these 2 derivations will be built: /nix/store/gh7dyjpf5cr8gwy696jja6b9ilswjqrg-closure-info.drv /nix/store/zpasmfk1mv0wrwpvkpssh9ypz9zbvv5n-check-vars.drv building '/nix/store/zpasmfk1mv0wrwpvkpssh9ypz9zbvv5n-check-vars.drv' on 'ssh-ng://builder@build01.clan.lol' building '/nix/store/zpasmfk1mv0wrwpvkpssh9ypz9zbvv5n-check-vars.drv' check-vars> +++ export HOME=/build check-vars> +++ HOME=/build check-vars> +++ export NIX_STATE_DIR=/build/nix check-vars> +++ NIX_STATE_DIR=/build/nix check-vars> +++ export NIX_CONF_DIR=/build/etc check-vars> +++ NIX_CONF_DIR=/build/etc check-vars> +++ mkdir -p /build/etc check-vars> +++ echo 'fsync-metadata = false' check-vars> +++ export IN_NIX_SANDBOX=1 check-vars> +++ IN_NIX_SANDBOX=1 check-vars> +++ export CLAN_TEST_STORE=/build/store check-vars> +++ CLAN_TEST_STORE=/build/store check-vars> +++ export LOCK_NIX=/build/nix_lock check-vars> +++ LOCK_NIX=/build/nix_lock check-vars> +++ export CLAN_TEST_FLAKE_CACHE=/build/clan-flake-cache check-vars> +++ CLAN_TEST_FLAKE_CACHE=/build/clan-flake-cache check-vars> +++ mkdir -p /build/store/nix/store /build/clan-flake-cache check-vars> +++ mkdir -p /build/store/nix/var/nix/gcroots check-vars> +++ [[ -n /nix/store/bmznsqsg9dp96s2a5ssk4zmwk5r9ljrr-closure-info ]] check-vars> ++++ nproc check-vars> +++ /nix/store/xqx65i7cwacw7rsnj3dlbqas27mwvpn2-findutils-4.11.0/bin/xargs -r -P80 /nix/store/p7xdvcvl4aw7m229qzlq601aq0w0nb9n-coreutils-9.11/bin/cp --recursive --no-dereference --reflink=auto --target-directory /build/store/nix/store check-vars> +++ /nix/store/lz2w1as1p0c2lajnvy2iif1i3vqh189a-nix-2.34.8/bin/nix-store --load-db --store /build/store check-vars> +++ mkdir -p self check-vars> +++ cp -r --no-target-directory /nix/store/zdjw66n65p1161cji6igjbwwjcrdlk7q-source self check-vars> +++ clan vars check --flake ./self --debug check-vars> Debug log activated check-vars> Prefetching flake ./self check-vars> warning: you don't have Internet access; disabling some network-dependent features check-vars> Cache miss for clanInternals.inventoryClass.inventorySerialization.{instances,machines,meta} check-vars> nix \ check-vars> --extra-experimental-features 'nix-command flakes' \ check-vars> --option warn-dirty \ check-vars> false \ check-vars> config \ check-vars> show \ check-vars> --json --store \ check-vars> /build/store check-vars> Caller: /nix/store/wk8wibm92hxx88ak0r7n7sdnww6ywnvd-clan-cli/lib/python3.14/site-packages/clan_lib/nix/__init__.py:91::nix_config check-vars> check-vars> warning: you don't have Internet access; disabling some network-dependent features check-vars> Command exited with return code 0 check-vars> Caller: /nix/store/wk8wibm92hxx88ak0r7n7sdnww6ywnvd-clan-cli/lib/python3.14/site-packages/clan_lib/nix/__init__.py:91::nix_config check-vars> check-vars> Precaching selectors: check-vars> - (not cached) clanInternals.?secrets.?age.?plugins check-vars> - (not cached) clanInternals.inventoryClass.relativeDirectory check-vars> - (not cached) clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash} check-vars> - (not cached) clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor} check-vars> - (not cached) clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.?sops.?defaultGroups check-vars> - (not cached) clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.vars.settings.publicModule check-vars> - (not cached) clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.vars.settings.secretModule check-vars> - (not cached) clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.vars.?sops.?secretUploadDirectory check-vars> - (not cached) clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.vars.?password-store.?passCommand check-vars> - (not cached) clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.vars.?password-store.?secretLocation check-vars> - (not cached) clanInternals.vars.settings.?recipients check-vars> - (not cached) clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.vars.?age.?secretLocation check-vars> Loading flake cache from file /build/clan-flake-cache/flakes-v2/17d1e55d64ad7ec14ae2aae1f3a00b0be2fd8e2a check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash}' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor}' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux."build-x86-01".config.clan.core.vars.settings.publicModule' check-vars> (cached) $ clan select clanInternals.inventoryClass.relativeDirectory check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux."build-x86-01".config.clan.core.vars.settings.secretModule' check-vars> (cached) $ clan select clanInternals.inventoryClass.relativeDirectory check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux."build-x86-01".config.clan.core.vars.settings.secretModule' check-vars> (cached) $ clan select clanInternals.inventoryClass.relativeDirectory check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux."build-x86-01".config.clan.core.vars.settings.publicModule' check-vars> (cached) $ clan select clanInternals.inventoryClass.relativeDirectory check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.?sops.?defaultGroups' check-vars> Ignoring broken symlink /build/self/vars/shared/loki-auth/htpasswd/machines/jitsi01 check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.?sops.?defaultGroups' check-vars> [build-x86-01] Secret var 'htpasswd' for service 'loki-auth' in machine build-x86-01 needs update: One or more recipient keys were added to secret shared var 'loki-auth/htpasswd', but it was never re-encrypted. check-vars> This could have been a malicious actor trying to add their keys, please investigate. check-vars> Added keys: check-vars> check-vars> If this is intended, run 'clan vars fix build-x86-01' to re-encrypt the secret. check-vars> Ignoring broken symlink /build/self/vars/shared/loki-auth/password/machines/jitsi01 check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.?sops.?defaultGroups' check-vars> [build-x86-01] Secret var 'password' for service 'loki-auth' in machine build-x86-01 needs update: One or more recipient keys were added to secret shared var 'loki-auth/password', but it was never re-encrypted. check-vars> This could have been a malicious actor trying to add their keys, please investigate. check-vars> Added keys: check-vars> check-vars> If this is intended, run 'clan vars fix build-x86-01' to re-encrypt the secret. check-vars> Ignoring broken symlink /build/self/vars/shared/mimir-auth/htpasswd/machines/jitsi01 check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.?sops.?defaultGroups' check-vars> [build-x86-01] Secret var 'htpasswd' for service 'mimir-auth' in machine build-x86-01 needs update: One or more recipient keys were added to secret shared var 'mimir-auth/htpasswd', but it was never re-encrypted. check-vars> This could have been a malicious actor trying to add their keys, please investigate. check-vars> Added keys: check-vars> check-vars> If this is intended, run 'clan vars fix build-x86-01' to re-encrypt the secret. check-vars> Ignoring broken symlink /build/self/vars/shared/mimir-auth/password/machines/jitsi01 check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.?sops.?defaultGroups' check-vars> [build-x86-01] Secret var 'password' for service 'mimir-auth' in machine build-x86-01 needs update: One or more recipient keys were added to secret shared var 'mimir-auth/password', but it was never re-encrypted. check-vars> This could have been a malicious actor trying to add their keys, please investigate. check-vars> Added keys: check-vars> check-vars> If this is intended, run 'clan vars fix build-x86-01' to re-encrypt the secret. check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{build-x86-01}.config.clan.core.?sops.?defaultGroups' check-vars> Check results for machine 'build-x86-01': check-vars> Unfixed secret vars: check-vars> - loki-auth/htpasswd check-vars> - loki-auth/password check-vars> - mimir-auth/htpasswd check-vars> - mimir-auth/password check-vars> check-vars> Precaching selectors: check-vars> - (cached) clanInternals.?secrets.?age.?plugins check-vars> - (cached) clanInternals.inventoryClass.relativeDirectory check-vars> - (not cached) clanInternals.machines.aarch64-linux.{build01}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash} check-vars> - (not cached) clanInternals.machines.aarch64-linux.{build01}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor} check-vars> - (not cached) clanInternals.machines.aarch64-linux.{build01}.config.clan.core.?sops.?defaultGroups check-vars> - (not cached) clanInternals.machines.aarch64-linux.{build01}.config.clan.core.vars.settings.publicModule check-vars> - (not cached) clanInternals.machines.aarch64-linux.{build01}.config.clan.core.vars.settings.secretModule check-vars> - (not cached) clanInternals.machines.aarch64-linux.{build01}.config.clan.core.vars.?sops.?secretUploadDirectory check-vars> - (not cached) clanInternals.machines.aarch64-linux.{build01}.config.clan.core.vars.?password-store.?passCommand check-vars> - (not cached) clanInternals.machines.aarch64-linux.{build01}.config.clan.core.vars.?password-store.?secretLocation check-vars> - (cached) clanInternals.vars.settings.?recipients check-vars> - (not cached) clanInternals.machines.aarch64-linux.{build01}.config.clan.core.vars.?age.?secretLocation check-vars> Loading flake cache from file /build/clan-flake-cache/flakes-v2/17d1e55d64ad7ec14ae2aae1f3a00b0be2fd8e2a check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{build01}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash}' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{build01}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor}' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux."build01".config.clan.core.vars.settings.publicModule' check-vars> (cached) $ clan select clanInternals.inventoryClass.relativeDirectory check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux."build01".config.clan.core.vars.settings.secretModule' check-vars> (cached) $ clan select clanInternals.inventoryClass.relativeDirectory check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux."build01".config.clan.core.vars.settings.secretModule' check-vars> (cached) $ clan select clanInternals.inventoryClass.relativeDirectory