these 62 derivations will be built: /nix/store/02kb87lck11zl6w2p35rkpi4rlj5l7qk-X-Reload-Triggers-systemd-networkd.drv /nix/store/2ch60n1ah7x51ndfxb4qndr6jv4rdw1w-nix.conf.drv /nix/store/1282fsw4xy6s1f11qw6kryw6xbqn8bvm-X-Restart-Triggers-nix-daemon.drv /nix/store/hx0c1g7n1vi01zmaywxmlfggdz7vpvd9-nginx.conf.drv /nix/store/qm44inmihw3hxwdxxwzf5g92qblzn5gy-unit-script-nginx-pre-start.drv /nix/store/6m2na6pgflqq145xb693z3faxxxx157l-unit-nginx.service.drv /nix/store/rv6nq3b5hxm56hag70kzpb5hnhh90dci-tmpfiles.d.drv /nix/store/8scx8avyd264nm449vfrkaqddcnldiv7-X-Restart-Triggers-systemd-tmpfiles-resetup.drv /nix/store/802hvvgqjsw8frpzmkkl6hnda3g20jkg-unit-systemd-tmpfiles-resetup.service.drv /nix/store/v9fcsfz7y2l8m514bckmckwvd9gippr1-unit-script-setup-wg0-interface-start.drv /nix/store/f4dsfwamd6s5y02z96a487xf7z19rs2k-unit-setup-wg0-interface.service.drv /nix/store/2vn0cy90y3mp0an4qygyfvppbjpldych-system-path.drv /nix/store/vrig8b4izaplvx17q62rs95l5mp9pzjj-dbus-1.drv /nix/store/wfhyp4fyw6bmar246vdr1g5b7hlim8x0-X-Restart-Triggers-dbus-broker.drv /nix/store/mlkyacmkwwpd2n9as5myj2lly9k6r92j-unit-dbus-broker.service.drv /nix/store/6c1bdxzxldwasmbznl8ymmdxbwaadp7i-unit-script-network-addresses-eth1-pre-stop.drv /nix/store/c90vw8asifkq6q4m13av61m1160hxds2-unit-script-network-addresses-eth1-start.drv /nix/store/n4cycc4z3ax11wvx40ni3h9ln46r23mh-unit-network-addresses-eth1.service.drv /nix/store/pjvw5d8icbnb9a8pc2bm4bbhhnjr562p-firewall-stop.drv /nix/store/q4ra3a6aglv8vhnb36azkd7jng55f5n5-firewall-start.drv /nix/store/1q88vbhh0bqaxga5isjfnjbcdhd4ndlk-firewall-reload.drv /nix/store/sglk3p2098marz56bz2qj0s2yzw3zw1c-unit-firewall.service.drv /nix/store/wg0wh082zxykz17drchlw8fxpig382yw-unit-nix-daemon.service.drv /nix/store/1n3040ygk99ckjz8122jzjnmn10khi15-system-units.drv /nix/store/1ply7kvsmy06ijic09yc07hha41f3p8d-users-groups.json.drv /nix/store/2hrccjj9vjbdc54g2r188cq76j5vrdx6-system-units.drv /nix/store/6w49484qs3iv89qfk6dpl1wyaah69046-extra-hosts.drv /nix/store/flzhm9sv6w9k819xvpifwmm4f3wra919-string-hosts.drv /nix/store/x8acy14p7q7ny7k8izmg2xmbdcdmns6s-localhost-hosts.drv /nix/store/4w7nkdadr6nkm39k3wn2m2vjql0pgxh2-hosts.drv /nix/store/fmrshzhmbzx7hz4i15fhdv7qvjf9fkmk-system-path.drv /nix/store/5y3ydji4ha20rxzh8b9vx6j6kx1psidd-dbus-1.drv /nix/store/7qlsbickqpfsmi6s6y3fhkcyh31za5yv-etc-hostname.drv /nix/store/68r88w61aslm7da4pywx4aqrp8ni9yq7-X-Restart-Triggers-dbus-broker.drv /nix/store/4mh3alvw0xq076li5ca356pwcwrxfa87-unit-dbus-broker.service.drv /nix/store/s48y3waxspdybimxyz51i3434z62n5im-user-units.drv /nix/store/zvqvl7gghpfpaq3dwa9ngkqzfzkkphlb-nginx.conf.drv /nix/store/35rh8z2b6v91gvcldhb476pp947s4wly-etc.drv /nix/store/39y4wpdxbv2c9l1r8w382x5r3kp0ljsl-unit-systemd-networkd.service.drv /nix/store/4qbnxdbzh9gaxm0qqxpvbp8a1kpqr67a-test-script.drv /nix/store/5xfzlmalpad223m57gk4pnxjg5cbci0h-unit-40-eth1.link.drv /nix/store/lankd5vnzgbr51w8c0sazx2065vmadwm-nixos-system-router-test.drv /nix/store/7gs78jqrccafy23p06vfma887a15si88-run-router-nspawn.drv /nix/store/yp14xwdk0b2vr89a2fa0sinc7yfwm8ap-string-hosts.drv /nix/store/84ihzaw2crxwnx7wixq78djwmkbxq5iq-hosts.drv /nix/store/xm4rrl1f7m7ywgvha2j9kf73m3iawddy-run-machine-nspawn.drv /nix/store/jpn262jm6hk8xpb65jb7hpkk5ckpv6wz-driverConfiguration.json.drv /nix/store/b63ipmrvf5yd9x8wm4mkzi8qqi38dpys-nixos-test-driver-user-firewall-iptables.drv /nix/store/dsch55r988x4djk51iwb0fa3g94d67i1-unit-script-nginx-pre-start.drv /nix/store/f8qr2bn3bmpyzihf2l7hm5sm3r8vwjzc-activate.drv /nix/store/g11nmmb6j9wps5ffsdjp8r73p1qzhf2l-unit-systemd-networkd-wait-online.service.drv /nix/store/hlxdj5nc9n1qf0d81d1h44gsmmm1yk00-users-groups.json.drv /nix/store/ibap3h7s23s89y2sr12pn72lz9ycnxlz-container-test-run-user-firewall-iptables.drv /nix/store/kgk202dzh19a03crbnw33g1cnl0zl6wv-activate.drv /nix/store/mcanbmyc230spn66q6nv8wh38ng3zsa3-unit-nginx.service.drv /nix/store/miflnndqykwrynk21cnflckwacxgm23b-ensure-all-wrappers-paths-exist.drv /nix/store/pa9bcmis44kfxhsz42azksjyhw4hkza8-stage-2-init.sh.drv /nix/store/qdrc5sgjyabh1zbxjzbh0l2bcjw781bz-nixos-system-machine-test.drv /nix/store/yz15qarbbzkjmk5x4rdyalyd9v6c3b2j-unit-dbus-broker.service.drv /nix/store/v7xm8l5vf168ik7ic2fqvh1ijxsb0l17-user-units.drv /nix/store/vbf62milvbyfiwgqkmvvbhz95585n295-etc.drv /nix/store/wc4cbq096v8z84s0gijcknz6kjkzypkk-unit-dbus-broker.service.drv these 8 paths will be fetched (0.0 KiB download, 2.4 MiB unpacked): /nix/store/0jvjknbq8cfgwbm0cd25v1rwnrbr3b0x-dry-activate /nix/store/z64zpcshl6iyvr7q3jra10dcczpcsyg4-dry-activate /nix/store/84sggxlzw0adckmzzysvrajmmdl5p6qq-libcap-text-verifier-0-unstable /nix/store/5ga4kky2abmq8f8bryss4nl6aqmsv1ca-nginx-1.30.5 /nix/store/29sx6wcid88iz35qayaccsr67l3kdrpk-nixos-test-driver-1.1 /nix/store/ipscl9n9z4bhp1fllykz94534japg021-systemd-default-tmpfiles /nix/store/4hi6kp5v7s65fxyiz1cfygaci3l4s480-users-groups.json /nix/store/dd12hj3ljxczahx78s89grkl14cx5c5v-users-groups.json warning: ignoring the client-specified setting 'store', because it is a restricted setting and you are not a trusted user building '/nix/store/zvqvl7gghpfpaq3dwa9ngkqzfzkkphlb-nginx.conf.drv' on nix-store.geninf.io:50051 nginx.conf> gi-build-x86-02: building zvqvl7gghpfpaq3dwa9ngkqzfzkkphlb-nginx.conf.drv nginx.conf> structuredAttrs is enabled building '/nix/store/hx0c1g7n1vi01zmaywxmlfggdz7vpvd9-nginx.conf.drv' on nix-store.geninf.io:50051 nginx.conf> gi-build-x86-02: building hx0c1g7n1vi01zmaywxmlfggdz7vpvd9-nginx.conf.drv nginx.conf> structuredAttrs is enabled nginx.conf> nginx.conf> ==================== Results =================== nginx.conf> No issues found. nginx.conf> nginx.conf> ==================== Summary =================== nginx.conf> Total issues: nginx.conf> Unspecified: 0 nginx.conf> Low: 0 nginx.conf> Medium: 0 nginx.conf> High: 0 nginx.conf> nginx.conf> nginx.conf> ==================== Results =================== nginx.conf> No issues found. nginx.conf> nginx.conf> ==================== Summary =================== nginx.conf> Total issues: nginx.conf> Unspecified: 0 nginx.conf> Low: 