+++ export HOME=/build +++ HOME=/build +++ export NIX_STATE_DIR=/build/nix +++ NIX_STATE_DIR=/build/nix +++ export NIX_CONF_DIR=/build/etc +++ NIX_CONF_DIR=/build/etc +++ mkdir -p /build/etc +++ echo 'fsync-metadata = false' +++ export IN_NIX_SANDBOX=1 +++ IN_NIX_SANDBOX=1 +++ export CLAN_TEST_STORE=/build/store +++ CLAN_TEST_STORE=/build/store +++ export LOCK_NIX=/build/nix_lock +++ LOCK_NIX=/build/nix_lock +++ export CLAN_TEST_FLAKE_CACHE=/build/clan-flake-cache +++ CLAN_TEST_FLAKE_CACHE=/build/clan-flake-cache +++ mkdir -p /build/store/nix/store /build/clan-flake-cache +++ mkdir -p /build/store/nix/var/nix/gcroots +++ [[ -n /nix/store/f7p83jmbmjncy3qwj1iz5g3kkb0284kq-closure-info ]] ++++ nproc +++ /nix/store/i9wgqa0l88aprvpwfaq5hkfa6pklhlv0-findutils-4.11.0/bin/xargs -r -P32 /nix/store/xjl7p8dvyk2j53kqf7f43kdj4ypbxz7g-coreutils-9.11/bin/cp --recursive --no-dereference --reflink=auto --target-directory /build/store/nix/store +++ /nix/store/qfwk7cyvb885l2mc06ac3a7nmv19nigi-nix-2.34.8/bin/nix-store --load-db --store /build/store +++ mkdir -p self +++ cp -r --no-target-directory /nix/store/wj5s99hay4zdfjwkclv9sz9wz6yrbjpf-source self +++ clan vars check --flake ./self --debug Debug log activated Prefetching flake ./self warning: you don't have Internet access; disabling some network-dependent features Cache miss for clanInternals.inventoryClass.inventorySerialization.{instances,machines,meta} nix \ --extra-experimental-features 'nix-command flakes' \ --option warn-dirty \ false \ config \ show \ --json --store \ /build/store Caller: /nix/store/nxbwmfvg4fmhc8hsax4knj8zk7q1b5cw-clan-cli/lib/python3.14/site-packages/clan_lib/nix/__init__.py:91::nix_config warning: you don't have Internet access; disabling some network-dependent features Command exited with return code 0 Caller: /nix/store/nxbwmfvg4fmhc8hsax4knj8zk7q1b5cw-clan-cli/lib/python3.14/site-packages/clan_lib/nix/__init__.py:91::nix_config Precaching selectors: - (not cached) clanInternals.?secrets.?age.?plugins - (not cached) clanInternals.inventoryClass.relativeDirectory - (not cached) clanInternals.machines.x86_64-linux.{build-x86-01}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash} - (not cached) clanInternals.machines.x86_64-linux.{build-x86-01}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor} - (not cached) clanInternals.machines.x86_64-linux.{build-x86-01}.config.clan.core.?sops.?defaultGroups - (not cached) clanInternals.machines.x86_64-linux.{build-x86-01}.config.clan.core.vars.settings.publicModule - (not cached) clanInternals.machines.x86_64-linux.{build-x86-01}.config.clan.core.vars.settings.secretModule - (not cached) clanInternals.machines.x86_64-linux.{build-x86-01}.config.clan.core.vars.?sops.?secretUploadDirectory - (not cached) clanInternals.machines.x86_64-linux.{build-x86-01}.config.clan.core.vars.?password-store.?passCommand - (not cached) clanInternals.machines.x86_64-linux.{build-x86-01}.config.clan.core.vars.?password-store.?secretLocation - (not cached) clanInternals.vars.settings.?recipients - (not cached) clanInternals.machines.x86_64-linux.{build-x86-01}.config.clan.core.vars.?age.?secretLocation Loading flake cache from file /build/clan-flake-cache/flakes-v2/bd82dcac4d1089a5be68ea0aaa663f99688576f7 (cached) $ clan select 'clanInternals.machines.x86_64-linux.{build-x86-01}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash}' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{build-x86-01}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor}' (cached) $ clan select 'clanInternals.machines.x86_64-linux."build-x86-01".config.clan.core.vars.settings.publicModule' (cached) $ clan select clanInternals.inventoryClass.relativeDirectory (cached) $ clan select 'clanInternals.machines.x86_64-linux."build-x86-01".config.clan.core.vars.settings.secretModule' (cached) $ clan select clanInternals.inventoryClass.relativeDirectory (cached) $ clan select 'clanInternals.machines.x86_64-linux."build-x86-01".config.clan.core.vars.settings.secretModule' (cached) $ clan select clanInternals.inventoryClass.relativeDirectory (cached) $ clan select 'clanInternals.machines.x86_64-linux.{build-x86-01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux."build-x86-01".config.clan.core.vars.settings.publicModule' (cached) $ clan select clanInternals.inventoryClass.relativeDirectory (cached) $ clan select 'clanInternals.machines.x86_64-linux.{build-x86-01}.config.clan.core.?sops.?defaultGroups' Ignoring broken symlink /build/self/vars/shared/loki-auth/htpasswd/machines/jitsi01 (cached) $ clan select 'clanInternals.machines.x86_64-linux.{build-x86-01}.config.clan.core.?sops.?defaultGroups' [build-x86-01] Secret var 'htpasswd' for service 'loki-auth' in machine build-x86-01 needs update: One or more recipient keys were added to secret shared var 'loki-auth/htpasswd', but it was never re-encrypted. This could have been a malicious actor trying to add their keys, please investigate. Added keys: If this is intended, run 'clan vars fix build-x86-01' to re-encrypt the secret. Ignoring broken symlink /build/self/vars/shared/loki-auth/password/machines/jitsi01 (cached) $ clan select 'clanInternals.machines.x86_64-linux.