these 87 derivations will be built: /nix/store/j0dg65sc30arlimww36rscva04jq6h8d-nginx.conf.drv /nix/store/l0j9b16ssfqizb2cjm55qq9ib6kwn394-unit-script-nginx-pre-start.drv /nix/store/100l3ig3jliv6x0n4y8p8zlzhnarfgnq-unit-nginx.service.drv /nix/store/13rsh609s5fkkj42d8pcjdl3gg7rniz4-unit-nix-daemon.service.drv /nix/store/157cnpkfhr50qgjg62sykhwj8jdgksap-unit-dbus-broker.service.drv /nix/store/1zyvslbjc4asa4jp6izgj9cdlzq2wg14-unit-script-acme-order-renew-ca.foo-start.drv /nix/store/34pv1zsrs835fvxlsprda9c4n7jwhid2-extra-hosts.drv /nix/store/3ck569s58glnrk9gj227la3y6qm3pqcs-string-hosts.drv /nix/store/3l4bafj76x3p81si16wwzlvlsrmnn4nl-unit-script-acme-test.foo-start.drv /nix/store/5lhw6s9n66lhq3i0apj3fhjhk5s6pxfj-firewall-start.drv /nix/store/mybnzmwaxcc8lncdhdr8j7kp91gicm9z-firewall-reload.drv /nix/store/451mrl9zdfvl7k3rfk57qvyyfy5rg0h5-unit-firewall.service.drv /nix/store/6q1004lddnr6jbsv4z788wcgiaqmxma3-acme-postrun.drv /nix/store/47zh5pihddsjpdpqwwkx56nab6jc9h3w-unit-acme-order-renew-ca.foo.service.drv /nix/store/49jr3s47ml515qf50lc781ng6ajabc80-unit-acme-renew-test.foo.timer.drv /nix/store/4hhw4w0glkf831y9x73b324mnhadnl52-X-Restart-Triggers-dbus-broker.drv /nix/store/f6bxpdaka7npffnqh8rb2cc6hqhqlwf0-acme-setup-privileged.drv /nix/store/4w1fqmv23p7if9qffnrqspvvbab9qpdc-unit-acme-setup.service.drv /nix/store/51y85hnfk7wl72k9hmiv2qpn5nd5hvqk-X-Restart-Triggers-step-ca.drv /nix/store/5vf9j2cwdnpafyynwkplvj8jc76b5jx0-string-hosts.drv /nix/store/60ycbfi2620alwl5lpa0sxa128sid54a-10-acme.conf.drv /nix/store/6f8b929gbvb4z3gnpyx7a1lvak4ln7wz-users-groups.json.drv /nix/store/6gs3ssf4mjzsmwmgrm6ycin789ixpzdw-unit-dbus-broker.service.drv /nix/store/6k0zw2kzwbndyw02lv33d9ainhyw9iyd-activate.drv /nix/store/7ydxq449d906452ld9xgvrc1g69s1gxq-acme-setup-privileged.drv /nix/store/6x22lamkzv04pnzhmsss7dbs5fd05lnl-unit-acme-setup.service.drv /nix/store/7185f6y0z8j7dadyw6rgy98zh8amib8p-system-units.drv /nix/store/8a4ivjb9nypfxs6jz1xpwqr42crk1wbq-acme-postrun.drv /nix/store/8g8f0nq7b1f5xdd8yfr56iws610r0mky-command-not-found.drv /nix/store/9y8qddjxgjiqly9dj687qmmp36rbri61-testScript.drv /nix/store/a1s153ag7p9riw5zxcsn07s1r4n6awrc-X-Restart-Triggers-dbus-broker.drv /nix/store/ri1xssahjn9i88xrnqx522vs6xlmqsnk-tmpfiles.d.drv /nix/store/kxsw0a8kaiq6y5x7c28phs1minjjvmwz-X-Restart-Triggers-systemd-tmpfiles-resetup.drv /nix/store/a2igk1iv038yhq7s6kjyh3bqdy25n0qw-unit-systemd-tmpfiles-resetup.service.drv /nix/store/jhqq2c9rrd7sb4ydib23yq6chlvwg7nn-nginx-recommended-proxy_set_header-headers.conf.drv /nix/store/njmqivv43amk4ckal2frklpafv0f5fzk-nginx.conf.drv /nix/store/ackr9jxrhy5ndl7j2x1frfvx9li2nbf9-unit-script-nginx-pre-start.drv /nix/store/l0wmhxysvra1apk53xkjrqvy2d55mzf5-system-path.drv /nix/store/awv8b9knd0lkzhjmavvy33a0806whihz-dbus-1.drv /nix/store/rrar5ajnxqsddysmvlzzbaxic7mg8cii-string-hosts.drv /nix/store/d2drmg5fd06pfqxab8wg1wcbnsyh1xr3-hosts.drv /nix/store/fpvxackkmfaksay0ff95w7fy3aybjx0q-etc-bashrc.drv /nix/store/gv16519l2k18bza40ipz8x10zmaxy92f-system-units.drv /nix/store/jkbss1w6vanypi7l4d89vniadc6mbggb-user-units.drv /nix/store/by31yyyxdbnjk8yiai192h1zwjgl3qy7-etc.drv /nix/store/zmlddkqd426qin73wp3bycv2f92bnzyb-unit-dbus-broker.service.drv /nix/store/c2xzdx7ki727635rin0j9v6581icab43-user-units.drv /nix/store/cnvih4kfsbpa67mynq2qn9db807yi2r7-nixos-system-server-test.drv /nix/store/f6c311ra7sck3z74yx0m1q9d44avk45h-activate.drv /nix/store/fgi5amv2jjqhjj3bgb12aijln1iv5knb-dbus-1.drv /nix/store/fn279m4zdgsvrr6w6wz76352lc6xy883-hosts.drv /nix/store/frmvjnsxzw7h8wrr0rpdjp1gnb5yfk4l-nixos-system-ca-test.drv /nix/store/iyx80gzl1y01l6h2a10ag2pi3fks04kw-unit-step-ca.service.drv /nix/store/jn2r936hlp7n2r9dby81kc5jysa7192z-X-Restart-Triggers-acme-ca.foo.drv /nix/store/x7xcvzk4m0skyfbza5y416gifw1w9kvq-unit-script-acme-ca.foo-start.drv /nix/store/jq4149nkvmxbxf2a0jkvm294p6h8cpvm-unit-acme-ca.foo.service.drv /nix/store/kw886hm0bbzza5abmj6kakcikyzvb38j-unit-nginx-config-reload.service.drv /nix/store/lm1dm8x3qfbybkq0l4y3s3lkwwb65hws-unit-acme-renew-ca.foo.timer.drv /nix/store/nmd2dkz5yy1wbnmfchm12r59gnlznb0n-unit-acme-account-d22a46d9459bf683a338.target.drv /nix/store/zcq6a0cxdz5bn0bs1w2pxr1ii9g5gbzr-unit-nginx.service.drv /nix/store/l529zhhpicbfrrnfa943bsxnbd0g6ysi-system-units.drv /nix/store/z00kyciz5lq8k7fy3zrzs24rsq1z65ml-system-path.drv /nix/store/mqd0iwlp4c7g619xl1397h6wzycnc7fq-dbus-1.drv /nix/store/srnyb26ghhrni4czfnrinbk6y2584hkz-etc-hostname.drv /nix/store/g0cv9ypzdg728jhri6hj48r2v2qn92a1-etc.drv /nix/store/ic301vwbnmsdcb50dnhhyr9rq7j3x4rj-nixos-system-client-test.drv /nix/store/hlnrpxk76442vz6n9b3z9638nw9d7kcb-closure-info.drv /nix/store/j9w8prqs9mv9lyizslq08axvnk05625r-nixos-test-driver-certificates.drv /nix/store/jchggb1h814zrvkgqmrrgzify8sf403v-hosts.drv /nix/store/krhg2pinfg4rj7rch0jibr6s3i58qj5m-unit-dbus-broker.service.drv /nix/store/lh22l3nfq0nph2mii59kcrh0zgnj9m4i-X-Restart-Triggers-acme-test.foo.drv /nix/store/mz8qgxxv6k8k6g7fm4fbihqa6njaa73x-etc.drv /nix/store/pcwkdnr6kayz25xjxzp28w4ma1sj5rpk-unit-acme-test.foo.service.drv /nix/store/r75lq06884llv02rvjy3hzii5mc5w63v-users-groups.json.drv /nix/store/sqbpyw9cjfkr3h0crci99bpw9cdd22l1-unit-script-acme-order-renew-test.foo-start.drv /nix/store/sxk101pkj55rx2w4kd4jq0r4y36cmha0-activate.drv /nix/store/vcggzpa71dwds5n215j0wcnymc8wkmd7-closure-info.drv /nix/store/vh0mgglwfcz6dik8di1hb5gmybrhs143-unit-dbus-broker.service.drv /nix/store/vxsxzc6z9lp54x2w4fyydk8wzpf6ng6g-user-units.drv /nix/store/whcnfk0gb9zbccv4vds4728namcz2v21-unit-acme-account-2c44cb477b4787b2cf13.target.drv /nix/store/xhv3xv7fh92qz40vlwj1dd7jnmbf7xn8-unit-acme-order-renew-test.foo.service.drv /nix/store/xrpn7a52djdp35bv4p5ys21zbj2scf4k-closure-info.drv /nix/store/y0vyfw864zc08wnj7ad0qc3l6x8vhvm8-system-path.drv /nix/store/yi36ziij2dqjxjk2y8f3357hdybgmzkx-X-Restart-Triggers-dbus-broker.drv /nix/store/yv6hj0hpvssskf5bi7d3firdh80grdhp-unit-nginx-config-reload.service.drv /nix/store/zg5ham93hvl2j7k5lwsh2jqmqxjr5zna-unit-dbus-broker.service.drv /nix/store/zryr7kqg7dx6r9wyddh871f06q3r73br-container-test-run-certificates.drv these 15 paths will be fetched (0.0 KiB download, 66.3 MiB unpacked): /nix/store/p3dspwlc7jpkd8a0lfvi8icd022gbvj0-ca.json /nix/store/5h8mh0i9k001rwicynb1f8fn0jxyxcv7-decrypt-age-secrets /nix/store/avffm816pwrz8w6nkc8bcjb0rrwr1ai7-dry-activate /nix/store/wdrfdznlrydqwmg200pqvgjqb41s9rf8-dry-activate /nix/store/6n1r4lamlm3bbd7b6w3br8dgj0xhccxx-flock-0.4.0 /nix/store/0n19xyjs89wjdv6wnv4hggs8lxxdnyfs-lego-4.35.2 /nix/store/5582l9pyiyylnc0mp5mmhxl2cki3m6ym-nss-cacert-3.126 /nix/store/9sjpqbgy80n5nis6n4sz7bfgi4qy3l8j-nss-cacert-3.126-p11kit /nix/store/mghjng63z4zd47md7im5qfqb04fgysfg-system-generators /nix/store/wiv04scafwrbg3px6mg4ww4qzrlfbbq2-system-shutdown /nix/store/yg20cdcdcv3rjnlr0nkvgrrgh8hdinys-systemd-default-tmpfiles /nix/store/qnqms0s5r7z5vwwiyb2h4ibyaqqas7qj-user-generators /nix/store/qa91q5603bwlnk46nba1isl672b7vgjl-users-groups.json /nix/store/y583nca7br7cxxw0ayxr4632j1f1dz5x-users-groups.json /nix/store/0qncmn3vsrmvhm9fkmfyy1asri9dr8kk-vars-check-certificates warning: ignoring the client-specified setting 'store', because it is a restricted setting and you are not a trusted user building '/nix/store/l0wmhxysvra1apk53xkjrqvy2d55mzf5-system-path.drv' on nix-store.geninf.io:50051 system-path> build-x86-01: building l0wmhxysvra1apk53xkjrqvy2d55mzf5-system-path.drv system-path> structuredAttrs is enabled system-path> created 1816 symlinks in user environment building '/nix/store/z00kyciz5lq8k7fy3zrzs24rsq1z65ml-system-path.drv' on nix-store.geninf.io:50051 system-path> build-x86-01: building z00kyciz5lq8k7fy3zrzs24rsq1z65ml-system-path.drv system-path> structuredAttrs is enabled system-path> created 1816 symlinks in user environment building '/nix/store/y0vyfw864zc08wnj7ad0qc3l6x8vhvm8-system-path.drv' on nix-store.geninf.io:50051 system-path> gi-build-x86-02: building y0vyfw864zc08wnj7ad0qc3l6x8vhvm8-system-path.drv system-path> structuredAttrs is enabled system-path> created 1816 symlinks in user environment building '/nix/store/mqd0iwlp4c7g619xl1397h6wzycnc7fq-dbus-1.drv' on nix-store.geninf.io:50051 dbus-1> build-x86-01: building mqd0iwlp4c7g619xl1397h6wzycnc7fq-dbus-1.drv building '/nix/store/awv8b9knd0lkzhjmavvy33a0806whihz-dbus-1.drv' on nix-store.geninf.io:50051 dbus-1> build-x86-01: building awv8b9knd0lkzhjmavvy33a0806whihz-dbus-1.drv building '/nix/store/4hhw4w0glkf831y9x73b324mnhadnl52-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-dbus-broker> build-x86-01: building 4hhw4w0glkf831y9x73b324mnhadnl52-X-Restart-Triggers-dbus-broker.drv building '/nix/store/fgi5amv2jjqhjj3bgb12aijln1iv5knb-dbus-1.drv' on nix-store.geninf.io:50051 dbus-1> build-x86-01: building fgi5amv2jjqhjj3bgb12aijln1iv5knb-dbus-1.drv building '/nix/store/a1s153ag7p9riw5zxcsn07s1r4n6awrc-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-dbus-broker> build-x86-01: building a1s153ag7p9riw5zxcsn07s1r4n6awrc-X-Restart-Triggers-dbus-broker.drv building '/nix/store/6gs3ssf4mjzsmwmgrm6ycin789ixpzdw-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build-x86-01: building 6gs3ssf4mjzsmwmgrm6ycin789ixpzdw-unit-dbus-broker.service.drv building '/nix/store/zmlddkqd426qin73wp3bycv2f92bnzyb-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build-x86-01: building zmlddkqd426qin73wp3bycv2f92bnzyb-unit-dbus-broker.service.drv building '/nix/store/yi36ziij2dqjxjk2y8f3357hdybgmzkx-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-dbus-broker> build-x86-01: building yi36ziij2dqjxjk2y8f3357hdybgmzkx-X-Restart-Triggers-dbus-broker.drv building '/nix/store/krhg2pinfg4rj7rch0jibr6s3i58qj5m-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build-x86-01: building krhg2pinfg4rj7rch0jibr6s3i58qj5m-unit-dbus-broker.service.drv building '/nix/store/vh0mgglwfcz6dik8di1hb5gmybrhs143-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build-x86-01: building vh0mgglwfcz6dik8di1hb5gmybrhs143-unit-dbus-broker.service.drv building '/nix/store/l529zhhpicbfrrnfa943bsxnbd0g6ysi-system-units.drv' on nix-store.geninf.io:50051 system-units> build-x86-01: building l529zhhpicbfrrnfa943bsxnbd0g6ysi-system-units.drv building '/nix/store/c2xzdx7ki727635rin0j9v6581icab43-user-units.drv' on nix-store.geninf.io:50051 user-units> build-x86-01: building c2xzdx7ki727635rin0j9v6581icab43-user-units.drv building '/nix/store/157cnpkfhr50qgjg62sykhwj8jdgksap-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build-x86-01: building 157cnpkfhr50qgjg62sykhwj8jdgksap-unit-dbus-broker.service.drv building '/nix/store/zg5ham93hvl2j7k5lwsh2jqmqxjr5zna-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build-x86-01: building zg5ham93hvl2j7k5lwsh2jqmqxjr5zna-unit-dbus-broker.service.drv building '/nix/store/jkbss1w6vanypi7l4d89vniadc6mbggb-user-units.drv' on nix-store.geninf.io:50051 user-units> build-x86-01: building jkbss1w6vanypi7l4d89vniadc6mbggb-user-units.drv building '/nix/store/gv16519l2k18bza40ipz8x10zmaxy92f-system-units.drv' on nix-store.geninf.io:50051 system-units> build-x86-01: building gv16519l2k18bza40ipz8x10zmaxy92f-system-units.drv building '/nix/store/g0cv9ypzdg728jhri6hj48r2v2qn92a1-etc.drv' on nix-store.geninf.io:50051 etc> build-x86-01: building g0cv9ypzdg728jhri6hj48r2v2qn92a1-etc.drv building '/nix/store/vxsxzc6z9lp54x2w4fyydk8wzpf6ng6g-user-units.drv' on nix-store.geninf.io:50051 user-units> build-x86-01: building vxsxzc6z9lp54x2w4fyydk8wzpf6ng6g-user-units.drv building '/nix/store/7185f6y0z8j7dadyw6rgy98zh8amib8p-system-units.drv' on nix-store.geninf.io:50051 system-units> gi-build-x86-02: building 7185f6y0z8j7dadyw6rgy98zh8amib8p-system-units.drv building '/nix/store/by31yyyxdbnjk8yiai192h1zwjgl3qy7-etc.drv' on nix-store.geninf.io:50051 etc> build-x86-01: building by31yyyxdbnjk8yiai192h1zwjgl3qy7-etc.drv building '/nix/store/f6c311ra7sck3z74yx0m1q9d44avk45h-activate.drv' on nix-store.geninf.io:50051 activate> build-x86-01: building f6c311ra7sck3z74yx0m1q9d44avk45h-activate.drv building '/nix/store/mz8qgxxv6k8k6g7fm4fbihqa6njaa73x-etc.drv' on nix-store.geninf.io:50051 etc> gi-build-x86-02: building mz8qgxxv6k8k6g7fm4fbihqa6njaa73x-etc.drv building '/nix/store/sxk101pkj55rx2w4kd4jq0r4y36cmha0-activate.drv' on nix-store.geninf.io:50051 activate> build-x86-01: building sxk101pkj55rx2w4kd4jq0r4y36cmha0-activate.drv building '/nix/store/frmvjnsxzw7h8wrr0rpdjp1gnb5yfk4l-nixos-system-ca-test.drv' on nix-store.geninf.io:50051 nixos-system-ca-test> build-x86-01: building frmvjnsxzw7h8wrr0rpdjp1gnb5yfk4l-nixos-system-ca-test.drv nixos-system-ca-test> structuredAttrs is enabled building '/nix/store/6k0zw2kzwbndyw02lv33d9ainhyw9iyd-activate.drv' on nix-store.geninf.io:50051 activate> build-x86-01: building 6k0zw2kzwbndyw02lv33d9ainhyw9iyd-activate.drv building '/nix/store/cnvih4kfsbpa67mynq2qn9db807yi2r7-nixos-system-server-test.drv' on nix-store.geninf.io:50051 nixos-system-server-test> build-x86-01: building cnvih4kfsbpa67mynq2qn9db807yi2r7-nixos-system-server-test.drv nixos-system-server-test> structuredAttrs is enabled building '/nix/store/vcggzpa71dwds5n215j0wcnymc8wkmd7-closure-info.drv' on