don't know how to build these paths: /nix/store/smcxdbwhxw06ysq4nds666xq1wg7arix-container-test-run-certificates.drv warning: ignoring the client-specified setting 'store', because it is a restricted setting and you are not a trusted user building '/nix/store/35sr7z85b01myxwgxi1g2bqfrskkgisq-nixos-test-driver-1.1.drv' on nix-store.geninf.io:50051 nixos-test-driver-1.1> attached to the build already running on this worker building '/nix/store/h22va8vr3l45lihz8ylapi37p5gs1741-X-Restart-Triggers-systemd-tmpfiles-resetup.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-systemd-tmpfiles-resetup> attached to the build already running on this worker nixos-test-driver-1.1> build01: building 35sr7z85b01myxwgxi1g2bqfrskkgisq-nixos-test-driver-1.1.drv nixos-test-driver-1.1> Sourcing python-remove-tests-dir-hook X-Restart-Triggers-systemd-tmpfiles-resetup> build01: building h22va8vr3l45lihz8ylapi37p5gs1741-X-Restart-Triggers-systemd-tmpfiles-resetup.drv building '/nix/store/d7xqg860iy5adkgkvzrr4jf361xmghym-X-Restart-Triggers-nix-daemon.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-nix-daemon> attached to the build already running on this worker X-Restart-Triggers-systemd-tmpfiles-resetup> structuredAttrs is enabled nixos-test-driver-1.1> Sourcing python-catch-conflicts-hook.sh X-Restart-Triggers-nix-daemon> build01: building d7xqg860iy5adkgkvzrr4jf361xmghym-X-Restart-Triggers-nix-daemon.drv X-Restart-Triggers-nix-daemon> structuredAttrs is enabled nixos-test-driver-1.1> Sourcing python-remove-bin-bytecode-hook.sh nixos-test-driver-1.1> Sourcing pypa-build-hook nixos-test-driver-1.1> Using pypaBuildPhase nixos-test-driver-1.1> Sourcing python-runtime-deps-check-hook nixos-test-driver-1.1> Using pythonRuntimeDepsCheckHook nixos-test-driver-1.1> Sourcing pypa-install-hook nixos-test-driver-1.1> Using pypaInstallPhase nixos-test-driver-1.1> Sourcing python-imports-check-hook.sh nixos-test-driver-1.1> Using pythonImportsCheckPhase nixos-test-driver-1.1> Sourcing python-namespaces-hook nixos-test-driver-1.1> Sourcing python-catch-conflicts-hook.sh nixos-test-driver-1.1> Running phase: unpackPhase nixos-test-driver-1.1> unpacking source archive /nix/store/bdws72va23lfh1ch2nd17j3xa6c2f1dv-src nixos-test-driver-1.1> source root is src nixos-test-driver-1.1> setting SOURCE_DATE_EPOCH to timestamp 315619200 of file "src/test_driver/vlan.py" nixos-test-driver-1.1> Running phase: patchPhase nixos-test-driver-1.1> Running phase: updateAutotoolsGnuConfigScriptsPhase nixos-test-driver-1.1> Running phase: configurePhase nixos-test-driver-1.1> no configure script, doing nothing nixos-test-driver-1.1> Running phase: buildPhase nixos-test-driver-1.1> Executing pypaBuildPhase nixos-test-driver-1.1> Creating a wheel... nixos-test-driver-1.1> pypa build flags: --no-isolation --outdir dist/ --wheel nixos-test-driver-1.1> * Getting build dependencies for wheel... nixos-test-driver-1.1> running egg_info nixos-test-driver-1.1> creating nixos_test_driver.egg-info nixos-test-driver-1.1> writing nixos_test_driver.egg-info/PKG-INFO nixos-test-driver-1.1> writing dependency_links to nixos_test_driver.egg-info/dependency_links.txt nixos-test-driver-1.1> writing entry points to nixos_test_driver.egg-info/entry_points.txt nixos-test-driver-1.1> writing top-level names to nixos_test_driver.egg-info/top_level.txt nixos-test-driver-1.1> writing manifest file 'nixos_test_driver.egg-info/SOURCES.txt' nixos-test-driver-1.1> reading manifest file 'nixos_test_driver.egg-info/SOURCES.txt' nixos-test-driver-1.1> writing manifest file 'nixos_test_driver.egg-info/SOURCES.txt' nixos-test-driver-1.1> * Building wheel... nixos-test-driver-1.1> running bdist_wheel nixos-test-driver-1.1> running build nixos-test-driver-1.1> running build_py nixos-test-driver-1.1> creating build/lib/test_driver nixos-test-driver-1.1> copying test_driver/debug.py -> build/lib/test_driver nixos-test-driver-1.1> copying test_driver/__init__.py -> build/lib/test_driver nixos-test-driver-1.1> copying test_driver/errors.py -> build/lib/test_driver nixos-test-driver-1.1> copying test_driver/logger.py -> build/lib/test_driver nixos-test-driver-1.1> copying test_driver/driver.py -> build/lib/test_driver nixos-test-driver-1.1> copying test_driver/vlan.py -> build/lib/test_driver nixos-test-driver-1.1> copying test_driver/efi.py -> build/lib/test_driver nixos-test-driver-1.1> copying test_driver/duration.py -> build/lib/test_driver nixos-test-driver-1.1> copying test_driver/polling_condition.py -> build/lib/test_driver nixos-test-driver-1.1> creating build/lib/test_driver/machine nixos-test-driver-1.1> copying test_driver/machine/__init__.py -> build/lib/test_driver/machine nixos-test-driver-1.1> copying test_driver/machine/ocr.py -> build/lib/test_driver/machine nixos-test-driver-1.1> copying test_driver/machine/qmp.py -> build/lib/test_driver/machine nixos-test-driver-1.1> running egg_info nixos-test-driver-1.1> writing nixos_test_driver.egg-info/PKG-INFO nixos-test-driver-1.1> writing dependency_links to nixos_test_driver.egg-info/dependency_links.txt nixos-test-driver-1.1> writing entry points to nixos_test_driver.egg-info/entry_points.txt nixos-test-driver-1.1> writing top-level names to nixos_test_driver.egg-info/top_level.txt nixos-test-driver-1.1> reading manifest file 'nixos_test_driver.egg-info/SOURCES.txt' nixos-test-driver-1.1> writing manifest file 'nixos_test_driver.egg-info/SOURCES.txt' nixos-test-driver-1.1> copying test_driver/py.typed -> build/lib/test_driver nixos-test-driver-1.1> installing to build/bdist.linux-aarch64/wheel nixos-test-driver-1.1> running install nixos-test-driver-1.1> running install_lib nixos-test-driver-1.1> creating build/bdist.linux-aarch64/wheel nixos-test-driver-1.1> creating build/bdist.linux-aarch64/wheel/test_driver nixos-test-driver-1.1> copying build/lib/test_driver/debug.py -> build/bdist.linux-aarch64/wheel/./test_driver nixos-test-driver-1.1> copying build/lib/test_driver/__init__.py -> build/bdist.linux-aarch64/wheel/./test_driver nixos-test-driver-1.1> copying build/lib/test_driver/errors.py -> build/bdist.linux-aarch64/wheel/./test_driver nixos-test-driver-1.1> creating build/bdist.linux-aarch64/wheel/test_driver/machine nixos-test-driver-1.1> copying build/lib/test_driver/machine/__init__.py -> build/bdist.linux-aarch64/wheel/./test_driver/machine nixos-test-driver-1.1> copying build/lib/test_driver/machine/ocr.py -> build/bdist.linux-aarch64/wheel/./test_driver/machine nixos-test-driver-1.1> copying build/lib/test_driver/machine/qmp.py -> build/bdist.linux-aarch64/wheel/./test_driver/machine nixos-test-driver-1.1> copying build/lib/test_driver/logger.py -> build/bdist.linux-aarch64/wheel/./test_driver nixos-test-driver-1.1> copying build/lib/test_driver/driver.py -> build/bdist.linux-aarch64/wheel/./test_driver nixos-test-driver-1.1> copying build/lib/test_driver/vlan.py -> build/bdist.linux-aarch64/wheel/./test_driver nixos-test-driver-1.1> copying build/lib/test_driver/efi.py -> build/bdist.linux-aarch64/wheel/./test_driver nixos-test-driver-1.1> copying build/lib/test_driver/duration.py -> build/bdist.linux-aarch64/wheel/./test_driver nixos-test-driver-1.1> copying build/lib/test_driver/py.typed -> build/bdist.linux-aarch64/wheel/./test_driver nixos-test-driver-1.1> copying build/lib/test_driver/polling_condition.py -> build/bdist.linux-aarch64/wheel/./test_driver nixos-test-driver-1.1> running install_egg_info nixos-test-driver-1.1> Copying nixos_test_driver.egg-info to build/bdist.linux-aarch64/wheel/./nixos_test_driver-0.0.0-py3.14.egg-info nixos-test-driver-1.1> running install_scripts nixos-test-driver-1.1> creating build/bdist.linux-aarch64/wheel/nixos_test_driver-0.0.0.dist-info/WHEEL nixos-test-driver-1.1> creating '/build/src/dist/.tmp-q0afuozo/nixos_test_driver-0.0.0-py3-none-any.whl' and adding 'build/bdist.linux-aarch64/wheel' to it nixos-test-driver-1.1> adding 'test_driver/__init__.py' nixos-test-driver-1.1> adding 'test_driver/debug.py' nixos-test-driver-1.1> adding 'test_driver/driver.py' nixos-test-driver-1.1> adding 'test_driver/duration.py' nixos-test-driver-1.1> adding 'test_driver/efi.py' nixos-test-driver-1.1> adding 'test_driver/errors.py' nixos-test-driver-1.1> adding 'test_driver/logger.py' nixos-test-driver-1.1> adding 'test_driver/polling_condition.py' nixos-test-driver-1.1> adding 'test_driver/py.typed' nixos-test-driver-1.1> adding 'test_driver/vlan.py' nixos-test-driver-1.1> adding 'test_driver/machine/__init__.py' nixos-test-driver-1.1> adding 'test_driver/machine/ocr.py' nixos-test-driver-1.1> adding 'test_driver/machine/qmp.py' nixos-test-driver-1.1> adding 'nixos_test_driver-0.0.0.dist-info/METADATA' nixos-test-driver-1.1> adding 'nixos_test_driver-0.0.0.dist-info/WHEEL' nixos-test-driver-1.1> adding 'nixos_test_driver-0.0.0.dist-info/entry_points.txt' nixos-test-driver-1.1> adding 'nixos_test_driver-0.0.0.dist-info/top_level.txt' nixos-test-driver-1.1> adding 'nixos_test_driver-0.0.0.dist-info/RECORD' nixos-test-driver-1.1> removing build/bdist.linux-aarch64/wheel nixos-test-driver-1.1> Successfully built nixos_test_driver-0.0.0-py3-none-any.whl nixos-test-driver-1.1> Finished creating a wheel... nixos-test-driver-1.1> Finished executing pypaBuildPhase nixos-test-driver-1.1> Running phase: pythonRuntimeDepsCheckHook nixos-test-driver-1.1> Executing pythonRuntimeDepsCheck nixos-test-driver-1.1> Checking runtime dependencies for nixos_test_driver-0.0.0-py3-none-any.whl nixos-test-driver-1.1> Finished executing pythonRuntimeDepsCheck nixos-test-driver-1.1> Running phase: installPhase nixos-test-driver-1.1> Executing pypaInstallPhase nixos-test-driver-1.1> Successfully installed nixos_test_driver-0.0.0-py3-none-any.whl nixos-test-driver-1.1> Finished executing pypaInstallPhase nixos-test-driver-1.1> Running phase: pythonOutputDistPhase nixos-test-driver-1.1> Executing pythonOutputDistPhase nixos-test-driver-1.1> Finished executing pythonOutputDistPhase nixos-test-driver-1.1> Running phase: fixupPhase nixos-test-driver-1.1> shrinking RPATHs of ELF executables and libraries in /nix/store/95nipdc5w3jx72qjsm3qrdj7c0kz7xl1-nixos-test-driver-1.1 nixos-test-driver-1.1> checking for references to /build/ in /nix/store/95nipdc5w3jx72qjsm3qrdj7c0kz7xl1-nixos-test-driver-1.1... nixos-test-driver-1.1> patching script interpreter paths in /nix/store/95nipdc5w3jx72qjsm3qrdj7c0kz7xl1-nixos-test-driver-1.1 nixos-test-driver-1.1> stripping (with command strip and flags -S -p) in /nix/store/95nipdc5w3jx72qjsm3qrdj7c0kz7xl1-nixos-test-driver-1.1/lib /nix/store/95nipdc5w3jx72qjsm3qrdj7c0kz7xl1-nixos-test-driver-1.1/bin nixos-test-driver-1.1> shrinking RPATHs of ELF executables and libraries in /nix/store/4y1k0g46l0pr8ng83j4bwbk9jdrdyzsr-nixos-test-driver-1.1-dist nixos-test-driver-1.1> checking for references to /build/ in /nix/store/4y1k0g46l0pr8ng83j4bwbk9jdrdyzsr-nixos-test-driver-1.1-dist... nixos-test-driver-1.1> patching script interpreter paths in /nix/store/4y1k0g46l0pr8ng83j4bwbk9jdrdyzsr-nixos-test-driver-1.1-dist nixos-test-driver-1.1> Rewriting #!/nix/store/81ag9nxz1flw3xjkv1vvqg8y2ipx2ins-python3-3.14.7/bin/python3.14 to #!/nix/store/81ag9nxz1flw3xjkv1vvqg8y2ipx2ins-python3-3.14.7 nixos-test-driver-1.1> wrapping `/nix/store/95nipdc5w3jx72qjsm3qrdj7c0kz7xl1-nixos-test-driver-1.1/bin/nixos-test-driver'... nixos-test-driver-1.1> Executing pythonRemoveTestsDir nixos-test-driver-1.1> Finished executing pythonRemoveTestsDir nixos-test-driver-1.1> Running phase: installCheckPhase nixos-test-driver-1.1> ## run ty nixos-test-driver-1.1> All checks passed! nixos-test-driver-1.1> ## run ruff check nixos-test-driver-1.1> All checks passed! nixos-test-driver-1.1> ## run ruff format nixos-test-driver-1.1> 25 files already formatted nixos-test-driver-1.1> Running phase: pythonCatchConflictsPhase nixos-test-driver-1.1> Running phase: pythonRemoveBinBytecodePhase nixos-test-driver-1.1> Running phase: pythonImportsCheckPhase nixos-test-driver-1.1> Executing pythonImportsCheckPhase building '/nix/store/rh6k64ziw4wv5yy9c8m60acn6ksi72n5-system-path.drv' on nix-store.geninf.io:50051 system-path> build01: building rh6k64ziw4wv5yy9c8m60acn6ksi72n5-system-path.drv building '/nix/store/00h91fvs49fg9zx1znpd4vgsdfra5jcs-system-path.drv' on nix-store.geninf.io:50051 system-path> build01: building 00h91fvs49fg9zx1znpd4vgsdfra5jcs-system-path.drv building '/nix/store/44j8lxlj0kp714hg6wxwk8pyjf77cvwn-system-path.drv' on nix-store.geninf.io:50051 system-path> build01: building 44j8lxlj0kp714hg6wxwk8pyjf77cvwn-system-path.drv system-path> structuredAttrs is enabled system-path> structuredAttrs is enabled system-path> structuredAttrs is enabled building '/nix/store/3nshlly2rxf69d89wzkkpp569lvxdbac-system-generators.drv' on nix-store.geninf.io:50051 system-generators> build01: building 3nshlly2rxf69d89wzkkpp569lvxdbac-system-generators.drv building '/nix/store/bbvq53widnwcrn6w9yw0yqxlm2i2x45y-system-shutdown.drv' on nix-store.geninf.io:50051 system-shutdown> build01: building bbvq53widnwcrn6w9yw0yqxlm2i2x45y-system-shutdown.drv building '/nix/store/iq16sr5g77737ysrgnv603b02r9wcnd2-user-generators.drv' on nix-store.geninf.io:50051 user-generators> build01: building iq16sr5g77737ysrgnv603b02r9wcnd2-user-generators.drv system-path> created 1716 symlinks in user environment system-path> created 1716 symlinks in user environment system-path> created 1716 symlinks in user environment building '/nix/store/nw4262xlkn31pakcb3yq5n8rxq2nrl9s-unit-nix-daemon.service.drv' on nix-store.geninf.io:50051 unit-nix-daemon.service> build01: building nw4262xlkn31pakcb3yq5n8rxq2nrl9s-unit-nix-daemon.service.drv unit-nix-daemon.service> structuredAttrs is enabled building '/nix/store/327k9bn2vn4inc7ja52zbyzz0gpqbdrc-unit-systemd-tmpfiles-resetup.service.drv' on