check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{build01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux."build01".config.clan.core.vars.settings.publicModule' check-vars> (cached) $ clan select clanInternals.inventoryClass.relativeDirectory check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{build01}.config.clan.core.?sops.?defaultGroups' check-vars> Ignoring broken symlink /build/self/vars/shared/loki-auth/htpasswd/machines/jitsi01 check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{build01}.config.clan.core.?sops.?defaultGroups' check-vars> [build01] Secret var 'htpasswd' for service 'loki-auth' in machine build01 needs update: One or more recipient keys were added to secret shared var 'loki-auth/htpasswd', but it was never re-encrypted. check-vars> This could have been a malicious actor trying to add their keys, please investigate. check-vars> Added keys: check-vars> check-vars> If this is intended, run 'clan vars fix build01' to re-encrypt the secret. check-vars> Ignoring broken symlink /build/self/vars/shared/loki-auth/password/machines/jitsi01 check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{build01}.config.clan.core.?sops.?defaultGroups' check-vars> [build01] Secret var 'password' for service 'loki-auth' in machine build01 needs update: One or more recipient keys were added to secret shared var 'loki-auth/password', but it was never re-encrypted. check-vars> This could have been a malicious actor trying to add their keys, please investigate. check-vars> Added keys: check-vars> check-vars> If this is intended, run 'clan vars fix build01' to re-encrypt the secret. check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{build01}.config.clan.core.?sops.?defaultGroups' check-vars> Ignoring broken symlink /build/self/vars/shared/mimir-auth/htpasswd/machines/jitsi01 check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{build01}.config.clan.core.?sops.?defaultGroups' check-vars> [build01] Secret var 'htpasswd' for service 'mimir-auth' in machine build01 needs update: One or more recipient keys were added to secret shared var 'mimir-auth/htpasswd', but it was never re-encrypted. check-vars> This could have been a malicious actor trying to add their keys, please investigate. check-vars> Added keys: check-vars> check-vars> If this is intended, run 'clan vars fix build01' to re-encrypt the secret. check-vars> Ignoring broken symlink /build/self/vars/shared/mimir-auth/password/machines/jitsi01 check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{build01}.config.clan.core.?sops.?defaultGroups' check-vars> [build01] Secret var 'password' for service 'mimir-auth' in machine build01 needs update: One or more recipient keys were added to secret shared var 'mimir-auth/password', but it was never re-encrypted. check-vars> This could have been a malicious actor trying to add their keys, please investigate. check-vars> Added keys: check-vars> check-vars> If this is intended, run 'clan vars fix build01' to re-encrypt the secret. check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{build01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{build01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{build01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{build01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{build01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{build01}.config.clan.core.?sops.?defaultGroups' check-vars> Check results for machine 'build01': check-vars> Unfixed secret vars: check-vars> - loki-auth/htpasswd check-vars> - loki-auth/password check-vars> - mimir-auth/htpasswd check-vars> - mimir-auth/password check-vars> check-vars> Precaching selectors: check-vars> - (cached) clanInternals.?secrets.?age.?plugins check-vars> - (cached) clanInternals.inventoryClass.relativeDirectory check-vars> - (not cached) clanInternals.machines.aarch64-linux.{build02}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash} check-vars> - (not cached) clanInternals.machines.aarch64-linux.{build02}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor} check-vars> - (not cached) clanInternals.machines.aarch64-linux.{build02}.config.clan.core.?sops.?defaultGroups check-vars> - (not cached) clanInternals.machines.aarch64-linux.{build02}.config.clan.core.vars.settings.publicModule check-vars> - (not cached) clanInternals.machines.aarch64-linux.{build02}.config.clan.core.vars.settings.secretModule check-vars> - (not cached) clanInternals.machines.aarch64-linux.{build02}.config.clan.core.vars.?sops.?secretUploadDirectory check-vars> - (not cached) clanInternals.machines.aarch64-linux.{build02}.config.clan.core.vars.?password-store.?passCommand check-vars> - (not cached) clanInternals.machines.aarch64-linux.{build02}.config.clan.core.vars.?password-store.?secretLocation check-vars> - (cached) clanInternals.vars.settings.?recipients check-vars> - (not cached) clanInternals.machines.aarch64-linux.