check-vars
checks.aarch64-linux.vars
· build #726
· raw
1+++ export HOME=/build2+++ HOME=/build3+++ export NIX_STATE_DIR=/build/nix4+++ NIX_STATE_DIR=/build/nix5+++ export NIX_CONF_DIR=/build/etc6+++ NIX_CONF_DIR=/build/etc7+++ mkdir -p /build/etc8+++ echo 'fsync-metadata = false'9+++ export IN_NIX_SANDBOX=110+++ IN_NIX_SANDBOX=111+++ export CLAN_TEST_STORE=/build/store12+++ CLAN_TEST_STORE=/build/store13+++ export LOCK_NIX=/build/nix_lock14+++ LOCK_NIX=/build/nix_lock15+++ export CLAN_TEST_FLAKE_CACHE=/build/clan-flake-cache16+++ CLAN_TEST_FLAKE_CACHE=/build/clan-flake-cache17+++ mkdir -p /build/store/nix/store /build/clan-flake-cache18+++ mkdir -p /build/store/nix/var/nix/gcroots19+++ [[ -n /nix/store/bmznsqsg9dp96s2a5ssk4zmwk5r9ljrr-closure-info ]]20++++ nproc21+++ /nix/store/xqx65i7cwacw7rsnj3dlbqas27mwvpn2-findutils-4.11.0/bin/xargs -r -P80 /nix/store/p7xdvcvl4aw7m229qzlq601aq0w0nb9n-coreutils-9.11/bin/cp --recursive --no-dereference --reflink=auto --target-directory /build/store/nix/store22+++ /nix/store/lz2w1as1p0c2lajnvy2iif1i3vqh189a-nix-2.34.8/bin/nix-store --load-db --store /build/store23+++ mkdir -p self24+++ cp -r --no-target-directory /nix/store/zdjw66n65p1161cji6igjbwwjcrdlk7q-source self25+++ clan vars check --flake ./self --debug26Debug log activated27Prefetching flake ./self28warning: you don't have Internet access; disabling some network-dependent features29Cache miss for clanInternals.inventoryClass.inventorySerialization.{instances,machines,meta}30nix \31 --extra-experimental-features 'nix-command flakes' \32 --option warn-dirty \33 false \34 config \35 show \36 --json --store \37 /build/store 38Caller: /nix/store/wk8wibm92hxx88ak0r7n7sdnww6ywnvd-clan-cli/lib/python3.14/site-packages/clan_lib/nix/__init__.py:91::nix_config3940warning: you don't have Internet access; disabling some network-dependent features41Command exited with return code 0 42Caller: /nix/store/wk8wibm92hxx88ak0r7n7sdnww6ywnvd-clan-cli/lib/python3.14/site-packages/clan_lib/nix/__init__.py:91::nix_config4344Precaching selectors:45 - (not cached) clanInternals.?secrets.?age.?plugins46 - (not cached) clanInternals.inventoryClass.relativeDirectory47 - (not cached) clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash}48 - (not cached) clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor}49 - (not cached) clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.?sops.?defaultGroups50 - (not cached) clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.vars.settings.publicModule51 - (not cached) clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.vars.settings.secretModule52 - (not cached) clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.vars.?sops.?secretUploadDirectory53 - (not cached) clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.vars.?password-store.?passCommand54 - (not cached) clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.vars.?password-store.?secretLocation55 - (not cached) clanInternals.vars.settings.?recipients56 - (not cached) clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.vars.?age.?secretLocation57Loading flake cache from file /build/clan-flake-cache/flakes-v2/17d1e55d64ad7ec14ae2aae1f3a00b0be2fd8e2a58(cached) $ clan select 'clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash}'59(cached) $ clan select 'clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor}'60(cached) $ clan select 'clanInternals.machines.aarch64-linux."build-x86-01".config.clan.core.vars.settings.publicModule'61(cached) $ clan select clanInternals.inventoryClass.relativeDirectory62(cached) $ clan select 'clanInternals.machines.aarch64-linux."build-x86-01".config.clan.core.vars.settings.secretModule'63(cached) $ clan select clanInternals.inventoryClass.relativeDirectory64(cached) $ clan select 'clanInternals.machines.aarch64-linux."build-x86-01".config.clan.core.vars.settings.secretModule'65(cached) $ clan select clanInternals.inventoryClass.relativeDirectory66(cached) $ clan select 'clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.?sops.?defaultGroups'67(cached) $ clan select 'clanInternals.machines.aarch64-linux."build-x86-01".config.clan.core.vars.settings.publicModule'68(cached) $ clan select clanInternals.inventoryClass.relativeDirectory69(cached) $ clan select 'clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.?sops.?defaultGroups'70Ignoring broken symlink /build/self/vars/shared/loki-auth/htpasswd/machines/jitsi0171(cached) $ clan select 'clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.?sops.?defaultGroups'72[build-x86-01] Secret var 'htpasswd' for service 'loki-auth' in machine build-x86-01 needs update: One or more recipient keys were added to secret shared var 'loki-auth/htpasswd', but it was never re-encrypted.73This could have been a malicious actor trying to add their keys, please investigate.74Added keys:7576If this is intended, run 'clan vars fix build-x86-01' to re-encrypt the secret.77Ignoring broken symlink /build/self/vars/shared/loki-auth/password/machines/jitsi0178(cached) $ clan select 'clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.?sops.?defaultGroups'79[build-x86-01] Secret var 'password' for service 'loki-auth' in machine build-x86-01 needs update: One or more recipient keys were added to secret shared var 'loki-auth/password', but it was never re-encrypted.80This could have been a malicious actor trying to add their keys, please investigate.81Added keys:8283If this is intended, run 'clan vars fix build-x86-01' to re-encrypt the