container-test-run-user-firewall-nftables
checks.aarch64-linux.nixos-test-user-firewall-nftables
· build #742
· raw
1Machine state will be reset. To keep it, pass --keep-machine-state2start all VLans3(finished: start all VLans, in 0.00 seconds)45Test will time out and terminate in 3600.0 seconds6run the VM test script7additionally exposed symbols:8 machine, router,9 vlan1,10 start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh11start all VMs12machine: systemd-nspawn running (pid 52)13machine: Waiting for journal at /build/vm-state-machine/var/log/journal...14router: systemd-nspawn running (pid 55)15router: Waiting for journal at /build/vm-state-router/var/log/journal...16(finished: start all VMs, in 0.00 seconds)17router: waiting for unit multi-user.target18nixos-nspawn(machine): TAP vde-tap1 not found; container will be isolated from VDE19nixos-nspawn(machine): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.20nixos-nspawn(router): TAP vde-tap1 not found; container will be isolated from VDE21nixos-nspawn(router): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.22Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.23░ Spawning container machine on /build/vm-state-machine.24Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.25░ Spawning container router on /build/vm-state-router.26machine # [1478434.271530] machine systemd-journald[57]: Journal started27machine # [1478434.271591] machine systemd-journald[57]: Runtime Journal (/run/log/journal/6b73f96ddb0f425fad731e66145b7c38) is 8M, max 2.5G, 2.4G free.28machine # [1478434.278202] machine systemd[1]: Finished Apply Kernel Variables.29machine # [1478434.290473] machine systemd[1]: Finished Create Static Device Nodes in /dev gracefully.30machine # [1478434.305354] machine systemd[1]: Starting Flush Journal to Persistent Storage...31machine # [1478434.360617] machine systemd[1]: Starting Create Static Device Nodes in /dev...32machine # [1478434.366751] machine systemd-journald[57]: Time spent on flushing to /var/log/journal/6b73f96ddb0f425fad731e66145b7c38 is 1.376ms for 6 entries.33router # [1478434.269457] router systemd-journald[57]: Journal started34router # [1478434.269518] router systemd-journald[57]: Runtime Journal (/run/log/journal/7e38ffcfe11e4ac8a56ba0fb262e7d28) is 8M, max 2.5G, 2.4G free.35router # [1478434.286103] router systemd[1]: Finished Create Static Device Nodes in /dev gracefully.36router # [1478434.301550] router systemd[1]: Starting Flush Journal to Persistent Storage...37router # [1478434.302492] router systemd[1]: Starting Network Name Resolution...38router # [1478434.303369] router systemd[1]: Starting Create Static Device Nodes in /dev...39router # [1478434.366631] router systemd-journald[57]: Time spent on flushing to /var/log/journal/7e38ffcfe11e4ac8a56ba0fb262e7d28 is 2.477ms for 6 entries.40machine # [1478434.366751] machine systemd-journald[57]: System Journal (/var/log/journal/6b73f96ddb0f425fad731e66145b7c38) is 8M, max 4G, 3.9G free.41machine # [1478434.385305] machine systemd[1]: Finished Create Static Device Nodes in /dev.42machine # [1478434.386115] machine systemd[1]: Reached target Preparation for Local File Systems.43machine # [1478434.386242] machine systemd[1]: Reached target Local File Systems.44machine # [1478434.387127] machine systemd[1]: Listening on Boot Loader Control Service Socket.45machine # [1478434.387177] machine systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container46machine # [1478434.388265] machine systemd[1]: Starting Save Transient machine-id to Disk...47machine # [1478434.388303] machine systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys48machine # [1478434.418038] machine systemd[1]: Finished Flush Journal to Persistent Storage.49machine # [1478434.419874] machine systemd[1]: Starting Create System Files and Directories...50machine # [1478434.438004] machine systemd-tmpfiles[69]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted51machine # [1478434.438209] machine systemd-tmpfiles[69]: fchmod() of /var/log/journal failed: Operation not permitted52machine # [1478434.438333] machine systemd-tmpfiles[69]: fchmod() of /var/log/journal/6b73f96ddb0f425fad731e66145b7c38 failed: Operation not permitted53machine # [1478434.438512] machine systemd-tmpfiles[69]: fchmod() of /run/log/journal failed: Operation not permitted54router # [1478434.366631] router systemd-journald[57]: System Journal (/var/log/journal/7e38ffcfe11e4ac8a56ba0fb262e7d28) is 8M, max 4G, 3.9G free.55router # [1478434.397007] router systemd[1]: Finished Create Static Device Nodes in /dev.56router # [1478434.397739] router systemd[1]: Reached target Preparation for Local File Systems.57router # [1478434.397864] router systemd[1]: Reached target Local File Systems.58router # [1478434.398769] router systemd[1]: Listening on Boot Loader Control Service Socket.59router # [1478434.398821] router systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container60router # [1478434.399918] router systemd[1]: Starting Save Transient machine-id to Disk...61router # [1478434.399960] router systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys62router # [1478434.404182] router systemd[1]: Starting Network Management...63router # [1478434.419608] router systemd[1]: Finished Flush Journal to Persistent Storage.64router # [1478434.421274] router systemd[1]: Starting Create System Files and Directories...65router # [1478434.439137] router systemd-tmpfiles[73]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted66router # [1478434.439337] router systemd-tmpfiles[73]: fchmod() of /var/log/journal failed: Operation not permitted67router # [1478434.439471] router systemd-tmpfiles[73]: fchmod() of /var/log/journal/7e38ffcfe11e4ac8a56ba0fb262e7d28 failed: Operation not permitted68router # [1478434.439671] router systemd-tmpfiles[73]: fchmod() of /run/log/journal failed: Operation not permitted69router # [1478434.441417] router systemd[1]: Finished Create System Files and Directories.70machine # [1478434.440248] machine systemd[1]: Finished Create System Files and Directories.71router # [1478434.443948] router systemd[1]: Starting Rebuild Journal Catalog...72machine # [1478434.441622] machine systemd[1]: Starting Rebuild Journal Catalog...73router # [1478434.444804] router systemd[1]: Starting Record System Boot/Shutdown in UTMP...74machine # [1478434.442537] machine systemd[1]: Starting Record System Boot/Shutdown in UTMP...75router # [1478434.457764] router systemd[1]: Finished Record System Boot/Shutdown in UTMP.76machine # [1478434.455228] machine systemd[1]: Finished Record System Boot/Shutdown in UTMP.77router # [1478434.464522] router systemd[1]: Finished Rebuild Journal Catalog.78machine # [1478434.462140] machine systemd[1]: Finished Rebuild Journal Catalog.79router # [1478434.468705] router systemd[1]: Starting Update is Completed...80machine # [1478434.463399] machine systemd[1]: Starting Update is Completed...81router # [1478434.480561] router systemd[1]: Finished Update is Completed.82machine # [1478434.474973] machine systemd[1]: Finished Update is Completed.83router # [1478434.632894] router systemd[1]: Finished Save Transient machine-id to Disk.84machine # [1478434.475175] machine systemd[1]: Reached target System Initialization.85machine # [1478434.475275] machine systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container86machine # [1478434.475319] machine systemd[1]: Started Daily Cleanup of Temporary Directories.87machine # [1478434.475338] machine systemd[1]: Reached target Timer Units.88machine # [1478434.475475] machine systemd[1]: Listening on D-Bus System Message Bus Socket.89machine # [1478434.475657] machine systemd[1]: Listening on Nix Daemon Socket.90machine # [1478434.475792] machine systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.91machine # [1478434.475820] machine systemd[1]: Reached target Socket Units.92machine # [1478434.475864] machine systemd[1]: Reached target Basic System.93machine # [1478434.477424] machine systemd[1]: Starting Import lastlog data into lastlog2 database...94machine # [1478434.478570] machine systemd[1]: Starting nftables firewall...95machine # [1478434.479572] machine systemd[1]: Starting Name Service Cache Daemon (nsncd)...96machine # [1478434.500418] machine systemd[1]: Finished Import lastlog data into lastlog2 database.97machine # [1478434.633358] machine systemd[1]: Finished Save Transient machine-id to Disk.98machine # [1478434.647962] machine systemd[1]: Finished nftables firewall.99machine # [1478434.648193] machine systemd[1]: Reached target Preparation for Network.100machine # [1478434.649354] machine systemd[1]: Starting Address configuration of eth1...101machine # [1478434.650476] machine systemd[1]: Starting Extra networking commands....102machine # [1478434.651434] machine systemd[1]: Starting Setup wg0 dummy interface...103machine # [1478434.667984] machine network-addresses-eth1-start[95]: adding address 192.168.1.1/24... done104machine # [1478434.670890] machine network-addresses-eth1-start[95]: adding address 2001:db8:1::1/64... done105machine # [1478434.671745] machine systemd[1]: Finished Setup wg0 dummy interface.106machine # [1478434.674837] machine systemd[1]: Finished Address configuration of eth1.107machine # [1478434.722058] machine systemd[1]: nscd.service: Deactivated successfully.108machine # [1478434.722572] machine systemd[1]: Stopped Name Service Cache Daemon (nsncd).109machine # [1478434.725628] machine systemd[1]: Starting Name Service Cache Daemon (nsncd)...110machine # [1478434.768774] machine systemd[1]: Finished Extra networking commands..111machine # [1478434.769062] machine systemd[1]: Reached target Network.112machine # [1478434.770434] machine systemd[1]: Starting Nginx Web Server...113machine # [1478435.011419] machine nsncd[161]: Sep 21 10:07:34.997 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"114machine # [1478435.011572] machine systemd[1]: Started Name Service Cache Daemon (nsncd).115machine # [1478435.011656] machine systemd[1]: Reached target Host and Network Name Lookups.116machine # [1478435.011741] machine systemd[1]: Reached target User and Group Name Lookups.117machine # [1478435.013368] machine systemd[1]: Starting User Login Management...118machine # [1478435.014445] machine systemd[1]: Starting Permit User Sessions...119machine # [1478435.065939] machine systemd[1]: Finished Permit User Sessions.120machine # [1478435.067396] machine systemd[1]: Started Console Getty.121machine # [1478435.067461] machine systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0122machine # [1478435.067483] machine systemd[1]: Reached target Login Prompts.123machine # [1478435.275023] machine systemd[1]: etc-machine\x2did.mount: Deactivated successfully.124router # [1478435.341996] router systemd[1]: etc-machine\x2did.mount: Deactivated successfully.125router # [1478435.828214] router systemd-networkd[69]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted126router # [1478435.828330] router systemd-networkd[69]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted127router # [1478435.839109] router systemd-networkd[69]: lo: Link UP128router # [1478435.839118] router systemd-networkd[69]: lo: Gained carrier129router # [1478435.839356] router systemd-networkd[69]: eth1: Configuring with /etc/systemd/network/40-eth1.network.130router # [1478435.840089] router systemd-networkd[69]: eth1: Link UP131router # [1478435.840459] router systemd-networkd[69]: eth1: Gained carrier132router # [1478435.840581] router systemd[1]: Started Network Management.133router # [1478435.843045] router systemd[1]: Starting Enable Persistent Storage in systemd-networkd...134router # [1478435.888684] router systemd[1]: Finished Enable Persistent Storage in systemd-networkd.135router # [1478436.864543] router systemd-networkd[69]: eth1: Gained IPv6LL136machine # [1478437.298879] machine systemd-logind[182]: New seat seat0.137machine # [1478437.299103] machine systemd[1]: Started User Login Management.138machine # [1478437.314634] machine systemd[1]: Starting D-Bus System Message Bus...139machine # [1478437.316317] machine systemd[1]: Starting linger-users.service...140machine # [1478437.334060] machine systemd[1]: linger-users.service: Deactivated successfully.141machine # [1478437.334321] machine systemd[1]: Finished linger-users.service.142machine # [1478437.339223] machine nginx-pre-start[195]: nginx: the configuration file /nix/store/xjq1y7rgjsl4zik5k98n903gva3pxa6q-nginx.conf syntax is ok143machine # [1478437.339573] machine nginx-pre-start[195]: nginx: configuration file /nix/store/xjq1y7rgjsl4zik5k98n903gva3pxa6q-nginx.conf test is successful144machine # [1478437.351531] machine systemd[1]: Started Nginx Web Server.145machine # [1478437.351773] machine systemd[1]: Reached target Multi-User System.146router # [1478437.574181] router systemd-resolved[64]: Positive Trust Anchors:147router # [1478437.574194] router systemd-resolved[64]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d148router # [1478437.574198] router systemd-resolved[64]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16149router # [1478437.574234] router systemd-resolved[64]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test150router # [1478437.598589] router systemd-resolved[64]: Using system hostname 'router'.151router # [1478437.600853] router systemd[1]: Started Network Name Resolution.152router # [1478437.600952] router systemd[1]: Reached target Network.153router # [1478437.601020] router systemd[1]: Reached target System Initialization.154router # [1478437.601080] router systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container155router # [1478437.601114] router systemd[1]: Started Daily Cleanup of Temporary Directories.156router # [1478437.601138] router systemd[1]: Reached target Timer Units.157router # [1478437.601295] router systemd[1]: Listening on D-Bus System Message Bus Socket.158router # [1478437.601467] router systemd[1]: Listening on Nix Daemon Socket.159router # [1478437.601597] router systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.160router # [1478437.601620] router systemd[1]: Reached target Socket Units.161router # [1478437.601661] router systemd[1]: Reached target Basic System.162router # [1478437.602971] router systemd[1]: Starting Import lastlog data into lastlog2 database...163router # [1478437.604455] router systemd[1]: Starting Nginx Web Server...164router # [1478437.605595] router systemd[1]: Starting Name Service Cache Daemon (nsncd)...165router # [1478437.607291] router systemd[1]: Starting D-Bus System Message Bus...166router # [1478437.660743] router systemd[1]: Finished Import lastlog data into lastlog2 database.167router # [1478438.296027] router nsncd[87]: Sep 21 10:07:38.281 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"168router # [1478438.295846] router systemd[1]: Started Name Service Cache Daemon (nsncd).169router # [1478438.295917] router systemd[1]: Reached target Host and Network Name Lookups.170router # [1478438.295982] router systemd[1]: Reached target User and Group Name Lookups.171router # [1478438.297250] router systemd[1]: Starting User Login Management...172router # [1478438.298114] router systemd[1]: Starting Permit User Sessions...173router # [1478438.348084] router systemd[1]: Finished Permit User Sessions.174router # [1478438.349220] router systemd[1]: Started Console Getty.175router # [1478438.349267] router systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0176router # [1478438.349288] router systemd[1]: Reached target Login Prompts.177machine # [1478438.352700] machine dbus-broker-launch[192]: Looking up NSS user entry for 'systemd-timesync'...178machine # [1478438.353897] machine dbus-broker-launch[192]: NSS returned no entry for 'systemd-timesync'179machine # [1478438.353897] machine dbus-broker-launch[192]: Invalid user-name in /nix/store/s11da5biy5nwjsfv6xwzpy2rcj62r4g9-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"180machine # [1478438.354571] machine systemd[1]: Started D-Bus System Message Bus.181machine # [1478438.362894] machine dbus-broker-launch[192]: Ready182machine # [1478438.372208] machine systemd[1]: Startup finished in 4.529s.183router # [1478438.550755] router dbus-broker-launch[88]: Looking up NSS user entry for 'systemd-timesync'...184router # [1478438.551528] router dbus-broker-launch[88]: NSS returned no entry for 'systemd-timesync'185router # [1478438.551528] router dbus-broker-launch[88]: Invalid user-name in /nix/store/9ngrjc4sgq189g2x7rlpmvs94cjfr9ns-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"186router # [1478438.552390] router systemd[1]: Started D-Bus System Message Bus.187router # [1478438.559284] router dbus-broker-launch[88]: Ready188router # [1478439.437452] router nginx-pre-start[117]: nginx: the configuration file /nix/store/c1zlbk8mxzxk9grphl8b8iq8iczd7fna-nginx.conf syntax is ok189router # [1478439.437944] router nginx-pre-start[117]: nginx: configuration file /nix/store/c1zlbk8mxzxk9grphl8b8iq8iczd7fna-nginx.conf test is successful190router # [1478439.479738] router systemd[1]: Started Nginx Web Server.191router # [1478439.612475] router systemd-logind[104]: New seat seat0.192router # [1478439.612967] router systemd[1]: Started User Login Management.193router # [1478439.614895] router systemd[1]: Starting linger-users.service...194router # [1478439.676532] router systemd[1]: linger-users.service: Deactivated successfully.195router # [1478439.676791] router systemd[1]: Finished linger-users.service.196router # [1478439.678105] router systemd[1]: Reached target Multi-User System.197router # [1478439.679989] router systemd[1]: Startup finished in 5.834s.198router: (finished: waiting for unit multi-user.target, in 6.66 seconds)199router: waiting for TCP port 80 on localhost200Connection to localhost (::1) 80 port [tcp/http] succeeded!201router: (finished: waiting for TCP port 80 on localhost, in 1.02 seconds)202machine: waiting for unit multi-user.target203machine: (finished: waiting for unit multi-user.target, in 0.01 seconds)204machine: waiting for unit nginx.service205machine: (finished: waiting for unit nginx.service, in 0.02 seconds)206router: must succeed: ip -4 addr show eth1 | grep -oP '(?