container-test-run-user-firewall-iptables
checks.aarch64-linux.nixos-test-user-firewall-iptables
· build #854
· raw
1build01: building w5f8kjvyygy3sb76fsncss4nbdsxzgqa-container-test-run-user-firewall-iptables.drv2Machine state will be reset. To keep it, pass --keep-machine-state3start all VLans4(finished: start all VLans, in 0.00 seconds)56Test will time out and terminate in 3600.0 seconds7run the VM test script8additionally exposed symbols:9 machine, router,10 vlan1,11 start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh12start all VMs13machine: systemd-nspawn running (pid 52)14router: systemd-nspawn running (pid 53)15machine: Waiting for journal at /build/vm-state-machine/var/log/journal...16router: Waiting for journal at /build/vm-state-router/var/log/journal...17(finished: start all VMs, in 0.00 seconds)18router: waiting for unit multi-user.target19nixos-nspawn(router): TAP vde-tap1 not found; container will be isolated from VDE20nixos-nspawn(router): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.21nixos-nspawn(machine): TAP vde-tap1 not found; container will be isolated from VDE22nixos-nspawn(machine): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.23Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.24Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.25░ Spawning container router on /build/vm-state-router.26░ Spawning container machine on /build/vm-state-machine.27machine # No journal files were found.28machine # No journal boot entry found for the specified boot (+0).29router # No journal files were found.30router # No journal boot entry found for the specified boot (+0).31router # [2690142.758406] router systemd-journald[57]: Journal started32router # [2690142.758468] router systemd-journald[57]: Runtime Journal (/run/log/journal/63911b91e1134f9a9500005c779f81b8) is 8M, max 2.5G, 2.4G free.33router # [2690142.764253] router systemd[1]: Finished Apply Kernel Variables.34machine # [2690142.748135] machine systemd-journald[57]: Journal started35router # [2690142.778948] router systemd[1]: Finished Create Static Device Nodes in /dev gracefully.36machine # [2690142.748392] machine systemd-journald[57]: Runtime Journal (/run/log/journal/5b1b03e4f3c24fa9906e7cbc091ed9d4) is 8M, max 2.5G, 2.4G free.37router # [2690142.791291] router systemd[1]: Starting Flush Journal to Persistent Storage...38machine # [2690142.755327] machine systemd[1]: Finished Apply Kernel Variables.39router # [2690142.792137] router systemd[1]: Starting Network Name Resolution...40machine # [2690142.777726] machine systemd[1]: Finished Create Static Device Nodes in /dev gracefully.41machine # [2690142.792690] machine systemd[1]: Starting Flush Journal to Persistent Storage...42machine # [2690142.793467] machine systemd[1]: Starting Create Static Device Nodes in /dev...43router # [2690142.792795] router systemd[1]: Starting Create Static Device Nodes in /dev...44machine # [2690142.835045] machine systemd-journald[57]: Time spent on flushing to /var/log/journal/5b1b03e4f3c24fa9906e7cbc091ed9d4 is 1.636ms for 6 entries.45machine # [2690142.835045] machine systemd-journald[57]: System Journal (/var/log/journal/5b1b03e4f3c24fa9906e7cbc091ed9d4) is 8M, max 4G, 3.9G free.46router # [2690142.835206] router systemd-journald[57]: Time spent on flushing to /var/log/journal/63911b91e1134f9a9500005c779f81b8 is 2.174ms for 7 entries.47router # [2690142.835206] router systemd-journald[57]: System Journal (/var/log/journal/63911b91e1134f9a9500005c779f81b8) is 8M, max 4G, 3.9G free.48router # [2690142.848397] router systemd[1]: Finished Create Static Device Nodes in /dev.49router # [2690142.849064] router systemd[1]: Reached target Preparation for Local File Systems.50router # [2690142.849173] router systemd[1]: Reached target Local File Systems.51router # [2690142.849998] router systemd[1]: Listening on Boot Loader Control Service Socket.52router # [2690142.850047] router systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container53router # [2690142.850944] router systemd[1]: Starting Save Transient machine-id to Disk...54router # [2690142.850984] router systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys55machine # [2690142.848345] machine systemd[1]: Finished Create Static Device Nodes in /dev.56machine # [2690142.849003] machine systemd[1]: Reached target Preparation for Local File