nix-store.geninf.io:50051 closure-info> build-x86-01: building vcggzpa71dwds5n215j0wcnymc8wkmd7-closure-info.drv closure-info> structuredAttrs is enabled building '/nix/store/xrpn7a52djdp35bv4p5ys21zbj2scf4k-closure-info.drv' on nix-store.geninf.io:50051 closure-info> build-x86-01: building xrpn7a52djdp35bv4p5ys21zbj2scf4k-closure-info.drv building '/nix/store/ic301vwbnmsdcb50dnhhyr9rq7j3x4rj-nixos-system-client-test.drv' on nix-store.geninf.io:50051 nixos-system-client-test> build-x86-01: building ic301vwbnmsdcb50dnhhyr9rq7j3x4rj-nixos-system-client-test.drv closure-info> structuredAttrs is enabled nixos-system-client-test> structuredAttrs is enabled building '/nix/store/hlnrpxk76442vz6n9b3z9638nw9d7kcb-closure-info.drv' on nix-store.geninf.io:50051 closure-info> build-x86-01: building hlnrpxk76442vz6n9b3z9638nw9d7kcb-closure-info.drv closure-info> structuredAttrs is enabled building '/nix/store/j9w8prqs9mv9lyizslq08axvnk05625r-nixos-test-driver-certificates.drv' on nix-store.geninf.io:50051 nixos-test-driver-certificates> build-x86-01: building j9w8prqs9mv9lyizslq08axvnk05625r-nixos-test-driver-certificates.drv nixos-test-driver-certificates> Running type check (enable/disable: config.skipTypeCheck) nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck nixos-test-driver-certificates> Success: no issues found in 1 source file building '/nix/store/zryr7kqg7dx6r9wyddh871f06q3r73br-container-test-run-certificates.drv' on nix-store.geninf.io:50051 container-test-run-certificates> build-x86-01: building zryr7kqg7dx6r9wyddh871f06q3r73br-container-test-run-certificates.drv container-test-run-certificates> additionally exposed symbols: container-test-run-certificates> ca, client, server, container-test-run-certificates> start_all, machines, driver, Machine, wait_for_signal container-test-run-certificates> Starting ca container-test-run-certificates> Starting client container-test-run-certificates> Starting server container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/xwibq02cm3hvr943whlqiz9bkpbhym6x-nixos-system-ca-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if3: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether 42:06:76:42:a9:8d brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.5 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/bhv6xyvqw6gjs3j488gi1z6wdv18bdpa-coreutils-9.11/bin/sleep 999999999 && echo a24592b6-1118-4c92-b97f-c02d8b0c3402' container-test-run-certificates> Running as unit: run-p446-i5608012.service; invocation ID: ffaa651846b448fabd342c635e740ca2 container-test-run-certificates> To attach to container ca run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*a24592b6-1118-4c92-b97f-c02d8b0c3402') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/jy00n3jp5xj8s40n1fbldmkcr5n7avxc-python3-3.13.15/bin/python3.13 /nix/store/pqlr0hs92wdh0vmqbq39r6rca632xhkp-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py a24592b6-1118-4c92-b97f-c02d8b0c3402 container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/x12f7ghhc80f9sn3xj9njw6z8dn6d65n-nixos-system-client-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if5: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether 2a:42:35:28:b1:2f brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.5 