don't know how to build these paths: /nix/store/xp4n58s8rxnl4pkf6gzpzvcfvhqf5nnn-container-test-run-certificates.drv warning: ignoring the client-specified setting 'store', because it is a restricted setting and you are not a trusted user building '/nix/store/269iibkj7hh6zfdyj5bdj4zhad7pdh6d-system-path.drv' on nix-store.geninf.io:50051 system-path> build01: building 269iibkj7hh6zfdyj5bdj4zhad7pdh6d-system-path.drv building '/nix/store/063ha44ahqqq0r45h4h92j7jvamqpp9z-system-path.drv' on nix-store.geninf.io:50051 system-path> build01: building 063ha44ahqqq0r45h4h92j7jvamqpp9z-system-path.drv system-path> structuredAttrs is enabled system-path> structuredAttrs is enabled system-path> created 1810 symlinks in user environment system-path> created 1810 symlinks in user environment building '/nix/store/bj97ss66wwsm2jy17h8wvm0awwrvi2d5-system-path.drv' on nix-store.geninf.io:50051 system-path> build01: building bj97ss66wwsm2jy17h8wvm0awwrvi2d5-system-path.drv system-path> structuredAttrs is enabled system-path> created 1810 symlinks in user environment building '/nix/store/ypx30lm63c1zi11klrppyahls7arhyw6-ca.json.drv' on nix-store.geninf.io:50051 ca.json> build01: building ypx30lm63c1zi11klrppyahls7arhyw6-ca.json.drv building '/nix/store/7s7fg2h48fqskxxjr9d5bxwz2r3g7n7f-nginx.conf.drv' on nix-store.geninf.io:50051 nginx.conf> build01: building 7s7fg2h48fqskxxjr9d5bxwz2r3g7n7f-nginx.conf.drv building '/nix/store/d44dgknh1pkhvrm9vww0g70mgpbl5jnf-nginx.conf.drv' on nix-store.geninf.io:50051 nginx.conf> build01: building d44dgknh1pkhvrm9vww0g70mgpbl5jnf-nginx.conf.drv ca.json> structuredAttrs is enabled building '/nix/store/1mspdb1jrdjzjh3pxv0r7ngkvylr95sx-root.tmpl.drv' on nix-store.geninf.io:50051 root.tmpl> build01: building 1mspdb1jrdjzjh3pxv0r7ngkvylr95sx-root.tmpl.drv building '/nix/store/0gm552njjyyzakdhx5fki1g1dlpr9xyl-unit-script-acme-test.foo-start.drv' on nix-store.geninf.io:50051 unit-script-acme-test.foo-start> build01: building 0gm552njjyyzakdhx5fki1g1dlpr9xyl-unit-script-acme-test.foo-start.drv nginx.conf> nginx.conf> ==================== Results =================== nginx.conf> No issues found. nginx.conf> nginx.conf> ==================== Summary =================== nginx.conf> Total issues: nginx.conf> Unspecified: 0 nginx.conf> Low: 0 nginx.conf> Medium: 0 nginx.conf> High: 0 nginx.conf> building '/nix/store/3pixx56jlwcvjs813krk7knh9vywzh9i-acme-setup-privileged.drv' on nix-store.geninf.io:50051 acme-setup-privileged> build01: building 3pixx56jlwcvjs813krk7knh9vywzh9i-acme-setup-privileged.drv nginx.conf> nginx.conf> ==================== Results =================== nginx.conf> No issues found. nginx.conf> nginx.conf> ==================== Summary =================== nginx.conf> Total issues: nginx.conf> Unspecified: 0 nginx.conf> Low: 0 nginx.conf> Medium: 0 nginx.conf> High: 0 nginx.conf> building '/nix/store/8bz54w7l91pnnknk8gsr85gh2yslb1m6-acme-postrun.drv' on nix-store.geninf.io:50051 acme-postrun> build01: building 8bz54w7l91pnnknk8gsr85gh2yslb1m6-acme-postrun.drv building '/nix/store/574dsr05sws5c574givm09cfvl0cjhfm-acme-setup-privileged.drv' on nix-store.geninf.io:50051 acme-setup-privileged> build01: building 574dsr05sws5c574givm09cfvl0cjhfm-acme-setup-privileged.drv building '/nix/store/89s36nzzy8zn72nbqwlv6wwij8i0zd4j-unit-script-acme-order-renew-ca.foo-start.drv' on nix-store.geninf.io:50051 unit-script-acme-order-renew-ca.foo-start> build01: building 89s36nzzy8zn72nbqwlv6wwij8i0zd4j-unit-script-acme-order-renew-ca.foo-start.drv building '/nix/store/8pkiq1rhlaa97irva4ayj89dqyl6yvzg-intermediate.tmpl.drv' on nix-store.geninf.io:50051 intermediate.tmpl> build01: building 8pkiq1rhlaa97irva4ayj89dqyl6yvzg-intermediate.tmpl.drv building '/nix/store/i0r8pvb36m1c9afbkyc8gbqrs397m3b7-unit-script-acme-order-renew-test.foo-start.drv' on nix-store.geninf.io:50051 unit-script-acme-order-renew-test.foo-start> build01: building i0r8pvb36m1c9afbkyc8gbqrs397m3b7-unit-script-acme-order-renew-test.foo-start.drv building '/nix/store/m4lkh840rdr4ih974kjxs4v8fwyhg5yh-unit-script-acme-ca.foo-start.drv' on nix-store.geninf.io:50051 unit-script-acme-ca.foo-start> build01: building m4lkh840rdr4ih974kjxs4v8fwyhg5yh-unit-script-acme-ca.foo-start.drv building '/nix/store/iijqkkh72r0wqgy1dg5s055zkd89zfr5-X-Restart-Triggers-acme-ca.foo.