don't know how to build these paths:
  /nix/store/5s7fzhk7zyshyblf613dhckqlp9i8gji-container-test-run-certificates.drv
warning: ignoring the client-specified setting 'store', because it is a restricted setting and you are not a trusted user
building '/nix/store/x2f2kdiwrbcj4y5kafj04hjmzx97b9j0-nix.conf.drv' on nix-store.geninf.io:50051
nix.conf> attached to the build already running on this worker
nix.conf> build01: building x2f2kdiwrbcj4y5kafj04hjmzx97b9j0-nix.conf.drv
nix.conf> structuredAttrs is enabled
nix.conf> Validating generated nix.conf
building '/nix/store/6llksvpwxqqdjh4lcn1kjlnzdh62acn3-string-hosts.drv' on nix-store.geninf.io:50051
string-hosts> build01: building 6llksvpwxqqdjh4lcn1kjlnzdh62acn3-string-hosts.drv
string-hosts> structuredAttrs is enabled
building '/nix/store/xr6hjnvxmbjv3irmjw1mrjzlpyfd9lpr-unit-acme-account-d22a46d9459bf683a338.target.drv' on nix-store.geninf.io:50051
unit-acme-account-d22a46d9459bf683a338.target> build01: building xr6hjnvxmbjv3irmjw1mrjzlpyfd9lpr-unit-acme-account-d22a46d9459bf683a338.target.drv
unit-acme-account-d22a46d9459bf683a338.target> structuredAttrs is enabled
building '/nix/store/7sfxpxzv2fhjxwbwcq8gihdvq5bwdi3j-extra-hosts.drv' on nix-store.geninf.io:50051
extra-hosts> build01: building 7sfxpxzv2fhjxwbwcq8gihdvq5bwdi3j-extra-hosts.drv
extra-hosts> structuredAttrs is enabled
building '/nix/store/a5xvjdqwh582sa2qyqwx7h79nqd5vyf3-unit-acme-renew-test.foo.timer.drv' on nix-store.geninf.io:50051
unit-acme-renew-test.foo.timer> build01: building a5xvjdqwh582sa2qyqwx7h79nqd5vyf3-unit-acme-renew-test.foo.timer.drv
unit-acme-renew-test.foo.timer> structuredAttrs is enabled
building '/nix/store/f84az0vccpsbn4rf397p53hvgk6c78pp-acme-setup-privileged.drv' on nix-store.geninf.io:50051
acme-setup-privileged> build01: building f84az0vccpsbn4rf397p53hvgk6c78pp-acme-setup-privileged.drv
building '/nix/store/qd0jd51z6jqf1nah2gbnxp3rhzsdkiqx-acme-postrun.drv' on nix-store.geninf.io:50051
acme-postrun> build01: building qd0jd51z6jqf1nah2gbnxp3rhzsdkiqx-acme-postrun.drv
acme-setup-privileged> structuredAttrs is enabled
acme-postrun> structuredAttrs is enabled
building '/nix/store/3xz6acpnpxaij33nxbv5psy05d1rzm7l-firewall-start.drv' on nix-store.geninf.io:50051
firewall-start> build01: building 3xz6acpnpxaij33nxbv5psy05d1rzm7l-firewall-start.drv
firewall-start> structuredAttrs is enabled
building '/nix/store/kk3wn68wm1xm6byb3qinxihnc8x3amkd-users-groups.json.drv' on nix-store.geninf.io:50051
users-groups.json> build01: building kk3wn68wm1xm6byb3qinxihnc8x3amkd-users-groups.json.drv
users-groups.json> structuredAttrs is enabled
building '/nix/store/l9g9037ky77f2y19f4iinyhnvl5x7bkm-X-Reload-Triggers-systemd-networkd.drv' on nix-store.geninf.io:50051
X-Reload-Triggers-systemd-networkd> build01: building l9g9037ky77f2y19f4iinyhnvl5x7bkm-X-Reload-Triggers-systemd-networkd.drv
X-Reload-Triggers-systemd-networkd> structuredAttrs is enabled
building '/nix/store/pdxvsic27pwf7ag4agb12znj50pzlxli-unit-acme-account-2c44cb477b4787b2cf13.target.drv' on nix-store.geninf.io:50051
unit-acme-account-2c44cb477b4787b2cf13.target> build01: building pdxvsic27pwf7ag4agb12znj50pzlxli-unit-acme-account-2c44cb477b4787b2cf13.target.drv
unit-acme-account-2c44cb477b4787b2cf13.target> structuredAttrs is enabled
building '/nix/store/j53pyw0y04w2dq491rifxxi8c0czl5qf-vars-check-certificates.drv' on nix-store.geninf.io:50051
vars-check-certificates> build01: building j53pyw0y04w2dq491rifxxi8c0czl5qf-vars-check-certificates.drv
vars-check-certificates> Running vars check using Nix-based executor...
vars-check-certificates> ✓ All vars checks completed successfully
building '/nix/store/5sqkyqvn854h27if359pgjc33cxhfc5s-unit-acme-renew-ca.foo.timer.drv' on nix-store.geninf.io:50051
unit-acme-renew-ca.foo.timer> build01: building 5sqkyqvn854h27if359pgjc33cxhfc5s-unit-acme-renew-ca.foo.timer.drv
unit-acme-renew-ca.foo.timer> structuredAttrs is enabled
building '/nix/store/3bi2iz5pi15m28mbnk59qgbnbzzmk9bp-test-script.drv' on nix-store.geninf.io:50051
test-script> build01: building 3bi2iz5pi15m28mbnk59qgbnbzzmk9bp-test-script.drv
test-script> structuredAttrs is enabled
building '/nix/store/zvknz8w917hr5pdcbqcniyd84viq6aik-string-hosts.drv' on nix-store.geninf.io:50051
string-hosts> build01: building zvknz8w917hr5pdcbqcniyd84viq6aik-string-hosts.drv
string-hosts> structuredAttrs is enabled
building '/nix/store/52vq80rk7mrlfaj66b97g26wi03zswpb-users-groups.json.drv' on nix-store.geninf.io:50051
users-groups.json> build01: building 52vq80rk7mrlfaj66b97g26wi03zswpb-users-groups.json.drv
users-groups.json> structuredAttrs is enabled
building '/nix/store/ywci2hgdaa3zrixlycn9ramf42ci9g9g-acme-setup-privileged.drv' on nix-store.geninf.io:50051
acme-setup-privileged> build01: building ywci2hgdaa3zrixlycn9ramf42ci9g9g-acme-setup-privileged.drv
acme-setup-privileged> structuredAttrs is enabled
building '/nix/store/3h201hxb1ccs41d94a8vfkw24lg4y5lx-etc-hostname.drv' on nix-store.geninf.io:50051
etc-hostname> build01: building 3h201hxb1ccs41d94a8vfkw24lg4y5lx-etc-hostname.drv
etc-hostname> structuredAttrs is enabled
building '/nix/store/gpgjmw83yrvk5fi3i7zgk41mdymfwjwv-nginx.conf.drv' on nix-store.geninf.io:50051
nginx.conf> build01: building gpgjmw83yrvk5fi3i7zgk41mdymfwjwv-nginx.conf.drv
nginx.conf> structuredAttrs is enabled
building '/nix/store/z3az1vk2bq94cnfzm9jckvgglzl5pqmj-unit-script-acme-order-renew-test.foo-start.drv' on nix-store.geninf.io:50051
unit-script-acme-order-renew-test.foo-start> build01: building z3az1vk2bq94cnfzm9jckvgglzl5pqmj-unit-script-acme-order-renew-test.foo-start.drv
unit-script-acme-order-renew-test.foo-start> structuredAttrs is enabled
nginx.conf> 
nginx.conf> ==================== Results ===================
nginx.conf> No issues found.
nginx.conf> 
nginx.conf> ==================== Summary ===================
nginx.conf> Total issues:
nginx.conf>     Unspecified: 0
nginx.conf>     Low: 0
nginx.conf>     Medium: 0
nginx.conf>     High: 0
nginx.conf> 
building '/nix/store/hf06pf4zkhqz580l3wwng59riw8i177d-ca.json.drv' on nix-store.geninf.io:50051
ca.json> build01: building hf06pf4zkhqz580l3wwng59riw8i177d-ca.json.drv
ca.json> structuredAttrs is enabled
building '/nix/store/flnly690v1k7cg61hn76nhchznxy4x33-acme-postrun.drv' on nix-store.geninf.io:50051
acme-postrun> build01: building flnly690v1k7cg61hn76nhchznxy4x33-acme-postrun.drv
acme-postrun> structuredAttrs is enabled
building '/nix/store/kfg15k76km9f3xnwy1kpn02949zsjx9d-nginx.conf.drv' on nix-store.geninf.io:50051
nginx.conf> build01: building kfg15k76km9f3xnwy1kpn02949zsjx9d-nginx.conf.drv
nginx.conf> structuredAttrs is enabled
nginx.conf> 
nginx.conf> ==================== Results ===================
nginx.conf> No issues found.
nginx.conf> 
nginx.conf> ==================== Summary ===================
nginx.conf> Total issues:
nginx.conf>     Unspecified: 0
nginx.conf>     Low: 0
nginx.conf>     Medium: 0
nginx.conf>     High: 0
nginx.conf> 
building '/nix/store/lq0xm0ki49zgnwbx14pi3zkc8bsh97sz-unit-script-acme-ca.foo-start.drv' on nix-store.geninf.io:50051
unit-script-acme-ca.foo-start> build01: building lq0xm0ki49zgnwbx14pi3zkc8bsh97sz-unit-script-acme-ca.foo-start.drv
unit-script-acme-ca.foo-start> structuredAttrs is enabled
building '/nix/store/igfl2qm3mzw6sy01fighszdd7rybd018-unit-script-acme-order-renew-ca.foo-start.drv' on nix-store.geninf.io:50051
unit-script-acme-order-renew-ca.foo-start> build01: building igfl2qm3mzw6sy01fighszdd7rybd018-unit-script-acme-order-renew-ca.foo-start.drv
unit-script-acme-order-renew-ca.foo-start> structuredAttrs is enabled
vpn79ifdbiqkcx7llmxmpfmsx39j7v2c-X-Restart-Triggers-nix-daemon.drv: build01: not scheduled here: vpn79ifdbiqkcx7llmxmpfmsx39j7v2c-X-Restart-Triggers-nix-daemon.drv, asking the scheduler again
building '/nix/store/4l0483k2dngia4hcl0x2qak2jlbjvrfd-hosts.drv' on nix-store.geninf.io:50051
hosts> build01: building 4l0483k2dngia4hcl0x2qak2jlbjvrfd-hosts.drv
2jm86acd09z4725j6arf9dp9xy0fz6pk-X-Restart-Triggers-acme-test.foo.drv: build01: not scheduled here: 2jm86acd09z4725j6arf9dp9xy0fz6pk-X-Restart-Triggers-acme-test.foo.drv, asking the scheduler again
building '/nix/store/3cflf6vlig26qqdjfws39k8snpg3zyvh-hosts.drv' on nix-store.geninf.io:50051
hosts> build01: building 3cflf6vlig26qqdjfws39k8snpg3zyvh-hosts.drv
5cm5yzp0wamflql15brfq1gkwhghpx6l-nss-cacert-3.126.drv: build01: not scheduled here: 5cm5yzp0wamflql15brfq1gkwhghpx6l-nss-cacert-3.126.drv, asking the scheduler again
wbw4d6cpg5krmxhpinjvp1ga1z8yzms3-unit-script-acme-test.foo-start.drv: build01: not scheduled here: wbw4d6cpg5krmxhpinjvp1ga1z8yzms3-unit-script-acme-test.foo-start.drv, asking the scheduler again
building '/nix/store/rjrgljl4p1pp6wy2bqnfs6y4vp35pivn-hosts.drv' on nix-store.geninf.io:50051
hosts> build01: building rjrgljl4p1pp6wy2bqnfs6y4vp35pivn-hosts.drv
building '/nix/store/7lrrjkjzivqhhqilq059bhf0znj4vl76-X-Restart-Triggers-step-ca.drv' on nix-store.geninf.io:50051
X-Restart-Triggers-step-ca> build01: building 7lrrjkjzivqhhqilq059bhf0znj4vl76-X-Restart-Triggers-step-ca.drv
X-Restart-Triggers-step-ca> structuredAttrs is enabled
sb7s2x4bq07q6hcf9fxgsmkj480hlq5b-X-Restart-Triggers-acme-ca.foo.drv: build01: not scheduled here: sb7s2x4bq07q6hcf9fxgsmkj480hlq5b-X-Restart-Triggers-acme-ca.foo.drv, asking the scheduler again
building '/nix/store/czb9kz0wwzccp5gypw1raawpakla8wvs-unit-script-nginx-pre-start.drv' on nix-store.geninf.io:50051
unit-script-nginx-pre-start> build01: building czb9kz0wwzccp5gypw1raawpakla8wvs-unit-script-nginx-pre-start.drv
unit-script-nginx-pre-start> structuredAttrs is enabled
j4l8g43fp5ni87k1n1w5g5wp57akf04n-firewall-reload.drv: build01: not scheduled here: j4l8g43fp5ni87k1n1w5g5wp57akf04n-firewall-reload.drv, asking the scheduler again
building '/nix/store/2jm86acd09z4725j6arf9dp9xy0fz6pk-X-Restart-Triggers-acme-test.foo.drv' on nix-store.geninf.io:50051
X-Restart-Triggers-acme-test.foo> build01: building 2jm86acd09z4725j6arf9dp9xy0fz6pk-X-Restart-Triggers-acme-test.foo.drv
X-Restart-Triggers-acme-test.foo> structuredAttrs is enabled
hsi44zf9rpj816a33yczfd0q82kkrn3a-decrypt-age-secrets.drv: build01: not scheduled here: hsi44zf9rpj816a33yczfd0q82kkrn3a-decrypt-age-secrets.drv, asking the scheduler again
building '/nix/store/wbw4d6cpg5krmxhpinjvp1ga1z8yzms3-unit-script-acme-test.foo-start.drv' on nix-store.geninf.io:50051
unit-script-acme-test.foo-start> build01: building wbw4d6cpg5krmxhpinjvp1ga1z8yzms3-unit-script-acme-test.foo-start.drv
unit-script-acme-test.foo-start> structuredAttrs is enabled
building '/nix/store/5cm5yzp0wamflql15brfq1gkwhghpx6l-nss-cacert-3.126.drv' on nix-store.geninf.io:50051
nss-cacert-3.126> build01: building 5cm5yzp0wamflql15brfq1gkwhghpx6l-nss-cacert-3.126.drv
nss-cacert-3.126> structuredAttrs is enabled
nss-cacert-3.126> Running phase: unpackPhase
nss-cacert-3.126> Running phase: patchPhase
nss-cacert-3.126> Running phase: updateAutotoolsGnuConfigScriptsPhase
nss-cacert-3.126> Running phase: configurePhase
nss-cacert-3.126> no configure script, doing nothing
nss-cacert-3.126> Running phase: buildPhase
nss-cacert-3.126> Running phase: installPhase
nss-cacert-3.126> Running phase: fixupPhase
nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/p27iryvpaqpsnh87dx84m1xmqm3iaksf-nss-cacert-3.126-p11kit
nss-cacert-3.126> checking for references to /build/ in /nix/store/p27iryvpaqpsnh87dx84m1xmqm3iaksf-nss-cacert-3.126-p11kit...
nss-cacert-3.126> patching script interpreter paths in /nix/store/p27iryvpaqpsnh87dx84m1xmqm3iaksf-nss-cacert-3.126-p11kit
nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/rhsw520imxvffbcfxfbwa9f2ndsw39jb-nss-cacert-3.126-hashed
nss-cacert-3.126> checking for references to /build/ in /nix/store/rhsw520imxvffbcfxfbwa9f2ndsw39jb-nss-cacert-3.126-hashed...
nss-cacert-3.126> patching script interpreter paths in /nix/store/rhsw520imxvffbcfxfbwa9f2ndsw39jb-nss-cacert-3.126-hashed
nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/zzcg63ldbpl460ggv6m7x4v70jcdq28h-nss-cacert-3.126
nss-cacert-3.126> checking for references to /build/ in /nix/store/zzcg63ldbpl460ggv6m7x4v70jcdq28h-nss-cacert-3.126...
nss-cacert-3.126> patching script interpreter paths in /nix/store/zzcg63ldbpl460ggv6m7x4v70jcdq28h-nss-cacert-3.126
nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/kb3vf67zd2vwhpnzlcnc8kbwsy4wc6d1-nss-cacert-3.126-unbundled
nss-cacert-3.126> checking for references to /build/ in /nix/store/kb3vf67zd2vwhpnzlcnc8kbwsy4wc6d1-nss-cacert-3.126-unbundled...
