vars-check-dvt-besu-nimbus
default.checks.x86_64-linux.integration-test-besu-nimbus
· build #99
· raw
1Running vars check using Nix-based executor...2Executing shared generators...3Executing shared generator: dirk-ca4+ set -euo pipefail5+ PATH=/nix/store/zyrxhd7nwmkcs11m144jagxcmddw2i41-openssl-3.6.2-bin/bin:/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin6+ [[ ! -d /etc ]]7+ mkdir -p /etc8+ cat9++ id -g10+ cat11++ id -u12++ id -g13+ cat14+ openssl req -x509 -newkey ec -pkeyopt ec_paramgen_curve:P-256 -keyout /output/ca-key -out /output/ca-cert -days 3650 -nodes -subj /CN=dirk-ca15-----16✓ Generated shared file: dirk-ca/ca-cert17✓ Generated shared file: dirk-ca/ca-key18✓ Shared Generator dirk-ca completed19✓ Shared generators completed20Processing machine: admin21Generator execution order: dirk-client-admin -> state-version -> wireguard-keys22Executing generator: dirk-client-admin23+ set -euo pipefail24+ PATH=/nix/store/zyrxhd7nwmkcs11m144jagxcmddw2i41-openssl-3.6.2-bin/bin:/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin25+ [[ ! -d /etc ]]26+ mkdir -p /etc27+ cat28++ id -g29+ cat30++ id -u31++ id -g32+ cat33+ openssl req -newkey ec -pkeyopt ec_paramgen_curve:P-256 -keyout /output/key -out server.csr -nodes -subj /CN=admin.wg.test.clan -addext subjectAltName=DNS:admin.wg.test.clan34-----35+ openssl x509 -req -in server.csr -CA /input/dirk-ca/ca-cert -CAkey /input/dirk-ca/ca-key -CAcreateserial -out /output/cert -copy_extensions copyall -days 365036Certificate request self-signature ok37subject=CN=admin.wg.test.clan38✓ Generated file: dirk-client-admin/cert39✓ Generated file: dirk-client-admin/key40✓ Generator dirk-client-admin completed41Executing generator: state-version42+ set -euo pipefail43+ PATH=/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin44+ [[ ! -d /etc ]]45+ mkdir -p /etc46+ cat47++ id -g48+ cat49++ id -u50++ id -g51+ cat52+ echo -n 26.1153✓ Generated file: state-version/version54✓ Generator state-version completed55Executing generator: wireguard-keys56+ set -euo pipefail57+ PATH=/nix/store/wwq6srj4ws7ri493a3lwzil7xk9q1jlm-wireguard-tools-1.0.20260223/bin:/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin58+ [[ ! -d /etc ]]59+ mkdir -p /etc60+ cat61++ id -g62+ cat63++ id -u64++ id -g65+ cat66+ wg genkey67Warning: writing to world accessible file.68Consider setting the umask to 077 and trying again.69+ wg pubkey70+ tr -d '\n'71✓ Generated file: wireguard-keys/privatekey72✓ Generated file: wireguard-keys/publickey73✓ Generator wireguard-keys completed74✓ Machine admin completed75Processing machine: ecl-alpha76Generator execution order: ecl-jwt-secret -> ecl-nodekey -> state-version -> wireguard-keys77Executing generator: ecl-jwt-secret78+ set -euo pipefail79+ PATH=/nix/store/zyrxhd7nwmkcs11m144jagxcmddw2i41-openssl-3.6.2-bin/bin:/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin80+ [[ ! -d /etc ]]81+ mkdir -p /etc82+ cat83++ id -g84+ cat85++ id -u86++ id -g87+ cat88+ openssl rand -hex 3289✓ Generated file: ecl-jwt-secret/jwt-secret90✓ Generator ecl-jwt-secret completed91Executing generator: ecl-nodekey92+ set -euo pipefail93+ PATH=/nix/store/f9796zybvcrn0wkq4jasp293bhnswi03-go-ethereum-1.17.3/bin:/nix/store/kgxafhycw2kybbqih759ykc2043qyi5j-gnused-4.9/bin:/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin94+ [[ ! -d /etc ]]95+ mkdir -p /etc96+ cat97++ id -g98+ cat99++ id -u100++ id -g101+ cat102+ devp2p key generate /output/enode.key103+ devp2p key to-enode --ip 0.0.0.0 /output/enode.key104+ sed -E 's|^enode://([0-9a-f]+)@.