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-acme-ca.foo> build01: building iijqkkh72r0wqgy1dg5s055zkd89zfr5-X-Restart-Triggers-acme-ca.foo.drv building '/nix/store/wsyr003vch2mlbmmm3jhcl8qjq0ks91b-acme-postrun.drv' on nix-store.geninf.io:50051 acme-postrun> build01: building wsyr003vch2mlbmmm3jhcl8qjq0ks91b-acme-postrun.drv building '/nix/store/6b09m16nhdjxnrqlpkrrwq1sk4fdi4qa-unit-acme-account-d22a46d9459bf683a338.target.drv' on nix-store.geninf.io:50051 unit-acme-account-d22a46d9459bf683a338.target> build01: building 6b09m16nhdjxnrqlpkrrwq1sk4fdi4qa-unit-acme-account-d22a46d9459bf683a338.target.drv building '/nix/store/mg0fj71wcd7mnx46i0vpryxzglb7zlj1-nss-cacert-3.126.drv' on nix-store.geninf.io:50051 nss-cacert-3.126> build01: building mg0fj71wcd7mnx46i0vpryxzglb7zlj1-nss-cacert-3.126.drv building '/nix/store/pc43skhzis66nagh2wz5sq7pk29180vm-X-Restart-Triggers-acme-test.foo.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-acme-test.foo> build01: building pc43skhzis66nagh2wz5sq7pk29180vm-X-Restart-Triggers-acme-test.foo.drv building '/nix/store/7av749zwiywi9dmjl2hq9vhnnf6fgk8h-string-hosts.drv' on nix-store.geninf.io:50051 string-hosts> build01: building 7av749zwiywi9dmjl2hq9vhnnf6fgk8h-string-hosts.drv building '/nix/store/96fyk8p4dn9wzw78hiaifm67g4qxnw2g-extra-hosts.drv' on nix-store.geninf.io:50051 extra-hosts> build01: building 96fyk8p4dn9wzw78hiaifm67g4qxnw2g-extra-hosts.drv nss-cacert-3.126> Running phase: unpackPhase nss-cacert-3.126> Running phase: patchPhase nss-cacert-3.126> Running phase: updateAutotoolsGnuConfigScriptsPhase nss-cacert-3.126> Running phase: configurePhase nss-cacert-3.126> no configure script, doing nothing nss-cacert-3.126> Running phase: buildPhase building '/nix/store/9ds7rjqa01yqrq3a0rsxv0fwbp0zbrhd-unit-acme-renew-test.foo.timer.drv' on nix-store.geninf.io:50051 unit-acme-renew-test.foo.timer> build01: building 9ds7rjqa01yqrq3a0rsxv0fwbp0zbrhd-unit-acme-renew-test.foo.timer.drv building '/nix/store/hh8l3k6gbfbqblgqian9ck8kfbwfg94l-unit-nginx-config-reload.service.drv' on nix-store.geninf.io:50051 unit-nginx-config-reload.service> build01: building hh8l3k6gbfbqblgqian9ck8kfbwfg94l-unit-nginx-config-reload.service.drv building '/nix/store/lxvjasjkr8g9d0dpknhzh8c6s62lsiii-unit-acme-account-2c44cb477b4787b2cf13.target.drv' on nix-store.geninf.io:50051 unit-acme-account-2c44cb477b4787b2cf13.target> build01: building lxvjasjkr8g9d0dpknhzh8c6s62lsiii-unit-acme-account-2c44cb477b4787b2cf13.target.drv building '/nix/store/lk08mrp4gx4cfbjsnacl2m4xcm3ly5iz-unit-acme-renew-ca.foo.timer.drv' on nix-store.geninf.io:50051 unit-acme-renew-ca.foo.timer> build01: building lk08mrp4gx4cfbjsnacl2m4xcm3ly5iz-unit-acme-renew-ca.foo.timer.drv nss-cacert-3.126> Running phase: installPhase nss-cacert-3.126> Running phase: fixupPhase nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/a3j1jl5prq3d486iy7miv4id6xdlr7ma-nss-cacert-3.126 nss-cacert-3.126> checking for references to /build/ in /nix/store/a3j1jl5prq3d486iy7miv4id6xdlr7ma-nss-cacert-3.126... nss-cacert-3.126> patching script interpreter paths in /nix/store/a3j1jl5prq3d486iy7miv4id6xdlr7ma-nss-cacert-3.126 nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/nx8377spk40bfvx151vm7i62vbqsrx5a-nss-cacert-3.126-unbundled nss-cacert-3.126> checking for references to /build/ in /nix/store/nx8377spk40bfvx151vm7i62vbqsrx5a-nss-cacert-3.126-unbundled... nss-cacert-3.126> patching script interpreter paths in /nix/store/nx8377spk40bfvx151vm7i62vbqsrx5a-nss-cacert-3.126-unbundled nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/fndf9iqmyl4cm6zc16xnl5harl37h498-nss-cacert-3.126-p11kit nss-cacert-3.126> checking for references to /build/ in /nix/store/fndf9iqmyl4cm6zc16xnl5harl37h498-nss-cacert-3.126-p11kit... nss-cacert-3.126> patching script interpreter paths in /nix/store/fndf9iqmyl4cm6zc16xnl5harl37h498-nss-cacert-3.126-p11kit nss-cacert-3.126> shrinking RPATHs of ELF executables and libraries in /nix/store/fd26y6a8dkfamck7rm95fz2nch9wpbyp-nss-cacert-3.126-hashed nss-cacert-3.126> checking for references to /build/ in /nix/store/fd26y6a8dkfamck7rm95fz2nch9wpbyp-nss-cacert-3.126-hashed... nss-cacert-3.126> patching script interpreter paths in /nix/store/fd26y6a8dkfamck7rm95fz2nch9wpbyp-nss-cacert-3.126-hashed building '/nix/store/ychh2hsh0jix5x6d3ysac74wzzj9xvhr-unit-nginx-config-reload.service.drv' on nix-store.geninf.io:50051 unit-nginx-config-reload.service> build01: building ychh2hsh0jix5x6d3ysac74wzzj9xvhr-unit-nginx-config-reload.service.drv building '/nix/store/y10kzx976pdwrgzi1ck5xym6bx3axwbj-etc-hostname.drv' on nix-store.geninf.io:50051 etc-hostname> build01: building y10kzx976pdwrgzi1ck5xym6bx3axwbj-etc-hostname.drv building '/nix/store/65iamzwaz4jsls108cd3fnp5wmxm5ha4-users-groups.json.drv' on nix-store.geninf.io:50051 users-groups.json> build01: building 65iamzwaz4jsls108cd3fnp5wmxm5ha4-users-groups.json.drv building '/nix/store/g0gy7y4bm0awc4xdi9dp0l60id8m4rbp-users-groups.json.drv' on nix-store.geninf.io:50051 users-groups.json> build01: building g0gy7y4bm0awc4xdi9dp0l60id8m4rbp-users-groups.json.drv building '/nix/store/75j12l1rha4vmx87jvsv9aivaddx8gr4-decrypt-age-secrets.drv' on nix-store.geninf.io:50051 decrypt-age-secrets> build01: building 75j12l1rha4vmx87jvsv9aivaddx8gr4-decrypt-age-secrets.drv building '/nix/store/ia4h51f20dy9fxmnp9bkm6za93sqs1vb-testScript.drv' on nix-store.geninf.io:50051 testScript> build01: building ia4h51f20dy9fxmnp9bkm6za93sqs1vb-testScript.drv building '/nix/store/px7q0i62rqgnfxb68rsg5xxnrv6m4397-generator-step-intermediate-key.drv' on nix-store.geninf.io:50051 generator-step-intermediate-key> build01: building px7q0i62rqgnfxb68rsg5xxnrv6m4397-generator-step-intermediate-key.drv building '/nix/store/srwx6nh5z7pmqxfqi15d1pd0n3davp7w-system-generators.drv' on nix-store.geninf.io:50051 system-generators> build01: building srwx6nh5z7pmqxfqi15d1pd0n3davp7w-system-generators.drv building '/nix/store/iygv6g2ari638pvxj3acaxh6mnbsqxfr-user-generators.drv' on nix-store.geninf.io:50051 user-generators> build01: building iygv6g2ari638pvxj3acaxh6mnbsqxfr-user-generators.drv building '/nix/store/xvfa4prm3svmsbfijpklrn106qdjkih5-system-shutdown.drv' on nix-store.geninf.io:50051 system-shutdown> build01: building xvfa4prm3svmsbfijpklrn106qdjkih5-system-shutdown.drv building '/nix/store/54bh86fmm7nhq9dxwv62bnjnamnjlbxa-dbus-1.drv' on nix-store.geninf.io:50051 dbus-1> build01: building 54bh86fmm7nhq9dxwv62bnjnamnjlbxa-dbus-1.drv building '/nix/store/z1rmkkr9swi06nvqdm91g68bkpn0ikp9-dbus-1.drv' on nix-store.geninf.io:50051 dbus-1> build01: building z1rmkkr9swi06nvqdm91g68bkpn0ikp9-dbus-1.drv building '/nix/store/gc9a4f9mvjsgwy7c0yqm32izillcki5q-X-Restart-Triggers-step-ca.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-step-ca> build01: building gc9a4f9mvjsgwy7c0yqm32izillcki5q-X-Restart-Triggers-step-ca.drv building '/nix/store/7jq8xc6k6z928fq52875im1c1c9mnf56-generator-step-ca.drv' on nix-store.geninf.io:50051 generator-step-ca> build01: building 7jq8xc6k6z928fq52875im1c1c9mnf56-generator-step-ca.drv building '/nix/store/zl402vc989shn5dcs2wzy6f19ibq1k7p-dbus-1.drv' on nix-store.geninf.io:50051 dbus-1> build01: building zl402vc989shn5dcs2wzy6f19ibq1k7p-dbus-1.drv building '/nix/store/kypy0j8k1zw0bniv7zsl4mwcz3r5scxv-unit-script-nginx-pre-start.drv' on nix-store.geninf.io:50051 unit-script-nginx-pre-start> build01: building kypy0j8k1zw0bniv7zsl4mwcz3r5scxv-unit-script-nginx-pre-start.drv building '/nix/store/pijza5vaq0cfw1z1q1xa60wpvpzird69-unit-acme-setup.service.drv' on nix-store.geninf.io:50051 unit-acme-setup.service> build01: building pijza5vaq0cfw1z1q1xa60wpvpzird69-unit-acme-setup.service.drv building '/nix/store/k0rd3lyfsr8iz3za1b8jr1ppgqhfgnr9-unit-acme-order-renew-ca.foo.service.drv' on nix-store.geninf.io:50051 unit-acme-order-renew-ca.foo.service> build01: building k0rd3lyfsr8iz3za1b8jr1ppgqhfgnr9-unit-acme-order-renew-ca.foo.service.drv building '/nix/store/glf02jb00b7b5ayz3m08fakajynqf5sx-unit-script-nginx-pre-start.drv' on nix-store.geninf.io:50051 unit-script-nginx-pre-start> build01: building glf02jb00b7b5ayz3m08fakajynqf5sx-unit-script-nginx-pre-start.drv building '/nix/store/3yaaml95s71dmmvna7033sm4g1vzfpak-generator-step-intermediate-cert.drv' on nix-store.geninf.io:50051 generator-step-intermediate-cert> build01: building 3yaaml95s71dmmvna7033sm4g1vzfpak-generator-step-intermediate-cert.drv building '/nix/store/6k9fgnmlgd2dajf8r452l5718x5ivj0k-unit-acme-setup.service.drv' on nix-store.geninf.io:50051 unit-acme-setup.service> build01: building 6k9fgnmlgd2dajf8r452l5718x5ivj0k-unit-acme-setup.service.drv building '/nix/store/ag08l1s32rmva00hkhjnb0n38vw6jnp6-unit-acme-ca.foo.service.drv' on nix-store.geninf.io:50051 unit-acme-ca.foo.service> build01: building ag08l1s32rmva00hkhjnb0n38vw6jnp6-unit-acme-ca.foo.service.drv building '/nix/store/9k5zj176xksf8j8qwgig1kg9sa0mc4w1-unit-acme-order-renew-test.foo.service.drv' on nix-store.geninf.io:50051 unit-acme-order-renew-test.foo.service> build01: building 9k5zj176xksf8j8qwgig1kg9sa0mc4w1-unit-acme-order-renew-test.foo.service.drv building '/nix/store/zdigdy0n0bgx3mjx2j4vqqi68xzn6p6a-unit-acme-test.foo.service.drv' on nix-store.geninf.io:50051 unit-acme-test.foo.service> build01: building zdigdy0n0bgx3mjx2j4vqqi68xzn6p6a-unit-acme-test.foo.service.drv building '/nix/store/rsvhn1kipk18xwz2i9x4bcjgrm4dyvcj-hosts.drv' on nix-store.geninf.io:50051 hosts> build01: building rsvhn1kipk18xwz2i9x4bcjgrm4dyvcj-hosts.drv building '/nix/store/qr67fj3x6wn658jszazc9lzrziwyb7l1-hosts.drv' on nix-store.geninf.io:50051 hosts> build01: building qr67fj3x6wn658jszazc9lzrziwyb7l1-hosts.drv building '/nix/store/z3msdw5llivzbdlr367q7ws90zqmgqab-unit-nix-daemon.service.drv' on nix-store.geninf.io:50051 unit-nix-daemon.service> build01: building