secret.84Ignoring broken symlink /build/self/vars/shared/mimir-auth/htpasswd/machines/jitsi0185(cached) $ clan select 'clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.?sops.?defaultGroups'86[build-x86-01] Secret var 'htpasswd' for service 'mimir-auth' in machine build-x86-01 needs update: One or more recipient keys were added to secret shared var 'mimir-auth/htpasswd', but it was never re-encrypted.87This could have been a malicious actor trying to add their keys, please investigate.88Added keys:8990If this is intended, run 'clan vars fix build-x86-01' to re-encrypt the secret.91Ignoring broken symlink /build/self/vars/shared/mimir-auth/password/machines/jitsi0192(cached) $ clan select 'clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.?sops.?defaultGroups'93[build-x86-01] Secret var 'password' for service 'mimir-auth' in machine build-x86-01 needs update: One or more recipient keys were added to secret shared var 'mimir-auth/password', but it was never re-encrypted.94This could have been a malicious actor trying to add their keys, please investigate.95Added keys:9697If this is intended, run 'clan vars fix build-x86-01' to re-encrypt the secret.98(cached) $ clan select 'clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.?sops.?defaultGroups'99(cached) $ clan select 'clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.?sops.?defaultGroups'100(cached) $ clan select 'clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.?sops.?defaultGroups'101(cached) $ clan select 'clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.?sops.?defaultGroups'102(cached) $ clan select 'clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.?sops.?defaultGroups'103(cached) $ clan select 'clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.?sops.?defaultGroups'104Check results for machine 'build-x86-01': 105Unfixed secret vars:106 - loki-auth/htpasswd107 - loki-auth/password108 - mimir-auth/htpasswd109 - mimir-auth/password110111Precaching selectors:112 - (cached) clanInternals.?secrets.?age.?plugins113 - (cached) clanInternals.inventoryClass.relativeDirectory114 - (not cached) clanInternals.machines.aarch64-linux.{build01}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash}115 - (not cached) clanInternals.machines.aarch64-linux.{build01}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor}116 - (not cached) clanInternals.machines.aarch64-linux.{build01}.config.clan.core.?sops.?defaultGroups117 - (not cached) clanInternals.machines.aarch64-linux.{build01}.config.clan.core.vars.settings.publicModule118 - (not cached) clanInternals.machines.aarch64-linux.{build01}.config.clan.core.vars.settings.secretModule119 - (not cached) clanInternals.machines.aarch64-linux.{build01}.config.clan.core.vars.?sops.?secretUploadDirectory120 - (not cached) clanInternals.machines.aarch64-linux.{build01}.config.clan.core.vars.?password-store.?passCommand121 - (not cached) clanInternals.machines.aarch64-linux.{build01}.config.clan.core.vars.?password-store.?secretLocation122 - (cached) clanInternals.vars.settings.?recipients123 - (not cached) clanInternals.machines.aarch64-linux.{build01}.config.clan.core.vars.?age.?secretLocation124Loading flake cache from file /build/clan-flake-cache/flakes-v2/17d1e55d64ad7ec14ae2aae1f3a00b0be2fd8e2a125(cached) $ clan select 'clanInternals.machines.aarch64-linux.{build01}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash}'126(cached) $ clan select 'clanInternals.machines.aarch64-linux.{build01}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor}'127(cached) $ clan select 'clanInternals.machines.aarch64-linux."build01".config.clan.core.vars.settings.publicModule'128(cached) $ clan select clanInternals.inventoryClass.relativeDirectory129(cached) $ clan select 'clanInternals.machines.aarch64-linux."build01".config.clan.core.vars.settings.secretModule'130(cached) $ clan select clanInternals.inventoryClass.relativeDirectory131(cached) $ clan select 'clanInternals.machines.aarch64-linux."build01".config.clan.core.vars.settings.secretModule'132(cached) $ clan select clanInternals.inventoryClass.relativeDirectory133(cached) $ clan select 'clanInternals.machines.aarch64-linux.{build01}.config.clan.core.?sops.?defaultGroups'134(cached) $ clan select 'clanInternals.machines.aarch64-linux."build01".config.clan.core.vars.settings.publicModule'135(cached) $ clan select clanInternals.inventoryClass.relativeDirectory136(cached) $ clan select 'clanInternals.machines.aarch64-linux.{build01}.config.clan.core.?sops.?defaultGroups'137Ignoring broken symlink /build/self/vars/shared/loki-auth/htpasswd/machines/jitsi01138(cached) $ clan select 'clanInternals.machines.aarch64-linux.{build01}.config.clan.core.?sops.?defaultGroups'139[build01] Secret var 'htpasswd' for service 'loki-auth' in machine build01 needs update: One or more recipient keys were added to secret shared var 'loki-auth/htpasswd', but it was never re-encrypted.140This could have been a malicious actor trying to add their keys, please investigate.141Added keys:142143If this is intended, run 'clan vars fix build01' to re-encrypt the secret.144Ignoring broken symlink /build/self/vars/shared/loki-auth/password/machines/jitsi01145(cached) $ clan select 'clanInternals.machines.aarch64-linux.{build01}.config.clan.core.?sops.?defaultGroups'146[build01] Secret var 'password' for service 'loki-auth' in machine build01 needs update: One or more recipient keys were added to secret shared var 'loki-auth/password', but it was never re-encrypted.147This could have been a malicious actor trying to add their keys, please investigate.148Added keys:149150If this is intended, run 'clan vars fix build01' to re-encrypt the secret.151(cached) $ clan select 'clanInternals.machines.aarch64-linux.