<=inet\s)\d+(\.\d+){3}'207router: (finished: must succeed: ip -4 addr show eth1 | grep -oP '(?<=inet\s)\d+(\.\d+){3}', in 0.01 seconds)208router: must succeed: ip -6 addr show eth1 | grep -oP '(?<=inet6\s)[0-9a-f:]+' | grep -v '^fe80' | head -1209router: (finished: must succeed: ip -6 addr show eth1 | grep -oP '(?<=inet6\s)[0-9a-f:]+' | grep -v '^fe80' | head -1, in 0.01 seconds)210Router IPv4: 192.168.1.2211Router IPv6: 2001:db8:1::2212machine: must succeed: systemctl restart nftables213machine: (finished: must succeed: systemctl restart nftables, in 0.18 seconds)214machine: waiting for unit nftables.service215machine: (finished: waiting for unit nftables.service, in 0.01 seconds)216machine: must succeed: nft list table inet user-firewall >&2217table inet user-firewall {218 chain output {219 type filter hook output priority filter; policy accept;220 oifname "lo" counter packets 0 bytes 0 accept comment "allow lo"221 oifname "tun*" counter packets 0 bytes 0 accept comment "allow tun*"222 oifname "tap*" counter packets 0 bytes 0 accept comment "allow tap*"223 oifname "wg*" counter packets 0 bytes 0 accept comment "allow wg*"224 oifname "tailscale*" counter packets 0 bytes 0 accept comment "allow tailscale*"225 oifname "zt*" counter packets 0 bytes 0 accept comment "allow zt*"226 oifname "vpn*" counter packets 0 bytes 0 accept comment "allow vpn*"227 oifname "ipsec*" counter packets 0 bytes 0 accept comment "allow ipsec*"228 oifname "nebula*" counter packets 0 bytes 0 accept comment "allow nebula*"229 oifname "tinc*" counter packets 0 bytes 0 accept comment "allow tinc*"230 oifname "edge*" counter packets 0 bytes 0 accept comment "allow edge*"231 oifname "hyprspace" counter packets 0 bytes 0 accept comment "allow hyprspace"232 oifname "ham0" counter packets 0 bytes 0 accept comment "allow ham0"233 oifname "easytier" counter packets 0 bytes 0 accept comment "allow easytier"234 oifname "mycelium" counter packets 0 bytes 0 accept comment "allow mycelium"235 meta skuid 1002 counter packets 0 bytes 0 reject comment "blocked user bob"236 }237}238machine: (finished: must succeed: nft list table inet user-firewall >&2, in 0.01 seconds)239machine: waiting for success: runuser -u alice -- curl -s http://127.0.0.1:8080240machine: (finished: waiting for success: runuser -u alice -- curl -s http://127.0.0.1:8080, in 0.02 seconds)241machine: must succeed: runuser -u alice -- curl -s http://192.168.1.2242machine: (finished: must succeed: runuser -u alice -- curl -s http://192.168.1.2, in 0.02 seconds)243machine: must succeed: runuser -u alice -- curl -s http://[2001:db8:1::2]244machine: (finished: must succeed: runuser -u alice -- curl -s http://[2001:db8:1::2], in 0.02 seconds)245machine: must succeed: runuser -u bob -- curl -s http://127.0.0.1:8080246machine # [1478441.152994] machine systemd[1]: Stopping nftables firewall...247machine # [1478441.225664] machine systemd[1]: nftables.service: Deactivated successfully.248machine # [1478441.225951] machine systemd[1]: Stopped nftables firewall.249machine # [1478441.227803] machine systemd[1]: Starting nftables firewall...250machine # [1478441.314638] machine systemd[1]: Finished nftables firewall.251machine # [1478441.346835] machine runuser[228]: pam_unix(runuser:session): session opened for user alice(uid=1001) by (uid=0)252machine # [1478441.357853] machine runuser[228]: pam_unix(runuser:session): session closed for user alice253machine # [1478441.367320] machine runuser[230]: pam_unix(runuser:session): session opened for user alice(uid=1001) by (uid=0)254machine # [1478441.378438] machine runuser[230]: pam_unix(runuser:session): session closed for user alice255machine # [1478441.387228] machine runuser[232]: pam_unix(runuser:session): session opened for user alice(uid=1001) by (uid=0)256machine # [1478441.399107] machine runuser[232]: pam_unix(runuser:session): session closed for user alice257machine: (finished: must