don't know how to build these paths: /nix/store/jpm3g4395l3fxkb648izr4yc2azzpwyi-container-test-run-certificates.drv warning: ignoring the client-specified setting 'store', because it is a restricted setting and you are not a trusted user building '/nix/store/naiw1nighwj749zk3r4xhzracrn8cnf4-nginx.conf.drv' on nix-store.geninf.io:50051 nginx.conf> build01: building naiw1nighwj749zk3r4xhzracrn8cnf4-nginx.conf.drv nginx.conf> structuredAttrs is enabled nginx.conf> nginx.conf> ==================== Results =================== nginx.conf> No issues found. nginx.conf> nginx.conf> ==================== Summary =================== nginx.conf> Total issues: nginx.conf> Unspecified: 0 nginx.conf> Low: 0 nginx.conf> Medium: 0 nginx.conf> High: 0 nginx.conf> building '/nix/store/gq2s2d8m3l2fvyhpqgjban4hs6p40mfl-nginx.conf.drv' on nix-store.geninf.io:50051 nginx.conf> build01: building gq2s2d8m3l2fvyhpqgjban4hs6p40mfl-nginx.conf.drv nginx.conf> structuredAttrs is enabled nginx.conf> nginx.conf> ==================== Results =================== nginx.conf> No issues found. nginx.conf> nginx.conf> ==================== Summary =================== nginx.conf> Total issues: nginx.conf> Unspecified: 0 nginx.conf> Low: 0 nginx.conf> Medium: 0 nginx.conf> High: 0 nginx.conf> building '/nix/store/d4y03p2q9x0pmq1486cl77cw7jsls24p-unit-script-nginx-pre-start.drv' on nix-store.geninf.io:50051 unit-script-nginx-pre-start> build01: building d4y03p2q9x0pmq1486cl77cw7jsls24p-unit-script-nginx-pre-start.drv unit-script-nginx-pre-start> structuredAttrs is enabled building '/nix/store/z56gghn215bc38hadrplz5lzw12rjqgi-unit-script-nginx-pre-start.drv' on nix-store.geninf.io:50051 unit-script-nginx-pre-start> build01: building z56gghn215bc38hadrplz5lzw12rjqgi-unit-script-nginx-pre-start.drv unit-script-nginx-pre-start> structuredAttrs is enabled 0c989ils1pfksip1mkd7m4xk42rpbb6g-user-units.drv: build01: not scheduled here: 0c989ils1pfksip1mkd7m4xk42rpbb6g-user-units.drv, asking the scheduler again building '/nix/store/ajjy70a1k5177d436lrib4i85z5977sm-nixos-test-driver-1.1.drv' on nix-store.geninf.io:50051 nixos-test-driver-1.1> build01: building ajjy70a1k5177d436lrib4i85z5977sm-nixos-test-driver-1.1.drv nixos-test-driver-1.1> Sourcing python-remove-tests-dir-hook nixos-test-driver-1.1> Sourcing python-catch-conflicts-hook.sh nixos-test-driver-1.1> Sourcing python-remove-bin-bytecode-hook.sh nixos-test-driver-1.1> Sourcing pypa-build-hook nixos-test-driver-1.1> Using pypaBuildPhase nixos-test-driver-1.1> Sourcing python-runtime-deps-check-hook nixos-test-driver-1.1> Using pythonRuntimeDepsCheckHook nixos-test-driver-1.1> Sourcing pypa-install-hook nixos-test-driver-1.1> Using pypaInstallPhase nixos-test-driver-1.1> Sourcing python-imports-check-hook.sh nixos-test-driver-1.1> Using pythonImportsCheckPhase nixos-test-driver-1.1> Sourcing python-namespaces-hook nixos-test-driver-1.1> Sourcing python-catch-conflicts-hook.sh nixos-test-driver-1.1> Running phase: unpackPhase nixos-test-driver-1.1> unpacking source archive /nix/store/77bky4iifk87n5xbwf870ac3kk2li2qz-src nixos-test-driver-1.1> source root is src nixos-test-driver-1.1> setting SOURCE_DATE_EPOCH to timestamp 315619200 of file "src/test_driver/vlan.py" nixos-test-driver-1.1> Running phase: patchPhase nixos-test-driver-1.1> Running phase: updateAutotoolsGnuConfigScriptsPhase nixos-test-driver-1.1> Running phase: configurePhase nixos-test-driver-1.1> no configure script, doing nothing nixos-test-driver-1.1> Running phase: buildPhase nixos-test-driver-1.1> Executing pypaBuildPhase nixos-test-driver-1.1> Creating a wheel... nixos-test-driver-1.1> pypa build flags: --no-isolation --outdir dist/ --wheel nixos-test-driver-1.1> * Getting build dependencies for wheel... nixos-test-driver-1.1> running egg_info nixos-test-driver-1.1> creating nixos_test_driver.egg-info nixos-test-driver-1.1> writing nixos_test_driver.egg-info/PKG-INFO nixos-test-driver-1.1> writing dependency_links to nixos_test_driver.egg-info/dependency_links.txt nixos-test-driver-1.1> writing entry points to nixos_test_driver.egg-info/entry_points.txt nixos-test-driver-1.1> writing top-level names to nixos_test_driver.egg-info/top_level.txt nixos-test-driver-1.1> writing manifest file 'nixos_test_driver.egg-info/SOURCES.txt' nixos-test-driver-1.1> reading manifest file 'nixos_test_driver.egg-info/SOURCES.txt' nixos-test-driver-1.1> writing manifest file 'nixos_test_driver.egg-info/SOURCES.txt' nixos-test-driver-1.1> * Building wheel... building '/nix/store/0c989ils1pfksip1mkd7m4xk42rpbb6g-user-units.drv' on nix-store.geninf.io:50051 user-units> build01: building 0c989ils1pfksip1mkd7m4xk42rpbb6g-user-units.drv nixos-test-driver-1.1> running bdist_wheel nixos-test-driver-1.1> running build nixos-test-driver-1.1> running build_py nixos-test-driver-1.1> creating build/lib/test_driver nixos-test-driver-1.1> copying test_driver/debug.py -> build/lib/test_driver nixos-test-driver-1.1> copying test_driver/__init__.py -> build/lib/test_driver nixos-test-driver-1.1> copying test_driver/errors.py -> build/lib/test_driver nixos-test-driver-1.1> copying test_driver/logger.py -> build/lib/test_driver nixos-test-driver-1.1> copying test_driver/driver.py -> build/lib/test_driver nixos-test-driver-1.1> copying test_driver/vlan.py -> build/lib/test_driver nixos-test-driver-1.1> copying test_driver/efi.py -> build/lib/test_driver nixos-test-driver-1.1> copying test_driver/duration.py -> build/lib/test_driver nixos-test-driver-1.1> copying test_driver/polling_condition.py -> build/lib/test_driver nixos-test-driver-1.1> creating build/lib/test_driver/machine nixos-test-driver-1.1> copying test_driver/machine/__init__.py -> build/lib/test_driver/machine nixos-test-driver-1.1> copying test_driver/machine/ocr.py -> build/lib/test_driver/machine nixos-test-driver-1.1> copying test_driver/machine/qmp.py -> build/lib/test_driver/machine nixos-test-driver-1.1> running egg_info nixos-test-driver-1.1> writing nixos_test_driver.egg-info/PKG-INFO nixos-test-driver-1.1> writing dependency_links to nixos_test_driver.egg-info/dependency_links.txt nixos-test-driver-1.1> writing entry points to nixos_test_driver.egg-info/entry_points.txt nixos-test-driver-1.1> writing top-level names to nixos_test_driver.egg-info/top_level.txt nixos-test-driver-1.1> reading manifest file 'nixos_test_driver.egg-info/SOURCES.txt' nixos-test-driver-1.1> writing manifest file 'nixos_test_driver.egg-info/SOURCES.txt' nixos-test-driver-1.1> copying test_driver/py.typed -> build/lib/test_driver nixos-test-driver-1.1> installing to build/bdist.linux-aarch64/wheel nixos-test-driver-1.1> running install nixos-test-driver-1.1> running install_lib nixos-test-driver-1.1> creating build/bdist.linux-aarch64/wheel nixos-test-driver-1.1> creating build/bdist.linux-aarch64/wheel/test_driver nixos-test-driver-1.1> copying build/lib/test_driver/debug.py -> build/bdist.linux-aarch64/wheel/./test_driver nixos-test-driver-1.1> copying build/lib/test_driver/__init__.py -> build/bdist.linux-aarch64/wheel/./test_driver nixos-test-driver-1.1> copying build/lib/test_driver/errors.py -> build/bdist.linux-aarch64/wheel/./test_driver nixos-test-driver-1.1> creating build/bdist.linux-aarch64/wheel/test_driver/machine nixos-test-driver-1.1> copying build/lib/test_driver/machine/__init__.py -> build/bdist.linux-aarch64/wheel/./test_driver/machine nixos-test-driver-1.1> copying build/lib/test_driver/machine/ocr.py -> build/bdist.linux-aarch64/wheel/./test_driver/machine nixos-test-driver-1.1> copying build/lib/test_driver/machine/qmp.py -> build/bdist.linux-aarch64/wheel/./test_driver/machine nixos-test-driver-1.1> copying build/lib/test_driver/logger.py -> build/bdist.linux-aarch64/wheel/./test_driver nixos-test-driver-1.1> copying build/lib/test_driver/driver.py -> build/bdist.linux-aarch64/wheel/./test_driver nixos-test-driver-1.1> copying build/lib/test_driver/vlan.py -> build/bdist.linux-aarch64/wheel/./test_driver nixos-test-driver-1.1> copying build/lib/test_driver/efi.py -> build/bdist.linux-aarch64/wheel/./test_driver nixos-test-driver-1.1> copying build/lib/test_driver/duration.py -> build/bdist.linux-aarch64/wheel/./test_driver nixos-test-driver-1.1> copying build/lib/test_driver/py.typed -> build/bdist.linux-aarch64/wheel/./test_driver nixos-test-driver-1.1> copying build/lib/test_driver/polling_condition.py -> build/bdist.linux-aarch64/wheel/./test_driver nixos-test-driver-1.1> running install_egg_info nixos-test-driver-1.1> Copying nixos_test_driver.egg-info to build/bdist.linux-aarch64/wheel/./nixos_test_driver-0.0.0-py3.14.egg-info nixos-test-driver-1.1> running install_scripts nixos-test-driver-1.1> creating build/bdist.linux-aarch64/wheel/nixos_test_driver-0.0.0.dist-info/WHEEL nixos-test-driver-1.1> creating '/build/src/dist/.tmp-hm7pm3oz/nixos_test_driver-0.0.0-py3-none-any.whl' and adding 'build/bdist.linux-aarch64/wheel' to it nixos-test-driver-1.1> adding 'test_driver/__init__.py' nixos-test-driver-1.1> adding 'test_driver/debug.py' nixos-test-driver-1.1> adding 'test_driver/driver.py' nixos-test-driver-1.1> adding 'test_driver/duration.py' nixos-test-driver-1.1> adding 'test_driver/efi.py' nixos-test-driver-1.1> adding 'test_driver/errors.py' nixos-test-driver-1.1> adding 'test_driver/logger.py' nixos-test-driver-1.1> adding 'test_driver/polling_condition.py' nixos-test-driver-1.1> adding 'test_driver/py.typed' nixos-test-driver-1.1> adding 'test_driver/vlan.py' nixos-test-driver-1.1> adding 'test_driver/machine/__init__.py' nixos-test-driver-1.1> adding 'test_driver/machine/ocr.py' nixos-test-driver-1.1> adding 'test_driver/machine/qmp.py' nixos-test-driver-1.1> adding 'nixos_test_driver-0.0.0.dist-info/METADATA' nixos-test-driver-1.1> adding 'nixos_test_driver-0.0.0.dist-info/WHEEL' nixos-test-driver-1.1> adding 'nixos_test_driver-0.0.0.dist-info/entry_points.txt' nixos-test-driver-1.1> adding 'nixos_test_driver-0.0.0.dist-info/top_level.txt' nixos-test-driver-1.1> adding 'nixos_test_driver-0.0.0.dist-info/RECORD' nixos-test-driver-1.1> removing build/bdist.linux-aarch64/wheel nixos-test-driver-1.1> Successfully built nixos_test_driver-0.0.0-py3-none-any.whl nixos-test-driver-1.1> Finished creating a wheel... nixos-test-driver-1.1> Finished executing pypaBuildPhase nixos-test-driver-1.1> Running phase: pythonRuntimeDepsCheckHook nixos-test-driver-1.1> Executing pythonRuntimeDepsCheck nixos-test-driver-1.1> Checking runtime dependencies for nixos_test_driver-0.0.0-py3-none-any.whl nixos-test-driver-1.1> Finished executing pythonRuntimeDepsCheck nixos-test-driver-1.1> Running phase: installPhase nixos-test-driver-1.1> Executing pypaInstallPhase nixos-test-driver-1.1> Successfully installed nixos_test_driver-0.0.0-py3-none-any.whl nixos-test-driver-1.1> Finished executing pypaInstallPhase nixos-test-driver-1.1> Running phase: pythonOutputDistPhase nixos-test-driver-1.1> Executing pythonOutputDistPhase nixos-test-driver-1.1> Finished executing pythonOutputDistPhase nixos-test-driver-1.1> Running phase: fixupPhase nixos-test-driver-1.1> shrinking RPATHs of ELF executables and libraries in /nix/store/x4i03lhka9aiwxswmbhjfzzbl77nlxmj-nixos-test-driver-1.1 nixos-test-driver-1.1> checking for references to /build/ in /nix/store/x4i03lhka9aiwxswmbhjfzzbl77nlxmj-nixos-test-driver-1.1... nixos-test-driver-1.1> patching script interpreter paths in /nix/store/x4i03lhka9aiwxswmbhjfzzbl77nlxmj-nixos-test-driver-1.1 nixos-test-driver-1.1> stripping (with command strip and flags -S -p) in /nix/store/x4i03lhka9aiwxswmbhjfzzbl77nlxmj-nixos-test-driver-1.1/lib /nix/store/x4i03lhka9aiwxswmbhjfzzbl77nlxmj-nixos-test-driver-1.1/bin nixos-test-driver-1.1> shrinking RPATHs of ELF executables and libraries in /nix/store/j1lzkff50nr16vdj4i3yiq8jymll5zi3-nixos-test-driver-1.1-dist nixos-test-driver-1.1> checking for references to /build/ in /nix/store/j1lzkff50nr16vdj4i3yiq8jymll5zi3-nixos-test-driver-1.1-dist... nixos-test-driver-1.1> patching script interpreter paths in /nix/store/j1lzkff50nr16vdj4i3yiq8jymll5zi3-nixos-test-driver-1.1-dist nixos-test-driver-1.1> Rewriting #!/nix/store/81ag9nxz1flw3xjkv1vvqg8y2ipx2ins-python3-3.14.7/bin/python3.14 to #!