these 71 derivations will be built:
  /nix/store/51rccv3fxrwmq8wiai3c39lm2rwxqrcc-nftables-deletions.drv
  /nix/store/0k7qg6f9g36017z8gf4wmr0szbrmgdm2-nftables-save-deletions.drv
  /nix/store/0mxp1ip9lw1mvdzxcv0vv9zh2gkr4jzw-localhost-hosts.drv
  /nix/store/r491il25nsn8d51byqkifvaa2yq34mj3-nginx.conf.drv
  /nix/store/56f3778mj5lgx96wy9fgskrpjy81lcav-unit-script-nginx-pre-start.drv
  /nix/store/0vb1spfyq6zmk26c52r1kyx119grb978-unit-nginx.service.drv
  /nix/store/1jcambgkrkwa76320w20l3mqs0k97vh5-extra-hosts.drv
  /nix/store/3252bhl9m3swmdpjs0ggas018bwqfs85-system-path.drv
  /nix/store/dnamn2r97cfbq6ksr0kxl4jr72m9g5c1-perl-5.42.3-env.drv
  /nix/store/fz9drvqkx8afw9qy9vywa2i0pcd2kdsn-dbus-1.drv
  /nix/store/a7kk43qhy9k4s450q4glmv8ngs4cc3rc-X-Restart-Triggers-dbus-broker.drv
  /nix/store/z91g5fcf7whly1dka60n7yzhyqfgpc56-unit-dbus-broker.service.drv
  /nix/store/3br77jpxp0ax4zz68nipwq6khi151rjb-user-units.drv
  /nix/store/av9j4yxagbzpmdh1aiaxj1r7vd8cijcl-unit-script-setup-wg0-interface-start.drv
  /nix/store/9l7yf57swhh3akglfn7lgxwq4zksb7fk-unit-setup-wg0-interface.service.drv
  /nix/store/f1clj9v7ziqg6i8m4fmayxlri4pw43aq-nftables-ensure-deletions.drv
  /nix/store/hyzlj29gaxa8ljn5g3yzlp051jsy9704-nftables-cleanup-deletions.drv
  /nix/store/yy73zhynpbk6sqavvck7wybww6q4yvxa-string-hosts.drv
  /nix/store/raqjfx56fb5hhi68ccn75zwyf1za876w-hosts.drv
  /nix/store/wp7vsl9lkzi9im9kzqgd6l7xv30q4r2z-passwd.drv
  /nix/store/v22dq80iypxyjw0qhgshyvb9nyzg8fwx-nftables-rules.drv
  /nix/store/clp0rffdd5miaw4660br32a8gn3qlp89-unit-nftables.service.drv
  /nix/store/rkvxx67b1mnxllrrw52dm9h6x8cv609f-nixos-tmpfiles.d.drv
  /nix/store/7p65nj9rzjix7i3fjbnzivn8mxcfvda1-tmpfiles.d.drv
  /nix/store/sn39vqgyga1kqidhxw8794yl526l0nmr-X-Restart-Triggers-systemd-tmpfiles-resetup.drv
  /nix/store/gj87w3swr0wmynscnbfjprq6n3n7rr9n-unit-systemd-tmpfiles-resetup.service.drv
  /nix/store/nf9awihwxkm96r0w86gd5yn6fbckgdaq-unit-dbus-broker.service.drv
  /nix/store/5wvxqwp1l65cy067qaj2sybhqmz08wcy-system-units.drv
  /nix/store/70yfmym3m0idld8hdad6m0ny3adhf5kz-etc-systemd-system.conf.drv
  /nix/store/739n5yppdlicykd9ihgscxpw5hh90dx3-login.pam.drv
  /nix/store/rppqirf9m5s0vjgrhb7vspjv8mz2qmw5-set-environment.drv
  /nix/store/93nj9vh0v0bp4cmml9fd72qrw7yjfk3x-etc-profile.drv
  /nix/store/bvwms0439xr2vqxwjrqsxvlv8v2bdf54-etc-lvm-lvm.conf.drv
  /nix/store/hwkshp72a7pc7cq1kdhnmrsndmswvnx5-etc-hostname.drv
  /nix/store/ilz1r20jikdpfpm4k64gyn0psyrqbcli-etc-ssh-ssh_config.drv
  /nix/store/nfwpm362x459gw8c7hcm5fx4clswxxhv-etc-fstab.drv
  /nix/store/njaa14kzzzxjm5p5wgj0ryn8nxld18jk-etc-nsswitch.conf.drv
  /nix/store/sczch46nj84p274sm3f2kr1wgdgr9mj3-systemd-user.pam.drv
  /nix/store/z9dngjx5kyfg4xr5nqhid1ff1zv6pf8w-etc-resolvconf.conf.drv
  /nix/store/iys6f6r88nsclxz7mzykxgpyc15shpb1-etc.drv
  /nix/store/hlksbmhzxb02ca8zbfylryiabcj164cw-users-groups.json.drv
  /nix/store/jgyh1yjw2ypdm6bw76sgmzbigzag4mdv-mounts.sh.drv
  /nix/store/pmhrbl39q4rn4zh8slbmf6rjkcf0dchg-activate.drv
  /nix/store/knqn2374nngs6hz2lqic8m2k5c7069l8-local-cmds.drv
  /nix/store/x5waxyyn9pk3429ni4wiw0djpsh9q0bd-stage-2-init.sh.drv
  /nix/store/gjjjx7w2njf75bwbdjc9jriqga0wpmkm-nixos-system-machine-test.drv
  /nix/store/3lrdj8d48z010g20yl3k99ah0zkjv8yq-system-path.drv