{build-x86-01}.config.clan.core.?sops.?defaultGroups' [build-x86-01] Secret var 'password' for service 'loki-auth' in machine build-x86-01 needs update: One or more recipient keys were added to secret shared var 'loki-auth/password', but it was never re-encrypted. This could have been a malicious actor trying to add their keys, please investigate. Added keys: If this is intended, run 'clan vars fix build-x86-01' to re-encrypt the secret. Ignoring broken symlink /build/self/vars/shared/mimir-auth/htpasswd/machines/jitsi01 (cached) $ clan select 'clanInternals.machines.x86_64-linux.{build-x86-01}.config.clan.core.?sops.?defaultGroups' [build-x86-01] Secret var 'htpasswd' for service 'mimir-auth' in machine build-x86-01 needs update: One or more recipient keys were added to secret shared var 'mimir-auth/htpasswd', but it was never re-encrypted. This could have been a malicious actor trying to add their keys, please investigate. Added keys: If this is intended, run 'clan vars fix build-x86-01' to re-encrypt the secret. Ignoring broken symlink /build/self/vars/shared/mimir-auth/password/machines/jitsi01 (cached) $ clan select 'clanInternals.machines.x86_64-linux.{build-x86-01}.config.clan.core.?sops.?defaultGroups' [build-x86-01] Secret var 'password' for service 'mimir-auth' in machine build-x86-01 needs update: One or more recipient keys were added to secret shared var 'mimir-auth/password', but it was never re-encrypted. This could have been a malicious actor trying to add their keys, please investigate. Added keys: If this is intended, run 'clan vars fix build-x86-01' to re-encrypt the secret. (cached) $ clan select 'clanInternals.machines.x86_64-linux.{build-x86-01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{build-x86-01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{build-x86-01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{build-x86-01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{build-x86-01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{build-x86-01}.config.clan.core.?sops.?defaultGroups' Check results for machine 'build-x86-01': Unfixed secret vars: - loki-auth/htpasswd - loki-auth/password - mimir-auth/htpasswd - mimir-auth/password Precaching selectors: - (cached) clanInternals.?secrets.?age.?plugins - (cached) clanInternals.inventoryClass.relativeDirectory - (not cached) clanInternals.machines.x86_64-linux.{build01}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash} - (not cached) clanInternals.machines.x86_64-linux.{build01}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor} - (not cached) clanInternals.machines.x86_64-linux.{build01}.config.clan.core.?sops.?defaultGroups - (not cached) clanInternals.machines.x86_64-linux.{build01}.config.clan.core.vars.settings.publicModule - (not cached) clanInternals.machines.x86_64-linux.{build01}.config.clan.core.vars.settings.secretModule - (not cached) clanInternals.machines.x86_64-linux.{build01}.config.clan.core.vars.?sops.?secretUploadDirectory - (not cached) clanInternals.machines.x86_64-linux.{build01}.config.clan.core.vars.?password-store.?passCommand - (not cached) clanInternals.machines.x86_64-linux.{build01}.config.clan.core.vars.?password-store.?secretLocation - (cached) clanInternals.vars.settings.?recipients - (not cached) clanInternals.machines.x86_64-linux.{build01}.config.clan.core.vars.?age.?secretLocation Loading flake cache from file /build/clan-flake-cache/flakes-v2/bd82dcac4d1089a5be68ea0aaa663f99688576f7 (cached) $ clan select 'clanInternals.machines.x86_64-linux.{build01}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash}' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{build01}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor}' (cached) $ clan select 'clanInternals.machines.x86_64-linux."build01".config.clan.core.vars.settings.publicModule' (cached) $ clan select clanInternals.inventoryClass.relativeDirectory (cached) $ clan select 'clanInternals.machines.x86_64-linux."build01".config.clan.core.vars.settings.secretModule' (cached) $ clan select clanInternals.inventoryClass.relativeDirectory (cached) $ clan select 'clanInternals.machines.x86_64-linux."build01".config.clan.core.vars.settings.secretModule' (cached) $ clan select clanInternals.inventoryClass.relativeDirectory (cached) $ clan select 'clanInternals.machines.x86_64-linux.{build01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux."build01".config.clan.core.vars.settings.publicModule' (cached) $ clan select clanInternals.inventoryClass.relativeDirectory (cached) $ clan select 'clanInternals.machines.x86_64-linux.