{build01}.config.clan.core.?sops.?defaultGroups'152Ignoring broken symlink /build/self/vars/shared/mimir-auth/htpasswd/machines/jitsi01153(cached) $ clan select 'clanInternals.machines.aarch64-linux.{build01}.config.clan.core.?sops.?defaultGroups'154[build01] Secret var 'htpasswd' for service 'mimir-auth' in machine build01 needs update: One or more recipient keys were added to secret shared var 'mimir-auth/htpasswd', but it was never re-encrypted.155This could have been a malicious actor trying to add their keys, please investigate.156Added keys:157158If this is intended, run 'clan vars fix build01' to re-encrypt the secret.159Ignoring broken symlink /build/self/vars/shared/mimir-auth/password/machines/jitsi01160(cached) $ clan select 'clanInternals.machines.aarch64-linux.{build01}.config.clan.core.?sops.?defaultGroups'161[build01] Secret var 'password' for service 'mimir-auth' in machine build01 needs update: One or more recipient keys were added to secret shared var 'mimir-auth/password', but it was never re-encrypted.162This could have been a malicious actor trying to add their keys, please investigate.163Added keys:164165If this is intended, run 'clan vars fix build01' to re-encrypt the secret.166(cached) $ clan select 'clanInternals.machines.aarch64-linux.{build01}.config.clan.core.?sops.?defaultGroups'167(cached) $ clan select 'clanInternals.machines.aarch64-linux.{build01}.config.clan.core.?sops.?defaultGroups'168(cached) $ clan select 'clanInternals.machines.aarch64-linux.{build01}.config.clan.core.?sops.?defaultGroups'169(cached) $ clan select 'clanInternals.machines.aarch64-linux.{build01}.config.clan.core.?sops.?defaultGroups'170(cached) $ clan select 'clanInternals.machines.aarch64-linux.{build01}.config.clan.core.?sops.?defaultGroups'171(cached) $ clan select 'clanInternals.machines.aarch64-linux.{build01}.config.clan.core.?sops.?defaultGroups'172Check results for machine 'build01': 173Unfixed secret vars:174 - loki-auth/htpasswd175 - loki-auth/password176 - mimir-auth/htpasswd177 - mimir-auth/password178179Precaching selectors:180 - (cached) clanInternals.?secrets.?age.?plugins181 - (cached) clanInternals.inventoryClass.relativeDirectory182 - (not cached) clanInternals.machines.aarch64-linux.{build02}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash}183 - (not cached) clanInternals.machines.aarch64-linux.{build02}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor}184 - (not cached) clanInternals.machines.aarch64-linux.{build02}.config.clan.core.?sops.?defaultGroups185 - (not cached) clanInternals.machines.aarch64-linux.{build02}.config.clan.core.vars.settings.publicModule186 - (not cached) clanInternals.machines.aarch64-linux.{build02}.config.clan.core.vars.settings.secretModule187 - (not cached) clanInternals.machines.aarch64-linux.{build02}.config.clan.core.vars.?sops.?secretUploadDirectory188 - (not cached) clanInternals.machines.aarch64-linux.{build02}.config.clan.core.vars.?password-store.?passCommand189 - (not cached) clanInternals.machines.aarch64-linux.{build02}.config.clan.core.vars.?password-store.?secretLocation190 - (cached) clanInternals.vars.settings.?recipients191 - (not cached) clanInternals.machines.aarch64-linux.{build02}.config.clan.core.vars.?age.?secretLocation192Loading flake cache from file /build/clan-flake-cache/flakes-v2/17d1e55d64ad7ec14ae2aae1f3a00b0be2fd8e2a193(cached) $ clan select 'clanInternals.machines.aarch64-linux.{build02}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash}'194(cached) $ clan select 'clanInternals.machines.aarch64-linux.{build02}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor}'195(cached) $ clan select 'clanInternals.machines.aarch64-linux."build02".config.clan.core.vars.settings.publicModule'196(cached) $ clan select clanInternals.inventoryClass.relativeDirectory197(cached) $ clan select 'clanInternals.machines.aarch64-linux."build02".config.clan.core.vars.settings.secretModule'198(cached) $ clan select clanInternals.inventoryClass.relativeDirectory199(cached) $ clan select 'clanInternals.machines.aarch64-linux."build02".config.clan.core.vars.settings.secretModule'200(cached) $ clan select clanInternals.inventoryClass.relativeDirectory201(cached) $ clan select 'clanInternals.machines.aarch64-linux.{build02}.config.clan.core.?sops.?defaultGroups'202(cached) $ clan select 'clanInternals.machines.aarch64-linux."build02".config.clan.core.vars.settings.publicModule'203(cached) $ clan select clanInternals.inventoryClass.relativeDirectory204(cached) $ clan select 'clanInternals.machines.aarch64-linux.{build02}.config.clan.core.?sops.?defaultGroups'205(cached) $ clan select 'clanInternals.machines.aarch64-linux.{build02}.config.clan.core.?sops.?defaultGroups'206Check results for machine 'build02': 207All vars are present and valid.208Precaching selectors:209 - (cached) clanInternals.?secrets.?age.?plugins210 - (cached) clanInternals.inventoryClass.relativeDirectory211 - (not cached) clanInternals.machines.aarch64-linux.{build04}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash}212 - (not cached) clanInternals.machines.aarch64-linux.{build04}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor}213 - (not cached) clanInternals.machines.aarch64-linux.