z3msdw5llivzbdlr367q7ws90zqmgqab-unit-nix-daemon.service.drv building '/nix/store/yypf51ds8874xay1c00h7vshvy7szwiy-hosts.drv' on nix-store.geninf.io:50051 hosts> build01: building yypf51ds8874xay1c00h7vshvy7szwiy-hosts.drv building '/nix/store/nhbd2zrvbn60xcpqd2d12yhsq0manldn-dry-activate.drv' on nix-store.geninf.io:50051 dry-activate> build01: building nhbd2zrvbn60xcpqd2d12yhsq0manldn-dry-activate.drv building '/nix/store/k8d2f5kc1hh8r70qzm0wrr4n0nn6d75c-dry-activate.drv' on nix-store.geninf.io:50051 dry-activate> build01: building k8d2f5kc1hh8r70qzm0wrr4n0nn6d75c-dry-activate.drv building '/nix/store/anp4a601i38pj2riz8fgk76zicrgsn8i-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-dbus-broker> build01: building anp4a601i38pj2riz8fgk76zicrgsn8i-X-Restart-Triggers-dbus-broker.drv building '/nix/store/y6yq4vxjf46y5d3q307k2a8ffyvqhhw8-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-dbus-broker> build01: building y6yq4vxjf46y5d3q307k2a8ffyvqhhw8-X-Restart-Triggers-dbus-broker.drv building '/nix/store/rba59fhv95ghx6xk710hh3ndjqddvn76-unit-step-ca.service.drv' on nix-store.geninf.io:50051 unit-step-ca.service> build01: building rba59fhv95ghx6xk710hh3ndjqddvn76-unit-step-ca.service.drv building '/nix/store/kfl7c1xgak0375dkaadqnqfv839vlv6r-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-dbus-broker> build01: building kfl7c1xgak0375dkaadqnqfv839vlv6r-X-Restart-Triggers-dbus-broker.drv building '/nix/store/lx9zh1fvf97igi3ki43paqsxpsszigxz-unit-nginx.service.drv' on nix-store.geninf.io:50051 unit-nginx.service> build01: building lx9zh1fvf97igi3ki43paqsxpsszigxz-unit-nginx.service.drv building '/nix/store/qdv2bdsh8jz4jfdvg0xq36ycvv72wmh5-unit-nginx.service.drv' on nix-store.geninf.io:50051 unit-nginx.service> build01: building qdv2bdsh8jz4jfdvg0xq36ycvv72wmh5-unit-nginx.service.drv building '/nix/store/j7skifg2cfbzqfqh4kr5gfhnxj30bypd-vars-check-certificates.drv' on nix-store.geninf.io:50051 vars-check-certificates> build01: building j7skifg2cfbzqfqh4kr5gfhnxj30bypd-vars-check-certificates.drv vars-check-certificates> Running vars check using Nix-based executor... vars-check-certificates> Executing shared generators... vars-check-certificates> Executing shared generator: step-ca vars-check-certificates> + set -euo pipefail vars-check-certificates> + PATH=/nix/store/b76g9760ai9y13xdsvl6f2h49cj7l0ng-step-cli-0.30.2/bin:/nix/store/3l7ygqcc6v0rbi9d4j1m6phi6sz86j98-coreutils-9.11/bin vars-check-certificates> + [[ ! -d /etc ]] vars-check-certificates> + mkdir -p /etc vars-check-certificates> + cat vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> ++ id -u vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> + step certificate create --template /nix/store/4dsqzmp8nyix94k5df2zc2acwxwk455r-root.tmpl 'Clan Root CA' /output/ca.crt /output/ca.key --kty EC --curve P-256 --not-after=8760h --not-before=-12h --no-password --insecure vars-check-certificates> Your certificate has been saved in /output/ca.crt. vars-check-certificates> Your private key has been saved in /output/ca.key. vars-check-certificates> ✓ Generated shared file: step-ca/ca.crt vars-check-certificates> ✓ Generated shared file: step-ca/ca.key vars-check-certificates> ✓ Shared Generator step-ca completed vars-check-certificates> ✓ Shared generators completed vars-check-certificates> Processing machine: ca vars-check-certificates> Generator execution order: state-version -> step-intermediate-key -> step-intermediate-cert vars-check-certificates> Executing generator: state-version vars-check-certificates> + set -euo pipefail vars-check-certificates> + PATH=/nix/store/3l7ygqcc6v0rbi9d4j1m6phi6sz86j98-coreutils-9.11/bin vars-check-certificates> + [[ ! -d /etc ]] vars-check-certificates> + mkdir -p /etc vars-check-certificates> + cat vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> ++ id -u vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> + echo -n 26.05 vars-check-certificates> ✓ Generated file: state-version/version vars-check-certificates> ✓ Generator state-version completed vars-check-certificates> Executing generator: step-intermediate-key vars-check-certificates> + set -euo pipefail vars-check-certificates> + PATH=/nix/store/b76g9760ai9y13xdsvl6f2h49cj7l0ng-step-cli-0.30.2/bin:/nix/store/3l7ygqcc6v0rbi9d4j1m6phi6sz86j98-coreutils-9.11/bin vars-check-certificates> + [[ ! -d /etc ]] vars-check-certificates> + mkdir -p /etc vars-check-certificates> + cat vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> ++ id -u vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> + step crypto keypair --kty EC --curve P-256 --no-password --insecure /output/intermediate.pub /output/intermediate.key vars-check-certificates> Your public key has been saved in /output/intermediate.pub. vars-check-certificates> Your private key has been saved in /output/intermediate.key. vars-check-certificates> ✓ Generated file: step-intermediate-key/intermediate.key vars-check-certificates> ✓ Generator step-intermediate-key completed vars-check-certificates> Executing generator: step-intermediate-cert vars-check-certificates> + set -euo pipefail vars-check-certificates> + PATH=/nix/store/b76g9760ai9y13xdsvl6f2h49cj7l0ng-step-cli-0.30.2/bin:/nix/store/3l7ygqcc6v0rbi9d4j1m6phi6sz86j98-coreutils-9.11/bin vars-check-certificates> + [[ ! -d /etc ]] vars-check-certificates> + mkdir -p /etc vars-check-certificates> + cat vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> ++ id -u vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> + step certificate create --ca /input/step-ca/ca.crt --ca-key /input/step-ca/ca.key --ca-password-file /dev/null --key /input/step-intermediate-key/intermediate.key --template /nix/store/gcgdl7vvj536x3hzpppkn56cjq14rpwx-intermediate.tmpl --not-after 8760h --not-before=-12h --no-password --insecure 'Clan Intermediate CA' /output/intermediate.crt vars-check-certificates> Your certificate has been saved in /output/intermediate.crt. vars-check-certificates> ✓ Generated file: step-intermediate-cert/intermediate.crt vars-check-certificates> ✓ Generator step-intermediate-cert completed vars-check-certificates> ✓ Machine ca completed vars-check-certificates> Processing machine: client vars-check-certificates> Generator execution order: state-version vars-check-certificates> Executing generator: state-version vars-check-certificates> + set -euo pipefail vars-check-certificates> + PATH=/nix/store/3l7ygqcc6v0rbi9d4j1m6phi6sz86j98-coreutils-9.11/bin vars-check-certificates> + [[ ! -d /etc ]] vars-check-certificates> + mkdir -p /etc vars-check-certificates> + cat vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> ++ id -u vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> + echo -n 26.05 vars-check-certificates> ✓ Generated file: state-version/version vars-check-certificates> ✓ Generator state-version completed vars-check-certificates> ✓ Machine client completed vars-check-certificates> Processing machine: server vars-check-certificates> Generator execution order: state-version vars-check-certificates> Executing generator: state-version vars-check-certificates> + set -euo pipefail vars-check-certificates> + PATH=/nix/store/3l7ygqcc6v0rbi9d4j1m6phi6sz86j98-coreutils-9.11/bin vars-check-certificates> + [[ ! -d /etc ]] vars-check-certificates> + mkdir -p /etc vars-check-certificates> + cat vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> ++ id -u vars-check-certificates> ++ id -g vars-check-certificates> + cat vars-check-certificates> + echo -n 26.05 vars-check-certificates> ✓ Generated file: state-version/version vars-check-certificates> ✓ Generator state-version completed vars-check-certificates> ✓ Machine server completed vars-check-certificates> ✓ All vars checks completed successfully building '/nix/store/gmr7nl1ar4i0w2zcrxnv7vfr1i3hb1rl-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build01: building gmr7nl1ar4i0w2zcrxnv7vfr1i3hb1rl-unit-dbus-broker.service.drv building '/nix/store/shf5k7xcbzaq8dz2jlk276fw3ssibm1p-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build01: building shf5k7xcbzaq8dz2jlk276fw3ssibm1p-unit-dbus-broker.service.drv building '/nix/store/f8zw0cj3v3kvr6gw7g5z0rrnfnxr75dl-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build01: building f8zw0cj3v3kvr6gw7g5z0rrnfnxr75dl-unit-dbus-broker.service.drv building '/nix/store/45vfybqm1kbm4cqgp3bvss23lw0k42ph-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build01: building 45vfybqm1kbm4cqgp3bvss23lw0k42ph-unit-dbus-broker.service.drv building '/nix/store/abcws0czppr12wcbqi5gqcrcm8fy4yps-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build01: building abcws0czppr12wcbqi5gqcrcm8fy4yps-unit-dbus-broker.service.drv building '/nix/store/906qwbff1friw1p0l8xc5xr64gh28qvc-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build01: building 906qwbff1friw1p0l8xc5xr64gh28qvc-unit-dbus-broker.service.drv building '/nix/store/lzavbzm3a4r44rab70g3dzpk5q5ji111-user-units.drv' on nix-store.geninf.io:50051 user-units> build01: building lzavbzm3a4r44rab70g3dzpk5q5ji111-user-units.drv building '/nix/store/yfhmnbk5k59c3w7xgdh5a49aylanswwp-user-units.drv' on nix-store.geninf.io:50051 user-units> build01: building yfhmnbk5k59c3w7xgdh5a49aylanswwp-user-units.drv building '/nix/store/wahkywvzwrnhc2ya7l82y2mbialx53ds-system-units.drv' on nix-store.geninf.io:50051 system-units> build01: building wahkywvzwrnhc2ya7l82y2mbialx53ds-system-units.drv building '/nix/store/1l2lpij53w87d35h8gj1jqscskqvpgbs-user-units.drv' on