{build02}.config.clan.core.vars.?age.?secretLocation check-vars> Loading flake cache from file /build/clan-flake-cache/flakes-v2/17d1e55d64ad7ec14ae2aae1f3a00b0be2fd8e2a check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{build02}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash}' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{build02}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor}' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux."build02".config.clan.core.vars.settings.publicModule' check-vars> (cached) $ clan select clanInternals.inventoryClass.relativeDirectory check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux."build02".config.clan.core.vars.settings.secretModule' check-vars> (cached) $ clan select clanInternals.inventoryClass.relativeDirectory check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux."build02".config.clan.core.vars.settings.secretModule' check-vars> (cached) $ clan select clanInternals.inventoryClass.relativeDirectory check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{build02}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux."build02".config.clan.core.vars.settings.publicModule' check-vars> (cached) $ clan select clanInternals.inventoryClass.relativeDirectory check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{build02}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{build02}.config.clan.core.?sops.?defaultGroups' check-vars> Check results for machine 'build02': check-vars> All vars are present and valid. check-vars> Precaching selectors: check-vars> - (cached) clanInternals.?secrets.?age.?plugins check-vars> - (cached) clanInternals.inventoryClass.relativeDirectory check-vars> - (not cached) clanInternals.machines.aarch64-linux.{build04}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash} check-vars> - (not cached) clanInternals.machines.aarch64-linux.{build04}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor} check-vars> - (not cached) clanInternals.machines.aarch64-linux.{build04}.config.clan.core.?sops.?defaultGroups check-vars> - (not cached) clanInternals.machines.aarch64-linux.{build04}.config.clan.core.vars.settings.publicModule check-vars> - (not cached) clanInternals.machines.aarch64-linux.{build04}.config.clan.core.vars.settings.secretModule check-vars> - (not cached) clanInternals.machines.aarch64-linux.{build04}.config.clan.core.vars.?sops.?secretUploadDirectory check-vars> - (not cached) clanInternals.machines.aarch64-linux.{build04}.config.clan.core.vars.?password-store.?passCommand check-vars> - (not cached) clanInternals.machines.aarch64-linux.{build04}.config.clan.core.vars.?password-store.?secretLocation check-vars> - (cached) clanInternals.vars.settings.?recipients check-vars> - (not cached) clanInternals.machines.aarch64-linux.{build04}.config.clan.core.vars.?age.?secretLocation check-vars> Loading flake cache from file /build/clan-flake-cache/flakes-v2/17d1e55d64ad7ec14ae2aae1f3a00b0be2fd8e2a check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{build04}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash}' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{build04}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor}' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux."build04".config.clan.core.vars.settings.publicModule' check-vars> (cached) $ clan select clanInternals.inventoryClass.relativeDirectory check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux."build04".config.clan.core.vars.settings.secretModule' check-vars> (cached) $ clan select clanInternals.inventoryClass.relativeDirectory check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux."build04".config.clan.core.vars.settings.secretModule' check-vars> (cached) $ clan select clanInternals.inventoryClass.relativeDirectory check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{build04}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux."build04".config.clan.core.vars.settings.publicModule' check-vars> (cached) $ clan select clanInternals.inventoryClass.relativeDirectory check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{build04}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{build04}.config.clan.core.?sops.?defaultGroups' check-vars> Check results for machine 'build04': check-vars> All vars are present and valid. check-vars> Precaching selectors: check-vars> - (cached) clanInternals.?secrets.?age.?plugins check-vars> - (cached) clanInternals.inventoryClass.relativeDirectory check-vars> - (not cached) clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash} check-vars> - (not cached) clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor} check-vars> - (not cached) clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups check-vars> - (not cached) clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.vars.settings.publicModule check-vars> - (not cached) clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.vars.settings.secretModule check-vars> - (not cached) clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.vars.?sops.?secretUploadDirectory check-vars> - (not cached) clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.vars.?password-store.?passCommand check-vars> - (not cached) clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.vars.?password-store.?secretLocation check-vars> - (cached) clanInternals.vars.settings.?recipients check-vars> - (not cached) clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.vars.?age.?secretLocation