  /nix/store/72iw71l4fl3p2j1alqb087h20hkhsvrc-string-hosts.drv
  /nix/store/dxmn9141ywizzgfkacwi5j0k0598af2j-hosts.drv
  /nix/store/inrgnybk613izqvgi6dx18p2z54938vk-unit-40-eth1.network.drv
  /nix/store/m4ra0k63nl652n1irzy1diy153h4gl6f-dbus-1.drv
  /nix/store/qx9wvxxkdnvsr7j1425dyw5m8d3lw0rc-etc-hostname.drv
  /nix/store/70k07q127lmy4q5rbffwcphviyp4c4zj-X-Restart-Triggers-dbus-broker.drv
  /nix/store/xvz4r0r35gw11a1hin4c6gcdnjmi3vh9-unit-dbus-broker.service.drv
  /nix/store/qyzq3jwg90ww9m9c6fslj984gm4n20lp-user-units.drv
  /nix/store/6a82ihwacp54aryj992gmg8yk6z4j08w-unit-dbus-broker.service.drv
  /nix/store/jq32ma78ak1d95j0k6wrv04s8clsqwjs-X-Reload-Triggers-systemd-networkd.drv
  /nix/store/jhnv870dfrp5yqqr6kd0qf28i4aj3vj3-unit-systemd-networkd.service.drv
  /nix/store/riwmy48pfdvysrxxmnw284clpyck3bf9-nginx.conf.drv
  /nix/store/anckhs08phj3ldx75h8s4kam7c70axmb-unit-script-nginx-pre-start.drv
  /nix/store/z1b22a4dmz3f20bmm7fcf6s7n8hvbkz4-unit-nginx.service.drv
  /nix/store/zmlmpzf1dfvg7ry7kjq0kk51yd7271ln-system-units.drv
  /nix/store/c5y5zcvh4kkgzqrj513llqg4awq6dkip-etc.drv
  /nix/store/j6ff94z7ipxwcvvsazndj25il22dmfv8-users-groups.json.drv
  /nix/store/9xdyvfn0pq9cvbxpv8vcmdl2v1vnkvg9-activate.drv
  /nix/store/x49rrbw4fj73g8pmm9f4d231dc12qzaf-nixos-system-router-test.drv
  /nix/store/a1ziryxf0izdlw6b0n7hml8vpc2cv201-testScript.drv
  /nix/store/ypvlr3b93ciczflz9a2jr1pxwzym5xmg-closure-info.drv
  /nix/store/zhzygrgbq0aw6k716jbp8xb88k43943m-closure-info.drv
  /nix/store/7spsvlc672f4qnwnapk53vj5m1z8lrwl-nixos-test-driver-user-firewall-nftables.drv
  /nix/store/1ml4kcswqgi8r8bpsv9x29d4sskkac8f-container-test-run-user-firewall-nftables.drv
these 72 paths will be fetched (0.0 KiB download, 586.6 MiB unpacked):
  /nix/store/xklk0y1rk34f9x6qbbwxliy3y8kglhpd-acl-2.4.0-dev
  /nix/store/lmb3zn9pn4iippigghm8mas6w5ip0mzs-attr-2.6.0-dev
  /nix/store/g2i5zxslx9msaqjy14hdp2af064i9pbv-binutils-2.46
  /nix/store/znsjfmcnjvwvj3ccm7zkhaksg6r2yj8m-binutils-2.46-lib
  /nix/store/2gjbrb8nwqf1225n3zhca56s2rxrqqhx-binutils-wrapper-2.46
  /nix/store/nwzcs2mp1w8x65sk6gszvc6dzj81wnj9-boehm-gc-8.2.12-dev
  /nix/store/dkwr0d9sx2b1hf2gp6vggqamzwkz35rf-boost-1.89.0-dev
  /nix/store/zvw47i1by13mm49sk8frxbw206z6gbjw-die-hook
  /nix/store/xklk723s0ipylv195cvxvsndfzzaaid1-dry-activate
  /nix/store/y9zd3pqin5vzxm6f4wpmmp26iqrdqh8m-dry-activate
  /nix/store/pp9yw36974ffz5kv5x2690gyp0svwalv-ensure-all-wrappers-paths-exist
  /nix/store/vamvnrq8rdxgfqrqky2qlfwwldwkg8mx-expand-response-params
  /nix/store/s2f0mfx0iiap9yxmlfvq0psn26jsbind-gcc-15.3.0
  /nix/store/dy6j7267wrgjlr2z748sbx83zj16vs3c-gcc-wrapper-15.3.0
  /nix/store/sr08dm9x0fsa1mrzjrlb3csdcmilsraz-glibc-2.42-100-dev
  /nix/store/1sf1j6c8rbipp4yayll7vy6v4bpwz95y-gmp-6.3.0
  /nix/store/x4awsa0lji112gf78z1zrfiih4zq6qra-iproute2-7.0.0-dev
  /nix/store/69vxm6ghyd02741nbsnal14f8rj4as2d-isl-0.20
  /nix/store/m5j6xhzcvdmpjyi0dq94ij6w8z7xvvjk-jansson-2.15.0
  /nix/store/iy4xjvyxr4az3y3vzgjvqaksrxi6bdfl-libarchive-3.8.9-dev
  /nix/store/m590d394alyh9kf7a9jk7kk9743rkfdq-libmpc-1.4.0
  /nix/store/p945j2xjzppn0fdrgsi73lp0f7mj677c-libredirect-0
  /nix/store/9licwzbc8pzhrh43vz5wg137gky9anz3-linux-headers-6.18.7
