tribuchet: building on jamie Machine state will be reset. To keep it, pass --keep-machine-state start all VLans (finished: start all VLans, in 0.00 seconds) Initializing machine ID from random generator. Test will time out and terminate in 3600.0 seconds run the VM test script start all VMs agent: systemd-nspawn running (pid 52) client: systemd-nspawn running (pid 53) agent: Waiting for journal at /build/vm-state-agent/var/log/journal... relay: systemd-nspawn running (pid 54) client: Waiting for journal at /build/vm-state-client/var/log/journal... relay: Waiting for journal at /build/vm-state-relay/var/log/journal... (finished: start all VMs, in 0.00 seconds) relay: waiting for unit flakelet-relay.service nixos-nspawn(agent): TAP vde-tap1 not found; container will be isolated from VDE nixos-nspawn(agent): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths. nixos-nspawn(client): TAP vde-tap1 not found; container will be isolated from VDE nixos-nspawn(client): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths. nixos-nspawn(relay): TAP vde-tap1 not found; container will be isolated from VDE nixos-nspawn(relay): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths. Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file. Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file. Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file. ░ Spawning container agent on /build/vm-state-agent. ░ Spawning container relay on /build/vm-state-relay. ░ Spawning container client on /build/vm-state-client. relay # [ 3716.893399] relay systemd-journald[57]: Journal started agent # [ 3716.894194] agent systemd-journald[57]: Journal started client # [ 3716.886221] client systemd-journald[57]: Journal started agent # [ 3716.894232] agent systemd-journald[57]: Runtime Journal (/run/log/journal/6e43e956ed784755bfd29502a5339493) is 8M, max 4G, 3.9G free. relay # [ 3716.893439] relay systemd-journald[57]: Runtime Journal (/run/log/journal/1aea0a520ea04aa59ea9abfa0dc31478) is 8M, max 4G, 3.9G free. client # [ 3716.886262] client systemd-journald[57]: Runtime Journal (/run/log/journal/09bf0c65066b4655b8e83f90a846744a) is 8M, max 4G, 3.9G free. relay # [ 3716.904850] relay systemd[1]: Finished Apply Kernel Variables. client # [ 3716.897545] client systemd[1]: Finished Apply Kernel Variables. relay # [ 3716.916908] relay systemd[1]: Finished Create Static Device Nodes in /dev gracefully. client # [ 3716.909452] client systemd[1]: Finished Create Static Device Nodes in /dev gracefully. relay # [ 3716.948946] relay systemd[1]: Starting Flush Journal to Persistent Storage... agent # [ 3716.905915] agent systemd[1]: Finished Apply Kernel Variables. client # [ 3716.923030] client systemd[1]: Starting Flush Journal to Persistent Storage... relay # [ 3716.949593] relay systemd[1]: Starting Create Static Device Nodes in /dev... agent # [ 3716.917901] agent systemd[1]: Finished Create Static Device Nodes in /dev gracefully. relay # [ 3716.963077] relay systemd-journald[57]: Time spent on flushing to /var/log/journal/1aea0a520ea04aa59ea9abfa0dc31478 is 1.355ms for 6 entries. agent # [ 3716.948746] agent systemd[1]: Starting Flush Journal to Persistent Storage... relay # [ 3716.963077] relay systemd-journald[57]: System Journal (/var/log/journal/1aea0a520ea04aa59ea9abfa0dc31478) is 512B, max 4G, 3.9G free. agent # [ 3716.949616] agent systemd[1]: Starting Create Static Device Nodes in /dev... relay # [ 3716.969637] relay systemd[1]: Finished Create Static Device Nodes in /dev. agent # [ 3716.961667] agent systemd-journald[57]: Time spent on flushing to /var/log/journal/6e43e956ed784755bfd29502a5339493 is 1.521ms for 6 entries. relay # [ 3716.970372] relay systemd[1]: Reached target Preparation for Local File Systems. agent # [ 3716.961667] agent systemd-journald[57]: System Journal (/var/log/journal/6e43e956ed784755bfd29502a5339493) is 512B, max 4G, 3.9G free. relay # [ 3716.970482] relay systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys agent # [ 3716.969942] agent systemd[1]: Finished Create Static Device Nodes in /dev. relay # [ 3716.986847] relay systemd[1]: Finished Flush Journal to Persistent Storage. agent # [ 3716.970576] agent systemd[1]: Reached target Preparation for Local File Systems. client # [ 3716.923891] client systemd[1]: Starting Create Static Device Nodes in /dev... agent # [ 3716.970679] agent systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys client # [ 3716.954252] client systemd-journald[57]: Time spent on flushing to /var/log/journal/09bf0c65066b4655b8e83f90a846744a is 1.598ms for 6 entries. agent # [ 3716.984255] agent systemd[1]: Finished Flush Journal to Persistent Storage. client # [ 3716.954252] client systemd-journald[57]: System Journal (/var/log/journal/09bf0c65066b4655b8e83f90a846744a) is 512B, max 4G, 3.9G free. client # [ 3716.967823] client systemd[1]: Finished Create Static Device Nodes in /dev. client # [ 3716.968599] client systemd[1]: Reached target Preparation for Local File Systems. client # [ 3716.968713] client systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys client # [ 3716.975814] client systemd[1]: Finished Flush Journal to Persistent Storage. agent # [ 3717.057845] agent systemd[1]: Finished Firewall. client # [ 3717.049933] client systemd[1]: Finished Firewall. relay # [ 3717.067432] relay systemd[1]: Finished Firewall. agent # [ 3717.921782] agent systemd[1]: Mounting /run/wrappers... agent # [ 3717.954032] agent systemd[1]: Mounted /run/wrappers. agent # [ 3717.955153] agent systemd[1]: Reached target Local File Systems. agent # [ 3717.956486] agent systemd[1]: Listening on Boot Loader Control Service Socket. agent # [ 3717.957779] agent systemd[1]: Starting Create SUID/SGID Wrappers... agent # [ 3717.957827] agent systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container agent # [ 3717.958913] agent systemd[1]: Starting Save Transient machine-id to Disk... agent # [ 3717.960239] agent systemd[1]: Starting Create System Files and Directories... agent # [ 3717.977312] agent systemd-tmpfiles[161]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted agent # [ 3717.977751] agent systemd-tmpfiles[161]: fchmod() of /var/log/journal failed: Operation not permitted agent # [ 3717.978100] agent systemd-tmpfiles[161]: fchmod() of /var/log/journal/6e43e956ed784755bfd29502a5339493 