these 55 derivations will be built: /nix/store/05znqlfqazh9igg5dlzb8zsxvrqz1fw5-testScript.drv /nix/store/075kp2drbhn4zf5vsjlqgi87bsp4nxf4-system-path.drv /nix/store/0jvwfmbw20lx5y0q73zyyl8nx7xk0zxd-dbus-1.drv /nix/store/5k3kds7lqcszh012hh6ac61ml0hi241b-system-path.drv /nix/store/vfdc2hjx1pn8jpwdh64afrb8w6axnpr2-dbus-1.drv /nix/store/781p4fryilhb9kb9lz135c7163jwgk7a-X-Restart-Triggers-dbus-broker.drv /nix/store/gywc43ck1f74swgyq35cdqf4z9n3i019-unit-dbus-broker.service.drv /nix/store/hbvgnjgqckniy372rwqxh8hq48dfvqh9-user-units.drv /nix/store/l0vhawsshg85iwn2gdrcdi50g3rc066v-string-hosts.drv /nix/store/zavz3i2sxjfpfdfmdprzc6143zb10fy6-extra-hosts.drv /nix/store/hi3511ibidshipa0c489mljq6d63b3fb-hosts.drv /nix/store/lr0n2l01ccq4b01w5gsqf76f5xv9iz3j-unit-40-eth1.network.drv /nix/store/n1cd4a18fx94y3xp21n0ra2x0sqfs3gx-tmpfiles.d.drv /nix/store/kmzw0nsjgk2pbcqi1ab4g4afnjgh3nmy-X-Reload-Triggers-systemd-networkd.drv /nix/store/dkrmmr2kh6z96li8ljq1izmm9iibwv55-unit-systemd-networkd.service.drv /nix/store/1ka3c6dlsnjz6xs789ma7nd9j378pnr7-nginx.conf.drv /nix/store/a7fbzj5jqn14c08qnq8v6klq2ama0qbs-unit-script-nginx-pre-start.drv /nix/store/h8hsvar6gkm7b3k7aj5d3wwflv95fvnw-unit-nginx.service.drv /nix/store/qfqx34i3milv20vqp08qkv1mn50fcc4y-unit-dbus-broker.service.drv /nix/store/jgsc06cyg8kh933jwy1g53mvmnns45sn-X-Restart-Triggers-systemd-tmpfiles-resetup.drv /nix/store/vnhhan4hrfwfgf00z6cfhwpm5nl7w3vk-unit-systemd-tmpfiles-resetup.service.drv /nix/store/pn1h25px5q6036ic2p2azh8p28pxdna2-system-units.drv /nix/store/v77q6105kwwj4qrlma040vfdh72bzvvc-etc-hostname.drv /nix/store/4nha8fwzpxkbc7vbqrj8593xcrzn5hpf-etc.drv /nix/store/pnlwki7q458xpnrm5g038157332n65nx-users-groups.json.drv /nix/store/0l8w6lj8fqz25ps11lvp64xqlhh0v0ps-activate.drv /nix/store/0p43b9rf5yjkc3j90mkk5h19x4ymcyws-string-hosts.drv /nix/store/14gk6ksfi184j13202l54ngnz241kv7g-firewall-stop.drv /nix/store/675lwyf9ifl0k0qfvrc0ldgwjqnsrzbk-X-Restart-Triggers-dbus-broker.drv /nix/store/289w40n0p2ygbl89hxag57wx7sfzr90i-unit-dbus-broker.service.drv /nix/store/2if10qb15wxxd32l6j7bsixmg8q4x4xi-firewall-start.drv /nix/store/38w72h1j53fxrcqimq0iq04ah4n4kp63-nginx.conf.drv /nix/store/p7maw8h852fibqxg9b53yl7k922bgv5l-unit-script-setup-wg0-interface-start.drv /nix/store/4hldy2yg7ivzhz0h75zifk3gr3fasp1a-unit-setup-wg0-interface.service.drv /nix/store/4vsp0idss9fmgmwam5fs5sk7q354nqfm-activate.drv /nix/store/503w0n8m2blggcgza6yp6q64zcbla23w-stage-2-init.sh.drv /nix/store/c5pjxpb651hgq2pxlc9q03hl1kg76ws6-unit-script-nginx-pre-start.drv /nix/store/k4bdrgzww9v4wmn9wj75h63an10k3i8w-unit-nginx.service.drv /nix/store/cmha7v4f53k75sai311kffzsa7qpf6sd-firewall-reload.drv /nix/store/kchxrn68kpxl3b55kz0jah1syw0aysq7-unit-firewall.service.drv /nix/store/az9jf7zcdya4g0yi6hy2bsv5dshjd1xy-system-units.drv /nix/store/w70sh6ijw3z5a500lvkyc5arllh798bg-user-units.drv /nix/store/zjcqhqa3z3by69j93qk1bvv2q8f2gszx-hosts.drv /nix/store/5a1wn9ggfcjd4nyai29bdmkcw1wc74dl-etc.drv /nix/store/g2xnzsq683hbrpplb8msy95rvscdfbpf-nixos-system-machine-test.drv /nix/store/5aavkp025xk2wnbmzb1y533dgnp6qja4-closure-info.drv /nix/store/fbg45l1gzhyf49j7052cfzwhn8y7rkc7-nixos-test-driver-user-firewall-iptables.drv /nix/store/a4w20962v4p4qhjwr7094yx7csbawi20-container-test-run-user-firewall-iptables.drv /nix/store/g2cij8amis71jm5pyclmcg43p3pwkiii-closure-info.drv /nix/store/gzd2x4nng6x31lhkynlkb1q5zs9gfhck-perl-5.42.0-env.drv /nix/store/ys6j81ar8z00yvk9j0hz3yrmlqijnj0m-dry-activate.drv /nix/store/gdvsv8cq2m1x7rj102ilgm4j3vvz9wka-nixos-system-router-test.drv /nix/store/mvzmz1f9gc2rvixhbfyrlzrh66fi3j2b-users-groups.json.drv /nix/store/j8xrbqfa5iks0b53rz6cxhx1jbr67pr8-dry-activate.drv /nix/store/r9kr4hy17wdx02a4x1772rnb93vq4f8i-unit-dbus-broker.service.drv these 37 paths will be fetched (0.0 KiB download, 157.3 MiB unpacked): /nix/store/1ravhdqllj8wlxz5gw9bqmcxbnpz23fa-boehm-gc-8.2.12-dev /nix/store/n03dc7xm09na7ivvkclbb871nm8gzzj3-boost-1.89.0-dev /nix/store/83z41w3364kb5cqcr0x34gppai9n29ib-ensure-all-wrappers-paths-exist /nix/store/dsrdyh8a69sasb8zr31ir5q1dihzkwds-gixy-0.1.21 /nix/store/7pm7jh7gjivmcrdk38xqd8chg9llcwfb-iproute2-7.0.0-dev /nix/store/xi0qccxyiv9qbswvzzhj23xjrf3cz3xh-libarchive-3.8.9-dev /nix/store/cdpxqm4cvcr26yjd2qrvq9p3gwpbavvg-make-shell-wrapper-hook /nix/store/7qlyswvasm8xhmjrgyl1m9k8fk9j6c3a-nix-2.34.8-dev /nix/store/zpqwh9dnb4nadrb51sgxambx5cwcdj56-nix-cmd-2.34.8-dev /nix/store/8sq3djj1h3fl8icj7piy9yknxdfpmwza-nix-expr-2.34.8-dev /nix/store/gin1gl8fdypjddjgyyy78cbfy07xcqhn-nix-expr-c-2.34.8 /nix/store/8f0b87r8w0q6ffyims2fwx8h7rgbk1la-nix-expr-c-2.34.8-dev /nix/store/sajks9f6dwbi2pa8994rw1l3n6hwg9zm-nix-fetchers-2.34.8-dev /nix/store/vf80n4s2zsp1zjyy66b8gfbbdggv7ac6-nix-fetchers-c-2.34.8 /nix/store/sfaqpchwzlbqjnnprrqd1ks6g5ila26v-nix-fetchers-c-2.34.8-dev /nix/store/4z9zjvkql1wc6pcrsihw50pc9dwarfgp-nix-flake-2.34.8-dev /nix/store/r5n1fcjxndgq3zpiy12sbgxhb11akiys-nix-flake-c-2.34.8 /nix/store/02ww7zwq56y10ss880i9wp2qbcn0gy6v-nix-flake-c-2.34.8-dev /nix/store/mw9cxcwp8f880zls4bk38dk18pi3r7pd-nix-main-2.34.8-dev /nix/store/a0g7ai680k1f37m3i8wck43n8g0qp738-nix-main-c-2.34.8 /nix/store/ss3d1dwv87kk7grx9lvzw3ln8qqdbl8m-nix-main-c-2.34.8-dev /nix/store/qgac5zhm8x93v97jmana22vdci29pzh2-nix-perl-2.34.8 /nix/store/ab5kk6kll2kn6d0zw4zvl6jgisb66zvf-nix-store-2.34.8-dev /nix/store/gkrfdhlmi5rdvhh1g5rg44k1lw5d93n0-nix-store-c-2.34.8 /nix/store/djv9sjxx6431i7lj1i7r6mr5byllayq5-nix-store-c-2.34.8-dev /nix/store/kx80s4nwqfvhk6cb1pb0xccziryj3va3-nix-util-2.34.8-dev /nix/store/qja7b4df1ln000lz8dwix6qa8c2r7r6b-nix-util-c-2.34.8 /nix/store/8qipwa82gr6b3jr5za251162wnykvwyb-nix-util-c-2.34.8-dev /nix/store/8krwg82dmyh939h3vz7ghm2qk2y7ljcx-nlohmann_json-3.12.0 /nix/store/i2ahcmvfd1pzv0p4lz822x12lav0rnam-openssl-3.6.4-dev /nix/store/vcp182jiw34hka11f57g0xi01kaxwjjx-python3.13-cached-property-2.0.1 /nix/store/3sxwlfhxwc703h0s1zk6141vhx5cni50-python3.13-configargparse-1.7.1 /nix/store/jfc2ri3w2l6zdp7crfmb14vchfiqw4ig-python3.13-jinja2-3.1.6 /nix/store/w5972gbzys1h7fmk2wp1bjdh5z64m8nz-python3.13-markupsafe-3.0.3 /nix/store/88iwq6iq4nvswmlnji7g3ra7zbc50ri2-python3.13-pyparsing-2.4.7 /nix/store/n93yssr2zk80l2xq0l19js2s9nkmjzmz-systemd-260.4-dev /nix/store/w4yw138a3hzpbihyfshgdsp2lydn6dy1-test-driver-0.0.1 