these 93 derivations will be built: /nix/store/027zd470i67kd3cry02h21hzf4xyghwb-firewall-start.drv /nix/store/0cxd5cv5gll0m47xq1g3cc7yr3mlrr8r-users-groups.json.drv /nix/store/0g2w8lb14kibkdq26sxcw9khn6n6rans-unit-systemd-networkd-wait-online.service-disabled.drv /nix/store/94gc3k1fdq1hlrsncdglp0r538gj8adb-string-hosts.drv /nix/store/bin6q8vg2iq44dk2mmrf3p2p6i5cgz5j-extra-hosts.drv /nix/store/x8acy14p7q7ny7k8izmg2xmbdcdmns6s-localhost-hosts.drv /nix/store/0pfgq0982c1lcxmqwwylrnazd04xw0fb-hosts.drv /nix/store/1dvr2dncn0pdn6akg08r488ldvaaakrd-string-hosts.drv /nix/store/11x5w69yns8ss0ib3yg2zmvzmhcknmd1-hosts.drv /nix/store/1p6g6y731g8f3wpvszznb63nm1xp19jy-acme-postrun.drv /nix/store/9k3yn74rfmdsq82ykyyk959y02klmvi5-acme-setup-privileged.drv /nix/store/1zqg4nps0s028jy4pqcnmq4f513hysv5-unit-acme-setup.service.drv /nix/store/f0w6iqpcifl0i8kvf4fs3la8hjypv3y9-system-path.drv /nix/store/22s51fpp3g4p81iswjl22rq62c745dx9-dbus-1.drv /nix/store/9h5nrnc81721waa40z18aa11y4766q5g-nginx.conf.drv /nix/store/2avaz2y0p4i2lj0kw4hhims6kppbfz4g-unit-script-nginx-pre-start.drv /nix/store/3ij7nazyxni3jjkgzh6pvzryykdi543q-unit-script-acme-ca.foo-start.drv /nix/store/9663888i3idg8pa0czqxvl7lyk0s0lhh-tmpfiles.d.drv /nix/store/3w4cw75nsibp1j10p62sfq507vfsp59m-X-Restart-Triggers-systemd-tmpfiles-resetup.drv /nix/store/4aszwz8vmli882yxbvpvv8sg41pj3yfi-system-path.drv /nix/store/5ixpf5arrcvbgw6ihamck9v7r2dq6fgh-nginx.conf.drv /nix/store/545ax66s6r1dgg2z7b6c2zayp2hms4sb-unit-script-nginx-pre-start.drv /nix/store/kra5ik0s7r5csdkcbykqzdqvpnj10ykv-etc.drv /nix/store/55lq0902iwjbgri6998qdxxfhjbgzm00-activate.drv /nix/store/z8f3zyr16gq4ha8mv560f3d2p3g4z4c8-X-Restart-Triggers-acme-ca.foo.drv /nix/store/5cd9cdbrnwy7x20w7mqyy2snc1ghyj94-unit-acme-ca.foo.service.drv /nix/store/splbga59ld3qq67rm754azmripj40azh-system-path.drv /nix/store/w4p9fz04ak2bdclhlqsd7b6xya5y34iw-dbus-1.drv /nix/store/zvb6k5rkcpdfgc7m3cj8nwhfayddj2dr-X-Restart-Triggers-dbus-broker.drv /nix/store/6c16qgs6xg4wlhs2nd8mgpbg91clkhrc-unit-dbus-broker.service.drv /nix/store/lmvdsa6i527xf1i21wb1nxl6nci52ckj-nixos-system-client-test.drv /nix/store/6lvywm7m6xvd2bkdrq5w0w6wn90pwwxc-run-client-nspawn.drv /nix/store/ffi9inm3kdr63qr1cr2alwqj0bqlrngw-firewall-reload.drv /nix/store/723sfplqmz2ala7f6mvz8izwbrc13sif-unit-firewall.service.drv /nix/store/yvg6652nj0yqzln9jdy3x0xrljrq5ibz-dbus-1.drv /nix/store/p9495klw94nva9jbmwlh9716f6wzj89f-X-Restart-Triggers-dbus-broker.drv /nix/store/7ikpgcdxhjnpc512935vv0cxjbfz53zr-unit-dbus-broker.service.drv /nix/store/81j4m9kqqglam2y00ir2ddv289x3rpw7-acme-postrun.drv /nix/store/85z2s60g9qkn61z62yp85dxk53738wry-run-server-nspawn.drv /nix/store/8bc1gg09y9bnc1ijrilp35bhjjg6cs77-nixos-system-ca-test.drv /nix/store/9yzv2bryd6cwh0qcgg09gyzd6c1d2a5b-unit-script-acme-test.foo-start.drv /nix/store/gc3c5a3kddxihv6v254iq1ni5d5xpblb-X-Restart-Triggers-acme-test.foo.drv /nix/store/b63fi8cnrijyz4vdvw63lhw0gm8gs3ws-unit-acme-test.foo.service.drv /nix/store/ccfv870v6nagy9brm49akxcxxlrrv8dc-unit-systemd-tmpfiles-resetup.service.drv /nix/store/dqszp0ypiwx03bayl09avwlkjr9awpjh-unit-nginx-config-reload.service.drv /nix/store/vhyn4qhn19vlkcf5xqi2w6g4pkd9fjwh-unit-script-acme-order-renew-test.foo-start.drv /nix/store/g402kadfs514p5y0vmfd2dng1wg2g38v-unit-acme-order-renew-test.foo.service.drv /nix/store/h2cd2d1zn1v3vwgp69qbzgr6jc6qihyk-unit-nix-daemon.service.drv /nix/store/i95v9bl274mgmra8nwddfv89dgy5k21g-unit-acme-account-2c44cb477b4787b2cf13.target.drv /nix/store/q76xn0fvifqzh836kf2p5zv1q92857wn-X-Reload-Triggers-systemd-networkd.drv /nix/store/kzr6gkxzclpwb9ih5avjbgh446b6842y-unit-systemd-networkd.service.drv /nix/store/q9rxm9dq8b828yh20v67kzh2g8l1mas5-unit-nginx.service.drv /nix/store/w1m78zzsg0dlzb1bqr9f9k60wsdzrndm-unit-acme-renew-test.foo.timer.drv /nix/store/8l7kammhddg41i13r5dy9wm1snx19hh3-system-units.drv /nix/store/9s1vzis0v0cfc49q95vhjbxckmwlmvi9-unit-acme-renew-ca.foo.timer.drv /nix/store/b4pa95haxzbim279yfgf7vg0i562m3gc-X-Restart-Triggers-step-ca.drv /nix/store/b9yiz2k0gkk8kf2yis6cna4f3q0nd8v3-test-script.drv /nix/store/bvphg1c0va1h62nmw8c3i7c6yxsp7a22-unit-script-acme-order-renew-ca.foo-start.drv /nix/store/cvhhkkxnzpkk2ks4pqv4wcb2cy1w12p2-users-groups.json.drv /nix/store/d55j86y8p4va1gwp6jvsa73jp0cnvgql-string-hosts.drv /nix/store/fn4g4rwdy65c51c61wh8357mx60w5qdm-unit-acme-account-d22a46d9459bf683a338.target.drv /nix/store/fs8l5z9pdz2ldkr4d1vq545m7jsj7xsx-nix.conf.drv /nix/store/fwdhmj5h94jzn3sxkl62daxxwh5awsxi-acme-setup-privileged.drv /nix/store/h1pcihgc7wak11c61jkf8gyvr9a9g68s-system-units.drv /nix/store/h8gsny059y20z5wkh9fv7rn8l13gv0n6-unit-nginx-config-reload.service.drv /nix/store/r3z623p8sz6snvklz74bypcjjrlmnpr7-X-Restart-Triggers-dbus-broker.drv /nix/store/xq3k4g4b464b8f8j7qb8jqgk3ya6ddmd-unit-dbus-broker.service.drv /nix/store/hyk8v1ch8vif75f4gv1ibj11905nxn7x-user-units.drv /nix/store/j43pxqdpsac7bkn7zxca23hwbgbcq8c8-unit-acme-setup.service.drv /nix/store/j60fm6fx83lnjw0wm9fa2aijhx622bgc-activate.drv /nix/store/j7bnfi20nmah3fdv985a6giphlip82sa-nixos-system-server-test.drv /nix/store/jl9k4vri4f77ld6jf4z3y1lfsjv4x9xj-system-units.drv /nix/store/l3gy5rpzmph06j70wx9zrf4pqxq0215x-unit-acme-order-renew-ca.foo.service.drv /nix/store/lb24k162gmqrac5mqgidrfq6zshqjs4h-hosts.drv /nix/store/lxjfippan1d8pwky6hznxs31ahy99i3m-etc.drv /nix/store/m623h2nrxzl6lp97xpc12402ysnhxx8m-nixos-test-driver-certificates.drv /nix/store/miflnndqykwrynk21cnflckwacxgm23b-ensure-all-wrappers-paths-exist.drv /nix/store/pa9bcmis44kfxhsz42azksjyhw4hkza8-stage-2-init.sh.drv /nix/store/pf2lb1xlkh4qqpq9842g1mdqja2wirqp-container-test-run-certificates.drv /nix/store/pmbq2prqi1fifxssimvqyxp1m7j09k16-unit-nginx.service.drv /nix/store/pr1znj96da58a3s6b6d9a1wbw06i9vcb-unit-systemd-networkd.service.drv /nix/store/pwn5v0z2ihvg6d2wvdjgbjlq0slrhyay-driverConfiguration.json.drv /nix/store/rqg77p13vj1ri4y9r69vr0hajbhcrdhm-unit-dbus-broker.service.drv /nix/store/scrzc55w56i31asrs4km5vh1173221p5-user-units.drv /nix/store/vi0ky9bd5bp85z63h1mb0wrsrh7d5vq5-unit-step-ca.service.drv /nix/store/vxjnsizlvsja167fk2n1ba5v8a4mw272-X-Restart-Triggers-nix-daemon.drv /nix/store/vzsbxz2896177cf8sxrpfxsdcwlhaazd-etc-hostname.drv /nix/store/w0vdirvk10jg1rxf8iicv21s2m1i48rc-unit-dbus-broker.service.drv /nix/store/wvxjw0la926d7ir9nfm7w4kyka5130zm-run-ca-nspawn.drv /nix/store/wxp011c11jjgdnjkcmqz6rggn63f1fi6-unit-dbus-broker.service.drv /nix/store/y4cygxkcax8ndbf7656rqxdn37qzdcys-etc.drv /nix/store/yfsvjam706nrv85xjfxl23w9dw5ky5nm-user-units.drv /nix/store/z1nkzlq9g2ijhl4mjnyhadlwp0g1issl-activate.drv these 23 paths will be fetched (699.7 KiB download, 116.0 MiB unpacked): /nix/store/4s7w7hfl692h7vcd4mfklp8xicnls508-ca.json /nix/store/8l5c90xyfz72wgl3m2s0439z69ilrr0g-decrypt-age-secrets /nix/store/qjb9c3d2iw8jmndfinvmrg7783mbgwy3-decrypt-age-secrets /nix/store/pkjjvxgc433sy61g22v4dxp3fn2dkblh-dry-activate /nix/store/rfzh9mm3gm7dgcw1bpig5dpjmd6931jm-dry-activate /nix/store/x1fnv752bw1cwwjdh31l0ixv1afays3x-dry-activate /nix/store/84sggxlzw0adckmzzysvrajmmdl5p6qq-libcap-text-verifier-0-unstable /nix/store/xysbrlyn8h5gmxw2y4y14rbjgsvx6qdj-make-binary-wrapper-hook /nix/store/5ga4kky2abmq8f8bryss4nl6aqmsv1ca-nginx-1.30.5 /nix/store/ww1fp9ch7b86riwmzgb57p620cz6f717-nixos-test-driver-1.1 /nix/store/vbhm65lfpgnbwiw7jilf8p0mjgk5b6ng-nss-cacert-3.126 /nix/store/xgf0fvs0gcbvq63vqz980x7pdk9wcxcj-nss-cacert-3.126-p11kit /nix/store/iajmgb4jycq2h6qgz27r2lswvh5i7rnb-openssl-3.6.4-man /nix/store/5jxd97nwiy1y69v8jkwfg9wfd5y097z3-run-nspawn-1.0 /nix/store/5gv0zw4zwgbw0p5his6s6855q1sad691-step-ca-0.30.2 /nix/store/fxpjcpkqwv5qihpm0vlh329c4fi7ry8n-system-generators /nix/store/ljfkljzf5gjspr5iis7sijg8b922ann8-system-shutdown /nix/store/ipscl9n9z4bhp1fllykz94534japg021-systemd-default-tmpfiles /nix/store/vjnnnkjlplrhx031y0ys5q2qvyiqclz7-ty-0.0.84 /nix/store/rzi014k242gw5l572699l68b3gc9rgrv-user-generators /nix/store/cfcinqqgf08bpd1ln2v8846gmacd9r06-users-groups.json /nix/store/y9ahz5mm5nz0cddk6awawmmaab3rwzdn-users-groups.json /nix/store/qnmzvrh9vrqkkj5ar02rbh87psh66465-vars-check-certificates warning: ignoring the client-specified setting 'store', because it is a restricted setting and you are not a trusted user building '/nix/store/9h5nrnc81721waa40z18aa11y4766q5g-nginx.conf.drv' on nix-store.geninf.io:50051 nginx.conf> build-x86-01: building 9h5nrnc81721waa40z18aa11y4766q5g-nginx.conf.drv nginx.conf> structuredAttrs is enabled nginx.conf> nginx.conf> ==================== Results =================== nginx.conf> No issues found. nginx.conf> nginx.conf> ==================== Summary =================== nginx.conf> Total issues: nginx.conf> Unspecified: 0 nginx.conf> Low: 0 nginx.conf> Medium: 0 nginx.conf> High: 0 nginx.conf> building '/nix/store/5ixpf5arrcvbgw6ihamck9v7r2dq6fgh-nginx.conf.drv' on nix-store.geninf.io:50051 nginx.conf> gi-build-x86-02: building 5ixpf5arrcvbgw6ihamck9v7r2dq6fgh-nginx.conf.drv nginx.conf> structuredAttrs is enabled nginx.conf> nginx.conf> ==================== Results =================== nginx.conf> No issues found. nginx.conf> nginx.conf> ==================== Summary =================== nginx.conf> Total issues: nginx.conf> Unspecified: 0 nginx.conf> Low: 0 nginx.conf> Medium: 0 nginx.conf> High: 0 nginx.conf> building '/nix/store/h2cd2d1zn1v3vwgp69qbzgr6jc6qihyk-unit-nix-daemon.service.drv' on nix-store.geninf.io:50051 unit-nix-daemon.service> gi-build-x86-02: building h2cd2d1zn1v3vwgp69qbzgr6jc6qihyk-unit-nix-daemon.service.drv unit-nix-daemon.service> structuredAttrs is enabled building '/nix/store/2avaz2y0p4i2lj0kw4hhims6kppbfz4g-unit-script-nginx-pre-start.drv' on nix-store.geninf.io:50051 unit-script-nginx-pre-start> build-x86-01: building 2avaz2y0p4i2lj0kw4hhims6kppbfz4g-unit-script-nginx-pre-start.drv unit-script-nginx-pre-start> structuredAttrs is enabled building '/nix/store/545ax66s6r1dgg2z7b6c2zayp2hms4sb-unit-script-nginx-pre-start.drv' on nix-store.geninf.io:50051 unit-script-nginx-pre-start> gi-build-x86-02: building 545ax66s6r1dgg2z7b6c2zayp2hms4sb-unit-script-nginx-pre-start.drv unit-script-nginx-pre-start> structuredAttrs is enabled building '/nix/store/h1pcihgc7wak11c61jkf8gyvr9a9g68s-system-units.drv' on nix-store.geninf.io:50051 system-units> gi-build-x86-02: building h1pcihgc7wak11c61jkf8gyvr9a9g68s-system-units.drv building '/nix/store/q9rxm9dq8b828yh20v67kzh2g8l1mas5-unit-nginx.service.drv' on nix-store.geninf.io:50051 unit-nginx.service> gi-build-x86-02: building q9rxm9dq8b828yh20v67kzh2g8l1mas5-unit-nginx.service.drv unit-nginx.service> structuredAttrs is enabled building '/nix/store/pmbq2prqi1fifxssimvqyxp1m7j09k16-unit-nginx.service.drv' on nix-store.geninf.io:50051 unit-nginx.service> gi-build-x86-02: building pmbq2prqi1fifxssimvqyxp1m7j09k16-unit-nginx.service.drv unit-nginx.service> structuredAttrs is enabled building '/nix/store/y4cygxkcax8ndbf7656rqxdn37qzdcys-etc.drv' on nix-store.geninf.io:50051 etc> build-x86-01: building y4cygxkcax8ndbf7656rqxdn37qzdcys-etc.drv building '/nix/store/8l7kammhddg41i13r5dy9wm1snx19hh3-system-units.drv' on nix-store.geninf.io:50051 system-units> gi-build-x86-02: building 8l7kammhddg41i13r5dy9wm1snx19hh3-system-units.drv building '/nix/store/z1nkzlq9g2ijhl4mjnyhadlwp0g1issl-activate.drv' on nix-store.geninf.io:50051 activate> build-x86-01: building z1nkzlq9g2ijhl4mjnyhadlwp0g1issl-activate.drv activate> structuredAttrs is enabled building '/nix/store/jl9k4vri4f77ld6jf4z3y1lfsjv4x9xj-system-units.drv' on nix-store.geninf.io:50051 system-units> gi-build-x86-02: building jl9k4vri4f77ld6jf4z3y1lfsjv4x9xj-system-units.drv building '/nix/store/lmvdsa6i527xf1i21wb1nxl6nci52ckj-nixos-system-client-test.drv' on nix-store.geninf.io:50051 nixos-system-client-test> build-x86-01: building lmvdsa6i527xf1i21wb1nxl6nci52ckj-nixos-system-client-test.drv nixos-system-client-test> structuredAttrs is enabled building '/nix/store/kra5ik0s7r5csdkcbykqzdqvpnj10ykv-etc.drv' on nix-store.geninf.io:50051 etc> gi-build-x86-02: building kra5ik0s7r5csdkcbykqzdqvpnj10ykv-etc.drv building '/nix/store/6lvywm7m6xvd2bkdrq5w0w6wn90pwwxc-run-client-nspawn.drv' on nix-store.geninf.io:50051 run-client-nspawn> build-x86-01: building 6lvywm7m6xvd2bkdrq5w0w6wn90pwwxc-run-client-nspawn.drv building '/nix/store/lxjfippan1d8pwky6hznxs31ahy99i3m-etc.drv' on nix-store.geninf.io:50051 etc> gi-build-x86-02: building lxjfippan1d8pwky6hznxs31ahy99i3m-etc.drv building '/nix/store/55lq0902iwjbgri6998qdxxfhjbgzm00-activate.drv' on nix-store.geninf.io:50051 activate> gi-build-x86-02: building 55lq0902iwjbgri6998qdxxfhjbgzm00-activate.drv activate> structuredAttrs is enabled building '/nix/store/j60fm6fx83lnjw0wm9fa2aijhx622bgc-activate.drv' on