failed: Operation not permitted relay # [ 3717.893879] relay systemd[1]: Mounting /run/wrappers... relay # [ 3717.953598] relay systemd[1]: Mounted /run/wrappers. relay # [ 3717.954652] relay systemd[1]: Reached target Local File Systems. relay # [ 3717.955860] relay systemd[1]: Listening on Boot Loader Control Service Socket. relay # [ 3717.957369] relay systemd[1]: Starting Create SUID/SGID Wrappers... relay # [ 3717.957414] relay systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container agent # [ 3717.978461] agent systemd-tmpfiles[161]: fchmod() of /run/log/journal failed: Operation not permitted relay # [ 3717.958757] relay systemd[1]: Starting Save Transient machine-id to Disk... relay # [ 3717.959802] relay systemd[1]: Starting Create System Files and Directories... relay # [ 3717.977662] relay systemd-tmpfiles[169]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted relay # [ 3717.978124] relay systemd-tmpfiles[169]: fchmod() of /var/log/journal failed: Operation not permitted relay # [ 3717.978437] relay systemd-tmpfiles[169]: fchmod() of /var/log/journal/1aea0a520ea04aa59ea9abfa0dc31478 failed: Operation not permitted relay # [ 3717.978800] relay systemd-tmpfiles[169]: fchmod() of /run/log/journal failed: Operation not permitted client # [ 3717.921645] client systemd[1]: Mounting /run/wrappers... client # [ 3717.958559] client systemd[1]: Mounted /run/wrappers. client # [ 3717.959768] client systemd[1]: Reached target Local File Systems. client # [ 3717.961128] client systemd[1]: Listening on Boot Loader Control Service Socket. client # [ 3717.962517] client systemd[1]: Starting Create SUID/SGID Wrappers... client # [ 3717.962567] client systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container client # [ 3717.963517] client systemd[1]: Starting Save Transient machine-id to Disk... client # [ 3717.964510] client systemd[1]: Starting Create System Files and Directories... client # [ 3717.983175] client systemd-tmpfiles[161]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted client # [ 3717.983610] client systemd-tmpfiles[161]: fchmod() of /var/log/journal failed: Operation not permitted client # [ 3717.983915] client suid-sgid-wrappers-start[168]: chmod: changing permissions of '/run/wrappers/wrappers.ugLmVRe5W9/chsh': Operation not permitted client # [ 3717.983923] client systemd-tmpfiles[161]: fchmod() of /var/log/journal/09bf0c65066b4655b8e83f90a846744a failed: Operation not permitted client # [ 3717.984268] client systemd-tmpfiles[161]: fchmod() of /run/log/journal failed: Operation not permitted relay # [ 3717.979381] relay suid-sgid-wrappers-start[176]: chmod: changing permissions of '/run/wrappers/wrappers.VSFL0PUOMS/chsh': Operation not permitted relay # [ 3717.986280] relay systemd[1]: suid-sgid-wrappers.service: Main process exited, code=exited, status=1/FAILURE relay # [ 3717.986374] relay systemd[1]: suid-sgid-wrappers.service: Failed with result 'exit-code'. relay # [ 3717.986585] relay systemd[1]: Failed to start Create SUID/SGID Wrappers. relay # [ 3717.987047] relay systemd[1]: Finished Create System Files and Directories. relay # [ 3718.001694] relay systemd[1]: Starting Rebuild Journal Catalog... relay # [ 3718.002418] relay systemd[1]: Starting Record System Boot/Shutdown in UTMP... relay # [ 3718.043030] relay systemd[1]: Finished Record System Boot/Shutdown in UTMP. relay # [ 3718.051064] relay systemd[1]: Finished Rebuild Journal Catalog. relay # [ 3718.052687] relay systemd[1]: Starting Update is Completed... relay # [ 3718.061235] relay systemd[1]: Finished Update is Completed. relay # [ 3718.061454] relay systemd[1]: Reached target System Initialization. relay # [ 3718.061563] relay systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container relay # [ 3718.061612] relay systemd[1]: Started Daily Cleanup of Temporary Directories. relay # [ 3718.061642] relay systemd[1]: Reached target Timer Units. relay # [ 3718.061917] relay systemd[1]: Listening on D-Bus System Message Bus Socket. relay # [ 3718.062223] relay systemd[1]: Listening on Nix Daemon Socket. relay # [ 3718.062398] relay systemd[1]: Listening on Virtual Machine and Container Registration Service Socket. relay # [ 3718.062429] relay systemd[1]: Reached target Socket Units. relay # [ 3718.062481] relay systemd[1]: Reached target Basic System. relay # [ 3718.064397] relay systemd[1]: Started device-mock.service. relay # [ 3718.065617] relay systemd[1]: Starting Re-link flakelet services at boot... relay # [ 3718.066635] relay systemd[1]: Starting Import lastlog data into lastlog2 database... relay # [ 3718.067952] relay systemd[1]: Starting Name Service Cache Daemon (nsncd)... relay # [ 3718.068909] relay systemd[1]: Starting resolvconf update... relay # [ 3718.079103] relay systemd[1]: Finished Re-link flakelet services at boot. relay # [ 3718.080320] relay systemd[1]: Starting Reconcile flakelet services with the host configuration... relay # [ 3718.085591] relay systemd[1]: Finished Import lastlog data into lastlog2 database. client # [ 3717.992415] client systemd[1]: suid-sgid-wrappers.service: Main process exited, code=exited, status=1/FAILURE client # [ 3717.992454] client systemd[1]: suid-sgid-wrappers.service: Failed with result 'exit-code'. client # [ 3717.992507] client systemd[1]: Failed to start Create SUID/SGID Wrappers. client # [ 3717.993105] client systemd[1]: Finished Create System Files and Directories. client # [ 3718.033787] client systemd[1]: Starting Rebuild Journal Catalog... client # [ 3718.034611] client systemd[1]: Starting Record System Boot/Shutdown in UTMP... client # [ 3718.047070] client systemd[1]: Finished Record System Boot/Shutdown in UTMP. client # [ 3718.052321] client systemd[1]: Finished Rebuild Journal Catalog. client # [ 3718.053329] client systemd[1]: Starting Update is Completed... client # [ 3718.063462] client systemd[1]: Finished Update is Completed. client # [ 3718.063601] client systemd[1]: Reached target System Initialization. client # [ 3718.063664] client systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container client # [ 3718.063689] client systemd[1]: Started Daily Cleanup of Temporary Directories. client # [ 3718.063703] client systemd[1]: Reached target Timer Units. client # [ 3718.063951] client systemd[1]: Listening on D-Bus System Message