{build01}.config.clan.core.?sops.?defaultGroups' Ignoring broken symlink /build/self/vars/shared/loki-auth/htpasswd/machines/jitsi01 (cached) $ clan select 'clanInternals.machines.x86_64-linux.{build01}.config.clan.core.?sops.?defaultGroups' [build01] Secret var 'htpasswd' for service 'loki-auth' in machine build01 needs update: One or more recipient keys were added to secret shared var 'loki-auth/htpasswd', but it was never re-encrypted. This could have been a malicious actor trying to add their keys, please investigate. Added keys: If this is intended, run 'clan vars fix build01' to re-encrypt the secret. Ignoring broken symlink /build/self/vars/shared/loki-auth/password/machines/jitsi01 (cached) $ clan select 'clanInternals.machines.x86_64-linux.{build01}.config.clan.core.?sops.?defaultGroups' [build01] Secret var 'password' for service 'loki-auth' in machine build01 needs update: One or more recipient keys were added to secret shared var 'loki-auth/password', but it was never re-encrypted. This could have been a malicious actor trying to add their keys, please investigate. Added keys: If this is intended, run 'clan vars fix build01' to re-encrypt the secret. (cached) $ clan select 'clanInternals.machines.x86_64-linux.{build01}.config.clan.core.?sops.?defaultGroups' Ignoring broken symlink /build/self/vars/shared/mimir-auth/htpasswd/machines/jitsi01 (cached) $ clan select 'clanInternals.machines.x86_64-linux.{build01}.config.clan.core.?sops.?defaultGroups' [build01] Secret var 'htpasswd' for service 'mimir-auth' in machine build01 needs update: One or more recipient keys were added to secret shared var 'mimir-auth/htpasswd', but it was never re-encrypted. This could have been a malicious actor trying to add their keys, please investigate. Added keys: If this is intended, run 'clan vars fix build01' to re-encrypt the secret. Ignoring broken symlink /build/self/vars/shared/mimir-auth/password/machines/jitsi01 (cached) $ clan select 'clanInternals.machines.x86_64-linux.{build01}.config.clan.core.?sops.?defaultGroups' [build01] Secret var 'password' for service 'mimir-auth' in machine build01 needs update: One or more recipient keys were added to secret shared var 'mimir-auth/password', but it was never re-encrypted. This could have been a malicious actor trying to add their keys, please investigate. Added keys: If this is intended, run 'clan vars fix build01' to re-encrypt the secret. (cached) $ clan select 'clanInternals.machines.x86_64-linux.{build01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{build01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{build01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{build01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{build01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{build01}.config.clan.core.?sops.?defaultGroups' Check results for machine 'build01': Unfixed secret vars: - loki-auth/htpasswd - loki-auth/password - mimir-auth/htpasswd - mimir-auth/password Precaching selectors: - (cached) clanInternals.?secrets.?age.?plugins - (cached) clanInternals.inventoryClass.relativeDirectory - (not cached) clanInternals.machines.x86_64-linux.{build02}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash} - (not cached) clanInternals.machines.x86_64-linux.{build02}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor} - (not cached) clanInternals.machines.x86_64-linux.{build02}.config.clan.core.?sops.?defaultGroups - (not cached) clanInternals.machines.x86_64-linux.{build02}.config.clan.core.vars.settings.publicModule - (not cached) clanInternals.machines.x86_64-linux.{build02}.config.clan.core.vars.settings.secretModule - (not cached) clanInternals.machines.x86_64-linux.{build02}.config.clan.core.vars.?sops.?secretUploadDirectory - (not cached) clanInternals.machines.x86_64-linux.{build02}.config.clan.core.vars.?password-store.?passCommand - (not cached) clanInternals.machines.x86_64-linux.{build02}.config.clan.core.vars.?password-store.?secretLocation - (cached) clanInternals.vars.settings.?recipients - (not cached) clanInternals.machines.x86_64-linux.{build02}.config.clan.core.vars.?age.?secretLocation Loading flake cache from file /build/clan-flake-cache/flakes-v2/bd82dcac4d1089a5be68ea0aaa663f99688576f7 (cached) $ clan select 'clanInternals.machines.x86_64-linux.{build02}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash}' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{build02}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor}' (cached) $ clan select 'clanInternals.machines.x86_64-linux."build02".config.clan.core.vars.settings.publicModule' (cached) $ clan select clanInternals.inventoryClass.relativeDirectory (cached) $ clan select 'clanInternals.machines.x86_64-linux."build02".config.clan.core.vars.settings.secretModule' (cached) $ clan select clanInternals.inventoryClass.relativeDirectory (cached) $ clan select 'clanInternals.machines.x86_64-linux."build02".config.clan.core.vars.settings.secretModule' (cached) $ clan select clanInternals.inventoryClass.relativeDirectory (cached) $ clan select 'clanInternals.machines.x86_64-linux.