these 83 derivations will be built: /nix/store/027zd470i67kd3cry02h21hzf4xyghwb-firewall-start.drv /nix/store/0cxd5cv5gll0m47xq1g3cc7yr3mlrr8r-users-groups.json.drv /nix/store/bin6q8vg2iq44dk2mmrf3p2p6i5cgz5j-extra-hosts.drv /nix/store/0pfgq0982c1lcxmqwwylrnazd04xw0fb-hosts.drv /nix/store/4aszwz8vmli882yxbvpvv8sg41pj3yfi-system-path.drv /nix/store/9k3yn74rfmdsq82ykyyk959y02klmvi5-acme-setup-privileged.drv /nix/store/1zqg4nps0s028jy4pqcnmq4f513hysv5-unit-acme-setup.service.drv /nix/store/ffi9inm3kdr63qr1cr2alwqj0bqlrngw-firewall-reload.drv /nix/store/723sfplqmz2ala7f6mvz8izwbrc13sif-unit-firewall.service.drv /nix/store/yvg6652nj0yqzln9jdy3x0xrljrq5ibz-dbus-1.drv /nix/store/p9495klw94nva9jbmwlh9716f6wzj89f-X-Restart-Triggers-dbus-broker.drv /nix/store/7ikpgcdxhjnpc512935vv0cxjbfz53zr-unit-dbus-broker.service.drv /nix/store/1p6g6y731g8f3wpvszznb63nm1xp19jy-acme-postrun.drv /nix/store/vhyn4qhn19vlkcf5xqi2w6g4pkd9fjwh-unit-script-acme-order-renew-test.foo-start.drv /nix/store/8x7ch619622ah11p62ilfbg9kfl9rq9c-unit-acme-order-renew-test.foo.service.drv /nix/store/9yzv2bryd6cwh0qcgg09gyzd6c1d2a5b-unit-script-acme-test.foo-start.drv /nix/store/gc3c5a3kddxihv6v254iq1ni5d5xpblb-X-Restart-Triggers-acme-test.foo.drv /nix/store/b63fi8cnrijyz4vdvw63lhw0gm8gs3ws-unit-acme-test.foo.service.drv /nix/store/dqszp0ypiwx03bayl09avwlkjr9awpjh-unit-nginx-config-reload.service.drv /nix/store/i95v9bl274mgmra8nwddfv89dgy5k21g-unit-acme-account-2c44cb477b4787b2cf13.target.drv /nix/store/byf1vwkws9n6pw4fb13zcqpd67gzljfp-nss-cacert-3.126.drv /nix/store/smd5cl5fv3rc0jhn3m0jn110z7wh3kfp-unit-nix-daemon.service.drv /nix/store/fgi39jzjwlqahrfxfqvhkv3i7wxy18pm-nginx.conf.drv /nix/store/vw6adpmc0p8v7hzi9kzighljcnm2m8c6-unit-script-nginx-pre-start.drv /nix/store/vzzg7m0bylkc1d3gagj3r39l74wwfga3-unit-nginx.service.drv /nix/store/w1m78zzsg0dlzb1bqr9f9k60wsdzrndm-unit-acme-renew-test.foo.timer.drv /nix/store/89j36815pxs2vd7q2rm1v0j6w1q9fhg2-system-units.drv /nix/store/rqg77p13vj1ri4y9r69vr0hajbhcrdhm-unit-dbus-broker.service.drv /nix/store/scrzc55w56i31asrs4km5vh1173221p5-user-units.drv /nix/store/gr6z8bys2caz2llqi548k83pmmf7r8f7-etc.drv /nix/store/06r46s6jid9gbal4lpb0fcbibcvfls20-activate.drv /nix/store/lb24k162gmqrac5mqgidrfq6zshqjs4h-hosts.drv /nix/store/splbga59ld3qq67rm754azmripj40azh-system-path.drv /nix/store/w4p9fz04ak2bdclhlqsd7b6xya5y34iw-dbus-1.drv /nix/store/zvb6k5rkcpdfgc7m3cj8nwhfayddj2dr-X-Restart-Triggers-dbus-broker.drv /nix/store/6c16qgs6xg4wlhs2nd8mgpbg91clkhrc-unit-dbus-broker.service.drv /nix/store/p6z0vj9kfgng25nz3dbvcsr6192i7xsc-system-units.drv /nix/store/w0vdirvk10jg1rxf8iicv21s2m1i48rc-unit-dbus-broker.service.drv /nix/store/yfsvjam706nrv85xjfxl23w9dw5ky5nm-user-units.drv /nix/store/hnlawapdr1mnx8bfvy0p13yfpr0lpl8r-etc.drv /nix/store/xzyx4h6ri8nn7p1wfkm135ndlpiig3mi-activate.drv /nix/store/0jk8qgd2ragffnlpwjixyjkiqiq4vj16-nixos-system-client-test.drv /nix/store/0irbvx93g5nk2qkgn9vd3ymdgyfpj0nz-run-client-nspawn.drv /nix/store/zjyjpfnsa6h3k02nxryg6qcfpdh4jy4n-nginx.conf.drv /nix/store/10a596dw35d9307cgj762mgg2hxmvvb6-unit-script-nginx-pre-start.drv /nix/store/1dvr2dncn0pdn6akg08r488ldvaaakrd-string-hosts.drv /nix/store/11x5w69yns8ss0ib3yg2zmvzmhcknmd1-hosts.drv /nix/store/f0w6iqpcifl0i8kvf4fs3la8hjypv3y9-system-path.drv /nix/store/22s51fpp3g4p81iswjl22rq62c745dx9-dbus-1.drv /nix/store/2ac5a1l7mslnnnqm4zy9hd04jf993q8f-nixos-system-server-test.drv /nix/store/358raw0d8bacilkak497r2brqjc09adi-decrypt-age-secrets.drv /nix/store/3ij7nazyxni3jjkgzh6pvzryykdi543q-unit-script-acme-ca.foo-start.drv /nix/store/z8f3zyr16gq4ha8mv560f3d2p3g4z4c8-X-Restart-Triggers-acme-ca.foo.drv /nix/store/5cd9cdbrnwy7x20w7mqyy2snc1ghyj94-unit-acme-ca.foo.service.drv /nix/store/cvhhkkxnzpkk2ks4pqv4wcb2cy1w12p2-users-groups.json.drv /nix/store/cp3jfx27fp21ya1pxbxjiz3lc6fmbkwc-ca.json.drv /nix/store/r3z623p8sz6snvklz74bypcjjrlmnpr7-X-Restart-Triggers-dbus-broker.drv /nix/store/xq3k4g4b464b8f8j7qb8jqgk3ya6ddmd-unit-dbus-broker.service.drv /nix/store/hyk8v1ch8vif75f4gv1ibj11905nxn7x-user-units.drv /nix/store/769f5qb75yif37nkwvbl0ja1yb0ys011-unit-nginx.service.drv /nix/store/9s1vzis0v0cfc49q95vhjbxckmwlmvi9-unit-acme-renew-ca.foo.timer.drv /nix/store/fn4g4rwdy65c51c61wh8357mx60w5qdm-unit-acme-account-d22a46d9459bf683a338.target.drv /nix/store/c19dwi159b0zmhvwcnsfyl0f49q7j9l8-X-Restart-Triggers-step-ca.drv /nix/store/gpjz1brb8mqjsbwq7h0vjzy7r5dnw5p2-unit-step-ca.service.drv /nix/store/h8gsny059y20z5wkh9fv7rn8l13gv0n6-unit-nginx-config-reload.service.drv /nix/store/fwdhmj5h94jzn3sxkl62daxxwh5awsxi-acme-setup-privileged.drv /nix/store/j43pxqdpsac7bkn7zxca23hwbgbcq8c8-unit-acme-setup.service.drv /nix/store/81j4m9kqqglam2y00ir2ddv289x3rpw7-acme-postrun.drv /nix/store/bvphg1c0va1h62nmw8c3i7c6yxsp7a22-unit-script-acme-order-renew-ca.foo-start.drv /nix/store/qv49fz9603d5xyyr6ds3bbcpsdjfzba0-unit-acme-order-renew-ca.foo.service.drv /nix/store/wxp011c11jjgdnjkcmqz6rggn63f1fi6-unit-dbus-broker.service.drv /nix/store/sj4h85spbz20n96495fbz03sgawabi8c-system-units.drv /nix/store/vzsbxz2896177cf8sxrpfxsdcwlhaazd-etc-hostname.drv /nix/store/gsnrn71vhlmbqh8vzhjs6sa1zkib156y-etc.drv /nix/store/6c3qvg6zxmkilqkaijsgxf7ylc3zd5vm-activate.drv /nix/store/8b7hgqzjvfyan38z2bkdifdavrxbksba-dry-activate.drv /nix/store/b9yiz2k0gkk8kf2yis6cna4f3q0nd8v3-test-script.drv /nix/store/r1xfjq8wcfg3kw5wf8fb7bfgfm50pbb4-nixos-system-ca-test.drv /nix/store/d5kb6s8s5pw25vhapz22g17cdpi353rk-run-ca-nspawn.drv /nix/store/xv0kjq0mqgbf9nzfwwp9lxy82gz3q1wn-run-server-nspawn.drv /nix/store/wl1mri0127g9m4gfq3wmfpcifql3d7g6-driverConfiguration.json.drv /nix/store/skpz7bg186if60aa6mb5p2hrkdz77q1g-nixos-test-driver-certificates.drv /nix/store/agb6s8jsiiggmw9yxn95d4zhvjfi48cz-container-test-run-certificates.drv these 9 paths will be fetched (0.0 KiB download, 77.3 MiB unpacked): /nix/store/rfzh9mm3gm7dgcw1bpig5dpjmd6931jm-dry-activate /nix/store/iajmgb4jycq2h6qgz27r2lswvh5i7rnb-openssl-3.6.4-man /nix/store/bkgsg2ylsmd30cf27zdvhmynil0q5nz4-python3.14-buildcatrust-0.5.1 /nix/store/5gv0zw4zwgbw0p5his6s6855q1sad691-step-ca-0.30.2 /nix/store/fxpjcpkqwv5qihpm0vlh329c4fi7ry8n-system-generators /nix/store/ljfkljzf5gjspr5iis7sijg8b922ann8-system-shutdown /nix/store/rzi014k242gw5l572699l68b3gc9rgrv-user-generators /nix/store/y9ahz5mm5nz0cddk6awawmmaab3rwzdn-users-groups.json /nix/store/qnmzvrh9vrqkkj5ar02rbh87psh66465-vars-check-certificates building '/nix/store/b9yiz2k0gkk8kf2yis6cna4f3q0nd8v3-test-script.drv' building '/nix/store/vzsbxz2896177cf8sxrpfxsdcwlhaazd-etc-hostname.drv' building '/nix/store/fgi39jzjwlqahrfxfqvhkv3i7wxy18pm-nginx.conf.drv' building '/nix/store/zjyjpfnsa6h3k02nxryg6qcfpdh4jy4n-nginx.conf.drv' building '/nix/store/bin6q8vg2iq44dk2mmrf3p2p6i5cgz5j-extra-hosts.drv' building '/nix/store/1dvr2dncn0pdn6akg08r488ldvaaakrd-string-hosts.drv' building '/nix/store/i95v9bl274mgmra8nwddfv89dgy5k21g-unit-acme-account-2c44cb477b4787b2cf13.target.drv' building '/nix/store/fn4g4rwdy65c51c61wh8357mx60w5qdm-unit-acme-account-d22a46d9459bf683a338.target.drv' building '/nix/store/9s1vzis0v0cfc49q95vhjbxckmwlmvi9-unit-acme-renew-ca.foo.timer.drv' building '/nix/store/w1m78zzsg0dlzb1bqr9f9k60wsdzrndm-unit-acme-renew-test.foo.timer.drv' etc-hostname> structuredAttrs is enabled extra-hosts> structuredAttrs is enabled nginx.conf> structuredAttrs is enabled nginx.conf> structuredAttrs is enabled string-hosts> structuredAttrs is enabled test-script> structuredAttrs is enabled unit-acme-account-2c44cb477b4787b2cf13.target> structuredAttrs is enabled unit-acme-account-d22a46d9459bf683a338.target> structuredAttrs is enabled unit-acme-renew-ca.foo.timer> structuredAttrs is enabled unit-acme-renew-test.foo.timer> structuredAttrs is enabled building '/nix/store/z8f3zyr16gq4ha8mv560f3d2p3g4z4c8-X-Restart-Triggers-acme-ca.foo.drv' building '/nix/store/gc3c5a3kddxihv6v254iq1ni5d5xpblb-X-Restart-Triggers-acme-test.foo.drv' building '/nix/store/1p6g6y731g8f3wpvszznb63nm1xp19jy-acme-postrun.drv' building '/nix/store/81j4m9kqqglam2y00ir2ddv289x3rpw7-acme-postrun.drv' building '/nix/store/9k3yn74rfmdsq82ykyyk959y02klmvi5-acme-setup-privileged.drv' building '/nix/store/dqszp0ypiwx03bayl09avwlkjr9awpjh-unit-nginx-config-reload.service.drv' building '/nix/store/h8gsny059y20z5wkh9fv7rn8l13gv0n6-unit-nginx-config-reload.service.drv' X-Restart-Triggers-acme-ca.foo> structuredAttrs is enabled X-Restart-Triggers-acme-test.foo> structuredAttrs is enabled acme-postrun> structuredAttrs is enabled acme-postrun> structuredAttrs is enabled acme-setup-privileged> structuredAttrs is enabled nginx.conf> nginx.conf> ==================== Results =================== nginx.conf> No issues found. nginx.conf> nginx.conf> ==================== Summary =================== nginx.conf> Total issues: nginx.conf> Unspecified: 0 nginx.conf> Low: 0 nginx.conf> Medium: 0 nginx.conf> High: 0 nginx.conf> nginx.conf> nginx.conf> ==================== Results =================== nginx.conf> No issues found. nginx.conf> nginx.conf> ==================== Summary =================== nginx.conf> Total issues: nginx.conf> Unspecified: 0 nginx.conf> Low: 0 nginx.conf> Medium: 0 nginx.conf> High: 0 nginx.conf> unit-nginx-config-reload.service> structuredAttrs is enabled unit-nginx-config-reload.service> structuredAttrs is enabled building '/nix/store/fwdhmj5h94jzn3sxkl62daxxwh5awsxi-acme-setup-privileged.drv' acme-setup-privileged> structuredAttrs is enabled building '/nix/store/cp3jfx27fp21ya1pxbxjiz3lc6fmbkwc-ca.json.drv' building '/nix/store/027zd470i67kd3cry02h21hzf4xyghwb-firewall-start.drv' building '/nix/store/0pfgq0982c1lcxmqwwylrnazd04xw0fb-hosts.drv' building '/nix/store/11x5w69yns8ss0ib3yg2zmvzmhcknmd1-hosts.drv' building '/nix/store/lb24k162gmqrac5mqgidrfq6zshqjs4h-hosts.drv' building '/nix/store/3ij7nazyxni3jjkgzh6pvzryykdi543q-unit-script-acme-ca.foo-start.drv' building '/nix/store/bvphg1c0va1h62nmw8c3i7c6yxsp7a22-unit-script-acme-order-renew-ca.foo-start.drv' building '/nix/store/vhyn4qhn19vlkcf5xqi2w6g4pkd9fjwh-unit-script-acme-order-renew-test.foo-start.drv' building '/nix/store/9yzv2bryd6cwh0qcgg09gyzd6c1d2a5b-unit-script-acme-test.foo-start.drv' ca.json> structuredAttrs is enabled firewall-start> structuredAttrs is enabled unit-script-acme-ca.foo-start> structuredAttrs is enabled unit-script-acme-order-renew-ca.foo-start> structuredAttrs is enabled unit-script-acme-order-renew-test.foo-start> structuredAttrs is enabled unit-script-acme-test.foo-start> structuredAttrs is enabled building '/nix/store/1zqg4nps0s028jy4pqcnmq4f513hysv5-unit-acme-setup.service.drv' building '/nix/store/10a596dw35d9307cgj762mgg2hxmvvb6-unit-script-nginx-pre-start.drv' building '/nix/store/vw6adpmc0p8v7hzi9kzighljcnm2m8c6-unit-script-nginx-pre-start.drv' building '/nix/store/cvhhkkxnzpkk2ks4pqv4wcb2cy1w12p2-users-groups.json.drv' unit-acme-setup.service> structuredAttrs is enabled unit-script-nginx-pre-start> structuredAttrs is enabled unit-script-nginx-pre-start> structuredAttrs is enabled users-groups.json> structuredAttrs is enabled building '/nix/store/4aszwz8vmli882yxbvpvv8sg41pj3yfi-system-path.drv' building '/nix/store/f0w6iqpcifl0i8kvf4fs3la8hjypv3y9-system-path.drv' building '/nix/store/splbga59ld3qq67rm754azmripj40azh-system-path.drv' building '/nix/store/j43pxqdpsac7bkn7zxca23hwbgbcq8c8-unit-acme-setup.service.drv' building '/nix/store/byf1vwkws9n6pw4fb13zcqpd67gzljfp-nss-cacert-3.126.drv' on 'ssh-ng://builder@build-x86-01.clan.lol' building '/nix/store/c19dwi159b0zmhvwcnsfyl0f49q7j9l8-X-Restart-Triggers-step-ca.drv' building '/nix/store/ffi9inm3kdr63qr1cr2alwqj0bqlrngw-firewall-reload.drv' building '/nix/store/358raw0d8bacilkak497r2brqjc09adi-decrypt-age-secrets.drv' on 'ssh-ng://builder@build-x86-01.clan.lol' X-Restart-Triggers-step-ca> structuredAttrs is enabled firewall-reload> structuredAttrs is enabled system-path> structuredAttrs is enabled system-path> created 1723 symlinks in user environment system-path> structuredAttrs is enabled system-path> created 1723 symlinks in user environment system-path> structuredAttrs is enabled system-path> created 1723 symlinks in user environment unit-acme-setup.service> structuredAttrs is enabled building '/nix/store/5cd9cdbrnwy7x20w7mqyy2snc1ghyj94-unit-acme-ca.foo.service.drv' building '/nix/store/qv49fz9603d5xyyr6ds3bbcpsdjfzba0-unit-acme-order-renew-ca.foo.service.drv' building '/nix/store/8x7ch619622ah11p62ilfbg9kfl9rq9c-unit-acme-order-renew-test.foo.service.drv' building '/nix/store/b63fi8cnrijyz4vdvw63lhw0gm8gs3ws-unit-acme-test.foo.service.drv' unit-acme-ca.foo.service> structuredAttrs is enabled unit-acme-order-renew-ca.foo.service> structuredAttrs is enabled unit-acme-order-renew-test.foo.service> structuredAttrs is enabled unit-acme-test.foo.service> structuredAttrs is enabled building '/nix/store/769f5qb75yif37nkwvbl0ja1yb0ys011-unit-nginx.service.drv' building '/nix/store/vzzg7m0bylkc1d3gagj3r39l74wwfga3-unit-nginx.service.drv' building '/nix/store/22s51fpp3g4p81iswjl22rq62c745dx9-dbus-1.drv' building '/nix/store/w4p9fz04ak2bdclhlqsd7b6xya5y34iw-dbus-1.drv' building '/nix/store/yvg6652nj0yqzln9jdy3x0xrljrq5ibz-dbus-1.drv' building '/nix/store/723sfplqmz2ala7f6mvz8izwbrc13sif-unit-firewall.service.drv' unit-nginx.service> structuredAttrs is enabled unit-nginx.service> structuredAttrs