Bus Socket. client # [ 3718.064145] client systemd[1]: Listening on Nix Daemon Socket. client # [ 3718.064250] client systemd[1]: Listening on Virtual Machine and Container Registration Service Socket. client # [ 3718.064262] client systemd[1]: Reached target Socket Units. client # [ 3718.064295] client systemd[1]: Reached target Basic System. client # [ 3718.065455] client systemd[1]: Starting Import lastlog data into lastlog2 database... client # [ 3718.066309] client systemd[1]: Starting Name Service Cache Daemon (nsncd)... client # [ 3718.067068] client systemd[1]: Starting resolvconf update... client # [ 3718.081946] client systemd[1]: Finished Import lastlog data into lastlog2 database. agent # [ 3717.982465] agent suid-sgid-wrappers-start[168]: chmod: changing permissions of '/run/wrappers/wrappers.JeMjLqTZ53/chsh': Operation not permitted agent # [ 3717.986376] agent systemd[1]: suid-sgid-wrappers.service: Main process exited, code=exited, status=1/FAILURE agent # [ 3717.986472] agent systemd[1]: suid-sgid-wrappers.service: Failed with result 'exit-code'. agent # [ 3717.986598] agent systemd[1]: Failed to start Create SUID/SGID Wrappers. agent # [ 3717.987086] agent systemd[1]: Finished Create System Files and Directories. agent # [ 3718.001775] agent systemd[1]: Starting Rebuild Journal Catalog... agent # [ 3718.002434] agent systemd[1]: Starting Record System Boot/Shutdown in UTMP... agent # [ 3718.042600] agent systemd[1]: Finished Record System Boot/Shutdown in UTMP. agent # [ 3718.049724] agent systemd[1]: Finished Rebuild Journal Catalog. agent # [ 3718.050791] agent systemd[1]: Starting Update is Completed... agent # [ 3718.060615] agent systemd[1]: Finished Update is Completed. agent # [ 3718.060692] agent systemd[1]: Reached target System Initialization. agent # [ 3718.060754] agent systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container agent # [ 3718.060779] agent systemd[1]: Started Daily Cleanup of Temporary Directories. agent # [ 3718.060792] agent systemd[1]: Reached target Timer Units. agent # [ 3718.060879] agent systemd[1]: Listening on D-Bus System Message Bus Socket. agent # [ 3718.061037] agent systemd[1]: Listening on Nix Daemon Socket. agent # [ 3718.061130] agent systemd[1]: Listening on Virtual Machine and Container Registration Service Socket. agent # [ 3718.061142] agent systemd[1]: Reached target Socket Units. agent # [ 3718.061168] agent systemd[1]: Reached target Basic System. agent # [ 3718.062686] agent systemd[1]: Starting Re-link flakelet services at boot... agent # [ 3718.063460] agent systemd[1]: Starting Import lastlog data into lastlog2 database... agent # [ 3718.064510] agent systemd[1]: Starting Name Service Cache Daemon (nsncd)... agent # [ 3718.065281] agent systemd[1]: Starting resolvconf update... agent # [ 3718.073624] agent systemd[1]: Finished Re-link flakelet services at boot. agent # [ 3718.074974] agent systemd[1]: Starting Reconcile flakelet services with the host configuration... agent # [ 3718.081072] agent systemd[1]: Finished Import lastlog data into lastlog2 database. agent # [ 3718.085522] agent systemd[1]: Finished Reconcile flakelet services with the host configuration. agent # [ 3718.194586] agent systemd[1]: etc-machine\x2did.mount: Deactivated successfully. agent # [ 3718.195566] agent systemd[1]: Finished Save Transient machine-id to Disk. agent # [ 3718.229444] agent systemd[1]: nscd.service: Deactivated successfully. agent # [ 3718.256300] agent systemd[1]: Stopped Name Service Cache Daemon (nsncd). agent # [ 3718.258053] agent systemd[1]: Finished resolvconf update. agent # [ 3718.258827] agent systemd[1]: Reached target Preparation for Network. agent # [ 3718.259802] agent systemd[1]: Starting Address configuration of eth1... agent # [ 3718.260479] agent systemd[1]: Starting Extra networking commands.... agent # [ 3718.261654] agent systemd[1]: Starting Name Service Cache Daemon (nsncd)... agent # [ 3718.280755] agent network-addresses-eth1-start[240]: adding address 192.168.1.1/24... done agent # [ 3718.283740] agent network-addresses-eth1-start[240]: adding address 2001:db8:1::1/64... done agent # [ 3718.287237] agent systemd[1]: Finished Address configuration of eth1. agent # [ 3718.328240] agent systemd[1]: Finished Extra networking commands.. agent # [ 3718.328374] agent systemd[1]: Reached target Network. agent # [ 3718.329748] agent systemd[1]: Starting flakelet-agent... agent # [ 3718.360721] agent systemd[1]: Starting Update flakelet service app... agent # [ 3718.361737] agent systemd[1]: Starting Update flakelet service other... agent # [ 3718.364271] agent systemd[1]: nscd.service: Deactivated successfully. agent # [ 3718.364474] agent systemd[1]: Stopped Name Service Cache Daemon (nsncd). agent # [ 3718.367282] agent systemd[1]: Starting Name Service Cache Daemon (nsncd)... agent # [ 3718.372935] agent flakelet[305]: app: using prebuilt artifact /nix/store/hysydfr96ds875vr0jgw5rjxi4p39h2j-flakelet-app-v1 agent # [ 3718.373522] agent flakelet[305]: app: activating generation 1 agent # [ 3718.373556] agent flakelet[306]: other: using prebuilt artifact /nix/store/hmr990n0b4v6rpzrcpyyw738r9xi7z95-flakelet-other-v1 agent # [ 3718.374098] agent flakelet[306]: other: activating generation 1 agent # [ 3718.378251] agent systemd[1]: Reload requested from client PID 315 ('systemctl') (unit flakelet-other.service)... agent # [ 3718.378294] agent systemd[1]: Reloading... agent # [ 3718.419993] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:06:36.381697Z","level":"WARN","message":"SRV _flakelet-relay._tcp.test: lookup failed","target":"flakelet_agent"} client # [ 3718.194748] client systemd[1]: etc-machine\x2did.mount: Deactivated successfully. client # [ 3718.195601] client systemd[1]: Finished Save Transient machine-id to Disk. client # [ 3718.195798] client systemd[1]: nscd.service: Deactivated successfully. client # [ 3718.195910] client systemd[1]: Stopped Name Service Cache Daemon (nsncd). client # [ 3718.197376] client systemd[1]: Finished resolvconf update. client # [ 3718.199291] client systemd[1]: Reached target Preparation for Network. client # [ 3718.210618] client systemd[1]: Starting Address configuration of eth1... client # [ 3718.211609] client systemd[1]: Starting Extra networking commands.... client # [ 3718.212417] client