these 2 derivations will be built:
  /nix/store/gh7dyjpf5cr8gwy696jja6b9ilswjqrg-closure-info.drv
  /nix/store/6n2xb5x5skxvf5aynbyq0sh6m918lq0p-check-secrets.drv
building '/nix/store/gh7dyjpf5cr8gwy696jja6b9ilswjqrg-closure-info.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/gh7dyjpf5cr8gwy696jja6b9ilswjqrg-closure-info.drv'
closure-info> structuredAttrs is enabled
building '/nix/store/6n2xb5x5skxvf5aynbyq0sh6m918lq0p-check-secrets.drv' on 'ssh-ng://builder@build01.clan.lol'
building '/nix/store/6n2xb5x5skxvf5aynbyq0sh6m918lq0p-check-secrets.drv'
check-secrets> +++ export HOME=/build
check-secrets> +++ HOME=/build
check-secrets> +++ export NIX_STATE_DIR=/build/nix
check-secrets> +++ NIX_STATE_DIR=/build/nix
check-secrets> +++ export NIX_CONF_DIR=/build/etc
check-secrets> +++ NIX_CONF_DIR=/build/etc
check-secrets> +++ mkdir -p /build/etc
check-secrets> +++ echo 'fsync-metadata = false'
check-secrets> +++ export IN_NIX_SANDBOX=1
check-secrets> +++ IN_NIX_SANDBOX=1
check-secrets> +++ export CLAN_TEST_STORE=/build/store
check-secrets> +++ CLAN_TEST_STORE=/build/store
check-secrets> +++ export LOCK_NIX=/build/nix_lock
check-secrets> +++ LOCK_NIX=/build/nix_lock
check-secrets> +++ export CLAN_TEST_FLAKE_CACHE=/build/clan-flake-cache
check-secrets> +++ CLAN_TEST_FLAKE_CACHE=/build/clan-flake-cache
check-secrets> +++ mkdir -p /build/store/nix/store /build/clan-flake-cache
check-secrets> +++ mkdir -p /build/store/nix/var/nix/gcroots
check-secrets> +++ [[ -n /nix/store/bmznsqsg9dp96s2a5ssk4zmwk5r9ljrr-closure-info ]]
check-secrets> ++++ nproc
check-secrets> +++ /nix/store/xqx65i7cwacw7rsnj3dlbqas27mwvpn2-findutils-4.11.0/bin/xargs -r -P80 /nix/store/p7xdvcvl4aw7m229qzlq601aq0w0nb9n-coreutils-9.11/bin/cp --recursive --no-dereference --reflink=auto --target-directory /build/store/nix/store
check-secrets> +++ /nix/store/lz2w1as1p0c2lajnvy2iif1i3vqh189a-nix-2.34.8/bin/nix-store --load-db --store /build/store
check-secrets> +++ mkdir -p self
check-secrets> +++ cp -r --no-target-directory /nix/store/zdjw66n65p1161cji6igjbwwjcrdlk7q-source self
check-secrets> +++ CLAN_LOAD_AGE_PLUGINS=false
check-secrets> +++ clan secrets key update --flake ./self
check-secrets> warning: you don't have Internet access; disabling some network-dependent features
check-secrets> warning: you don't have Internet access; disabling some network-dependent features
check-secrets> 2026/09/18 08:23:15 Syncing keys for file /build/self/sops/secrets/b2-application-key/secret
check-secrets> 2026/09/18 08:23:15 File /build/self/sops/secrets/b2-application-key/secret already up to date
check-secrets> 2026/09/18 08:23:15 Syncing keys for file /build/self/sops/secrets/b2-geninf-application-key/secret
check-secrets> 2026/09/18 08:23:15 File /build/self/sops/secrets/b2-geninf-application-key/secret already up to date
check-secrets> 2026/09/18 08:23:15 Syncing keys for file /build/self/sops/secrets/b2-geninf-key-id/secret
check-secrets> 2026/09/18 08:23:15 File /build/self/sops/secrets/b2-geninf-key-id/secret already up to date
check-secrets> 2026/09/18 08:23:15 Syncing keys for file /build/self/sops/secrets/b2-key-id/secret
check-secrets> 2026/09/18 08:23:15 File /build/self/sops/secrets/b2-key-id/secret already up to date
check-secrets> 2026/09/18 08:23:15 Syncing keys for file /build/self/sops/secrets/build-x86-01-age.key/secret
check-secrets> 2026/09/18 08:23:15 File /build/self/sops/secrets/build-x86-01-age.key/secret already up to date
check-secrets> 2026/09/18 08:23:15 Syncing keys for file /build/self/sops/secrets/build01-age.key/secret
check-secrets> 2026/09/18 08:23:15 File /build/self/sops/secrets/build01-age.key/secret already up to date
