build01: building cvvmcb0gigjbfnx9wd21ckj48fngnyfn-container-test-run-user-firewall-iptables.drv Machine state will be reset. To keep it, pass --keep-machine-state start all VLans (finished: start all VLans, in 0.00 seconds) Test will time out and terminate in 3600.0 seconds run the VM test script additionally exposed symbols: machine, router, vlan1, start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh start all VMs machine: systemd-nspawn running (pid 52) router: systemd-nspawn running (pid 53) machine: Waiting for journal at /build/vm-state-machine/var/log/journal... router: Waiting for journal at /build/vm-state-router/var/log/journal... (finished: start all VMs, in 0.00 seconds) router: waiting for unit multi-user.target nixos-nspawn(router): TAP vde-tap1 not found; container will be isolated from VDE nixos-nspawn(router): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths. nixos-nspawn(machine): TAP vde-tap1 not found; container will be isolated from VDE nixos-nspawn(machine): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths. Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file. Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file. ░ Spawning container router on /build/vm-state-router. ░ Spawning container machine on /build/vm-state-machine. machine # No journal files were found. machine # No journal boot entry found for the specified boot (+0). router # No journal files were found. router # No journal boot entry found for the specified boot (+0). machine # [2843458.553535] machine systemd-journald[57]: Journal started machine # [2843458.553597] machine systemd-journald[57]: Runtime Journal (/run/log/journal/9bc6c2cc6bc44a3ea58e1240f63418a0) is 8M, max 2.5G, 2.4G free. machine # [2843458.562883] machine systemd[1]: Finished Apply Kernel Variables. machine # [2843458.577290] machine systemd[1]: Finished Create Static Device Nodes in /dev gracefully. machine # [2843458.591778] machine systemd[1]: Starting Flush Journal to Persistent Storage... machine # [2843458.632432] machine systemd[1]: Starting Create Static Device Nodes in /dev... machine # [2843458.641145] machine systemd-journald[57]: Time spent on flushing to /var/log/journal/9bc6c2cc6bc44a3ea58e1240f63418a0 is 1.325ms for 6 entries. machine # [2843458.641145] machine systemd-journald[57]: System Journal (/var/log/journal/9bc6c2cc6bc44a3ea58e1240f63418a0) is 8M, max 4G, 3.9G free. machine # [2843458.654515] machine systemd[1]: Finished Create Static Device Nodes in /dev. machine # [2843458.655142] machine systemd[1]: Reached target Preparation for Local File Systems. router # [2843458.564682] router systemd-journald[57]: Journal started router # [2843458.564739] router systemd-journald[57]: Runtime Journal (/run/log/journal/71758ddbfc1843b18a19ea6e06e01683) is 8M, max 2.5G, 2.4G free. router # [2843458.575233] router systemd[1]: Finished Create Static Device Nodes in /dev gracefully. router # [2843458.588040] router systemd[1]: Starting Flush Journal to Persistent Storage... machine # [2843458.655261] machine systemd[1]: Reached target Local File Systems. router # [2843458.588914] router systemd[1]: Starting Network Name Resolution... machine # [2843458.656132] machine systemd[1]: Listening on Boot Loader Control Service Socket. router # [2843458.589545] router systemd[1]: Starting Create Static Device Nodes in /dev... machine # [2843458.656183] machine systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container router # [2843458.638703] router systemd-journald[57]: Time spent on flushing to /var/log/journal/71758ddbfc1843b18a19ea6e06e01683 is 1.729ms for 6 entries. machine # [2843458.657174] machine systemd[1]: Starting Save Transient machine-id to Disk... router # [2843458.638703] router systemd-journald[57]: System Journal (/var/log/journal/71758ddbfc1843b18a19ea6e06e01683) is 8M, max 4G, 3.9G free. machine # [2843458.657212] machine systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys router # [2843458.651209] router systemd[1]: Finished Create Static Device Nodes in /dev. machine # [2843458.663671] machine systemd[1]: Finished Flush Journal to Persistent Storage. router # [2843458.651803] router systemd[1]: Reached target Preparation for Local File Systems. machine # [2843458.664503] machine