systemd[1]: Starting Name Service Cache Daemon (nsncd)... client # [ 3718.272406] client network-addresses-eth1-start[236]: adding address 192.168.1.2/24... done client # [ 3718.276287] client network-addresses-eth1-start[236]: adding address 2001:db8:1::2/64... done client # [ 3718.281031] client systemd[1]: Finished Address configuration of eth1. client # [ 3718.360734] client systemd[1]: Finished Extra networking commands.. client # [ 3718.362151] client systemd[1]: Reached target Network. client # [ 3718.363365] client systemd[1]: nscd.service: Deactivated successfully. client # [ 3718.363671] client systemd[1]: Stopped Name Service Cache Daemon (nsncd). client # [ 3718.367990] client systemd[1]: Starting Name Service Cache Daemon (nsncd)... relay # [ 3718.209229] relay systemd[1]: etc-machine\x2did.mount: Deactivated successfully. relay # [ 3718.211379] relay systemd[1]: Finished Save Transient machine-id to Disk. relay # [ 3718.211812] relay systemd[1]: Finished Reconcile flakelet services with the host configuration. relay # [ 3718.256469] relay systemd[1]: nscd.service: Deactivated successfully. relay # [ 3718.256710] relay systemd[1]: Stopped Name Service Cache Daemon (nsncd). relay # [ 3718.258980] relay systemd[1]: Finished resolvconf update. relay # [ 3718.260063] relay systemd[1]: Reached target Preparation for Network. relay # [ 3718.261640] relay systemd[1]: Starting Address configuration of eth1... relay # [ 3718.262745] relay systemd[1]: Starting Extra networking commands.... relay # [ 3718.263996] relay systemd[1]: Starting Name Service Cache Daemon (nsncd)... relay # [ 3718.282755] relay network-addresses-eth1-start[249]: adding address 192.168.1.3/24... done relay # [ 3718.285624] relay network-addresses-eth1-start[249]: adding address 2001:db8:1::3/64... done relay # [ 3718.290511] relay systemd[1]: Finished Address configuration of eth1. relay # [ 3718.324461] relay systemd[1]: Finished Extra networking commands.. relay # [ 3718.324682] relay systemd[1]: Reached target Network. relay # [ 3718.326546] relay systemd[1]: Starting Dnsmasq Daemon... relay # [ 3718.328163] relay systemd[1]: Starting Nginx Web Server... relay # [ 3718.329382] relay systemd[1]: Starting Update flakelet service flakelet-relay... relay # [ 3718.369843] relay flakelet[311]: flakelet-relay: using prebuilt artifact /nix/store/da0nzq35hiw74y8pyxkzhjk86i4m5kz0-flakelet-flakelet-relay relay # [ 3718.370530] relay flakelet[311]: flakelet-relay: activating generation 1 relay # [ 3718.376276] relay systemd[1]: Reload requested from client PID 316 ('systemctl') (unit flakelet-flakelet-relay.service)... relay # [ 3718.376348] relay systemd[1]: Reloading... relay # [ 3718.713060] relay nsncd[251]: Sep 06 08:06:36.674 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket" relay # [ 3718.817377] relay systemd[1]: Reloading finished in 440 ms. relay # [ 3718.951270] relay systemd[1]: Started Name Service Cache Daemon (nsncd). relay # [ 3718.951722] relay systemd[1]: Reached target Host and Network Name Lookups. relay # [ 3718.951806] relay systemd[1]: Reached target User and Group Name Lookups. relay # [ 3718.952933] relay systemd[1]: Starting User Login Management... relay # [ 3718.953612] relay systemd[1]: Starting Permit User Sessions... relay # [ 3718.967379] relay systemd[1]: Reload requested from client PID 357 ('systemctl') (unit flakelet-flakelet-relay.service)... relay # [ 3718.967409] relay systemd[1]: Reloading... client # [ 3718.720792] client nsncd[303]: Sep 06 08:06:36.682 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket" client # [ 3718.720925] client systemd[1]: Started Name Service Cache Daemon (nsncd). client # [ 3718.721033] client systemd[1]: Reached target Host and Network Name Lookups. client # [ 3718.721127] client systemd[1]: Reached target User and Group Name Lookups. client # [ 3718.723342] client systemd[1]: Starting User Login Management... client # [ 3718.724579] client systemd[1]: Starting Permit User Sessions... client # [ 3718.756357] client systemd[1]: Finished Permit User Sessions. client # [ 3718.758189] client systemd[1]: Started Console Getty. client # [ 3718.758245] client systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0 client # [ 3718.758274] client systemd[1]: Reached target Login Prompts. agent # [ 3718.724716] agent nsncd[311]: Sep 06 08:06:36.686 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket" agent # [ 3718.821244] agent systemd[1]: Reloading finished in 442 ms. agent # [ 3718.955075] agent systemd[1]: Started flakelet-agent. agent # [ 3718.955267] agent systemd[1]: Started Name Service Cache Daemon (nsncd). agent # [ 3718.955794] agent systemd[1]: Reload requested from client PID 313 ('systemctl') (unit flakelet-app.service)... agent # [ 3718.955839] agent systemd[1]: Reloading... relay # [ 3719.012170] relay dnsmasq-pre-start[375]: dnsmasq: syntax check OK. relay # [ 3719.345279] relay systemd[1]: Reloading finished in 377 ms. relay # [ 3719.473014] relay systemd[1]: Finished Permit User Sessions. relay # [ 3719.479276] relay systemd[1]: Started Console Getty. relay # [ 3719.479351] relay systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0 relay # [ 3719.479418] relay systemd[1]: Reached target Login Prompts. relay # [ 3719.486255] relay systemd[1]: Starting flakelet-relay... agent # [ 3719.342453] agent systemd[1]: Reloading finished in 386 ms. agent # [ 3719.480269] agent systemd[1]: Reached target Host and Network Name Lookups. agent # [ 3719.480378] agent systemd[1]: Reached target User and Group Name Lookups. agent # [ 3719.482092] agent systemd[1]: Starting User Login Management... agent # [ 3719.483441] agent systemd[1]: Starting Permit User Sessions... agent # [ 3719.490419] agent systemd[1]: Reload requested from client PID 768 ('systemctl') (unit flakelet-other.service)... agent # [ 3719.490472] agent systemd[1]: Reloading... agent # [ 3719.878415] agent systemd[1]: Reloading finished in 387 ms. agent # [ 3719.974660] agent systemd[1]: Finished Permit User Sessions. agent # [ 3719.981291] agent systemd[1]: Started Console Getty. agent # [ 3719.981389] agent systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0 agent # [ 3719.981500] agent systemd[1]: Reached target Login Prompts. agent # [ 3719.981827] agent systemd[1]: Reload requested from client PID 