nss-cacert-3.126> patching script interpreter paths in /nix/store/kb3vf67zd2vwhpnzlcnc8kbwsy4wc6d1-nss-cacert-3.126-unbundled
58n5r0k6lsdzi8bkvhjqmhv515vyy1yg-unit-systemd-networkd.service.drv: build01: not scheduled here: 58n5r0k6lsdzi8bkvhjqmhv515vyy1yg-unit-systemd-networkd.service.drv, asking the scheduler again
qkz8fkj261hmlxydi46swkm5hjc468cy-unit-generate-shutdown-ramfs.service.drv: build01: not scheduled here: qkz8fkj261hmlxydi46swkm5hjc468cy-unit-generate-shutdown-ramfs.service.drv, asking the scheduler again
building '/nix/store/08i9gwvi1kb0c8br9bqd0bf86x0kk0hz-unit-script-nginx-pre-start.drv' on nix-store.geninf.io:50051
unit-script-nginx-pre-start> build01: building 08i9gwvi1kb0c8br9bqd0bf86x0kk0hz-unit-script-nginx-pre-start.drv
unit-script-nginx-pre-start> structuredAttrs is enabled
building '/nix/store/sb7s2x4bq07q6hcf9fxgsmkj480hlq5b-X-Restart-Triggers-acme-ca.foo.drv' on nix-store.geninf.io:50051
X-Restart-Triggers-acme-ca.foo> build01: building sb7s2x4bq07q6hcf9fxgsmkj480hlq5b-X-Restart-Triggers-acme-ca.foo.drv
X-Restart-Triggers-acme-ca.foo> structuredAttrs is enabled
rsi990y7mrwf5kxyj3imn48y9777ip12-decrypt-age-secrets.drv: build01: not scheduled here: rsi990y7mrwf5kxyj3imn48y9777ip12-decrypt-age-secrets.drv, asking the scheduler again
fg70hzypwrlgpb9vqiqhfcmbmjbcy1rs-unit-systemd-networkd.service.drv: build01: not scheduled here: fg70hzypwrlgpb9vqiqhfcmbmjbcy1rs-unit-systemd-networkd.service.drv, asking the scheduler again
building '/nix/store/047gxvn806m35vajz3hj5i26jqw4ww2b-dry-activate.drv' on nix-store.geninf.io:50051
dry-activate> attached to the build already running on this worker
dry-activate> build01: building 047gxvn806m35vajz3hj5i26jqw4ww2b-dry-activate.drv
dry-activate> structuredAttrs is enabled
cd742sljzkwz440kjjplvkr7xzzlyvr6-user-generators.drv: build01: not scheduled here: cd742sljzkwz440kjjplvkr7xzzlyvr6-user-generators.drv, asking the scheduler again
1hlnyy464144ml7421q6f39gnrsdnlrz-system-path.drv: build01: not scheduled here: 1hlnyy464144ml7421q6f39gnrsdnlrz-system-path.drv, asking the scheduler again
building '/nix/store/rsi990y7mrwf5kxyj3imn48y9777ip12-decrypt-age-secrets.drv' on nix-store.geninf.io:50051
decrypt-age-secrets> build01: building rsi990y7mrwf5kxyj3imn48y9777ip12-decrypt-age-secrets.drv
decrypt-age-secrets> structuredAttrs is enabled
4ikq4nkhp03yp05qid9bwl5jm0gxykna-system-path.drv: build01: not scheduled here: 4ikq4nkhp03yp05qid9bwl5jm0gxykna-system-path.drv, asking the scheduler again
building '/nix/store/hai60s2rq9zv8cardz2p7z0pn1xr9jsz-tmpfiles.d.drv' on nix-store.geninf.io:50051
tmpfiles.d> attached to the build already running on this worker
tmpfiles.d> build01: building hai60s2rq9zv8cardz2p7z0pn1xr9jsz-tmpfiles.d.drv
1zpaybwfmsmx8azhp9n8hp8az7zfsdbz-unit-nginx-config-reload.service.drv: build01: not scheduled here: 1zpaybwfmsmx8azhp9n8hp8az7zfsdbz-unit-nginx-config-reload.service.drv, asking the scheduler again
ffa9l34yscw0v4jjlqfsl0nwq42pww58-system-shutdown.drv: build01: not scheduled here: ffa9l34yscw0v4jjlqfsl0nwq42pww58-system-shutdown.drv, asking the scheduler again
building '/nix/store/cd742sljzkwz440kjjplvkr7xzzlyvr6-user-generators.drv' on nix-store.geninf.io:50051
user-generators> build01: building cd742sljzkwz440kjjplvkr7xzzlyvr6-user-generators.drv
building '/nix/store/1hlnyy464144ml7421q6f39gnrsdnlrz-system-path.drv' on nix-store.geninf.io:50051
system-path> build01: building 1hlnyy464144ml7421q6f39gnrsdnlrz-system-path.drv
system-path> structuredAttrs is enabled
system-path> created 1716 symlinks in user environment
3am8g61dsszjr3f4zc8njx8xcaisfvv0-system-path.drv: build01: not scheduled here: 3am8g61dsszjr3f4zc8njx8xcaisfvv0-system-path.drv, asking the scheduler again
building '/nix/store/4ikq4nkhp03yp05qid9bwl5jm0gxykna-system-path.drv' on nix-store.geninf.io:50051
system-path> build01: building 4ikq4nkhp03yp05qid9bwl5jm0gxykna-system-path.drv
system-path> structuredAttrs is enabled
system-path> created 1716 symlinks in user environment
building '/nix/store/1zpaybwfmsmx8azhp9n8hp8az7zfsdbz-unit-nginx-config-reload.service.drv' on nix-store.geninf.io:50051
unit-nginx-config-reload.service> build01: building 1zpaybwfmsmx8azhp9n8hp8az7zfsdbz-unit-nginx-config-reload.service.drv
unit-nginx-config-reload.service> structuredAttrs is enabled
building '/nix/store/ffa9l34yscw0v4jjlqfsl0nwq42pww58-system-shutdown.drv' on nix-store.geninf.io:50051
system-shutdown> build01: building ffa9l34yscw0v4jjlqfsl0nwq42pww58-system-shutdown.drv
g0mpgfg8dcp4bq9gsljpnkbkqw152nxg-system-generators.drv: build01: not scheduled here: g0mpgfg8dcp4bq9gsljpnkbkqw152nxg-system-generators.drv, asking the scheduler again
building '/nix/store/3am8g61dsszjr3f4zc8njx8xcaisfvv0-system-path.drv' on nix-store.geninf.io:50051
system-path> build01: building 3am8g61dsszjr3f4zc8njx8xcaisfvv0-system-path.drv
system-path> structuredAttrs is enabled
system-path> created 1716 symlinks in user environment
brikxphzqrnr9b8p48iqd4qyq92llx9y-dry-activate.drv: build01: not scheduled here: brikxphzqrnr9b8p48iqd4qyq92llx9y-dry-activate.drv, asking the scheduler again
ia4rzccqnnf6dvsj4sizj1f9j6rcfhwl-unit-nginx-config-reload.service.drv: build01: not scheduled here: ia4rzccqnnf6dvsj4sizj1f9j6rcfhwl-unit-nginx-config-reload.service.drv, asking the scheduler again
7zbwkybw0z3kj7gfzm7zx1f54bswzjcb-unit-acme-setup.service.drv: build01: not scheduled here: 7zbwkybw0z3kj7gfzm7zx1f54bswzjcb-unit-acme-setup.service.drv, asking the scheduler again
s4kh7wzm8ivzgrx3w1czdbyb7w701k0w-unit-acme-order-renew-ca.foo.service.drv: build01: not scheduled here: s4kh7wzm8ivzgrx3w1czdbyb7w701k0w-unit-acme-order-renew-ca.foo.service.drv, asking the scheduler again
3260rbrmsisinihzgc6iwaxlivnl9zv9-unit-acme-setup.service.drv: build01: not scheduled here: 3260rbrmsisinihzgc6iwaxlivnl9zv9-unit-acme-setup.service.drv, asking the scheduler again
jvbcagb33fx9fx7ndj0zm926qfw9v8wy-unit-acme-order-renew-test.foo.service.drv: build01: not scheduled here: jvbcagb33fx9fx7ndj0zm926qfw9v8wy-unit-acme-order-renew-test.foo.service.drv, asking the scheduler again
1vr7rvlv68s1ciszsn9f2aw1325hd2hd-unit-systemd-networkd.service.drv: build01: not scheduled here: 1vr7rvlv68s1ciszsn9f2aw1325hd2hd-unit-systemd-networkd.service.drv, asking the scheduler again
building '/nix/store/1vr7rvlv68s1ciszsn9f2aw1325hd2hd-unit-systemd-networkd.service.drv' on nix-store.geninf.io:50051
unit-systemd-networkd.service> build01: building 1vr7rvlv68s1ciszsn9f2aw1325hd2hd-unit-systemd-networkd.service.drv
unit-systemd-networkd.service> structuredAttrs is enabled
4xdccr3psz51h6fggcs7hsh0kws2yj3i-nixos-test-driver-1.1.drv: build01: not scheduled here: 4xdccr3psz51h6fggcs7hsh0kws2yj3i-nixos-test-driver-1.1.drv, asking the scheduler again
building '/nix/store/g0mpgfg8dcp4bq9gsljpnkbkqw152nxg-system-generators.drv' on nix-store.geninf.io:50051
system-generators> build01: building g0mpgfg8dcp4bq9gsljpnkbkqw152nxg-system-generators.drv
building '/nix/store/brikxphzqrnr9b8p48iqd4qyq92llx9y-dry-activate.drv' on nix-store.geninf.io:50051
dry-activate> build01: building brikxphzqrnr9b8p48iqd4qyq92llx9y-dry-activate.drv
dry-activate> structuredAttrs is enabled
i3y19f9i99qi5v8q1c6gj6la3pl54f9y-unit-firewall.service.drv: build01: not scheduled here: i3y19f9i99qi5v8q1c6gj6la3pl54f9y-unit-firewall.service.drv, asking the scheduler again
building '/nix/store/ia4rzccqnnf6dvsj4sizj1f9j6rcfhwl-unit-nginx-config-reload.service.drv' on nix-store.geninf.io:50051
unit-nginx-config-reload.service> build01: building ia4rzccqnnf6dvsj4sizj1f9j6rcfhwl-unit-nginx-config-reload.service.drv
unit-nginx-config-reload.service> structuredAttrs is enabled
agnr0cgmbdm02gb9vxi5ix4nz0yagq7l-unit-acme-test.foo.service.drv: build01: not scheduled here: agnr0cgmbdm02gb9vxi5ix4nz0yagq7l-unit-acme-test.foo.service.drv, asking the scheduler again
6xfchvrkxrqng7hra5k1zw7rdpsvmxw8-unit-acme-ca.foo.service.drv: build01: not scheduled here: 6xfchvrkxrqng7hra5k1zw7rdpsvmxw8-unit-acme-ca.foo.service.drv, asking the scheduler again
building '/nix/store/3260rbrmsisinihzgc6iwaxlivnl9zv9-unit-acme-setup.service.drv' on nix-store.geninf.io:50051
unit-acme-setup.service> build01: building 3260rbrmsisinihzgc6iwaxlivnl9zv9-unit-acme-setup.service.drv
unit-acme-setup.service> structuredAttrs is enabled
building '/nix/store/s4kh7wzm8ivzgrx3w1czdbyb7w701k0w-unit-acme-order-renew-ca.foo.service.drv' on nix-store.geninf.io:50051
unit-acme-order-renew-ca.foo.service> build01: building s4kh7wzm8ivzgrx3w1czdbyb7w701k0w-unit-acme-order-renew-ca.foo.service.drv
building '/nix/store/i3y19f9i99qi5v8q1c6gj6la3pl54f9y-unit-firewall.service.drv' on nix-store.geninf.io:50051
unit-firewall.service> build01: building i3y19f9i99qi5v8q1c6gj6la3pl54f9y-unit-firewall.service.drv
unit-acme-order-renew-ca.foo.service> structuredAttrs is enabled
unit-firewall.service> structuredAttrs is enabled
building '/nix/store/7zbwkybw0z3kj7gfzm7zx1f54bswzjcb-unit-acme-setup.service.drv' on nix-store.geninf.io:50051
unit-acme-setup.service> build01: building 7zbwkybw0z3kj7gfzm7zx1f54bswzjcb-unit-acme-setup.service.drv
unit-acme-setup.service> structuredAttrs is enabled
building '/nix/store/jvbcagb33fx9fx7ndj0zm926qfw9v8wy-unit-acme-order-renew-test.foo.service.drv' on nix-store.geninf.io:50051
unit-acme-order-renew-test.foo.service> build01: building jvbcagb33fx9fx7ndj0zm926qfw9v8wy-unit-acme-order-renew-test.foo.service.drv
unit-acme-order-renew-test.foo.service> structuredAttrs is enabled
06cz9c12gca2wbyaiyqvkvandjal2rqj-unit-step-ca.service.drv: build01: not scheduled here: 06cz9c12gca2wbyaiyqvkvandjal2rqj-unit-step-ca.service.drv, asking the scheduler again
building '/nix/store/agnr0cgmbdm02gb9vxi5ix4nz0yagq7l-unit-acme-test.foo.service.drv' on nix-store.geninf.io:50051
unit-acme-test.foo.service> build01: building agnr0cgmbdm02gb9vxi5ix4nz0yagq7l-unit-acme-test.foo.service.drv
unit-acme-test.foo.service> structuredAttrs is enabled
building '/nix/store/6xfchvrkxrqng7hra5k1zw7rdpsvmxw8-unit-acme-ca.foo.service.drv' on nix-store.geninf.io:50051
unit-acme-ca.foo.service> build01: building 6xfchvrkxrqng7hra5k1zw7rdpsvmxw8-unit-acme-ca.foo.service.drv
unit-acme-ca.foo.service> structuredAttrs is enabled
i172sdvswv3chc4i9wch81nmszsxg3r2-unit-nginx.service.drv: build01: not scheduled here: i172sdvswv3chc4i9wch81nmszsxg3r2-unit-nginx.service.drv, asking the scheduler again
building '/nix/store/06cz9c12gca2wbyaiyqvkvandjal2rqj-unit-step-ca.service.drv' on nix-store.geninf.io:50051
unit-step-ca.service> build01: building 06cz9c12gca2wbyaiyqvkvandjal2rqj-unit-step-ca.service.drv
unit-step-ca.service> structuredAttrs is enabled
4f4d5280xp2av2y6511ipzn9nvc4wfkc-unit-nginx.service.drv: build01: not scheduled here: 4f4d5280xp2av2y6511ipzn9nvc4wfkc-unit-nginx.service.drv, asking the scheduler again
building '/nix/store/i172sdvswv3chc4i9wch81nmszsxg3r2-unit-nginx.service.drv' on nix-store.geninf.io:50051
unit-nginx.service> build01: building i172sdvswv3chc4i9wch81nmszsxg3r2-unit-nginx.service.drv
unit-nginx.service> structuredAttrs is enabled
building '/nix/store/4f4d5280xp2av2y6511ipzn9nvc4wfkc-unit-nginx.service.drv' on nix-store.geninf.io:50051
unit-nginx.service> build01: building 4f4d5280xp2av2y6511ipzn9nvc4wfkc-unit-nginx.service.drv
unit-nginx.service> structuredAttrs is enabled
m2cx1qrdl7931i5p1km252xb5220jpx9-unit-nix-daemon.service.drv: build01: not scheduled here: m2cx1qrdl7931i5p1km252xb5220jpx9-unit-nix-daemon.service.drv, asking the scheduler again
building '/nix/store/m2cx1qrdl7931i5p1km252xb5220jpx9-unit-nix-daemon.service.drv' on nix-store.geninf.io:50051
unit-nix-daemon.service> build01: building m2cx1qrdl7931i5p1km252xb5220jpx9-unit-nix-daemon.service.drv
unit-nix-daemon.service> structuredAttrs is enabled
m4ykvwv8a8pr4zamblyzr1s9q66n112r-dry-activate.drv: build01: not scheduled here: m4ykvwv8a8pr4zamblyzr1s9q66n112r-dry-activate.drv, asking the scheduler again
building '/nix/store/m4ykvwv8a8pr4zamblyzr1s9q66n112r-dry-activate.drv' on nix-store.geninf.io:50051
dry-activate> build01: building m4ykvwv8a8pr4zamblyzr1s9q66n112r-dry-activate.drv
dry-activate> structuredAttrs is enabled
m7qb5k2rsypmmcaas4g9jc00rihwrs9z-X-Restart-Triggers-systemd-tmpfiles-resetup.drv: build01: not scheduled here: m7qb5k2rsypmmcaas4g9jc00rihwrs9z-X-Restart-Triggers-systemd-tmpfiles-resetup.drv, asking the scheduler again
jxjv9csb79b1qiw5cd3g90w9620adkay-dbus-1.drv: build01: not scheduled here: jxjv9csb79b1qiw5cd3g90w9620adkay-dbus-1.drv, asking the scheduler again
building '/nix/store/jxjv9csb79b1qiw5cd3g90w9620adkay-dbus-1.drv' on nix-store.geninf.io:50051
dbus-1> build01: building jxjv9csb79b1qiw5cd3g90w9620adkay-dbus-1.drv
kap2kkzx5r1pz532gbabq4hwf8whqr7w-dbus-1.drv: build01: not scheduled here: kap2kkzx5r1pz532gbabq4hwf8whqr7w-dbus-1.drv, asking the scheduler again
building '/nix/store/kap2kkzx5r1pz532gbabq4hwf8whqr7w-dbus-1.drv' on nix-store.geninf.io:50051
dbus-1> build01: building kap2kkzx5r1pz532gbabq4hwf8whqr7w-dbus-1.drv
083vbfxl38jpairixbp8snbgswq3b925-dbus-1.drv: build01: not scheduled here: 083vbfxl38jpairixbp8snbgswq3b925-dbus-1.drv, asking the scheduler again
building '/nix/store/083vbfxl38jpairixbp8snbgswq3b925-dbus-1.drv' on nix-store.geninf.io:50051
dbus-1> build01: building 083vbfxl38jpairixbp8snbgswq3b925-dbus-1.drv
p34n92c1s943asirmmhdki6jy5zsgfqk-unit-systemd-tmpfiles-resetup.service.drv: build01: not scheduled here: p34n92c1s943asirmmhdki6jy5zsgfqk-unit-systemd-tmpfiles-resetup.service.drv, asking the scheduler again
building '/nix/store/p34n92c1s943asirmmhdki6jy5zsgfqk-unit-systemd-tmpfiles-resetup.service.drv' on nix-store.geninf.io:50051
unit-systemd-tmpfiles-resetup.service> build01: building p34n92c1s943asirmmhdki6jy5zsgfqk-unit-systemd-tmpfiles-resetup.service.drv
unit-systemd-tmpfiles-resetup.service> structuredAttrs is enabled