nix-store.geninf.io:50051 user-units> build01: building 1l2lpij53w87d35h8gj1jqscskqvpgbs-user-units.drv bkhk5h638jcvpclxnyq8l851fjawfmas-system-units.drv: build01: not scheduled here: bkhk5h638jcvpclxnyq8l851fjawfmas-system-units.drv, asking the scheduler again cfppp5ixdysnj17bh8p1gb0xk3skc8fs-system-units.drv: build01: not scheduled here: cfppp5ixdysnj17bh8p1gb0xk3skc8fs-system-units.drv, asking the scheduler again building '/nix/store/bkhk5h638jcvpclxnyq8l851fjawfmas-system-units.drv' on nix-store.geninf.io:50051 system-units> build01: building bkhk5h638jcvpclxnyq8l851fjawfmas-system-units.drv building '/nix/store/cfppp5ixdysnj17bh8p1gb0xk3skc8fs-system-units.drv' on nix-store.geninf.io:50051 system-units> build01: building cfppp5ixdysnj17bh8p1gb0xk3skc8fs-system-units.drv building '/nix/store/mina0cyy5fqi7045fhi5hp3kzyfbf555-etc.drv' on nix-store.geninf.io:50051 etc> build01: building mina0cyy5fqi7045fhi5hp3kzyfbf555-etc.drv c6psyj24lz0vbz15mwny79xpa3d46dx2-etc.drv: build01: not scheduled here: c6psyj24lz0vbz15mwny79xpa3d46dx2-etc.drv, asking the scheduler again zlncxl6xc87g8i68x8f8i3z7iwd0k5b6-etc.drv: build01: not scheduled here: zlncxl6xc87g8i68x8f8i3z7iwd0k5b6-etc.drv, asking the scheduler again building '/nix/store/c6psyj24lz0vbz15mwny79xpa3d46dx2-etc.drv' on nix-store.geninf.io:50051 etc> build01: building c6psyj24lz0vbz15mwny79xpa3d46dx2-etc.drv building '/nix/store/zlncxl6xc87g8i68x8f8i3z7iwd0k5b6-etc.drv' on nix-store.geninf.io:50051 etc> build01: building zlncxl6xc87g8i68x8f8i3z7iwd0k5b6-etc.drv d36g2mm8br6951my0w8k1gjhwp9qn0cr-activate.drv: build01: not scheduled here: d36g2mm8br6951my0w8k1gjhwp9qn0cr-activate.drv, asking the scheduler again building '/nix/store/d36g2mm8br6951my0w8k1gjhwp9qn0cr-activate.drv' on nix-store.geninf.io:50051 activate> build01: building d36g2mm8br6951my0w8k1gjhwp9qn0cr-activate.drv building '/nix/store/bsar77091g0cqlcgbcm446h29j4wvvqm-activate.drv' on nix-store.geninf.io:50051 activate> build01: building bsar77091g0cqlcgbcm446h29j4wvvqm-activate.drv building '/nix/store/qhb2c49wxb960y4bjgbdig1sbkn8w2fw-activate.drv' on nix-store.geninf.io:50051 activate> build01: building qhb2c49wxb960y4bjgbdig1sbkn8w2fw-activate.drv building '/nix/store/4jpkdy02fgrh93ag9081na9bg8nxzvl4-nixos-system-client-test.drv' on nix-store.geninf.io:50051 nixos-system-client-test> build01: building 4jpkdy02fgrh93ag9081na9bg8nxzvl4-nixos-system-client-test.drv nixos-system-client-test> structuredAttrs is enabled building '/nix/store/qqkdff5bvn8ck5016cpp21msb6rk42ak-nixos-system-server-test.drv' on nix-store.geninf.io:50051 nixos-system-server-test> build01: building qqkdff5bvn8ck5016cpp21msb6rk42ak-nixos-system-server-test.drv nixos-system-server-test> structuredAttrs is enabled building '/nix/store/p0c0ix0hnzil3vsl5l4i1i497xfqaavn-nixos-system-ca-test.drv' on nix-store.geninf.io:50051 nixos-system-ca-test> build01: building p0c0ix0hnzil3vsl5l4i1i497xfqaavn-nixos-system-ca-test.drv nixos-system-ca-test> structuredAttrs is enabled building '/nix/store/sn1i2ijsn751hn2zslq5np0nqhjdyhhr-closure-info.drv' on nix-store.geninf.io:50051 closure-info> build01: building sn1i2ijsn751hn2zslq5np0nqhjdyhhr-closure-info.drv closure-info> structuredAttrs is enabled building '/nix/store/5n9wvsgbi8fnq3pj614708rrdybyc77h-closure-info.drv' on nix-store.geninf.io:50051 closure-info> build01: building 5n9wvsgbi8fnq3pj614708rrdybyc77h-closure-info.drv closure-info> structuredAttrs is enabled building '/nix/store/wgw71s96h8mwh01lz9h0n74pbixv6d36-closure-info.drv' on nix-store.geninf.io:50051 closure-info> build01: building wgw71s96h8mwh01lz9h0n74pbixv6d36-closure-info.drv closure-info> structuredAttrs is enabled building '/nix/store/j773jfpwnrj3qhc5smh38r31adr536al-nixos-test-driver-certificates.drv' on nix-store.geninf.io:50051 nixos-test-driver-certificates> build01: building j773jfpwnrj3qhc5smh38r31adr536al-nixos-test-driver-certificates.drv nixos-test-driver-certificates> Running type check (enable/disable: config.skipTypeCheck) nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck nixos-test-driver-certificates> Success: no issues found in 1 source file building '/nix/store/xp4n58s8rxnl4pkf6gzpzvcfvhqf5nnn-container-test-run-certificates.drv' on nix-store.geninf.io:50051 container-test-run-certificates> build01: building xp4n58s8rxnl4pkf6gzpzvcfvhqf5nnn-container-test-run-certificates.drv container-test-run-certificates> additionally exposed symbols: container-test-run-certificates> ca, client, server, container-test-run-certificates> start_all, machines, driver, Machine, wait_for_signal container-test-run-certificates> Starting ca container-test-run-certificates> Starting client