check-secrets> 2026/09/18 08:23:15 Syncing keys for file /build/self/sops/secrets/build02-age.key/secret
check-secrets> 2026/09/18 08:23:15 File /build/self/sops/secrets/build02-age.key/secret already up to date
check-secrets> 2026/09/18 08:23:15 Syncing keys for file /build/self/sops/secrets/build04-age.key/secret
check-secrets> 2026/09/18 08:23:15 File /build/self/sops/secrets/build04-age.key/secret already up to date
check-secrets> 2026/09/18 08:23:15 Syncing keys for file /build/self/sops/secrets/buildbot-oauth-secret-file/secret
check-secrets> 2026/09/18 08:23:15 File /build/self/sops/secrets/buildbot-oauth-secret-file/secret already up to date
check-secrets> 2026/09/18 08:23:15 Syncing keys for file /build/self/sops/secrets/buildbot-token-file/secret
check-secrets> 2026/09/18 08:23:15 File /build/self/sops/secrets/buildbot-token-file/secret already up to date
check-secrets> 2026/09/18 08:23:15 Syncing keys for file /build/self/sops/secrets/buildbot-webhook-secret-file/secret
check-secrets> 2026/09/18 08:23:15 File /build/self/sops/secrets/buildbot-webhook-secret-file/secret already up to date
check-secrets> 2026/09/18 08:23:16 Syncing keys for file /build/self/sops/secrets/buildbot-worker-password-file/secret
check-secrets> 2026/09/18 08:23:16 File /build/self/sops/secrets/buildbot-worker-password-file/secret already up to date
check-secrets> 2026/09/18 08:23:16 Syncing keys for file /build/self/sops/secrets/buildbot-workers-file/secret
check-secrets> 2026/09/18 08:23:16 File /build/self/sops/secrets/buildbot-workers-file/secret already up to date
check-secrets> 2026/09/18 08:23:16 Syncing keys for file /build/self/sops/secrets/clan-bot-gitea-token/secret
check-secrets> 2026/09/18 08:23:16 File /build/self/sops/secrets/clan-bot-gitea-token/secret already up to date
check-secrets> 2026/09/18 08:23:16 Syncing keys for file /build/self/sops/secrets/clan-bot-ssh-key/secret
check-secrets> 2026/09/18 08:23:16 File /build/self/sops/secrets/clan-bot-ssh-key/secret already up to date
check-secrets> 2026/09/18 08:23:16 Syncing keys for file /build/self/sops/secrets/cryptsetup_key/secret
check-secrets> 2026/09/18 08:23:16 File /build/self/sops/secrets/cryptsetup_key/secret already up to date
check-secrets> 2026/09/18 08:23:16 Syncing keys for file /build/self/sops/secrets/fastly-api-key/secret
check-secrets> 2026/09/18 08:23:16 File /build/self/sops/secrets/fastly-api-key/secret already up to date
check-secrets> 2026/09/18 08:23:16 Syncing keys for file /build/self/sops/secrets/gitea-actions-runner/secret
check-secrets> 2026/09/18 08:23:16 File /build/self/sops/secrets/gitea-actions-runner/secret already up to date
check-secrets> 2026/09/18 08:23:16 Syncing keys for file /build/self/sops/secrets/harmonia-public/secret
check-secrets> 2026/09/18 08:23:16 File /build/self/sops/secrets/harmonia-public/secret already up to date
check-secrets> 2026/09/18 08:23:16 Syncing keys for file /build/self/sops/secrets/harmonia-secret/secret
check-secrets> 2026/09/18 08:23:16 File /build/self/sops/secrets/harmonia-secret/secret already up to date
check-secrets> 2026/09/18 08:23:16 Syncing keys for file /build/self/sops/secrets/hcloud-token/secret
check-secrets> 2026/09/18 08:23:16 File /build/self/sops/secrets/hcloud-token/secret already up to date
check-secrets> 2026/09/18 08:23:16 Syncing keys for file /build/self/sops/secrets/hetzner-borgbackup-passphrase/secret
check-secrets> 2026/09/18 08:23:16 File /build/self/sops/secrets/hetzner-borgbackup-passphrase/secret already up to date
check-secrets> 2026/09/18 08:23:16 Syncing keys for file /build/self/sops/secrets/hetzner-borgbackup-ssh/secret