{build04}.config.clan.core.?sops.?defaultGroups214 - (not cached) clanInternals.machines.aarch64-linux.{build04}.config.clan.core.vars.settings.publicModule215 - (not cached) clanInternals.machines.aarch64-linux.{build04}.config.clan.core.vars.settings.secretModule216 - (not cached) clanInternals.machines.aarch64-linux.{build04}.config.clan.core.vars.?sops.?secretUploadDirectory217 - (not cached) clanInternals.machines.aarch64-linux.{build04}.config.clan.core.vars.?password-store.?passCommand218 - (not cached) clanInternals.machines.aarch64-linux.{build04}.config.clan.core.vars.?password-store.?secretLocation219 - (cached) clanInternals.vars.settings.?recipients220 - (not cached) clanInternals.machines.aarch64-linux.{build04}.config.clan.core.vars.?age.?secretLocation221Loading flake cache from file /build/clan-flake-cache/flakes-v2/17d1e55d64ad7ec14ae2aae1f3a00b0be2fd8e2a222(cached) $ clan select 'clanInternals.machines.aarch64-linux.{build04}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash}'223(cached) $ clan select 'clanInternals.machines.aarch64-linux.{build04}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor}'224(cached) $ clan select 'clanInternals.machines.aarch64-linux."build04".config.clan.core.vars.settings.publicModule'225(cached) $ clan select clanInternals.inventoryClass.relativeDirectory226(cached) $ clan select 'clanInternals.machines.aarch64-linux."build04".config.clan.core.vars.settings.secretModule'227(cached) $ clan select clanInternals.inventoryClass.relativeDirectory228(cached) $ clan select 'clanInternals.machines.aarch64-linux."build04".config.clan.core.vars.settings.secretModule'229(cached) $ clan select clanInternals.inventoryClass.relativeDirectory230(cached) $ clan select 'clanInternals.machines.aarch64-linux.{build04}.config.clan.core.?sops.?defaultGroups'231(cached) $ clan select 'clanInternals.machines.aarch64-linux."build04".config.clan.core.vars.settings.publicModule'232(cached) $ clan select clanInternals.inventoryClass.relativeDirectory233(cached) $ clan select 'clanInternals.machines.aarch64-linux.{build04}.config.clan.core.?sops.?defaultGroups'234(cached) $ clan select 'clanInternals.machines.aarch64-linux.{build04}.config.clan.core.?sops.?defaultGroups'235Check results for machine 'build04': 236All vars are present and valid.237Precaching selectors:238 - (cached) clanInternals.?secrets.?age.?plugins239 - (cached) clanInternals.inventoryClass.relativeDirectory240 - (not cached) clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash}241 - (not cached) clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor}242 - (not cached) clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups243 - (not cached) clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.vars.settings.publicModule244 - (not cached) clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.vars.settings.secretModule245 - (not cached) clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.vars.?sops.?secretUploadDirectory246 - (not cached) clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.vars.?password-store.?passCommand247 - (not cached) clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.vars.?password-store.?secretLocation248 - (cached) clanInternals.vars.settings.?recipients249 - (not cached) clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.vars.?age.?secretLocation250Loading flake cache from file /build/clan-flake-cache/flakes-v2/17d1e55d64ad7ec14ae2aae1f3a00b0be2fd8e2a251(cached) $ clan select 'clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash}'252(cached) $ clan select 'clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor}'253(cached) $ clan select 'clanInternals.machines.aarch64-linux."monitoring01".config.clan.core.vars.settings.publicModule'254(cached) $ clan select clanInternals.inventoryClass.relativeDirectory255(cached) $ clan select 'clanInternals.machines.aarch64-linux."monitoring01".config.clan.core.vars.settings.secretModule'256(cached) $ clan select clanInternals.inventoryClass.relativeDirectory257(cached) $ clan select 'clanInternals.machines.aarch64-linux."monitoring01".config.clan.core.vars.settings.secretModule'258(cached) $ clan select clanInternals.inventoryClass.relativeDirectory259(cached) $ clan select 'clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups'260(cached) $ clan select 'clanInternals.machines.aarch64-linux."monitoring01".config.clan.core.vars.settings.publicModule'261(cached) $ clan select clanInternals.inventoryClass.relativeDirectory262(cached) $ clan select 'clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups'263(cached) $ clan select 'clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups'264(cached) $ clan select 'clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups'265(cached) $ clan select 'clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups'266Ignoring broken symlink /build/self/vars/shared/loki-auth/htpasswd/machines/jitsi01267(cached) $ clan select 'clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups'268[monitoring01] Secret var 'htpasswd' for service 'loki-auth' in machine monitoring01 needs update: One or more recipient keys were added to secret shared var 'loki-auth/htpasswd', but it was never re-encrypted.269This could have been a malicious actor trying to add their keys, please investigate.270Added keys:271272If this is intended, run 'clan vars fix monitoring01' to re-encrypt the secret.273Ignoring broken symlink /build/self/vars/shared/loki-auth/password/machines/jitsi01274(cached) $ clan select 'clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups'275[monitoring01] Secret var 'password' for service 'loki-auth' in machine monitoring01 needs update: One or more recipient keys were added to secret shared var 'loki-auth/password', but it was never re-encrypted.276This could have been a malicious actor trying to add their keys, please investigate.277Added keys:278279If this is intended, run 'clan vars fix monitoring01' to re-encrypt the secret.280Ignoring broken symlink /build/self/vars/shared/mimir-auth/htpasswd/machines/jitsi01281(cached) $ clan select 'clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups'282[monitoring01] Secret var 'htpasswd' for service 'mimir-auth' in machine monitoring01 needs update: One or more recipient keys were added to secret shared var 'mimir-auth/htpasswd', but it was never re-encrypted.283This could have been a malicious actor trying to add their keys, please investigate.284Added keys:285286If this is intended, run 'clan vars fix monitoring01' to re-encrypt the secret.287Ignoring broken symlink /build/self/vars/shared/mimir-auth/password/machines/jitsi01288(cached) $ clan select 'clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups'289[monitoring01] Secret var 'password' for service 'mimir-auth' in machine monitoring01 needs update: One or more recipient keys were added to secret shared var 'mimir-auth/password', but it was never re-encrypted.290This could have been a malicious actor trying to add their keys, please investigate.291Added keys:292293If this is intended, run 'clan vars fix monitoring01' to re-encrypt the secret.294(cached) $ clan select 'clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups'295(cached) $ clan select 'clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups'296(cached) $ clan select 'clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups'297(cached) $ clan select 'clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups'298(cached) $ clan select 'clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups'299(cached) $ clan select 'clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups'300(cached) $ clan select 'clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups'301Check results for machine 'monitoring01': 302Unfixed secret vars:303 - loki-auth/htpasswd304 - loki-auth/password305 - mimir-auth/htpasswd306 - mimir-auth/password307308Precaching selectors:309 - (cached) clanInternals.?secrets.?age.?plugins310 - (cached) clanInternals.inventoryClass.relativeDirectory311 - (not cached) clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash}312 - (not cached) clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor}313 - (not cached) clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups314 - (not cached) clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.vars.settings.publicModule315 - (not cached) clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.vars.settings.secretModule316 - (not cached) clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.vars.?sops.?secretUploadDirectory317 - (not cached) clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.vars.?password-store.?passCommand318 - (not cached) clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.vars.?password-store.?secretLocation319 - (cached) clanInternals.vars.settings.?recipients320 - (not cached) clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.vars.?age.?secretLocation321Loading flake cache from file /build/clan-flake-cache/flakes-v2/17d1e55d64ad7ec14ae2aae1f3a00b0be2fd8e2a322(cached) $ clan select 'clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash}'323(cached) $ clan select 'clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor}'324(cached) $ clan select 'clanInternals.machines.aarch64-linux."storinator01".config.clan.core.vars.settings.publicModule'325(cached) $ clan select clanInternals.inventoryClass.relativeDirectory326(cached) $ clan select 'clanInternals.machines.aarch64-linux."storinator01".config.clan.core.vars.settings.secretModule'327(cached) $ clan select clanInternals.inventoryClass.relativeDirectory328(cached) $ clan select 'clanInternals.machines.aarch64-linux."storinator01".config.clan.core.vars.settings.secretModule'329(cached) $ clan select clanInternals.inventoryClass.relativeDirectory330(cached) $ clan select 'clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups'331(cached) $ clan select 'clanInternals.machines.aarch64-linux."storinator01".config.clan.core.vars.settings.publicModule'332(cached) $ clan select clanInternals.inventoryClass.relativeDirectory333(cached) $ clan select 'clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups'334(cached) $ clan select 'clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups'335(cached) $ clan select 'clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups'336(cached) $ clan select 'clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups'337(cached) $ clan select 'clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups'338Ignoring broken symlink /build/self/vars/shared/loki-auth/htpasswd/machines/jitsi01339(cached) $ clan select 'clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups'340[storinator01] Secret var 'htpasswd' for service 'loki-auth' in machine storinator01 needs update: One or more recipient keys were added to secret shared var 'loki-auth/htpasswd', but it was never re-encrypted.341This could have been a malicious actor trying to add their keys, please investigate.342Added keys:343344If this is