{build02}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux."build02".config.clan.core.vars.settings.publicModule' (cached) $ clan select clanInternals.inventoryClass.relativeDirectory (cached) $ clan select 'clanInternals.machines.x86_64-linux.{build02}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{build02}.config.clan.core.?sops.?defaultGroups' Check results for machine 'build02': All vars are present and valid. Precaching selectors: - (cached) clanInternals.?secrets.?age.?plugins - (cached) clanInternals.inventoryClass.relativeDirectory - (not cached) clanInternals.machines.x86_64-linux.{build04}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash} - (not cached) clanInternals.machines.x86_64-linux.{build04}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor} - (not cached) clanInternals.machines.x86_64-linux.{build04}.config.clan.core.?sops.?defaultGroups - (not cached) clanInternals.machines.x86_64-linux.{build04}.config.clan.core.vars.settings.publicModule - (not cached) clanInternals.machines.x86_64-linux.{build04}.config.clan.core.vars.settings.secretModule - (not cached) clanInternals.machines.x86_64-linux.{build04}.config.clan.core.vars.?sops.?secretUploadDirectory - (not cached) clanInternals.machines.x86_64-linux.{build04}.config.clan.core.vars.?password-store.?passCommand - (not cached) clanInternals.machines.x86_64-linux.{build04}.config.clan.core.vars.?password-store.?secretLocation - (cached) clanInternals.vars.settings.?recipients - (not cached) clanInternals.machines.x86_64-linux.{build04}.config.clan.core.vars.?age.?secretLocation Loading flake cache from file /build/clan-flake-cache/flakes-v2/bd82dcac4d1089a5be68ea0aaa663f99688576f7 (cached) $ clan select 'clanInternals.machines.x86_64-linux.{build04}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash}' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{build04}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor}' (cached) $ clan select 'clanInternals.machines.x86_64-linux."build04".config.clan.core.vars.settings.publicModule' (cached) $ clan select clanInternals.inventoryClass.relativeDirectory (cached) $ clan select 'clanInternals.machines.x86_64-linux."build04".config.clan.core.vars.settings.secretModule' (cached) $ clan select clanInternals.inventoryClass.relativeDirectory (cached) $ clan select 'clanInternals.machines.x86_64-linux."build04".config.clan.core.vars.settings.secretModule' (cached) $ clan select clanInternals.inventoryClass.relativeDirectory (cached) $ clan select 'clanInternals.machines.x86_64-linux.{build04}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux."build04".config.clan.core.vars.settings.publicModule' (cached) $ clan select clanInternals.inventoryClass.relativeDirectory (cached) $ clan select 'clanInternals.machines.x86_64-linux.{build04}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{build04}.config.clan.core.?sops.?defaultGroups' Check results for machine 'build04': All vars are present and valid. Precaching selectors: - (cached) clanInternals.?secrets.?age.?plugins - (cached) clanInternals.inventoryClass.relativeDirectory - (not cached) clanInternals.machines.x86_64-linux.{monitoring01}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash} - (not cached) clanInternals.machines.x86_64-linux.{monitoring01}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor} - (not cached) clanInternals.machines.x86_64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups - (not cached) clanInternals.machines.x86_64-linux.{monitoring01}.config.clan.core.vars.settings.publicModule - (not cached) clanInternals.machines.x86_64-linux.{monitoring01}.config.clan.core.vars.settings.secretModule - (not cached) clanInternals.machines.x86_64-linux.{monitoring01}.config.clan.core.vars.?sops.?secretUploadDirectory - (not cached) clanInternals.machines.x86_64-linux.{monitoring01}.config.clan.core.vars.?password-store.?passCommand - (not cached) clanInternals.machines.x86_64-linux.{monitoring01}.config.clan.core.vars.?password-store.?secretLocation - (cached) clanInternals.vars.settings.?recipients - (not cached) clanInternals.machines.x86_64-linux.{monitoring01}.config.clan.core.vars.?age.?secretLocation Loading flake cache from file /build/clan-flake-cache/flakes-v2/bd82dcac4d1089a5be68ea0aaa663f99688576f7 (cached) $ clan select 'clanInternals.machines.x86_64-linux.