nix-store.geninf.io:50051 activate> gi-build-x86-02: building j60fm6fx83lnjw0wm9fa2aijhx622bgc-activate.drv activate> structuredAttrs is enabled building '/nix/store/j7bnfi20nmah3fdv985a6giphlip82sa-nixos-system-server-test.drv' on nix-store.geninf.io:50051 nixos-system-server-test> gi-build-x86-02: building j7bnfi20nmah3fdv985a6giphlip82sa-nixos-system-server-test.drv nixos-system-server-test> structuredAttrs is enabled building '/nix/store/8bc1gg09y9bnc1ijrilp35bhjjg6cs77-nixos-system-ca-test.drv' on nix-store.geninf.io:50051 nixos-system-ca-test> gi-build-x86-02: building 8bc1gg09y9bnc1ijrilp35bhjjg6cs77-nixos-system-ca-test.drv nixos-system-ca-test> structuredAttrs is enabled building '/nix/store/85z2s60g9qkn61z62yp85dxk53738wry-run-server-nspawn.drv' on nix-store.geninf.io:50051 run-server-nspawn> gi-build-x86-02: building 85z2s60g9qkn61z62yp85dxk53738wry-run-server-nspawn.drv building '/nix/store/wvxjw0la926d7ir9nfm7w4kyka5130zm-run-ca-nspawn.drv' on nix-store.geninf.io:50051 run-ca-nspawn> gi-build-x86-02: building wvxjw0la926d7ir9nfm7w4kyka5130zm-run-ca-nspawn.drv building '/nix/store/pwn5v0z2ihvg6d2wvdjgbjlq0slrhyay-driverConfiguration.json.drv' on nix-store.geninf.io:50051 driverConfiguration.json> gi-build-x86-02: building pwn5v0z2ihvg6d2wvdjgbjlq0slrhyay-driverConfiguration.json.drv driverConfiguration.json> structuredAttrs is enabled building '/nix/store/m623h2nrxzl6lp97xpc12402ysnhxx8m-nixos-test-driver-certificates.drv' on nix-store.geninf.io:50051 nixos-test-driver-certificates> build-x86-01: building m623h2nrxzl6lp97xpc12402ysnhxx8m-nixos-test-driver-certificates.drv nixos-test-driver-certificates> Running type check (enable/disable: config.skipTypeCheck) nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck nixos-test-driver-certificates> All checks passed! nixos-test-driver-certificates> Linting test script (enable/disable: config.skipLint) nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipLint nixos-test-driver-certificates> All checks passed! building '/nix/store/pf2lb1xlkh4qqpq9842g1mdqja2wirqp-container-test-run-certificates.drv' on nix-store.geninf.io:50051 container-test-run-certificates> build-x86-01: building pf2lb1xlkh4qqpq9842g1mdqja2wirqp-container-test-run-certificates.drv container-test-run-certificates> Machine state will be reset. To keep it, pass --keep-machine-state container-test-run-certificates> start all VLans container-test-run-certificates> (finished: start all VLans, in 0.00 seconds) container-test-run-certificates> container-test-run-certificates> Test will time out and terminate in 3600.0 seconds container-test-run-certificates> run the VM test script container-test-run-certificates> additionally exposed symbols: container-test-run-certificates> ca, client, server, container-test-run-certificates> vlan1, container-test-run-certificates> start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh container-test-run-certificates> ca: systemd-nspawn running (pid 50) container-test-run-certificates> ca: Waiting for journal at /build/vm-state-ca/var/log/journal... container-test-run-certificates> ca: waiting for unit step-ca.service container-test-run-certificates> nixos-nspawn(ca): TAP vde-tap1 not found; container will be isolated from VDE container-test-run-certificates> nixos-nspawn(ca): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths. container-test-run-certificates> Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file. container-test-run-certificates> ░ Spawning container ca on /build/vm-state-ca. container-test-run-certificates> ca # [2101721.923191] ca systemd-journald[81]: Journal started container-test-run-certificates> ca # [2101721.923217] ca systemd-journald[81]: Runtime Journal (/run/log/journal/2a07ea61d822499a894c70e4a77fa65d) is 8M, max 3.7G, 3.7G free. container-test-run-certificates> ca # [2101721.929902] ca systemd[1]: Finished Apply Kernel Variables. container-test-run-certificates> ca # [2101721.936657] ca systemd[1]: Finished Create Static Device Nodes in /dev gracefully. container-test-run-certificates> ca # [2101721.944717] ca systemd[1]: Starting Flush Journal to Persistent Storage... container-test-run-certificates> ca # [2101721.945067] ca systemd[1]: Starting Network Name Resolution... container-test-run-certificates> ca # [2101721.945349] ca systemd[1]: Starting Create Static Device Nodes in /dev... container-test-run-certificates> ca # [2101721.968071] ca systemd-journald[81]: Time spent on flushing to /var/log/journal/2a07ea61d822499a894c70e4a77fa65d is 1.202ms for 7 entries. container-test-run-certificates> ca # [2101721.968071] ca systemd-journald[81]: System Journal (/var/log/journal/2a07ea61d822499a894c70e4a77fa65d) is 8M, max 4G, 3.9G free. container-test-run-certificates> ca # [2101721.977512] ca systemd[1]: Finished Flush Journal to Persistent Storage. container-test-run-certificates> ca # [2101721.979805] ca systemd[1]: Finished Create Static Device Nodes in /dev. container-test-run-certificates> ca # [2101721.980645] ca systemd[1]: Reached target Preparation for Local File Systems. container-test-run-certificates> ca # [2101721.980713] ca systemd[1]: Reached target Local File Systems. container-test-run-certificates> ca # [2101721.981196] ca systemd[1]: Listening on Boot Loader Control Service Socket. container-test-run-certificates> ca # [2101721.981233] ca systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> ca # [2101721.981695] ca systemd[1]: Starting Save Transient machine-id to Disk... container-test-run-certificates> ca # [2101721.982057] ca systemd[1]: Starting Create System Files and Directories... container-test-run-certificates> ca # [2101721.982077] ca systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys container-test-run-certificates> ca # [2101721.993991] ca systemd[1]: Finished Save Transient machine-id to Disk. container-test-run-certificates> ca # [2101721.994515] ca systemd-tmpfiles[162]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted container-test-run-certificates> ca # [2101721.994681] ca systemd-tmpfiles[162]: fchmod() of /var/log/journal failed: Operation not permitted container-test-run-certificates> ca # [2101721.994791] ca systemd-tmpfiles[162]: fchmod() of /var/log/journal/2a07ea61d822499a894c70e4a77fa65d failed: Operation not permitted container-test-run-certificates> ca # [2101721.994949] ca systemd-tmpfiles[162]: fchmod() of /run/log/journal failed: Operation not permitted container-test-run-certificates> ca # [2101721.995896] ca systemd[1]: Finished Create System Files and Directories. container-test-run-certificates> ca # [2101721.996343] ca systemd[1]: Starting Rebuild Journal Catalog... container-test-run-certificates> ca # [2101721.996642] ca systemd[1]: Starting Record System Boot/Shutdown in UTMP... container-test-run-certificates> ca # [2101722.002314] ca systemd[1]: Finished Record System Boot/Shutdown in UTMP. container-test-run-certificates> ca # [2101722.008399] ca systemd[1]: Finished Rebuild Journal Catalog. container-test-run-certificates> ca # [2101722.008804] ca systemd[1]: Starting Update is Completed... container-test-run-certificates> ca # [2101722.010201] ca systemd[1]: Finished Firewall. container-test-run-certificates> ca # [2101722.010268] ca systemd[1]: Reached target Preparation for Network. container-test-run-certificates> ca # [2101722.010392] ca systemd[1]: Listening on Network Management Resolve Hook Socket. container-test-run-certificates> ca # [2101722.010828] ca systemd[1]: Starting Network Management... container-test-run-certificates> ca # [2101722.014489] ca systemd[1]: Finished Update is Completed. container-test-run-certificates> ca # [2101722.485845] ca systemd-networkd[198]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted container-test-run-certificates> ca # [2101722.485915] ca systemd-networkd[198]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted container-test-run-certificates> ca # [2101722.493550] ca systemd-networkd[198]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> ca # [2101722.493691] ca systemd-networkd[198]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> ca # [2101722.493756] ca systemd-networkd[198]: lo: Link UP container-test-run-certificates> ca # [2101722.493760] ca systemd-networkd[198]: lo: Gained carrier container-test-run-certificates> ca # [2101722.493903] ca systemd-networkd[198]: eth1: Configuring with /etc/systemd/network/40-eth1.network. container-test-run-certificates> ca # [2101722.494162] ca systemd[1]: Started Network Management. container-test-run-certificates> ca # [2101722.494175] ca systemd-networkd[198]: eth1: Link UP container-test-run-certificates> ca # [2101722.494342] ca systemd-networkd[198]: eth1: Gained carrier container-test-run-certificates> ca # [2101722.494848] ca systemd[1]: Starting Enable Persistent Storage in systemd-networkd... container-test-run-certificates> ca # [2101722.524243] ca systemd[1]: Finished Enable Persistent Storage in systemd-networkd. container-test-run-certificates> ca # [2101722.858769] ca systemd-resolved[120]: Positive Trust Anchors: container-test-run-certificates> ca # [2101722.858774] ca systemd-resolved[120]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d container-test-run-certificates> ca # [2101722.858778] ca systemd-resolved[120]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 container-test-run-certificates> ca # [2101722.858793] ca systemd-resolved[120]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test container-test-run-certificates> ca # [2101722.869852] ca systemd-resolved[120]: Using system hostname 'ca'. container-test-run-certificates> ca # [2101722.871015] ca systemd[1]: Started Network Name Resolution. container-test-run-certificates> ca # [2101722.871073] ca systemd[1]: Reached target Network. container-test-run-certificates> ca # [2101722.871107] ca systemd[1]: Reached target Network is Online. container-test-run-certificates> ca # [2101722.871131] ca systemd[1]: Reached target System Initialization. container-test-run-certificates> ca # [2101722.871263] ca systemd[1]: Started Renew ACME Certificate for ca.foo. container-test-run-certificates> ca # [2101722.871285] ca systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> ca # [2101722.871299] ca systemd[1]: Started Daily Cleanup of Temporary Directories. container-test-run-certificates> ca # [2101722.871310] ca systemd[1]: Reached target Timer Units. container-test-run-certificates> ca # [2101722.871386] ca systemd[1]: Listening on D-Bus System Message Bus Socket. container-test-run-certificates> ca # [2101722.871443] ca systemd[1]: Listening on Nix Daemon Socket. container-test-run-certificates> ca # [2101722.871510] ca systemd[1]: Listening on Virtual Machine and Container Registration Service Socket. container-test-run-certificates> ca # [2101722.871520] ca systemd[1]: Reached target Socket Units. container-test-run-certificates> ca # [2101722.871541] ca systemd[1]: Reached target Basic System. container-test-run-certificates> ca # [2101722.872285] ca systemd[1]: Starting Set up the ACME certificate renewal infrastructure... container-test-run-certificates> ca # [2101722.872691] ca systemd[1]: Starting Import lastlog data into lastlog2 database... container-test-run-certificates> ca # [2101722.872708] ca systemd[1]: nginx-config-reload.service skipped, unmet condition check ConditionPathExists=/var/lib/acme/ca.foo/fullchain.pem container-test-run-certificates> ca # [2101722.873123] ca systemd[1]: Starting Name Service Cache Daemon (nsncd)... container-test-run-certificates> ca # [2101722.873558] ca systemd[1]: Starting step-ca service... container-test-run-certificates> ca # [2101722.874215] ca systemd[1]: Starting D-Bus System Message Bus... container-test-run-certificates> ca # [2101722.905770] ca systemd[1]: Finished Import lastlog data into lastlog2 database. container-test-run-certificates> ca # [2101722.922651] ca systemd[1]: etc-machine\x2did.mount: Deactivated successfully. container-test-run-certificates> ca # [2101723.000230] ca acme-setup-privileged[204]: + set -euo pipefail container-test-run-certificates> ca # [2101723.000230] ca acme-setup-privileged[204]: + cd /var/lib/acme container-test-run-certificates> ca # [2101723.000547] ca acme-setup-privileged[204]: + chmod -R u=rwX,g=,o= .lego/accounts container-test-run-certificates> ca # [2101723.001013] ca acme-setup-privileged[204]: + chown -R acme .lego/accounts container-test-run-certificates> ca # [2101723.001835] ca acme-setup-privileged[204]: + for fixpath in ca.foo .lego/ca.foo