intended, run 'clan vars fix storinator01' to re-encrypt the secret.345Ignoring broken symlink /build/self/vars/shared/loki-auth/password/machines/jitsi01346(cached) $ clan select 'clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups'347[storinator01] Secret var 'password' for service 'loki-auth' in machine storinator01 needs update: One or more recipient keys were added to secret shared var 'loki-auth/password', but it was never re-encrypted.348This could have been a malicious actor trying to add their keys, please investigate.349Added keys:350351If this is intended, run 'clan vars fix storinator01' to re-encrypt the secret.352Ignoring broken symlink /build/self/vars/shared/mimir-auth/htpasswd/machines/jitsi01353(cached) $ clan select 'clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups'354[storinator01] Secret var 'htpasswd' for service 'mimir-auth' in machine storinator01 needs update: One or more recipient keys were added to secret shared var 'mimir-auth/htpasswd', but it was never re-encrypted.355This could have been a malicious actor trying to add their keys, please investigate.356Added keys:357358If this is intended, run 'clan vars fix storinator01' to re-encrypt the secret.359Ignoring broken symlink /build/self/vars/shared/mimir-auth/password/machines/jitsi01360(cached) $ clan select 'clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups'361[storinator01] Secret var 'password' for service 'mimir-auth' in machine storinator01 needs update: One or more recipient keys were added to secret shared var 'mimir-auth/password', but it was never re-encrypted.362This could have been a malicious actor trying to add their keys, please investigate.363Added keys:364365If this is intended, run 'clan vars fix storinator01' to re-encrypt the secret.366(cached) $ clan select 'clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups'367(cached) $ clan select 'clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups'368(cached) $ clan select 'clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups'369(cached) $ clan select 'clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups'370(cached) $ clan select 'clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups'371(cached) $ clan select 'clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups'372Check results for machine 'storinator01': 373Unfixed secret vars:374 - loki-auth/htpasswd375 - loki-auth/password376 - mimir-auth/htpasswd377 - mimir-auth/password378379Precaching selectors:380 - (cached) clanInternals.?secrets.?age.?plugins381 - (cached) clanInternals.inventoryClass.relativeDirectory382 - (not cached) clanInternals.machines.aarch64-linux.{web01}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash}383 - (not cached) clanInternals.machines.aarch64-linux.{web01}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor}384 - (not cached) clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups385 - (not cached) clanInternals.machines.aarch64-linux.{web01}.config.clan.core.vars.settings.publicModule386 - (not cached) clanInternals.machines.aarch64-linux.{web01}.config.clan.core.vars.settings.secretModule387 - (not cached) clanInternals.machines.aarch64-linux.{web01}.config.clan.core.vars.?sops.?secretUploadDirectory388 - (not cached) clanInternals.machines.aarch64-linux.{web01}.config.clan.core.vars.?password-store.?passCommand389 - (not cached) clanInternals.machines.aarch64-linux.{web01}.config.clan.core.vars.?password-store.?secretLocation390 - (cached) clanInternals.vars.settings.?recipients391 - (not cached) clanInternals.machines.aarch64-linux.{web01}.config.clan.core.vars.?age.?secretLocation392Loading flake cache from file /build/clan-flake-cache/flakes-v2/17d1e55d64ad7ec14ae2aae1f3a00b0be2fd8e2a393(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash}'394(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor}'395(cached) $ clan select 'clanInternals.machines.aarch64-linux."web01".config.clan.core.vars.settings.publicModule'396(cached) $ clan select clanInternals.inventoryClass.relativeDirectory397(cached) $ clan select 'clanInternals.machines.aarch64-linux."web01".config.clan.core.vars.settings.secretModule'398(cached) $ clan select clanInternals.inventoryClass.relativeDirectory399(cached) $ clan select 'clanInternals.machines.aarch64-linux."web01".config.clan.core.vars.settings.secretModule'400(cached) $ clan select clanInternals.inventoryClass.relativeDirectory401(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'402(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'403(cached) $ clan select 'clanInternals.machines.aarch64-linux."web01".config.clan.core.vars.settings.publicModule'404(cached) $ clan select clanInternals.inventoryClass.relativeDirectory405(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'406(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'407(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'408(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'409(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'410(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'411(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'412(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'413(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'414(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'415(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'416(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'417(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'418(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'419(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'420(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'421(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'422(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'423Ignoring