is enabled building '/nix/store/gpjz1brb8mqjsbwq7h0vjzy7r5dnw5p2-unit-step-ca.service.drv' building '/nix/store/r3z623p8sz6snvklz74bypcjjrlmnpr7-X-Restart-Triggers-dbus-broker.drv' building '/nix/store/zvb6k5rkcpdfgc7m3cj8nwhfayddj2dr-X-Restart-Triggers-dbus-broker.drv' X-Restart-Triggers-dbus-broker> structuredAttrs is enabled unit-firewall.service> structuredAttrs is enabled unit-step-ca.service> structuredAttrs is enabled building '/nix/store/p9495klw94nva9jbmwlh9716f6wzj89f-X-Restart-Triggers-dbus-broker.drv' X-Restart-Triggers-dbus-broker> structuredAttrs is enabled building '/nix/store/wxp011c11jjgdnjkcmqz6rggn63f1fi6-unit-dbus-broker.service.drv' building '/nix/store/xq3k4g4b464b8f8j7qb8jqgk3ya6ddmd-unit-dbus-broker.service.drv' X-Restart-Triggers-dbus-broker> structuredAttrs is enabled unit-dbus-broker.service> structuredAttrs is enabled building '/nix/store/6c16qgs6xg4wlhs2nd8mgpbg91clkhrc-unit-dbus-broker.service.drv' building '/nix/store/w0vdirvk10jg1rxf8iicv21s2m1i48rc-unit-dbus-broker.service.drv' unit-dbus-broker.service> structuredAttrs is enabled unit-dbus-broker.service> structuredAttrs is enabled building '/nix/store/7ikpgcdxhjnpc512935vv0cxjbfz53zr-unit-dbus-broker.service.drv' building '/nix/store/rqg77p13vj1ri4y9r69vr0hajbhcrdhm-unit-dbus-broker.service.drv' unit-dbus-broker.service> structuredAttrs is enabled unit-dbus-broker.service> structuredAttrs is enabled building '/nix/store/hyk8v1ch8vif75f4gv1ibj11905nxn7x-user-units.drv' unit-dbus-broker.service> structuredAttrs is enabled building '/nix/store/yfsvjam706nrv85xjfxl23w9dw5ky5nm-user-units.drv' building '/nix/store/scrzc55w56i31asrs4km5vh1173221p5-user-units.drv' building '/nix/store/byf1vwkws9n6pw4fb13zcqpd67gzljfp-nss-cacert-3.126.drv' nss-cacert-3.126> structuredAttrs is enabled nss-cacert-3.126> Running phase: unpackPhase nss-cacert-3.126> Running phase: patchPhase nss-cacert-3.126> Running phase: updateAutotoolsGnuConfigScriptsPhase nss-cacert-3.126> Running phase: configurePhase nss-cacert-3.126> no configure script, doing nothing nss-cacert-3.126> Running phase: buildPhase nss-cacert-3.126> Running phase: installPhase nss-cacert-3.126> Running phase: fixupPhase nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/w52j2vb9hkzv6xd8ax8j6r6i8rh13bqk-nss-cacert-3.126-p11kit nss-cacert-3.126> checking for references to /build/ in /nix/store/w52j2vb9hkzv6xd8ax8j6r6i8rh13bqk-nss-cacert-3.126-p11kit... nss-cacert-3.126> patching script interpreter paths in /nix/store/w52j2vb9hkzv6xd8ax8j6r6i8rh13bqk-nss-cacert-3.126-p11kit nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/15158ip58fk7pvif39xiaj92dxyszr0h-nss-cacert-3.126-hashed nss-cacert-3.126> checking for references to /build/ in /nix/store/15158ip58fk7pvif39xiaj92dxyszr0h-nss-cacert-3.126-hashed... nss-cacert-3.126> patching script interpreter paths in /nix/store/15158ip58fk7pvif39xiaj92dxyszr0h-nss-cacert-3.126-hashed nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/8y68s8v81nlxk4xyld7w1xzfpz2zjkmw-nss-cacert-3.126 nss-cacert-3.126> checking for references to /build/ in /nix/store/8y68s8v81nlxk4xyld7w1xzfpz2zjkmw-nss-cacert-3.126... nss-cacert-3.126> patching script interpreter paths in /nix/store/8y68s8v81nlxk4xyld7w1xzfpz2zjkmw-nss-cacert-3.126 nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/axy6xkyizvj3g79dqwiavrxiik5zq619-nss-cacert-3.126-unbundled nss-cacert-3.126> checking for references to /build/ in /nix/store/axy6xkyizvj3g79dqwiavrxiik5zq619-nss-cacert-3.126-unbundled... nss-cacert-3.126> patching script interpreter paths in /nix/store/axy6xkyizvj3g79dqwiavrxiik5zq619-nss-cacert-3.126-unbundled building '/nix/store/smd5cl5fv3rc0jhn3m0jn110z7wh3kfp-unit-nix-daemon.service.drv' unit-nix-daemon.service> structuredAttrs is enabled building '/nix/store/89j36815pxs2vd7q2rm1v0j6w1q9fhg2-system-units.drv' building '/nix/store/p6z0vj9kfgng25nz3dbvcsr6192i7xsc-system-units.drv' building '/nix/store/sj4h85spbz20n96495fbz03sgawabi8c-system-units.drv' building '/nix/store/gr6z8bys2caz2llqi548k83pmmf7r8f7-etc.drv' building '/nix/store/hnlawapdr1mnx8bfvy0p13yfpr0lpl8r-etc.drv' building '/nix/store/gsnrn71vhlmbqh8vzhjs6sa1zkib156y-etc.drv' building '/nix/store/06r46s6jid9gbal4lpb0fcbibcvfls20-activate.drv' activate> structuredAttrs is enabled building '/nix/store/2ac5a1l7mslnnnqm4zy9hd04jf993q8f-nixos-system-server-test.drv' building '/nix/store/xzyx4h6ri8nn7p1wfkm135ndlpiig3mi-activate.drv' nixos-system-server-test> structuredAttrs is enabled building '/nix/store/xv0kjq0mqgbf9nzfwwp9lxy82gz3q1wn-run-server-nspawn.drv' activate> structuredAttrs is enabled building '/nix/store/0jk8qgd2ragffnlpwjixyjkiqiq4vj16-nixos-system-client-test.drv' nixos-system-client-test> structuredAttrs is enabled building '/nix/store/0irbvx93g5nk2qkgn9vd3ymdgyfpj0nz-run-client-nspawn.drv' building '/nix/store/358raw0d8bacilkak497r2brqjc09adi-decrypt-age-secrets.drv' decrypt-age-secrets> structuredAttrs is enabled building '/nix/store/6c3qvg6zxmkilqkaijsgxf7ylc3zd5vm-activate.drv' building '/nix/store/8b7hgqzjvfyan38z2bkdifdavrxbksba-dry-activate.drv' activate> structuredAttrs is enabled dry-activate> structuredAttrs is enabled building '/nix/store/r1xfjq8wcfg3kw5wf8fb7bfgfm50pbb4-nixos-system-ca-test.drv' nixos-system-ca-test> structuredAttrs is enabled building '/nix/store/d5kb6s8s5pw25vhapz22g17cdpi353rk-run-ca-nspawn.drv' building '/nix/store/wl1mri0127g9m4gfq3wmfpcifql3d7g6-driverConfiguration.json.drv' driverConfiguration.json> structuredAttrs is enabled building '/nix/store/skpz7bg186if60aa6mb5p2hrkdz77q1g-nixos-test-driver-certificates.drv' nixos-test-driver-certificates> Running type check (enable/disable: config.skipTypeCheck) nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck nixos-test-driver-certificates> All checks passed! nixos-test-driver-certificates> Linting test script (enable/disable: config.skipLint) nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipLint nixos-test-driver-certificates> All checks passed! building '/nix/store/agb6s8jsiiggmw9yxn95d4zhvjfi48cz-container-test-run-certificates.drv' on 'ssh-ng://builder@build-x86-01.clan.lol' building '/nix/store/agb6s8jsiiggmw9yxn95d4zhvjfi48cz-container-test-run-certificates.drv' container-test-run-certificates> Machine state will be reset. To keep it, pass --keep-machine-state container-test-run-certificates> start all VLans container-test-run-certificates> (finished: start all VLans, in 0.00 seconds) container-test-run-certificates> container-test-run-certificates> Test will time out and terminate in 3600.0 seconds container-test-run-certificates> run the VM test script container-test-run-certificates> additionally exposed symbols: container-test-run-certificates> ca, client, server, container-test-run-certificates> vlan1, container-test-run-certificates> start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh container-test-run-certificates> ca: systemd-nspawn running (pid 50) container-test-run-certificates> ca: Waiting for journal at /build/vm-state-ca/var/log/journal... container-test-run-certificates> ca: waiting for unit step-ca.service container-test-run-certificates> nixos-nspawn(ca): TAP vde-tap1 not found; container will be isolated from VDE container-test-run-certificates> nixos-nspawn(ca): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths. container-test-run-certificates> Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file. container-test-run-certificates> ░ Spawning container ca on /build/vm-state-ca. container-test-run-certificates> ca # [1547375.401793] ca systemd-journald[81]: Journal started container-test-run-certificates> ca # [1547375.401833] ca systemd-journald[81]: Runtime Journal (/run/log/journal/cff106fe3e6e43eeaf985ea878a3e6ed) is 8M, max 3.7G, 3.7G free. container-test-run-certificates> ca # [1547375.415772] ca systemd[1]: Finished Apply Kernel Variables. container-test-run-certificates> ca # [1547375.424224] ca systemd[1]: Finished Create Static Device Nodes in /dev gracefully. container-test-run-certificates> ca # [1547375.432794] ca systemd[1]: Starting Flush Journal to Persistent Storage... container-test-run-certificates> ca # [1547375.433396] ca systemd[1]: Starting Network Name Resolution... container-test-run-certificates> ca # [1547375.433805] ca systemd[1]: Starting Create Static Device Nodes in /dev... container-test-run-certificates> ca # [1547375.462443] ca systemd-journald[81]: Time spent on flushing to /var/log/journal/cff106fe3e6e43eeaf985ea878a3e6ed is 1.211ms for 7 entries. container-test-run-certificates> ca # [1547375.462443] ca systemd-journald[81]: System Journal (/var/log/journal/cff106fe3e6e43eeaf985ea878a3e6ed) is 8M, max 4G, 3.9G free. container-test-run-certificates> ca # [1547375.471730] ca systemd[1]: Finished Create Static Device Nodes in /dev. container-test-run-certificates> ca # [1547375.472209] ca systemd[1]: Reached target Preparation for Local File Systems. container-test-run-certificates> ca # [1547375.472289] ca systemd[1]: Reached target Local File Systems. container-test-run-certificates> ca # [1547375.472945] ca systemd[1]: Listening on Boot Loader Control Service Socket. container-test-run-certificates> ca # [1547375.472980] ca systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> ca # [1547375.473481] ca systemd[1]: Starting Save Transient machine-id to Disk... container-test-run-certificates> ca # [1547375.473500] ca systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys container-test-run-certificates> ca # [1547375.482034] ca systemd[1]: Finished Flush Journal to Persistent Storage. container-test-run-certificates> ca # [1547375.482597] ca systemd[1]: Starting Create System Files and Directories... container-test-run-certificates> ca # [1547375.486822] ca systemd[1]: Finished Firewall. container-test-run-certificates> ca # [1547375.487113] ca systemd[1]: Reached target Preparation for Network. container-test-run-certificates> ca # [1547375.487298] ca systemd[1]: Listening on Network Management Resolve Hook Socket. container-test-run-certificates> ca # [1547375.488085] ca systemd[1]: Starting Network Management... container-test-run-certificates> ca # [1547375.516311] ca systemd-tmpfiles[186]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted container-test-run-certificates> ca # [1547375.516536] ca systemd-tmpfiles[186]: fchmod() of /var/log/journal failed: Operation not permitted container-test-run-certificates> ca # [1547375.516685] ca systemd-tmpfiles[186]: fchmod() of /var/log/journal/cff106fe3e6e43eeaf985ea878a3e6ed failed: Operation not permitted container-test-run-certificates> ca # [1547375.516907] ca systemd-tmpfiles[186]: fchmod() of /run/log/journal failed: Operation not permitted container-test-run-certificates> ca # [1547375.518370] ca systemd[1]: Finished Create System Files and Directories. container-test-run-certificates> ca # [1547375.519432] ca systemd[1]: Starting Rebuild Journal Catalog... container-test-run-certificates> ca # [1547375.520134] ca systemd[1]: Starting Record System Boot/Shutdown in UTMP... container-test-run-certificates> ca # [1547375.529132] ca systemd[1]: Finished Record System Boot/Shutdown in UTMP. container-test-run-certificates> ca # [1547375.537751] ca systemd[1]: Finished Rebuild Journal Catalog. container-test-run-certificates> ca # [1547375.538937] ca systemd[1]: Starting Update is Completed... container-test-run-certificates> ca # [1547375.546570] ca systemd[1]: Finished Update is Completed. container-test-run-certificates> ca # [1547376.212289] ca systemd-networkd[191]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted container-test-run-certificates> ca # [1547376.212367] ca systemd-networkd[191]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted container-test-run-certificates> ca # [1547376.229436] ca systemd-networkd[191]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> ca # [1547376.229619] ca systemd-networkd[191]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> ca # [1547376.229711] ca systemd-networkd[191]: lo: Link UP container-test-run-certificates> ca # [1547376.229716] ca systemd-networkd[191]: lo: Gained carrier container-test-run-certificates> ca # [1547376.229882] ca systemd-networkd[191]: eth1: Configuring with /etc/systemd/network/40-eth1.network. container-test-run-certificates> ca # [1547376.230182] ca systemd[1]: Started Network Management. container-test-run-certificates> ca # [1547376.230237] ca systemd-networkd[191]: eth1: Link UP container-test-run-certificates> ca # [1547376.230402] ca systemd-networkd[191]: eth1: Gained carrier container-test-run-certificates> ca # [1547376.230924] ca systemd[1]: Starting Enable Persistent Storage in systemd-networkd... container-test-run-certificates> ca # [1547376.263087] ca systemd[1]: Finished Enable Persistent Storage in systemd-networkd. container-test-run-certificates> ca # [1547377.304159] ca systemd-resolved[134]: Positive Trust Anchors: container-test-run-certificates> ca # [1547377.304167] ca systemd-resolved[134]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d container-test-run-certificates> ca # [1547377.304170] ca systemd-resolved[134]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 container-test-run-certificates> ca # [1547377.304187] ca systemd-resolved[134]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test container-test-run-certificates> ca # [1547377.316679] ca systemd-resolved[134]: Using system hostname 'ca'. container-test-run-certificates> ca # [1547377.317696] ca systemd[1]: Started Network Name Resolution. container-test-run-certificates> ca # [1547377.317754] ca systemd[1]: Reached target Network. container-test-run-certificates> ca # [1547377.317786] ca systemd[1]: Reached target Network is Online. container-test-run-certificates> ca # [1547377.317812] ca systemd[1]: Reached target System Initialization. container-test-run-certificates> ca # [1547377.317968] ca systemd[1]: Started Renew ACME Certificate for ca.foo. container-test-run-certificates> ca # [1547377.317981] ca systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> ca # [1547377.317993] ca systemd[1]: Started Daily Cleanup of Temporary Directories. container-test-run-certificates> ca # [1547377.318014] ca systemd[1]: Reached target Timer Units. container-test-run-certificates> ca # [1547377.318108] ca systemd[1]: Listening on D-Bus System Message Bus Socket. container-test-run-certificates> ca # [1547377.318182] ca systemd[1]: Listening on Nix Daemon Socket. container-test-run-certificates> ca # [1547377.318258] ca systemd[1]: Listening on Virtual Machine and Container Registration Service Socket. container-test-run-certificates> ca # [1547377.318268] ca systemd[1]: Reached target Socket Units. container-test-run-certificates> ca # [1547377.318289] ca systemd[1]: Reached target Basic System. container-test-run-certificates> ca # [1547377.319507] ca systemd[1]: Starting Set up the ACME certificate renewal infrastructure... container-test-run-certificates> ca # [1547377.319827] ca systemd[1]: Starting Import lastlog data into lastlog2 database... container-test-run-certificates> ca # [1547377.319845] ca systemd[1]: nginx-config-reload.service skipped, unmet condition check ConditionPathExists=/var/lib/acme/ca.foo/fullchain.pem container-test-run-certificates> ca # [1547377.320254] ca systemd[1]: Starting Name Service Cache Daemon (nsncd)... container-test-run-certificates> ca # [1547377.320722] ca systemd[1]: Starting step-ca service... container-test-run-certificates> ca # [1547377.321356] ca systemd[1]: Starting D-Bus System Message Bus... container-test-run-certificates> ca # [1547377.358040] ca systemd[1]: Finished Import lastlog data into lastlog2 database. container-test-run-certificates> ca # [1547377.537097] ca systemd-networkd[191]: eth1: Gained IPv6LL container-test-run-certificates> ca # [1547377.695259] ca acme-setup-privileged[203]: + set -euo pipefail container-test-run-certificates> ca # [1547377.695259] ca acme-setup-privileged[203]: + cd /var/lib/acme container-test-run-certificates> ca # [1547377.695259] ca acme-setup-privileged[203]: + chmod -R u=rwX,g=,o= .lego/accounts container-test-run-certificates> ca # [1547377.696290] ca acme-setup-privileged[203]: + chown -R acme .lego/accounts container-test-run-certificates> ca # [1547377.696998] ca acme-setup-privileged[203]: + for fixpath in ca.foo .lego/ca.foo container-test-run-certificates> ca # [1547377.697029] ca acme-setup-privileged[203]: + '[' -d ca.foo ']' container-test-run-certificates> ca # [1547377.697029] ca acme-setup-privileged[203]: + for fixpath in ca.foo .lego/ca.foo container-test-run-certificates> ca # [1547377.697029] ca acme-setup-privileged[203]: + '[' -d .lego/ca.foo ']' container-test-run-certificates> ca # [1547377.723953] ca nsncd[205]: Sep 22 05:06:32.147 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket" container-test-run-certificates> ca # [1547377.723956] ca systemd[1]: Started Name Service Cache Daemon (nsncd). container-test-run-certificates> ca # [1547377.724017] ca systemd[1]: Reached target Host and Network Name Lookups. container-test-run-certificates> ca # [1547377.724063] ca systemd[1]: Reached target User and Group Name Lookups. container-test-run-certificates> ca # [1547377.724985] ca systemd[1]: Starting User Login Management... container-test-run-certificates> ca # [1547377.725466] ca systemd[1]: Starting Permit User Sessions... container-test-run-certificates> ca # [1547377.731692] ca systemd[1]: Finished Permit User Sessions. container-test-run-certificates> ca # [1547377.732269] ca systemd[1]: Started Console Getty. container-test-run-certificates> ca # [1547377.732297] ca systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0 container-test-run-certificates> ca # [1547377.732311] ca systemd[1]: Reached target Login Prompts. container-test-run-certificates> ca # [1547378.250917] ca dbus-broker-launch[207]: Looking up NSS user entry for 'systemd-timesync'... container-test-run-certificates> ca # [1547378.251603] ca dbus-broker-launch[207]: NSS returned no entry for 'systemd-timesync' container-test-run-certificates> ca # [1547378.251603] ca dbus-broker-launch[207]: Invalid user-name in /nix/store/92dpvnx2izg74p9fxmdw8i2jxdlk0jh6-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync" container-test-run-certificates> ca # [1547378.252055] ca systemd[1]: Started D-Bus System Message Bus. container-test-run-certificates> ca # [1547378.257100] ca dbus-broker-launch[207]: Ready container-test-run-certificates> ca # [1547378.724234] ca systemd[1]: etc-machine\x2did.mount: Deactivated successfully. container-test-run-certificates> ca # [1547378.725148] ca systemd[1]: Finished Save Transient machine-id to Disk. container-test-run-certificates> ca # [1547379.633524] ca systemd-logind[236]: New seat seat0. container-test-run-certificates> ca # [1547379.633684] ca systemd[1]: Started User Login Management. container-test-run-certificates> ca # [1547379.634832] ca systemd[1]: Starting linger-users.service... container-test-run-certificates> ca # [1547379.670205] ca systemd[1]: linger-users.service: Deactivated successfully. container-test-run-certificates> ca # [1547379.670355] ca systemd[1]: Finished linger-users.service. container-test-run-certificates> ca # [1547379.963677] ca acme-setup-start[221]: + set -euo pipefail container-test-run-certificates> ca # [1547379.963677] ca acme-setup-start[221]: + test -e ca/key.pem container-test-run-certificates> ca # [1547379.963997] ca acme-setup-start[221]: + minica --ca-key ca/key.pem --ca-cert ca/cert.pem --domains selfsigned.local container-test-run-certificates> ca # [1547379.975457] ca systemd[1]: Finished Set up the ACME certificate renewal infrastructure. container-test-run-certificates> ca # [1547379.976709] ca systemd[1]: Starting Ensure certificate for ca.foo... container-test-run-certificates> ca # [1547380.514494] ca step-ca[206]: badger 2026/09/22 05:06:34 INFO: All 0 tables opened in 0s container-test-run-certificates> ca # [1547380.521877] ca step-ca[206]: 2026/09/22 05:06:34 Building new tls configuration using step-ca x509 Signer Interface container-test-run-certificates> ca # [1547380.524529] ca step-ca[206]: 2026/09/22 05:06:34 Starting Smallstep CA/0.30.2 (linux/amd64) container-test-run-certificates> ca # [1547380.524529] ca step-ca[206]: 2026/09/22 05:06:34 Documentation: https://u.step.sm/docs/ca container-test-run-certificates> ca # [1547380.524529] ca step-ca[206]: 2026/09/22 05:06:34 Community Discord: https://u.step.sm/discord container-test-run-certificates> ca # [1547380.524529] ca step-ca[206]: 2026/09/22 05:06:34 Config file: /etc/smallstep/ca.json container-test-run-certificates> ca # [1547380.524632] ca step-ca[206]: 2026/09/22 05:06:34 The primary server URL is https://ca.foo:1443 container-test-run-certificates> ca # [1547380.524632] ca step-ca[206]: 2026/09/22 05:06:34 Root certificates are available at https://ca.foo:1443/roots.pem container-test-run-certificates> ca # [1547380.524632] ca step-ca[206]: 2026/09/22 05:06:34 X.509 Root Fingerprint: bc40801a0c2398aaaf83c69528b2db9fe31eb4e7f0e27d1b2a2346ce64e8ff23 container-test-run-certificates> ca # [1547380.524720] ca systemd[1]: Started step-ca service. container-test-run-certificates> ca # [1547380.524787] ca step-ca[206]: 2026/09/22 05:06:34 Serving HTTPS on 0.0.0.0:1443 ... container-test-run-certificates> ca # [1547381.312963] ca acme-ca.foo-start[259]: Waiting to acquire lock in /run/acme/ container-test-run-certificates> ca # [1547381.314571] ca acme-ca.foo-start[259]: + '[' -e out/acme-success ']' container-test-run-certificates> ca # [1547381.314614] ca acme-ca.foo-start[259]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=ca.foo --ip-addresses= container-test-run-certificates> ca # [1547381.325437] ca acme-ca.foo-start[285]: + cd ca.foo container-test-run-certificates> ca # [1547381.325625] ca acme-ca.foo-start[285]: + cp -vp cert.pem ../out/cert.pem container-test-run-certificates> ca # [1547381.326346] ca acme-ca.foo-start[286]: 'cert.pem' -> '../out/cert.pem' container-test-run-certificates> ca # [1547381.326498] ca acme-ca.foo-start[285]: + cp -vp key.pem ../out/key.pem container-test-run-certificates> ca # [1547381.327118] ca acme-ca.foo-start[285]: 'key.pem' -> '../out/key.pem' container-test-run-certificates> ca # [1547381.327257] ca acme-ca.foo-start[259]: + cat out/cert.pem ca/cert.pem container-test-run-certificates> ca # [1547381.328121] ca acme-ca.foo-start[259]: + cp ca/cert.pem out/chain.pem container-test-run-certificates> ca # [1547381.329043] ca acme-ca.foo-start[259]: + cat out/key.pem out/fullchain.pem container-test-run-certificates> ca # [1547381.330409] ca acme-ca.foo-start[259]: + for fixpath in out certificates container-test-run-certificates> ca # [1547381.330432] ca acme-ca.foo-start[259]: + '[' -d out ']' container-test-run-certificates> ca # [1547381.330432] ca acme-ca.foo-start[259]: + chmod -R u=rwX,g=rX,o= out container-test-run-certificates> ca # [1547381.331356] ca acme-ca.foo-start[259]: + chown -R acme:nginx out container-test-run-certificates> ca # [1547381.333445] ca acme-ca.foo-start[259]: + for fixpath in out certificates container-test-run-certificates> ca # [1547381.333445] ca acme-ca.foo-start[259]: + '[' -d certificates ']' container-test-run-certificates> ca # [1547381.336819] ca systemd[1]: Finished Ensure certificate for ca.foo. container-test-run-certificates> ca # [1547381.337910] ca systemd[1]: Starting Nginx Web Server... container-test-run-certificates> ca # [1547382.336444] ca nginx-pre-start[297]: nginx: the configuration file /nix/store/161ls7sj3j5zw826wxavjj58ddjsjy8p-nginx.conf syntax is ok container-test-run-certificates> ca # [1547382.336846] ca nginx-pre-start[297]: nginx: configuration file /nix/store/161ls7sj3j5zw826wxavjj58ddjsjy8p-nginx.conf test is successful container-test-run-certificates> ca # [1547382.341225] ca systemd[1]: Started Nginx Web Server. container-test-run-certificates> ca # [1547382.341553] ca systemd[1]: Reached target Multi-User System. container-test-run-certificates> ca # [1547382.342377] ca systemd[1]: Starting Order (and renew) ACME certificate for ca.foo... container-test-run-certificates> ca: still waiting for container 'ca' to reach ready state... container-test-run-certificates> ca # [1547385.147200] ca acme-order-renew-ca.foo-start[300]: Waiting to acquire lock in /run/acme/ container-test-run-certificates> ca # [1547385.148794] ca acme-order-renew-ca.foo-start[300]: + set -euo pipefail container-test-run-certificates> ca # [1547385.148852] ca acme-order-renew-ca.foo-start[300]: + exec container-test-run-certificates> ca # [1547385.148892] ca acme-order-renew-ca.foo-start[300]: + /nix/store/m9ik4hd36632x3n2ibrxl2vyi0w4y094-flock-0.4.0/bin/flock 11 container-test-run-certificates> ca # [1547385.149545] ca acme-order-renew-ca.foo-start[312]: ++ find accounts -path '*/keys/*.key' -print -quit container-test-run-certificates> ca # [1547385.150900] ca acme-order-renew-ca.foo-start[300]: + '[' -n '' ']' container-test-run-certificates> ca # [1547385.150934] ca acme-order-renew-ca.foo-start[300]: + exec container-test-run-certificates> ca # [1547385.151005] ca acme-order-renew-ca.foo-start[300]: + '[' -e certificates/ca.foo.key ']' container-test-run-certificates> ca # [1547385.151037] ca acme-order-renew-ca.foo-start[300]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo:1443/acme/acme/directory --key-type ec256 -d ca.foo --no-random-sleep --renew-force --ari-disable --force-cert-domains container-test-run-certificates> ca # [1547385.161646] ca acme-order-renew-ca.foo-start[313]: 2026-09-22T05:06:39.584959830Z INFO Private key saved. filepath=accounts/ca.foo_1443/none@none.tld/none@none.tld.key container-test-run-certificates> ca # [1547385.177698] ca step-ca[206]: time="2026-09-22T05:06:39Z" level=info duration="75.943µs" duration-ns=75943 fields.time="2026-09-22T05:06:39Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=8f7c8ef8-f352-4f46-a04a-936bf539fabc response="{\"newNonce\":\"https://ca.foo:1443/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo:1443/acme/acme/new-account\",\"newOrder\":\"https://ca.foo:1443/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo:1443/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo:1443/acme/acme/key-change\"}" size=277 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [1547385.178123] ca acme-order-renew-ca.foo-start[313]: 