container-test-run-certificates> Starting server container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/7p64jhks9jx3hijknwwlhr6n77az5rj7-nixos-system-ca-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if3: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether 42:06:76:42:a9:8d brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.5 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture arm64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (aarch64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/3l7ygqcc6v0rbi9d4j1m6phi6sz86j98-coreutils-9.11/bin/sleep 999999999 && echo 54b16d35-f00e-46a3-b7c2-c4c64e923f92' container-test-run-certificates> Running as unit: run-p468-i3773816.service; invocation ID: c1f7307bf41f4f55b8e923dcb1595586 container-test-run-certificates> To attach to container ca run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*54b16d35-f00e-46a3-b7c2-c4c64e923f92') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/q1khrhbn506imjxx7kiqcbihycawa6kl-python3-3.13.15/bin/python3.13 /nix/store/qq5ppp119nyp6wdn1gi4pr1xkmgs2ny1-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py 54b16d35-f00e-46a3-b7c2-c4c64e923f92 container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/fvqbb6pqkc7pl4nrm2kwsr28dcg7gmcm-nixos-system-client-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if4: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether 2a:42:35:28:b1:2f brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.5 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture arm64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (aarch64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/3l7ygqcc6v0rbi9d4j1m6phi6sz86j98-coreutils-9.11/bin/sleep 999999999 && echo 43c75eac-1332-48f0-8110-1aa9b786ddea' container-test-run-certificates> Running as unit: run-p302-i3773819.service; invocation ID: 0ae64653dc3844d1b71b82accfe659f5 container-test-run-certificates> To attach to container client run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*43c75eac-1332-48f0-8110-1aa9b786ddea') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/q1khrhbn506imjxx7kiqcbihycawa6kl-python3-3.13.15/bin/python3.13 /nix/store/qq5ppp119nyp6wdn1gi4pr1xkmgs2ny1-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py 43c75eac-1332-48f0-8110-1aa9b786ddea container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/4grg9d151ab9v5xip8a2bavq1bnf7gx3-nixos-system-server-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if5: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether be:aa:dd:39:86:e7 brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.5 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture arm64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (aarch64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/3l7ygqcc6v0rbi9d4j1m6phi6sz86j98-coreutils-9.11/bin/sleep 999999999 && echo c730b51d-6a3b-4364-b856-fa2b1c656b17' container-test-run-certificates> Running as unit: run-p396-i3773822.service; invocation ID: d8d5bec871ed433695393d14ccde70b9 container-test-run-certificates> To attach to container server run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*c730b51d-6a3b-4364-b856-fa2b1c656b17') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/q1khrhbn506imjxx7kiqcbihycawa6kl-python3-3.13.15/bin/python3.13 /nix/store/qq5ppp119nyp6wdn1gi4pr1xkmgs2ny1-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py c730b51d-6a3b-4364-b856-fa2b1c656b17 container-test-run-certificates> + systemctl restart acme-order-renew-ca.foo.service container-test-run-certificates> + systemctl restart acme-test.foo.service container-test-run-certificates> client: waiting for success: curl -v https://test.foo container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1009 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [111 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Oct 13 15:55:00 2026 GMT container-test-run-certificates> * expire date: Nov 12 15:55:00 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 723c47 container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1009 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [111 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Oct 13 15:55:00 2026 GMT container-test-run-certificates> * expire date: Nov 12 15:55:00 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 723c47 container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1009 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [112 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Oct 13 15:55:00 2026 GMT container-test-run-certificates> * expire date: Nov 12 15:55:00 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 723c47 container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [931 