succeed: runuser -u bob -- curl -s http://127.0.0.1:8080, in 0.02 seconds)258machine: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://192.168.1.2 2>&1 || echo 'EXIT_CODE='$?259machine: (finished: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://192.168.1.2 2>&1 || echo 'EXIT_CODE='$?, in 0.02 seconds)260machine: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://[2001:db8:1::2] 2>&1 || echo 'EXIT_CODE='$?261machine # [1478441.408834] machine runuser[234]: pam_unix(runuser:session): session opened for user bob(uid=1002) by (uid=0)262machine # [1478441.418116] machine runuser[234]: pam_unix(runuser:session): session closed for user bob263machine # [1478441.427017] machine runuser[237]: pam_unix(runuser:session): session opened for user bob(uid=1002) by (uid=0)264machine # [1478441.436615] machine runuser[237]: pam_unix(runuser:session): session closed for user bob265machine # [1478441.445976] machine runuser[240]: pam_unix(runuser:session): session opened for user bob(uid=1002) by (uid=0)266machine: (finished: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://[2001:db8:1::2] 2>&1 || echo 'EXIT_CODE='$?, in 1.03 seconds)267machine: must succeed: nft list table inet user-firewall268machine: (finished: must succeed: nft list table inet user-firewall, in 0.01 seconds)269machine: waiting for unit setup-wg0-interface.service270machine: (finished: waiting for unit setup-wg0-interface.service, in 0.01 seconds)271machine: waiting for unit nginx.service272machine: (finished: waiting for unit nginx.service, in 0.01 seconds)273machine: waiting for TCP port 8081 on 10.100.0.2274Connection to 10.100.0.2 8081 port [tcp/sunproxyadmin] succeeded!275machine: (finished: waiting for TCP port 8081 on 10.100.0.2, in 0.01 seconds)276machine: must succeed: ip link show wg0277machine: (finished: must succeed: ip link show wg0, in 0.01 seconds)278machine: must succeed: ip addr show wg0279machine: (finished: must succeed: ip addr show wg0, in 0.01 seconds)280machine: must succeed: runuser -u alice -- curl -s --interface wg0 http://10.100.0.2:8081/281machine: (finished: must succeed: runuser -u alice -- curl -s --interface wg0 http://10.100.0.2:8081/, in 0.02 seconds)282machine: must succeed: runuser -u alice -- curl -s --interface wg0 http://[fd00::2]:8081/283machine: (finished: must succeed: runuser -u alice -- curl -s --interface wg0 http://[fd00::2]:8081/, in 0.02 seconds)284machine: must succeed: runuser -u bob -- curl -s --interface wg0 http://10.100.0.2:8081/285machine: (finished: must succeed: runuser -u bob -- curl -s --interface wg0 http://10.100.0.2:8081/, in 0.02 seconds)286machine: must succeed: runuser -u bob -- curl -s --interface wg0 http://[fd00::2]:8081/287machine: (finished: must succeed: runuser -u bob -- curl -s --interface wg0 http://[fd00::2]:8081/, in 0.02 seconds)288machine: must succeed: nft list table inet user-firewall | grep -E 'oifname.*wg' >&2289 oifname "wg*" counter packets 0 bytes 0 accept comment "allow wg*"290machine: (finished: must succeed: nft list table inet user-firewall | grep -E 'oifname.*wg' >&2, in 0.01 seconds)291(finished: run the VM test script, in 9.21 seconds)292machine # [1478442.466736] machine runuser[240]: pam_unix(runuser:session): session closed for user bob293machine # [1478442.533789] machine runuser[248]: pam_unix(runuser:session): session opened for user alice(uid=1001) by (uid=0)294machine # [1478442.542907] machine runuser[248]: pam_unix(runuser:session): session closed for user alice295machine # [1478442.550889] machine runuser[250]: pam_unix(runuser:session): session opened for user alice(uid=1001) by (uid=0)296machine # [1478442.559757] machine runuser[250]: pam_unix(runuser:session): session closed for user alice297machine # [1478442.568244] machine runuser[252]: pam_unix(runuser:session): session opened for user bob(uid=1002) by (uid=0)298machine # [1478442.576918] machine runuser[252]: pam_unix(runuser:session): session closed for user bob299machine # [1478442.584734] machine runuser[254]: pam_unix(runuser:session): session opened for user bob(uid=1002) by (uid=0)300machine # [1478442.593431] machine runuser[254]: pam_unix(runuser:session): session closed for user bob301test script finished in 9.48s302cleanup303kill NspawnMachine (pid 52)304kill NspawnMachine (pid 55)305Container machine terminated by signal KILL.306(finished: cleanup, in 0.33 seconds)307Container router terminated by signal KILL.