0 nginx.conf> Medium: 0 nginx.conf> High: 0 nginx.conf> building '/nix/store/dsch55r988x4djk51iwb0fa3g94d67i1-unit-script-nginx-pre-start.drv' on nix-store.geninf.io:50051 unit-script-nginx-pre-start> gi-build-x86-02: building dsch55r988x4djk51iwb0fa3g94d67i1-unit-script-nginx-pre-start.drv unit-script-nginx-pre-start> structuredAttrs is enabled building '/nix/store/qm44inmihw3hxwdxxwzf5g92qblzn5gy-unit-script-nginx-pre-start.drv' on nix-store.geninf.io:50051 unit-script-nginx-pre-start> gi-build-x86-02: building qm44inmihw3hxwdxxwzf5g92qblzn5gy-unit-script-nginx-pre-start.drv unit-script-nginx-pre-start> structuredAttrs is enabled building '/nix/store/mcanbmyc230spn66q6nv8wh38ng3zsa3-unit-nginx.service.drv' on nix-store.geninf.io:50051 unit-nginx.service> gi-build-x86-02: building mcanbmyc230spn66q6nv8wh38ng3zsa3-unit-nginx.service.drv unit-nginx.service> structuredAttrs is enabled building '/nix/store/6m2na6pgflqq145xb693z3faxxxx157l-unit-nginx.service.drv' on nix-store.geninf.io:50051 unit-nginx.service> attached to the build already running on this worker unit-nginx.service> gi-build-x86-02: building 6m2na6pgflqq145xb693z3faxxxx157l-unit-nginx.service.drv unit-nginx.service> structuredAttrs is enabled building '/nix/store/2hrccjj9vjbdc54g2r188cq76j5vrdx6-system-units.drv' on nix-store.geninf.io:50051 system-units> gi-build-x86-02: building 2hrccjj9vjbdc54g2r188cq76j5vrdx6-system-units.drv building '/nix/store/1n3040ygk99ckjz8122jzjnmn10khi15-system-units.drv' on nix-store.geninf.io:50051 system-units> gi-build-x86-02: building 1n3040ygk99ckjz8122jzjnmn10khi15-system-units.drv building '/nix/store/35rh8z2b6v91gvcldhb476pp947s4wly-etc.drv' on nix-store.geninf.io:50051 etc> build-x86-01: building 35rh8z2b6v91gvcldhb476pp947s4wly-etc.drv building '/nix/store/vbf62milvbyfiwgqkmvvbhz95585n295-etc.drv' on nix-store.geninf.io:50051 etc> gi-build-x86-02: building vbf62milvbyfiwgqkmvvbhz95585n295-etc.drv building '/nix/store/f8qr2bn3bmpyzihf2l7hm5sm3r8vwjzc-activate.drv' on nix-store.geninf.io:50051 activate> gi-build-x86-02: building f8qr2bn3bmpyzihf2l7hm5sm3r8vwjzc-activate.drv building '/nix/store/kgk202dzh19a03crbnw33g1cnl0zl6wv-activate.drv' on nix-store.geninf.io:50051 activate> build-x86-01: building kgk202dzh19a03crbnw33g1cnl0zl6wv-activate.drv activate> structuredAttrs is enabled activate> structuredAttrs is enabled building '/nix/store/lankd5vnzgbr51w8c0sazx2065vmadwm-nixos-system-router-test.drv' on nix-store.geninf.io:50051 nixos-system-router-test> attached to the build already running on this worker nixos-system-router-test> build-x86-01: building lankd5vnzgbr51w8c0sazx2065vmadwm-nixos-system-router-test.drv nixos-system-router-test> structuredAttrs is enabled building '/nix/store/qdrc5sgjyabh1zbxjzbh0l2bcjw781bz-nixos-system-machine-test.drv' on nix-store.geninf.io:50051 nixos-system-machine-test> gi-build-x86-02: building qdrc5sgjyabh1zbxjzbh0l2bcjw781bz-nixos-system-machine-test.drv nixos-system-machine-test> structuredAttrs is enabled building '/nix/store/7gs78jqrccafy23p06vfma887a15si88-run-router-nspawn.drv' on nix-store.geninf.io:50051 run-router-nspawn> build-x86-01: building 7gs78jqrccafy23p06vfma887a15si88-run-router-nspawn.drv building '/nix/store/xm4rrl1f7m7ywgvha2j9kf73m3iawddy-run-machine-nspawn.drv' on nix-store.geninf.io:50051 run-machine-nspawn> build-x86-01: building xm4rrl1f7m7ywgvha2j9kf73m3iawddy-run-machine-nspawn.drv building '/nix/store/jpn262jm6hk8xpb65jb7hpkk5ckpv6wz-driverConfiguration.json.drv' on nix-store.geninf.io:50051 driverConfiguration.json> build-x86-01: building jpn262jm6hk8xpb65jb7hpkk5ckpv6wz-driverConfiguration.json.drv driverConfiguration.json> structuredAttrs is enabled building '/nix/store/b63ipmrvf5yd9x8wm4mkzi8qqi38dpys-nixos-test-driver-user-firewall-iptables.drv' on nix-store.geninf.io:50051 nixos-test-driver-user-firewall-iptables> gi-build-x86-02: building b63ipmrvf5yd9x8wm4mkzi8qqi38dpys-nixos-test-driver-user-firewall-iptables.drv nixos-test-driver-user-firewall-iptables> Running type check (enable/disable: config.skipTypeCheck) nixos-test-driver-user-firewall-iptables> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck nixos-test-driver-user-firewall-iptables> All checks passed! nixos-test-driver-user-firewall-iptables> Linting test script (enable/disable: config.skipLint) nixos-test-driver-user-firewall-iptables> See https://nixos.org/manual/nixos/stable/#test-opt-skipLint nixos-test-driver-user-firewall-iptables> All checks passed! building '/nix/store/ibap3h7s23s89y2sr12pn72lz9ycnxlz-container-test-run-user-firewall-iptables.drv' on nix-store.geninf.io:50051 container-test-run-user-firewall-iptables> build-x86-01: building ibap3h7s23s89y2sr12pn72lz9ycnxlz-container-test-run-user-firewall-iptables.drv container-test-run-user-firewall-iptables> Machine state will be reset. To keep it, pass --keep-machine-state container-test-run-user-firewall-iptables> start all VLans container-test-run-user-firewall-iptables> (finished: start all VLans, in 0.00 seconds) container-test-run-user-firewall-iptables> container-test-run-user-firewall-iptables> Test will time out and terminate in 3600.0 seconds container-test-run-user-firewall-iptables> run the VM test script container-test-run-user-firewall-iptables> additionally exposed symbols: container-test-run-user-firewall-iptables> machine, router, container-test-run-user-firewall-iptables> vlan1, container-test-run-user-firewall-iptables> start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh container-test-run-user-firewall-iptables> start all VMs container-test-run-user-firewall-iptables> machine: systemd-nspawn running (pid 53) container-test-run-user-firewall-iptables> router: systemd-nspawn running (pid 52) container-test-run-user-firewall-iptables> machine: Waiting for journal at /build/vm-state-machine/var/log/journal... container-test-run-user-firewall-iptables> router: Waiting for journal at /build/vm-state-router/var/log/journal... container-test-run-user-firewall-iptables> (finished: start all VMs, in 0.00 seconds) container-test-run-user-firewall-iptables> router: waiting for unit multi-user.target container-test-run-user-firewall-iptables> nixos-nspawn(machine): TAP vde-tap1 not found; container will be isolated from VDE container-test-run-user-firewall-iptables> nixos-nspawn(machine): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths. container-test-run-user-firewall-iptables> nixos-nspawn(router): TAP vde-tap1 not found; container will be isolated from VDE container-test-run-user-firewall-iptables> nixos-nspawn(router): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths. container-test-run-user-firewall-iptables> Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file. container-test-run-user-firewall-iptables> Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file. container-test-run-user-firewall-iptables> ░ Spawning container machine on /build/vm-state-machine. container-test-run-user-firewall-iptables> ░ Spawning container router on /build/vm-state-router. container-test-run-user-firewall-iptables> router # [2101792.581970] router systemd-journald[57]: Journal started container-test-run-user-firewall-iptables> router # [2101792.581995] router systemd-journald[57]: Runtime Journal (/run/log/journal/d22a265af99d40deb9e63588ee415c26) is 8M, max 3.7G, 3.7G free. container-test-run-user-firewall-iptables> router # [2101792.595294] router systemd[1]: Finished Apply Kernel Variables. container-test-run-user-firewall-iptables> router # [2101792.603475] router systemd[1]: Finished Create Static Device Nodes in /dev gracefully. container-test-run-user-firewall-iptables> router # [2101792.620178] router systemd[1]: Starting Flush Journal to Persistent Storage... container-test-run-user-firewall-iptables> router # [2101792.620717] router systemd[1]: Starting Network Name Resolution... container-test-run-user-firewall-iptables> router # [2101792.621111] router systemd[1]: Starting Create Static Device Nodes in /dev... container-test-run-user-firewall-iptables> router # [2101792.627321] router systemd-journald[57]: Time spent on flushing to /var/log/journal/d22a265af99d40deb9e63588ee415c26 is 1.001ms for 7 entries. container-test-run-user-firewall-iptables> router # [2101792.627321] router systemd-journald[57]: System Journal (/var/log/journal/d22a265af99d40deb9e63588ee415c26) is 8M, max 4G, 3.9G free. container-test-run-user-firewall-iptables> router # [2101792.633751] router systemd[1]: Finished Flush Journal to Persistent Storage. container-test-run-user-firewall-iptables> router # [2101792.633957] router systemd[1]: Finished Create Static Device Nodes in /dev. container-test-run-user-firewall-iptables> router # [2101792.634648] router systemd[1]: Reached target Preparation for Local File Systems. container-test-run-user-firewall-iptables> router # [2101792.634698] router systemd[1]: Reached target Local File Systems. container-test-run-user-firewall-iptables> router # [2101792.635127] router systemd[1]: Listening on Boot Loader Control Service Socket. container-test-run-user-firewall-iptables> router # [2101792.635150] router systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container container-test-run-user-firewall-iptables> router # [2101792.635513] router systemd[1]: Starting Save Transient machine-id to Disk... container-test-run-user-firewall-iptables> router # [2101792.635793] router systemd[1]: Starting Create System Files and Directories... container-test-run-user-firewall-iptables> router # [2101792.635805] router systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys container-test-run-user-firewall-iptables> router # [2101792.636239] router systemd[1]: Starting Network Management... container-test-run-user-firewall-iptables> router # [2101792.647089] router systemd-tmpfiles[71]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted container-test-run-user-firewall-iptables> router # [2101792.647294] router systemd-tmpfiles[71]: fchmod() of /var/log/journal failed: Operation not permitted container-test-run-user-firewall-iptables> router # [2101792.647427] router systemd-tmpfiles[71]: fchmod() of /var/log/journal/d22a265af99d40deb9e63588ee415c26 failed: Operation not permitted container-test-run-user-firewall-iptables> router # [2101792.647590] router systemd-tmpfiles[71]: fchmod() of /run/log/journal failed: Operation not permitted container-test-run-user-firewall-iptables> router # [2101792.648950] router systemd[1]: Finished Create System Files and Directories. container-test-run-user-firewall-iptables> router # [2101792.649699] router systemd[1]: Starting Rebuild Journal Catalog... container-test-run-user-firewall-iptables> router # [2101792.650146] router systemd[1]: Starting Record System Boot/Shutdown in UTMP... container-test-run-user-firewall-iptables> router # [2101792.651764] router systemd[1]: Finished Save Transient machine-id to Disk. container-test-run-user-firewall-iptables> router # [2101792.657220] router systemd[1]: Finished Record System Boot/Shutdown in UTMP. container-test-run-user-firewall-iptables> router # [2101792.661827] router systemd[1]: Finished Rebuild Journal Catalog. container-test-run-user-firewall-iptables> router # [2101792.662475] router systemd[1]: Starting Update is Completed... container-test-run-user-firewall-iptables> router # [2101792.668422] router systemd[1]: Finished Update is Completed. container-test-run-user-firewall-iptables> machine # [2101792.581797] machine systemd-journald[57]: Journal started container-test-run-user-firewall-iptables> machine # [2101792.581823] machine systemd-journald[57]: Runtime Journal (/run/log/journal/33f7c750b6644949859a3ad2aae6040d) is 8M, max 3.7G, 3.7G free. container-test-run-user-firewall-iptables> machine # [2101792.587302] machine systemd[1]: Finished Apply Kernel Variables. container-test-run-user-firewall-iptables> machine # [2101792.593726] machine systemd[1]: Finished Create Static Device Nodes in /dev