Systems.57machine # [2690142.849116] machine systemd[1]: Reached target Local File Systems.58router # [2690142.852010] router systemd[1]: Starting Network Management...59machine # [2690142.849947] machine systemd[1]: Listening on Boot Loader Control Service Socket.60machine # [2690142.849997] machine systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container61router # [2690142.852553] router systemd[1]: Finished Flush Journal to Persistent Storage.62machine # [2690142.851151] machine systemd[1]: Starting Save Transient machine-id to Disk...63router # [2690142.854156] router systemd[1]: Starting Create System Files and Directories...64machine # [2690142.851187] machine systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys65router # [2690142.872985] router systemd-tmpfiles[72]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted66machine # [2690142.852302] machine systemd[1]: Finished Flush Journal to Persistent Storage.67machine # [2690142.853249] machine systemd[1]: Starting Create System Files and Directories...68machine # [2690142.870051] machine systemd-tmpfiles[129]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted69router # [2690142.873222] router systemd-tmpfiles[72]: fchmod() of /var/log/journal failed: Operation not permitted70machine # [2690142.870284] machine systemd-tmpfiles[129]: fchmod() of /var/log/journal failed: Operation not permitted71router # [2690142.873376] router systemd-tmpfiles[72]: fchmod() of /var/log/journal/63911b91e1134f9a9500005c779f81b8 failed: Operation not permitted72machine # [2690142.870439] machine systemd-tmpfiles[129]: fchmod() of /var/log/journal/5b1b03e4f3c24fa9906e7cbc091ed9d4 failed: Operation not permitted73router # [2690142.873610] router systemd-tmpfiles[72]: fchmod() of /run/log/journal failed: Operation not permitted74machine # [2690142.870669] machine systemd-tmpfiles[129]: fchmod() of /run/log/journal failed: Operation not permitted75router # [2690142.874990] router systemd[1]: Finished Create System Files and Directories.76machine # [2690142.873736] machine systemd[1]: Finished Create System Files and Directories.77router # [2690142.876890] router systemd[1]: Starting Rebuild Journal Catalog...78machine # [2690142.875072] machine systemd[1]: Starting Rebuild Journal Catalog...79router # [2690142.878100] router systemd[1]: Starting Record System Boot/Shutdown in UTMP...80machine # [2690142.876086] machine systemd[1]: Starting Record System Boot/Shutdown in UTMP...81router # [2690142.883246] router systemd[1]: Finished Save Transient machine-id to Disk.82machine # [2690142.883405] machine systemd[1]: Finished Save Transient machine-id to Disk.83router # [2690142.889942] router systemd[1]: Finished Record System Boot/Shutdown in UTMP.84machine # [2690142.889993] machine systemd[1]: Finished Record System Boot/Shutdown in UTMP.85router # [2690142.901734] router systemd[1]: Finished Rebuild Journal Catalog.86machine # [2690142.900622] machine systemd[1]: Finished Rebuild Journal Catalog.87router # [2690142.902882] router systemd[1]: Starting Update is Completed...88machine # [2690142.901706] machine systemd[1]: Starting Update is Completed...89router # [2690142.914667] router systemd[1]: Finished Update is Completed.90machine # [2690142.912742] machine systemd[1]: Finished Update is Completed.91router # [2690143.525219] router systemd-networkd[70]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted92machine # [2690142.912927] machine systemd[1]: Reached target System Initialization.93router # [2690143.525317] router systemd-networkd[70]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted94machine # [2690142.913021] machine systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container95router # [2690143.534161] router systemd-networkd[70]: lo: Link UP96machine # [2690142.913065] machine systemd[1]: Started Daily Cleanup of Temporary Directories.97router # [2690143.534166] router systemd-networkd[70]: lo: Gained carrier98machine # [2690142.913087] machine systemd[1]: Reached target Timer Units.99router # [2690143.534332] router systemd-networkd[70]: eth1: Configuring with /etc/systemd/network/40-eth1.network.100machine # [2690142.913204] machine systemd[1]: Listening on D-Bus System Message Bus Socket.101router # [2690143.534748] router systemd[1]: Started Network Management.102machine # [2690142.913327] machine systemd[1]: Listening on Nix Daemon Socket.103router # [2690143.534794] router systemd-networkd[70]: eth1: Link UP104machine # [2690142.913441] machine systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.105router # [2690143.535192] router systemd-networkd[70]: eth1: Gained carrier106machine # [2690142.913469] machine systemd[1]: Reached target Socket Units.107router # [2690143.536499] router systemd[1]: Starting Enable Persistent Storage in systemd-networkd...108machine # [2690142.913507] machine systemd[1]: Reached target Basic System.109router # [2690143.589701] router systemd[1]: Finished Enable Persistent Storage in systemd-networkd.110machine # [2690142.914623] machine systemd[1]: Starting Import lastlog data into lastlog2 database...111router # [2690143.766888] router systemd[1]: etc-machine\x2did.mount: Deactivated successfully.112machine # [2690142.915565] machine systemd[1]: Starting Name Service Cache Daemon (nsncd)...113machine # [2690142.935210] machine systemd[1]: Finished Import lastlog data into lastlog2 database.114machine # [2690142.996859] machine systemd[1]: Finished Firewall.115machine # [2690142.997051] machine systemd[1]: Reached target Preparation for Network.116machine # [2690142.998217] machine systemd[1]: Starting Address configuration of eth1...117machine # [2690142.999251] machine systemd[1]: Starting Extra networking commands....118machine # [2690143.000153] machine systemd[1]: Starting Setup wg0 dummy interface...119machine # [2690143.067655] machine systemd[1]: Started Name Service Cache Daemon (nsncd).120machine # [2690143.068622] machine nsncd[172]: Oct 05 10:42:43.053 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"121machine # [2690143.067767] machine systemd[1]: Reached target Host and Network Name Lookups.122machine # [2690143.067864] machine systemd[1]: Reached target User and Group Name Lookups.123machine # [2690143.070001] machine systemd[1]: Starting User Login Management...124machine # [2690143.071152] machine network-addresses-eth1-start[215]: adding address 192.168.1.1/24... done125machine # [2690143.072319] machine systemd[1]: Finished Setup wg0 dummy interface.126machine # [2690143.074043] machine network-addresses-eth1-start[215]: adding address 2001:db8:1::1/64... done127machine # [2690143.079837] machine systemd[1]: Finished Address configuration of eth1.128machine # [2690143.118020] machine systemd[1]: Stopped target Host and Network Name Lookups.129machine # [2690143.118094] machine systemd[1]: Stopping Host and Network Name Lookups...130machine # [2690143.118158] machine systemd[1]: Stopped target User and Group Name Lookups.131machine # [2690143.118192] machine systemd[1]: Stopping User and Group Name Lookups...132machine # [2690143.118399] machine systemd[1]: Stopping Name Service Cache Daemon (nsncd)...133machine # [2690143.123595] machine systemd[1]: nscd.service: Deactivated successfully.134machine # [2690143.123843] machine systemd[1]: Stopped Name Service Cache Daemon (nsncd).135machine # [2690143.126559] machine systemd[1]: Starting Name Service Cache Daemon (nsncd)...136machine # [2690143.134330] machine systemd[1]: Finished Extra networking commands..137machine # [2690143.134445] machine systemd[1]: Reached target Network.138machine # [2690143.135601] machine systemd[1]: Starting Nginx Web Server...139machine # [2690143.252176] machine nsncd[298]: Oct 05 10:42:43.237 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"140machine # [2690143.252163] machine systemd[1]: Started Name Service Cache Daemon (nsncd).141machine # [2690143.252220] machine systemd[1]: Reached target Host and Network Name Lookups.142machine # [2690143.252275] machine systemd[1]: Reached target User and Group Name Lookups.143machine # [2690143.253200] machine systemd[1]: Starting Permit User Sessions...144machine # [2690143.319983] machine systemd[1]: Finished Permit User Sessions.145machine # [2690143.321654] machine systemd[1]: Started Console Getty.146machine # [2690143.321718] machine systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0147machine # [2690143.321756] machine systemd[1]: Reached target Login Prompts.148machine # [2690143.754332] machine systemd[1]: etc-machine\x2did.mount: Deactivated successfully.149machine # [2690143.795632] machine systemd-logind[239]: New seat seat0.150machine # [2690143.795901] machine systemd[1]: Started