narv3zi9p0fvx4zmd6kgyaxyjvymhv02-X-Restart-Triggers-dbus-broker.drv: build01: not scheduled here: narv3zi9p0fvx4zmd6kgyaxyjvymhv02-X-Restart-Triggers-dbus-broker.drv, asking the scheduler again
building '/nix/store/narv3zi9p0fvx4zmd6kgyaxyjvymhv02-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051
X-Restart-Triggers-dbus-broker> build01: building narv3zi9p0fvx4zmd6kgyaxyjvymhv02-X-Restart-Triggers-dbus-broker.drv
X-Restart-Triggers-dbus-broker> structuredAttrs is enabled
w15qmk7dyfc9k0bi3gdc37ij1grbn409-X-Restart-Triggers-dbus-broker.drv: build01: not scheduled here: w15qmk7dyfc9k0bi3gdc37ij1grbn409-X-Restart-Triggers-dbus-broker.drv, asking the scheduler again
building '/nix/store/w15qmk7dyfc9k0bi3gdc37ij1grbn409-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051
X-Restart-Triggers-dbus-broker> build01: building w15qmk7dyfc9k0bi3gdc37ij1grbn409-X-Restart-Triggers-dbus-broker.drv
X-Restart-Triggers-dbus-broker> structuredAttrs is enabled
w8cvrszas6h3m209w14kq7w1q1a69v01-X-Restart-Triggers-dbus-broker.drv: build01: not scheduled here: w8cvrszas6h3m209w14kq7w1q1a69v01-X-Restart-Triggers-dbus-broker.drv, asking the scheduler again
building '/nix/store/w8cvrszas6h3m209w14kq7w1q1a69v01-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051
X-Restart-Triggers-dbus-broker> build01: building w8cvrszas6h3m209w14kq7w1q1a69v01-X-Restart-Triggers-dbus-broker.drv
X-Restart-Triggers-dbus-broker> structuredAttrs is enabled
sm2qlg032qa2v1flvjj2h1qnh4jqy870-unit-dbus-broker.service.drv: build01: not scheduled here: sm2qlg032qa2v1flvjj2h1qnh4jqy870-unit-dbus-broker.service.drv, asking the scheduler again
rn41i50qaqklx5yrhpmskimnjbv86rhd-unit-dbus-broker.service.drv: build01: not scheduled here: rn41i50qaqklx5yrhpmskimnjbv86rhd-unit-dbus-broker.service.drv, asking the scheduler again
pz1g5fqal5vmzhvylf4j80x09gm7yl79-unit-dbus-broker.service.drv: build01: not scheduled here: pz1g5fqal5vmzhvylf4j80x09gm7yl79-unit-dbus-broker.service.drv, asking the scheduler again
building '/nix/store/sm2qlg032qa2v1flvjj2h1qnh4jqy870-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051
unit-dbus-broker.service> build01: building sm2qlg032qa2v1flvjj2h1qnh4jqy870-unit-dbus-broker.service.drv
unit-dbus-broker.service> structuredAttrs is enabled
building '/nix/store/rn41i50qaqklx5yrhpmskimnjbv86rhd-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051
unit-dbus-broker.service> build01: building rn41i50qaqklx5yrhpmskimnjbv86rhd-unit-dbus-broker.service.drv
unit-dbus-broker.service> structuredAttrs is enabled
building '/nix/store/pz1g5fqal5vmzhvylf4j80x09gm7yl79-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051
unit-dbus-broker.service> build01: building pz1g5fqal5vmzhvylf4j80x09gm7yl79-unit-dbus-broker.service.drv
unit-dbus-broker.service> structuredAttrs is enabled
11alh9249zamk4ap129i7lw7pnwdci9l-unit-dbus-broker.service.drv: build01: not scheduled here: 11alh9249zamk4ap129i7lw7pnwdci9l-unit-dbus-broker.service.drv, asking the scheduler again
mackamybd1md623bfapnfbmxvgh5cfif-unit-dbus-broker.service.drv: build01: not scheduled here: mackamybd1md623bfapnfbmxvgh5cfif-unit-dbus-broker.service.drv, asking the scheduler again
qn6z14hhr79r50cg9f1qhp9v7vcqvjrb-unit-dbus-broker.service.drv: build01: not scheduled here: qn6z14hhr79r50cg9f1qhp9v7vcqvjrb-unit-dbus-broker.service.drv, asking the scheduler again
building '/nix/store/11alh9249zamk4ap129i7lw7pnwdci9l-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051
unit-dbus-broker.service> build01: building 11alh9249zamk4ap129i7lw7pnwdci9l-unit-dbus-broker.service.drv
unit-dbus-broker.service> structuredAttrs is enabled
building '/nix/store/mackamybd1md623bfapnfbmxvgh5cfif-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051
unit-dbus-broker.service> build01: building mackamybd1md623bfapnfbmxvgh5cfif-unit-dbus-broker.service.drv
unit-dbus-broker.service> structuredAttrs is enabled
building '/nix/store/qn6z14hhr79r50cg9f1qhp9v7vcqvjrb-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051
unit-dbus-broker.service> build01: building qn6z14hhr79r50cg9f1qhp9v7vcqvjrb-unit-dbus-broker.service.drv
unit-dbus-broker.service> structuredAttrs is enabled
q75jrgy4b6bjl4h5l9jamygzxxdj6qlv-user-units.drv: build01: not scheduled here: q75jrgy4b6bjl4h5l9jamygzxxdj6qlv-user-units.drv, asking the scheduler again
building '/nix/store/q75jrgy4b6bjl4h5l9jamygzxxdj6qlv-user-units.drv' on nix-store.geninf.io:50051
user-units> build01: building q75jrgy4b6bjl4h5l9jamygzxxdj6qlv-user-units.drv
xbrsvnljkim1czhsrxng9iqxgvbjd89n-user-units.drv: build01: not scheduled here: xbrsvnljkim1czhsrxng9iqxgvbjd89n-user-units.drv, asking the scheduler again
building '/nix/store/xbrsvnljkim1czhsrxng9iqxgvbjd89n-user-units.drv' on nix-store.geninf.io:50051
user-units> build01: building xbrsvnljkim1czhsrxng9iqxgvbjd89n-user-units.drv
9zvr6p67saaqcdfs7bk6rsv53d2p2lsz-system-units.drv: build01: not scheduled here: 9zvr6p67saaqcdfs7bk6rsv53d2p2lsz-system-units.drv, asking the scheduler again
building '/nix/store/9zvr6p67saaqcdfs7bk6rsv53d2p2lsz-system-units.drv' on nix-store.geninf.io:50051
system-units> build01: building 9zvr6p67saaqcdfs7bk6rsv53d2p2lsz-system-units.drv
2jyy872n9yg2qhxm2l9gkf7mzcdfffnx-system-units.drv: build01: not scheduled here: 2jyy872n9yg2qhxm2l9gkf7mzcdfffnx-system-units.drv, asking the scheduler again
syg21xb1l3185vynq8fykhb9andb1q9i-user-units.drv: build01: not scheduled here: syg21xb1l3185vynq8fykhb9andb1q9i-user-units.drv, asking the scheduler again
building '/nix/store/2jyy872n9yg2qhxm2l9gkf7mzcdfffnx-system-units.drv' on nix-store.geninf.io:50051
system-units> build01: building 2jyy872n9yg2qhxm2l9gkf7mzcdfffnx-system-units.drv
1paskv6rdwqgv6g5yv4y6vvjasfl3jw5-system-units.drv: build01: not scheduled here: 1paskv6rdwqgv6g5yv4y6vvjasfl3jw5-system-units.drv, asking the scheduler again
building '/nix/store/syg21xb1l3185vynq8fykhb9andb1q9i-user-units.drv' on nix-store.geninf.io:50051
user-units> build01: building syg21xb1l3185vynq8fykhb9andb1q9i-user-units.drv
building '/nix/store/1paskv6rdwqgv6g5yv4y6vvjasfl3jw5-system-units.drv' on nix-store.geninf.io:50051
system-units> build01: building 1paskv6rdwqgv6g5yv4y6vvjasfl3jw5-system-units.drv
hmr1kaw9vaj18v547nf3p72nmg2jbffc-etc.drv: build01: not scheduled here: hmr1kaw9vaj18v547nf3p72nmg2jbffc-etc.drv, asking the scheduler again
building '/nix/store/hljccp1x8b5386z7smj1yfjq495pjlwj-etc.drv' on nix-store.geninf.io:50051
etc> build01: building hljccp1x8b5386z7smj1yfjq495pjlwj-etc.drv
building '/nix/store/57s0rpycssi2qmpm13304i5x28ll57rv-etc.drv' on nix-store.geninf.io:50051
etc> build01: building 57s0rpycssi2qmpm13304i5x28ll57rv-etc.drv
building '/nix/store/hmr1kaw9vaj18v547nf3p72nmg2jbffc-etc.drv' on nix-store.geninf.io:50051
etc> build01: building hmr1kaw9vaj18v547nf3p72nmg2jbffc-etc.drv
building '/nix/store/wx4rg932b958szshvpx0jfgpbj25j3c5-activate.drv' on nix-store.geninf.io:50051
activate> build01: building wx4rg932b958szshvpx0jfgpbj25j3c5-activate.drv
activate> structuredAttrs is enabled
building '/nix/store/g3iqskqfcxma10j8lnrf69z5a7ivvgwk-activate.drv' on nix-store.geninf.io:50051
activate> build01: building g3iqskqfcxma10j8lnrf69z5a7ivvgwk-activate.drv
activate> structuredAttrs is enabled
building '/nix/store/x2znxxm3zg4bkzxglmbjkbra8npziwhj-activate.drv' on nix-store.geninf.io:50051
activate> build01: building x2znxxm3zg4bkzxglmbjkbra8npziwhj-activate.drv
activate> structuredAttrs is enabled
building '/nix/store/w858ijszhcr4v2wfdzlik61p68h918ma-nixos-system-server-test.drv' on nix-store.geninf.io:50051
nixos-system-server-test> build01: building w858ijszhcr4v2wfdzlik61p68h918ma-nixos-system-server-test.drv
nixos-system-server-test> structuredAttrs is enabled
building '/nix/store/ms0qga8icb2zmpd1hblwzrvqwwsvbdnq-nixos-system-ca-test.drv' on nix-store.geninf.io:50051
nixos-system-ca-test> build01: building ms0qga8icb2zmpd1hblwzrvqwwsvbdnq-nixos-system-ca-test.drv
nixos-system-ca-test> structuredAttrs is enabled
building '/nix/store/1hrdzyckpdm3425xsppr7ga9j5hwbcgs-nixos-system-client-test.drv' on nix-store.geninf.io:50051
nixos-system-client-test> build01: building 1hrdzyckpdm3425xsppr7ga9j5hwbcgs-nixos-system-client-test.drv
nixos-system-client-test> structuredAttrs is enabled
h5fg4m2963y9yab96xwcxzq3fnplzj0q-run-server-nspawn.drv: build01: not scheduled here: h5fg4m2963y9yab96xwcxzq3fnplzj0q-run-server-nspawn.drv, asking the scheduler again
bfhn77pjyvjr65rvfb2z0hw014frzmn4-run-ca-nspawn.drv: build01: not scheduled here: bfhn77pjyvjr65rvfb2z0hw014frzmn4-run-ca-nspawn.drv, asking the scheduler again
z2xdzbs7ipphhgq4qdlajqcll9ik9ipg-run-client-nspawn.drv: build01: not scheduled here: z2xdzbs7ipphhgq4qdlajqcll9ik9ipg-run-client-nspawn.drv, asking the scheduler again
building '/nix/store/h5fg4m2963y9yab96xwcxzq3fnplzj0q-run-server-nspawn.drv' on nix-store.geninf.io:50051
run-server-nspawn> build01: building h5fg4m2963y9yab96xwcxzq3fnplzj0q-run-server-nspawn.drv
building '/nix/store/bfhn77pjyvjr65rvfb2z0hw014frzmn4-run-ca-nspawn.drv' on nix-store.geninf.io:50051
run-ca-nspawn> build01: building bfhn77pjyvjr65rvfb2z0hw014frzmn4-run-ca-nspawn.drv
building '/nix/store/z2xdzbs7ipphhgq4qdlajqcll9ik9ipg-run-client-nspawn.drv' on nix-store.geninf.io:50051
run-client-nspawn> build01: building z2xdzbs7ipphhgq4qdlajqcll9ik9ipg-run-client-nspawn.drv
building '/nix/store/7dgll8hrxq3bk9fwb1308qd4a8q6394a-driverConfiguration.json.drv' on nix-store.geninf.io:50051
driverConfiguration.json> build01: building 7dgll8hrxq3bk9fwb1308qd4a8q6394a-driverConfiguration.json.drv
driverConfiguration.json> structuredAttrs is enabled
a6xdamm87wlkad5kndqnivaycy507w68-nixos-test-driver-certificates.drv: build01: not scheduled here: a6xdamm87wlkad5kndqnivaycy507w68-nixos-test-driver-certificates.drv, asking the scheduler again
building '/nix/store/a6xdamm87wlkad5kndqnivaycy507w68-nixos-test-driver-certificates.drv' on nix-store.geninf.io:50051
nixos-test-driver-certificates> build01: building a6xdamm87wlkad5kndqnivaycy507w68-nixos-test-driver-certificates.drv
nixos-test-driver-certificates> Running type check (enable/disable: config.skipTypeCheck)
nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck
nixos-test-driver-certificates> All checks passed!
nixos-test-driver-certificates> Linting test script (enable/disable: config.skipLint)
nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipLint
nixos-test-driver-certificates> All checks passed!
5s7fzhk7zyshyblf613dhckqlp9i8gji-container-test-run-certificates.drv: build01: not scheduled here: 5s7fzhk7zyshyblf613dhckqlp9i8gji-container-test-run-certificates.drv, asking the scheduler again
building '/nix/store/5s7fzhk7zyshyblf613dhckqlp9i8gji-container-test-run-certificates.drv' on nix-store.geninf.io:50051
container-test-run-certificates> build01: building 5s7fzhk7zyshyblf613dhckqlp9i8gji-container-test-run-certificates.drv
container-test-run-certificates> Machine state will be reset. To keep it, pass --keep-machine-state
container-test-run-certificates> start all VLans
container-test-run-certificates> (finished: start all VLans, in 0.00 seconds)
container-test-run-certificates> 
container-test-run-certificates> Test will time out and terminate in 3600.0 seconds
container-test-run-certificates> run the VM test script
container-test-run-certificates> additionally exposed symbols:
container-test-run-certificates>     ca, client, server,
container-test-run-certificates>     vlan1,
container-test-run-certificates>     start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh
container-test-run-certificates> ca: systemd-nspawn running (pid 50)
container-test-run-certificates> ca: Waiting for journal at /build/vm-state-ca/var/log/journal...
container-test-run-certificates> ca: waiting for unit step-ca.service
container-test-run-certificates> nixos-nspawn(ca): TAP vde-tap1 not found; container will be isolated from VDE
container-test-run-certificates> nixos-nspawn(ca): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.
container-test-run-certificates> Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.
container-test-run-certificates> ░ Spawning container ca on /build/vm-state-ca.
container-test-run-certificates> ca # No journal files were found.
container-test-run-certificates> ca # No journal boot entry found for the specified boot (+0).
container-test-run-certificates> ca # [2258194.303169] ca systemd-journald[81]: Journal started
container-test-run-certificates> ca # [2258194.303229] ca systemd-journald[81]: Runtime Journal (/run/log/journal/c8b7d6d619b7481789b29f9f92ef0c52) is 8M, max 2.5G, 2.4G free.
container-test-run-certificates> ca # [2258194.313365] ca systemd[1]: Finished Apply Kernel Variables.
container-test-run-certificates> ca # [2258194.326758] ca systemd[1]: Finished Create Static Device Nodes in /dev gracefully.
container-test-run-certificates> ca # [2258194.342074] ca systemd[1]: Starting Flush Journal to Persistent Storage...
container-test-run-certificates> ca # [2258194.343141] ca systemd[1]: Starting Network Name Resolution...
container-test-run-certificates> ca # [2258194.343951] ca systemd[1]: Starting Create Static Device Nodes in /dev...
container-test-run-certificates> ca # [2258194.383004] ca systemd-journald[81]: Time spent on flushing to /var/log/journal/c8b7d6d619b7481789b29f9f92ef0c52 is 1.887ms for 7 entries.
container-test-run-certificates> ca # [2258194.383004] ca systemd-journald[81]: System Journal (/var/log/journal/c8b7d6d619b7481789b29f9f92ef0c52) is 8M, max 4G, 3.9G free.
container-test-run-certificates> ca # [2258194.395977] ca systemd[1]: Finished Create Static Device Nodes in /dev.
container-test-run-certificates> ca # [2258194.396553] ca systemd[1]: Reached target Preparation for Local File Systems.
container-test-run-certificates> ca # [2258194.396665] ca systemd[1]: Reached target Local File Systems.