warning: ignoring the client-specified setting 'store', because it is a restricted setting and you are not a trusted user building '/nix/store/2if10qb15wxxd32l6j7bsixmg8q4x4xi-firewall-start.drv' on nix-store.geninf.io:50051 firewall-start> web01: building 2if10qb15wxxd32l6j7bsixmg8q4x4xi-firewall-start.drv building '/nix/store/05znqlfqazh9igg5dlzb8zsxvrqz1fw5-testScript.drv' on nix-store.geninf.io:50051 testScript> web01: building 05znqlfqazh9igg5dlzb8zsxvrqz1fw5-testScript.drv building '/nix/store/075kp2drbhn4zf5vsjlqgi87bsp4nxf4-system-path.drv' on nix-store.geninf.io:50051 system-path> build-x86-01: building 075kp2drbhn4zf5vsjlqgi87bsp4nxf4-system-path.drv system-path> structuredAttrs is enabled system-path> created 1752 symlinks in user environment building '/nix/store/gdvsv8cq2m1x7rj102ilgm4j3vvz9wka-nixos-system-router-test.drv' on nix-store.geninf.io:50051 nixos-system-router-test> build-x86-01: building gdvsv8cq2m1x7rj102ilgm4j3vvz9wka-nixos-system-router-test.drv nixos-system-router-test> structuredAttrs is enabled building '/nix/store/14gk6ksfi184j13202l54ngnz241kv7g-firewall-stop.drv' on nix-store.geninf.io:50051 firewall-stop> gi-build-x86-02: building 14gk6ksfi184j13202l54ngnz241kv7g-firewall-stop.drv building '/nix/store/0jvwfmbw20lx5y0q73zyyl8nx7xk0zxd-dbus-1.drv' on nix-store.geninf.io:50051 dbus-1> build-x86-01: building 0jvwfmbw20lx5y0q73zyyl8nx7xk0zxd-dbus-1.drv building '/nix/store/g2cij8amis71jm5pyclmcg43p3pwkiii-closure-info.drv' on nix-store.geninf.io:50051 closure-info> build-x86-01: building g2cij8amis71jm5pyclmcg43p3pwkiii-closure-info.drv closure-info> structuredAttrs is enabled building '/nix/store/675lwyf9ifl0k0qfvrc0ldgwjqnsrzbk-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-dbus-broker> build-x86-01: building 675lwyf9ifl0k0qfvrc0ldgwjqnsrzbk-X-Restart-Triggers-dbus-broker.drv building '/nix/store/cmha7v4f53k75sai311kffzsa7qpf6sd-firewall-reload.drv' on nix-store.geninf.io:50051 firewall-reload> gi-build-x86-02: building cmha7v4f53k75sai311kffzsa7qpf6sd-firewall-reload.drv building '/nix/store/kchxrn68kpxl3b55kz0jah1syw0aysq7-unit-firewall.service.drv' on nix-store.geninf.io:50051 unit-firewall.service> gi-build-x86-02: building kchxrn68kpxl3b55kz0jah1syw0aysq7-unit-firewall.service.drv building '/nix/store/r9kr4hy17wdx02a4x1772rnb93vq4f8i-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build-x86-01: building r9kr4hy17wdx02a4x1772rnb93vq4f8i-unit-dbus-broker.service.drv building '/nix/store/289w40n0p2ygbl89hxag57wx7sfzr90i-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build-x86-01: building 289w40n0p2ygbl89hxag57wx7sfzr90i-unit-dbus-broker.service.drv building '/nix/store/w70sh6ijw3z5a500lvkyc5arllh798bg-user-units.drv' on nix-store.geninf.io:50051 user-units> build-x86-01: building w70sh6ijw3z5a500lvkyc5arllh798bg-user-units.drv building '/nix/store/az9jf7zcdya4g0yi6hy2bsv5dshjd1xy-system-units.drv' on nix-store.geninf.io:50051 system-units> build-x86-01: building az9jf7zcdya4g0yi6hy2bsv5dshjd1xy-system-units.drv building '/nix/store/5a1wn9ggfcjd4nyai29bdmkcw1wc74dl-etc.drv' on nix-store.geninf.io:50051 