broken symlink /build/self/vars/shared/loki-auth/htpasswd/machines/jitsi01424(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'425[web01] Secret var 'htpasswd' for service 'loki-auth' in machine web01 needs update: One or more recipient keys were added to secret shared var 'loki-auth/htpasswd', but it was never re-encrypted.426This could have been a malicious actor trying to add their keys, please investigate.427Added keys:428429If this is intended, run 'clan vars fix web01' to re-encrypt the secret.430Ignoring broken symlink /build/self/vars/shared/loki-auth/password/machines/jitsi01431(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'432[web01] Secret var 'password' for service 'loki-auth' in machine web01 needs update: One or more recipient keys were added to secret shared var 'loki-auth/password', but it was never re-encrypted.433This could have been a malicious actor trying to add their keys, please investigate.434Added keys:435436If this is intended, run 'clan vars fix web01' to re-encrypt the secret.437(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'438(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'439(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'440(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'441(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'442(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'443(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'444(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'445Ignoring broken symlink /build/self/vars/shared/mimir-auth/htpasswd/machines/jitsi01446(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'447[web01] Secret var 'htpasswd' for service 'mimir-auth' in machine web01 needs update: One or more recipient keys were added to secret shared var 'mimir-auth/htpasswd', but it was never re-encrypted.448This could have been a malicious actor trying to add their keys, please investigate.449Added keys:450451If this is intended, run 'clan vars fix web01' to re-encrypt the secret.452Ignoring broken symlink /build/self/vars/shared/mimir-auth/password/machines/jitsi01453(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'454[web01] Secret var 'password' for service 'mimir-auth' in machine web01 needs update: One or more recipient keys were added to secret shared var 'mimir-auth/password', but it was never re-encrypted.455This could have been a malicious actor trying to add their keys, please investigate.456Added keys:457458If this is intended, run 'clan vars fix web01' to re-encrypt the secret.459(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'460(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'461(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'462(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'463(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'464(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'465(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'466(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'467(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'468(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'469(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'470(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'471(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'472(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'473(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'474(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'475(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'476(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'477(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'478(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'479(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'480(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'481(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'482(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'483(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'484(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'485(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'486(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'487(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups'488Check results for machine 'web01': 489Unfixed secret vars:490 - loki-auth/htpasswd491 - loki-auth/password492 - mimir-auth/htpasswd493 - mimir-auth/password494495Precaching selectors:496 - (cached) clanInternals.?secrets.?age.?plugins497 - (cached) clanInternals.inventoryClass.relativeDirectory498 - (not cached) clanInternals.machines.aarch64-linux.{web02}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash}499 - (not cached) clanInternals.machines.aarch64-linux.{web02}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor}500 - (not cached) clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups501 - (not cached) clanInternals.machines.aarch64-linux.{web02}.config.clan.core.vars.settings.publicModule502 - (not cached) clanInternals.machines.aarch64-linux.{web02}.config.clan.core.vars.settings.secretModule503 - (not cached) clanInternals.machines.aarch64-linux.{web02}.config.clan.core.vars.?sops.?secretUploadDirectory504 - (not cached) clanInternals.machines.aarch64-linux.