772 ('systemctl') (unit flakelet-app.service)... agent # [ 3719.981856] agent systemd[1]: Reloading... relay # [ 3720.092252] relay nginx-pre-start[402]: nginx: the configuration file /nix/store/01avjj26wcihp926xgasszcj5s0k7cbs-nginx.conf syntax is ok relay # [ 3720.092916] relay nginx-pre-start[402]: nginx: configuration file /nix/store/01avjj26wcihp926xgasszcj5s0k7cbs-nginx.conf test is successful relay # [ 3720.113359] relay systemd[1]: Started Nginx Web Server. relay # [ 3720.138858] relay systemd[1]: Starting D-Bus System Message Bus... client # [ 3720.224844] client systemd-logind[315]: New seat seat0. client # [ 3720.226660] client systemd[1]: Starting D-Bus System Message Bus... client # [ 3720.226807] client systemd[1]: Started User Login Management. client # [ 3720.228496] client systemd[1]: Starting linger-users.service... client # [ 3720.277735] client systemd[1]: linger-users.service: Deactivated successfully. client # [ 3720.278057] client systemd[1]: Finished linger-users.service. client # [ 3720.278403] client systemd[1]: Reached target Multi-User System. agent # [ 3720.352273] agent systemd[1]: Reloading finished in 370 ms. agent # [ 3720.424671] agent systemd[1]: Starting other v1... agent # [ 3720.432189] agent systemd[1]: Starting app v1... agent # [ 3720.433263] agent systemd[1]: Started other v1. agent # [ 3720.447094] agent systemd[1]: Started app v1. agent # [ 3720.456892] agent flakelet[306]: other: updated to generation 1 agent # [ 3720.458909] agent systemd[1]: Finished Update flakelet service other. agent # [ 3720.462152] agent flakelet[305]: app: updated to generation 1 agent # [ 3720.463808] agent systemd[1]: Finished Update flakelet service app. agent # [ 3720.463945] agent systemd[1]: Reached target flakelet managed services. relay # [ 3720.515853] relay systemd-logind[354]: New seat seat0. relay # [ 3720.516148] relay systemd[1]: Started User Login Management. relay # [ 3720.518519] relay systemd[1]: Starting linger-users.service... relay # [ 3720.533535] relay systemd[1]: linger-users.service: Deactivated successfully. relay # [ 3720.533837] relay systemd[1]: Finished linger-users.service. relay # [ 3720.718057] relay dbus-broker-launch[406]: Looking up NSS user entry for 'systemd-timesync'... relay # [ 3720.719245] relay dbus-broker-launch[406]: NSS returned no entry for 'systemd-timesync' relay # [ 3720.719313] relay dbus-broker-launch[406]: Invalid user-name in /nix/store/27h4g2jdw18vrabfh6p1l0n8ss5dhbp5-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync" relay # [ 3720.720286] relay systemd[1]: Started D-Bus System Message Bus. relay # [ 3720.725559] relay dbus-broker-launch[406]: Ready relay # [ 3720.729177] relay systemd[1]: Started Dnsmasq Daemon. relay # [ 3720.731073] relay dnsmasq[394]: started, version 2.93 cachesize 150 relay # [ 3720.731080] relay dnsmasq[394]: compile time options: IPv6 GNU-getopt DBus no-UBus no-i18n IDN2 DHCP DHCPv6 no-Lua TFTP conntrack ipset nftset auth DNSSEC loop-detect inotify dumpfile relay # [ 3720.731087] relay dnsmasq[394]: DBus support enabled: connected to system bus relay # [ 3720.731094] relay dnsmasq[394]: no upstream servers configured - please set them from DBus relay # [ 3720.731185] relay dnsmasq[394]: read /etc/hosts - 9 names client # [ 3720.753621] client dbus-broker-launch[325]: Looking up NSS user entry for 'systemd-timesync'... client # [ 3720.754882] client dbus-broker-launch[325]: NSS returned no entry for 'systemd-timesync' client # [ 3720.754882] client dbus-broker-launch[325]: Invalid user-name in /nix/store/gwjh6x1lwgfm92sywlswcw01ch4acyff-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync" client # [ 3720.755472] client systemd[1]: Started D-Bus System Message Bus. client # [ 3720.755924] client systemd[1]: Startup finished in 4.257s. client # [ 3720.761579] client dbus-broker-launch[325]: Ready agent # [ 3721.001173] agent systemd-logind[769]: New seat seat0. agent # [ 3721.001512] agent systemd[1]: Started User Login Management. agent # [ 3721.003420] agent systemd[1]: Starting D-Bus System Message Bus... agent # [ 3721.004731] agent systemd[1]: Starting linger-users.service... agent # [ 3721.042487] agent systemd[1]: linger-users.service: Deactivated successfully. agent # [ 3721.042837] agent systemd[1]: Finished linger-users.service. agent # [ 3721.043218] agent systemd[1]: Reached target Multi-User System. agent # [ 3721.452192] agent dbus-broker-launch[847]: Looking up NSS user entry for 'systemd-timesync'... agent # [ 3721.452932] agent dbus-broker-launch[847]: NSS returned no entry for 'systemd-timesync' agent # [ 3721.452932] agent dbus-broker-launch[847]: Invalid user-name in /nix/store/q3c2gxfm178wqgzv8m87na4aa72wxc04-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync" agent # [ 3721.453494] agent systemd[1]: Started D-Bus System Message Bus. agent # [ 3721.453972] agent systemd[1]: Startup finished in 4.956s. agent # [ 3721.457924] agent dbus-broker-launch[847]: Ready relay # [ 3721.618478] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:06:39.580163Z","level":"INFO","message":"listening on 127.0.0.1:7400","target":"flakelet_relay::relay::server"} relay # [ 3721.618944] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:06:39.580719Z","level":"INFO","message":"listening on [::]:7443","target":"flakelet_relay::relay::server"} relay # [ 3721.619243] relay systemd[1]: Started flakelet-relay. relay # [ 3721.637063] relay systemd[1]: Starting health for flakelet-relay... relay # [ 3721.882982] relay systemd[1]: flakelet-relay-health.service: Deactivated successfully. relay # [ 3721.883469] relay systemd[1]: Finished health for flakelet-relay. relay # [ 3721.906030] relay flakelet[311]: flakelet-relay: updated to generation 1 relay # [ 3721.907811] relay systemd[1]: Finished Update flakelet service flakelet-relay. relay # [ 3721.908091] relay systemd[1]: Reached target flakelet managed services. relay # [ 3721.908180] relay systemd[1]: Reached target Multi-User System. relay # [ 3721.908322] relay systemd[1]: Startup finished in 5.410s. relay: (finished: waiting for unit flakelet-relay.service, in 6.16 seconds) relay: waiting for unit nginx.service relay: (finished: waiting for unit nginx.service, in 0.01 seconds) agent: waiting for unit flakelet.target agent: (finished: waiting for unit flakelet.target, in 