systemd[1]: Starting Create System Files and Directories... router # [2843458.651914] router systemd[1]: Reached target Local File Systems. machine # [2843458.682291] machine systemd-tmpfiles[132]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted router # [2843458.652772] router systemd[1]: Listening on Boot Loader Control Service Socket. machine # [2843458.682475] machine systemd-tmpfiles[132]: fchmod() of /var/log/journal failed: Operation not permitted router # [2843458.652822] router systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container machine # [2843458.682914] machine systemd-tmpfiles[132]: fchmod() of /var/log/journal/9bc6c2cc6bc44a3ea58e1240f63418a0 failed: Operation not permitted router # [2843458.653715] router systemd[1]: Starting Save Transient machine-id to Disk... machine # [2843458.683102] machine systemd-tmpfiles[132]: fchmod() of /run/log/journal failed: Operation not permitted router # [2843458.653752] router systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys machine # [2843458.684715] machine systemd[1]: Finished Create System Files and Directories. router # [2843458.654694] router systemd[1]: Starting Network Management... machine # [2843458.685900] machine systemd[1]: Starting Rebuild Journal Catalog... router # [2843458.657607] router systemd[1]: Finished Flush Journal to Persistent Storage. machine # [2843458.686850] machine systemd[1]: Starting Record System Boot/Shutdown in UTMP... router # [2843458.658421] router systemd[1]: Starting Create System Files and Directories... machine # [2843458.702548] machine systemd[1]: Finished Save Transient machine-id to Disk. router # [2843458.677367] router systemd-tmpfiles[72]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted machine # [2843458.705049] machine systemd[1]: Finished Record System Boot/Shutdown in UTMP. router # [2843458.677586] router systemd-tmpfiles[72]: fchmod() of /var/log/journal failed: Operation not permitted machine # [2843458.710634] machine systemd[1]: Finished Rebuild Journal Catalog. router # [2843458.677736] router systemd-tmpfiles[72]: fchmod() of /var/log/journal/71758ddbfc1843b18a19ea6e06e01683 failed: Operation not permitted machine # [2843458.711928] machine systemd[1]: Starting Update is Completed... router # [2843458.677955] router systemd-tmpfiles[72]: fchmod() of /run/log/journal failed: Operation not permitted machine # [2843458.723465] machine systemd[1]: Finished Update is Completed. router # [2843458.679545] router systemd[1]: Finished Create System Files and Directories. machine # [2843458.723704] machine systemd[1]: Reached target System Initialization. router # [2843458.680721] router systemd[1]: Starting Rebuild Journal Catalog... machine # [2843458.723810] machine systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container router # [2843458.681506] router systemd[1]: Starting Record System Boot/Shutdown in UTMP... machine # [2843458.723865] machine systemd[1]: Started Daily Cleanup of Temporary Directories. router # [2843458.698935] router systemd[1]: Finished Record System Boot/Shutdown in UTMP. machine # [2843458.723895] machine systemd[1]: Reached target Timer Units. router # [2843458.702179] router systemd[1]: Finished Save Transient machine-id to Disk. machine # [2843458.724081] machine systemd[1]: Listening on D-Bus System Message Bus Socket. router # [2843458.702656] router systemd[1]: Finished Rebuild Journal Catalog. machine # [2843458.724256] machine systemd[1]: Listening on Nix Daemon Socket. router # [2843458.704860] router systemd[1]: Starting Update is Completed... machine # [2843458.724420] machine systemd[1]: Listening on Virtual Machine and Container Registration Service Socket. router # [2843458.715169] router systemd[1]: Finished Update is Completed. machine # [2843458.724456] machine systemd[1]: Reached target Socket Units. router # [2843459.285681] router systemd-networkd[69]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted machine # [2843458.724512] machine systemd[1]: Reached target Basic System. router # [2843459.285775] router systemd-networkd[69]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted machine # [2843458.725853] machine systemd[1]: Starting Import lastlog data into lastlog2 