etc> build-x86-01: building 5a1wn9ggfcjd4nyai29bdmkcw1wc74dl-etc.drv building '/nix/store/4vsp0idss9fmgmwam5fs5sk7q354nqfm-activate.drv' on nix-store.geninf.io:50051 activate> build-x86-01: building 4vsp0idss9fmgmwam5fs5sk7q354nqfm-activate.drv building '/nix/store/g2xnzsq683hbrpplb8msy95rvscdfbpf-nixos-system-machine-test.drv' on nix-store.geninf.io:50051 nixos-system-machine-test> build-x86-01: building g2xnzsq683hbrpplb8msy95rvscdfbpf-nixos-system-machine-test.drv nixos-system-machine-test> structuredAttrs is enabled building '/nix/store/5aavkp025xk2wnbmzb1y533dgnp6qja4-closure-info.drv' on nix-store.geninf.io:50051 closure-info> build-x86-01: building 5aavkp025xk2wnbmzb1y533dgnp6qja4-closure-info.drv closure-info> structuredAttrs is enabled building '/nix/store/fbg45l1gzhyf49j7052cfzwhn8y7rkc7-nixos-test-driver-user-firewall-iptables.drv' on nix-store.geninf.io:50051 nixos-test-driver-user-firewall-iptables> gi-build-x86-02: building fbg45l1gzhyf49j7052cfzwhn8y7rkc7-nixos-test-driver-user-firewall-iptables.drv nixos-test-driver-user-firewall-iptables> Running type check (enable/disable: config.skipTypeCheck) nixos-test-driver-user-firewall-iptables> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck nixos-test-driver-user-firewall-iptables> Success: no issues found in 1 source file building '/nix/store/a4w20962v4p4qhjwr7094yx7csbawi20-container-test-run-user-firewall-iptables.drv' on nix-store.geninf.io:50051 container-test-run-user-firewall-iptables> build-x86-01: building a4w20962v4p4qhjwr7094yx7csbawi20-container-test-run-user-firewall-iptables.drv container-test-run-user-firewall-iptables> additionally exposed symbols: container-test-run-user-firewall-iptables> machine, router, container-test-run-user-firewall-iptables> start_all, machines, driver, Machine, wait_for_signal container-test-run-user-firewall-iptables> Starting machine container-test-run-user-firewall-iptables> Starting router container-test-run-user-firewall-iptables> container-test-run-user-firewall-iptables> container-test-run-user-firewall-iptables> container-test-run-user-firewall-iptables> <<< NixOS Stage 2 >>> container-test-run-user-firewall-iptables> container-test-run-user-firewall-iptables> booting system configuration /nix/store/jsxv83lnmn659lg13q5l8f5fqmpv0xp6-nixos-system-machine-test container-test-run-user-firewall-iptables> running activation script... container-test-run-user-firewall-iptables> setting up /etc... container-test-run-user-firewall-iptables> 2: host0@if3: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-user-firewall-iptables> link/ether 0e:74:26:22:81:c2 brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-user-firewall-iptables> starting systemd... container-test-run-user-firewall-iptables> systemd 260.4 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-user-firewall-iptables> Detected virtualization systemd-nspawn. container-test-run-user-firewall-iptables> Detected architecture x86-64. container-test-run-user-firewall-iptables> Detected first boot. container-test-run-user-firewall-iptables> Initializing machine