0.02 seconds) agent: waiting for unit flakelet-agent.service agent: (finished: waiting for unit flakelet-agent.service, in 0.02 seconds) client: waiting for unit multi-user.target client: (finished: waiting for unit multi-user.target, in 0.02 seconds) relay: waiting for success: curl -sf http://127.0.0.1:7400/metrics | grep -q 'agent_up{host="agent"} 1' agent # [ 3723.440593] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:06:41.402322Z","level":"INFO","message":"connected","relay":"https://relay:7443","relay_name":"relay","relay_version":"0.1.0","host":"agent","target":"flakelet_relay::agent::conn"} relay # [ 3723.440954] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:06:41.402689Z","level":"INFO","message":"agent connected","host":"agent","version":"0.1.0","flakelets":"[Named { name: \"app\", generation: Some(1), revision: Some(\"prebuilt:app\") }, Named { name: \"other\", generation: Some(1), revision: Some(\"prebuilt:other\") }]","target":"flakelet_relay::relay::agent_conn"} relay: (finished: waiting for success: curl -sf http://127.0.0.1:7400/metrics | grep -q 'agent_up{host="agent"} 1', in 2.05 seconds) agent: must succeed: systemctl is-active app.service other.service agent: (finished: must succeed: systemctl is-active app.service other.service, in 0.01 seconds) subtest: deploy with client certificate, relay found via SRV agent: must succeed: jq '.services.app.prebuilt="/nix/store/6ili1vxjlag9d7dy0bxrbxk6bpi5qh9p-flakelet-app-v2"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json agent: (finished: must succeed: jq '.services.app.prebuilt="/nix/store/6ili1vxjlag9d7dy0bxrbxk6bpi5qh9p-flakelet-app-v2"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json, in 0.01 seconds) client: must succeed: push --relay-srv test --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/app 2>&1 relay # [ 3724.328630] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:06:42.290395Z","level":"INFO","message":"deploy accepted","job":"f6b4a01f952bd26817363b94ad1f4314","caller":"x509:email:admin@example.org","targets":"[\"agent/app\"]","target":"flakelet_relay::relay::api"} agent # [ 3724.329485] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:06:42.291230Z","level":"INFO","message":"start","id":"01451055f0d14a218493db4c07d0af8b","flakelet":"app","rule":"admins","relay":"relay","caller":"Some(\"x509:email:admin@example.org\")","target":"flakelet_relay::agent::conn"} agent # [ 3724.330378] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:06:42.292196Z","level":"INFO","message":"update starting","flakelet":"app","ids":"[\"01451055f0d14a218493db4c07d0af8b\"]","target":"flakelet_relay::agent::jobs"} agent # [ 3724.383367] agent systemd[1]: Starting flakelet update app (via relay)... agent # [ 3724.413997] agent systemd[1]: Started flakelet update app (via relay). agent # [ 3724.419653] agent flakelet[876]: app: using prebuilt artifact /nix/store/6ili1vxjlag9d7dy0bxrbxk6bpi5qh9p-flakelet-app-v2 agent # [ 3724.420323] agent flakelet[876]: app: activating generation 2 agent # [ 3724.436102] agent systemd[1]: Stopping app v1... agent # [ 3724.436616] agent systemd[1]: app.service: Deactivated successfully. agent # [ 3724.436878] agent systemd[1]: Stopped app v1. agent # [ 3724.462560] agent systemd[1]: Reload requested from client PID 887 ('systemctl') (unit flakelet-relay-job-app.service)... agent # [ 3724.462614] agent systemd[1]: Reloading... agent # [ 3724.800292] agent systemd[1]: Reloading finished in 337 ms. agent # [ 3724.887926] agent systemd[1]: Reload requested from client PID 919 ('systemctl') (unit flakelet-relay-job-app.service)... agent # [ 3724.887959] agent systemd[1]: Reloading... agent # [ 3725.222581] agent systemd[1]: Reloading finished in 334 ms. agent # [ 3725.327108] agent systemd[1]: Reload requested from client PID 949 ('systemctl') (unit flakelet-relay-job-app.service)... agent # [ 3725.327143] agent systemd[1]: Reloading... agent # [ 3725.657458] agent systemd[1]: Reloading finished in 329 ms. agent # [ 3725.742886] agent systemd[1]: Reload requested from client PID 982 ('systemctl') (unit flakelet-relay-job-app.service)... agent # [ 3725.742921] agent systemd[1]: Reloading... agent # [ 3726.067942] agent systemd[1]: Reloading finished in 324 ms. agent # [ 3726.159418] agent systemd[1]: Starting app v2... agent # [ 3726.198524] agent systemd[1]: Started app v2. agent # [ 3726.212135] agent flakelet[876]: app: updated to generation 2 agent # [ 3726.213662] agent systemd[1]: flakelet-relay-job-app.service: Deactivated successfully. client: (finished: must succeed: push --relay-srv test --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/app 2>&1, in 2.99 seconds) agent: must succeed: systemctl show app.service -p Description | grep -q 'app v2' agent: (finished: must succeed: systemctl show app.service -p Description | grep -q 'app v2', in 0.02 seconds) agent: must succeed: journalctl -u flakelet-relay-job-app.service | grep -q 'generation 2' agent: (finished: must succeed: journalctl -u flakelet-relay-job-app.service | grep -q 'generation 2', in 0.01 seconds) (finished: subtest: deploy with client certificate, relay found via SRV, in 3.03 seconds) subtest: deploy with OIDC token, sub principal agent: must succeed: jq '.services.app.prebuilt="/nix/store/hysydfr96ds875vr0jgw5rjxi4p39h2j-flakelet-app-v1"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json agent: (finished: must succeed: jq '.services.app.prebuilt="/nix/store/hysydfr96ds875vr0jgw5rjxi4p39h2j-flakelet-app-v1"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json, in 0.01 seconds) client: must succeed: echo '{"groups": []}' | step crypto jwt sign --key /nix/store/r7sclamg09v434w8zjlfnrcrn1w79wh6-flakelet-relay-test-issuer/jwk.json --iss https://relay:8443 --aud flakelet-relay --sub 'repo:github:example/app:ref:refs/heads/main' --exp $(( $(date +%s) + 300 )) --jti $(head -c8 /dev/urandom | base32) client: (finished: must succeed: echo '{"groups": []}' | step crypto jwt sign --key /nix/store/r7sclamg09v434w8zjlfnrcrn1w79wh6-flakelet-relay-test-issuer/jwk.json --iss https://relay:8443 --aud flakelet-relay --sub 'repo:github:example/app:ref:refs/heads/main' --exp $(( $(date +%s) + 300 )) --jti $(head -c8 /dev/urandom | base32), in 0.06 seconds) client: must succeed: FLAKELET_RELAY_TOKEN_COMMAND='echo