container-test-run-certificates> ca # [2258194.397486] ca systemd[1]: Listening on Boot Loader Control Service Socket.
container-test-run-certificates> ca # [2258194.397537] ca systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container
container-test-run-certificates> ca # [2258194.398361] ca systemd[1]: Starting Save Transient machine-id to Disk...
container-test-run-certificates> ca # [2258194.398391] ca systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys
container-test-run-certificates> ca # [2258194.481393] ca systemd[1]: Finished Firewall.
container-test-run-certificates> ca # [2258194.482065] ca systemd[1]: Reached target Preparation for Network.
container-test-run-certificates> ca # [2258194.482444] ca systemd[1]: Listening on Network Management Resolve Hook Socket.
container-test-run-certificates> ca # [2258194.484055] ca systemd[1]: Starting Network Management...
container-test-run-certificates> ca # [2258194.484435] ca systemd[1]: Finished Flush Journal to Persistent Storage.
container-test-run-certificates> ca # [2258194.486423] ca systemd[1]: Starting Create System Files and Directories...
container-test-run-certificates> ca # [2258194.539806] ca systemd-tmpfiles[191]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted
container-test-run-certificates> ca # [2258194.540074] ca systemd-tmpfiles[191]: fchmod() of /var/log/journal failed: Operation not permitted
container-test-run-certificates> ca # [2258194.540248] ca systemd-tmpfiles[191]: fchmod() of /var/log/journal/c8b7d6d619b7481789b29f9f92ef0c52 failed: Operation not permitted
container-test-run-certificates> ca # [2258194.540496] ca systemd-tmpfiles[191]: fchmod() of /run/log/journal failed: Operation not permitted
container-test-run-certificates> ca # [2258194.542600] ca systemd[1]: Finished Create System Files and Directories.
container-test-run-certificates> ca # [2258194.544402] ca systemd[1]: Starting Rebuild Journal Catalog...
container-test-run-certificates> ca # [2258194.545767] ca systemd[1]: Starting Record System Boot/Shutdown in UTMP...
container-test-run-certificates> ca # [2258194.563061] ca systemd[1]: Finished Record System Boot/Shutdown in UTMP.
container-test-run-certificates> ca # [2258194.569494] ca systemd[1]: Finished Rebuild Journal Catalog.
container-test-run-certificates> ca # [2258194.571272] ca systemd[1]: Starting Update is Completed...
container-test-run-certificates> ca # [2258194.583983] ca systemd[1]: Finished Update is Completed.
container-test-run-certificates> ca # [2258195.179208] ca systemd-networkd[189]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted
container-test-run-certificates> ca # [2258195.179301] ca systemd-networkd[189]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted
container-test-run-certificates> ca # [2258195.189029] ca systemd-networkd[189]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.
container-test-run-certificates> ca # [2258195.189192] ca systemd-networkd[189]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.
container-test-run-certificates> ca # [2258195.189346] ca systemd-networkd[189]: lo: Link UP
container-test-run-certificates> ca # [2258195.189351] ca systemd-networkd[189]: lo: Gained carrier
container-test-run-certificates> ca # [2258195.189542] ca systemd-networkd[189]: eth1: Configuring with /etc/systemd/network/40-eth1.network.
container-test-run-certificates> ca # [2258195.189966] ca systemd-networkd[189]: eth1: Link UP
container-test-run-certificates> ca # [2258195.190284] ca systemd-networkd[189]: eth1: Gained carrier
container-test-run-certificates> ca # [2258195.190664] ca systemd[1]: Started Network Management.
container-test-run-certificates> ca # [2258195.191800] ca systemd[1]: Starting Enable Persistent Storage in systemd-networkd...
container-test-run-certificates> ca # [2258195.245988] ca systemd[1]: Finished Enable Persistent Storage in systemd-networkd.
container-test-run-certificates> ca # [2258195.521722] ca systemd-resolved[118]: Positive Trust Anchors:
container-test-run-certificates> ca # [2258195.521735] ca systemd-resolved[118]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d
container-test-run-certificates> ca # [2258195.521738] ca systemd-resolved[118]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16
container-test-run-certificates> ca # [2258195.521771] ca systemd-resolved[118]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test
container-test-run-certificates> ca # [2258195.542687] ca systemd-resolved[118]: Using system hostname 'ca'.
container-test-run-certificates> ca # [2258195.544112] ca systemd[1]: Started Network Name Resolution.
container-test-run-certificates> ca # [2258195.544257] ca systemd[1]: Reached target Network.
container-test-run-certificates> ca # [2258195.544362] ca systemd[1]: Reached target Network is Online.
container-test-run-certificates> ca # [2258195.544454] ca systemd[1]: Reached target System Initialization.
container-test-run-certificates> ca # [2258195.544839] ca systemd[1]: Started Renew ACME Certificate for ca.foo.
container-test-run-certificates> ca # [2258195.544893] ca systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container
container-test-run-certificates> ca # [2258195.544936] ca systemd[1]: Started Daily Cleanup of Temporary Directories.
container-test-run-certificates> ca # [2258195.544982] ca systemd[1]: Reached target Timer Units.
container-test-run-certificates> ca # [2258195.545206] ca systemd[1]: Listening on D-Bus System Message Bus Socket.
container-test-run-certificates> ca # [2258195.545449] ca systemd[1]: Listening on Nix Daemon Socket.
container-test-run-certificates> ca # [2258195.545670] ca systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.
container-test-run-certificates> ca # [2258195.545714] ca systemd[1]: Reached target Socket Units.
container-test-run-certificates> ca # [2258195.545790] ca systemd[1]: Reached target Basic System.
container-test-run-certificates> ca # [2258195.548516] ca systemd[1]: Starting Set up the ACME certificate renewal infrastructure...
container-test-run-certificates> ca # [2258195.549988] ca systemd[1]: Starting Import lastlog data into lastlog2 database...
container-test-run-certificates> ca # [2258195.550059] ca systemd[1]: nginx-config-reload.service skipped, unmet condition check ConditionPathExists=/var/lib/acme/ca.foo/fullchain.pem
container-test-run-certificates> ca # [2258195.551532] ca systemd[1]: Starting Name Service Cache Daemon (nsncd)...
container-test-run-certificates> ca # [2258195.553288] ca systemd[1]: Starting step-ca service...
container-test-run-certificates> ca # [2258195.585230] ca systemd[1]: Starting D-Bus System Message Bus...
container-test-run-certificates> ca # [2258195.663619] ca systemd[1]: Finished Import lastlog data into lastlog2 database.
container-test-run-certificates> ca # [2258195.698255] ca systemd[1]: etc-machine\x2did.mount: Deactivated successfully.
container-test-run-certificates> ca # [2258195.699938] ca systemd[1]: Finished Save Transient machine-id to Disk.
container-test-run-certificates> ca # [2258195.765271] ca acme-setup-privileged[203]: + set -euo pipefail
container-test-run-certificates> ca # [2258195.765271] ca acme-setup-privileged[203]: + cd /var/lib/acme
container-test-run-certificates> ca # [2258195.765271] ca acme-setup-privileged[203]: + chmod -R u=rwX,g=,o= .lego/accounts
container-test-run-certificates> ca # [2258195.767231] ca acme-setup-privileged[203]: + chown -R acme .lego/accounts
container-test-run-certificates> ca # [2258195.769363] ca acme-setup-privileged[203]: + for fixpath in ca.foo .lego/ca.foo
container-test-run-certificates> ca # [2258195.769363] ca acme-setup-privileged[203]: + '[' -d ca.foo ']'
container-test-run-certificates> ca # [2258195.769480] ca acme-setup-privileged[203]: + for fixpath in ca.foo .lego/ca.foo
container-test-run-certificates> ca # [2258195.769480] ca acme-setup-privileged[203]: + '[' -d .lego/ca.foo ']'
container-test-run-certificates> ca # [2258195.808473] ca systemd[1]: Started Name Service Cache Daemon (nsncd).
container-test-run-certificates> ca # [2258195.808624] ca systemd[1]: Reached target Host and Network Name Lookups.
container-test-run-certificates> ca # [2258195.808724] ca systemd[1]: Reached target User and Group Name Lookups.
container-test-run-certificates> ca # [2258195.808984] ca nsncd[205]: Sep 30 10:43:35.794 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"
container-test-run-certificates> ca # [2258195.813698] ca systemd[1]: Starting User Login Management...
container-test-run-certificates> ca # [2258195.815003] ca systemd[1]: Starting Permit User Sessions...
container-test-run-certificates> ca # [2258195.826874] ca systemd[1]: Finished Permit User Sessions.
container-test-run-certificates> ca # [2258195.828575] ca systemd[1]: Started Console Getty.
container-test-run-certificates> ca # [2258195.828645] ca systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0
container-test-run-certificates> ca # [2258195.828684] ca systemd[1]: Reached target Login Prompts.
container-test-run-certificates> ca # [2258195.970241] ca dbus-broker-launch[210]: Looking up NSS user entry for 'systemd-timesync'...
container-test-run-certificates> ca # [2258195.971664] ca dbus-broker-launch[210]: NSS returned no entry for 'systemd-timesync'
container-test-run-certificates> ca # [2258195.971664] ca dbus-broker-launch[210]: Invalid user-name in /nix/store/pnnccgqfw8h1n0zfq6qhvpk4r8llnd12-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"
container-test-run-certificates> ca # [2258195.972132] ca systemd[1]: Started D-Bus System Message Bus.
container-test-run-certificates> ca # [2258195.980618] ca dbus-broker-launch[210]: Ready
container-test-run-certificates> ca # [2258196.645416] ca systemd-logind[234]: New seat seat0.
container-test-run-certificates> ca # [2258196.645603] ca systemd[1]: Started User Login Management.
container-test-run-certificates> ca # [2258196.647949] ca systemd[1]: Starting linger-users.service...
container-test-run-certificates> ca # [2258196.694503] ca systemd[1]: linger-users.service: Deactivated successfully.
container-test-run-certificates> ca # [2258196.694794] ca systemd[1]: Finished linger-users.service.
container-test-run-certificates> ca # [2258196.786072] ca acme-setup-start[222]: + set -euo pipefail
container-test-run-certificates> ca # [2258196.786072] ca acme-setup-start[222]: + test -e ca/key.pem
container-test-run-certificates> ca # [2258196.786727] ca acme-setup-start[222]: + minica --ca-key ca/key.pem --ca-cert ca/cert.pem --domains selfsigned.local
container-test-run-certificates> ca # [2258196.814888] ca systemd[1]: Finished Set up the ACME certificate renewal infrastructure.
container-test-run-certificates> ca # [2258196.816630] ca systemd[1]: Starting Ensure certificate for ca.foo...
container-test-run-certificates> ca # [2258196.896187] ca systemd-networkd[189]: eth1: Gained IPv6LL
container-test-run-certificates> ca # [2258196.992441] ca step-ca[206]: badger 2026/09/30 10:43:36 INFO: All 0 tables opened in 0s
container-test-run-certificates> ca # [2258197.003383] ca step-ca[206]: 2026/09/30 10:43:36 Building new tls configuration using step-ca x509 Signer Interface
container-test-run-certificates> ca # [2258197.012968] ca step-ca[206]: 2026/09/30 10:43:36 Starting Smallstep CA/0.30.2 (linux/arm64)
container-test-run-certificates> ca # [2258197.012968] ca step-ca[206]: 2026/09/30 10:43:36 Documentation: https://u.step.sm/docs/ca
container-test-run-certificates> ca # [2258197.012968] ca step-ca[206]: 2026/09/30 10:43:36 Community Discord: https://u.step.sm/discord
container-test-run-certificates> ca # [2258197.012968] ca step-ca[206]: 2026/09/30 10:43:36 Config file: /etc/smallstep/ca.json
container-test-run-certificates> ca # [2258197.012968] ca step-ca[206]: 2026/09/30 10:43:36 The primary server URL is https://ca.foo:1443
container-test-run-certificates> ca # [2258197.013242] ca step-ca[206]: 2026/09/30 10:43:36 Root certificates are available at https://ca.foo:1443/roots.pem
container-test-run-certificates> ca # [2258197.013242] ca step-ca[206]: 2026/09/30 10:43:36 X.509 Root Fingerprint: 65bc2982098377d833bc3fc96e6d4971fc981b466cf9bba1054baf224584789d
container-test-run-certificates> ca # [2258197.013745] ca systemd[1]: Started step-ca service.
container-test-run-certificates> ca # [2258197.014125] ca step-ca[206]: 2026/09/30 10:43:36 Serving HTTPS on 0.0.0.0:1443 ...
container-test-run-certificates> ca # [2258197.688317] ca acme-ca.foo-start[259]: Waiting to acquire lock in /run/acme/
container-test-run-certificates> ca # [2258197.692332] ca acme-ca.foo-start[259]: + '[' -e out/acme-success ']'
container-test-run-certificates> ca # [2258197.692332] ca acme-ca.foo-start[259]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=ca.foo --ip-addresses=
container-test-run-certificates> ca # [2258197.708571] ca acme-ca.foo-start[296]: + cd ca.foo
container-test-run-certificates> ca # [2258197.709052] ca acme-ca.foo-start[296]: + cp -vp cert.pem ../out/cert.pem
container-test-run-certificates> ca # [2258197.710391] ca acme-ca.foo-start[297]: 'cert.pem' -> '../out/cert.pem'
container-test-run-certificates> ca # [2258197.710721] ca acme-ca.foo-start[296]: + cp -vp key.pem ../out/key.pem
container-test-run-certificates> ca # [2258197.712295] ca acme-ca.foo-start[296]: 'key.pem' -> '../out/key.pem'
container-test-run-certificates> ca # [2258197.712541] ca acme-ca.foo-start[259]: + cat out/cert.pem ca/cert.pem
container-test-run-certificates> ca # [2258197.714268] ca acme-ca.foo-start[259]: + cp ca/cert.pem out/chain.pem
container-test-run-certificates> ca # [2258197.716321] ca acme-ca.foo-start[259]: + cat out/key.pem out/fullchain.pem
container-test-run-certificates> ca # [2258197.718267] ca acme-ca.foo-start[259]: + for fixpath in out certificates
container-test-run-certificates> ca # [2258197.718267] ca acme-ca.foo-start[259]: + '[' -d out ']'
container-test-run-certificates> ca # [2258197.718380] ca acme-ca.foo-start[259]: + chmod -R u=rwX,g=rX,o= out
container-test-run-certificates> ca # [2258197.719950] ca acme-ca.foo-start[259]: + chown -R acme:nginx out
container-test-run-certificates> ca # [2258197.723002] ca acme-ca.foo-start[259]: + for fixpath in out certificates
container-test-run-certificates> ca # [2258197.723002] ca acme-ca.foo-start[259]: + '[' -d certificates ']'
container-test-run-certificates> ca # [2258197.728646] ca systemd[1]: Finished Ensure certificate for ca.foo.
container-test-run-certificates> ca # [2258197.731117] ca systemd[1]: Starting Nginx Web Server...
container-test-run-certificates> ca # [2258198.640638] ca nginx-pre-start[308]: nginx: the configuration file /nix/store/922g9fm0n4v8xgbmb7sf8jkswmagn21n-nginx.conf syntax is ok
container-test-run-certificates> ca # [2258198.641275] ca nginx-pre-start[308]: nginx: configuration file /nix/store/922g9fm0n4v8xgbmb7sf8jkswmagn21n-nginx.conf test is successful
container-test-run-certificates> ca # [2258198.646640] ca systemd[1]: Started Nginx Web Server.
container-test-run-certificates> ca # [2258198.648289] ca systemd[1]: Reached target Multi-User System.
container-test-run-certificates> ca # [2258198.650781] ca systemd[1]: Starting Order (and renew) ACME certificate for ca.foo...
container-test-run-certificates> ca # [2258199.524475] ca acme-order-renew-ca.foo-start[311]: Waiting to acquire lock in /run/acme/
container-test-run-certificates> ca # [2258199.527817] ca acme-order-renew-ca.foo-start[311]: + set -euo pipefail
container-test-run-certificates> ca # [2258199.527957] ca acme-order-renew-ca.foo-start[311]: + exec
container-test-run-certificates> ca # [2258199.528066] ca acme-order-renew-ca.foo-start[311]: + /nix/store/vf2h24m5aa7phb4v1kbc2qd9r41jdfqv-flock-0.4.0/bin/flock 11
container-test-run-certificates> ca # [2258199.529496] ca acme-order-renew-ca.foo-start[322]: ++ find accounts -path '*/keys/*.key' -print -quit
container-test-run-certificates> ca # [2258199.532745] ca acme-order-renew-ca.foo-start[311]: + '[' -n '' ']'
container-test-run-certificates> ca # [2258199.532826] ca acme-order-renew-ca.foo-start[311]: + exec
container-test-run-certificates> ca # [2258199.532878] ca acme-order-renew-ca.foo-start[311]: + '[' -e certificates/ca.foo.key ']'
container-test-run-certificates> ca # [2258199.532878] ca acme-order-renew-ca.foo-start[311]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo:1443/acme/acme/directory --key-type ec256 -d ca.foo --no-random-sleep --renew-force --ari-disable --force-cert-domains
container-test-run-certificates> ca # [2258199.633881] ca acme-order-renew-ca.foo-start[323]: 2026-09-30T10:43:39.619657848Z INFO  Private key saved. filepath=accounts/ca.foo_1443/none@none.tld/none@none.tld.key
container-test-run-certificates> ca # [2258199.664345] ca step-ca[206]: time="2026-09-30T10:43:39Z" level=info duration="120.722µs" duration-ns=120722 fields.time="2026-09-30T10:43:39Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=0e304c7e-6d89-423e-bec0-3b6ccb9a8644 response="{\"newNonce\":\"https://ca.foo:1443/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo:1443/acme/acme/new-account\",\"newOrder\":\"https://ca.foo:1443/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo:1443/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo:1443/acme/acme/key-change\"}" size=277 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [2258199.664995] ca acme-order-renew-ca.foo-start[323]: 2026-09-30T10:43:39.650628954Z INFO  Registering the account. email=none@none.tld
container-test-run-certificates> ca # [2258199.746004] ca step-ca[206]: time="2026-09-30T10:43:39Z" level=info duration=80.717111ms duration-ns=80717111 fields.time="2026-09-30T10:43:39Z" method=HEAD name=ca nonce=MVlNMWlCcjR0cnJvS3NwYjJWbVd0d3RsQk5UZ2lRdTA path=/acme/acme/new-nonce protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=efe8de65-d1ce-4d70-8d54-2bc64a47d3be size=0 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [2258199.750411] ca step-ca[206]: time="2026-09-30T10:43:39Z" level=info duration=3.009162ms duration-ns=3009162 fields.time="2026-09-30T10:43:39Z" method=POST name=ca nonce=Z2dmT2xmczR2bUNSellGZXdMMFg1azhrYVprWHNpT1E path=/acme/acme/new-account protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=729eb1ec-fdc2-4df5-a262-00da2e3402de response="{\"contact\":[\"mailto:none@none.tld\"],\"status\":\"valid\",\"orders\":\"https://ca.foo:1443/acme/acme/account/Me2wSsRvW5nQ0uEslgKckZVXEMufEx44/orders\"}" size=143 status=201 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [2258199.751032] ca acme-order-renew-ca.foo-start[323]: 2026-09-30T10:43:39.736827181Z WARN  !!!! HEADS UP !!!!