gracefully. container-test-run-user-firewall-iptables> machine # [2101792.601176] machine systemd[1]: Starting Flush Journal to Persistent Storage... container-test-run-user-firewall-iptables> machine # [2101792.601496] machine systemd[1]: Starting Create Static Device Nodes in /dev... container-test-run-user-firewall-iptables> machine # [2101792.622806] machine systemd-journald[57]: Time spent on flushing to /var/log/journal/33f7c750b6644949859a3ad2aae6040d is 930us for 6 entries. container-test-run-user-firewall-iptables> machine # [2101792.622806] machine systemd-journald[57]: System Journal (/var/log/journal/33f7c750b6644949859a3ad2aae6040d) is 8M, max 4G, 3.9G free. container-test-run-user-firewall-iptables> machine # [2101792.627950] machine systemd[1]: Finished Flush Journal to Persistent Storage. container-test-run-user-firewall-iptables> machine # [2101792.628344] machine systemd[1]: Finished Create Static Device Nodes in /dev. container-test-run-user-firewall-iptables> machine # [2101792.628915] machine systemd[1]: Reached target Preparation for Local File Systems. container-test-run-user-firewall-iptables> machine # [2101792.628959] machine systemd[1]: Reached target Local File Systems. container-test-run-user-firewall-iptables> machine # [2101792.629357] machine systemd[1]: Listening on Boot Loader Control Service Socket. container-test-run-user-firewall-iptables> machine # [2101792.629384] machine systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container container-test-run-user-firewall-iptables> machine # [2101792.629763] machine systemd[1]: Starting Save Transient machine-id to Disk... container-test-run-user-firewall-iptables> machine # [2101792.630056] machine systemd[1]: Starting Create System Files and Directories... container-test-run-user-firewall-iptables> machine # [2101792.630069] machine systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys container-test-run-user-firewall-iptables> machine # [2101792.646935] machine systemd-tmpfiles[130]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted container-test-run-user-firewall-iptables> machine # [2101792.647128] machine systemd-tmpfiles[130]: fchmod() of /var/log/journal failed: Operation not permitted container-test-run-user-firewall-iptables> machine # [2101792.647231] machine systemd-tmpfiles[130]: fchmod() of /var/log/journal/33f7c750b6644949859a3ad2aae6040d failed: Operation not permitted container-test-run-user-firewall-iptables> machine # [2101792.647381] machine systemd-tmpfiles[130]: fchmod() of /run/log/journal failed: Operation not permitted container-test-run-user-firewall-iptables> machine # [2101792.648919] machine systemd[1]: Finished Create System Files and Directories. container-test-run-user-firewall-iptables> machine # [2101792.649368] machine systemd[1]: Starting Rebuild Journal Catalog... container-test-run-user-firewall-iptables> machine # [2101792.649924] machine systemd[1]: Starting Record System Boot/Shutdown in UTMP... container-test-run-user-firewall-iptables> machine # [2101792.651619] machine systemd[1]: Finished Save Transient machine-id to Disk. container-test-run-user-firewall-iptables> machine # [2101792.655812] machine systemd[1]: Finished Record System Boot/Shutdown in UTMP. container-test-run-user-firewall-iptables> machine # [2101792.661985] machine systemd[1]: Finished Rebuild Journal Catalog. container-test-run-user-firewall-iptables> machine # [2101792.662403] machine systemd[1]: Starting Update is Completed... container-test-run-user-firewall-iptables> machine # [2101792.668323] machine systemd[1]: Finished Update is Completed. container-test-run-user-firewall-iptables> machine # [2101792.668403] machine systemd[1]: Reached target System Initialization. container-test-run-user-firewall-iptables> machine # [2101792.668437] machine systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container container-test-run-user-firewall-iptables> machine # [2101792.668452] machine systemd[1]: Started Daily Cleanup of Temporary Directories. container-test-run-user-firewall-iptables> machine # [2101792.668463] machine systemd[1]: Reached target Timer Units. container-test-run-user-firewall-iptables> machine # [2101792.668521] machine systemd[1]: Listening on D-Bus System Message Bus Socket. container-test-run-user-firewall-iptables> machine # [2101792.668578] machine systemd[1]: Listening on Nix Daemon Socket. container-test-run-user-firewall-iptables> machine # [2101792.668643] machine systemd[1]: Listening on Virtual Machine and Container Registration Service Socket. container-test-run-user-firewall-iptables> machine # [2101792.668653] machine systemd[1]: Reached target Socket Units. container-test-run-user-firewall-iptables> machine # [2101792.668672] machine systemd[1]: Reached target Basic System. container-test-run-user-firewall-iptables> machine # [2101792.669116] machine systemd[1]: Starting Import lastlog data into lastlog2 database... container-test-run-user-firewall-iptables> machine # [2101792.669462] machine systemd[1]: Starting Name Service Cache Daemon (nsncd)... container-test-run-user-firewall-iptables> machine # [2101792.677944] machine systemd[1]: Finished Import lastlog data into lastlog2 database. container-test-run-user-firewall-iptables> machine # [2101792.700511] machine systemd[1]: Finished Firewall. container-test-run-user-firewall-iptables> machine # [2101792.700572] machine systemd[1]: Reached target Preparation for Network. container-test-run-user-firewall-iptables> machine # [2101792.700919] machine systemd[1]: Starting Address configuration of eth1... container-test-run-user-firewall-iptables> machine # [2101792.701275] machine systemd[1]: Starting Extra networking commands.... container-test-run-user-firewall-iptables> machine # [2101792.701594] machine systemd[1]: Starting Setup wg0 dummy interface... container-test-run-user-firewall-iptables> machine # [2101792.712212] machine network-addresses-eth1-start[215]: adding address 192.168.1.1/24... done