container-test-run-certificates> ca # [2101723.001861] ca acme-setup-privileged[204]: + '[' -d ca.foo ']' container-test-run-certificates> ca # [2101723.001879] ca acme-setup-privileged[204]: + for fixpath in ca.foo .lego/ca.foo container-test-run-certificates> ca # [2101723.001879] ca acme-setup-privileged[204]: + '[' -d .lego/ca.foo ']' container-test-run-certificates> ca # [2101723.021495] ca nsncd[206]: Sep 28 15:05:37.444 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket" container-test-run-certificates> ca # [2101723.021535] ca systemd[1]: Started Name Service Cache Daemon (nsncd). container-test-run-certificates> ca # [2101723.021577] ca systemd[1]: Reached target Host and Network Name Lookups. container-test-run-certificates> ca # [2101723.021614] ca systemd[1]: Reached target User and Group Name Lookups. container-test-run-certificates> ca # [2101723.033467] ca systemd[1]: Starting User Login Management... container-test-run-certificates> ca # [2101723.033899] ca systemd[1]: Starting Permit User Sessions... container-test-run-certificates> ca # [2101723.039147] ca systemd[1]: Finished Permit User Sessions. container-test-run-certificates> ca # [2101723.039596] ca systemd[1]: Started Console Getty. container-test-run-certificates> ca # [2101723.039615] ca systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0 container-test-run-certificates> ca # [2101723.039624] ca systemd[1]: Reached target Login Prompts. container-test-run-certificates> ca # [2101723.147067] ca dbus-broker-launch[208]: Looking up NSS user entry for 'systemd-timesync'... container-test-run-certificates> ca # [2101723.147411] ca dbus-broker-launch[208]: NSS returned no entry for 'systemd-timesync' container-test-run-certificates> ca # [2101723.147411] ca dbus-broker-launch[208]: Invalid user-name in /nix/store/92dpvnx2izg74p9fxmdw8i2jxdlk0jh6-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync" container-test-run-certificates> ca # [2101723.147616] ca systemd[1]: Started D-Bus System Message Bus. container-test-run-certificates> ca # [2101723.151210] ca dbus-broker-launch[208]: Ready container-test-run-certificates> ca # [2101723.618573] ca systemd-logind[234]: New seat seat0. container-test-run-certificates> ca # [2101723.618723] ca systemd[1]: Started User Login Management. container-test-run-certificates> ca # [2101723.619549] ca systemd[1]: Starting linger-users.service... container-test-run-certificates> ca # [2101723.647767] ca systemd[1]: linger-users.service: Deactivated successfully. container-test-run-certificates> ca # [2101723.647898] ca systemd[1]: Finished linger-users.service. container-test-run-certificates> ca # [2101723.669847] ca acme-setup-start[222]: + set -euo pipefail container-test-run-certificates> ca # [2101723.670073] ca acme-setup-start[222]: + test -e ca/key.pem container-test-run-certificates> ca # [2101723.670073] ca acme-setup-start[222]: + minica --ca-key ca/key.pem --ca-cert ca/cert.pem --domains selfsigned.local container-test-run-certificates> ca # [2101723.677823] ca systemd[1]: Finished Set up the ACME certificate renewal infrastructure. container-test-run-certificates> ca # [2101723.678639] ca systemd[1]: Starting Ensure certificate for ca.foo... container-test-run-certificates> ca # [2101723.901052] ca step-ca[207]: badger 2026/09/28 15:05:38 INFO: All 0 tables opened in 0s container-test-run-certificates> ca # [2101723.903063] ca step-ca[207]: 2026/09/28 15:05:38 Building new tls configuration using step-ca x509 Signer Interface container-test-run-certificates> ca # [2101723.905211] ca step-ca[207]: 2026/09/28 15:05:38 Starting Smallstep CA/0.30.2 (linux/amd64) container-test-run-certificates> ca # [2101723.905211] ca step-ca[207]: 2026/09/28 15:05:38 Documentation: https://u.step.sm/docs/ca container-test-run-certificates> ca # [2101723.905211] ca step-ca[207]: 2026/09/28 15:05:38 Community Discord: https://u.step.sm/discord container-test-run-certificates> ca # [2101723.905211] ca step-ca[207]: 2026/09/28 15:05:38 Config file: /etc/smallstep/ca.json container-test-run-certificates> ca # [2101723.905211] ca step-ca[207]: 2026/09/28 15:05:38 The primary server URL is https://ca.foo:1443 container-test-run-certificates> ca # [2101723.905211] ca step-ca[207]: 2026/09/28 15:05:38 Root certificates are available at https://ca.foo:1443/roots.pem container-test-run-certificates> ca # [2101723.905317] ca step-ca[207]: 2026/09/28 15:05:38 X.509 Root Fingerprint: 3b6fe722aa62d6797f6d3f30029cf00df6170c2bff17f9e9ee6d98f103f67693 container-test-run-certificates> ca # [2101723.905332] ca systemd[1]: Started step-ca service. container-test-run-certificates> ca # [2101723.905378] ca step-ca[207]: 2026/09/28 15:05:38 Serving HTTPS on 0.0.0.0:1443 ... container-test-run-certificates> ca # [2101724.160082] ca systemd-networkd[198]: eth1: Gained IPv6LL container-test-run-certificates> ca # [2101724.305250] ca acme-ca.foo-start[259]: Waiting to acquire lock in /run/acme/ container-test-run-certificates> ca # [2101724.306926] ca acme-ca.foo-start[259]: + '[' -e out/acme-success ']' container-test-run-certificates> ca # [2101724.306926] ca acme-ca.foo-start[259]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=ca.foo --ip-addresses= container-test-run-certificates> ca # [2101724.311308] ca acme-ca.foo-start[284]: + cd ca.foo container-test-run-certificates> ca # [2101724.311466] ca acme-ca.foo-start[284]: + cp -vp cert.pem ../out/cert.pem container-test-run-certificates> ca # [2101724.312396] ca acme-ca.foo-start[285]: 'cert.pem' -> '../out/cert.pem' container-test-run-certificates> ca # [2101724.312506] ca acme-ca.foo-start[284]: + cp -vp key.pem ../out/key.pem container-test-run-certificates> ca # [2101724.313123] ca acme-ca.foo-start[284]: 'key.pem' -> '../out/key.pem' container-test-run-certificates> ca # [2101724.313257] ca acme-ca.foo-start[259]: + cat out/cert.pem ca/cert.pem container-test-run-certificates> ca # [2101724.314152] ca acme-ca.foo-start[259]: + cp ca/cert.pem out/chain.pem container-test-run-certificates> ca # [2101724.315045] ca acme-ca.foo-start[259]: + cat out/key.pem out/fullchain.pem container-test-run-certificates> ca # [2101724.315853] ca acme-ca.foo-start[259]: + for fixpath in out certificates container-test-run-certificates> ca # [2101724.315864] ca acme-ca.foo-start[259]: + '[' -d out ']' container-test-run-certificates> ca # [2101724.315864] ca acme-ca.foo-start[259]: + chmod -R u=rwX,g=rX,o= out container-test-run-certificates> ca # [2101724.316633] ca acme-ca.foo-start[259]: + chown -R acme:nginx out container-test-run-certificates> ca # [2101724.317852] ca acme-ca.foo-start[259]: + for fixpath in out certificates container-test-run-certificates> ca # [2101724.317872] ca acme-ca.foo-start[259]: + '[' -d certificates ']' container-test-run-certificates> ca # [2101724.319807] ca systemd[1]: Finished Ensure certificate for ca.foo. container-test-run-certificates> ca # [2101724.320611] ca systemd[1]: Starting Nginx Web Server... container-test-run-certificates> ca # [2101724.946362] ca nginx-pre-start[296]: nginx: the configuration file /nix/store/sah979n8myn3yyp4kkgg7fp87i8laxvb-nginx.conf syntax is ok container-test-run-certificates> ca # [2101724.946667] ca nginx-pre-start[296]: nginx: configuration file /nix/store/sah979n8myn3yyp4kkgg7fp87i8laxvb-nginx.conf test is successful container-test-run-certificates> ca # [2101724.949191] ca systemd[1]: Started Nginx Web Server. container-test-run-certificates> ca # [2101724.949413] ca systemd[1]: Reached target Multi-User System. container-test-run-certificates> ca # [2101724.950041] ca systemd[1]: Starting Order (and renew) ACME certificate for ca.foo... container-test-run-certificates> ca # [2101725.596075] ca acme-order-renew-ca.foo-start[299]: Waiting to acquire lock in /run/acme/ container-test-run-certificates> ca # [2101725.598467] ca acme-order-renew-ca.foo-start[299]: + set -euo pipefail container-test-run-certificates> ca # [2101725.598527] ca acme-order-renew-ca.foo-start[299]: + exec container-test-run-certificates> ca # [2101725.598527] ca acme-order-renew-ca.foo-start[299]: + /nix/store/m9ik4hd36632x3n2ibrxl2vyi0w4y094-flock-0.4.0/bin/flock 11 container-test-run-certificates> ca # [2101725.599297] ca acme-order-renew-ca.foo-start[311]: ++ find accounts -path '*/keys/*.key' -print -quit container-test-run-certificates> ca # [2101725.600665] ca acme-order-renew-ca.foo-start[299]: + '[' -n '' ']' container-test-run-certificates> ca # [2101725.600697] ca acme-order-renew-ca.foo-start[299]: + exec container-test-run-certificates> ca # [2101725.600738] ca acme-order-renew-ca.foo-start[299]: + '[' -e certificates/ca.foo.key ']' container-test-run-certificates> ca # [2101725.600768] ca acme-order-renew-ca.foo-start[299]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo:1443/acme/acme/directory --key-type ec256 -d ca.foo --no-random-sleep --renew-force --ari-disable --force-cert-domains container-test-run-certificates> ca # [2101725.610532] ca acme-order-renew-ca.foo-start[312]: 2026-09-28T15:05:40.033846292Z INFO Private key saved. filepath=accounts/ca.foo_1443/none@none.tld/none@none.tld.key container-test-run-certificates> ca # [2101725.623620] ca step-ca[207]: time="2026-09-28T15:05:40Z" level=info duration="104.026µs" duration-ns=104026 fields.time="2026-09-28T15:05:40Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=300f8293-02a7-475a-8540-c2674a38c7ce response="{\"newNonce\":\"https://ca.foo:1443/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo:1443/acme/acme/new-account\",\"newOrder\":\"https://ca.foo:1443/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo:1443/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo:1443/acme/acme/key-change\"}" size=277 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [2101725.623872] ca acme-order-renew-ca.foo-start[312]: 2026-09-28T15:05:40.047136885Z INFO Registering the account. email=none@none.tld container-test-run-certificates> ca # [2101725.624927] ca step-ca[207]: time="2026-09-28T15:05:40Z" level=info duration=1.009782ms duration-ns=1009782 fields.time="2026-09-28T15:05:40Z" method=HEAD name=ca nonce=cGJmTWRycjRBcHh1QW9qd2I4U3Q2YVVhUEZIZzZjc3g path=/acme/acme/new-nonce protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=cd7c4a93-89c6-4286-98d0-55c89eafc259 size=0 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [2101725.626112] ca step-ca[207]: time="2026-09-28T15:05:40Z" level=info duration="838.809µs" duration-ns=838809 fields.time="2026-09-28T15:05:40Z" method=POST name=ca nonce=b1p0a0RDeFY1RTlIdktGNW1FWEFQR2RBa0s2YjJLcXU path=/acme/acme/new-account protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=93ada53d-2850-4b9e-8e71-93865c1191f1 response="{\"contact\":[\"mailto:none@none.tld\"],\"status\":\"valid\",\"orders\":\"https://ca.foo:1443/acme/acme/account/NGlwpfzmVl9RxhGTP2jFZMl4U9Cc09kM/orders\"}" size=143 status=201 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [2101725.626256] ca acme-order-renew-ca.foo-start[312]: 2026-09-28T15:05:40.049587500Z WARN !!!! HEADS UP !!!! container-test-run-certificates> ca # [2101725.626256] ca acme-order-renew-ca.foo-start[312]: Your account credentials have been saved in your container-test-run-certificates> ca # [2101725.626256] ca acme-order-renew-ca.foo-start[312]: configuration directory at "accounts". container-test-run-certificates> ca # [2101725.626256] ca acme-order-renew-ca.foo-start[312]: You should make a secure backup of this folder now. This container-test-run-certificates> ca # [2101725.626256] ca acme-order-renew-ca.foo-start[312]: configuration directory will also contain private keys container-test-run-certificates> ca # [2101725.626256] ca acme-order-renew-ca.foo-start[312]: generated by lego and certificates obtained from the ACME container-test-run-certificates> ca # [2101725.626256] ca acme-order-renew-ca.foo-start[312]: server. Making regular backups of this folder is ideal. container-test-run-certificates> ca # [2101725.626348] ca acme-order-renew-ca.foo-start[312]: 2026-09-28T15:05:40.049643326Z INFO Obtaining bundled SAN certificate. domains=ca.foo container-test-run-certificates> ca # [2101725.627835] ca step-ca[207]: time="2026-09-28T15:05:40Z" level=info duration=1.367956ms duration-ns=1367956 fields.time="2026-09-28T15:05:40Z" method=POST name=ca nonce=bUY4TzlZaUtQeDJJUE16TFBJcFQwN3RXZ3Uzc2NXYk0 path=/acme/acme/new-order protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=0d3a5a03-8cf8-4a8b-a593-311d23d5bc6a