{monitoring01}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash}' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{monitoring01}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor}' (cached) $ clan select 'clanInternals.machines.x86_64-linux."monitoring01".config.clan.core.vars.settings.publicModule' (cached) $ clan select clanInternals.inventoryClass.relativeDirectory (cached) $ clan select 'clanInternals.machines.x86_64-linux."monitoring01".config.clan.core.vars.settings.secretModule' (cached) $ clan select clanInternals.inventoryClass.relativeDirectory (cached) $ clan select 'clanInternals.machines.x86_64-linux."monitoring01".config.clan.core.vars.settings.secretModule' (cached) $ clan select clanInternals.inventoryClass.relativeDirectory (cached) $ clan select 'clanInternals.machines.x86_64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux."monitoring01".config.clan.core.vars.settings.publicModule' (cached) $ clan select clanInternals.inventoryClass.relativeDirectory (cached) $ clan select 'clanInternals.machines.x86_64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups' Ignoring broken symlink /build/self/vars/shared/loki-auth/htpasswd/machines/jitsi01 (cached) $ clan select 'clanInternals.machines.x86_64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups' [monitoring01] Secret var 'htpasswd' for service 'loki-auth' in machine monitoring01 needs update: One or more recipient keys were added to secret shared var 'loki-auth/htpasswd', but it was never re-encrypted. This could have been a malicious actor trying to add their keys, please investigate. Added keys: If this is intended, run 'clan vars fix monitoring01' to re-encrypt the secret. Ignoring broken symlink /build/self/vars/shared/loki-auth/password/machines/jitsi01 (cached) $ clan select 'clanInternals.machines.x86_64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups' [monitoring01] Secret var 'password' for service 'loki-auth' in machine monitoring01 needs update: One or more recipient keys were added to secret shared var 'loki-auth/password', but it was never re-encrypted. This could have been a malicious actor trying to add their keys, please investigate. Added keys: If this is intended, run 'clan vars fix monitoring01' to re-encrypt the secret. Ignoring broken symlink /build/self/vars/shared/mimir-auth/htpasswd/machines/jitsi01 (cached) $ clan select 'clanInternals.machines.x86_64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups' [monitoring01] Secret var 'htpasswd' for service 'mimir-auth' in machine monitoring01 needs update: One or more recipient keys were added to secret shared var 'mimir-auth/htpasswd', but it was never re-encrypted. This could have been a malicious actor trying to add their keys, please investigate. Added keys: If this is intended, run 'clan vars fix monitoring01' to re-encrypt the secret. Ignoring broken symlink /build/self/vars/shared/mimir-auth/password/machines/jitsi01 (cached) $ clan select 'clanInternals.machines.x86_64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups' [monitoring01] Secret var 'password' for service 'mimir-auth' in machine monitoring01 needs update: One or more recipient keys were added to secret shared var 'mimir-auth/password', but it was never re-encrypted. This could have been a malicious actor trying to add their keys, please investigate. Added keys: If this is intended, run 'clan vars fix monitoring01' to re-encrypt the secret. (cached) $ clan select 'clanInternals.machines.x86_64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{monitoring01}.config.clan.core.?sops.?defaultGroups' Check results for machine 'monitoring01': Unfixed secret vars: - loki-auth/htpasswd - loki-auth/password - mimir-auth/htpasswd - mimir-auth/password Precaching selectors: - (cached) clanInternals.?secrets.?age.?plugins - (cached) clanInternals.inventoryClass.relativeDirectory - (not cached) clanInternals.machines.x86_64-linux.{storinator01}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash} - (not cached) clanInternals.machines.x86_64-linux.{storinator01}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor} - (not cached) clanInternals.machines.x86_64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups - (not cached) clanInternals.machines.x86_64-linux.{storinator01}.config.clan.core.vars.settings.publicModule - (not cached) clanInternals.machines.x86_64-linux.{storinator01}.config.clan.core.vars.settings.secretModule - (not cached) clanInternals.machines.x86_64-linux.{storinator01}.config.clan.core.vars.?sops.?secretUploadDirectory - (not cached) clanInternals.machines.x86_64-linux.{storinator01}.config.clan.core.vars.?password-store.?passCommand - (not cached) clanInternals.machines.x86_64-linux.{storinator01}.config.clan.core.vars.?password-store.?secretLocation - (cached) clanInternals.vars.settings.?recipients - (not cached) clanInternals.machines.x86_64-linux.{storinator01}.config.clan.core.vars.?age.?secretLocation Loading flake cache from file /build/clan-flake-cache/flakes-v2/bd82dcac4d1089a5be68ea0aaa663f99688576f7 (cached) $ clan select 'clanInternals.machines.x86_64-linux.