system-units.drv /nix/store/ph75v0sjfxi83biqmv1jl67a6wiqr7c0-etc-systemd-system.conf.drv /nix/store/l97p1hz7w2msax7d18lgpba0sn9dfqnb-etc.drv /nix/store/1ck8x8cq8dcsxr24wmxpa6khjr8djk66-activate.drv /nix/store/27q1ii383r980ga5xmq13s7pn53lhm8p-unit-dbus-broker.service.drv /nix/store/gkfdqka2z7w3nc8rqpdwd68ysfpqzzdy-etc-hostname.drv /nix/store/mg2ryqf03si8cary005rgaxq996gx91m-unit-dbus-broker.service.drv /nix/store/hhvnk3wwwpl3hvjx5a9mq5g77gblzjqn-user-units.drv /nix/store/i129bm7qcv58ipqlxdyrn3319bdr46gk-system-units.drv /nix/store/d55j86y8p4va1gwp6jvsa73jp0cnvgql-string-hosts.drv /nix/store/lb24k162gmqrac5mqgidrfq6zshqjs4h-hosts.drv /nix/store/28k4k8i3jl6jjryxkvnbrjdyg8a25aw2-etc.drv /nix/store/358raw0d8bacilkak497r2brqjc09adi-decrypt-age-secrets.drv /nix/store/cvhhkkxnzpkk2ks4pqv4wcb2cy1w12p2-users-groups.json.drv /nix/store/z6l4xqbrxxl5gi77jm31dmn43b225kd7-unit-dbus-broker.service.drv /nix/store/l8nz6ggqmqw1s04qr6x41pi61cs5n8ni-user-units.drv /nix/store/vzsbxz2896177cf8sxrpfxsdcwlhaazd-etc-hostname.drv /nix/store/vvvkfrjyf6jni9w1b8givkaiwsafb98h-etc.drv /nix/store/36hwp64c6j2qp7iz7mg6xx4zkz0l4dk2-activate.drv /nix/store/8b7hgqzjvfyan38z2bkdifdavrxbksba-dry-activate.drv /nix/store/gbh8hlr6xihpc6hfvbfs3v69z676b5wm-nixos-system-ca-test.drv /nix/store/42vi59m63k9i5fz785cvydjvi4vwwsmq-run-ca-nspawn.drv /nix/store/qxmsra7blqdjf5dk2pm9qadnz33pngf6-users-groups.json.drv /nix/store/a52jdkaa6ddrcnhg4lblykxskm6qb9xs-activate.drv /nix/store/66m4dnf5ii61a18snrxdyr7hjkj43ayj-nixos-system-client-test.drv /nix/store/f5f18ky8kz5fnrs856mya7msvi50b49d-nixos-system-server-test.drv /nix/store/9n0hcbk6md8a1hhrpy97b3p5ag72iwjg-run-server-nspawn.drv /nix/store/b9yiz2k0gkk8kf2yis6cna4f3q0nd8v3-test-script.drv /nix/store/c6cbnh9623f012prdgc6652p9xxc5qbz-run-client-nspawn.drv /nix/store/g6s1vbz31r679d0d2wnxbx95smgcvzl3-driverConfiguration.json.drv /nix/store/lys7y7yrbsyh7rhzz3nr6gn6kb3z0wak-nixos-test-driver-certificates.drv /nix/store/dhiw81m79hcl6gb1n32zbncdy2pc6idi-container-test-run-certificates.drv these 11 paths will be fetched (0.0 KiB download, 77.3 MiB unpacked): /nix/store/pkjjvxgc433sy61g22v4dxp3fn2dkblh-dry-activate /nix/store/rfzh9mm3gm7dgcw1bpig5dpjmd6931jm-dry-activate /nix/store/iajmgb4jycq2h6qgz27r2lswvh5i7rnb-openssl-3.6.4-man /nix/store/bkgsg2ylsmd30cf27zdvhmynil0q5nz4-python3.14-buildcatrust-0.5.1 /nix/store/5gv0zw4zwgbw0p5his6s6855q1sad691-step-ca-0.30.2 /nix/store/fxpjcpkqwv5qihpm0vlh329c4fi7ry8n-system-generators /nix/store/ljfkljzf5gjspr5iis7sijg8b922ann8-system-shutdown /nix/store/rzi014k242gw5l572699l68b3gc9rgrv-user-generators /nix/store/8pmxw038djpr2i8g8v7grwc9lp1mcjfy-users-groups.json /nix/store/y9ahz5mm5nz0cddk6awawmmaab3rwzdn-users-groups.json /nix/store/qnmzvrh9vrqkkj5ar02rbh87psh66465-vars-check-certificates building '/nix/store/b9yiz2k0gkk8kf2yis6cna4f3q0nd8v3-test-script.drv' building '/nix/store/309jp4cqaasd131isp36i4nsd74zj23d-etc-hostname.drv' building '/nix/store/gkfdqka2z7w3nc8rqpdwd68ysfpqzzdy-etc-hostname.drv' building '/nix/store/vzsbxz2896177cf8sxrpfxsdcwlhaazd-etc-hostname.drv' building '/nix/store/ph75v0sjfxi83biqmv1jl67a6wiqr7c0-etc-systemd-system.conf.drv' building '/nix/store/jjah74p364n2d9l16h6pdgvjrjc6yk8a-nginx.conf.drv' building '/nix/store/z9prqd2cr5r4f299436xhpnldij9wkcy-nginx.conf.drv' building '/nix/store/664k9kqspgr3fbsc97adraja6qq1j8zf-unit-40-eth1.network.drv' building '/nix/store/bin6q8vg2iq44dk2mmrf3p2p6i5cgz5j-extra-hosts.drv' building '/nix/store/gg206ryqzk5nj6y0v9rb660w1zgrr2ls-nixos-tmpfiles.d.drv' etc-hostname> structuredAttrs is enabled etc-hostname> structuredAttrs is enabled etc-hostname> structuredAttrs is enabled etc-systemd-system.conf> structuredAttrs is enabled extra-hosts> structuredAttrs is enabled nginx.conf> structuredAttrs is enabled nginx.conf> structuredAttrs is enabled nixos-tmpfiles.d> structuredAttrs is enabled test-script> structuredAttrs is enabled unit-40-eth1.network> structuredAttrs is enabled building '/nix/store/gc3c5a3kddxihv6v254iq1ni5d5xpblb-X-Restart-Triggers-acme-test.foo.drv' building '/nix/store/81j4m9kqqglam2y00ir2ddv289x3rpw7-acme-postrun.drv' building '/nix/store/027zd470i67kd3cry02h21hzf4xyghwb-firewall-start.drv' building '/nix/store/w1m78zzsg0dlzb1bqr9f9k60wsdzrndm-unit-acme-renew-test.foo.timer.drv' building '/nix/store/dqszp0ypiwx03bayl09avwlkjr9awpjh-unit-nginx-config-reload.service.drv' building '/nix/store/bvphg1c0va1h62nmw8c3i7c6yxsp7a22-unit-script-acme-order-renew-ca.foo-start.drv' building '/nix/store/vhyn4qhn19vlkcf5xqi2w6g4pkd9fjwh-unit-script-acme-order-renew-test.foo-start.drv' building '/nix/store/9yzv2bryd6cwh0qcgg09gyzd6c1d2a5b-unit-script-acme-test.foo-start.drv' X-Restart-Triggers-acme-test.foo> structuredAttrs is enabled acme-postrun> structuredAttrs is enabled firewall-start> structuredAttrs is enabled nginx.conf> nginx.conf> ==================== Results =================== nginx.conf> No issues found. nginx.conf> nginx.conf> ==================== Summary =================== nginx.conf> Total issues: nginx.conf> Unspecified: 0 nginx.conf> Low: 0 nginx.conf> Medium: 0 nginx.conf> High: 0 nginx.conf> nginx.conf> nginx.conf> ==================== Results =================== nginx.conf> No issues found. nginx.conf> nginx.conf> ==================== Summary =================== nginx.conf> Total issues: nginx.conf> Unspecified: 0 nginx.conf> Low: 0 nginx.conf> Medium: 0 nginx.conf> High: 0 nginx.conf> unit-acme-renew-test.foo.timer> structuredAttrs is enabled unit-nginx-config-reload.service> structuredAttrs is enabled unit-script-acme-order-renew-ca.foo-start> structuredAttrs is enabled unit-script-acme-order-renew-test.foo-start> structuredAttrs is enabled unit-script-acme-test.foo-start> structuredAttrs is enabled building '/nix/store/q76xn0fvifqzh836kf2p5zv1q92857wn-X-Reload-Triggers-systemd-networkd.drv' building '/nix/store/z8f3zyr16gq4ha8mv560f3d2p3g4z4c8-X-Restart-Triggers-acme-ca.foo.drv' building '/nix/store/1p6g6y731g8f3wpvszznb63nm1xp19jy-acme-postrun.drv' building '/nix/store/9k3yn74rfmdsq82ykyyk959y02klmvi5-acme-setup-privileged.drv' building '/nix/store/fwdhmj5h94jzn3sxkl62daxxwh5awsxi-acme-setup-privileged.drv' building '/nix/store/1dvr2dncn0pdn6akg08r488ldvaaakrd-string-hosts.drv' building '/nix/store/94gc3k1fdq1hlrsncdglp0r538gj8adb-string-hosts.drv' building '/nix/store/9663888i3idg8pa0czqxvl7lyk0s0lhh-tmpfiles.d.drv' building '/nix/store/h8gsny059y20z5wkh9fv7rn8l13gv0n6-unit-nginx-config-reload.service.drv' building '/nix/store/3ij7nazyxni3jjkgzh6pvzryykdi543q-unit-script-acme-ca.foo-start.drv' X-Reload-Triggers-systemd-networkd> structuredAttrs is enabled X-Restart-Triggers-acme-ca.foo> structuredAttrs is enabled acme-postrun> structuredAttrs is enabled acme-setup-privileged> structuredAttrs is enabled acme-setup-privileged> structuredAttrs is enabled string-hosts> structuredAttrs is enabled string-hosts> structuredAttrs is enabled unit-nginx-config-reload.service> structuredAttrs is enabled unit-script-acme-ca.foo-start> structuredAttrs is enabled building '/nix/store/d55j86y8p4va1gwp6jvsa73jp0cnvgql-string-hosts.drv' string-hosts> structuredAttrs is enabled building '/nix/store/j7rfjd3ml948qzk7w53l2p7lwinbjyn4-ca.json.drv' building '/nix/store/ffi9inm3kdr63qr1cr2alwqj0bqlrngw-firewall-reload.drv' building '/nix/store/i95v9bl274mgmra8nwddfv89dgy5k21g-unit-acme-account-2c44cb477b4787b2cf13.target.drv' building '/nix/store/fn4g4rwdy65c51c61wh8357mx60w5qdm-unit-acme-account-d22a46d9459bf683a338.target.drv' building '/nix/store/qv49fz9603d5xyyr6ds3bbcpsdjfzba0-unit-acme-order-renew-ca.foo.service.drv' building '/nix/store/9s1vzis0v0cfc49q95vhjbxckmwlmvi9-unit-acme-renew-ca.foo.timer.drv' building '/nix/store/b63fi8cnrijyz4vdvw63lhw0gm8gs3ws-unit-acme-test.foo.service.drv' building '/nix/store/7557fygs4rxxb7vcl3csr2ch81kbvdsb-unit-script-nginx-pre-start.drv' building '/nix/store/cvhhkkxnzpkk2ks4pqv4wcb2cy1w12p2-users-groups.json.drv' building '/nix/store/358raw0d8bacilkak497r2brqjc09adi-decrypt-age-secrets.drv' on 'ssh-ng://builder@build-x86-01.clan.lol' ca.json> structuredAttrs is enabled firewall-reload> structuredAttrs is enabled unit-acme-account-2c44cb477b4787b2cf13.target> structuredAttrs is enabled unit-acme-account-d22a46d9459bf683a338.target> structuredAttrs is enabled unit-acme-order-renew-ca.foo.service> structuredAttrs is enabled unit-acme-renew-ca.foo.timer> structuredAttrs is enabled unit-acme-test.foo.service> structuredAttrs is enabled unit-script-nginx-pre-start> structuredAttrs is enabled users-groups.json> structuredAttrs is enabled building '/nix/store/5cd9cdbrnwy7x20w7mqyy2snc1ghyj94-unit-acme-ca.foo.service.drv' unit-acme-ca.foo.service> structuredAttrs is enabled building '/nix/store/0pfgq0982c1lcxmqwwylrnazd04xw0fb-hosts.drv' building '/nix/store/11x5w69yns8ss0ib3yg2zmvzmhcknmd1-hosts.drv' building '/nix/store/lb24k162gmqrac5mqgidrfq6zshqjs4h-hosts.drv' building '/nix/store/6msm6j949n45b8g90idg1bgxzgc068hl-system-path.drv' building '/nix/store/axcxh6vbr244z6aavv571v16vx8aabbj-system-path.drv' building '/nix/store/8x7ch619622ah11p62ilfbg9kfl9rq9c-unit-acme-order-renew-test.foo.service.drv' building '/nix/store/1zqg4nps0s028jy4pqcnmq4f513hysv5-unit-acme-setup.service.drv' building '/nix/store/j43pxqdpsac7bkn7zxca23hwbgbcq8c8-unit-acme-setup.service.drv' building '/nix/store/qsdm6239ijj9b2svmazkcj4by6f4piaq-unit-systemd-networkd.service.drv' system-path> structuredAttrs is enabled system-path> structuredAttrs is enabled unit-acme-order-renew-test.foo.service> structuredAttrs is enabled unit-acme-setup.service> structuredAttrs is enabled unit-acme-setup.service> structuredAttrs is enabled unit-systemd-networkd.service> structuredAttrs is enabled building '/nix/store/64gr21j8v5b5jhj8jdvzch1szb9y5kv6-X-Restart-Triggers-step-ca.drv' building '/nix/store/3w4cw75nsibp1j10p62sfq507vfsp59m-X-Restart-Triggers-systemd-tmpfiles-resetup.drv' building '/nix/store/723sfplqmz2ala7f6mvz8izwbrc13sif-unit-firewall.service.drv' building '/nix/store/s0qjvdwv2bf3g9qqppxz5ph7qbw7ckf9-unit-nginx.service.drv' X-Restart-Triggers-step-ca> structuredAttrs is enabled X-Restart-Triggers-systemd-tmpfiles-resetup> structuredAttrs is enabled system-path> created 1723 symlinks in user environment system-path> created 1723 symlinks in user environment unit-firewall.service> structuredAttrs is enabled building '/nix/store/7wnyrsbm9m43s31wqqzcx5fc9vrdx2si-system-path.drv' building '/nix/store/0vb7d99sydvy15zs44lj5vmdahnhf951-unit-script-nginx-pre-start.drv' system-path> structuredAttrs is enabled unit-nginx.service> structuredAttrs is enabled building '/nix/store/vp4awma13kdlcn41yksnfkmz6kar3yyc-dbus-1.drv' building '/nix/store/z8rmlbdsagnb07pj23nrzflx7dkkp29y-dbus-1.drv' building '/nix/store/f8h02ik95q7aj0hyds1ad8r24paqhfq0-unit-step-ca.service.drv' building '/nix/store/ccfv870v6nagy9brm49akxcxxlrrv8dc-unit-systemd-tmpfiles-resetup.service.drv' system-path> created 1723 symlinks in user environment unit-script-nginx-pre-start> structuredAttrs is enabled unit-step-ca.service> structuredAttrs is enabled building '/nix/store/9xn7qrhpszghk5yxjbwp04irczh9w9kq-X-Restart-Triggers-dbus-broker.drv' unit-systemd-tmpfiles-resetup.service> structuredAttrs is enabled building '/nix/store/0775k4cvwl2dwxpqdzlmii53nv0wliia-X-Restart-Triggers-dbus-broker.drv' building '/nix/store/r3d0f59np1kq8cghwval1z8gpgk0mp9j-dbus-1.drv' building '/nix/store/mxrvds6sg2zibqf8snwzlnqkv2jklcrr-unit-nginx.service.drv' X-Restart-Triggers-dbus-broker> structuredAttrs is enabled X-Restart-Triggers-dbus-broker> structuredAttrs is enabled unit-nginx.service> structuredAttrs is enabled building '/nix/store/27q1ii383r980ga5xmq13s7pn53lhm8p-unit-dbus-broker.service.drv' building '/nix/store/mg2ryqf03si8cary005rgaxq996gx91m-unit-dbus-broker.service.drv' building '/nix/store/s5h3fgl2xs4i3n5ns0hxlqpw5cy8yqx5-unit-dbus-broker.service.drv' building '/nix/store/z6l4xqbrxxl5gi77jm31dmn43b225kd7-unit-dbus-broker.service.drv' unit-dbus-broker.service> structuredAttrs is enabled unit-dbus-broker.service> structuredAttrs is enabled unit-dbus-broker.service> structuredAttrs is enabled building '/nix/store/yf2vzfz1hqq0apsrvi1g7d6kbzjbnbzm-X-Restart-Triggers-dbus-broker.drv' unit-dbus-broker.service> structuredAttrs is enabled building '/nix/store/hhvnk3wwwpl3hvjx5a9mq5g77gblzjqn-user-units.drv' X-Restart-Triggers-dbus-broker> structuredAttrs is enabled building '/nix/store/l8nz6ggqmqw1s04qr6x41pi61cs5n8ni-user-units.drv' building '/nix/store/7dg5q7mxkl3243g1zmmhybk3j4sg5h96-unit-dbus-broker.service.drv' building '/nix/store/jwmg8w6fzhvi52x331q04zw2za60p1iw-unit-dbus-broker.service.drv' unit-dbus-broker.service> structuredAttrs is enabled unit-dbus-broker.service> structuredAttrs is enabled building '/nix/store/9rmkg9d08q456n5wj4r8szsfihijnix0-user-units.drv' building '/nix/store/cll406mih5p4iilp2s5yl4zfdf64yy0z-nss-cacert-3.126.drv' on 'ssh-ng://builder@build-x86-01.clan.lol' building '/nix/store/cll406mih5p4iilp2s5yl4zfdf64yy0z-nss-cacert-3.126.drv' building '/nix/store/358raw0d8bacilkak497r2brqjc09adi-decrypt-age-secrets.drv' decrypt-age-secrets> structuredAttrs is enabled nss-cacert-3.126> structuredAttrs is enabled nss-cacert-3.126> Running phase: unpackPhase nss-cacert-3.126> Running phase: patchPhase nss-cacert-3.126> Running phase: updateAutotoolsGnuConfigScriptsPhase nss-cacert-3.126> Running phase: configurePhase nss-cacert-3.126> no configure script, doing nothing nss-cacert-3.126> Running phase: buildPhase building '/nix/store/8b7hgqzjvfyan38z2bkdifdavrxbksba-dry-activate.drv' dry-activate> structuredAttrs is enabled nss-cacert-3.126> Running phase: installPhase nss-cacert-3.126> Running phase: fixupPhase nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/kbzynv6mk94r4znn8c1w5q2lc1634y3v-nss-cacert-3.126-p11kit nss-cacert-3.126> checking for references to /build/ in /nix/store/kbzynv6mk94r4znn8c1w5q2lc1634y3v-nss-cacert-3.126-p11kit... nss-cacert-3.126> patching script interpreter paths in /nix/store/kbzynv6mk94r4znn8c1w5q2lc1634y3v-nss-cacert-3.126-p11kit nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/cqicdlspjirprlarc01azac5b0aqhk7f-nss-cacert-3.126-hashed nss-cacert-3.126> checking for references to /build/ in /nix/store/cqicdlspjirprlarc01azac5b0aqhk7f-nss-cacert-3.126-hashed... nss-cacert-3.126> patching script interpreter paths in /nix/store/cqicdlspjirprlarc01azac5b0aqhk7f-nss-cacert-3.126-hashed nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/wzakv9c6wpmpzgkjbsvd2j33qzprnfgx-nss-cacert-3.126 nss-cacert-3.126> checking for references to /build/ in /nix/store/wzakv9c6wpmpzgkjbsvd2j33qzprnfgx-nss-cacert-3.126... nss-cacert-3.126> patching script interpreter paths in /nix/store/wzakv9c6wpmpzgkjbsvd2j33qzprnfgx-nss-cacert-3.126 nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/3rysha8s2bcadv0yri6kjnmq0yskqfqv-nss-cacert-3.126-unbundled nss-cacert-3.126> checking for references to /build/ in /nix/store/3rysha8s2bcadv0yri6kjnmq0yskqfqv-nss-cacert-3.126-unbundled... nss-cacert-3.126> patching script interpreter paths in /nix/store/3rysha8s2bcadv0yri6kjnmq0yskqfqv-nss-cacert-3.126-unbundled building '/nix/store/b76c6a10l09r45c2gbpw6fs97kk4wj9p-unit-nix-daemon.service.drv' unit-nix-daemon.service> structuredAttrs is enabled building '/nix/store/1bc27lzd0zz9piv48c7hfgdwq5cmmxbf-system-units.drv' building '/nix/store/i129bm7qcv58ipqlxdyrn3319bdr46gk-system-units.drv' building '/nix/store/ivkgi008ifndlpdhcndy2c6vchz5qvvg-system-units.drv' building '/nix/store/vvvkfrjyf6jni9w1b8givkaiwsafb98h-etc.drv' building '/nix/store/28k4k8i3jl6jjryxkvnbrjdyg8a25aw2-etc.drv' building '/nix/store/l97p1hz7w2msax7d18lgpba0sn9dfqnb-etc.drv' building '/nix/store/36hwp64c6j2qp7iz7mg6xx4zkz0l4dk2-activate.drv' activate> structuredAttrs is enabled building '/nix/store/gbh8hlr6xihpc6hfvbfs3v69z676b5wm-nixos-system-ca-test.drv' building '/nix/store/a52jdkaa6ddrcnhg4lblykxskm6qb9xs-activate.drv' nixos-system-ca-test> structuredAttrs is enabled building '/nix/store/1ck8x8cq8dcsxr24wmxpa6khjr8djk66-activate.drv' activate> structuredAttrs is enabled building '/nix/store/42vi59m63k9i5fz785cvydjvi4vwwsmq-run-ca-nspawn.drv' activate> structuredAttrs is enabled building '/nix/store/66m4dnf5ii61a18snrxdyr7hjkj43ayj-nixos-system-client-test.drv' building '/nix/store/f5f18ky8kz5fnrs856mya7msvi50b49d-nixos-system-server-test.drv' nixos-system-client-test> structuredAttrs is enabled building '/nix/store/c6cbnh9623f012prdgc6652p9xxc5qbz-run-client-nspawn.drv' nixos-system-server-test> structuredAttrs is enabled building '/nix/store/9n0hcbk6md8a1hhrpy97b3p5ag72iwjg-run-server-nspawn.drv' building '/nix/store/g6s1vbz31r679d0d2wnxbx95smgcvzl3-driverConfiguration.json.drv' driverConfiguration.json> structuredAttrs is enabled building '/nix/store/lys7y7yrbsyh7rhzz3nr6gn6kb3z0wak-nixos-test-driver-certificates.drv' nixos-test-driver-certificates> Running type check (enable/disable: config.skipTypeCheck) nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck nixos-test-driver-certificates> All checks passed! nixos-test-driver-certificates> Linting test script (enable/disable: config.skipLint) nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipLint nixos-test-driver-certificates> All checks passed! building '/nix/store/dhiw81m79hcl6gb1n32zbncdy2pc6idi-container-test-run-certificates.drv' on 'ssh-ng://builder@build-x86-01.clan.lol' building '/nix/store/dhiw81m79hcl6gb1n32zbncdy2pc6idi-container-test-run-certificates.drv' container-test-run-certificates> Machine state will be reset. To keep it, pass --keep-machine-state container-test-run-certificates> start all VLans container-test-run-certificates> (finished: start all VLans, in 0.00 seconds) container-test-run-certificates> container-test-run-certificates> Test will time out and terminate in 3600.0 seconds container-test-run-certificates> run the VM test script container-test-run-certificates> additionally exposed symbols: container-test-run-certificates> ca, client, server, container-test-run-certificates> vlan1, container-test-run-certificates> start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh container-test-run-certificates> ca: systemd-nspawn running (pid 50) container-test-run-certificates> ca: Waiting for journal at /build/vm-state-ca/var/log/journal... container-test-run-certificates> ca: waiting for unit step-ca.service container-test-run-certificates> nixos-nspawn(ca): TAP vde-tap1 not found; container will be isolated from VDE container-test-run-certificates> nixos-nspawn(ca): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths. container-test-run-certificates> Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file. container-test-run-certificates> ░ Spawning container ca on /build/vm-state-ca. container-test-run-certificates> ca # No journal files were found. container-test-run-certificates> ca # No journal boot entry found for the specified boot (+0). container-test-run-certificates> ca # [1478518.883008] ca systemd-journald[81]: Journal started container-test-run-certificates> ca # [1478518.883058] ca systemd-journald[81]: Runtime Journal (/run/log/journal/6e4e7dc6161c45f488aa419b6841914a) is 8M, max 3.7G, 3.7G free. container-test-run-certificates> ca # [1478518.889421] ca systemd[1]: Finished Apply Kernel Variables. container-test-run-certificates> ca # [1478518.902566] ca systemd[1]: Finished Create Static Device Nodes in /dev gracefully. container-test-run-certificates> ca # [1478518.914377] ca systemd[1]: Starting Flush Journal to Persistent Storage... container-test-run-certificates> ca # [1478518.915261] ca systemd[1]: Starting Network Name Resolution... container-test-run-certificates> ca # [1478518.915846] ca systemd[1]: Starting Create Static Device Nodes in /dev... container-test-run-certificates> ca # [1478518.943300] ca systemd-journald[81]: Time spent on flushing to /var/log/journal/6e4e7dc6161c45f488aa419b6841914a is 1.379ms for 7 entries. container-test-run-certificates> ca # [1478518.943300] ca systemd-journald[81]: System Journal (/var/log/journal/6e4e7dc6161c45f488aa419b6841914a) is 8M, max 4G, 3.9G free. container-test-run-certificates> ca # [1478518.967204] ca systemd[1]: Finished Create Static Device Nodes in /dev. container-test-run-certificates> ca # [1478518.967998] ca systemd[1]: Reached target Preparation for Local File Systems. container-test-run-certificates> ca # [1478518.968124] ca systemd[1]: Reached target Local File Systems. container-test-run-certificates> ca # [1478518.968822] ca systemd[1]: Listening on Boot Loader Control Service Socket. container-test-run-certificates> ca # [1478518.968871] ca systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> ca # [1478518.969729] ca systemd[1]: Starting Save Transient machine-id to Disk... container-test-run-certificates> ca # [1478518.969753] ca systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys container-test-run-certificates> ca # [1478518.994475] ca systemd[1]: Finished Firewall. container-test-run-certificates> ca # [1478518.994595] ca systemd[1]: Reached target Preparation for Network. container-test-run-certificates> ca # [1478518.994750] ca systemd[1]: Listening on Network Management Resolve Hook Socket. container-test-run-certificates> ca # [1478518.995431] ca systemd[1]: Starting Network Management... container-test-run-certificates> ca # [1478519.079503] ca systemd[1]: Finished Flush Journal to Persistent Storage. container-test-run-certificates> ca # [1478519.081530] ca systemd[1]: Starting Create System Files and Directories... container-test-run-certificates> ca # [1478519.116839] ca systemd-tmpfiles[192]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted container-test-run-certificates> ca # [1478519.117434] ca systemd-tmpfiles[192]: fchmod() of /var/log/journal failed: Operation not permitted container-test-run-certificates> ca # [1478519.117576] ca systemd-tmpfiles[192]: fchmod() of /var/log/journal/6e4e7dc6161c45f488aa419b6841914a failed: Operation not permitted container-test-run-certificates> ca # [1478519.117780] ca systemd-tmpfiles[192]: fchmod() of /run/log/journal failed: Operation not permitted container-test-run-certificates> ca # [1478519.120121] ca systemd[1]: Finished Create System Files and Directories. container-test-run-certificates> ca # [1478519.121177] ca systemd[1]: Starting Rebuild Journal Catalog... container-test-run-certificates> ca # [1478519.121604] ca systemd[1]: Starting Record System Boot/Shutdown in UTMP... container-test-run-certificates> ca # [1478519.151348] ca systemd[1]: Finished Record System Boot/Shutdown in UTMP. container-test-run-certificates> ca # [1478519.157373] ca systemd[1]: Finished Rebuild Journal Catalog. container-test-run-certificates> ca # [1478519.158381] ca systemd[1]: Starting Update is Completed... container-test-run-certificates> ca # [1478519.166739] ca systemd[1]: Finished Update is Completed. container-test-run-certificates> ca # [1478519.905441] ca systemd-networkd[188]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted container-test-run-certificates> ca # [1478519.905521] ca systemd-networkd[188]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted container-test-run-certificates> ca # [1478519.914341] ca systemd-networkd[188]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> ca # [1478519.914492] ca systemd-networkd[188]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> ca # [1478519.914572] ca systemd-networkd[188]: lo: Link UP container-test-run-certificates> ca # [1478519.914575] ca systemd-networkd[188]: lo: Gained carrier container-test-run-certificates> ca # [1478519.914729] ca systemd-networkd[188]: eth1: Configuring with /etc/systemd/network/40-eth1.network. container-test-run-certificates> ca # [1478519.915008] ca systemd[1]: Started Network Management. container-test-run-certificates> ca # [1478519.915062] ca systemd-networkd[188]: eth1: Link UP container-test-run-certificates> ca # [1478519.915222] ca systemd-networkd[188]: eth1: Gained carrier container-test-run-certificates> ca # [1478519.917237] ca systemd[1]: Starting Enable Persistent Storage in systemd-networkd... container-test-run-certificates> ca # [1478519.948174] ca systemd[1]: Finished Enable Persistent Storage in systemd-networkd. container-test-run-certificates> ca # [1478521.093367] ca systemd-resolved[122]: Positive Trust Anchors: container-test-run-certificates> ca # [1478521.093375] ca systemd-resolved[122]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d container-test-run-certificates> ca # [1478521.093378] ca systemd-resolved[122]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 container-test-run-certificates> ca # [1478521.093395] ca systemd-resolved[122]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test container-test-run-certificates> ca # [1478521.106034] ca systemd-resolved[122]: Using system hostname 'ca'. container-test-run-certificates> ca # [1478521.107106] ca systemd[1]: Started Network Name Resolution. container-test-run-certificates> ca # [1478521.107191] ca systemd[1]: Reached target Network. container-test-run-certificates> ca # [1478521.107232] ca systemd[1]: Reached target Network is Online. container-test-run-certificates> ca # [1478521.107268] ca systemd[1]: Reached target System Initialization. container-test-run-certificates> ca # [1478521.107440] ca systemd[1]: Started Renew ACME Certificate for ca.foo. container-test-run-certificates> ca # [1478521.107468] ca systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> ca # [1478521.107488] ca systemd[1]: Started Daily Cleanup of Temporary Directories. container-test-run-certificates> ca # [1478521.107503] ca systemd[1]: Reached target Timer Units. container-test-run-certificates> ca # [1478521.107604] ca systemd[1]: Listening on D-Bus System Message Bus Socket. container-test-run-certificates> ca # [1478521.107685] ca systemd[1]: Listening on Nix Daemon Socket. container-test-run-certificates> ca # [1478521.107777] ca