response="{\"id\":\"1m84ENJzc0DGYpUCb3los3XlaPxS2WiK\",\"status\":\"pending\",\"expires\":\"2026-09-29T15:05:40Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"ca.foo\"}],\"notBefore\":\"2026-09-28T15:04:40Z\",\"notAfter\":\"2026-12-27T15:05:40Z\",\"authorizations\":[\"https://ca.foo:1443/acme/acme/authz/EhWZtcJduDC9smI2SpKrSt1kABqRDk7X\"],\"finalize\":\"https://ca.foo:1443/acme/acme/order/1m84ENJzc0DGYpUCb3los3XlaPxS2WiK/finalize\"}" size=392 status=201 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [2101725.684957] ca step-ca[207]: time="2026-09-28T15:05:40Z" level=info duration="674.14µs" duration-ns=674140 fields.time="2026-09-28T15:05:40Z" method=POST name=ca nonce=Tmp6a09LUjlUMnhLU0dqdUFteWFWRkZTR2FSMmRUNHQ path=/acme/acme/authz/EhWZtcJduDC9smI2SpKrSt1kABqRDk7X protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=0fab263b-c78f-4e60-84b1-56ae00d1342c response="{\"identifier\":{\"type\":\"dns\",\"value\":\"ca.foo\"},\"status\":\"pending\",\"challenges\":[{\"type\":\"dns-01\",\"status\":\"pending\",\"token\":\"LnLZwKgxUqzqLzq0OkILb8WkT0BsZHqE\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/EhWZtcJduDC9smI2SpKrSt1kABqRDk7X/0MyzuAcKNEDhbMbAs5OjOfIr5AmPeAav\"},{\"type\":\"http-01\",\"status\":\"pending\",\"token\":\"LnLZwKgxUqzqLzq0OkILb8WkT0BsZHqE\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/EhWZtcJduDC9smI2SpKrSt1kABqRDk7X/9r1VIXtlhd8QrtQ2nHHEnGNzkRB6hx9r\"},{\"type\":\"tls-alpn-01\",\"status\":\"pending\",\"token\":\"LnLZwKgxUqzqLzq0OkILb8WkT0BsZHqE\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/EhWZtcJduDC9smI2SpKrSt1kABqRDk7X/DVSK77Fjd3uXpoloWitJanexrI8RepU9\"}],\"wildcard\":false,\"expires\":\"2026-09-29T15:05:40Z\"}" size=719 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [2101725.685140] ca acme-order-renew-ca.foo-start[312]: 2026-09-28T15:05:40.108464093Z INFO Use solver. domain=ca.foo type=http-01 container-test-run-certificates> ca # [2101725.685140] ca acme-order-renew-ca.foo-start[312]: 2026-09-28T15:05:40.108479342Z INFO http01: Trying to solve HTTP-01. domain=ca.foo container-test-run-certificates> ca # [2101725.687271] ca step-ca[207]: time="2026-09-28T15:05:40Z" level=info duration=1.874991ms duration-ns=1874991 fields.time="2026-09-28T15:05:40Z" method=POST name=ca nonce=TjlQVjZFbEl5c2pMZ0xobzdVRVhPZTdock9jd3BZcU4 path=/acme/acme/challenge/EhWZtcJduDC9smI2SpKrSt1kABqRDk7X/9r1VIXtlhd8QrtQ2nHHEnGNzkRB6hx9r protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=3662f998-b692-4058-9574-b1b7caa274b7 response="{\"type\":\"http-01\",\"status\":\"valid\",\"token\":\"LnLZwKgxUqzqLzq0OkILb8WkT0BsZHqE\",\"validated\":\"2026-09-28T15:05:40Z\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/EhWZtcJduDC9smI2SpKrSt1kABqRDk7X/9r1VIXtlhd8QrtQ2nHHEnGNzkRB6hx9r\"}" size=228 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [2101725.687369] ca acme-order-renew-ca.foo-start[312]: 2026-09-28T15:05:40.110702269Z INFO The server validated our request. domain=ca.foo container-test-run-certificates> ca # [2101725.687402] ca acme-order-renew-ca.foo-start[312]: 2026-09-28T15:05:40.110736944Z INFO Validations succeeded; requesting certificates. domains=ca.foo container-test-run-certificates> ca # [2101725.689674] ca step-ca[207]: time="2026-09-28T15:05:40Z" level=info duration=1.967455ms duration-ns=1967455 fields.time="2026-09-28T15:05:40Z" method=POST name=ca nonce=enJoRG43RGZBa2xNT3hkbE1MYVFNVTFxdEhZSmV0RkY path=/acme/acme/order/1m84ENJzc0DGYpUCb3los3XlaPxS2WiK/finalize protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=43f5b8f4-5e28-49eb-a362-8350ca250dd8 response="{\"id\":\"1m84ENJzc0DGYpUCb3los3XlaPxS2WiK\",\"status\":\"valid\",\"expires\":\"2026-09-29T15:05:40Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"ca.foo\"}],\"notBefore\":\"2026-09-28T15:04:40Z\",\"notAfter\":\"2026-12-27T15:05:40Z\",\"authorizations\":[\"https://ca.foo:1443/acme/acme/authz/EhWZtcJduDC9smI2SpKrSt1kABqRDk7X\"],\"finalize\":\"https://ca.foo:1443/acme/acme/order/1m84ENJzc0DGYpUCb3los3XlaPxS2WiK/finalize\",\"certificate\":\"https://ca.foo:1443/acme/acme/certificate/N53XkmnTj5xFCIGev8n0yOOWNKIwZQ8B\"}" size=481 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [2101725.690401] ca step-ca[207]: time="2026-09-28T15:05:40Z" level=info certificate=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 duration="452.723µs" duration-ns=452723 fields.time="2026-09-28T15:05:40Z" issuer="Clan Intermediate CA" method=POST name=ca nonce=aHQwb0c3cnBKNVBoN0JGeG9ydUVZUEQyMFJVakRYSVI path=/acme/acme/certificate/N53XkmnTj5xFCIGev8n0yOOWNKIwZQ8B protocol=HTTP/1.1 provisioner=acme public-key="ECDSA P-256" referer= remote-address="2001:db8:1::1" request-id=c1c5086a-2912-4acb-b145-d22b4ef53ccf sans="map[dns:[ca.foo]]" serial=78912879362078199016955102845050001695 size=1340 status=200 subject=ca.foo user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; amd64)" user-id= valid-from="2026-09-28T15:04:40Z" valid-to="2026-12-27T15:05:40Z" container-test-run-certificates> ca # [2101725.690500] ca acme-order-renew-ca.foo-start[312]: 2026-09-28T15:05:40.113830380Z INFO Server responded with a certificate. domains=ca.foo container-test-run-certificates> ca # [2101725.690533] ca acme-order-renew-ca.foo-start[312]: 2026-09-28T15:05:40.113866438Z INFO Writing file. filepath=certificates/ca.foo.crt container-test-run-certificates> ca # [2101725.690581] ca acme-order-renew-ca.foo-start[312]: 2026-09-28T15:05:40.113915391Z INFO Writing file. filepath=certificates/ca.foo.issuer.crt container-test-run-certificates> ca # [2101725.690606] ca acme-order-renew-ca.foo-start[312]: 2026-09-28T15:05:40.113943433Z INFO Writing file. filepath=certificates/ca.foo.key container-test-run-certificates> ca # [2101725.690668] ca acme-order-renew-ca.foo-start[312]: 2026-09-28T15:05:40.114002394Z INFO Writing file. filepath=certificates/ca.foo.json container-test-run-certificates> ca # [2101725.693084] ca acme-order-renew-ca.foo-start[299]: + touch out/acme-success container-test-run-certificates> ca # [2101725.694053] ca acme-order-renew-ca.foo-start[299]: + cmp -s certificates/ca.foo.crt out/fullchain.pem container-test-run-certificates> ca # [2101725.694796] ca acme-order-renew-ca.foo-start[299]: + touch out/renewed container-test-run-certificates> ca # [2101725.695658] ca acme-order-renew-ca.foo-start[299]: + echo Installing new certificate container-test-run-certificates> ca # [2101725.695658] ca acme-order-renew-ca.foo-start[299]: Installing new certificate container-test-run-certificates> ca # [2101725.695688] ca acme-order-renew-ca.foo-start[299]: + cp -vp certificates/ca.foo.crt out/fullchain.pem container-test-run-certificates> ca # [2101725.696436] ca acme-order-renew-ca.foo-start[331]: 'certificates/ca.foo.crt' -> 'out/fullchain.pem' container-test-run-certificates> ca # [2101725.696620] ca acme-order-renew-ca.foo-start[299]: + cp -vp certificates/ca.foo.key out/key.pem container-test-run-certificates> ca # [2101725.697539] ca acme-order-renew-ca.foo-start[332]: 'certificates/ca.foo.key' -> 'out/key.pem' container-test-run-certificates> ca # [2101725.697664] ca acme-order-renew-ca.foo-start[299]: + cp -vp certificates/ca.foo.issuer.crt out/chain.pem container-test-run-certificates> ca # [2101725.698504] ca acme-order-renew-ca.foo-start[333]: 'certificates/ca.foo.issuer.crt' -> 'out/chain.pem' container-test-run-certificates> ca # [2101725.698648] ca acme-order-renew-ca.foo-start[299]: + ln -sf fullchain.pem out/cert.pem container-test-run-certificates> ca # [2101725.699532] ca acme-order-renew-ca.foo-start[299]: + cat out/key.pem out/fullchain.pem container-test-run-certificates> ca # [2101725.700429] ca acme-order-renew-ca.foo-start[299]: + for fixpath in out certificates container-test-run-certificates> ca # [2101725.700440] ca acme-order-renew-ca.foo-start[299]: + '[' -d out ']' container-test-run-certificates> ca # [2101725.700450] ca acme-order-renew-ca.foo-start[299]: + chmod -R u=rwX,g=rX,o= out container-test-run-certificates> ca # [2101725.701278] ca acme-order-renew-ca.foo-start[299]: + chown -R acme:nginx out container-test-run-certificates> ca # [2101725.702663] ca acme-order-renew-ca.foo-start[299]: + for fixpath in out certificates container-test-run-certificates> ca # [2101725.702674] ca acme-order-renew-ca.foo-start[299]: + '[' -d certificates ']' container-test-run-certificates> ca # [2101725.702674] ca acme-order-renew-ca.foo-start[299]: + chmod -R u=rwX,g=rX,o= certificates container-test-run-certificates> ca # [2101725.703532] ca acme-order-renew-ca.foo-start[299]: + chown -R acme:nginx certificates container-test-run-certificates> ca # [2101725.704988] ca acme-order-renew-ca.foo-start[299]: + chmod -R u=rwX,g=,o= accounts/. container-test-run-certificates> ca # [2101725.817258] ca systemd[1]: Reloading Nginx Web Server... container-test-run-certificates> ca # [2101725.820034] ca systemd[1]: acme-order-renew-ca.foo.service: Deactivated successfully. container-test-run-certificates> ca # [2101725.820146] ca systemd[1]: Finished Order (and renew) ACME certificate for ca.foo. container-test-run-certificates> ca # [2101726.449261] ca nginx[349]: nginx: the configuration file /nix/store/sah979n8myn3yyp4kkgg7fp87i8laxvb-nginx.conf syntax is ok container-test-run-certificates> ca # [2101726.449490] ca nginx[349]: nginx: configuration file /nix/store/sah979n8myn3yyp4kkgg7fp87i8laxvb-nginx.conf test is successful container-test-run-certificates> ca # [2101727.068936] ca systemd[1]: Reloaded Nginx Web Server. container-test-run-certificates> ca # [2101727.069087] ca systemd[1]: Startup finished in 5.392s. container-test-run-certificates> ca: (finished: waiting for unit step-ca.service, in 6.14 seconds) container-test-run-certificates> ca: waiting for file '/var/lib/acme/ca.foo/fullchain.pem' container-test-run-certificates> ca: (finished: waiting for file '/var/lib/acme/ca.foo/fullchain.pem', in 0.00 seconds) container-test-run-certificates> ca: must succeed: systemctl restart nginx.service container-test-run-certificates> ca # [2101727.575491] ca systemd[1]: Stopping Nginx Web Server... container-test-run-certificates> ca # [2101727.619705] ca systemd[1]: nginx.service: Deactivated successfully. container-test-run-certificates> ca # [2101727.619832] ca systemd[1]: Stopped Nginx Web Server. container-test-run-certificates> ca # [2101727.619845] ca systemd[1]: nginx.service: Consumed 2.448s CPU time over 3.299s wall clock time. container-test-run-certificates> ca # [2101727.621473] ca systemd[1]: Starting Nginx Web Server... container-test-run-certificates> ca: (finished: must succeed: systemctl restart nginx.service, in 0.70 seconds) container-test-run-certificates> server: systemd-nspawn running (pid 442) container-test-run-certificates> server: Waiting for journal at /build/vm-state-server/var/log/journal... container-test-run-certificates> client: systemd-nspawn running (pid 445) container-test-run-certificates> client: Waiting for journal at /build/vm-state-client/var/log/journal... container-test-run-certificates> server: waiting for file '/var/lib/acme/test.foo/fullchain.pem' container-test-run-certificates> nixos-nspawn(server): TAP vde-tap1 not found; container will be isolated from VDE container-test-run-certificates> nixos-nspawn(server): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths. container-test-run-certificates> nixos-nspawn(client): TAP vde-tap1 not found; container will be isolated from VDE container-test-run-certificates> nixos-nspawn(client): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths. container-test-run-certificates> Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file. container-test-run-certificates> ░ Spawning container server on /build/vm-state-server. container-test-run-certificates> Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file. container-test-run-certificates> ░ Spawning container client on /build/vm-state-client. container-test-run-certificates> ca # [2101728.267409] ca nginx-pre-start[373]: nginx: the configuration file /nix/store/sah979n8myn3yyp4kkgg7fp87i8laxvb-nginx.conf syntax is ok container-test-run-certificates> ca # [2101728.267642] ca nginx-pre-start[373]: nginx: configuration file /nix/store/sah979n8myn3yyp4kkgg7fp87i8laxvb-nginx.conf test is successful container-test-run-certificates> ca # [2101728.270478] ca systemd[1]: Started Nginx Web Server. container-test-run-certificates> server # [2101728.774096] server systemd-journald[72]: Journal started container-test-run-certificates> server # [2101728.774125] server systemd-journald[72]: Runtime Journal (/run/log/journal/5b9ac4aea4eb42e8a0cbbe7bf090e796) is 8M, max 