{storinator01}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash}' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{storinator01}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor}' (cached) $ clan select 'clanInternals.machines.x86_64-linux."storinator01".config.clan.core.vars.settings.publicModule' (cached) $ clan select clanInternals.inventoryClass.relativeDirectory (cached) $ clan select 'clanInternals.machines.x86_64-linux."storinator01".config.clan.core.vars.settings.secretModule' (cached) $ clan select clanInternals.inventoryClass.relativeDirectory (cached) $ clan select 'clanInternals.machines.x86_64-linux."storinator01".config.clan.core.vars.settings.secretModule' (cached) $ clan select clanInternals.inventoryClass.relativeDirectory (cached) $ clan select 'clanInternals.machines.x86_64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux."storinator01".config.clan.core.vars.settings.publicModule' (cached) $ clan select clanInternals.inventoryClass.relativeDirectory (cached) $ clan select 'clanInternals.machines.x86_64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups' Ignoring broken symlink /build/self/vars/shared/loki-auth/htpasswd/machines/jitsi01 (cached) $ clan select 'clanInternals.machines.x86_64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups' [storinator01] Secret var 'htpasswd' for service 'loki-auth' in machine storinator01 needs update: One or more recipient keys were added to secret shared var 'loki-auth/htpasswd', but it was never re-encrypted. This could have been a malicious actor trying to add their keys, please investigate. Added keys: If this is intended, run 'clan vars fix storinator01' to re-encrypt the secret. Ignoring broken symlink /build/self/vars/shared/loki-auth/password/machines/jitsi01 (cached) $ clan select 'clanInternals.machines.x86_64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups' [storinator01] Secret var 'password' for service 'loki-auth' in machine storinator01 needs update: One or more recipient keys were added to secret shared var 'loki-auth/password', but it was never re-encrypted. This could have been a malicious actor trying to add their keys, please investigate. Added keys: If this is intended, run 'clan vars fix storinator01' to re-encrypt the secret. Ignoring broken symlink /build/self/vars/shared/mimir-auth/htpasswd/machines/jitsi01 (cached) $ clan select 'clanInternals.machines.x86_64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups' [storinator01] Secret var 'htpasswd' for service 'mimir-auth' in machine storinator01 needs update: One or more recipient keys were added to secret shared var 'mimir-auth/htpasswd', but it was never re-encrypted. This could have been a malicious actor trying to add their keys, please investigate. Added keys: If this is intended, run 'clan vars fix storinator01' to re-encrypt the secret. Ignoring broken symlink /build/self/vars/shared/mimir-auth/password/machines/jitsi01 (cached) $ clan select 'clanInternals.machines.x86_64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups' [storinator01] Secret var 'password' for service 'mimir-auth' in machine storinator01 needs update: One or more recipient keys were added to secret shared var 'mimir-auth/password', but it was never re-encrypted. This could have been a malicious actor trying to add their keys, please investigate. Added keys: If this is intended, run 'clan vars fix storinator01' to re-encrypt the secret. (cached) $ clan select 'clanInternals.machines.x86_64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{storinator01}.config.clan.core.?sops.?defaultGroups' Check results for machine 'storinator01': Unfixed secret vars: - loki-auth/htpasswd - loki-auth/password - mimir-auth/htpasswd - mimir-auth/password Precaching selectors: - (cached) clanInternals.?secrets.?age.?plugins - (cached) clanInternals.inventoryClass.relativeDirectory - (not cached) clanInternals.machines.x86_64-linux.{web01}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash} - (not cached) clanInternals.machines.x86_64-linux.{web01}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor} - (not cached) clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups - (not cached) clanInternals.machines.x86_64-linux.{web01}.config.clan.core.vars.settings.publicModule - (not cached) clanInternals.machines.x86_64-linux.{web01}.config.clan.core.vars.settings.secretModule - (not cached) clanInternals.machines.x86_64-linux.{web01}.config.clan.core.vars.?sops.?secretUploadDirectory - (not cached) clanInternals.machines.x86_64-linux.{web01}.config.clan.core.vars.?password-store.?passCommand - (not cached) clanInternals.machines.x86_64-linux.{web01}.config.clan.core.vars.?password-store.?secretLocation - (cached) clanInternals.vars.settings.?recipients - (not cached) clanInternals.machines.x86_64-linux.