this derivation will be built: /nix/store/3c5mwv56ikndzz1f2f8ml2gmsg4chg4r-container-test-run-user-firewall-nftables.drv these 113 paths will be fetched (0.0 KiB download, 487.9 MiB unpacked): /nix/store/hcnxsy2v4glw2bzmrhgkjq1ydlrhyv7p-X-Reload-Triggers-systemd-networkd /nix/store/jlp303w2hi11lwn08laqv48gkfx7hiwh-X-Reload-Triggers-systemd-networkd /nix/store/inwsr640dj362c1652pqvf6jdm878kwa-X-Restart-Triggers-dbus-broker /nix/store/kv06jy37n493723z7bcrgl9x77y3s2b3-X-Restart-Triggers-dbus-broker /nix/store/wlby4k9warc1ax6nw6b8bxi6grfn5ai6-X-Restart-Triggers-nix-daemon /nix/store/9l7068zrgdg6s8jgnw81fszcj1kw5a6x-X-Restart-Triggers-systemd-tmpfiles-resetup /nix/store/190lga1sbznlnzvdr9dgljszxknsqqb3-acl-2.4.0-dev /nix/store/bxdw4pz85zv340010ypp9c18wrdc6jaa-attr-2.6.0-dev /nix/store/bikkd0jwr8jkd3r6r5mcr28fm17yvb0z-binutils-2.46 /nix/store/0hwdwd29hav3i5q5if8swm95bf5ghf0k-binutils-2.46-lib /nix/store/lydiw6nfl7g2mz09wkacic38bzhqhr1v-binutils-wrapper-2.46 /nix/store/1ravhdqllj8wlxz5gw9bqmcxbnpz23fa-boehm-gc-8.2.12-dev /nix/store/n03dc7xm09na7ivvkclbb871nm8gzzj3-boost-1.89.0-dev /nix/store/c408sd7jmz00xr0ajvy6q9xx8r5mpvsi-closure-info /nix/store/z2q37lfbfdphajs8q7kh6jgh243hnv1g-closure-info /nix/store/5brdl519s5n97j41y4gyh4ln7fdmfyha-dbus-1 /nix/store/b0jdxzb63vnypdci59bxr0pq2d0gmby1-dbus-1 /nix/store/09shgqm9zmk9ik7a93jj56qbgjl6gs5l-etc /nix/store/h3hbh4lpqy2yw87cxbhwcv11xb4ja5ik-etc /nix/store/j5ssnckjdnlc4i6ms409mkg3ryg6cnhi-etc-hostname /nix/store/mx9vpzwdvmj0vvzankmv9nngrrxwy24i-etc-hostname /nix/store/mcvrww58w9cg9mjnqqgcjpg9a85f89jf-expand-response-params /nix/store/w4910jj1pb63k12d3gbnl03n1ixcf1js-gcc-15.3.0 /nix/store/79mr0jw3qccq7hhf1hh62knxd88dwazc-gcc-wrapper-15.3.0 /nix/store/nl1lkxkfx6466dlbv0v1azh2dqa7j1k6-glibc-2.42-84-dev /nix/store/02zq5w04mijwg75bv1gdbij4vjxvcjws-gmp-6.3.0 /nix/store/6avhqagakz1wny9cnyik2qx88hkshgqk-hashed-password.root /nix/store/92kv8b542l110ysiyyrr2sg73ir4pfaa-hosts /nix/store/wffw6ni2m77aa3s9f7lis71234ni1j6k-hosts /nix/store/7pm7jh7gjivmcrdk38xqd8chg9llcwfb-iproute2-7.0.0-dev /nix/store/asxqlw44vg2fzp1bz55n1zp4dcg4zipm-isl-0.20 /nix/store/4nmsr685vs3jka05idk7pa7l8n9hd1q0-libarchive-3.8.9 /nix/store/xi0qccxyiv9qbswvzzhj23xjrf3cz3xh-libarchive-3.8.9-dev /nix/store/aqh2g4l4c44zm2wnzxj765k576cfx6hg-libmpc-1.4.0 /nix/store/6qki2y6s0pa33l5k4vagr6h2kvfxya3w-linux-headers-6.18.7 /nix/store/b5rvwpcgm585n8dfnhxd108vxk46nxv0-local-cmds /nix/store/8z8mlvw41jgca5hfjr61pljf9m5pirvn-mounts.sh /nix/store/8zys95ykfbkrsxbk007cqdckqqy2gasc-mpfr-4.2.2 /nix/store/wjxzm6l4r8a6lfjpmn67n6480gsw4i0y-nftables-cleanup-deletions /nix/store/zzcc6c6k7i52dm2dlnnny0rsw7n6wnm9-nftables-deletions /nix/store/xrbdbc85lqx6l2hfh0111fg5i60znyc2-nftables-ensure-deletions /nix/store/v3vh9a13a0mmd3h0s88hvj1b7vjkskbw-nftables-rules /nix/store/bbhvkgbm83r1l0i41md59jk8sj04zrql-nftables-save-deletions /nix/store/mff9w3rn0czmiw7k8ff91nvngslxsbmp-nginx-1.30.5 /nix/store/cxi8f8sw99hcs8g384rzsck2kdjl1hg8-nginx.conf /nix/store/dlal1yx826xbp4sq32pzh0f8csvg79b5-nginx.conf /nix/store/7qlyswvasm8xhmjrgyl1m9k8fk9j6c3a-nix-2.34.8-dev /nix/store/zpqwh9dnb4nadrb51sgxambx5cwcdj56-nix-cmd-2.34.8-dev /nix/store/8sq3djj1h3fl8icj7piy9yknxdfpmwza-nix-expr-2.34.8-dev /nix/store/gin1gl8fdypjddjgyyy78cbfy07xcqhn-nix-expr-c-2.34.8 /nix/store/8f0b87r8w0q6ffyims2fwx8h7rgbk1la-nix-expr-c-2.34.8-dev /nix/store/sajks9f6dwbi2pa8994rw1l3n6hwg9zm-nix-fetchers-2.34.8-dev /nix/store/vf80n4s2zsp1zjyy66b8gfbbdggv7ac6-nix-fetchers-c-2.34.8 /nix/store/sfaqpchwzlbqjnnprrqd1ks6g5ila26v-nix-fetchers-c-2.34.8-dev /nix/store/4z9zjvkql1wc6pcrsihw50pc9dwarfgp-nix-flake-2.34.8-dev /nix/store/r5n1fcjxndgq3zpiy12sbgxhb11akiys-nix-flake-c-2.34.8 /nix/store/02ww7zwq56y10ss880i9wp2qbcn0gy6v-nix-flake-c-2.34.8-dev /nix/store/mw9cxcwp8f880zls4bk38dk18pi3r7pd-nix-main-2.34.8-dev /nix/store/a0g7ai680k1f37m3i8wck43n8g0qp738-nix-main-c-2.34.8 /nix/store/ss3d1dwv87kk7grx9lvzw3ln8qqdbl8m-nix-main-c-2.34.8-dev /nix/store/qgac5zhm8x93v97jmana22vdci29pzh2-nix-perl-2.34.8 /nix/store/ab5kk6kll2kn6d0zw4zvl6jgisb66zvf-nix-store-2.34.8-dev /nix/store/gkrfdhlmi5rdvhh1g5rg44k1lw5d93n0-nix-store-c-2.34.8 /nix/store/djv9sjxx6431i7lj1i7r6mr5byllayq5-nix-store-c-2.34.8-dev /nix/store/kx80s4nwqfvhk6cb1pb0xccziryj3va3-nix-util-2.34.8-dev /nix/store/qja7b4df1ln000lz8dwix6qa8c2r7r6b-nix-util-c-2.34.8 /nix/store/8qipwa82gr6b3jr5za251162wnykvwyb-nix-util-c-2.34.8-dev /nix/store/z0yvxbrnxqal7lc6xbv5vrf2gkb9qamr-nix.conf /nix/store/9hkm7way628c8cfalx5m125a83syfx3a-nixos-system-machine-test /nix/store/23zgj30zmc42jpf40rx7gl0s4wyqsv9s-nixos-system-router-test /nix/store/axdnq9p77v723axq4avgrqpr5l1d9r0g-nixos-test-driver-user-firewall-nftables /nix/store/zhh1xvxb4d307nallzd67z3z2wggb06j-nixos-tmpfiles.d /nix/store/8krwg82dmyh939h3vz7ghm2qk2y7ljcx-nlohmann_json-3.12.0 /nix/store/i2ahcmvfd1pzv0p4lz822x12lav0rnam-openssl-3.6.4-dev /nix/store/nrv97g9hss5i3nkfybqgmh57k5k24zcv-openssl-4.0.2 /nix/store/sgmfdganjp3v6flf56qwzxdsz505j77d-perl-5.42.0-env /nix/store/v9f7avc9zjp0s0zmv7ybz5xv1dpsnbwy-perl-5.42.0-env /nix/store/h6m15rrnx23n3qy36kcpn1fmskiipxbk-perl5.42.0-JSON-4.10 /nix/store/q1wkn7y59r6xxqffqfzyrx8jddzsm3w3-python3.13-colorama-0.4.6 /nix/store/cibs4qwyc9prvf8i49kzwg692y2hpg0n-python3.13-junit-xml-1.9 /nix/store/4xm4476accxhcz3jzlcfpwxlqnh8vkcq-stdenv-linux /nix/store/42jw9illrjh1yq8a2dmwhd6nbkjf2r1m-system-path /nix/store/iy5sfc3ahfkfk8lr29kvlsgc42g36qi6-system-path /nix/store/g76f0iygfvhgg1im6ijcrfkqpfixkhk0-system-units /nix/store/j7cla0jrb03spjwg0kd56cap6vw3c9vl-system-units /nix/store/n93yssr2zk80l2xq0l19js2s9nkmjzmz-systemd-260.4-dev /nix/store/w4yw138a3hzpbihyfshgdsp2lydn6dy1-test-driver-0.0.1 /nix/store/j0mhv69a6jirh1pcn0mmzrx6n2dihgsz-testScript /nix/store/s9fhryqdx43r74mpc5c18amf1illf928-tmpfiles.d /nix/store/afvcylls7hq3i00wy9likgbzrhq9np0q-unit-40-eth1.network /nix/store/673fby7sgs6i2ygkv7q8i4wgc5zk0q0l-unit-dbus-broker.service /nix/store/9rh5bpfjymd7p47pbrcnc9x17pw2afgr-unit-dbus-broker.service /nix/store/pq8i5506f17ha8s7rkgz5r902nxwmrg6-unit-dbus-broker.service /nix/store/vw450dhclrrrn5nbgaipjq6pa6aaijmz-unit-dbus-broker.service /nix/store/lsshxzbzfybib0qay6w6waf3721fdbkv-unit-nftables.service /nix/store/0j8c1flqz8dbf72l052ndzbrmdq2s6vq-unit-nginx.service /nix/store/3y4rf12qx25rm0i3d90vkdybd76fpdpk-unit-nginx.service /nix/store/kmzvfdw6j0friz4yarkssnw786qdlzf0-unit-nix-daemon.service /nix/store/rsycx64041xniwcxq3jdyy6r7z3yg66h-unit-script-nginx-pre-start /nix/store/zjm3wbdvf359n8gvczcd3rf1p5cl5qfw-unit-script-nginx-pre-start /nix/store/d6jff9409glx0q3kslbzn9nf4w79pz9i-unit-script-setup-wg0-interface-start /nix/store/p0fglgg285063m0vn9rj2fkf3b10yvb7-unit-setup-wg0-interface.service /nix/store/yrgk270f4spvf62rs4pdvgwjkvx1mqsi-unit-systemd-networkd-wait-online.service /nix/store/dd191pwz3h56x1ykpwlmkmb34zx0pkkg-unit-systemd-networkd.service /nix/store/gx6fdl75rzwqnc56sqgfxf9hw5xp3k6a-unit-systemd-networkd.service /nix/store/aylcyhmka91w7qw9y2zc42fmgs2dyb5j-unit-systemd-tmpfiles-resetup.service /nix/store/5nhkv12d1awvj4lh1lm36niz84nr4r2q-user-units /nix/store/v9pl94x3gdbr7yhq43c5iqb947cx6aq8-user-units /nix/store/gh6y80rhy8zz5q6hgnk97rbadcvmrsf1-users-groups.json /nix/store/qaha3vpk3xwh1a5q5krbcn19kvc6r5kh-users-groups.json /nix/store/syzz1s2n546ygb46iw64qnr9f8j19jvf-util-linux-2.42.3 /nix/store/1xqi639qvj5kvil170h0js19nagp3mch-util-linux-2.42.3-dev /nix/store/k1l0vwlhrr7a91cnvfpn6kzg66jw8vky-zlib-ng-2.3.3 warning: ignoring the client-specified setting 'store', because it is a restricted setting and you are not a trusted user building '/nix/store/3c5mwv56ikndzz1f2f8ml2gmsg4chg4r-container-test-run-user-firewall-nftables.drv' on nix-store.geninf.io:50051 container-test-run-user-firewall-nftables> build-x86-01: building 3c5mwv56ikndzz1f2f8ml2gmsg4chg4r-container-test-run-user-firewall-nftables.drv container-test-run-user-firewall-nftables> additionally exposed symbols: container-test-run-user-firewall-nftables> machine, router, container-test-run-user-firewall-nftables> start_all, machines, driver, Machine, wait_for_signal container-test-run-user-firewall-nftables> Starting machine container-test-run-user-firewall-nftables> Starting router container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> <<< NixOS Stage 2 >>> container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> booting system configuration /nix/store/9hkm7way628c8cfalx5m125a83syfx3a-nixos-system-machine-test container-test-run-user-firewall-nftables> running activation script... container-test-run-user-firewall-nftables> setting up /etc... container-test-run-user-firewall-nftables> 2: host0@if4: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-user-firewall-nftables> link/ether 0e:74:26:22:81:c2 brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-user-firewall-nftables> starting systemd... container-test-run-user-firewall-nftables> systemd 260.4 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-user-firewall-nftables> Detected virtualization systemd-nspawn. container-test-run-user-firewall-nftables> Detected architecture x86-64. container-test-run-user-firewall-nftables> Detected first boot. container-test-run-user-firewall-nftables> Initializing machine ID from container UUID. container-test-run-user-firewall-nftables> Applying preset policy. container-test-run-user-firewall-nftables> Populated /etc with preset unit settings. container-test-run-user-firewall-nftables> Queued start job for default target Multi-User System. container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-user-firewall-nftables> + systemd-run /bin/sh -c '/nix/store/833invqvsk7anqnqrki5hqncrcllj825-coreutils-9.11/bin/sleep 999999999 && echo 002667f5-c098-4c00-82d9-dec213f0f0c8' container-test-run-user-firewall-nftables> Running as unit: run-p226-i18524076.service; invocation ID: 1cac8cd082b449fbbec2b8e98d09a654 container-test-run-user-firewall-nftables> To attach to container machine run on the same machine that runs the test: container-test-run-user-firewall-nftables> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*002667f5-c098-4c00-82d9-dec213f0f0c8') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> To inject external network and continue test, run: container-test-run-user-firewall-nftables> sudo /nix/store/9r02ykx9y35lf4gk6gc30gnag1y8ncp7-python3-3.13.15/bin/python3.13 /nix/store/w4yw138a3hzpbihyfshgdsp2lydn6dy1-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py 002667f5-c098-4c00-82d9-dec213f0f0c8 container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> <<< NixOS Stage 2 >>> container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> booting system configuration /nix/store/23zgj30zmc42jpf40rx7gl0s4wyqsv9s-nixos-system-router-test container-test-run-user-firewall-nftables> running activation script... container-test-run-user-firewall-nftables> setting up /etc... container-test-run-user-firewall-nftables> 2: host0@if3: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-user-firewall-nftables> link/ether a6:24:31:fe:b9:6d brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-user-firewall-nftables> starting systemd... container-test-run-user-firewall-nftables> systemd 260.4 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-user-firewall-nftables> Detected virtualization systemd-nspawn. container-test-run-user-firewall-nftables> Detected architecture x86-64. container-test-run-user-firewall-nftables> Detected first boot. container-test-run-user-firewall-nftables> Initializing machine ID from container UUID. container-test-run-user-firewall-nftables> Applying preset policy. container-test-run-user-firewall-nftables> Populated /etc with preset unit settings. container-test-run-user-firewall-nftables> Queued start job for default target Multi-User System. container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-user-firewall-nftables> + systemd-run /bin/sh -c '/nix/store/833invqvsk7anqnqrki5hqncrcllj825-coreutils-9.11/bin/sleep 999999999 && echo 4d49b2a2-add0-4da1-9522-a283e7fc59c5' container-test-run-user-firewall-nftables> Running as unit: run-p209-i18524079.service; invocation ID: 2ede3ab23ca4450c806d1465fb85318d container-test-run-user-firewall-nftables> To attach to container router run on the same machine that runs the test: container-test-run-user-firewall-nftables> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*4d49b2a2-add0-4da1-9522-a283e7fc59c5') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables> To