check-vars> Loading flake cache from file /build/clan-flake-cache/flakes-v2/17d1e55d64ad7ec14ae2aae1f3a00b0be2fd8e2a check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash}' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor}' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux."monitoring01".config.clan.core.vars.settings.publicModule' check-vars> (cached) $ clan select clanInternals.inventoryClass.relativeDirectory check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux."monitoring01".config.clan.core.vars.settings.secretModule' check-vars> (cached) $ clan select clanInternals.inventoryClass.relativeDirectory check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux."monitoring01".config.clan.core.vars.settings.secretModule' check-vars> (cached) $ clan select clanInternals.inventoryClass.relativeDirectory check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux."monitoring01".config.clan.core.vars.settings.publicModule' check-vars> (cached) $ clan select clanInternals.inventoryClass.relativeDirectory check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups' check-vars> Ignoring broken symlink /build/self/vars/shared/loki-auth/htpasswd/machines/jitsi01 check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups' check-vars> [monitoring01] Secret var 'htpasswd' for service 'loki-auth' in machine monitoring01 needs update: One or more recipient keys were added to secret shared var 'loki-auth/htpasswd', but it was never re-encrypted. check-vars> This could have been a malicious actor trying to add their keys, please investigate. check-vars> Added keys: check-vars> check-vars> If this is intended, run 'clan vars fix monitoring01' to re-encrypt the secret. check-vars> Ignoring broken symlink /build/self/vars/shared/loki-auth/password/machines/jitsi01 check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups' check-vars> [monitoring01] Secret var 'password' for service 'loki-auth' in machine monitoring01 needs update: One or more recipient keys were added to secret shared var 'loki-auth/password', but it was never re-encrypted. check-vars> This could have been a malicious actor trying to add their keys, please investigate. check-vars> Added keys: check-vars> check-vars> If this is intended, run 'clan vars fix monitoring01' to re-encrypt the secret. check-vars> Ignoring broken symlink /build/self/vars/shared/mimir-auth/htpasswd/machines/jitsi01 check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups' check-vars> [monitoring01] Secret var 'htpasswd' for service 'mimir-auth' in machine monitoring01 needs update: One or more recipient keys were added to secret shared var 'mimir-auth/htpasswd', but it was never re-encrypted. check-vars> This could have been a malicious actor trying to add their keys, please investigate. check-vars> Added keys: check-vars> check-vars> If this is intended, run 'clan vars fix monitoring01' to re-encrypt the secret. check-vars> Ignoring broken symlink /build/self/vars/shared/mimir-auth/password/machines/jitsi01 check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups' check-vars> [monitoring01] Secret var 'password' for service 'mimir-auth' in machine monitoring01 needs update: One or more recipient keys were added to secret shared var 'mimir-auth/password', but it was never re-encrypted. check-vars> This could have been a malicious actor trying to add their keys, please investigate. check-vars> Added keys: check-vars> check-vars> If this is intended, run 'clan vars fix monitoring01' to re-encrypt the secret. check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups' check-vars> Check results for machine 'monitoring01': check-vars> Unfixed secret vars: check-vars> - loki-auth/htpasswd check-vars> - loki-auth/password check-vars> - mimir-auth/htpasswd check-vars> - mimir-auth/password check-vars> check-vars> Precaching selectors: check-vars> - (cached) clanInternals.?secrets.?age.?plugins check-vars> - (cached) clanInternals.inventoryClass.relativeDirectory check-vars> - (not cached) clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash} check-vars> - (not cached) clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor} check-vars> - (not cached) clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups check-vars> - (not cached) clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.vars.settings.publicModule check-vars> - (not cached) clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.vars.settings.secretModule check-vars> - (not cached) clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.vars.?sops.?secretUploadDirectory check-vars> - (not cached) clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.vars.?password-store.?passCommand check-vars> - (not cached) clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.vars.?password-store.?secretLocation check-vars> - (cached) clanInternals.vars.settings.?recipients check-vars> - (not cached) clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.vars.?age.?secretLocation check-vars> Loading flake cache from file /build/clan-flake-cache/flakes-v2/17d1e55d64ad7ec14ae2aae1f3a00b0be2fd8e2a