User Login Management.151machine # [2690143.797551] machine systemd[1]: Starting D-Bus System Message Bus...152machine # [2690143.798854] machine systemd[1]: Starting linger-users.service...153machine # [2690143.855535] machine systemd[1]: linger-users.service: Deactivated successfully.154machine # [2690143.855843] machine systemd[1]: Finished linger-users.service.155machine # [2690143.930457] machine nginx-pre-start[326]: nginx: the configuration file /nix/store/rbrd4r9lh3iq8rkq3ciiriyvjx160fh7-nginx.conf syntax is ok156machine # [2690143.931018] machine nginx-pre-start[326]: nginx: configuration file /nix/store/rbrd4r9lh3iq8rkq3ciiriyvjx160fh7-nginx.conf test is successful157machine # [2690143.936876] machine systemd[1]: Started Nginx Web Server.158machine # [2690143.937206] machine systemd[1]: Reached target Multi-User System.159router # [2690143.985581] router systemd-resolved[64]: Positive Trust Anchors:160router # [2690143.985592] router systemd-resolved[64]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d161router # [2690143.985596] router systemd-resolved[64]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16162router # [2690143.985628] router systemd-resolved[64]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test163router # [2690144.005721] router systemd-resolved[64]: Using system hostname 'router'.164router # [2690144.007078] router systemd[1]: Started Network Name Resolution.165router # [2690144.007194] router systemd[1]: Reached target Network.166router # [2690144.007319] router systemd[1]: Reached target System Initialization.167router # [2690144.007426] router systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container168router # [2690144.007480] router systemd[1]: Started Daily Cleanup of Temporary Directories.169router # [2690144.007518] router systemd[1]: Reached target Timer Units.170router # [2690144.007746] router systemd[1]: Listening on D-Bus System Message Bus Socket.171router # [2690144.007955] router systemd[1]: Listening on Nix Daemon Socket.172router # [2690144.008224] router systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.173router # [2690144.008269] router systemd[1]: Reached target Socket Units.174router # [2690144.008353] router systemd[1]: Reached target Basic System.175router # [2690144.010161] router systemd[1]: Starting Import lastlog data into lastlog2 database...176router # [2690144.011656] router systemd[1]: Starting Nginx Web Server...177router # [2690144.013098] router systemd[1]: Starting Name Service Cache Daemon (nsncd)...178router # [2690144.015144] router systemd[1]: Starting D-Bus System Message Bus...179router # [2690144.034101] router systemd[1]: Finished Import lastlog data into lastlog2 database.180router # [2690144.186092] router systemd[1]: Started Name Service Cache Daemon (nsncd).181router # [2690144.186190] router systemd[1]: Reached target Host and Network Name Lookups.182router # [2690144.186350] router nsncd[87]: Oct 05 10:42:44.171 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"183router # [2690144.186299] router systemd[1]: Reached target User and Group Name Lookups.184router # [2690144.188326] router systemd[1]: Starting User Login Management...185router # [2690144.189705] router systemd[1]: Starting Permit User Sessions...186router # [2690144.203144] router systemd[1]: Finished Permit User Sessions.187router # [2690144.204698] router systemd[1]: Started Console Getty.188router # [2690144.204771] router systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0189router # [2690144.204810] router systemd[1]: Reached target Login Prompts.190router # [2690144.314444] router dbus-broker-launch[88]: Looking up NSS user entry for 'systemd-timesync'...191router # [2690144.315691] router dbus-broker-launch[88]: NSS returned no entry for 'systemd-timesync'192machine # [2690144.136224] machine dbus-broker-launch[322]: Looking up NSS user entry for 'systemd-timesync'...193machine # [2690144.137545] machine dbus-broker-launch[322]: NSS returned no entry for 'systemd-timesync'194machine # [2690144.137545] machine dbus-broker-launch[322]: Invalid user-name in /nix/store/bimfj5hslljrb2dvw7d808lr6lzzp2k3-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"195machine # [2690144.138025] machine systemd[1]: Started D-Bus System Message Bus.196machine # [2690144.138453] machine systemd[1]: Startup finished in 