these 83 derivations will be built: /nix/store/07lnmfgc8awiwc070gwkjqcq19hfpswl-nginx.conf.drv /nix/store/08n3q6w2842a58xmr2wwfhm1fsvkidd1-nginx.conf.drv /nix/store/174nsvlv9xp4h6ps6ras0968h2qi14ji-unit-script-nginx-pre-start.drv /nix/store/hfd88qfyxkkh2kpq2d5nyb4ah9s5n6gq-unit-dbus-broker.service.drv /nix/store/1b6lnmg2fgpma7q73f99w93mhc9g463x-user-units.drv /nix/store/80s7w9gyg98kajbkzdjcpwi5rc7l1qpz-extra-hosts.drv /nix/store/88vr0az27bgcrh0shh4jjq4yjsdz9ymm-string-hosts.drv /nix/store/p0liyhq8jm5ffmi9v53b4p9gswsq0qjg-localhost-hosts.drv /nix/store/4bmlndrv3iawbgkzjf4ai2saqrhbb32n-hosts.drv /nix/store/n6cm244bg19hf85kank2b335j0wpxzq6-command-not-found.drv /nix/store/8k1qb9wxng7dx0mjr57cns8lfprxgwr7-etc-bashrc.drv /nix/store/9fb76l4asnahv82kgka8rx6vb4rl5sq3-user-units.drv /nix/store/i2lgk8n572d3zpk6lq12jxgd8fiiyzq0-system-path.drv /nix/store/j0ymgz6cqg8ykw6ma9yy0wwgnjjbqm0p-system-units.drv /nix/store/vi6pwq5z9xakkk488v203d0vdkjmagsk-dbus-1.drv /nix/store/2f5avg9qpjd6h606gdd3mxmzjd5cj3k7-etc.drv /nix/store/2jb9lfr7vbmm3p5kh1wzx1cy665iklj0-unit-script-acme-order-renew-ca.foo-start.drv /nix/store/gwb7nfprwy90ficly83cnrm5xx0fn7hp-unit-script-acme-order-renew-test.foo-start.drv /nix/store/sravhq6306mlvj3f24xrp93k174q718s-acme-postrun.drv /nix/store/2ljg3afv2nl6ljyqc0pspg2k94pgshx0-unit-acme-order-renew-test.foo.service.drv /nix/store/2v0qh7nj7yvlkpszbk8jzlsyf91sqnlx-X-Restart-Triggers-step-ca.drv /nix/store/2ygq53lrhw5s4lsjznj1fvx583pavzhq-dbus-1.drv /nix/store/33pf5966kpyd5rvgix4llm7w58745yj1-unit-dbus-broker.service.drv /nix/store/8hjfzsck9i0sdzykav1wrbym9nsikc50-unit-script-acme-test.foo-start.drv /nix/store/fvfw1z0yw4h8j0j9mzsy7lrgxl2fbkbg-X-Restart-Triggers-acme-test.foo.drv /nix/store/3binpkdd0pa5lxaf1a7nwx6wid0pjjdr-unit-acme-test.foo.service.drv /nix/store/3h1l39hvr084cb1kpn1rm7yi77396dpx-X-Restart-Triggers-dbus-broker.drv /nix/store/47gmrnkf83c8fva6ynlqhqldcn7sszdx-X-Restart-Triggers-dbus-broker.drv /nix/store/5gis6jgs9cg2q6d64j2px073xch6rshd-system-path.drv /nix/store/a32q10rg0kba45j1fqwa580yrvgcvcd5-activate.drv /nix/store/kd9m1wvyk5h57ri209k2ylmpqnrqfk4a-etc.drv /nix/store/4h0f7paak143qpfy5j0fd3lx6b5wxjpn-nixos-system-server-test.drv /nix/store/4rkh1b07x5sa0966jv3ykwpj8j2bny7m-closure-info.drv /nix/store/5bmyi6gg7607n2lfsc95904fvaxfp4js-unit-nix-daemon.service.drv /nix/store/5w6mwpny4ry4d60swrzayizzb7z1zn7l-X-Restart-Triggers-dbus-broker.drv /nix/store/6s3v8highfww455caq89p5qfljyjpy61-unit-acme-account-d22a46d9459bf683a338.target.drv /nix/store/77g58rqr758qfv7aakmxxchwrnqsvls1-closure-info.drv /nix/store/7p7p1ghpadk2pgchxpn6z07lc8jl5zid-string-hosts.drv /nix/store/8q2yni5pdhi3h9hykn333kn6vhl5ag52-activate.drv /nix/store/am2mj7iqv8m0s72mwb9k99fa9ybblphv-acme-setup-privileged.drv /nix/store/dg745y3qvlz0mr2wjv728v5zafjk56gk-unit-acme-setup.service.drv /nix/store/fkn4k25lk2m6d08s9mqzyww6gxdb5pyk-X-Restart-Triggers-acme-ca.foo.drv /nix/store/mbnyahbvd06768rmlbnq3lam0x4c3z8q-unit-script-acme-ca.foo-start.drv /nix/store/fmik1fsy57yqwvaq9bzjlla7pf665pi8-unit-acme-ca.foo.service.drv /nix/store/g4175q7sk7ibvikri7v7wcikkc1ba2rg-unit-acme-renew-ca.foo.timer.drv /nix/store/gcaas5gwbfsz9jnmvr8hgj6cqknpaxbw-firewall-start.drv /nix/store/k57pch7mrnmx5r0p71w1fhs1vx131mdq-firewall-reload.drv /nix/store/gd8niak0d6snwxsb25alcfkqxbbk4h8b-unit-firewall.service.drv /nix/store/r5y2s9417d62h0w3nrfmn9dwcp12j0i7-acme-postrun.drv /nix/store/qa487qi41dzv2lkb4bb3yi3gs5mfsh1y-unit-acme-order-renew-ca.foo.service.drv /nix/store/z928z83a9chpyr8myl15niasj463anpn-unit-script-nginx-pre-start.drv /nix/store/sfk6nhxnm7zm17w7pq0ig1zgfcarvxrk-unit-nginx.service.drv /nix/store/w1181akxzr3fb6x02yhzhlq1rc8g3r62-unit-nginx-config-reload.service.drv /nix/store/x0sicm33wxq42k1wa1v059bqkwnw2c7j-unit-dbus-broker.service.drv /nix/store/zysbjnmj92mrarvs88m37l1xyxpmnm93-unit-step-ca.service.drv /nix/store/cir4klwq90vxllbpa7qr5gqza1909adf-system-units.drv /nix/store/g8rkw2blflxs0c8403qdpbaf3d3xzqsd-system-path.drv /nix/store/hb16k9537yf8mqgphm45s6hf83dd5qrc-etc-hostname.drv /nix/store/jy7zi4jpm47pr3q4hcz39av185c6mhrp-string-hosts.drv /nix/store/mpbcycldqvi03462lsqz17brywzfd0rb-hosts.drv /nix/store/8zvlifx7xrihvns4a2q081xcsyigvdsr-etc.drv /nix/store/xvq2cgzpm3l39fcmq25876sa2mjvj447-users-groups.json.drv /nix/store/9h40vbvpfcifg878ig75v4vn5iy8cd7j-activate.drv /nix/store/9z2y1p1ghkcn97lcjr1z37fcr1hmv0jp-unit-dbus-broker.service.drv /nix/store/h5q695p38bmbf33799jr5lwb27yx3vnz-nixos-system-ca-test.drv /nix/store/n83fq0431a1i32m99bhxd9nqgj334zjv-closure-info.drv /nix/store/npfwmy2k12a8j9fjcjv0cpj69k7cf6n9-nixos-system-client-test.drv /nix/store/jf05yl0wpvfk7sny4x7mzx98j9ciqsg3-nixos-test-driver-certificates.drv /nix/store/jhda0yw8aacj905742jbswawclz12drv-acme-setup-privileged.drv /nix/store/lhycm738l4s54j9yka0dxh1sr95j2ryw-unit-dbus-broker.service.drv /nix/store/mpf5y5nf543ivijb25ds4z953zy6vylp-hosts.drv /nix/store/n7aswr43qmh2cfkvd6hdhgbhxmwbyifk-unit-nginx.service.drv /nix/store/ncs56w3s0bgj5r7kjynkxms4jax2hbki-user-units.drv /nix/store/nqsk5vm07gnqvpvhkdzb7zw5x67kag6g-unit-acme-setup.service.drv /nix/store/nsh7ma27alnfm9sqhizxw0fa5yf99zif-testScript.drv /nix/store/ph9c3zm61nzj5ryccxih94f8ixrri0rx-users-groups.json.drv /nix/store/q83fbf7iwyrjp31nh5jbg81bdf3zvwl2-dbus-1.drv /nix/store/s75zk4i9mgavzf3j7rabf5hwv5cx2fri-system-units.drv /nix/store/shvqg68zyy4iblczj4dxmnbqjs7120zq-unit-acme-account-2c44cb477b4787b2cf13.target.drv /nix/store/wsdvj31zw1x26mfwi4d8q1jqjfw4cag0-unit-dbus-broker.service.drv /nix/store/xpwqaqiglqyc19j48vqp1265b54pm5p2-unit-acme-renew-test.foo.timer.drv /nix/store/xyqi987i4669xb49qhzk6lf81pw80nn1-container-test-run-certificates.drv /nix/store/xz2g0m0s136rkn91hng2bwk2424686a2-unit-nginx-config-reload.service.drv these 19 paths will be fetched (0.0 KiB download, 78.7 MiB unpacked): /nix/store/52wrsl51w1vhhsnsjqf4ssf0a893q93p-55-nixos-aslr-entropy.conf /nix/store/igq2ccrqbac4h6aw9amxaj1g5fvcismd-ca.json /nix/store/kj3v3crlby6xlxicdvc96akpv0da20ii-decrypt-age-secrets /nix/store/anlwzx304n36q8lbln45jxica971qc22-dry-activate /nix/store/zqm0zx6sz7h8k3d574j5f3cwxg4zrald-dry-activate /nix/store/dsrdyh8a69sasb8zr31ir5q1dihzkwds-gixy-0.1.21 /nix/store/msj5bb9m8mjagacnhg0v1xlhrdnqgj2f-nss-cacert-3.126 /nix/store/44c77n3vym0h5jhgbzml32nn3vw6h6k7-nss-cacert-3.126-p11kit /nix/store/p8fzpxx5gjdpyqvkbxy5a2kk3z6a4d4l-openssl-3.6.4-man /nix/store/vcp182jiw34hka11f57g0xi01kaxwjjx-python3.13-cached-property-2.0.1 /nix/store/3sxwlfhxwc703h0s1zk6141vhx5cni50-python3.13-configargparse-1.7.1 /nix/store/88iwq6iq4nvswmlnji7g3ra7zbc50ri2-python3.13-pyparsing-2.4.7 /nix/store/bql70mngvxdk3a4b61p71x88rcl07m40-step-ca-0.29.0 /nix/store/bgr2l79ivdl6zs0pjdbgjq5bkrbmbx21-system-generators /nix/store/7fw9402rsnwnzfqyd26vmvcbd6jqh9sd-system-shutdown /nix/store/wlvm5r34zma05wh1afcqagqid6lv4gz4-user-generators /nix/store/p3z270jipf03w9gc9m6wlqr2xdr4h00j-users-groups.json /nix/store/q58indxqrpgz3ikcvlh01ql87l3rrw91-users-groups.json /nix/store/q9ywb93ydj5dk6q41nzy8b1akkjghx2c-vars-check-certificates warning: ignoring the client-specified setting 'store', because it is a restricted setting and you are not a trusted user building '/nix/store/5gis6jgs9cg2q6d64j2px073xch6rshd-system-path.drv' on nix-store.geninf.io:50051 system-path> build-x86-01: building 5gis6jgs9cg2q6d64j2px073xch6rshd-system-path.drv building '/nix/store/i2lgk8n572d3zpk6lq12jxgd8fiiyzq0-system-path.drv' on nix-store.geninf.io:50051 system-path> gi-build-x86-02: building i2lgk8n572d3zpk6lq12jxgd8fiiyzq0-system-path.drv system-path> structuredAttrs is enabled system-path> created 1817 symlinks in user environment system-path> structuredAttrs is enabled system-path> created 1817 symlinks in user environment building '/nix/store/g8rkw2blflxs0c8403qdpbaf3d3xzqsd-system-path.drv' on nix-store.geninf.io:50051 system-path> build-x86-01: building g8rkw2blflxs0c8403qdpbaf3d3xzqsd-system-path.drv system-path> structuredAttrs is enabled system-path> created 1817 symlinks in user environment building '/nix/store/vi6pwq5z9xakkk488v203d0vdkjmagsk-dbus-1.drv' on nix-store.geninf.io:50051 dbus-1> gi-build-x86-02: building vi6pwq5z9xakkk488v203d0vdkjmagsk-dbus-1.drv building '/nix/store/2ygq53lrhw5s4lsjznj1fvx583pavzhq-dbus-1.drv' on nix-store.geninf.io:50051 dbus-1> build-x86-01: building 2ygq53lrhw5s4lsjznj1fvx583pavzhq-dbus-1.drv building '/nix/store/q83fbf7iwyrjp31nh5jbg81bdf3zvwl2-dbus-1.drv' on nix-store.geninf.io:50051 dbus-1> build-x86-01: building q83fbf7iwyrjp31nh5jbg81bdf3zvwl2-dbus-1.drv building '/nix/store/3h1l39hvr084cb1kpn1rm7yi77396dpx-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-dbus-broker> build-x86-01: building 3h1l39hvr084cb1kpn1rm7yi77396dpx-X-Restart-Triggers-dbus-broker.drv building '/nix/store/5w6mwpny4ry4d60swrzayizzb7z1zn7l-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-dbus-broker> gi-build-x86-02: building 5w6mwpny4ry4d60swrzayizzb7z1zn7l-X-Restart-Triggers-dbus-broker.drv building '/nix/store/47gmrnkf83c8fva6ynlqhqldcn7sszdx-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-dbus-broker> build-x86-01: building 47gmrnkf83c8fva6ynlqhqldcn7sszdx-X-Restart-Triggers-dbus-broker.drv building '/nix/store/x0sicm33wxq42k1wa1v059bqkwnw2c7j-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build-x86-01: building x0sicm33wxq42k1wa1v059bqkwnw2c7j-unit-dbus-broker.service.drv building '/nix/store/wsdvj31zw1x26mfwi4d8q1jqjfw4cag0-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> gi-build-x86-02: building wsdvj31zw1x26mfwi4d8q1jqjfw4cag0-unit-dbus-broker.service.drv building '/nix/store/lhycm738l4s54j9yka0dxh1sr95j2ryw-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> gi-build-x86-02: building lhycm738l4s54j9yka0dxh1sr95j2ryw-unit-dbus-broker.service.drv building '/nix/store/hfd88qfyxkkh2kpq2d5nyb4ah9s5n6gq-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build-x86-01: building hfd88qfyxkkh2kpq2d5nyb4ah9s5n6gq-unit-dbus-broker.service.drv building '/nix/store/9z2y1p1ghkcn97lcjr1z37fcr1hmv0jp-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build-x86-01: building 9z2y1p1ghkcn97lcjr1z37fcr1hmv0jp-unit-dbus-broker.service.drv building '/nix/store/33pf5966kpyd5rvgix4llm7w58745yj1-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build-x86-01: building 33pf5966kpyd5rvgix4llm7w58745yj1-unit-dbus-broker.service.drv building '/nix/store/9fb76l4asnahv82kgka8rx6vb4rl5sq3-user-units.drv' on nix-store.geninf.io:50051 user-units> gi-build-x86-02: building 9fb76l4asnahv82kgka8rx6vb4rl5sq3-user-units.drv building '/nix/store/cir4klwq90vxllbpa7qr5gqza1909adf-system-units.drv' on nix-store.geninf.io:50051 system-units> build-x86-01: building cir4klwq90vxllbpa7qr5gqza1909adf-system-units.drv building '/nix/store/j0ymgz6cqg8ykw6ma9yy0wwgnjjbqm0p-system-units.drv' on nix-store.geninf.io:50051 system-units> gi-build-x86-02: building j0ymgz6cqg8ykw6ma9yy0wwgnjjbqm0p-system-units.drv building '/nix/store/1b6lnmg2fgpma7q73f99w93mhc9g463x-user-units.drv' on nix-store.geninf.io:50051 user-units> build-x86-01: building 1b6lnmg2fgpma7q73f99w93mhc9g463x-user-units.drv building '/nix/store/ncs56w3s0bgj5r7kjynkxms4jax2hbki-user-units.drv' on nix-store.geninf.io:50051 user-units> build-x86-01: building ncs56w3s0bgj5r7kjynkxms4jax2hbki-user-units.drv building '/nix/store/s75zk4i9mgavzf3j7rabf5hwv5cx2fri-system-units.drv' on nix-store.geninf.io:50051 system-units> build-x86-01: building s75zk4i9mgavzf3j7rabf5hwv5cx2fri-system-units.drv building '/nix/store/2f5avg9qpjd6h606gdd3mxmzjd5cj3k7-etc.drv' on nix-store.geninf.io:50051 etc> gi-build-x86-02: building 2f5avg9qpjd6h606gdd3mxmzjd5cj3k7-etc.drv building '/nix/store/8zvlifx7xrihvns4a2q081xcsyigvdsr-etc.drv' on nix-store.geninf.io:50051 etc> build-x86-01: building 8zvlifx7xrihvns4a2q081xcsyigvdsr-etc.drv building '/nix/store/kd9m1wvyk5h57ri209k2ylmpqnrqfk4a-etc.drv' on nix-store.geninf.io:50051 etc> build-x86-01: building kd9m1wvyk5h57ri209k2ylmpqnrqfk4a-etc.drv building '/nix/store/8q2yni5pdhi3h9hykn333kn6vhl5ag52-activate.drv' on nix-store.geninf.io:50051 activate> gi-build-x86-02: building 8q2yni5pdhi3h9hykn333kn6vhl5ag52-activate.drv building '/nix/store/9h40vbvpfcifg878ig75v4vn5iy8cd7j-activate.drv' on nix-store.geninf.io:50051 activate> build-x86-01: building 9h40vbvpfcifg878ig75v4vn5iy8cd7j-activate.drv building '/nix/store/a32q10rg0kba45j1fqwa580yrvgcvcd5-activate.drv' on nix-store.geninf.io:50051 activate> build-x86-01: building a32q10rg0kba45j1fqwa580yrvgcvcd5-activate.drv building '/nix/store/npfwmy2k12a8j9fjcjv0cpj69k7cf6n9-nixos-system-client-test.drv' on nix-store.geninf.io:50051 nixos-system-client-test> gi-build-x86-02: building npfwmy2k12a8j9fjcjv0cpj69k7cf6n9-nixos-system-client-test.drv building '/nix/store/h5q695p38bmbf33799jr5lwb27yx3vnz-nixos-system-ca-test.drv' on nix-store.geninf.io:50051 nixos-system-ca-test> build-x86-01: building h5q695p38bmbf33799jr5lwb27yx3vnz-nixos-system-ca-test.drv nixos-system-ca-test> structuredAttrs is enabled nixos-system-client-test> structuredAttrs is enabled building '/nix/store/4h0f7paak143qpfy5j0fd3lx6b5wxjpn-nixos-system-server-test.drv' on nix-store.geninf.io:50051 nixos-system-server-test> build-x86-01: building 4h0f7paak143qpfy5j0fd3lx6b5wxjpn-nixos-system-server-test.drv nixos-system-server-test> structuredAttrs is enabled building '/nix/store/4rkh1b07x5sa0966jv3ykwpj8j2bny7m-closure-info.drv' on nix-store.geninf.io:50051 closure-info> build-x86-01: building 4rkh1b07x5sa0966jv3ykwpj8j2bny7m-closure-info.drv closure-info> structuredAttrs is enabled building '/nix/store/77g58rqr758qfv7aakmxxchwrnqsvls1-closure-info.drv' on