nix-store.geninf.io:50051 unit-systemd-tmpfiles-resetup.service> build01: building 327k9bn2vn4inc7ja52zbyzz0gpqbdrc-unit-systemd-tmpfiles-resetup.service.drv unit-systemd-tmpfiles-resetup.service> structuredAttrs is enabled building '/nix/store/94vj8yyr00h83pr45k6hxxdc5zx02vav-dbus-1.drv' on nix-store.geninf.io:50051 dbus-1> build01: building 94vj8yyr00h83pr45k6hxxdc5zx02vav-dbus-1.drv building '/nix/store/hz59ynr3zxfh1nfr155hskndd6s07cmb-dbus-1.drv' on nix-store.geninf.io:50051 dbus-1> build01: building hz59ynr3zxfh1nfr155hskndd6s07cmb-dbus-1.drv building '/nix/store/miibl026vjlx9mh716ivs99d59fs74xx-dbus-1.drv' on nix-store.geninf.io:50051 dbus-1> build01: building miibl026vjlx9mh716ivs99d59fs74xx-dbus-1.drv building '/nix/store/x017il3fz0x9i40krz6yk9sq9chj42ih-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-dbus-broker> build01: building x017il3fz0x9i40krz6yk9sq9chj42ih-X-Restart-Triggers-dbus-broker.drv building '/nix/store/5r6ih8pv19h99va9msi6ia6acbzhla9w-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-dbus-broker> build01: building 5r6ih8pv19h99va9msi6ia6acbzhla9w-X-Restart-Triggers-dbus-broker.drv building '/nix/store/zx0jaq7i23k7cpy8a9j2ff2nipy4csjf-X-Restart-Triggers-dbus-broker.drv' on nix-store.geninf.io:50051 X-Restart-Triggers-dbus-broker> build01: building zx0jaq7i23k7cpy8a9j2ff2nipy4csjf-X-Restart-Triggers-dbus-broker.drv X-Restart-Triggers-dbus-broker> structuredAttrs is enabled X-Restart-Triggers-dbus-broker> structuredAttrs is enabled X-Restart-Triggers-dbus-broker> structuredAttrs is enabled building '/nix/store/gi5d9dd3n1bq7n7avsq37ck3vilrxmv8-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build01: building gi5d9dd3n1bq7n7avsq37ck3vilrxmv8-unit-dbus-broker.service.drv building '/nix/store/42wxb34slgr620qgivxb9hzd0vb2n9a6-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build01: building 42wxb34slgr620qgivxb9hzd0vb2n9a6-unit-dbus-broker.service.drv building '/nix/store/2lr2w6m24950ld5w4nng73srckw1wag3-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build01: building 2lr2w6m24950ld5w4nng73srckw1wag3-unit-dbus-broker.service.drv building '/nix/store/m6gh3f0l1pyl1fp2j54a6f7qhgfkmpsv-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build01: building m6gh3f0l1pyl1fp2j54a6f7qhgfkmpsv-unit-dbus-broker.service.drv building '/nix/store/43bhwjf8qj05q65ilh6qd39pibj0cx20-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build01: building 43bhwjf8qj05q65ilh6qd39pibj0cx20-unit-dbus-broker.service.drv building '/nix/store/irvbzmxzvz763v89gncfn0qdjl4i5666-unit-dbus-broker.service.drv' on nix-store.geninf.io:50051 unit-dbus-broker.service> build01: building irvbzmxzvz763v89gncfn0qdjl4i5666-unit-dbus-broker.service.drv unit-dbus-broker.service> structuredAttrs is enabled unit-dbus-broker.service> structuredAttrs is enabled unit-dbus-broker.service> structuredAttrs is enabled unit-dbus-broker.service> structuredAttrs is enabled unit-dbus-broker.service> structuredAttrs is enabled unit-dbus-broker.service> structuredAttrs is enabled building '/nix/store/ng1m2mhvsyak575j1ja852bkm56vn0gi-user-units.drv' on nix-store.geninf.io:50051 user-units> build01: building ng1m2mhvsyak575j1ja852bkm56vn0gi-user-units.drv building '/nix/store/8s99zmb2f3gvhmwxjc1a72v7l879j2l4-system-units.drv' on nix-store.geninf.io:50051 system-units> build01: building 8s99zmb2f3gvhmwxjc1a72v7l879j2l4-system-units.drv building '/nix/store/jhz6bs35mws3663447smxqlimyypwjls-user-units.drv' on nix-store.geninf.io:50051 user-units> build01: building jhz6bs35mws3663447smxqlimyypwjls-user-units.drv building '/nix/store/mz6h6c0wavrfhrl4wp61l1ldf9gpajwf-system-units.drv' on nix-store.geninf.io:50051 system-units> build01: building mz6h6c0wavrfhrl4wp61l1ldf9gpajwf-system-units.drv building '/nix/store/zwjai80vmb63z46shqi2xlhm1whzpv11-user-units.drv' on nix-store.geninf.io:50051 user-units> build01: building zwjai80vmb63z46shqi2xlhm1whzpv11-user-units.drv building '/nix/store/i69ycc7nz4vby2rnw82yz80nyl95ix99-system-units.drv' on nix-store.geninf.io:50051 system-units> build01: building i69ycc7nz4vby2rnw82yz80nyl95ix99-system-units.drv building '/nix/store/gz4lbf0swngb5b7496a5x9dnms9zmzbb-etc.drv' on nix-store.geninf.io:50051 etc> build01: building gz4lbf0swngb5b7496a5x9dnms9zmzbb-etc.drv building '/nix/store/l5icfz23ia1mq5salpwzziklnimh62kw-etc.drv' on nix-store.geninf.io:50051 etc> build01: building l5icfz23ia1mq5salpwzziklnimh62kw-etc.drv building '/nix/store/q8kbi8wiwbj6j73qs7cd41b94012dw48-etc.drv' on nix-store.geninf.io:50051 etc> build01: building q8kbi8wiwbj6j73qs7cd41b94012dw48-etc.drv building '/nix/store/q0fmasixvx7alxkghfbz2bbac0vq0fp2-activate.drv' on nix-store.geninf.io:50051 activate> build01: building q0fmasixvx7alxkghfbz2bbac0vq0fp2-activate.drv building '/nix/store/mpfmxr25xj7y0ndyag0jn37cnfmhpfs8-activate.drv' on nix-store.geninf.io:50051 activate> build01: building mpfmxr25xj7y0ndyag0jn37cnfmhpfs8-activate.drv activate> structuredAttrs is enabled building '/nix/store/a8bgbzjv8cj6p01p51r3w5flbcq468fc-activate.drv' on nix-store.geninf.io:50051 activate> build01: building a8bgbzjv8cj6p01p51r3w5flbcq468fc-activate.drv activate> structuredAttrs is enabled activate> structuredAttrs is enabled building '/nix/store/63swxifyvgcdxl49r6n94qwazpcir4k8-nixos-system-client-test.drv' on nix-store.geninf.io:50051 nixos-system-client-test> build01: building 63swxifyvgcdxl49r6n94qwazpcir4k8-nixos-system-client-test.drv nixos-system-client-test> structuredAttrs is enabled building '/nix/store/dgx8yiprfqf7g682838j7hq48bhykmld-nixos-system-server-test.drv' on nix-store.geninf.io:50051 nixos-system-server-test> build01: building dgx8yiprfqf7g682838j7hq48bhykmld-nixos-system-server-test.drv nixos-system-server-test> structuredAttrs is enabled building '/nix/store/1c3q0qwm3rsjlzvwghvvyqnf2npqpjvq-nixos-system-ca-test.drv' on nix-store.geninf.io:50051 nixos-system-ca-test> build01: building 1c3q0qwm3rsjlzvwghvvyqnf2npqpjvq-nixos-system-ca-test.drv nixos-system-ca-test> structuredAttrs is enabled building '/nix/store/5zsmg1qxn7mg1iygjs0kj00jdydzkfsh-run-client-nspawn.drv' on nix-store.geninf.io:50051 run-client-nspawn> build01: building 5zsmg1qxn7mg1iygjs0kj00jdydzkfsh-run-client-nspawn.drv building '/nix/store/nf2x67xrv999sdpy0vrndmgk085ym609-run-server-nspawn.drv' on nix-store.geninf.io:50051 run-server-nspawn> build01: building nf2x67xrv999sdpy0vrndmgk085ym609-run-server-nspawn.drv building '/nix/store/iqr1fil9gliagnn166qg1vfvm657zmam-run-ca-nspawn.drv' on nix-store.geninf.io:50051 run-ca-nspawn> build01: building iqr1fil9gliagnn166qg1vfvm657zmam-run-ca-nspawn.drv building '/nix/store/2rbbhxgfba1d61gfkdd86cxpb4h1k3pb-driverConfiguration.json.drv' on nix-store.geninf.io:50051 driverConfiguration.json> build01: building 2rbbhxgfba1d61gfkdd86cxpb4h1k3pb-driverConfiguration.json.drv driverConfiguration.json> structuredAttrs is enabled building '/nix/store/pw3q1mnadw860p0s8i49hzhz3km3cfiy-nixos-test-driver-certificates.drv' on nix-store.geninf.io:50051 nixos-test-driver-certificates> build01: building pw3q1mnadw860p0s8i49hzhz3km3cfiy-nixos-test-driver-certificates.drv nixos-test-driver-certificates> Running type check (enable/disable: config.skipTypeCheck) nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipTypeCheck nixos-test-driver-certificates> All checks passed! nixos-test-driver-certificates> Linting test script (enable/disable: config.skipLint) nixos-test-driver-certificates> See https://nixos.org/manual/nixos/stable/#test-opt-skipLint nixos-test-driver-certificates> All checks passed! building '/nix/store/smcxdbwhxw06ysq4nds666xq1wg7arix-container-test-run-certificates.drv' on nix-store.geninf.io:50051 container-test-run-certificates> build01: building smcxdbwhxw06ysq4nds666xq1wg7arix-container-test-run-certificates.drv container-test-run-certificates> Machine state will be reset. To keep it, pass --keep-machine-state container-test-run-certificates> start all VLans container-test-run-certificates> (finished: start all VLans, in 0.00 seconds) container-test-run-certificates> container-test-run-certificates> Test will time out and terminate in 3600.0 seconds container-test-run-certificates> run the VM test script container-test-run-certificates> additionally exposed symbols: container-test-run-certificates> ca, client, server, container-test-run-certificates> vlan1, container-test-run-certificates> start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh container-test-run-certificates> ca: systemd-nspawn running (pid 50) container-test-run-certificates> ca: Waiting for journal at /build/vm-state-ca/var/log/journal... container-test-run-certificates> ca: waiting for unit step-ca.service container-test-run-certificates> nixos-nspawn(ca): TAP vde-tap1 not found; container will be isolated from VDE container-test-run-certificates> nixos-nspawn(ca): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths. container-test-run-certificates> Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file. container-test-run-certificates> ░ Spawning container ca on /build/vm-state-ca. container-test-run-certificates> ca # [533158.453311] ca systemd-journald[81]: Journal started container-test-run-certificates> ca # [533158.453364] ca systemd-journald[81]: Runtime Journal (/run/log/journal/9d53f9f1e628462cb8b15d7a4f9555c4) is 8M, max 2.5G, 2.4G free. container-test-run-certificates> ca # [533158.461370] ca systemd[1]: Finished Apply Kernel Variables. container-test-run-certificates> ca # [533158.473969] ca systemd[1]: Finished Create Static Device Nodes in /dev gracefully. container-test-run-certificates> ca # [533158.487845] ca systemd[1]: Starting Flush Journal to Persistent Storage... container-test-run-certificates> ca # [533158.488668] ca systemd[1]: Starting Network Name Resolution... container-test-run-certificates> ca # [533158.489300] ca systemd[1]: Starting Create Static Device Nodes in /dev... container-test-run-certificates> ca # [533158.497268] ca systemd-journald[81]: Time spent on flushing to /var/log/journal/9d53f9f1e628462cb8b15d7a4f9555c4 is 1.677ms for 7 entries. container-test-run-certificates> ca # [533158.497268] ca systemd-journald[81]: System Journal (/var/log/journal/9d53f9f1e628462cb8b15d7a4f9555c4) is 8M, max 4G, 3.9G free. container-test-run-certificates> ca # [533158.513223] ca systemd[1]: Finished Create Static Device Nodes in /dev. container-test-run-certificates> ca # [533158.514395] ca systemd[1]: Reached target Preparation for Local File Systems. container-test-run-certificates> ca # [533158.514514] ca systemd[1]: Reached target Local File Systems. container-test-run-certificates> ca # [533158.515357] ca systemd[1]: Listening on Boot Loader Control Service Socket. container-test-run-certificates> ca # [533158.515411] ca systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> ca # [533158.516288] ca systemd[1]: Starting Save Transient machine-id to Disk... container-test-run-certificates> ca # [533158.516324] ca systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys container-test-run-certificates> ca # [533158.522121] ca systemd[1]: Finished Flush Journal to Persistent Storage. container-test-run-certificates> ca # [533158.523357] ca systemd[1]: Starting Create System Files and Directories... container-test-run-certificates> ca # [533158.537996] ca systemd-tmpfiles[141]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted container-test-run-certificates> ca # [533158.538188] ca systemd-tmpfiles[141]: fchmod() of /var/log/journal failed: Operation not permitted container-test-run-certificates> ca # [533158.538314] ca systemd-tmpfiles[141]: fchmod() of /var/log/journal/9d53f9f1e628462cb8b15d7a4f9555c4 failed: Operation not permitted container-test-run-certificates> ca # [533158.538498] ca systemd-tmpfiles[141]: fchmod() of /run/log/journal failed: Operation not permitted container-test-run-certificates> ca # [533158.539866] ca systemd[1]: Finished Create System Files and Directories. container-test-run-certificates> ca # [533158.540933] ca systemd[1]: Starting Rebuild Journal Catalog... container-test-run-certificates> ca # [533158.541589] ca systemd[1]: Starting Record System Boot/Shutdown in UTMP... container-test-run-certificates> ca # [533158.555660] ca systemd[1]: Finished Record System Boot/Shutdown in UTMP. container-test-run-certificates> ca # [533158.562503] ca systemd[1]: Finished Rebuild Journal Catalog. container-test-run-certificates> ca # [533158.563543] ca systemd[1]: Starting Update is Completed... container-test-run-certificates> ca # [533158.573908] ca systemd[1]: Finished Update is Completed. container-test-run-certificates> ca # [533158.616219] ca systemd[1]: Finished Firewall. container-test-run-certificates> ca # [533158.616380] ca systemd[1]: Reached target Preparation for Network. container-test-run-certificates> ca # [533158.616583] ca systemd[1]: Listening on Network Management Resolve Hook Socket. container-test-run-certificates> ca # [533158.617594] ca systemd[1]: Starting Network Management... container-test-run-certificates> ca # [533158.747108] ca systemd[1]: Finished Save Transient machine-id to Disk. container-test-run-certificates> ca # [533159.323513] ca systemd-networkd[198]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted container-test-run-certificates> ca # [533159.323606] ca systemd-networkd[198]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted container-test-run-certificates> ca # [533159.333581] ca systemd-networkd[198]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> ca # [533159.333744] ca systemd-networkd[198]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> ca # [533159.333896] ca systemd-networkd[198]: lo: Link UP container-test-run-certificates> ca # [533159.333900] ca systemd-networkd[198]: lo: Gained carrier