1.855s.197machine # [2690144.146733] machine dbus-broker-launch[322]: Ready198router # [2690144.315691] router dbus-broker-launch[88]: Invalid user-name in /nix/store/yaqxlc5b95jyggpxmba6zwavzgw1l2cd-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"199router # [2690144.316223] router systemd[1]: Started D-Bus System Message Bus.200router # [2690144.323690] router dbus-broker-launch[88]: Ready201router # [2690144.612147] router systemd-networkd[70]: eth1: Gained IPv6LL202router # [2690144.857046] router nginx-pre-start[117]: nginx: the configuration file /nix/store/c6kyqxh5q3bfawa27n0rqih6f6fa1paj-nginx.conf syntax is ok203router # [2690144.857564] router nginx-pre-start[117]: nginx: configuration file /nix/store/c6kyqxh5q3bfawa27n0rqih6f6fa1paj-nginx.conf test is successful204router: (finished: waiting for unit multi-user.target, in 3.17 seconds)205router: waiting for unit nginx.service206router: (finished: waiting for unit nginx.service, in 0.02 seconds)207machine: waiting for unit multi-user.target208machine: (finished: waiting for unit multi-user.target, in 0.02 seconds)209machine: waiting for unit nginx.service210machine: (finished: waiting for unit nginx.service, in 0.02 seconds)211router: must succeed: ip -4 addr show eth1 | grep -oP '(?<=inet\s)\d+(\.\d+){3}'212router: (finished: must succeed: ip -4 addr show eth1 | grep -oP '(?<=inet\s)\d+(\.\d+){3}', in 0.01 seconds)213router: must succeed: ip -6 addr show eth1 | grep -oP '(?<=inet6\s)[0-9a-f:]+' | grep -v '^fe80' | head -1214router: (finished: must succeed: ip -6 addr show eth1 | grep -oP '(?<=inet6\s)[0-9a-f:]+' | grep -v '^fe80' | head -1, in 0.01 seconds)215Router IPv4: 192.168.1.2216Router IPv6: 2001:db8:1::2217machine: must succeed: systemctl restart firewall218router # [2690144.862659] router systemd[1]: Started Nginx Web Server.219router # [2690144.915417] router systemd-logind[106]: New seat seat0.220router # [2690144.915949] router systemd[1]: Started User Login Management.221router # [2690144.917662] router systemd[1]: Starting linger-users.service...222router # [2690144.932577] router systemd[1]: linger-users.service: Deactivated successfully.223router # [2690144.932801] router systemd[1]: Finished linger-users.service.224router # [2690144.933286] router systemd[1]: Reached target Multi-User System.225router # [2690144.933534] router systemd[1]: Startup finished in 2.657s.226machine # [2690145.068254] machine systemd[1]: Stopping Firewall...227machine # [2690145.449672] machine systemd[1]: firewall.service: Deactivated successfully.228machine # [2690145.449940] machine systemd[1]: Stopped Firewall.229machine # [2690145.451641] machine systemd[1]: Starting Firewall...230machine: (finished: must succeed: systemctl restart firewall, in 1.37 seconds)231machine: waiting for unit firewall.service232machine: (finished: waiting for unit firewall.service, in 0.02 seconds)233machine: must succeed: iptables -L user-firewall-output >&2234Chain user-firewall-output (1 references)235target prot opt source destination 236RETURN all -- anywhere anywhere 237RETURN all -- anywhere anywhere 238RETURN all -- anywhere anywhere 239RETURN all -- anywhere anywhere 240RETURN all -- anywhere anywhere 241RETURN all -- anywhere anywhere 242RETURN all -- anywhere anywhere 243RETURN all -- anywhere anywhere 244RETURN all -- anywhere anywhere 245RETURN all -- anywhere anywhere 246RETURN all -- anywhere anywhere 247RETURN all -- anywhere anywhere 248RETURN all -- anywhere anywhere 249RETURN all -- anywhere anywhere 250RETURN all -- anywhere anywhere 251REJECT all -- anywhere anywhere owner UID match bob reject-with icmp-port-unreachable252RETURN all -- anywhere anywhere 253machine: (finished: must succeed: iptables -L user-firewall-output >&2, in 0.01 seconds)254machine: waiting for success: runuser -u alice -- curl -s http://127.0.0.1:8080255machine: (finished: waiting for success: runuser -u alice -- curl -s http://127.0.0.1:8080, in 0.02 seconds)256machine: must succeed: runuser -u alice -- curl -s http://192.168.1.2257machine: (finished: must succeed: runuser -u alice -- curl -s http://192.168.1.2, in 0.02 seconds)258machine: must succeed: runuser -u alice -- curl -s http://[2001:db8:1::2]259machine: (finished: must succeed: runuser -u alice -- curl -s http://[2001:db8:1::2], in 0.02 seconds)260machine: must succeed: runuser -u bob -- curl -s