check-secrets> 2026/09/18 08:23:16 File /build/self/sops/secrets/hetzner-borgbackup-ssh/secret already up to date
check-secrets> 2026/09/18 08:23:16 Syncing keys for file /build/self/sops/secrets/hetzner-storagebox-password/secret
check-secrets> 2026/09/18 08:23:16 File /build/self/sops/secrets/hetzner-storagebox-password/secret already up to date
check-secrets> 2026/09/18 08:23:16 Syncing keys for file /build/self/sops/secrets/initrd_ssh_key/secret
check-secrets> 2026/09/18 08:23:16 File /build/self/sops/secrets/initrd_ssh_key/secret already up to date
check-secrets> 2026/09/18 08:23:16 Syncing keys for file /build/self/sops/secrets/matrix-server-key/secret
check-secrets> 2026/09/18 08:23:16 File /build/self/sops/secrets/matrix-server-key/secret already up to date
check-secrets> 2026/09/18 08:23:16 Syncing keys for file /build/self/sops/secrets/merge-bot-gitea-token/secret
check-secrets> 2026/09/18 08:23:16 File /build/self/sops/secrets/merge-bot-gitea-token/secret already up to date
check-secrets> 2026/09/18 08:23:16 Syncing keys for file /build/self/sops/secrets/monitoring01-age.key/secret
check-secrets> 2026/09/18 08:23:16 File /build/self/sops/secrets/monitoring01-age.key/secret already up to date
check-secrets> 2026/09/18 08:23:16 Syncing keys for file /build/self/sops/secrets/registration-secret/secret
check-secrets> 2026/09/18 08:23:16 File /build/self/sops/secrets/registration-secret/secret already up to date
check-secrets> 2026/09/18 08:23:16 Syncing keys for file /build/self/sops/secrets/storinator01-age.key/secret
check-secrets> 2026/09/18 08:23:16 File /build/self/sops/secrets/storinator01-age.key/secret already up to date
check-secrets> 2026/09/18 08:23:16 Syncing keys for file /build/self/sops/secrets/tf-passphrase/secret
check-secrets> 2026/09/18 08:23:16 File /build/self/sops/secrets/tf-passphrase/secret already up to date
check-secrets> 2026/09/18 08:23:16 Syncing keys for file /build/self/sops/secrets/vultr-api-key/secret
check-secrets> 2026/09/18 08:23:16 File /build/self/sops/secrets/vultr-api-key/secret already up to date
check-secrets> 2026/09/18 08:23:16 Syncing keys for file /build/self/sops/secrets/web01-age.key/secret
check-secrets> 2026/09/18 08:23:16 File /build/self/sops/secrets/web01-age.key/secret already up to date
check-secrets> 2026/09/18 08:23:16 Syncing keys for file /build/self/sops/secrets/web01-matrix-password-clan-bot/secret
check-secrets> 2026/09/18 08:23:16 File /build/self/sops/secrets/web01-matrix-password-clan-bot/secret already up to date
check-secrets> 2026/09/18 08:23:16 Syncing keys for file /build/self/sops/secrets/web02-age.key/secret
check-secrets> 2026/09/18 08:23:16 File /build/self/sops/secrets/web02-age.key/secret already up to date
check-secrets> 2026/09/18 08:23:16 Syncing keys for file /build/self/vars/shared/zerotier-identity-build-x86-01/identity-secret/secret
check-secrets> 2026/09/18 08:23:16 File /build/self/vars/shared/zerotier-identity-build-x86-01/identity-secret/secret already up to date
check-secrets> 2026/09/18 08:23:16 Syncing keys for file /build/self/vars/shared/zerotier-identity-storinator01/identity-secret/secret
check-secrets> 2026/09/18 08:23:16 File /build/self/vars/shared/zerotier-identity-storinator01/identity-secret/secret already up to date
check-secrets> 2026/09/18 08:23:16 Syncing keys for file /build/self/vars/shared/zerotier-identity-web02/identity-secret/secret
check-secrets> 2026/09/18 08:23:16 File /build/self/vars/shared/zerotier-identity-web02/identity-secret/secret already up to date
check-secrets> 2026/09/18 08:23:16 Syncing keys for file /build/self/vars/shared/zerotier-identity-web01/identity-secret/secret