{web02}.config.clan.core.vars.?password-store.?passCommand505 - (not cached) clanInternals.machines.aarch64-linux.{web02}.config.clan.core.vars.?password-store.?secretLocation506 - (cached) clanInternals.vars.settings.?recipients507 - (not cached) clanInternals.machines.aarch64-linux.{web02}.config.clan.core.vars.?age.?secretLocation508Loading flake cache from file /build/clan-flake-cache/flakes-v2/17d1e55d64ad7ec14ae2aae1f3a00b0be2fd8e2a509(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash}'510(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor}'511(cached) $ clan select 'clanInternals.machines.aarch64-linux."web02".config.clan.core.vars.settings.publicModule'512(cached) $ clan select clanInternals.inventoryClass.relativeDirectory513(cached) $ clan select 'clanInternals.machines.aarch64-linux."web02".config.clan.core.vars.settings.secretModule'514(cached) $ clan select clanInternals.inventoryClass.relativeDirectory515(cached) $ clan select 'clanInternals.machines.aarch64-linux."web02".config.clan.core.vars.settings.secretModule'516(cached) $ clan select clanInternals.inventoryClass.relativeDirectory517(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups'518(cached) $ clan select 'clanInternals.machines.aarch64-linux."web02".config.clan.core.vars.settings.publicModule'519(cached) $ clan select clanInternals.inventoryClass.relativeDirectory520(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups'521(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups'522(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups'523Ignoring broken symlink /build/self/vars/shared/loki-auth/htpasswd/machines/jitsi01524(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups'525[web02] Secret var 'htpasswd' for service 'loki-auth' in machine web02 needs update: One or more recipient keys were added to secret shared var 'loki-auth/htpasswd', but it was never re-encrypted.526This could have been a malicious actor trying to add their keys, please investigate.527Added keys:528529If this is intended, run 'clan vars fix web02' to re-encrypt the secret.530Ignoring broken symlink /build/self/vars/shared/loki-auth/password/machines/jitsi01531(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups'532[web02] Secret var 'password' for service 'loki-auth' in machine web02 needs update: One or more recipient keys were added to secret shared var 'loki-auth/password', but it was never re-encrypted.533This could have been a malicious actor trying to add their keys, please investigate.534Added keys:535536If this is intended, run 'clan vars fix web02' to re-encrypt the secret.537(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups'538(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups'539(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups'540(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups'541Ignoring broken symlink /build/self/vars/shared/mimir-auth/htpasswd/machines/jitsi01542(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups'543[web02] Secret var 'htpasswd' for service 'mimir-auth' in machine web02 needs update: One or more recipient keys were added to secret shared var 'mimir-auth/htpasswd', but it was never re-encrypted.544This could have been a malicious actor trying to add their keys, please investigate.545Added keys:546547If this is intended, run 'clan vars fix web02' to re-encrypt the secret.548Ignoring broken symlink /build/self/vars/shared/mimir-auth/password/machines/jitsi01549(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups'550[web02] Secret var 'password' for service 'mimir-auth' in machine web02 needs update: One or more recipient keys were added to secret shared var 'mimir-auth/password', but it was never re-encrypted.551This could have been a malicious actor trying to add their keys, please investigate.552Added keys:553554If this is intended, run 'clan vars fix web02' to re-encrypt the secret.555(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups'556(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups'557(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups'558(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups'559(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups'560(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups'561(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups'562(cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups'563Check results for machine 'web02': 564Unfixed secret vars:565 - loki-auth/htpasswd566 - loki-auth/password567 - mimir-auth/htpasswd568 - mimir-auth/password569570+ exitHandler571+ exitCode=1572+ set +e573+ '[' -n '' ']'574+ (( 1 != 0 ))575+ runHook failureHook576+ local hookName=failureHook577+ shift578+ local 'hooksSlice=failureHooks[@]'579+ local hook580+ for hook in "_callImplicitHook 0 $hookName" ${!hooksSlice+"${!hooksSlice}"}581+ _logHook failureHook '_callImplicitHook 0 failureHook'582+ [[ -z 2 ]]583+ local hookKind=failureHook584+ local 'hookExpr=_callImplicitHook 0 failureHook'585+ shift 2586+ declare -F '_callImplicitHook 0 failureHook'587+ type -p '_callImplicitHook 0 failureHook'588+ [[ _callImplicitHook 0 failureHook != _callImplicitHook* ]]589+ _eval '_callImplicitHook 0 failureHook'590+ declare -F '_callImplicitHook 0 failureHook'591+ eval '_callImplicitHook 0 failureHook'592++ _callImplicitHook 0 failureHook593++ local def=0594++ local hookName=failureHook595++ declare -F failureHook596++ type -p failureHook597++ '[' -n '' ']'598++ return 0599+ return 0600+ '[' -n '' ']'601+ return 1