systemd[1]: Listening on Virtual Machine and Container Registration Service Socket. container-test-run-certificates> ca # [1478521.107791] ca systemd[1]: Reached target Socket Units. container-test-run-certificates> ca # [1478521.107819] ca systemd[1]: Reached target Basic System. container-test-run-certificates> ca # [1478521.108764] ca systemd[1]: Starting Set up the ACME certificate renewal infrastructure... container-test-run-certificates> ca # [1478521.109511] ca systemd[1]: Starting Import lastlog data into lastlog2 database... container-test-run-certificates> ca # [1478521.109540] ca systemd[1]: nginx-config-reload.service skipped, unmet condition check ConditionPathExists=/var/lib/acme/ca.foo/fullchain.pem container-test-run-certificates> ca # [1478521.110257] ca systemd[1]: Starting Name Service Cache Daemon (nsncd)... container-test-run-certificates> ca # [1478521.110942] ca systemd[1]: Starting step-ca service... container-test-run-certificates> ca # [1478521.111944] ca systemd[1]: Starting D-Bus System Message Bus... container-test-run-certificates> ca # [1478521.262683] ca systemd[1]: Finished Import lastlog data into lastlog2 database. container-test-run-certificates> ca # [1478521.408123] ca systemd-networkd[188]: eth1: Gained IPv6LL container-test-run-certificates> ca # [1478522.064418] ca acme-setup-privileged[203]: + set -euo pipefail container-test-run-certificates> ca # [1478522.064418] ca acme-setup-privileged[203]: + cd /var/lib/acme container-test-run-certificates> ca # [1478522.064418] ca acme-setup-privileged[203]: + chmod -R u=rwX,g=,o= .lego/accounts container-test-run-certificates> ca # [1478522.065282] ca acme-setup-privileged[203]: + chown -R acme .lego/accounts container-test-run-certificates> ca # [1478522.066184] ca acme-setup-privileged[203]: + for fixpath in ca.foo .lego/ca.foo container-test-run-certificates> ca # [1478522.066184] ca acme-setup-privileged[203]: + '[' -d ca.foo ']' container-test-run-certificates> ca # [1478522.066266] ca acme-setup-privileged[203]: + for fixpath in ca.foo .lego/ca.foo container-test-run-certificates> ca # [1478522.066266] ca acme-setup-privileged[203]: + '[' -d .lego/ca.foo ']' container-test-run-certificates> ca # [1478522.074562] ca nsncd[205]: Sep 21 09:58:56.497 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket" container-test-run-certificates> ca # [1478522.074666] ca systemd[1]: Started Name Service Cache Daemon (nsncd). container-test-run-certificates> ca # [1478522.074724] ca systemd[1]: Reached target Host and Network Name Lookups. container-test-run-certificates> ca # [1478522.074764] ca systemd[1]: Reached target User and Group Name Lookups. container-test-run-certificates> ca # [1478522.085802] ca systemd[1]: Starting User Login Management... container-test-run-certificates> ca # [1478522.086316] ca systemd[1]: Starting Permit User Sessions... container-test-run-certificates> ca # [1478522.092566] ca systemd[1]: Finished Permit User Sessions. container-test-run-certificates> ca # [1478522.093586] ca systemd[1]: Started Console Getty. container-test-run-certificates> ca # [1478522.093612] ca systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0 container-test-run-certificates> ca # [1478522.093628] ca systemd[1]: Reached target Login Prompts. container-test-run-certificates> ca # [1478522.528010] ca systemd[1]: etc-machine\x2did.mount: Deactivated successfully. container-test-run-certificates> ca # [1478522.528911] ca systemd[1]: Finished Save Transient machine-id to Disk. container-test-run-certificates> ca # [1478522.679836] ca dbus-broker-launch[207]: Looking up NSS user entry for 'systemd-timesync'... container-test-run-certificates> ca # [1478522.680397] ca dbus-broker-launch[207]: NSS returned no entry for 'systemd-timesync' container-test-run-certificates> ca # [1478522.680397] ca dbus-broker-launch[207]: Invalid user-name in /nix/store/1rsbjj3vkxs9pmkbvvj5g7ldfs54i9d8-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync" container-test-run-certificates> ca # [1478522.680703] ca systemd[1]: Started D-Bus System Message Bus. container-test-run-certificates> ca # [1478522.686366] ca dbus-broker-launch[207]: Ready container-test-run-certificates> ca: still waiting for container 'ca' to reach ready state... container-test-run-certificates> ca # [1478528.126180] ca systemd-logind[233]: New seat seat0. container-test-run-certificates> ca # [1478528.126471] ca systemd[1]: Started User Login Management. container-test-run-certificates> ca # [1478528.127906] ca systemd[1]: Starting linger-users.service... container-test-run-certificates> ca # [1478528.165097] ca systemd[1]: linger-users.service: Deactivated successfully. container-test-run-certificates> ca # [1478528.165404] ca systemd[1]: Finished linger-users.service. container-test-run-certificates> ca # [1478528.425221] ca acme-setup-start[221]: + set -euo pipefail container-test-run-certificates> ca # [1478528.425221] ca acme-setup-start[221]: + test -e ca/key.pem container-test-run-certificates> ca # [1478528.425221] ca acme-setup-start[221]: + minica --ca-key ca/key.pem --ca-cert ca/cert.pem --domains selfsigned.local container-test-run-certificates> ca # [1478528.441050] ca systemd[1]: Finished Set up the ACME certificate renewal infrastructure. container-test-run-certificates> ca # [1478528.442982] ca systemd[1]: Starting Ensure certificate for ca.foo... container-test-run-certificates> ca # [1478529.247613] ca step-ca[206]: badger 2026/09/21 09:59:03 INFO: All 0 tables opened in 0s container-test-run-certificates> ca # [1478529.255429] ca step-ca[206]: 2026/09/21 09:59:03 Building new tls configuration using step-ca x509 Signer Interface container-test-run-certificates> ca # [1478529.264183] ca step-ca[206]: 2026/09/21 09:59:03 Starting Smallstep CA/0.30.2 (linux/amd64) container-test-run-certificates> ca # [1478529.264183] ca step-ca[206]: 2026/09/21 09:59:03 Documentation: https://u.step.sm/docs/ca container-test-run-certificates> ca # [1478529.264183] ca step-ca[206]: 2026/09/21 09:59:03 Community Discord: https://u.step.sm/discord container-test-run-certificates> ca # [1478529.264183] ca step-ca[206]: 2026/09/21 09:59:03 Config file: /etc/smallstep/ca.json container-test-run-certificates> ca # [1478529.264183] ca step-ca[206]: 2026/09/21 09:59:03 The primary server URL is https://ca.foo:1443 container-test-run-certificates> ca # [1478529.264183] ca step-ca[206]: 2026/09/21 09:59:03 Root certificates are available at https://ca.foo:1443/roots.pem container-test-run-certificates> ca # [1478529.264183] ca step-ca[206]: 2026/09/21 09:59:03 X.509 Root Fingerprint: 284ee37e317a8c10e3c8c982e418e2bec3e5fab1c9a496c0f728ac5747abca9a container-test-run-certificates> ca # [1478529.264133] ca systemd[1]: Started step-ca service. container-test-run-certificates> ca # [1478529.264657] ca step-ca[206]: 2026/09/21 09:59:03 Serving HTTPS on 0.0.0.0:1443 ... container-test-run-certificates> ca # [1478533.674661] ca acme-ca.foo-start[259]: Waiting to acquire lock in /run/acme/ container-test-run-certificates> ca # [1478533.682831] ca acme-ca.foo-start[259]: + '[' -e out/acme-success ']' container-test-run-certificates> ca # [1478533.682831] ca acme-ca.foo-start[259]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=ca.foo --ip-addresses= container-test-run-certificates> ca # [1478533.682927] ca acme-ca.foo-start[281]: + cd ca.foo container-test-run-certificates> ca # [1478533.682927] ca acme-ca.foo-start[281]: + cp -vp cert.pem ../out/cert.pem container-test-run-certificates> ca # [1478533.683248] ca acme-ca.foo-start[282]: 'cert.pem' -> '../out/cert.pem' container-test-run-certificates> ca # [1478533.683980] ca acme-ca.foo-start[281]: + cp -vp key.pem ../out/key.pem container-test-run-certificates> ca # [1478533.685115] ca acme-ca.foo-start[281]: 'key.pem' -> '../out/key.pem' container-test-run-certificates> ca # [1478533.685326] ca acme-ca.foo-start[259]: + cat out/cert.pem ca/cert.pem container-test-run-certificates> ca # [1478533.686610] ca acme-ca.foo-start[259]: + cp ca/cert.pem out/chain.pem container-test-run-certificates> ca # [1478533.687950] ca acme-ca.foo-start[259]: + cat out/key.pem out/fullchain.pem container-test-run-certificates> ca # [1478533.689372] ca acme-ca.foo-start[259]: + for fixpath in out certificates container-test-run-certificates> ca # [1478533.689415] ca acme-ca.foo-start[259]: + '[' -d out ']' container-test-run-certificates> ca # [1478533.689415] ca acme-ca.foo-start[259]: + chmod -R u=rwX,g=rX,o= out container-test-run-certificates> ca # [1478533.690517] ca acme-ca.foo-start[259]: + chown -R acme:nginx out container-test-run-certificates> ca # [1478533.692645] ca acme-ca.foo-start[259]: + for fixpath in out certificates container-test-run-certificates> ca # [1478533.692645] ca acme-ca.foo-start[259]: + '[' -d certificates ']' container-test-run-certificates> ca # [1478533.703711] ca systemd[1]: Finished Ensure certificate for ca.foo. container-test-run-certificates> ca # [1478533.712670] ca systemd[1]: Starting Nginx Web Server... container-test-run-certificates> ca # [1478537.414131] ca nginx-pre-start[293]: nginx: the configuration file /nix/store/1kcn7dvrsjnq1in21z9k9330h906kxdw-nginx.conf syntax is ok container-test-run-certificates> ca # [1478537.414642] ca nginx-pre-start[293]: nginx: configuration file /nix/store/1kcn7dvrsjnq1in21z9k9330h906kxdw-nginx.conf test is successful container-test-run-certificates> ca # [1478537.425141] ca systemd[1]: Started Nginx Web Server. container-test-run-certificates> ca # [1478537.425615] ca systemd[1]: Reached target Multi-User System. container-test-run-certificates> ca # [1478537.426864] ca systemd[1]: Starting Order (and renew) ACME certificate for ca.foo... container-test-run-certificates> ca: still waiting for container 'ca' to reach ready state... container-test-run-certificates> ca # [1478539.283518] ca acme-order-renew-ca.foo-start[296]: Waiting to acquire lock in /run/acme/ container-test-run-certificates> ca # [1478539.345329] ca acme-order-renew-ca.foo-start[296]: + set -euo pipefail container-test-run-certificates> ca # [1478539.345329] ca acme-order-renew-ca.foo-start[296]: + exec container-test-run-certificates> ca # [1478539.345329] ca acme-order-renew-ca.foo-start[296]: + /nix/store/m9ik4hd36632x3n2ibrxl2vyi0w4y094-flock-0.4.0/bin/flock 11 container-test-run-certificates> ca # [1478539.345507] ca acme-order-renew-ca.foo-start[307]: ++ find accounts -path '*/keys/*.key' -print -quit container-test-run-certificates> ca # [1478539.345984] ca acme-order-renew-ca.foo-start[296]: + '[' -n '' ']' container-test-run-certificates> ca # [1478539.346062] ca acme-order-renew-ca.foo-start[296]: + exec container-test-run-certificates> ca # [1478539.346109] ca acme-order-renew-ca.foo-start[296]: + '[' -e certificates/ca.foo.key ']' container-test-run-certificates> ca # [1478539.346137] ca acme-order-renew-ca.foo-start[296]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo:1443/acme/acme/directory --key-type ec256 -d ca.foo --no-random-sleep --renew-force --ari-disable --force-cert-domains container-test-run-certificates> ca # [1478539.363918] ca acme-order-renew-ca.foo-start[309]: 2026-09-21T09:59:13.787216095Z INFO Private key saved. filepath=accounts/ca.foo_1443/none@none.tld/none@none.tld.key container-test-run-certificates> ca # [1478539.381014] ca step-ca[206]: time="2026-09-21T09:59:13Z" level=info duration="109.787µs" duration-ns=109787 fields.time="2026-09-21T09:59:13Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=6b350fdb-4f7e-4d28-9a2e-0add41c238bd response="{\"newNonce\":\"https://ca.foo:1443/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo:1443/acme/acme/new-account\",\"newOrder\":\"https://ca.foo:1443/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo:1443/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo:1443/acme/acme/key-change\"}" size=277 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [1478539.381394] ca acme-order-renew-ca.foo-start[309]: 2026-09-21T09:59:13.804299401Z INFO Registering the account. email=none@none.tld container-test-run-certificates> ca # [1478539.388226] ca step-ca[206]: time="2026-09-21T09:59:13Z" level=info duration=7.037425ms duration-ns=7037425 fields.time="2026-09-21T09:59:13Z" method=HEAD name=ca nonce=SGFTUTR3aXAyU3M0S3hHdm5VaW50WmhSQWxRZDdmcEs path=/acme/acme/new-nonce protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=b04281ac-2164-400d-b6eb-9360f97d7283 size=0 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [1478539.399254] ca step-ca[206]: time="2026-09-21T09:59:13Z" level=info duration=10.466423ms duration-ns=10466423 fields.time="2026-09-21T09:59:13Z" method=POST name=ca nonce=UGNWb2RqcDRLUHRGWjhTbDRNdWIxMVQzTkl2WjBCbEM path=/acme/acme/new-account protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=6b6dd6ad-87f7-4f18-9d3c-17b2d916bca9 