these 245 derivations will be built: /nix/store/04awla8j4bx4adjsc8rr5v23x6y7qbf4-unit-resolvconf.service-disabled.drv /nix/store/062lrszwiw24f6xah1gfy7f75sidqab0-unit-container-getty-.service.drv /nix/store/7lrrjkjzivqhhqilq059bhf0znj4vl76-X-Restart-Triggers-step-ca.drv /nix/store/06cz9c12gca2wbyaiyqvkvandjal2rqj-unit-step-ca.service.drv /nix/store/kfg15k76km9f3xnwy1kpn02949zsjx9d-nginx.conf.drv /nix/store/08i9gwvi1kb0c8br9bqd0bf86x0kk0hz-unit-script-nginx-pre-start.drv /nix/store/0gxw4y090x878d8k4gj6b0xmhgky3f95-unit-getty.target.drv /nix/store/y88ncl7s1h9v37lgxqypficxydhv4qwp-X-Restart-Triggers-dbus-broker.drv /nix/store/0pna3ck5fvpnk39ggphv2mx380f3a4pk-unit-dbus-broker.service.drv /nix/store/12s0dsfwa9lhl4wnxd2r6hnddmbvnlxh-activate.drv /nix/store/7pnyk12jbjli78ia0qipy9jhs7vx9wxl-unit-systemd-tmpfiles-clean.timer.drv /nix/store/kddvhbyc8h9y2iv23rq6686snbyh0kk5-unit-nixos-fake-graphical-session.target.drv /nix/store/g51p70dlbg994p831ij5gd4075y8k80i-unit-script-nixos-activation-start.drv /nix/store/mwg0gw8h36hbgkcqg541nr4v95fz5w1n-unit-nixos-activation.service.drv /nix/store/w0zbs9kla1c9vfmdkrxa0nziwwgg9nnz-unit-dbus.service.drv /nix/store/ykraldrbh33v11py6n09h3hpvcqcrq8z-unit-dbus.socket.drv /nix/store/yy6fk1glckw41sh0bzbdknpsv16jxhn6-unit-systemd-tmpfiles-setup.service.drv /nix/store/17mjp1rbf9ps5n90cw4i8qxd86qpd4zd-user-units.drv /nix/store/1gq2il5a5sybn1sg3gp1851ssg3yc5jx-unit-run-wrappers.mount.drv /nix/store/1ixgb15zwk60s4iylqcfmccbwiqpch4w-unit-dbus-broker.service.drv /nix/store/1rikdms1gvp4n004kpcbgw1j7saq4nh5-unit-user-.service.drv /nix/store/9r0km3wlf8j0dxif9dpr49djx1mxd4q6-ensure-all-wrappers-paths-exist.drv /nix/store/dbbl4p5872pf7gg1j8m0k972m017gibi-local-cmds.drv /nix/store/pzm6v63qzq6igq9pzinwc6k7d82m426c-mounts.sh.drv /nix/store/ar9w368nr2fmrwiwrll648wqn96yvsss-stage-2-init.sh.drv /nix/store/k07v3piys6b6m0i31f5xds5r6221q713-builder.pl.drv /nix/store/hy5hc40shvg8wc4cxy7w1ir2ap6pk9w1-perl-5.42.3-env.drv /nix/store/jamfllcd4jhd8x5yj8zvw4fh0d3shslr-perl-5.42.3-env.drv /nix/store/wi7l85bhz474v6ccd7hbr96ig34zida4-hashed-password.root.drv /nix/store/jlg7w47cyz8qdv7flsfna0iwxyb1kjxq-users-groups.json.drv /nix/store/snjvqhamgl6lbxjkb57isldc5sq7kak2-nixos-tmpfiles.d.drv /nix/store/35cpi0275w0nn6xdass30f2ihmkbc8v4-tmpfiles.d.drv /nix/store/4g0lxy76143v4kz5qsbz72gdqfkipfa3-etc-systemd-oomd.conf.drv /nix/store/4ij2k5pbcsm7m98r9adw0lmlx1wwj5hm-fontconfig-etc.drv /nix/store/6llksvpwxqqdjh4lcn1kjlnzdh62acn3-string-hosts.drv /nix/store/7sfxpxzv2fhjxwbwcq8gihdvq5bwdi3j-extra-hosts.drv /nix/store/9g9i2ypz6y6qbp6pxwhri8r4ia49cks7-localhost-hosts.drv /nix/store/4l0483k2dngia4hcl0x2qak2jlbjvrfd-hosts.drv /nix/store/6h4qwah1yff66cmfwgg50hkfc1nhwm3x-etc-systemd-sleep.conf.drv /nix/store/6ljq8gs7685wji8rfy96kj0rpr3yks1i-etc-systemd-networkd.conf.drv /nix/store/91n1cqkw4b2wlcj3j3f1697hqrxi5rwv-etc-lsb-release.drv /nix/store/9crp5p1sfjnjiak6wdk94bmiimy6c0kb-etc-systemd-journald.conf.drv /nix/store/ap38clm0kaavw6bw776d99y08rb7h3lm-etc-nanorc.drv /nix/store/hh2y8f7vfk4mr0hypwjb4rxqy6ndxybm-system-path.drv /nix/store/aszxv3x2d3d2z8gj6lvyzsf28a0fy2mp-dbus-1.drv /nix/store/6j2qyxvhrfjbpsbpm00qbk604pjqp6l5-systemd.drv /nix/store/cgwdbbp7fxmj1x9qgw9xx3vnq467gm4v-50-coredump.conf.drv /nix/store/f2w9aglj9225ln6xf44yi5mv4lsaihsd-useradd.drv /nix/store/f98k07j0xa9wij1xcnsb35i1k3n9y24j-etc-bash_logout.drv /nix/store/fb2ncwqsswkdkp30ajh45l1d0cq2vhjg-etc-nix-registry.json.drv /nix/store/g2xdv50baldf1r25521aid0fzw9rqdw2-etc-sysctl.d-60-nixos.conf.drv /nix/store/g7jsa4fc3zy9sy6kwzidp542k524j8jw-etc-systemd-user.conf.drv /nix/store/gyqfxlby9jaj5x2nqr8zbnjs4rl2ircp-etc-systemd-logind.conf.drv /nix/store/hgrp7icnj0f9xghhbaasbnhd8qw6jl2f-etc-systemd-system-preset-00-nixos.preset.drv /nix/store/hj5wz38alakxfkjnqzv4dc01fkbxx257-issue.drv /nix/store/i1y5vk7fsw15jp8l04j1n7fmpd3ji2ym-etc-host.conf.drv /nix/store/ic2hjq8qs8rfdywh3aza734h9qb1zd7q-etc-ssh-ssh_config.drv /nix/store/imx692rmafk156ljfzfdbl3c6w0mksl9-etc-systemd-system.conf.drv /nix/store/ivkq3kisrjr54xvag9imwmfdz9cwgwz7-locale.conf.drv /nix/store/jghqsbm0rmhf576ib135gg8sxabmd1pz-unit-40-eth1.network.drv /nix/store/jj0q5kwajgszvryn0xivagb8kpwpkdsa-login.defs.drv /nix/store/jz460ss77al0bprnr87h8x033va2kfyz-etc-hostname.drv /nix/store/k4cnf5a4pvlh3ik0sw3vxhfzfw1vcxwd-etc-resolvconf.conf.drv /nix/store/kj7xhz0qclxjd86jwxsp8rsfprv31myp-etc-nscd.conf.drv /nix/store/495acnhmmlmsyvm1xnbrkbdz8ddx863z-lessconfig.drv /nix/store/l1d4v35qiz3hb7xrkzr0qd9m3p7dwynl-set-environment.drv /nix/store/m6din2n595gikib4kfs0l4v81kifg118-etc-nsswitch.conf.drv /nix/store/ml1916pzjnc5z72wym1mq6x61ndmy048-etc-pam-environment.drv /nix/store/n1yiiilqxb57rck4sxnhnmqrl78bnw6v-system-units.drv /nix/store/nlivx2nzfz75w9w7gvkibgwscxfmlwac-etc-fstab.drv /nix/store/np4mqmdqf8d30y0ripxz346j6pccfxky-etc-ssh-ssh_known_hosts.drv /nix/store/pi4j20sgddhk9dhwam3h3j62gn70155m-etc-shells.drv /nix/store/pm7k129fhsyrj4q4411isd2lbg7qd9q1-unit-99-ethernet-default-dhcp.network.drv /nix/store/qh1kal077zz57b35qzcgj92nd784r2k6-etc-systemd-user-preset-00-nixos.preset.drv /nix/store/qjskicf2hk0216h8zixs2rw4mplav8wy-unit-99-wireless-client-dhcp.network.drv /nix/store/qqdrlwfwkcav4v2a3gjzchjli6sm9q2j-etc-netgroup.drv /nix/store/qvjxzlbsbvykyvwryz260mx0xhf6inji-etc-environment.d-50-systemd-path.conf.drv /nix/store/rbyckpqp94lqrgdbm5yijp5n5is236q9-etc-os-release.drv /nix/store/s8bkfgrb7813gp1sbgn89gxi8j5g87c1-etc-gai.conf.drv /nix/store/scw80hz5305c7gwq7q88zjm93pzf62da-etc-systemd-coredump.conf.drv /nix/store/sfcvmy6i7xbn4l1ngmx5f486gclpvdg5-etc-profile.drv /nix/store/sypn0anpxx570knv6rnhx342wwl5f80d-etc-systemd-resolved.conf.drv /nix/store/vdlvh5hva3q2rcz364g3p0461brj7m4w-etc-lvm-lvm.conf.drv /nix/store/vy2bcy243f2hvks6lihknbca0ff1abbz-etc-bashrc.drv /nix/store/x2f2kdiwrbcj4y5kafj04hjmzx97b9j0-nix.conf.drv /nix/store/w2xg1sqi6m3hvwhfkh2s3mfmvjdqjscm-etc.drv /nix/store/d9f2zjh4l0gr6zd08fxrjwcya3fblwz5-activate.drv /nix/store/1rvybv2yz4ly3l1h8ywl11gfabjdcq4r-nixos-system-client-test.drv /nix/store/4iyvfi0mn0351yn8p1jckgyidis6fgyg-X-Restart-Triggers-systemd-networkd.drv /nix/store/21qmplfmxk71bk1sb24x5p4cwnd4yp1j-unit-40-eth1.network.drv /nix/store/l9g9037ky77f2y19f4iinyhnvl5x7bkm-X-Reload-Triggers-systemd-networkd.drv /nix/store/1vr7rvlv68s1ciszsn9f2aw1325hd2hd-unit-systemd-networkd.service.drv /nix/store/1zpaybwfmsmx8azhp9n8hp8az7zfsdbz-unit-nginx-config-reload.service.drv /nix/store/27wqmwnmx4717sncgrz2r6gdvzvjp70b-nixos-version.drv /nix/store/2b2nqljb7nfgg9iwyyf9p5xhjq5bbhx6-unit-nix-optimise.service.drv /nix/store/2d2ipbwn85gs0iqrzvg92daadf9hkc2d-unit-run-initramfs.mount.drv /nix/store/2jm86acd09z4725j6arf9dp9xy0fz6pk-X-Restart-Triggers-acme-test.foo.drv /nix/store/2s926585id5lh2czk77lnv91chczdl6q-unit-systemd-update-utmp.service.drv /nix/store/36y505mlym2nhvj09yjm8wqf14darf5s-unit--.slice.drv /nix/store/388iwp7vj0r292bq8319pw3b6xpgdsfb-unit-systemd-journald-audit.socket.drv /nix/store/4f4d5280xp2av2y6511ipzn9nvc4wfkc-unit-nginx.service.drv /nix/store/54r35534p2p2facl3iqvc5k5jrlf14nm-unit-keys.target.drv /nix/store/6hzdpsxy2f52fblss2p4yk0j0h3yg905-unit-console-getty.service.drv /nix/store/79abj016fmrnpx8m885z43lg45hb66ka-unit-fstrim.timer.drv /nix/store/7dkhrsavd1byxac66cwqah1vjldzrqha-unit-dbus-broker.service.drv /nix/store/7fs6frivag7d2nfcbjzcj5xralcpadz1-unit-systemd-networkd-wait-online-.service.drv /nix/store/rpl8dm5djdlypddfr777iac4zs55rznv-X-Reload-Triggers-systemd-resolved.drv /nix/store/7ms8lry0iibcdcpd3gvm78jy4rmi8ava-unit-systemd-resolved.service.drv /nix/store/vaqlxwlkjkf93pcg5d69hz6x22s7aw65-unit-script-acme-setup-start.drv /nix/store/ywci2hgdaa3zrixlycn9ramf42ci9g9g-acme-setup-privileged.drv /nix/store/7zbwkybw0z3kj7gfzm7zx1f54bswzjcb-unit-acme-setup.service.drv /nix/store/8027g7qsxbwkkmq9vw7467hzx7rhz8nj-unit-NetworkManager-wait-online.service-disabled.drv /nix/store/804j4z9qlp8p39vs4m05yqphiwzzharp-unit-systemd-networkd-wait-online.service-disabled.drv /nix/store/985a3l01r8liri5lqnsida43jg2lwhc1-unit-systemd-mkswap-.service.drv /nix/store/9jn9h6avzbrjpqh12givk69zyxrdzmqg-unit-systemd-pstore.service.drv /nix/store/a5xvjdqwh582sa2qyqwx7h79nqd5vyf3-unit-acme-renew-test.foo.timer.drv /nix/store/wbw4d6cpg5krmxhpinjvp1ga1z8yzms3-unit-script-acme-test.foo-start.drv /nix/store/agnr0cgmbdm02gb9vxi5ix4nz0yagq7l-unit-acme-test.foo.service.drv /nix/store/avqfxicgprb982s67baxy9rxacagi1pj-unit-systemd-oomd.service.drv /nix/store/bpmvlg5kqhhrcjx19aliazhnafmly6ji-unit-user-runtime-dir-.service.drv /nix/store/bsbzp43491fpiwzaqg8lc9d1p53dzbkq-unit-systemd-makefs-.service.drv /nix/store/zg899kf12v1rrsziv5ahxn2iwlyblz63-X-Restart-Triggers-systemd-sysctl.drv /nix/store/ccxkll2ar6m2d8npbvjb7lq5n3as9v2l-unit-systemd-sysctl.service.drv /nix/store/cd3xzv4p95h51jq3kr66sbn7pgx5pnwl-unit-systemd-bless-boot.service.drv /nix/store/daz0lj28j69af64jq7qwjqnhxznvyhm5-unit-lastlog2-import.service.drv /nix/store/dr905fd4hykjfakvprkkmmlgzc9pc8n3-unit-systemd-importd.service.drv /nix/store/f0nllqjnfqcd14qrxm5lvg0dws02yvvw-unit-systemd-logind.service.drv /nix/store/f86zcrsldyyjcg47fjqwbpizar817miv-unit-suid-sgid-wrappers.service-disabled.drv /nix/store/fr6cmpgrwsk1qzsgpgv73517nx36fk9f-unit-kmod-static-nodes.service.drv /nix/store/fxxdxh7r77kga2w4qmxi2gg5sb3vl94g-unit-system.slice.drv /nix/store/fzd72mwkikz4rkl1z4y359x57m27xnz0-unit-systemd-fsck-.service.drv /nix/store/ndl6k7k2fp6k5jzay0dxhvfcn60lyy3r-X-Restart-Triggers-systemd-journald-.drv /nix/store/gcjqrwqx7sxyicpam6aggryxysvafbqs-unit-systemd-journald-.service.drv /nix/store/h97agmsi5w7g32k7006mwpabgqz15lxq-unit-systemd-boot-random-seed.service.drv /nix/store/hsbk1w4whfydqj8p9h8zahxrik8s42yf-unit-nix-daemon.socket.drv /nix/store/3xz6acpnpxaij33nxbv5psy05d1rzm7l-firewall-start.drv /nix/store/frqrkl0xg2hn1d3jicqb55nsk50iiml4-firewall-stop.drv /nix/store/j4l8g43fp5ni87k1n1w5g5wp57akf04n-firewall-reload.drv /nix/store/i3y19f9i99qi5v8q1c6gj6la3pl54f9y-unit-firewall.service.drv /nix/store/ia4rzccqnnf6dvsj4sizj1f9j6rcfhwl-unit-nginx-config-reload.service.drv /nix/store/ilnhqjcl4v12d39g5m7a2ym4s54xq0lj-unit-systemd-hostnamed.service.drv /nix/store/iw9a3gw25yrm1hkabbjw7bwfi3kgsh57-unit-systemd-backlight-.service.drv /nix/store/jh7vw2vndi7x1dc517jb80j5d2vxyd5x-unit-serial-getty-.service.drv /nix/store/qd0jd51z6jqf1nah2gbnxp3rhzsdkiqx-acme-postrun.drv /nix/store/z3az1vk2bq94cnfzm9jckvgglzl5pqmj-unit-script-acme-order-renew-test.foo-start.drv /nix/store/jvbcagb33fx9fx7ndj0zm926qfw9v8wy-unit-acme-order-renew-test.foo.service.drv /nix/store/qnik0r31kvqxzm4qcvyzbpnp63fdb60n-unit-script-prepare-kexec-start.drv /nix/store/kipgx5dydrsn465msngn5x031fx9pc4r-unit-prepare-kexec.service.drv /nix/store/lb60bch7cplm2mif1n9zk876s1ziyybg-unit-systemd-journal-flush.service.drv /nix/store/vpn79ifdbiqkcx7llmxmpfmsx39j7v2c-X-Restart-Triggers-nix-daemon.drv /nix/store/m2cx1qrdl7931i5p1km252xb5220jpx9-unit-nix-daemon.service.drv /nix/store/njjai13d5b96kdgy0yfvxfrir4n177lm-unit-serial-getty-hvc0.service-disabled.drv /nix/store/fr2zk6mgw3ap9f9msqgyigwdbablg74q-nixos-tmpfiles.d.drv /nix/store/rcvy6i0pr9q0lws8k8qmhclq28bfpmq7-10-acme.conf.drv /nix/store/hai60s2rq9zv8cardz2p7z0pn1xr9jsz-tmpfiles.d.drv /nix/store/m7qb5k2rsypmmcaas4g9jc00rihwrs9z-X-Restart-Triggers-systemd-tmpfiles-resetup.drv /nix/store/p34n92c1s943asirmmhdki6jy5zsgfqk-unit-systemd-tmpfiles-resetup.service.drv /nix/store/pdxvsic27pwf7ag4agb12znj50pzlxli-unit-acme-account-2c44cb477b4787b2cf13.target.drv /nix/store/pf2amhsz01a3b732g8mz3grycxnplhja-unit-multi-user.target.drv /nix/store/pid4rqdrwvzsp3ivw111sjb2zqp6y1vl-unit-user.slice.drv /nix/store/pmfy1bj27aybn39q0r20zgna8pjgv9ip-unit-systemd-nspawn-.service.drv /nix/store/n1bir13llmvv37vk07hn5n7gpyy5f7jn-unit-script-nix-gc-start.drv /nix/store/q6xfdk862sn07h05akxy4h5hdaxyr4wd-unit-nix-gc.service.drv /nix/store/p7rb3n10sl6b6np7kq67qpbcpnp2izj5-shutdown-ramfs-contents.json.drv /nix/store/qkz8fkj261hmlxydi46swkm5hjc468cy-unit-generate-shutdown-ramfs.service.drv /nix/store/rl9wwczmds417jcv1hrndn7q9pkdrq5m-unit-systemd-remount-fs.service.drv /nix/store/rlmmvxxsjdvg1s5mv1mf5dg4gg30y31m-unit-local-fs.target.drv /nix/store/rpf3ln6sln6jlzdnhc3pz3wrn12vkani-unit-remote-fs.target.drv /nix/store/b8qsw5y6jha9bg7b64njpkd37mkkipxl-unit-script-linger-users-start.drv /nix/store/rzy10r8s4x7zpri6sa50zkb4qx0iwpfr-unit-linger-users.service.drv /nix/store/shn6sn9hqazzqy1p1mb1cmykn0kawmmv-unit-modprobe-.service.drv /nix/store/ssklr9wlbjjvrvijxd267949vaj4266w-unit-network-local-commands.service-disabled.drv /nix/store/vx7x260k1xn6p23sh9j49q5mzn1mwrn8-unit-systemd-timedated.service.drv /nix/store/w9mcrpbcln016mjjwvdyvgwgf8dbbb1g-unit-systemd-random-seed.service.drv /nix/store/wkdi8d2kaggp2r13cgn9kp11a7n7ccb1-unit-systemd-networkd.socket.drv /nix/store/x5m591czxqcx8v1zxwh1ckfrx1mmg1sc-unit-sysinit-reactivation.target.drv /nix/store/x8fb41dbwagmzvfd4pm6gs7c29fhfcw5-unit-systemd-networkd-varlink-metrics.socket.drv /nix/store/x8wps72il92rvnxd3izj283xsk98d7zq-unit-fs.target.drv /nix/store/5qd4qqgc3m5qgid1ry8lcmy4ljlrl3yl-X-Restart-Triggers-systemd-journald.drv /nix/store/x913mbb0vpm0gn9416mnp07fs2djdshg-unit-systemd-journald.service.drv /nix/store/xd98pwbz3xcdb32s9ll2468cbwadbvi0-unit-getty-.service.drv /nix/store/xy1wp8s0ham7v3p5vgzdisxwxwmcmzzx-unit-systemd-user-sessions.service.drv /nix/store/y4nl68azh5735sr4vysd8ldyvd70msf5-unit-systemd-localed.service.drv /nix/store/yvyxl8nnywqkdy0020j47sx9qxz0dyf2-unit-nscd.service.drv /nix/store/zimxdidrqg7417q80i8kf9k7f0rq0hkg-unit-serial-getty-ttyAMA0.service-disabled.drv /nix/store/2lpc9mg59ybj5fm7hs8wrn8jxbcx2iqp-system-units.drv /nix/store/f84az0vccpsbn4rf397p53hvgk6c78pp-acme-setup-privileged.drv /nix/store/3260rbrmsisinihzgc6iwaxlivnl9zv9-unit-acme-setup.service.drv /nix/store/3bi2iz5pi15m28mbnk59qgbnbzzmk9bp-test-script.drv /nix/store/zvknz8w917hr5pdcbqcniyd84viq6aik-string-hosts.drv /nix/store/3cflf6vlig26qqdjfws39k8snpg3zyvh-hosts.drv /nix/store/3h201hxb1ccs41d94a8vfkw24lg4y5lx-etc-hostname.drv /nix/store/4wljk84m3aj88c698f778anhxg23lnbf-X-Restart-Triggers-systemd-tmpfiles-resetup.drv /nix/store/5188fzq8y2m1n5g4g5fcqi73ix3s57hi-unit-dbus-broker.service.drv /nix/store/j5cj99b68cjn3275yrw6jj3rv546bfmv-system-path.drv /nix/store/s9wdccvq8a2cijylkhwxlrl4914618fr-etc.drv /nix/store/51khy2253wjxqsk3jwvp8rh85mn2rck7-nixos-system-server-test.drv /nix/store/52vq80rk7mrlfaj66b97g26wi03zswpb-users-groups.json.drv /nix/store/bd73yhki75wpikdd2cfqgf968617h2iw-X-Reload-Triggers-systemd-networkd.drv /nix/store/58n5r0k6lsdzi8bkvhjqmhv515vyy1yg-unit-systemd-networkd.service.drv /nix/store/bfdys8raw3sc3lmswc9wkfbrz9z88388-unit-40-eth1.network.drv /nix/store/cq04a88nvp2s74xgjwmv4b95mk0dd37l-dbus-1.drv /nix/store/gi8rwnkn5zy165na5w02rw6i9srlc8xp-system-path.drv /nix/store/w1pxv5ygg9apy3g159g0zyla57rzsc89-nginx-recommended-proxy_set_header-headers.conf.drv /nix/store/gpgjmw83yrvk5fi3i7zgk41mdymfwjwv-nginx.conf.drv /nix/store/rj3g6b5qb76lv4fhar35s1kwf6cvk3ax-system-units.drv /nix/store/wswpdpsqxpjbc7n4qlcgdsym3plsqnrd-user-units.drv /nix/store/5qn0cs0px1wsfb1p2q006am9d7zw62bi-etc.drv /nix/store/5sqkyqvn854h27if359pgjc33cxhfc5s-unit-acme-renew-ca.foo.timer.drv /nix/store/lq0xm0ki49zgnwbx14pi3zkc8bsh97sz-unit-script-acme-ca.foo-start.drv /nix/store/sb7s2x4bq07q6hcf9fxgsmkj480hlq5b-X-Restart-Triggers-acme-ca.foo.drv /nix/store/6xfchvrkxrqng7hra5k1zw7rdpsvmxw8-unit-acme-ca.foo.service.drv /nix/store/a5ddfq4hp03x0iikaq8qkn9ybggzkmwf-firewall-start.drv /nix/store/7kdp4rky5srdvqgyg2jbqzgvcwlgqjdg-firewall-reload.drv /nix/store/ws3jplqkz4qksivkp2rcs5rh9kldsgd3-X-Restart-Triggers-dbus-broker.drv /nix/store/8xrl3n7nmk2hjj9mwmys7kmcc3q69268-unit-dbus-broker.service.drv /nix/store/apmgdhhpvxjqar7x31l004zgmhwjpsn2-user-units.drv /nix/store/cnkh23hd5aw54m76kd1k9kvamixyznhr-driverConfiguration.json.drv /nix/store/czb9kz0wwzccp5gypw1raawpakla8wvs-unit-script-nginx-pre-start.drv /nix/store/ya6prflpzm5yvyspgvjc9mj7adi20ffx-X-Reload-Triggers-systemd-networkd.drv /nix/store/fg70hzypwrlgpb9vqiqhfcmbmjbcy1rs-unit-systemd-networkd.service.drv /nix/store/v48qgnj5f9qd0bdgz34ad9injswwfjjl-activate.drv /nix/store/fgccj3f0fi84bb23xsazhp34gnz788gq-nixos-system-ca-test.drv /nix/store/flnly690v1k7cg61hn76nhchznxy4x33-acme-postrun.drv /nix/store/g05zaykq1xa6yn7imbxq1jjs99f5z02x-unit-systemd-tmpfiles-resetup.service.drv /nix/store/g1xs6v6cn953yzhg3ma76p5w597gj8jz-dbus-1.drv /nix/store/g6wikjmmngczv1nhn62qy9dwgrx3rjjf-container-test-run-certificates.drv /nix/store/g808rzlhmym6vf23r00lkw78889vsd9q-perl-5.42.3-env.drv /nix/store/hr8a8bsq9zz1f9myf5lnz49s5i6rszcn-etc-hostname.drv /nix/store/i172sdvswv3chc4i9wch81nmszsxg3r2-unit-nginx.service.drv /nix/store/ialfwm1wr5igyhqpp1nshkg9472pr2s4-nixos-generate-config.drv /nix/store/igfl2qm3mzw6sy01fighszdd7rybd018-unit-script-acme-order-renew-ca.foo-start.drv /nix/store/kk3wn68wm1xm6byb3qinxihnc8x3amkd-users-groups.json.drv /nix/store/kncpsd6vvi44qgwqrdg90plr7cpwfgbz-unit-dbus-broker.service.drv /nix/store/lr7dgbc7c14y1ymldgv8lmdg9zpnzc5s-run-client-nspawn.drv /nix/store/lrf0sn0npj7g2b3nhl5rcmbira72lw6n-nixos-build-vms.drv /nix/store/n9g7nkix770544gvrcpz4b45fcrn25z6-unit-firewall.service.drv /nix/store/wrzb7rh6j0f7plz626a4ga5bz063v038-string-hosts.drv /nix/store/rjrgljl4p1pp6wy2bqnfs6y4vp35pivn-hosts.drv /nix/store/s4kh7wzm8ivzgrx3w1czdbyb7w701k0w-unit-acme-order-renew-ca.foo.service.drv /nix/store/v44siwqckabkr3x3qmyiai11pd05l7qf-X-Restart-Triggers-dbus-broker.drv /nix/store/vnf8r0isskfav9882svllbfd9rzg68wl-nixos-test-driver-certificates.drv /nix/store/wc19j92qdzgca477297vi9j6l106pdwr-run-server-nspawn.drv /nix/store/xcz05b7j1dndj9mpvvncarww7mzs0bf8-run-ca-nspawn.drv /nix/store/xr6hjnvxmbjv3irmjw1mrjzlpyfd9lpr-unit-acme-account-d22a46d9459bf683a338.target.drv these 185 paths will be fetched (13.3 MiB download, 353.1 MiB unpacked): /nix/store/jxws559gxi3bggh5fcifrrjkqbb3axiv-55-nixos-aslr-entropy.conf /nix/store/gznbaizdmwdx1p23c15m34gchafgqamr-acl-2.4.0-man /nix/store/p9ispmx60z26m5ig8vpkakcx0xg33l4q-attr-2.6.0-man /nix/store/d4577r3iadywsg81g3vcd5b8iqw8r089-bash-completion-2.18.0 /nix/store/fabgday1m9ahl9pxx2dvmn22mxcc5ik2-bash-interactive-5.3p15-man /nix/store/905qggrca0dfmmlcws4h70szwyi2ibgm-bcache-tools-1.1 /nix/store/g02i83bb934wmvm52fssy35rg9900as4-bcachefs-tools-1.39.6 /nix/store/63q7bgf28is8qj3rfpy76a4gdpylncvb-bind-9.20.29-dnsutils /nix/store/kpikfps7ddj146x99pa6d8pkwpx1dxsx-bind-9.20.29-host /nix/store/800908jqmbv277rga7vqg8brkc4zixxa-bind-9.20.29-lib /nix/store/h4mqn6qiaj8g43kbw6k0j0s83dm7zqsn-btrfs-progs-7.1 /nix/store/psl7mxp7dbrm1rw09p7jd846cg05xpdv-bzip2-1.0.8-man /nix/store/7j4sgijlcnm6lrj7mqi69z4x3ipsyc5y-c-dvar-1.2.0 /nix/store/xk9g510cbmllg7spzz2cai17fmmjc8wr-c-ini-1.1.0 /nix/store/qqgj11ncvzb2ah58ixgh6i4dbw5baqas-c-rbtree-3.2.0 /nix/store/0m7fjr73a3lk37pbyrkm9gqb5msp9syr-c-shquote-1.1.0 /nix/store/22aks7sxqhrilfazjs6iv52pbknraqgg-c-utf8-1.1.0 /nix/store/6qrf6znknn5kfpfgnnv7jvrwm61i9riz-ca.json /nix/store/x3j97yw2lr7hm04j094a3c549lsfz88f-coreutils-full-9.11 /nix/store/wmbbdkmhyjl05h5kdkdf3b3ddbggb4ll-cpio-2.15 /nix/store/pkx6g62xshir1v7hqzns0x2ygzx1w60n-curl-8.22.0-man /nix/store/9m86y9f5kvc2mzqsx5rzivklpicd5qhs-dash-0.5.13.5 /nix/store/dwxcx15jh1k96s4j72y5zc99r1b41wvk-dbus-1.16.2-man /nix/store/va4j94l2rbc7n3dc8z3grv02vbrg7c4g-dbus-broker-37 /nix/store/fp8hxnvlz3lak1bzq4p7ap59r8vjxrb1-decrypt-age-secrets /nix/store/qmwxkfwafyj6i70ajinx800rgnskny6x-decrypt-age-secrets /nix/store/fczgr1cxz09ckj702iwnil5fr7rfvvx4-desktop-file-utils-0.28 /nix/store/z41drq8l6lj1pz60wmwq5ylf95ya4v0a-die-hook /nix/store/19m79n6f7c3ay59121jqgacf8bw4wcq2-diffutils-3.12 /nix/store/lzmh81inx1c3jaw70hfywmbi89d6n0f4-dosfstools-4.2 /nix/store/r1krmnvp3lf7p2w82f75ma29waybl91s-dosfstools-4.2-man /nix/store/gpqmp8zvknla38054vc99j31ali2jbhf-dry-activate /nix/store/hmd4fpgc466fwa91sgmid1p945hrv2qi-dry-activate /nix/store/i57l809ym2hxbbcm9jrilfs7kcc7jq0s-dry-activate /nix/store/7gjpyq2gx139hag5wk58ikc5wb5qn790-fc-00-nixos-cache.conf /nix/store/2znggpddw49xl6h9z2kqjy8iix43kn2q-fc-10-nixos-rendering.conf /nix/store/4bqx5p54jfb2sgqwgmlls4l4lyayw0vl-fc-52-nixos-default-fonts.conf /nix/store/av1k514gja2ycknszz7rlgqrwq9naz21-fc-53-nixos-reject-type1.conf /nix/store/ncd4vraimxgmcc1a7ajyy6xsyw5myf85-fc-53-no-bitmaps.conf /nix/store/y9ga0rljk252jfxkx6xc1pgy7p19ixq7-fc-53-user-aliases.conf /nix/store/ajyzga3n68lwnqdznz1w9jj29x73gw61-fc-cache /nix/store/ygzjs33lqyjydnsq65d02vgkm0m9dm65-find-xml-catalogs-hook /nix/store/vf2h24m5aa7phb4v1kbc2qd9r41jdfqv-flock-0.4.0 /nix/store/0awdd468q23p5q3yvii4sylf66fb3awb-fontconfig-2.18.3-bin /nix/store/5idl25pcsdd4xqan80ggpxa546fxmjbm-fontconfig-conf /nix/store/ay5imhn7gpfafiyyzn7p23mp57icrkyl-fstrm-0.6.1 /nix/store/wfnxkfk386wl2plrhqx7lwfj4z84r493-gawk-5.4.1-man /nix/store/i691igapkjmjwn3vr4kl4n1i57jgflq7-gen-hostid /nix/store/jbjaz978hyy9vqyh48rqkzxyjv5h1r95-getconf-glibc-2.44-25 /nix/store/aid1d4pl4ja2xsjmni8r6qpihzrx6r12-getent-glibc-2.44-25 /nix/store/ym2rglgpm7qn90dr0apaqcszk9qx3r1i-gixy-0.1.21 /nix/store/qx9x4l3wwlci78j9qijlihy2r711lkna-glibc-2.44-25-getent /nix/store/p6anq44imf9jm477g3q1ari69c6lrhdf-glibc-locales-2.44-25 /nix/store/qjb68rrljhzs4d3zcqc3glspr9l5rvzj-gnupg-2.4.9 /nix/store/pcdm9zcys4gpv3k09rnx6713c2a3znyq-groff-1.24.1 /nix/store/46582j5r4pp393rinddd10zk2gx04kqm-gzip-1.14-man /nix/store/9c3vvfi9gmbnfc3w7f2kx5y6n8d1n0rz-hashed-password.root /nix/store/32x3hahp29bdsxmkaa6ckf09ib0hi6qj-hicolor-icon-theme-0.18 /nix/store/h577qqgcdsh18d0br3ybkifpz1a4fpwq-htop-3.5.3 /nix/store/wxgwvy4rkl4vmq9hs7c8040jkxcyf563-htop-3.5.3-man /nix/store/rdkyz9f6b4q7w70c9a9wpir15q1p9ikd-hwinfo-25.5 /nix/store/brn3iy32n565m81n55q7b1xvfbd4pw37-hwinfo-25.5-lib /nix/store/jfv4wsp92qh722z12d77rbs7kgjsi5p7-install-shell-files /nix/store/m0frb3s22v7q9b1aycx1f3ycfrsxasf3-iproute2-7.1.0-man /nix/store/lpm59bx3rg9gnj9lywj82qavw1xn9bj0-iptables-1.8.13 /nix/store/gk11slyisjsh4cs7ppddgpk02v9cmljg-iptables-1.8.13-man /nix/store/5vkl1n5cj3ajhfrkm8s58dd0lnd46whc-iputils-20250605 /nix/store/9phkhw923gvaxwf2fkd84qkbdkq98hjv-iputils-20250605-man /nix/store/jcj7kvnnlb6g5avi91sv1dk0fya7kc7j-jbigkit-2.1 /nix/store/hgmz4zqs3swxkxibxbqaqc6bj0xlpqyr-jemalloc-5.3.1 /nix/store/3dk5p8ydxv92px9q2y5vgq3gzl26vdxy-jq-1.8.2-man /nix/store/q1fij22rx6gb5vh4mscrsgl11674x0p2-lego-5.5.1 /nix/store/n6z9dv3yjlgvfx1nmrx6qzyv8vzim1l2-less-710 /nix/store/5ywzmahb5283n1j14g0d885x5f9pbjvi-less-710-man /nix/store/gvnsi53k3g5nzss3ajizkp10nzgy8rhx-libaio-0.3.113 /nix/store/90bcfdi4sb1qbhx98w4g9c1h95aiw8s7-libcap-2.78-man /nix/store/a9sgl4s3bf2xhbxz8q7vyymmp95nm1zi-libcap-text-verifier-0-unstable /nix/store/qrjlm5grpjzdd0lngr7v502np294w3zg-libnftnl-1.3.2 /nix/store/8y9sbndkj3hczx93ms8lzx95xzqr97rp-libnl-3.12.0 /nix/store/6baw3icl8cdgb3vq1vqmip402ccv401c-libpcap-1.10.7-lib /nix/store/z9w2s1s0ppg3cxhb9phm7m08smmdnan2-libpipeline-1.5.8 /nix/store/6464c7gg498k0jsml5jy3csnvniwj7ym-libunwind-1.8.3 /nix/store/gjvk3qrxx92qynaggwh28l76r48hdx60-liburcu-0.15.7 /nix/store/vkdka8qlydk191b8ygcad59qhx1y98ny-libxslt-1.1.45 /nix/store/9cnwcn4fgz42vc0dh8y1n4xgavnddw4l-libxslt-1.1.45-bin /nix/store/5vsa52hpnqlpsq1wgng0phk4aa922yx9-libyaml-0.2.5 /nix/store/ngz6addj3w9gy0nzhkg042wmay61k1pl-linux-pam-1.7.2-man /nix/store/41dvpqri6ikjmkrnwrplfffy4id42pzb-lm-sensors-3.6.2 /nix/store/ndfk11q5r1kf4bsihjvp1f354kpizji4-lndir-1.0.6 /nix/store/nv1q0j70nq3fwjd0bpva65b1j5fh7q65-make-binary-wrapper-hook /nix/store/9af94c82g81kprisjxnz3n6xcrgzljl1-make-initrd-ng-0.1.0 /nix/store/v138qwlwfppf49qxvf97jgdanqjb8xvx-make-shell-wrapper-hook /nix/store/8kvx05pwi1zp949ik4pkijwvzg48yg16-man-db-2.13.1 /nix/store/x6j2f5xvxra4hj1iqmdmh57lfmb9hlkg-mbedtls-3.6.7 /nix/store/p46vazcdfh1p8qy79cjp0abq0rrs15s4-minica-1.1.0 /nix/store/z0v4hf4vbgkbjg0viz97hr315ih9d7gq-mkpasswd-5.6.6 /nix/store/35qmw1p3rb0ijss6x2hhw55kpl6xf4kc-mkpasswd-5.6.6-man /nix/store/rhvcgcpskg07kr7wlcrhcvnd7y68i7fv-mount-secret-fs /nix/store/mmc0qcb6ggff61wqy8lsl6ssprbwzkqa-nano-9.2 /nix/store/fr3ynmxb9vn63ci70h0jq0llxkj81px8-nano-9.2-man /nix/store/867c6kiankzp972mfq0iaki3m4gdj8gr-ncurses-6.6-man /nix/store/64sfa1yrx4yzk5n9z03rwcjcvdx5nzb9-netpbm-11.15.3 /nix/store/7vwdibk17flzf6n83q7q99m86f0vs0vy-netpbm-11.15.3-bin /nix/store/4wq9d936wivgfzcpw11d7j4nnafyc8a6-netpbm-11.15.3-dev /nix/store/04a46730rhw2kwavalpvwlhdd35hq6l7-nginx-1.30.5 /nix/store/xr1wfaw8l3lyg2idl2qsslxw606j90sn-nginx-config-formatter-1.4.0 /nix/store/ncdjzbn1g7ynv9qjy5japl8s1c0rdblg-nix-bash-completions-0.6.8 /nix/store/b9wh61y8n7v9xkswb7bb8s482x1zh0g5-nix-info /nix/store/wsmivpwv5nvviwibzinjhlh0v3c2638r-nixos-facter-0.4.4 /nix/store/59rxi02gx75hfclwyx20g27h2wgi3dhj-nixos-firewall-tool-26.11 /nix/store/zi6rf3j6zlnim9yzy0i441f4v826369b-nixos-init-0.1.0 /nix/store/ajgjf5dy8pws2gwnsh0vhgybk0zs6pxb-nixos-option-26.11 /nix/store/c9wrgipvsr76zkbw4hv2nlyqgk7m09n8-nixos-rebuild-ng-26.11 /nix/store/drwj5qfqx9axxgf0jvxlavglj43fr2kh-nixos-test-driver-1.1 /nix/store/8crrfbqa73gv5qg2v33wmcazs8b8rjms-nsncd-1.5.3 /nix/store/zzcg63ldbpl460ggv6m7x4v70jcdq28h-nss-cacert-3.126 /nix/store/p27iryvpaqpsnh87dx84m1xmqm3iaksf-nss-cacert-3.126-p11kit /nix/store/z6123waqj9njgix4fpfi6i7wvdyjlfr4-openssh-10.5p1-man /nix/store/jvkcizxbwj7s23kdda4740946cr995k5-openssl-3.5.8-man /nix/store/d3w907jj4zls3z674whyahfgs5cgwbrh-openssl-4.0.2 /nix/store/3k0bxcrrwqhabz9san5a7qsjwqqsbv1w-pam.d /nix/store/47ivdcl4m28aayl11ry1wxmnrdw9rvay-perl-5.42.3-env /nix/store/qfmh9mhplhbrvqm2qr0advrc83jc3iwq-perl-5.42.3-man /nix/store/w9lr3hv24cp34c2v0sylhxpxlkbs213w-perl5.42.3-Config-IniFiles-3.002000 /nix/store/mg28wlc9f6xd109sarm6bnxh7bynph6p-perl5.42.3-File-Slurp-9999.32 /nix/store/yximdcsxwww7lidsv7c9kgngdhfmdm2l-perl5.42.3-IO-Stringy-2.113 /nix/store/49bsw746lmxj6hz8zvps0ysf1gf6swnq-perl5.42.3-JSON-4.10 /nix/store/z9lrz9xrmsxml967fz3ihswl0mvzn7ld-procps-4.0.7-man /nix/store/5sj5vvbaa55lhhq0n0z7akb735n49h4w-protobuf-c-1.5.2-lib /nix/store/3ffwvgdvv7gbzi8gv76dxfa51qi0s631-python3.14-annotated-types-0.7.0 /nix/store/d4mg6i65y6ciqjhf5a6lbyd4rxwv1vwb-python3.14-appdirs-1.4.4 /nix/store/266iy117rn8k1bs94vz723q61pi9pk2r-python3.14-cached-property-2.0.1 /nix/store/cy2s5dsq90b4smp0lam3kp8kqdgzpjmj-python3.14-colorama-0.4.6 /nix/store/iiln857fnb7hndg111fm1pfs965b04l2-python3.14-configargparse-1.7.7 /nix/store/3pmbmhzchxihjrp5ypjj6dnbwipvgllq-python3.14-jinja2-3.1.6 /nix/store/666c0pivf4hx4c5n670iwvwh7pdv10in-python3.14-junit-xml-1.9 /nix/store/g58xlyy0pyyzhlrsxhl23fwrgxd5knxz-python3.14-markupsafe-3.0.3 /nix/store/xkjzsh2mnk5nk43q62j4zbc3hrlbpan4-python3.14-nixos-test-lib-1.0.0 /nix/store/xp63p62ki037p75xzklhgbqq9y0yzw0y-python3.14-ovmfvartool-unstable-2022-09-04 /nix/store/299ga30jpc474gsdcw82b2am8p2cwb3p-python3.14-ptpython-3.0.32 /nix/store/0pcgj4dsvijc84likdrrg6wy2j4pbkqm-python3.14-pydantic-2.13.4 /nix/store/3f6ymk3jsvlpcwb19va5x99pwqkxchdp-python3.14-pydantic-core-2.46.4 /nix/store/fn641fh11q9i2iypj2b5ngj86kz627a7-python3.14-pyparsing-2.4.7 /nix/store/jy4cqzhncnpsl9h8g3pf925bfd38js6k-python3.14-pyyaml-6.0.3 /nix/store/g85ppag364zkvpy9556vpyygcnsahi9c-python3.14-remote-pdb-2.1.0 /nix/store/zvps4wic4zqdsqzyhildnkk42vnj4j8h-python3.14-six-1.17.0 /nix/store/y8z24zii3bpvsdh72spl5pz52nfac65l-python3.14-typing-inspection-0.4.3 /nix/store/ic5ccszc7cv5wxzjyqz6hw9lyrflmpjg-rdma-core-65.0 /nix/store/056gvgk4qh9p9fjnq0587p4fjz0ps622-run-nspawn-1.0 /nix/store/x7c3iib5664z2857dpq2k2fp29cygpgq-shadow-4.20.2-man /nix/store/lgzy8gsx85qhq2jpykrqgynvvwgsj1l0-shadow-4.20.2-su /nix/store/a64164x5yrkgmm42vccw708ly9awyjnb-socat-1.8.1.3 /nix/store/y4kjaszvny7j9g21qrch7rvxha73l8pr-sound-theme-freedesktop-0.8 /nix/store/mhvrp58nzf4vmds4xvpjghgsvl4wyyp8-step-ca-0.30.2 /nix/store/jv2wdzlnwcmizjn0y0mz80w17klicz0g-strace-7.2 /nix/store/kmf8g1j6yg8x3wpwvfv2fr51nn2pzhf9-strace-7.2-man /nix/store/jap3rrh3zj98lcfb45czpx437v2vyvkq-stub-ld-aarch64-unknown-linux-musl /nix/store/s2darkjnbk3p7zhq2p2s6b8r0ayszxlw-sudo-1.9.17p2 /nix/store/0vbzk6n9b7dmzcq32fzwnb9zk5zw74pb-sudo-1.9.17p2-man /nix/store/2l1z2kzxa89zz02sl84k3wfqkcpdcvjs-sudoers /nix/store/n8bk02447winl4f3z886gz45z4nrjpwq-system-generators /nix/store/qg1kvg5ssa0inyj1ha4yx09kyh6fhnr2-system-generators /nix/store/rw4ybsrihbzjxd138ik43x9wg59s6wps-system-shutdown /nix/store/rw7namdkyb4idk01h1w9nnc7sf87y2b5-system-shutdown /nix/store/zssbrvn2rybq0xp7qim982n9zgdqr08z-systemd-261.3-dev /nix/store/ghnx7rjrwv5nb2wvn3yrnicq1451lrmn-systemd-261.3-man /nix/store/xrlxgabc8fmr2jn8xhw5lnl4r4zzhnny-systemd-default-tmpfiles /nix/store/0arsgmkazgjr6d8b49j6qx0r8px4i8p5-systemd-generator-environment.json /nix/store/6a64pa44nwccij845vydhqw1livyx6i6-tcpdump-4.99.6 /nix/store/yyf42wq6x1w3sknclkb29zm0vs2fvk9d-time-1.10 /nix/store/9ridhri2y7c0qhzw9w6smg0446ba8rx3-ty-0.0.84 /nix/store/1qnbm0yr3nkzhn3rvd6ka11b5gfdkpnj-user-generators /nix/store/6pd5d3xl19gzb1d058ly4wlmmdr3aqqq-user-generators /nix/store/gbfbbyxdcj7xy2bnnq5hsqzyzjnmnl9j-users-groups.json /nix/store/lfap3xfhj62szi6xf0l5q6w79izxjq88-users-groups.json /nix/store/xn3di4cysvgxgdh060x9isr7x07yhmpc-users-groups.json /nix/store/2xvngrzan0gjc0jcyd86w1fbyikmba8i-vars-check-certificates /nix/store/cp3lmfdzibh5v5r78ra2r9bk03lvzypq-vde2-2.3.3 /nix/store/v22igjivcrblk85b4f0gpm0zbfcbk9py-vhost-device-vsock-0.3.0 /nix/store/j80w2lmp03wakvqni4mdkw0xc2m60frx-which-2.25-man /nix/store/3zd57p1xd33fwqayh7picq5945rl695k-xauth-1.1.5 /nix/store/gil6bjrnax3c89blx8g5idbm56bcglx5-xwininfo-1.1.6 /nix/store/cyxkcksk8fk8jc5840nmf35pvxpva93x-xz-5.8.4-man /nix/store/bicsx30g2rhi6piy2yknijdirb7dadyk-zlib-ng-2.3.3 /nix/store/2b7kkqaqj2i68s3282klgrc2ccq9r871-zstd-1.5.7-man warning: ignoring the client-specified setting 'store', because it is a restricted setting and you are not a trusted user building '/nix/store/hh2y8f7vfk4mr0hypwjb4rxqy6ndxybm-system-path.drv' on nix-store.geninf.io:50051 system-path> build01: building hh2y8f7vfk4mr0hypwjb4rxqy6ndxybm-system-path.drv system-path> structuredAttrs is enabled system-path> created 1716 symlinks in user environment gi8rwnkn5zy165na5w02rw6i9srlc8xp-system-path.drv: build01: not scheduled here: gi8rwnkn5zy165na5w02rw6i9srlc8xp-system-path.drv, asking the scheduler again building '/nix/store/gi8rwnkn5zy165na5w02rw6i9srlc8xp-system-path.drv' on nix-store.geninf.io:50051 system-path> build01: building gi8rwnkn5zy165na5w02rw6i9srlc8xp-system-path.drv system-path> structuredAttrs is enabled system-path> created 1716 symlinks in user environment j5cj99b68cjn3275yrw6jj3rv546bfmv-system-path.drv: build01: not scheduled here: j5cj99b68cjn3275yrw6jj3rv546bfmv-system-path.drv, asking the scheduler again building '/nix/store/j5cj99b68cjn3275yrw6jj3rv546bfmv-system-path.drv' on nix-store.geninf.io:50051 system-path> build01: building j5cj99b68cjn3275yrw6jj3rv546bfmv-system-path.drv system-path> structuredAttrs is enabled system-path> created 1716 symlinks in user environment aszxv3x2d3d2z8gj6lvyzsf28a0fy2mp-dbus-1.drv: build01: not scheduled here: aszxv3x2d3d2z8gj6lvyzsf28a0fy2mp-dbus-1.drv, asking the scheduler again g1xs6v6cn953yzhg3ma76p5w597gj8jz-dbus-1.drv: build01: not scheduled here: g1xs6v6cn953yzhg3ma76p5w597gj8jz-dbus-1.drv, asking the scheduler again building '/nix/store/aszxv3x2d3d2z8gj6lvyzsf28a0fy2mp-dbus-1.drv' on nix-store.geninf.io:50051 dbus-1> build01: building aszxv3x2d3d2z8gj6lvyzsf28a0fy2mp-dbus-1.drv building '/nix/store/g1xs6v6cn953yzhg3ma76p5w597gj8jz-dbus-1.drv' on nix-store.geninf.io:50051 dbus-1> build01: building g1xs6v6cn953yzhg3ma76p5w597gj8jz-dbus-1.drv cq04a88nvp2s74xgjwmv4b95mk0dd37l-dbus-1.drv: build01: not scheduled here: cq04a88nvp2s74xgjwmv4b95mk0dd37l-dbus-1.drv, asking the scheduler again building '/nix/store/cq04a88nvp2s74xgjwmv4b95mk0dd37l-dbus-1.drv' on nix-store.geninf.io:50051 dbus-1> build01: building cq04a88nvp2s74xgjwmv4b95mk0dd37l-dbus-1.drv v44siwqckabkr3x3qmyiai11pd05l7qf-X-Restart-Triggers-dbus-broker.drv: build01: not scheduled here: v44siwqckabkr3x3qmyiai11pd05l7qf-X-Restart-Triggers-dbus-broker.drv, asking the scheduler again building '/nix/store/v44siwqckabkr3x3qmyiai11pd05l7qf-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-dbus-broker> build01: building v44siwqckabkr3x3qmyiai11pd05l7qf-X-Restart-Triggers-dbus-broker.drv X-Restart-Triggers-dbus-broker> structuredAttrs is enabled y88ncl7s1h9v37lgxqypficxydhv4qwp-X-Restart-Triggers-dbus-broker.drv: build01: not scheduled here: y88ncl7s1h9v37lgxqypficxydhv4qwp-X-Restart-Triggers-dbus-broker.drv, asking the scheduler again building '/nix/store/y88ncl7s1h9v37lgxqypficxydhv4qwp-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-dbus-broker> build01: building y88ncl7s1h9v37lgxqypficxydhv4qwp-X-Restart-Triggers-dbus-broker.drv X-Restart-Triggers-dbus-broker> structuredAttrs is enabled ws3jplqkz4qksivkp2rcs5rh9kldsgd3-X-Restart-Triggers-dbus-broker.drv: build01: not scheduled here: ws3jplqkz4qksivkp2rcs5rh9kldsgd3-X-Restart-Triggers-dbus-broker.drv, asking the scheduler again building '/nix/store/ws3jplqkz4qksivkp2rcs5rh9kldsgd3-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-dbus-broker> build01: building ws3jplqkz4qksivkp2rcs5rh9kldsgd3-X-Restart-Triggers-dbus-broker.drv X-Restart-Triggers-dbus-broker> structuredAttrs is enabled building '/nix/store/7dkhrsavd1byxac66cwqah1vjldzrqha-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build01: building 7dkhrsavd1byxac66cwqah1vjldzrqha-unit-dbus-broker.service.drv unit-dbus-broker.service> structuredAttrs is enabled 5188fzq8y2m1n5g4g5fcqi73ix3s57hi-unit-dbus-broker.service.drv: build01: not scheduled here: 5188fzq8y2m1n5g4g5fcqi73ix3s57hi-unit-dbus-broker.service.drv, asking the scheduler again building '/nix/store/5188fzq8y2m1n5g4g5fcqi73ix3s57hi-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build01: building 5188fzq8y2m1n5g4g5fcqi73ix3s57hi-unit-dbus-broker.service.drv unit-dbus-broker.service> structuredAttrs is enabled 0pna3ck5fvpnk39ggphv2mx380f3a4pk-unit-dbus-broker.service.drv: build01: not scheduled here: 0pna3ck5fvpnk39ggphv2mx380f3a4pk-unit-dbus-broker.service.drv, asking the scheduler again 1ixgb15zwk60s4iylqcfmccbwiqpch4w-unit-dbus-broker.service.drv: build01: not scheduled here: 1ixgb15zwk60s4iylqcfmccbwiqpch4w-unit-dbus-broker.service.drv, asking the scheduler again building '/nix/store/0pna3ck5fvpnk39ggphv2mx380f3a4pk-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build01: building 0pna3ck5fvpnk39ggphv2mx380f3a4pk-unit-dbus-broker.service.drv unit-dbus-broker.service> structuredAttrs is enabled building '/nix/store/1ixgb15zwk60s4iylqcfmccbwiqpch4w-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build01: building 1ixgb15zwk60s4iylqcfmccbwiqpch4w-unit-dbus-broker.service.drv unit-dbus-broker.service> structuredAttrs is enabled 8xrl3n7nmk2hjj9mwmys7kmcc3q69268-unit-dbus-broker.service.drv: build01: not scheduled here: 8xrl3n7nmk2hjj9mwmys7kmcc3q69268-unit-dbus-broker.service.drv, asking the scheduler again kncpsd6vvi44qgwqrdg90plr7cpwfgbz-unit-dbus-broker.service.drv: build01: not scheduled here: kncpsd6vvi44qgwqrdg90plr7cpwfgbz-unit-dbus-broker.service.drv, asking the scheduler again building '/nix/store/8xrl3n7nmk2hjj9mwmys7kmcc3q69268-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build01: building 8xrl3n7nmk2hjj9mwmys7kmcc3q69268-unit-dbus-broker.service.drv unit-dbus-broker.service> structuredAttrs is enabled building '/nix/store/kncpsd6vvi44qgwqrdg90plr7cpwfgbz-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build01: building kncpsd6vvi44qgwqrdg90plr7cpwfgbz-unit-dbus-broker.service.drv unit-dbus-broker.service> structuredAttrs is enabled 2lpc9mg59ybj5fm7hs8wrn8jxbcx2iqp-system-units.drv: build01: not scheduled here: 2lpc9mg59ybj5fm7hs8wrn8jxbcx2iqp-system-units.drv, asking the scheduler again building '/nix/store/2lpc9mg59ybj5fm7hs8wrn8jxbcx2iqp-system-units.drv' on nix-store.geninf.io:50051 system-units> build01: building 2lpc9mg59ybj5fm7hs8wrn8jxbcx2iqp-system-units.drv apmgdhhpvxjqar7x31l004zgmhwjpsn2-user-units.drv: build01: not scheduled here: apmgdhhpvxjqar7x31l004zgmhwjpsn2-user-units.drv, asking the scheduler again building '/nix/store/apmgdhhpvxjqar7x31l004zgmhwjpsn2-user-units.drv' on nix-store.geninf.io:50051 user-units> build01: building apmgdhhpvxjqar7x31l004zgmhwjpsn2-user-units.drv 17mjp1rbf9ps5n90cw4i8qxd86qpd4zd-user-units.drv: build01: not scheduled here: 17mjp1rbf9ps5n90cw4i8qxd86qpd4zd-user-units.drv, asking the scheduler again n1yiiilqxb57rck4sxnhnmqrl78bnw6v-system-units.drv: build01: not scheduled here: n1yiiilqxb57rck4sxnhnmqrl78bnw6v-system-units.drv, asking the scheduler again building '/nix/store/17mjp1rbf9ps5n90cw4i8qxd86qpd4zd-user-units.drv' on nix-store.geninf.io:50051 user-units> build01: building 17mjp1rbf9ps5n90cw4i8qxd86qpd4zd-user-units.drv building '/nix/store/n1yiiilqxb57rck4sxnhnmqrl78bnw6v-system-units.drv' on nix-store.geninf.io:50051 system-units> build01: building n1yiiilqxb57rck4sxnhnmqrl78bnw6v-system-units.drv wswpdpsqxpjbc7n4qlcgdsym3plsqnrd-user-units.drv: build01: not scheduled here: wswpdpsqxpjbc7n4qlcgdsym3plsqnrd-user-units.drv, asking the scheduler again rj3g6b5qb76lv4fhar35s1kwf6cvk3ax-system-units.drv: build01: not scheduled here: rj3g6b5qb76lv4fhar35s1kwf6cvk3ax-system-units.drv, asking the scheduler again building '/nix/store/wswpdpsqxpjbc7n4qlcgdsym3plsqnrd-user-units.drv' on nix-store.geninf.io:50051 user-units> build01: building wswpdpsqxpjbc7n4qlcgdsym3plsqnrd-user-units.drv building '/nix/store/rj3g6b5qb76lv4fhar35s1kwf6cvk3ax-system-units.drv' on nix-store.geninf.io:50051 system-units> build01: building rj3g6b5qb76lv4fhar35s1kwf6cvk3ax-system-units.drv s9wdccvq8a2cijylkhwxlrl4914618fr-etc.drv: build01: not scheduled here: s9wdccvq8a2cijylkhwxlrl4914618fr-etc.drv, asking the scheduler again building '/nix/store/s9wdccvq8a2cijylkhwxlrl4914618fr-etc.drv' on nix-store.geninf.io:50051 etc> build01: building s9wdccvq8a2cijylkhwxlrl4914618fr-etc.drv w2xg1sqi6m3hvwhfkh2s3mfmvjdqjscm-etc.drv: build01: not scheduled here: w2xg1sqi6m3hvwhfkh2s3mfmvjdqjscm-etc.drv, asking the scheduler again building '/nix/store/w2xg1sqi6m3hvwhfkh2s3mfmvjdqjscm-etc.drv' on nix-store.geninf.io:50051 etc> build01: building w2xg1sqi6m3hvwhfkh2s3mfmvjdqjscm-etc.drv 5qn0cs0px1wsfb1p2q006am9d7zw62bi-etc.drv: build01: not scheduled here: 5qn0cs0px1wsfb1p2q006am9d7zw62bi-etc.drv, asking the scheduler again building '/nix/store/5qn0cs0px1wsfb1p2q006am9d7zw62bi-etc.drv' on nix-store.geninf.io:50051 etc> build01: building 5qn0cs0px1wsfb1p2q006am9d7zw62bi-etc.drv 12s0dsfwa9lhl4wnxd2r6hnddmbvnlxh-activate.drv: build01: not scheduled here: 12s0dsfwa9lhl4wnxd2r6hnddmbvnlxh-activate.drv, asking the scheduler again building '/nix/store/12s0dsfwa9lhl4wnxd2r6hnddmbvnlxh-activate.drv' on nix-store.geninf.io:50051 activate> build01: building 12s0dsfwa9lhl4wnxd2r6hnddmbvnlxh-activate.drv activate> structuredAttrs is enabled d9f2zjh4l0gr6zd08fxrjwcya3fblwz5-activate.drv: build01: not scheduled here: d9f2zjh4l0gr6zd08fxrjwcya3fblwz5-activate.drv, asking the scheduler again building '/nix/store/d9f2zjh4l0gr6zd08fxrjwcya3fblwz5-activate.drv' on nix-store.geninf.io:50051 activate> build01: building d9f2zjh4l0gr6zd08fxrjwcya3fblwz5-activate.drv activate> structuredAttrs is enabled building '/nix/store/v48qgnj5f9qd0bdgz34ad9injswwfjjl-activate.drv' on nix-store.geninf.io:50051 activate> build01: building v48qgnj5f9qd0bdgz34ad9injswwfjjl-activate.drv activate> structuredAttrs is enabled 51khy2253wjxqsk3jwvp8rh85mn2rck7-nixos-system-server-test.drv: build01: not scheduled here: 51khy2253wjxqsk3jwvp8rh85mn2rck7-nixos-system-server-test.drv, asking the scheduler again building '/nix/store/51khy2253wjxqsk3jwvp8rh85mn2rck7-nixos-system-server-test.drv' on nix-store.geninf.io:50051 nixos-system-server-test> build01: building 51khy2253wjxqsk3jwvp8rh85mn2rck7-nixos-system-server-test.drv nixos-system-server-test> structuredAttrs is enabled 1rvybv2yz4ly3l1h8ywl11gfabjdcq4r-nixos-system-client-test.drv: build01: not scheduled here: 1rvybv2yz4ly3l1h8ywl11gfabjdcq4r-nixos-system-client-test.drv, asking the scheduler again building '/nix/store/1rvybv2yz4ly3l1h8ywl11gfabjdcq4r-nixos-system-client-test.drv' on nix-store.geninf.io:50051 nixos-system-client-test> build01: building 1rvybv2yz4ly3l1h8ywl11gfabjdcq4r-nixos-system-client-test.drv nixos-system-client-test> structuredAttrs is enabled fgccj3f0fi84bb23xsazhp34gnz788gq-nixos-system-ca-test.drv: build01: not scheduled here: fgccj3f0fi84bb23xsazhp34gnz788gq-nixos-system-ca-test.drv, asking the scheduler again building '/nix/store/fgccj3f0fi84bb23xsazhp34gnz788gq-nixos-system-ca-test.drv' on nix-store.geninf.io:50051 nixos-system-ca-test> build01: building fgccj3f0fi84bb23xsazhp34gnz788gq-nixos-system-ca-test.drv nixos-system-ca-test> structuredAttrs is enabled wc19j92qdzgca477297vi9j6l106pdwr-run-server-nspawn.drv: build01: not scheduled here: wc19j92qdzgca477297vi9j6l106pdwr-run-server-nspawn.drv, asking the scheduler again building '/nix/store/wc19j92qdzgca477297vi9j6l106pdwr-run-server-nspawn.drv' on nix-store.geninf.io:50051 run-server-nspawn> build01: building wc19j92qdzgca477297vi9j6l106pdwr-run-server-nspawn.drv lr7dgbc7c14y1ymldgv8lmdg9zpnzc5s-run-client-nspawn.drv: build01: not scheduled here: lr7dgbc7c14y1ymldgv8lmdg9zpnzc5s-run-client-nspawn.drv, asking the scheduler again building '/nix/store/lr7dgbc7c14y1ymldgv8lmdg9zpnzc5s-run-client-nspawn.drv' on nix-store.geninf.io:50051 run-client-nspawn> build01: building lr7dgbc7c14y1ymldgv8lmdg9zpnzc5s-run-client-nspawn.drv xcz05b7j1dndj9mpvvncarww7mzs0bf8-run-ca-nspawn.drv: build01: not scheduled here: xcz05b7j1dndj9mpvvncarww7mzs0bf8-run-ca-nspawn.drv, asking the scheduler again building '/nix/store/xcz05b7j1dndj9mpvvncarww7mzs0bf8-run-ca-nspawn.drv' on nix-store.geninf.io:50051 run-ca-nspawn> build01: building xcz05b7j1dndj9mpvvncarww7mzs0bf8-run-ca-nspawn.drv cnkh23hd5aw54m76kd1k9kvamixyznhr-driverConfiguration.json.drv: build01: not scheduled here: cnkh23hd5aw54m76kd1k9kvamixyznhr-driverConfiguration.json.drv, asking the scheduler again building '/nix/store/cnkh23hd5aw54m76kd1k9kvamixyznhr-driverConfiguration.json.drv' on nix-store.geninf.io:50051 driverConfiguration.json> build01: building cnkh23hd5aw54m76kd1k9kvamixyznhr-driverConfiguration.json.drv driverConfiguration.json> structuredAttrs is enabled vnf8r0isskfav9882svllbfd9rzg68wl-nixos-test-driver-certificates.drv: build01: not scheduled here: vnf8r0isskfav9882svllbfd9rzg68wl-nixos-test-driver-certificates.drv, asking the scheduler again building '/nix/store/vnf8r0isskfav9882svllbfd9rzg68wl-nixos-test-driver-certificates.drv' on nix-store.geninf.io:50051 nixos-test-driver-certificates> build01: building vnf8r0isskfav9882svllbfd9rzg68wl-nixos-test-driver-certificates.drv nixos-test-driver-certificates> Running type check (enable/disable: config.skipTypeCheck) nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck nixos-test-driver-certificates> All checks passed! nixos-test-driver-certificates> Linting test script (enable/disable: config.skipLint) nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipLint nixos-test-driver-certificates> All checks passed! building '/nix/store/g6wikjmmngczv1nhn62qy9dwgrx3rjjf-container-test-run-certificates.drv' on nix-store.geninf.io:50051 container-test-run-certificates> build01: building g6wikjmmngczv1nhn62qy9dwgrx3rjjf-container-test-run-certificates.drv container-test-run-certificates> Machine state will be reset. To keep it, pass --keep-machine-state container-test-run-certificates> start all VLans container-test-run-certificates> (finished: start all VLans, in 0.01 seconds) container-test-run-certificates> container-test-run-certificates> Test will time out and terminate in 3600.0 seconds container-test-run-certificates> run the VM test script container-test-run-certificates> additionally exposed symbols: container-test-run-certificates> ca, client, server, container-test-run-certificates> vlan1, container-test-run-certificates> start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh container-test-run-certificates> ca: systemd-nspawn running (pid 50) container-test-run-certificates> ca: Waiting for journal at /build/vm-state-ca/var/log/journal... container-test-run-certificates> ca: waiting for unit step-ca.service container-test-run-certificates> nixos-nspawn(ca): TAP vde-tap1 not found; container will be isolated from VDE container-test-run-certificates> nixos-nspawn(ca): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths. container-test-run-certificates> Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file. container-test-run-certificates> ░ Spawning container ca on /build/vm-state-ca. container-test-run-certificates> ca # No journal files were found. container-test-run-certificates> ca # No journal boot entry found for the specified boot (+0). container-test-run-certificates> ca # [2465911.172814] ca systemd-journald[80]: Journal started container-test-run-certificates> ca # [2465911.172874] ca systemd-journald[80]: Runtime Journal (/run/log/journal/e29edf2ca935491fa88ab8105794c1e0) is 8M, max 2.5G, 2.4G free. container-test-run-certificates> ca # [2465911.182796] ca systemd[1]: Finished Apply Kernel Variables. container-test-run-certificates> ca # [2465911.197380] ca systemd[1]: Finished Create Static Device Nodes in /dev gracefully. container-test-run-certificates> ca # [2465911.213579] ca systemd[1]: Starting Flush Journal to Persistent Storage... container-test-run-certificates> ca # [2465911.214443] ca systemd[1]: Starting Network Name Resolution... container-test-run-certificates> ca # [2465911.215110] ca systemd[1]: Starting Create Static Device Nodes in /dev... container-test-run-certificates> ca # [2465911.225918] ca systemd-journald[80]: Time spent on flushing to /var/log/journal/e29edf2ca935491fa88ab8105794c1e0 is 1.469ms for 7 entries. container-test-run-certificates> ca # [2465911.225918] ca systemd-journald[80]: System Journal (/var/log/journal/e29edf2ca935491fa88ab8105794c1e0) is 8M, max 4G, 3.9G free. container-test-run-certificates> ca # [2465911.242470] ca systemd[1]: Finished Create Static Device Nodes in /dev. container-test-run-certificates> ca # [2465911.243163] ca systemd[1]: Reached target Preparation for Local File Systems. container-test-run-certificates> ca # [2465911.243309] ca systemd[1]: Reached target Local File Systems. container-test-run-certificates> ca # [2465911.244285] ca systemd[1]: Listening on Boot Loader Control Service Socket. container-test-run-certificates> ca # [2465911.244338] ca systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> ca # [2465911.245373] ca systemd[1]: Starting Save Transient machine-id to Disk... container-test-run-certificates> ca # [2465911.245408] ca systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys container-test-run-certificates> ca # [2465911.246828] ca systemd[1]: Finished Flush Journal to Persistent Storage. container-test-run-certificates> ca # [2465911.247671] ca systemd[1]: Starting Create System Files and Directories... container-test-run-certificates> ca # [2465911.275430] ca systemd-tmpfiles[123]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted container-test-run-certificates> ca # [2465911.275638] ca systemd-tmpfiles[123]: fchmod() of /var/log/journal failed: Operation not permitted container-test-run-certificates> ca # [2465911.275779] ca systemd-tmpfiles[123]: fchmod() of /var/log/journal/e29edf2ca935491fa88ab8105794c1e0 failed: Operation not permitted container-test-run-certificates> ca # [2465911.275988] ca systemd-tmpfiles[123]: fchmod() of /run/log/journal failed: Operation not permitted container-test-run-certificates> ca # [2465911.277655] ca systemd[1]: Finished Create System Files and Directories. container-test-run-certificates> ca # [2465911.278862] ca systemd[1]: Starting Rebuild Journal Catalog... container-test-run-certificates> ca # [2465911.279631] ca systemd[1]: Starting Record System Boot/Shutdown in UTMP... container-test-run-certificates> ca # [2465911.294179] ca systemd[1]: Finished Record System Boot/Shutdown in UTMP. container-test-run-certificates> ca # [2465911.313414] ca systemd[1]: Finished Rebuild Journal Catalog. container-test-run-certificates> ca # [2465911.314859] ca systemd[1]: Starting Update is Completed... container-test-run-certificates> ca # [2465911.326994] ca systemd[1]: Finished Update is Completed. container-test-run-certificates> ca # [2465911.420927] ca systemd[1]: Finished Firewall. container-test-run-certificates> ca # [2465911.421111] ca systemd[1]: Reached target Preparation for Network. container-test-run-certificates> ca # [2465911.421608] ca systemd[1]: Listening on Network Management Resolve Hook Socket. container-test-run-certificates> ca # [2465911.422907] ca systemd[1]: Starting Network Management... container-test-run-certificates> ca # [2465911.428106] ca systemd[1]: Finished Save Transient machine-id to Disk. container-test-run-certificates> ca # [2465912.179329] ca systemd[1]: etc-machine\x2did.mount: Deactivated successfully. container-test-run-certificates> ca # [2465912.180093] ca systemd-networkd[197]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted container-test-run-certificates> ca # [2465912.180185] ca systemd-networkd[197]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted container-test-run-certificates> ca # [2465912.226888] ca systemd-networkd[197]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> ca # [2465912.227055] ca systemd-networkd[197]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> ca # [2465912.227221] ca systemd-networkd[197]: lo: Link UP container-test-run-certificates> ca # [2465912.227226] ca systemd-networkd[197]: lo: Gained carrier container-test-run-certificates> ca # [2465912.227426] ca systemd-networkd[197]: eth1: Configuring with /etc/systemd/network/40-eth1.network. container-test-run-certificates> ca # [2465912.227894] ca systemd-networkd[197]: eth1: Link UP container-test-run-certificates> ca # [2465912.227901] ca systemd[1]: Started Network Management. container-test-run-certificates> ca # [2465912.231930] ca systemd[1]: Starting Enable Persistent Storage in systemd-networkd... container-test-run-certificates> ca # [2465912.232219] ca systemd-networkd[197]: eth1: Gained carrier container-test-run-certificates> ca # [2465912.306508] ca systemd[1]: Finished Enable Persistent Storage in systemd-networkd. container-test-run-certificates> ca # [2465912.380790] ca systemd-resolved[116]: Positive Trust Anchors: container-test-run-certificates> ca # [2465912.380803] ca systemd-resolved[116]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d container-test-run-certificates> ca # [2465912.380805] ca systemd-resolved[116]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 container-test-run-certificates> ca # [2465912.380841] ca systemd-resolved[116]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test container-test-run-certificates> ca # [2465912.410979] ca systemd-resolved[116]: Using system hostname 'ca'. container-test-run-certificates> ca # [2465912.412423] ca systemd[1]: Started Network Name Resolution. container-test-run-certificates> ca # [2465912.412564] ca systemd[1]: Reached target Network. container-test-run-certificates> ca # [2465912.412683] ca systemd[1]: Reached target Network is Online. container-test-run-certificates> ca # [2465912.412777] ca systemd[1]: Reached target System Initialization. container-test-run-certificates> ca # [2465912.413174] ca systemd[1]: Started Renew ACME Certificate for ca.foo. container-test-run-certificates> ca # [2465912.413230] ca systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> ca # [2465912.413279] ca systemd[1]: Started Daily Cleanup of Temporary Directories. container-test-run-certificates> ca # [2465912.413326] ca systemd[1]: Reached target Timer Units. container-test-run-certificates> ca # [2465912.413561] ca systemd[1]: Listening on D-Bus System Message Bus Socket. container-test-run-certificates> ca # [2465912.413761] ca systemd[1]: Listening on Nix Daemon Socket. container-test-run-certificates> ca # [2465912.413987] ca systemd[1]: Listening on Virtual Machine and Container Registration Service Socket. container-test-run-certificates> ca # [2465912.414057] ca systemd[1]: Reached target Socket Units. container-test-run-certificates> ca # [2465912.414156] ca systemd[1]: Reached target Basic System. container-test-run-certificates> ca # [2465912.416950] ca systemd[1]: Starting Set up the ACME certificate renewal infrastructure... container-test-run-certificates> ca # [2465912.418662] ca systemd[1]: Starting Import lastlog data into lastlog2 database... container-test-run-certificates> ca # [2465912.418731] ca systemd[1]: nginx-config-reload.service skipped, unmet condition check ConditionPathExists=/var/lib/acme/ca.foo/fullchain.pem container-test-run-certificates> ca # [2465912.420246] ca systemd[1]: Starting Name Service Cache Daemon (nsncd)... container-test-run-certificates> ca # [2465912.422251] ca systemd[1]: Starting step-ca service... container-test-run-certificates> ca # [2465912.460675] ca systemd[1]: Starting D-Bus System Message Bus... container-test-run-certificates> ca # [2465912.534841] ca systemd[1]: Finished Import lastlog data into lastlog2 database. container-test-run-certificates> ca # [2465912.679466] ca acme-setup-privileged[203]: + set -euo pipefail container-test-run-certificates> ca # [2465912.679466] ca acme-setup-privileged[203]: + cd /var/lib/acme container-test-run-certificates> ca # [2465912.679466] ca acme-setup-privileged[203]: + chmod -R u=rwX,g=,o= .lego/accounts container-test-run-certificates> ca # [2465912.681977] ca acme-setup-privileged[203]: + chown -R acme .lego/accounts container-test-run-certificates> ca # [2465912.684204] ca acme-setup-privileged[203]: + for fixpath in ca.foo .lego/ca.foo container-test-run-certificates> ca # [2465912.684204] ca acme-setup-privileged[203]: + '[' -d ca.foo ']' container-test-run-certificates> ca # [2465912.684347] ca acme-setup-privileged[203]: + for fixpath in ca.foo .lego/ca.foo container-test-run-certificates> ca # [2465912.684347] ca acme-setup-privileged[203]: + '[' -d .lego/ca.foo ']' container-test-run-certificates> ca # [2465912.700755] ca systemd[1]: Started Name Service Cache Daemon (nsncd). container-test-run-certificates> ca # [2465912.700979] ca systemd[1]: Reached target Host and Network Name Lookups. container-test-run-certificates> ca # [2465912.701083] ca systemd[1]: Reached target User and Group Name Lookups. container-test-run-certificates> ca # [2465912.742450] ca nsncd[205]: Oct 02 20:25:32.728 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket" container-test-run-certificates> ca # [2465912.750607] ca systemd[1]: Starting User Login Management... container-test-run-certificates> ca # [2465912.753290] ca systemd[1]: Starting Permit User Sessions... container-test-run-certificates> ca # [2465912.765355] ca systemd[1]: Finished Permit User Sessions. container-test-run-certificates> ca # [2465912.766471] ca systemd[1]: Started Console Getty. container-test-run-certificates> ca # [2465912.766515] ca systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0 container-test-run-certificates> ca # [2465912.766531] ca systemd[1]: Reached target Login Prompts. container-test-run-certificates> ca # [2465912.909132] ca dbus-broker-launch[207]: Looking up NSS user entry for 'systemd-timesync'... container-test-run-certificates> ca # [2465912.910697] ca dbus-broker-launch[207]: NSS returned no entry for 'systemd-timesync' container-test-run-certificates> ca # [2465912.910697] ca dbus-broker-launch[207]: Invalid user-name in /nix/store/7cawivy34cqfj522iq7yx3hzixkxyaba-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync" container-test-run-certificates> ca # [2465912.911448] ca systemd[1]: Started D-Bus System Message Bus. container-test-run-certificates> ca # [2465912.922960] ca dbus-broker-launch[207]: Ready container-test-run-certificates> ca # [2465913.637784] ca systemd-logind[232]: New seat seat0. container-test-run-certificates> ca # [2465913.637973] ca systemd[1]: Started User Login Management. container-test-run-certificates> ca # [2465913.640904] ca systemd[1]: Starting linger-users.service... container-test-run-certificates> ca # [2465913.717834] ca systemd[1]: linger-users.service: Deactivated successfully. container-test-run-certificates> ca # [2465913.718148] ca systemd[1]: Finished linger-users.service. container-test-run-certificates> ca # [2465913.731210] ca acme-setup-start[221]: + set -euo pipefail container-test-run-certificates> ca # [2465913.731210] ca acme-setup-start[221]: + test -e ca/key.pem container-test-run-certificates> ca # [2465913.731648] ca acme-setup-start[221]: + minica --ca-key ca/key.pem --ca-cert ca/cert.pem --domains selfsigned.local container-test-run-certificates> ca # [2465913.772154] ca systemd[1]: Finished Set up the ACME certificate renewal infrastructure. container-test-run-certificates> ca # [2465913.775590] ca systemd[1]: Starting Ensure certificate for ca.foo... container-test-run-certificates> ca # [2465914.144200] ca systemd-networkd[197]: eth1: Gained IPv6LL container-test-run-certificates> ca # [2465914.190389] ca step-ca[206]: badger 2026/10/02 20:25:34 INFO: All 0 tables opened in 0s container-test-run-certificates> ca # [2465914.197513] ca step-ca[206]: 2026/10/02 20:25:34 Building new tls configuration using step-ca x509 Signer Interface container-test-run-certificates> ca # [2465914.206775] ca step-ca[206]: 2026/10/02 20:25:34 Starting Smallstep CA/0.30.2 (linux/arm64) container-test-run-certificates> ca # [2465914.206775] ca step-ca[206]: 2026/10/02 20:25:34 Documentation: https://u.step.sm/docs/ca container-test-run-certificates> ca # [2465914.206775] ca step-ca[206]: 2026/10/02 20:25:34 Community Discord: https://u.step.sm/discord container-test-run-certificates> ca # [2465914.206977] ca step-ca[206]: 2026/10/02 20:25:34 Config file: /etc/smallstep/ca.json container-test-run-certificates> ca # [2465914.206977] ca step-ca[206]: 2026/10/02 20:25:34 The primary server URL is https://ca.foo:1443 container-test-run-certificates> ca # [2465914.206977] ca step-ca[206]: 2026/10/02 20:25:34 Root certificates are available at https://ca.foo:1443/roots.pem container-test-run-certificates> ca # [2465914.206977] ca step-ca[206]: 2026/10/02 20:25:34 X.509 Root Fingerprint: 65bc2982098377d833bc3fc96e6d4971fc981b466cf9bba1054baf224584789d container-test-run-certificates> ca # [2465914.208606] ca systemd[1]: Started step-ca service. container-test-run-certificates> ca # [2465914.208861] ca step-ca[206]: 2026/10/02 20:25:34 Serving HTTPS on 0.0.0.0:1443 ... container-test-run-certificates> ca # [2465914.688064] ca acme-ca.foo-start[257]: Waiting to acquire lock in /run/acme/ container-test-run-certificates> ca # [2465914.692301] ca acme-ca.foo-start[257]: + '[' -e out/acme-success ']' container-test-run-certificates> ca # [2465914.692401] ca acme-ca.foo-start[257]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=ca.foo --ip-addresses= container-test-run-certificates> ca # [2465914.722552] ca acme-ca.foo-start[294]: + cd ca.foo container-test-run-certificates> ca # [2465914.723300] ca acme-ca.foo-start[294]: + cp -vp cert.pem ../out/cert.pem container-test-run-certificates> ca # [2465914.725287] ca acme-ca.foo-start[295]: 'cert.pem' -> '../out/cert.pem' container-test-run-certificates> ca # [2465914.725635] ca acme-ca.foo-start[294]: + cp -vp key.pem ../out/key.pem container-test-run-certificates> ca # [2465914.728951] ca acme-ca.foo-start[294]: 'key.pem' -> '../out/key.pem' container-test-run-certificates> ca # [2465914.729256] ca acme-ca.foo-start[257]: + cat out/cert.pem ca/cert.pem container-test-run-certificates> ca # [2465914.731944] ca acme-ca.foo-start[257]: + cp ca/cert.pem out/chain.pem container-test-run-certificates> ca # [2465914.734230] ca acme-ca.foo-start[257]: + cat out/key.pem out/fullchain.pem container-test-run-certificates> ca # [2465914.736212] ca acme-ca.foo-start[257]: + for fixpath in out certificates container-test-run-certificates> ca # [2465914.736212] ca acme-ca.foo-start[257]: + '[' -d out ']' container-test-run-certificates> ca # [2465914.736322] ca acme-ca.foo-start[257]: + chmod -R u=rwX,g=rX,o= out container-test-run-certificates> ca # [2465914.738344] ca acme-ca.foo-start[257]: + chown -R acme:nginx out container-test-run-certificates> ca # [2465914.743330] ca acme-ca.foo-start[257]: + for fixpath in out certificates container-test-run-certificates> ca # [2465914.743330] ca acme-ca.foo-start[257]: + '[' -d certificates ']' container-test-run-certificates> ca # [2465914.750053] ca systemd[1]: Finished Ensure certificate for ca.foo. container-test-run-certificates> ca # [2465914.752716] ca systemd[1]: Starting Nginx Web Server... container-test-run-certificates> ca # [2465915.687183] ca nginx-pre-start[306]: nginx: the configuration file /nix/store/922g9fm0n4v8xgbmb7sf8jkswmagn21n-nginx.conf syntax is ok container-test-run-certificates> ca # [2465915.687552] ca nginx-pre-start[306]: nginx: configuration file /nix/store/922g9fm0n4v8xgbmb7sf8jkswmagn21n-nginx.conf test is successful container-test-run-certificates> ca # [2465915.694148] ca systemd[1]: Started Nginx Web Server. container-test-run-certificates> ca # [2465915.695813] ca systemd[1]: Reached target Multi-User System. container-test-run-certificates> ca # [2465915.698454] ca systemd[1]: Starting Order (and renew) ACME certificate for ca.foo... container-test-run-certificates> ca # [2465916.725122] ca acme-order-renew-ca.foo-start[309]: Waiting to acquire lock in /run/acme/ container-test-run-certificates> ca # [2465916.727939] ca acme-order-renew-ca.foo-start[309]: + set -euo pipefail container-test-run-certificates> ca # [2465916.728094] ca acme-order-renew-ca.foo-start[309]: + exec container-test-run-certificates> ca # [2465916.728184] ca acme-order-renew-ca.foo-start[309]: + /nix/store/vf2h24m5aa7phb4v1kbc2qd9r41jdfqv-flock-0.4.0/bin/flock 11 container-test-run-certificates> ca # [2465916.729802] ca acme-order-renew-ca.foo-start[321]: ++ find accounts -path '*/keys/*.key' -print -quit container-test-run-certificates> ca # [2465916.732916] ca acme-order-renew-ca.foo-start[309]: + '[' -n '' ']' container-test-run-certificates> ca # [2465916.733013] ca acme-order-renew-ca.foo-start[309]: + exec container-test-run-certificates> ca # [2465916.733013] ca acme-order-renew-ca.foo-start[309]: + '[' -e certificates/ca.foo.key ']' container-test-run-certificates> ca # [2465916.733113] ca acme-order-renew-ca.foo-start[309]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo:1443/acme/acme/directory --key-type ec256 -d ca.foo --no-random-sleep --renew-force --ari-disable --force-cert-domains container-test-run-certificates> ca # [2465916.777409] ca acme-order-renew-ca.foo-start[322]: 2026-10-02T20:25:36.763151401Z INFO Private key saved. filepath=accounts/ca.foo_1443/none@none.tld/none@none.tld.key container-test-run-certificates> ca # [2465916.804387] ca step-ca[206]: time="2026-10-02T20:25:36Z" level=info duration="266.564µs" duration-ns=266564 fields.time="2026-10-02T20:25:36Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=84ca4526-6400-4a40-85f6-44d22f356506 response="{\"newNonce\":\"https://ca.foo:1443/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo:1443/acme/acme/new-account\",\"newOrder\":\"https://ca.foo:1443/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo:1443/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo:1443/acme/acme/key-change\"}" size=277 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [2465916.804989] ca acme-order-renew-ca.foo-start[322]: 2026-10-02T20:25:36.790776459Z INFO Registering the account. email=none@none.tld container-test-run-certificates> ca # [2465916.806563] ca step-ca[206]: time="2026-10-02T20:25:36Z" level=info duration=1.277218ms duration-ns=1277218 fields.time="2026-10-02T20:25:36Z" method=HEAD name=ca nonce=ejlmY3IxM2NETXN0SWlBZEJkMWdOSE1aSzZDdFZVQnc path=/acme/acme/new-nonce protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=45a39a5a-d0ee-43e6-a75a-cd0e923f733a size=0 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [2465916.811031] ca step-ca[206]: time="2026-10-02T20:25:36Z" level=info duration=3.121643ms duration-ns=3121643 fields.time="2026-10-02T20:25:36Z" method=POST name=ca nonce=UVJWNWJxbDhaVUNodjU0Z1UzVTZkZm9MbGtoS2Frank path=/acme/acme/new-account protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=6851ce56-4661-40c8-a993-022645bf22f6 response="{\"contact\":[\"mailto:none@none.tld\"],\"status\":\"valid\",\"orders\":\"https://ca.foo:1443/acme/acme/account/N12meIDglbynDBY5upqmft64xqV5Hm2L/orders\"}" size=143 status=201 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [2465916.811418] ca acme-order-renew-ca.foo-start[322]: 2026-10-02T20:25:36.797228868Z WARN !!!! HEADS UP !!!! container-test-run-certificates> ca # [2465916.811418] ca acme-order-renew-ca.foo-start[322]: Your account credentials have been saved in your container-test-run-certificates> ca # [2465916.811418] ca acme-order-renew-ca.foo-start[322]: configuration directory at "accounts". container-test-run-certificates> ca # [2465916.811418] ca