2026-09-22T05:06:39.601204071Z INFO Registering the account. email=none@none.tld container-test-run-certificates> ca # [1547385.191633] ca step-ca[206]: time="2026-09-22T05:06:39Z" level=info duration=13.591094ms duration-ns=13591094 fields.time="2026-09-22T05:06:39Z" method=HEAD name=ca nonce=TVlUTTllNFFvc1lGUFl1N0s2QmhwQlpmenpwUzZERGY path=/acme/acme/new-nonce protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=765362d3-a51c-451a-9e66-2f7ec0c38dcb size=0 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [1547385.194416] ca step-ca[206]: time="2026-09-22T05:06:39Z" level=info duration=2.141853ms duration-ns=2141853 fields.time="2026-09-22T05:06:39Z" method=POST name=ca nonce=YWZjRHpKaW4xQUFoZjlUY0QyeWdRNmloN1dJRU40Y2o path=/acme/acme/new-account protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=1a017527-931f-47b7-b7a6-2f9403817923 response="{\"contact\":[\"mailto:none@none.tld\"],\"status\":\"valid\",\"orders\":\"https://ca.foo:1443/acme/acme/account/d9TqWqnBRrwhhn7UICk4tAgTvMzwwXKO/orders\"}" size=143 status=201 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [1547385.194701] ca acme-order-renew-ca.foo-start[313]: 2026-09-22T05:06:39.618021461Z WARN !!!! HEADS UP !!!! container-test-run-certificates> ca # [1547385.194701] ca acme-order-renew-ca.foo-start[313]: Your account credentials have been saved in your container-test-run-certificates> ca # [1547385.194701] ca acme-order-renew-ca.foo-start[313]: configuration directory at "accounts". container-test-run-certificates> ca # [1547385.194701] ca acme-order-renew-ca.foo-start[313]: You should make a secure backup of this folder now. This container-test-run-certificates> ca # [1547385.194701] ca acme-order-renew-ca.foo-start[313]: configuration directory will also contain private keys container-test-run-certificates> ca # [1547385.194701] ca acme-order-renew-ca.foo-start[313]: generated by lego and certificates obtained from the ACME container-test-run-certificates> ca # [1547385.194701] ca acme-order-renew-ca.foo-start[313]: server. Making regular backups of this folder is ideal. container-test-run-certificates> ca # [1547385.194885] ca acme-order-renew-ca.foo-start[313]: 2026-09-22T05:06:39.618135135Z INFO Obtaining bundled SAN certificate. domains=ca.foo container-test-run-certificates> ca # [1547385.196887] ca step-ca[206]: time="2026-09-22T05:06:39Z" level=info duration=1.759103ms duration-ns=1759103 fields.time="2026-09-22T05:06:39Z" method=POST name=ca nonce=RzEwSnEyT1cwb1ZydnFUMkRNdVlxeFcwY0NKMkdPSFY path=/acme/acme/new-order protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=919a696b-3448-4999-b60f-23388ef74477 response="{\"id\":\"GI01qQJxxmxr0r3aio7ZZYEQSRiAS96B\",\"status\":\"pending\",\"expires\":\"2026-09-23T05:06:39Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"ca.foo\"}],\"notBefore\":\"2026-09-22T05:05:39Z\",\"notAfter\":\"2026-12-21T05:06:39Z\",\"authorizations\":[\"https://ca.foo:1443/acme/acme/authz/RV7uZSoZWZHuyBYwY4UdJAmMXIex1iyy\"],\"finalize\":\"https://ca.foo:1443/acme/acme/order/GI01qQJxxmxr0r3aio7ZZYEQSRiAS96B/finalize\"}" size=392 status=201 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [1547385.255257] ca step-ca[206]: time="2026-09-22T05:06:39Z" level=info duration=1.534911ms duration-ns=1534911 fields.time="2026-09-22T05:06:39Z" method=POST name=ca nonce=NTdpMUV5TTcyd0FYcnYxUzUyNWd6MTNsTlNZbzRrdU0 path=/acme/acme/authz/RV7uZSoZWZHuyBYwY4UdJAmMXIex1iyy protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=d7153527-5025-4170-a33f-6e6afabc4ab1 response="{\"identifier\":{\"type\":\"dns\",\"value\":\"ca.foo\"},\"status\":\"pending\",\"challenges\":[{\"type\":\"dns-01\",\"status\":\"pending\",\"token\":\"a7cjMrZHrAhNH1BqVyh2l3qNL5IKrFVJ\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/RV7uZSoZWZHuyBYwY4UdJAmMXIex1iyy/toB7reyUk8HKqF7FCRJzFdWGOUZG9A7A\"},{\"type\":\"http-01\",\"status\":\"pending\",\"token\":\"a7cjMrZHrAhNH1BqVyh2l3qNL5IKrFVJ\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/RV7uZSoZWZHuyBYwY4UdJAmMXIex1iyy/YhGJeDTMTQEir0XxMDmp9lSQIPHdVQXF\"},{\"type\":\"tls-alpn-01\",\"status\":\"pending\",\"token\":\"a7cjMrZHrAhNH1BqVyh2l3qNL5IKrFVJ\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/RV7uZSoZWZHuyBYwY4UdJAmMXIex1iyy/BS84kaSYZb8K3yRnOL7gyjYiQkmTbOeC\"}],\"wildcard\":false,\"expires\":\"2026-09-23T05:06:39Z\"}" size=719 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [1547385.255542] ca acme-order-renew-ca.foo-start[313]: 2026-09-22T05:06:39.678855534Z INFO Use solver. domain=ca.foo type=http-01 container-test-run-certificates> ca # [1547385.255542] ca acme-order-renew-ca.foo-start[313]: 2026-09-22T05:06:39.678883266Z INFO http01: Trying to solve HTTP-01. domain=ca.foo container-test-run-certificates> ca # [1547385.258096] ca step-ca[206]: time="2026-09-22T05:06:39Z" level=info duration=2.203529ms duration-ns=2203529 fields.time="2026-09-22T05:06:39Z" method=POST name=ca nonce=UUZERXVUNGNVMkJmRkViNG5DU2JmOEVqRGhRcHk4Ylc path=/acme/acme/challenge/RV7uZSoZWZHuyBYwY4UdJAmMXIex1iyy/YhGJeDTMTQEir0XxMDmp9lSQIPHdVQXF protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=a1c996b3-b3eb-4d54-9ee6-125339330e08 response="{\"type\":\"http-01\",\"status\":\"valid\",\"token\":\"a7cjMrZHrAhNH1BqVyh2l3qNL5IKrFVJ\",\"validated\":\"2026-09-22T05:06:39Z\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/RV7uZSoZWZHuyBYwY4UdJAmMXIex1iyy/YhGJeDTMTQEir0XxMDmp9lSQIPHdVQXF\"}" size=228 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [1547385.258268] ca acme-order-renew-ca.foo-start[313]: 2026-09-22T05:06:39.681592047Z INFO The server validated our request. domain=ca.foo container-test-run-certificates> ca # [1547385.258316] ca acme-order-renew-ca.foo-start[313]: 2026-09-22T05:06:39.681648253Z INFO Validations succeeded; requesting certificates. domains=ca.foo container-test-run-certificates> ca # [1547385.261699] ca step-ca[206]: time="2026-09-22T05:06:39Z" level=info duration=2.992967ms duration-ns=2992967 fields.time="2026-09-22T05:06:39Z" method=POST name=ca nonce=b1hLMVBZRFJqMDljQXNHa0NJenVlTmZRRHpnN0pXdzA path=/acme/acme/order/GI01qQJxxmxr0r3aio7ZZYEQSRiAS96B/finalize protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=34ef5426-3767-4013-afc2-9a442ce9d902 response="{\"id\":\"GI01qQJxxmxr0r3aio7ZZYEQSRiAS96B\",\"status\":\"valid\",\"expires\":\"2026-09-23T05:06:39Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"ca.foo\"}],\"notBefore\":\"2026-09-22T05:05:39Z\",\"notAfter\":\"2026-12-21T05:06:39Z\",\"authorizations\":[\"https://ca.foo:1443/acme/acme/authz/RV7uZSoZWZHuyBYwY4UdJAmMXIex1iyy\"],\"finalize\":\"https://ca.foo:1443/acme/acme/order/GI01qQJxxmxr0r3aio7ZZYEQSRiAS96B/finalize\",\"certificate\":\"https://ca.foo:1443/acme/acme/certificate/xAqbAZIuWQatCK6PbvCk1rJHQwXiG3p3\"}" size=481 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [1547385.262489] ca step-ca[206]: time="2026-09-22T05:06:39Z" level=info certificate="MIIB1DCCAXqgAwIBAgIRAJkNHP+r1RKUzkSBGOLsUzgwCgYIKoZIzj0EAwIwHzEdMBsGA1UEAxMUQ2xhbiBJbnRlcm1lZGlhdGUgQ0EwHhcNMjYwOTIyMDUwNTM5WhcNMjYxMjIxMDUwNjM5WjARMQ8wDQYDVQQDEwZjYS5mb28wWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAATwtAMLZvErwpYZQO1sZEkEQxAznvGJi9GPpqgwz2xvrjnXxwj2QiLG3cFLKx0A2F9KmsvTLhLZq8ftU5DevoqXo4GkMIGhMA4GA1UdDwEB/wQEAwIHgDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHQYDVR0OBBYEFMALMxWyECXoN31kV1eW1vwN5LbAMB8GA1UdIwQYMBaAFJBs6SEfVQzu03OCptxFdr3YVz/OMBEGA1UdEQQKMAiCBmNhLmZvbzAdBgwrBgEEAYKkZMYoQAEEDTALAgEGBARhY21lBAAwCgYIKoZIzj0EAwIDSAAwRQIhAPB8j/NeE5e7AzhQD7NZpcEbrmJmq/ZqGo8CKKC089NdAiB6+956qv7/BkyBaa9/kuuUzxcrKTQawmrbfTuvzTgsHg==" duration="552.991µs" duration-ns=552991 fields.time="2026-09-22T05:06:39Z" issuer="Clan Intermediate CA" method=POST name=ca nonce=S0hpbnUzTDFHdmgxNk1wdERmVDdZMVZUU1Zzbk9SU2E path=/acme/acme/certificate/xAqbAZIuWQatCK6PbvCk1rJHQwXiG3p3 protocol=HTTP/1.1 provisioner=acme public-key="ECDSA P-256" referer= remote-address="2001:db8:1::1" request-id=72b6be61-1871-43f2-ad7b-8b3db1e3b1f8 sans="map[dns:[ca.foo]]" serial=203439971378082950324237217494809203512 size=1344 status=200 subject=ca.foo user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; amd64)" user-id= valid-from="2026-09-22T05:05:39Z" valid-to="2026-12-21T05:06:39Z" container-test-run-certificates> ca # [1547385.262586] ca acme-order-renew-ca.foo-start[313]: 2026-09-22T05:06:39.685914076Z INFO Server responded with a certificate. domains=ca.foo container-test-run-certificates> ca # [1547385.262624] ca acme-order-renew-ca.foo-start[313]: 2026-09-22T05:06:39.685957568Z INFO Writing file. filepath=certificates/ca.foo.crt container-test-run-certificates> ca # [1547385.262693] ca acme-order-renew-ca.foo-start[313]: 2026-09-22T05:06:39.686026819Z INFO Writing file. filepath=certificates/ca.foo.issuer.crt container-test-run-certificates> ca # [1547385.262721] ca acme-order-renew-ca.foo-start[313]: 2026-09-22T05:06:39.686055563Z INFO Writing file. filepath=certificates/ca.foo.key container-test-run-certificates> ca # [1547385.262773] ca acme-order-renew-ca.foo-start[313]: 2026-09-22T05:06:39.686107240Z INFO Writing file. filepath=certificates/ca.foo.json container-test-run-certificates> ca # [1547385.265942] ca acme-order-renew-ca.foo-start[300]: + touch out/acme-success container-test-run-certificates> ca # [1547385.267087] ca acme-order-renew-ca.foo-start[300]: + cmp -s certificates/ca.foo.crt out/fullchain.pem container-test-run-certificates> ca # [1547385.267840] ca acme-order-renew-ca.foo-start[300]: + touch out/renewed container-test-run-certificates> ca # [1547385.269280] ca acme-order-renew-ca.foo-start[300]: + echo Installing new certificate container-test-run-certificates> ca # [1547385.269280] ca acme-order-renew-ca.foo-start[300]: Installing new certificate container-test-run-certificates> ca # [1547385.269280] ca acme-order-renew-ca.foo-start[300]: + cp -vp certificates/ca.foo.crt out/fullchain.pem container-test-run-certificates> ca # [1547385.270505] ca acme-order-renew-ca.foo-start[332]: 'certificates/ca.foo.crt' -> 'out/fullchain.pem' container-test-run-certificates> ca # [1547385.270764] ca acme-order-renew-ca.foo-start[300]: + cp -vp certificates/ca.foo.key out/key.pem container-test-run-certificates> ca # [1547385.271827] ca acme-order-renew-ca.foo-start[333]: 'certificates/ca.foo.key' -> 'out/key.pem' container-test-run-certificates> ca # [1547385.272006] ca acme-order-renew-ca.foo-start[300]: + cp -vp certificates/ca.foo.issuer.crt out/chain.pem container-test-run-certificates> ca # [1547385.272858] ca acme-order-renew-ca.foo-start[334]: 'certificates/ca.foo.issuer.crt' -> 'out/chain.pem' container-test-run-certificates> ca # [1547385.273038] ca acme-order-renew-ca.foo-start[300]: + ln -sf fullchain.pem out/cert.pem container-test-run-certificates> ca # [1547385.274083] ca acme-order-renew-ca.foo-start[300]: + cat out/key.pem out/fullchain.pem container-test-run-certificates> ca # [1547385.275111] ca acme-order-renew-ca.foo-start[300]: + for fixpath in out certificates container-test-run-certificates> ca # [1547385.275143] ca acme-order-renew-ca.foo-start[300]: + '[' -d out ']' container-test-run-certificates> ca # [1547385.275143] ca acme-order-renew-ca.foo-start[300]: + chmod -R u=rwX,g=rX,o= out container-test-run-certificates> ca # [1547385.276079] ca acme-order-renew-ca.foo-start[300]: + chown -R acme:nginx out container-test-run-certificates> ca # [1547385.277641] ca acme-order-renew-ca.foo-start[300]: + for fixpath in out certificates container-test-run-certificates> ca # [1547385.277743] ca acme-order-renew-ca.foo-start[300]: + '[' -d certificates ']' container-test-run-certificates> ca # [1547385.277743] ca acme-order-renew-ca.foo-start[300]: + chmod -R u=rwX,g=rX,o= certificates container-test-run-certificates> ca # [1547385.278968] ca acme-order-renew-ca.foo-start[300]: + chown -R acme:nginx certificates container-test-run-certificates> ca # [1547385.280699] ca acme-order-renew-ca.foo-start[300]: + chmod -R u=rwX,g=,o= accounts/. container-test-run-certificates> ca # [1547385.774215] ca systemd[1]: Reloading Nginx Web Server... container-test-run-certificates> ca # [1547385.777860] ca systemd[1]: acme-order-renew-ca.foo.service: Deactivated successfully. container-test-run-certificates> ca # [1547385.778067] ca systemd[1]: Finished Order (and renew) ACME certificate for ca.foo. container-test-run-certificates> ca # [1547385.778228] ca systemd[1]: acme-order-renew-ca.foo.service: Consumed 1.309s CPU time over 3.435s wall clock time. container-test-run-certificates> ca # [1547388.937207] ca nginx[350]: nginx: the configuration file /nix/store/161ls7sj3j5zw826wxavjj58ddjsjy8p-nginx.conf syntax is ok container-test-run-certificates> ca # [1547388.937524] ca nginx[350]: nginx: configuration file /nix/store/161ls7sj3j5zw826wxavjj58ddjsjy8p-nginx.conf test is successful container-test-run-certificates> ca: (finished: waiting for unit step-ca.service, in 16.15 seconds) container-test-run-certificates> ca: waiting for file '/var/lib/acme/ca.foo/fullchain.pem' container-test-run-certificates> ca: (finished: waiting for file '/var/lib/acme/ca.foo/fullchain.pem', in 0.00 seconds) container-test-run-certificates> ca: must succeed: systemctl restart nginx.service