container-test-run-certificates> ca # [2258199.751032] ca acme-order-renew-ca.foo-start[323]: Your account credentials have been saved in your
container-test-run-certificates> ca # [2258199.751032] ca acme-order-renew-ca.foo-start[323]: configuration directory at "accounts".
container-test-run-certificates> ca # [2258199.751032] ca acme-order-renew-ca.foo-start[323]: You should make a secure backup of this folder now. This
container-test-run-certificates> ca # [2258199.751032] ca acme-order-renew-ca.foo-start[323]: configuration directory will also contain private keys
container-test-run-certificates> ca # [2258199.751032] ca acme-order-renew-ca.foo-start[323]: generated by lego and certificates obtained from the ACME
container-test-run-certificates> ca # [2258199.751032] ca acme-order-renew-ca.foo-start[323]: server. Making regular backups of this folder is ideal.
container-test-run-certificates> ca # [2258199.751360] ca acme-order-renew-ca.foo-start[323]: 2026-09-30T10:43:39.737086665Z INFO  Obtaining bundled SAN certificate. domains=ca.foo
container-test-run-certificates> ca # [2258199.756727] ca step-ca[206]: time="2026-09-30T10:43:39Z" level=info duration=4.627824ms duration-ns=4627824 fields.time="2026-09-30T10:43:39Z" method=POST name=ca nonce=MlFhVjUwVUZOMmJlUW9iU2pqS2NyaktmZnc2T3hDZ2k path=/acme/acme/new-order protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=9a06edf2-252a-458b-9b0d-5eb77efa77b8 response="{\"id\":\"i6tJVXlVP1i7b9OkWvCkt6fcw0S8ATa1\",\"status\":\"pending\",\"expires\":\"2026-10-01T10:43:39Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"ca.foo\"}],\"notBefore\":\"2026-09-30T10:42:39Z\",\"notAfter\":\"2026-12-29T10:43:39Z\",\"authorizations\":[\"https://ca.foo:1443/acme/acme/authz/IvrvH9cm5uMAWVU5YyhY5tbnr7DoOUjK\"],\"finalize\":\"https://ca.foo:1443/acme/acme/order/i6tJVXlVP1i7b9OkWvCkt6fcw0S8ATa1/finalize\"}" size=392 status=201 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [2258199.816210] ca step-ca[206]: time="2026-09-30T10:43:39Z" level=info duration=2.15027ms duration-ns=2150270 fields.time="2026-09-30T10:43:39Z" method=POST name=ca nonce=UFMzS0tQVWcxcTVTbk1rSThla0k1a2RhS1pWSlFiQ2g path=/acme/acme/authz/IvrvH9cm5uMAWVU5YyhY5tbnr7DoOUjK protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=13021d8e-bdc2-496e-a7e6-0383ddc6894c response="{\"identifier\":{\"type\":\"dns\",\"value\":\"ca.foo\"},\"status\":\"pending\",\"challenges\":[{\"type\":\"dns-01\",\"status\":\"pending\",\"token\":\"LB91CkPZ33Kn9YGRPFKCbEB9eHyHKD6S\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/IvrvH9cm5uMAWVU5YyhY5tbnr7DoOUjK/IpsEiymGAFyvSoexxFNnpHdFYVillq3p\"},{\"type\":\"http-01\",\"status\":\"pending\",\"token\":\"LB91CkPZ33Kn9YGRPFKCbEB9eHyHKD6S\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/IvrvH9cm5uMAWVU5YyhY5tbnr7DoOUjK/ncMMcM3QALPDhbbrcec7kB1TEzgUGERi\"},{\"type\":\"tls-alpn-01\",\"status\":\"pending\",\"token\":\"LB91CkPZ33Kn9YGRPFKCbEB9eHyHKD6S\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/IvrvH9cm5uMAWVU5YyhY5tbnr7DoOUjK/b1NfT0TWZqg2lVC4RN76MvKSi6YopyGR\"}],\"wildcard\":false,\"expires\":\"2026-10-01T10:43:39Z\"}" size=719 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [2258199.816740] ca acme-order-renew-ca.foo-start[323]: 2026-09-30T10:43:39.802523726Z INFO  Use solver. domain=ca.foo type=http-01
container-test-run-certificates> ca # [2258199.816826] ca acme-order-renew-ca.foo-start[323]: 2026-09-30T10:43:39.802581766Z INFO  http01: Trying to solve HTTP-01. domain=ca.foo
container-test-run-certificates> ca # [2258199.822850] ca step-ca[206]: time="2026-09-30T10:43:39Z" level=info duration=5.152591ms duration-ns=5152591 fields.time="2026-09-30T10:43:39Z" method=POST name=ca nonce=aDhyR0FMZG5mcHQwYTg1Q2ZEalgwdVE2WENSMEJrUHo path=/acme/acme/challenge/IvrvH9cm5uMAWVU5YyhY5tbnr7DoOUjK/ncMMcM3QALPDhbbrcec7kB1TEzgUGERi protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=950018d5-f722-42dc-9fb5-81ed1c2a83db response="{\"type\":\"http-01\",\"status\":\"valid\",\"token\":\"LB91CkPZ33Kn9YGRPFKCbEB9eHyHKD6S\",\"validated\":\"2026-09-30T10:43:39Z\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/IvrvH9cm5uMAWVU5YyhY5tbnr7DoOUjK/ncMMcM3QALPDhbbrcec7kB1TEzgUGERi\"}" size=228 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [2258199.823239] ca acme-order-renew-ca.foo-start[323]: 2026-09-30T10:43:39.809036335Z INFO  The server validated our request. domain=ca.foo
container-test-run-certificates> ca # [2258199.823378] ca acme-order-renew-ca.foo-start[323]: 2026-09-30T10:43:39.809187697Z INFO  Validations succeeded; requesting certificates. domains=ca.foo
container-test-run-certificates> ca # [2258199.834232] ca step-ca[206]: time="2026-09-30T10:43:39Z" level=info duration=9.077165ms duration-ns=9077165 fields.time="2026-09-30T10:43:39Z" method=POST name=ca nonce=Smo5R0ZiMWFmSllnVG45RlhmemxvdXRsYTRRdTBNbzQ path=/acme/acme/order/i6tJVXlVP1i7b9OkWvCkt6fcw0S8ATa1/finalize protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=c3650417-815a-427d-9436-37992f981d0f response="{\"id\":\"i6tJVXlVP1i7b9OkWvCkt6fcw0S8ATa1\",\"status\":\"valid\",\"expires\":\"2026-10-01T10:43:39Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"ca.foo\"}],\"notBefore\":\"2026-09-30T10:42:39Z\",\"notAfter\":\"2026-12-29T10:43:39Z\",\"authorizations\":[\"https://ca.foo:1443/acme/acme/authz/IvrvH9cm5uMAWVU5YyhY5tbnr7DoOUjK\"],\"finalize\":\"https://ca.foo:1443/acme/acme/order/i6tJVXlVP1i7b9OkWvCkt6fcw0S8ATa1/finalize\",\"certificate\":\"https://ca.foo:1443/acme/acme/certificate/318jHkljjNWVBS5rIorABRxojMml54H6\"}" size=481 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [2258199.836859] ca step-ca[206]: time="2026-09-30T10:43:39Z" level=info certificate="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" duration=1.700703ms duration-ns=1700703 fields.time="2026-09-30T10:43:39Z" issuer="Clan Intermediate CA" method=POST name=ca nonce=WXd1ek9Md2k3MjBHVkRRMlpEOEVwUlN5bWU4V3FzMkY path=/acme/acme/certificate/318jHkljjNWVBS5rIorABRxojMml54H6 protocol=HTTP/1.1 provisioner=acme public-key="ECDSA P-256" referer= remote-address="2001:db8:1::1" request-id=617722ac-5111-44cc-9bba-3579401f954c sans="map[dns:[ca.foo]]" serial=284032588060074465872732675503932170730 size=1344 status=200 subject=ca.foo user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= valid-from="2026-09-30T10:42:39Z" valid-to="2026-12-29T10:43:39Z"
container-test-run-certificates> ca # [2258199.837182] ca acme-order-renew-ca.foo-start[323]: 2026-09-30T10:43:39.822982167Z INFO  Server responded with a certificate. domains=ca.foo
container-test-run-certificates> ca # [2258199.837264] ca acme-order-renew-ca.foo-start[323]: 2026-09-30T10:43:39.823078289Z INFO  Writing file. filepath=certificates/ca.foo.crt
container-test-run-certificates> ca # [2258199.837420] ca acme-order-renew-ca.foo-start[323]: 2026-09-30T10:43:39.823229091Z INFO  Writing file. filepath=certificates/ca.foo.issuer.crt
container-test-run-certificates> ca # [2258199.837502] ca acme-order-renew-ca.foo-start[323]: 2026-09-30T10:43:39.823314412Z INFO  Writing file. filepath=certificates/ca.foo.key
container-test-run-certificates> ca # [2258199.837637] ca acme-order-renew-ca.foo-start[323]: 2026-09-30T10:43:39.823448654Z INFO  Writing file. filepath=certificates/ca.foo.json
container-test-run-certificates> ca # [2258199.842962] ca acme-order-renew-ca.foo-start[311]: + touch out/acme-success
container-test-run-certificates> ca # [2258199.845108] ca acme-order-renew-ca.foo-start[311]: + cmp -s certificates/ca.foo.crt out/fullchain.pem
container-test-run-certificates> ca # [2258199.846741] ca acme-order-renew-ca.foo-start[311]: + touch out/renewed
container-test-run-certificates> ca # [2258199.848724] ca acme-order-renew-ca.foo-start[311]: + echo Installing new certificate
container-test-run-certificates> ca # [2258199.848724] ca acme-order-renew-ca.foo-start[311]: Installing new certificate
container-test-run-certificates> ca # [2258199.848724] ca acme-order-renew-ca.foo-start[311]: + cp -vp certificates/ca.foo.crt out/fullchain.pem
container-test-run-certificates> ca # [2258199.850524] ca acme-order-renew-ca.foo-start[354]: 'certificates/ca.foo.crt' -> 'out/fullchain.pem'
container-test-run-certificates> ca # [2258199.850885] ca acme-order-renew-ca.foo-start[311]: + cp -vp certificates/ca.foo.key out/key.pem
container-test-run-certificates> ca # [2258199.852711] ca acme-order-renew-ca.foo-start[355]: 'certificates/ca.foo.key' -> 'out/key.pem'
container-test-run-certificates> ca # [2258199.853013] ca acme-order-renew-ca.foo-start[311]: + cp -vp certificates/ca.foo.issuer.crt out/chain.pem
container-test-run-certificates> ca # [2258199.854612] ca acme-order-renew-ca.foo-start[356]: 'certificates/ca.foo.issuer.crt' -> 'out/chain.pem'
container-test-run-certificates> ca # [2258199.854919] ca acme-order-renew-ca.foo-start[311]: + ln -sf fullchain.pem out/cert.pem
container-test-run-certificates> ca # [2258199.857016] ca acme-order-renew-ca.foo-start[311]: + cat out/key.pem out/fullchain.pem
container-test-run-certificates> ca # [2258199.859125] ca acme-order-renew-ca.foo-start[311]: + for fixpath in out certificates
container-test-run-certificates> ca # [2258199.859125] ca acme-order-renew-ca.foo-start[311]: + '[' -d out ']'
container-test-run-certificates> ca # [2258199.859219] ca acme-order-renew-ca.foo-start[311]: + chmod -R u=rwX,g=rX,o= out
container-test-run-certificates> ca # [2258199.860904] ca acme-order-renew-ca.foo-start[311]: + chown -R acme:nginx out
container-test-run-certificates> ca # [2258199.863702] ca acme-order-renew-ca.foo-start[311]: + for fixpath in out certificates
container-test-run-certificates> ca # [2258199.863702] ca acme-order-renew-ca.foo-start[311]: + '[' -d certificates ']'
container-test-run-certificates> ca # [2258199.863817] ca acme-order-renew-ca.foo-start[311]: + chmod -R u=rwX,g=rX,o= certificates
container-test-run-certificates> ca # [2258199.865571] ca acme-order-renew-ca.foo-start[311]: + chown -R acme:nginx certificates
container-test-run-certificates> ca # [2258199.868873] ca acme-order-renew-ca.foo-start[311]: + chmod -R u=rwX,g=,o= accounts/.
container-test-run-certificates> ca # [2258200.085764] ca systemd[1]: Reloading Nginx Web Server...
container-test-run-certificates> ca # [2258200.090704] ca systemd[1]: acme-order-renew-ca.foo.service: Deactivated successfully.
container-test-run-certificates> ca # [2258200.090953] ca systemd[1]: Finished Order (and renew) ACME certificate for ca.foo.
container-test-run-certificates> ca # [2258200.091208] ca systemd[1]: acme-order-renew-ca.foo.service: Consumed 1.159s CPU time over 1.440s wall clock time.
container-test-run-certificates> ca # [2258200.990934] ca nginx[372]: nginx: the configuration file /nix/store/922g9fm0n4v8xgbmb7sf8jkswmagn21n-nginx.conf syntax is ok
container-test-run-certificates> ca # [2258200.991454] ca nginx[372]: nginx: configuration file /nix/store/922g9fm0n4v8xgbmb7sf8jkswmagn21n-nginx.conf test is successful
container-test-run-certificates> ca # [2258201.897133] ca systemd[1]: Reloaded Nginx Web Server.
container-test-run-certificates> ca # [2258201.897605] ca systemd[1]: Startup finished in 8.149s.
container-test-run-certificates> ca: (finished: waiting for unit step-ca.service, in 9.16 seconds)
container-test-run-certificates> ca: waiting for file '/var/lib/acme/ca.foo/fullchain.pem'
container-test-run-certificates> ca: (finished: waiting for file '/var/lib/acme/ca.foo/fullchain.pem', in 0.01 seconds)
container-test-run-certificates> ca: must succeed: systemctl restart nginx.service
container-test-run-certificates> ca # [2258202.406600] ca systemd[1]: Stopping Nginx Web Server...
container-test-run-certificates> ca # [2258202.488110] ca systemd[1]: nginx.service: Deactivated successfully.
container-test-run-certificates> ca # [2258202.488494] ca systemd[1]: Stopped Nginx Web Server.
container-test-run-certificates> ca # [2258202.488537] ca systemd[1]: nginx.service: Consumed 3.472s CPU time over 4.757s wall clock time.
container-test-run-certificates> ca # [2258202.493057] ca systemd[1]: Starting Nginx Web Server...
container-test-run-certificates> ca: (finished: must succeed: systemctl restart nginx.service, in 1.04 seconds)
container-test-run-certificates> server: systemd-nspawn running (pid 466)
container-test-run-certificates> server: Waiting for journal at /build/vm-state-server/var/log/journal...
container-test-run-certificates> client: systemd-nspawn running (pid 469)
container-test-run-certificates> client: Waiting for journal at /build/vm-state-client/var/log/journal...
container-test-run-certificates> server: waiting for file '/var/lib/acme/test.foo/fullchain.pem'
container-test-run-certificates> nixos-nspawn(client): TAP vde-tap1 not found; container will be isolated from VDE
container-test-run-certificates> nixos-nspawn(client): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.
container-test-run-certificates> nixos-nspawn(server): TAP vde-tap1 not found; container will be isolated from VDE
container-test-run-certificates> nixos-nspawn(server): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.
container-test-run-certificates> Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.
container-test-run-certificates> Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.
container-test-run-certificates> ░ Spawning container client on /build/vm-state-client.
container-test-run-certificates> ░ Spawning container server on /build/vm-state-server.