3.7G, 3.7G free. container-test-run-certificates> server # [2101728.781178] server systemd[1]: Finished Apply Kernel Variables. container-test-run-certificates> server # [2101728.788220] server systemd[1]: Finished Create Static Device Nodes in /dev gracefully. container-test-run-certificates> server # [2101728.796370] server systemd[1]: Starting Flush Journal to Persistent Storage... container-test-run-certificates> server # [2101728.813169] server systemd[1]: Starting Network Name Resolution... container-test-run-certificates> server # [2101728.813526] server systemd[1]: Starting Create Static Device Nodes in /dev... container-test-run-certificates> server # [2101728.816711] server systemd-journald[72]: Time spent on flushing to /var/log/journal/5b9ac4aea4eb42e8a0cbbe7bf090e796 is 1.108ms for 7 entries. container-test-run-certificates> server # [2101728.816711] server systemd-journald[72]: System Journal (/var/log/journal/5b9ac4aea4eb42e8a0cbbe7bf090e796) is 8M, max 4G, 3.9G free. container-test-run-certificates> server # [2101728.831718] server systemd[1]: Finished Flush Journal to Persistent Storage. container-test-run-certificates> server # [2101728.832075] server systemd[1]: Finished Create Static Device Nodes in /dev. container-test-run-certificates> server # [2101728.833012] server systemd[1]: Reached target Preparation for Local File Systems. container-test-run-certificates> server # [2101728.833090] server systemd[1]: Reached target Local File Systems. container-test-run-certificates> server # [2101728.833566] server systemd[1]: Listening on Boot Loader Control Service Socket. container-test-run-certificates> server # [2101728.833596] server systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> server # [2101728.834062] server systemd[1]: Starting Save Transient machine-id to Disk... container-test-run-certificates> server # [2101728.834414] server systemd[1]: Starting Create System Files and Directories... container-test-run-certificates> server # [2101728.834429] server systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys container-test-run-certificates> server # [2101728.844585] server systemd-tmpfiles[162]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted container-test-run-certificates> server # [2101728.844771] server systemd-tmpfiles[162]: fchmod() of /var/log/journal failed: Operation not permitted container-test-run-certificates> server # [2101728.844872] server systemd-tmpfiles[162]: fchmod() of /var/log/journal/5b9ac4aea4eb42e8a0cbbe7bf090e796 failed: Operation not permitted container-test-run-certificates> server # [2101728.845035] server systemd-tmpfiles[162]: fchmod() of /run/log/journal failed: Operation not permitted container-test-run-certificates> server # [2101728.845936] server systemd[1]: Finished Create System Files and Directories. container-test-run-certificates> server # [2101728.846593] server systemd[1]: Starting Rebuild Journal Catalog... container-test-run-certificates> server # [2101728.846934] server systemd[1]: Starting Record System Boot/Shutdown in UTMP... container-test-run-certificates> server # [2101728.851761] server systemd[1]: Finished Firewall. container-test-run-certificates> server # [2101728.852814] server systemd[1]: Reached target Preparation for Network. container-test-run-certificates> server # [2101728.853028] server systemd[1]: Listening on Network Management Resolve Hook Socket. container-test-run-certificates> server # [2101728.853568] server systemd[1]: Starting Network Management... container-test-run-certificates> server # [2101728.854140] server systemd[1]: Finished Record System Boot/Shutdown in UTMP. container-test-run-certificates> server # [2101728.867679] server systemd[1]: Finished Rebuild Journal Catalog. container-test-run-certificates> server # [2101728.868203] server systemd[1]: Starting Update is Completed... container-test-run-certificates> server # [2101728.873027] server systemd[1]: Finished Update is Completed. container-test-run-certificates> server # [2101728.879777] server systemd[1]: Finished Save Transient machine-id to Disk. container-test-run-certificates> client # [2101728.772992] client systemd-journald[72]: Journal started container-test-run-certificates> client # [2101728.773024] client systemd-journald[72]: Runtime Journal (/run/log/journal/9e32c130781040c7847c00b2f49e212b) is 8M, max 3.7G, 3.7G free. container-test-run-certificates> client # [2101728.779700] client systemd[1]: Finished Apply Kernel Variables. container-test-run-certificates> client # [2101728.786782] client systemd[1]: Finished Create Static Device Nodes in /dev gracefully. container-test-run-certificates> client # [2101728.794743] client systemd[1]: Starting Flush Journal to Persistent Storage... container-test-run-certificates> client # [2101728.795123] client systemd[1]: Starting Network Name Resolution... container-test-run-certificates> client # [2101728.795510] client systemd[1]: Starting Create Static Device Nodes in /dev... container-test-run-certificates> client # [2101728.815935] client systemd-journald[72]: Time spent on flushing to /var/log/journal/9e32c130781040c7847c00b2f49e212b is 906us for 7 entries. container-test-run-certificates> client # [2101728.815935] client systemd-journald[72]: System Journal (/var/log/journal/9e32c130781040c7847c00b2f49e212b) is 8M, max 4G, 3.9G free. container-test-run-certificates> client # [2101728.827564] client systemd[1]: Finished Flush Journal to Persistent Storage. container-test-run-certificates> client # [2101728.827758] client systemd[1]: Finished Create Static Device Nodes in /dev. container-test-run-certificates> client # [2101728.828315] client systemd[1]: Reached target Preparation for Local File Systems. container-test-run-certificates> client # [2101728.828360] client systemd[1]: Reached target Local File Systems. container-test-run-certificates> client # [2101728.828768] client systemd[1]: Listening on Boot Loader Control Service Socket. container-test-run-certificates> client # [2101728.828792] client systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> client # [2101728.829158] client systemd[1]: Starting Save Transient machine-id to Disk... container-test-run-certificates> client # [2101728.829438] client systemd[1]: Starting Create System Files and Directories... container-test-run-certificates> client # [2101728.829452] client systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys container-test-run-certificates> client # [2101728.838556] client systemd-tmpfiles[156]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted container-test-run-certificates> client # [2101728.838702] client systemd-tmpfiles[156]: fchmod() of /var/log/journal failed: Operation not permitted container-test-run-certificates> client # [2101728.838802] client systemd-tmpfiles[156]: fchmod() of /var/log/journal/9e32c130781040c7847c00b2f49e212b failed: Operation not permitted container-test-run-certificates> client # [2101728.838949] client systemd-tmpfiles[156]: fchmod() of /run/log/journal failed: Operation not permitted container-test-run-certificates> client # [2101728.839585] client systemd[1]: Finished Create System Files and Directories. container-test-run-certificates> client # [2101728.840031] client systemd[1]: Starting Rebuild Journal Catalog... container-test-run-certificates> client # [2101728.840318] client systemd[1]: Starting Record System Boot/Shutdown in UTMP... container-test-run-certificates> client # [2101728.847122] client systemd[1]: Finished Record System Boot/Shutdown in UTMP. container-test-run-certificates> client # [2101728.847888] client systemd[1]: Finished Firewall. container-test-run-certificates> client # [2101728.847954] client systemd[1]: Reached target Preparation for Network. container-test-run-certificates> client # [2101728.848098] client systemd[1]: Listening on Network Management Resolve Hook Socket. container-test-run-certificates> client # [2101728.848626] client systemd[1]: Starting Network Management... container-test-run-certificates> client # [2101728.852777] client systemd[1]: Finished Rebuild Journal Catalog. container-test-run-certificates> client # [2101728.853347] client systemd[1]: Starting Update is Completed... container-test-run-certificates> client # [2101728.867367] client systemd[1]: Finished Update is Completed. container-test-run-certificates> client # [2101728.879748] client systemd[1]: Finished Save Transient machine-id to Disk. container-test-run-certificates> server # [2101729.333182] server systemd-networkd[185]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted container-test-run-certificates> server # [2101729.333247] server systemd-networkd[185]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted container-test-run-certificates> server # [2101729.340537] server systemd-networkd[185]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> server # [2101729.340679] server systemd-networkd[185]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> server # [2101729.340747] server systemd-networkd[185]: lo: Link UP container-test-run-certificates> server # [2101729.340749] server systemd-networkd[185]: lo: Gained carrier container-test-run-certificates> server # [2101729.340863] server systemd-networkd[185]: eth1: Configuring with /etc/systemd/network/40-eth1.network. container-test-run-certificates> server # [2101729.341103] server systemd[1]: Started Network Management. container-test-run-certificates> server # [2101729.363112] server systemd-networkd[185]: eth1: Link UP container-test-run-certificates> server # [2101729.363149] server systemd[1]: Starting Enable Persistent Storage in systemd-networkd... container-test-run-certificates> server # [2101729.363253] server systemd-networkd[185]: eth1: Gained carrier container-test-run-certificates> server # [2101729.390256] server systemd[1]: Finished Enable Persistent Storage in systemd-networkd. container-test-run-certificates> client # [2101729.327798] client systemd-networkd[182]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted container-test-run-certificates> client # [2101729.327892] client systemd-networkd[182]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted container-test-run-certificates> client # [2101729.335485] client systemd-networkd[182]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> client # [2101729.335626] client systemd-networkd[182]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> client # [2101729.335699] client systemd-networkd[182]: lo: Link UP container-test-run-certificates> client # [2101729.335703] client systemd-networkd[182]: lo: Gained carrier container-test-run-certificates> client # [2101729.335845] client systemd-networkd[182]: eth1: Configuring with /etc/systemd/network/40-eth1.network. container-test-run-certificates> client # [2101729.336088] client systemd[1]: Started Network Management. container-test-run-certificates> client # [2101729.336204] client systemd-networkd[182]: eth1: Link UP container-test-run-certificates> client # [2101729.336209] client systemd-networkd[182]: eth1: Gained carrier container-test-run-certificates> client # [2101729.336816] client systemd[1]: Starting Enable Persistent Storage in systemd-networkd... container-test-run-certificates> client # [2101729.367979] client systemd[1]: Finished Enable Persistent Storage in systemd-networkd. container-test-run-certificates> client # [2101729.726231] client systemd-resolved[113]: Positive Trust Anchors: container-test-run-certificates> client # [2101729.726237] client systemd-resolved[113]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d container-test-run-certificates> client # [2101729.726241] client systemd-resolved[113]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 container-test-run-certificates> client # [2101729.726256] client systemd-resolved[113]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test container-test-run-certificates> client # [2101729.736563] client systemd-resolved[113]: Using system hostname 'client'. container-test-run-certificates> client # [2101729.737600] client systemd[1]: Started Network Name Resolution. container-test-run-certificates> client # [2101729.737650] client systemd[1]: Reached target Network. container-test-run-certificates> client # [2101729.737683] client systemd[1]: Reached target System Initialization. container-test-run-certificates> client # [2101729.737715] client systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> client # [2101729.737731] client systemd[1]: Started Daily Cleanup of Temporary