container-test-run-user-firewall-iptables> machine # [2101792.713700] machine network-addresses-eth1-start[215]: adding address 2001:db8:1::1/64... done container-test-run-user-firewall-iptables> machine # [2101792.713854] machine systemd[1]: Finished Setup wg0 dummy interface. container-test-run-user-firewall-iptables> machine # [2101792.715992] machine systemd[1]: Finished Address configuration of eth1. container-test-run-user-firewall-iptables> machine # [2101792.730358] machine systemd[1]: nscd.service: Deactivated successfully. container-test-run-user-firewall-iptables> machine # [2101792.730446] machine systemd[1]: Stopped Name Service Cache Daemon (nsncd). container-test-run-user-firewall-iptables> machine # [2101792.731532] machine systemd[1]: Starting Name Service Cache Daemon (nsncd)... container-test-run-user-firewall-iptables> machine # [2101792.753074] machine systemd[1]: Finished Extra networking commands.. container-test-run-user-firewall-iptables> machine # [2101792.753191] machine systemd[1]: Reached target Network. container-test-run-user-firewall-iptables> machine # [2101792.753580] machine systemd[1]: Starting Nginx Web Server... container-test-run-user-firewall-iptables> machine # [2101792.834046] machine nsncd[283]: Sep 28 15:06:47.257 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket" container-test-run-user-firewall-iptables> machine # [2101792.834104] machine systemd[1]: Started Name Service Cache Daemon (nsncd). container-test-run-user-firewall-iptables> machine # [2101792.834151] machine systemd[1]: Reached target Host and Network Name Lookups. container-test-run-user-firewall-iptables> machine # [2101792.834190] machine systemd[1]: Reached target User and Group Name Lookups. container-test-run-user-firewall-iptables> machine # [2101792.834683] machine systemd[1]: Starting User Login Management... container-test-run-user-firewall-iptables> machine # [2101792.834972] machine systemd[1]: Starting Permit User Sessions... container-test-run-user-firewall-iptables> machine # [2101792.859962] machine systemd[1]: Finished Permit User Sessions. container-test-run-user-firewall-iptables> machine # [2101792.860354] machine systemd[1]: Started Console Getty. container-test-run-user-firewall-iptables> machine # [2101792.860372] machine systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0 container-test-run-user-firewall-iptables> machine # [2101792.860381] machine systemd[1]: Reached target Login Prompts. container-test-run-user-firewall-iptables> router # [2101793.124141] router systemd-networkd[72]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted container-test-run-user-firewall-iptables> router # [2101793.124214] router systemd-networkd[72]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted container-test-run-user-firewall-iptables> router # [2101793.131371] router systemd-networkd[72]: lo: Link UP container-test-run-user-firewall-iptables> router # [2101793.131375] router systemd-networkd[72]: lo: Gained carrier container-test-run-user-firewall-iptables> router # [2101793.131516] router systemd-networkd[72]: eth1: Configuring with /etc/systemd/network/40-eth1.network. container-test-run-user-firewall-iptables> router # [2101793.131747] router systemd[1]: Started Network Management. container-test-run-user-firewall-iptables> router # [2101793.131791] router systemd-networkd[72]: eth1: Link UP container-test-run-user-firewall-iptables> router # [2101793.131911] router systemd-networkd[72]: eth1: Gained carrier container-test-run-user-firewall-iptables> router # [2101793.132812] router systemd[1]: Starting Enable Persistent Storage in systemd-networkd... container-test-run-user-firewall-iptables> router # [2101793.160962] router systemd[1]: Finished Enable Persistent Storage in systemd-networkd. container-test-run-user-firewall-iptables> machine # [2101793.367506] machine nginx-pre-start[312]: nginx: the configuration file /nix/store/n3w50b615wjifkkz9r85xfdkll4yxl53-nginx.conf syntax is ok container-test-run-user-firewall-iptables> machine # [2101793.367827] machine nginx-pre-start[312]: nginx: configuration file /nix/store/n3w50b615wjifkkz9r85xfdkll4yxl53-nginx.conf test is successful container-test-run-user-firewall-iptables> machine # [2101793.370801] machine systemd[1]: Started Nginx Web Server. container-test-run-user-firewall-iptables> machine # [2101793.411566] machine systemd-logind[302]: New seat seat0. container-test-run-user-firewall-iptables> machine # [2101793.412018] machine systemd[1]: Starting D-Bus System Message Bus... container-test-run-user-firewall-iptables> machine # [2101793.412066] machine systemd[1]: Started User Login Management. container-test-run-user-firewall-iptables> machine # [2101793.412358] machine systemd[1]: Starting linger-users.service... container-test-run-user-firewall-iptables> machine # [2101793.437929] machine systemd[1]: linger-users.service: Deactivated successfully. container-test-run-user-firewall-iptables> machine # [2101793.438025] machine systemd[1]: Finished linger-users.service. container-test-run-user-firewall-iptables> machine # [2101793.438124] machine systemd[1]: Reached target Multi-User System. container-test-run-user-firewall-iptables> machine # [2101793.580163] machine systemd[1]: etc-machine\x2did.mount: Deactivated successfully. container-test-run-user-firewall-iptables> machine # [2101793.616403] machine dbus-broker-launch[318]: Looking up NSS user entry for 'systemd-timesync'... container-test-run-user-firewall-iptables> machine # [2101793.616766] machine dbus-broker-launch[318]: NSS returned no entry for 'systemd-timesync' container-test-run-user-firewall-iptables> machine # [2101793.616766] machine dbus-broker-launch[318]: Invalid user-name in /nix/store/j4rbmlcs79ri8b1arp3cg9qppwb364v3-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync" container-test-run-user-firewall-iptables> machine # [2101793.616984] machine systemd[1]: Started D-Bus System Message Bus. container-test-run-user-firewall-iptables> machine # [2101793.617146] machine systemd[1]: Startup finished in 1.284s. container-test-run-user-firewall-iptables> machine # [2101793.620831] machine dbus-broker-launch[318]: Ready container-test-run-user-firewall-iptables> router # [2101793.539480] router systemd-resolved[64]: Positive Trust Anchors: container-test-run-user-firewall-iptables> router # [2101793.539486] router systemd-resolved[64]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d container-test-run-user-firewall-iptables> router # [2101793.539489] router systemd-resolved[64]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 container-test-run-user-firewall-iptables> router # [2101793.539505] router systemd-resolved[64]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test container-test-run-user-firewall-iptables> router # [2101793.550657] router systemd-resolved[64]: Using system hostname 'router'. container-test-run-user-firewall-iptables> router # [2101793.551596] router systemd[1]: Started Network Name Resolution. container-test-run-user-firewall-iptables> router # [2101793.551658] router systemd[1]: Reached target Network. container-test-run-user-firewall-iptables> router # [2101793.551704] router systemd[1]: Reached target System Initialization. container-test-run-user-firewall-iptables> router # [2101793.551746] router systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container container-test-run-user-firewall-iptables> router # [2101793.551765] router systemd[1]: Started Daily Cleanup of Temporary Directories. container-test-run-user-firewall-iptables> router # [2101793.551777] router systemd[1]: Reached target Timer Units. container-test-run-user-firewall-iptables> router # [2101793.551878] router systemd[1]: Listening on D-Bus System Message Bus Socket. container-test-run-user-firewall-iptables> router # [2101793.551967] router systemd[1]: Listening on Nix Daemon Socket. container-test-run-user-firewall-iptables> router # [2101793.552059] router systemd[1]: Listening on Virtual Machine and Container Registration Service Socket. container-test-run-user-firewall-iptables> router # [2101793.552074] router systemd[1]: Reached target Socket Units. container-test-run-user-firewall-iptables> router # [2101793.552100] router systemd[1]: Reached target Basic System. container-test-run-user-firewall-iptables> router # [2101793.552734] router systemd[1]: Starting Import lastlog data into lastlog2 database... container-test-run-user-firewall-iptables> router # [2101793.553155] router systemd[1]: Starting Nginx Web Server... container-test-run-user-firewall-iptables> router # [2101793.553506] router systemd[1]: Starting Name Service Cache Daemon (nsncd)... container-test-run-user-firewall-iptables> router # [2101793.554093] router systemd[1]: Starting D-Bus System Message Bus... container-test-run-user-firewall-iptables> router # [2101793.579946] router systemd[1]: etc-machine\x2did.mount: Deactivated successfully. container-test-run-user-firewall-iptables> router # [2101793.587837] router systemd[1]: Finished Import lastlog data into lastlog2 database. container-test-run-user-firewall-iptables> router # [2101793.676304] router nsncd[87]: Sep 28 15:06:48.099 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket" container-test-run-user-firewall-iptables> router # [2101793.676339] router systemd[1]: Started Name Service Cache Daemon (nsncd). container-test-run-user-firewall-iptables> router # [2101793.676377] router systemd[1]: Reached target Host and Network Name Lookups. container-test-run-user-firewall-iptables> router # [2101793.676411] router systemd[1]: Reached target User and Group Name Lookups. container-test-run-user-firewall-iptables> router # [2101793.676981] router systemd[1]: Starting User Login Management... container-test-run-user-firewall-iptables> router # [2101793.677376] router systemd[1]: Starting Permit User Sessions... container-test-run-user-firewall-iptables> router # [2101793.703132] router systemd[1]: Finished Permit User Sessions. container-test-run-user-firewall-iptables> router # [2101793.703517] router systemd[1]: Started Console Getty. container-test-run-user-firewall-iptables> router # [2101793.703535] router systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0 container-test-run-user-firewall-iptables> router # [2101793.703543] router systemd[1]: Reached target Login Prompts. container-test-run-user-firewall-iptables> router # [2101793.774375] router dbus-broker-launch[88]: Looking up NSS user entry for 'systemd-timesync'... container-test-run-user-firewall-iptables> router # [2101793.774908] router dbus-broker-launch[88]: NSS returned no entry for 'systemd-timesync' container-test-run-user-firewall-iptables> router # [2101793.774908] router dbus-broker-launch[88]: Invalid user-name in /nix/store/md88dwyvb0nscqqpcyx7s8mmkkp9fyig-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync" container-test-run-user-firewall-iptables> router # [2101793.775248] router systemd[1]: Started D-Bus System Message Bus. container-test-run-user-firewall-iptables> router # [2101793.778583] router dbus-broker-launch[88]: Ready container-test-run-user-firewall-iptables> router # [2101794.171162] router nginx-pre-start[117]: nginx: the configuration file /nix/store/8mrzgrzk6knndbhk2fmr3ymrj4ylmfnc-nginx.conf syntax is ok container-test-run-user-firewall-iptables> router # [2101794.171552] router nginx-pre-start[117]: nginx: configuration file /nix/store/8mrzgrzk6knndbhk2fmr3ymrj4ylmfnc-nginx.conf test is successful container-test-run-user-firewall-iptables> router # [2101794.173676] router systemd[1]: Started Nginx Web Server. container-test-run-user-firewall-iptables> router # [2101794.227981] router systemd-logind[106]: New seat seat0. container-test-run-user-firewall-iptables> router # [2101794.228097] router systemd[1]: Started User Login Management. container-test-run-user-firewall-iptables> router # [2101794.228906] router systemd[1]: Starting