container-test-run-certificates> ca # [2258203.424602] ca nginx-pre-start[396]: nginx: the configuration file /nix/store/922g9fm0n4v8xgbmb7sf8jkswmagn21n-nginx.conf syntax is ok
container-test-run-certificates> ca # [2258203.425160] ca nginx-pre-start[396]: nginx: configuration file /nix/store/922g9fm0n4v8xgbmb7sf8jkswmagn21n-nginx.conf test is successful
container-test-run-certificates> ca # [2258203.430308] ca systemd[1]: Started Nginx Web Server.
container-test-run-certificates> server # No journal files were found.
container-test-run-certificates> server # No journal boot entry found for the specified boot (+0).
container-test-run-certificates> client # No journal files were found.
container-test-run-certificates> client # No journal boot entry found for the specified boot (+0).
container-test-run-certificates> server # [2258204.449994] server systemd-journald[72]: Journal started
container-test-run-certificates> server # [2258204.450052] server systemd-journald[72]: Runtime Journal (/run/log/journal/97a2b79391f54cc1b6dcea54c74ff478) is 8M, max 2.5G, 2.4G free.
container-test-run-certificates> server # [2258204.457137] server systemd[1]: Finished Apply Kernel Variables.
container-test-run-certificates> server # [2258204.470144] server systemd[1]: Finished Create Static Device Nodes in /dev gracefully.
container-test-run-certificates> server # [2258204.484464] server systemd[1]: Starting Flush Journal to Persistent Storage...
container-test-run-certificates> server # [2258204.485240] server systemd[1]: Starting Network Name Resolution...
container-test-run-certificates> server # [2258204.485956] server systemd[1]: Starting Create Static Device Nodes in /dev...
container-test-run-certificates> server # [2258204.527927] server systemd-journald[72]: Time spent on flushing to /var/log/journal/97a2b79391f54cc1b6dcea54c74ff478 is 2.447ms for 7 entries.
container-test-run-certificates> server # [2258204.527927] server systemd-journald[72]: System Journal (/var/log/journal/97a2b79391f54cc1b6dcea54c74ff478) is 8M, max 4G, 3.9G free.
container-test-run-certificates> server # [2258204.542616] server systemd[1]: Finished Create Static Device Nodes in /dev.
container-test-run-certificates> server # [2258204.543198] server systemd[1]: Reached target Preparation for Local File Systems.
container-test-run-certificates> server # [2258204.543304] server systemd[1]: Reached target Local File Systems.
container-test-run-certificates> server # [2258204.544173] server systemd[1]: Listening on Boot Loader Control Service Socket.
container-test-run-certificates> server # [2258204.544225] server systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container
container-test-run-certificates> server # [2258204.545075] server systemd[1]: Starting Save Transient machine-id to Disk...
container-test-run-certificates> server # [2258204.545112] server systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys
container-test-run-certificates> server # [2258204.555318] server systemd[1]: Finished Flush Journal to Persistent Storage.
container-test-run-certificates> server # [2258204.556776] server systemd[1]: Starting Create System Files and Directories...
container-test-run-certificates> server # [2258204.573015] server systemd-tmpfiles[148]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted
container-test-run-certificates> server # [2258204.573227] server systemd-tmpfiles[148]: fchmod() of /var/log/journal failed: Operation not permitted
container-test-run-certificates> server # [2258204.573373] server systemd-tmpfiles[148]: fchmod() of /var/log/journal/97a2b79391f54cc1b6dcea54c74ff478 failed: Operation not permitted
container-test-run-certificates> server # [2258204.573584] server systemd-tmpfiles[148]: fchmod() of /run/log/journal failed: Operation not permitted
container-test-run-certificates> server # [2258204.575083] server systemd[1]: Finished Create System Files and Directories.
container-test-run-certificates> server # [2258204.576361] server systemd[1]: Starting Rebuild Journal Catalog...
container-test-run-certificates> server # [2258204.577083] server systemd[1]: Starting Record System Boot/Shutdown in UTMP...
container-test-run-certificates> server # [2258204.593427] server systemd[1]: Finished Record System Boot/Shutdown in UTMP.
container-test-run-certificates> server # [2258204.600768] server systemd[1]: Finished Rebuild Journal Catalog.
container-test-run-certificates> server # [2258204.603112] server systemd[1]: Starting Update is Completed...
container-test-run-certificates> server # [2258204.617581] server systemd[1]: Finished Update is Completed.
container-test-run-certificates> server # [2258204.624401] server systemd[1]: Finished Firewall.
container-test-run-certificates> server # [2258204.624612] server systemd[1]: Reached target Preparation for Network.
container-test-run-certificates> server # [2258204.624906] server systemd[1]: Listening on Network Management Resolve Hook Socket.
container-test-run-certificates> server # [2258204.626145] server systemd[1]: Starting Network Management...
container-test-run-certificates> server # [2258204.629440] server systemd[1]: Finished Save Transient machine-id to Disk.
container-test-run-certificates> server # [2258205.287051] server systemd-networkd[189]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted
container-test-run-certificates> server # [2258205.287144] server systemd-networkd[189]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted
container-test-run-certificates> server # [2258205.296964] server systemd-networkd[189]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.
container-test-run-certificates> server # [2258205.297133] server systemd-networkd[189]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.
container-test-run-certificates> server # [2258205.297364] server systemd-networkd[189]: lo: Link UP
container-test-run-certificates> server # [2258205.297368] server systemd-networkd[189]: lo: Gained carrier
container-test-run-certificates> client # [2258204.449612] client systemd-journald[72]: Journal started
container-test-run-certificates> server # [2258205.297701] server systemd-networkd[189]: eth1: Configuring with /etc/systemd/network/40-eth1.network.
container-test-run-certificates> client # [2258204.449674] client systemd-journald[72]: Runtime Journal (/run/log/journal/4fa2d097ba3447298622ea42b5712c4e) is 8M, max 2.5G, 2.4G free.
container-test-run-certificates> server # [2258205.298330] server systemd[1]: Started Network Management.
container-test-run-certificates> client # [2258204.460724] client systemd[1]: Finished Apply Kernel Variables.
container-test-run-certificates> server # [2258205.298453] server systemd-networkd[189]: eth1: Link UP
container-test-run-certificates> client # [2258204.474155] client systemd[1]: Finished Create Static Device Nodes in /dev gracefully.
container-test-run-certificates> server # [2258205.298836] server systemd-networkd[189]: eth1: Gained carrier
container-test-run-certificates> client # [2258204.489013] client systemd[1]: Starting Flush Journal to Persistent Storage...
container-test-run-certificates> server # [2258205.300172] server systemd[1]: Starting Enable Persistent Storage in systemd-networkd...
container-test-run-certificates> client # [2258204.520335] client systemd[1]: Starting Network Name Resolution...
container-test-run-certificates> server # [2258205.370000] server systemd[1]: Finished Enable Persistent Storage in systemd-networkd.
container-test-run-certificates> client # [2258204.521083] client systemd[1]: Starting Create Static Device Nodes in /dev...
container-test-run-certificates> client # [2258204.527307] client systemd-journald[72]: Time spent on flushing to /var/log/journal/4fa2d097ba3447298622ea42b5712c4e is 1.868ms for 7 entries.
container-test-run-certificates> client # [2258204.527307] client systemd-journald[72]: System Journal (/var/log/journal/4fa2d097ba3447298622ea42b5712c4e) is 8M, max 4G, 3.9G free.
container-test-run-certificates> client # [2258204.560600] client systemd[1]: Finished Flush Journal to Persistent Storage.
container-test-run-certificates> client # [2258204.561031] client systemd[1]: Finished Create Static Device Nodes in /dev.
container-test-run-certificates> client # [2258204.562162] client systemd[1]: Reached target Preparation for Local File Systems.
container-test-run-certificates> client # [2258204.562269] client systemd[1]: Reached target Local File Systems.
container-test-run-certificates> client # [2258204.563097] client systemd[1]: Listening on Boot Loader Control Service Socket.
container-test-run-certificates> client # [2258204.563145] client systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container
container-test-run-certificates> client # [2258204.564075] client systemd[1]: Starting Save Transient machine-id to Disk...
container-test-run-certificates> client # [2258204.564778] client systemd[1]: Starting Create System Files and Directories...
container-test-run-certificates> client # [2258204.564813] client systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys
container-test-run-certificates> client # [2258204.582719] client systemd-tmpfiles[151]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted
container-test-run-certificates> client # [2258204.582940] client systemd-tmpfiles[151]: fchmod() of /var/log/journal failed: Operation not permitted
container-test-run-certificates> client # [2258204.583092] client systemd-tmpfiles[151]: fchmod() of /var/log/journal/4fa2d097ba3447298622ea42b5712c4e failed: Operation not permitted
container-test-run-certificates> client # [2258204.583326] client systemd-tmpfiles[151]: fchmod() of /run/log/journal failed: Operation not permitted
container-test-run-certificates> client # [2258204.584947] client systemd[1]: Finished Create System Files and Directories.
container-test-run-certificates> client # [2258204.586268] client systemd[1]: Starting Rebuild Journal Catalog...
container-test-run-certificates> client # [2258204.587166] client systemd[1]: Starting Record System Boot/Shutdown in UTMP...
container-test-run-certificates> client # [2258204.603660] client systemd[1]: Finished Record System Boot/Shutdown in UTMP.
container-test-run-certificates> client # [2258204.610817] client systemd[1]: Finished Rebuild Journal Catalog.
container-test-run-certificates> client # [2258204.612414] client systemd[1]: Starting Update is Completed...
container-test-run-certificates> client # [2258204.618235] client systemd[1]: Finished Firewall.
container-test-run-certificates> client # [2258204.618465] client systemd[1]: Reached target Preparation for Network.
container-test-run-certificates> client # [2258204.618761] client systemd[1]: Listening on Network Management Resolve Hook Socket.
container-test-run-certificates> client # [2258204.620201] client systemd[1]: Starting Network Management...
container-test-run-certificates> client # [2258204.624493] client systemd[1]: Finished Update is Completed.
container-test-run-certificates> client # [2258204.629467] client systemd[1]: Finished Save Transient machine-id to Disk.
container-test-run-certificates> client # [2258205.298078] client systemd-networkd[184]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted
container-test-run-certificates> client # [2258205.298160] client systemd-networkd[184]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted
container-test-run-certificates> client # [2258205.307817] client systemd-networkd[184]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.
container-test-run-certificates> client # [2258205.307982] client systemd-networkd[184]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section.
container-test-run-certificates> client # [2258205.308136] client systemd-networkd[184]: lo: Link UP
container-test-run-certificates> client # [2258205.308140] client systemd-networkd[184]: lo: Gained carrier
container-test-run-certificates> client # [2258205.308302] client systemd-networkd[184]: eth1: Configuring with /etc/systemd/network/40-eth1.network.
container-test-run-certificates> client # [2258205.308714] client systemd[1]: Started Network Management.
container-test-run-certificates> client # [2258205.360302] client systemd-networkd[184]: eth1: Link UP
container-test-run-certificates> client # [2258205.360587] client systemd[1]: Starting Enable Persistent Storage in systemd-networkd...
container-test-run-certificates> client # [2258205.360632] client systemd-networkd[184]: eth1: Gained carrier
container-test-run-certificates> client # [2258205.406289] client systemd[1]: Finished Enable Persistent Storage in systemd-networkd.
container-test-run-certificates> server # [2258205.461256] server systemd[1]: etc-machine\x2did.mount: Deactivated successfully.
container-test-run-certificates> client # [2258205.461107] client systemd[1]: etc-machine\x2did.mount: Deactivated successfully.
container-test-run-certificates> server # [2258205.694005] server systemd-resolved[107]: Positive Trust Anchors:
container-test-run-certificates> server # [2258205.694017] server systemd-resolved[107]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d
container-test-run-certificates> server # [2258205.694020] server systemd-resolved[107]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16
container-test-run-certificates> server # [2258205.694055] server systemd-resolved[107]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test
container-test-run-certificates> server # [2258205.714064] server systemd-resolved[107]: Using system hostname 'server'.
container-test-run-certificates> server # [2258205.715396] server systemd[1]: Started Network Name Resolution.
container-test-run-certificates> server # [2258205.715522] server systemd[1]: Reached target Network.
container-test-run-certificates> server # [2258205.715636] server systemd[1]: Reached target Network is Online.
container-test-run-certificates> server # [2258205.715718] server systemd[1]: Reached target System Initialization.
container-test-run-certificates> server # [2258205.716131] server systemd[1]: Started Renew ACME Certificate for test.foo.
container-test-run-certificates> server # [2258205.716181] server systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container
container-test-run-certificates> server # [2258205.716233] server systemd[1]: Started Daily Cleanup of Temporary Directories.
container-test-run-certificates> server # [2258205.716272] server systemd[1]: Reached target Timer Units.
container-test-run-certificates> server # [2258205.716510] server systemd[1]: Listening on D-Bus System Message Bus Socket.
container-test-run-certificates> server # [2258205.716706] server systemd[1]: Listening on Nix Daemon Socket.
container-test-run-certificates> server # [2258205.716927] server systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.
container-test-run-certificates> server # [2258205.716975] server systemd[1]: Reached target Socket Units.
container-test-run-certificates> server # [2258205.717049] server systemd[1]: Reached target Basic System.
container-test-run-certificates> server # [2258205.741505] server systemd[1]: Starting Set up the ACME certificate renewal infrastructure...
container-test-run-certificates> server # [2258205.742844] server systemd[1]: Starting Import lastlog data into lastlog2 database...
container-test-run-certificates> server # [2258205.742913] server systemd[1]: nginx-config-reload.service skipped, unmet condition check ConditionPathExists=/var/lib/acme/test.foo/fullchain.pem
container-test-run-certificates> server # [2258205.744320] server systemd[1]: Starting Name Service Cache Daemon (nsncd)...
container-test-run-certificates> server # [2258205.746419] server systemd[1]: Starting D-Bus System Message Bus...
container-test-run-certificates> server # [2258205.765698] server systemd[1]: Finished Import lastlog data into lastlog2 database.
container-test-run-certificates> server # [2258205.897904] server acme-setup-privileged[195]: + set -euo pipefail
container-test-run-certificates> server # [2258205.897904] server acme-setup-privileged[195]: + cd /var/lib/acme
container-test-run-certificates> server # [2258205.897904] server acme-setup-privileged[195]: + chmod -R u=rwX,g=,o= .lego/accounts
container-test-run-certificates> server # [2258205.899880] server acme-setup-privileged[195]: + chown -R acme .lego/accounts
container-test-run-certificates> server # [2258205.901931] server acme-setup-privileged[195]: + for fixpath in test.foo .lego/test.foo
container-test-run-certificates> server # [2258205.901931] server acme-setup-privileged[195]: + '[' -d test.foo ']'
container-test-run-certificates> server # [2258205.902067] server acme-setup-privileged[195]: + for fixpath in test.foo .lego/test.foo
container-test-run-certificates> server # [2258205.902067] server acme-setup-privileged[195]: + '[' -d .lego/test.foo ']'
container-test-run-certificates> server # [2258205.940802] server systemd[1]: Started Name Service Cache Daemon (nsncd).
container-test-run-certificates> server # [2258205.940895] server systemd[1]: Reached target Host and Network Name Lookups.
container-test-run-certificates> server # [2258205.940991] server nsncd[197]: Sep 30 10:43:45.926 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"
container-test-run-certificates> server # [2258205.940975] server systemd[1]: Reached target User and Group Name Lookups.
container-test-run-certificates> server # [2258205.952913] server systemd[1]: Starting User Login Management...
container-test-run-certificates> client # [2258205.675266] client systemd-resolved[109]: Positive Trust Anchors:
container-test-run-certificates> client # [2258205.675277] client systemd-resolved[109]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d
container-test-run-certificates> client # [2258205.675280] client systemd-resolved[109]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16
container-test-run-certificates> client # [2258205.675315] client systemd-resolved[109]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test
container-test-run-certificates> client # [2258205.696071] client systemd-resolved[109]: Using system hostname 'client'.
container-test-run-certificates> client # [2258205.697442] client systemd[1]: Started Network Name Resolution.
container-test-run-certificates> client # [2258205.697573] client systemd[1]: Reached target Network.
container-test-run-certificates> client # [2258205.697690] client systemd[1]: Reached target System Initialization.
container-test-run-certificates> client # [2258205.697776] client systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container
container-test-run-certificates> client # [2258205.697831] client systemd[1]: Started Daily Cleanup of Temporary Directories.
container-test-run-certificates> client # [2258205.697868] client systemd[1]: Reached target Timer Units.
container-test-run-certificates> client # [2258205.698096] client systemd[1]: Listening on D-Bus System Message Bus Socket.
container-test-run-certificates> client # [2258205.698304] client systemd[1]: Listening on Nix Daemon Socket.
container-test-run-certificates> client # [2258205.698524] client systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.
container-test-run-certificates> client # [2258205.698574] client systemd[1]: Reached target Socket Units.
container-test-run-certificates> client # [2258205.698648] client systemd[1]: Reached target Basic System.
container-test-run-certificates> client # [2258205.700478] client systemd[1]: Starting Import lastlog data into lastlog2 database...
container-test-run-certificates> client # [2258205.701951] client systemd[1]: Starting Name Service Cache Daemon (nsncd)...
container-test-run-certificates> client # [2258205.704070] client systemd[1]: Starting D-Bus System Message Bus...
container-test-run-certificates> client # [2258205.759139] client systemd[1]: Finished Import lastlog data into lastlog2 database.
container-test-run-certificates> client # [2258205.953454] client systemd[1]: Started Name Service Cache Daemon (nsncd).
container-test-run-certificates> client # [2258205.953554] client systemd[1]: Reached target Host and Network Name Lookups.