inject external network and continue test, run: container-test-run-user-firewall-nftables> sudo /nix/store/9r02ykx9y35lf4gk6gc30gnag1y8ncp7-python3-3.13.15/bin/python3.13 /nix/store/w4yw138a3hzpbihyfshgdsp2lydn6dy1-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py 4d49b2a2-add0-4da1-9522-a283e7fc59c5 container-test-run-user-firewall-nftables> + systemctl --no-pager show multi-user.target container-test-run-user-firewall-nftables> + systemctl --no-pager show nginx.service container-test-run-user-firewall-nftables> + systemctl --no-pager show multi-user.target container-test-run-user-firewall-nftables> + systemctl --no-pager show nginx.service container-test-run-user-firewall-nftables> + ip -4 addr show eth1 container-test-run-user-firewall-nftables> + grep -oP '(?<=inet\s)\d+(\.\d+){3}' container-test-run-user-firewall-nftables> + ip -6 addr show eth1 container-test-run-user-firewall-nftables> + grep -oP '(?<=inet6\s)[0-9a-f:]+' container-test-run-user-firewall-nftables> + grep -v '^fe80' container-test-run-user-firewall-nftables> + head -1 container-test-run-user-firewall-nftables> Router IPv4: 192.168.1.2 container-test-run-user-firewall-nftables> Router IPv6: 2001:db8:1::2 container-test-run-user-firewall-nftables> + systemctl restart nftables container-test-run-user-firewall-nftables> + systemctl --no-pager show nftables.service container-test-run-user-firewall-nftables> + nft list table inet user-firewall container-test-run-user-firewall-nftables> table inet user-firewall { container-test-run-user-firewall-nftables> chain output { container-test-run-user-firewall-nftables> type filter hook output priority filter; policy accept; container-test-run-user-firewall-nftables> oifname "lo" counter packets 0 bytes 0 accept comment "allow lo" container-test-run-user-firewall-nftables> oifname "tun*" counter packets 0 bytes 0 accept comment "allow tun*" container-test-run-user-firewall-nftables> oifname "tap*" counter packets 0 bytes 0 accept comment "allow tap*" container-test-run-user-firewall-nftables> oifname "wg*" counter packets 0 bytes 0 accept comment "allow wg*" container-test-run-user-firewall-nftables> oifname "tailscale*" counter packets 0 bytes 0 accept comment "allow tailscale*" container-test-run-user-firewall-nftables> oifname "zt*" counter packets 0 bytes 0 accept comment "allow zt*" container-test-run-user-firewall-nftables> oifname "vpn*" counter packets 0 bytes 0 accept comment "allow vpn*" container-test-run-user-firewall-nftables> oifname "ipsec*" counter packets 0 bytes 0 accept comment "allow ipsec*" container-test-run-user-firewall-nftables> oifname "nebula*" counter packets 0 bytes 0 accept comment "allow nebula*" container-test-run-user-firewall-nftables> oifname "tinc*" counter packets 0 bytes 0 accept comment "allow tinc*" container-test-run-user-firewall-nftables> oifname "edge*" counter packets 0 bytes 0 accept comment "allow edge*" container-test-run-user-firewall-nftables> oifname "hyprspace" counter packets 0 bytes 0 accept comment "allow hyprspace" container-test-run-user-firewall-nftables> oifname "ham0" counter packets 0 bytes 0 accept comment "allow ham0" container-test-run-user-firewall-nftables> oifname "easytier" counter packets 0 bytes 0 accept comment "allow easytier" container-test-run-user-firewall-nftables> oifname "mycelium" counter packets 0 bytes 0 accept comment "allow mycelium" container-test-run-user-firewall-nftables> meta skuid 1002 counter packets 0 bytes 0 reject comment "blocked user bob" container-test-run-user-firewall-nftables> } container-test-run-user-firewall-nftables> } container-test-run-user-firewall-nftables> machine: waiting for success: runuser -u alice -- curl -s http://127.0.0.1:8080 container-test-run-user-firewall-nftables> + runuser -u alice -- curl -s http://127.0.0.1:8080 container-test-run-user-firewall-nftables> (finished: waiting for success: runuser -u alice -- curl -s http://127.0.0.1:8080, in 0.01 seconds) container-test-run-user-firewall-nftables> + runuser -u alice -- curl -s http://192.168.1.2 container-test-run-user-firewall-nftables> + runuser -u alice -- curl -s 'http://[2001:db8:1::2]' container-test-run-user-firewall-nftables> + runuser -u bob -- curl -s http://127.0.0.1:8080 container-test-run-user-firewall-nftables> + runuser -u bob -- curl -s --connect-timeout 2 http://192.168.1.2 container-test-run-user-firewall-nftables> + echo EXIT_CODE=7 container-test-run-user-firewall-nftables> + runuser -u bob -- curl -s --connect-timeout 2 'http://[2001:db8:1::2]' container-test-run-user-firewall-nftables> + echo EXIT_CODE=7 container-test-run-user-firewall-nftables> + nft list table inet user-firewall container-test-run-user-firewall-nftables> + systemctl --no-pager show setup-wg0-interface.service container-test-run-user-firewall-nftables> + systemctl --no-pager show nginx.service container-test-run-user-firewall-nftables> machine: waiting for success: nc -z 10.100.0.2 8081 container-test-run-user-firewall-nftables> + nc -z 10.100.0.2 8081 container-test-run-user-firewall-nftables> Connection to 10.100.0.2 8081 port [tcp/sunproxyadmin] succeeded! container-test-run-user-firewall-nftables> (finished: waiting for success: nc -z 10.100.0.2 8081, in 0.00 seconds) container-test-run-user-firewall-nftables> + ip link show wg0 container-test-run-user-firewall-nftables> + ip addr show wg0 container-test-run-user-firewall-nftables> + runuser -u alice -- curl -s --interface wg0 http://10.100.0.2:8081/ container-test-run-user-firewall-nftables> + runuser -u alice -- curl -s --interface wg0 'http://[fd00::2]:8081/' container-test-run-user-firewall-nftables> + runuser -u bob -- curl -s --interface wg0 http://10.100.0.2:8081/ container-test-run-user-firewall-nftables> + runuser -u bob -- curl -s --interface wg0 'http://[fd00::2]:8081/' container-test-run-user-firewall-nftables> + nft list table inet user-firewall container-test-run-user-firewall-nftables> + grep -E 'oifname.*wg' container-test-run-user-firewall-nftables> oifname "wg*" counter packets 1 bytes 56 accept comment "allow wg*" container-test-run-user-firewall-nftables> container-test-run-user-firewall-nftables>