http://127.0.0.1:8080261machine: (finished: must succeed: runuser -u bob -- curl -s http://127.0.0.1:8080, in 0.02 seconds)262machine: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://192.168.1.2 2>&1 || echo 'EXIT_CODE='$?263machine: (finished: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://192.168.1.2 2>&1 || echo 'EXIT_CODE='$?, in 0.02 seconds)264machine: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://[2001:db8:1::2] 2>&1 || echo 'EXIT_CODE='$?265machine # [2690146.417017] machine systemd[1]: Finished Firewall.266machine # [2690146.458781] machine runuser[485]: pam_unix(runuser:session): session opened for user alice(uid=1001) by (uid=0)267machine # [2690146.469430] machine runuser[485]: pam_unix(runuser:session): session closed for user alice268machine # [2690146.479378] machine runuser[487]: pam_unix(runuser:session): session opened for user alice(uid=1001) by (uid=0)269machine # [2690146.490924] machine runuser[487]: pam_unix(runuser:session): session closed for user alice270machine # [2690146.501039] machine runuser[489]: pam_unix(runuser:session): session opened for user alice(uid=1001) by (uid=0)271machine # [2690146.511495] machine runuser[489]: pam_unix(runuser:session): session closed for user alice272machine # [2690146.521900] machine runuser[491]: pam_unix(runuser:session): session opened for user bob(uid=1002) by (uid=0)273machine # [2690146.532686] machine runuser[491]: pam_unix(runuser:session): session closed for user bob274machine # [2690146.545014] machine runuser[494]: pam_unix(runuser:session): session opened for user bob(uid=1002) by (uid=0)275machine # [2690146.554929] machine runuser[494]: pam_unix(runuser:session): session closed for user bob276machine # [2690146.566062] machine runuser[497]: pam_unix(runuser:session): session opened for user bob(uid=1002) by (uid=0)277machine: (finished: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://[2001:db8:1::2] 2>&1 || echo 'EXIT_CODE='$?, in 1.03 seconds)278machine: must succeed: iptables -L user-firewall-output -n -v279machine: (finished: must succeed: iptables -L user-firewall-output -n -v, in 0.01 seconds)280machine: must succeed: ip6tables -L user-firewall-output -n -v281machine: (finished: must succeed: ip6tables -L user-firewall-output -n -v, in 0.01 seconds)282machine: waiting for unit setup-wg0-interface.service283machine: (finished: waiting for unit setup-wg0-interface.service, in 0.02 seconds)284machine: waiting for unit nginx.service285machine: (finished: waiting for unit nginx.service, in 0.02 seconds)286machine: waiting for TCP port 8081 on 10.100.0.2287Connection to 10.100.0.2 8081 port [tcp/sunproxyadmin] succeeded!288machine: (finished: waiting for TCP port 8081 on 10.100.0.2, in 0.01 seconds)289machine: must succeed: ip link show wg0290machine: (finished: must succeed: ip link show wg0, in 0.01 seconds)291machine: must succeed: ip addr show wg0292machine: (finished: must succeed: ip addr show wg0, in 0.01 seconds)293machine: must succeed: runuser -u alice -- curl -s --interface wg0 http://10.100.0.2:8081/294machine: (finished: must succeed: runuser -u alice -- curl -s --interface wg0 http://10.100.0.2:8081/, in 0.02 seconds)295machine: must succeed: runuser -u alice -- curl -s --interface wg0 http://[fd00::2]:8081/296machine: (finished: must succeed: runuser -u alice -- curl -s --interface wg0 http://[fd00::2]:8081/, in 0.02 seconds)297machine: must succeed: runuser -u bob -- curl -s --interface wg0 http://10.100.0.2:8081/298machine: (finished: must succeed: runuser -u bob -- curl -s --interface wg0 http://10.100.0.2:8081/, in 0.02 seconds)299machine: must succeed: runuser -u bob -- curl -s --interface wg0 http://[fd00::2]:8081/300machine: (finished: must succeed: runuser -u bob -- curl -s --interface wg0 http://[fd00::2]:8081/, in 0.02 seconds)301machine: must succeed: iptables -L user-firewall-output -n -v | grep -E 'wg0|wg\+' >&2302 0 0 RETURN all -- * wg+ 0.0.0.0/0 0.0.0.0/0 303machine: (finished: must succeed: iptables -L user-firewall-output -n -v | grep -E 'wg0|wg\+' >&2, in 0.01 seconds)304(finished: run the VM test script, in 5.97 seconds)305test script finished in 5.99s306cleanup307kill NspawnMachine (pid 52)308kill NspawnMachine (pid 53)309Container machine terminated by signal KILL.310Container router terminated by signal KILL.311(finished: cleanup, in 0.43 seconds)