container-test-run-certificates> ca # [1547390.741490] ca systemd[1]: Reloaded Nginx Web Server. container-test-run-certificates> ca # [1547390.741733] ca systemd[1]: Startup finished in 15.631s. container-test-run-certificates> ca # [1547390.930538] ca systemd[1]: Stopping Nginx Web Server... container-test-run-certificates> ca # [1547390.964423] ca systemd[1]: nginx.service: Deactivated successfully. container-test-run-certificates> ca # [1547390.964557] ca systemd[1]: Stopped Nginx Web Server. container-test-run-certificates> ca # [1547390.964575] ca systemd[1]: nginx.service: Consumed 4.098s CPU time over 9.626s wall clock time. container-test-run-certificates> ca # [1547390.966270] ca systemd[1]: Starting Nginx Web Server... container-test-run-certificates> ca: (finished: must succeed: systemctl restart nginx.service, in 3.41 seconds) container-test-run-certificates> server: systemd-nspawn running (pid 443) container-test-run-certificates> server: Waiting for journal at /build/vm-state-server/var/log/journal... container-test-run-certificates> client: systemd-nspawn running (pid 446) container-test-run-certificates> client: Waiting for journal at /build/vm-state-client/var/log/journal... container-test-run-certificates> server: waiting for file '/var/lib/acme/test.foo/fullchain.pem' container-test-run-certificates> nixos-nspawn(server): TAP vde-tap1 not found; container will be isolated from VDE container-test-run-certificates> nixos-nspawn(server): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths. container-test-run-certificates> nixos-nspawn(client): TAP vde-tap1 not found; container will be isolated from VDE container-test-run-certificates> nixos-nspawn(client): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths. container-test-run-certificates> Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file. container-test-run-certificates> Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file. container-test-run-certificates> ░ Spawning container client on /build/vm-state-client. container-test-run-certificates> ░ Spawning container server on /build/vm-state-server. container-test-run-certificates> ca # [1547394.320993] ca nginx-pre-start[374]: nginx: the configuration file /nix/store/161ls7sj3j5zw826wxavjj58ddjsjy8p-nginx.conf syntax is ok container-test-run-certificates> ca # [1547394.321318] ca nginx-pre-start[374]: nginx: configuration file /nix/store/161ls7sj3j5zw826wxavjj58ddjsjy8p-nginx.conf test is successful container-test-run-certificates> ca # [1547394.330685] ca systemd[1]: Started Nginx Web Server. container-test-run-certificates> server # [1547395.100480] server systemd-journald[72]: Journal started container-test-run-certificates> server # [1547395.100517] server systemd-journald[72]: Runtime Journal (/run/log/journal/debab64483ce439eba9aa5c0c8d10dd4) is 8M, max 3.7G, 3.7G free. container-test-run-certificates> server # [1547395.187344] server systemd[1]: Finished Apply Kernel Variables. container-test-run-certificates> server # [1547395.207148] server systemd[1]: Finished Firewall. container-test-run-certificates> server # [1547395.209583] server systemd[1]: Finished Create Static Device Nodes in /dev gracefully. container-test-run-certificates> server # [1547395.259761] server systemd[1]: Reached target Preparation for Network. container-test-run-certificates> server # [1547395.260020] server systemd[1]: Listening on Network Management Resolve Hook Socket. container-test-run-certificates> server # [1547395.261725] server systemd[1]: Starting Flush Journal to Persistent Storage... container-test-run-certificates> server # [1547395.262409] server systemd[1]: Starting Network Name Resolution... container-test-run-certificates> server # [1547395.262795] server systemd[1]: Starting Create Static Device Nodes in /dev... container-test-run-certificates> client # [1547395.062365] client systemd-journald[72]: Journal started container-test-run-certificates> client # [1547395.062414] client systemd-journald[72]: Runtime Journal (/run/log/journal/0b6d64513b204be09ff27144148384b2) is 8M, max 3.7G, 3.7G free. container-test-run-certificates> client # [1547395.079110] client systemd[1]: Finished Apply Kernel Variables. container-test-run-certificates> client # [1547395.152129] client systemd[1]: Finished Create Static Device Nodes in /dev gracefully. container-test-run-certificates> client # [1547395.163735] client systemd[1]: Starting Flush Journal to Persistent Storage... container-test-run-certificates> client # [1547395.164285] client systemd[1]: Starting Network Name Resolution... container-test-run-certificates> server # [1547395.268153] server systemd-journald[72]: Time spent on flushing to /var/log/journal/debab64483ce439eba9aa5c0c8d10dd4 is 1.103ms for 10 entries. container-test-run-certificates> server # [1547395.268153] server systemd-journald[72]: System Journal (/var/log/journal/debab64483ce439eba9aa5c0c8d10dd4) is 8M, max 4G, 3.9G free. container-test-run-certificates> client # [1547395.164940] client systemd[1]: Starting Create Static Device Nodes in /dev... container-test-run-certificates> client # [1547395.187503] client systemd[1]: Finished Firewall. container-test-run-certificates> client # [1547395.191839] client systemd-journald[72]: Time spent on flushing to /var/log/journal/0b6d64513b204be09ff27144148384b2 is 1.367ms for 8 entries. container-test-run-certificates> client # [1547395.191839] client systemd-journald[72]: System Journal (/var/log/journal/0b6d64513b204be09ff27144148384b2) is 8M, max 4G, 3.9G free. container-test-run-certificates> server # [1547395.296653] server systemd[1]: Finished Create Static Device Nodes in /dev. container-test-run-certificates> client # [1547395.209251] client systemd[1]: Finished Flush Journal to Persistent Storage. container-test-run-certificates> server # [1547395.297359] server systemd[1]: Reached target Preparation for Local File Systems. container-test-run-certificates> server # [1547395.297453] server systemd[1]: Reached target Local File Systems. container-test-run-certificates> client # [1547395.212310] client systemd[1]: Finished Create Static Device Nodes in /dev. container-test-run-certificates> client # [1547395.214113] client systemd[1]: Reached target Preparation for Local File Systems. container-test-run-certificates> server # [1547395.298189] server systemd[1]: Listening on Boot Loader Control Service Socket. container-test-run-certificates> client # [1547395.214205] client systemd[1]: Reached target Local File Systems. container-test-run-certificates> server # [1547395.298227] server systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> client # [1547395.214269] client systemd[1]: Reached target Preparation for Network. container-test-run-certificates> server # [1547395.298988] server systemd[1]: Starting Save Transient machine-id to Disk... container-test-run-certificates> client # [1547395.214992] client systemd[1]: Listening on Boot Loader Control Service Socket. container-test-run-certificates> server # [1547395.299018] server systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys container-test-run-certificates> client # [1547395.215191] client systemd[1]: Listening on Network Management Resolve Hook Socket. container-test-run-certificates> server # [1547395.299667] server systemd[1]: Starting Network Management... container-test-run-certificates> client # [1547395.215229] client systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> server # [1547395.312452] server systemd[1]: Finished Flush Journal to Persistent Storage. container-test-run-certificates> client # [1547395.216050] client systemd[1]: Starting Save Transient machine-id to Disk... container-test-run-certificates> server # [1547395.314005] server systemd[1]: Starting Create System Files and Directories... container-test-run-certificates> client # [1547395.216519] client systemd[1]: Starting Create System Files and Directories... container-test-run-certificates> server # [1547395.325450] server systemd-tmpfiles[183]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted container-test-run-certificates> server # [1547395.325645] server systemd-tmpfiles[183]: fchmod() of /var/log/journal failed: Operation not permitted container-test-run-certificates> client # [1547395.216541] client systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys container-test-run-certificates> server # [1547395.325788] server systemd-tmpfiles[183]: fchmod() of /var/log/journal/debab64483ce439eba9aa5c0c8d10dd4 failed: Operation not permitted container-test-run-certificates> client # [1547395.217299] client systemd[1]: Starting Network Management... container-test-run-certificates> server # [1547395.325976] server systemd-tmpfiles[183]: fchmod() of /run/log/journal failed: Operation not permitted container-test-run-certificates> server # [1547395.329086] server systemd[1]: Finished Create System Files and Directories. container-test-run-certificates> server # [1547395.330322] server systemd[1]: Starting Rebuild Journal Catalog... container-test-run-certificates> client # [1547395.234274] client systemd-tmpfiles[177]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted container-test-run-certificates> server # [1547395.330809] server systemd[1]: Starting Record System Boot/Shutdown in UTMP... container-test-run-certificates> client # [1547395.234482] client systemd-tmpfiles[177]: fchmod() of /var/log/journal failed: Operation not permitted container-test-run-certificates> client # [1547395.234628] client systemd-tmpfiles[177]: fchmod() of /var/log/journal/0b6d64513b204be09ff27144148384b2 failed: Operation not permitted container-test-run-certificates> client # [1547395.234846] client systemd-tmpfiles[177]: fchmod() of /run/log/journal failed: Operation not permitted container-test-run-certificates> client # [1547395.236667] client systemd[1]: Finished Create System Files and Directories. container-test-run-certificates> client # [1547395.237678] client systemd[1]: Starting Rebuild Journal Catalog... container-test-run-certificates> client # [1547395.238137] client systemd[1]: Starting Record System Boot/Shutdown in UTMP... container-test-run-certificates> client # [1547395.268771] client systemd[1]: Finished Record System Boot/Shutdown in UTMP. container-test-run-certificates> client # [1547395.274557] client systemd[1]: Finished Rebuild Journal Catalog. container-test-run-certificates> client # [1547395.275573] client systemd[1]: Starting Update is Completed... container-test-run-certificates> client # [1547395.292288] client systemd[1]: Finished Update is Completed. container-test-run-certificates> server # [1547395.337659] server systemd[1]: Finished Record System Boot/Shutdown in UTMP. container-test-run-certificates> server # [1547395.344041] server systemd[1]: Finished Rebuild Journal Catalog. container-test-run-certificates> server # [1547395.344680] server systemd[1]: Starting Update is Completed... container-test-run-certificates> server # [1547395.350028] server systemd[1]: Finished Update is Completed. container-test-run-certificates> server # [1547395.698230] server systemd[1]: Finished Save Transient machine-id to Disk. container-test-run-certificates> client # [1547395.699286] client systemd[1]: Finished Save Transient machine-id to Disk. container-test-run-certificates> client # [1547396.067195] client systemd[1]: etc-machine\x2did.mount: Deactivated successfully. container-test-run-certificates> server # [1547396.111654] server systemd[1]: etc-machine\x2did.mount: Deactivated successfully. container-test-run-certificates> client # [1547396.989030] client systemd-networkd[178]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted container-test-run-certificates> client # [1547396.989125] client systemd-networkd[178]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted container-test-run-certificates> client # [1547396.996764] client systemd-networkd[178]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> client # [1547396.996915] client systemd-networkd[178]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> client # [1547396.996995] client systemd-networkd[178]: lo: Link UP container-test-run-certificates> client # [1547396.996998] client systemd-networkd[178]: lo: Gained carrier container-test-run-certificates> client # [1547396.997138] client systemd-networkd[178]: eth1: Configuring with /etc/systemd/network/40-eth1.network. container-test-run-certificates> client # [1547396.997391] client systemd[1]: Started Network Management. container-test-run-certificates> client # [1547397.009178] client systemd-networkd[178]: eth1: Link UP container-test-run-certificates> client # [1547397.009206] client systemd[1]: Starting Enable Persistent Storage in systemd-networkd... container-test-run-certificates> client # [1547397.009354] client systemd-networkd[178]: eth1: Gained carrier container-test-run-certificates> client # [1547397.025695] client systemd[1]: Finished Enable Persistent Storage in systemd-networkd. container-test-run-certificates> server # [1547396.974317] server systemd-networkd[179]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted container-test-run-certificates> server # [1547396.974432] server