database... router # [2843459.294871] router systemd-networkd[69]: lo: Link UP machine # [2843458.726974] machine systemd[1]: Starting Name Service Cache Daemon (nsncd)... router # [2843459.294883] router systemd-networkd[69]: lo: Gained carrier machine # [2843458.746286] machine systemd[1]: Finished Import lastlog data into lastlog2 database. router # [2843459.295055] router systemd-networkd[69]: eth1: Configuring with /etc/systemd/network/40-eth1.network. machine # [2843458.808305] machine systemd[1]: Finished Firewall. router # [2843459.295482] router systemd[1]: Started Network Management. machine # [2843458.808589] machine systemd[1]: Reached target Preparation for Network. router # [2843459.295887] router systemd-networkd[69]: eth1: Link UP machine # [2843458.810067] machine systemd[1]: Starting Address configuration of eth1... router # [2843459.296121] router systemd-networkd[69]: eth1: Gained carrier router # [2843459.297192] router systemd[1]: Starting Enable Persistent Storage in systemd-networkd... router # [2843459.336597] router systemd[1]: Finished Enable Persistent Storage in systemd-networkd. router # [2843459.570990] router systemd[1]: etc-machine\x2did.mount: Deactivated successfully. machine # [2843458.811362] machine systemd[1]: Starting Extra networking commands.... machine # [2843458.812727] machine systemd[1]: Starting Setup wg0 dummy interface... machine # [2843458.841009] machine systemd[1]: Started Name Service Cache Daemon (nsncd). machine # [2843458.841351] machine nsncd[172]: Oct 07 05:17:58.826 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket" machine # [2843458.841113] machine systemd[1]: Reached target Host and Network Name Lookups. machine # [2843458.841205] machine systemd[1]: Reached target User and Group Name Lookups. machine # [2843458.853754] machine systemd[1]: Starting User Login Management... machine # [2843458.870812] machine network-addresses-eth1-start[215]: adding address 192.168.1.1/24... done machine # [2843458.871629] machine systemd[1]: Finished Setup wg0 dummy interface. machine # [2843458.875066] machine network-addresses-eth1-start[215]: adding address 2001:db8:1::1/64... done machine # [2843458.881131] machine systemd[1]: Finished Address configuration of eth1. machine # [2843458.918217] machine systemd[1]: Stopped target Host and Network Name Lookups. machine # [2843458.918283] machine systemd[1]: Stopping Host and Network Name Lookups... machine # [2843458.918459] machine systemd[1]: Stopped target User and Group Name Lookups. machine # [2843458.918504] machine systemd[1]: Stopping User and Group Name Lookups... machine # [2843458.918709] machine systemd[1]: Stopping Name Service Cache Daemon (nsncd)... machine # [2843458.924065] machine systemd[1]: nscd.service: Deactivated successfully. machine # [2843458.924269] machine systemd[1]: Stopped Name Service Cache Daemon (nsncd). machine # [2843458.926529] machine systemd[1]: Starting Name Service Cache Daemon (nsncd)... machine # [2843458.936419] machine systemd[1]: Finished Extra networking commands.. machine # [2843458.936718] machine systemd[1]: Reached target Network. machine # [2843458.938559] machine systemd[1]: Starting Nginx Web Server... machine # [2843459.050377] machine systemd[1]: Started Name Service Cache Daemon (nsncd). machine # [2843459.051319] machine nsncd[297]: Oct 07 05:17:59.036 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket" machine # [2843459.050455] machine systemd[1]: Reached target Host and Network Name Lookups. machine # [2843459.050514] machine systemd[1]: Reached target User and Group Name Lookups. machine # [2843459.052344] machine systemd[1]: Starting Permit User Sessions... machine # [2843459.099991] machine systemd[1]: Finished Permit User Sessions. machine # [2843459.101216] machine systemd[1]: Started Console Getty. machine # [2843459.101272] machine systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0 machine # [2843459.101294] machine systemd[1]: Reached target Login Prompts. machine # [2843459.562153] machine systemd[1]: etc-machine\x2did.mount: Deactivated successfully. machine # [2843459.565655] machine systemd-logind[228]: New seat seat0. machine # [2843459.565944] machine systemd[1]: Started User Login Management. machine # [2843459.567544] machine systemd[1]: Starting D-Bus System Message Bus... machine # [2843459.569158] machine systemd[1]: Starting linger-users.service... machine # [2843459.627081] machine systemd[1]: linger-users.service: Deactivated successfully. machine # [2843459.627393] machine systemd[1]: Finished linger-users.service. machine # [2843459.740207] machine nginx-pre-start[326]: nginx: the configuration file /nix/store/rbrd4r9lh3iq8rkq3ciiriyvjx160fh7-nginx.conf syntax is ok machine # [2843459.740759] machine nginx-pre-start[326]: nginx: configuration file /nix/store/rbrd4r9lh3iq8rkq3ciiriyvjx160fh7-nginx.conf test is successful machine # [2843459.746538] machine systemd[1]: Started Nginx Web Server. machine # [2843459.746879] machine systemd[1]: Reached target Multi-User System. router # [2843459.726558] router systemd-resolved[64]: Positive Trust Anchors: router # [2843459.726570] router systemd-resolved[64]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d router # [2843459.726573] router systemd-resolved[64]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 router # [2843459.726609] router systemd-resolved[64]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test router # [2843459.746726] router systemd-resolved[64]: Using system hostname 'router'. router # [2843459.748102] router systemd[1]: Started Network Name Resolution. router # [2843459.748229] router systemd[1]: Reached target Network. router # [2843459.748348] router systemd[1]: Reached target System Initialization. router # [2843459.748448] router systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container router # [2843459.748496] router systemd[1]: Started Daily Cleanup of Temporary Directories. router # [2843459.748535] router systemd[1]: Reached target Timer Units. router # [2843459.748763] router systemd[1]: Listening on D-Bus System Message Bus Socket. router # [2843459.748972] router systemd[1]: Listening on Nix Daemon Socket. router # [2843459.749192] router systemd[1]: Listening on Virtual Machine and Container Registration Service Socket. router # [2843459.749237] router systemd[1]: Reached target Socket Units. router # [2843459.749322] router systemd[1]: Reached target Basic System. router # [2843459.751289] router systemd[1]: Starting Import lastlog data into lastlog2 database... router # [2843459.752746] router systemd[1]: Starting Nginx Web Server... router # [2843459.754251] router systemd[1]: Starting Name Service Cache Daemon (nsncd)... router # [2843459.820629] router systemd[1]: Starting D-Bus System Message Bus... router # [2843459.839030] router systemd[1]: Finished Import lastlog data into lastlog2 database. router # [2843460.019178] router systemd[1]: Started Name Service Cache Daemon (nsncd). router # [2843460.019241] router systemd[1]: Reached target Host and Network Name Lookups. router # [2843460.019309] router systemd[1]: Reached target User and Group Name Lookups. router # [2843460.019837] router nsncd[87]: Oct 07 05:18:00.005 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket" router # [2843460.020522] router systemd[1]: Starting User Login Management... router # [2843460.021425] router systemd[1]: Starting Permit User Sessions... router # [2843460.033961] router systemd[1]: Finished Permit User Sessions. router # [2843460.035641] router systemd[1]: Started Console Getty. router # [2843460.035717] router systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0 router # [2843460.035761] router systemd[1]: Reached target Login Prompts. router # [2843460.142850] router dbus-broker-launch[88]: Looking up NSS user entry for 'systemd-timesync'... machine # [2843459.924700] machine dbus-broker-launch[322]: Looking up NSS user entry for 'systemd-timesync'... machine # [2843459.926180] machine dbus-broker-launch[322]: NSS returned no entry for 'systemd-timesync' machine # [2843459.926180] machine dbus-broker-launch[322]: Invalid user-name in /nix/store/l1kla89mzxxpvir1a09sr97c5qvp3a0x-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync" machine # [2843459.926645] machine systemd[1]: Started D-Bus System Message Bus. machine # [2843459.927095] machine systemd[1]: Startup finished in 1.843s. machine # [2843459.934233] machine dbus-broker-launch[322]: Ready router # [2843460.144266] router dbus-broker-launch[88]: NSS returned no entry for 'systemd-timesync' router # [2843460.144266] router dbus-broker-launch[88]: Invalid user-name in /nix/store/99ngr5ck174ncqg45shbgx0crbkdsn94-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync" router # [2843460.145032] router systemd[1]: Started D-Bus System Message Bus. router # [2843460.153698] router dbus-broker-launch[88]: Ready router # [2843460.677881] router nginx-pre-start[117]: nginx: the configuration file /nix/store/c6kyqxh5q3bfawa27n0rqih6f6fa1paj-nginx.conf syntax is ok router # [2843460.678474] router nginx-pre-start[117]: nginx: configuration file /nix/store/c6kyqxh5q3bfawa27n0rqih6f6fa1paj-nginx.conf test is successful router # [2843460.683262] router systemd[1]: Started Nginx Web Server. router # [2843460.749125] router systemd-logind[103]: New seat seat0. router # [2843460.749323] router systemd[1]: Started User Login Management. router # [2843460.751484] router systemd[1]: Starting linger-users.service... router # [2843460.794708] router systemd[1]: linger-users.service: Deactivated successfully. router # [2843460.795058] router systemd[1]: Finished linger-users.service. router # [2843460.795884] router systemd[1]: Reached target Multi-User System. router # [2843460.796353] router systemd[1]: Startup finished in 2.690s. router: (finished: waiting for unit multi-user.target, in 3.66 seconds) router: waiting for unit nginx.service router: (finished: waiting for unit nginx.service, in 0.02 seconds) machine: waiting for unit multi-user.target machine: (finished: waiting for unit multi-user.target, in 0.02 seconds) machine: waiting for unit nginx.service machine: (finished: waiting for unit nginx.service, in 0.02 seconds) router: must succeed: ip -4 addr show eth1 | grep -oP '(?<=inet\s)\d+(\.\d+){3}' router: (finished: must succeed: ip -4 addr show eth1 | grep -oP '(?<=inet\s)\d+(\.\d+){3}', in 0.01 seconds) router: must succeed: ip -6 addr show eth1 | grep -oP '(?<=inet6\s)[0-9a-f:]+' | grep -v '^fe80' | head -1 router: (finished: must succeed: ip -6 addr show eth1 | grep -oP '(?<=inet6\s)[0-9a-f:]+' | grep -v '^fe80' | head -1, in 0.01 seconds) Router IPv4: 192.168.1.2 Router IPv6: 2001:db8:1::2 machine: must succeed: systemctl restart firewall router # [2843461.092283] router systemd-networkd[69]: eth1: Gained IPv6LL machine # [2843461.366074] machine systemd[1]: Stopping Firewall... machine # [2843461.801944] machine systemd[1]: firewall.service: Deactivated successfully. machine # [2843461.802291] machine systemd[1]: Stopped Firewall. machine # [2843461.804894] machine systemd[1]: Starting Firewall... machine: (finished: must succeed: systemctl restart firewall, in 1.46 seconds) machine: waiting for unit firewall.service machine: (finished: waiting for unit firewall.service, in 0.02 seconds) machine: must succeed: iptables -L user-firewall-output >&2 Chain user-firewall-output (1 references) target prot opt source destination RETURN all -- anywhere anywhere RETURN all -- anywhere anywhere RETURN all -- anywhere anywhere RETURN all -- anywhere anywhere RETURN all -- anywhere anywhere RETURN all -- anywhere anywhere RETURN all -- anywhere anywhere RETURN all -- anywhere anywhere RETURN all -- anywhere anywhere RETURN all -- anywhere anywhere RETURN all -- anywhere anywhere RETURN all -- anywhere anywhere RETURN all -- anywhere anywhere RETURN all -- anywhere anywhere RETURN all -- anywhere anywhere REJECT all -- anywhere anywhere owner UID match bob reject-with icmp-port-unreachable RETURN all -- anywhere anywhere machine: (finished: must succeed: iptables -L user-firewall-output >&2, in 0.01 seconds) machine: waiting for success: runuser -u alice -- curl -s http://127.0.0.1:8080 machine: (finished: waiting for success: runuser -u alice -- curl -s http://127.0.0.1:8080, in 0.02 seconds) machine: must succeed: runuser -u alice -- curl -s http://192.168.1.2 machine: (finished: must succeed: runuser -u alice -- curl -s http://192.168.1.2, in 0.02 seconds) machine: must succeed: runuser -u alice -- curl -s http://[2001:db8:1::2] machine: (finished: must succeed: runuser -u alice -- curl -s http://[2001:db8:1::2], in 0.02 seconds) machine: must succeed: runuser -u bob -- curl -s http://127.0.0.1:8080 