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/bhv6xyvqw6gjs3j488gi1z6wdv18bdpa-coreutils-9.11/bin/sleep 999999999 && echo af0e91eb-903f-4282-8758-9caadcaa9fc2' container-test-run-certificates> Running as unit: run-p304-i5608015.service; invocation ID: fa44038ad4f242d582c0c192a8d992e1 container-test-run-certificates> To attach to container client run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*af0e91eb-903f-4282-8758-9caadcaa9fc2') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/jy00n3jp5xj8s40n1fbldmkcr5n7avxc-python3-3.13.15/bin/python3.13 /nix/store/pqlr0hs92wdh0vmqbq39r6rca632xhkp-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py af0e91eb-903f-4282-8758-9caadcaa9fc2 container-test-run-certificates> container-test-run-certificates> <<< NixOS Stage 2 >>> container-test-run-certificates> container-test-run-certificates> booting system configuration /nix/store/jdx6qnzjgdsn8arrdygsn919sp2xn00l-nixos-system-server-test container-test-run-certificates> running activation script... container-test-run-certificates> setting up /etc... container-test-run-certificates> 2: host0@if4: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000 container-test-run-certificates> link/ether be:aa:dd:39:86:e7 brd ff:ff:ff:ff:ff:ff link-netnsid 0 container-test-run-certificates> setting up age secrets... container-test-run-certificates> starting systemd... container-test-run-certificates> systemd 260.5 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) container-test-run-certificates> Detected virtualization systemd-nspawn. container-test-run-certificates> Detected architecture x86-64. container-test-run-certificates> Detected first boot. container-test-run-certificates> Initializing machine ID from container UUID. container-test-run-certificates> Applying preset policy. container-test-run-certificates> Populated /etc with preset unit settings. container-test-run-certificates> Queued start job for default target Multi-User System. container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> <<< Welcome to NixOS test (x86_64) - console >>> container-test-run-certificates> + systemd-run /bin/sh -c '/nix/store/bhv6xyvqw6gjs3j488gi1z6wdv18bdpa-coreutils-9.11/bin/sleep 999999999 && echo 37d2468b-1080-49cc-ad76-7b3048624e36' container-test-run-certificates> Running as unit: run-p386-i5608018.service; invocation ID: e065f88ef0b44f838f5ac254e8db8cec container-test-run-certificates> To attach to container server run on the same machine that runs the test: container-test-run-certificates> sudo nsenter --user --target $(\pgrep -f '^/bin/sh.*37d2468b-1080-49cc-ad76-7b3048624e36') --mount --uts --ipc --net --pid --cgroup /bin/sh -c bash container-test-run-certificates> container-test-run-certificates> To inject external network and continue test, run: container-test-run-certificates> sudo /nix/store/jy00n3jp5xj8s40n1fbldmkcr5n7avxc-python3-3.13.15/bin/python3.13 /nix/store/pqlr0hs92wdh0vmqbq39r6rca632xhkp-test-driver-0.0.1/lib/python3.13/site-packages/test_driver/inject_network.py 37d2468b-1080-49cc-ad76-7b3048624e36 container-test-run-certificates> + systemctl restart acme-order-renew-ca.foo.service container-test-run-certificates> + systemctl restart acme-test.foo.service container-test-run-certificates> client: waiting for success: curl -v https://test.foo container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1009 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [111 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Oct 14 20:19:40 2026 GMT container-test-run-certificates> * expire date: Nov 13 20:19:40 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 0120fe container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [1009 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [112 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Oct 14 20:19:40 2026 GMT container-test-run-certificates> * expire date: Nov 13 20:19:40 2028 GMT container-test-run-certificates> * issuer: CN=minica root ca 0120fe container-test-run-certificates> * Certificate level 0: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * Certificate level 1: Public key type EC/secp384r1 (384/192 Bits/secBits), signed using ecdsa-with-SHA384 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 13 container-test-run-certificates> * SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (60) SSL certificate OpenSSL verify result: self-signed certificate in certificate chain (19) container-test-run-certificates> More details here: https://curl.se/docs/sslcerts.html container-test-run-certificates> container-test-run-certificates> curl failed to verify the legitimacy of the server and therefore could not container-test-run-certificates> establish a secure connection to it. To learn more about this situation and container-test-run-certificates> how to fix it, please visit the webpage mentioned above. container-test-run-certificates> + curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: (none) container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1552 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [931 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [80 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Oct 14 20:18:51 2026 GMT container-test-run-certificates> * expire date: Jan 12 20:19:51 2027 GMT container-test-run-certificates> * issuer: CN=Clan Intermediate CA container-test-run-certificates> * Certificate level 0: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 1: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 2: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 0 container-test-run-certificates> * SSL certificate verified via OpenSSL. container-test-run-certificates> * Established connection to test.foo (192.168.1.3 port 443) from 192.168.1.2 port 59116 container-test-run-certificates> % Total % Received % Xferd Average Speed Time Time Time Current container-test-run-certificates> Dload Upload Total Spent Left Speed container-test-run-certificates> 0 0 0 0 0 0 0 0 0* using HTTP/2 container-test-run-certificates> * [HTTP/2] [1] OPENED stream for https://test.foo/ container-test-run-certificates> * [HTTP/2] [1] [:method: GET] container-test-run-certificates> * [HTTP/2] [1] [:scheme: https] container-test-run-certificates> * [HTTP/2] [1] [:authority: test.foo] container-test-run-certificates> * [HTTP/2] [1] [:path: /] container-test-run-certificates> * [HTTP/2] [1] [user-agent: curl/8.22.0] container-test-run-certificates> * [HTTP/2] [1] [accept: */*] container-test-run-certificates> } [5 