  /nix/store/h4m3i0xqi981cng1z22ly8l8z5qrqrgq-lkl-2025-11-13-lib
  /nix/store/01gh6jng9881dmkwr055p0z3x15jvk8c-make-binary-wrapper-hook
  /nix/store/7whrgb2wib2q83wgbs78xsq9h25lf3aw-make-shell-wrapper-hook
  /nix/store/cws4d1snbysh854az8fh7hfla0z3im3d-mpfr-4.2.2
  /nix/store/z9rscg9c2ak1fcaxsr6bp8dc3l33gpg8-nftables-1.1.6
  /nix/store/x2pxnf8a6g0k4k4grmsyaxyv1arrl5b2-nix-2.34.8-dev
  /nix/store/9hn5hgnicbi91p5h9kpk2b0x5alzd10r-nix-cmd-2.34.8-dev
  /nix/store/0ilh2n2k8ik1661jr6n2klzxspqy5rgd-nix-expr-2.34.8-dev
  /nix/store/apa3ljmw85k0fpwp8hk86ja1xr3n90jk-nix-expr-c-2.34.8
  /nix/store/h41dfkp3awvw56zam9ma73zy75wg5xh1-nix-expr-c-2.34.8-dev
  /nix/store/b1pd9n47wc4ndkfwnkm2fm1kyh2blzmw-nix-fetchers-2.34.8-dev
  /nix/store/63lwm9c2dnwqcn4pyi4zdjcczdnjhx8y-nix-fetchers-c-2.34.8
  /nix/store/pbhprnhd3jimgspzrgmxgg5ifmgz253h-nix-fetchers-c-2.34.8-dev
  /nix/store/h7py2xvhjfa2j4ll0lx03p2b1s3rxgfa-nix-flake-2.34.8-dev
  /nix/store/rs7i08a1mafpcq158qyclmybp5mxj4nz-nix-flake-c-2.34.8
  /nix/store/bi77rjx2rmkcqdzlqpcij800bs18x17j-nix-flake-c-2.34.8-dev
  /nix/store/4yb5hvpl5vyzkwz5icag1lvmklfi3rpg-nix-main-2.34.8-dev
  /nix/store/bkdh1ylp6xsg8xylrminbrz4vwjbis3m-nix-main-c-2.34.8
  /nix/store/cs18q1cc4mfnzwqxn3mxkdxa4fzfl1wl-nix-main-c-2.34.8-dev
  /nix/store/kxsl1s6zprklrk4v3c45m8rywqgg9hkj-nix-perl-2.34.8
  /nix/store/yyy65gy0yldr5hng8bxx386qzmfn6dza-nix-store-2.34.8-dev
  /nix/store/h8cawxmz7k0321l02qhm8d653p60d33l-nix-store-c-2.34.8
  /nix/store/pbsi1xlrcrfm5b0a8ybr4cvkyaza1rm9-nix-store-c-2.34.8-dev
  /nix/store/1f3kpdza1wi0z9spyc1i8r0hc3132w62-nix-util-2.34.8-dev
  /nix/store/pbdgbfvvgmirx330s8ic2nfxmabrvm8l-nix-util-c-2.34.8
  /nix/store/w20752a6527pxy0kj2c18vvc5fh5clk7-nix-util-c-2.34.8-dev
  /nix/store/w9gghawyv4bqbb68sw4aymx9w5yszqcx-nlohmann_json-3.12.0
  /nix/store/7l09089ahshxjx4js3zswqk6azhx6ccq-openssl-3.6.5-dev
  /nix/store/p7w3y3gwsfiz502rxc54qscqnwapinwq-python3.13-colorama-0.4.6
  /nix/store/cp40xfa2ijq534gdlzidb9czzx3xn8yf-python3.13-flit-core-3.12.0
  /nix/store/3446y8sidakc5k7y98066m34r079qzi2-python3.13-junit-xml-1.9
  /nix/store/bb9di7brlfwb7ldha71h86nswf7bpg3y-python3.13-librt-0.9.0
  /nix/store/15d5ydl635mfjg23kymbmddmr8h5yxn3-python3.13-mypy-1.20.1
  /nix/store/nahcxr9dqfw9mi9dlfwjfgw81b3rlkps-python3.13-mypy-extensions-1.1.0
  /nix/store/pbwv2maja9gpg1kmrwvx6m4f238rfmbc-python3.13-pathspec-1.0.4
  /nix/store/7xafm41qhsb9zw8f2qfa3bcwrbrbfm5b-python3.13-typing-extensions-4.15.0
  /nix/store/l325vp92jbs1xz51vrniwq02m6wdnbyi-stdenv-linux
  /nix/store/i2v4asmmqxpbaws4jrg3vwy55594h2cv-sudoers
  /nix/store/swp6vsi66rgq9py8c1il5ckb87fl05hs-system-generators
  /nix/store/w5651sdjrjwzp3qdz0vds394dkqvb1ac-system-shutdown
  /nix/store/sfmp61r00q3r6y6jyki9va2y2jf3pdzx-systemd-260.5-dev
  /nix/store/yg20cdcdcv3rjnlr0nkvgrrgh8hdinys-systemd-default-tmpfiles
  /nix/store/pcpnzrx951fmacravxahdkpn13krfwwr-systemd-generator-environment.json
  /nix/store/s2gv7ksn4gmzbcjmi1rklhiznvfz3r18-test-driver-0.0.1
  /nix/store/xarrb9kgs49g6gx4hsb4sbc6ic05nwyz-user-generators
  /nix/store/hz0ybr07flgz5f9fcad1ddrv2m3cyjxs-users-groups.json
  /nix/store/iph211gq6cswdxsbav5h3i3f9yskfb2b-users-groups.json
  /nix/store/47ryiw8i089cm2ggzf1bfbmz1s2w7nn3-util-linux-2.42.3
  /nix/store/1q88fgj6rzs530m0l823iq1kz2n7lfjs-util-linux-2.42.3-dev
