container-test-run-user-firewall-nftables
checks.aarch64-linux.nixos-test-user-firewall-nftables
· build #748
· raw
1Machine state will be reset. To keep it, pass --keep-machine-state2start all VLans3(finished: start all VLans, in 0.00 seconds)45Test will time out and terminate in 3600.0 seconds6run the VM test script7additionally exposed symbols:8 machine, router,9 vlan1,10 start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh11start all VMs12machine: systemd-nspawn running (pid 52)13router: systemd-nspawn running (pid 53)14machine: Waiting for journal at /build/vm-state-machine/var/log/journal...15router: Waiting for journal at /build/vm-state-router/var/log/journal...16(finished: start all VMs, in 0.00 seconds)17router: waiting for unit multi-user.target18nixos-nspawn(machine): TAP vde-tap1 not found; container will be isolated from VDE19nixos-nspawn(machine): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.20nixos-nspawn(router): TAP vde-tap1 not found; container will be isolated from VDE21nixos-nspawn(router): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.22Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.23Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.24░ Spawning container router on /build/vm-state-router.25░ Spawning container machine on /build/vm-state-machine.26machine # [1547136.689799] machine systemd-journald[57]: Journal started27machine # [1547136.689861] machine systemd-journald[57]: Runtime Journal (/run/log/journal/6287baec14a14e68962a5c221d47c281) is 8M, max 2.5G, 2.4G free.28machine # [1547136.696534] machine systemd[1]: Finished Apply Kernel Variables.29machine # [1547136.708871] machine systemd[1]: Finished Create Static Device Nodes in /dev gracefully.30machine # [1547136.724827] machine systemd[1]: Starting Flush Journal to Persistent Storage...31machine # [1547136.725625] machine systemd[1]: Starting Create Static Device Nodes in /dev...32machine # [1547136.734237] machine systemd-journald[57]: Time spent on flushing to /var/log/journal/6287baec14a14e68962a5c221d47c281 is 1.112ms for 6 entries.33router # [1547136.676377] router systemd-journald[57]: Journal started34router # [1547136.676435] router systemd-journald[57]: Runtime Journal (/run/log/journal/24b89b9f26a3497b9aac7cc80909957b) is 8M, max 2.5G, 2.4G free.35router # [1547136.692089] router systemd[1]: Finished Apply Kernel Variables.36router # [1547136.705489] router systemd[1]: Finished Create Static Device Nodes in /dev gracefully.37router # [1547136.721544] router systemd[1]: Starting Flush Journal to Persistent Storage...38router # [1547136.722529] router systemd[1]: Starting Network Name Resolution...39router # [1547136.723332] router systemd[1]: Starting Create Static Device Nodes in /dev...40router # [1547136.731044] router systemd-journald[57]: Time spent on flushing to /var/log/journal/24b89b9f26a3497b9aac7cc80909957b is 1.114ms for 7 entries.41router # [1547136.731044] router systemd-journald[57]: System Journal (/var/log/journal/24b89b9f26a3497b9aac7cc80909957b) is 8M, max 4G, 3.9G free.42router # [1547136.742936] router systemd[1]: Finished Create Static Device Nodes in /dev.43router # [1547136.743634] router systemd[1]: Reached target Preparation for Local File Systems.44router # [1547136.743757] router systemd[1]: Reached target Local File Systems.45router # [1547136.744638] router systemd[1]: Listening on Boot Loader Control Service Socket.46router # [1547136.744687] router systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container47router # [1547136.745685] router systemd[1]: Starting Save Transient machine-id to Disk...48router # [1547136.745719] router systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys49router # [1547136.746711] router systemd[1]: Starting Network Management...50router # [1547136.837859] router systemd[1]: Finished Flush Journal to Persistent Storage.51router # [1547136.839005] router systemd[1]: Starting Create System Files and Directories...52router # [1547136.854891] router systemd-tmpfiles[73]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted53router # [1547136.855088] router systemd-tmpfiles[73]: fchmod() of /var/log/journal failed: Operation not permitted54router # [1547136.855216] router systemd-tmpfiles[73]: fchmod() of /var/log/journal/24b89b9f26a3497b9aac7cc80909957b failed: Operation not permitted55router # [1547136.855401] router systemd-tmpfiles[73]: fchmod() of /run/log/journal failed: Operation not permitted56machine # [1547136.734237] machine systemd-journald[57]: System Journal (/var/log/journal/6287baec14a14e68962a5c221d47c281) is 8M, max 4G, 3.9G free.57machine # [1547136.744909] machine systemd[1]: Finished Create Static Device Nodes in /dev.58machine # [1547136.745608] machine systemd[1]: Reached target Preparation for Local File Systems.59machine # [1547136.745733] machine systemd[1]: Reached target Local File Systems.60machine # [1547136.746611] machine systemd[1]: Listening on Boot Loader Control Service Socket.61machine # [1547136.746664] machine systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container62machine # [1547136.747459] machine systemd[1]: Starting Save Transient machine-id to Disk...63machine # [1547136.747493] machine systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys64machine # [1547136.845091] machine systemd[1]: Finished Flush Journal to Persistent Storage.65machine # [1547136.846740] machine systemd[1]: Starting Create System Files and Directories...66machine # [1547136.864937] machine systemd-tmpfiles[69]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted67machine # [1547136.865162] machine systemd-tmpfiles[69]: fchmod() of /var/log/journal failed: Operation not permitted68machine # [1547136.865308] machine systemd-tmpfiles[69]: fchmod() of /var/log/journal/6287baec14a14e68962a5c221d47c281 failed: Operation not permitted69machine # [1547136.865519] machine systemd-tmpfiles[69]: fchmod() of /run/log/journal failed: Operation not permitted70machine # [1547136.868509] machine systemd[1]: Finished Create System Files and Directories.71machine # [1547136.869681] machine systemd[1]: Starting Rebuild Journal Catalog...72machine # [1547136.870438] machine systemd[1]: Starting Record System Boot/Shutdown in UTMP...73machine # [1547136.883409] machine systemd[1]: Finished Record System Boot/Shutdown in UTMP.74machine # [1547136.888969] machine systemd[1]: Finished Rebuild Journal Catalog.75machine # [1547136.890185] machine systemd[1]: Starting Update is Completed...76machine # [1547136.901013] machine systemd[1]: Finished Update is Completed.77machine # [1547136.901201] machine systemd[1]: Reached target System Initialization.78machine # [1547136.901297] machine systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container79machine # [1547136.901343] machine systemd[1]: Started Daily Cleanup of Temporary Directories.80machine # [1547136.901362] machine systemd[1]: Reached target Timer Units.81machine # [1547136.901478] machine systemd[1]: Listening on D-Bus System Message Bus Socket.82machine # [1547136.901621] machine systemd[1]: Listening on Nix Daemon Socket.83machine # [1547136.901730] machine systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.84machine # [1547136.901753] machine systemd[1]: Reached target Socket Units.85machine # [1547136.901790] machine systemd[1]: Reached target Basic System.86machine # [1547136.902891] machine systemd[1]: Starting Import lastlog data into lastlog2 database...87machine # [1547136.903779] machine systemd[1]: Starting nftables firewall...88machine # [1547136.904802] machine systemd[1]: Starting Name Service Cache Daemon (nsncd)...89machine # [1547136.924557] machine systemd[1]: Finished Import lastlog data into lastlog2 database.90machine # [1547136.979438] machine systemd[1]: Finished nftables firewall.91machine # [1547136.979628] machine systemd[1]: Reached target Preparation for Network.92machine # [1547136.980704] machine systemd[1]: Starting Address configuration of eth1...93machine # [1547136.981613] machine systemd[1]: Starting Extra networking commands....94machine # [1547136.982405] machine systemd[1]: Starting Setup wg0 dummy interface...95router # [1547136.859456] router systemd[1]: Finished Create System Files and Directories.96router # [1547136.860853] router systemd[1]: Starting Rebuild Journal Catalog...97router # [1547136.861751] router systemd[1]: Starting Record System Boot/Shutdown in UTMP...98router # [1547136.874301] router systemd[1]: Finished Record System Boot/Shutdown in UTMP.99router # [1547136.881099] router systemd[1]: Finished Rebuild Journal Catalog.100router # [1547136.882279] router systemd[1]: Starting Update is Completed...101router # [1547136.892899] router systemd[1]: Finished Update is Completed.102machine # [1547136.998604] machine network-addresses-eth1-start[94]: adding address 192.168.1.1/24... done103machine # [1547137.001521] machine network-addresses-eth1-start[94]: adding address 2001:db8:1::1/64... done104machine # [1547137.001773] machine systemd[1]: Finished Setup wg0 dummy interface.105machine # [1547137.005739] machine systemd[1]: Finished Address configuration of eth1.106machine # [1547137.051623] machine systemd[1]: nscd.service: Deactivated successfully.107machine # [1547137.051864] machine systemd[1]: Stopped Name Service Cache Daemon (nsncd).108machine # [1547137.054728] machine systemd[1]: Starting Name Service Cache Daemon (nsncd)...109machine # [1547137.092277] machine systemd[1]: Finished Extra networking commands..110machine # [1547137.092591] machine systemd[1]: Reached target Network.111machine # [1547137.093825] machine systemd[1]: Starting Nginx Web Server...112machine # [1547137.234858] machine nsncd[163]: Sep 22 05:12:37.220 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"113machine # [1547137.234904] machine systemd[1]: Started Name Service Cache Daemon (nsncd).114machine # [1547137.234963] machine systemd[1]: Reached target Host and Network Name Lookups.115machine # [1547137.235021] machine systemd[1]: Reached target User and Group Name Lookups.116machine # [1547137.236449] machine systemd[1]: Starting User Login Management...117machine # [1547137.237328] machine systemd[1]: Starting Permit User Sessions...118machine # [1547137.248432] machine systemd[1]: Finished Permit User Sessions.119machine # [1547137.249647] machine systemd[1]: Started Console Getty.120machine # [1547137.249691] machine systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0121machine # [1547137.249713] machine systemd[1]: Reached target Login Prompts.122router # [1547137.576864] router systemd-networkd[69]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted123router # [1547137.576963] router systemd-networkd[69]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted124router # [1547137.586488] router systemd-networkd[69]: lo: Link UP125router # [1547137.586496] router systemd-networkd[69]: lo: Gained carrier126router # [1547137.586676] router systemd-networkd[69]: eth1: Configuring with /etc/systemd/network/40-eth1.network.127router # [1547137.587193] router systemd[1]: Started Network Management.128router # [1547137.587193] router systemd-networkd[69]: eth1: Link UP129router # [1547137.587552] router systemd-networkd[69]: eth1: Gained carrier130router # [1547137.589022] router systemd[1]: Starting Enable Persistent Storage in systemd-networkd...131router # [1547137.644999] router systemd[1]: Finished Enable Persistent Storage in systemd-networkd.132machine # [1547138.097943] machine systemd-logind[181]: New seat seat0.133router # [1547138.169952] router systemd-resolved[64]: Positive Trust Anchors:134router # [1547138.169964] router systemd-resolved[64]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d135router # [1547138.169969] router systemd-resolved[64]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16136router # [1547138.170002] router systemd-resolved[64]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test137router # [1547138.192364] router systemd-resolved[64]: Using system hostname 'router'.138router # [1547138.193827] router systemd[1]: Started Network Name Resolution.139router # [1547138.193956] router systemd[1]: Reached target Network.140router # [1547138.194078] router systemd[1]: Reached target System Initialization.141router # [1547138.194167] router systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container142router # [1547138.194223] router systemd[1]: Started Daily Cleanup of Temporary Directories.143router # [1547138.194259] router systemd[1]: Reached target Timer Units.144router # [1547138.194485] router systemd[1]: Listening on D-Bus System Message Bus Socket.145router # [1547138.362810] router systemd[1]: Listening on Nix Daemon Socket.146router # [1547138.363141] router systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.147router # [1547138.363195] router systemd[1]: Reached target Socket Units.148router # [1547138.363301] router systemd[1]: Reached target Basic System.149router # [1547138.365921] router systemd[1]: Starting Import lastlog data into lastlog2 database...150router # [1547138.367510] router systemd[1]: Starting Nginx Web Server...151router # [1547138.369152] router systemd[1]: Starting Name Service Cache Daemon (nsncd)...152router # [1547138.416509] router systemd[1]: Starting D-Bus System Message Bus...153router # [1547138.437541] router systemd[1]: Finished Import lastlog data into lastlog2 database.154router # [1547138.628713] router nsncd[86]: Sep 22 05:12:38.614 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"155router # [1547138.628819] router systemd[1]: Started Name Service Cache Daemon (nsncd).156router # [1547138.628934] router systemd[1]: Reached target Host and Network Name Lookups.157router # [1547138.629048] router systemd[1]: Reached target User and Group Name Lookups.158router # [1547138.631142] router systemd[1]: Starting User Login Management...159router # [1547138.632702] router systemd[1]: Starting Permit User Sessions...160machine # [1547138.098681] machine systemd[1]: Started User Login Management.161machine # [1547138.365198] machine systemd[1]: Starting D-Bus System Message Bus...162machine # [1547138.366748] machine systemd[1]: Starting linger-users.service...163machine # [1547138.387081] machine nginx-pre-start[191]: nginx: the configuration file /nix/store/xjq1y7rgjsl4zik5k98n903gva3pxa6q-nginx.conf syntax is ok164machine # [1547138.387687] machine nginx-pre-start[191]: nginx: configuration file /nix/store/xjq1y7rgjsl4zik5k98n903gva3pxa6q-nginx.conf test is successful165machine # [1547138.416680] machine systemd[1]: Started Nginx Web Server.166machine # [1547138.430058] machine systemd[1]: linger-users.service: Deactivated successfully.167machine # [1547138.430296] machine systemd[1]: Finished linger-users.service.168machine # [1547138.430536] machine systemd[1]: Reached target Multi-User System.169router # [1547138.693006] router systemd[1]: Finished Permit User Sessions.170router # [1547138.694356] router systemd[1]: Started Console Getty.171router # [1547138.694412] router systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0172router # [1547138.694438] router systemd[1]: Reached target Login Prompts.173router # [1547138.807804] router dbus-broker-launch[87]: Looking up NSS user entry for 'systemd-timesync'...174router # [1547138.808858] router dbus-broker-launch[87]: NSS returned no entry for 'systemd-timesync'175router # [1547138.808858] router dbus-broker-launch[87]: Invalid user-name in /nix/store/0qv5k8wki47ysq7dys57wlzvid4ahsz5-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"176router # [1547138.809255] router systemd[1]: Started D-Bus System Message Bus.177router # [1547138.817471] router dbus-broker-launch[87]: Ready178machine # [1547138.856034] machine dbus-broker-launch[192]: Looking up NSS user entry for 'systemd-timesync'...179machine # [1547138.857319] machine dbus-broker-launch[192]: NSS returned no entry for 'systemd-timesync'180machine # [1547138.857319] machine dbus-broker-launch[192]: Invalid user-name in /nix/store/rq1265iyy5fxx7ms81579qn63pmi5w1j-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"181machine # [1547138.857798] machine systemd[1]: Started D-Bus System Message Bus.182machine # [1547138.866492] machine dbus-broker-launch[192]: Ready183router # [1547139.136200] router systemd-networkd[69]: eth1: Gained IPv6LL184router # [1547139.458708] router nginx-pre-start[116]: nginx: the configuration file /nix/store/c1zlbk8mxzxk9grphl8b8iq8iczd7fna-nginx.conf syntax is ok185router # [1547139.459395] router nginx-pre-start[116]: nginx: configuration file /nix/store/c1zlbk8mxzxk9grphl8b8iq8iczd7fna-nginx.conf test is successful186router # [1547139.468191] router systemd[1]: Started Nginx Web Server.187router # [1547139.540352] router systemd-logind[105]: New seat seat0.188router # [1547139.541182] router systemd[1]: Started User Login Management.189router # [1547139.543747] router systemd[1]: Starting linger-users.service...190router # [1547139.602305] router systemd[1]: linger-users.service: Deactivated successfully.191router # [1547139.602500] router systemd[1]: Finished linger-users.service.192router # [1547139.602919] router systemd[1]: Reached target Multi-User System.193router: (finished: waiting for unit multi-user.target, in 5.16 seconds)194router: waiting for TCP port 80 on localhost195Connection to localhost (::1) 80 port [tcp/http] succeeded!196router: (finished: waiting for TCP port 80 on localhost, in 0.01 seconds)197machine: waiting for unit multi-user.target198machine: (finished: waiting for unit multi-user.target, in 0.02 seconds)199machine: waiting for unit nginx.service200machine # [1547140.729493] machine systemd[1]: etc-machine\x2did.mount: Deactivated successfully.201machine # [1547140.731282] machine systemd[1]: Finished Save Transient machine-id to Disk.202machine # [1547140.731821] machine systemd[1]: Startup finished in 4.405s.203machine: (finished: waiting for unit nginx.service, in 0.02 seconds)204router: must succeed: ip -4 addr show eth1 | grep -oP '(?