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [80 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Oct 13 15:54:13 2026 GMT container-test-run-certificates> * expire date: Jan 11 15:55:13 2027 GMT container-test-run-certificates> * issuer: CN=Clan Intermediate CA container-test-run-certificates> * Certificate level 0: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 1: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 2: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 0 container-test-run-certificates> * SSL certificate verified via OpenSSL. container-test-run-certificates> * Established connection to test.foo (192.168.1.3 port 443) from 192.168.1.2 port 39950 container-test-run-certificates> % Total % Received % Xferd Average Speed Time Time Time Current container-test-run-certificates> Dload Upload Total Spent Left Speed container-test-run-certificates> 0 0 0 0 0 0 0 0 0* using HTTP/2 container-test-run-certificates> * [HTTP/2] [1] OPENED stream for https://test.foo/ container-test-run-certificates> * [HTTP/2] [1] [:method: GET] container-test-run-certificates> * [HTTP/2] [1] [:scheme: https] container-test-run-certificates> * [HTTP/2] [1] [:authority: test.foo] container-test-run-certificates> * [HTTP/2] [1] [:path: /] container-test-run-certificates> * [HTTP/2] [1] [user-agent: curl/8.22.0] container-test-run-certificates> * [HTTP/2] [1] [accept: */*] container-test-run-certificates> } [5 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> * Request completely sent off container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> { [5 bytes data] container-test-run-certificates> 100 20 100 20 0 0 672 0 0 container-test-run-certificates> * Connection #0 to host test.foo:443 left intact container-test-run-certificates> (finished: waiting for success: curl -v https://test.foo, in 3.19 seconds) container-test-run-certificates> + openssl s_client -connect test.foo:443 -servername test.foo container-test-run-certificates> + openssl x509 -text -noout container-test-run-certificates> Certificate: container-test-run-certificates> Data: container-test-run-certificates> Version: 3 (0x2) container-test-run-certificates> Serial Number: container-test-run-certificates> 9c:f7:26:38:60:37:64:66:39:3a:f8:df:74:24:3a:80 container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Issuer: CN=Clan Intermediate CA container-test-run-certificates> Validity container-test-run-certificates> Not Before: Oct 13 15:54:13 2026 GMT container-test-run-certificates> Not After : Jan 11 15:55:13 2027 GMT container-test-run-certificates> Subject: CN=test.foo container-test-run-certificates> Subject Public Key Info: container-test-run-certificates> Public Key Algorithm: id-ecPublicKey container-test-run-certificates> Public-Key: (256 bit) container-test-run-certificates> pub: container-test-run-certificates> 04:2a:0b:e0:fb:b3:b4:57:2b:18:87:34:fd:1b:3b: container-test-run-certificates> 50:d0:84:80:c1:b5:86:a6:75:f4:95:5f:a3:5c:87: container-test-run-certificates> 6a:6f:cb:11:5d:c0:c9:34:f6:34:cb:fc:49:f6:91: container-test-run-certificates> 07:82:a4:67:45:61:29:9b:55:ae:c7:21:6c:27:ba: container-test-run-certificates> 28:68:be:e5:53 container-test-run-certificates> ASN1 OID: prime256v1 container-test-run-certificates> NIST CURVE: P-256 container-test-run-certificates> X509v3 extensions: container-test-run-certificates> X509v3 Key Usage: critical container-test-run-certificates> Digital Signature container-test-run-certificates> X509v3 Extended Key Usage: container-test-run-certificates> TLS Web Server Authentication, TLS Web Client Authentication container-test-run-certificates> X509v3 Subject Key Identifier: container-test-run-certificates> 0B:97:22:58:11:45:49:B9:C9:C5:58:E4:4B:FA:AD:31:C8:18:BF:04 container-test-run-certificates> X509v3 Authority Key Identifier: container-test-run-certificates> AF:3D:FB:7F:3A:E2:22:0C:FC:17:43:CF:2B:14:28:42:1E:EC:D0:EF container-test-run-certificates> X509v3 Subject Alternative Name: container-test-run-certificates> DNS:test.foo container-test-run-certificates> 1.3.6.1.4.1.37476.9000.64.1: container-test-run-certificates> 0......acme.. container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Signature Value: container-test-run-certificates> 30:44:02:20:21:79:27:69:74:d2:36:d1:37:ff:bf:28:c1:69: container-test-run-certificates> 14:38:6e:08:ad:b6:37:7c:f8:3c:51:6a:71:08:f2:0e:9a:99: container-test-run-certificates> 02:20:5d:b4:80:a9:a8:73:e5:a4:43:d1:95:37:59:96:d6:e5: container-test-run-certificates> 7b:e3:4b:5d:cd:e1:47:93:0b:6e:33:55:e6:d3:30:d0 container-test-run-certificates> container-test-run-certificates> container-test-run-certificates>