{web01}.config.clan.core.vars.?age.?secretLocation Loading flake cache from file /build/clan-flake-cache/flakes-v2/bd82dcac4d1089a5be68ea0aaa663f99688576f7 (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash}' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor}' (cached) $ clan select 'clanInternals.machines.x86_64-linux."web01".config.clan.core.vars.settings.publicModule' (cached) $ clan select clanInternals.inventoryClass.relativeDirectory (cached) $ clan select 'clanInternals.machines.x86_64-linux."web01".config.clan.core.vars.settings.secretModule' (cached) $ clan select clanInternals.inventoryClass.relativeDirectory (cached) $ clan select 'clanInternals.machines.x86_64-linux."web01".config.clan.core.vars.settings.secretModule' (cached) $ clan select clanInternals.inventoryClass.relativeDirectory (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux."web01".config.clan.core.vars.settings.publicModule' (cached) $ clan select clanInternals.inventoryClass.relativeDirectory (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' Ignoring broken symlink /build/self/vars/shared/loki-auth/htpasswd/machines/jitsi01 (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' [web01] Secret var 'htpasswd' for service 'loki-auth' in machine web01 needs update: One or more recipient keys were added to secret shared var 'loki-auth/htpasswd', but it was never re-encrypted. This could have been a malicious actor trying to add their keys, please investigate. Added keys: If this is intended, run 'clan vars fix web01' to re-encrypt the secret. Ignoring broken symlink /build/self/vars/shared/loki-auth/password/machines/jitsi01 (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' [web01] Secret var 'password' for service 'loki-auth' in machine web01 needs update: One or more recipient keys were added to secret shared var 'loki-auth/password', but it was never re-encrypted. This could have been a malicious actor trying to add their keys, please investigate. Added keys: If this is intended, run 'clan vars fix web01' to re-encrypt the secret. (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' Ignoring broken symlink /build/self/vars/shared/mimir-auth/htpasswd/machines/jitsi01 (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' [web01] Secret var 'htpasswd' for service 'mimir-auth' in machine web01 needs update: One or more recipient keys were added to secret shared var 'mimir-auth/htpasswd', but it was never re-encrypted. This could have been a malicious actor trying to add their keys, please investigate. Added keys: If this is intended, run 'clan vars fix web01' to re-encrypt the secret. Ignoring broken symlink /build/self/vars/shared/mimir-auth/password/machines/jitsi01 (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' [web01] Secret var 'password' for service 'mimir-auth' in machine web01 needs update: One or more recipient keys were added to secret shared var 'mimir-auth/password', but it was never re-encrypted. This could have been a malicious actor trying to add their keys, please investigate. Added keys: If this is intended, run 'clan vars fix web01' to re-encrypt the secret. (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web01}.config.clan.core.?sops.?defaultGroups' Check results for machine 'web01': Unfixed secret vars: - loki-auth/htpasswd - loki-auth/password - mimir-auth/htpasswd - mimir-auth/password Precaching selectors: - (cached) clanInternals.?secrets.?age.?plugins - (cached) clanInternals.inventoryClass.relativeDirectory - (not cached) clanInternals.machines.x86_64-linux.{web02}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash} - (not cached) clanInternals.machines.x86_64-linux.{web02}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor} - (not cached) clanInternals.machines.x86_64-linux.{web02}.config.clan.core.?sops.?defaultGroups - (not cached) clanInternals.machines.x86_64-linux.{web02}.config.clan.core.vars.settings.publicModule - (not cached) clanInternals.machines.x86_64-linux.{web02}.config.clan.core.vars.settings.secretModule - (not cached) clanInternals.machines.x86_64-linux.{web02}.config.clan.core.vars.?sops.?secretUploadDirectory - (not cached) clanInternals.machines.x86_64-linux.{web02}.config.clan.core.vars.?password-store.?passCommand - (not cached) clanInternals.machines.x86_64-linux.{web02}.config.clan.core.vars.?password-store.?secretLocation - (cached) clanInternals.vars.settings.?recipients - (not cached) clanInternals.machines.x86_64-linux.{web02}.config.clan.core.vars.?age.?secretLocation Loading flake cache from file /build/clan-flake-cache/flakes-v2/bd82dcac4d1089a5be68ea0aaa663f99688576f7 (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web02}.config.clan.core.vars.generators.*.{share,dependencies,prompts,validationHash}' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web02}.config.clan.core.vars.generators.*.files.*.