ID from container UUID. container-test-run-user-firewall-iptables> Applying preset policy. container-test-run-user-firewall-iptables> Populated /etc with preset unit settings. container-test-run-user-firewall-iptables> Queued start job for default target Multi-User System. container-test-run-user-firewall-iptables> container-test-run-user-firewall-iptables> container-test-run-user-firewall-iptables> container-test-run-user-firewall-iptables> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-user-firewall-iptables> + systemd-run /bin/sh -c '/nix/store/833invqvsk7anqnqrki5hqncrcllj825-coreutils-9.11/bin/sleep 999999999 && echo 025085a5-96d3-4104-b3b0-7205b6035aac' container-test-run-user-firewall-iptables> Running as unit: run-p346-i1703294.service; invocation ID: b131c18c93594d5895d95a2008567c31 container-test-run-user-firewall-iptables> To attach to container machine run on the same machine that runs the test: container-test-run-user-firewall-iptables> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*025085a5-96d3-4104-b3b0-7205b6035aac') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-user-firewall-iptables> container-test-run-user-firewall-iptables> To inject external network and continue test, run: container-test-run-user-firewall-iptables> sudo /nix/store/9r02ykx9y35lf4gk6gc30gnag1y8ncp7-python3-3.13.15/bin/python3.13 /nix/store/w4yw138a3hzpbihyfshgdsp2lydn6dy1-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py 025085a5-96d3-4104-b3b0-7205b6035aac container-test-run-user-firewall-iptables> container-test-run-user-firewall-iptables> <<< NixOS Stage 2 >>> container-test-run-user-firewall-iptables> container-test-run-user-firewall-iptables> booting system configuration /nix/store/2md3xyplrif8dcrbygzwv8h6mh50dg7l-nixos-system-router-test container-test-run-user-firewall-iptables> running activation script... container-test-run-user-firewall-iptables> setting up /etc... container-test-run-user-firewall-iptables> 2: host0@if4: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-user-firewall-iptables> link/ether a6:24:31:fe:b9:6d brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-user-firewall-iptables> starting systemd... container-test-run-user-firewall-iptables> systemd 260.4 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-user-firewall-iptables> Detected virtualization systemd-nspawn. container-test-run-user-firewall-iptables> Detected architecture x86-64. container-test-run-user-firewall-iptables> Detected first boot. container-test-run-user-firewall-iptables> Initializing machine ID from container UUID. container-test-run-user-firewall-iptables> Applying preset policy. container-test-run-user-firewall-iptables> Populated /etc with preset unit settings. container-test-run-user-firewall-iptables> Queued start job for default target Multi-User System. container-test-run-user-firewall-iptables> container-test-run-user-firewall-iptables> container-test-run-user-firewall-iptables> container-test-run-user-firewall-iptables> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-user-firewall-iptables> + systemd-run /bin/sh -c '/nix/store/833invqvsk7anqnqrki5hqncrcllj825-coreutils-9.11/bin/sleep 999999999 && echo c23e882a-688c-4c3b-bcc2-b23aa0f3266a' container-test-run-user-firewall-iptables> Running as unit: run-p209-i1703297.service; invocation ID: 3de052e9c31f42da859dc05a7a930f38 container-test-run-user-firewall-iptables> To attach to container router run on the same machine that runs the test: container-test-run-user-firewall-iptables> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*c23e882a-688c-4c3b-bcc2-b23aa0f3266a') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-user-firewall-iptables> container-test-run-user-firewall-iptables> To inject external network and continue test, run: container-test-run-user-firewall-iptables> sudo /nix/store/9r02ykx9y35lf4gk6gc30gnag1y8ncp7-python3-3.13.15/bin/python3.13 /nix/store/w4yw138a3hzpbihyfshgdsp2lydn6dy1-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py c23e882a-688c-4c3b-bcc2-b23aa0f3266a container-test-run-user-firewall-iptables> + systemctl --no-pager show multi-user.target container-test-run-user-firewall-iptables> + systemctl --no-pager show nginx.service container-test-run-user-firewall-iptables> + systemctl --no-pager show multi-user.target container-test-run-user-firewall-iptables> + systemctl --no-pager show nginx.service container-test-run-user-firewall-iptables> + ip -4 addr show eth1 container-test-run-user-firewall-iptables> + grep -oP '(?<=inet\s)\d+(\.\d+){3}' container-test-run-user-firewall-iptables> + ip -6 addr show eth1 container-test-run-user-firewall-iptables> + grep -oP '(?<=inet6\s)[0-9a-f:]+' container-test-run-user-firewall-iptables> + grep -v '^fe80' container-test-run-user-firewall-iptables> + head -1 container-test-run-user-firewall-iptables> Router IPv4: 192.168.1.2 container-test-run-user-firewall-iptables> Router IPv6: 2001:db8:1::2 container-test-run-user-firewall-iptables> + systemctl restart firewall container-test-run-user-firewall-iptables> + systemctl --no-pager show firewall.service container-test-run-user-firewall-iptables> + iptables -L user-firewall-output container-test-run-user-firewall-iptables> Chain user-firewall-output (1 references) container-test-run-user-firewall-iptables> target prot opt source destination container-test-run-user-firewall-iptables> RETURN all -- anywhere anywhere container-test-run-user-firewall-iptables> RETURN all -- anywhere anywhere container-test-run-user-firewall-iptables> RETURN all -- anywhere anywhere container-test-run-user-firewall-iptables> RETURN all -- anywhere anywhere container-test-run-user-firewall-iptables> RETURN all -- anywhere anywhere container-test-run-user-firewall-iptables> RETURN all -- anywhere anywhere container-test-run-user-firewall-iptables> RETURN all -- anywhere anywhere container-test-run-user-firewall-iptables> RETURN all -- anywhere anywhere container-test-run-user-firewall-iptables> RETURN all -- anywhere anywhere container-test-run-user-firewall-iptables> RETURN all -- anywhere anywhere container-test-run-user-firewall-iptables> RETURN all -- anywhere anywhere container-test-run-user-firewall-iptables> RETURN