linger-users.service... container-test-run-user-firewall-iptables> router # [2101794.256676] router systemd[1]: linger-users.service: Deactivated successfully. container-test-run-user-firewall-iptables> router # [2101794.256791] router systemd[1]: Finished linger-users.service. container-test-run-user-firewall-iptables> router # [2101794.257301] router systemd[1]: Reached target Multi-User System. container-test-run-user-firewall-iptables> router # [2101794.257388] router systemd[1]: Startup finished in 1.927s. container-test-run-user-firewall-iptables> router: (finished: waiting for unit multi-user.target, in 2.64 seconds) container-test-run-user-firewall-iptables> router: waiting for unit nginx.service container-test-run-user-firewall-iptables> router: (finished: waiting for unit nginx.service, in 0.01 seconds) container-test-run-user-firewall-iptables> machine: waiting for unit multi-user.target container-test-run-user-firewall-iptables> machine: (finished: waiting for unit multi-user.target, in 0.01 seconds) container-test-run-user-firewall-iptables> machine: waiting for unit nginx.service container-test-run-user-firewall-iptables> machine: (finished: waiting for unit nginx.service, in 0.01 seconds) container-test-run-user-firewall-iptables> router: must succeed: ip -4 addr show eth1 | grep -oP '(?<=inet\s)\d+(\.\d+){3}' container-test-run-user-firewall-iptables> router: (finished: must succeed: ip -4 addr show eth1 | grep -oP '(?<=inet\s)\d+(\.\d+){3}', in 0.00 seconds) container-test-run-user-firewall-iptables> router: must succeed: ip -6 addr show eth1 | grep -oP '(?<=inet6\s)[0-9a-f:]+' | grep -v '^fe80' | head -1 container-test-run-user-firewall-iptables> router: (finished: must succeed: ip -6 addr show eth1 | grep -oP '(?<=inet6\s)[0-9a-f:]+' | grep -v '^fe80' | head -1, in 0.00 seconds) container-test-run-user-firewall-iptables> Router IPv4: 192.168.1.2 container-test-run-user-firewall-iptables> Router IPv6: 2001:db8:1::2 container-test-run-user-firewall-iptables> machine: must succeed: systemctl restart firewall container-test-run-user-firewall-iptables> router # [2101794.752073] router systemd-networkd[72]: eth1: Gained IPv6LL container-test-run-user-firewall-iptables> machine # [2101794.774974] machine systemd[1]: Stopping Firewall... container-test-run-user-firewall-iptables> machine # [2101794.994491] machine systemd[1]: firewall.service: Deactivated successfully. container-test-run-user-firewall-iptables> machine # [2101794.994618] machine systemd[1]: Stopped Firewall. container-test-run-user-firewall-iptables> machine # [2101794.995744] machine systemd[1]: Starting Firewall... container-test-run-user-firewall-iptables> machine: (finished: must succeed: systemctl restart firewall, in 0.74 seconds) container-test-run-user-firewall-iptables> machine: waiting for unit firewall.service container-test-run-user-firewall-iptables> machine: (finished: waiting for unit firewall.service, in 0.01 seconds) container-test-run-user-firewall-iptables> machine: must succeed: iptables -L user-firewall-output >&2 container-test-run-user-firewall-iptables> Chain user-firewall-output (1 references) container-test-run-user-firewall-iptables> target prot opt source destination container-test-run-user-firewall-iptables> RETURN all -- anywhere anywhere container-test-run-user-firewall-iptables> RETURN all -- anywhere anywhere container-test-run-user-firewall-iptables> RETURN all -- anywhere anywhere container-test-run-user-firewall-iptables> RETURN all -- anywhere anywhere container-test-run-user-firewall-iptables> RETURN all -- anywhere anywhere container-test-run-user-firewall-iptables> RETURN all -- anywhere anywhere container-test-run-user-firewall-iptables> RETURN all -- anywhere anywhere container-test-run-user-firewall-iptables> RETURN all -- anywhere anywhere container-test-run-user-firewall-iptables> RETURN all -- anywhere anywhere container-test-run-user-firewall-iptables> RETURN all -- anywhere anywhere container-test-run-user-firewall-iptables> RETURN all -- anywhere anywhere container-test-run-user-firewall-iptables> RETURN all -- anywhere anywhere container-test-run-user-firewall-iptables> RETURN all -- anywhere anywhere container-test-run-user-firewall-iptables> RETURN all -- anywhere anywhere container-test-run-user-firewall-iptables> RETURN all -- anywhere anywhere container-test-run-user-firewall-iptables> REJECT all -- anywhere anywhere owner UID match bob reject-with icmp-port-unreachable container-test-run-user-firewall-iptables> RETURN all -- anywhere anywhere container-test-run-user-firewall-iptables> machine: (finished: must succeed: iptables -L user-firewall-output >&2, in 0.00 seconds) container-test-run-user-firewall-iptables> machine: waiting for success: runuser -u alice -- curl -s http://127.0.0.1:8080 container-test-run-user-firewall-iptables> machine: (finished: waiting for success: runuser -u alice -- curl -s http://127.0.0.1:8080, in 0.01 seconds) container-test-run-user-firewall-iptables> machine: must succeed: runuser -u alice -- curl -s http://192.168.1.2 container-test-run-user-firewall-iptables> machine: (finished: must succeed: runuser -u alice -- curl -s http://192.168.1.2, in 0.01 seconds) container-test-run-user-firewall-iptables> machine: must succeed: runuser -u alice -- curl -s http://[2001:db8:1::2] container-test-run-user-firewall-iptables> machine: (finished: must succeed: runuser -u alice -- curl -s http://[2001:db8:1::2], in 0.01 seconds) container-test-run-user-firewall-iptables> machine: must succeed: runuser -u bob -- curl -s http://127.0.0.1:8080 container-test-run-user-firewall-iptables> machine: (finished: must succeed: runuser -u bob -- curl -s http://127.0.0.1:8080, in 0.01 seconds) container-test-run-user-firewall-iptables> machine: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://192.168.1.2 2>&1 || echo 'EXIT_CODE='$? container-test-run-user-firewall-iptables> machine: (finished: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://192.168.1.2 2>&1 || echo 