warning: ignoring the client-specified setting 'store', because it is a restricted setting and you are not a trusted user
building '/nix/store/3252bhl9m3swmdpjs0ggas018bwqfs85-system-path.drv' on nix-store.geninf.io:50051
system-path> web01: building 3252bhl9m3swmdpjs0ggas018bwqfs85-system-path.drv
system-path> structuredAttrs is enabled
system-path> created 1669 symlinks in user environment
building '/nix/store/fz9drvqkx8afw9qy9vywa2i0pcd2kdsn-dbus-1.drv' on nix-store.geninf.io:50051
dbus-1> web01: building fz9drvqkx8afw9qy9vywa2i0pcd2kdsn-dbus-1.drv
building '/nix/store/a7kk43qhy9k4s450q4glmv8ngs4cc3rc-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051
X-Restart-Triggers-dbus-broker> web01: building a7kk43qhy9k4s450q4glmv8ngs4cc3rc-X-Restart-Triggers-dbus-broker.drv
building '/nix/store/z91g5fcf7whly1dka60n7yzhyqfgpc56-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051
unit-dbus-broker.service> web01: building z91g5fcf7whly1dka60n7yzhyqfgpc56-unit-dbus-broker.service.drv
building '/nix/store/3br77jpxp0ax4zz68nipwq6khi151rjb-user-units.drv' on nix-store.geninf.io:50051
user-units> web01: building 3br77jpxp0ax4zz68nipwq6khi151rjb-user-units.drv
nf9awihwxkm96r0w86gd5yn6fbckgdaq-unit-dbus-broker.service.drv: gi-build-x86-02: not scheduled here: nf9awihwxkm96r0w86gd5yn6fbckgdaq-unit-dbus-broker.service.drv, asking the scheduler again
building '/nix/store/nf9awihwxkm96r0w86gd5yn6fbckgdaq-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051
unit-dbus-broker.service> web01: building nf9awihwxkm96r0w86gd5yn6fbckgdaq-unit-dbus-broker.service.drv
building '/nix/store/5wvxqwp1l65cy067qaj2sybhqmz08wcy-system-units.drv' on nix-store.geninf.io:50051
system-units> web01: building 5wvxqwp1l65cy067qaj2sybhqmz08wcy-system-units.drv
building '/nix/store/iys6f6r88nsclxz7mzykxgpyc15shpb1-etc.drv' on nix-store.geninf.io:50051
etc> web01: building iys6f6r88nsclxz7mzykxgpyc15shpb1-etc.drv
building '/nix/store/pmhrbl39q4rn4zh8slbmf6rjkcf0dchg-activate.drv' on nix-store.geninf.io:50051
activate> web01: building pmhrbl39q4rn4zh8slbmf6rjkcf0dchg-activate.drv
building '/nix/store/gjjjx7w2njf75bwbdjc9jriqga0wpmkm-nixos-system-machine-test.drv' on nix-store.geninf.io:50051
nixos-system-machine-test> web01: building gjjjx7w2njf75bwbdjc9jriqga0wpmkm-nixos-system-machine-test.drv
nixos-system-machine-test> structuredAttrs is enabled
building '/nix/store/zhzygrgbq0aw6k716jbp8xb88k43943m-closure-info.drv' on nix-store.geninf.io:50051
closure-info> web01: building zhzygrgbq0aw6k716jbp8xb88k43943m-closure-info.drv
closure-info> structuredAttrs is enabled
3lrdj8d48z010g20yl3k99ah0zkjv8yq-system-path.drv: build-x86-01: not scheduled here: 3lrdj8d48z010g20yl3k99ah0zkjv8yq-system-path.drv, asking the scheduler again
building '/nix/store/3lrdj8d48z010g20yl3k99ah0zkjv8yq-system-path.drv' on nix-store.geninf.io:50051
system-path> gi-build-x86-02: building 3lrdj8d48z010g20yl3k99ah0zkjv8yq-system-path.drv
system-path> structuredAttrs is enabled
system-path> created 1660 symlinks in user environment
building '/nix/store/m4ra0k63nl652n1irzy1diy153h4gl6f-dbus-1.drv' on nix-store.geninf.io:50051
dbus-1> gi-build-x86-01: building m4ra0k63nl652n1irzy1diy153h4gl6f-dbus-1.drv