response="{\"contact\":[\"mailto:none@none.tld\"],\"status\":\"valid\",\"orders\":\"https://ca.foo:1443/acme/acme/account/5auFE4K4Pz646qoO0Rb736tBVE6EPp6q/orders\"}" size=143 status=201 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [1478539.399507] ca acme-order-renew-ca.foo-start[309]: 2026-09-21T09:59:13.822832298Z WARN !!!! HEADS UP !!!! container-test-run-certificates> ca # [1478539.399507] ca acme-order-renew-ca.foo-start[309]: Your account credentials have been saved in your container-test-run-certificates> ca # [1478539.399507] ca acme-order-renew-ca.foo-start[309]: configuration directory at "accounts". container-test-run-certificates> ca # [1478539.399507] ca acme-order-renew-ca.foo-start[309]: You should make a secure backup of this folder now. This container-test-run-certificates> ca # [1478539.399507] ca acme-order-renew-ca.foo-start[309]: configuration directory will also contain private keys container-test-run-certificates> ca # [1478539.399507] ca acme-order-renew-ca.foo-start[309]: generated by lego and certificates obtained from the ACME container-test-run-certificates> ca # [1478539.399507] ca acme-order-renew-ca.foo-start[309]: server. Making regular backups of this folder is ideal. container-test-run-certificates> ca # [1478539.399719] ca acme-order-renew-ca.foo-start[309]: 2026-09-21T09:59:13.822932447Z INFO Obtaining bundled SAN certificate. domains=ca.foo container-test-run-certificates> ca # [1478539.437527] ca step-ca[206]: time="2026-09-21T09:59:13Z" level=info duration=37.581555ms duration-ns=37581555 fields.time="2026-09-21T09:59:13Z" method=POST name=ca nonce=OGZNd0hKSDlQMDZJMkRPTUV1QVlLT2NWYWYyb2NnTzk path=/acme/acme/new-order protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=58f8b04d-8a5c-4b51-9f3b-66208b2d6130 response="{\"id\":\"rffJ5ymCws6xyPHNaI91F8mYLQcDIvDi\",\"status\":\"pending\",\"expires\":\"2026-09-22T09:59:13Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"ca.foo\"}],\"notBefore\":\"2026-09-21T09:58:13Z\",\"notAfter\":\"2026-12-20T09:59:13Z\",\"authorizations\":[\"https://ca.foo:1443/acme/acme/authz/2TId5ZTbMgV2ZwUGOELzUIMjSVQR9QWt\"],\"finalize\":\"https://ca.foo:1443/acme/acme/order/rffJ5ymCws6xyPHNaI91F8mYLQcDIvDi/finalize\"}" size=392 status=201 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [1478539.513238] ca step-ca[206]: time="2026-09-21T09:59:13Z" level=info duration=18.697446ms duration-ns=18697446 fields.time="2026-09-21T09:59:13Z" method=POST name=ca nonce=c1ZNZGo4NlhlN0h0Nkd0bk1qUTd1V2NLVlBsOG9pakY path=/acme/acme/authz/2TId5ZTbMgV2ZwUGOELzUIMjSVQR9QWt protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=4178e84c-f505-4e5f-b54c-5ed0b0fdde56 response="{\"identifier\":{\"type\":\"dns\",\"value\":\"ca.foo\"},\"status\":\"pending\",\"challenges\":[{\"type\":\"dns-01\",\"status\":\"pending\",\"token\":\"GMDtPjpNBWewGUnM251cN2gjvdNL1khD\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/2TId5ZTbMgV2ZwUGOELzUIMjSVQR9QWt/eFZruKIR5iZPB0yVIU9e1zpRc1NuVcv2\"},{\"type\":\"http-01\",\"status\":\"pending\",\"token\":\"GMDtPjpNBWewGUnM251cN2gjvdNL1khD\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/2TId5ZTbMgV2ZwUGOELzUIMjSVQR9QWt/1QhRxbjshwPqKaT7B8Gc4whgQVUz5SYH\"},{\"type\":\"tls-alpn-01\",\"status\":\"pending\",\"token\":\"GMDtPjpNBWewGUnM251cN2gjvdNL1khD\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/2TId5ZTbMgV2ZwUGOELzUIMjSVQR9QWt/ZeS6eGlrrK0J3zORG0UKJCAlXME2ZlwP\"}],\"wildcard\":false,\"expires\":\"2026-09-22T09:59:13Z\"}" size=719 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [1478539.513549] ca acme-order-renew-ca.foo-start[309]: 2026-09-21T09:59:13.936864567Z INFO Use solver. domain=ca.foo type=http-01 container-test-run-certificates> ca # [1478539.513591] ca acme-order-renew-ca.foo-start[309]: 2026-09-21T09:59:13.936891588Z INFO http01: Trying to solve HTTP-01. domain=ca.foo container-test-run-certificates> ca # [1478539.521722] ca step-ca[206]: time="2026-09-21T09:59:13Z" level=info duration=7.850417ms duration-ns=7850417 fields.time="2026-09-21T09:59:13Z" method=POST name=ca nonce=Z0VGUFVDdENOdGlHOExIRzN2Q1YyRmdPMllJeFd5WHg path=/acme/acme/challenge/2TId5ZTbMgV2ZwUGOELzUIMjSVQR9QWt/1QhRxbjshwPqKaT7B8Gc4whgQVUz5SYH protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=4bf6f57c-6a7f-4cce-834b-f579b6c2a0f6 response="{\"type\":\"http-01\",\"status\":\"valid\",\"token\":\"GMDtPjpNBWewGUnM251cN2gjvdNL1khD\",\"validated\":\"2026-09-21T09:59:13Z\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/2TId5ZTbMgV2ZwUGOELzUIMjSVQR9QWt/1QhRxbjshwPqKaT7B8Gc4whgQVUz5SYH\"}" size=228 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [1478539.521993] ca acme-order-renew-ca.foo-start[309]: 2026-09-21T09:59:13.945314282Z INFO The server validated our request. domain=ca.foo container-test-run-certificates> ca # [1478539.522047] ca acme-order-renew-ca.foo-start[309]: 2026-09-21T09:59:13.945374245Z INFO Validations succeeded; requesting certificates. domains=ca.foo container-test-run-certificates> ca # [1478539.544374] ca step-ca[206]: time="2026-09-21T09:59:13Z" level=info duration=21.814988ms duration-ns=21814988 fields.time="2026-09-21T09:59:13Z" method=POST name=ca nonce=cUFKU1hpWW9GbXk4VlRPaGxuU3VIWjByQVNsYzZYS0Q path=/acme/acme/order/rffJ5ymCws6xyPHNaI91F8mYLQcDIvDi/finalize protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=62a25984-c111-44e5-ad76-48d84721b4c7 response="{\"id\":\"rffJ5ymCws6xyPHNaI91F8mYLQcDIvDi\",\"status\":\"valid\",\"expires\":\"2026-09-22T09:59:13Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"ca.foo\"}],\"notBefore\":\"2026-09-21T09:58:13Z\",\"notAfter\":\"2026-12-20T09:59:13Z\",\"authorizations\":[\"https://ca.foo:1443/acme/acme/authz/2TId5ZTbMgV2ZwUGOELzUIMjSVQR9QWt\"],\"finalize\":\"https://ca.foo:1443/acme/acme/order/rffJ5ymCws6xyPHNaI91F8mYLQcDIvDi/finalize\",\"certificate\":\"https://ca.foo:1443/acme/acme/certificate/LxQn1ZnmKvJj5fDbcJ4CXc9ZZYJjGAyS\"}" size=481 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [1478539.546391] ca step-ca[206]: time="2026-09-21T09:59:13Z" level=info certificate="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" duration=1.57706ms duration-ns=1577060 fields.time="2026-09-21T09:59:13Z" issuer="Clan Intermediate CA" method=POST name=ca nonce=b3JWNEtSTkswNVJFVzN5Vjl1VVdCR1A1MThVZ0lWNjk path=/acme/acme/certificate/LxQn1ZnmKvJj5fDbcJ4CXc9ZZYJjGAyS protocol=HTTP/1.1 provisioner=acme public-key="ECDSA P-256" referer= remote-address="2001:db8:1::1" request-id=c256a72c-5de9-46d1-a123-ce6c4ec683bb sans="map[dns:[ca.foo]]" serial=169735401426572334829580684134490647831 size=1348 status=200 subject=ca.foo user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; amd64)" user-id= valid-from="2026-09-21T09:58:13Z" valid-to="2026-12-20T09:59:13Z" container-test-run-certificates> ca # [1478539.546529] ca acme-order-renew-ca.foo-start[309]: 2026-09-21T09:59:13.969851868Z INFO Server responded with a certificate. domains=ca.foo container-test-run-certificates> ca # [1478539.546561] ca acme-order-renew-ca.foo-start[309]: 2026-09-21T09:59:13.969893647Z INFO Writing file. filepath=certificates/ca.foo.crt container-test-run-certificates> ca # [1478539.546628] ca acme-order-renew-ca.foo-start[309]: 2026-09-21T09:59:13.969962176Z INFO Writing file. filepath=certificates/ca.foo.issuer.crt container-test-run-certificates> ca # [1478539.546663] ca acme-order-renew-ca.foo-start[309]: 2026-09-21T09:59:13.969991602Z INFO Writing file. filepath=certificates/ca.foo.key container-test-run-certificates> ca # [1478539.546734] ca acme-order-renew-ca.foo-start[309]: 2026-09-21T09:59:13.970067274Z INFO Writing file. filepath=certificates/ca.foo.json container-test-run-certificates> ca # [1478539.550169] ca acme-order-renew-ca.foo-start[296]: + touch out/acme-success container-test-run-certificates> ca # [1478539.551410] ca acme-order-renew-ca.foo-start[296]: + cmp -s certificates/ca.foo.crt out/fullchain.pem container-test-run-certificates> ca # [1478539.552308] ca acme-order-renew-ca.foo-start[296]: + touch out/renewed container-test-run-certificates> ca # [1478539.553340] ca acme-order-renew-ca.foo-start[296]: + echo Installing new certificate container-test-run-certificates> ca # [1478539.553340] ca acme-order-renew-ca.foo-start[296]: Installing new certificate container-test-run-certificates> ca # [1478539.553410] ca acme-order-renew-ca.foo-start[296]: + cp -vp certificates/ca.foo.crt out/fullchain.pem container-test-run-certificates> ca # [1478539.554401] ca acme-order-renew-ca.foo-start[328]: 'certificates/ca.foo.crt' -> 'out/fullchain.pem' container-test-run-certificates> ca # [1478539.554600] ca acme-order-renew-ca.foo-start[296]: + cp -vp certificates/ca.foo.key out/key.pem container-test-run-certificates> ca # [1478539.555729] ca acme-order-renew-ca.foo-start[329]: 'certificates/ca.foo.key' -> 'out/key.pem' container-test-run-certificates> ca # [1478539.555929] ca acme-order-renew-ca.foo-start[296]: + cp -vp certificates/ca.foo.issuer.crt out/chain.pem container-test-run-certificates> ca # [1478539.556976] ca acme-order-renew-ca.foo-start[330]: 'certificates/ca.foo.issuer.crt' -> 'out/chain.pem' container-test-run-certificates> ca # [1478539.557182] ca acme-order-renew-ca.foo-start[296]: + ln -sf fullchain.pem out/cert.pem container-test-run-certificates> ca # [1478539.558260] ca acme-order-renew-ca.foo-start[296]: + cat out/key.pem out/fullchain.pem container-test-run-certificates> ca # [1478539.559306] ca acme-order-renew-ca.foo-start[296]: + for fixpath in out certificates container-test-run-certificates> ca # [1478539.559343] ca acme-order-renew-ca.foo-start[296]: + '[' -d out ']' container-test-run-certificates> ca # [1478539.559343] ca acme-order-renew-ca.foo-start[296]: + chmod -R u=rwX,g=rX,o= out container-test-run-certificates> ca # [1478539.560310] ca acme-order-renew-ca.foo-start[296]: + chown -R acme:nginx out container-test-run-certificates> ca # [1478539.562827] ca acme-order-renew-ca.foo-start[296]: + for fixpath in out certificates container-test-run-certificates> ca # [1478539.562856] ca acme-order-renew-ca.foo-start[296]: + '[' -d certificates ']' container-test-run-certificates> ca # [1478539.562856] ca acme-order-renew-ca.foo-start[296]: + chmod -R u=rwX,g=rX,o= certificates container-test-run-certificates> ca # [1478539.564007] ca acme-order-renew-ca.foo-start[296]: + chown -R acme:nginx certificates container-test-run-certificates> ca # [1478539.565727] ca acme-order-renew-ca.foo-start[296]: + chmod -R u=rwX,g=,o= accounts/. container-test-run-certificates> ca # [1478539.796526] ca systemd[1]: Reloading Nginx Web Server... container-test-run-certificates> ca # [1478539.799829] ca systemd[1]: acme-order-renew-ca.foo.service: Deactivated successfully. container-test-run-certificates> ca # [1478539.800038] ca systemd[1]: Finished Order (and renew) ACME certificate for ca.foo. container-test-run-certificates> ca # [1478539.800162] ca systemd[1]: acme-order-renew-ca.foo.service: Consumed 1.452s CPU time over 2.373s wall clock time. container-test-run-certificates> ca # [1478540.801181] ca nginx[346]: nginx: the configuration file /nix/store/1kcn7dvrsjnq1in21z9k9330h906kxdw-nginx.conf syntax is ok container-test-run-certificates> ca # [1478540.801516] ca nginx[346]: nginx: configuration file /nix/store/1kcn7dvrsjnq1in21z9k9330h906kxdw-nginx.conf test is successful container-test-run-certificates> ca: (finished: waiting for unit step-ca.service, in 24.16 seconds) container-test-run-certificates> ca: waiting for file '/var/lib/acme/ca.foo/fullchain.pem' container-test-run-certificates> ca: (finished: waiting for file '/var/lib/acme/ca.foo/fullchain.pem', in 0.00 seconds) container-test-run-certificates> ca: must succeed: systemctl restart nginx.service container-test-run-certificates> ca # [1478541.721746] ca systemd[1]: Reloaded Nginx Web Server. container-test-run-certificates> ca # [1478541.721960] ca systemd[1]: Startup finished in 23.483s. container-test-run-certificates> ca # [1478541.977466] ca systemd[1]: Stopping Nginx Web Server... container-test-run-certificates> ca # [1478542.027498] ca systemd[1]: nginx.service: Deactivated successfully. container-test-run-certificates> ca # [1478542.027671] ca systemd[1]: Stopped Nginx Web Server. container-test-run-certificates> ca # [1478542.027690] ca systemd[1]: nginx.service: Consumed 4.382s CPU time over 8.314s wall clock time. container-test-run-certificates> ca # [1478542.029967] ca systemd[1]: Starting Nginx Web Server... container-test-run-certificates> ca: (finished: must succeed: systemctl restart nginx.service, in 1.14 seconds) container-test-run-certificates> server: systemd-nspawn running (pid 440) container-test-run-certificates> server: Waiting for journal at /build/vm-state-server/var/log/journal... container-test-run-certificates> client: systemd-nspawn running (pid 443) container-test-run-certificates> client: Waiting for journal at /build/vm-state-client/var/log/journal... container-test-run-certificates> server: waiting for file '/var/lib/acme/test.foo/fullchain.pem' container-test-run-certificates> nixos-nspawn(server): TAP vde-tap1 not found; container will be isolated from VDE container-test-run-certificates> nixos-nspawn(server): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths. container-test-run-certificates> nixos-nspawn(client): TAP vde-tap1 not found; container will be isolated from VDE container-test-run-certificates> nixos-nspawn(client): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths. container-test-run-certificates> Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file. container-test-run-certificates> Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file. container-test-run-certificates> ░ Spawning container server on /build/vm-state-server. container-test-run-certificates> ░ Spawning container client on /build/vm-state-client. container-test-run-certificates> ca # [1478543.106420] ca nginx-pre-start[370]: nginx: the configuration file /nix/store/1kcn7dvrsjnq1in21z9k9330h906kxdw-nginx.conf syntax is ok container-test-run-certificates> ca # [1478543.106733] ca nginx-pre-start[370]: nginx: configuration file /nix/store/1kcn7dvrsjnq1in21z9k9330h906kxdw-nginx.conf test is successful container-test-run-certificates> ca # [1478543.110142] ca systemd[1]: Started Nginx Web Server. container-test-run-certificates> server # [1478543.677507] server systemd-journald[72]: Journal started container-test-run-certificates> server # [1478543.677532] server systemd-journald[72]: Runtime Journal (/run/log/journal/228682fcb79b4bfe82a246cb3bda23bf) is 8M, max 3.7G, 3.7G free. container-test-run-certificates> server # [1478543.691910] server systemd[1]: Finished Apply Kernel Variables. container-test-run-certificates> server # [1478543.701909] server systemd[1]: Finished Create Static Device Nodes in /dev gracefully. container-test-run-certificates> server # [1478543.713703] server systemd[1]: Starting Flush Journal to Persistent Storage... container-test-run-certificates> server # [1478543.714098] server systemd[1]: Starting Network Name Resolution... container-test-run-certificates> client # [1478543.677242] client systemd-journald[72]: Journal started container-test-run-certificates> server # [1478543.714537] server systemd[1]: Starting Create Static Device Nodes in /dev... container-test-run-certificates> client # [1478543.677274] client systemd-journald[72]: Runtime Journal (/run/log/journal/b63ad2f51de941e6ad605f468a6ae835) is 8M, max 3.7G, 3.7G free. container-test-run-certificates> server # [1478543.738006] server systemd-journald[72]: Time spent on flushing to /var/log/journal/228682fcb79b4bfe82a246cb3bda23bf is 927us for 7 entries. container-test-run-certificates> client # [1478543.691718] client systemd[1]: Listening on Journal Log Access Socket. container-test-run-certificates> server # [1478543.738006] server systemd-journald[72]: System Journal (/var/log/journal/228682fcb79b4bfe82a246cb3bda23bf) is 8M, max 4G, 3.9G free. container-test-run-certificates> client # [1478543.691954] client systemd[1]: Finished Apply Kernel Variables. container-test-run-certificates> server # [1478543.750623] server systemd[1]: Finished Create Static Device Nodes in /dev. container-test-run-certificates> client # [1478543.702385] client systemd[1]: Finished Create Static Device Nodes in /dev gracefully. container-test-run-certificates> server # [1478543.751009] server systemd[1]: Reached target Preparation for Local File Systems. container-test-run-certificates> client # [1478543.713387] client systemd[1]: Starting Flush Journal to Persistent Storage... container-test-run-certificates> server # [1478543.751064] server systemd[1]: Reached target Local File Systems. container-test-run-certificates> client # [1478543.713962] client systemd[1]: Starting Network Name Resolution... container-test-run-certificates> client # [1478543.714513] client systemd[1]: Starting Create Static Device Nodes in /dev... container-test-run-certificates> client # [1478543.738005] client systemd-journald[72]: Time spent on flushing to /var/log/journal/b63ad2f51de941e6ad605f468a6ae835 is 948us for 8 entries. container-test-run-certificates> client # [1478543.738005] client systemd-journald[72]: System Journal (/var/log/journal/b63ad2f51de941e6ad605f468a6ae835) is 8M, max 4G, 3.9G free. container-test-run-certificates> server # [1478543.751574] server systemd[1]: Listening on Boot Loader Control Service Socket. container-test-run-certificates> server # [1478543.751600] server systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> server # [1478543.752004] server systemd[1]: Starting Save Transient machine-id to Disk... container-test-run-certificates> server # [1478543.752022] server systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys container-test-run-certificates> server # [1478543.761977] server systemd[1]: Finished Firewall. container-test-run-certificates> client # [1478543.753016] client systemd[1]: Finished Create Static Device Nodes in /dev. container-test-run-certificates> server # [1478543.762109] server systemd[1]: Reached target Preparation for Network. container-test-run-certificates> client # [1478543.753398] client systemd[1]: Reached target Preparation for Local File Systems. container-test-run-certificates> server # [1478543.762292] server systemd[1]: Listening on Network Management Resolve Hook Socket. container-test-run-certificates> client # [1478543.753451] client systemd[1]: Reached target Local File Systems. container-test-run-certificates> server # [1478543.762747] server systemd[1]: Starting Network Management... container-test-run-certificates> client # [1478543.753863] client systemd[1]: Listening on Boot Loader Control Service Socket. container-test-run-certificates> server # [1478543.788789] server systemd[1]: Finished Flush Journal to Persistent Storage. container-test-run-certificates> client # [1478543.753889] client systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> server # [1478543.789548] server systemd[1]: Starting Create System Files and Directories... container-test-run-certificates> client # [1478543.754307] client systemd[1]: Starting Save Transient machine-id to Disk... container-test-run-certificates> client # [1478543.754322] client systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys container-test-run-certificates> server # [1478543.803908] server systemd-tmpfiles[183]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted container-test-run-certificates> client # [1478543.756672] client systemd[1]: Finished Firewall. container-test-run-certificates> server # [1478543.804069] server systemd-tmpfiles[183]: fchmod() of /var/log/journal failed: Operation not permitted container-test-run-certificates> client # [1478543.756752] client systemd[1]: Reached target Preparation for Network. container-test-run-certificates> server # [1478543.804170] server systemd-tmpfiles[183]: fchmod() of /var/log/journal/228682fcb79b4bfe82a246cb3bda23bf failed: Operation not permitted container-test-run-certificates> client # [1478543.756887] client systemd[1]: Listening on Network Management Resolve Hook Socket. container-test-run-certificates> server # [1478543.804322] server systemd-tmpfiles[183]: fchmod() of /run/log/journal failed: Operation not permitted container-test-run-certificates> server # [1478543.805446] server systemd[1]: Finished Create System Files and Directories. container-test-run-certificates> client # [1478543.757302] client systemd[1]: Starting Network Management... container-test-run-certificates> server # [1478543.806234] server systemd[1]: Starting Rebuild Journal Catalog... container-test-run-certificates> client # [1478543.788822] client systemd[1]: Finished Flush Journal to Persistent Storage. container-test-run-certificates> server # [1478543.806868] server systemd[1]: Starting Record System Boot/Shutdown in UTMP... container-test-run-certificates> client # [1478543.789690] client systemd[1]: Starting Create System Files and Directories... container-test-run-certificates> server # [1478543.813398] server systemd[1]: Finished Record System Boot/Shutdown in UTMP. container-test-run-certificates> client # [1478543.801362] client systemd-tmpfiles[179]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted container-test-run-certificates> server # [1478543.820692] server systemd[1]: Finished Rebuild Journal Catalog. container-test-run-certificates> server # [1478543.821249] server systemd[1]: Starting Update is Completed... container-test-run-certificates> client # [1478543.801511] client systemd-tmpfiles[179]: fchmod() of /var/log/journal failed: Operation not permitted container-test-run-certificates> server # [1478543.825844] server systemd[1]: Finished Update is Completed. container-test-run-certificates> client # [1478543.801614] client systemd-tmpfiles[179]: fchmod() of /var/log/journal/b63ad2f51de941e6ad605f468a6ae835 failed: Operation not permitted container-test-run-certificates> client # [1478543.801767] client systemd-tmpfiles[179]: fchmod() of /run/log/journal failed: Operation not permitted container-test-run-certificates> client # [1478543.802956] client systemd[1]: Finished Create System Files and Directories. container-test-run-certificates> client # [1478543.803813] client systemd[1]: Starting Rebuild Journal Catalog... container-test-run-certificates> client # [1478543.804551] client systemd[1]: Starting Record System Boot/Shutdown in UTMP... container-test-run-certificates> client # [1478543.811124] client systemd[1]: Finished Record System Boot/Shutdown in UTMP. container-test-run-certificates> client # [1478543.816749] client systemd[1]: Finished Rebuild Journal Catalog. container-test-run-certificates> client # [1478543.817614] client systemd[1]: Starting Update is Completed... container-test-run-certificates> client # [1478543.822538] client systemd[1]: Finished Update is Completed. container-test-run-certificates> client # [1478544.406910] client systemd-networkd[175]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted container-test-run-certificates> server # [1478544.385336] server systemd-networkd[179]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted container-test-run-certificates> client # [1478544.406974] client systemd-networkd[175]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted container-test-run-certificates> server # [1478544.385416] server systemd-networkd[179]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted container-test-run-certificates> client # [1478544.414454] client systemd-networkd[175]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> server # [1478544.393872] server systemd-networkd[179]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> client # [1478544.414601] client systemd-networkd[175]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> server # [1478544.394028] server systemd-networkd[179]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> client # [1478544.414670] client systemd-networkd[175]: lo: Link UP container-test-run-certificates> server # [1478544.394127] server systemd-networkd[179]: lo: Link UP container-test-run-certificates> server # [1478544.394131] server systemd-networkd[179]: lo: Gained carrier container-test-run-certificates> client # [1478544.414673] client systemd-networkd[175]: lo: Gained carrier container-test-run-certificates> server # [1478544.394295] server systemd-networkd[179]: eth1: Configuring with /etc/systemd/network/40-eth1.network. container-test-run-certificates> server # [1478544.394581] server systemd[1]: Started Network Management. container-test-run-certificates> client # [1478544.414816] client systemd-networkd[175]: eth1: Configuring with /etc/systemd/network/40-eth1.network. container-test-run-certificates> server # [1478544.394635] server systemd-networkd[179]: eth1: Link UP container-test-run-certificates> server # [1478544.394786] server systemd-networkd[179]: eth1: Gained carrier container-test-run-certificates> client # [1478544.415059] client systemd[1]: Started Network Management. container-test-run-certificates> client # [1478544.421168] client systemd-networkd[175]: eth1: Link UP container-test-run-certificates> server # [1478544.395374] server systemd[1]: Starting Enable Persistent Storage in systemd-networkd... container-test-run-certificates> client # [1478544.421191] client systemd[1]: Starting Enable Persistent Storage in systemd-networkd... container-test-run-certificates> server # [1478544.425570] server systemd[1]: Finished Enable Persistent Storage in systemd-networkd. container-test-run-certificates> client # [1478544.421365] client systemd-networkd[175]: eth1: Gained carrier container-test-run-certificates> client # [1478544.441039] client systemd[1]: Finished Enable Persistent Storage in systemd-networkd. container-test-run-certificates> server # [1478544.929944] server systemd-resolved[127]: Positive Trust Anchors: container-test-run-certificates> server # [1478544.929952] server systemd-resolved[127]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d container-test-run-certificates> server # [1478544.929956] server systemd-resolved[127]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 container-test-run-certificates> server # [1478544.929973] server systemd-resolved[127]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test container-test-run-certificates> server # [1478544.945833] server systemd-resolved[127]: Using system hostname 'server'. container-test-run-certificates> server # [1478544.947111] server systemd[1]: Started Network Name Resolution. container-test-run-certificates> server # [1478544.947199] server systemd[1]: Reached target Network. container-test-run-certificates> server # [1478544.947244] server systemd[1]: Reached target Network is Online. container-test-run-certificates> server # [1478544.947281] server systemd[1]: Reached target System Initialization. container-test-run-certificates> server # [1478544.947510] server systemd[1]: Started Renew ACME Certificate for test.foo. container-test-run-certificates> server # [1478544.947536] server systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> server # [1478544.947551] server systemd[1]: Started Daily Cleanup of Temporary Directories. container-test-run-certificates> server # [1478544.947571] server systemd[1]: Reached target Timer Units. container-test-run-certificates> server # [1478544.947693] server systemd[1]: Listening on D-Bus System Message Bus Socket. container-test-run-certificates> server # [1478544.947781] server systemd[1]: Listening on Nix Daemon Socket. container-test-run-certificates> server # [1478544.947876] server systemd[1]: Listening on Virtual Machine and Container Registration Service Socket. container-test-run-certificates> server # [1478544.947889] server systemd[1]: Reached target Socket Units. container-test-run-certificates> server # [1478544.947920] server systemd[1]: Reached target Basic System. container-test-run-certificates> server # [1478544.949902] server systemd[1]: Starting Set up the ACME certificate renewal infrastructure... container-test-run-certificates> server # [1478544.950661] server systemd[1]: Starting Import lastlog data into lastlog2 database... container-test-run-certificates> server # [1478544.950687] server systemd[1]: nginx-config-reload.service skipped, unmet condition check ConditionPathExists=/var/lib/acme/test.foo/fullchain.pem container-test-run-certificates> server # [1478544.951443] server systemd[1]: Starting Name Service Cache Daemon (nsncd)... container-test-run-certificates> server # [1478544.952469] server systemd[1]: Starting D-Bus System Message Bus... container-test-run-certificates> server # [1478544.984042] server systemd[1]: Finished Import lastlog data into lastlog2 database. container-test-run-certificates> server # [1478545.078140] server acme-setup-privileged[194]: + set -euo pipefail container-test-run-certificates> server # [1478545.078140] server acme-setup-privileged[194]: + cd /var/lib/acme container-test-run-certificates> server # [1478545.078480] server acme-setup-privileged[194]: + chmod -R u=rwX,g=,o= .lego/accounts container-test-run-certificates> server # [1478545.080032] server acme-setup-privileged[194]: + chown -R acme .lego/accounts container-test-run-certificates> server # [1478545.080130] server acme-setup-privileged[194]: + for fixpath in test.foo .lego/test.foo container-test-run-certificates> server # [1478545.080153] server acme-setup-privileged[194]: + '[' -d test.foo ']' container-test-run-certificates> server # [1478545.080153] server acme-setup-privileged[194]: + for fixpath in test.foo .lego/test.foo container-test-run-certificates> server # [1478545.080153] server acme-setup-privileged[194]: + '[' -d .lego/test.foo ']' container-test-run-certificates> server # [1478545.119330] server nsncd[196]: Sep 21 09:59:19.542 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket" container-test-run-certificates> server # [1478545.119452] server systemd[1]: Started Name Service Cache Daemon (nsncd). container-test-run-certificates> server # [1478545.119521] server systemd[1]: Reached target Host and Network Name Lookups. container-test-run-certificates> server # [1478545.119571] server systemd[1]: Reached target User and Group Name Lookups. container-test-run-certificates> server # [1478545.120387] server systemd[1]: Starting User Login Management... container-test-run-certificates> server # [1478545.120932] server systemd[1]: Starting Permit User Sessions... container-test-run-certificates> server # [1478545.126446] server systemd[1]: Finished Permit User Sessions. container-test-run-certificates> server # [1478545.127218] server systemd[1]: Started Console Getty. container-test-run-certificates> server # [1478545.127243] server systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0 container-test-run-certificates> server # [1478545.127257] server systemd[1]: Reached target Login Prompts. container-test-run-certificates> server # [1478545.237555] server dbus-broker-launch[197]: Looking up NSS user entry for 'systemd-timesync'... container-test-run-certificates> server # [1478545.237982] server dbus-broker-launch[197]: NSS returned no entry for 'systemd-timesync' container-test-run-certificates> server # [1478545.237982] server dbus-broker-launch[197]: Invalid user-name in /nix/store/8w07vg50wwd1nd826jppv2vnif6nysyz-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync" container-test-run-certificates> server # [1478545.238209] server systemd[1]: Started D-Bus System Message Bus. container-test-run-certificates> client # [1478544.949008] client systemd-resolved[127]: Positive Trust Anchors: container-test-run-certificates> client # [1478544.949018] client systemd-resolved[127]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d container-test-run-certificates> client # [1478544.949022] client systemd-resolved[127]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 container-test-run-certificates> client # [1478544.949039] client systemd-resolved[127]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test container-test-run-certificates> client # [1478544.961324] client systemd-resolved[127]: Using system hostname 'client'. container-test-run-certificates> client # [1478544.962477] client systemd[1]: Started Network Name Resolution. container-test-run-certificates> client # [1478544.962561] client systemd[1]: Reached target Network. container-test-run-certificates> client # [1478544.962611] client systemd[1]: Reached target System Initialization. container-test-run-certificates> client # [1478544.962653] client systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> client # [1478544.962673] client systemd[1]: Started Daily Cleanup of Temporary Directories. container-test-run-certificates> client # [1478544.962687] client systemd[1]: Reached target Timer Units. container-test-run-certificates> client # [1478544.962800] client systemd[1]: Listening on D-Bus System Message Bus Socket. container-test-run-certificates> client # [1478544.962904] client systemd[1]: Listening on Nix Daemon Socket. container-test-run-certificates> client # [1478544.963015] client systemd[1]: Listening on Virtual Machine and Container Registration Service Socket. container-test-run-certificates> client # [1478544.963035] client systemd[1]: Reached target Socket Units. container-test-run-certificates> client # [1478544.963065] client systemd[1]: Reached target Basic System. container-test-run-certificates> client # [1478544.972365] client systemd[1]: Starting Import lastlog data into lastlog2 database... container-test-run-certificates> client # [1478544.973515] client systemd[1]: Starting Name Service Cache Daemon (nsncd)... container-test-run-certificates> client # [1478544.974760] client systemd[1]: Starting D-Bus System Message Bus... container-test-run-certificates> client # [1478544.985596] client systemd[1]: Finished Import lastlog data into lastlog2 database. container-test-run-certificates> client # [1478545.108289] client nsncd[191]: Sep 21 09:59:19.531 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket" container-test-run-certificates> client # [1478545.108378] client systemd[1]: Started Name Service Cache Daemon (nsncd). container-test-run-certificates> client # [1478545.108439] client systemd[1]: Reached target Host and Network Name Lookups. container-test-run-certificates> client # [1478545.108473] client systemd[1]: Reached target User and Group Name Lookups. container-test-run-certificates> client # [1478545.109168] client systemd[1]: Starting User Login Management... container-test-run-certificates> client # [1478545.109502] client systemd[1]: Starting Permit User Sessions... container-test-run-certificates> client # [1478545.115414] client systemd[1]: Finished Permit User Sessions. container-test-run-certificates> client # [1478545.115878] client systemd[1]: Started Console Getty. container-test-run-certificates> client # [1478545.115898] client systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0 container-test-run-certificates> client # [1478545.115908] client systemd[1]: Reached target Login Prompts. container-test-run-certificates> client # [1478545.244206] client dbus-broker-launch[192]: Looking up NSS user entry for 'systemd-timesync'... container-test-run-certificates> client # [1478545.244690] client dbus-broker-launch[192]: NSS returned no entry for 'systemd-timesync' container-test-run-certificates> client # [1478545.244690] client dbus-broker-launch[192]: Invalid user-name in /nix/store/4h111szpdzzhwmlwzqmzchaihv9sdkmc-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync" container-test-run-certificates> client # [1478545.244942] client systemd[1]: Started D-Bus System Message Bus. container-test-run-certificates> server # [1478545.241484] server dbus-broker-launch[197]: Ready container-test-run-certificates> server # [1478545.473115] server systemd-networkd[179]: eth1: Gained IPv6LL container-test-run-certificates> client # [1478545.248183] client dbus-broker-launch[192]: Ready container-test-run-certificates> server # [1478545.794671] server systemd-logind[226]: New seat seat0. container-test-run-certificates> server # [1478545.794780] server systemd[1]: Started User Login Management. container-test-run-certificates> server # [1478545.795602] server systemd[1]: Starting linger-users.service... container-test-run-certificates> server # [1478545.827431] server systemd[1]: linger-users.service: Deactivated successfully. container-test-run-certificates> server # [1478545.827572] server systemd[1]: Finished linger-users.service. container-test-run-certificates> server # [1478545.862435] server acme-setup-start[210]: + set -euo pipefail container-test-run-certificates> server # [1478545.862435] server acme-setup-start[210]: + test -e ca/key.pem container-test-run-certificates> server # [1478545.862435] server acme-setup-start[210]: + minica --ca-key ca/key.pem --ca-cert ca/cert.pem --domains selfsigned.local container-test-run-certificates> server # [1478545.870670] server systemd[1]: Finished Set up the ACME certificate renewal infrastructure. container-test-run-certificates> server # [1478545.871635] server systemd[1]: Starting Ensure certificate for test.foo... container-test-run-certificates> client # [1478545.829820] client systemd-logind[207]: New seat seat0. container-test-run-certificates> client # [1478545.830041] client systemd[1]: Started User Login Management. container-test-run-certificates> client # [1478545.831201] client systemd[1]: Starting linger-users.service... container-test-run-certificates> client # [1478545.841281] client systemd[1]: linger-users.service: Deactivated successfully. container-test-run-certificates> client # [1478545.841439] client systemd[1]: Finished linger-users.service. container-test-run-certificates> client # [1478545.841793] client systemd[1]: Reached target Multi-User System. container-test-run-certificates> client # [1478546.176124] client systemd-networkd[175]: eth1: Gained IPv6LL container-test-run-certificates> server # [1478546.708410] server acme-test.foo-start[247]: Waiting to acquire lock in /run/acme/ container-test-run-certificates> server # [1478546.709910] server acme-test.foo-start[247]: + '[' -e out/acme-success ']' container-test-run-certificates> server # [1478546.709934] server acme-test.foo-start[247]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=test.foo --ip-addresses= container-test-run-certificates> server # [1478546.714476] server acme-test.foo-start[257]: + cd test.foo container-test-run-certificates> server # [1478546.714622] server acme-test.foo-start[257]: + cp -vp cert.pem ../out/cert.pem container-test-run-certificates> server # [1478546.715229] server acme-test.foo-start[258]: 