Directories. container-test-run-certificates> client # [2101729.737743] client systemd[1]: Reached target Timer Units. container-test-run-certificates> client # [2101729.737823] client systemd[1]: Listening on D-Bus System Message Bus Socket. container-test-run-certificates> client # [2101729.737889] client systemd[1]: Listening on Nix Daemon Socket. container-test-run-certificates> client # [2101729.737957] client systemd[1]: Listening on Virtual Machine and Container Registration Service Socket. container-test-run-certificates> client # [2101729.737969] client systemd[1]: Reached target Socket Units. container-test-run-certificates> client # [2101729.737990] client systemd[1]: Reached target Basic System. container-test-run-certificates> client # [2101729.738625] client systemd[1]: Starting Import lastlog data into lastlog2 database... container-test-run-certificates> client # [2101729.738985] client systemd[1]: Starting Name Service Cache Daemon (nsncd)... container-test-run-certificates> client # [2101729.739573] client systemd[1]: Starting D-Bus System Message Bus... container-test-run-certificates> client # [2101729.771739] client systemd[1]: etc-machine\x2did.mount: Deactivated successfully. container-test-run-certificates> client # [2101729.777989] client systemd[1]: Finished Import lastlog data into lastlog2 database. container-test-run-certificates> client # [2101729.885917] client nsncd[192]: Sep 28 15:05:44.309 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket" container-test-run-certificates> client # [2101729.885966] client systemd[1]: Started Name Service Cache Daemon (nsncd). container-test-run-certificates> client # [2101729.885992] client systemd[1]: Reached target Host and Network Name Lookups. container-test-run-certificates> client # [2101729.886027] client systemd[1]: Reached target User and Group Name Lookups. container-test-run-certificates> client # [2101729.886461] client systemd[1]: Starting User Login Management... container-test-run-certificates> client # [2101729.886733] client systemd[1]: Starting Permit User Sessions... container-test-run-certificates> client # [2101729.892189] client systemd[1]: Finished Permit User Sessions. container-test-run-certificates> client # [2101729.892680] client systemd[1]: Started Console Getty. container-test-run-certificates> client # [2101729.892706] client systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0 container-test-run-certificates> client # [2101729.892718] client systemd[1]: Reached target Login Prompts. container-test-run-certificates> client # [2101729.998647] client dbus-broker-launch[193]: Looking up NSS user entry for 'systemd-timesync'... container-test-run-certificates> server # [2101729.728293] server systemd-resolved[115]: Positive Trust Anchors: container-test-run-certificates> server # [2101729.728301] server systemd-resolved[115]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d container-test-run-certificates> server # [2101729.728303] server systemd-resolved[115]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 container-test-run-certificates> server # [2101729.728324] server systemd-resolved[115]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test container-test-run-certificates> server # [2101729.739364] server systemd-resolved[115]: Using system hostname 'server'. container-test-run-certificates> server # [2101729.740290] server systemd[1]: Started Network Name Resolution. container-test-run-certificates> server # [2101729.740343] server systemd[1]: Reached target Network. container-test-run-certificates> server # [2101729.740372] server systemd[1]: Reached target Network is Online. container-test-run-certificates> server # [2101729.740395] server systemd[1]: Reached target System Initialization. container-test-run-certificates> server # [2101729.740544] server systemd[1]: Started Renew ACME Certificate for test.foo. container-test-run-certificates> server # [2101729.740563] server systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> server # [2101729.740574] server systemd[1]: Started Daily Cleanup of Temporary Directories. container-test-run-certificates> server # [2101729.740585] server systemd[1]: Reached target Timer Units. container-test-run-certificates> server # [2101729.740670] server systemd[1]: Listening on D-Bus System Message Bus Socket. container-test-run-certificates> server # [2101729.740741] server systemd[1]: Listening on Nix Daemon Socket. container-test-run-certificates> server # [2101729.740811] server systemd[1]: Listening on Virtual Machine and Container Registration Service Socket. container-test-run-certificates> server # [2101729.740820] server systemd[1]: Reached target Socket Units. container-test-run-certificates> server # [2101729.740843] server systemd[1]: Reached target Basic System. container-test-run-certificates> server # [2101729.766602] server systemd[1]: Starting Set up the ACME certificate renewal infrastructure... container-test-run-certificates> server # [2101729.767198] server systemd[1]: Starting Import lastlog data into lastlog2 database... container-test-run-certificates> server # [2101729.767223] server systemd[1]: nginx-config-reload.service skipped, unmet condition check ConditionPathExists=/var/lib/acme/test.foo/fullchain.pem container-test-run-certificates> server # [2101729.767803] server systemd[1]: Starting Name Service Cache Daemon (nsncd)... container-test-run-certificates> server # [2101729.788620] server systemd[1]: etc-machine\x2did.mount: Deactivated successfully. container-test-run-certificates> server # [2101729.789540] server systemd[1]: lastlog2-import.service: Failed to spawn executor: No such file or directory container-test-run-certificates> server # [2101729.789552] server systemd[1]: lastlog2-import.service: Failed to spawn 'start-post' task: No such file or directory container-test-run-certificates> server # [2101729.789575] server systemd[1]: lastlog2-import.service: Failed with result 'resources'. container-test-run-certificates> server # [2101729.789609] server systemd[1]: Failed to start Import lastlog data into lastlog2 database. container-test-run-certificates> server # [2101729.790864] server systemd[1]: Starting D-Bus System Message Bus... container-test-run-certificates> server # [2101729.859086] server acme-setup-privileged[195]: + set -euo pipefail container-test-run-certificates> server # [2101729.859086] server acme-setup-privileged[195]: + cd /var/lib/acme container-test-run-certificates> server # [2101729.859319] server acme-setup-privileged[195]: + chmod -R u=rwX,g=,o= .lego/accounts container-test-run-certificates> server # [2101729.860096] server acme-setup-privileged[195]: + chown -R acme .lego/accounts container-test-run-certificates> server # [2101729.860879] server acme-setup-privileged[195]: + for fixpath in test.foo .lego/test.foo container-test-run-certificates> server # [2101729.860890] server acme-setup-privileged[195]: + '[' -d test.foo ']' container-test-run-certificates> server # [2101729.860905] server acme-setup-privileged[195]: + for fixpath in test.foo .lego/test.foo container-test-run-certificates> server # [2101729.860905] server acme-setup-privileged[195]: + '[' -d .lego/test.foo ']' container-test-run-certificates> server # [2101729.884891] server nsncd[197]: Sep 28 15:05:44.308 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket" container-test-run-certificates> server # [2101729.884899] server systemd[1]: Started Name Service Cache Daemon (nsncd). container-test-run-certificates> server # [2101729.884951] server systemd[1]: Reached target Host and Network Name Lookups. container-test-run-certificates> server # [2101729.884993] server systemd[1]: Reached target User and Group Name Lookups. container-test-run-certificates> server # [2101729.885625] server systemd[1]: Starting User Login Management... container-test-run-certificates> server # [2101729.885924] server systemd[1]: Starting Permit User Sessions... container-test-run-certificates> server # [2101729.890830] server systemd[1]: Finished Permit User Sessions. container-test-run-certificates> server # [2101729.891228] server systemd[1]: Started Console Getty. container-test-run-certificates> server # [2101729.891247] server systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0 container-test-run-certificates> server # [2101729.891257] server systemd[1]: Reached target Login Prompts. container-test-run-certificates> server # [2101730.010631] server dbus-broker-launch[205]: Looking up NSS user entry for 'systemd-timesync'... container-test-run-certificates> server # [2101730.011084] server dbus-broker-launch[205]: NSS returned no entry for 'systemd-timesync' container-test-run-certificates> server # [2101730.011084] server dbus-broker-launch[205]: Invalid user-name in /nix/store/c02lr3b0bgpmd8c0jfrflwkam4h2k3z7-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync" container-test-run-certificates> client # [2101729.999100] client dbus-broker-launch[193]: NSS returned no entry for 'systemd-timesync' container-test-run-certificates> server # [2101730.011358] server systemd[1]: Started D-Bus System Message Bus. container-test-run-certificates> client # [2101729.999100] client dbus-broker-launch[193]: Invalid user-name in /nix/store/k1wkxjg7rqm8aki2ngjxfj3lf1b0qmmn-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync" container-test-run-certificates> server # [2101730.014590] server dbus-broker-launch[205]: Ready container-test-run-certificates> client # [2101729.999393] client systemd[1]: Started D-Bus System Message Bus. container-test-run-certificates> client # [2101730.002808] client dbus-broker-launch[193]: Ready container-test-run-certificates> server # [2101730.447438] server systemd-logind[220]: New seat seat0. container-test-run-certificates> server # [2101730.447562] server systemd[1]: Started User Login Management. container-test-run-certificates> server # [2101730.448341] server systemd[1]: Starting linger-users.service... container-test-run-certificates> server # [2101730.476235] server systemd[1]: linger-users.service: Deactivated successfully. container-test-run-certificates> server # [2101730.476331] server systemd[1]: Finished linger-users.service. container-test-run-certificates> server # [2101730.508968] server acme-setup-start[209]: + set -euo pipefail container-test-run-certificates> server # [2101730.508968] server acme-setup-start[209]: + test -e ca/key.pem container-test-run-certificates> server # [2101730.509151] server acme-setup-start[209]: + minica --ca-key ca/key.pem --ca-cert ca/cert.pem --domains selfsigned.local container-test-run-certificates> server # [2101730.516469] server systemd[1]: Finished Set up the ACME certificate renewal infrastructure. container-test-run-certificates> server # [2101730.517349] server systemd[1]: Starting Ensure certificate for test.foo... container-test-run-certificates> client # [2101730.455562] client systemd-logind[208]: New seat seat0. container-test-run-certificates> client # [2101730.455699] client systemd[1]: Started User Login Management. container-test-run-certificates> client # [2101730.471182] client systemd[1]: Starting linger-users.service... container-test-run-certificates> client # [2101730.477196] client systemd[1]: linger-users.service: Deactivated successfully. container-test-run-certificates> client # [2101730.477232] client systemd[1]: Finished linger-users.service. container-test-run-certificates> client # [2101730.477719] client systemd[1]: Reached target Multi-User System. container-test-run-certificates> client # [2101730.477801] client systemd[1]: Startup finished in 1.951s. container-test-run-certificates> client # [2101730.560081] client systemd-networkd[182]: eth1: Gained IPv6LL container-test-run-certificates> server # [2101730.817076] server systemd-networkd[185]: eth1: Gained IPv6LL container-test-run-certificates> server # [2101731.124873] server acme-test.foo-start[246]: Waiting to acquire lock in /run/acme/ container-test-run-certificates> server # [2101731.126600] server acme-test.foo-start[246]: + '[' -e out/acme-success ']' container-test-run-certificates> server # [2101731.126656] server acme-test.foo-start[246]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=test.foo --ip-addresses= container-test-run-certificates> server # [2101731.130988] server acme-test.foo-start[256]: + cd test.foo container-test-run-certificates> server # [2101731.131138] server acme-test.foo-start[256]: + cp -vp cert.pem ../out/cert.pem container-test-run-certificates> server # [2101731.131929] server acme-test.foo-start[257]: 'cert.pem' -> '../out/cert.pem' container-test-run-certificates> server # [2101731.132075] server acme-test.foo-start[256]: + cp -vp key.pem ../out/key.pem container-test-run-certificates> server # [2101731.132685] server acme-test.foo-start[256]: 'key.pem' -> '../out/key.pem' container-test-run-certificates> server # [2101731.132817] server acme-test.foo-start[246]: + cat out/cert.pem ca/cert.pem container-test-run-certificates> server # [2101731.133658] server acme-test.foo-start[246]: + cp ca/cert.pem out/chain.pem container-test-run-certificates> server # [2101731.134452] server acme-test.foo-start[246]: + cat out/key.pem out/fullchain.pem container-test-run-certificates> server # [2101731.135255] server acme-test.foo-start[246]: + for fixpath in out certificates container-test-run-certificates> server # [2101731.135274] server acme-test.foo-start[246]: + '[' -d out ']' container-test-run-certificates> server # [2101731.135274] server acme-test.foo-start[246]: + chmod -R u=rwX,g=rX,o= out container-test-run-certificates> server # [2101731.136132] server acme-test.foo-start[246]: + chown -R acme:nginx out container-test-run-certificates> server # [2101731.137385] server acme-test.foo-start[246]: + for fixpath in out certificates container-test-run-certificates> server # [2101731.137396] server acme-test.foo-start[246]: + '[' -d certificates ']' container-test-run-certificates> server # [2101731.139155] server systemd[1]: Finished Ensure certificate for test.foo. container-test-run-certificates> server # [2101731.139767] server systemd[1]: Starting Nginx Web Server... container-test-run-certificates> server # [2101731.766696] server nginx-pre-start[268]: nginx: the configuration file /nix/store/nnd7bs3qz46ahy1nx65iy7h1wddw5m6l-nginx.conf syntax is ok container-test-run-certificates> server # [2101731.766968] server nginx-pre-start[268]: nginx: configuration file /nix/store/nnd7bs3qz46ahy1nx65iy7h1wddw5m6l-nginx.conf test is successful container-test-run-certificates> server # [2101731.768984] server systemd[1]: Started Nginx Web Server. container-test-run-certificates> server # [2101731.769635] server systemd[1]: Reached target Multi-User System. container-test-run-certificates> server # [2101731.770250] server systemd[1]: Starting Order (and renew) ACME certificate for test.foo... container-test-run-certificates> server # [2101732.380524] server acme-order-renew-test.foo-start[271]: Waiting to acquire lock in /run/acme/ container-test-run-certificates> server # [2101732.382247] server acme-order-renew-test.foo-start[271]: + set -euo pipefail container-test-run-certificates> server # [2101732.382298] server acme-order-renew-test.foo-start[271]: + exec container-test-run-certificates> server # [2101732.382329] server acme-order-renew-test.foo-start[271]: + /nix/store/m9ik4hd36632x3n2ibrxl2vyi0w4y094-flock-0.4.0/bin/flock 11 container-test-run-certificates> server # [2101732.383178] server acme-order-renew-test.foo-start[282]: ++ find accounts -path '*/keys/*.key' -print -quit container-test-run-certificates> server # [2101732.384924] server acme-order-renew-test.foo-start[271]: + '[' -n '' ']' container-test-run-certificates> server # [2101732.384949] server acme-order-renew-test.foo-start[271]: + exec container-test-run-certificates> server # [2101732.384982] server acme-order-renew-test.foo-start[271]: + '[' -e certificates/test.foo.key ']' container-test-run-certificates> server # [2101732.385003] server acme-order-renew-test.foo-start[271]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo/acme/acme/directory --key-type ec256 -d test.foo --no-random-sleep --renew-force --ari-disable --force-cert-domains container-test-run-certificates> server # [2101732.395588] server acme-order-renew-test.foo-start[283]: 2026-09-28T15:05:46.818904787Z INFO Private key saved. filepath=accounts/ca.foo/none@none.tld/none@none.tld.key container-test-run-certificates> server # [2101732.408997] server acme-order-renew-test.foo-start[283]: 2026-09-28T15:05:46.832319433Z INFO Registering the account. email=none@none.tld container-test-run-certificates> server # [2101732.414222] server acme-order-renew-test.foo-start[283]: 2026-09-28T15:05:46.837551949Z WARN !!!! HEADS UP !!!! container-test-run-certificates> server # [2101732.414222] server acme-order-renew-test.foo-start[283]: Your account credentials have been saved in your container-test-run-certificates> server # [2101732.414222] server acme-order-renew-test.foo-start[283]: configuration directory at "accounts". container-test-run-certificates> server # [2101732.414222] server acme-order-renew-test.foo-start[283]: You should make a secure backup of this folder now. This container-test-run-certificates> server # [2101732.414222] server acme-order-renew-test.foo-start[283]: configuration directory will also contain private keys container-test-run-certificates> server # [2101732.414222] server acme-order-renew-test.foo-start[283]: generated by lego and certificates obtained from the ACME container-test-run-certificates> server # [2101732.414222] server acme-order-renew-test.foo-start[283]: server. Making regular backups of this folder is ideal. container-test-run-certificates> server # [2101732.414308] server acme-order-renew-test.foo-start[283]: 2026-09-28T15:05:46.837630657Z INFO Obtaining bundled SAN certificate. domains=test.foo container-test-run-certificates> server # [2101732.473902] server acme-order-renew-test.foo-start[283]: 2026-09-28T15:05:46.897222046Z INFO Use solver. domain=test.foo type=http-01 container-test-run-certificates> server # [2101732.473902] server acme-order-renew-test.foo-start[283]: 2026-09-28T15:05:46.897236994Z INFO http01: Trying to solve HTTP-01. domain=test.foo container-test-run-certificates> server # [2101732.476361] server acme-order-renew-test.foo-start[283]: 2026-09-28T15:05:46.899688021Z INFO The server validated our request. domain=test.foo container-test-run-certificates> server # [2101732.476405] server acme-order-renew-test.foo-start[283]: 2026-09-28T15:05:46.899738516Z INFO Validations succeeded; requesting certificates. domains=test.foo container-test-run-certificates> server # [2101732.480281] server acme-order-renew-test.foo-start[283]: 2026-09-28T15:05:46.903612993Z INFO Server responded with a certificate. domains=test.foo container-test-run-certificates> server # [2101732.480306] server acme-order-renew-test.foo-start[283]: 2026-09-28T15:05:46.903634403Z INFO Writing file. filepath=certificates/test.foo.crt container-test-run-certificates> server # [2101732.480333] server acme-order-renew-test.foo-start[283]: 2026-09-28T15:05:46.903668448Z INFO Writing file. filepath=certificates/test.foo.issuer.crt container-test-run-certificates> server # [2101732.480352] server acme-order-renew-test.foo-start[283]: 2026-09-28T15:05:46.903687934Z INFO Writing file. filepath=certificates/test.foo.key container-test-run-certificates> server # [2101732.480390] server acme-order-renew-test.foo-start[283]: 2026-09-28T15:05:46.903725515Z INFO Writing file. filepath=certificates/test.foo.json container-test-run-certificates> server # [2101732.482750] server acme-order-renew-test.foo-start[271]: + touch out/acme-success container-test-run-certificates> server # [2101732.483757] server acme-order-renew-test.foo-start[271]: + cmp -s certificates/test.foo.crt out/fullchain.pem container-test-run-certificates> server # [2101732.484387] server acme-order-renew-test.foo-start[271]: + touch out/renewed container-test-run-certificates> server # [2101732.485170] server acme-order-renew-test.foo-start[271]: + echo Installing new certificate container-test-run-certificates> server # [2101732.485170] server acme-order-renew-test.foo-start[271]: Installing new certificate container-test-run-certificates> server # [2101732.485193] server acme-order-renew-test.foo-start[271]: + cp -vp certificates/test.foo.crt out/fullchain.pem container-test-run-certificates> server # [2101732.485919] server acme-order-renew-test.foo-start[303]: 'certificates/test.foo.crt' -> 'out/fullchain.pem' container-test-run-certificates> server # [2101732.486058] server acme-order-renew-test.foo-start[271]: + cp -vp certificates/test.foo.key out/key.pem container-test-run-certificates> server # [2101732.486801] server acme-order-renew-test.foo-start[304]: 'certificates/test.foo.key' -> 'out/key.pem' container-test-run-certificates> server # [2101732.486972] server acme-order-renew-test.foo-start[271]: + cp -vp certificates/test.foo.issuer.crt out/chain.pem container-test-run-certificates> server # [2101732.487885] server acme-order-renew-test.foo-start[305]: 'certificates/test.foo.issuer.crt' -> 'out/chain.pem' container-test-run-certificates> server # [2101732.488037] server acme-order-renew-test.foo-start[271]: + ln -sf fullchain.pem out/cert.pem container-test-run-certificates> server # [2101732.488936] server acme-order-renew-test.foo-start[271]: + cat out/key.pem out/fullchain.pem container-test-run-certificates> server # [2101732.489830] server acme-order-renew-test.foo-start[271]: + for fixpath in out certificates container-test-run-certificates> server # [2101732.489841] server acme-order-renew-test.foo-start[271]: + '[' -d out ']' container-test-run-certificates> server # [2101732.489841] server acme-order-renew-test.foo-start[271]: + chmod -R u=rwX,g=rX,o= out container-test-run-certificates> server # [2101732.490701] server acme-order-renew-test.foo-start[271]: + chown -R acme:nginx out container-test-run-certificates> server # [2101732.491974] server acme-order-renew-test.foo-start[271]: + for fixpath in out certificates container-test-run-certificates> server # [2101732.491985] server acme-order-renew-test.foo-start[271]: + '[' -d certificates ']' container-test-run-certificates> server # [2101732.491985] server acme-order-renew-test.foo-start[271]: + chmod -R u=rwX,g=rX,o= certificates container-test-run-certificates> server # [2101732.492789] server acme-order-renew-test.foo-start[271]: + chown -R acme:nginx certificates container-test-run-certificates> server # [2101732.494183] server acme-order-renew-test.foo-start[271]: + chmod -R u=rwX,g=,o= accounts/. container-test-run-certificates> server # [2101732.609805] server systemd[1]: Reloading Nginx Web Server... container-test-run-certificates> server # [2101732.612482] server systemd[1]: acme-order-renew-test.foo.service: Deactivated successfully. container-test-run-certificates> server # [2101732.612596] server systemd[1]: Finished Order (and renew) ACME certificate for test.foo. container-test-run-certificates> ca # [2101732.408748] ca step-ca[207]: time="2026-09-28T15:05:46Z" level=info duration="32.581µs" duration-ns=32581 fields.time="2026-09-28T15:05:46Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="::1" request-id=f33a5e92-20bc-4998-b866-f077ad96f9e7 response="{\"newNonce\":\"https://ca.foo/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo/acme/acme/new-account\",\"newOrder\":\"https://ca.foo/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo/acme/acme/key-change\"}" size=252 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [2101732.412545] ca step-ca[207]: time="2026-09-28T15:05:46Z" level=info duration=2.785116ms duration-ns=2785116 fields.time="2026-09-28T15:05:46Z" method=HEAD name=ca nonce=eFo1enVKOWg1aWpGRzN6QWZHSHhBRDUyOW1yazRhQ20 path=/acme/acme/new-nonce protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=ced1a7d4-da79-45e6-a718-a2e1e26ac97c size=0 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [2101732.414007] ca step-ca[207]: time="2026-09-28T15:05:46Z" level=info duration="653.701µs" duration-ns=653701 fields.time="2026-09-28T15:05:46Z" method=POST name=ca nonce=dWxSOXQyaTg4enNqcnJiZ2N1VEdGeE50R3A4MHk2akU path=/acme/acme/new-account protocol=HTTP/1.1 referer= remote-address="::1" request-id=a2abfdbc-ba60-4a5e-9f0d-02f29661ada3 response="{\"contact\":[\"mailto:none@none.tld\"],\"status\":\"valid\",\"orders\":\"https://ca.foo/acme/acme/account/RiemHXK48xxsDBiP2GJGBbIIH91ze241/orders\"}" size=138 status=201 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [2101732.416205] ca step-ca[207]: time="2026-09-28T15:05:46Z" level=info duration=1.284589ms duration-ns=1284589 fields.time="2026-09-28T15:05:46Z" method=POST name=ca nonce=ZEx6OFNwUnFuNGJCdE9rZkxvNWZaT1Z4RVROTzZOWEU path=/acme/acme/new-order protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=cc7e78e8-ceaa-4e14-8b3d-f0e607a81eff