building '/nix/store/70k07q127lmy4q5rbffwcphviyp4c4zj-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051
X-Restart-Triggers-dbus-broker> gi-build-x86-01: building 70k07q127lmy4q5rbffwcphviyp4c4zj-X-Restart-Triggers-dbus-broker.drv
building '/nix/store/xvz4r0r35gw11a1hin4c6gcdnjmi3vh9-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051
unit-dbus-broker.service> attached to the build already running on this worker
unit-dbus-broker.service> gi-build-x86-01: building xvz4r0r35gw11a1hin4c6gcdnjmi3vh9-unit-dbus-broker.service.drv
building '/nix/store/qyzq3jwg90ww9m9c6fslj984gm4n20lp-user-units.drv' on nix-store.geninf.io:50051
user-units> gi-build-x86-01: building qyzq3jwg90ww9m9c6fslj984gm4n20lp-user-units.drv
building '/nix/store/6a82ihwacp54aryj992gmg8yk6z4j08w-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051
unit-dbus-broker.service> attached to the build already running on this worker
unit-dbus-broker.service> gi-build-x86-02: building 6a82ihwacp54aryj992gmg8yk6z4j08w-unit-dbus-broker.service.drv
building '/nix/store/zmlmpzf1dfvg7ry7kjq0kk51yd7271ln-system-units.drv' on nix-store.geninf.io:50051
system-units> gi-build-x86-02: building zmlmpzf1dfvg7ry7kjq0kk51yd7271ln-system-units.drv
building '/nix/store/c5y5zcvh4kkgzqrj513llqg4awq6dkip-etc.drv' on nix-store.geninf.io:50051
etc> gi-build-x86-02: building c5y5zcvh4kkgzqrj513llqg4awq6dkip-etc.drv
building '/nix/store/9xdyvfn0pq9cvbxpv8vcmdl2v1vnkvg9-activate.drv' on nix-store.geninf.io:50051
activate> gi-build-x86-02: building 9xdyvfn0pq9cvbxpv8vcmdl2v1vnkvg9-activate.drv
building '/nix/store/x49rrbw4fj73g8pmm9f4d231dc12qzaf-nixos-system-router-test.drv' on nix-store.geninf.io:50051
nixos-system-router-test> attached to the build already running on this worker
nixos-system-router-test> gi-build-x86-02: building x49rrbw4fj73g8pmm9f4d231dc12qzaf-nixos-system-router-test.drv
nixos-system-router-test> structuredAttrs is enabled
building '/nix/store/ypvlr3b93ciczflz9a2jr1pxwzym5xmg-closure-info.drv' on nix-store.geninf.io:50051
closure-info> build-x86-01: building ypvlr3b93ciczflz9a2jr1pxwzym5xmg-closure-info.drv
closure-info> structuredAttrs is enabled
building '/nix/store/7spsvlc672f4qnwnapk53vj5m1z8lrwl-nixos-test-driver-user-firewall-nftables.drv' on nix-store.geninf.io:50051
nixos-test-driver-user-firewall-nftables> build-x86-01: building 7spsvlc672f4qnwnapk53vj5m1z8lrwl-nixos-test-driver-user-firewall-nftables.drv
nixos-test-driver-user-firewall-nftables> Running type check (enable/disable: config.skipTypeCheck)
nixos-test-driver-user-firewall-nftables> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck
nixos-test-driver-user-firewall-nftables> Success: no issues found in 1 source file
building '/nix/store/1ml4kcswqgi8r8bpsv9x29d4sskkac8f-container-test-run-user-firewall-nftables.drv' on nix-store.geninf.io:50051
container-test-run-user-firewall-nftables> web01: building 1ml4kcswqgi8r8bpsv9x29d4sskkac8f-container-test-run-user-firewall-nftables.drv
container-test-run-user-firewall-nftables> additionally exposed symbols:
container-test-run-user-firewall-nftables>     machine, router,
container-test-run-user-firewall-nftables>     start_all, machines, driver, Machine, wait_for_signal