/nix/store/81ag9nxz1flw3xjkv1vvqg8y2ipx2ins-python3-3.14.7 nixos-test-driver-1.1> wrapping `/nix/store/x4i03lhka9aiwxswmbhjfzzbl77nlxmj-nixos-test-driver-1.1/bin/nixos-test-driver'... nixos-test-driver-1.1> Executing pythonRemoveTestsDir nixos-test-driver-1.1> Finished executing pythonRemoveTestsDir nixos-test-driver-1.1> Running phase: installCheckPhase nixos-test-driver-1.1> ## run ty nixos-test-driver-1.1> All checks passed! nixos-test-driver-1.1> ## run ruff check nixos-test-driver-1.1> All checks passed! nixos-test-driver-1.1> ## run ruff format nixos-test-driver-1.1> 25 files already formatted nixos-test-driver-1.1> Running phase: pythonCatchConflictsPhase nixos-test-driver-1.1> Running phase: pythonRemoveBinBytecodePhase nixos-test-driver-1.1> Running phase: pythonImportsCheckPhase nixos-test-driver-1.1> Executing pythonImportsCheckPhase fk1367a50p1haslwq194x8pmadfklf5l-system-path.drv: build01: not scheduled here: fk1367a50p1haslwq194x8pmadfklf5l-system-path.drv, asking the scheduler again building '/nix/store/fk1367a50p1haslwq194x8pmadfklf5l-system-path.drv' on nix-store.geninf.io:50051 system-path> build01: building fk1367a50p1haslwq194x8pmadfklf5l-system-path.drv system-path> structuredAttrs is enabled system-path> created 1716 symlinks in user environment 4r12v1k9n2fwan1mfis6x58akyl55j65-system-path.drv: build01: not scheduled here: 4r12v1k9n2fwan1mfis6x58akyl55j65-system-path.drv, asking the scheduler again building '/nix/store/4r12v1k9n2fwan1mfis6x58akyl55j65-system-path.drv' on nix-store.geninf.io:50051 system-path> build01: building 4r12v1k9n2fwan1mfis6x58akyl55j65-system-path.drv system-path> structuredAttrs is enabled system-path> created 1716 symlinks in user environment 0br6pix948wl0p5cj4xm3lf4wyhkwl95-unit-nginx.service.drv: build01: not scheduled here: 0br6pix948wl0p5cj4xm3lf4wyhkwl95-unit-nginx.service.drv, asking the scheduler again building '/nix/store/0br6pix948wl0p5cj4xm3lf4wyhkwl95-unit-nginx.service.drv' on nix-store.geninf.io:50051 unit-nginx.service> build01: building 0br6pix948wl0p5cj4xm3lf4wyhkwl95-unit-nginx.service.drv unit-nginx.service> structuredAttrs is enabled r8vdig2c568p8d91s73dl91jif2vsij6-unit-nginx.service.drv: build01: not scheduled here: r8vdig2c568p8d91s73dl91jif2vsij6-unit-nginx.service.drv, asking the scheduler again building '/nix/store/r8vdig2c568p8d91s73dl91jif2vsij6-unit-nginx.service.drv' on nix-store.geninf.io:50051 unit-nginx.service> build01: building r8vdig2c568p8d91s73dl91jif2vsij6-unit-nginx.service.drv unit-nginx.service> structuredAttrs is enabled cnfmrhx7y18ljl88yfskdsdb6lpnrp6a-dbus-1.drv: build01: not scheduled here: cnfmrhx7y18ljl88yfskdsdb6lpnrp6a-dbus-1.drv, asking the scheduler again building '/nix/store/cnfmrhx7y18ljl88yfskdsdb6lpnrp6a-dbus-1.drv' on nix-store.geninf.io:50051 dbus-1> build01: building cnfmrhx7y18ljl88yfskdsdb6lpnrp6a-dbus-1.drv slirv552jqyn9v5av7d7a5228s88ld03-dbus-1.drv: build01: not scheduled here: slirv552jqyn9v5av7d7a5228s88ld03-dbus-1.drv, asking the scheduler again building '/nix/store/slirv552jqyn9v5av7d7a5228s88ld03-dbus-1.drv' on nix-store.geninf.io:50051 dbus-1> build01: building slirv552jqyn9v5av7d7a5228s88ld03-dbus-1.drv jk5ixbl0nzf6x8r777q2af02j0d3rpqi-system-units.drv: build01: not scheduled here: jk5ixbl0nzf6x8r777q2af02j0d3rpqi-system-units.drv, asking the scheduler again building '/nix/store/jk5ixbl0nzf6x8r777q2af02j0d3rpqi-system-units.drv' on nix-store.geninf.io:50051 system-units> build01: building jk5ixbl0nzf6x8r777q2af02j0d3rpqi-system-units.drv dbvgkd4sjzh6cwfccg0xrjyypprb08a7-X-Restart-Triggers-dbus-broker.drv: build01: not scheduled here: dbvgkd4sjzh6cwfccg0xrjyypprb08a7-X-Restart-Triggers-dbus-broker.drv, asking the scheduler again building '/nix/store/dbvgkd4sjzh6cwfccg0xrjyypprb08a7-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-dbus-broker> build01: building dbvgkd4sjzh6cwfccg0xrjyypprb08a7-X-Restart-Triggers-dbus-broker.drv X-Restart-Triggers-dbus-broker> structuredAttrs is enabled d0n5qddz3p2cxi5mkizzfgb4z45pp3cd-X-Restart-Triggers-dbus-broker.drv: build01: not scheduled here: d0n5qddz3p2cxi5mkizzfgb4z45pp3cd-X-Restart-Triggers-dbus-broker.drv, asking the scheduler again building '/nix/store/d0n5qddz3p2cxi5mkizzfgb4z45pp3cd-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-dbus-broker> build01: building d0n5qddz3p2cxi5mkizzfgb4z45pp3cd-X-Restart-Triggers-dbus-broker.drv X-Restart-Triggers-dbus-broker> structuredAttrs is enabled a3x3q5zr3y7nwgy3b1syn78130v16lv3-etc.drv: build01: not scheduled here: a3x3q5zr3y7nwgy3b1syn78130v16lv3-etc.drv, asking the scheduler again building '/nix/store/a3x3q5zr3y7nwgy3b1syn78130v16lv3-etc.drv' on nix-store.geninf.io:50051 etc> build01: building a3x3q5zr3y7nwgy3b1syn78130v16lv3-etc.drv building '/nix/store/p872ch7dqhj89im8bjp0p6c25zynczyx-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build01: building p872ch7dqhj89im8bjp0p6c25zynczyx-unit-dbus-broker.service.drv unit-dbus-broker.service> structuredAttrs is enabled yzmcjqpyg408zsp3s7wg0k2rj4ybc0zh-unit-dbus-broker.service.drv: build01: not scheduled here: yzmcjqpyg408zsp3s7wg0k2rj4ybc0zh-unit-dbus-broker.service.drv, asking the scheduler again building '/nix/store/yzmcjqpyg408zsp3s7wg0k2rj4ybc0zh-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build01: building yzmcjqpyg408zsp3s7wg0k2rj4ybc0zh-unit-dbus-broker.service.drv unit-dbus-broker.service> structuredAttrs is enabled 7rwv49f124dwf2zbyy1lm7f1g4hpx3sn-activate.drv: build01: not scheduled here: 7rwv49f124dwf2zbyy1lm7f1g4hpx3sn-activate.drv, asking the scheduler again xdic9b55ym88l7h162civixmh5byg4si-unit-dbus-broker.service.drv: build01: not scheduled here: xdic9b55ym88l7h162civixmh5byg4si-unit-dbus-broker.service.drv, asking the scheduler again building '/nix/store/7rwv49f124dwf2zbyy1lm7f1g4hpx3sn-activate.drv' on nix-store.geninf.io:50051 activate> build01: building 7rwv49f124dwf2zbyy1lm7f1g4hpx3sn-activate.drv activate> structuredAttrs is enabled ldcwq7bsdifhjb8p7mnzhmvhcvk7zpd2-unit-dbus-broker.service.drv: build01: not scheduled here: ldcwq7bsdifhjb8p7mnzhmvhcvk7zpd2-unit-dbus-broker.service.drv, asking the scheduler again building '/nix/store/xdic9b55ym88l7h162civixmh5byg4si-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build01: building xdic9b55ym88l7h162civixmh5byg4si-unit-dbus-broker.service.drv unit-dbus-broker.service> structuredAttrs is enabled building '/nix/store/ldcwq7bsdifhjb8p7mnzhmvhcvk7zpd2-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build01: building ldcwq7bsdifhjb8p7mnzhmvhcvk7zpd2-unit-dbus-broker.service.drv unit-dbus-broker.service> structuredAttrs is enabled 4fhnsn2mcx2mrqmkn25c3grs8ikksfin-user-units.drv: build01: not scheduled here: 4fhnsn2mcx2mrqmkn25c3grs8ikksfin-user-units.drv, asking the scheduler again building '/nix/store/4fhnsn2mcx2mrqmkn25c3grs8ikksfin-user-units.drv' on nix-store.geninf.io:50051 user-units> build01: building 4fhnsn2mcx2mrqmkn25c3grs8ikksfin-user-units.drv nz7b1bm6ylf4l52szkqcmqll71k59js8-system-units.drv: build01: not scheduled here: nz7b1bm6ylf4l52szkqcmqll71k59js8-system-units.drv, asking the scheduler again h7ilj3nx9mig1408xypassfnqzvvfh2z-user-units.drv: build01: not scheduled here: h7ilj3nx9mig1408xypassfnqzvvfh2z-user-units.drv, asking the scheduler again bm00n8mn5q9cdddy5l2rfkbjfnynl524-nixos-system-server-test.drv: build01: not scheduled here: bm00n8mn5q9cdddy5l2rfkbjfnynl524-nixos-system-server-test.drv, asking the scheduler again building '/nix/store/nz7b1bm6ylf4l52szkqcmqll71k59js8-system-units.drv' on nix-store.geninf.io:50051 system-units> build01: building nz7b1bm6ylf4l52szkqcmqll71k59js8-system-units.drv 4n93v0cl5ya4viq5yc8byibhgk9ndn29-system-units.drv: build01: not scheduled here: 4n93v0cl5ya4viq5yc8byibhgk9ndn29-system-units.drv, asking the scheduler again building '/nix/store/h7ilj3nx9mig1408xypassfnqzvvfh2z-user-units.drv' on nix-store.geninf.io:50051 user-units> build01: building h7ilj3nx9mig1408xypassfnqzvvfh2z-user-units.drv building '/nix/store/bm00n8mn5q9cdddy5l2rfkbjfnynl524-nixos-system-server-test.drv' on nix-store.geninf.io:50051 nixos-system-server-test> build01: building bm00n8mn5q9cdddy5l2rfkbjfnynl524-nixos-system-server-test.drv nixos-system-server-test> structuredAttrs is enabled building '/nix/store/4n93v0cl5ya4viq5yc8byibhgk9ndn29-system-units.drv' on nix-store.geninf.io:50051 system-units> build01: building 4n93v0cl5ya4viq5yc8byibhgk9ndn29-system-units.drv sdfsin7b3s5ah2kg719jpv28j9qni0zy-etc.drv: build01: not scheduled here: sdfsin7b3s5ah2kg719jpv28j9qni0zy-etc.drv, asking the scheduler again ngv4zcqkr5a0ab030lknsnypxsh6xgvs-run-server-nspawn.drv: build01: not scheduled here: ngv4zcqkr5a0ab030lknsnypxsh6xgvs-run-server-nspawn.drv, asking the scheduler again jdj12vsnvxv9k0l1y1w59zpqpr4f4kw3-etc.drv: build01: not scheduled here: jdj12vsnvxv9k0l1y1w59zpqpr4f4kw3-etc.drv, asking the scheduler again building '/nix/store/sdfsin7b3s5ah2kg719jpv28j9qni0zy-etc.drv' on nix-store.geninf.io:50051 etc> build01: building sdfsin7b3s5ah2kg719jpv28j9qni0zy-etc.drv building '/nix/store/ngv4zcqkr5a0ab030lknsnypxsh6xgvs-run-server-nspawn.drv' on nix-store.geninf.io:50051 run-server-nspawn> build01: building ngv4zcqkr5a0ab030lknsnypxsh6xgvs-run-server-nspawn.drv building '/nix/store/jdj12vsnvxv9k0l1y1w59zpqpr4f4kw3-etc.drv' on nix-store.geninf.io:50051 etc> build01: building jdj12vsnvxv9k0l1y1w59zpqpr4f4kw3-etc.drv w2ndbpm78mwy2ycc2qyx9sqs3fgqbkhs-activate.drv: build01: not scheduled here: w2ndbpm78mwy2ycc2qyx9sqs3fgqbkhs-activate.drv, asking the scheduler again pzklqns4n0qnvd415cr7cx5fr7b16hvq-activate.drv: build01: not scheduled here: pzklqns4n0qnvd415cr7cx5fr7b16hvq-activate.drv, asking the scheduler again building '/nix/store/w2ndbpm78mwy2ycc2qyx9sqs3fgqbkhs-activate.drv' on nix-store.geninf.io:50051 activate> build01: building w2ndbpm78mwy2ycc2qyx9sqs3fgqbkhs-activate.drv activate> structuredAttrs is enabled building '/nix/store/pzklqns4n0qnvd415cr7cx5fr7b16hvq-activate.drv' on nix-store.geninf.io:50051 activate> build01: building pzklqns4n0qnvd415cr7cx5fr7b16hvq-activate.drv activate> structuredAttrs is enabled pb0azp4jsxz6wzc4vg2q4wil54ra149i-nixos-system-ca-test.drv: build01: not scheduled here: pb0azp4jsxz6wzc4vg2q4wil54ra149i-nixos-system-ca-test.drv, asking the scheduler again dfd4gfzj8r1b3gj7xnj14kgpbl3w21c0-nixos-system-client-test.drv: build01: not scheduled here: dfd4gfzj8r1b3gj7xnj14kgpbl3w21c0-nixos-system-client-test.drv, asking the scheduler again building '/nix/store/pb0azp4jsxz6wzc4vg2q4wil54ra149i-nixos-system-ca-test.drv' on nix-store.geninf.io:50051 nixos-system-ca-test> build01: building pb0azp4jsxz6wzc4vg2q4wil54ra149i-nixos-system-ca-test.drv nixos-system-ca-test> structuredAttrs is enabled building '/nix/store/dfd4gfzj8r1b3gj7xnj14kgpbl3w21c0-nixos-system-client-test.drv' on nix-store.geninf.io:50051 nixos-system-client-test> build01: building dfd4gfzj8r1b3gj7xnj14kgpbl3w21c0-nixos-system-client-test.drv nixos-system-client-test> structuredAttrs is enabled nar2mprqzx30lhmj3m40w25icaqzra4c-run-ca-nspawn.drv: build01: not scheduled here: nar2mprqzx30lhmj3m40w25icaqzra4c-run-ca-nspawn.drv, asking the scheduler again vybg0mmbq8jsspwg4w7badr63amrcldn-run-client-nspawn.drv: build01: not scheduled here: vybg0mmbq8jsspwg4w7badr63amrcldn-run-client-nspawn.drv, asking the scheduler again building '/nix/store/nar2mprqzx30lhmj3m40w25icaqzra4c-run-ca-nspawn.drv' on nix-store.geninf.io:50051 run-ca-nspawn> build01: building nar2mprqzx30lhmj3m40w25icaqzra4c-run-ca-nspawn.drv building '/nix/store/vybg0mmbq8jsspwg4w7badr63amrcldn-run-client-nspawn.drv' on nix-store.geninf.io:50051 run-client-nspawn> build01: building vybg0mmbq8jsspwg4w7badr63amrcldn-run-client-nspawn.drv 00hy87xy9gvz16nvvc1yddngnv06q8a1-driverConfiguration.json.drv: build01: not scheduled here: 00hy87xy9gvz16nvvc1yddngnv06q8a1-driverConfiguration.json.drv, asking the scheduler again building '/nix/store/00hy87xy9gvz16nvvc1yddngnv06q8a1-driverConfiguration.json.drv' on nix-store.geninf.io:50051 driverConfiguration.json> build01: building 00hy87xy9gvz16nvvc1yddngnv06q8a1-driverConfiguration.json.drv driverConfiguration.json> structuredAttrs is enabled hjmgjq4h7rl7hvsi35bhfcf9nvj2dwmi-nixos-test-driver-certificates.drv: build01: not scheduled here: hjmgjq4h7rl7hvsi35bhfcf9nvj2dwmi-nixos-test-driver-certificates.drv, asking the scheduler again building '/nix/store/hjmgjq4h7rl7hvsi35bhfcf9nvj2dwmi-nixos-test-driver-certificates.drv' on nix-store.geninf.io:50051 nixos-test-driver-certificates> build01: building hjmgjq4h7rl7hvsi35bhfcf9nvj2dwmi-nixos-test-driver-certificates.drv nixos-test-driver-certificates> Running type check (enable/disable: config.skipTypeCheck) nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck nixos-test-driver-certificates> All checks passed! nixos-test-driver-certificates> Linting test script (enable/disable: config.skipLint) nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipLint nixos-test-driver-certificates> All checks passed! jpm3g4395l3fxkb648izr4yc2azzpwyi-container-test-run-certificates.drv: build01: not scheduled here: jpm3g4395l3fxkb648izr4yc2azzpwyi-container-test-run-certificates.drv, asking the scheduler again building '/nix/store/jpm3g4395l3fxkb648izr4yc2azzpwyi-container-test-run-certificates.drv' on nix-store.geninf.io:50051 container-test-run-certificates> build01: building jpm3g4395l3fxkb648izr4yc2azzpwyi-container-test-run-certificates.drv container-test-run-certificates> Machine state will be reset. To keep it, pass --keep-machine-state container-test-run-certificates> start all VLans container-test-run-certificates> (finished: start all VLans, in 0.00 seconds) container-test-run-certificates> container-test-run-certificates> Test will time out and terminate in 3600.0 seconds container-test-run-certificates> run the VM test script container-test-run-certificates> additionally exposed symbols: container-test-run-certificates> ca, client, server, container-test-run-certificates> vlan1, container-test-run-certificates> start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh container-test-run-certificates> ca: systemd-nspawn running (pid 50) container-test-run-certificates> ca: Waiting for journal at /build/vm-state-ca/var/log/journal... container-test-run-certificates> ca: waiting for unit step-ca.service container-test-run-certificates> nixos-nspawn(ca): TAP vde-tap1 not found; container will be isolated from VDE container-test-run-certificates> nixos-nspawn(ca): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths. container-test-run-certificates> Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file. container-test-run-certificates> ░ Spawning container ca on /build/vm-state-ca. container-test-run-certificates> ca # No journal files were found. container-test-run-certificates> ca # No journal boot entry found for the specified boot (+0). container-test-run-certificates> ca # [2690128.132339] ca systemd-journald[81]: Journal started container-test-run-certificates> ca # [2690128.132390] ca systemd-journald[81]: Runtime Journal (/run/log/journal/3c15bf67df724c209e6cc58a56b36a17) is 8M, max 2.5G, 2.4G free. container-test-run-certificates> ca # [2690128.142099] ca systemd[1]: Finished Apply Kernel Variables. container-test-run-certificates> ca # [2690128.153988] ca systemd[1]: Finished Create Static Device Nodes in /dev gracefully. container-test-run-certificates> ca # [2690128.167180] ca systemd[1]: Starting Flush Journal to Persistent Storage... container-test-run-certificates> ca # [2690128.168153] ca systemd[1]: Starting Network Name Resolution... container-test-run-certificates> ca # [2690128.168803] ca systemd[1]: Starting Create Static Device Nodes in /dev... container-test-run-certificates> ca # [2690128.178314] ca systemd-journald[81]: Time spent on flushing to /var/log/journal/3c15bf67df724c209e6cc58a56b36a17 is 1.504ms for 7 entries. container-test-run-certificates> ca # [2690128.178314] ca systemd-journald[81]: System Journal (/var/log/journal/3c15bf67df724c209e6cc58a56b36a17) is 8M, max 4G, 3.9G free. container-test-run-certificates> ca # [2690128.192900] ca systemd[1]: Finished Flush Journal to Persistent Storage. container-test-run-certificates> ca # [2690128.193311] ca systemd[1]: Finished Create Static Device Nodes in /dev. container-test-run-certificates> ca # [2690128.194237] ca systemd[1]: Reached target Preparation for Local File Systems. container-test-run-certificates> ca # [2690128.194348] ca systemd[1]: Reached target Local File Systems. container-test-run-certificates> ca # [2690128.195192] ca systemd[1]: Listening on Boot Loader Control Service Socket. container-test-run-certificates> ca # [2690128.195242] ca systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> ca # [2690128.196060] ca systemd[1]: Starting Save Transient machine-id to Disk... container-test-run-certificates> ca # [2690128.196905] ca systemd[1]: Starting Create System Files and Directories... container-test-run-certificates> ca # [2690128.196936] ca systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys container-test-run-certificates> ca # [2690128.215167] ca systemd-tmpfiles[134]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted container-test-run-certificates> ca # [2690128.215375] ca systemd-tmpfiles[134]: fchmod() of /var/log/journal failed: Operation not permitted container-test-run-certificates> ca # [2690128.215514] ca systemd-tmpfiles[134]: fchmod() of /var/log/journal/3c15bf67df724c209e6cc58a56b36a17 failed: Operation not permitted container-test-run-certificates> ca # [2690128.215723] ca systemd-tmpfiles[134]: fchmod() of /run/log/journal failed: Operation not permitted container-test-run-certificates> ca # [2690128.217168] ca systemd[1]: Finished Create System Files and Directories. container-test-run-certificates> ca # [2690128.218197] ca systemd[1]: Starting Rebuild Journal Catalog... container-test-run-certificates> ca # [2690128.218891] ca systemd[1]: Starting Record System Boot/Shutdown in UTMP... container-test-run-certificates> ca # [2690128.230340] ca systemd[1]: Finished Record System Boot/Shutdown in UTMP. container-test-run-certificates> ca # [2690128.231930] ca systemd[1]: Finished Save Transient machine-id to Disk. container-test-run-certificates> ca # [2690128.240199] ca systemd[1]: Finished Rebuild Journal Catalog. container-test-run-certificates> ca # [2690128.241194] ca systemd[1]: Starting Update is Completed... container-test-run-certificates> ca # [2690128.253305] ca systemd[1]: Finished Update is Completed. container-test-run-certificates> ca # [2690128.310328] ca systemd[1]: Finished Firewall. container-test-run-certificates> ca # [2690128.310505] ca systemd[1]: Reached target Preparation for Network. container-test-run-certificates> ca # [2690128.310752] ca systemd[1]: Listening on Network Management Resolve Hook Socket. container-test-run-certificates> ca # [2690128.312000] ca systemd[1]: Starting Network Management... container-test-run-certificates> ca # [2690128.957162] ca systemd-networkd[199]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted container-test-run-certificates> ca # [2690128.957256] ca systemd-networkd[199]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted container-test-run-certificates> ca # [2690128.966656] ca systemd-networkd[199]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> ca # [2690128.966822] ca systemd-networkd[199]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> ca # [2690128.966975] ca systemd-networkd[199]: lo: Link UP container-test-run-certificates> ca # [2690128.966979] ca systemd-networkd[199]: lo: Gained carrier container-test-run-certificates> ca # [2690128.967149] ca systemd-networkd[199]: eth1: Configuring with /etc/systemd/network/40-eth1.network. container-test-run-certificates> ca # [2690128.967588] ca systemd-networkd[199]: eth1: Link UP container-test-run-certificates> ca # [2690128.967960] ca systemd[1]: Started Network Management. container-test-run-certificates> ca # [2690128.968861] ca systemd-networkd[199]: eth1: Gained carrier container-test-run-certificates> ca # [2690128.969063] ca systemd[1]: Starting Enable Persistent Storage in systemd-networkd... container-test-run-certificates> ca # [2690129.009494] ca systemd[1]: Finished Enable Persistent Storage in systemd-networkd. container-test-run-certificates> ca # [2690129.148937] ca systemd[1]: etc-machine\x2did.mount: Deactivated successfully. container-test-run-certificates> ca # [2690129.276432] ca systemd-resolved[113]: Positive Trust Anchors: container-test-run-certificates> ca # [2690129.276443] ca systemd-resolved[113]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d container-test-run-certificates> ca # [2690129.276447] ca systemd-resolved[113]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 container-test-run-certificates> ca # [2690129.276480] ca systemd-resolved[113]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test container-test-run-certificates> ca # [2690129.297695] ca systemd-resolved[113]: Using system hostname 'ca'. container-test-run-certificates> ca # [2690129.299081] ca systemd[1]: Started Network Name Resolution. container-test-run-certificates> ca # [2690129.299217] ca systemd[1]: Reached target Network. container-test-run-certificates> ca # [2690129.299326] ca systemd[1]: Reached target Network is Online. container-test-run-certificates> ca # [2690129.299414] ca systemd[1]: Reached target System Initialization. container-test-run-certificates> ca # [2690129.299800] ca systemd[1]: Started Renew ACME Certificate for ca.foo. container-test-run-certificates> ca # [2690129.299851] ca systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> ca # [2690129.299899] ca systemd[1]: Started Daily Cleanup of Temporary Directories. container-test-run-certificates> ca # [2690129.299939] ca systemd[1]: Reached target Timer Units. container-test-run-certificates> ca # [2690129.300207] ca systemd[1]: Listening on D-Bus System Message Bus Socket. container-test-run-certificates> ca # [2690129.300423] ca systemd[1]: Listening on Nix Daemon Socket. container-test-run-certificates> ca # [2690129.300649] ca systemd[1]: Listening on Virtual Machine and Container Registration Service Socket. container-test-run-certificates> ca # [2690129.300698] ca systemd[1]: Reached target Socket Units. container-test-run-certificates> ca # [2690129.300777] ca systemd[1]: Reached target Basic System. container-test-run-certificates> ca # [2690129.302833] ca systemd[1]: Starting Set up the ACME certificate renewal infrastructure... container-test-run-certificates> ca # [2690129.304232] ca systemd[1]: Starting Import lastlog data into lastlog2 database... container-test-run-certificates> ca # [2690129.304300] ca systemd[1]: nginx-config-reload.service skipped, unmet condition check ConditionPathExists=/var/lib/acme/ca.foo/fullchain.pem container-test-run-certificates> ca # [2690129.305764] ca systemd[1]: Starting Name Service Cache Daemon (nsncd)... container-test-run-certificates> ca # [2690129.307675] ca systemd[1]: Starting step-ca service... container-test-run-certificates> ca # [2690129.349221] ca systemd[1]: Starting D-Bus System Message Bus... container-test-run-certificates> ca # [2690129.425814] ca systemd[1]: Finished Import lastlog data into lastlog2 database. container-test-run-certificates> ca # [2690129.497825] ca acme-setup-privileged[204]: + set -euo pipefail container-test-run-certificates> ca # [2690129.497825] ca acme-setup-privileged[204]: + cd /var/lib/acme container-test-run-certificates> ca # [2690129.498487] ca acme-setup-privileged[204]: + chmod -R u=rwX,g=,o= .lego/accounts container-test-run-certificates> ca # [2690129.499815] ca acme-setup-privileged[204]: + chown -R acme .lego/accounts container-test-run-certificates> ca # [2690129.501648] ca acme-setup-privileged[204]: + for fixpath in ca.foo .lego/ca.foo container-test-run-certificates> ca # [2690129.501648] ca acme-setup-privileged[204]: + '[' -d ca.foo ']' container-test-run-certificates> ca # [2690129.501773] ca acme-setup-privileged[204]: + for fixpath in ca.foo .lego/ca.foo container-test-run-certificates> ca # [2690129.501773] ca acme-setup-privileged[204]: + '[' -d .lego/ca.foo ']' container-test-run-certificates> ca # [2690129.568237] ca systemd[1]: Started Name Service Cache Daemon (nsncd). container-test-run-certificates> ca # [2690129.568636] ca nsncd[206]: Oct 05 10:42:29.554 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket" container-test-run-certificates> ca # [2690129.568323] ca systemd[1]: Reached target Host and Network Name Lookups. container-test-run-certificates> ca # [2690129.568388] ca systemd[1]: Reached target User and Group Name Lookups. container-test-run-certificates> ca # [2690129.569954] ca systemd[1]: Starting User Login Management... container-test-run-certificates> ca # [2690129.570895] ca systemd[1]: Starting Permit User Sessions... container-test-run-certificates> ca # [2690129.584020] ca systemd[1]: Finished Permit User Sessions. container-test-run-certificates> ca # [2690129.585871] ca systemd[1]: Started Console Getty. container-test-run-certificates> ca # [2690129.585948] ca systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0 container-test-run-certificates> ca # [2690129.585985] ca systemd[1]: Reached target Login Prompts. container-test-run-certificates> ca # [2690129.742491] ca dbus-broker-launch[211]: Looking up NSS user entry for 'systemd-timesync'... container-test-run-certificates> ca # [2690129.744189] ca dbus-broker-launch[211]: NSS returned no entry for 'systemd-timesync' container-test-run-certificates> ca # [2690129.744189] ca dbus-broker-launch[211]: Invalid user-name in /nix/store/v1nxa7rv3lzc5r68wybf7bvcbcivpxms-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync" container-test-run-certificates> ca # [2690129.744655] ca systemd[1]: Started D-Bus System Message Bus. container-test-run-certificates> ca # [2690129.753505] ca dbus-broker-launch[211]: Ready container-test-run-certificates> ca # [2690130.387085] ca systemd-logind[238]: New seat seat0. container-test-run-certificates> ca # [2690130.387267] ca systemd[1]: Started User Login Management. container-test-run-certificates> ca # [2690130.389556] ca systemd[1]: Starting linger-users.service... container-test-run-certificates> ca # [2690130.439401] ca systemd[1]: linger-users.service: Deactivated successfully. container-test-run-certificates> ca # [2690130.439740] ca systemd[1]: Finished linger-users.service. container-test-run-certificates> ca # [2690130.475611] ca acme-setup-start[222]: + set -euo pipefail container-test-run-certificates> ca # [2690130.475611] ca acme-setup-start[222]: + test -e ca/key.pem container-test-run-certificates> ca # [2690130.476081] ca acme-setup-start[222]: + minica --ca-key ca/key.pem --ca-cert ca/cert.pem --domains selfsigned.local container-test-run-certificates> ca # [2690130.498883] ca systemd[1]: Finished Set up the ACME certificate renewal infrastructure. container-test-run-certificates> ca # [2690130.500605] ca systemd[1]: Starting Ensure certificate for ca.foo... container-test-run-certificates> ca # [2690130.594919] ca systemd-networkd[199]: eth1: Gained IPv6LL container-test-run-certificates> ca # [2690130.718245] ca step-ca[207]: badger 2026/10/05 10:42:30 INFO: All 0 tables opened in 0s container-test-run-certificates> ca # [2690130.723769] ca step-ca[207]: 2026/10/05 10:42:30 Building new tls configuration using step-ca x509 Signer Interface container-test-run-certificates> ca # [2690130.730838] ca step-ca[207]: 2026/10/05 10:42:30 Starting Smallstep CA/0.30.2 (linux/arm64) container-test-run-certificates> ca # [2690130.730838] ca step-ca[207]: 2026/10/05 10:42:30 Documentation: https://u.step.sm/docs/ca container-test-run-certificates> ca # [2690130.730838] ca step-ca[207]: 2026/10/05 10:42:30 Community Discord: https://u.step.sm/discord container-test-run-certificates> ca # [2690130.730936] ca step-ca[207]: 2026/10/05 10:42:30 Config file: /etc/smallstep/ca.json container-test-run-certificates> ca # [2690130.730936] ca step-ca[207]: 2026/10/05 10:42:30 The primary server URL is https://ca.foo:1443 container-test-run-certificates> ca # [2690130.730936] ca step-ca[207]: 2026/10/05 10:42:30 Root certificates are available at https://ca.foo:1443/roots.pem container-test-run-certificates> ca # [2690130.730936] ca step-ca[207]: 2026/10/05 10:42:30 X.509 Root Fingerprint: 65bc2982098377d833bc3fc96e6d4971fc981b466cf9bba1054baf224584789d container-test-run-certificates> ca # [2690130.731718] ca systemd[1]: Started step-ca service. container-test-run-certificates> ca # [2690130.732098] ca step-ca[207]: 2026/10/05 10:42:30 Serving HTTPS on 0.0.0.0:1443 ... container-test-run-certificates> ca # [2690131.412945] ca acme-ca.foo-start[259]: Waiting to acquire lock in /run/acme/ container-test-run-certificates> ca # [2690131.416399] ca acme-ca.foo-start[259]: + '[' -e out/acme-success ']' container-test-run-certificates> ca # [2690131.416492] ca acme-ca.foo-start[259]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=ca.foo --ip-addresses= container-test-run-certificates> ca # [2690131.432061] ca acme-ca.foo-start[297]: + cd ca.foo container-test-run-certificates> ca # [2690131.432629] ca acme-ca.foo-start[297]: + cp -vp cert.pem ../out/cert.pem container-test-run-certificates> ca # [2690131.433835] ca acme-ca.foo-start[298]: 'cert.pem' -> '../out/cert.pem' container-test-run-certificates> ca # [2690131.434167] ca acme-ca.foo-start[297]: + cp -vp key.pem ../out/key.pem container-test-run-certificates> ca # [2690131.435497] ca acme-ca.foo-start[297]: 'key.pem' -> '../out/key.pem' container-test-run-certificates> ca # [2690131.435753] ca acme-ca.foo-start[259]: + cat out/cert.pem ca/cert.pem container-test-run-certificates> ca # [2690131.437651] ca acme-ca.foo-start[259]: + cp ca/cert.pem out/chain.pem container-test-run-certificates> ca # [2690131.439412] ca acme-ca.foo-start[259]: + cat out/key.pem out/fullchain.pem container-test-run-certificates> ca # [2690131.441240] ca acme-ca.foo-start[259]: + for fixpath in out certificates container-test-run-certificates> ca # [2690131.441240] ca acme-ca.foo-start[259]: + '[' -d out ']' container-test-run-certificates> ca # [2690131.441351] ca acme-ca.foo-start[259]: + chmod -R u=rwX,g=rX,o= out container-test-run-certificates> ca # [2690131.442804] ca acme-ca.foo-start[259]: + chown -R acme:nginx out container-test-run-certificates> ca # [2690131.447091] ca acme-ca.foo-start[259]: + for fixpath in out certificates container-test-run-certificates> ca # [2690131.447091] ca acme-ca.foo-start[259]: + '[' -d certificates ']' container-test-run-certificates> ca # [2690131.456279] ca systemd[1]: Finished Ensure certificate for ca.foo. container-test-run-certificates> ca # [2690131.458729] ca systemd[1]: Starting Nginx Web Server... container-test-run-certificates> ca # [2690132.354000] ca nginx-pre-start[309]: nginx: the configuration file /nix/store/r4y96cdhgqp5wgr010i1bvc822zihyzw-nginx.conf syntax is ok container-test-run-certificates> ca # [2690132.354627] ca nginx-pre-start[309]: nginx: configuration file /nix/store/r4y96cdhgqp5wgr010i1bvc822zihyzw-nginx.conf test is successful container-test-run-certificates> ca # [2690132.360581] ca systemd[1]: Started Nginx Web Server. container-test-run-certificates> ca # [2690132.361508] ca systemd[1]: Reached target Multi-User System. container-test-run-certificates> ca # [2690132.363710] ca systemd[1]: Starting Order (and renew) ACME certificate for ca.foo... container-test-run-certificates> ca # [2690133.324672] ca acme-order-renew-ca.foo-start[312]: Waiting to acquire lock in /run/acme/ container-test-run-certificates> ca # [2690133.327927] ca acme-order-renew-ca.foo-start[312]: + set -euo pipefail container-test-run-certificates> ca # [2690133.328098] ca acme-order-renew-ca.foo-start[312]: + exec container-test-run-certificates> ca # [2690133.328182] ca acme-order-renew-ca.foo-start[312]: + /nix/store/vf2h24m5aa7phb4v1kbc2qd9r41jdfqv-flock-0.4.0/bin/flock 11 container-test-run-certificates> ca # [2690133.329674] ca acme-order-renew-ca.foo-start[324]: ++ find accounts -path '*/keys/*.key' -print -quit container-test-run-certificates> ca # [2690133.332604] ca acme-order-renew-ca.foo-start[312]: + '[' -n '' ']' container-test-run-certificates> ca # [2690133.332687] ca acme-order-renew-ca.foo-start[312]: + exec container-test-run-certificates> ca # [2690133.332739] ca acme-order-renew-ca.foo-start[312]: + '[' -e certificates/ca.foo.key ']' container-test-run-certificates> ca # [2690133.332792] ca acme-order-renew-ca.foo-start[312]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo:1443/acme/acme/directory --key-type ec256 -d ca.foo --no-random-sleep --renew-force --ari-disable --force-cert-domains container-test-run-certificates> ca # [2690133.360222] ca acme-order-renew-ca.foo-start[325]: 2026-10-05T10:42:33.346001364Z INFO Private key saved. filepath=accounts/ca.foo_1443/none@none.tld/none@none.tld.key container-test-run-certificates> ca # [2690133.388764] ca step-ca[207]: time="2026-10-05T10:42:33Z" level=info duration="162.962µs" duration-ns=162962 fields.time="2026-10-05T10:42:33Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=f5850276-8064-4f7f-bf59-8306e579dd39 response="{\"newNonce\":\"https://ca.foo:1443/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo:1443/acme/acme/new-account\",\"newOrder\":\"https://ca.foo:1443/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo:1443/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo:1443/acme/acme/key-change\"}" size=277 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [2690133.389401] ca acme-order-renew-ca.foo-start[325]: 2026-10-05T10:42:33.375066884Z INFO Registering the account. email=none@none.tld container-test-run-certificates> ca # [2690133.393965] ca step-ca[207]: time="2026-10-05T10:42:33Z" level=info duration=4.34842ms duration-ns=4348420 fields.time="2026-10-05T10:42:33Z" method=HEAD name=ca nonce=TG9pOU1VSEFzZWk5VjJCVlRBVDc4aUlIWVJmbnI2UXc path=/acme/acme/new-nonce protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=29ba676f-408a-4520-a883-79d0bc3e021f size=0 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [2690133.397980] ca step-ca[207]: time="2026-10-05T10:42:33Z" level=info duration=2.846759ms duration-ns=2846759 fields.time="2026-10-05T10:42:33Z" method=POST name=ca nonce=b3BoaXhOdFN2VDZoWk10eHlSMnlnQlIwUkpLTFh1a1M path=/acme/acme/new-account protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=77edf2ef-e52e-4dcd-a6e7-f7dfdd818253 response="{\"contact\":[\"mailto:none@none.tld\"],\"status\":\"valid\",\"orders\":\"https://ca.foo:1443/acme/acme/account/OhR1MyKewjkS4RjwUrzCNZO8Ii9XJ9S1/orders\"}" size=143 status=201 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [2690133.398461] ca acme-order-renew-ca.foo-start[325]: 2026-10-05T10:42:33.384266251Z WARN !!!! HEADS UP !!!! container-test-run-certificates> ca # [2690133.398461] ca acme-order-renew-ca.foo-start[325]: Your account credentials have been saved in your container-test-run-certificates> ca # [2690133.398461] ca acme-order-renew-ca.foo-start[325]: configuration directory at "accounts". container-test-run-certificates> ca # [2690133.398461] ca acme-order-renew-ca.foo-start[325]: You should make a secure backup of this folder now. This container-test-run-certificates> ca # [2690133.398461] ca acme-order-renew-ca.foo-start[325]: configuration directory will also contain private keys container-test-run-certificates> ca # [2690133.398461] ca acme-order-renew-ca.foo-start[325]: generated by lego and certificates obtained from the ACME container-test-run-certificates> ca # [2690133.398461] ca acme-order-renew-ca.foo-start[325]: server. Making regular backups of this folder is ideal. container-test-run-certificates> ca # [2690133.398786] ca acme-order-renew-ca.foo-start[325]: 2026-10-05T10:42:33.384448373Z INFO Obtaining bundled SAN certificate. domains=ca.foo container-test-run-certificates> ca # [2690133.403427] ca step-ca[207]: time="2026-10-05T10:42:33Z" level=info duration=4.175097ms duration-ns=4175097 fields.time="2026-10-05T10:42:33Z" method=POST name=ca nonce=a1BlMmZsU0prRXlsWjZhVDQ0RlNsd1g0OW1Eb29HRHM path=/acme/acme/new-order protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=c2800d10-c995-4b0f-9549-33ac1ad20d97 response="{\"id\":\"1kB3nbcbgGIvBJG5u8a4VTBfzt4QhSdl\",\"status\":\"pending\",\"expires\":\"2026-10-06T10:42:33Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"ca.foo\"}],\"notBefore\":\"2026-10-05T10:41:33Z\",\"notAfter\":\"2027-01-03T10:42:33Z\",\"authorizations\":[\"https://ca.foo:1443/acme/acme/authz/n3srBcVl7tFfesjBIUBeVoR2DbPW2RUe\"],\"finalize\":\"https://ca.foo:1443/acme/acme/order/1kB3nbcbgGIvBJG5u8a4VTBfzt4QhSdl/finalize\"}" size=392 status=201 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [2690133.463043] ca step-ca[207]: time="2026-10-05T10:42:33Z" level=info duration=2.119229ms duration-ns=2119229 fields.time="2026-10-05T10:42:33Z" method=POST name=ca nonce=ZVZHOFBGTW1UUlNyVEFGU211N0ZrT3lEbE1PcXp1QmU path=/acme/acme/authz/n3srBcVl7tFfesjBIUBeVoR2DbPW2RUe protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=1a0c38ff-6603-405f-9382-85f79c180b15 response="{\"identifier\":{\"type\":\"dns\",\"value\":\"ca.foo\"},\"status\":\"pending\",\"challenges\":[{\"type\":\"dns-01\",\"status\":\"pending\",\"token\":\"aWyFzWE59zv2mVRcOQVPkk9GLK9JVTxL\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/n3srBcVl7tFfesjBIUBeVoR2DbPW2RUe/qanLLf9GtxmMsT006OV5dquhuAmeElS8\"},{\"type\":\"http-01\",\"status\":\"pending\",\"token\":\"aWyFzWE59zv2mVRcOQVPkk9GLK9JVTxL\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/n3srBcVl7tFfesjBIUBeVoR2DbPW2RUe/72ecuCYfLDrywZcQG2XknlifC019BqWI\"},{\"type\":\"tls-alpn-01\",\"status\":\"pending\",\"token\":\"aWyFzWE59zv2mVRcOQVPkk9GLK9JVTxL\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/n3srBcVl7tFfesjBIUBeVoR2DbPW2RUe/nAY6ishCJesdiqijvfgHEmBRVFxzs2ga\"}],\"wildcard\":false,\"expires\":\"2026-10-06T10:42:33Z\"}" size=719 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [2690133.463507] ca acme-order-renew-ca.foo-start[325]: 2026-10-05T10:42:33.449298985Z INFO Use solver. domain=ca.foo type=http-01 container-test-run-certificates> ca # [2690133.463582] ca acme-order-renew-ca.foo-start[325]: 2026-10-05T10:42:33.449350946Z INFO http01: Trying to solve HTTP-01. domain=ca.foo container-test-run-certificates> ca # [2690133.469317] ca step-ca[207]: time="2026-10-05T10:42:33Z" level=info duration=4.872267ms duration-ns=4872267 fields.time="2026-10-05T10:42:33Z" method=POST name=ca nonce=dDY1ZFZrNEliTlFMZ3BzeXpNRWQwYmI5dE93QldWZkM path=/acme/acme/challenge/n3srBcVl7tFfesjBIUBeVoR2DbPW2RUe/72ecuCYfLDrywZcQG2XknlifC019BqWI protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=714050ca-df84-455b-b4d0-b4e02f985b19 response="{\"type\":\"http-01\",\"status\":\"valid\",\"token\":\"aWyFzWE59zv2mVRcOQVPkk9GLK9JVTxL\",\"validated\":\"2026-10-05T10:42:33Z\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/n3srBcVl7tFfesjBIUBeVoR2DbPW2RUe/72ecuCYfLDrywZcQG2XknlifC019BqWI\"}" size=228 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [2690133.469750] ca acme-order-renew-ca.foo-start[325]: 2026-10-05T10:42:33.455547311Z INFO The server validated our request. domain=ca.foo container-test-run-certificates> ca # [2690133.469850] ca acme-order-renew-ca.foo-start[325]: 2026-10-05T10:42:33.455661833Z INFO Validations succeeded; requesting certificates. domains=ca.foo container-test-run-certificates> ca # [2690133.480388] ca step-ca[207]: time="2026-10-05T10:42:33Z" level=info duration=8.767281ms duration-ns=8767281 fields.time="2026-10-05T10:42:33Z" method=POST name=ca nonce=OVNpcVJMOVJzSk5ncHBJY3NweVVUVUNKdVlkMHVVVFo path=/acme/acme/order/1kB3nbcbgGIvBJG5u8a4VTBfzt4QhSdl/finalize protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=54ac3d7e-16f7-4321-9b81-7471aea2149f response="{\"id\":\"1kB3nbcbgGIvBJG5u8a4VTBfzt4QhSdl\",\"status\":\"valid\",\"expires\":\"2026-10-06T10:42:33Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"ca.foo\"}],\"notBefore\":\"2026-10-05T10:41:33Z\",\"notAfter\":\"2027-01-03T10:42:33Z\",\"authorizations\":[\"https://ca.foo:1443/acme/acme/authz/n3srBcVl7tFfesjBIUBeVoR2DbPW2RUe\"],\"finalize\":\"https://ca.foo:1443/acme/acme/order/1kB3nbcbgGIvBJG5u8a4VTBfzt4QhSdl/finalize\",\"certificate\":\"https://ca.foo:1443/acme/acme/certificate/BLgb3G5YHGugkXrhPst7NbFYIIX3thHZ\"}" size=481 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [2690133.483081] ca step-ca[207]: time="2026-10-05T10:42:33Z" level=info certificate="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" duration=1.747504ms duration-ns=1747504 fields.time="2026-10-05T10:42:33Z" issuer="Clan Intermediate CA" method=POST name=ca nonce=TlM5VzlnR01HcmhFWGJsNzJGSkdXZmFBdTBOTXk2c2Y path=/acme/acme/certificate/BLgb3G5YHGugkXrhPst7NbFYIIX3thHZ protocol=HTTP/1.1 provisioner=acme public-key="ECDSA P-256" referer= remote-address="2001:db8:1::1" request-id=8e5450e9-8aa8-4960-9015-efcfd04375e9 sans="map[dns:[ca.foo]]" serial=306716851051132598654348862687070598190 size=1344 status=200 subject=ca.foo user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= valid-from="2026-10-05T10:41:33Z" valid-to="2027-01-03T10:42:33Z" container-test-run-certificates> ca # [2690133.483393] ca acme-order-renew-ca.foo-start[325]: 2026-10-05T10:42:33.469193299Z INFO Server responded with a certificate. domains=ca.foo container-test-run-certificates> ca # [2690133.483480] ca acme-order-renew-ca.foo-start[325]: 2026-10-05T10:42:33.469293540Z INFO Writing file. filepath=certificates/ca.foo.crt container-test-run-certificates> ca # [2690133.483638] ca acme-order-renew-ca.foo-start[325]: 2026-10-05T10:42:33.469449983Z INFO Writing file. filepath=certificates/ca.foo.issuer.crt container-test-run-certificates> ca # [2690133.483703] ca acme-order-renew-ca.foo-start[325]: 2026-10-05T10:42:33.469526904Z INFO Writing file. filepath=certificates/ca.foo.key container-test-run-certificates> ca # [2690133.483860] ca acme-order-renew-ca.foo-start[325]: 2026-10-05T10:42:33.469672386Z INFO Writing file. filepath=certificates/ca.foo.json container-test-run-certificates> ca # [2690133.490685] ca acme-order-renew-ca.foo-start[312]: + touch out/acme-success container-test-run-certificates> ca # [2690133.492806] ca acme-order-renew-ca.foo-start[312]: + cmp -s certificates/ca.foo.crt out/fullchain.pem container-test-run-certificates> ca # [2690133.494590] ca acme-order-renew-ca.foo-start[312]: + touch out/renewed container-test-run-certificates> ca # [2690133.496771] ca acme-order-renew-ca.foo-start[312]: + echo Installing new certificate container-test-run-certificates> ca # [2690133.496771] ca acme-order-renew-ca.foo-start[312]: Installing new certificate container-test-run-certificates> ca # [2690133.496771] ca acme-order-renew-ca.foo-start[312]: + cp -vp certificates/ca.foo.crt out/fullchain.pem container-test-run-certificates> ca # [2690133.498578] ca acme-order-renew-ca.foo-start[356]: 'certificates/ca.foo.crt' -> 'out/fullchain.pem' container-test-run-certificates> ca # [2690133.498936] ca acme-order-renew-ca.foo-start[312]: + cp -vp certificates/ca.foo.key out/key.pem container-test-run-certificates> ca # [2690133.500573] ca acme-order-renew-ca.foo-start[357]: 'certificates/ca.foo.key' -> 'out/key.pem' container-test-run-certificates> ca # [2690133.500890] ca acme-order-renew-ca.foo-start[312]: + cp -vp certificates/ca.foo.issuer.crt out/chain.pem container-test-run-certificates> ca # [2690133.502428] ca acme-order-renew-ca.foo-start[358]: 'certificates/ca.foo.issuer.crt' -> 'out/chain.pem' container-test-run-certificates> ca # [2690133.502748] ca acme-order-renew-ca.foo-start[312]: + ln -sf fullchain.pem out/cert.pem container-test-run-certificates> ca # [2690133.504589] ca acme-order-renew-ca.foo-start[312]: + cat out/key.pem out/fullchain.pem container-test-run-certificates> ca # [2690133.506503] ca acme-order-renew-ca.foo-start[312]: + for fixpath in out certificates container-test-run-certificates> ca # [2690133.506503] ca acme-order-renew-ca.foo-start[312]: + '[' -d out ']' container-test-run-certificates> ca # [2690133.506608] ca acme-order-renew-ca.foo-start[312]: + chmod -R u=rwX,g=rX,o= out container-test-run-certificates> ca # [2690133.508642] ca acme-order-renew-ca.foo-start[312]: + chown -R acme:nginx out container-test-run-certificates> ca # [2690133.511818] ca acme-order-renew-ca.foo-start[312]: + for fixpath in out certificates container-test-run-certificates> ca # [2690133.511818] ca acme-order-renew-ca.foo-start[312]: + '[' -d certificates ']' container-test-run-certificates> ca # [2690133.511912] ca acme-order-renew-ca.foo-start[312]: + chmod -R u=rwX,g=rX,o= certificates container-test-run-certificates> ca # [2690133.513572] ca acme-order-renew-ca.foo-start[312]: + chown -R acme:nginx certificates container-test-run-certificates> ca # [2690133.517214] ca acme-order-renew-ca.foo-start[312]: + chmod -R u=rwX,g=,o= accounts/. container-test-run-certificates> ca # [2690133.715079] ca systemd[1]: Reloading Nginx Web Server... container-test-run-certificates> ca # [2690133.719842] ca systemd[1]: acme-order-renew-ca.foo.service: Deactivated successfully. container-test-run-certificates> ca # [2690133.720097] ca systemd[1]: Finished Order (and renew) ACME certificate for ca.foo. container-test-run-certificates> ca # [2690133.720342] ca systemd[1]: acme-order-renew-ca.foo.service: Consumed 1.178s CPU time over 1.356s wall clock time. container-test-run-certificates> ca # [2690134.625688] ca nginx[374]: nginx: the configuration file /nix/store/r4y96cdhgqp5wgr010i1bvc822zihyzw-nginx.conf syntax is ok container-test-run-certificates> ca # [2690134.626116] ca nginx[374]: nginx: configuration file /nix/store/r4y96cdhgqp5wgr010i1bvc822zihyzw-nginx.conf test is successful container-test-run-certificates> ca: (finished: waiting for unit step-ca.service, in 8.67 seconds) container-test-run-certificates> ca: waiting for file '/var/lib/acme/ca.foo/fullchain.pem' container-test-run-certificates> ca: (finished: waiting for file '/var/lib/acme/ca.foo/fullchain.pem', in 0.01 seconds) container-test-run-certificates> ca: must succeed: systemctl restart nginx.service container-test-run-certificates> ca # [2690135.638206] ca systemd[1]: Reloaded Nginx Web Server. container-test-run-certificates> ca # [2690135.638677] ca systemd[1]: Startup finished in 7.955s. container-test-run-certificates> ca # [2690135.827653] ca systemd[1]: Stopping Nginx Web Server... container-test-run-certificates> ca # [2690135.943353] ca systemd[1]: nginx.service: Deactivated successfully. container-test-run-certificates> ca # [2690135.943712] ca systemd[1]: Stopped Nginx Web Server. container-test-run-certificates> ca # [2690135.943755] ca systemd[1]: nginx.service: Consumed 3.517s CPU time over 4.484s wall clock time. container-test-run-certificates> ca # [2690135.948404] ca systemd[1]: Starting Nginx Web Server... container-test-run-certificates> ca: (finished: must succeed: systemctl restart nginx.service, in 1.06 seconds) container-test-run-certificates> server: systemd-nspawn running (pid 468) container-test-run-certificates> server: Waiting for journal at /build/vm-state-server/var/log/journal... container-test-run-certificates> client: systemd-nspawn running (pid 471) container-test-run-certificates> client: Waiting for journal at /build/vm-state-client/var/log/journal... container-test-run-certificates> server: waiting for file '/var/lib/acme/test.foo/fullchain.pem' container-test-run-certificates> nixos-nspawn(server): TAP vde-tap1 not found; container will be isolated from VDE container-test-run-certificates> nixos-nspawn(server): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths. container-test-run-certificates> nixos-nspawn(client): TAP vde-tap1 not found; container will be isolated from VDE container-test-run-certificates> nixos-nspawn(client): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths. container-test-run-certificates> Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file. container-test-run-certificates> ░ Spawning container server on /build/vm-state-server. container-test-run-certificates> Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file. container-test-run-certificates> ░ Spawning container client on /build/vm-state-client. container-test-run-certificates> ca # [2690136.842374] ca nginx-pre-start[398]: nginx: the configuration file /nix/store/r4y96cdhgqp5wgr010i1bvc822zihyzw-nginx.conf syntax is ok container-test-run-certificates> ca # [2690136.842905] ca nginx-pre-start[398]: nginx: configuration file /nix/store/r4y96cdhgqp5wgr010i1bvc822zihyzw-nginx.conf test is successful container-test-run-certificates> ca # [2690136.872468] ca systemd[1]: Started Nginx Web Server. container-test-run-certificates> server # [2690137.812789] server systemd-journald[72]: Journal started container-test-run-certificates> server # [2690137.812847] server systemd-journald[72]: Runtime Journal (/run/log/journal/ede06e2b1bd94690b8e535a4fbc7fb1a) is 8M, max 2.5G, 2.4G free. container-test-run-certificates> server # [2690137.816066] server systemd[1]: Finished Apply Kernel Variables. container-test-run-certificates> server # [2690137.828064] server systemd[1]: Finished Create Static Device Nodes in /dev gracefully. container-test-run-certificates> server # [2690137.841652] server systemd[1]: Starting Flush Journal to Persistent Storage... container-test-run-certificates> server # [2690137.842635] server systemd[1]: Starting Network Name Resolution... container-test-run-certificates> server # [2690137.843287] server systemd[1]: Starting Create Static Device Nodes in /dev... container-test-run-certificates> server # [2690137.853484] server systemd-journald[72]: Time spent on flushing to /var/log/journal/ede06e2b1bd94690b8e535a4fbc7fb1a is 2.391ms for 7 entries. container-test-run-certificates> server # [2690137.853484] server systemd-journald[72]: System Journal (/var/log/journal/ede06e2b1bd94690b8e535a4fbc7fb1a) is 8M, max 4G, 3.9G free. container-test-run-certificates> server # [2690137.860846] server systemd[1]: Finished Create Static Device Nodes in /dev. container-test-run-certificates> server # [2690137.861423] server systemd[1]: Reached target Preparation for Local File Systems. container-test-run-certificates> server # [2690137.861539] server systemd[1]: Reached target Local File Systems. container-test-run-certificates> server # [2690137.862402] server systemd[1]: Listening on Boot Loader Control Service Socket. container-test-run-certificates> server # [2690137.862448] server systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> server # [2690137.863467] server systemd[1]: Starting Save Transient machine-id to Disk... container-test-run-certificates> server # [2690137.863507] server systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys container-test-run-certificates> server # [2690137.863987] server systemd[1]: Finished Flush Journal to Persistent Storage. container-test-run-certificates> server # [2690137.865370] server systemd[1]: Starting Create System Files and Directories... container-test-run-certificates> client # [2690137.812761] client systemd-journald[72]: Journal started container-test-run-certificates> client # [2690137.812823] client systemd-journald[72]: Runtime Journal (/run/log/journal/5e99384ae4cc45a09da1808e24273171) is 8M, max 2.5G, 2.4G free. container-test-run-certificates> client # [2690137.815767] client systemd[1]: Finished Apply Kernel Variables. container-test-run-certificates> client # [2690137.828158] client systemd[1]: Finished Create Static Device Nodes in /dev gracefully. container-test-run-certificates> client # [2690137.841856] client systemd[1]: Starting Flush Journal to Persistent Storage... container-test-run-certificates> client # [2690137.842905] client systemd[1]: Starting Network Name Resolution... container-test-run-certificates> client # [2690137.843524] client systemd[1]: Starting Create Static Device Nodes in /dev... container-test-run-certificates> client # [2690137.853030] client systemd-journald[72]: Time spent on flushing to /var/log/journal/5e99384ae4cc45a09da1808e24273171 is 1.712ms for 7 entries. container-test-run-certificates> client # [2690137.853030] client systemd-journald[72]: System Journal (/var/log/journal/5e99384ae4cc45a09da1808e24273171) is 8M, max 4G, 3.9G free. container-test-run-certificates> client # [2690137.876813] client systemd[1]: Finished Flush Journal to Persistent Storage. container-test-run-certificates> client # [2690137.877305] client systemd[1]: Finished Create Static Device Nodes in /dev. container-test-run-certificates> client # [2690137.878356] client systemd[1]: Reached target Preparation for Local File Systems. container-test-run-certificates> client # [2690137.878465] client systemd[1]: Reached target Local File Systems. container-test-run-certificates> client # [2690137.879304] client systemd[1]: Listening on Boot Loader Control Service Socket. container-test-run-certificates> client # [2690137.879352] client systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> client # [2690137.880346] client systemd[1]: Starting Save Transient machine-id to Disk... container-test-run-certificates> client # [2690137.881303] client systemd[1]: Starting Create System Files and Directories... container-test-run-certificates> client # [2690137.881339] client systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys container-test-run-certificates> server # [2690137.885238] server systemd-tmpfiles[121]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted container-test-run-certificates> server # [2690137.885466] server systemd-tmpfiles[121]: fchmod() of /var/log/journal failed: Operation not permitted container-test-run-certificates> server # [2690137.885619] server systemd-tmpfiles[121]: fchmod() of /var/log/journal/ede06e2b1bd94690b8e535a4fbc7fb1a failed: Operation not permitted container-test-run-certificates> client # [2690137.901090] client systemd-tmpfiles[128]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted container-test-run-certificates> client # [2690137.901343] client systemd-tmpfiles[128]: fchmod() of /var/log/journal failed: Operation not permitted container-test-run-certificates> client # [2690137.901523] client systemd-tmpfiles[128]: fchmod() of /var/log/journal/5e99384ae4cc45a09da1808e24273171 failed: Operation not permitted container-test-run-certificates> server # [2690137.885836] server systemd-tmpfiles[121]: fchmod() of /run/log/journal failed: Operation not permitted container-test-run-certificates> server # [2690137.887282] server systemd[1]: Finished Create System Files and Directories. container-test-run-certificates> server # [2690137.888569] server systemd[1]: Starting Rebuild Journal Catalog... container-test-run-certificates> server # [2690137.889338] server systemd[1]: Starting Record System Boot/Shutdown in UTMP... container-test-run-certificates> server # [2690137.903631] server systemd[1]: Finished Record System Boot/Shutdown in UTMP. container-test-run-certificates> server # [2690137.909754] server systemd[1]: Finished Save Transient machine-id to Disk. container-test-run-certificates> server # [2690137.912660] server systemd[1]: Finished Rebuild Journal Catalog. container-test-run-certificates> server # [2690137.913702] server systemd[1]: Starting Update is Completed... container-test-run-certificates> server # [2690137.925165] server systemd[1]: Finished Update is Completed. container-test-run-certificates> server # [2690138.000684] server systemd[1]: Finished Firewall. container-test-run-certificates> server # [2690138.000855] server systemd[1]: Reached target Preparation for Network. container-test-run-certificates> server # [2690138.001069] server systemd[1]: Listening on Network Management Resolve Hook Socket. container-test-run-certificates> server # [2690138.002239] server systemd[1]: Starting Network Management... container-test-run-certificates> client # [2690137.901778] client systemd-tmpfiles[128]: fchmod() of /run/log/journal failed: Operation not permitted container-test-run-certificates> client # [2690137.905120] client systemd[1]: Finished Create System Files and Directories. container-test-run-certificates> client # [2690137.906095] client systemd[1]: Starting Rebuild Journal Catalog... container-test-run-certificates> client # [2690137.907533] client systemd[1]: Starting Record System Boot/Shutdown in UTMP... container-test-run-certificates> client # [2690137.910816] client systemd[1]: Finished Save Transient machine-id to Disk. container-test-run-certificates> client # [2690137.922191] client systemd[1]: Finished Record System Boot/Shutdown in UTMP. container-test-run-certificates> client # [2690137.930391] client systemd[1]: Finished Rebuild Journal Catalog. container-test-run-certificates> client # [2690137.931415] client systemd[1]: Starting Update is Completed... container-test-run-certificates> client # [2690137.943319] client systemd[1]: Finished Update is Completed. container-test-run-certificates> client # [2690137.980082] client systemd[1]: Finished Firewall. container-test-run-certificates> client # [2690137.980243] client systemd[1]: Reached target Preparation for