all -- anywhere anywhere container-test-run-user-firewall-iptables> RETURN all -- anywhere anywhere container-test-run-user-firewall-iptables> RETURN all -- anywhere anywhere container-test-run-user-firewall-iptables> RETURN all -- anywhere anywhere container-test-run-user-firewall-iptables> REJECT all -- anywhere anywhere owner UID match bob reject-with icmp-port-unreachable container-test-run-user-firewall-iptables> RETURN all -- anywhere anywhere container-test-run-user-firewall-iptables> machine: waiting for success: runuser -u alice -- curl -s http://127.0.0.1:8080 container-test-run-user-firewall-iptables> + runuser -u alice -- curl -s http://127.0.0.1:8080 container-test-run-user-firewall-iptables> (finished: waiting for success: runuser -u alice -- curl -s http://127.0.0.1:8080, in 0.01 seconds) container-test-run-user-firewall-iptables> + runuser -u alice -- curl -s http://192.168.1.2 container-test-run-user-firewall-iptables> + runuser -u alice -- curl -s 'http://[2001:db8:1::2]' container-test-run-user-firewall-iptables> + runuser -u bob -- curl -s http://127.0.0.1:8080 container-test-run-user-firewall-iptables> + runuser -u bob -- curl -s --connect-timeout 2 http://192.168.1.2 container-test-run-user-firewall-iptables> + echo EXIT_CODE=7 container-test-run-user-firewall-iptables> + runuser -u bob -- curl -s --connect-timeout 2 'http://[2001:db8:1::2]' container-test-run-user-firewall-iptables> + echo EXIT_CODE=7 container-test-run-user-firewall-iptables> + iptables -L user-firewall-output -n -v container-test-run-user-firewall-iptables> + ip6tables -L user-firewall-output -n -v container-test-run-user-firewall-iptables> + systemctl --no-pager show setup-wg0-interface.service container-test-run-user-firewall-iptables> + systemctl --no-pager show nginx.service container-test-run-user-firewall-iptables> machine: waiting for success: nc -z 10.100.0.2 8081 container-test-run-user-firewall-iptables> + nc -z 10.100.0.2 8081 container-test-run-user-firewall-iptables> Connection to 10.100.0.2 8081 port [tcp/sunproxyadmin] succeeded! container-test-run-user-firewall-iptables> (finished: waiting for success: nc -z 10.100.0.2 8081, in 0.00 seconds) container-test-run-user-firewall-iptables> + ip link show wg0 container-test-run-user-firewall-iptables> + ip addr show wg0 container-test-run-user-firewall-iptables> + runuser -u alice -- curl -s --interface wg0 http://10.100.0.2:8081/ container-test-run-user-firewall-iptables> + runuser -u alice -- curl -s --interface wg0 'http://[fd00::2]:8081/' container-test-run-user-firewall-iptables> + runuser -u bob -- curl -s --interface wg0 http://10.100.0.2:8081/ container-test-run-user-firewall-iptables> + runuser -u bob -- curl -s --interface wg0 'http://[fd00::2]:8081/' container-test-run-user-firewall-iptables> + iptables -L user-firewall-output -n -v container-test-run-user-firewall-iptables> + grep -E 'wg0|wg\+' container-test-run-user-firewall-iptables> 0 0 RETURN all -- * wg+ 0.0.0.0/0 0.0.0.0/0 container-test-run-user-firewall-iptables> container-test-run-user-firewall-iptables>