container-test-run-user-firewall-nftables> Starting machine
container-test-run-user-firewall-nftables> Starting router
container-test-run-user-firewall-nftables> 
container-test-run-user-firewall-nftables> 
container-test-run-user-firewall-nftables> 
container-test-run-user-firewall-nftables> <<< NixOS Stage 2 >>>
container-test-run-user-firewall-nftables> 
container-test-run-user-firewall-nftables> booting system configuration /nix/store/7shkk7dd3sxvfld05dssi2hhidc4m7a6-nixos-system-machine-test
container-test-run-user-firewall-nftables> running activation script...
container-test-run-user-firewall-nftables> setting up /etc...
container-test-run-user-firewall-nftables> 2: host0@if3: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
container-test-run-user-firewall-nftables>     link/ether 0e:74:26:22:81:c2 brd ff:ff:ff:ff:ff:ff link-netnsid 0
container-test-run-user-firewall-nftables> starting systemd...
container-test-run-user-firewall-nftables> systemd 260.5 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE)
container-test-run-user-firewall-nftables> Detected virtualization systemd-nspawn.
container-test-run-user-firewall-nftables> Detected architecture x86-64.
container-test-run-user-firewall-nftables> Detected first boot.
container-test-run-user-firewall-nftables> Initializing machine ID from container UUID.
container-test-run-user-firewall-nftables> Applying preset policy.
container-test-run-user-firewall-nftables> Populated /etc with preset unit settings.
container-test-run-user-firewall-nftables> Queued start job for default target Multi-User System.
container-test-run-user-firewall-nftables> 
container-test-run-user-firewall-nftables> 
container-test-run-user-firewall-nftables> 
container-test-run-user-firewall-nftables> <<< Welcome to NixOS test (x86_64) - console >>>
container-test-run-user-firewall-nftables> + systemd-run /bin/sh -c '/nix/store/bhv6xyvqw6gjs3j488gi1z6wdv18bdpa-coreutils-9.11/bin/sleep 999999999 && echo fd367221-72cc-44ab-a627-191aefb08862'
container-test-run-user-firewall-nftables> Running as unit: run-p226-i2544130.service; invocation ID: 98caa1f8ee0d43c9b2757623db066f56
container-test-run-user-firewall-nftables> To attach to container machine run on the same machine that runs the test:
container-test-run-user-firewall-nftables>   sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*fd367221-72cc-44ab-a627-191aefb08862') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash 
container-test-run-user-firewall-nftables> 
container-test-run-user-firewall-nftables> To inject external network and continue test, run:
container-test-run-user-firewall-nftables> sudo /nix/store/jy00n3jp5xj8s40n1fbldmkcr5n7avxc-python3-3.13.15/bin/python3.13 /nix/store/s2gv7ksn4gmzbcjmi1rklhiznvfz3r18-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py fd367221-72cc-44ab-a627-191aefb08862
container-test-run-user-firewall-nftables> 
container-test-run-user-firewall-nftables> <<< NixOS Stage 2 >>>
container-test-run-user-firewall-nftables> 
container-test-run-user-firewall-nftables> booting system configuration /nix/store/iaipjv1blpjxlmffp7zkzxjnl9g103zm-nixos-system-router-test
container-test-run-user-firewall-nftables> running activation script...