container-test-run-certificates> ca # [533159.334066] ca systemd-networkd[198]: eth1: Configuring with /etc/systemd/network/40-eth1.network. container-test-run-certificates> ca # [533159.334414] ca systemd[1]: Started Network Management. container-test-run-certificates> ca # [533159.334710] ca systemd-networkd[198]: eth1: Link UP container-test-run-certificates> ca # [533159.334923] ca systemd-networkd[198]: eth1: Gained carrier container-test-run-certificates> ca # [533159.336024] ca systemd[1]: Starting Enable Persistent Storage in systemd-networkd... container-test-run-certificates> ca # [533159.373975] ca systemd[1]: Finished Enable Persistent Storage in systemd-networkd. container-test-run-certificates> ca # [533159.448922] ca systemd[1]: etc-machine\x2did.mount: Deactivated successfully. container-test-run-certificates> ca # [533159.646070] ca systemd-resolved[115]: Positive Trust Anchors: container-test-run-certificates> ca # [533159.646082] ca systemd-resolved[115]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d container-test-run-certificates> ca # [533159.646085] ca systemd-resolved[115]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 container-test-run-certificates> ca # [533159.646120] ca systemd-resolved[115]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test container-test-run-certificates> ca # [533159.666516] ca systemd-resolved[115]: Using system hostname 'ca'. container-test-run-certificates> ca # [533159.667980] ca systemd[1]: Started Network Name Resolution. container-test-run-certificates> ca # [533159.668094] ca systemd[1]: Reached target Network. container-test-run-certificates> ca # [533159.668151] ca systemd[1]: Reached target Network is Online. container-test-run-certificates> ca # [533159.668188] ca systemd[1]: Reached target System Initialization. container-test-run-certificates> ca # [533159.668381] ca systemd[1]: Started Renew ACME Certificate for ca.foo. container-test-run-certificates> ca # [533159.668403] ca systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> ca # [533159.668425] ca systemd[1]: Started Daily Cleanup of Temporary Directories. container-test-run-certificates> ca # [533159.668443] ca systemd[1]: Reached target Timer Units. container-test-run-certificates> ca # [533159.668552] ca systemd[1]: Listening on D-Bus System Message Bus Socket. container-test-run-certificates> ca # [533159.668643] ca systemd[1]: Listening on Nix Daemon Socket. container-test-run-certificates> ca # [533159.668741] ca systemd[1]: Listening on Virtual Machine and Container Registration Service Socket. container-test-run-certificates> ca # [533159.668759] ca systemd[1]: Reached target Socket Units. container-test-run-certificates> ca # [533159.668793] ca systemd[1]: Reached target Basic System. container-test-run-certificates> ca # [533159.670097] ca systemd[1]: Starting Set up the ACME certificate renewal infrastructure... container-test-run-certificates> ca # [533159.670817] ca systemd[1]: Starting Import lastlog data into lastlog2 database... container-test-run-certificates> ca # [533159.670855] ca systemd[1]: nginx-config-reload.service skipped, unmet condition check ConditionPathExists=/var/lib/acme/ca.foo/fullchain.pem container-test-run-certificates> ca # [533159.671602] ca systemd[1]: Starting Name Service Cache Daemon (nsncd)... container-test-run-certificates> ca # [533159.672477] ca systemd[1]: Starting step-ca service... container-test-run-certificates> ca # [533159.673878] ca systemd[1]: Starting D-Bus System Message Bus... container-test-run-certificates> ca # [533159.759132] ca systemd[1]: Finished Import lastlog data into lastlog2 database. container-test-run-certificates> ca # [533159.870278] ca acme-setup-privileged[204]: + set -euo pipefail container-test-run-certificates> ca # [533159.870278] ca acme-setup-privileged[204]: + cd /var/lib/acme container-test-run-certificates> ca # [533159.870278] ca acme-setup-privileged[204]: + chmod -R u=rwX,g=,o= .lego/accounts container-test-run-certificates> ca # [533159.872221] ca acme-setup-privileged[204]: + chown -R acme .lego/accounts container-test-run-certificates> ca # [533159.873802] ca acme-setup-privileged[204]: + for fixpath in ca.foo .lego/ca.foo container-test-run-certificates> ca # [533159.873842] ca acme-setup-privileged[204]: + '[' -d ca.foo ']' container-test-run-certificates> ca # [533159.873842] ca acme-setup-privileged[204]: + for fixpath in ca.foo .lego/ca.foo container-test-run-certificates> ca # [533159.873842] ca acme-setup-privileged[204]: + '[' -d .lego/ca.foo ']' container-test-run-certificates> ca # [533159.920268] ca nsncd[206]: Oct 15 15:11:02.877 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket" container-test-run-certificates> ca # [533159.920210] ca systemd[1]: Started Name Service Cache Daemon (nsncd). container-test-run-certificates> ca # [533159.920304] ca systemd[1]: Reached target Host and Network Name Lookups. container-test-run-certificates> ca # [533159.920378] ca systemd[1]: Reached target User and Group Name Lookups. container-test-run-certificates> ca # [533159.921887] ca systemd[1]: Starting User Login Management... container-test-run-certificates> ca # [533159.922718] ca systemd[1]: Starting Permit User Sessions... container-test-run-certificates> ca # [533159.933058] ca systemd[1]: Finished Permit User Sessions. container-test-run-certificates> ca # [533159.934126] ca systemd[1]: Started Console Getty. container-test-run-certificates> ca # [533159.934167] ca systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0 container-test-run-certificates> ca # [533159.934183] ca systemd[1]: Reached target Login Prompts. container-test-run-certificates> ca # [533160.107527] ca dbus-broker-launch[208]: Looking up NSS user entry for 'systemd-timesync'... container-test-run-certificates> ca # [533160.108342] ca dbus-broker-launch[208]: NSS returned no entry for 'systemd-timesync' container-test-run-certificates> ca # [533160.108342] ca dbus-broker-launch[208]: Invalid user-name in /nix/store/mxhqisikmp86bd4748syj563nz9bxay1-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync" container-test-run-certificates> ca # [533160.109071] ca systemd[1]: Started D-Bus System Message Bus. container-test-run-certificates> ca # [533160.119599] ca dbus-broker-launch[208]: Ready container-test-run-certificates> ca # [533160.416155] ca systemd-networkd[198]: eth1: Gained IPv6LL container-test-run-certificates> ca # [533160.827546] ca systemd-logind[238]: New seat seat0. container-test-run-certificates> ca # [533160.827795] ca systemd[1]: Started User Login Management. container-test-run-certificates> ca # [533160.829850] ca systemd[1]: Starting linger-users.service... container-test-run-certificates> ca # [533160.870081] ca systemd[1]: linger-users.service: Deactivated successfully. container-test-run-certificates> ca # [533160.870474] ca systemd[1]: Finished linger-users.service. container-test-run-certificates> ca # [533160.910505] ca acme-setup-start[222]: + set -euo pipefail container-test-run-certificates> ca # [533160.910505] ca acme-setup-start[222]: + test -e ca/key.pem container-test-run-certificates> ca # [533160.910897] ca acme-setup-start[222]: + minica --ca-key ca/key.pem --ca-cert ca/cert.pem --domains selfsigned.local container-test-run-certificates> ca # [533160.931166] ca systemd[1]: Finished Set up the ACME certificate renewal infrastructure. container-test-run-certificates> ca # [533160.932689] ca systemd[1]: Starting Ensure certificate for ca.foo... container-test-run-certificates> ca # [533161.088365] ca step-ca[207]: badger 2026/10/15 15:11:04 INFO: All 0 tables opened in 0s container-test-run-certificates> ca # [533161.093863] ca step-ca[207]: 2026/10/15 15:11:04 Building new tls configuration using step-ca x509 Signer Interface container-test-run-certificates> ca # [533161.100185] ca step-ca[207]: 2026/10/15 15:11:04 Starting Smallstep CA/0.30.2 (linux/arm64) container-test-run-certificates> ca # [533161.100185] ca step-ca[207]: 2026/10/15 15:11:04 Documentation: https://u.step.sm/docs/ca container-test-run-certificates> ca # [533161.100185] ca step-ca[207]: 2026/10/15 15:11:04 Community Discord: https://u.step.sm/discord container-test-run-certificates> ca # [533161.100185] ca step-ca[207]: 2026/10/15 15:11:04 Config file: /etc/smallstep/ca.json container-test-run-certificates> ca # [533161.100185] ca step-ca[207]: 2026/10/15 15:11:04 The primary server URL is https://ca.foo:1443 container-test-run-certificates> ca # [533161.100185] ca step-ca[207]: 2026/10/15 15:11:04 Root certificates are available at https://ca.foo:1443/roots.pem container-test-run-certificates> ca # [533161.100185] ca step-ca[207]: 2026/10/15 15:11:04 X.509 Root Fingerprint: 137d8173c35112c0105e02d18918e70953da0eedb7ead14cdca50a680b599c66 container-test-run-certificates> ca # [533161.100766] ca systemd[1]: Started step-ca service. container-test-run-certificates> ca # [533161.101269] ca step-ca[207]: 2026/10/15 15:11:04 Serving HTTPS on 0.0.0.0:1443 ... container-test-run-certificates> ca # [533161.975387] ca acme-ca.foo-start[259]: Waiting to acquire lock in /run/acme/ container-test-run-certificates> ca # [533161.978403] ca acme-ca.foo-start[259]: + '[' -e out/acme-success ']' container-test-run-certificates> ca # [533161.978450] ca acme-ca.foo-start[259]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=ca.foo --ip-addresses= container-test-run-certificates> ca # [533161.993961] ca acme-ca.foo-start[295]: + cd ca.foo container-test-run-certificates> ca # [533161.994195] ca acme-ca.foo-start[295]: + cp -vp cert.pem ../out/cert.pem container-test-run-certificates> ca # [533161.995586] ca acme-ca.foo-start[296]: 'cert.pem' -> '../out/cert.pem' container-test-run-certificates> ca # [533161.995844] ca acme-ca.foo-start[295]: + cp -vp key.pem ../out/key.pem container-test-run-certificates> ca # [533161.996906] ca acme-ca.foo-start[295]: 'key.pem' -> '../out/key.pem' container-test-run-certificates> ca # [533161.997118] ca acme-ca.foo-start[259]: + cat out/cert.pem ca/cert.pem container-test-run-certificates> ca # [533161.998914] ca acme-ca.foo-start[259]: + cp ca/cert.pem out/chain.pem container-test-run-certificates> ca # [533162.001118] ca acme-ca.foo-start[259]: + cat out/key.pem out/fullchain.pem container-test-run-certificates> ca # [533162.003085] ca acme-ca.foo-start[259]: + for fixpath in out certificates container-test-run-certificates> ca # [533162.003085] ca acme-ca.foo-start[259]: + '[' -d out ']' container-test-run-certificates> ca # [533162.003152] ca acme-ca.foo-start[259]: + chmod -R u=rwX,g=rX,o= out container-test-run-certificates> ca # [533162.005371] ca acme-ca.foo-start[259]: + chown -R acme:nginx out container-test-run-certificates> ca # [533162.009545] ca acme-ca.foo-start[259]: + for fixpath in out certificates container-test-run-certificates> ca # [533162.009545] ca acme-ca.foo-start[259]: + '[' -d certificates ']' container-test-run-certificates> ca # [533162.014312] ca systemd[1]: Finished Ensure certificate for ca.foo. container-test-run-certificates> ca # [533162.017273] ca systemd[1]: Starting Nginx Web Server... container-test-run-certificates> ca # [533162.967744] ca nginx-pre-start[307]: nginx: the configuration file /nix/store/c95c0r61f8c2340m1hbq85gjw9mhn5vh-nginx.conf syntax is ok container-test-run-certificates> ca # [533162.968427] ca nginx-pre-start[307]: nginx: configuration file /nix/store/c95c0r61f8c2340m1hbq85gjw9mhn5vh-nginx.conf test is successful container-test-run-certificates> ca # [533162.974265] ca systemd[1]: Started Nginx Web Server. container-test-run-certificates> ca # [533162.975080] ca systemd[1]: Reached target Multi-User System. container-test-run-certificates> ca # [533162.977123] ca systemd[1]: Starting Order (and renew) ACME certificate for ca.foo... container-test-run-certificates> ca # [533163.926985] ca acme-order-renew-ca.foo-start[310]: Waiting to acquire lock in /run/acme/ container-test-run-certificates> ca # [533163.929457] ca acme-order-renew-ca.foo-start[310]: + set -euo pipefail container-test-run-certificates> ca # [533163.929605] ca acme-order-renew-ca.foo-start[310]: + exec container-test-run-certificates> ca # [533163.929664] ca acme-order-renew-ca.foo-start[310]: + /nix/store/vf2h24m5aa7phb4v1kbc2qd9r41jdfqv-flock-0.4.0/bin/flock 11 container-test-run-certificates> ca # [533163.931223] ca acme-order-renew-ca.foo-start[322]: ++ find accounts -path '*/keys/*.key' -print -quit container-test-run-certificates> ca # [533163.934679] ca acme-order-renew-ca.foo-start[310]: + '[' -n '' ']' container-test-run-certificates> ca # [533163.934738] ca acme-order-renew-ca.foo-start[310]: + exec container-test-run-certificates> ca # [533163.934791] ca acme-order-renew-ca.foo-start[310]: + '[' -e certificates/ca.foo.key ']' container-test-run-certificates> ca # [533163.934831] ca acme-order-renew-ca.foo-start[310]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo:1443/acme/acme/directory --key-type ec256 -d ca.foo --no-random-sleep --renew-force --ari-disable --force-cert-domains container-test-run-certificates> ca # [533163.955989] ca acme-order-renew-ca.foo-start[323]: 2026-10-15T15:11:06.913581223Z INFO Private key saved. filepath=accounts/ca.foo_1443/none@none.tld/none@none.tld.key container-test-run-certificates> ca # [533163.983263] ca step-ca[207]: time="2026-10-15T15:11:06Z" level=info duration="147.282µs" duration-ns=147282 fields.time="2026-10-15T15:11:06Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=33b616d2-90f1-4d1d-9d67-589cdc45da44 response="{\"newNonce\":\"https://ca.foo:1443/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo:1443/acme/acme/new-account\",\"newOrder\":\"https://ca.foo:1443/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo:1443/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo:1443/acme/acme/key-change\"}" size=277 