response="{\"id\":\"J80iELfS4I2SALwxEx4G3HAJYSUd5ynz\",\"status\":\"pending\",\"expires\":\"2026-09-29T15:05:46Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"test.foo\"}],\"notBefore\":\"2026-09-28T15:04:46Z\",\"notAfter\":\"2026-12-27T15:05:46Z\",\"authorizations\":[\"https://ca.foo/acme/acme/authz/LqLgeeP1R2NVFGD8Ur6ZHWTI7KMsmrxM\"],\"finalize\":\"https://ca.foo/acme/acme/order/J80iELfS4I2SALwxEx4G3HAJYSUd5ynz/finalize\"}" size=384 status=201 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [2101732.473596] ca step-ca[207]: time="2026-09-28T15:05:46Z" level=info duration="420.963µs" duration-ns=420963 fields.time="2026-09-28T15:05:46Z" method=POST name=ca nonce=Uml1bm8zZzNPemx2OHVBZTZTbEhFeHU5ajFCdXhudE4 path=/acme/acme/authz/LqLgeeP1R2NVFGD8Ur6ZHWTI7KMsmrxM protocol=HTTP/1.1 referer= remote-address="::1" request-id=c3409b64-2385-4902-bbf9-c2fe976d538d response="{\"identifier\":{\"type\":\"dns\",\"value\":\"test.foo\"},\"status\":\"pending\",\"challenges\":[{\"type\":\"dns-01\",\"status\":\"pending\",\"token\":\"9RQ1TFkOsvMzvLNps02kmcm8TeAV6GFY\",\"url\":\"https://ca.foo/acme/acme/challenge/LqLgeeP1R2NVFGD8Ur6ZHWTI7KMsmrxM/D4mPAaZnYjRjDq1pqDldDaaTbUkQ0miW\"},{\"type\":\"http-01\",\"status\":\"pending\",\"token\":\"9RQ1TFkOsvMzvLNps02kmcm8TeAV6GFY\",\"url\":\"https://ca.foo/acme/acme/challenge/LqLgeeP1R2NVFGD8Ur6ZHWTI7KMsmrxM/DcOvLEgHOEPhflJb0dmz6ciGsNxstMUq\"},{\"type\":\"tls-alpn-01\",\"status\":\"pending\",\"token\":\"9RQ1TFkOsvMzvLNps02kmcm8TeAV6GFY\",\"url\":\"https://ca.foo/acme/acme/challenge/LqLgeeP1R2NVFGD8Ur6ZHWTI7KMsmrxM/E3QAgy6UfsCirjHEamBNKT58zKvWUoYL\"}],\"wildcard\":false,\"expires\":\"2026-09-29T15:05:46Z\"}" size=706 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [2101732.476180] ca step-ca[207]: time="2026-09-28T15:05:46Z" level=info duration=1.429172ms duration-ns=1429172 fields.time="2026-09-28T15:05:46Z" method=POST name=ca nonce=b0xrU3NzclJuaEt3ZFIxdFN5YkxmRzU2V3o3TTlab0c path=/acme/acme/challenge/LqLgeeP1R2NVFGD8Ur6ZHWTI7KMsmrxM/DcOvLEgHOEPhflJb0dmz6ciGsNxstMUq protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=d3c31f02-b172-4659-b5b7-aabe22b1298b response="{\"type\":\"http-01\",\"status\":\"valid\",\"token\":\"9RQ1TFkOsvMzvLNps02kmcm8TeAV6GFY\",\"validated\":\"2026-09-28T15:05:46Z\",\"url\":\"https://ca.foo/acme/acme/challenge/LqLgeeP1R2NVFGD8Ur6ZHWTI7KMsmrxM/DcOvLEgHOEPhflJb0dmz6ciGsNxstMUq\"}" size=223 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [2101732.479063] ca step-ca[207]: time="2026-09-28T15:05:46Z" level=info duration=1.770915ms duration-ns=1770915 fields.time="2026-09-28T15:05:46Z" method=POST name=ca nonce=M25XRmRVcGc0UU50N21CUFZxdXB6bjI2TkV1NDd5ZTI path=/acme/acme/order/J80iELfS4I2SALwxEx4G3HAJYSUd5ynz/finalize protocol=HTTP/1.1 referer= remote-address="::1" request-id=502bc714-4d81-4d5e-a1fa-89b475de4bcc response="{\"id\":\"J80iELfS4I2SALwxEx4G3HAJYSUd5ynz\",\"status\":\"valid\",\"expires\":\"2026-09-29T15:05:46Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"test.foo\"}],\"notBefore\":\"2026-09-28T15:04:46Z\",\"notAfter\":\"2026-12-27T15:05:46Z\",\"authorizations\":[\"https://ca.foo/acme/acme/authz/LqLgeeP1R2NVFGD8Ur6ZHWTI7KMsmrxM\"],\"finalize\":\"https://ca.foo/acme/acme/order/J80iELfS4I2SALwxEx4G3HAJYSUd5ynz/finalize\",\"certificate\":\"https://ca.foo/acme/acme/certificate/JJc4mcMmS7r4VwHJz6GJp9pAMDYEAHtI\"}" size=468 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; amd64)" user-id= container-test-run-certificates> ca # [2101732.480147] ca step-ca[207]: time="2026-09-28T15:05:46Z" level=info certificate="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" duration="394.132µs" duration-ns=394132 fields.time="2026-09-28T15:05:46Z" issuer="Clan Intermediate CA" method=POST name=ca nonce=RGtaQ2k4bzB6UUlDeVRpYnF5R0ZlNUJsMHFHUVFYSFQ path=/acme/acme/certificate/JJc4mcMmS7r4VwHJz6GJp9pAMDYEAHtI protocol=HTTP/1.1 provisioner=acme public-key="ECDSA P-256" referer= remote-address=127.0.0.1 request-id=48d0ddd5-69e0-4541-b045-32e6202c6896 sans="map[dns:[test.foo]]" serial=72976580565877956378948207479752164584 size=1348 status=200 subject=test.foo user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; amd64)" user-id= valid-from="2026-09-28T15:04:46Z" valid-to="2026-12-27T15:05:46Z" container-test-run-certificates> server # [2101733.234136] server nginx[321]: nginx: the configuration file /nix/store/nnd7bs3qz46ahy1nx65iy7h1wddw5m6l-nginx.conf syntax is ok container-test-run-certificates> server # [2101733.234363] server nginx[321]: nginx: configuration file /nix/store/nnd7bs3qz46ahy1nx65iy7h1wddw5m6l-nginx.conf test is successful container-test-run-certificates> server: (finished: waiting for file '/var/lib/acme/test.foo/fullchain.pem', in 5.64 seconds) container-test-run-certificates> server: must succeed: systemctl restart nginx.service container-test-run-certificates> server # [2101733.847369] server systemd[1]: Reloaded Nginx Web Server. container-test-run-certificates> server # [2101733.847530] server systemd[1]: Startup finished in 5.322s. container-test-run-certificates> server # [2101733.916411] server systemd[1]: Stopping Nginx Web Server... container-test-run-certificates> server # [2101733.955542] server systemd[1]: nginx.service: Deactivated successfully. container-test-run-certificates> server # [2101733.955674] server systemd[1]: Stopped Nginx Web Server. container-test-run-certificates> server # [2101733.955706] server systemd[1]: nginx.service: Consumed 3.665s CPU time over 2.815s wall clock time. container-test-run-certificates> server # [2101733.956917] server systemd[1]: Starting Nginx Web Server... container-test-run-certificates> server: (finished: must succeed: systemctl restart nginx.service, in 0.74 seconds) container-test-run-certificates> client: waiting for success: curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: 2001:db8:1::3 container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying [2001:db8:1::3]:443... container-test-run-certificates> * connect to 2001:db8:1::3 port 443 from 2001:db8:1::2 port 42004 failed: Connection refused container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * connect to 192.168.1.3 port 443 from 192.168.1.2 port 56154 failed: Connection refused container-test-run-certificates> * Failed to connect to test.foo:443 after 0 ms: Could not connect to server container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (7) Failed to connect to test.foo:443 after 0 ms: Could not connect to server container-test-run-certificates> server # [2101734.650565] server nginx-pre-start[344]: nginx: the configuration file /nix/store/nnd7bs3qz46ahy1nx65iy7h1wddw5m6l-nginx.conf syntax is ok container-test-run-certificates> server # [2101734.650933] server nginx-pre-start[344]: nginx: configuration file /nix/store/nnd7bs3qz46ahy1nx65iy7h1wddw5m6l-nginx.conf test is successful container-test-run-certificates> server # [2101734.654091] server systemd[1]: Started Nginx Web Server. container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: 2001:db8:1::3 container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying [2001:db8:1::3]:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [930 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [79 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Sep 28 15:04:46 2026 GMT container-test-run-certificates> * expire date: Dec 27 15:05:46 2026 GMT container-test-run-certificates> * issuer: CN=Clan Intermediate CA container-test-run-certificates> * Certificate level 0: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 1: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 2: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 0 container-test-run-certificates> * SSL certificate verified via OpenSSL. container-test-run-certificates> * Established connection to test.foo (2001:db8:1::3 port 443) from 2001:db8:1::2 port 42020 container-test-run-certificates> % Total % Received % Xferd Average Speed Time Time Time Current container-test-run-certificates> Dload Upload Total Spent Left Speed container-test-run-certificates> 0 0 0 0 0 0 0 0 0* using HTTP/2 container-test-run-certificates> * [HTTP/2] [1] OPENED stream for https://test.foo/ container-test-run-certificates> * [HTTP/2] [1] [:method: GET] container-test-run-certificates> * [HTTP/2] [1] [:scheme: https] container-test-run-certificates> * [HTTP/2] [1] [:authority: test.foo] container-test-run-certificates> * [HTTP/2] [1] [:path: /] container-test-run-certificates> * [HTTP/2] [1] [user-agent: curl/8.22.0] container-test-run-certificates> * [HTTP/2] [1] [accept: */*] container-test-run-certificates> } [5 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> * Request completely sent off container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> { [5 bytes data] container-test-run-certificates> 100 20 100 20 0 0 1796 0 0 container-test-run-certificates> * Connection #0 to host test.foo:443 left intact container-test-run-certificates> client: (finished: waiting for success: curl -v https://test.foo, in 1.03 seconds) container-test-run-certificates> client: must succeed: openssl s_client -connect test.foo:443 -servername test.foo /dev/null | openssl x509 -text -noout 1>&2 container-test-run-certificates> Certificate: container-test-run-certificates> Data: container-test-run-certificates> Version: 3 (0x2) container-test-run-certificates> Serial Number: container-test-run-certificates> 36:e6:c7:36:7b:6c:4d:8d:d2:15:53:b3:f0:27:04:e8 container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Issuer: CN=Clan Intermediate CA container-test-run-certificates> Validity container-test-run-certificates> Not Before: Sep 28 15:04:46 2026 GMT container-test-run-certificates> Not After : Dec 27 15:05:46 2026 GMT container-test-run-certificates> Subject: CN=test.foo container-test-run-certificates> Subject Public Key Info: container-test-run-certificates> Public Key Algorithm: id-ecPublicKey container-test-run-certificates> Public-Key: (256 bit) container-test-run-certificates> pub: container-test-run-certificates> 04:de:d6:61:c8:73:b5:38:40:9a:c9:fa:b9:8f:69: container-test-run-certificates> 3c:72:18:05:f0:62:82:da:6e:e9:d7:dd:05:ce:00: container-test-run-certificates> 03:9a:7e:5c:22:8f:23:ba:76:cd:e2:d3:54:43:01: container-test-run-certificates> 06:75:0a:7d:01:71:1d:ca:26:07:55:39:c6:73:09: container-test-run-certificates> af:c0:41:5e:ab container-test-run-certificates> ASN1 OID: prime256v1 container-test-run-certificates> NIST CURVE: P-256 container-test-run-certificates> X509v3 extensions: container-test-run-certificates> X509v3 Key Usage: critical container-test-run-certificates> Digital Signature container-test-run-certificates> X509v3 Extended Key Usage: container-test-run-certificates> TLS Web Server Authentication, TLS Web Client Authentication container-test-run-certificates> X509v3 Subject Key Identifier: container-test-run-certificates> 19:7B:2C:BC:31:BD:3C:D1:A5:EA:8C:86:AF:E6:8D:46:30:C2:D3:87 container-test-run-certificates> X509v3 Authority Key Identifier: container-test-run-certificates> 6B:AC:22:74:2F:C7:A4:B4:F1:A3:27:E6:5D:31:1F:84:00:98:D4:28 container-test-run-certificates> X509v3 Subject Alternative Name: container-test-run-certificates> DNS:test.foo container-test-run-certificates> 1.3.6.1.4.1.37476.9000.64.1: container-test-run-certificates> 0......acme.. container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Signature Value: container-test-run-certificates> 30:46:02:21:00:c3:05:2f:8f:51:ed:ee:01:06:52:43:19:47: container-test-run-certificates> 3e:0d:13:b4:5c:28:5d:47:d5:98:9b:78:e7:7b:07:b3:ee:0a: container-test-run-certificates> 63:02:21:00:95:c7:57:1c:57:c5:2e:6d:e5:19:05:51:42:ed: container-test-run-certificates> 7b:9f:64:0f:38:91:af:32:20:1e:5e:87:84:26:ed:23:fe:79 container-test-run-certificates> client: (finished: must succeed: openssl s_client -connect test.foo:443 -servername test.foo /dev/null | openssl x509 -text -noout 1>&2, in 0.02 seconds) container-test-run-certificates> (finished: run the VM test script, in 14.28 seconds) container-test-run-certificates> test script finished in 14.29s container-test-run-certificates> cleanup container-test-run-certificates> kill NspawnMachine (pid 50) container-test-run-certificates> kill NspawnMachine (pid 445) container-test-run-certificates> Container ca terminated by signal KILL. container-test-run-certificates> kill NspawnMachine (pid 442) container-test-run-certificates> Container client terminated by signal KILL. container-test-run-certificates> Container server terminated by signal KILL. container-test-run-certificates> (finished: cleanup, in 0.34 seconds)