container-test-run-user-firewall-nftables> setting up /etc...
container-test-run-user-firewall-nftables> 2: host0@if4: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000
container-test-run-user-firewall-nftables>     link/ether a6:24:31:fe:b9:6d brd ff:ff:ff:ff:ff:ff link-netnsid 0
container-test-run-user-firewall-nftables> starting systemd...
container-test-run-user-firewall-nftables> systemd 260.5 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE)
container-test-run-user-firewall-nftables> Detected virtualization systemd-nspawn.
container-test-run-user-firewall-nftables> Detected architecture x86-64.
container-test-run-user-firewall-nftables> Detected first boot.
container-test-run-user-firewall-nftables> Initializing machine ID from container UUID.
container-test-run-user-firewall-nftables> Applying preset policy.
container-test-run-user-firewall-nftables> Populated /etc with preset unit settings.
container-test-run-user-firewall-nftables> Queued start job for default target Multi-User System.
container-test-run-user-firewall-nftables> 
container-test-run-user-firewall-nftables> 
container-test-run-user-firewall-nftables> 
container-test-run-user-firewall-nftables> <<< Welcome to NixOS test (x86_64) - console >>>
container-test-run-user-firewall-nftables> + systemd-run /bin/sh -c '/nix/store/bhv6xyvqw6gjs3j488gi1z6wdv18bdpa-coreutils-9.11/bin/sleep 999999999 && echo 0235bcb1-f6af-407c-99f4-e326e04dab47'
container-test-run-user-firewall-nftables> Running as unit: run-p209-i2544134.service; invocation ID: 823f58deffc745b5b3020d203e90d9f0
container-test-run-user-firewall-nftables> To attach to container router run on the same machine that runs the test:
container-test-run-user-firewall-nftables>   sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*0235bcb1-f6af-407c-99f4-e326e04dab47') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash 
container-test-run-user-firewall-nftables> 
container-test-run-user-firewall-nftables> To inject external network and continue test, run:
container-test-run-user-firewall-nftables> sudo /nix/store/jy00n3jp5xj8s40n1fbldmkcr5n7avxc-python3-3.13.15/bin/python3.13 /nix/store/s2gv7ksn4gmzbcjmi1rklhiznvfz3r18-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py 0235bcb1-f6af-407c-99f4-e326e04dab47
container-test-run-user-firewall-nftables> + systemctl --no-pager show multi-user.target
container-test-run-user-firewall-nftables> + systemctl --no-pager show nginx.service
container-test-run-user-firewall-nftables> + systemctl --no-pager show multi-user.target
container-test-run-user-firewall-nftables> + systemctl --no-pager show nginx.service
container-test-run-user-firewall-nftables> + ip -4 addr show eth1
container-test-run-user-firewall-nftables> + grep -oP '(?<=inet\s)\d+(\.\d+){3}'
container-test-run-user-firewall-nftables> + ip -6 addr show eth1
container-test-run-user-firewall-nftables> + grep -oP '(?<=inet6\s)[0-9a-f:]+'
container-test-run-user-firewall-nftables> + grep -v '^fe80'
container-test-run-user-firewall-nftables> + head -1
container-test-run-user-firewall-nftables> Router IPv4: 192.168.1.2
container-test-run-user-firewall-nftables> Router IPv6: 2001:db8:1::2
container-test-run-user-firewall-nftables> + systemctl restart nftables
container-test-run-user-firewall-nftables> + systemctl --no-pager show nftables.service
container-test-run-user-firewall-nftables> + nft list table inet user-firewall
container-test-run-user-firewall-nftables> table inet user-firewall {
container-test-run-user-firewall-nftables> 	chain output {
container-test-run-user-firewall-nftables> 		type filter hook output priority filter; policy accept;
container-test-run-user-firewall-nftables> 		oifname "lo" counter packets 0 bytes 0 accept comment "allow lo"
container-test-run-user-firewall-nftables> 		oifname "tun*" counter packets 0 bytes 0 accept comment "allow tun*"
container-test-run-user-firewall-nftables> 		oifname "tap*" counter packets 0 bytes 0 accept comment "allow tap*"
container-test-run-user-firewall-nftables> 		oifname "wg*" counter packets 0 bytes 0 accept comment "allow wg*"