acme-order-renew-ca.foo-start[322]: You should make a secure backup of this folder now. This container-test-run-certificates> ca # [2465916.811418] ca acme-order-renew-ca.foo-start[322]: configuration directory will also contain private keys container-test-run-certificates> ca # [2465916.811418] ca acme-order-renew-ca.foo-start[322]: generated by lego and certificates obtained from the ACME container-test-run-certificates> ca # [2465916.811418] ca acme-order-renew-ca.foo-start[322]: server. Making regular backups of this folder is ideal. container-test-run-certificates> ca # [2465916.811641] ca acme-order-renew-ca.foo-start[322]: 2026-10-02T20:25:36.797338789Z INFO Obtaining bundled SAN certificate. domains=ca.foo container-test-run-certificates> ca # [2465916.816415] ca step-ca[206]: time="2026-10-02T20:25:36Z" level=info duration=4.38706ms duration-ns=4387060 fields.time="2026-10-02T20:25:36Z" method=POST name=ca nonce=WlVkQTR2a1M4YlhFa0d6b1RPM0pIUHhRbjl2U0ZmSm4 path=/acme/acme/new-order protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=d20cf15b-693b-4a77-89c5-77e4a83f596b response="{\"id\":\"HyGhaEz29y6k9ZXWPNFJ93j6VQDMV0Nr\",\"status\":\"pending\",\"expires\":\"2026-10-03T20:25:36Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"ca.foo\"}],\"notBefore\":\"2026-10-02T20:24:36Z\",\"notAfter\":\"2026-12-31T20:25:36Z\",\"authorizations\":[\"https://ca.foo:1443/acme/acme/authz/F2ghHNKwMSyKpPEokt7QnEIFZjgWv6hU\"],\"finalize\":\"https://ca.foo:1443/acme/acme/order/HyGhaEz29y6k9ZXWPNFJ93j6VQDMV0Nr/finalize\"}" size=392 status=201 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [2465916.875573] ca step-ca[206]: time="2026-10-02T20:25:36Z" level=info duration=2.047228ms duration-ns=2047228 fields.time="2026-10-02T20:25:36Z" method=POST name=ca nonce=WXhBYXVucGRoYWlHaGp4azdUTWhYNlBKRTVzcUR1cHo path=/acme/acme/authz/F2ghHNKwMSyKpPEokt7QnEIFZjgWv6hU protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=f8d29877-a66c-4557-b0d1-023f11462bbe response="{\"identifier\":{\"type\":\"dns\",\"value\":\"ca.foo\"},\"status\":\"pending\",\"challenges\":[{\"type\":\"dns-01\",\"status\":\"pending\",\"token\":\"4QzySH5PMfSgOJOLAsg2caZauUYkl2AT\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/F2ghHNKwMSyKpPEokt7QnEIFZjgWv6hU/NAKZAmbkQsVrIgfcBRHfOkIQgJSoT4uI\"},{\"type\":\"http-01\",\"status\":\"pending\",\"token\":\"4QzySH5PMfSgOJOLAsg2caZauUYkl2AT\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/F2ghHNKwMSyKpPEokt7QnEIFZjgWv6hU/cZrZhCHNThkWhXnS0QPYQYEr29I2Gb7f\"},{\"type\":\"tls-alpn-01\",\"status\":\"pending\",\"token\":\"4QzySH5PMfSgOJOLAsg2caZauUYkl2AT\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/F2ghHNKwMSyKpPEokt7QnEIFZjgWv6hU/xQ6DgFHInm8amecIn2zhQIltXpxQVUj3\"}],\"wildcard\":false,\"expires\":\"2026-10-03T20:25:36Z\"}" size=719 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [2465916.876140] ca acme-order-renew-ca.foo-start[322]: 2026-10-02T20:25:36.861932955Z INFO Use solver. domain=ca.foo type=http-01 container-test-run-certificates> ca # [2465916.876229] ca acme-order-renew-ca.foo-start[322]: 2026-10-02T20:25:36.861990916Z INFO http01: Trying to solve HTTP-01. domain=ca.foo container-test-run-certificates> ca # [2465916.882192] ca step-ca[206]: time="2026-10-02T20:25:36Z" level=info duration=5.11715ms duration-ns=5117150 fields.time="2026-10-02T20:25:36Z" method=POST name=ca nonce=a2VNaE5EaDlLcjZwMWxBck1QdUF3Q2pHeE1oZFdqRVE path=/acme/acme/challenge/F2ghHNKwMSyKpPEokt7QnEIFZjgWv6hU/cZrZhCHNThkWhXnS0QPYQYEr29I2Gb7f protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=d915d98e-e0b6-46ef-b8f5-f0fc29622f01 response="{\"type\":\"http-01\",\"status\":\"valid\",\"token\":\"4QzySH5PMfSgOJOLAsg2caZauUYkl2AT\",\"validated\":\"2026-10-02T20:25:36Z\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/F2ghHNKwMSyKpPEokt7QnEIFZjgWv6hU/cZrZhCHNThkWhXnS0QPYQYEr29I2Gb7f\"}" size=228 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [2465916.882615] ca acme-order-renew-ca.foo-start[322]: 2026-10-02T20:25:36.868412644Z INFO The server validated our request. domain=ca.foo container-test-run-certificates> ca # [2465916.882722] ca acme-order-renew-ca.foo-start[322]: 2026-10-02T20:25:36.868534605Z INFO Validations succeeded; requesting certificates. domains=ca.foo container-test-run-certificates> ca # [2465916.893255] ca step-ca[206]: time="2026-10-02T20:25:36Z" level=info duration=9.232167ms duration-ns=9232167 fields.time="2026-10-02T20:25:36Z" method=POST name=ca nonce=b3R6YXBZeU1pYWFHTU5Da1JtT2d4M0Rwc3FEbGhqUDY path=/acme/acme/order/HyGhaEz29y6k9ZXWPNFJ93j6VQDMV0Nr/finalize protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=b52d8545-e457-4c95-9268-421abf990b8a response="{\"id\":\"HyGhaEz29y6k9ZXWPNFJ93j6VQDMV0Nr\",\"status\":\"valid\",\"expires\":\"2026-10-03T20:25:36Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"ca.foo\"}],\"notBefore\":\"2026-10-02T20:24:36Z\",\"notAfter\":\"2026-12-31T20:25:36Z\",\"authorizations\":[\"https://ca.foo:1443/acme/acme/authz/F2ghHNKwMSyKpPEokt7QnEIFZjgWv6hU\"],\"finalize\":\"https://ca.foo:1443/acme/acme/order/HyGhaEz29y6k9ZXWPNFJ93j6VQDMV0Nr/finalize\",\"certificate\":\"https://ca.foo:1443/acme/acme/certificate/4PUpICSjv6bg4eLzxBZwVa98rpWg5ssH\"}" size=481 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [2465916.895805] ca step-ca[206]: time="2026-10-02T20:25:36Z" level=info certificate=MIIB0zCCAXqgAwIBAgIRANPr7GRXoLYzLi+NuRo2BWswCgYIKoZIzj0EAwIwHzEdMBsGA1UEAxMUQ2xhbiBJbnRlcm1lZGlhdGUgQ0EwHhcNMjYxMDAyMjAyNDM2WhcNMjYxMjMxMjAyNTM2WjARMQ8wDQYDVQQDEwZjYS5mb28wWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAAQDGcPuUmlnZPJv7XvU+g978CKVx2u52hwWspnrbtCTnOVPqc17NnHUsrtx3REKKJHFRBSuSSDQtU0iXqvVjsIoo4GkMIGhMA4GA1UdDwEB/wQEAwIHgDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHQYDVR0OBBYEFGskm2cUGUvDTtDQxpoDG23l+jSFMB8GA1UdIwQYMBaAFL6V7kSFrF8gnkYUENgGbUvJO04UMBEGA1UdEQQKMAiCBmNhLmZvbzAdBgwrBgEEAYKkZMYoQAEEDTALAgEGBARhY21lBAAwCgYIKoZIzj0EAwIDRwAwRAIgRDq1TGqfIkw2ySLDLSi/7YLgIBslM/eRLRUDk5l3fF4CIHsgvQdSdmCUiTxBQ/pXgp6c8lE82OjBJFHuC277yztC duration=1.598382ms duration-ns=1598382 fields.time="2026-10-02T20:25:36Z" issuer="Clan Intermediate CA" method=POST name=ca nonce=enFNWHVnQVVrWnloRXhkZHF5YUUyNkNDeW9YMktmZ2k path=/acme/acme/certificate/4PUpICSjv6bg4eLzxBZwVa98rpWg5ssH protocol=HTTP/1.1 provisioner=acme public-key="ECDSA P-256" referer= remote-address="2001:db8:1::1" request-id=169751c0-1331-4783-8e38-b85b64dad272 sans="map[dns:[ca.foo]]" serial=281692091470975131296468993419641226603 size=1340 status=200 subject=ca.foo user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= valid-from="2026-10-02T20:24:36Z" valid-to="2026-12-31T20:25:36Z" container-test-run-certificates> ca # [2465916.896224] ca acme-order-renew-ca.foo-start[322]: 2026-10-02T20:25:36.882020790Z INFO Server responded with a certificate. domains=ca.foo container-test-run-certificates> ca # [2465916.896317] ca acme-order-renew-ca.foo-start[322]: 2026-10-02T20:25:36.882131752Z INFO Writing file. filepath=certificates/ca.foo.crt container-test-run-certificates> ca # [2465916.896486] ca acme-order-renew-ca.foo-start[322]: 2026-10-02T20:25:36.882296314Z INFO Writing file. filepath=certificates/ca.foo.issuer.crt container-test-run-certificates> ca # [2465916.896578] ca acme-order-renew-ca.foo-start[322]: 2026-10-02T20:25:36.882388475Z INFO Writing file. filepath=certificates/ca.foo.key container-test-run-certificates> ca # [2465916.896775] ca acme-order-renew-ca.foo-start[322]: 2026-10-02T20:25:36.882584118Z INFO Writing file. filepath=certificates/ca.foo.json container-test-run-certificates> ca # [2465916.904615] ca acme-order-renew-ca.foo-start[309]: + touch out/acme-success container-test-run-certificates> ca # [2465916.906761] ca acme-order-renew-ca.foo-start[309]: + cmp -s certificates/ca.foo.crt out/fullchain.pem container-test-run-certificates> ca # [2465916.908805] ca acme-order-renew-ca.foo-start[309]: + touch out/renewed container-test-run-certificates> ca # [2465916.910775] ca acme-order-renew-ca.foo-start[309]: + echo Installing new certificate container-test-run-certificates> ca # [2465916.910775] ca acme-order-renew-ca.foo-start[309]: Installing new certificate container-test-run-certificates> ca # [2465916.910775] ca acme-order-renew-ca.foo-start[309]: + cp -vp certificates/ca.foo.crt out/fullchain.pem container-test-run-certificates> ca # [2465916.912497] ca acme-order-renew-ca.foo-start[352]: 'certificates/ca.foo.crt' -> 'out/fullchain.pem' container-test-run-certificates> ca # [2465916.912879] ca acme-order-renew-ca.foo-start[309]: + cp -vp certificates/ca.foo.key out/key.pem container-test-run-certificates> ca # [2465916.914630] ca acme-order-renew-ca.foo-start[353]: 'certificates/ca.foo.key' -> 'out/key.pem' container-test-run-certificates> ca # [2465916.914950] ca acme-order-renew-ca.foo-start[309]: + cp -vp certificates/ca.foo.issuer.crt out/chain.pem container-test-run-certificates> ca # [2465916.916662] ca acme-order-renew-ca.foo-start[354]: 'certificates/ca.foo.issuer.crt' -> 'out/chain.pem' container-test-run-certificates> ca # [2465916.917122] ca acme-order-renew-ca.foo-start[309]: + ln -sf fullchain.pem out/cert.pem container-test-run-certificates> ca # [2465916.918809] ca acme-order-renew-ca.foo-start[309]: + cat out/key.pem out/fullchain.pem container-test-run-certificates> ca # [2465916.921146] ca acme-order-renew-ca.foo-start[309]: + for fixpath in out certificates container-test-run-certificates> ca # [2465916.921146] ca acme-order-renew-ca.foo-start[309]: + '[' -d out ']' container-test-run-certificates> ca # [2465916.921248] ca acme-order-renew-ca.foo-start[309]: + chmod -R u=rwX,g=rX,o= out container-test-run-certificates> ca # [2465916.922922] ca acme-order-renew-ca.foo-start[309]: + chown -R acme:nginx out container-test-run-certificates> ca # [2465916.925632] ca acme-order-renew-ca.foo-start[309]: + for fixpath in out certificates container-test-run-certificates> ca # [2465916.925632] ca acme-order-renew-ca.foo-start[309]: + '[' -d certificates ']' container-test-run-certificates> ca # [2465916.925732] ca acme-order-renew-ca.foo-start[309]: + chmod -R u=rwX,g=rX,o= certificates container-test-run-certificates> ca # [2465916.927450] ca acme-order-renew-ca.foo-start[309]: + chown -R acme:nginx certificates container-test-run-certificates> ca # [2465916.930136] ca acme-order-renew-ca.foo-start[309]: + chmod -R u=rwX,g=,o= accounts/. container-test-run-certificates> ca # [2465917.167235] ca systemd[1]: Reloading Nginx Web Server... container-test-run-certificates> ca # [2465917.172424] ca systemd[1]: acme-order-renew-ca.foo.service: Deactivated successfully. container-test-run-certificates> ca # [2465917.172700] ca systemd[1]: Finished Order (and renew) ACME certificate for ca.foo. container-test-run-certificates> ca # [2465917.172965] ca systemd[1]: acme-order-renew-ca.foo.service: Consumed 1.272s CPU time over 1.474s wall clock time. container-test-run-certificates> ca # [2465918.047230] ca nginx[370]: nginx: the configuration file /nix/store/922g9fm0n4v8xgbmb7sf8jkswmagn21n-nginx.conf syntax is ok container-test-run-certificates> ca # [2465918.047751] ca nginx[370]: nginx: configuration file /nix/store/922g9fm0n4v8xgbmb7sf8jkswmagn21n-nginx.conf test is successful container-test-run-certificates> ca # [2465918.952549] ca systemd[1]: Reloaded Nginx Web Server. container-test-run-certificates> ca # [2465918.953070] ca systemd[1]: Startup finished in 8.510s. container-test-run-certificates> ca: (finished: waiting for unit step-ca.service, in 9.67 seconds) container-test-run-certificates> ca: waiting for file '/var/lib/acme/ca.foo/fullchain.pem' container-test-run-certificates> ca: (finished: waiting for file '/var/lib/acme/ca.foo/fullchain.pem', in 0.01 seconds) container-test-run-certificates> ca: must succeed: systemctl restart nginx.service container-test-run-certificates> ca # [2465919.341707] ca systemd[1]: Stopping Nginx Web Server... container-test-run-certificates> ca # [2465919.413530] ca systemd[1]: nginx.service: Deactivated successfully. container-test-run-certificates> ca # [2465919.413912] ca systemd[1]: Stopped Nginx Web Server. container-test-run-certificates> ca # [2465919.413955] ca systemd[1]: nginx.service: Consumed 3.559s CPU time over 4.660s wall clock time. container-test-run-certificates> ca # [2465919.418464] ca systemd[1]: Starting Nginx Web Server... container-test-run-certificates> ca: (finished: must succeed: systemctl restart nginx.service, in 1.04 seconds) container-test-run-certificates> server: systemd-nspawn running (pid 464) container-test-run-certificates> server: Waiting for journal at /build/vm-state-server/var/log/journal... container-test-run-certificates> client: systemd-nspawn running (pid 467) container-test-run-certificates> client: Waiting for journal at /build/vm-state-client/var/log/journal... container-test-run-certificates> server: waiting for file '/var/lib/acme/test.foo/fullchain.pem' container-test-run-certificates> nixos-nspawn(server): TAP vde-tap1 not found; container will be isolated from VDE container-test-run-certificates> nixos-nspawn(server): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths. container-test-run-certificates> nixos-nspawn(client): TAP vde-tap1 not found; container will be isolated from VDE container-test-run-certificates> nixos-nspawn(client): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths. container-test-run-certificates> Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file. container-test-run-certificates> ░ Spawning container server on /build/vm-state-server. container-test-run-certificates> Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file. container-test-run-certificates> ░ Spawning container client on /build/vm-state-client. container-test-run-certificates> ca # [2465920.354967] ca nginx-pre-start[394]: nginx: the configuration file /nix/store/922g9fm0n4v8xgbmb7sf8jkswmagn21n-nginx.conf syntax is ok container-test-run-certificates> ca # [2465920.355574] ca nginx-pre-start[394]: nginx: configuration file /nix/store/922g9fm0n4v8xgbmb7sf8jkswmagn21n-nginx.conf test is successful container-test-run-certificates> ca # [2465920.360802] ca systemd[1]: Started Nginx Web Server. container-test-run-certificates> server # No journal files were found. container-test-run-certificates> server # No journal boot entry found for the specified boot (+0). container-test-run-certificates> client # No journal files were found. container-test-run-certificates> client # No journal boot entry found for the specified boot (+0). container-test-run-certificates> server # [2465921.357721] server systemd-journald[72]: Journal started container-test-run-certificates> server # [2465921.357782] server systemd-journald[72]: Runtime Journal (/run/log/journal/d4f906a5330f423f82bcb6946f7299d5) is 8M, max 2.5G, 2.4G free. container-test-run-certificates> server # [2465921.363567] server systemd[1]: Finished Apply Kernel Variables. container-test-run-certificates> server # [2465921.376202] server systemd[1]: Finished Create Static Device Nodes in /dev gracefully. container-test-run-certificates> server # [2465921.390446] server systemd[1]: Starting Flush Journal to Persistent Storage... container-test-run-certificates> server # [2465921.391435] server systemd[1]: Starting Network Name Resolution... container-test-run-certificates> server # [2465921.392270] server systemd[1]: Starting Create Static Device Nodes in /dev... container-test-run-certificates> server # [2465921.402042] server systemd-journald[72]: Time spent on flushing to /var/log/journal/d4f906a5330f423f82bcb6946f7299d5 is 1.411ms for 7 entries. container-test-run-certificates> server # [2465921.402042] server systemd-journald[72]: System Journal (/var/log/journal/d4f906a5330f423f82bcb6946f7299d5) is 8M, max 4G, 3.9G free. container-test-run-certificates> server # [2465921.416395] server systemd[1]: Finished Flush Journal to Persistent Storage. container-test-run-certificates> server # [2465921.416733] server systemd[1]: Finished Create Static Device Nodes in /dev. container-test-run-certificates> server # [2465921.417764] server systemd[1]: Reached target Preparation for Local File