nix-store.geninf.io:50051 closure-info> build-x86-01: building 77g58rqr758qfv7aakmxxchwrnqsvls1-closure-info.drv closure-info> structuredAttrs is enabled building '/nix/store/n83fq0431a1i32m99bhxd9nqgj334zjv-closure-info.drv' on nix-store.geninf.io:50051 closure-info> gi-build-x86-02: building n83fq0431a1i32m99bhxd9nqgj334zjv-closure-info.drv closure-info> structuredAttrs is enabled building '/nix/store/jf05yl0wpvfk7sny4x7mzx98j9ciqsg3-nixos-test-driver-certificates.drv' on nix-store.geninf.io:50051 nixos-test-driver-certificates> build-x86-01: building jf05yl0wpvfk7sny4x7mzx98j9ciqsg3-nixos-test-driver-certificates.drv nixos-test-driver-certificates> Running type check (enable/disable: config.skipTypeCheck) nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck nixos-test-driver-certificates> Success: no issues found in 1 source file building '/nix/store/xyqi987i4669xb49qhzk6lf81pw80nn1-container-test-run-certificates.drv' on nix-store.geninf.io:50051 container-test-run-certificates> build-x86-01: building xyqi987i4669xb49qhzk6lf81pw80nn1-container-test-run-certificates.drv container-test-run-certificates> additionally exposed symbols: container-test-run-certificates> ca, client, server, container-test-run-certificates> start_all, machines, driver, Machine, wait_for_signal container-test-run-certificates> Starting ca container-test-run-certificates> Starting client container-test-run-certificates> Starting server container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/1msljfx6cf6jjz934vyd1iwfaygnvg2n-nixos-system-ca-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if4: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether 42:06:76:42:a9:8d brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.4 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/833invqvsk7anqnqrki5hqncrcllj825-coreutils-9.11/bin/sleep 999999999 && echo 5b852734-5a52-4946-9d63-5723f31210cd' container-test-run-certificates> Running as unit: run-p450-i23210018.service; invocation ID: cd32c32932f1450f948e08846bae3d89 container-test-run-certificates> To attach to container ca run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*5b852734-5a52-4946-9d63-5723f31210cd') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/9r02ykx9y35lf4gk6gc30gnag1y8ncp7-python3-3.13.15/bin/python3.13 /nix/store/7pcwg3l52sff9p90k03qhavpaqk1zhfi-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py 5b852734-5a52-4946-9d63-5723f31210cd container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/i7hz5wrgcjnkd2z6l13agf011ky9j022-nixos-system-client-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if3: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether 2a:42:35:28:b1:2f brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.4 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/833invqvsk7anqnqrki5hqncrcllj825-coreutils-9.11/bin/sleep 999999999 && echo fdefa61a-717b-4e3c-b3ce-cb7ea89ddf8e' container-test-run-certificates> Running as unit: run-p304-i23210021.service; invocation ID: c7a32cfa7d7a4293840761c16c3b92c9 container-test-run-certificates> To attach to container client run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*fdefa61a-717b-4e3c-b3ce-cb7ea89ddf8e') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/9r02ykx9y35lf4gk6gc30gnag1y8ncp7-python3-3.13.15/bin/python3.13 /nix/store/7pcwg3l52sff9p90k03qhavpaqk1zhfi-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py fdefa61a-717b-4e3c-b3ce-cb7ea89ddf8e container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/avgazi9lbjaiz9h1p696arwz3jfx47pm-nixos-system-server-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if5: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether be:aa:dd:39:86:e7 brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.4 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/833invqvsk7anqnqrki5hqncrcllj825-coreutils-9.11/bin/sleep 999999999 && echo 054ef12a-3a89-49ec-8c7c-f0d9f5427ecf' container-test-run-certificates> Running as unit: run-p386-i23210024.service; invocation ID: a44f056ce88541658f0fde1b53307f52 container-test-run-certificates> To attach to container server run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*054ef12a-3a89-49ec-8c7c-f0d9f5427ecf') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/9r02ykx9y35lf4gk6gc30gnag1y8ncp7-python3-3.13.15/bin/python3.13 /nix/store/7pcwg3l52sff9p90k03qhavpaqk1zhfi-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py 054ef12a-3a89-49ec-8c7c-f0d9f5427ecf container-test-run-certificates> + systemctl restart acme-order-renew-ca.foo.service container-test-run-certificates> + systemctl restart acme-test.foo.service container-test-run-certificates> client: waiting for success: curl -v https://test.foo container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1010 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [112 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Oct 4 15:25:49 2026 GMT container-test-run-certificates> * expire date: Nov 3 15:25:49 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 026fc3 container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1010 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [111 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Oct 4 15:25:49 2026 GMT container-test-run-certificates> * expire date: Nov 3 15:25:49 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 026fc3 container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [930 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [79 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Oct 4 15:25:00 2026 GMT container-test-run-certificates> * expire date: Jan 2 15:26:00 2027 GMT container-test-run-certificates> * issuer: CN=Clan Intermediate CA container-test-run-certificates> * Certificate level 0: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 1: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 2: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 0 container-test-run-certificates> * SSL certificate verified via OpenSSL. container-test-run-certificates> * Established connection to test.foo (192.168.1.3 port 443) from 192.168.1.2 port 59878 container-test-run-certificates> % Total % Received % Xferd Average Speed Time Time Time Current container-test-run-certificates> Dload Upload Total Spent Left Speed container-test-run-certificates> 0 0 0 0 0 0 0 0 0* using HTTP/2 container-test-run-certificates> * [HTTP/2] [1] OPENED stream for https://test.foo/ container-test-run-certificates> * [HTTP/2] [1] [:method: GET] container-test-run-certificates> * [HTTP/2] [1] [:scheme: https] container-test-run-certificates> * [HTTP/2] [1] [:authority: test.foo] container-test-run-certificates> * [HTTP/2] [1] [:path: /] container-test-run-certificates> * [HTTP/2] [1] [user-agent: curl/8.22.0] container-test-run-certificates> * [HTTP/2] [1] [accept: */*] container-test-run-certificates> } [5 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> * Request completely sent off container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> { [5 bytes data] container-test-run-certificates> 100 20 100 20 0 0 1898 0 0 container-test-run-certificates> * Connection #0 to host test.foo:443 left intact container-test-run-certificates> (finished: waiting for success: curl -v https://test.foo, in 2.06 seconds) container-test-run-certificates> + openssl s_client -connect test.foo:443 -servername test.foo container-test-run-certificates> + openssl x509 -text -noout container-test-run-certificates> Certificate: container-test-run-certificates> Data: container-test-run-certificates> Version: 3 (0x2) container-test-run-certificates> Serial Number: container-test-run-certificates> 09:e9:aa:5f:d1:39:2a:55:1f:4b:89:1e:69:8b:95:49 container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Issuer: CN=Clan Intermediate CA container-test-run-certificates> Validity container-test-run-certificates> Not Before: Oct 4 15:25:00 2026 GMT container-test-run-certificates> Not After : Jan 2 15:26:00 2027 GMT container-test-run-certificates> Subject: CN=test.foo container-test-run-certificates> Subject Public Key Info: container-test-run-certificates> Public Key Algorithm: id-ecPublicKey container-test-run-certificates> Public-Key: (256 bit) container-test-run-certificates> pub: container-test-run-certificates> 04:92:a1:68:09:6f:73:d4:49:14:9b:78:7f:77:6c: container-test-run-certificates> a4:81:1f:e7:54:a3:35:bf:d8:f0:fc:30:d9:b4:33: container-test-run-certificates> 0f:de:06:be:32:41:8e:72:a5:e4:97:76:12:49:1a: container-test-run-certificates> 59:2e:26:61:c2:67:44:a8:04:91:f1:fb:8b:25:6a: container-test-run-certificates> 89:10:a6:a9:a0 container-test-run-certificates> ASN1 OID: prime256v1 container-test-run-certificates> NIST CURVE: P-256 container-test-run-certificates> X509v3 extensions: container-test-run-certificates> X509v3 Key Usage: critical container-test-run-certificates> Digital Signature container-test-run-certificates> X509v3 Extended Key Usage: container-test-run-certificates> TLS Web Server Authentication, TLS Web Client Authentication container-test-run-certificates> X509v3 Subject Key Identifier: container-test-run-certificates> EC:FC:0B:F8:D5:C7:36:16:AE:C5:43:5C:D3:48:1D:40:56:02:28:69 container-test-run-certificates> X509v3 Authority Key Identifier: container-test-run-certificates> 12:7B:BB:87:0A:DE:A2:A4:61:95:C5:6B:DF:BC:AA:93:FE:C3:16:9F container-test-run-certificates> X509v3 Subject Alternative Name: container-test-run-certificates> DNS:test.foo container-test-run-certificates> 1.3.6.1.4.1.37476.9000.64.1: container-test-run-certificates> 0......acme.. container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Signature Value: container-test-run-certificates> 30:45:02:21:00:93:de:2b:6b:ee:9d:67:df:dd:70:a9:8f:52: container-test-run-certificates> 35:25:59:a7:a6:7b:35:95:55:03:49:fb:47:24:53:ae:86:3e: container-test-run-certificates> f7:02:20:44:d6:c1:44:d1:85:c1:89:2a:27:54:e2:fc:15:a4: container-test-run-certificates> 66:ae:26:8f:87:b2:30:4f:73:a4:fb:d6:2e:1d:36:c3:56 container-test-run-certificates> container-test-run-certificates> container-test-run-certificates>