container-test-run-user-firewall-nftables> 		oifname "tailscale*" counter packets 0 bytes 0 accept comment "allow tailscale*"
container-test-run-user-firewall-nftables> 		oifname "zt*" counter packets 0 bytes 0 accept comment "allow zt*"
container-test-run-user-firewall-nftables> 		oifname "vpn*" counter packets 0 bytes 0 accept comment "allow vpn*"
container-test-run-user-firewall-nftables> 		oifname "ipsec*" counter packets 0 bytes 0 accept comment "allow ipsec*"
container-test-run-user-firewall-nftables> 		oifname "nebula*" counter packets 0 bytes 0 accept comment "allow nebula*"
container-test-run-user-firewall-nftables> 		oifname "tinc*" counter packets 0 bytes 0 accept comment "allow tinc*"
container-test-run-user-firewall-nftables> 		oifname "edge*" counter packets 0 bytes 0 accept comment "allow edge*"
container-test-run-user-firewall-nftables> 		oifname "hyprspace" counter packets 0 bytes 0 accept comment "allow hyprspace"
container-test-run-user-firewall-nftables> 		oifname "ham0" counter packets 0 bytes 0 accept comment "allow ham0"
container-test-run-user-firewall-nftables> 		oifname "easytier" counter packets 0 bytes 0 accept comment "allow easytier"
container-test-run-user-firewall-nftables> 		oifname "mycelium" counter packets 0 bytes 0 accept comment "allow mycelium"
container-test-run-user-firewall-nftables> 		meta skuid 1002 counter packets 0 bytes 0 reject comment "blocked user bob"
container-test-run-user-firewall-nftables> 	}
container-test-run-user-firewall-nftables> }
container-test-run-user-firewall-nftables> machine: waiting for success: runuser -u alice -- curl -s http://127.0.0.1:8080
container-test-run-user-firewall-nftables> + runuser -u alice -- curl -s http://127.0.0.1:8080
container-test-run-user-firewall-nftables> (finished: waiting for success: runuser -u alice -- curl -s http://127.0.0.1:8080, in 0.01 seconds)
container-test-run-user-firewall-nftables> + runuser -u alice -- curl -s http://192.168.1.2
container-test-run-user-firewall-nftables> + runuser -u alice -- curl -s 'http://[2001:db8:1::2]'
container-test-run-user-firewall-nftables> + runuser -u bob -- curl -s http://127.0.0.1:8080
container-test-run-user-firewall-nftables> + runuser -u bob -- curl -s --connect-timeout 2 http://192.168.1.2
container-test-run-user-firewall-nftables> + echo EXIT_CODE=7
container-test-run-user-firewall-nftables> + runuser -u bob -- curl -s --connect-timeout 2 'http://[2001:db8:1::2]'
container-test-run-user-firewall-nftables> + echo EXIT_CODE=7
container-test-run-user-firewall-nftables> + nft list table inet user-firewall
container-test-run-user-firewall-nftables> + systemctl --no-pager show setup-wg0-interface.service
container-test-run-user-firewall-nftables> + systemctl --no-pager show nginx.service
container-test-run-user-firewall-nftables> machine: waiting for success: nc -z 10.100.0.2 8081
container-test-run-user-firewall-nftables> + nc -z 10.100.0.2 8081
container-test-run-user-firewall-nftables> Connection to 10.100.0.2 8081 port [tcp/sunproxyadmin] succeeded!
container-test-run-user-firewall-nftables> (finished: waiting for success: nc -z 10.100.0.2 8081, in 0.01 seconds)
container-test-run-user-firewall-nftables> + ip link show wg0
container-test-run-user-firewall-nftables> + ip addr show wg0
container-test-run-user-firewall-nftables> + runuser -u alice -- curl -s --interface wg0 http://10.100.0.2:8081/
container-test-run-user-firewall-nftables> + runuser -u alice -- curl -s --interface wg0 'http://[fd00::2]:8081/'
container-test-run-user-firewall-nftables> + runuser -u bob -- curl -s --interface wg0 http://10.100.0.2:8081/
container-test-run-user-firewall-nftables> + runuser -u bob -- curl -s --interface wg0 'http://[fd00::2]:8081/'
container-test-run-user-firewall-nftables> + nft list table inet user-firewall
container-test-run-user-firewall-nftables> + grep -E 'oifname.*wg'
container-test-run-user-firewall-nftables> 		oifname "wg*" counter packets 0 bytes 0 accept comment "allow wg*"
container-test-run-user-firewall-nftables> 
container-test-run-user-firewall-nftables>