check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash}' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor}' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux."storinator01".config.clan.core.vars.settings.publicModule' check-vars> (cached) $ clan select clanInternals.inventoryClass.relativeDirectory check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux."storinator01".config.clan.core.vars.settings.secretModule' check-vars> (cached) $ clan select clanInternals.inventoryClass.relativeDirectory check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux."storinator01".config.clan.core.vars.settings.secretModule' check-vars> (cached) $ clan select clanInternals.inventoryClass.relativeDirectory check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux."storinator01".config.clan.core.vars.settings.publicModule' check-vars> (cached) $ clan select clanInternals.inventoryClass.relativeDirectory check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups' check-vars> Ignoring broken symlink /build/self/vars/shared/loki-auth/htpasswd/machines/jitsi01 check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups' check-vars> [storinator01] Secret var 'htpasswd' for service 'loki-auth' in machine storinator01 needs update: One or more recipient keys were added to secret shared var 'loki-auth/htpasswd', but it was never re-encrypted. check-vars> This could have been a malicious actor trying to add their keys, please investigate. check-vars> Added keys: check-vars> check-vars> If this is intended, run 'clan vars fix storinator01' to re-encrypt the secret. check-vars> Ignoring broken symlink /build/self/vars/shared/loki-auth/password/machines/jitsi01 check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups' check-vars> [storinator01] Secret var 'password' for service 'loki-auth' in machine storinator01 needs update: One or more recipient keys were added to secret shared var 'loki-auth/password', but it was never re-encrypted. check-vars> This could have been a malicious actor trying to add their keys, please investigate. check-vars> Added keys: check-vars> check-vars> If this is intended, run 'clan vars fix storinator01' to re-encrypt the secret. check-vars> Ignoring broken symlink /build/self/vars/shared/mimir-auth/htpasswd/machines/jitsi01 check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups' check-vars> [storinator01] Secret var 'htpasswd' for service 'mimir-auth' in machine storinator01 needs update: One or more recipient keys were added to secret shared var 'mimir-auth/htpasswd', but it was never re-encrypted. check-vars> This could have been a malicious actor trying to add their keys, please investigate. check-vars> Added keys: check-vars> check-vars> If this is intended, run 'clan vars fix storinator01' to re-encrypt the secret. check-vars> Ignoring broken symlink /build/self/vars/shared/mimir-auth/password/machines/jitsi01 check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups' check-vars> [storinator01] Secret var 'password' for service 'mimir-auth' in machine storinator01 needs update: One or more recipient keys were added to secret shared var 'mimir-auth/password', but it was never re-encrypted. check-vars> This could have been a malicious actor trying to add their keys, please investigate. check-vars> Added keys: check-vars> check-vars> If this is intended, run 'clan vars fix storinator01' to re-encrypt the secret. check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups' check-vars> Check results for machine 'storinator01': check-vars> Unfixed secret vars: check-vars> - loki-auth/htpasswd check-vars> - loki-auth/password check-vars> - mimir-auth/htpasswd check-vars> - mimir-auth/password check-vars> check-vars> Precaching selectors: check-vars> - (cached) clanInternals.?secrets.?age.?plugins check-vars> - (cached) clanInternals.inventoryClass.relativeDirectory check-vars> - (not cached) clanInternals.machines.aarch64-linux.{web01}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash} check-vars> - (not cached) clanInternals.machines.aarch64-linux.{web01}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor} check-vars> - (not cached) clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups check-vars> - (not cached) clanInternals.machines.aarch64-linux.{web01}.config.clan.core.vars.settings.publicModule check-vars> - (not cached) clanInternals.machines.aarch64-linux.{web01}.config.clan.core.vars.settings.secretModule check-vars> - (not cached) clanInternals.machines.aarch64-linux.{web01}.config.clan.core.vars.?sops.?secretUploadDirectory check-vars> - (not cached) clanInternals.machines.aarch64-linux.{web01}.config.clan.core.vars.?password-store.?passCommand check-vars> - (not cached) clanInternals.machines.aarch64-linux.{web01}.config.clan.core.vars.?password-store.?secretLocation check-vars> - (cached) clanInternals.vars.settings.?recipients check-vars> - (not cached) clanInternals.machines.aarch64-linux.