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> * Request completely sent off container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> { [5 bytes data] container-test-run-certificates> 100 20 100 20 0 0 1894 0 0 container-test-run-certificates> * Connection #0 to host test.foo:443 left intact container-test-run-certificates> (finished: waiting for success: curl -v https://test.foo, in 2.06 seconds) container-test-run-certificates> + openssl s_client -connect test.foo:443 -servername test.foo container-test-run-certificates> + openssl x509 -text -noout container-test-run-certificates> Certificate: container-test-run-certificates> Data: container-test-run-certificates> Version: 3 (0x2) container-test-run-certificates> Serial Number: container-test-run-certificates> 20:74:66:7d:e1:08:7b:9a:72:26:09:c1:d5:8d:dd:10 container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Issuer: CN=Clan Intermediate CA container-test-run-certificates> Validity container-test-run-certificates> Not Before: Oct 14 20:18:51 2026 GMT container-test-run-certificates> Not After : Jan 12 20:19:51 2027 GMT container-test-run-certificates> Subject: CN=test.foo container-test-run-certificates> Subject Public Key Info: container-test-run-certificates> Public Key Algorithm: id-ecPublicKey container-test-run-certificates> Public-Key: (256 bit) container-test-run-certificates> pub: container-test-run-certificates> 04:77:08:b4:32:e3:32:eb:33:ce:d7:ac:8d:2c:2f: container-test-run-certificates> 4c:d1:be:a4:d1:41:3e:0e:c8:ee:f9:d6:b5:af:fc: container-test-run-certificates> a9:52:3b:ef:51:e6:76:d3:74:df:36:8d:ea:ff:07: container-test-run-certificates> cc:7e:cb:ab:d8:3a:60:bb:bd:6f:78:08:93:f5:b3: container-test-run-certificates> 2d:34:c1:2e:4a container-test-run-certificates> ASN1 OID: prime256v1 container-test-run-certificates> NIST CURVE: P-256 container-test-run-certificates> X509v3 extensions: container-test-run-certificates> X509v3 Key Usage: critical container-test-run-certificates> Digital Signature container-test-run-certificates> X509v3 Extended Key Usage: container-test-run-certificates> TLS Web Server Authentication, TLS Web Client Authentication container-test-run-certificates> X509v3 Subject Key Identifier: container-test-run-certificates> 54:BC:D4:83:16:6C:47:46:18:F0:1E:75:7B:FB:99:8A:DC:3D:FB:B9 container-test-run-certificates> X509v3 Authority Key Identifier: container-test-run-certificates> AF:3D:FB:7F:3A:E2:22:0C:FC:17:43:CF:2B:14:28:42:1E:EC:D0:EF container-test-run-certificates> X509v3 Subject Alternative Name: container-test-run-certificates> DNS:test.foo container-test-run-certificates> 1.3.6.1.4.1.37476.9000.64.1: container-test-run-certificates> 0......acme.. container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Signature Value: container-test-run-certificates> 30:45:02:20:31:66:2b:63:63:4b:b2:d8:a9:5c:b3:de:39:74: container-test-run-certificates> 66:ee:7a:41:e8:0b:c0:61:49:ca:4e:2b:11:57:ee:fe:b8:67: container-test-run-certificates> 02:21:00:b9:c7:c9:76:90:2d:b5:7c:27:c9:65:da:23:dd:87: container-test-run-certificates> 86:83:e6:ff:9b:2d:f6:c8:f6:f9:8e:a2:4e:44:8b:e4:19 container-test-run-certificates> container-test-run-certificates> container-test-run-certificates>