'cert.pem' -> '../out/cert.pem' container-test-run-certificates> server # [1478546.715339] server acme-test.foo-start[257]: + cp -vp key.pem ../out/key.pem container-test-run-certificates> server # [1478546.715923] server acme-test.foo-start[257]: 'key.pem' -> '../out/key.pem' container-test-run-certificates> server # [1478546.716036] server acme-test.foo-start[247]: + cat out/cert.pem ca/cert.pem container-test-run-certificates> server # [1478546.716849] server acme-test.foo-start[247]: + cp ca/cert.pem out/chain.pem container-test-run-certificates> server # [1478546.717643] server acme-test.foo-start[247]: + cat out/key.pem out/fullchain.pem container-test-run-certificates> server # [1478546.718398] server acme-test.foo-start[247]: + for fixpath in out certificates container-test-run-certificates> server # [1478546.718411] server acme-test.foo-start[247]: + '[' -d out ']' container-test-run-certificates> server # [1478546.718411] server acme-test.foo-start[247]: + chmod -R u=rwX,g=rX,o= out container-test-run-certificates> server # [1478546.719189] server acme-test.foo-start[247]: + chown -R acme:nginx out container-test-run-certificates> server # [1478546.720461] server acme-test.foo-start[247]: + for fixpath in out certificates container-test-run-certificates> server # [1478546.720461] server acme-test.foo-start[247]: + '[' -d certificates ']' container-test-run-certificates> server # [1478546.722367] server systemd[1]: Finished Ensure certificate for test.foo. container-test-run-certificates> server # [1478546.723145] server systemd[1]: Starting Nginx Web Server... container-test-run-certificates> server # [1478547.233527] server systemd[1]: etc-machine\x2did.mount: Deactivated successfully. container-test-run-certificates> server # [1478547.234350] server systemd[1]: Finished Save Transient machine-id to Disk. container-test-run-certificates> client # [1478547.232665] client systemd[1]: etc-machine\x2did.mount: Deactivated successfully. container-test-run-certificates> client # [1478547.233433] client systemd[1]: Finished Save Transient machine-id to Disk. container-test-run-certificates> client # [1478547.233558] client systemd[1]: Startup finished in 3.856s. container-test-run-certificates> server # [1478547.501281] server nginx-pre-start[270]: nginx: the configuration file /nix/store/gjfpf92r5ay3yh007dqmwgdjhx6xqkhc-nginx.conf syntax is ok container-test-run-certificates> server # [1478547.501579] server nginx-pre-start[270]: nginx: configuration file /nix/store/gjfpf92r5ay3yh007dqmwgdjhx6xqkhc-nginx.conf test is successful container-test-run-certificates> server # [1478547.504291] server systemd[1]: Started Nginx Web Server. container-test-run-certificates> server # [1478547.504540] server systemd[1]: Reached target Multi-User System. container-test-run-certificates> server # [1478547.505208] server systemd[1]: Starting Order (and renew) ACME certificate for test.foo... container-test-run-certificates> server # [1478548.300612] server acme-order-renew-test.foo-start[273]: Waiting to acquire lock in /run/acme/ container-test-run-certificates> server # [1478548.302150] server acme-order-renew-test.foo-start[273]: + set -euo pipefail container-test-run-certificates> server # [1478548.302190] server acme-order-renew-test.foo-start[273]: + exec container-test-run-certificates> server # [1478548.302221] server acme-order-renew-test.foo-start[273]: + /nix/store/m9ik4hd36632x3n2ibrxl2vyi0w4y094-flock-0.4.0/bin/flock 11 container-test-run-certificates> server # [1478548.302820] server acme-order-renew-test.foo-start[285]: ++ find accounts -path '*/keys/*.key' -print -quit container-test-run-certificates> server # [1478548.304149] server acme-order-renew-test.foo-start[273]: + '[' -n '' ']' container-test-run-certificates> server # [1478548.304189] server acme-order-renew-test.foo-start[273]: + exec container-test-run-certificates> server # [1478548.304208] server acme-order-renew-test.foo-start[273]: + '[' -e certificates/test.foo.key ']' container-test-run-certificates> server # [1478548.304227] server acme-order-renew-test.foo-start[273]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo/acme/acme/directory --key-type ec256 -d test.foo --no-random-sleep --renew-force --ari-disable --force-cert-domains container-test-run-certificates> server # [1478548.313947] server acme-order-renew-test.foo-start[286]: 2026-09-21T09:59:22.737262734Z INFO Private key saved. filepath=accounts/ca.foo/none@none.tld/none@none.tld.key container-test-run-certificates> server # [1478548.330390] server acme-order-renew-test.foo-start[286]: 2026-09-21T09:59:22.753705274Z INFO Registering the account. email=none@none.tld container-test-run-certificates> server # [1478548.343896] server acme-order-renew-test.foo-start[286]: 2026-09-21T09:59:22.767194350Z WARN !!!! HEADS UP !!!! container-test-run-certificates> server # [1478548.343896] server acme-order-renew-test.foo-start[286]: Your account credentials have been saved in your container-test-run-certificates> server # [1478548.343896] server acme-order-renew-test.foo-start[286]: configuration directory at "accounts". container-test-run-certificates> server # [1478548.343896] server acme-order-renew-test.foo-start[286]: You should make a secure backup of this folder now. This container-test-run-certificates> server # [1478548.343896] server acme-order-renew-test.foo-start[286]: configuration directory will also contain private keys container-test-run-certificates> server # [1478548.343896] server acme-order-renew-test.foo-start[286]: generated by lego and certificates obtained from the ACME container-test-run-certificates> server # [1478548.343896] server acme-order-renew-test.foo-start[286]: server. Making regular backups of this folder is ideal. container-test-run-certificates> server # [1478548.344159] server acme-order-renew-test.foo-start[286]: 2026-09-21T09:59:22.767336388Z INFO Obtaining bundled SAN certificate. domains=test.foo container-test-run-certificates> server # [1478548.408876] server acme-order-renew-test.foo-start[286]: 2026-09-21T09:59:22.832180090Z INFO Use solver. domain=test.foo type=http-01 container-test-run-certificates> server # [1478548.408876] server acme-order-renew-test.foo-start[286]: 2026-09-21T09:59:22.832208313Z INFO http01: Trying to solve HTTP-01. domain=test.foo container-test-run-certificates> server # [1478548.412219] server acme-order-renew-test.foo-start[286]: 2026-09-21T09:59:22.835541221Z INFO The server validated our request. domain=test.foo container-test-run-certificates> server # [1478548.412280] server acme-order-renew-test.foo-start[286]: 2026-09-21T09:59:22.835589963Z INFO Validations succeeded; requesting certificates. domains=test.foo container-test-run-certificates> server # [1478548.417698] server acme-order-renew-test.foo-start[286]: 2026-09-21T09:59:22.841023547Z INFO Server responded with a certificate. domains=test.foo container-test-run-certificates> server # [1478548.417746] server acme-order-renew-test.foo-start[286]: 2026-09-21T09:59:22.841060607Z INFO Writing file. filepath=certificates/test.foo.crt container-test-run-certificates> server # [1478548.417772] server acme-order-renew-test.foo-start[286]: 2026-09-21T09:59:22.841105882Z INFO Writing file. filepath=certificates/test.foo.issuer.crt container-test-run-certificates> server # [1478548.417798] server acme-order-renew-test.foo-start[286]: 2026-09-21T09:59:22.841134837Z INFO Writing file. filepath=certificates/test.foo.key container-test-run-certificates> server # [1478548.417849] server acme-order-renew-test.foo-start[286]: 2026-09-21T09:59:22.841184079Z INFO Writing file. filepath=certificates/test.foo.json container-test-run-certificates> server # [1478548.420177] server acme-order-renew-test.foo-start[273]: + touch out/acme-success container-test-run-certificates> server # [1478548.421171] server acme-order-renew-test.foo-start[273]: + cmp -s certificates/test.foo.crt out/fullchain.pem container-test-run-certificates> server # [1478548.421897] server acme-order-renew-test.foo-start[273]: + touch out/renewed container-test-run-certificates> server # [1478548.422696] server acme-order-renew-test.foo-start[273]: + echo Installing new certificate container-test-run-certificates> server # [1478548.422696] server acme-order-renew-test.foo-start[273]: Installing new certificate container-test-run-certificates> server # [1478548.422696] server acme-order-renew-test.foo-start[273]: + cp -vp certificates/test.foo.crt out/fullchain.pem container-test-run-certificates> server # [1478548.423459] server acme-order-renew-test.foo-start[305]: 'certificates/test.foo.crt' -> 'out/fullchain.pem' container-test-run-certificates> server # [1478548.423594] server acme-order-renew-test.foo-start[273]: + cp -vp certificates/test.foo.key out/key.pem container-test-run-certificates> server # [1478548.424254] server acme-order-renew-test.foo-start[306]: 'certificates/test.foo.key' -> 'out/key.pem' container-test-run-certificates> server # [1478548.424380] server acme-order-renew-test.foo-start[273]: + cp -vp certificates/test.foo.issuer.crt out/chain.pem container-test-run-certificates> server # [1478548.425116] server acme-order-renew-test.foo-start[307]: 'certificates/test.foo.issuer.crt' -> 'out/chain.pem' container-test-run-certificates> server # [1478548.425243] server acme-order-renew-test.foo-start[273]: + ln -sf fullchain.pem out/cert.pem container-test-run-certificates> server # [1478548.426015] server acme-order-renew-test.foo-start[273]: + cat out/key.pem out/fullchain.pem container-test-run-certificates> server # [1478548.426849] server acme-order-renew-test.foo-start[273]: + for fixpath in out certificates container-test-run-certificates> server # [1478548.426849] server acme-order-renew-test.foo-start[273]: + '[' -d out ']' container-test-run-certificates> server # [1478548.426886] server acme-order-renew-test.foo-start[273]: + chmod -R u=rwX,g=rX,o= out container-test-run-certificates> server # [1478548.427662] server acme-order-renew-test.foo-start[273]: + chown -R acme:nginx out container-test-run-certificates> server # [1478548.428910] server acme-order-renew-test.foo-start[273]: + for fixpath in out certificates container-test-run-certificates> server # [1478548.428925] server acme-order-renew-test.foo-start[273]: + '[' -d certificates ']' container-test-run-certificates> server # [1478548.428925] server acme-order-renew-test.foo-start[273]: + chmod -R u=rwX,g=rX,o= certificates container-test-run-certificates> server # [1478548.429707] server acme-order-renew-test.foo-start[273]: + chown -R acme:nginx certificates container-test-run-certificates> server # [1478548.431038] server acme-order-renew-test.foo-start[273]: + chmod -R u=rwX,g=,o= accounts/. container-test-run-certificates> ca # [1478548.330079] ca step-ca[206]: time="2026-09-21T09:59:22Z" level=info duration="67.768µs" duration-ns=67768 fields.time="2026-09-21T09:59:22Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="::1" request-id=5812246c-1af9-4a49-a23e-868a31e0b71c response="{\"newNonce\":\"https://ca.foo/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo/acme/acme/new-account\",\"newOrder\":\"https://ca.foo/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo/acme/acme/key-change\"}" size=252 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [1478548.339769] ca step-ca[206]: time="2026-09-21T09:59:22Z" level=info duration=8.183814ms duration-ns=8183814 fields.time="2026-09-21T09:59:22Z" method=HEAD name=ca nonce=alNhMnl3NU02SWdxVlVucDZiVGZmY3hUSjVOM1A5UXY path=/acme/acme/new-nonce protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=d344313d-692b-4aef-a6f9-4cc9fd7e2050 size=0 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [1478548.343376] ca step-ca[206]: time="2026-09-21T09:59:22Z" level=info duration=1.719168ms duration-ns=1719168 fields.time="2026-09-21T09:59:22Z" method=POST name=ca nonce=VlBIbnNRdnlzSjcxWjM4cjBBQ1NzZ3dZdDJ0NVdwaHo path=/acme/acme/new-account protocol=HTTP/1.1 referer= remote-address="::1" request-id=b3c00d8a-bc97-4d6d-a183-a7317c1c1909 response="{\"contact\":[\"mailto:none@none.tld\"],\"status\":\"valid\",\"orders\":\"https://ca.foo/acme/acme/account/Z0z3Hm12LAEEkDUc9DeCyHCDlD0wzJxV/orders\"}" size=138 status=201 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [1478548.347566] ca step-ca[206]: time="2026-09-21T09:59:22Z" level=info duration=2.212598ms duration-ns=2212598 fields.time="2026-09-21T09:59:22Z" method=POST name=ca nonce=cDBqYzM3VVBtVm1uMmNUZ0kxVXdEQVl1R1I3bjRWN0g path=/acme/acme/new-order protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=34c0dd49-7a17-42ec-bfb7-d7558a154523 response="{\"id\":\"FeFOOH4gkd17DMTLPArSuMY7kDOZTdCw\",\"status\":\"pending\",\"expires\":\"2026-09-22T09:59:22Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"test.foo\"}],\"notBefore\":\"2026-09-21T09:58:22Z\",\"notAfter\":\"2026-12-20T09:59:22Z\",\"authorizations\":[\"https://ca.foo/acme/acme/authz/95ngv5fUhAPl54XMpLEkBgNecClSyOuq\"],\"finalize\":\"https://ca.foo/acme/acme/order/FeFOOH4gkd17DMTLPArSuMY7kDOZTdCw/finalize\"}" size=384 