{web01}.config.clan.core.vars.?age.?secretLocation check-vars> Loading flake cache from file /build/clan-flake-cache/flakes-v2/17d1e55d64ad7ec14ae2aae1f3a00b0be2fd8e2a check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash}' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor}' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux."web01".config.clan.core.vars.settings.publicModule' check-vars> (cached) $ clan select clanInternals.inventoryClass.relativeDirectory check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux."web01".config.clan.core.vars.settings.secretModule' check-vars> (cached) $ clan select clanInternals.inventoryClass.relativeDirectory check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux."web01".config.clan.core.vars.settings.secretModule' check-vars> (cached) $ clan select clanInternals.inventoryClass.relativeDirectory check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux."web01".config.clan.core.vars.settings.publicModule' check-vars> (cached) $ clan select clanInternals.inventoryClass.relativeDirectory check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> Ignoring broken symlink /build/self/vars/shared/loki-auth/htpasswd/machines/jitsi01 check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> [web01] Secret var 'htpasswd' for service 'loki-auth' in machine web01 needs update: One or more recipient keys were added to secret shared var 'loki-auth/htpasswd', but it was never re-encrypted. check-vars> This could have been a malicious actor trying to add their keys, please investigate. check-vars> Added keys: check-vars> check-vars> If this is intended, run 'clan vars fix web01' to re-encrypt the secret. check-vars> Ignoring broken symlink /build/self/vars/shared/loki-auth/password/machines/jitsi01 check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> [web01] Secret var 'password' for service 'loki-auth' in machine web01 needs update: One or more recipient keys were added to secret shared var 'loki-auth/password', but it was never re-encrypted. check-vars> This could have been a malicious actor trying to add their keys, please investigate. check-vars> Added keys: check-vars> check-vars> If this is intended, run 'clan vars fix web01' to re-encrypt the secret. check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> Ignoring broken symlink /build/self/vars/shared/mimir-auth/htpasswd/machines/jitsi01 check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> [web01] Secret var 'htpasswd' for service 'mimir-auth' in machine web01 needs update: One or more recipient keys were added to secret shared var 'mimir-auth/htpasswd', but it was never re-encrypted. check-vars> This could have been a malicious actor trying to add their keys, please investigate. check-vars> Added keys: check-vars> check-vars> If this is intended, run 'clan vars fix web01' to re-encrypt the secret. check-vars> Ignoring broken symlink /build/self/vars/shared/mimir-auth/password/machines/jitsi01 check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> [web01] Secret var 'password' for service 'mimir-auth' in machine web01 needs update: One or more recipient keys were added to secret shared var 'mimir-auth/password', but it was never re-encrypted. check-vars> This could have been a malicious actor trying to add their keys, please investigate. check-vars> Added keys: check-vars> check-vars> If this is intended, run 'clan vars fix web01' to re-encrypt the secret. check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web01}.config.clan.core.?sops.?defaultGroups' check-vars> Check results for machine 'web01': check-vars> Unfixed secret vars: check-vars> - loki-auth/htpasswd check-vars> - loki-auth/password check-vars> - mimir-auth/htpasswd check-vars> - mimir-auth/password check-vars> check-vars> Precaching selectors: check-vars> - (cached) clanInternals.?secrets.?age.?plugins check-vars> - (cached) clanInternals.inventoryClass.relativeDirectory check-vars> - (not cached) clanInternals.machines.aarch64-linux.{web02}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash} check-vars> - (not cached) clanInternals.machines.aarch64-linux.{web02}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor} check-vars> - (not cached) clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups check-vars> - (not cached) clanInternals.machines.aarch64-linux.{web02}.config.clan.core.vars.settings.publicModule check-vars> - (not cached) clanInternals.machines.aarch64-linux.{web02}.config.clan.core.vars.settings.secretModule check-vars> - (not cached) clanInternals.machines.aarch64-linux.{web02}.config.clan.core.vars.?sops.?secretUploadDirectory check-vars> - (not cached) clanInternals.machines.aarch64-linux.{web02}.config.clan.core.vars.?password-store.?passCommand check-vars> - (not cached) clanInternals.machines.aarch64-linux.{web02}.config.clan.core.vars.?password-store.?secretLocation check-vars> - (cached) clanInternals.vars.settings.?recipients check-vars> - (not cached) clanInternals.machines.aarch64-linux.