*|\1|'105+ tr -d '\n'106✓ Generated file: ecl-nodekey/enode.key107✓ Generated file: ecl-nodekey/enode.pub108✓ Generator ecl-nodekey completed109Executing generator: state-version110+ set -euo pipefail111+ PATH=/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin112+ [[ ! -d /etc ]]113+ mkdir -p /etc114+ cat115++ id -g116+ cat117++ id -u118++ id -g119+ cat120+ echo -n 26.11121✓ Generated file: state-version/version122✓ Generator state-version completed123Executing generator: wireguard-keys124+ set -euo pipefail125+ PATH=/nix/store/wwq6srj4ws7ri493a3lwzil7xk9q1jlm-wireguard-tools-1.0.20260223/bin:/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin126+ [[ ! -d /etc ]]127+ mkdir -p /etc128+ cat129++ id -g130+ cat131++ id -u132++ id -g133+ cat134+ wg genkey135Warning: writing to world accessible file.136Consider setting the umask to 077 and trying again.137+ wg pubkey138+ tr -d '\n'139✓ Generated file: wireguard-keys/privatekey140✓ Generated file: wireguard-keys/publickey141✓ Generator wireguard-keys completed142✓ Machine ecl-alpha completed143Processing machine: ecl-bravo144Generator execution order: ecl-jwt-secret -> ecl-nodekey -> state-version -> wireguard-keys145Executing generator: ecl-jwt-secret146+ set -euo pipefail147+ PATH=/nix/store/zyrxhd7nwmkcs11m144jagxcmddw2i41-openssl-3.6.2-bin/bin:/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin148+ [[ ! -d /etc ]]149+ mkdir -p /etc150+ cat151++ id -g152+ cat153++ id -u154++ id -g155+ cat156+ openssl rand -hex 32157✓ Generated file: ecl-jwt-secret/jwt-secret158✓ Generator ecl-jwt-secret completed159Executing generator: ecl-nodekey160+ set -euo pipefail161+ PATH=/nix/store/f9796zybvcrn0wkq4jasp293bhnswi03-go-ethereum-1.17.3/bin:/nix/store/kgxafhycw2kybbqih759ykc2043qyi5j-gnused-4.9/bin:/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin162+ [[ ! -d /etc ]]163+ mkdir -p /etc164+ cat165++ id -g166+ cat167++ id -u168++ id -g169+ cat170+ devp2p key generate /output/enode.key171+ devp2p key to-enode --ip 0.0.0.0 /output/enode.key172+ sed -E 's|^enode://([0-9a-f]+)@.*|\1|'173+ tr -d '\n'174✓ Generated file: ecl-nodekey/enode.key175✓ Generated file: ecl-nodekey/enode.pub176✓ Generator ecl-nodekey completed177Executing generator: state-version178+ set -euo pipefail179+ PATH=/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin180+ [[ ! -d /etc ]]181+ mkdir -p /etc182+ cat183++ id -g184+ cat185++ id -u186++ id -g187+ cat188+ echo -n 26.11189✓ Generated file: state-version/version190✓ Generator state-version completed191Executing generator: wireguard-keys192+ set -euo pipefail193+ PATH=/nix/store/wwq6srj4ws7ri493a3lwzil7xk9q1jlm-wireguard-tools-1.0.20260223/bin:/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin194+ [[ ! -d /etc ]]195+ mkdir -p /etc196+ cat197++ id -g198+ cat199++ id -u200++ id -g201+ cat202+ wg genkey203Warning: writing to world accessible file.204Consider setting the umask to 077 and trying again.205+ wg pubkey206+ tr -d '\n'207✓ Generated file: wireguard-keys/privatekey208✓ Generated file: wireguard-keys/publickey209✓ Generator wireguard-keys completed210✓ Machine ecl-bravo completed211Processing machine: ecl-charlie212Generator execution order: ecl-jwt-secret -> ecl-nodekey -> state-version -> wireguard-keys213Executing generator: ecl-jwt-secret214+ set -euo pipefail215+ PATH=/nix/store/zyrxhd7nwmkcs11m144jagxcmddw2i41-openssl-3.6.2-bin/bin:/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin216+ [[ ! -d /etc ]]217+ mkdir -p /etc218+ cat219++ id -g220+ cat221++ id -u222++ id -g223+ cat224+ openssl rand -hex 32225✓ Generated file: ecl-jwt-secret/jwt-secret226✓ Generator ecl-jwt-secret completed227Executing generator: ecl-nodekey228+ set -euo pipefail229+ PATH=/nix/store/f9796zybvcrn0wkq4jasp293bhnswi03-go-ethereum-1.17.3/bin:/nix/store/kgxafhycw2kybbqih759ykc2043qyi5j-gnused-4.9/bin:/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin230+ [[ ! -d /etc ]]231+ mkdir -p /etc232+ cat233++ id -g234+ cat235++ id -u236++ id -g237+ cat238+ devp2p key generate /output/enode.key239+ devp2p key to-enode --ip 0.0.0.0 /output/enode.key240+ sed -E 's|^enode://([0-9a-f]+)@.*|\1|'241+ tr -d '\n'242✓ Generated file: ecl-nodekey/enode.key243✓ Generated file: ecl-nodekey/enode.pub244✓ Generator ecl-nodekey completed245Executing generator: state-version246+ set -euo pipefail247+ PATH=/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin248+ [[ ! -d /etc ]]249+ mkdir -p /etc250+ cat251++ id -g252+ cat253++ id -u254++ id -g255+ cat256+ echo -n 26.11257✓ Generated file: state-version/version258✓ Generator state-version completed259Executing generator: wireguard-keys260+ set -euo pipefail261+ PATH=/nix/store/wwq6srj4ws7ri493a3lwzil7xk9q1jlm-wireguard-tools-1.0.20260223/bin:/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin262+ [[ ! -d /etc ]]263+ mkdir -p /etc264+ cat265++ id -g266+ cat267++ id -u268++ id -g269+ cat270+ wg genkey271Warning: writing to world accessible file.272Consider setting the umask to 077 and trying again.273+ wg pubkey274+ tr -d '\n'275✓ Generated file: wireguard-keys/privatekey276✓ Generated file: wireguard-keys/publickey277✓ Generator wireguard-keys completed278✓ Machine ecl-charlie completed279Processing machine: monitor-alpha280Generator execution order: state-version -> wireguard-keys281Executing generator: state-version282+ set -euo pipefail283+ PATH=/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin284+ [[ ! -d /etc ]]285+ mkdir -p /etc286+ cat287++ id -g288+ cat289++ id -u290++ id -g291+ cat292+ echo -n 26.11293✓ Generated file: state-version/version294✓ Generator state-version completed295Executing generator: wireguard-keys296+ set -euo pipefail297+ PATH=/nix/store/wwq6srj4ws7ri493a3lwzil7xk9q1jlm-wireguard-tools-1.0.20260223/bin:/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin298+ [[ ! -d /etc ]]299+ mkdir -p /etc300+ cat301++ id -g302+ cat303++ id -u304++ id -g305+ cat306+ wg genkey307Warning: writing to world accessible file.308Consider setting the umask to 077 and trying again.309+ wg pubkey310+ tr -d '\n'311✓ Generated file: wireguard-keys/privatekey312✓ Generated file: wireguard-keys/publickey313✓ Generator wireguard-keys completed314✓ Machine monitor-alpha completed315Processing machine: monitor-bravo316Generator execution order: state-version -> wireguard-keys317Executing generator: state-version318+ set -euo pipefail319+ PATH=/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin320+ [[ ! -d /etc ]]321+ mkdir -p /etc322+ cat323++ id -g324+ cat325++ id -u326++ id -g327+ cat328+ echo -n 26.11329✓ Generated file: state-version/version330✓ Generator state-version completed331Executing generator: wireguard-keys332+ set -euo pipefail333+ PATH=/nix/store/wwq6srj4ws7ri493a3lwzil7xk9q1jlm-wireguard-tools-1.0.20260223/bin:/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin334+ [[ ! -d /etc ]]335+ mkdir -p /etc336+ cat337++ id -g338+ cat339++ id -u340++ id -g341+ cat342+ wg genkey343Warning: writing to world accessible file.344Consider setting the umask to 077 and trying again.345+ wg pubkey346+ tr -d '\n'347✓ Generated file: wireguard-keys/privatekey348✓ Generated file: wireguard-keys/publickey349✓ Generator wireguard-keys completed350✓ Machine monitor-bravo completed351Processing machine: signer-alpha352Generator execution order: dirk-server-cert -> dirk-server-unlocker -> state-version -> wireguard-keys353Executing generator: dirk-server-cert354+ set -euo pipefail355+ PATH=/nix/store/zyrxhd7nwmkcs11m144jagxcmddw2i41-openssl-3.6.2-bin/bin:/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin356+ [[ ! -d /etc ]]357+ mkdir -p /etc358+ cat359++ id -g360+ cat361++ id -u362++ id -g363+ cat364+ openssl req -newkey ec -pkeyopt ec_paramgen_curve:P-256 -keyout /output/key -out server.csr -nodes -subj /CN=signer-alpha.wg.test.clan -addext subjectAltName=DNS:signer-alpha.wg.test.clan365-----366+ openssl x509 -req -in server.csr -CA /input/dirk-ca/ca-cert -CAkey /input/dirk-ca/ca-key -CAcreateserial -out /output/cert -copy_extensions copyall -days 3650367Certificate request self-signature ok368subject=CN=signer-alpha.wg.test.clan369✓ Generated file: dirk-server-cert/cert370✓ Generated file: dirk-server-cert/key371✓ Generator dirk-server-cert completed372Executing generator: dirk-server-unlocker373+ set -euo pipefail374+ PATH=/nix/store/zyrxhd7nwmkcs11m144jagxcmddw2i41-openssl-3.6.2-bin/bin:/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin375+ [[ ! -d /etc ]]376+ mkdir -p /etc377+ cat378++ id -g379+ cat380++ id -u381++ id -g382+ cat383+ openssl rand -hex 32384+ openssl rand -hex 32385✓ Generated file: dirk-server-unlocker/account-passphrase386✓ Generated file: dirk-server-unlocker/wallet-passphrase387✓ Generator dirk-server-unlocker completed388Executing generator: state-version389+ set -euo pipefail390+ PATH=/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin391+ [[ ! -d /etc ]]392+ mkdir -p /etc393+ cat394++ id -g395+ cat396++ id -u397++ id -g398+ cat399+ echo -n 26.11400✓ Generated file: state-version/version401✓ Generator state-version completed402Executing generator: wireguard-keys403+ set -euo pipefail404+ PATH=/nix/store/wwq6srj4ws7ri493a3lwzil7xk9q1jlm-wireguard-tools-1.0.20260223/bin:/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin405+ [[ ! -d /etc ]]406+ mkdir -p /etc407+ cat408++ id -g409+ cat410++ id -u411++ id -g412+ cat413+ wg genkey414Warning: writing to world accessible file.415Consider setting the umask to 077 and trying again.416+ wg pubkey417+ tr -d '\n'418✓ Generated file: wireguard-keys/privatekey419✓ Generated file: wireguard-keys/publickey420✓ Generator wireguard-keys completed421✓ Machine signer-alpha completed422Processing machine: signer-bravo423Generator execution order: dirk-server-cert -> dirk-server-unlocker -> state-version -> wireguard-keys424Executing generator: dirk-server-cert425+ set -euo pipefail426+ PATH=/nix/store/zyrxhd7nwmkcs11m144jagxcmddw2i41-openssl-3.6.2-bin/bin:/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin427+ [[ ! -d /etc ]]428+ mkdir -p /etc429+ cat430++ id -g431+ cat432++ id -u433++ id -g434+ cat435+ openssl req -newkey ec -pkeyopt ec_paramgen_curve:P-256 -keyout /output/key -out server.csr -nodes -subj /CN=signer-bravo.wg.test.clan -addext subjectAltName=DNS:signer-bravo.wg.test.clan436-----437+ openssl x509 -req -in server.csr -CA /input/dirk-ca/ca-cert -CAkey /input/dirk-ca/ca-key -CAcreateserial -out /output/cert -copy_extensions copyall -days 3650438Certificate request self-signature ok439subject=CN=signer-bravo.wg.test.clan440✓ Generated file: dirk-server-cert/cert441✓ Generated file: dirk-server-cert/key442✓ Generator dirk-server-cert completed443Executing generator: dirk-server-unlocker444+ set -euo pipefail445+ PATH=/nix/store/zyrxhd7nwmkcs11m144jagxcmddw2i41-openssl-3.6.2-bin/bin:/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin446+ [[ ! -d /etc ]]447+ mkdir -p /etc448+ cat449++ id -g450+ cat451++ id -u452++ id -g453+ cat454+ openssl rand -hex 32455+ openssl rand -hex 32456✓ Generated file: dirk-server-unlocker/account-passphrase457✓ Generated file: dirk-server-unlocker/wallet-passphrase458✓ Generator dirk-server-unlocker completed459Executing generator: state-version460+ set -euo pipefail461+ PATH=/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin462+ [[ ! -d /etc ]]463+ mkdir -p /etc464+ cat465++ id -g466+ cat467++ id -u468++ id -g469+ cat470+ echo -n 26.11471✓ Generated file: state-version/version472✓ Generator state-version completed473Executing generator: wireguard-keys474+ set -euo pipefail475+ PATH=/nix/store/wwq6srj4ws7ri493a3lwzil7xk9q1jlm-wireguard-tools-1.0.20260223/bin:/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin476+ [[ ! -d /etc ]]477+ mkdir -p /etc478+ cat479++ id -g480+ cat481++ id -u482++ id -g483+ cat484+ wg genkey485Warning: writing to world accessible file.486Consider setting the umask to 077 and trying again.487+ wg pubkey488+ tr -d '\n'489✓ Generated file: wireguard-keys/privatekey490✓ Generated file: wireguard-keys/publickey491✓ Generator wireguard-keys completed492✓ Machine signer-bravo completed493Processing machine: signer-charlie494Generator execution order: dirk-server-cert -> dirk-server-unlocker -> state-version -> wireguard-keys495Executing generator: dirk-server-cert496+ set -euo pipefail497+ PATH=/nix/store/zyrxhd7nwmkcs11m144jagxcmddw2i41-openssl-3.6.2-bin/bin:/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin498+ [[ ! -d /etc ]]499+ mkdir -p /etc500+ cat501++ id -g502+ cat503++ id -u504++ id -g505+ cat506+ openssl req -newkey ec -pkeyopt ec_paramgen_curve:P-256 -keyout /output/key -out server.csr -nodes -subj /CN=signer-charlie.wg.test.clan -addext subjectAltName=DNS:signer-charlie.wg.test.clan507-----508+ openssl x509 -req -in server.csr -CA /input/dirk-ca/ca-cert -CAkey /input/dirk-ca/ca-key -CAcreateserial -out /output/cert -copy_extensions copyall -days 3650509Certificate request self-signature ok510subject=CN=signer-charlie.wg.test.clan511✓ Generated file: dirk-server-cert/cert512✓ Generated file: dirk-server-cert/key513✓ Generator dirk-server-cert completed514Executing generator: dirk-server-unlocker515+ set -euo pipefail516+ PATH=/nix/store/zyrxhd7nwmkcs11m144jagxcmddw2i41-openssl-3.6.2-bin/bin:/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin517+ [[ ! -d /etc ]]518+ mkdir -p /etc519+ cat520++ id -g521+ cat522++ id -u523++ id -g524+ cat525+ openssl rand -hex 32526+ openssl rand -hex 32527✓ Generated file: dirk-server-unlocker/account-passphrase528✓ Generated file: dirk-server-unlocker/wallet-passphrase529✓ Generator dirk-server-unlocker completed530Executing generator: state-version531+ set -euo pipefail532+ PATH=/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin533+ [[ ! -d /etc ]]534+ mkdir -p /etc535+ cat536++ id -g537+ cat538++ id -u539++ id -g540+ cat541+ echo -n 26.11542✓ Generated file: state-version/version543✓ Generator state-version completed544Executing generator: wireguard-keys545+ set -euo pipefail546+ PATH=/nix/store/wwq6srj4ws7ri493a3lwzil7xk9q1jlm-wireguard-tools-1.0.20260223/bin:/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin547+ [[ ! -d /etc ]]548+ mkdir -p /etc549+ cat550++ id -g551+ cat552++ id -u553++ id -g554+ cat555+ wg genkey556Warning: writing to world accessible file.557Consider setting the umask to 077 and trying again.558+ wg pubkey559+ tr -d '\n'560✓ Generated file: wireguard-keys/privatekey561✓ Generated file: wireguard-keys/publickey562✓ Generator wireguard-keys completed563✓ Machine signer-charlie completed564Processing machine: validator-alpha565Generator execution order: dirk-client-validator-alpha -> state-version -> wireguard-keys566Executing generator: dirk-client-validator-alpha567+ set -euo pipefail568+ PATH=/nix/store/zyrxhd7nwmkcs11m144jagxcmddw2i41-openssl-3.6.2-bin/bin:/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin569+ [[ ! -d /etc ]]570+ mkdir -p /etc571+ cat572++ id -g573+ cat574++ id -u575++ id -g576+ cat577+ openssl req -newkey ec -pkeyopt ec_paramgen_curve:P-256 -keyout /output/key -out server.csr -nodes -subj /CN=validator-alpha.wg.test.clan -addext subjectAltName=DNS:validator-alpha.wg.test.clan578-----579+ openssl x509 -req -in server.csr -CA /input/dirk-ca/ca-cert -CAkey /input/dirk-ca/ca-key -CAcreateserial -out /output/cert -copy_extensions copyall -days 3650580Certificate request self-signature ok581subject=CN=validator-alpha.wg.test.clan582✓ Generated file: dirk-client-validator-alpha/cert583✓ Generated file: dirk-client-validator-alpha/key584✓ Generator dirk-client-validator-alpha completed585Executing generator: state-version586+ set -euo pipefail587+ PATH=/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin588+ [[ ! -d /etc ]]589+ mkdir -p /etc590+ cat591++ id -g592+ cat593++ id -u594++ id -g595+ cat596+ echo -n 26.11597✓ Generated file: state-version/version598✓ Generator state-version completed599Executing generator: wireguard-keys600+ set -euo pipefail601+ PATH=/nix/store/wwq6srj4ws7ri493a3lwzil7xk9q1jlm-wireguard-tools-1.0.20260223/bin:/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin602+ [[ ! -d /etc ]]603+ mkdir -p /etc604+ cat605++ id -g606+ cat607++ id -u608++ id -g609+ cat610+ wg genkey611Warning: writing to world accessible file.612Consider setting the umask to 077 and trying again.613+ wg pubkey614+ tr -d '\n'615✓ Generated file: wireguard-keys/privatekey616✓ Generated file: wireguard-keys/publickey617✓ Generator wireguard-keys completed618✓ Machine validator-alpha completed619Processing machine: validator-bravo620Generator execution order: dirk-client-validator-bravo -> state-version -> wireguard-keys621Executing generator: dirk-client-validator-bravo622+ set -euo pipefail623+ PATH=/nix/store/zyrxhd7nwmkcs11m144jagxcmddw2i41-openssl-3.6.2-bin/bin:/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin624+ [[ ! -d /etc ]]625+ mkdir -p /etc626+ cat627++ id -g628+ cat629++ id -u630++ id -g631+ cat632+ openssl req -newkey ec -pkeyopt ec_paramgen_curve:P-256 -keyout /output/key -out server.csr -nodes -subj /CN=validator-bravo.wg.test.clan -addext subjectAltName=DNS:validator-bravo.wg.test.clan633-----634+ openssl x509 -req -in server.csr -CA /input/dirk-ca/ca-cert -CAkey /input/dirk-ca/ca-key -CAcreateserial -out /output/cert -copy_extensions copyall -days 3650635Certificate request self-signature ok636subject=CN=validator-bravo.wg.test.clan637✓ Generated file: dirk-client-validator-bravo/cert638✓ Generated file: dirk-client-validator-bravo/key639✓ Generator dirk-client-validator-bravo completed640Executing generator: state-version641+ set -euo pipefail642+ PATH=/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin643+ [[ ! -d /etc ]]644+ mkdir -p /etc645+ cat646++ id -g647+ cat648++ id -u649++ id -g650+ cat651+ echo -n 26.11652✓ Generated file: state-version/version653✓ Generator state-version completed654Executing generator: wireguard-keys655+ set -euo pipefail656+ PATH=/nix/store/wwq6srj4ws7ri493a3lwzil7xk9q1jlm-wireguard-tools-1.0.20260223/bin:/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin657+ [[ ! -d /etc ]]658+ mkdir -p /etc659+ cat660++ id -g661+ cat662++ id -u663++ id -g664+ cat665+ wg genkey666Warning: writing to world accessible file.667Consider setting the umask to 077 and trying again.668+ wg pubkey669+ tr -d '\n'670✓ Generated file: wireguard-keys/privatekey671✓ Generated file: wireguard-keys/publickey672✓ Generator wireguard-keys completed673✓ Machine validator-bravo completed674Processing machine: validator-charlie675Generator execution order: dirk-client-validator-charlie -> state-version -> wireguard-keys676Executing generator: dirk-client-validator-charlie677+ set -euo pipefail678+ PATH=/nix/store/zyrxhd7nwmkcs11m144jagxcmddw2i41-openssl-3.6.2-bin/bin:/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin679+ [[ ! -d /etc ]]680+ mkdir -p /etc681+ cat682++ id -g683+ cat684++ id -u685++ id -g686+ cat687+ openssl req -newkey ec -pkeyopt ec_paramgen_curve:P-256 -keyout /output/key -out server.csr -nodes -subj /CN=validator-charlie.wg.test.clan -addext subjectAltName=DNS:validator-charlie.wg.test.clan688-----689+ openssl x509 -req -in server.csr -CA /input/dirk-ca/ca-cert -CAkey /input/dirk-ca/ca-key -CAcreateserial -out /output/cert -copy_extensions copyall -days 3650690Certificate request self-signature ok691subject=CN=validator-charlie.wg.test.clan692✓ Generated file: dirk-client-validator-charlie/cert693✓ Generated file: dirk-client-validator-charlie/key694✓ Generator dirk-client-validator-charlie completed695Executing generator: state-version696+ set -euo pipefail697+ PATH=/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin698+ [[ ! -d /etc ]]699+ mkdir -p /etc700+ cat701++ id -g702+ cat703++ id -u704++ id -g705+ cat706+ echo -n 26.11707✓ Generated file: state-version/version708✓ Generator state-version completed709Executing generator: wireguard-keys710+ set -euo pipefail711+ PATH=/nix/store/wwq6srj4ws7ri493a3lwzil7xk9q1jlm-wireguard-tools-1.0.20260223/bin:/nix/store/9ypz3flqsrl5xl495mm8h645gadjsxi1-coreutils-9.11/bin712+ [[ ! -d /etc ]]713+ mkdir -p /etc714+ cat715++ id -g716+ cat717++ id -u718++ id -g719+ cat720+ wg genkey721Warning: writing to world accessible file.722Consider setting the umask to 077 and trying again.723+ wg pubkey724+ tr -d '\n'725✓ Generated file: wireguard-keys/privatekey726✓ Generated file: wireguard-keys/publickey727✓ Generator wireguard-keys completed728✓ Machine validator-charlie completed729✓ All vars checks completed successfully