status=201 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [1478548.408418] ca step-ca[206]: time="2026-09-21T09:59:22Z" level=info duration=2.741033ms duration-ns=2741033 fields.time="2026-09-21T09:59:22Z" method=POST name=ca nonce=SjdiOTR4WncwOW52WXlzZ0pIY0M3TE5lanFHYTZpcUQ path=/acme/acme/authz/95ngv5fUhAPl54XMpLEkBgNecClSyOuq protocol=HTTP/1.1 referer= remote-address="::1" request-id=8fdbf640-3bc3-4c9a-b013-69bc0b6e1204 response="{\"identifier\":{\"type\":\"dns\",\"value\":\"test.foo\"},\"status\":\"pending\",\"challenges\":[{\"type\":\"dns-01\",\"status\":\"pending\",\"token\":\"IA4Od1WVsZ1Y3SfHNfELISpAYOKPZum9\",\"url\":\"https://ca.foo/acme/acme/challenge/95ngv5fUhAPl54XMpLEkBgNecClSyOuq/Mo7ePM2ajx2Gh0Hvk7fFxmvbFXoRPteW\"},{\"type\":\"http-01\",\"status\":\"pending\",\"token\":\"IA4Od1WVsZ1Y3SfHNfELISpAYOKPZum9\",\"url\":\"https://ca.foo/acme/acme/challenge/95ngv5fUhAPl54XMpLEkBgNecClSyOuq/cItEPYbQPGCgxqQ2oB0m805q7t2IKTK5\"},{\"type\":\"tls-alpn-01\",\"status\":\"pending\",\"token\":\"IA4Od1WVsZ1Y3SfHNfELISpAYOKPZum9\",\"url\":\"https://ca.foo/acme/acme/challenge/95ngv5fUhAPl54XMpLEkBgNecClSyOuq/3HOQuEVzZc0Y9whbRMVncAziPDtLmLHx\"}],\"wildcard\":false,\"expires\":\"2026-09-22T09:59:22Z\"}" size=706 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [1478548.411939] ca step-ca[206]: time="2026-09-21T09:59:22Z" level=info duration=1.8639ms duration-ns=1863900 fields.time="2026-09-21T09:59:22Z" method=POST name=ca nonce=ZUhVYTZYdGJCTUJ1djYxUnA0djJyWkdIN3BFSE9XbUU path=/acme/acme/challenge/95ngv5fUhAPl54XMpLEkBgNecClSyOuq/cItEPYbQPGCgxqQ2oB0m805q7t2IKTK5 protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=49b77a08-7caa-4595-8f52-8c0e961019bb response="{\"type\":\"http-01\",\"status\":\"valid\",\"token\":\"IA4Od1WVsZ1Y3SfHNfELISpAYOKPZum9\",\"validated\":\"2026-09-21T09:59:22Z\",\"url\":\"https://ca.foo/acme/acme/challenge/95ngv5fUhAPl54XMpLEkBgNecClSyOuq/cItEPYbQPGCgxqQ2oB0m805q7t2IKTK5\"}" size=223 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [1478548.416008] ca step-ca[206]: time="2026-09-21T09:59:22Z" level=info duration=2.88843ms duration-ns=2888430 fields.time="2026-09-21T09:59:22Z" method=POST name=ca nonce=UU1oTEdkOGdFVld2aUh0UUZ0UEZUY3puekFBRFNQaEo path=/acme/acme/order/FeFOOH4gkd17DMTLPArSuMY7kDOZTdCw/finalize protocol=HTTP/1.1 referer= remote-address="::1" request-id=b1c3132e-8886-4dbb-b349-37b78de61834 response="{\"id\":\"FeFOOH4gkd17DMTLPArSuMY7kDOZTdCw\",\"status\":\"valid\",\"expires\":\"2026-09-22T09:59:22Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"test.foo\"}],\"notBefore\":\"2026-09-21T09:58:22Z\",\"notAfter\":\"2026-12-20T09:59:22Z\",\"authorizations\":[\"https://ca.foo/acme/acme/authz/95ngv5fUhAPl54XMpLEkBgNecClSyOuq\"],\"finalize\":\"https://ca.foo/acme/acme/order/FeFOOH4gkd17DMTLPArSuMY7kDOZTdCw/finalize\",\"certificate\":\"https://ca.foo/acme/acme/certificate/5BdoCflyhcI1eDAyiCioXnKNdk2LbcnH\"}" size=468 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [1478548.417522] ca step-ca[206]: time="2026-09-21T09:59:22Z" level=info certificate=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 duration="613.395µs" duration-ns=613395 fields.time="2026-09-21T09:59:22Z" issuer="Clan Intermediate CA" method=POST name=ca nonce=T2xLT3VYNlcyU2h2NWNpeDZLS0IyVjNRM2ZZdUZ2RHE path=/acme/acme/certificate/5BdoCflyhcI1eDAyiCioXnKNdk2LbcnH protocol=HTTP/1.1 provisioner=acme public-key="ECDSA P-256" referer= remote-address=127.0.0.1 request-id=362fbd06-6b3b-485c-b56b-0b9ee02520d7 sans="map[dns:[test.foo]]" serial=238812391006407261729548048345410917244 size=1352 status=200 subject=test.foo user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; amd64)" user-id= valid-from="2026-09-21T09:58:22Z" valid-to="2026-12-20T09:59:22Z" container-test-run-certificates> server # [1478548.574051] server systemd[1]: Reloading Nginx Web Server... container-test-run-certificates> server # [1478548.580697] server systemd[1]: acme-order-renew-test.foo.service: Deactivated successfully. container-test-run-certificates> server # [1478548.598100] server systemd[1]: Finished Order (and renew) ACME certificate for test.foo. container-test-run-certificates> server # [1478549.323396] server nginx[323]: nginx: the configuration file /nix/store/gjfpf92r5ay3yh007dqmwgdjhx6xqkhc-nginx.conf syntax is ok container-test-run-certificates> server # [1478549.323660] server nginx[323]: nginx: configuration file /nix/store/gjfpf92r5ay3yh007dqmwgdjhx6xqkhc-nginx.conf test is successful container-test-run-certificates> server: (finished: waiting for file '/var/lib/acme/test.foo/fullchain.pem', in 7.14 seconds) container-test-run-certificates> server: must succeed: systemctl restart nginx.service container-test-run-certificates> server # [1478550.196758] server systemd[1]: Reloaded Nginx Web Server. container-test-run-certificates> server # [1478550.196983] server systemd[1]: Startup finished in 6.819s. container-test-run-certificates> server # [1478550.257756] server systemd[1]: Stopping Nginx Web Server... container-test-run-certificates> server # [1478550.305122] server systemd[1]: nginx.service: Deactivated successfully. container-test-run-certificates> server # [1478550.305297] server systemd[1]: Stopped Nginx Web Server. container-test-run-certificates> server # [1478550.305324] server systemd[1]: nginx.service: Consumed 4.792s CPU time over 3.582s wall clock time. container-test-run-certificates> server # [1478550.306815] server systemd[1]: Starting Nginx Web Server... container-test-run-certificates> server: (finished: must succeed: systemctl restart nginx.service, in 0.94 seconds) container-test-run-certificates> client: waiting for success: curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: 2001:db8:1::3 container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying [2001:db8:1::3]:443... container-test-run-certificates> * connect to 2001:db8:1::3 port 443 from 2001:db8:1::2 port 60590 failed: Connection refused container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * connect to 192.168.1.3 port 443 from 192.168.1.2 port 56434 failed: Connection refused container-test-run-certificates> * Failed to connect to test.foo:443 after 1 ms: Could not connect to server container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (7) Failed to connect to test.foo:443 after 1 ms: Could not connect to server container-test-run-certificates> server # [1478551.189109] server nginx-pre-start[346]: nginx: the configuration file /nix/store/gjfpf92r5ay3yh007dqmwgdjhx6xqkhc-nginx.conf syntax is ok container-test-run-certificates> server # [1478551.189404] server nginx-pre-start[346]: nginx: configuration file /nix/store/gjfpf92r5ay3yh007dqmwgdjhx6xqkhc-nginx.conf test is successful container-test-run-certificates> server # [1478551.192302] server systemd[1]: Started Nginx Web Server. container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: 2001:db8:1::3 container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying [2001:db8:1::3]:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [934 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [80 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Sep 21 09:58:22 2026 GMT container-test-run-certificates> * expire date: Dec 20 09:59:22 2026 GMT container-test-run-certificates> * issuer: CN=Clan Intermediate CA container-test-run-certificates> * Certificate level 0: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 1: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 2: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 0 container-test-run-certificates> * SSL certificate verified via OpenSSL. container-test-run-certificates> * Established connection to test.foo (2001:db8:1::3 port 443) from 2001:db8:1::2 port 60606 container-test-run-certificates> % Total % Received % Xferd Average Speed Time Time Time Current container-test-run-certificates> Dload Upload Total Spent Left Speed container-test-run-certificates> 0 0 0 0 0 0 0 0 0* using HTTP/2 container-test-run-certificates> * [HTTP/2] [1] OPENED stream for https://test.foo/ container-test-run-certificates> * [HTTP/2] [1] [:method: GET] container-test-run-certificates> * [HTTP/2] [1] [:scheme: https] container-test-run-certificates> * [HTTP/2] [1] [:authority: test.foo] container-test-run-certificates> * [HTTP/2] [1] [:path: /] container-test-run-certificates> * [HTTP/2] [1] [user-agent: curl/8.22.0] container-test-run-certificates> * [HTTP/2] [1] [accept: */*] container-test-run-certificates> } [5 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> * Request completely sent off container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> { [5 bytes data] container-test-run-certificates> 100 20 100 20 0 0 1737 0 0 container-test-run-certificates> * Connection #0 to host test.foo:443 left intact container-test-run-certificates> client: (finished: waiting for success: curl -v https://test.foo, in 1.03 seconds) container-test-run-certificates> client: must succeed: openssl s_client -connect test.foo:443 -servername test.foo /dev/null | openssl x509 -text -noout 1>&2 container-test-run-certificates> Certificate: container-test-run-certificates> Data: container-test-run-certificates> Version: 3 (0x2) container-test-run-certificates> Serial Number: container-test-run-certificates> b3:a9:97:ef:28:2d:1d:b2:a9:fe:53:fc:cf:d9:53:7c container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Issuer: CN=Clan Intermediate CA container-test-run-certificates> Validity container-test-run-certificates> Not Before: Sep 21 09:58:22 2026 GMT container-test-run-certificates> Not After : Dec 20 09:59:22 2026 GMT container-test-run-certificates> Subject: CN=test.foo container-test-run-certificates> Subject Public Key Info: container-test-run-certificates> Public Key Algorithm: id-ecPublicKey container-test-run-certificates> Public-Key: (256 bit) container-test-run-certificates> pub: container-test-run-certificates> 04:06:85:35:30:03:04:26:87:c7:fe:ff:d1:c2:08: container-test-run-certificates> 30:84:f4:09:7d:c1:1e:5b:8d:f8:71:a7:48:03:67: container-test-run-certificates> 07:17:cb:d8:db:ee:64:f1:ba:04:be:f7:e9:da:63: container-test-run-certificates> a6:7c:90:7f:08:17:2f:24:c9:b0:59:fd:fa:21:e4: container-test-run-certificates> cf:a6:3a:ed:e6 container-test-run-certificates> ASN1 OID: prime256v1 container-test-run-certificates> NIST CURVE: P-256 container-test-run-certificates> X509v3 extensions: container-test-run-certificates> X509v3 Key Usage: critical container-test-run-certificates> Digital Signature container-test-run-certificates> X509v3 Extended Key Usage: container-test-run-certificates> TLS Web Server Authentication, TLS Web Client Authentication container-test-run-certificates> X509v3 Subject Key Identifier: container-test-run-certificates> CA:38:8C:1B:D2:15:04:C7:B4:E5:83:01:87:4E:A2:F3:A8:B7:47:98 container-test-run-certificates> X509v3 Authority Key Identifier: container-test-run-certificates> E4:89:04:F3:FA:AE:D7:CF:D2:9F:57:09:D3:B9:FE:FB:38:A4:73:10 container-test-run-certificates> X509v3 Subject Alternative Name: container-test-run-certificates> DNS:test.foo container-test-run-certificates> 1.3.6.1.4.1.37476.9000.64.1: container-test-run-certificates> 0......acme.. container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Signature Value: container-test-run-certificates> 30:46:02:21:00:e9:05:fa:2f:a9:93:d1:a0:c0:a0:24:92:58: container-test-run-certificates> c3:34:e6:73:59:d4:98:a4:3a:f5:99:27:4b:f0:1b:df:89:e3: container-test-run-certificates> 89:02:21:00:b7:54:f4:d9:ef:1e:13:10:b5:c6:54:2a:69:34: container-test-run-certificates> 2d:0a:b0:7e:65:a4:b3:1d:b0:af:bc:8b:a0:79:ab:08:f0:30 container-test-run-certificates> client: (finished: must succeed: openssl s_client -connect test.foo:443 -servername test.foo /dev/null | openssl x509 -text -noout 1>&2, in 0.02 seconds) container-test-run-certificates> (finished: run the VM test script, in 34.43 seconds) container-test-run-certificates> test script finished in 34.77s container-test-run-certificates> cleanup container-test-run-certificates> kill NspawnMachine (pid 50) container-test-run-certificates> kill NspawnMachine (pid 443) container-test-run-certificates> Container ca terminated by signal KILL. container-test-run-certificates> kill NspawnMachine (pid 440) container-test-run-certificates> Container client terminated by signal KILL. container-test-run-certificates> Container server terminated by signal KILL. container-test-run-certificates> (finished: cleanup, in 0.24 seconds) post-build step Upload to niks3: ok time=2026-09-21T09:59:27.650Z level=INFO msg="Uploading 0 paths to niks3.clan.lol (1 already cached)" time=2026-09-21T09:59:28.878Z level=INFO msg="Uploading 1 narinfos" time=2026-09-21T09:59:29.805Z level=INFO msg="Upload complete. (2.227s)"