{web02}.config.clan.core.vars.?age.?secretLocation check-vars> Loading flake cache from file /build/clan-flake-cache/flakes-v2/17d1e55d64ad7ec14ae2aae1f3a00b0be2fd8e2a check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash}' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor}' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux."web02".config.clan.core.vars.settings.publicModule' check-vars> (cached) $ clan select clanInternals.inventoryClass.relativeDirectory check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux."web02".config.clan.core.vars.settings.secretModule' check-vars> (cached) $ clan select clanInternals.inventoryClass.relativeDirectory check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux."web02".config.clan.core.vars.settings.secretModule' check-vars> (cached) $ clan select clanInternals.inventoryClass.relativeDirectory check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux."web02".config.clan.core.vars.settings.publicModule' check-vars> (cached) $ clan select clanInternals.inventoryClass.relativeDirectory check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups' check-vars> Ignoring broken symlink /build/self/vars/shared/loki-auth/htpasswd/machines/jitsi01 check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups' check-vars> [web02] Secret var 'htpasswd' for service 'loki-auth' in machine web02 needs update: One or more recipient keys were added to secret shared var 'loki-auth/htpasswd', but it was never re-encrypted. check-vars> This could have been a malicious actor trying to add their keys, please investigate. check-vars> Added keys: check-vars> check-vars> If this is intended, run 'clan vars fix web02' to re-encrypt the secret. check-vars> Ignoring broken symlink /build/self/vars/shared/loki-auth/password/machines/jitsi01 check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups' check-vars> [web02] Secret var 'password' for service 'loki-auth' in machine web02 needs update: One or more recipient keys were added to secret shared var 'loki-auth/password', but it was never re-encrypted. check-vars> This could have been a malicious actor trying to add their keys, please investigate. check-vars> Added keys: check-vars> check-vars> If this is intended, run 'clan vars fix web02' to re-encrypt the secret. check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups' check-vars> Ignoring broken symlink /build/self/vars/shared/mimir-auth/htpasswd/machines/jitsi01 check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups' check-vars> [web02] Secret var 'htpasswd' for service 'mimir-auth' in machine web02 needs update: One or more recipient keys were added to secret shared var 'mimir-auth/htpasswd', but it was never re-encrypted. check-vars> This could have been a malicious actor trying to add their keys, please investigate. check-vars> Added keys: check-vars> check-vars> If this is intended, run 'clan vars fix web02' to re-encrypt the secret. check-vars> Ignoring broken symlink /build/self/vars/shared/mimir-auth/password/machines/jitsi01 check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups' check-vars> [web02] Secret var 'password' for service 'mimir-auth' in machine web02 needs update: One or more recipient keys were added to secret shared var 'mimir-auth/password', but it was never re-encrypted. check-vars> This could have been a malicious actor trying to add their keys, please investigate. check-vars> Added keys: check-vars> check-vars> If this is intended, run 'clan vars fix web02' to re-encrypt the secret. check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups' check-vars> (cached) $ clan select 'clanInternals.machines.aarch64-linux.{web02}.config.clan.core.?sops.?defaultGroups' check-vars> Check results for machine 'web02': check-vars> Unfixed secret vars: check-vars> - loki-auth/htpasswd check-vars> - loki-auth/password check-vars> - mimir-auth/htpasswd check-vars> - mimir-auth/password check-vars> check-vars> + exitHandler check-vars> + exitCode=1 check-vars> + set +e check-vars> + '[' -n '' ']' check-vars> + (( 1 != 0 )) check-vars> + runHook failureHook check-vars> + local hookName=failureHook check-vars> + shift check-vars> + local 'hooksSlice=failureHooks[@]' check-vars> + local hook check-vars> + for hook in "_callImplicitHook 0 $hookName" ${!hooksSlice+"${!hooksSlice}"} check-vars> + _logHook failureHook '_callImplicitHook 0 failureHook' check-vars> + [[ -z 2 ]] check-vars> + local hookKind=failureHook check-vars> + local 'hookExpr=_callImplicitHook 0 failureHook' check-vars> + shift 2 check-vars> + declare -F '_callImplicitHook 0 failureHook' check-vars> + type -p '_callImplicitHook 0 failureHook' check-vars> + [[ _callImplicitHook 0 failureHook != _callImplicitHook* ]] check-vars> + _eval '_callImplicitHook 0 failureHook' check-vars> + declare -F '_callImplicitHook 0 failureHook' check-vars> + eval '_callImplicitHook 0 failureHook' check-vars> ++ _callImplicitHook 0 failureHook check-vars> ++ local def=0 check-vars> ++ local hookName=failureHook check-vars> ++ declare -F failureHook check-vars> ++ type -p failureHook check-vars> ++ '[' -n '' ']' check-vars> ++ return 0 check-vars> + return 0 check-vars> + '[' -n '' ']' check-vars> + return 1 error: path '/nix/store/xbynzm7x73wlpz38vz6sjj83fw90nvnk-check-vars' is not valid error: Cannot build '/nix/store/zpasmfk1mv0wrwpvkpssh9ypz9zbvv5n-check-vars.drv'. Reason: builder failed with exit code 1. Output paths: /nix/store/xbynzm7x73wlpz38vz6sjj83fw90nvnk-check-vars