{secret,deploy,owner,group,mode,neededFor}' (cached) $ clan select 'clanInternals.machines.x86_64-linux."web02".config.clan.core.vars.settings.publicModule' (cached) $ clan select clanInternals.inventoryClass.relativeDirectory (cached) $ clan select 'clanInternals.machines.x86_64-linux."web02".config.clan.core.vars.settings.secretModule' (cached) $ clan select clanInternals.inventoryClass.relativeDirectory (cached) $ clan select 'clanInternals.machines.x86_64-linux."web02".config.clan.core.vars.settings.secretModule' (cached) $ clan select clanInternals.inventoryClass.relativeDirectory (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web02}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux."web02".config.clan.core.vars.settings.publicModule' (cached) $ clan select clanInternals.inventoryClass.relativeDirectory (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web02}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web02}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web02}.config.clan.core.?sops.?defaultGroups' Ignoring broken symlink /build/self/vars/shared/loki-auth/htpasswd/machines/jitsi01 (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web02}.config.clan.core.?sops.?defaultGroups' [web02] Secret var 'htpasswd' for service 'loki-auth' in machine web02 needs update: One or more recipient keys were added to secret shared var 'loki-auth/htpasswd', but it was never re-encrypted. This could have been a malicious actor trying to add their keys, please investigate. Added keys: If this is intended, run 'clan vars fix web02' to re-encrypt the secret. Ignoring broken symlink /build/self/vars/shared/loki-auth/password/machines/jitsi01 (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web02}.config.clan.core.?sops.?defaultGroups' [web02] Secret var 'password' for service 'loki-auth' in machine web02 needs update: One or more recipient keys were added to secret shared var 'loki-auth/password', but it was never re-encrypted. This could have been a malicious actor trying to add their keys, please investigate. Added keys: If this is intended, run 'clan vars fix web02' to re-encrypt the secret. (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web02}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web02}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web02}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web02}.config.clan.core.?sops.?defaultGroups' Ignoring broken symlink /build/self/vars/shared/mimir-auth/htpasswd/machines/jitsi01 (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web02}.config.clan.core.?sops.?defaultGroups' [web02] Secret var 'htpasswd' for service 'mimir-auth' in machine web02 needs update: One or more recipient keys were added to secret shared var 'mimir-auth/htpasswd', but it was never re-encrypted. This could have been a malicious actor trying to add their keys, please investigate. Added keys: If this is intended, run 'clan vars fix web02' to re-encrypt the secret. Ignoring broken symlink /build/self/vars/shared/mimir-auth/password/machines/jitsi01 (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web02}.config.clan.core.?sops.?defaultGroups' [web02] Secret var 'password' for service 'mimir-auth' in machine web02 needs update: One or more recipient keys were added to secret shared var 'mimir-auth/password', but it was never re-encrypted. This could have been a malicious actor trying to add their keys, please investigate. Added keys: If this is intended, run 'clan vars fix web02' to re-encrypt the secret. (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web02}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web02}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web02}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web02}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web02}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web02}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web02}.config.clan.core.?sops.?defaultGroups' (cached) $ clan select 'clanInternals.machines.x86_64-linux.{web02}.config.clan.core.?sops.?defaultGroups' Check results for machine 'web02': Unfixed secret vars: - loki-auth/htpasswd - loki-auth/password - mimir-auth/htpasswd - mimir-auth/password + exitHandler + exitCode=1 + set +e + '[' -n '' ']' + (( 1 != 0 )) + runHook failureHook + local hookName=failureHook + shift + local 'hooksSlice=failureHooks[@]' + local hook + for hook in "_callImplicitHook 0 $hookName" ${!hooksSlice+"${!hooksSlice}"} + _logHook failureHook '_callImplicitHook 0 failureHook' + [[ -z 2 ]] + local hookKind=failureHook + local 'hookExpr=_callImplicitHook 0 failureHook' + shift 2 + declare -F '_callImplicitHook 0 failureHook' + type -p '_callImplicitHook 0 failureHook' + [[ _callImplicitHook 0 failureHook != _callImplicitHook* ]] + _eval '_callImplicitHook 0 failureHook' + declare -F '_callImplicitHook 0 failureHook' + eval '_callImplicitHook 0 failureHook' ++ _callImplicitHook 0 failureHook ++ local def=0 ++ local hookName=failureHook ++ declare -F failureHook ++ type -p failureHook ++ '[' -n '' ']' ++ return 0 + return 0 + '[' -n '' ']' + return 1