machine: (finished: must succeed: runuser -u bob -- curl -s http://127.0.0.1:8080, in 0.02 seconds) machine: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://192.168.1.2 2>&1 || echo 'EXIT_CODE='$? machine: (finished: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://192.168.1.2 2>&1 || echo 'EXIT_CODE='$?, in 0.02 seconds) machine: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://[2001:db8:1::2] 2>&1 || echo 'EXIT_CODE='$? machine # [2843462.815591] machine systemd[1]: Finished Firewall. machine # [2843462.853366] machine runuser[485]: pam_unix(runuser:session): session opened for user alice(uid=1001) by (uid=0) machine # [2843462.864885] machine runuser[485]: pam_unix(runuser:session): session closed for user alice machine # [2843462.875294] machine runuser[487]: pam_unix(runuser:session): session opened for user alice(uid=1001) by (uid=0) machine # [2843462.886652] machine runuser[487]: pam_unix(runuser:session): session closed for user alice machine # [2843462.897564] machine runuser[489]: pam_unix(runuser:session): session opened for user alice(uid=1001) by (uid=0) machine # [2843462.908365] machine runuser[489]: pam_unix(runuser:session): session closed for user alice machine # [2843462.918345] machine runuser[491]: pam_unix(runuser:session): session opened for user bob(uid=1002) by (uid=0) machine # [2843462.928592] machine runuser[491]: pam_unix(runuser:session): session closed for user bob machine # [2843462.938344] machine runuser[494]: pam_unix(runuser:session): session opened for user bob(uid=1002) by (uid=0) machine # [2843462.948098] machine runuser[494]: pam_unix(runuser:session): session closed for user bob machine # [2843462.958716] machine runuser[497]: pam_unix(runuser:session): session opened for user bob(uid=1002) by (uid=0) machine: (finished: must succeed: runuser -u bob -- curl -s --connect-timeout 2 http://[2001:db8:1::2] 2>&1 || echo 'EXIT_CODE='$?, in 1.02 seconds) machine: must succeed: iptables -L user-firewall-output -n -v machine: (finished: must succeed: iptables -L user-firewall-output -n -v, in 0.01 seconds) machine: must succeed: ip6tables -L user-firewall-output -n -v machine: (finished: must succeed: ip6tables -L user-firewall-output -n -v, in 0.01 seconds) machine: waiting for unit setup-wg0-interface.service machine: (finished: waiting for unit setup-wg0-interface.service, in 0.02 seconds) machine: waiting for unit nginx.service machine: (finished: waiting for unit nginx.service, in 0.02 seconds) machine: waiting for TCP port 8081 on 10.100.0.2 Connection to 10.100.0.2 8081 port [tcp/sunproxyadmin] succeeded! machine: (finished: waiting for TCP port 8081 on 10.100.0.2, in 0.01 seconds) machine: must succeed: ip link show wg0 machine: (finished: must succeed: ip link show wg0, in 0.01 seconds) machine: must succeed: ip addr show wg0 machine: (finished: must succeed: ip addr show wg0, in 0.01 seconds) machine: must succeed: runuser -u alice -- curl -s --interface wg0 http://10.100.0.2:8081/ machine: (finished: must succeed: runuser -u alice -- curl -s --interface wg0 http://10.100.0.2:8081/, in 0.02 seconds) machine: must succeed: runuser -u alice -- curl -s --interface wg0 http://[fd00::2]:8081/ machine: (finished: must succeed: runuser -u alice -- curl -s --interface wg0 http://[fd00::2]:8081/, in 0.02 seconds) machine: must succeed: runuser -u bob -- curl -s --interface wg0 http://10.100.0.2:8081/ machine: (finished: must succeed: runuser -u bob -- curl -s --interface wg0 http://10.100.0.2:8081/, in 0.02 seconds) machine: must succeed: runuser -u bob -- curl -s --interface wg0 http://[fd00::2]:8081/ machine: (finished: must succeed: runuser -u bob -- curl -s --interface wg0 http://[fd00::2]:8081/, in 0.02 seconds) machine: must succeed: iptables -L user-firewall-output -n -v | grep -E 'wg0|wg\+' >&2 0 0 RETURN all -- * wg+ 0.0.0.0/0 0.0.0.0/0 machine: (finished: must succeed: iptables -L user-firewall-output -n -v | grep -E 'wg0|wg\+' >&2, in 0.01 seconds) (finished: run the VM test script, in 6.54 seconds) test script finished in 6.57s cleanup kill NspawnMachine (pid 52) kill NspawnMachine (pid 53) Container machine terminated by signal KILL. Container router terminated by signal KILL. (finished: cleanup, in 0.38 seconds)