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [533163.983671] ca acme-order-renew-ca.foo-start[323]: 2026-10-15T15:11:06.941217322Z INFO Registering the account. email=none@none.tld container-test-run-certificates> ca # [533163.985264] ca step-ca[207]: time="2026-10-15T15:11:06Z" level=info duration=1.351938ms duration-ns=1351938 fields.time="2026-10-15T15:11:06Z" method=HEAD name=ca nonce=cFQ1Qmd0ZVQ5cjJoZGRmbjZQb2RQZmNXUkl0c2RzSnE path=/acme/acme/new-nonce protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=ce44ab17-00bb-42a7-a88e-4957076f8ca5 size=0 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [533163.989251] ca step-ca[207]: time="2026-10-15T15:11:06Z" level=info duration=3.183124ms duration-ns=3183124 fields.time="2026-10-15T15:11:06Z" method=POST name=ca nonce=S3VGVDAydU9SSFVBVnJ4bE1TYU5hM0lNNUVxY3Bjb3Q path=/acme/acme/new-account protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=099ea066-c7d4-48bc-923a-55227c860c95 response="{\"contact\":[\"mailto:none@none.tld\"],\"status\":\"valid\",\"orders\":\"https://ca.foo:1443/acme/acme/account/3tdU5bE17PpErhq4Mhh67Eqii8x1VfMd/orders\"}" size=143 status=201 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [533163.990092] ca acme-order-renew-ca.foo-start[323]: 2026-10-15T15:11:06.947701571Z WARN !!!! HEADS UP !!!! container-test-run-certificates> ca # [533163.990092] ca acme-order-renew-ca.foo-start[323]: Your account credentials have been saved in your container-test-run-certificates> ca # [533163.990092] ca acme-order-renew-ca.foo-start[323]: configuration directory at "accounts". container-test-run-certificates> ca # [533163.990092] ca acme-order-renew-ca.foo-start[323]: You should make a secure backup of this folder now. This container-test-run-certificates> ca # [533163.990092] ca acme-order-renew-ca.foo-start[323]: configuration directory will also contain private keys container-test-run-certificates> ca # [533163.990092] ca acme-order-renew-ca.foo-start[323]: generated by lego and certificates obtained from the ACME container-test-run-certificates> ca # [533163.990092] ca acme-order-renew-ca.foo-start[323]: server. Making regular backups of this folder is ideal. container-test-run-certificates> ca # [533163.990260] ca acme-order-renew-ca.foo-start[323]: 2026-10-15T15:11:06.947886254Z INFO Obtaining bundled SAN certificate. domains=ca.foo container-test-run-certificates> ca # [533163.995236] ca step-ca[207]: time="2026-10-15T15:11:06Z" level=info duration=4.218898ms duration-ns=4218898 fields.time="2026-10-15T15:11:06Z" method=POST name=ca nonce=SGVWc0hoRXU5eXZQOG5Gcnh5dzNFcDZQeVN0NWhJc2g path=/acme/acme/new-order protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=8087648b-b0b2-4e5f-a916-54a2ed2e1823 response="{\"id\":\"vn4t8mAhzGpCvrYBIE7btnIaeYv8hpdW\",\"status\":\"pending\",\"expires\":\"2026-10-16T15:11:06Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"ca.foo\"}],\"notBefore\":\"2026-10-15T15:10:06Z\",\"notAfter\":\"2027-01-13T15:11:06Z\",\"authorizations\":[\"https://ca.foo:1443/acme/acme/authz/K0NPVr7DYPqfLN65OFhRI0vyqdRyS6d1\"],\"finalize\":\"https://ca.foo:1443/acme/acme/order/vn4t8mAhzGpCvrYBIE7btnIaeYv8hpdW/finalize\"}" size=392 status=201 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [533164.054642] ca step-ca[207]: time="2026-10-15T15:11:07Z" level=info duration=2.21411ms duration-ns=2214110 fields.time="2026-10-15T15:11:07Z" method=POST name=ca nonce=VFN1T1c3SHVaNHZRTE9ieVR2UDVQcnk4eWY1TmNzcEI path=/acme/acme/authz/K0NPVr7DYPqfLN65OFhRI0vyqdRyS6d1 protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=5592d415-cf80-411b-bbb6-b760850ef08b response="{\"identifier\":{\"type\":\"dns\",\"value\":\"ca.foo\"},\"status\":\"pending\",\"challenges\":[{\"type\":\"dns-01\",\"status\":\"pending\",\"token\":\"hhrpKxIMmmYOiyji4Og88qqkxftuCLWp\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/K0NPVr7DYPqfLN65OFhRI0vyqdRyS6d1/gusODZd6mYiBOZwtsm402I9wLneeCPwW\"},{\"type\":\"http-01\",\"status\":\"pending\",\"token\":\"hhrpKxIMmmYOiyji4Og88qqkxftuCLWp\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/K0NPVr7DYPqfLN65OFhRI0vyqdRyS6d1/EvMwV0Y6fHDikKRYGnOLdT81WqVjrqzs\"},{\"type\":\"tls-alpn-01\",\"status\":\"pending\",\"token\":\"hhrpKxIMmmYOiyji4Og88qqkxftuCLWp\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/K0NPVr7DYPqfLN65OFhRI0vyqdRyS6d1/MmaMoDtiLx5519a0iFD2W7EtrItYi2kv\"}],\"wildcard\":false,\"expires\":\"2026-10-16T15:11:06Z\"}" size=719 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [533164.055174] ca acme-order-renew-ca.foo-start[323]: 2026-10-15T15:11:07.012787705Z INFO Use solver. domain=ca.foo type=http-01 container-test-run-certificates> ca # [533164.055223] ca acme-order-renew-ca.foo-start[323]: 2026-10-15T15:11:07.012821465Z INFO http01: Trying to solve HTTP-01. domain=ca.foo container-test-run-certificates> ca # [533164.058739] ca step-ca[207]: time="2026-10-15T15:11:07Z" level=info duration=2.988361ms duration-ns=2988361 fields.time="2026-10-15T15:11:07Z" method=POST name=ca nonce=ekJOem5rMWZKUmVqOVNaaktCdTV0cE15bzRXNXd5aXM path=/acme/acme/challenge/K0NPVr7DYPqfLN65OFhRI0vyqdRyS6d1/EvMwV0Y6fHDikKRYGnOLdT81WqVjrqzs protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=c2321b9a-edec-4fd4-88bc-c4a9a99d8355 response="{\"type\":\"http-01\",\"status\":\"valid\",\"token\":\"hhrpKxIMmmYOiyji4Og88qqkxftuCLWp\",\"validated\":\"2026-10-15T15:11:07Z\",\"url\":\"https://ca.foo:1443/acme/acme/challenge/K0NPVr7DYPqfLN65OFhRI0vyqdRyS6d1/EvMwV0Y6fHDikKRYGnOLdT81WqVjrqzs\"}" size=228 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [533164.059245] ca acme-order-renew-ca.foo-start[323]: 2026-10-15T15:11:07.016858521Z INFO The server validated our request. domain=ca.foo container-test-run-certificates> ca # [533164.059351] ca acme-order-renew-ca.foo-start[323]: 2026-10-15T15:11:07.016976762Z INFO Validations succeeded; requesting certificates. domains=ca.foo container-test-run-certificates> ca # [533164.069282] ca step-ca[207]: time="2026-10-15T15:11:07Z" level=info duration=8.334674ms duration-ns=8334674 fields.time="2026-10-15T15:11:07Z" method=POST name=ca nonce=NldCVHcyODBnOGN1Mml6dmxrUE9IR3VwTkg4N2FyMnM path=/acme/acme/order/vn4t8mAhzGpCvrYBIE7btnIaeYv8hpdW/finalize protocol=HTTP/1.1 referer= remote-address="2001:db8:1::1" request-id=04b56945-ee06-484a-b2f2-f54e590a9c99 response="{\"id\":\"vn4t8mAhzGpCvrYBIE7btnIaeYv8hpdW\",\"status\":\"valid\",\"expires\":\"2026-10-16T15:11:06Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"ca.foo\"}],\"notBefore\":\"2026-10-15T15:10:06Z\",\"notAfter\":\"2027-01-13T15:11:06Z\",\"authorizations\":[\"https://ca.foo:1443/acme/acme/authz/K0NPVr7DYPqfLN65OFhRI0vyqdRyS6d1\"],\"finalize\":\"https://ca.foo:1443/acme/acme/order/vn4t8mAhzGpCvrYBIE7btnIaeYv8hpdW/finalize\",\"certificate\":\"https://ca.foo:1443/acme/acme/certificate/jE2fJ7zNfuKCSfwxKkaE5hnYxrhbcoWU\"}" size=481 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [533164.072148] ca step-ca[207]: time="2026-10-15T15:11:07Z" level=info certificate=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 duration=1.771745ms duration-ns=1771745 fields.time="2026-10-15T15:11:07Z" issuer="Clan Intermediate CA" method=POST name=ca nonce=V1dkZjdYNVhXU2lwa2xraU1OdU53UDd4TERXYmg2UFE path=/acme/acme/certificate/jE2fJ7zNfuKCSfwxKkaE5hnYxrhbcoWU protocol=HTTP/1.1 provisioner=acme public-key="ECDSA P-256" referer= remote-address="2001:db8:1::1" request-id=9d7eb9e9-461b-4ec0-840b-23b7bdcac31b sans="map[dns:[ca.foo]]" serial=133707666624108946620137009784796986309 size=1340 status=200 subject=ca.foo user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= valid-from="2026-10-15T15:10:06Z" valid-to="2027-01-13T15:11:06Z" container-test-run-certificates> ca # [533164.072461] ca acme-order-renew-ca.foo-start[323]: 2026-10-15T15:11:07.030064542Z INFO Server responded with a certificate. domains=ca.foo container-test-run-certificates> ca # [533164.072551] ca acme-order-renew-ca.foo-start[323]: 2026-10-15T15:11:07.030178464Z INFO Writing file. filepath=certificates/ca.foo.crt container-test-run-certificates> ca # [533164.072711] ca acme-order-renew-ca.foo-start[323]: 2026-10-15T15:11:07.030336586Z INFO Writing file. filepath=certificates/ca.foo.issuer.crt container-test-run-certificates> ca # [533164.072821] ca acme-order-renew-ca.foo-start[323]: 2026-10-15T15:11:07.030448107Z INFO Writing file. filepath=certificates/ca.foo.key container-test-run-certificates> ca # [533164.072966] ca acme-order-renew-ca.foo-start[323]: 2026-10-15T15:11:07.030591909Z INFO Writing file. filepath=certificates/ca.foo.json container-test-run-certificates> ca # [533164.078929] ca acme-order-renew-ca.foo-start[310]: + touch out/acme-success container-test-run-certificates> ca # [533164.080524] ca acme-order-renew-ca.foo-start[310]: + cmp -s certificates/ca.foo.crt out/fullchain.pem container-test-run-certificates> ca # [533164.081992] ca acme-order-renew-ca.foo-start[310]: + touch out/renewed container-test-run-certificates> ca # [533164.083325] ca acme-order-renew-ca.foo-start[310]: + echo Installing new certificate container-test-run-certificates> ca # [533164.083325] ca acme-order-renew-ca.foo-start[310]: Installing new certificate container-test-run-certificates> ca # [533164.083375] ca acme-order-renew-ca.foo-start[310]: + cp -vp certificates/ca.foo.crt out/fullchain.pem container-test-run-certificates> ca # [533164.085166] ca acme-order-renew-ca.foo-start[353]: 'certificates/ca.foo.crt' -> 'out/fullchain.pem' container-test-run-certificates> ca # [533164.085439] ca acme-order-renew-ca.foo-start[310]: + cp -vp certificates/ca.foo.key out/key.pem container-test-run-certificates> ca # [533164.087231] ca acme-order-renew-ca.foo-start[354]: 'certificates/ca.foo.key' -> 'out/key.pem' container-test-run-certificates> ca # [533164.087488] ca acme-order-renew-ca.foo-start[310]: + cp -vp certificates/ca.foo.issuer.crt out/chain.pem container-test-run-certificates> ca # [533164.089023] ca acme-order-renew-ca.foo-start[355]: 'certificates/ca.foo.issuer.crt' -> 'out/chain.pem' container-test-run-certificates> ca # [533164.089275] ca acme-order-renew-ca.foo-start[310]: + ln -sf fullchain.pem out/cert.pem container-test-run-certificates> ca # [533164.090655] ca acme-order-renew-ca.foo-start[310]: + cat out/key.pem out/fullchain.pem container-test-run-certificates> ca # [533164.092493] ca acme-order-renew-ca.foo-start[310]: + for fixpath in out certificates container-test-run-certificates> ca # [533164.092521] ca acme-order-renew-ca.foo-start[310]: + '[' -d out ']' container-test-run-certificates> ca # [533164.092521] ca acme-order-renew-ca.foo-start[310]: + chmod -R u=rwX,g=rX,o= out container-test-run-certificates> ca # [533164.094259] ca acme-order-renew-ca.foo-start[310]: + chown -R acme:nginx out container-test-run-certificates> ca # [533164.097029] ca acme-order-renew-ca.foo-start[310]: + for fixpath in out certificates container-test-run-certificates> ca # [533164.097050] ca acme-order-renew-ca.foo-start[310]: + '[' -d certificates ']' container-test-run-certificates> ca # [533164.097050] ca acme-order-renew-ca.foo-start[310]: + chmod -R u=rwX,g=rX,o= certificates container-test-run-certificates> ca # [533164.098504] ca acme-order-renew-ca.foo-start[310]: + chown -R acme:nginx certificates container-test-run-certificates> ca # [533164.100946] ca acme-order-renew-ca.foo-start[310]: + chmod -R u=rwX,g=,o= accounts/. container-test-run-certificates> ca # [533164.282961] ca systemd[1]: Reloading Nginx Web Server... container-test-run-certificates> ca # [533164.288594] ca systemd[1]: acme-order-renew-ca.foo.service: Deactivated successfully. container-test-run-certificates> ca # [533164.288960] ca systemd[1]: Finished Order (and renew) ACME certificate for ca.foo. container-test-run-certificates> ca # [533164.289356] ca systemd[1]: acme-order-renew-ca.foo.service: Consumed 1.152s CPU time over 1.311s wall clock time. container-test-run-certificates> ca # [533165.158644] ca nginx[371]: nginx: the configuration file /nix/store/c95c0r61f8c2340m1hbq85gjw9mhn5vh-nginx.conf syntax is ok container-test-run-certificates> ca # [533165.159222] ca nginx[371]: nginx: configuration file /nix/store/c95c0r61f8c2340m1hbq85gjw9mhn5vh-nginx.conf test is successful container-test-run-certificates> ca: (finished: waiting for unit step-ca.service, in 8.66 seconds) container-test-run-certificates> ca: waiting for file '/var/lib/acme/ca.foo/fullchain.pem' container-test-run-certificates> ca: (finished: waiting for file '/var/lib/acme/ca.foo/fullchain.pem', in 0.01 seconds) container-test-run-certificates> ca: must succeed: systemctl restart nginx.service container-test-run-certificates> ca # [533166.046025] ca systemd[1]: Reloaded Nginx Web Server. container-test-run-certificates> ca # [533166.046549] ca systemd[1]: Startup finished in 8.041s. container-test-run-certificates> ca # [533166.194249] ca systemd[1]: Stopping Nginx Web Server... container-test-run-certificates> ca # [533166.277579] ca systemd[1]: nginx.service: Deactivated successfully. container-test-run-certificates> ca # [533166.277977] ca systemd[1]: Stopped Nginx Web Server. container-test-run-certificates> ca # [533166.278020] ca systemd[1]: nginx.service: Consumed 3.494s CPU time over 4.260s wall clock time. container-test-run-certificates> ca # [533166.282411] ca systemd[1]: Starting Nginx Web Server... container-test-run-certificates> ca: (finished: must succeed: systemctl restart nginx.service, in 1.01 seconds) container-test-run-certificates> server: systemd-nspawn running (pid 464) container-test-run-certificates> server: Waiting for journal at /build/vm-state-server/var/log/journal... container-test-run-certificates> client: systemd-nspawn running (pid 467) container-test-run-certificates> client: Waiting for journal at /build/vm-state-client/var/log/journal... container-test-run-certificates> server: waiting for file '/var/lib/acme/test.foo/fullchain.pem' container-test-run-certificates> nixos-nspawn(client): TAP vde-tap1 not found; container will be isolated from VDE container-test-run-certificates> nixos-nspawn(client): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths. container-test-run-certificates> nixos-nspawn(server): TAP vde-tap1 not found; container will be isolated from VDE container-test-run-certificates> nixos-nspawn(server): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths. container-test-run-certificates> Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file. container-test-run-certificates> Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file. container-test-run-certificates> ░ Spawning container server on /build/vm-state-server. container-test-run-certificates> ░ Spawning container client on /build/vm-state-client. container-test-run-certificates> ca # [533167.183059] ca nginx-pre-start[395]: nginx: the configuration file /nix/store/c95c0r61f8c2340m1hbq85gjw9mhn5vh-nginx.conf syntax is ok container-test-run-certificates> ca # [533167.183497] ca nginx-pre-start[395]: nginx: configuration file /nix/store/c95c0r61f8c2340m1hbq85gjw9mhn5vh-nginx.conf test is successful container-test-run-certificates> ca # [533167.188557] ca systemd[1]: Started Nginx Web Server. container-test-run-certificates> server # No journal files were found. container-test-run-certificates> server # No journal boot entry found for the specified boot (+0). container-test-run-certificates> client # No journal files were found. container-test-run-certificates> client # No journal boot entry found for the specified boot (+0). container-test-run-certificates> server # [533168.174550] server systemd-journald[72]: Journal started container-test-run-certificates> server # [533168.174605] server systemd-journald[72]: Runtime Journal (/run/log/journal/464336c87d7a4d2f8e0678ea3d525eca) is 8M, max 2.5G, 2.4G free. container-test-run-certificates> server # [533168.195344] server systemd[1]: Finished Apply Kernel Variables. container-test-run-certificates> server # [533168.210066] server systemd[1]: Finished Create Static Device Nodes in /dev gracefully. container-test-run-certificates> server # [533168.260487] server systemd[1]: Starting Flush Journal to Persistent Storage... container-test-run-certificates> server # [533168.262120] server systemd[1]: Starting Network Name Resolution... container-test-run-certificates> server # [533168.262821] server systemd[1]: Starting Create Static Device Nodes in /dev... container-test-run-certificates> server # [533168.269460] server systemd-journald[72]: Time spent on flushing to /var/log/journal/464336c87d7a4d2f8e0678ea3d525eca is 1.602ms for 7 entries. container-test-run-certificates> server # [533168.269460] server systemd-journald[72]: System Journal (/var/log/journal/464336c87d7a4d2f8e0678ea3d525eca) is 8M, max 4G, 3.9G free. container-test-run-certificates> server # [533168.293310] server systemd[1]: Finished Create Static Device Nodes in /dev. container-test-run-certificates> server # [533168.293943] server systemd[1]: Reached target Preparation for Local File Systems. container-test-run-certificates> server # [533168.294046] server systemd[1]: Reached target Local File Systems. container-test-run-certificates> server # [533168.294915] server systemd[1]: Listening on Boot Loader Control Service Socket. container-test-run-certificates> server # [533168.294963] server systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> server # [533168.295803] server systemd[1]: Starting Save Transient machine-id to Disk... container-test-run-certificates> server # [533168.295838] server systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys container-test-run-certificates> server # [533168.336944] server systemd[1]: Finished Firewall. container-test-run-certificates> server # [533168.337142] server systemd[1]: Reached target Preparation for Network. container-test-run-certificates> server # [533168.337427] server systemd[1]: Listening on Network Management Resolve Hook Socket. container-test-run-certificates> server # [533168.338663] server systemd[1]: Starting Network Management... container-test-run-certificates> server # [533168.339671] server systemd[1]: Finished Flush Journal to Persistent Storage. container-test-run-certificates> server # [533168.340722] server systemd[1]: Starting Create System Files and Directories... container-test-run-certificates> server # [533168.356052] server systemd-tmpfiles[182]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted container-test-run-certificates> server # [533168.356260] server systemd-tmpfiles[182]: fchmod() of /var/log/journal failed: Operation not permitted container-test-run-certificates> server # [533168.356396] server systemd-tmpfiles[182]: fchmod() of /var/log/journal/464336c87d7a4d2f8e0678ea3d525eca failed: Operation not permitted container-test-run-certificates> server # [533168.356603] server systemd-tmpfiles[182]: fchmod() of /run/log/journal failed: Operation not permitted container-test-run-certificates> server # [533168.358126] server systemd[1]: Finished Create System Files and Directories. container-test-run-certificates> server # [533168.359515] server systemd[1]: Starting Rebuild Journal Catalog... container-test-run-certificates> server # [533168.360351] server systemd[1]: Starting Record System Boot/Shutdown in UTMP... container-test-run-certificates> server # [533168.373468] server systemd[1]: Finished Record System Boot/Shutdown in UTMP. container-test-run-certificates> server # [533168.380108] server systemd[1]: Finished Rebuild Journal Catalog. container-test-run-certificates> server # [533168.381303] server systemd[1]: Starting Update is Completed... container-test-run-certificates> server # [533168.392200] server systemd[1]: Finished Update is Completed. container-test-run-certificates> server # [533168.474682] server systemd[1]: Finished Save Transient machine-id to Disk. container-test-run-certificates> server # [533169.170799] server systemd-networkd[180]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted container-test-run-certificates> server # [533169.170893] server systemd-networkd[180]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted container-test-run-certificates> server # [533169.180907] server systemd-networkd[180]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> server # [533169.181075] server systemd-networkd[180]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> server # [533169.181227] server systemd-networkd[180]: lo: Link UP container-test-run-certificates> server # [533169.181232] server systemd-networkd[180]: lo: Gained carrier container-test-run-certificates> server # [533169.181435] server systemd-networkd[180]: eth1: Configuring with /etc/systemd/network/40-eth1.network. container-test-run-certificates> server # [533169.191647] server systemd[1]: etc-machine\x2did.mount: Deactivated successfully. container-test-run-certificates> server # [533169.193198] server systemd[1]: Started Network Management. container-test-run-certificates> server # [533169.197018] server systemd-networkd[180]: eth1: Link UP container-test-run-certificates> server # [533169.197124] server systemd[1]: Starting Enable Persistent Storage in systemd-networkd... container-test-run-certificates> server # [533169.197339] server systemd-networkd[180]: eth1: Gained carrier container-test-run-certificates> client # [533168.163118] client systemd-journald[72]: Journal started container-test-run-certificates> client # [533168.163172] client systemd-journald[72]: Runtime Journal (/run/log/journal/f18184f58817497285f568b1a26ddbf0) is 8M, max 2.5G, 2.4G free. container-test-run-certificates> client # [533168.184448] client systemd[1]: Finished Apply Kernel Variables. container-test-run-certificates> client # [533168.199536] client systemd[1]: Finished Create Static Device Nodes in /dev gracefully. container-test-run-certificates> client # [533168.216988] client systemd[1]: Starting Flush Journal to Persistent Storage... container-test-run-certificates> client # [533168.217827] client systemd[1]: Starting Network Name Resolution... container-test-run-certificates> client # [533168.218527] client systemd[1]: Starting Create Static Device Nodes in /dev... container-test-run-certificates> client # [533168.266653] client systemd-journald[72]: Time spent on flushing to /var/log/journal/f18184f58817497285f568b1a26ddbf0 is 1.592ms for 7 entries. container-test-run-certificates> client # [533168.266653] client systemd-journald[72]: System Journal (/var/log/journal/f18184f58817497285f568b1a26ddbf0) is 8M, max 4G, 3.9G free. container-test-run-certificates> client # [533168.289084] client systemd[1]: Finished Create Static Device Nodes in /dev. container-test-run-certificates> client # [533168.289754] client systemd[1]: Reached target Preparation for Local File Systems. container-test-run-certificates> client # [533168.289867] client systemd[1]: Reached target Local File Systems. container-test-run-certificates> client # [533168.290753] client systemd[1]: Listening on Boot Loader Control Service Socket. container-test-run-certificates> client # [533168.290802] client systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> client # [533168.291682] client systemd[1]: Starting Save Transient machine-id to Disk... container-test-run-certificates> client # [533168.291724] client systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys container-test-run-certificates> client # [533168.313164] client systemd[1]: Finished Firewall. container-test-run-certificates> client # [533168.313312] client systemd[1]: Reached target Preparation for Network. container-test-run-certificates> client # [533168.313520] client systemd[1]: Listening on Network Management Resolve Hook Socket. container-test-run-certificates> client # [533168.314529] client systemd[1]: Starting Network Management... container-test-run-certificates> client # [533168.339318] client systemd[1]: Finished Flush Journal to Persistent Storage. container-test-run-certificates> client # [533168.340294] client systemd[1]: Starting Create System Files and Directories... container-test-run-certificates> client # [533168.355360] client systemd-tmpfiles[179]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted container-test-run-certificates> client # [533168.355563] client systemd-tmpfiles[179]: fchmod() of /var/log/journal failed: Operation not permitted container-test-run-certificates> client # [533168.355695] client systemd-tmpfiles[179]: fchmod() of /var/log/journal/f18184f58817497285f568b1a26ddbf0 failed: Operation not permitted container-test-run-certificates> client # [533168.355889] client systemd-tmpfiles[179]: fchmod() of /run/log/journal failed: Operation not permitted container-test-run-certificates> client # [533168.357705] client systemd[1]: Finished Create System Files and Directories. container-test-run-certificates> client # [533168.359116] client systemd[1]: Starting Rebuild Journal Catalog... container-test-run-certificates> client # [533168.359994] client systemd[1]: Starting Record System Boot/Shutdown in UTMP... container-test-run-certificates> client # [533168.373468] client systemd[1]: Finished Record System Boot/Shutdown in UTMP. container-test-run-certificates> client # [533168.381149] client systemd[1]: Finished Rebuild Journal Catalog. container-test-run-certificates> client # [533168.382251] client systemd[1]: Starting Update is Completed... container-test-run-certificates> client # [533168.392177] client systemd[1]: Finished Update is Completed. container-test-run-certificates> client # [533168.474890] client systemd[1]: Finished Save Transient machine-id to Disk. container-test-run-certificates> client # [533169.139076] client systemd-networkd[175]: Failed to increase receive buffer size for general netlink socket, ignoring: Operation not permitted container-test-run-certificates> client # [533169.139190] client systemd-networkd[175]: Failed to increase receive buffer size for nftables netlink socket, ignoring: Operation not permitted container-test-run-certificates> client # [533169.150248] client systemd-networkd[175]: /etc/systemd/network/99-ethernet-default-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> client # [533169.150413] client systemd-networkd[175]: /etc/systemd/network/99-wireless-client-dhcp.network: No valid settings found in the [Match] section, ignoring file. To match all interfaces, add Name=* in the [Match] section. container-test-run-certificates> client # [533169.150569] client systemd-networkd[175]: lo: Link UP container-test-run-certificates> client # [533169.150574] client systemd-networkd[175]: lo: Gained carrier container-test-run-certificates> client # [533169.150748] client systemd-networkd[175]: eth1: Configuring with /etc/systemd/network/40-eth1.network. container-test-run-certificates> client # [533169.151237] client systemd-networkd[175]: eth1: Link UP container-test-run-certificates> client # [533169.151548] client systemd-networkd[175]: eth1: Gained carrier container-test-run-certificates> client # [533169.160401] client systemd[1]: etc-machine\x2did.mount: Deactivated successfully. container-test-run-certificates> client # [533169.161183] client systemd[1]: Started Network Management. container-test-run-certificates> client # [533169.162047] client systemd[1]: Starting Enable Persistent Storage in systemd-networkd... container-test-run-certificates> client # [533169.205222] client systemd[1]: Finished Enable Persistent Storage in systemd-networkd. container-test-run-certificates> server # [533169.245888] server systemd[1]: Finished Enable Persistent Storage in systemd-networkd. container-test-run-certificates> client # [533169.684302] client systemd-resolved[118]: Positive Trust Anchors: container-test-run-certificates> client # [533169.684313] client systemd-resolved[118]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d container-test-run-certificates> client # [533169.684319] client systemd-resolved[118]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 container-test-run-certificates> client # [533169.684353] client systemd-resolved[118]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test container-test-run-certificates> client # [533169.705683] client systemd-resolved[118]: Using system hostname 'client'. container-test-run-certificates> client # [533169.707153] client systemd[1]: Started Network Name Resolution. container-test-run-certificates> client # [533169.707259] client systemd[1]: Reached target Network. container-test-run-certificates> client # [533169.707340] client systemd[1]: Reached target System Initialization. container-test-run-certificates> client # [533169.707399] client systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> client # [533169.707432] client systemd[1]: Started Daily Cleanup of Temporary Directories. container-test-run-certificates> client # [533169.707451] client systemd[1]: Reached target Timer Units. container-test-run-certificates> client # [533169.707627] client systemd[1]: Listening on D-Bus System Message Bus Socket. container-test-run-certificates> client # [533169.707800] client systemd[1]: Listening on Nix Daemon Socket. container-test-run-certificates> client # [533169.707933] client systemd[1]: Listening on Virtual Machine and Container Registration Service Socket. container-test-run-certificates> client # [533169.707959] client systemd[1]: Reached target Socket Units. container-test-run-certificates> client # [533169.707995] client systemd[1]: Reached target Basic System. container-test-run-certificates> client # [533169.709582] client systemd[1]: Starting Import lastlog data into lastlog2 database... container-test-run-certificates> client # [533169.710604] client systemd[1]: Starting Name Service Cache Daemon (nsncd)... container-test-run-certificates> client # [533169.712481] client systemd[1]: Starting D-Bus System Message Bus... container-test-run-certificates> client # [533169.732535] client systemd[1]: Finished Import lastlog data into lastlog2 database. container-test-run-certificates> server # [533169.691100] server systemd-resolved[132]: Positive Trust Anchors: container-test-run-certificates> server # [533169.691113] server systemd-resolved[132]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d container-test-run-certificates> server # [533169.691117] server systemd-resolved[132]: . IN DS 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 container-test-run-certificates> server # [533169.691151] server systemd-resolved[132]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 170.0.0.192.in-addr.arpa 171.0.0.192.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa ipv4only.arpa resolver.arpa corp home internal intranet lan local private test container-test-run-certificates> server # [533169.714794] server systemd-resolved[132]: Using system hostname 'server'. container-test-run-certificates> server # [533169.716592] server systemd[1]: Started Network Name Resolution. container-test-run-certificates> server # [533169.716686] server systemd[1]: Reached target Network. container-test-run-certificates> server # [533169.716749] server systemd[1]: Reached target Network is Online. container-test-run-certificates> server # [533169.716787] server systemd[1]: Reached target System Initialization. container-test-run-certificates> server # [533169.717031] server systemd[1]: Started Renew ACME Certificate for test.foo. container-test-run-certificates> server # [533169.717061] server systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container container-test-run-certificates> server # [533169.717086] server systemd[1]: Started Daily Cleanup of Temporary Directories. container-test-run-certificates> server # [533169.717106] server systemd[1]: Reached target Timer Units. container-test-run-certificates> server # [533169.717256] server systemd[1]: Listening on D-Bus System Message Bus Socket. container-test-run-certificates> server # [533169.717378] server systemd[1]: Listening on Nix Daemon Socket. container-test-run-certificates> server # [533169.717515] server systemd[1]: Listening on Virtual Machine and Container Registration Service Socket. container-test-run-certificates> server # [533169.717567] server systemd[1]: Reached target Socket Units. container-test-run-certificates> server # [533169.717619] server systemd[1]: Reached target Basic System. container-test-run-certificates> server # [533169.719127] server systemd[1]: Starting Set up the ACME certificate renewal infrastructure... container-test-run-certificates> server # [533169.720026] server systemd[1]: Starting Import lastlog data into lastlog2 database... container-test-run-certificates> server # [533169.720078] server systemd[1]: nginx-config-reload.service skipped, unmet condition check ConditionPathExists=/var/lib/acme/test.foo/fullchain.pem container-test-run-certificates> server # [533169.721262] server systemd[1]: Starting Name Service Cache Daemon (nsncd)... container-test-run-certificates> server # [533169.723318] server systemd[1]: Starting D-Bus System Message Bus... container-test-run-certificates> server # [533169.732783] server systemd[1]: lastlog2-import.service: Failed to spawn executor: No such file or directory container-test-run-certificates> server # [533169.732809] server systemd[1]: lastlog2-import.service: Failed to spawn 'start-post' task: No such file or directory container-test-run-certificates> server # [533169.732841] server systemd[1]: lastlog2-import.service: Failed with result 'resources'. container-test-run-certificates> server # [533169.732932] server systemd[1]: Failed to start Import lastlog data into lastlog2 database. container-test-run-certificates> server # [533170.103383] server acme-setup-privileged[195]: + set -euo pipefail container-test-run-certificates> server # [533170.103383] server acme-setup-privileged[195]: + cd /var/lib/acme container-test-run-certificates> server # [533170.103383] server acme-setup-privileged[195]: + chmod -R u=rwX,g=,o= .lego/accounts container-test-run-certificates> server # [533170.105626] server acme-setup-privileged[195]: + chown -R acme .lego/accounts container-test-run-certificates> server # [533170.106785] server acme-setup-privileged[195]: + for fixpath in test.foo .lego/test.foo container-test-run-certificates> server # [533170.106829] server acme-setup-privileged[195]: + '[' -d test.foo ']' container-test-run-certificates> server # [533170.106829] server acme-setup-privileged[195]: + for fixpath in test.foo .lego/test.foo container-test-run-certificates> server # [533170.106829] server acme-setup-privileged[195]: + '[' -d .lego/test.foo ']' container-test-run-certificates> server # [533170.186092] server nsncd[197]: Oct 15 15:11:13.143 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket" container-test-run-certificates> server # [533170.186083] server systemd[1]: Started Name Service Cache Daemon (nsncd). container-test-run-certificates> server # [533170.186171] server systemd[1]: Reached target Host and Network Name Lookups. container-test-run-certificates> server # [533170.186242] server systemd[1]: Reached target User and Group Name Lookups. container-test-run-certificates> server # [533170.187617] server systemd[1]: Starting User Login Management... container-test-run-certificates> server # [533170.189562] server systemd[1]: Starting Permit User Sessions... container-test-run-certificates> server # [533170.199976] server systemd[1]: Finished Permit User Sessions. container-test-run-certificates> server # [533170.201034] server systemd[1]: Started Console Getty. container-test-run-certificates> server # [533170.201074] server systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0 container-test-run-certificates> server # [533170.201091] server systemd[1]: Reached target Login Prompts. container-test-run-certificates> client # [533170.196705] client systemd[1]: Started Name Service Cache Daemon (nsncd). container-test-run-certificates> client # [533170.197144] client nsncd[192]: Oct 15 15:11:13.154 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket" container-test-run-certificates> client # [533170.196779] client systemd[1]: Reached target Host and Network Name Lookups. container-test-run-certificates> client # [533170.196846] client systemd[1]: Reached target User and Group Name Lookups. container-test-run-certificates> client # [533170.198316] client systemd[1]: Starting User Login Management... container-test-run-certificates> client # [533170.199091] client systemd[1]: Starting Permit User Sessions... container-test-run-certificates> client # [533170.209318] client systemd[1]: Finished Permit User Sessions. container-test-run-certificates> client # [533170.210416] client systemd[1]: Started Console Getty. container-test-run-certificates> client # [533170.210462] client systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0 container-test-run-certificates> client # [533170.210482] client systemd[1]: Reached target Login Prompts. container-test-run-certificates> client # [533170.559689] client dbus-broker-launch[193]: Looking up NSS user entry for 'systemd-timesync'... container-test-run-certificates> client # [533170.560467] client dbus-broker-launch[193]: NSS returned no entry for 'systemd-timesync' container-test-run-certificates> client # [533170.560467] client dbus-broker-launch[193]: Invalid user-name in /nix/store/2iyy1r4hfbqqaxqk9w1848g70alnnisk-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync" container-test-run-certificates> client # [533170.560891] client systemd[1]: Started D-Bus System Message Bus. container-test-run-certificates> client # [533170.568383] client dbus-broker-launch[193]: Ready container-test-run-certificates> server # [533170.538833] server dbus-broker-launch[198]: Looking up NSS user entry for 'systemd-timesync'... container-test-run-certificates> server # [533170.539913] server dbus-broker-launch[198]: NSS returned no entry for 'systemd-timesync' container-test-run-certificates> server # [533170.539913] server dbus-broker-launch[198]: Invalid user-name in /nix/store/pqpzlr43bysgrkg9q36ddnbp2pgcpk5r-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync" container-test-run-certificates> server # [533170.540298] server systemd[1]: Started D-Bus System Message Bus. container-test-run-certificates> server # [533170.548764] server dbus-broker-launch[198]: Ready container-test-run-certificates> server # [533170.816555] server systemd-networkd[180]: eth1: Gained IPv6LL container-test-run-certificates> client # [533170.816124] client systemd-networkd[175]: eth1: Gained IPv6LL container-test-run-certificates> server # [533171.965518] server systemd-logind[225]: New seat seat0. container-test-run-certificates> server # [533171.965743] server systemd[1]: Started User Login Management. container-test-run-certificates> server # [533171.967081] server systemd[1]: Starting linger-users.service... container-test-run-certificates> server # [533171.995744] server systemd[1]: linger-users.service: Deactivated successfully. container-test-run-certificates> server # [533171.995968] server systemd[1]: Finished linger-users.service. container-test-run-certificates> server # [533172.081269] server acme-setup-start[208]: + set -euo pipefail container-test-run-certificates> server # [533172.081269] server acme-setup-start[208]: + test -e ca/key.pem container-test-run-certificates> server # [533172.081700] server acme-setup-start[208]: + minica --ca-key ca/key.pem --ca-cert ca/cert.pem --domains selfsigned.local container-test-run-certificates> server # [533172.139811] server systemd[1]: Finished Set up the ACME certificate renewal infrastructure. container-test-run-certificates> server # [533172.141418] server systemd[1]: Starting Ensure certificate for test.foo... container-test-run-certificates> client # [533172.034191] client systemd-logind[208]: New seat seat0. container-test-run-certificates> client # [533172.034408] client systemd[1]: Started User Login Management. container-test-run-certificates> client # [533172.035772] client systemd[1]: Starting linger-users.service... container-test-run-certificates> client # [533172.130691] client systemd[1]: linger-users.service: Deactivated successfully. container-test-run-certificates> client # [533172.130951] client systemd[1]: Finished linger-users.service. container-test-run-certificates> client # [533172.131432] client systemd[1]: Reached target Multi-User System. container-test-run-certificates> client # [533172.132566] client systemd[1]: Startup finished in 4.441s. container-test-run-certificates> server # [533175.770490] server acme-test.foo-start[246]: Waiting to acquire lock in /run/acme/ container-test-run-certificates> server # [533175.774390] server acme-test.foo-start[246]: + '[' -e out/acme-success ']' container-test-run-certificates> server # [533175.774439] server acme-test.foo-start[246]: + minica --ca-cert=ca/cert.pem --ca-key=ca/key.pem --domains=test.foo --ip-addresses= container-test-run-certificates> server # [533175.794297] server acme-test.foo-start[256]: + cd test.foo container-test-run-certificates> server # [533175.794749] server acme-test.foo-start[256]: + cp -vp cert.pem ../out/cert.pem container-test-run-certificates> server # [533175.798124] server acme-test.foo-start[257]: 'cert.pem' -> '../out/cert.pem' container-test-run-certificates> server # [533175.798393] server acme-test.foo-start[256]: + cp -vp key.pem ../out/key.pem container-test-run-certificates> server # [533175.799638] server acme-test.foo-start[256]: 'key.pem' -> '../out/key.pem' container-test-run-certificates> server # [533175.799878] server acme-test.foo-start[246]: + cat out/cert.pem ca/cert.pem container-test-run-certificates> server # [533175.801963] server acme-test.foo-start[246]: + cp ca/cert.pem out/chain.pem container-test-run-certificates> server # [533175.803613] server acme-test.foo-start[246]: + cat out/key.pem out/fullchain.pem container-test-run-certificates> server # [533175.805931] server acme-test.foo-start[246]: + for fixpath in out certificates container-test-run-certificates> server # [533175.805931] server acme-test.foo-start[246]: + '[' -d out ']' container-test-run-certificates> server # [533175.806030] server acme-test.foo-start[246]: + chmod -R u=rwX,g=rX,o= out container-test-run-certificates> server # [533175.807518] server acme-test.foo-start[246]: + chown -R acme:nginx out container-test-run-certificates> server # [533175.810547] server acme-test.foo-start[246]: + for fixpath in out certificates container-test-run-certificates> server # [533175.810547] server acme-test.foo-start[246]: + '[' -d certificates ']' container-test-run-certificates> server # [533175.832806] server systemd[1]: Finished Ensure certificate for test.foo. container-test-run-certificates> server # [533175.835494] server systemd[1]: Starting Nginx Web Server... container-test-run-certificates> server: still waiting for container 'server' to reach ready state... container-test-run-certificates> server # [533178.039322] server nginx-pre-start[268]: nginx: the configuration file /nix/store/m0mx0dyvazvzhw8b23hfjcf1l4lh5wns-nginx.conf syntax is ok container-test-run-certificates> server # [533178.039730] server nginx-pre-start[268]: nginx: configuration file /nix/store/m0mx0dyvazvzhw8b23hfjcf1l4lh5wns-nginx.conf test is successful container-test-run-certificates> server # [533178.047469] server systemd[1]: Started Nginx Web Server. container-test-run-certificates> server # [533178.047890] server systemd[1]: Reached target Multi-User System. container-test-run-certificates> server # [533178.050322] server systemd[1]: Starting Order (and renew) ACME certificate for test.foo... container-test-run-certificates> server # [533179.716062] server acme-order-renew-test.foo-start[271]: Waiting to acquire lock in /run/acme/ container-test-run-certificates> server # [533179.716062] server acme-order-renew-test.foo-start[271]: + set -euo pipefail container-test-run-certificates> server # [533179.716062] server acme-order-renew-test.foo-start[271]: + exec container-test-run-certificates> server # [533179.716062] server acme-order-renew-test.foo-start[271]: + /nix/store/vf2h24m5aa7phb4v1kbc2qd9r41jdfqv-flock-0.4.0/bin/flock 11 container-test-run-certificates> server # [533179.717140] server acme-order-renew-test.foo-start[282]: ++ find accounts -path '*/keys/*.key' -print -quit container-test-run-certificates> server # [533179.719285] server acme-order-renew-test.foo-start[271]: + '[' -n '' ']' container-test-run-certificates> server # [533179.719285] server acme-order-renew-test.foo-start[271]: + exec container-test-run-certificates> server # [533179.719285] server acme-order-renew-test.foo-start[271]: + '[' -e certificates/test.foo.key ']' container-test-run-certificates> server # [533179.719285] server acme-order-renew-test.foo-start[271]: + lego run --accept-tos --path . --email none@none.tld --http --http.webroot /var/lib/acme/acme-challenge --server https://ca.foo/acme/acme/directory --key-type ec256 -d test.foo --no-random-sleep --renew-force --ari-disable --force-cert-domains container-test-run-certificates> server # [533179.740056] server acme-order-renew-test.foo-start[283]: 2026-10-15T15:11:22.697470151Z INFO Private key saved. filepath=accounts/ca.foo/none@none.tld/none@none.tld.key container-test-run-certificates> server # [533179.765739] server acme-order-renew-test.foo-start[283]: 2026-10-15T15:11:22.723334866Z INFO Registering the account. email=none@none.tld container-test-run-certificates> server # [533179.792780] server acme-order-renew-test.foo-start[283]: 2026-10-15T15:11:22.750382637Z WARN !!!! HEADS UP !!!! container-test-run-certificates> server # [533179.792780] server acme-order-renew-test.foo-start[283]: Your account credentials have been saved in your container-test-run-certificates> server # [533179.792780] server acme-order-renew-test.foo-start[283]: configuration directory at "accounts". container-test-run-certificates> server # [533179.792780] server acme-order-renew-test.foo-start[283]: You should make a secure backup of this folder now. This container-test-run-certificates> server # [533179.792780] server acme-order-renew-test.foo-start[283]: configuration directory will also contain private keys container-test-run-certificates> server # [533179.792780] server acme-order-renew-test.foo-start[283]: generated by lego and certificates obtained from the ACME container-test-run-certificates> server # [533179.792780] server acme-order-renew-test.foo-start[283]: server. Making regular backups of this folder is ideal. container-test-run-certificates> server # [533179.793169] server acme-order-renew-test.foo-start[283]: 2026-10-15T15:11:22.750513759Z INFO Obtaining bundled SAN certificate. domains=test.foo container-test-run-certificates> server # [533179.870458] server acme-order-renew-test.foo-start[283]: 2026-10-15T15:11:22.828064984Z INFO Use solver. domain=test.foo type=http-01 container-test-run-certificates> server # [533179.870458] server acme-order-renew-test.foo-start[283]: 2026-10-15T15:11:22.828100344Z INFO http01: Trying to solve HTTP-01. domain=test.foo container-test-run-certificates> server # [533179.931134] server acme-order-renew-test.foo-start[283]: 2026-10-15T15:11:22.888737017Z INFO The server validated our request. domain=test.foo container-test-run-certificates> server # [533179.931264] server acme-order-renew-test.foo-start[283]: 2026-10-15T15:11:22.888825698Z INFO Validations succeeded; requesting certificates. domains=test.foo container-test-run-certificates> server # [533179.941260] server acme-order-renew-test.foo-start[283]: 2026-10-15T15:11:22.898869236Z INFO Server responded with a certificate. domains=test.foo container-test-run-certificates> server # [533179.941357] server acme-order-renew-test.foo-start[283]: 2026-10-15T15:11:22.898929077Z INFO Writing file. filepath=certificates/test.foo.crt container-test-run-certificates> server # [533179.941422] server acme-order-renew-test.foo-start[283]: 2026-10-15T15:11:22.899029839Z INFO Writing file. filepath=certificates/test.foo.issuer.crt container-test-run-certificates> server # [533179.941422] server acme-order-renew-test.foo-start[283]: 2026-10-15T15:11:22.899065799Z INFO Writing file. filepath=certificates/test.foo.key container-test-run-certificates> server # [533179.941525] server acme-order-renew-test.foo-start[283]: 2026-10-15T15:11:22.899147760Z INFO Writing file. filepath=certificates/test.foo.json container-test-run-certificates> server # [533179.947455] server acme-order-renew-test.foo-start[271]: + touch out/acme-success container-test-run-certificates> server # [533179.949229] server acme-order-renew-test.foo-start[271]: + cmp -s certificates/test.foo.crt out/fullchain.pem container-test-run-certificates> server # [533179.950325] server acme-order-renew-test.foo-start[271]: + touch out/renewed container-test-run-certificates> server # [533179.952213] server acme-order-renew-test.foo-start[271]: + echo Installing new certificate container-test-run-certificates> server # [533179.952213] server acme-order-renew-test.foo-start[271]: Installing new certificate container-test-run-certificates> server # [533179.952213] server acme-order-renew-test.foo-start[271]: + cp -vp certificates/test.foo.crt out/fullchain.pem container-test-run-certificates> server # [533179.953721] server acme-order-renew-test.foo-start[314]: 'certificates/test.foo.crt' -> 'out/fullchain.pem' container-test-run-certificates> server # [533179.954280] server acme-order-renew-test.foo-start[271]: + cp -vp certificates/test.foo.key out/key.pem container-test-run-certificates> server # [533179.955657] server acme-order-renew-test.foo-start[315]: 'certificates/test.foo.key' -> 'out/key.pem' container-test-run-certificates> server # [533179.955980] server acme-order-renew-test.foo-start[271]: + cp -vp certificates/test.foo.issuer.crt out/chain.pem container-test-run-certificates> server # [533179.957485] server acme-order-renew-test.foo-start[316]: 'certificates/test.foo.issuer.crt' -> 'out/chain.pem' container-test-run-certificates> server # [533179.957777] server acme-order-renew-test.foo-start[271]: + ln -sf fullchain.pem out/cert.pem container-test-run-certificates> server # [533179.961637] server acme-order-renew-test.foo-start[271]: + cat out/key.pem out/fullchain.pem container-test-run-certificates> server # [533179.964299] server acme-order-renew-test.foo-start[271]: + for fixpath in out certificates container-test-run-certificates> server # [533179.964299] server acme-order-renew-test.foo-start[271]: + '[' -d out ']' container-test-run-certificates> server # [533179.964376] server acme-order-renew-test.foo-start[271]: + chmod -R u=rwX,g=rX,o= out container-test-run-certificates> server # [533179.966246] server acme-order-renew-test.foo-start[271]: + chown -R acme:nginx out container-test-run-certificates> ca # [533179.765357] ca step-ca[207]: time="2026-10-15T15:11:22Z" level=info duration="45.201µs" duration-ns=45201 fields.time="2026-10-15T15:11:22Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address="::1" request-id=902d5496-7510-4b7c-830a-a626162df9ee response="{\"newNonce\":\"https://ca.foo/acme/acme/new-nonce\",\"newAccount\":\"https://ca.foo/acme/acme/new-account\",\"newOrder\":\"https://ca.foo/acme/acme/new-order\",\"revokeCert\":\"https://ca.foo/acme/acme/revoke-cert\",\"keyChange\":\"https://ca.foo/acme/acme/key-change\"}" size=252 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [533179.782717] ca step-ca[207]: time="2026-10-15T15:11:22Z" level=info duration=14.994166ms duration-ns=14994166 fields.time="2026-10-15T15:11:22Z" method=HEAD name=ca nonce=U3c4NW5JVmVqM1FtaFJrWklvVnRBY1RIODAwSURncGs path=/acme/acme/new-nonce protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=cf4748e7-44be-402a-bbac-2f5d94e0daf2 size=0 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [533179.792189] ca step-ca[207]: time="2026-10-15T15:11:22Z" level=info duration=7.23846ms duration-ns=7238460 fields.time="2026-10-15T15:11:22Z" method=POST name=ca nonce=bEtJcjZOZlBESjFHTUg0aWZJcllkTDZFVlZybDZ4TGw path=/acme/acme/new-account protocol=HTTP/1.1 referer= remote-address="::1" request-id=c65a23ab-a445-427f-9257-7243ba279ff3 response="{\"contact\":[\"mailto:none@none.tld\"],\"status\":\"valid\",\"orders\":\"https://ca.foo/acme/acme/account/ZJivSTs3mD104WdqC66kV39le67uD6ky/orders\"}" size=138 status=201 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [533179.798753] ca step-ca[207]: time="2026-10-15T15:11:22Z" level=info duration=4.032415ms duration-ns=4032415 fields.time="2026-10-15T15:11:22Z" method=POST name=ca nonce=MmNKQUU1S01xU2NaOFZRbnFEWmhjRjRha0tvQmx1TG8 path=/acme/acme/new-order protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=22cfc329-183f-4091-945d-dad8ed4c6c38 response="{\"id\":\"b8wi9v9a3ZJgTCsRL90c1Fho4VNrZrlg\",\"status\":\"pending\",\"expires\":\"2026-10-16T15:11:22Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"test.foo\"}],\"notBefore\":\"2026-10-15T15:10:22Z\",\"notAfter\":\"2027-01-13T15:11:22Z\",\"authorizations\":[\"https://ca.foo/acme/acme/authz/a7qb672TBReKYwUVmTibEu9QYMjNN4kQ\"],\"finalize\":\"https://ca.foo/acme/acme/order/b8wi9v9a3ZJgTCsRL90c1Fho4VNrZrlg/finalize\"}" size=384 status=201 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [533179.869887] ca step-ca[207]: time="2026-10-15T15:11:22Z" level=info duration=12.611573ms duration-ns=12611573 fields.time="2026-10-15T15:11:22Z" method=POST name=ca nonce=Mnh0c1NOWk13Rk5lMmI3d1NHa1VKMnpIRWVPbzNSRzI path=/acme/acme/authz/a7qb672TBReKYwUVmTibEu9QYMjNN4kQ protocol=HTTP/1.1 referer= remote-address="::1" request-id=e6afac7c-77ee-47e9-82b7-591b426914f9 response="{\"identifier\":{\"type\":\"dns\",\"value\":\"test.foo\"},\"status\":\"pending\",\"challenges\":[{\"type\":\"dns-01\",\"status\":\"pending\",\"token\":\"vb0OnvolfCQBq1fEmGD02rrzdYiYwFFv\",\"url\":\"https://ca.foo/acme/acme/challenge/a7qb672TBReKYwUVmTibEu9QYMjNN4kQ/zPuQvhxUU1fIaAjcw7DZL3xwwJialIcl\"},{\"type\":\"http-01\",\"status\":\"pending\",\"token\":\"vb0OnvolfCQBq1fEmGD02rrzdYiYwFFv\",\"url\":\"https://ca.foo/acme/acme/challenge/a7qb672TBReKYwUVmTibEu9QYMjNN4kQ/smZ1lKuDhwlNK1ZkgUyOm9IDFQgdFcfJ\"},{\"type\":\"tls-alpn-01\",\"status\":\"pending\",\"token\":\"vb0OnvolfCQBq1fEmGD02rrzdYiYwFFv\",\"url\":\"https://ca.foo/acme/acme/challenge/a7qb672TBReKYwUVmTibEu9QYMjNN4kQ/omsClfw2rK1QGjzje7sHOw3X8fkVoTJv\"}],\"wildcard\":false,\"expires\":\"2026-10-16T15:11:22Z\"}" size=706 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [533179.930560] ca step-ca[207]: time="2026-10-15T15:11:22Z" level=info duration=57.747833ms duration-ns=57747833 fields.time="2026-10-15T15:11:22Z" method=POST name=ca nonce=VmFxMGxHS3JCNkhUUlExM1NLSkE4Qk5EU3NJQk5CUk4 path=/acme/acme/challenge/a7qb672TBReKYwUVmTibEu9QYMjNN4kQ/smZ1lKuDhwlNK1ZkgUyOm9IDFQgdFcfJ protocol=HTTP/1.1 referer= remote-address=127.0.0.1 request-id=623031f6-b338-401b-9472-c527c2902685 response="{\"type\":\"http-01\",\"status\":\"valid\",\"token\":\"vb0OnvolfCQBq1fEmGD02rrzdYiYwFFv\",\"validated\":\"2026-10-15T15:11:22Z\",\"url\":\"https://ca.foo/acme/acme/challenge/a7qb672TBReKYwUVmTibEu9QYMjNN4kQ/smZ1lKuDhwlNK1ZkgUyOm9IDFQgdFcfJ\"}" size=223 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [533179.937729] ca step-ca[207]: time="2026-10-15T15:11:22Z" level=info duration=4.31398ms duration-ns=4313980 fields.time="2026-10-15T15:11:22Z" method=POST name=ca nonce=WnlzU2hhQ0tGRllLOGd3aDZYNEJtMENNMWdENks0dkQ path=/acme/acme/order/b8wi9v9a3ZJgTCsRL90c1Fho4VNrZrlg/finalize protocol=HTTP/1.1 referer= remote-address="::1" request-id=62bc3fa1-1985-42ce-9362-65e0196a5782 response="{\"id\":\"b8wi9v9a3ZJgTCsRL90c1Fho4VNrZrlg\",\"status\":\"valid\",\"expires\":\"2026-10-16T15:11:22Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"test.foo\"}],\"notBefore\":\"2026-10-15T15:10:22Z\",\"notAfter\":\"2027-01-13T15:11:22Z\",\"authorizations\":[\"https://ca.foo/acme/acme/authz/a7qb672TBReKYwUVmTibEu9QYMjNN4kQ\"],\"finalize\":\"https://ca.foo/acme/acme/order/b8wi9v9a3ZJgTCsRL90c1Fho4VNrZrlg/finalize\",\"certificate\":\"https://ca.foo/acme/acme/certificate/omKjmB9YxtIDYQlcbSeXAeWtSDeoE8Vh\"}" size=468 status=200 user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= container-test-run-certificates> ca # [533179.940889] ca step-ca[207]: time="2026-10-15T15:11:22Z" level=info certificate="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" duration=1.058175ms duration-ns=1058175 fields.time="2026-10-15T15:11:22Z" issuer="Clan Intermediate CA" method=POST name=ca nonce=NE9LZ3kxdXJidmFrNjZuVk5Yb285M1dJM0N1dTc0ZWI path=/acme/acme/certificate/omKjmB9YxtIDYQlcbSeXAeWtSDeoE8Vh protocol=HTTP/1.1 provisioner=acme public-key="ECDSA P-256" referer= remote-address=127.0.0.1 request-id=9b86338d-d27a-4e85-ad94-f51ebd1e6556 sans="map[dns:[test.foo]]" serial=260621612427032624764007715111906825532 size=1348 status=200 subject=test.foo user-agent="lego-cli/ xenolf-acme/5.6.0 (release; linux; arm64)" user-id= valid-from="2026-10-15T15:10:22Z" valid-to="2027-01-13T15:11:22Z" container-test-run-certificates> server # [533179.968802] server acme-order-renew-test.foo-start[271]: + for fixpath in out certificates container-test-run-certificates> server # [533179.968837] server acme-order-renew-test.foo-start[271]: + '[' -d certificates ']' container-test-run-certificates> server # [533179.968837] server acme-order-renew-test.foo-start[271]: + chmod -R u=rwX,g=rX,o= certificates container-test-run-certificates> server # [533179.970910] server acme-order-renew-test.foo-start[271]: + chown -R acme:nginx certificates container-test-run-certificates> server # [533179.973446] server acme-order-renew-test.foo-start[271]: + chmod -R u=rwX,g=,o= accounts/. container-test-run-certificates> server # [533180.170482] server systemd[1]: Reloading Nginx Web Server... container-test-run-certificates> server # [533180.177463] server systemd[1]: acme-order-renew-test.foo.service: Deactivated successfully. container-test-run-certificates> server # [533180.177749] server systemd[1]: Finished Order (and renew) ACME certificate for test.foo. container-test-run-certificates> server # [533180.178145] server systemd[1]: acme-order-renew-test.foo.service: Consumed 1.307s CPU time over 2.127s wall clock time. container-test-run-certificates> server # [533181.469337] server nginx[332]: nginx: the configuration file /nix/store/m0mx0dyvazvzhw8b23hfjcf1l4lh5wns-nginx.conf syntax is ok container-test-run-certificates> server # [533181.469686] server nginx[332]: nginx: configuration file /nix/store/m0mx0dyvazvzhw8b23hfjcf1l4lh5wns-nginx.conf test is successful container-test-run-certificates> server # [533182.483452] server systemd[1]: Reloaded Nginx Web Server. container-test-run-certificates> server # [533182.483899] server systemd[1]: Startup finished in 14.794s. container-test-run-certificates> server: (finished: waiting for file '/var/lib/acme/test.foo/fullchain.pem', in 15.67 seconds) container-test-run-certificates> server: must succeed: systemctl restart nginx.service container-test-run-certificates> server # [533182.875422] server systemd[1]: Stopping Nginx Web Server... container-test-run-certificates> server # [533182.956027] server systemd[1]: nginx.service: Deactivated successfully. container-test-run-certificates> server # [533182.956375] server systemd[1]: Stopped Nginx Web Server. container-test-run-certificates> server # [533182.956457] server systemd[1]: nginx.service: Consumed 6.057s CPU time over 7.120s wall clock time. container-test-run-certificates> server # [533182.960754] server systemd[1]: Starting Nginx Web Server... container-test-run-certificates> server: (finished: must succeed: systemctl restart nginx.service, in 1.17 seconds) container-test-run-certificates> client: waiting for success: curl -v https://test.foo container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: 2001:db8:1::3 container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying [2001:db8:1::3]:443... container-test-run-certificates> * connect to 2001:db8:1::3 port 443 from 2001:db8:1::2 port 47324 failed: Connection refused container-test-run-certificates> * Trying 192.168.1.3:443... container-test-run-certificates> * connect to 192.168.1.3 port 443 from 192.168.1.2 port 54510 failed: Connection refused container-test-run-certificates> * Failed to connect to test.foo:443 after 2 ms: Could not connect to server container-test-run-certificates> * closing connection #0 container-test-run-certificates> curl: (7) Failed to connect to test.foo:443 after 2 ms: Could not connect to server container-test-run-certificates> server # [533183.998327] server nginx-pre-start[355]: nginx: the configuration file /nix/store/m0mx0dyvazvzhw8b23hfjcf1l4lh5wns-nginx.conf syntax is ok container-test-run-certificates> server # [533183.998750] server nginx-pre-start[355]: nginx: configuration file /nix/store/m0mx0dyvazvzhw8b23hfjcf1l4lh5wns-nginx.conf test is successful container-test-run-certificates> server # [533184.028573] server systemd[1]: Started Nginx Web Server. container-test-run-certificates> * Host test.foo:443 was resolved. container-test-run-certificates> * IPv6: 2001:db8:1::3 container-test-run-certificates> * IPv4: 192.168.1.3 container-test-run-certificates> * Trying [2001:db8:1::3]:443... container-test-run-certificates> * ALPN: curl offers h2,http/1.1 container-test-run-certificates> } [5 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Client hello (1): container-test-run-certificates> } [1554 bytes data] container-test-run-certificates> * SSL Trust Anchors: container-test-run-certificates> * OpenSSL default paths (fallback) container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Server hello (2): container-test-run-certificates> { [1210 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): container-test-run-certificates> { [1 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): container-test-run-certificates> { [19 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Certificate (11): container-test-run-certificates> { [932 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, CERT verify (15): container-test-run-certificates> { [78 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Finished (20): container-test-run-certificates> { [52 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): container-test-run-certificates> } [1 bytes data] container-test-run-certificates> * TLSv1.3 (OUT), TLS handshake, Finished (20): container-test-run-certificates> } [52 bytes data] container-test-run-certificates> * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ecPublicKey container-test-run-certificates> * ALPN: server accepted h2 container-test-run-certificates> * Server certificate: container-test-run-certificates> * subject: CN=test.foo container-test-run-certificates> * start date: Oct 15 15:10:22 2026 GMT container-test-run-certificates> * expire date: Jan 13 15:11:22 2027 GMT container-test-run-certificates> * issuer: CN=Clan Intermediate CA container-test-run-certificates> * Certificate level 0: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 1: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * Certificate level 2: Public key type EC/prime256v1 (256/128 Bits/secBits), signed using ecdsa-with-SHA256 container-test-run-certificates> * subjectAltName: "test.foo" matches cert's "test.foo" container-test-run-certificates> * OpenSSL verify result: 0 container-test-run-certificates> * SSL certificate verified via OpenSSL. container-test-run-certificates> * Established connection to test.foo (2001:db8:1::3 port 443) from 2001:db8:1::2 port 47336 container-test-run-certificates> % Total % Received % Xferd Average Speed Time Time Time Current container-test-run-certificates> Dload Upload Total Spent Left Speed container-test-run-certificates> 0 0 0 0 0 0 0 0 0* using HTTP/2 container-test-run-certificates> * [HTTP/2] [1] OPENED stream for https://test.foo/ container-test-run-certificates> * [HTTP/2] [1] [:method: GET] container-test-run-certificates> * [HTTP/2] [1] [:scheme: https] container-test-run-certificates> * [HTTP/2] [1] [:authority: test.foo] container-test-run-certificates> * [HTTP/2] [1] [:path: /] container-test-run-certificates> * [HTTP/2] [1] [user-agent: curl/8.22.0] container-test-run-certificates> * [HTTP/2] [1] [accept: */*] container-test-run-certificates> } [5 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> * Request completely sent off container-test-run-certificates> { [5 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): container-test-run-certificates> { [265 bytes data] container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> container-test-run-certificates> { [5 bytes data] container-test-run-certificates> 100 20 100 20 0 0 630 0 0 container-test-run-certificates> * Connection #0 to host test.foo:443 left intact container-test-run-certificates> client: (finished: waiting for success: curl -v https://test.foo, in 1.07 seconds) container-test-run-certificates> client: must succeed: openssl s_client -connect test.foo:443 -servername test.foo /dev/null | openssl x509 -text -noout 1>&2 container-test-run-certificates> Certificate: container-test-run-certificates> Data: container-test-run-certificates> Version: 3 (0x2) container-test-run-certificates> Serial Number: container-test-run-certificates> c4:11:e5:91:96:ee:9d:c1:c6:53:e6:1e:c5:0b:d5:3c container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Issuer: CN=Clan Intermediate CA container-test-run-certificates> Validity container-test-run-certificates> Not Before: Oct 15 15:10:22 2026 GMT container-test-run-certificates> Not After : Jan 13 15:11:22 2027 GMT container-test-run-certificates> Subject: CN=test.foo container-test-run-certificates> Subject Public Key Info: container-test-run-certificates> Public Key Algorithm: id-ecPublicKey container-test-run-certificates> Public-Key: (256 bit) container-test-run-certificates> pub: container-test-run-certificates> 04:1b:d6:b4:8f:0f:b5:a3:a4:6a:ef:16:07:ff:91: container-test-run-certificates> f0:68:d2:81:ef:bc:d6:e5:4f:15:86:2d:1c:2a:50: container-test-run-certificates> 91:50:77:d9:a5:59:67:ca:16:2c:e9:73:0e:ce:2a: container-test-run-certificates> 98:43:84:30:de:63:a1:b3:70:2f:7e:31:9a:ce:f7: container-test-run-certificates> 4f:55:a9:1a:ae container-test-run-certificates> ASN1 OID: prime256v1 container-test-run-certificates> NIST CURVE: P-256 container-test-run-certificates> X509v3 extensions: container-test-run-certificates> X509v3 Key Usage: critical container-test-run-certificates> Digital Signature container-test-run-certificates> X509v3 Extended Key Usage: container-test-run-certificates> TLS Web Server Authentication, TLS Web Client Authentication container-test-run-certificates> X509v3 Subject Key Identifier: container-test-run-certificates> 30:C1:0C:A7:02:D1:41:D1:CA:AD:F2:4D:D9:F0:3A:F0:27:5E:04:50 container-test-run-certificates> X509v3 Authority Key Identifier: container-test-run-certificates> 73:DD:D5:FC:72:EF:62:BB:EC:65:93:C5:CD:CD:05:55:B9:34:5C:C6 container-test-run-certificates> X509v3 Subject Alternative Name: container-test-run-certificates> DNS:test.foo container-test-run-certificates> 1.3.6.1.4.1.37476.9000.64.1: container-test-run-certificates> 0......acme.. container-test-run-certificates> Signature Algorithm: ecdsa-with-SHA256 container-test-run-certificates> Signature Value: container-test-run-certificates> 30:45:02:20:6c:42:e4:35:fb:15:43:d0:86:eb:3f:91:fc:47: container-test-run-certificates> 1f:57:2d:62:53:82:b9:72:3c:2d:a1:fd:ee:a3:6e:d3:4f:1b: container-test-run-certificates> 02:21:00:c5:2e:d8:e7:8a:3e:0c:23:73:48:0a:44:03:e0:81: container-test-run-certificates> 82:5f:67:35:df:97:41:53:f6:19:62:90:60:4f:b5:5a:1f container-test-run-certificates> client: (finished: must succeed: openssl s_client -connect test.foo:443 -servername test.foo /dev/null | openssl x509 -text -noout 1>&2, in 0.04 seconds) container-test-run-certificates> (finished: run the VM test script, in 27.63 seconds) container-test-run-certificates> test script finished in 28.44s container-test-run-certificates> cleanup container-test-run-certificates> kill NspawnMachine (pid 50) container-test-run-certificates> kill NspawnMachine (pid 467) container-test-run-certificates> Container ca terminated by signal KILL. container-test-run-certificates> kill NspawnMachine (pid 464) container-test-run-certificates> Container client terminated by signal KILL. container-test-run-certificates> Container server terminated by signal KILL. container-test-run-certificates> (finished: cleanup, in 0.64 seconds)