systemd-networkd[179]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted container-test-run-certificates> server # [1547396.987845] server systemd-networkd[179]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> server # [1547396.988011] server systemd-networkd[179]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> server # [1547396.988153] server systemd-networkd[179]: lo: Link UP container-test-run-certificates> server # [1547396.988157] server systemd-networkd[179]: lo: Gained carrier container-test-run-certificates> server # [1547396.988328] server systemd-networkd[179]: eth1: Configuring with /etc/systemd/network/40-eth1.network. container-test-run-certificates> server # [1547396.988657] server systemd[1]: Started Network Management. container-test-run-certificates> server # [1547396.988690] server systemd-networkd[179]: eth1: Link UP container-test-run-certificates> server # [1547396.988846] server systemd-networkd[179]: eth1: Gained carrier container-test-run-certificates> server # [1547396.990282] server systemd[1]: Starting Enable Persistent Storage in systemd-networkd... container-test-run-certificates> server # [1547397.014263] server systemd[1]: Finished Enable Persistent Storage in systemd-networkd. container-test-run-certificates> server # [1547397.444240] server systemd-resolved[174]: Positive Trust Anchors: container-test-run-certificates> server # [1547397.444248] server systemd-resolved[174]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d container-test-run-certificates> server # [1547397.444252] server systemd-resolved[174]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 container-test-run-certificates> server # [1547397.444269] server systemd-resolved[174]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test container-test-run-certificates> server # [1547397.455560] server systemd-resolved[174]: Using system hostname 'server'. container-test-run-certificates> server # [1547397.456551] server systemd[1]: Started Network Name Resolution. container-test-run-certificates> server # [1547397.456614] server systemd[1]: Reached target Network. container-test-run-certificates> server # [1547397.456649] server systemd[1]: Reached target Network is Online. container-test-run-certificates> server # [1547397.456675] server systemd[1]: Reached target System Initialization. container-test-run-certificates> server # [1547397.456831] server systemd[1]: Started Renew ACME Certificate for test.foo. container-test-run-certificates> server # [1547397.456846] server systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> server # [1547397.456863] server systemd[1]: Started Daily Cleanup of Temporary Directories. container-test-run-certificates> server # [1547397.456875] server systemd[1]: Reached target Timer Units. container-test-run-certificates> server # [1547397.456960] server systemd[1]: Listening on D-Bus System Message Bus Socket. container-test-run-certificates> server # [1547397.457038] server systemd[1]: Listening on Nix Daemon Socket. container-test-run-certificates> server # [1547397.457118] server systemd[1]: Listening on Virtual Machine and Container Registration Service Socket. container-test-run-certificates> server # [1547397.457130] server systemd[1]: Reached target Socket Units. container-test-run-certificates> server # [1547397.457153] server systemd[1]: Reached target Basic System. container-test-run-certificates> server # [1547397.458090] server systemd[1]: Starting Set up the ACME certificate renewal infrastructure... container-test-run-certificates> server # [1547397.458688] server systemd[1]: Starting Import lastlog data into lastlog2 database... container-test-run-certificates> server # [1547397.458714] server systemd[1]: nginx-config-reload.service skipped, unmet condition check ConditionPathExists=/var/lib/acme/test.foo/fullchain.pem container-test-run-certificates> server # [1547397.459310] server systemd[1]: Starting Name Service Cache Daemon (nsncd)... container-test-run-certificates> server # [1547397.460036] server systemd[1]: Starting D-Bus System Message Bus... container-test-run-certificates> server # [1547397.490906] server systemd[1]: Finished Import lastlog data into lastlog2 database. container-test-run-certificates> server # [1547397.636136] server acme-setup-privileged[195]: + set -euo pipefail container-test-run-certificates> server # [1547397.636136] server acme-setup-privileged[195]: + cd /var/lib/acme container-test-run-certificates> server # [1547397.636136] server acme-setup-privileged[195]: + chmod -R u=rwX,g=,o= .lego/accounts container-test-run-certificates> server # [1547397.637119] server acme-setup-privileged[195]: + chown -R acme .lego/accounts container-test-run-certificates> server # [1547397.637971] server acme-setup-privileged[195]: + for fixpath in test.foo .lego/test.foo container-test-run-certificates> server # [1547397.638019] server acme-setup-privileged[195]: + '[' -d test.foo ']' container-test-run-certificates> server # [1547397.638019] server acme-setup-privileged[195]: + for fixpath in test.foo .lego/test.foo container-test-run-certificates> server # [1547397.638019] server acme-setup-privileged[195]: + '[' -d .lego/test.foo ']' container-test-run-certificates> server # [1547397.647766] server nsncd[197]: Sep 22 05:06:52.071 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket" container-test-run-certificates> server # [1547397.647817] server systemd[1]: Started Name Service Cache Daemon (nsncd). container-test-run-certificates> server # [1547397.647870] server systemd[1]: Reached target Host and Network Name Lookups. container-test-run-certificates> server # [1547397.647911] server systemd[1]: Reached target User and Group Name Lookups. container-test-run-certificates> server # [1547397.660166] server systemd[1]: Starting User Login Management... container-test-run-certificates> server # [1547397.660650] server systemd[1]: Starting Permit User Sessions... container-test-run-certificates> server # [1547397.666872] server systemd[1]: Finished Permit User Sessions. container-test-run-certificates> server # [1547397.668129] server systemd[1]: Started Console Getty. container-test-run-certificates> server # [1547397.668155] server systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0 container-test-run-certificates> server # [1547397.668170] server systemd[1]: Reached target Login Prompts. container-test-run-certificates> client # [1547397.473422] client systemd-resolved[167]: Positive Trust Anchors: container-test-run-certificates> client # [1547397.473433] client systemd-resolved[167]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d container-test-run-certificates> client # [1547397.473437] client systemd-resolved[167]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 container-test-run-certificates> client # [1547397.473453] client systemd-resolved[167]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test container-test-run-certificates> client # [1547397.488319] client systemd-resolved[167]: Using system hostname 'client'. container-test-run-certificates> client # [1547397.489402] client systemd[1]: Started Network Name Resolution. container-test-run-certificates> client # [1547397.489456] client systemd[1]: Reached target Network. container-test-run-certificates> client # [1547397.489498] client systemd[1]: Reached target System Initialization. container-test-run-certificates> client # [1547397.489533] client systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> client # [1547397.489550] client systemd[1]: Started Daily Cleanup of Temporary Directories. container-test-run-certificates> client # [1547397.489561] client systemd[1]: Reached target Timer Units. container-test-run-certificates> client # [1547397.489648] client systemd[1]: Listening on D-Bus System Message Bus Socket. container-test-run-certificates> client # [1547397.489727] client systemd[1]: Listening on Nix Daemon Socket. container-test-run-certificates> client # [1547397.489803] client systemd[1]: Listening on Virtual Machine and Container Registration Service Socket. container-test-run-certificates> client # [1547397.489815] client systemd[1]: Reached target Socket Units. container-test-run-certificates> client # [1547397.489835] client systemd[1]: Reached target Basic System. container-test-run-certificates> client # [1547397.490518] client systemd[1]: Starting Import lastlog data into lastlog2 database... container-test-run-certificates> client # [1547397.490892] client systemd[1]: Starting Name Service Cache Daemon (nsncd)... container-test-run-certificates> client # [1547397.491511] client systemd[1]: Starting D-Bus System Message Bus... container-test-run-certificates> client # [1547397.500431] client systemd[1]: Finished Import lastlog data into lastlog2 database. container-test-run-certificates> client # [1547397.657461] client nsncd[192]: Sep 22 05:06:52.080 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket" container-test-run-certificates> client # [1547397.657490] client systemd[1]: Started Name Service Cache Daemon (nsncd). container-test-run-certificates> client # [1547397.657541] client systemd[1]: Reached target Host and Network Name Lookups. container-test-run-certificates> client # [1547397.657583] client systemd[1]: Reached target User and Group Name Lookups. container-test-run-certificates> client # [1547397.660164] client systemd[1]: Starting User Login Management... container-test-run-certificates> client # [1547397.660658] client systemd[1]: Starting Permit User Sessions... container-test-run-certificates> client # [1547397.668021] client systemd[1]: Finished Permit User Sessions. container-test-run-certificates> client # [1547397.668617] client systemd[1]: Started Console Getty. container-test-run-certificates> client # [1547397.668645] client systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0 container-test-run-certificates> client # [1547397.668657] client systemd[1]: Reached target Login Prompts. container-test-run-certificates> client # [1547397.805684] client dbus-broker-launch[193]: Looking up NSS user entry for 'systemd-timesync'... container-test-run-certificates> server # [1547397.813492] server dbus-broker-launch[198]: Looking up NSS user entry for 'systemd-timesync'... container-test-run-certificates> client # [1547397.807547] client dbus-broker-launch[193]: NSS returned no entry for 'systemd-timesync' container-test-run-certificates> server # [1547397.814931] server dbus-broker-launch[198]: NSS returned no entry for 'systemd-timesync' container-test-run-certificates> client # [1547397.807547] client dbus-broker-launch[193]: Invalid user-name in /nix/store/k1wkxjg7rqm8aki2ngjxfj3lf1b0qmmn-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync" container-test-run-certificates> server # [1547397.814931] server dbus-broker-launch[198]: Invalid user-name in /nix/store/c02lr3b0bgpmd8c0jfrflwkam4h2k3z7-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync" container-test-run-certificates> client # [1547397.807231] client systemd[1]: Started D-Bus System Message Bus. container-test-run-certificates> server # [1547397.814799] server systemd[1]: Started D-Bus System Message Bus. container-test-run-certificates> client # [1547397.811784] client dbus-broker-launch[193]: Ready container-test-run-certificates> server # [1547397.820475] server dbus-broker-launch[198]: Ready container-test-run-certificates> server # [1547398.209054] server systemd-networkd[179]: eth1: Gained IPv6LL container-test-run-certificates> server # [1547398.437960] server systemd-logind[222]: New seat seat0. container-test-run-certificates> server # [1547398.438128] server systemd[1]: Started User Login Management. container-test-run-certificates> server # [1547398.439056] server systemd[1]: Starting linger-users.service... container-test-run-certificates> server # [1547398.461700] server systemd[1]: linger-users.service: Deactivated successfully. container-test-run-certificates> server # [1547398.461864] server systemd[1]: Finished linger-users.service. container-test-run-certificates> client # [1547398.531498] client systemd-logind[208]: New seat seat0. container-test-run-certificates> client # [1547398.531650] client systemd[1]: Started User Login Management. container-test-run-certificates> client # [1547398.532752] client systemd[1]: Starting linger-users.service... container-test-run-certificates> client # [1547398.560224] client systemd[1]: linger-users.service: Deactivated successfully. container-test-run-certificates> client # [1547398.560318] client systemd[1]: Finished linger-users.service. container-test-run-certificates> client # [1547398.560568] client systemd[1]: Reached target Multi-User System. container-test-run-certificates> client # [1547398.560675] client systemd[1]: Startup finished in 3.844s. container-test-run-certificates> server # [1547398.743593] server acme-setup-start[211]: + set -euo pipefail container-test-run-certificates> server # [1547398.743593] server acme-setup-start[211]: + test -e ca/key.pem container-test-run-certificates> server # [1547398.743891] server acme-setup-start[211]: + minica --ca-key ca/key.pem --ca-cert ca/cert.pem --domains selfsigned.local container-test-run-certificates> server # [1547398.750691] server systemd[1]: Finished Set up the ACME certificate renewal infrastructure. container-test-run-certificates> server # [1547398.751595] server systemd[1]: Starting Ensure certificate for test.foo... container-test-run-certificates> client # [1547398.976127] client systemd-networkd[178]: eth1: Gained IPv6LL container-test-run-certificates> server # [1547399.787159] server acme-test.foo-start[248]: Waiting to acquire lock in /run/acme/ container-test-run-certificates> server # [1547399.788736] server acme-test.foo-start[248]: + '[' -e out/acme-success ']' container-test-run-certificates> server # [1547399.788736] server acme-test.foo-start[248]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=test.foo --ip-addresses= container-test-run-certificates> server # [1547399.793062] server acme-test.foo-start[258]: + cd test.foo container-test-run-certificates> server # [1547399.793294] server acme-test.foo-start[258]: + cp -vp cert.pem ../out/cert.pem container-test-run-certificates> server # [1547399.793826] server acme-test.foo-start[259]: 'cert.pem' -> '../out/cert.pem' container-test-run-certificates> server # [1547399.793934] server acme-test.foo-start[258]: + cp -vp key.pem ../out/key.pem container-test-run-certificates> server # [1547399.794547] server acme-test.foo-start[258]: 'key.pem' -> '../out/key.pem' container-test-run-certificates> server # [1547399.794670] server acme-test.foo-start[248]: + cat out/cert.pem ca/cert.pem container-test-run-certificates> server # [1547399.795490] server acme-test.foo-start[248]: + cp ca/cert.pem out/chain.pem container-test-run-certificates> server # [1547399.796278] server acme-test.foo-start[248]: + cat out/key.pem out/fullchain.pem container-test-run-certificates> server # [1547399.797034] server acme-test.foo-start[248]: + for fixpath in out certificates container-test-run-certificates> server # [1547399.797034] server acme-test.foo-start[248]: + '[' -d out ']' container-test-run-certificates> server # [1547399.797088] server acme-test.foo-start[248]: + chmod -R u=rwX,g=rX,o= out container-test-run-certificates> server # [1547399.797811] server acme-test.foo-start[248]: + chown -R acme:nginx out container-test-run-certificates> server # [1547399.799499] server acme-test.foo-start[248]: + for fixpath in out certificates container-test-run-certificates> server # [1547399.799499] server acme-test.foo-start[248]: + '[' -d certificates ']' container-test-run-certificates> server # [1547399.805395] server systemd[1]: Finished Ensure certificate for test.foo. container-test-run-certificates> server # [1547399.806664] server systemd[1]: Starting Nginx Web Server... container-test-run-certificates> server # [1547400.704973] server nginx-pre-start[270]: nginx: the configuration file /nix/store/7wv2zw3whf4grx9xnxbdb37zv3ignyld-nginx.conf syntax is ok container-test-run-certificates> server # [1547400.705274] server nginx-pre-start[270]: nginx: configuration file /nix/store/7wv2zw3whf4grx9xnxbdb37zv3ignyld-nginx.conf test is successful container-test-run-certificates> server # [1547400.708400] server systemd[1]: Started Nginx Web Server. container-test-run-certificates> server # [1547400.708640] server systemd[1]: Reached target Multi-User System. container-test-run-certificates> server # [1547400.709289] server systemd[1]: Starting Order (and renew) ACME certificate for test.foo... container-test-run-certificates> server # [1547401.549773] server acme-order-renew-test.foo-start[273]: Waiting to acquire lock in /run/acme/ container-test-run-certificates> server # [1547401.551172] server acme-order-renew-test.foo-start[273]: + set -euo pipefail container-test-run-certificates> server # [1547401.551209] server acme-order-renew-test.foo-start[273]: + exec container-test-run-certificates> server # [1547401.551235] server acme-order-renew-test.foo-start[273]: + /nix/store/m9ik4hd36632x3n2ibrxl2vyi0w4y094-flock-0.4.0/bin/flock 11 container-test-run-certificates> server # [1547401.551802] server acme-order-renew-test.foo-start[284]: ++ find accounts -path '*/keys/*.key' -print -quit container-test-run-certificates> server # [1547401.553099] server acme-order-renew-test.foo-start[273]: + '[' -n '' ']' container-test-run-certificates> server # [1547401.553121] server acme-order-renew-test.foo-start[273]: + exec container-test-run-certificates> server # [1547401.553152] server acme-order-renew-test.foo-start[273]: + '[' -e certificates/test.foo.key ']' container-test-run-certificates> server # [1547401.553172] server acme-order-renew-test.foo-start[273]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo/acme/acme/directory --key-type ec256 -d test.foo --no-random-sleep --renew-force --ari-disable --force-cert-domains container-test-run-certificates> server # [1547401.562031] server acme-order-renew-test.foo-start[285]: 2026-09-22T05:06:55.985339382Z INFO Private key saved. filepath=accounts/ca.foo/none@none.tld/none@none.tld.key container-test-run-certificates> server # [1547401.575924] server acme-order-renew-test.foo-start[285]: 2026-09-22T05:06:55.999251081Z INFO Registering the account. email=none@none.tld container-test-run-certificates> server # [1547401.593277] server acme-order-renew-test.foo-start[285]: 2026-09-22T05:06:56.016607696Z WARN !!!! HEADS UP !!!! container-test-run-certificates> server # [1547401.593277] server acme-order-renew-test.foo-start[285]: Your account credentials have been saved in your container-test-run-certificates> server # [1547401.593277] server acme-order-renew-test.foo-start[285]: configuration directory at "accounts". container-test-run-certificates> server # [1547401.593277] server acme-order-renew-test.foo-start[285]: You should make a secure backup of this folder now. This container-test-run-certificates> server # [1547401.593277] server acme-order-renew-test.foo-start[285]: configuration directory will also contain private keys container-test-run-certificates> server # [1547401.593277] server acme-order-renew-test.foo-start[285]: generated by lego and certificates obtained from the ACME container-test-run-certificates> server # [1547401.593277] server acme-order-renew-test.foo-start[285]: server. Making regular backups of this folder is ideal. container-test-run-certificates> server # [1547401.593379] server acme-order-renew-test.foo-start[285]: 2026-09-22T05:06:56.016659734Z INFO Obtaining bundled SAN certificate. domains=test.foo container-test-run-certificates> server # [1547401.653779] server acme-order-renew-test.foo-start[285]: 2026-09-22T05:06:56.077105957Z INFO Use solver. domain=test.foo type=http-01 container-test-run-certificates> server # [1547401.653779] server acme-order-renew-test.foo-start[285]: 2026-09-22T05:06:56.077114713Z INFO http01: Trying to solve HTTP-01. domain=test.foo container-test-run-certificates> server # [1547401.655880] server acme-order-renew-test.foo-start[285]: 2026-09-22T05:06:56.079211873Z INFO The server validated our request. domain=test.foo container-test-run-certificates> server # [1547401.655914] server acme-order-renew-test.foo-start[285]: 2026-09-22T05:06:56.079245115Z INFO Validations succeeded; requesting certificates. domains=test.foo container-test-run-certificates> server # [1547401.659900] server acme-order-renew-test.foo-start[285]: 2026-09-22T05:06:56.083231773Z INFO Server responded with a certificate. domains=test.foo container-test-run-certificates> server # [1547401.659925] server acme-order-renew-test.foo-start[285]: 2026-09-22T05:06:56.083251189Z INFO Writing file. filepath=certificates/test.foo.crt container-test-run-certificates> server # [1547401.659952] server acme-order-renew-test.foo-start[285]: 2026-09-22T05:06:56.083287889Z INFO Writing file. filepath=certificates/test.foo.issuer.crt container-test-run-certificates> server # [1547401.659971] server acme-order-renew-test.foo-start[285]: 2026-09-22T05:06:56.083308838Z INFO Writing file. filepath=certificates/test.foo.key container-test-run-certificates> server # [1547401.660011] server acme-order-renew-test.foo-start[285]: 2026-09-22T05:06:56.083346509Z INFO Writing file. filepath=certificates/test.foo.json container-test-run-certificates> server # [1547401.662278] server acme-order-renew-test.foo-start[273]: + touch out/acme-success container-test-run-certificates> server # [1547401.663115] server acme-order-renew-test.foo-start[273]: + cmp -s certificates/test.foo.crt out/fullchain.pem container-test-run-certificates> server # [1547401.663656] server acme-order-renew-test.foo-start[273]: + touch out/renewed container-test-run-certificates> server # [1547401.664353] server acme-order-renew-test.foo-start[273]: + echo Installing new certificate container-test-run-certificates> server # [1547401.664353] server acme-order-renew-test.foo-start[273]: Installing new certificate container-test-run-certificates> server # [1547401.664353] server acme-order-renew-test.foo-start[273]: + cp -vp certificates/test.foo.crt out/fullchain.pem container-test-run-certificates> server # [1547401.665194] server acme-order-renew-test.foo-start[305]: 'certificates/test.foo.crt' -> 'out/fullchain.pem' container-test-run-certificates> server # [1547401.665420] server acme-order-renew-test.foo-start[273]: + cp -vp certificates/test.foo.key out/key.pem container-test-run-certificates> server # [1547401.666162] server acme-order-renew-test.foo-start[306]: 'certificates/test.foo.key' -> 'out/key.pem' container-test-run-certificates> server # [1547401.666330] server acme-order-renew-test.foo-start[273]: + cp -vp certificates/test.foo.issuer.crt out/chain.pem container-test-run-certificates> server # [1547401.667455] server acme-order-renew-test.foo-start[307]: 'certificates/test.foo.issuer.crt' -> 'out/chain.pem' container-test-run-certificates> server # [1547401.667661] server acme-order-renew-test.foo-start[273]: + ln -sf fullchain.pem out/cert.pem container-test-run-certificates> server # [1547401.668573] server acme-order-renew-test.foo-start[273]: + cat out/key.pem out/fullchain.pem container-test-run-certificates> server # [1547401.669413] server acme-order-renew-test.foo-start[273]: + for fixpath in out certificates container-test-run-certificates> server # [1547401.669413] server acme-order-renew-test.foo-start[273]: + '[' -d out ']' container-test-run-certificates> server # [1547401.669447] server acme-order-renew-test.foo-start[273]: + chmod -R u=rwX,g=rX,o= out container-test-run-certificates> server # [1547401.670210] server acme-order-renew-test.foo-start[273]: + chown -R acme:nginx out container-test-run-certificates> server # [1547401.671703] server acme-order-renew-test.foo-start[273]: + for fixpath in out certificates container-test-run-certificates> server # [1547401.671703] server acme-order-renew-test.foo-start[273]: + '[' -d certificates ']' container-test-run-certificates> server # [1547401.671735] server acme-order-renew-test.foo-start[273]: + chmod -R u=rwX,g=rX,o= certificates container-test-run-certificates> server # [1547401.672545] server acme-order-renew-test.foo-start[273]: + chown -R acme:nginx certificates container-test-run-certificates> server # [1547401.674068] server acme-order-renew-test.foo-start[273]: + chmod -R u=rwX,g=,o= accounts/. container-test-run-certificates> server # [1547401.800083] server systemd[1]: Reloading Nginx Web Server... container-test-run-certificates> ca # [1547401.575738] ca step-ca[206]: time="2026-09-22T05:06:55Z" level=info duration="37.701µs" duration-ns=37701 fields.time="2026-09-22T05:06:55Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="::1" request-id=c2296c1d-255c-4a15-9632-5f756e063c99 response="{\"newNonce\":\"https://ca.foo/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo/acme/acme/new-account\",\"newOrder\":\"https://ca.foo/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo/acme/acme/key-change\"}" size=252 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [1547401.591584] ca step-ca[206]: time="2026-09-22T05:06:56Z" level=info duration=14.801314ms duration-ns=14801314 fields.time="2026-09-22T05:06:56Z" method=HEAD name=ca nonce=cDVlMlR1VXpHS1lCSXR3RlhQb1NhNlBad2d6NENOSXI path=/acme/acme/new-nonce protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=7dbb9578-8e85-41e9-b9c8-1f8cb97c1e2e size=0 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [1547401.593091] ca step-ca[206]: time="2026-09-22T05:06:56Z" level=info duration="678.037µs" duration-ns=678037 fields.time="2026-09-22T05:06:56Z" method=POST name=ca nonce=MThLRGhGcUhiODhIeXhrclVTbTZ6MU5oMkFNTksxTGM path=/acme/acme/new-account protocol=HTTP/1.1 referer= remote-address="::1" request-id=6bfb7860-81e1-4b6b-8f80-28aeb42072d6 response="{\"contact\":[\"mailto:none@none.tld\"],\"status\":\"valid\",\"orders\":\"https://ca.foo/acme/acme/account/NPvJCW6t05Rqxrm0T56ddZLpqZ3VQa66/orders\"}" size=138 status=201 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [1547401.595556] ca step-ca[206]: time="2026-09-22T05:06:56Z" level=info duration=1.51869ms duration-ns=1518690 fields.time="2026-09-22T05:06:56Z" method=POST name=ca nonce=UzdyeDR1b0J0QUpIeUpjek9wOUd2bkVJQzgyZFlqeGE