<=inet\s)\d+(\.\d+){3}'205router: (finished: must succeed: ip -4 addr show eth1 | grep -oP '(?<=inet\s)\d+(\.\d+){3}', in 0.01 seconds)206router: must succeed: ip -6 addr show eth1 | grep -oP '(?<=inet6\s)[0-9a-f:]+' | grep -v '^fe80' | head -1207router: (finished: must succeed: ip -6 addr show eth1 | grep -oP '(?<=inet6\s)[0-9a-f:]+' | grep -v '^fe80' | head -1, in 0.01 seconds)208Router IPv4: 192.168.1.2209Router IPv6: 2001:db8:1::2210machine: must succeed: systemctl restart nftables211router # [1547140.718366] router systemd[1]: etc-machine\x2did.mount: Deactivated successfully.212router # [1547140.720279] router systemd[1]: Finished Save Transient machine-id to Disk.213router # [1547140.720623] router systemd[1]: Startup finished in 4.450s.214machine # [1547141.073339] machine systemd[1]: Stopping nftables firewall...215machine # [1547141.202888] machine systemd[1]: nftables.service: Deactivated successfully.216machine # [1547141.203135] machine systemd[1]: Stopped nftables firewall.217machine # [1547141.204736] machine systemd[1]: Starting nftables firewall...218machine: (finished: must succeed: systemctl restart nftables, in 0.29 seconds)219machine: waiting for unit nftables.service220machine: (finished: waiting for unit nftables.service, in 0.02 seconds)221machine: must succeed: nft list table inet user-firewall >&2222table inet user-firewall {223 chain output {224 type filter hook output priority filter; policy accept;225 oifname "lo" counter packets 0 bytes 0 accept comment "allow lo"226 oifname "tun*" counter packets 0 bytes 0 accept comment "allow tun*"227 oifname "tap*" counter packets 0 bytes 0 accept comment "allow tap*"228 oifname "wg*" counter packets 0 bytes 0 accept comment "allow wg*"229 oifname "tailscale*" counter packets 0 bytes 0 accept comment "allow tailscale*"230 oifname "zt*" counter packets 0 bytes 0 accept comment "allow zt*"231 oifname "vpn*" counter packets 0 bytes 0 accept comment "allow vpn*"232 oifname "ipsec*" counter packets 0 bytes 0 accept comment "allow ipsec*"233 oifname "nebula*" counter packets 0 bytes 0 accept comment "allow nebula*"234 oifname "tinc*" counter packets 0 bytes 0 accept comment "allow tinc*"235 oifname "edge*" counter packets 0 bytes 0 accept comment "allow edge*"236 oifname "hyprspace" counter packets 0 bytes 0 accept comment "allow hyprspace"237 oifname "ham0" counter packets 0 bytes 0 accept comment "allow ham0"238 oifname "easytier" counter packets 0 bytes 0 accept comment "allow easytier"239 oifname "mycelium" counter packets 0 bytes 0 accept comment "allow mycelium"240 meta skuid 1002 counter packets 0 bytes 0 reject comment "blocked user bob"241 }242}243machine: (finished: must succeed: nft list table inet user-firewall >&2, in 0.01 seconds)244machine: waiting for success: runuser -u alice -- curl -s http://127.0.0.1:8080245machine: (finished: waiting for success: runuser -u alice -- curl -s http://127.0.0.1:8080, in 0.02 seconds)246machine: must succeed: runuser -u alice -- curl -s http://192.168.1.2247machine: (finished: must succeed: runuser -u alice -- curl -s http://192.168.1.2, in 0.02 seconds)248machine: must succeed: runuser -u alice -- curl -s http://[2001:db8:1::2]249machine: (finished: must succeed: runuser -u alice -- curl -s http://[2001:db8:1::2], in 0.02 seconds)250machine: must succeed: runuser -u bob -- curl -s http://127.0.0.1:8080251machine: (finished: must succeed: runuser -u bob -- curl -s http://127.0.0.1:8080, in 0.02 seconds)252machine: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://192.168.1.2 2>&1 || echo 'EXIT_CODE='$?253machine: (finished: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://192.168.1.2 2>&1 || echo 'EXIT_CODE='$?, in 0.02 seconds)254machine: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://[2001:db8:1::2] 2>&1 || echo 'EXIT_CODE='$?255machine # [1547141.347011] machine systemd[1]: Finished nftables firewall.256machine # [1547141.387201] machine runuser[228]: pam_unix(runuser:session): session opened for user alice(uid=1001) by (uid=0)257machine # [1547141.398600] machine runuser[228]: pam_unix(runuser:session): session closed for user alice258machine # [1547141.407937] machine