Systems. container-test-run-certificates> server # [2465921.417886] server systemd[1]: Reached target Local File Systems. container-test-run-certificates> server # [2465921.418785] server systemd[1]: Listening on Boot Loader Control Service Socket. container-test-run-certificates> server # [2465921.418839] server systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> server # [2465921.419750] server systemd[1]: Starting Save Transient machine-id to Disk... container-test-run-certificates> server # [2465921.420491] server systemd[1]: Starting Create System Files and Directories... container-test-run-certificates> server # [2465921.420522] server systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys container-test-run-certificates> server # [2465921.439715] server systemd-tmpfiles[127]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted container-test-run-certificates> server # [2465921.440030] server systemd-tmpfiles[127]: fchmod() of /var/log/journal failed: Operation not permitted container-test-run-certificates> server # [2465921.440183] server systemd-tmpfiles[127]: fchmod() of /var/log/journal/d4f906a5330f423f82bcb6946f7299d5 failed: Operation not permitted container-test-run-certificates> server # [2465921.440398] server systemd-tmpfiles[127]: fchmod() of /run/log/journal failed: Operation not permitted container-test-run-certificates> server # [2465921.444362] server systemd[1]: Finished Create System Files and Directories. container-test-run-certificates> server # [2465921.446057] server systemd[1]: Starting Rebuild Journal Catalog... container-test-run-certificates> server # [2465921.447139] server systemd[1]: Starting Record System Boot/Shutdown in UTMP... container-test-run-certificates> server # [2465921.449231] server systemd[1]: Finished Save Transient machine-id to Disk. container-test-run-certificates> server # [2465921.463073] server systemd[1]: Finished Record System Boot/Shutdown in UTMP. container-test-run-certificates> server # [2465921.470861] server systemd[1]: Finished Rebuild Journal Catalog. container-test-run-certificates> server # [2465921.472158] server systemd[1]: Starting Update is Completed... container-test-run-certificates> server # [2465921.482193] server systemd[1]: Finished Update is Completed. container-test-run-certificates> server # [2465921.525480] server systemd[1]: Finished Firewall. container-test-run-certificates> server # [2465921.525707] server systemd[1]: Reached target Preparation for Network. container-test-run-certificates> server # [2465921.525957] server systemd[1]: Listening on Network Management Resolve Hook Socket. container-test-run-certificates> server # [2465921.527217] server systemd[1]: Starting Network Management... container-test-run-certificates> server # [2465922.199236] server systemd-networkd[190]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted container-test-run-certificates> server # [2465922.199325] server systemd-networkd[190]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted container-test-run-certificates> server # [2465922.209276] server systemd-networkd[190]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> server # [2465922.209445] server systemd-networkd[190]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> server # [2465922.209603] server systemd-networkd[190]: lo: Link UP container-test-run-certificates> server # [2465922.209608] server systemd-networkd[190]: lo: Gained carrier container-test-run-certificates> server # [2465922.209784] server systemd-networkd[190]: eth1: Configuring with /etc/systemd/network/40-eth1.network. container-test-run-certificates> server # [2465922.210176] server systemd[1]: Started Network Management. container-test-run-certificates> server # [2465922.210262] server systemd-networkd[190]: eth1: Link UP container-test-run-certificates> server # [2465922.210606] server systemd-networkd[190]: eth1: Gained carrier container-test-run-certificates> server # [2465922.211384] server systemd[1]: Starting Enable Persistent Storage in systemd-networkd... container-test-run-certificates> server # [2465922.253558] server systemd[1]: Finished Enable Persistent Storage in systemd-networkd. container-test-run-certificates> server # [2465922.371256] server systemd[1]: etc-machine\x2did.mount: Deactivated successfully. container-test-run-certificates> client # [2465921.362289] client systemd-journald[72]: Journal started container-test-run-certificates> client # [2465921.362342] client systemd-journald[72]: Runtime Journal (/run/log/journal/d7e6ca092a44431ab9852712841a89bd) is 8M, max 2.5G, 2.4G free. container-test-run-certificates> client # [2465921.373303] client systemd[1]: Finished Apply Kernel Variables. container-test-run-certificates> client # [2465921.386135] client systemd[1]: Finished Create Static Device Nodes in /dev gracefully. container-test-run-certificates> client # [2465921.400747] client systemd[1]: Starting Flush Journal to Persistent Storage... container-test-run-certificates> client # [2465921.401544] client systemd[1]: Starting Network Name Resolution... container-test-run-certificates> client # [2465921.402168] client systemd[1]: Starting Create Static Device Nodes in /dev... container-test-run-certificates> client # [2465921.410463] client systemd-journald[72]: Time spent on flushing to /var/log/journal/d7e6ca092a44431ab9852712841a89bd is 1.271ms for 7 entries. container-test-run-certificates> client # [2465921.410463] client systemd-journald[72]: System Journal (/var/log/journal/d7e6ca092a44431ab9852712841a89bd) is 8M, max 4G, 3.9G free. container-test-run-certificates> client # [2465921.426873] client systemd[1]: Finished Flush Journal to Persistent Storage. container-test-run-certificates> client # [2465921.427253] client systemd[1]: Finished Create Static Device Nodes in /dev. container-test-run-certificates> client # [2465921.428503] client systemd[1]: Reached target Preparation for Local File Systems. container-test-run-certificates> client # [2465921.428607] client systemd[1]: Reached target Local File Systems. container-test-run-certificates> client # [2465921.429469] client systemd[1]: Listening on Boot Loader Control Service Socket. container-test-run-certificates> client # [2465921.429521] client systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> client # [2465921.430451] client systemd[1]: Starting Save Transient machine-id to Disk... container-test-run-certificates> client # [2465921.431244] client systemd[1]: Starting Create System Files and Directories... container-test-run-certificates> client # [2465921.431285] client systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys container-test-run-certificates> client # [2465921.451943] client systemd-tmpfiles[130]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted container-test-run-certificates> client # [2465921.452244] client systemd-tmpfiles[130]: fchmod() of /var/log/journal failed: Operation not permitted container-test-run-certificates> client # [2465921.452391] client systemd-tmpfiles[130]: fchmod() of /var/log/journal/d7e6ca092a44431ab9852712841a89bd failed: Operation not permitted container-test-run-certificates> client # [2465921.452605] client systemd-tmpfiles[130]: fchmod() of /run/log/journal failed: Operation not permitted container-test-run-certificates> client # [2465921.459014] client systemd[1]: Finished Create System Files and Directories. container-test-run-certificates> client # [2465921.460215] client systemd[1]: Starting Rebuild Journal Catalog... container-test-run-certificates> client # [2465921.461528] client systemd[1]: Starting Record System Boot/Shutdown in UTMP... container-test-run-certificates> client # [2465921.467915] client systemd[1]: Finished Save Transient machine-id to Disk. container-test-run-certificates> client # [2465921.476219] client systemd[1]: Finished Record System Boot/Shutdown in UTMP. container-test-run-certificates> client # [2465921.480993] client systemd[1]: Finished Rebuild Journal Catalog. container-test-run-certificates> client # [2465921.482059] client systemd[1]: Starting Update is Completed... container-test-run-certificates> client # [2465921.493077] client systemd[1]: Finished Update is Completed. container-test-run-certificates> client # [2465921.522960] client systemd[1]: Finished Firewall. container-test-run-certificates> client # [2465921.523162] client systemd[1]: Reached target Preparation for Network. container-test-run-certificates> client # [2465921.523382] client systemd[1]: Listening on Network Management Resolve Hook Socket. container-test-run-certificates> client # [2465921.524618] client systemd[1]: Starting Network Management... container-test-run-certificates> client # [2465922.233401] client systemd-networkd[186]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted container-test-run-certificates> client # [2465922.233494] client systemd-networkd[186]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted container-test-run-certificates> client # [2465922.243520] client systemd-networkd[186]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> client # [2465922.243691] client systemd-networkd[186]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> client # [2465922.243848] client systemd-networkd[186]: lo: Link UP container-test-run-certificates> client # [2465922.243852] client systemd-networkd[186]: lo: Gained carrier container-test-run-certificates> client # [2465922.244430] client systemd-networkd[186]: eth1: Configuring with /etc/systemd/network/40-eth1.network. container-test-run-certificates> client # [2465922.244882] client systemd[1]: Started Network Management. container-test-run-certificates> client # [2465922.244934] client systemd-networkd[186]: eth1: Link UP container-test-run-certificates> client # [2465922.245252] client systemd-networkd[186]: eth1: Gained carrier container-test-run-certificates> client # [2465922.246625] client systemd[1]: Starting Enable Persistent Storage in systemd-networkd... container-test-run-certificates> client # [2465922.302457] client systemd[1]: Finished Enable Persistent Storage in systemd-networkd. container-test-run-certificates> client # [2465922.380570] client systemd[1]: etc-machine\x2did.mount: Deactivated successfully. container-test-run-certificates> server # [2465922.578965] server systemd-resolved[106]: Positive Trust Anchors: container-test-run-certificates> server # [2465922.578978] server systemd-resolved[106]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d container-test-run-certificates> server # [2465922.578982] server systemd-resolved[106]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 container-test-run-certificates> server # [2465922.579017] server systemd-resolved[106]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test container-test-run-certificates> server # [2465922.599978] server systemd-resolved[106]: Using system hostname 'server'. container-test-run-certificates> server # [2465922.601416] server systemd[1]: Started Network Name Resolution. container-test-run-certificates> server # [2465922.601550] server systemd[1]: Reached target Network. container-test-run-certificates> server # [2465922.601664] server systemd[1]: Reached target Network is Online. container-test-run-certificates> server # [2465922.601746] server systemd[1]: Reached target System Initialization. container-test-run-certificates> server # [2465922.602186] server systemd[1]: Started Renew ACME Certificate for test.foo. container-test-run-certificates> server # [2465922.602242] server systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> server # [2465922.602294] server systemd[1]: Started Daily Cleanup of Temporary Directories. container-test-run-certificates> server # [2465922.602336] server systemd[1]: Reached target Timer Units. container-test-run-certificates> server # [2465922.602587] server systemd[1]: Listening on D-Bus System Message Bus Socket. container-test-run-certificates> server # [2465922.602802] server systemd[1]: Listening on Nix Daemon Socket. container-test-run-certificates> server # [2465922.603032] server systemd[1]: Listening on Virtual Machine and Container Registration Service Socket. container-test-run-certificates> server # [2465922.603080] server systemd[1]: Reached target Socket Units. container-test-run-certificates> server # [2465922.603162] server systemd[1]: Reached target Basic System. container-test-run-certificates> server # [2465922.605499] server systemd[1]: Starting Set up the ACME certificate renewal infrastructure... container-test-run-certificates> server # [2465922.606960] server systemd[1]: Starting Import lastlog data into lastlog2 database... container-test-run-certificates> server # [2465922.607026] server systemd[1]: nginx-config-reload.service skipped, unmet condition check ConditionPathExists=/var/lib/acme/test.foo/fullchain.pem container-test-run-certificates> server # [2465922.608454] server systemd[1]: Starting Name Service Cache Daemon (nsncd)... container-test-run-certificates> server # [2465922.610651] server systemd[1]: Starting D-Bus System Message Bus... container-test-run-certificates> server # [2465922.667755] server systemd[1]: Finished Import lastlog data into lastlog2 database. container-test-run-certificates> server # [2465922.854980] server acme-setup-privileged[195]: + set -euo pipefail container-test-run-certificates> server # [2465922.854980] server acme-setup-privileged[195]: + cd /var/lib/acme container-test-run-certificates> server # [2465922.854980] server acme-setup-privileged[195]: + chmod -R u=rwX,g=,o= .lego/accounts container-test-run-certificates> client # [2465922.605289] client systemd-resolved[108]: Positive Trust Anchors: container-test-run-certificates> client # [2465922.605302] client systemd-resolved[108]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d container-test-run-certificates> client # [2465922.605305] client systemd-resolved[108]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 container-test-run-certificates> client # [2465922.605338] client systemd-resolved[108]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test container-test-run-certificates> client # [2465922.626707] client systemd-resolved[108]: Using system hostname 'client'. container-test-run-certificates> client # [2465922.628126] client systemd[1]: Started Network Name Resolution. container-test-run-certificates> client # [2465922.628249] client systemd[1]: Reached target Network. container-test-run-certificates> client # [2465922.628373] client systemd[1]: Reached target System Initialization. container-test-run-certificates> client # [2465922.628473] client systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> client # [2465922.628528] client systemd[1]: Started Daily Cleanup of Temporary Directories. container-test-run-certificates> client # [2465922.628566] client systemd[1]: Reached target Timer Units. container-test-run-certificates> client # [2465922.628793] client systemd[1]: Listening on D-Bus System Message Bus Socket. container-test-run-certificates> client # [2465922.629009] client systemd[1]: Listening on Nix Daemon Socket. container-test-run-certificates> client # [2465922.629294] client systemd[1]: Listening on Virtual Machine and Container Registration Service Socket. container-test-run-certificates> client # [2465922.629341] client systemd[1]: Reached target Socket Units. container-test-run-certificates> client # [2465922.629435] client systemd[1]: Reached target Basic System. container-test-run-certificates> client # [2465922.648655] client systemd[1]: Starting Import lastlog data into lastlog2 database... container-test-run-certificates> client # [2465922.650364] client systemd[1]: Starting Name Service Cache Daemon (nsncd)... container-test-run-certificates> client # [2465922.652510] client systemd[1]: Starting D-Bus System Message Bus... container-test-run-certificates> client # [2465922.672205] client systemd[1]: Finished Import lastlog data into lastlog2 database. container-test-run-certificates> server # [2465922.856645] server acme-setup-privileged[195]: + chown -R acme .lego/accounts container-test-run-certificates> server # [2465922.858334] server acme-setup-privileged[195]: + for fixpath in test.foo .lego/test.foo container-test-run-certificates> server # [2465922.858379] server acme-setup-privileged[195]: + '[' -d test.foo ']' container-test-run-certificates> server # [2465922.858379] server acme-setup-privileged[195]: + for fixpath in test.foo .lego/test.foo container-test-run-certificates> server # [2465922.858379] server acme-setup-privileged[195]: + '[' -d .lego/test.foo ']' container-test-run-certificates> server # [2465922.898051] server systemd[1]: Started Name Service Cache Daemon (nsncd). container-test-run-certificates> server # [2465922.898178] server systemd[1]: Reached target Host and Network Name Lookups. container-test-run-certificates> server # [2465922.898288] server systemd[1]: Reached target User and Group Name Lookups. container-test-run-certificates> server # [2465922.898773] server nsncd[197]: Oct 02 20:25:42.884 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket" container-test-run-certificates> server # [2465922.908437] server systemd[1]: Starting User Login Management... container-test-run-certificates> server # [2465922.910086] server systemd[1]: Starting Permit User Sessions... container-test-run-certificates> server # [2465922.922873] server systemd[1]: Finished Permit User Sessions. container-test-run-certificates> server # [2465922.924592] server systemd[1]: Started Console Getty. container-test-run-certificates> server # [2465922.924670] server systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0 container-test-run-certificates> server # [2465922.924714] server systemd[1]: Reached target Login Prompts. container-test-run-certificates> server # [2465923.074205] server dbus-broker-launch[198]: Looking up NSS user entry for 'systemd-timesync'... container-test-run-certificates> server # [2465923.075858] server dbus-broker-launch[198]: NSS returned no entry for 'systemd-timesync' container-test-run-certificates> server # [2465923.075858] server dbus-broker-launch[198]: Invalid user-name in /nix/store/1kphh1zhxkk5wgzqpcq502a3awgrddhf-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync" container-test-run-certificates> server # [2465923.076388] server systemd[1]: Started D-Bus System Message Bus. container-test-run-certificates> server # [2465923.085310] server dbus-broker-launch[198]: Ready container-test-run-certificates> client # [2465922.882574] client nsncd[192]: Oct 02 20:25:42.868 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket" container-test-run-certificates> client # [2465922.882516] client systemd[1]: Started Name Service Cache Daemon (nsncd). container-test-run-certificates> client # [2465922.882620] client systemd[1]: Reached target Host and Network Name Lookups. container-test-run-certificates> client # [2465922.882742] client systemd[1]: Reached target User and Group Name Lookups. container-test-run-certificates> client # [2465922.908400] client systemd[1]: Starting User Login Management... container-test-run-certificates> client # [2465922.909901] client systemd[1]: Starting Permit User Sessions... container-test-run-certificates> client # [2465922.922869] client systemd[1]: Finished Permit User Sessions. container-test-run-certificates> client # [2465922.924498] client systemd[1]: Started Console Getty. container-test-run-certificates> client # [2465922.924553] client systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0 container-test-run-certificates> client # [2465922.924580] client systemd[1]: Reached target Login Prompts. container-test-run-certificates> client # [2465923.061027] client dbus-broker-launch[193]: Looking up NSS user entry for 'systemd-timesync'... container-test-run-certificates> client # [2465923.062506] client dbus-broker-launch[193]: NSS returned no entry for 'systemd-timesync' container-test-run-certificates> client # [2465923.062506] client dbus-broker-launch[193]: Invalid user-name in /nix/store/3ncyzsk403zqy0zd18qd5yypmh5fzvk4-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync" container-test-run-certificates> client # [2465923.063000] client systemd[1]: Started D-Bus System Message Bus. container-test-run-certificates> client # [2465923.069926] client dbus-broker-launch[193]: Ready container-test-run-certificates> server # [2465923.752332] server systemd-logind[222]: New seat seat0. container-test-run-certificates> server # [2465923.752580] server systemd[1]: Started User Login Management. container-test-run-certificates> server # [2465923.754652] server systemd[1]: Starting linger-users.service... container-test-run-certificates> server # [2465923.815477] server systemd[1]: linger-users.service: Deactivated successfully. container-test-run-certificates> server # [2465923.815764] server systemd[1]: Finished linger-users.service. container-test-run-certificates> server # [2465923.873579] server acme-setup-start[211]: + set -euo pipefail container-test-run-certificates> server # [2465923.873579] server acme-setup-start[211]: + test -e ca/key.pem container-test-run-certificates> server # [2465923.874400] server acme-setup-start[211]: + minica --ca-key ca/key.pem --ca-cert ca/cert.pem --domains selfsigned.local container-test-run-certificates> server # [2465923.899855] server systemd[1]: Finished Set up the ACME certificate renewal infrastructure. container-test-run-certificates> server # [2465923.903844] server systemd[1]: Starting Ensure certificate for test.foo... container-test-run-certificates> client # [2465923.751449] client systemd-logind[208]: New seat seat0. container-test-run-certificates> client # [2465923.751704] client systemd[1]: Started User Login Management. container-test-run-certificates> client # [2465923.753299] client systemd[1]: Starting linger-users.service... container-test-run-certificates> client # [2465923.813067] client systemd[1]: linger-users.service: Deactivated successfully. container-test-run-certificates> client # [2465923.813539] client systemd[1]: Finished linger-users.service. container-test-run-certificates> client # [2465923.815105] client systemd[1]: Reached target Multi-User System. container-test-run-certificates> client # [2465923.815539] client systemd[1]: Startup finished in 2.948s. container-test-run-certificates> server # [2465924.160220] server systemd-networkd[190]: eth1: Gained IPv6LL container-test-run-certificates> client # [2465924.264127] client systemd-networkd[186]: eth1: Gained IPv6LL container-test-run-certificates> server # [2465924.786206] server acme-test.foo-start[248]: Waiting to acquire lock in /run/acme/ container-test-run-certificates> server # [2465924.789202] server acme-test.foo-start[248]: + '[' -e out/acme-success ']' container-test-run-certificates> server # [2465924.789202] server acme-test.foo-start[248]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=test.foo --ip-addresses= container-test-run-certificates> server # [2465924.800654] server acme-test.foo-start[258]: + cd test.foo container-test-run-certificates> server # [2465924.800986] server acme-test.foo-start[258]: + cp -vp cert.pem ../out/cert.pem container-test-run-certificates> server # [2465924.802592] server acme-test.foo-start[259]: 'cert.pem' -> '../out/cert.pem' container-test-run-certificates> server # [2465924.802866] server acme-test.foo-start[258]: + cp -vp key.pem ../out/key.pem container-test-run-certificates> server # [2465924.803945] server acme-test.foo-start[258]: 'key.pem' -> '../out/key.pem' container-test-run-certificates> server # [2465924.804168] server acme-test.foo-start[248]: + cat out/cert.pem ca/cert.pem container-test-run-certificates> server # [2465924.806069] server acme-test.foo-start[248]: + cp ca/cert.pem out/chain.pem container-test-run-certificates> server # [2465924.807889] server acme-test.foo-start[248]: + cat out/key.pem out/fullchain.pem container-test-run-certificates> server # [2465924.809579] server acme-test.foo-start[248]: + for fixpath in out certificates container-test-run-certificates> server # [2465924.809619] server acme-test.foo-start[248]: + '[' -d out ']' container-test-run-certificates> server # [2465924.809619] server acme-test.foo-start[248]: + chmod -R u=rwX,g=rX,o= out container-test-run-certificates> server # [2465924.811017] server acme-test.foo-start[248]: + chown -R acme:nginx out container-test-run-certificates> server # [2465924.814977] server acme-test.foo-start[248]: + for fixpath in out certificates container-test-run-certificates> server # [2465924.815007] server acme-test.foo-start[248]: + '[' -d certificates ']' container-test-run-certificates> server # [2465924.819114] server systemd[1]: Finished Ensure certificate for test.foo. container-test-run-certificates> server # [2465924.821670] server systemd[1]: Starting Nginx Web Server... container-test-run-certificates> server # [2465925.697621] server nginx-pre-start[270]: nginx: the configuration file /nix/store/29lf6nzqmwflllkwjl1lcl34sr24y0sh-nginx.conf syntax is ok container-test-run-certificates> server # [2465925.698261] server nginx-pre-start[270]: nginx: configuration file /nix/store/29lf6nzqmwflllkwjl1lcl34sr24y0sh-nginx.conf test is successful container-test-run-certificates> server # [2465925.703808] server systemd[1]: Started Nginx Web Server. container-test-run-certificates> server # [2465925.705268] server systemd[1]: Reached target Multi-User System. container-test-run-certificates> server # [2465925.707878] server systemd[1]: Starting Order (and renew) ACME certificate for test.foo... container-test-run-certificates> server # [2465926.736599] server acme-order-renew-test.foo-start[273]: Waiting to acquire lock in /run/acme/ container-test-run-certificates> server # [2465926.740901] server acme-order-renew-test.foo-start[273]: + set -euo pipefail container-test-run-certificates> server # [2465926.741048] server acme-order-renew-test.foo-start[273]: + exec container-test-run-certificates> server # [2465926.741123] server acme-order-renew-test.foo-start[273]: + /nix/store/vf2h24m5aa7phb4v1kbc2qd9r41jdfqv-flock-0.4.0/bin/flock 11 container-test-run-certificates> server # [2465926.742517] server acme-order-renew-test.foo-start[284]: ++ find accounts -path '*/keys/*.key' -print -quit container-test-run-certificates> server # [2465926.745608] server acme-order-renew-test.foo-start[273]: + '[' -n '' ']' container-test-run-certificates> server # [2465926.745697] server acme-order-renew-test.foo-start[273]: + exec container-test-run-certificates> server # [2465926.745750] server acme-order-renew-test.foo-start[273]: + '[' -e certificates/test.foo.key ']' container-test-run-certificates> server # [2465926.745750] server acme-order-renew-test.foo-start[273]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo/acme/acme/directory --key-type ec256 -d test.foo --no-random-sleep --renew-force --ari-disable --force-cert-domains container-test-run-certificates> server # [2465926.765786] server acme-order-renew-test.foo-start[285]: 2026-10-02T20:25:46.751570855Z INFO Private key saved. filepath=accounts/ca.foo/none@none.tld/none@none.tld.key container-test-run-certificates> server # [2465926.797095] server acme-order-renew-test.foo-start[285]: 2026-10-02T20:25:46.782872884Z INFO Registering the account. email=none@none.tld container-test-run-certificates> server # [2465926.808903] server acme-order-renew-test.foo-start[285]: 2026-10-02T20:25:46.794715566Z WARN !!!! HEADS UP !!!! container-test-run-certificates> server # [2465926.808903] server acme-order-renew-test.foo-start[285]: Your account credentials have been saved in your container-test-run-certificates> server # [2465926.808903] server acme-order-renew-test.foo-start[285]: configuration directory at "accounts". container-test-run-certificates> server # [2465926.808903] server acme-order-renew-test.foo-start[285]: You should make a secure backup of this folder now. This container-test-run-certificates> server # [2465926.808903] server acme-order-renew-test.foo-start[285]: configuration directory will also contain private keys container-test-run-certificates> server # [2465926.808903] server acme-order-renew-test.foo-start[285]: generated by lego and certificates obtained from the ACME container-test-run-certificates> server # [2465926.808903] server acme-order-renew-test.foo-start[285]: server. Making regular backups of this folder is ideal. container-test-run-certificates> server # [2465926.809068] server acme-order-renew-test.foo-start[285]: 2026-10-02T20:25:46.794842528Z INFO Obtaining bundled SAN certificate. domains=test.foo container-test-run-certificates> server # [2465926.877505] server acme-order-renew-test.foo-start[285]: 2026-10-02T20:25:46.863293706Z INFO Use solver. domain=test.foo type=http-01 container-test-run-certificates> server # [2465926.877505] server acme-order-renew-test.foo-start[285]: 2026-10-02T20:25:46.863344507Z INFO http01: Trying to solve HTTP-01. domain=test.foo container-test-run-certificates> server # [2465926.890395] server acme-order-renew-test.foo-start[285]: 2026-10-02T20:25:46.876196883Z INFO The server validated our request. domain=test.foo container-test-run-certificates> server # [2465926.893743] server acme-order-renew-test.foo-start[285]: 2026-10-02T20:25:46.876292365Z INFO Validations succeeded; requesting certificates. domains=test.foo container-test-run-certificates> server # [2465926.904404] server acme-order-renew-test.foo-start[285]: 2026-10-02T20:25:46.890216035Z INFO Server responded with a certificate. domains=test.foo container-test-run-certificates> server # [2465926.904490] server acme-order-renew-test.foo-start[285]: 2026-10-02T20:25:46.890281356Z INFO Writing file. filepath=certificates/test.foo.crt container-test-run-certificates> server # [2465926.904556] server acme-order-renew-test.foo-start[285]: 2026-10-02T20:25:46.890379758Z INFO Writing file. filepath=certificates/test.foo.issuer.crt container-test-run-certificates> server # [2465926.904588] server acme-order-renew-test.foo-start[285]: 2026-10-02T20:25:46.890414398Z INFO Writing file. filepath=certificates/test.foo.key container-test-run-certificates> server # [2465926.904659] server acme-order-renew-test.foo-start[285]: 2026-10-02T20:25:46.890485839Z INFO Writing file. filepath=certificates/test.foo.json container-test-run-certificates> server # [2465926.909098] server acme-order-renew-test.foo-start[273]: + touch out/acme-success container-test-run-certificates> server # [2465926.910845] server acme-order-renew-test.foo-start[273]: + cmp -s certificates/test.foo.crt out/fullchain.pem container-test-run-certificates> server # [2465926.912229] server acme-order-renew-test.foo-start[273]: + touch out/renewed container-test-run-certificates> server # [2465926.915417] server acme-order-renew-test.foo-start[273]: + echo Installing new certificate container-test-run-certificates> server # [2465926.915417] server acme-order-renew-test.foo-start[273]: Installing new certificate container-test-run-certificates> server # [2465926.915478] server acme-order-renew-test.foo-start[273]: + cp -vp certificates/test.foo.crt out/fullchain.pem container-test-run-certificates> server # [2465926.917172] server acme-order-renew-test.foo-start[315]: 'certificates/test.foo.crt' -> 'out/fullchain.pem' container-test-run-certificates> server # [2465926.917544] server acme-order-renew-test.foo-start[273]: + cp -vp certificates/test.foo.key out/key.pem container-test-run-certificates> server # [2465926.919059] server acme-order-renew-test.foo-start[316]: 'certificates/test.foo.key' -> 'out/key.pem' container-test-run-certificates> server # [2465926.919316] server acme-order-renew-test.foo-start[273]: + cp -vp certificates/test.foo.issuer.crt out/chain.pem container-test-run-certificates> server # [2465926.921000] server acme-order-renew-test.foo-start[317]: 'certificates/test.foo.issuer.crt' -> 'out/chain.pem' container-test-run-certificates> server # [2465926.921327] server acme-order-renew-test.foo-start[273]: + ln -sf fullchain.pem out/cert.pem container-test-run-certificates> server # [2465926.922964] server acme-order-renew-test.foo-start[273]: + cat out/key.pem out/fullchain.pem container-test-run-certificates> server # [2465926.924722] server acme-order-renew-test.foo-start[273]: + for fixpath in out certificates container-test-run-certificates> server # [2465926.924762] server acme-order-renew-test.foo-start[273]: + '[' -d out ']' container-test-run-certificates> server # [2465926.924762] server acme-order-renew-test.foo-start[273]: + chmod -R u=rwX,g=rX,o= out container-test-run-certificates> server # [2465926.926648] server acme-order-renew-test.foo-start[273]: + chown -R acme:nginx out container-test-run-certificates> server # [2465926.929360] server acme-order-renew-test.foo-start[273]: + for fixpath in out certificates container-test-run-certificates> server # [2465926.929360] server acme-order-renew-test.foo-start[273]: + '[' -d certificates ']' container-test-run-certificates> server # [2465926.929411] server acme-order-renew-test.foo-start[273]: + chmod -R u=rwX,g=rX,o= certificates container-test-run-certificates> server # [2465926.930957] server acme-order-renew-test.foo-start[273]: + chown -R acme:nginx certificates container-test-run-certificates> server # [2465926.933573] server acme-order-renew-test.foo-start[273]: + chmod -R u=rwX,g=,o= accounts/. container-test-run-certificates> ca # [2465926.796577] ca step-ca[206]: time="2026-10-02T20:25:46Z" level=info duration="45.12µs" duration-ns=45120 fields.time="2026-10-02T20:25:46Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="::1" request-id=fc5e7458-1490-4d52-b7bf-75870d61fc16 response="{\"newNonce\":\"https://ca.foo/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo/acme/acme/new-account\",\"newOrder\":\"https://ca.foo/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo/acme/acme/key-change\"}" size=252 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [2465926.802697] ca step-ca[206]: time="2026-10-02T20:25:46Z" level=info duration=2.18855ms duration-ns=2188550 fields.time="2026-10-02T20:25:46Z" method=HEAD name=ca nonce=YmVaRENsZ1pwNzhOa05lVmdjc08wWFVZTjN2TnNXNUg path=/acme/acme/new-nonce protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=c3917a5b-c360-438f-b184-88784aa3f517 size=0 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [2465926.808351] ca step-ca[206]: time="2026-10-02T20:25:46Z" level=info duration=2.389873ms duration-ns=2389873 fields.time="2026-10-02T20:25:46Z" method=POST name=ca nonce=bW1kWVVHSDkwWUJGejlvbjR1NTNDRjRyZ3V0Wmk4c00 path=/acme/acme/new-account protocol=HTTP/1.1 referer= remote-address="::1" request-id=4793ad19-c090-4118-9112-4b9b030341ff response="{\"contact\":[\"mailto:none@none.tld\"],\"status\":\"valid\",\"orders\":\"https://ca.foo/acme/acme/account/r0bJcGngJd8rpIbGP1ecyFUXhELj6FUe/orders\"}" size=138 status=201 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [2465926.815461] ca step-ca[206]: time="2026-10-02T20:25:46Z" level=info duration=3.636449ms duration-ns=3636449 fields.time="2026-10-02T20:25:46Z" method=POST name=ca nonce=VDJuRWFpY3A0TEdPd0NmSU9lMEhvMFVqT2VYaU1veGQ path=/acme/acme/new-order protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=07a26f22-2e5f-465c-9c65-5f3ac4d81f58 response="{\"id\":\"GFW05LAutfxUsMFC37JI47DmpAgc6C5o\",\"status\":\"pending\",\"expires\":\"2026-10-03T20:25:46Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"test.foo\"}],\"notBefore\":\"2026-10-02T20:24:46Z\",\"notAfter\":\"2026-12-31T20:25:46Z\",\"authorizations\":[\"https://ca.foo/acme/acme/authz/Ugx0jNhxTTlbj1TZuhvFQc0ERVQUdpeA\"],\"finalize\":\"https://ca.foo/acme/acme/order/GFW05LAutfxUsMFC37JI47DmpAgc6C5o/finalize\"}" size=384 status=201 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [2465926.876764] ca step-ca[206]: time="2026-10-02T20:25:46Z" level=info duration=2.427954ms duration-ns=2427954 fields.time="2026-10-02T20:25:46Z" method=POST name=ca nonce=Q1lSODU3ZW9BaG9KVmVRWXZvd3FScnA4TGkwbnNqakU path=/acme/acme/authz/Ugx0jNhxTTlbj1TZuhvFQc0ERVQUdpeA protocol=HTTP/1.1 referer= remote-address="::1" request-id=d03eff14-564c-4b21-91aa-d28862568fda response="{\"identifier\":{\"type\":\"dns\",\"value\":\"test.foo\"},\"status\":\"pending\",\"challenges\":[{\"type\":\"dns-01\",\"status\":\"pending\",\"token\":\"JSENZiWLhfq4vrjSiO9LXs5BmhNbTCJE\",\"url\":\"https://ca.foo/acme/acme/challenge/Ugx0jNhxTTlbj1TZuhvFQc0ERVQUdpeA/JxAmd0KMnzqW9c2KVxxA9lLkenfPZiTD\"},{\"type\":\"http-01\",\"status\":\"pending\",\"token\":\"JSENZiWLhfq4vrjSiO9LXs5BmhNbTCJE\",\"url\":\"https://ca.foo/acme/acme/challenge/Ugx0jNhxTTlbj1TZuhvFQc0ERVQUdpeA/ohWxoGGWcb6ibTpCr5BzEqw1KnFpyeXG\"},{\"type\":\"tls-alpn-01\",\"status\":\"pending\",\"token\":\"JSENZiWLhfq4vrjSiO9LXs5BmhNbTCJE\",\"url\":\"https://ca.foo/acme/acme/challenge/Ugx0jNhxTTlbj1TZuhvFQc0ERVQUdpeA/15lQ6aPDbhwdBPkhitx5oiGGJr3LTGOr\"}],\"wildcard\":false,\"expires\":\"2026-10-03T20:25:46Z\"}" size=706 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [2465926.889789] ca step-ca[206]: time="2026-10-02T20:25:46Z" level=info duration=9.987617ms duration-ns=9987617 fields.time="2026-10-02T20:25:46Z" method=POST name=ca nonce=UUJGV0F2amk4dnZhR2RneUtKbzYxTHBxYU1FVGt0amI path=/acme/acme/challenge/Ugx0jNhxTTlbj1TZuhvFQc0ERVQUdpeA/ohWxoGGWcb6ibTpCr5BzEqw1KnFpyeXG protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=0ea244ab-93d3-4a0e-9e4f-3a8b61b4f3c4 response="{\"type\":\"http-01\",\"status\":\"valid\",\"token\":\"JSENZiWLhfq4vrjSiO9LXs5BmhNbTCJE\",\"validated\":\"2026-10-02T20:25:46Z\",\"url\":\"https://ca.foo/acme/acme/challenge/Ugx0jNhxTTlbj1TZuhvFQc0ERVQUdpeA/ohWxoGGWcb6ibTpCr5BzEqw1KnFpyeXG\"}" size=223 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [2465926.900691] ca step-ca[206]: time="2026-10-02T20:25:46Z" level=info duration=7.647025ms duration-ns=7647025 fields.time="2026-10-02T20:25:46Z" method=POST name=ca nonce=QjhyNW4zN1N4aXZuZlhYSEFnUXhCaFNQak9kZlN3TnI path=/acme/acme/order/GFW05LAutfxUsMFC37JI47DmpAgc6C5o/finalize protocol=HTTP/1.1 referer= remote-address="::1" request-id=fa00466d-a3c9-4ad9-98ed-ffd181e5ee92 response="{\"id\":\"GFW05LAutfxUsMFC37JI47DmpAgc6C5o\",\"status\":\"valid\",\"expires\":\"2026-10-03T20:25:46Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"test.foo\"}],\"notBefore\":\"2026-10-02T20:24:46Z\",\"notAfter\":\"2026-12-31T20:25:46Z\",\"authorizations\":[\"https://ca.foo/acme/acme/authz/Ugx0jNhxTTlbj1TZuhvFQc0ERVQUdpeA\"],\"finalize\":\"https://ca.foo/acme/acme/order/GFW05LAutfxUsMFC37JI47DmpAgc6C5o/finalize\",\"certificate\":\"https://ca.foo/acme/acme/certificate/2MtNBksJzE7AnQbQVB7Os1AXOsDaptcE\"}" size=468 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [2465926.903954] ca step-ca[206]: time="2026-10-02T20:25:46Z" level=info certificate=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 duration=1.016054ms duration-ns=1016054 fields.time="2026-10-02T20:25:46Z" issuer="Clan Intermediate CA" method=POST name=ca nonce=RjZhT1pXenpIWmZSMklKRmRuY2FvNEIzOWxNMG1RQTg path=/acme/acme/certificate/2MtNBksJzE7AnQbQVB7Os1AXOsDaptcE protocol=HTTP/1.1 provisioner=acme public-key="ECDSA P-256" referer= remote-address=127.0.0.1 request-id=f3faee20-0eb3-48cd-84d6-99325ff53ff4 sans="map[dns:[test.foo]]" serial=52336440507075685743464717707108327848 size=1344 status=200 subject=test.foo user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= valid-from="2026-10-02T20:24:46Z" valid-to="2026-12-31T20:25:46Z" container-test-run-certificates> server # [2465927.132308] server systemd[1]: Reloading Nginx Web Server... container-test-run-certificates> server # [2465927.137547] server systemd[1]: acme-order-renew-test.foo.service: Deactivated successfully. container-test-run-certificates> server # [2465927.137733] server systemd[1]: Finished Order (and renew) ACME certificate for test.foo. container-test-run-certificates> server # [2465927.137922] server systemd[1]: acme-order-renew-test.foo.service: Consumed 1.174s CPU time over 1.429s wall clock time. container-test-run-certificates> server # [2465928.081956] server nginx[333]: nginx: the configuration file /nix/store/29lf6nzqmwflllkwjl1lcl34sr24y0sh-nginx.conf syntax is ok container-test-run-certificates> server # [2465928.081956] server nginx[333]: nginx: configuration file /nix/store/29lf6nzqmwflllkwjl1lcl34sr24y0sh-nginx.conf test is successful container-test-run-certificates> server: (finished: waiting for file '/var/lib/acme/test.foo/fullchain.pem', in 9.16 seconds) container-test-run-certificates> server: must succeed: systemctl restart nginx.service container-test-run-certificates> server # [2465929.251411] server systemd[1]: Reloaded Nginx Web Server. container-test-run-certificates> server # [2465929.251774] server systemd[1]: Startup finished in 8.382s. container-test-run-certificates> server # [2465929.541579] server systemd[1]: Stopping Nginx Web Server... container-test-run-certificates> server # [2465929.626160] server systemd[1]: nginx.service: Deactivated successfully. container-test-run-certificates> server # [2465929.626380] server systemd[1]: Stopped Nginx Web Server. container-test-run-certificates> server # [2465929.626434] server systemd[1]: nginx.service: Consumed 5.410s CPU time over 4.804s wall clock time. container-test-run-certificates> server # [2465929.629300] server systemd[1]: Starting Nginx Web Server... container-test-run-certificates> server: (finished: must succeed: systemctl restart nginx.service, in 0.99 seconds) container-test-run-certificates> client: waiting for success: curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: 2001:db8:1::3 container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying [2001:db8:1::3]:443... container-test-run-certificates> * connect to 2001:db8:1::3 port 443 from 2001:db8:1::2 port 55366 failed: Connection refused container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * connect to 192.168.1.3 port 443 from 192.168.1.2 port 37704 failed: Connection refused container-test-run-certificates> * Failed to connect to test.foo:443 after 3 ms: Could not connect to server container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (7) Failed to connect to test.foo:443 after 3 ms: Could not connect to server container-test-run-certificates> server # [2465930.504704] server nginx-pre-start[356]: nginx: the configuration file /nix/store/29lf6nzqmwflllkwjl1lcl34sr24y0sh-nginx.conf syntax is ok container-test-run-certificates> server # [2465930.505314] server nginx-pre-start[356]: nginx: configuration file /nix/store/29lf6nzqmwflllkwjl1lcl34sr24y0sh-nginx.conf test is successful container-test-run-certificates> server # [2465930.510997] server systemd[1]: Started Nginx Web Server. container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: 2001:db8:1::3 container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying [2001:db8:1::3]:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1554 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [930 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [80 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Oct 2 20:24:46 2026 GMT container-test-run-certificates> * expire date: Dec 31 20:25:46 2026 GMT container-test-run-certificates> * issuer: CN=Clan Intermediate CA container-test-run-certificates> * Certificate level 0: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 1: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 2: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 0 container-test-run-certificates> * SSL certificate verified via OpenSSL. container-test-run-certificates> * Established connection to test.foo (2001:db8:1::3 port 443) from 2001:db8:1::2 port 40450 container-test-run-certificates> % Total % Received % Xferd Average Speed Time Time Time Current container-test-run-certificates> Dload Upload Total Spent Left Speed container-test-run-certificates> 0 0 0 0 0 0 0 0 0* using HTTP/2 container-test-run-certificates> * [HTTP/2] [1] OPENED stream for https://test.foo/ container-test-run-certificates> * [HTTP/2] [1] [:method: GET] container-test-run-certificates> * [HTTP/2] [1] [:scheme: https] container-test-run-certificates> * [HTTP/2] [1] [:authority: test.foo] container-test-run-certificates> * [HTTP/2] [1] [:path: /] container-test-run-certificates> * [HTTP/2] [1] [user-agent: curl/8.22.0] container-test-run-certificates> * [HTTP/2] [1] [accept: */*] container-test-run-certificates> } [5 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> * Request completely sent off container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> { [5 bytes data] container-test-run-certificates> 100 20 100 20 0 0 680 0 0 container-test-run-certificates> * Connection #0 to host test.foo:443 left intact container-test-run-certificates> client: (finished: waiting for success: curl -v https://test.foo, in 1.07 seconds) container-test-run-certificates> client: must succeed: openssl s_client -connect test.foo:443 -servername test.foo /dev/null | openssl x509 -text -noout 1>&2 container-test-run-certificates> Certificate: container-test-run-certificates> Data: container-test-run-certificates> Version: 3 (0x2) container-test-run-certificates> Serial Number: container-test-run-certificates> 27:5f:a1:bd:59:ef:f4:c0:e3:eb:f9:66:05:62:a1:a8 container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Issuer: CN=Clan Intermediate CA container-test-run-certificates> Validity container-test-run-certificates> Not Before: Oct 2 20:24:46 2026 GMT container-test-run-certificates> Not After : Dec 31 20:25:46 2026 GMT container-test-run-certificates> Subject: CN=test.foo container-test-run-certificates> Subject Public Key Info: container-test-run-certificates> Public Key Algorithm: id-ecPublicKey container-test-run-certificates> Public-Key: (256 bit) container-test-run-certificates> pub: container-test-run-certificates> 04:45:87:46:9f:52:44:61:0f:15:75:fb:38:09:7c: container-test-run-certificates> d0:e5:4a:0a:f9:2e:68:ed:4c:c7:3f:a7:2c:25:02: container-test-run-certificates> cd:1e:d7:fe:5f:55:d9:90:0d:20:c2:26:72:b2:ae: container-test-run-certificates> 62:e2:4f:dd:53:51:74:fb:93:ba:ee:7b:9a:2a:12: container-test-run-certificates> 1a:ce:9f:dc:f3 container-test-run-certificates> ASN1 OID: prime256v1 container-test-run-certificates> NIST CURVE: P-256 container-test-run-certificates> X509v3 extensions: container-test-run-certificates> X509v3 Key Usage: critical container-test-run-certificates> Digital Signature container-test-run-certificates> X509v3 Extended Key Usage: container-test-run-certificates> TLS Web Server Authentication, TLS Web Client Authentication container-test-run-certificates> X509v3 Subject Key Identifier: container-test-run-certificates> 2B:16:59:5C:10:C8:93:9D:6C:CF:4F:EC:9A:74:47:7E:51:1C:0B:03 container-test-run-certificates> X509v3 Authority Key Identifier: container-test-run-certificates> BE:95:EE:44:85:AC:5F:20:9E:46:14:10:D8:06:6D:4B:C9:3B:4E:14 container-test-run-certificates> X509v3 Subject Alternative Name: container-test-run-certificates> DNS:test.foo container-test-run-certificates> 1.3.6.1.4.1.37476.9000.64.1: container-test-run-certificates> 0......acme.. container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Signature Value: container-test-run-certificates> 30:44:02:20:09:73:98:38:9d:7f:e1:b8:92:ac:14:e0:60:44: container-test-run-certificates> b4:1d:d8:9c:66:4d:fd:a2:90:64:b7:3a:98:c6:20:9f:bc:2c: container-test-run-certificates> 02:20:76:9b:8f:88:23:da:da:c6:87:d3:27:75:e1:7f:29:ec: container-test-run-certificates> 89:13:42:e0:44:77:e2:6a:3a:f8:be:d4:df:bb:29:55 container-test-run-certificates> client: (finished: must succeed: openssl s_client -connect test.foo:443 -servername test.foo /dev/null | openssl x509 -text -noout 1>&2, in 0.05 seconds) container-test-run-certificates> (finished: run the VM test script, in 21.99 seconds) container-test-run-certificates> test script finished in 22.06s container-test-run-certificates> cleanup container-test-run-certificates> kill NspawnMachine (pid 50) container-test-run-certificates> kill NspawnMachine (pid 467) container-test-run-certificates> Container ca terminated by signal KILL. container-test-run-certificates> kill NspawnMachine (pid 464) container-test-run-certificates> Container client terminated by signal KILL. container-test-run-certificates> Container server terminated by signal KILL. container-test-run-certificates> (finished: cleanup, in 0.49 seconds)