check-secrets> 2026/09/18 08:23:16 File /build/self/vars/shared/zerotier-identity-web01/identity-secret/secret already up to date
check-secrets> Traceback (most recent call last):
check-secrets>   File "/nix/store/wk8wibm92hxx88ak0r7n7sdnww6ywnvd-clan-cli/bin/.clan-wrapped", line 9, in <module>
check-secrets>     sys.exit(main())
check-secrets>              ~~~~^^
check-secrets>   File "/nix/store/wk8wibm92hxx88ak0r7n7sdnww6ywnvd-clan-cli/lib/python3.14/site-packages/clan_cli/cli.py", line 471, in main
check-secrets>     args.func(args)
check-secrets>     ~~~~~~~~~^^^^^^
check-secrets>   File "/nix/store/wk8wibm92hxx88ak0r7n7sdnww6ywnvd-clan-cli/lib/python3.14/site-packages/clan_cli/secrets/key.py", line 119, in update_command
check-secrets>     update_secrets(
check-secrets>     ~~~~~~~~~~~~~~^
check-secrets>         clan_dir,
check-secrets>         ^^^^^^^^^
check-secrets>         load_age_plugins(flake) if should_load_age_plugins else [],
check-secrets>         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
check-secrets>     ),
check-secrets>     ^
check-secrets>   File "/nix/store/wk8wibm92hxx88ak0r7n7sdnww6ywnvd-clan-cli/lib/python3.14/site-packages/clan_cli/secrets/secrets.py", line 91, in update_secrets
check-secrets>     changed_files.extend(cleanup_dangling_symlinks(path / "machines"))
check-secrets>                          ~~~~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^
check-secrets>   File "/nix/store/wk8wibm92hxx88ak0r7n7sdnww6ywnvd-clan-cli/lib/python3.14/site-packages/clan_cli/secrets/secrets.py", line 104, in cleanup_dangling_symlinks
check-secrets>     link.unlink()
check-secrets>     ~~~~~~~~~~~^^
check-secrets>   File "/nix/store/3fl7bdkdxk2k4nssy1d1161isbzn6bsr-python3-3.14.7/lib/python3.14/pathlib/__init__.py", line 1042, in unlink
check-secrets>     os.unlink(self)
check-secrets>     ~~~~~~~~~^^^^^^
check-secrets> PermissionError: [Errno 13] Permission denied: '/build/self/vars/shared/mimir-auth/htpasswd/machines/jitsi01'
check-secrets> + exitHandler
check-secrets> + exitCode=1
check-secrets> + set +e
check-secrets> + '[' -n '' ']'
check-secrets> + ((  1 != 0  ))
check-secrets> + runHook failureHook
check-secrets> + local hookName=failureHook
check-secrets> + shift
check-secrets> + local 'hooksSlice=failureHooks[@]'
check-secrets> + local hook
check-secrets> + for hook in "_callImplicitHook 0 $hookName" ${!hooksSlice+"${!hooksSlice}"}
check-secrets> + _logHook failureHook '_callImplicitHook 0 failureHook'
check-secrets> + [[ -z 2 ]]
check-secrets> + local hookKind=failureHook
check-secrets> + local 'hookExpr=_callImplicitHook 0 failureHook'
check-secrets> + shift 2
check-secrets> + declare -F '_callImplicitHook 0 failureHook'
check-secrets> + type -p '_callImplicitHook 0 failureHook'
check-secrets> + [[ _callImplicitHook 0 failureHook != _callImplicitHook* ]]
check-secrets> + _eval '_callImplicitHook 0 failureHook'
check-secrets> + declare -F '_callImplicitHook 0 failureHook'
check-secrets> + eval '_callImplicitHook 0 failureHook'
check-secrets> ++ _callImplicitHook 0 failureHook
check-secrets> ++ local def=0
check-secrets> ++ local hookName=failureHook
check-secrets> ++ declare -F failureHook
check-secrets> ++ type -p failureHook
check-secrets> ++ '[' -n '' ']'
check-secrets> ++ return 0
check-secrets> + return 0
check-secrets> + '[' -n '' ']'
check-secrets> + return 1
error: path '/nix/store/78jzi9igyg93qzxbrkbsmva51psmln4n-check-secrets' is not valid
error: Cannot build '/nix/store/6n2xb5x5skxvf5aynbyq0sh6m918lq0p-check-secrets.drv'.
       Reason: builder failed with exit code 1.
       Output paths:
         /nix/store/78jzi9igyg93qzxbrkbsmva51psmln4n-check-secrets