runuser[230]: pam_unix(runuser:session): session opened for user alice(uid=1001) by (uid=0)259machine # [1547141.418195] machine runuser[230]: pam_unix(runuser:session): session closed for user alice260machine # [1547141.427924] machine runuser[232]: pam_unix(runuser:session): session opened for user alice(uid=1001) by (uid=0)261machine # [1547141.438756] machine runuser[232]: pam_unix(runuser:session): session closed for user alice262machine # [1547141.448111] machine runuser[234]: pam_unix(runuser:session): session opened for user bob(uid=1002) by (uid=0)263machine # [1547141.458970] machine runuser[234]: pam_unix(runuser:session): session closed for user bob264machine # [1547141.469444] machine runuser[237]: pam_unix(runuser:session): session opened for user bob(uid=1002) by (uid=0)265machine # [1547141.480295] machine runuser[237]: pam_unix(runuser:session): session closed for user bob266machine # [1547141.490312] machine runuser[240]: pam_unix(runuser:session): session opened for user bob(uid=1002) by (uid=0)267machine: (finished: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://[2001:db8:1::2] 2>&1 || echo 'EXIT_CODE='$?, in 1.05 seconds)268machine: must succeed: nft list table inet user-firewall269machine: (finished: must succeed: nft list table inet user-firewall, in 0.01 seconds)270machine: waiting for unit setup-wg0-interface.service271machine: (finished: waiting for unit setup-wg0-interface.service, in 0.02 seconds)272machine: waiting for unit nginx.service273machine: (finished: waiting for unit nginx.service, in 0.01 seconds)274machine: waiting for TCP port 8081 on 10.100.0.2275Connection to 10.100.0.2 8081 port [tcp/sunproxyadmin] succeeded!276machine: (finished: waiting for TCP port 8081 on 10.100.0.2, in 0.01 seconds)277machine: must succeed: ip link show wg0278machine: (finished: must succeed: ip link show wg0, in 0.01 seconds)279machine: must succeed: ip addr show wg0280machine: (finished: must succeed: ip addr show wg0, in 0.01 seconds)281machine: must succeed: runuser -u alice -- curl -s --interface wg0 http://10.100.0.2:8081/282machine: (finished: must succeed: runuser -u alice -- curl -s --interface wg0 http://10.100.0.2:8081/, in 0.02 seconds)283machine: must succeed: runuser -u alice -- curl -s --interface wg0 http://[fd00::2]:8081/284machine: (finished: must succeed: runuser -u alice -- curl -s --interface wg0 http://[fd00::2]:8081/, in 0.02 seconds)285machine: must succeed: runuser -u bob -- curl -s --interface wg0 http://10.100.0.2:8081/286machine: (finished: must succeed: runuser -u bob -- curl -s --interface wg0 http://10.100.0.2:8081/, in 0.02 seconds)287machine: must succeed: runuser -u bob -- curl -s --interface wg0 http://[fd00::2]:8081/288machine: (finished: must succeed: runuser -u bob -- curl -s --interface wg0 http://[fd00::2]:8081/, in 0.02 seconds)289machine: must succeed: nft list table inet user-firewall | grep -E 'oifname.*wg' >&2290 oifname "wg*" counter packets 0 bytes 0 accept comment "allow wg*"291machine: (finished: must succeed: nft list table inet user-firewall | grep -E 'oifname.*wg' >&2, in 0.01 seconds)292(finished: run the VM test script, in 6.86 seconds)293machine # [1547142.530512] machine runuser[240]: pam_unix(runuser:session): session closed for user bob294machine # [1547142.612229] machine runuser[248]: pam_unix(runuser:session): session opened for user alice(uid=1001) by (uid=0)295machine # [1547142.623026] machine runuser[248]: pam_unix(runuser:session): session closed for user alice296machine # [1547142.632866] machine runuser[250]: pam_unix(runuser:session): session opened for user alice(uid=1001) by (uid=0)297machine # [1547142.643347] machine runuser[250]: pam_unix(runuser:session): session closed for user alice298machine # [1547142.652821] machine runuser[252]: pam_unix(runuser:session): session opened for user bob(uid=1002) by (uid=0)299machine # [1547142.663210] machine runuser[252]: pam_unix(runuser:session): session closed for user bob300machine # [1547142.671596] machine runuser[254]: pam_unix(runuser:session): session opened for user bob(uid=1002) by (uid=0)301machine # [1547142.680213] machine runuser[254]: pam_unix(runuser:session): session closed for user bob302test script finished in 7.71s303cleanup304kill NspawnMachine (pid 52)305kill NspawnMachine (pid 53)306Container machine terminated by signal KILL.307Container router terminated by signal KILL.308(finished: cleanup, in 0.38 seconds)