Network. container-test-run-certificates> client # [2690137.980453] client systemd[1]: Listening on Network Management Resolve Hook Socket. container-test-run-certificates> client # [2690137.981468] client systemd[1]: Starting Network Management... container-test-run-certificates> server # [2690138.684204] server systemd-networkd[190]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted container-test-run-certificates> server # [2690138.684293] server systemd-networkd[190]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted container-test-run-certificates> server # [2690138.699026] server systemd-networkd[190]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> server # [2690138.699195] server systemd-networkd[190]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> server # [2690138.699339] server systemd-networkd[190]: lo: Link UP container-test-run-certificates> server # [2690138.699344] server systemd-networkd[190]: lo: Gained carrier container-test-run-certificates> server # [2690138.699521] server systemd-networkd[190]: eth1: Configuring with /etc/systemd/network/40-eth1.network. container-test-run-certificates> server # [2690138.699951] server systemd[1]: Started Network Management. container-test-run-certificates> server # [2690138.700011] server systemd-networkd[190]: eth1: Link UP container-test-run-certificates> server # [2690138.700357] server systemd-networkd[190]: eth1: Gained carrier container-test-run-certificates> server # [2690138.701621] server systemd[1]: Starting Enable Persistent Storage in systemd-networkd... container-test-run-certificates> server # [2690138.730175] server systemd[1]: Finished Enable Persistent Storage in systemd-networkd. container-test-run-certificates> server # [2690138.822548] server systemd[1]: etc-machine\x2did.mount: Deactivated successfully. container-test-run-certificates> client # [2690138.678112] client systemd-networkd[186]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted container-test-run-certificates> client # [2690138.678199] client systemd-networkd[186]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted container-test-run-certificates> client # [2690138.688148] client systemd-networkd[186]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> client # [2690138.688331] client systemd-networkd[186]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> client # [2690138.688490] client systemd-networkd[186]: lo: Link UP container-test-run-certificates> client # [2690138.688494] client systemd-networkd[186]: lo: Gained carrier container-test-run-certificates> client # [2690138.688673] client systemd-networkd[186]: eth1: Configuring with /etc/systemd/network/40-eth1.network. container-test-run-certificates> client # [2690138.689079] client systemd[1]: Started Network Management. container-test-run-certificates> client # [2690138.689159] client systemd-networkd[186]: eth1: Link UP container-test-run-certificates> client # [2690138.689506] client systemd-networkd[186]: eth1: Gained carrier container-test-run-certificates> client # [2690138.690324] client systemd[1]: Starting Enable Persistent Storage in systemd-networkd... container-test-run-certificates> client # [2690138.730120] client systemd[1]: Finished Enable Persistent Storage in systemd-networkd. container-test-run-certificates> client # [2690138.807800] client systemd[1]: etc-machine\x2did.mount: Deactivated successfully. container-test-run-certificates> server # [2690139.024921] server systemd-resolved[103]: Positive Trust Anchors: container-test-run-certificates> server # [2690139.024934] server systemd-resolved[103]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d container-test-run-certificates> server # [2690139.024936] server systemd-resolved[103]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 container-test-run-certificates> server # [2690139.024971] server systemd-resolved[103]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test container-test-run-certificates> server # [2690139.045776] server systemd-resolved[103]: Using system hostname 'server'. container-test-run-certificates> server # [2690139.047111] server systemd[1]: Started Network Name Resolution. container-test-run-certificates> server # [2690139.047241] server systemd[1]: Reached target Network. container-test-run-certificates> server # [2690139.047348] server systemd[1]: Reached target Network is Online. container-test-run-certificates> server # [2690139.047429] server systemd[1]: Reached target System Initialization. container-test-run-certificates> server # [2690139.047825] server systemd[1]: Started Renew ACME Certificate for test.foo. container-test-run-certificates> server # [2690139.047875] server systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> server # [2690139.047919] server systemd[1]: Started Daily Cleanup of Temporary Directories. container-test-run-certificates> server # [2690139.047963] server systemd[1]: Reached target Timer Units. container-test-run-certificates> server # [2690139.048235] server systemd[1]: Listening on D-Bus System Message Bus Socket. container-test-run-certificates> server # [2690139.048608] server systemd[1]: Listening on Nix Daemon Socket. container-test-run-certificates> server # [2690139.048859] server systemd[1]: Listening on Virtual Machine and Container Registration Service Socket. container-test-run-certificates> server # [2690139.048914] server systemd[1]: Reached target Socket Units. container-test-run-certificates> server # [2690139.049012] server systemd[1]: Reached target Basic System. container-test-run-certificates> server # [2690139.051218] server systemd[1]: Starting Set up the ACME certificate renewal infrastructure... container-test-run-certificates> server # [2690139.052805] server systemd[1]: Starting Import lastlog data into lastlog2 database... container-test-run-certificates> server # [2690139.052873] server systemd[1]: nginx-config-reload.service skipped, unmet condition check ConditionPathExists=/var/lib/acme/test.foo/fullchain.pem container-test-run-certificates> server # [2690139.054387] server systemd[1]: Starting Name Service Cache Daemon (nsncd)... container-test-run-certificates> server # [2690139.056448] server systemd[1]: Starting D-Bus System Message Bus... container-test-run-certificates> server # [2690139.127931] server systemd[1]: Finished Import lastlog data into lastlog2 database. container-test-run-certificates> server # [2690139.281932] server acme-setup-privileged[195]: + set -euo pipefail container-test-run-certificates> server # [2690139.281932] server acme-setup-privileged[195]: + cd /var/lib/acme container-test-run-certificates> server # [2690139.281932] server acme-setup-privileged[195]: + chmod -R u=rwX,g=,o= .lego/accounts container-test-run-certificates> client # [2690139.029847] client systemd-resolved[104]: Positive Trust Anchors: container-test-run-certificates> client # [2690139.029858] client systemd-resolved[104]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d container-test-run-certificates> client # [2690139.029861] client systemd-resolved[104]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 container-test-run-certificates> client # [2690139.029896] client systemd-resolved[104]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test container-test-run-certificates> client # [2690139.049763] client systemd-resolved[104]: Using system hostname 'client'. container-test-run-certificates> client # [2690139.051082] client systemd[1]: Started Network Name Resolution. container-test-run-certificates> client # [2690139.051205] client systemd[1]: Reached target Network. container-test-run-certificates> client # [2690139.051324] client systemd[1]: Reached target System Initialization. container-test-run-certificates> client # [2690139.051418] client systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> client # [2690139.051474] client systemd[1]: Started Daily Cleanup of Temporary Directories. container-test-run-certificates> client # [2690139.051516] client systemd[1]: Reached target Timer Units. container-test-run-certificates> client # [2690139.051731] client systemd[1]: Listening on D-Bus System Message Bus Socket. container-test-run-certificates> client # [2690139.051958] client systemd[1]: Listening on Nix Daemon Socket. container-test-run-certificates> client # [2690139.052215] client systemd[1]: Listening on Virtual Machine and Container Registration Service Socket. container-test-run-certificates> client # [2690139.052259] client systemd[1]: Reached target Socket Units. container-test-run-certificates> client # [2690139.052338] client systemd[1]: Reached target Basic System. container-test-run-certificates> client # [2690139.054100] client systemd[1]: Starting Import lastlog data into lastlog2 database... container-test-run-certificates> client # [2690139.055531] client systemd[1]: Starting Name Service Cache Daemon (nsncd)... container-test-run-certificates> client # [2690139.108639] client systemd[1]: Starting D-Bus System Message Bus... container-test-run-certificates> client # [2690139.127954] client systemd[1]: Finished Import lastlog data into lastlog2 database. container-test-run-certificates> server # [2690139.284062] server acme-setup-privileged[195]: + chown -R acme .lego/accounts container-test-run-certificates> server # [2690139.286319] server acme-setup-privileged[195]: + for fixpath in test.foo .lego/test.foo container-test-run-certificates> server # [2690139.286319] server acme-setup-privileged[195]: + '[' -d test.foo ']' container-test-run-certificates> server # [2690139.286456] server acme-setup-privileged[195]: + for fixpath in test.foo .lego/test.foo container-test-run-certificates> server # [2690139.286456] server acme-setup-privileged[195]: + '[' -d .lego/test.foo ']' container-test-run-certificates> server # [2690139.315661] server systemd[1]: Started Name Service Cache Daemon (nsncd). container-test-run-certificates> server # [2690139.315780] server systemd[1]: Reached target Host and Network Name Lookups. container-test-run-certificates> server # [2690139.315893] server systemd[1]: Reached target User and Group Name Lookups. container-test-run-certificates> server # [2690139.316039] server nsncd[197]: Oct 05 10:42:39.301 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket" container-test-run-certificates> server # [2690139.336501] server systemd[1]: Starting User Login Management... container-test-run-certificates> server # [2690139.337663] server systemd[1]: Starting Permit User Sessions... container-test-run-certificates> server # [2690139.347040] server systemd[1]: Finished Permit User Sessions. container-test-run-certificates> server # [2690139.348692] server systemd[1]: Started Console Getty. container-test-run-certificates> server # [2690139.348744] server systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0 container-test-run-certificates> server # [2690139.348767] server systemd[1]: Reached target Login Prompts. container-test-run-certificates> client # [2690139.329159] client nsncd[192]: Oct 05 10:42:39.314 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket" container-test-run-certificates> client # [2690139.329169] client systemd[1]: Started Name Service Cache Daemon (nsncd). container-test-run-certificates> client # [2690139.329239] client systemd[1]: Reached target Host and Network Name Lookups. container-test-run-certificates> client # [2690139.329311] client systemd[1]: Reached target User and Group Name Lookups. container-test-run-certificates> client # [2690139.336513] client systemd[1]: Starting User Login Management... container-test-run-certificates> client # [2690139.337787] client systemd[1]: Starting Permit User Sessions... container-test-run-certificates> client # [2690139.349564] client systemd[1]: Finished Permit User Sessions. container-test-run-certificates> client # [2690139.351241] client systemd[1]: Started Console Getty. container-test-run-certificates> client # [2690139.351314] client systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0 container-test-run-certificates> client # [2690139.351356] client systemd[1]: Reached target Login Prompts. container-test-run-certificates> client # [2690139.484855] client dbus-broker-launch[193]: Looking up NSS user entry for 'systemd-timesync'... container-test-run-certificates> client # [2690139.486852] client dbus-broker-launch[193]: NSS returned no entry for 'systemd-timesync' container-test-run-certificates> client # [2690139.486852] client dbus-broker-launch[193]: Invalid user-name in /nix/store/9y7nak5cdmawqbrzaz4wsdwbvmdwjn4r-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync" container-test-run-certificates> client # [2690139.487329] client systemd[1]: Started D-Bus System Message Bus. container-test-run-certificates> client # [2690139.494997] client dbus-broker-launch[193]: Ready container-test-run-certificates> server # [2690139.536301] server dbus-broker-launch[198]: Looking up NSS user entry for 'systemd-timesync'... container-test-run-certificates> server # [2690139.537475] server dbus-broker-launch[198]: NSS returned no entry for 'systemd-timesync' container-test-run-certificates> server # [2690139.537475] server dbus-broker-launch[198]: Invalid user-name in /nix/store/ki467zd464yh97h1ss3va5s9czncl46j-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync" container-test-run-certificates> server # [2690139.538552] server systemd[1]: Started D-Bus System Message Bus. container-test-run-certificates> server # [2690139.547399] server dbus-broker-launch[198]: Ready container-test-run-certificates> server # [2690140.173234] server systemd-logind[222]: New seat seat0. container-test-run-certificates> server # [2690140.173410] server systemd[1]: Started User Login Management. container-test-run-certificates> server # [2690140.208730] server systemd[1]: Starting linger-users.service... container-test-run-certificates> server # [2690140.222881] server systemd[1]: linger-users.service: Deactivated successfully. container-test-run-certificates> server # [2690140.223006] server systemd[1]: Finished linger-users.service. container-test-run-certificates> server # [2690140.244236] server acme-setup-start[211]: + set -euo pipefail container-test-run-certificates> server # [2690140.244236] server acme-setup-start[211]: + test -e ca/key.pem container-test-run-certificates> server # [2690140.244663] server acme-setup-start[211]: + minica --ca-key ca/key.pem --ca-cert ca/cert.pem --domains selfsigned.local container-test-run-certificates> server # [2690140.276085] server systemd[1]: Finished Set up the ACME certificate renewal infrastructure. container-test-run-certificates> server # [2690140.278694] server systemd[1]: Starting Ensure certificate for test.foo... container-test-run-certificates> client # [2690140.164503] client systemd-logind[208]: New seat seat0. container-test-run-certificates> client # [2690140.164755] client systemd[1]: Started User Login Management. container-test-run-certificates> client # [2690140.166996] client systemd[1]: Starting linger-users.service... container-test-run-certificates> client # [2690140.220057] client systemd[1]: linger-users.service: Deactivated successfully. container-test-run-certificates> client # [2690140.220348] client systemd[1]: Finished linger-users.service. container-test-run-certificates> client # [2690140.221256] client systemd[1]: Reached target Multi-User System. container-test-run-certificates> client # [2690140.221626] client systemd[1]: Startup finished in 2.858s. container-test-run-certificates> server # [2690140.608127] server systemd-networkd[190]: eth1: Gained IPv6LL container-test-run-certificates> client # [2690140.608239] client systemd-networkd[186]: eth1: Gained IPv6LL container-test-run-certificates> server # [2690141.141358] server acme-test.foo-start[247]: Waiting to acquire lock in /run/acme/ container-test-run-certificates> server # [2690141.144541] server acme-test.foo-start[247]: + '[' -e out/acme-success ']' container-test-run-certificates> server # [2690141.144541] server acme-test.foo-start[247]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=test.foo --ip-addresses= container-test-run-certificates> server # [2690141.159606] server acme-test.foo-start[257]: + cd test.foo container-test-run-certificates> server # [2690141.159968] server acme-test.foo-start[257]: + cp -vp cert.pem ../out/cert.pem container-test-run-certificates> server # [2690141.161169] server acme-test.foo-start[258]: 'cert.pem' -> '../out/cert.pem' container-test-run-certificates> server # [2690141.161427] server acme-test.foo-start[257]: + cp -vp key.pem ../out/key.pem container-test-run-certificates> server # [2690141.162760] server acme-test.foo-start[257]: 'key.pem' -> '../out/key.pem' container-test-run-certificates> server # [2690141.163032] server acme-test.foo-start[247]: + cat out/cert.pem ca/cert.pem container-test-run-certificates> server # [2690141.164927] server acme-test.foo-start[247]: + cp ca/cert.pem out/chain.pem container-test-run-certificates> server # [2690141.166851] server acme-test.foo-start[247]: + cat out/key.pem out/fullchain.pem container-test-run-certificates> server # [2690141.169254] server acme-test.foo-start[247]: + for fixpath in out certificates container-test-run-certificates> server # [2690141.169254] server acme-test.foo-start[247]: + '[' -d out ']' container-test-run-certificates> server # [2690141.169347] server acme-test.foo-start[247]: + chmod -R u=rwX,g=rX,o= out container-test-run-certificates> server # [2690141.170994] server acme-test.foo-start[247]: + chown -R acme:nginx out container-test-run-certificates> server # [2690141.174084] server acme-test.foo-start[247]: + for fixpath in out certificates container-test-run-certificates> server # [2690141.174084] server acme-test.foo-start[247]: + '[' -d certificates ']' container-test-run-certificates> server # [2690141.178974] server systemd[1]: Finished Ensure certificate for test.foo. container-test-run-certificates> server # [2690141.181619] server systemd[1]: Starting Nginx Web Server... container-test-run-certificates> server # [2690142.083701] server nginx-pre-start[269]: nginx: the configuration file /nix/store/m0mx0dyvazvzhw8b23hfjcf1l4lh5wns-nginx.conf syntax is ok container-test-run-certificates> server # [2690142.084394] server nginx-pre-start[269]: nginx: configuration file /nix/store/m0mx0dyvazvzhw8b23hfjcf1l4lh5wns-nginx.conf test is successful container-test-run-certificates> server # [2690142.089690] server systemd[1]: Started Nginx Web Server. container-test-run-certificates> server # [2690142.090078] server systemd[1]: Reached target Multi-User System. container-test-run-certificates> server # [2690142.091436] server systemd[1]: Starting Order (and renew) ACME certificate for test.foo... container-test-run-certificates> server # [2690143.103402] server acme-order-renew-test.foo-start[272]: Waiting to acquire lock in /run/acme/ container-test-run-certificates> server # [2690143.106335] server acme-order-renew-test.foo-start[272]: + set -euo pipefail container-test-run-certificates> server # [2690143.106475] server acme-order-renew-test.foo-start[272]: + exec container-test-run-certificates> server # [2690143.106543] server acme-order-renew-test.foo-start[272]: + /nix/store/vf2h24m5aa7phb4v1kbc2qd9r41jdfqv-flock-0.4.0/bin/flock 11 container-test-run-certificates> server # [2690143.108170] server acme-order-renew-test.foo-start[284]: ++ find accounts -path '*/keys/*.key' -print -quit container-test-run-certificates> server # [2690143.111143] server acme-order-renew-test.foo-start[272]: + '[' -n '' ']' container-test-run-certificates> server # [2690143.111219] server acme-order-renew-test.foo-start[272]: + exec container-test-run-certificates> server # [2690143.111267] server acme-order-renew-test.foo-start[272]: + '[' -e certificates/test.foo.key ']' container-test-run-certificates> server # [2690143.111321] server acme-order-renew-test.foo-start[272]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo/acme/acme/directory --key-type ec256 -d test.foo --no-random-sleep --renew-force --ari-disable --force-cert-domains container-test-run-certificates> server # [2690143.131607] server acme-order-renew-test.foo-start[285]: 2026-10-05T10:42:43.117386849Z INFO Private key saved. filepath=accounts/ca.foo/none@none.tld/none@none.tld.key container-test-run-certificates> server # [2690143.158967] server acme-order-renew-test.foo-start[285]: 2026-10-05T10:42:43.144765026Z INFO Registering the account. email=none@none.tld container-test-run-certificates> server # [2690143.176572] server acme-order-renew-test.foo-start[285]: 2026-10-05T10:42:43.162371788Z WARN !!!! HEADS UP !!!! container-test-run-certificates> server # [2690143.176572] server acme-order-renew-test.foo-start[285]: Your account credentials have been saved in your container-test-run-certificates> server # [2690143.176572] server acme-order-renew-test.foo-start[285]: configuration directory at "accounts". container-test-run-certificates> server # [2690143.176572] server acme-order-renew-test.foo-start[285]: You should make a secure backup of this folder now. This container-test-run-certificates> server # [2690143.176572] server acme-order-renew-test.foo-start[285]: configuration directory will also contain private keys container-test-run-certificates> server # [2690143.176572] server acme-order-renew-test.foo-start[285]: generated by lego and certificates obtained from the ACME container-test-run-certificates> server # [2690143.176572] server acme-order-renew-test.foo-start[285]: server. Making regular backups of this folder is ideal. container-test-run-certificates> server # [2690143.176769] server acme-order-renew-test.foo-start[285]: 2026-10-05T10:42:43.162574751Z INFO Obtaining bundled SAN certificate. domains=test.foo container-test-run-certificates> server # [2690143.244746] server acme-order-renew-test.foo-start[285]: 2026-10-05T10:42:43.230548286Z INFO Use solver. domain=test.foo type=http-01 container-test-run-certificates> server # [2690143.244746] server acme-order-renew-test.foo-start[285]: 2026-10-05T10:42:43.230584166Z INFO http01: Trying to solve HTTP-01. domain=test.foo container-test-run-certificates> server # [2690143.251066] server acme-order-renew-test.foo-start[285]: 2026-10-05T10:42:43.236873773Z INFO The server validated our request. domain=test.foo container-test-run-certificates> server # [2690143.251153] server acme-order-renew-test.foo-start[285]: 2026-10-05T10:42:43.236943654Z INFO Validations succeeded; requesting certificates. domains=test.foo container-test-run-certificates> server # [2690143.264336] server acme-order-renew-test.foo-start[285]: 2026-10-05T10:42:43.250142115Z INFO Server responded with a certificate. domains=test.foo container-test-run-certificates> server # [2690143.264430] server acme-order-renew-test.foo-start[285]: 2026-10-05T10:42:43.250214516Z INFO Writing file. filepath=certificates/test.foo.crt container-test-run-certificates> server # [2690143.264500] server acme-order-renew-test.foo-start[285]: 2026-10-05T10:42:43.250321558Z INFO Writing file. filepath=certificates/test.foo.issuer.crt container-test-run-certificates> server # [2690143.264542] server acme-order-renew-test.foo-start[285]: 2026-10-05T10:42:43.250367438Z INFO Writing file. filepath=certificates/test.foo.key container-test-run-certificates> server # [2690143.264634] server acme-order-renew-test.foo-start[285]: 2026-10-05T10:42:43.250457960Z INFO Writing file. filepath=certificates/test.foo.json container-test-run-certificates> server # [2690143.269579] server acme-order-renew-test.foo-start[272]: + touch out/acme-success container-test-run-certificates> server # [2690143.271500] server acme-order-renew-test.foo-start[272]: + cmp -s certificates/test.foo.crt out/fullchain.pem container-test-run-certificates> server # [2690143.273087] server acme-order-renew-test.foo-start[272]: + touch out/renewed container-test-run-certificates> server # [2690143.274979] server acme-order-renew-test.foo-start[272]: + echo Installing new certificate container-test-run-certificates> server # [2690143.274979] server acme-order-renew-test.foo-start[272]: Installing new certificate container-test-run-certificates> server # [2690143.275023] server acme-order-renew-test.foo-start[272]: + cp -vp certificates/test.foo.crt out/fullchain.pem container-test-run-certificates> server # [2690143.276586] server acme-order-renew-test.foo-start[315]: 'certificates/test.foo.crt' -> 'out/fullchain.pem' container-test-run-certificates> server # [2690143.276887] server acme-order-renew-test.foo-start[272]: + cp -vp certificates/test.foo.key out/key.pem container-test-run-certificates> server # [2690143.278616] server acme-order-renew-test.foo-start[316]: 'certificates/test.foo.key' -> 'out/key.pem' container-test-run-certificates> server # [2690143.278886] server acme-order-renew-test.foo-start[272]: + cp -vp certificates/test.foo.issuer.crt out/chain.pem container-test-run-certificates> server # [2690143.280506] server acme-order-renew-test.foo-start[317]: 'certificates/test.foo.issuer.crt' -> 'out/chain.pem' container-test-run-certificates> server # [2690143.280755] server acme-order-renew-test.foo-start[272]: + ln -sf fullchain.pem out/cert.pem container-test-run-certificates> server # [2690143.282584] server acme-order-renew-test.foo-start[272]: + cat out/key.pem out/fullchain.pem container-test-run-certificates> server # [2690143.284414] server acme-order-renew-test.foo-start[272]: + for fixpath in out certificates container-test-run-certificates> server # [2690143.284435] server acme-order-renew-test.foo-start[272]: + '[' -d out ']' container-test-run-certificates> server # [2690143.284435] server acme-order-renew-test.foo-start[272]: + chmod -R u=rwX,g=rX,o= out container-test-run-certificates> server # [2690143.286187] server acme-order-renew-test.foo-start[272]: + chown -R acme:nginx out container-test-run-certificates> server # [2690143.289403] server acme-order-renew-test.foo-start[272]: + for fixpath in out certificates container-test-run-certificates> server # [2690143.289424] server acme-order-renew-test.foo-start[272]: + '[' -d certificates ']' container-test-run-certificates> server # [2690143.289441] server acme-order-renew-test.foo-start[272]: + chmod -R u=rwX,g=rX,o= certificates container-test-run-certificates> server # [2690143.291191] server acme-order-renew-test.foo-start[272]: + chown -R acme:nginx certificates container-test-run-certificates> server # [2690143.294476] server acme-order-renew-test.foo-start[272]: + chmod -R u=rwX,g=,o= accounts/. container-test-run-certificates> server # [2690143.440901] server systemd[1]: Reloading Nginx Web Server... container-test-run-certificates> ca # [2690143.158527] ca step-ca[207]: time="2026-10-05T10:42:43Z" level=info duration="86.561µs" duration-ns=86561 fields.time="2026-10-05T10:42:43Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="::1" request-id=661e5062-449f-47b6-b1b2-30ad5a6adf63 response="{\"newNonce\":\"https://ca.foo/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo/acme/acme/new-account\",\"newOrder\":\"https://ca.foo/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo/acme/acme/key-change\"}" size=252 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [2690143.169449] ca step-ca[207]: time="2026-10-05T10:42:43Z" level=info duration=6.823454ms duration-ns=6823454 fields.time="2026-10-05T10:42:43Z" method=HEAD name=ca nonce=a2ttNnFNSldmY1pyTklWZ1FVVnA0NjNCMnF5Smh0eG0 path=/acme/acme/new-nonce protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=18ceccd2-162c-4d9f-99f9-7cad16bfcbea size=0 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [2690143.175565] ca step-ca[207]: time="2026-10-05T10:42:43Z" level=info duration=2.832199ms duration-ns=2832199 fields.time="2026-10-05T10:42:43Z" method=POST name=ca nonce=c3RoVkV3U3oxOEVza2ZYY2k1QTZWV0g2YVNxdXV1QzE path=/acme/acme/new-account protocol=HTTP/1.1 referer= remote-address="::1" request-id=5b74016f-6576-4770-b2bf-f95437edd7b6 response="{\"contact\":[\"mailto:none@none.tld\"],\"status\":\"valid\",\"orders\":\"https://ca.foo/acme/acme/account/BZLgMsxrqMXmspur9p3tIa304EtARAcQ/orders\"}" size=138 status=201 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [2690143.183110] ca step-ca[207]: time="2026-10-05T10:42:43Z" level=info duration=2.775678ms duration-ns=2775678 fields.time="2026-10-05T10:42:43Z" method=POST name=ca nonce=VXJ2YVc1TU92WFFpbGVlOUt1U2U5R2N6WVplOVR4MWg path=/acme/acme/new-order protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=4ad8e5d8-6715-44a2-8e2f-39d35ad4471b response="{\"id\":\"kA123UYkTpGWGFlkVPePlmgKZvP7Ob2Q\",\"status\":\"pending\",\"expires\":\"2026-10-06T10:42:43Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"test.foo\"}],\"notBefore\":\"2026-10-05T10:41:43Z\",\"notAfter\":\"2027-01-03T10:42:43Z\",\"authorizations\":[\"https://ca.foo/acme/acme/authz/Um9Yxbp0A2vuCRvVjvalLeVXrIY5Tqxx\"],\"finalize\":\"https://ca.foo/acme/acme/order/kA123UYkTpGWGFlkVPePlmgKZvP7Ob2Q/finalize\"}" size=384 status=201 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [2690143.244252] ca step-ca[207]: time="2026-10-05T10:42:43Z" level=info duration=1.507901ms duration-ns=1507901 fields.time="2026-10-05T10:42:43Z" method=POST name=ca nonce=RzJpeVZNdUIzR2FjcHdET3FKTG5ZcUdYN3hKSUljWFg path=/acme/acme/authz/Um9Yxbp0A2vuCRvVjvalLeVXrIY5Tqxx protocol=HTTP/1.1 referer= remote-address="::1" request-id=782b177f-790a-4af6-b966-0c7254d413a7 response="{\"identifier\":{\"type\":\"dns\",\"value\":\"test.foo\"},\"status\":\"pending\",\"challenges\":[{\"type\":\"dns-01\",\"status\":\"pending\",\"token\":\"6ybgyDkk1vf4jUPC4zV1rTIoY7143O2G\",\"url\":\"https://ca.foo/acme/acme/challenge/Um9Yxbp0A2vuCRvVjvalLeVXrIY5Tqxx/c242fKrrWAF8piWB4P4Lp5U5kurQ8SJF\"},{\"type\":\"http-01\",\"status\":\"pending\",\"token\":\"6ybgyDkk1vf4jUPC4zV1rTIoY7143O2G\",\"url\":\"https://ca.foo/acme/acme/challenge/Um9Yxbp0A2vuCRvVjvalLeVXrIY5Tqxx/kNwGi7ZU4VjsCbB58g1zBs0aaZEruZdx\"},{\"type\":\"tls-alpn-01\",\"status\":\"pending\",\"token\":\"6ybgyDkk1vf4jUPC4zV1rTIoY7143O2G\",\"url\":\"https://ca.foo/acme/acme/challenge/Um9Yxbp0A2vuCRvVjvalLeVXrIY5Tqxx/D4id2k9teWDXOTro7IDyqsXEO3z4EwZ3\"}],\"wildcard\":false,\"expires\":\"2026-10-06T10:42:43Z\"}" size=706 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [2690143.250694] ca step-ca[207]: time="2026-10-05T10:42:43Z" level=info duration=3.175324ms duration-ns=3175324 fields.time="2026-10-05T10:42:43Z" method=POST name=ca nonce=SUN1RWxCNk1EZDlBQ3lvV0x1QlBjT1RGQkNHZWR2T2c path=/acme/acme/challenge/Um9Yxbp0A2vuCRvVjvalLeVXrIY5Tqxx/kNwGi7ZU4VjsCbB58g1zBs0aaZEruZdx protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=2efe7b37-1acd-4a35-a468-da35d013eb2d response="{\"type\":\"http-01\",\"status\":\"valid\",\"token\":\"6ybgyDkk1vf4jUPC4zV1rTIoY7143O2G\",\"validated\":\"2026-10-05T10:42:43Z\",\"url\":\"https://ca.foo/acme/acme/challenge/Um9Yxbp0A2vuCRvVjvalLeVXrIY5Tqxx/kNwGi7ZU4VjsCbB58g1zBs0aaZEruZdx\"}" size=223 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [2690143.258577] ca step-ca[207]: time="2026-10-05T10:42:43Z" level=info duration=5.031189ms duration-ns=5031189 fields.time="2026-10-05T10:42:43Z" method=POST name=ca nonce=QXpycWtUa0xYWHhTcm4xb29ZcVBLMFJhanJIcVFKdXA path=/acme/acme/order/kA123UYkTpGWGFlkVPePlmgKZvP7Ob2Q/finalize protocol=HTTP/1.1 referer= remote-address="::1" request-id=a7c008c7-98a7-4f5b-b80f-14161fb95be1 response="{\"id\":\"kA123UYkTpGWGFlkVPePlmgKZvP7Ob2Q\",\"status\":\"valid\",\"expires\":\"2026-10-06T10:42:43Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"test.foo\"}],\"notBefore\":\"2026-10-05T10:41:43Z\",\"notAfter\":\"2027-01-03T10:42:43Z\",\"authorizations\":[\"https://ca.foo/acme/acme/authz/Um9Yxbp0A2vuCRvVjvalLeVXrIY5Tqxx\"],\"finalize\":\"https://ca.foo/acme/acme/order/kA123UYkTpGWGFlkVPePlmgKZvP7Ob2Q/finalize\",\"certificate\":\"https://ca.foo/acme/acme/certificate/GfFZBlMuerLQ1fbYEhSEAMBoFlesZzFc\"}" size=468 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [2690143.263883] ca step-ca[207]: time="2026-10-05T10:42:43Z" level=info certificate=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 duration=1.832185ms duration-ns=1832185 fields.time="2026-10-05T10:42:43Z" issuer="Clan Intermediate CA" method=POST name=ca nonce=T1VxNWhMcmZtT3J1NTNCbk9nQUFjcjRaUEZVcG05S0M path=/acme/acme/certificate/GfFZBlMuerLQ1fbYEhSEAMBoFlesZzFc protocol=HTTP/1.1 provisioner=acme public-key="ECDSA P-256" referer= remote-address=127.0.0.1 request-id=f9b0c031-d8c5-4e83-bf80-b50f256593e0 sans="map[dns:[test.foo]]" serial=150599273399293203944666073687955515882 size=1344 status=200 subject=test.foo user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= valid-from="2026-10-05T10:41:43Z" valid-to="2027-01-03T10:42:43Z" container-test-run-certificates> server # [2690143.446930] server systemd[1]: acme-order-renew-test.foo.service: Deactivated successfully. container-test-run-certificates> server # [2690143.447244] server systemd[1]: Finished Order (and renew) ACME certificate for test.foo. container-test-run-certificates> server # [2690143.447620] server systemd[1]: acme-order-renew-test.foo.service: Consumed 1.142s CPU time over 1.355s wall clock time. container-test-run-certificates> server # [2690144.388573] server nginx[333]: nginx: the configuration file /nix/store/m0mx0dyvazvzhw8b23hfjcf1l4lh5wns-nginx.conf syntax is ok container-test-run-certificates> server # [2690144.389129] server nginx[333]: nginx: configuration file /nix/store/m0mx0dyvazvzhw8b23hfjcf1l4lh5wns-nginx.conf test is successful container-test-run-certificates> server: (finished: waiting for file '/var/lib/acme/test.foo/fullchain.pem', in 8.67 seconds) container-test-run-certificates> server: must succeed: systemctl restart nginx.service container-test-run-certificates> server # [2690145.252402] server systemd[1]: Reloaded Nginx Web Server. container-test-run-certificates> server # [2690145.252914] server systemd[1]: Startup finished in 7.867s. container-test-run-certificates> server # [2690145.557801] server systemd[1]: Stopping Nginx Web Server... container-test-run-certificates> server # [2690145.656409] server systemd[1]: nginx.service: Deactivated successfully. container-test-run-certificates> server # [2690145.656718] server systemd[1]: Stopped Nginx Web Server. container-test-run-certificates> server # [2690145.656801] server systemd[1]: nginx.service: Consumed 5.215s CPU time over 4.474s wall clock time. container-test-run-certificates> server # [2690145.661240] server systemd[1]: Starting Nginx Web Server... container-test-run-certificates> server: (finished: must succeed: systemctl restart nginx.service, in 1.03 seconds) container-test-run-certificates> client: waiting for success: curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: 2001:db8:1::3 container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying [2001:db8:1::3]:443... container-test-run-certificates> * connect to 2001:db8:1::3 port 443 from 2001:db8:1::2 port 49038 failed: Connection refused container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * connect to 192.168.1.3 port 443 from 192.168.1.2 port 35514 failed: Connection refused container-test-run-certificates> * Failed to connect to test.foo:443 after 2 ms: Could not connect to server container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (7) Failed to connect to test.foo:443 after 2 ms: Could not connect to server container-test-run-certificates> server # [2690146.571870] server nginx-pre-start[356]: nginx: the configuration file /nix/store/m0mx0dyvazvzhw8b23hfjcf1l4lh5wns-nginx.conf syntax is ok container-test-run-certificates> server # [2690146.572295] server nginx-pre-start[356]: nginx: configuration file /nix/store/m0mx0dyvazvzhw8b23hfjcf1l4lh5wns-nginx.conf test is successful container-test-run-certificates> server # [2690146.578580] server systemd[1]: Started Nginx Web Server. container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: 2001:db8:1::3 container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying [2001:db8:1::3]:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1554 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [930 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [80 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Oct 5 10:41:43 2026 GMT container-test-run-certificates> * expire date: Jan 3 10:42:43 2027 GMT container-test-run-certificates> * issuer: CN=Clan Intermediate CA container-test-run-certificates> * Certificate level 0: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 1: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 2: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 0 container-test-run-certificates> * SSL certificate verified via OpenSSL. container-test-run-certificates> * Established connection to test.foo (2001:db8:1::3 port 443) from 2001:db8:1::2 port 49044 container-test-run-certificates> % Total % Received % Xferd Average Speed Time Time Time Current container-test-run-certificates> Dload Upload Total Spent Left Speed container-test-run-certificates> 0 0 0 0 0 0 0 0 0* using HTTP/2 container-test-run-certificates> * [HTTP/2] [1] OPENED stream for https://test.foo/ container-test-run-certificates> * [HTTP/2] [1] [:method: GET] container-test-run-certificates> * [HTTP/2] [1] [:scheme: https] container-test-run-certificates> * [HTTP/2] [1] [:authority: test.foo] container-test-run-certificates> * [HTTP/2] [1] [:path: /] container-test-run-certificates> * [HTTP/2] [1] [user-agent: curl/8.22.0] container-test-run-certificates> * [HTTP/2] [1] [accept: */*] container-test-run-certificates> } [5 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> * Request completely sent off container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> { [5 bytes data] container-test-run-certificates> 100 20 100 20 0 0 623 0 0 container-test-run-certificates> * Connection #0 to host test.foo:443 left intact container-test-run-certificates> client: (finished: waiting for success: curl -v https://test.foo, in 1.07 seconds) container-test-run-certificates> client: must succeed: openssl s_client -connect test.foo:443 -servername test.foo /dev/null | openssl x509 -text -noout 1>&2 container-test-run-certificates> Certificate: container-test-run-certificates> Data: container-test-run-certificates> Version: 3 (0x2) container-test-run-certificates> Serial Number: container-test-run-certificates> 71:4c:5d:72:3a:f4:3d:22:c3:e2:3a:59:63:72:a9:ea container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Issuer: CN=Clan Intermediate CA container-test-run-certificates> Validity container-test-run-certificates> Not Before: Oct 5 10:41:43 2026 GMT container-test-run-certificates> Not After : Jan 3 10:42:43 2027 GMT container-test-run-certificates> Subject: CN=test.foo container-test-run-certificates> Subject Public Key Info: container-test-run-certificates> Public Key Algorithm: id-ecPublicKey container-test-run-certificates> Public-Key: (256 bit) container-test-run-certificates> pub: container-test-run-certificates> 04:d6:bb:29:a5:e7:0f:98:60:c6:f1:b3:e2:24:0a: container-test-run-certificates> b6:50:e1:d7:f8:b1:c5:e3:61:bd:28:0a:98:54:8e: container-test-run-certificates> d5:64:6a:ad:e5:62:47:16:cb:01:6c:a4:a1:ef:f5: container-test-run-certificates> 68:27:86:4f:82:70:60:cc:23:71:69:f3:76:df:20: container-test-run-certificates> 52:b8:ca:e0:99 container-test-run-certificates> ASN1 OID: prime256v1 container-test-run-certificates> NIST CURVE: P-256 container-test-run-certificates> X509v3 extensions: container-test-run-certificates> X509v3 Key Usage: critical container-test-run-certificates> Digital Signature container-test-run-certificates> X509v3 Extended Key Usage: container-test-run-certificates> TLS Web Server Authentication, TLS Web Client Authentication container-test-run-certificates> X509v3 Subject Key Identifier: container-test-run-certificates> AA:08:EB:2E:32:9D:22:BB:76:4D:9A:D1:FA:A6:64:66:85:54:9F:57 container-test-run-certificates> X509v3 Authority Key Identifier: container-test-run-certificates> BE:95:EE:44:85:AC:5F:20:9E:46:14:10:D8:06:6D:4B:C9:3B:4E:14 container-test-run-certificates> X509v3 Subject Alternative Name: container-test-run-certificates> DNS:test.foo container-test-run-certificates> 1.3.6.1.4.1.37476.9000.64.1: container-test-run-certificates> 0......acme.. container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Signature Value: container-test-run-certificates> 30:44:02:20:3d:25:cc:d4:1d:17:62:c4:63:b9:82:3c:bd:02: container-test-run-certificates> ae:83:98:68:1b:70:5e:6d:98:50:9d:6f:af:2d:db:0c:7c:28: container-test-run-certificates> 02:20:0f:6f:32:07:84:2b:b1:2c:db:af:f1:08:71:ee:d9:20: container-test-run-certificates> a7:c7:63:1a:b2:bb:9f:9c:7c:1d:25:d3:6f:cf:8e:a9 container-test-run-certificates> client: (finished: must succeed: openssl s_client -connect test.foo:443 -servername test.foo /dev/null | openssl x509 -text -noout 1>&2, in 0.04 seconds) container-test-run-certificates> (finished: run the VM test script, in 20.56 seconds) container-test-run-certificates> test script finished in 20.62s container-test-run-certificates> cleanup container-test-run-certificates> kill NspawnMachine (pid 50) container-test-run-certificates> kill NspawnMachine (pid 471) container-test-run-certificates> kill NspawnMachine (pid 468) container-test-run-certificates> Container ca terminated by signal KILL. container-test-run-certificates> Container client terminated by signal KILL. container-test-run-certificates> Container server terminated by signal KILL. container-test-run-certificates> (finished: cleanup, in 0.54 seconds)