container-test-run-certificates> client # [2258205.953667] client systemd[1]: Reached target User and Group Name Lookups.
container-test-run-certificates> client # [2258205.953846] client nsncd[192]: Sep 30 10:43:45.939 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"
container-test-run-certificates> client # [2258205.955820] client systemd[1]: Starting User Login Management...
container-test-run-certificates> client # [2258205.957292] client systemd[1]: Starting Permit User Sessions...
container-test-run-certificates> client # [2258205.968628] client systemd[1]: Finished Permit User Sessions.
container-test-run-certificates> client # [2258205.969827] client systemd[1]: Started Console Getty.
container-test-run-certificates> client # [2258205.969874] client systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0
container-test-run-certificates> client # [2258205.969896] client systemd[1]: Reached target Login Prompts.
container-test-run-certificates> client # [2258206.121789] client dbus-broker-launch[193]: Looking up NSS user entry for 'systemd-timesync'...
container-test-run-certificates> client # [2258206.123324] client dbus-broker-launch[193]: NSS returned no entry for 'systemd-timesync'
container-test-run-certificates> client # [2258206.123324] client dbus-broker-launch[193]: Invalid user-name in /nix/store/28vdgjm790vb7jlx00mcn21x8346frls-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"
container-test-run-certificates> client # [2258206.123715] client systemd[1]: Started D-Bus System Message Bus.
container-test-run-certificates> client # [2258206.132986] client dbus-broker-launch[193]: Ready
container-test-run-certificates> server # [2258205.953963] server systemd[1]: Starting Permit User Sessions...
container-test-run-certificates> server # [2258205.966299] server systemd[1]: Finished Permit User Sessions.
container-test-run-certificates> server # [2258205.968056] server systemd[1]: Started Console Getty.
container-test-run-certificates> server # [2258205.968136] server systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0
container-test-run-certificates> server # [2258205.968181] server systemd[1]: Reached target Login Prompts.
container-test-run-certificates> server # [2258206.100259] server dbus-broker-launch[198]: Looking up NSS user entry for 'systemd-timesync'...
container-test-run-certificates> server # [2258206.101630] server dbus-broker-launch[198]: NSS returned no entry for 'systemd-timesync'
container-test-run-certificates> server # [2258206.101630] server dbus-broker-launch[198]: Invalid user-name in /nix/store/2nnv0k2gvwdi1l5bmbqdhxrw71jj62hx-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"
container-test-run-certificates> server # [2258206.102300] server systemd[1]: Started D-Bus System Message Bus.
container-test-run-certificates> server # [2258206.111175] server dbus-broker-launch[198]: Ready
container-test-run-certificates> server # [2258206.763379] server systemd-logind[222]: New seat seat0.
container-test-run-certificates> server # [2258206.763564] server systemd[1]: Started User Login Management.
container-test-run-certificates> server # [2258206.765843] server systemd[1]: Starting linger-users.service...
container-test-run-certificates> server # [2258206.815444] server systemd[1]: linger-users.service: Deactivated successfully.
container-test-run-certificates> server # [2258206.815820] server systemd[1]: Finished linger-users.service.
container-test-run-certificates> server # [2258206.861468] server acme-setup-start[211]: + set -euo pipefail
container-test-run-certificates> server # [2258206.861468] server acme-setup-start[211]: + test -e ca/key.pem
container-test-run-certificates> server # [2258206.861914] server acme-setup-start[211]: + minica --ca-key ca/key.pem --ca-cert ca/cert.pem --domains selfsigned.local
container-test-run-certificates> server # [2258206.884544] server systemd[1]: Finished Set up the ACME certificate renewal infrastructure.
container-test-run-certificates> server # [2258206.887276] server systemd[1]: Starting Ensure certificate for test.foo...
container-test-run-certificates> client # [2258206.766953] client systemd-logind[208]: New seat seat0.
container-test-run-certificates> client # [2258206.767138] client systemd[1]: Started User Login Management.
container-test-run-certificates> client # [2258206.769185] client systemd[1]: Starting linger-users.service...
container-test-run-certificates> client # [2258206.815409] client systemd[1]: linger-users.service: Deactivated successfully.
container-test-run-certificates> client # [2258206.815827] client systemd[1]: Finished linger-users.service.
container-test-run-certificates> client # [2258206.816683] client systemd[1]: Reached target Multi-User System.
container-test-run-certificates> client # [2258206.817040] client systemd[1]: Startup finished in 2.859s.
container-test-run-certificates> client # [2258206.848151] client systemd-networkd[184]: eth1: Gained IPv6LL
container-test-run-certificates> server # [2258207.072200] server systemd-networkd[189]: eth1: Gained IPv6LL
container-test-run-certificates> server # [2258207.717750] server acme-test.foo-start[248]: Waiting to acquire lock in /run/acme/
container-test-run-certificates> server # [2258207.721311] server acme-test.foo-start[248]: + '[' -e out/acme-success ']'
container-test-run-certificates> server # [2258207.721398] server acme-test.foo-start[248]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=test.foo --ip-addresses=
container-test-run-certificates> server # [2258207.737138] server acme-test.foo-start[258]: + cd test.foo
container-test-run-certificates> server # [2258207.737599] server acme-test.foo-start[258]: + cp -vp cert.pem ../out/cert.pem
container-test-run-certificates> server # [2258207.739006] server acme-test.foo-start[259]: 'cert.pem' -> '../out/cert.pem'
container-test-run-certificates> server # [2258207.739346] server acme-test.foo-start[258]: + cp -vp key.pem ../out/key.pem
container-test-run-certificates> server # [2258207.740828] server acme-test.foo-start[258]: 'key.pem' -> '../out/key.pem'
container-test-run-certificates> server # [2258207.741063] server acme-test.foo-start[248]: + cat out/cert.pem ca/cert.pem
container-test-run-certificates> server # [2258207.743034] server acme-test.foo-start[248]: + cp ca/cert.pem out/chain.pem
container-test-run-certificates> server # [2258207.744777] server acme-test.foo-start[248]: + cat out/key.pem out/fullchain.pem
container-test-run-certificates> server # [2258207.746467] server acme-test.foo-start[248]: + for fixpath in out certificates
container-test-run-certificates> server # [2258207.746467] server acme-test.foo-start[248]: + '[' -d out ']'
container-test-run-certificates> server # [2258207.746581] server acme-test.foo-start[248]: + chmod -R u=rwX,g=rX,o= out
container-test-run-certificates> server # [2258207.748566] server acme-test.foo-start[248]: + chown -R acme:nginx out
container-test-run-certificates> server # [2258207.752206] server acme-test.foo-start[248]: + for fixpath in out certificates
container-test-run-certificates> server # [2258207.752206] server acme-test.foo-start[248]: + '[' -d certificates ']'
container-test-run-certificates> server # [2258207.756939] server systemd[1]: Finished Ensure certificate for test.foo.
container-test-run-certificates> server # [2258207.759333] server systemd[1]: Starting Nginx Web Server...
container-test-run-certificates> server # [2258208.657319] server nginx-pre-start[270]: nginx: the configuration file /nix/store/29lf6nzqmwflllkwjl1lcl34sr24y0sh-nginx.conf syntax is ok
container-test-run-certificates> server # [2258208.657913] server nginx-pre-start[270]: nginx: configuration file /nix/store/29lf6nzqmwflllkwjl1lcl34sr24y0sh-nginx.conf test is successful
container-test-run-certificates> server # [2258208.663643] server systemd[1]: Started Nginx Web Server.
container-test-run-certificates> server # [2258208.664435] server systemd[1]: Reached target Multi-User System.
container-test-run-certificates> server # [2258208.666566] server systemd[1]: Starting Order (and renew) ACME certificate for test.foo...
container-test-run-certificates> server # [2258209.546987] server acme-order-renew-test.foo-start[273]: Waiting to acquire lock in /run/acme/
container-test-run-certificates> server # [2258209.550311] server acme-order-renew-test.foo-start[273]: + set -euo pipefail
container-test-run-certificates> server # [2258209.550460] server acme-order-renew-test.foo-start[273]: + exec
container-test-run-certificates> server # [2258209.550510] server acme-order-renew-test.foo-start[273]: + /nix/store/vf2h24m5aa7phb4v1kbc2qd9r41jdfqv-flock-0.4.0/bin/flock 11
container-test-run-certificates> server # [2258209.552237] server acme-order-renew-test.foo-start[285]: ++ find accounts -path '*/keys/*.key' -print -quit
container-test-run-certificates> server # [2258209.555308] server acme-order-renew-test.foo-start[273]: + '[' -n '' ']'
container-test-run-certificates> server # [2258209.555353] server acme-order-renew-test.foo-start[273]: + exec
container-test-run-certificates> server # [2258209.555418] server acme-order-renew-test.foo-start[273]: + '[' -e certificates/test.foo.key ']'
container-test-run-certificates> server # [2258209.555455] server acme-order-renew-test.foo-start[273]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo/acme/acme/directory --key-type ec256 -d test.foo --no-random-sleep --renew-force --ari-disable --force-cert-domains
container-test-run-certificates> server # [2258209.579343] server acme-order-renew-test.foo-start[286]: 2026-09-30T10:43:49.565128252Z INFO  Private key saved. filepath=accounts/ca.foo/none@none.tld/none@none.tld.key
container-test-run-certificates> server # [2258209.614337] server acme-order-renew-test.foo-start[286]: 2026-09-30T10:43:49.600135934Z INFO  Registering the account. email=none@none.tld
container-test-run-certificates> server # [2258209.640126] server acme-order-renew-test.foo-start[286]: 2026-09-30T10:43:49.625925969Z WARN  !!!! HEADS UP !!!!
container-test-run-certificates> server # [2258209.640126] server acme-order-renew-test.foo-start[286]: Your account credentials have been saved in your
container-test-run-certificates> server # [2258209.640126] server acme-order-renew-test.foo-start[286]: configuration directory at "accounts".
container-test-run-certificates> server # [2258209.640126] server acme-order-renew-test.foo-start[286]: You should make a secure backup of this folder now. This
container-test-run-certificates> server # [2258209.640126] server acme-order-renew-test.foo-start[286]: configuration directory will also contain private keys
container-test-run-certificates> server # [2258209.640126] server acme-order-renew-test.foo-start[286]: generated by lego and certificates obtained from the ACME
container-test-run-certificates> server # [2258209.640126] server acme-order-renew-test.foo-start[286]: server. Making regular backups of this folder is ideal.
container-test-run-certificates> server # [2258209.640319] server acme-order-renew-test.foo-start[286]: 2026-09-30T10:43:49.626115451Z INFO  Obtaining bundled SAN certificate. domains=test.foo
container-test-run-certificates> server # [2258209.708341] server acme-order-renew-test.foo-start[286]: 2026-09-30T10:43:49.694130668Z INFO  Use solver. domain=test.foo type=http-01
container-test-run-certificates> server # [2258209.708435] server acme-order-renew-test.foo-start[286]: 2026-09-30T10:43:49.694188349Z INFO  http01: Trying to solve HTTP-01. domain=test.foo
container-test-run-certificates> server # [2258209.718044] server acme-order-renew-test.foo-start[286]: 2026-09-30T10:43:49.703841082Z INFO  The server validated our request. domain=test.foo
container-test-run-certificates> server # [2258209.718160] server acme-order-renew-test.foo-start[286]: 2026-09-30T10:43:49.703969203Z INFO  Validations succeeded; requesting certificates. domains=test.foo
container-test-run-certificates> server # [2258209.734687] server acme-order-renew-test.foo-start[286]: 2026-09-30T10:43:49.720489351Z INFO  Server responded with a certificate. domains=test.foo
container-test-run-certificates> server # [2258209.734768] server acme-order-renew-test.foo-start[286]: 2026-09-30T10:43:49.720587112Z INFO  Writing file. filepath=certificates/test.foo.crt
container-test-run-certificates> server # [2258209.734926] server acme-order-renew-test.foo-start[286]: 2026-09-30T10:43:49.720736394Z INFO  Writing file. filepath=certificates/test.foo.issuer.crt
container-test-run-certificates> server # [2258209.734991] server acme-order-renew-test.foo-start[286]: 2026-09-30T10:43:49.720812675Z INFO  Writing file. filepath=certificates/test.foo.key
container-test-run-certificates> server # [2258209.735151] server acme-order-renew-test.foo-start[286]: 2026-09-30T10:43:49.720960797Z INFO  Writing file. filepath=certificates/test.foo.json
container-test-run-certificates> server # [2258209.740703] server acme-order-renew-test.foo-start[273]: + touch out/acme-success
container-test-run-certificates> server # [2258209.742738] server acme-order-renew-test.foo-start[273]: + cmp -s certificates/test.foo.crt out/fullchain.pem
container-test-run-certificates> server # [2258209.744151] server acme-order-renew-test.foo-start[273]: + touch out/renewed
container-test-run-certificates> server # [2258209.746090] server acme-order-renew-test.foo-start[273]: + echo Installing new certificate
container-test-run-certificates> server # [2258209.746090] server acme-order-renew-test.foo-start[273]: Installing new certificate
container-test-run-certificates> server # [2258209.746090] server acme-order-renew-test.foo-start[273]: + cp -vp certificates/test.foo.crt out/fullchain.pem
container-test-run-certificates> server # [2258209.748293] server acme-order-renew-test.foo-start[317]: 'certificates/test.foo.crt' -> 'out/fullchain.pem'
container-test-run-certificates> server # [2258209.748649] server acme-order-renew-test.foo-start[273]: + cp -vp certificates/test.foo.key out/key.pem
container-test-run-certificates> server # [2258209.750434] server acme-order-renew-test.foo-start[318]: 'certificates/test.foo.key' -> 'out/key.pem'
container-test-run-certificates> server # [2258209.750742] server acme-order-renew-test.foo-start[273]: + cp -vp certificates/test.foo.issuer.crt out/chain.pem
container-test-run-certificates> server # [2258209.752938] server acme-order-renew-test.foo-start[319]: 'certificates/test.foo.issuer.crt' -> 'out/chain.pem'
container-test-run-certificates> server # [2258209.753245] server acme-order-renew-test.foo-start[273]: + ln -sf fullchain.pem out/cert.pem
container-test-run-certificates> server # [2258209.755264] server acme-order-renew-test.foo-start[273]: + cat out/key.pem out/fullchain.pem
container-test-run-certificates> server # [2258209.757382] server acme-order-renew-test.foo-start[273]: + for fixpath in out certificates
container-test-run-certificates> server # [2258209.757382] server acme-order-renew-test.foo-start[273]: + '[' -d out ']'
container-test-run-certificates> server # [2258209.757477] server acme-order-renew-test.foo-start[273]: + chmod -R u=rwX,g=rX,o= out
container-test-run-certificates> server # [2258209.759322] server acme-order-renew-test.foo-start[273]: + chown -R acme:nginx out
container-test-run-certificates> server # [2258209.763178] server acme-order-renew-test.foo-start[273]: + for fixpath in out certificates
container-test-run-certificates> server # [2258209.763178] server acme-order-renew-test.foo-start[273]: + '[' -d certificates ']'
container-test-run-certificates> server # [2258209.763271] server acme-order-renew-test.foo-start[273]: + chmod -R u=rwX,g=rX,o= certificates
container-test-run-certificates> server # [2258209.765034] server acme-order-renew-test.foo-start[273]: + chown -R acme:nginx certificates
container-test-run-certificates> server # [2258209.768100] server acme-order-renew-test.foo-start[273]: + chmod -R u=rwX,g=,o= accounts/.