path=/acme/acme/new-order protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=2467e3b0-a658-443e-a779-ae96f96bb52e response="{\"id\":\"I1P5gJ91BjDGbJO22zTZ4PRcBeYN2h1F\",\"status\":\"pending\",\"expires\":\"2026-09-23T05:06:56Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"test.foo\"}],\"notBefore\":\"2026-09-22T05:05:56Z\",\"notAfter\":\"2026-12-21T05:06:56Z\",\"authorizations\":[\"https://ca.foo/acme/acme/authz/y4Y6t7Gz71rNY1TPcyFvkLPDpscixcqj\"],\"finalize\":\"https://ca.foo/acme/acme/order/I1P5gJ91BjDGbJO22zTZ4PRcBeYN2h1F/finalize\"}" size=384 status=201 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [1547401.653619] ca step-ca[206]: time="2026-09-22T05:06:56Z" level=info duration="924.802µs" duration-ns=924802 fields.time="2026-09-22T05:06:56Z" method=POST name=ca nonce=NWFkOFFFOUxyTEF2NVRKdXdid0xlcG5iTFI1NGI3RWs path=/acme/acme/authz/y4Y6t7Gz71rNY1TPcyFvkLPDpscixcqj protocol=HTTP/1.1 referer= remote-address="::1" request-id=ecea8a49-8ebe-4882-b044-1fb790178b18 response="{\"identifier\":{\"type\":\"dns\",\"value\":\"test.foo\"},\"status\":\"pending\",\"challenges\":[{\"type\":\"dns-01\",\"status\":\"pending\",\"token\":\"DZDXnP8fR8haVhwpauuRol2dcf6Qkq8m\",\"url\":\"https://ca.foo/acme/acme/challenge/y4Y6t7Gz71rNY1TPcyFvkLPDpscixcqj/jBqm6rKLYZI60bM7tzqdHaJAWl6Hoy1d\"},{\"type\":\"http-01\",\"status\":\"pending\",\"token\":\"DZDXnP8fR8haVhwpauuRol2dcf6Qkq8m\",\"url\":\"https://ca.foo/acme/acme/challenge/y4Y6t7Gz71rNY1TPcyFvkLPDpscixcqj/A0HNOXltzxKp8qxTeW04kP4mvcuuLnUR\"},{\"type\":\"tls-alpn-01\",\"status\":\"pending\",\"token\":\"DZDXnP8fR8haVhwpauuRol2dcf6Qkq8m\",\"url\":\"https://ca.foo/acme/acme/challenge/y4Y6t7Gz71rNY1TPcyFvkLPDpscixcqj/ggLyK6hvnaHQujmYIkiVV9YBUXKMyBFI\"}],\"wildcard\":false,\"expires\":\"2026-09-23T05:06:56Z\"}" size=706 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [1547401.655739] ca step-ca[206]: time="2026-09-22T05:06:56Z" level=info duration=1.319374ms duration-ns=1319374 fields.time="2026-09-22T05:06:56Z" method=POST name=ca nonce=QWZLaEZlSWlHcFoydGthNDNrYjVUZ0dyZE5sWGx3RXU path=/acme/acme/challenge/y4Y6t7Gz71rNY1TPcyFvkLPDpscixcqj/A0HNOXltzxKp8qxTeW04kP4mvcuuLnUR protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=d79e9d35-0859-4f2c-a6be-0b4779cd1e05 response="{\"type\":\"http-01\",\"status\":\"valid\",\"token\":\"DZDXnP8fR8haVhwpauuRol2dcf6Qkq8m\",\"validated\":\"2026-09-22T05:06:56Z\",\"url\":\"https://ca.foo/acme/acme/challenge/y4Y6t7Gz71rNY1TPcyFvkLPDpscixcqj/A0HNOXltzxKp8qxTeW04kP4mvcuuLnUR\"}" size=223 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [1547401.658595] ca step-ca[206]: time="2026-09-22T05:06:56Z" level=info duration=1.941176ms duration-ns=1941176 fields.time="2026-09-22T05:06:56Z" method=POST name=ca nonce=amhUd1RRN2h6U2txeWYwN3NpQzdoa2NxdUlnUTVyWk8 path=/acme/acme/order/I1P5gJ91BjDGbJO22zTZ4PRcBeYN2h1F/finalize protocol=HTTP/1.1 referer= remote-address="::1" request-id=0bb0de0b-3bd8-475a-9563-23e25a3c0f9c response="{\"id\":\"I1P5gJ91BjDGbJO22zTZ4PRcBeYN2h1F\",\"status\":\"valid\",\"expires\":\"2026-09-23T05:06:56Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"test.foo\"}],\"notBefore\":\"2026-09-22T05:05:56Z\",\"notAfter\":\"2026-12-21T05:06:56Z\",\"authorizations\":[\"https://ca.foo/acme/acme/authz/y4Y6t7Gz71rNY1TPcyFvkLPDpscixcqj\"],\"finalize\":\"https://ca.foo/acme/acme/order/I1P5gJ91BjDGbJO22zTZ4PRcBeYN2h1F/finalize\",\"certificate\":\"https://ca.foo/acme/acme/certificate/XrO0IsDVi913m8T4ZWP0dnCPVrRAvThc\"}" size=468 status=200 user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [1547401.659763] ca step-ca[206]: time="2026-09-22T05:06:56Z" level=info certificate=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 duration="412.947µs" duration-ns=412947 fields.time="2026-09-22T05:06:56Z" issuer="Clan Intermediate CA" method=POST name=ca nonce=MGZkUEFqckhtNHp2c3ZBUmI2S1cxN1gzUmFwRE9SRUY path=/acme/acme/certificate/XrO0IsDVi913m8T4ZWP0dnCPVrRAvThc protocol=HTTP/1.1 provisioner=acme public-key="ECDSA P-256" referer= remote-address=127.0.0.1 request-id=d0b34ed8-6938-4546-b706-fdfeeb975569 sans="map[dns:[test.foo]]" serial=156062559452171315381917814919818122611 size=1344 status=200 subject=test.foo user-agent="lego-cli/ xenolf-acme/5.4.1 (release; linux; amd64)" user-id= valid-from="2026-09-22T05:05:56Z" valid-to="2026-12-21T05:06:56Z" container-test-run-certificates> server # [1547401.802702] server systemd[1]: acme-order-renew-test.foo.service: Deactivated successfully. container-test-run-certificates> server # [1547401.802821] server systemd[1]: Finished Order (and renew) ACME certificate for test.foo. container-test-run-certificates> server # [1547402.642418] server nginx[323]: nginx: the configuration file /nix/store/7wv2zw3whf4grx9xnxbdb37zv3ignyld-nginx.conf syntax is ok container-test-run-certificates> server # [1547402.642663] server nginx[323]: nginx: configuration file /nix/store/7wv2zw3whf4grx9xnxbdb37zv3ignyld-nginx.conf test is successful container-test-run-certificates> server: (finished: waiting for file '/var/lib/acme/test.foo/fullchain.pem', in 9.14 seconds) container-test-run-certificates> server: must succeed: systemctl restart nginx.service container-test-run-certificates> server # [1547403.412907] server systemd[1]: Reloaded Nginx Web Server. container-test-run-certificates> server # [1547403.413140] server systemd[1]: Startup finished in 8.696s. container-test-run-certificates> server # [1547403.479265] server systemd[1]: Stopping Nginx Web Server... container-test-run-certificates> server # [1547403.526045] server systemd[1]: nginx.service: Deactivated successfully. container-test-run-certificates> server # [1547403.526187] server systemd[1]: Stopped Nginx Web Server. container-test-run-certificates> server # [1547403.526216] server systemd[1]: nginx.service: Consumed 5.524s CPU time over 3.719s wall clock time. container-test-run-certificates> server # [1547403.527721] server systemd[1]: Starting Nginx Web Server... container-test-run-certificates> server: (finished: must succeed: systemctl restart nginx.service, in 0.90 seconds) container-test-run-certificates> client: waiting for success: curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: 2001:db8:1::3 container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying [2001:db8:1::3]:443... container-test-run-certificates> * connect to 2001:db8:1::3 port 443 from 2001:db8:1::2 port 60092 failed: Connection refused container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * connect to 192.168.1.3 port 443 from 192.168.1.2 port 45186 failed: Connection refused container-test-run-certificates> * Failed to connect to test.foo:443 after 1 ms: Could not connect to server container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (7) Failed to connect to test.foo:443 after 1 ms: Could not connect to server container-test-run-certificates> server # [1547404.367898] server nginx-pre-start[346]: nginx: the configuration file /nix/store/7wv2zw3whf4grx9xnxbdb37zv3ignyld-nginx.conf syntax is ok container-test-run-certificates> server # [1547404.368252] server nginx-pre-start[346]: nginx: configuration file /nix/store/7wv2zw3whf4grx9xnxbdb37zv3ignyld-nginx.conf test is successful container-test-run-certificates> server # [1547404.371157] server systemd[1]: Started Nginx Web Server. container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: 2001:db8:1::3 container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying [2001:db8:1::3]:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [930 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [78 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Sep 22 05:05:56 2026 GMT container-test-run-certificates> * expire date: Dec 21 05:06:56 2026 GMT container-test-run-certificates> * issuer: CN=Clan Intermediate CA container-test-run-certificates> * Certificate level 0: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 1: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 2: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 0 container-test-run-certificates> * SSL certificate verified via OpenSSL. container-test-run-certificates> * Established connection to test.foo (2001:db8:1::3 port 443) from 2001:db8:1::2 port 60096 container-test-run-certificates> % Total % Received % Xferd Average Speed Time Time Time Current container-test-run-certificates> Dload Upload Total Spent Left Speed container-test-run-certificates> 0 0 0 0 0 0 0 0 0* using HTTP/2 container-test-run-certificates> * [HTTP/2] [1] OPENED stream for https://test.foo/ container-test-run-certificates> * [HTTP/2] [1] [:method: GET] container-test-run-certificates> * [HTTP/2] [1] [:scheme: https] container-test-run-certificates> * [HTTP/2] [1] [:authority: test.foo] container-test-run-certificates> * [HTTP/2] [1] [:path: /] container-test-run-certificates> * [HTTP/2] [1] [user-agent: curl/8.22.0] container-test-run-certificates> * [HTTP/2] [1] [accept: */*] container-test-run-certificates> } [5 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> * Request completely sent off container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> { [5 bytes data] container-test-run-certificates> 100 20 100 20 0 0 1487 0 0 container-test-run-certificates> * Connection #0 to host test.foo:443 left intact container-test-run-certificates> client: (finished: waiting for success: curl -v https://test.foo, in 1.03 seconds) container-test-run-certificates> client: must succeed: openssl s_client -connect test.foo:443 -servername test.foo /dev/null | openssl x509 -text -noout 1>&2 container-test-run-certificates> Certificate: container-test-run-certificates> Data: container-test-run-certificates> Version: 3 (0x2) container-test-run-certificates> Serial Number: container-test-run-certificates> 75:68:8e:3e:ba:90:5e:26:7c:d7:42:99:83:04:15:73 container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Issuer: CN=Clan Intermediate CA container-test-run-certificates> Validity container-test-run-certificates> Not Before: Sep 22 05:05:56 2026 GMT container-test-run-certificates> Not After : Dec 21 05:06:56 2026 GMT container-test-run-certificates> Subject: CN=test.foo container-test-run-certificates> Subject Public Key Info: container-test-run-certificates> Public Key Algorithm: id-ecPublicKey container-test-run-certificates> Public-Key: (256 bit) container-test-run-certificates> pub: container-test-run-certificates> 04:b0:03:da:37:d4:96:85:dc:ad:44:c0:b1:85:d1: container-test-run-certificates> 41:00:63:21:2b:64:f2:6b:f3:43:a5:53:db:d0:3d: container-test-run-certificates> 52:44:70:2c:09:27:a2:70:4a:28:e9:59:09:68:ca: container-test-run-certificates> f5:75:87:63:ba:15:c3:0f:f6:ed:2f:c6:fb:35:61: container-test-run-certificates> a7:ea:fb:da:af container-test-run-certificates> ASN1 OID: prime256v1 container-test-run-certificates> NIST CURVE: P-256 container-test-run-certificates> X509v3 extensions: container-test-run-certificates> X509v3 Key Usage: critical container-test-run-certificates> Digital Signature container-test-run-certificates> X509v3 Extended Key Usage: container-test-run-certificates> TLS Web Server Authentication, TLS Web Client Authentication container-test-run-certificates> X509v3 Subject Key Identifier: container-test-run-certificates> 29:0B:37:74:F3:FE:77:6E:9C:6D:80:BA:70:ED:DC:C3:86:4E:7C:DC container-test-run-certificates> X509v3 Authority Key Identifier: container-test-run-certificates> 90:6C:E9:21:1F:55:0C:EE:D3:73:82:A6:DC:45:76:BD:D8:57:3F:CE container-test-run-certificates> X509v3 Subject Alternative Name: container-test-run-certificates> DNS:test.foo container-test-run-certificates> 1.3.6.1.4.1.37476.9000.64.1: container-test-run-certificates> 0......acme.. container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Signature Value: container-test-run-certificates> 30:44:02:20:0a:e7:0a:0d:e7:ec:aa:8a:62:f4:f3:fb:4a:dc: container-test-run-certificates> 3f:91:f7:0a:46:1b:2b:0c:c2:e4:be:40:72:51:93:b2:cc:b2: container-test-run-certificates> 02:20:42:f3:e6:75:5d:ec:50:a5:98:9b:74:47:91:7b:2d:f8: container-test-run-certificates> e0:11:27:a8:dd:78:31:6e:dd:79:a4:9c:95:62:fb:74 container-test-run-certificates> client: (finished: must succeed: openssl s_client -connect test.foo:443 -servername test.foo /dev/null | openssl x509 -text -noout 1>&2, in 0.02 seconds) container-test-run-certificates> (finished: run the VM test script, in 30.65 seconds) container-test-run-certificates> test script finished in 30.81s container-test-run-certificates> cleanup container-test-run-certificates> kill NspawnMachine (pid 50) container-test-run-certificates> kill NspawnMachine (pid 446) container-test-run-certificates> Container ca terminated by signal KILL. container-test-run-certificates> kill NspawnMachine (pid 443) container-test-run-certificates> Container client terminated by signal KILL. container-test-run-certificates> Container server terminated by signal KILL. container-test-run-certificates> (finished: cleanup, in 0.29 seconds) post-build step Upload to niks3: ok time=2026-09-22T05:07:00.757Z level=INFO msg="Uploading 0 paths to niks3.clan.lol (1 already cached)" time=2026-09-22T05:07:01.673Z level=INFO msg="Uploading 1 narinfos" time=2026-09-22T05:07:02.230Z level=INFO msg="Upload complete. (1.569s)"