'EXIT_CODE='$?, in 0.01 seconds) container-test-run-user-firewall-iptables> machine: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://[2001:db8:1::2] 2>&1 || echo 'EXIT_CODE='$? container-test-run-user-firewall-iptables> machine # [2101795.505949] machine systemd[1]: Finished Firewall. container-test-run-user-firewall-iptables> machine # [2101795.520258] machine runuser[475]: pam_unix(runuser:session): session opened for user alice(uid=1001) by (uid=0) container-test-run-user-firewall-iptables> machine # [2101795.525352] machine runuser[475]: pam_unix(runuser:session): session closed for user alice container-test-run-user-firewall-iptables> machine # [2101795.529604] machine runuser[477]: pam_unix(runuser:session): session opened for user alice(uid=1001) by (uid=0) container-test-run-user-firewall-iptables> machine # [2101795.534686] machine runuser[477]: pam_unix(runuser:session): session closed for user alice container-test-run-user-firewall-iptables> machine # [2101795.539163] machine runuser[479]: pam_unix(runuser:session): session opened for user alice(uid=1001) by (uid=0) container-test-run-user-firewall-iptables> machine # [2101795.544009] machine runuser[479]: pam_unix(runuser:session): session closed for user alice container-test-run-user-firewall-iptables> machine # [2101795.548522] machine runuser[481]: pam_unix(runuser:session): session opened for user bob(uid=1002) by (uid=0) container-test-run-user-firewall-iptables> machine # [2101795.553183] machine runuser[481]: pam_unix(runuser:session): session closed for user bob container-test-run-user-firewall-iptables> machine # [2101795.557600] machine runuser[484]: pam_unix(runuser:session): session opened for user bob(uid=1002) by (uid=0) container-test-run-user-firewall-iptables> machine # [2101795.562277] machine runuser[484]: pam_unix(runuser:session): session closed for user bob container-test-run-user-firewall-iptables> machine # [2101795.566878] machine runuser[487]: pam_unix(runuser:session): session opened for user bob(uid=1002) by (uid=0) container-test-run-user-firewall-iptables> machine: (finished: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://[2001:db8:1::2] 2>&1 || echo 'EXIT_CODE='$?, in 1.05 seconds) container-test-run-user-firewall-iptables> machine: must succeed: iptables -L user-firewall-output -n -v container-test-run-user-firewall-iptables> machine: (finished: must succeed: iptables -L user-firewall-output -n -v, in 0.00 seconds) container-test-run-user-firewall-iptables> machine: must succeed: ip6tables -L user-firewall-output -n -v container-test-run-user-firewall-iptables> machine: (finished: must succeed: ip6tables -L user-firewall-output -n -v, in 0.00 seconds) container-test-run-user-firewall-iptables> machine: waiting for unit setup-wg0-interface.service container-test-run-user-firewall-iptables> machine: (finished: waiting for unit setup-wg0-interface.service, in 0.01 seconds) container-test-run-user-firewall-iptables> machine: waiting for unit nginx.service container-test-run-user-firewall-iptables> machine: (finished: waiting for unit nginx.service, in 0.01 seconds) container-test-run-user-firewall-iptables> machine: waiting for TCP port 8081 on 10.100.0.2 container-test-run-user-firewall-iptables> Connection to 10.100.0.2 8081 port [tcp/sunproxyadmin] succeeded! container-test-run-user-firewall-iptables> machine: (finished: waiting for TCP port 8081 on 10.100.0.2, in 0.00 seconds) container-test-run-user-firewall-iptables> machine: must succeed: ip link show wg0 container-test-run-user-firewall-iptables> machine: (finished: must succeed: ip link show wg0, in 0.00 seconds) container-test-run-user-firewall-iptables> machine: must succeed: ip addr show wg0 container-test-run-user-firewall-iptables> machine: (finished: must succeed: ip addr show wg0, in 0.00 seconds) container-test-run-user-firewall-iptables> machine: must succeed: runuser -u alice -- curl -s --interface wg0 http://10.100.0.2:8081/ container-test-run-user-firewall-iptables> machine: (finished: must succeed: runuser -u alice -- curl -s --interface wg0 http://10.100.0.2:8081/, in 0.01 seconds) container-test-run-user-firewall-iptables> machine: must succeed: runuser -u alice -- curl -s --interface wg0 http://[fd00::2]:8081/ container-test-run-user-firewall-iptables> machine: (finished: must succeed: runuser -u alice -- curl -s --interface wg0 http://[fd00::2]:8081/, in 0.01 seconds) container-test-run-user-firewall-iptables> machine: must succeed: runuser -u bob -- curl -s --interface wg0 http://10.100.0.2:8081/ container-test-run-user-firewall-iptables> machine: (finished: must succeed: runuser -u bob -- curl -s --interface wg0 http://10.100.0.2:8081/, in 0.01 seconds) container-test-run-user-firewall-iptables> machine: must succeed: runuser -u bob -- curl -s --interface wg0 http://[fd00::2]:8081/ container-test-run-user-firewall-iptables> machine: (finished: must succeed: runuser -u bob -- curl -s --interface wg0 http://[fd00::2]:8081/, in 0.01 seconds) container-test-run-user-firewall-iptables> machine: must succeed: iptables -L user-firewall-output -n -v | grep -E 'wg0|wg\+' >&2 container-test-run-user-firewall-iptables> 0 0 RETURN all -- * wg+ 0.0.0.0/0 0.0.0.0/0 container-test-run-user-firewall-iptables> machine: (finished: must succeed: iptables -L user-firewall-output -n -v | grep -E 'wg0|wg\+' >&2, in 0.00 seconds) container-test-run-user-firewall-iptables> (finished: run the VM test script, in 4.59 seconds) container-test-run-user-firewall-iptables> test script finished in 4.60s container-test-run-user-firewall-iptables> cleanup container-test-run-user-firewall-iptables> kill NspawnMachine (pid 53) container-test-run-user-firewall-iptables> kill NspawnMachine (pid 52) container-test-run-user-firewall-iptables> Container machine terminated by signal KILL. container-test-run-user-firewall-iptables> Container router terminated by signal KILL. container-test-run-user-firewall-iptables> (finished: cleanup, in 0.14 seconds)