container-test-run-certificates> ca # [2258209.613679] ca step-ca[206]: time="2026-09-30T10:43:49Z" level=info duration="46.401µs" duration-ns=46401 fields.time="2026-09-30T10:43:49Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="::1" request-id=8c8929fe-3805-4be8-b2a1-b13b4cd25ecd response="{\"newNonce\":\"https://ca.foo/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo/acme/acme/new-account\",\"newOrder\":\"https://ca.foo/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo/acme/acme/key-change\"}" size=252 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [2258209.633993] ca step-ca[206]: time="2026-09-30T10:43:49Z" level=info duration=16.902993ms duration-ns=16902993 fields.time="2026-09-30T10:43:49Z" method=HEAD name=ca nonce=T2J3cVV0UjlDNmFHcXJxZ3lmRG9JVEE1M0dSZ1hrcmY path=/acme/acme/new-nonce protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=f4fd34e0-e5e3-47ee-a860-96d387df93c0 size=0 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [2258209.639504] ca step-ca[206]: time="2026-09-30T10:43:49Z" level=info duration=2.382273ms duration-ns=2382273 fields.time="2026-09-30T10:43:49Z" method=POST name=ca nonce=VVhoaFhrRHpIb2lBS2lESWFKVnl2OU5PWHh3eDh4Zk0 path=/acme/acme/new-account protocol=HTTP/1.1 referer= remote-address="::1" request-id=bb8d1930-54ee-4bd9-97c6-e343c217f35c response="{\"contact\":[\"mailto:none@none.tld\"],\"status\":\"valid\",\"orders\":\"https://ca.foo/acme/acme/account/MgLadwPShEyKb16VudbFfNYxzs1Frnk4/orders\"}" size=138 status=201 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [2258209.645978] ca step-ca[206]: time="2026-09-30T10:43:49Z" level=info duration=3.159604ms duration-ns=3159604 fields.time="2026-09-30T10:43:49Z" method=POST name=ca nonce=eFJuWnd5MXJDSGtHdlRmV2Z5ekh4RjlIMUk5NU1GdUY path=/acme/acme/new-order protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=0511abc2-cb48-46aa-be09-53d0884a058e response="{\"id\":\"cOJeCzFKLMdsaJ4TActRHsxEVoM0iCts\",\"status\":\"pending\",\"expires\":\"2026-10-01T10:43:49Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"test.foo\"}],\"notBefore\":\"2026-09-30T10:42:49Z\",\"notAfter\":\"2026-12-29T10:43:49Z\",\"authorizations\":[\"https://ca.foo/acme/acme/authz/CTJcRSxG9AG0J9n5RKt7wkM7iwI5OFqw\"],\"finalize\":\"https://ca.foo/acme/acme/order/cOJeCzFKLMdsaJ4TActRHsxEVoM0iCts/finalize\"}" size=384 status=201 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [2258209.707293] ca step-ca[206]: time="2026-09-30T10:43:49Z" level=info duration=2.082349ms duration-ns=2082349 fields.time="2026-09-30T10:43:49Z" method=POST name=ca nonce=bDNrUXRMVlJxbnQ3UktHc1RDYmNEaGpLSTZZSUpjMjk path=/acme/acme/authz/CTJcRSxG9AG0J9n5RKt7wkM7iwI5OFqw protocol=HTTP/1.1 referer= remote-address="::1" request-id=35badb30-8f89-4bee-9b9b-cf2578667365 response="{\"identifier\":{\"type\":\"dns\",\"value\":\"test.foo\"},\"status\":\"pending\",\"challenges\":[{\"type\":\"dns-01\",\"status\":\"pending\",\"token\":\"DMs43EwJy1Q34Or5H1lkf3LHuLM9WNTO\",\"url\":\"https://ca.foo/acme/acme/challenge/CTJcRSxG9AG0J9n5RKt7wkM7iwI5OFqw/AYoXCRZfyOJCDW7kFWT9g9VewwG8vSyr\"},{\"type\":\"http-01\",\"status\":\"pending\",\"token\":\"DMs43EwJy1Q34Or5H1lkf3LHuLM9WNTO\",\"url\":\"https://ca.foo/acme/acme/challenge/CTJcRSxG9AG0J9n5RKt7wkM7iwI5OFqw/5lTYjt2zjTNvCgeuonnTLX1zqIbTE4XR\"},{\"type\":\"tls-alpn-01\",\"status\":\"pending\",\"token\":\"DMs43EwJy1Q34Or5H1lkf3LHuLM9WNTO\",\"url\":\"https://ca.foo/acme/acme/challenge/CTJcRSxG9AG0J9n5RKt7wkM7iwI5OFqw/nrrKSFACaJZmaZ190Ekk6hYDE0WpXX3q\"}],\"wildcard\":false,\"expires\":\"2026-10-01T10:43:49Z\"}" size=706 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [2258209.717434] ca step-ca[206]: time="2026-09-30T10:43:49Z" level=info duration=4.632304ms duration-ns=4632304 fields.time="2026-09-30T10:43:49Z" method=POST name=ca nonce=QWtVRENtWWxMUU1aUXp2cnlOOFZmVU9DM3F0MHhtNHo path=/acme/acme/challenge/CTJcRSxG9AG0J9n5RKt7wkM7iwI5OFqw/5lTYjt2zjTNvCgeuonnTLX1zqIbTE4XR protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=861b478a-1d48-408a-a546-6026e5af286a response="{\"type\":\"http-01\",\"status\":\"valid\",\"token\":\"DMs43EwJy1Q34Or5H1lkf3LHuLM9WNTO\",\"validated\":\"2026-09-30T10:43:49Z\",\"url\":\"https://ca.foo/acme/acme/challenge/CTJcRSxG9AG0J9n5RKt7wkM7iwI5OFqw/5lTYjt2zjTNvCgeuonnTLX1zqIbTE4XR\"}" size=223 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [2258209.729067] ca step-ca[206]: time="2026-09-30T10:43:49Z" level=info duration=6.696772ms duration-ns=6696772 fields.time="2026-09-30T10:43:49Z" method=POST name=ca nonce=V21BRVdkR3NyZnB3U0ZuMlJWU1I2d2paWFJqVXlzRXk path=/acme/acme/order/cOJeCzFKLMdsaJ4TActRHsxEVoM0iCts/finalize protocol=HTTP/1.1 referer= remote-address="::1" request-id=e604d8c6-a137-4f63-a04a-c5d257a4940f response="{\"id\":\"cOJeCzFKLMdsaJ4TActRHsxEVoM0iCts\",\"status\":\"valid\",\"expires\":\"2026-10-01T10:43:49Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"test.foo\"}],\"notBefore\":\"2026-09-30T10:42:49Z\",\"notAfter\":\"2026-12-29T10:43:49Z\",\"authorizations\":[\"https://ca.foo/acme/acme/authz/CTJcRSxG9AG0J9n5RKt7wkM7iwI5OFqw\"],\"finalize\":\"https://ca.foo/acme/acme/order/cOJeCzFKLMdsaJ4TActRHsxEVoM0iCts/finalize\",\"certificate\":\"https://ca.foo/acme/acme/certificate/hdCiy1iTA6Hl8Fu7KQcuD1HgCCAZtHVY\"}" size=468 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id=
container-test-run-certificates> ca # [2258209.734221] ca step-ca[206]: time="2026-09-30T10:43:49Z" level=info certificate="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" duration=1.594622ms duration-ns=1594622 fields.time="2026-09-30T10:43:49Z" issuer="Clan Intermediate CA" method=POST name=ca nonce=RWhIWlBUM1NaWTBJN2Y1Sm9RajdSdmNhRkRUNmdGWEs path=/acme/acme/certificate/hdCiy1iTA6Hl8Fu7KQcuD1HgCCAZtHVY protocol=HTTP/1.1 provisioner=acme public-key="ECDSA P-256" referer= remote-address=127.0.0.1 request-id=2b091cd3-608b-4c66-915f-9a6777f060b5 sans="map[dns:[test.foo]]" serial=61440549971344641588877381459808819517 size=1348 status=200 subject=test.foo user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= valid-from="2026-09-30T10:42:49Z" valid-to="2026-12-29T10:43:49Z"
container-test-run-certificates> server # [2258209.961651] server systemd[1]: Reloading Nginx Web Server...
container-test-run-certificates> server # [2258209.966425] server systemd[1]: acme-order-renew-test.foo.service: Deactivated successfully.
container-test-run-certificates> server # [2258209.966690] server systemd[1]: Finished Order (and renew) ACME certificate for test.foo.
container-test-run-certificates> server # [2258209.966939] server systemd[1]: acme-order-renew-test.foo.service: Consumed 1.108s CPU time over 1.299s wall clock time.
container-test-run-certificates> server # [2258210.859653] server nginx[335]: nginx: the configuration file /nix/store/29lf6nzqmwflllkwjl1lcl34sr24y0sh-nginx.conf syntax is ok
container-test-run-certificates> server # [2258210.859998] server nginx[335]: nginx: configuration file /nix/store/29lf6nzqmwflllkwjl1lcl34sr24y0sh-nginx.conf test is successful
container-test-run-certificates> server # [2258211.733412] server systemd[1]: Reloaded Nginx Web Server.
container-test-run-certificates> server # [2258211.733979] server systemd[1]: Startup finished in 7.764s.
container-test-run-certificates> server: (finished: waiting for file '/var/lib/acme/test.foo/fullchain.pem', in 8.67 seconds)
container-test-run-certificates> server: must succeed: systemctl restart nginx.service
container-test-run-certificates> server # [2258212.117998] server systemd[1]: Stopping Nginx Web Server...
container-test-run-certificates> server # [2258212.223525] server systemd[1]: nginx.service: Deactivated successfully.
container-test-run-certificates> server # [2258212.223872] server systemd[1]: Stopped Nginx Web Server.
container-test-run-certificates> server # [2258212.223948] server systemd[1]: nginx.service: Consumed 5.179s CPU time over 4.464s wall clock time.
container-test-run-certificates> server # [2258212.228000] server systemd[1]: Starting Nginx Web Server...
container-test-run-certificates> server: (finished: must succeed: systemctl restart nginx.service, in 1.06 seconds)
container-test-run-certificates> client: waiting for success: curl -v https://test.foo
container-test-run-certificates> * Host test.foo:443 was resolved.
container-test-run-certificates> * IPv6: 2001:db8:1::3
container-test-run-certificates> * IPv4: 192.168.1.3
container-test-run-certificates> *   Trying [2001:db8:1::3]:443...
container-test-run-certificates> * connect to 2001:db8:1::3 port 443 from 2001:db8:1::2 port 41006 failed: Connection refused
container-test-run-certificates> *   Trying 192.168.1.3:443...
container-test-run-certificates> * connect to 192.168.1.3 port 443 from 192.168.1.2 port 44996 failed: Connection refused
container-test-run-certificates> * Failed to connect to test.foo:443 after 2 ms: Could not connect to server
container-test-run-certificates> * closing connection #0
container-test-run-certificates> curl: (7) Failed to connect to test.foo:443 after 2 ms: Could not connect to server
container-test-run-certificates> server # [2258213.156877] server nginx-pre-start[358]: nginx: the configuration file /nix/store/29lf6nzqmwflllkwjl1lcl34sr24y0sh-nginx.conf syntax is ok
container-test-run-certificates> server # [2258213.157349] server nginx-pre-start[358]: nginx: configuration file /nix/store/29lf6nzqmwflllkwjl1lcl34sr24y0sh-nginx.conf test is successful
container-test-run-certificates> server # [2258213.163861] server systemd[1]: Started Nginx Web Server.
container-test-run-certificates> * Host test.foo:443 was resolved.
container-test-run-certificates> * IPv6: 2001:db8:1::3
container-test-run-certificates> * IPv4: 192.168.1.3
container-test-run-certificates> *   Trying [2001:db8:1::3]:443...
container-test-run-certificates> * ALPN: curl offers h2,http/1.1
container-test-run-certificates> } [5 bytes data]
container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1):
container-test-run-certificates> } [1554 bytes data]
container-test-run-certificates> * SSL Trust Anchors:
container-test-run-certificates> *   OpenSSL default paths (fallback)
container-test-run-certificates> { [5 bytes data]
container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2):
container-test-run-certificates> { [1210 bytes data]
container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):
container-test-run-certificates> { [1 bytes data]
container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
container-test-run-certificates> { [19 bytes data]
container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11):
container-test-run-certificates> { [931 bytes data]
container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15):
container-test-run-certificates> { [80 bytes data]
container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20):
container-test-run-certificates> { [52 bytes data]
container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
container-test-run-certificates> } [1 bytes data]
container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20):
container-test-run-certificates> } [52 bytes data]
container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey
container-test-run-certificates> * ALPN: server accepted h2
container-test-run-certificates> * Server certificate:
container-test-run-certificates> *   subject: CN=test.foo
container-test-run-certificates> *   start date: Sep 30 10:42:49 2026 GMT
container-test-run-certificates> *   expire date: Dec 29 10:43:49 2026 GMT
container-test-run-certificates> *   issuer: CN=Clan Intermediate CA
container-test-run-certificates> *   Certificate level 0: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256
container-test-run-certificates> *   Certificate level 1: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256
container-test-run-certificates> *   Certificate level 2: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256
container-test-run-certificates> *   subjectAltName: "test.foo" matches cert's "test.foo"
container-test-run-certificates> * OpenSSL verify result: 0
container-test-run-certificates> * SSL certificate verified via OpenSSL.
container-test-run-certificates> * Established connection to test.foo (2001:db8:1::3 port 443) from 2001:db8:1::2 port 41020 
container-test-run-certificates>   % Total    % Received % Xferd  Average Speed  Time    Time    Time   Current
container-test-run-certificates>                                  Dload  Upload  Total   Spent   Left   Speed
container-test-run-certificates>   0      0   0      0   0      0      0      0                              0* using HTTP/2
container-test-run-certificates> * [HTTP/2] [1] OPENED stream for https://test.foo/
container-test-run-certificates> * [HTTP/2] [1] [:method: GET]
container-test-run-certificates> * [HTTP/2] [1] [:scheme: https]
container-test-run-certificates> * [HTTP/2] [1] [:authority: test.foo]
container-test-run-certificates> * [HTTP/2] [1] [:path: /]
container-test-run-certificates> * [HTTP/2] [1] [user-agent: curl/8.22.0]
container-test-run-certificates> * [HTTP/2] [1] [accept: */*]
container-test-run-certificates> } [5 bytes data]
container-test-run-certificates> 
container-test-run-certificates> 
container-test-run-certificates> 
container-test-run-certificates> 
container-test-run-certificates> 
container-test-run-certificates> * Request completely sent off
container-test-run-certificates> } [5 bytes data]
container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
container-test-run-certificates> { [265 bytes data]
container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
container-test-run-certificates> { [265 bytes data]
container-test-run-certificates> 
container-test-run-certificates> 
container-test-run-certificates> 
container-test-run-certificates> 
container-test-run-certificates> 
container-test-run-certificates> 
container-test-run-certificates> 
container-test-run-certificates> { [5 bytes data]
container-test-run-certificates> 100     20 100     20   0      0    679      0                              0
container-test-run-certificates> * Connection #0 to host test.foo:443 left intact
container-test-run-certificates> client: (finished: waiting for success: curl -v https://test.foo, in 1.07 seconds)
container-test-run-certificates> client: must succeed: openssl s_client -connect test.foo:443 -servername test.foo </dev/null 2>/dev/null | openssl x509 -text -noout 1>&2
container-test-run-certificates> Certificate:
container-test-run-certificates>     Data:
container-test-run-certificates>         Version: 3 (0x2)
container-test-run-certificates>         Serial Number:
container-test-run-certificates>             2e:39:04:fd:e1:fb:c4:80:82:22:34:90:7c:bb:19:3d
container-test-run-certificates>         Signature Algorithm: ecdsa-with-SHA256
container-test-run-certificates>         Issuer: CN=Clan Intermediate CA
container-test-run-certificates>         Validity
container-test-run-certificates>             Not Before: Sep 30 10:42:49 2026 GMT
container-test-run-certificates>             Not After : Dec 29 10:43:49 2026 GMT
container-test-run-certificates>         Subject: CN=test.foo
container-test-run-certificates>         Subject Public Key Info:
container-test-run-certificates>             Public Key Algorithm: id-ecPublicKey
container-test-run-certificates>                 Public-Key: (256 bit)
container-test-run-certificates>                 pub:
container-test-run-certificates>                     04:31:81:65:3c:bd:83:2c:68:41:5a:c9:99:fb:e5:
container-test-run-certificates>                     10:7b:1f:7d:59:db:13:bf:1a:52:d2:0e:77:d5:29:
container-test-run-certificates>                     99:60:27:e0:c6:1d:df:d8:98:40:bc:58:23:56:1a:
container-test-run-certificates>                     2b:53:36:9a:03:b2:08:f6:75:95:4b:41:dc:ad:0e:
container-test-run-certificates>                     16:4a:3f:e8:e5
container-test-run-certificates>                 ASN1 OID: prime256v1
container-test-run-certificates>                 NIST CURVE: P-256
container-test-run-certificates>         X509v3 extensions:
container-test-run-certificates>             X509v3 Key Usage: critical
container-test-run-certificates>                 Digital Signature
container-test-run-certificates>             X509v3 Extended Key Usage: 
container-test-run-certificates>                 TLS Web Server Authentication, TLS Web Client Authentication
container-test-run-certificates>             X509v3 Subject Key Identifier: 
container-test-run-certificates>                 52:1F:67:52:FE:88:B6:48:4D:C7:DC:FC:E7:17:52:06:0B:90:B0:20
container-test-run-certificates>             X509v3 Authority Key Identifier: 
container-test-run-certificates>                 BE:95:EE:44:85:AC:5F:20:9E:46:14:10:D8:06:6D:4B:C9:3B:4E:14
container-test-run-certificates>             X509v3 Subject Alternative Name: 
container-test-run-certificates>                 DNS:test.foo
container-test-run-certificates>             1.3.6.1.4.1.37476.9000.64.1: 
container-test-run-certificates>                 0......acme..
container-test-run-certificates>     Signature Algorithm: ecdsa-with-SHA256
container-test-run-certificates>     Signature Value:
container-test-run-certificates>         30:45:02:21:00:de:69:52:3e:31:a9:a6:31:b7:5c:62:78:f9:
container-test-run-certificates>         83:d7:30:55:0a:ff:d2:d5:7a:fe:f0:eb:e4:e4:2a:01:09:b0:
container-test-run-certificates>         26:02:20:55:33:c9:02:6d:d3:4a:0a:f3:71:c0:95:2b:c3:f1:
container-test-run-certificates>         c7:7e:75:0e:50:37:17:f2:ff:84:ca:54:90:31:69:de:93
container-test-run-certificates> client: (finished: must succeed: openssl s_client -connect test.foo:443 -servername test.foo </dev/null 2>/dev/null | openssl x509 -text -noout 1>&2, in 0.05 seconds)
container-test-run-certificates> (finished: run the VM test script, in 21.06 seconds)
container-test-run-certificates> test script finished in 21.13s
container-test-run-certificates> cleanup
container-test-run-certificates> kill NspawnMachine (pid 50)
container-test-run-certificates> kill NspawnMachine (pid 469)
container-test-run-certificates> kill NspawnMachine (pid 466)
container-test-run-certificates> Container ca terminated by signal KILL.
container-test-run-certificates> Container client terminated by signal KILL.
container-test-run-certificates> Container server terminated by signal KILL.
container-test-run-certificates> (finished: cleanup, in 0.49 seconds)