eyJhbGciOiJFZERTQSIsImtpZCI6ImsxIiwidHlwIjoiSldUIn0.eyJhdWQiOiJmbGFrZWxldC1yZWxheSIsImV4cCI6MTc4ODY4MjMwNSwiZ3JvdXBzIjpbXSwiaWF0IjoxNzg4NjgyMDA1LCJpc3MiOiJodHRwczovL3JlbGF5Ojg0NDMiLCJqdGkiOiJZT1NaQzY3SUhFNTdPPT09IiwibmJmIjoxNzg4NjgyMDA1LCJzdWIiOiJyZXBvOmdpdGh1YjpleGFtcGxlL2FwcDpyZWY6cmVmcy9oZWFkcy9tYWluIn0.odNxa_uyv84CmrmqGEL2i8gvQxj1wGGQDD9Zeg11raYCUVSzdJcpE2gxulPkDCHK-nxsEP8P3LCgVeV_ldtRAw' push --relay https://relay:7443 deploy agent/app 2>&1 relay # [ 3727.290876] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:06:45.252645Z","level":"INFO","message":"deploy finished","job":"f6b4a01f952bd26817363b94ad1f4314","ok":true,"target":"flakelet_relay::relay::api"} relay # [ 3727.420416] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:06:45.382183Z","level":"INFO","message":"deploy accepted","job":"ed03cbb205aa54417c03f051178a18ad","caller":"oidc:mock:repo:github:example/app:ref:refs/heads/main","targets":"[\"agent/app\"]","target":"flakelet_relay::relay::api"} agent # [ 3727.289839] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:06:45.251593Z","level":"INFO","message":"update finished","flakelet":"app","status":"Updated","generation":"Some(2)","target":"flakelet_relay::agent::jobs"} agent # [ 3727.420658] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:06:45.382402Z","level":"INFO","message":"start","id":"ef0635a71c0a7a8b2fb6010faddf48af","flakelet":"app","rule":"ci","relay":"relay","caller":"Some(\"oidc:mock:repo:github:example/app:ref:refs/heads/main\")","target":"flakelet_relay::agent::conn"} agent # [ 3727.421022] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:06:45.382839Z","level":"INFO","message":"update starting","flakelet":"app","ids":"[\"ef0635a71c0a7a8b2fb6010faddf48af\"]","target":"flakelet_relay::agent::jobs"} agent # [ 3727.492883] agent systemd[1]: Starting flakelet update app (via relay)... agent # [ 3727.500967] agent systemd[1]: Started flakelet update app (via relay). agent # [ 3727.504842] agent flakelet[1061]: app: using prebuilt artifact /nix/store/hysydfr96ds875vr0jgw5rjxi4p39h2j-flakelet-app-v1 agent # [ 3727.505448] agent flakelet[1061]: app: activating generation 3 agent # [ 3727.521877] agent systemd[1]: Stopping app v2... agent # [ 3727.523670] agent systemd[1]: app.service: Deactivated successfully. agent # [ 3727.524120] agent systemd[1]: Stopped app v2. agent # [ 3727.539246] agent systemd[1]: Reload requested from client PID 1068 ('systemctl') (unit flakelet-relay-job-app.service)... agent # [ 3727.539314] agent systemd[1]: Reloading... agent # [ 3727.888596] agent systemd[1]: Reloading finished in 348 ms. agent # [ 3727.968831] agent systemd[1]: Reload requested from client PID 1098 ('systemctl') (unit flakelet-relay-job-app.service)... agent # [ 3727.968872] agent systemd[1]: Reloading... agent # [ 3728.316169] agent systemd[1]: Reloading finished in 346 ms. agent # [ 3728.393568] agent systemd[1]: Reload requested from client PID 1127 ('systemctl') (unit flakelet-relay-job-app.service)... agent # [ 3728.393610] agent systemd[1]: Reloading... agent # [ 3728.754184] agent systemd[1]: Reloading finished in 360 ms. agent # [ 3728.844883] agent systemd[1]: Reload requested from client PID 1161 ('systemctl') (unit flakelet-relay-job-app.service)... agent # [ 3728.844923] agent systemd[1]: Reloading... agent # [ 3729.190992] agent systemd[1]: Reloading finished in 345 ms. agent # [ 3729.279117] agent systemd[1]: Starting app v1... agent # [ 3729.287768] agent systemd[1]: Started app v1. agent # [ 3729.300235] agent flakelet[1061]: app: updated to generation 3 agent # [ 3729.301958] agent systemd[1]: flakelet-relay-job-app.service: Deactivated successfully. client: (finished: must succeed: FLAKELET_RELAY_TOKEN_COMMAND='echo eyJhbGciOiJFZERTQSIsImtpZCI6ImsxIiwidHlwIjoiSldUIn0.eyJhdWQiOiJmbGFrZWxldC1yZWxheSIsImV4cCI6MTc4ODY4MjMwNSwiZ3JvdXBzIjpbXSwiaWF0IjoxNzg4NjgyMDA1LCJpc3MiOiJodHRwczovL3JlbGF5Ojg0NDMiLCJqdGkiOiJZT1NaQzY3SUhFNTdPPT09IiwibmJmIjoxNzg4NjgyMDA1LCJzdWIiOiJyZXBvOmdpdGh1YjpleGFtcGxlL2FwcDpyZWY6cmVmcy9oZWFkcy9tYWluIn0.odNxa_uyv84CmrmqGEL2i8gvQxj1wGGQDD9Zeg11raYCUVSzdJcpE2gxulPkDCHK-nxsEP8P3LCgVeV_ldtRAw' push --relay https://relay:7443 deploy agent/app 2>&1, in 2.99 seconds) (finished: subtest: deploy with OIDC token, sub principal, in 3.06 seconds) subtest: policy denies uncovered target client: must fail: FLAKELET_RELAY_TOKEN_COMMAND='echo eyJhbGciOiJFZERTQSIsImtpZCI6ImsxIiwidHlwIjoiSldUIn0.eyJhdWQiOiJmbGFrZWxldC1yZWxheSIsImV4cCI6MTc4ODY4MjMwNSwiZ3JvdXBzIjpbXSwiaWF0IjoxNzg4NjgyMDA1LCJpc3MiOiJodHRwczovL3JlbGF5Ojg0NDMiLCJqdGkiOiJZT1NaQzY3SUhFNTdPPT09IiwibmJmIjoxNzg4NjgyMDA1LCJzdWIiOiJyZXBvOmdpdGh1YjpleGFtcGxlL2FwcDpyZWY6cmVmcy9oZWFkcy9tYWluIn0.odNxa_uyv84CmrmqGEL2i8gvQxj1wGGQDD9Zeg11raYCUVSzdJcpE2gxulPkDCHK-nxsEP8P3LCgVeV_ldtRAw' push --relay https://relay:7443 deploy agent/other 2>&1 client: (finished: must fail: FLAKELET_RELAY_TOKEN_COMMAND='echo eyJhbGciOiJFZERTQSIsImtpZCI6ImsxIiwidHlwIjoiSldUIn0.eyJhdWQiOiJmbGFrZWxldC1yZWxheSIsImV4cCI6MTc4ODY4MjMwNSwiZ3JvdXBzIjpbXSwiaWF0IjoxNzg4NjgyMDA1LCJpc3MiOiJodHRwczovL3JlbGF5Ojg0NDMiLCJqdGkiOiJZT1NaQzY3SUhFNTdPPT09IiwibmJmIjoxNzg4NjgyMDA1LCJzdWIiOiJyZXBvOmdpdGh1YjpleGFtcGxlL2FwcDpyZWY6cmVmcy9oZWFkcy9tYWluIn0.odNxa_uyv84CmrmqGEL2i8gvQxj1wGGQDD9Zeg11raYCUVSzdJcpE2gxulPkDCHK-nxsEP8P3LCgVeV_ldtRAw' push --relay https://relay:7443 deploy agent/other 2>&1, in 0.02 seconds) (finished: subtest: policy denies uncovered target, in 0.02 seconds) subtest: claim principal from groups, unchanged counts as success client: must succeed: echo '{"groups": ["wheel"]}' | step crypto jwt sign --key /nix/store/r7sclamg09v434w8zjlfnrcrn1w79wh6-flakelet-relay-test-issuer/jwk.json --iss https://relay:8443 --aud flakelet-relay --sub 'someone' --exp $(( $(date +%s) + 300 )) --jti $(head -c8 /dev/urandom | base32) client: (finished: must succeed: echo '{"groups": ["wheel"]}' | step crypto jwt sign --key /nix/store/r7sclamg09v434w8zjlfnrcrn1w79wh6-flakelet-relay-test-issuer/jwk.json --iss https://relay:8443 --aud flakelet-relay --sub 'someone' --exp $(( $(date +%s) + 300 )) --jti $(head -c8 /dev/urandom | base32), in 0.06 seconds) client: must succeed: FLAKELET_RELAY_TOKEN_COMMAND='echo eyJhbGciOiJFZERTQSIsImtpZCI6ImsxIiwidHlwIjoiSldUIn0.eyJhdWQiOiJmbGFrZWxldC1yZWxheSIsImV4cCI6MTc4ODY4MjMwOCwiZ3JvdXBzIjpbIndoZWVsIl0sImlhdCI6MTc4ODY4MjAwOCwiaXNzIjoiaHR0cHM6Ly9yZWxheTo4NDQzIiwianRpIjoiSUdPRkJVUjNHUE9WND09PSIsIm5iZiI6MTc4ODY4MjAwOCwic3ViIjoic29tZW9uZSJ9.z9bQTIdKQxZ6mOmSsIf2iLeklEFXlbFZHS9C8Dng4_dyD3C7BkBKtJGz9AYvEp2jfqBILwJKl7rFIqS2EL2-BQ' push --relay https://relay:7443 deploy agent/other 2>&1 relay # [ 3730.378984] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:06:48.340781Z","level":"INFO","message":"deploy finished","job":"ed03cbb205aa54417c03f051178a18ad","ok":true,"target":"flakelet_relay::relay::api"} relay # [ 3730.473144] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:06:48.434927Z","level":"INFO","message":"deploy accepted","job":"bc450f1a78eb2a00b96c702e0c8a816c","caller":"oidc:mock:groups:wheel\noidc:mock:someone","targets":"[\"agent/other\"]","target":"flakelet_relay::relay::api"} agent # [ 3730.378153] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:06:48.339927Z","level":"INFO","message":"update finished","flakelet":"app","status":"Updated","generation":"Some(3)","target":"flakelet_relay::agent::jobs"} agent # [ 3730.473431] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:06:48.435189Z","level":"INFO","message":"start","id":"5dbb7aa487bbd67c24ed08a13fe3c711","flakelet":"other","rule":"admins","relay":"relay","caller":"Some(\"oidc:mock:groups:wheel\\noidc:mock:someone\")","target":"flakelet_relay::agent::conn"} agent # [ 3730.473671] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:06:48.435504Z","level":"INFO","message":"update starting","flakelet":"other","ids":"[\"5dbb7aa487bbd67c24ed08a13fe3c711\"]","target":"flakelet_relay::agent::jobs"} agent # [ 3730.509493] agent systemd[1]: Starting flakelet update other (via relay)... agent # [ 3730.537673] agent systemd[1]: Started flakelet update other (via relay). agent # [ 3730.541970] agent flakelet[1237]: other: using prebuilt artifact /nix/store/hmr990n0b4v6rpzrcpyyw738r9xi7z95-flakelet-other-v1 agent # [ 3730.542458] agent flakelet[1237]: other: up to date agent # [ 3730.544586] agent systemd[1]: flakelet-relay-job-other.service: Deactivated successfully. client: (finished: must succeed: FLAKELET_RELAY_TOKEN_COMMAND='echo eyJhbGciOiJFZERTQSIsImtpZCI6ImsxIiwidHlwIjoiSldUIn0.eyJhdWQiOiJmbGFrZWxldC1yZWxheSIsImV4cCI6MTc4ODY4MjMwOCwiZ3JvdXBzIjpbIndoZWVsIl0sImlhdCI6MTc4ODY4MjAwOCwiaXNzIjoiaHR0cHM6Ly9yZWxheTo4NDQzIiwianRpIjoiSUdPRkJVUjNHUE9WND09PSIsIm5iZiI6MTc4ODY4MjAwOCwic3ViIjoic29tZW9uZSJ9.z9bQTIdKQxZ6mOmSsIf2iLeklEFXlbFZHS9C8Dng4_dyD3C7BkBKtJGz9AYvEp2jfqBILwJKl7rFIqS2EL2-BQ' push --relay https://relay:7443 deploy agent/other 2>&1, in 0.65 seconds) (finished: subtest: claim principal from groups, unchanged counts as success, in 0.70 seconds) subtest: push login via device flow, cached token used afterwards client: must succeed: push login --issuer https://relay:8443 --client-id flakelet-relay 2>&1 relay # [ 3731.098882] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:06:49.060635Z","level":"INFO","message":"deploy finished","job":"bc450f1a78eb2a00b96c702e0c8a816c","ok":true,"target":"flakelet_relay::relay::api"} relay # [ 3731.117790] relay 93sn3sv24fj26ksccpppzwg6kbf10s4w-device-mock[185]: 127.0.0.1 - - [06/Sep/2026 08:06:49] "POST /device HTTP/1.1" 200 - agent # [ 3731.097673] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:06:49.059445Z","level":"INFO","message":"update finished","flakelet":"other","status":"Unchanged","generation":"Some(1)","target":"flakelet_relay::agent::jobs"} relay # [ 3732.122734] relay 93sn3sv24fj26ksccpppzwg6kbf10s4w-device-mock[185]: 127.0.0.1 - - [06/Sep/2026 08:06:50] "POST /token HTTP/1.1" 400 - client: (finished: must succeed: push login --issuer https://relay:8443 --client-id flakelet-relay 2>&1, in 2.07 seconds) client: must succeed: test "$(stat -c %a /root/.local/state/flakelet-push/token.json)" = 600 client: (finished: must succeed: test "$(stat -c %a /root/.local/state/flakelet-push/token.json)" = 600, in 0.01 seconds) client: must succeed: push --relay https://relay:7443 deploy agent/other 2>&1 agent # [ 3733.195547] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:06:51.157300Z","level":"INFO","message":"start","id":"b5027bd2914a756fcf8f42ad58472146","flakelet":"other","rule":"admins","relay":"relay","caller":"Some(\"oidc:mock:groups:wheel\\noidc:mock:someone\")","target":"flakelet_relay::agent::conn"} agent # [ 3733.196424] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:06:51.157927Z","level":"INFO","message":"update starting","flakelet":"other","ids":"[\"b5027bd2914a756fcf8f42ad58472146\"]","target":"flakelet_relay::agent::jobs"} agent # [ 3733.235777] agent systemd[1]: Starting flakelet update other (via relay)... agent # [ 3733.243053] agent systemd[1]: Started flakelet update other (via relay). agent # [ 3733.247348] agent flakelet[1275]: other: using prebuilt artifact /nix/store/hmr990n0b4v6rpzrcpyyw738r9xi7z95-flakelet-other-v1 agent # [ 3733.247834] agent flakelet[1275]: other: up to date agent # [ 3733.250030] agent systemd[1]: flakelet-relay-job-other.service: Deactivated successfully. relay # [ 3733.167576] relay 93sn3sv24fj26ksccpppzwg6kbf10s4w-device-mock[185]: 127.0.0.1 - - [06/Sep/2026 08:06:51] "POST /token HTTP/1.1" 200 - relay # [ 3733.195144] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:06:51.156937Z","level":"INFO","message":"deploy accepted","job":"3218d463fb2e84a7bbc4247d900ca29a","caller":"oidc:mock:groups:wheel\noidc:mock:someone","targets":"[\"agent/other\"]","target":"flakelet_relay::relay::api"} client: (finished: must succeed: push --relay https://relay:7443 deploy agent/other 2>&1, in 0.62 seconds) client: must succeed: push --relay https://relay:7443 deploy agent/other 2>&1 relay # [ 3733.793511] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:06:51.755308Z","level":"INFO","message":"deploy finished","job":"3218d463fb2e84a7bbc4247d900ca29a","ok":true,"target":"flakelet_relay::relay::api"} relay # [ 3733.812786] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:06:51.774592Z","level":"INFO","message":"deploy accepted","job":"3901caf5e8b837f2ccd55833b4a4c654","caller":"oidc:mock:groups:wheel\noidc:mock:someone","targets":"[\"agent/other\"]","target":"flakelet_relay::relay::api"} agent # [ 3733.792403] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:06:51.754169Z","level":"INFO","message":"update finished","flakelet":"other","status":"Unchanged","generation":"Some(1)","target":"flakelet_relay::agent::jobs"} agent # [ 3733.813125] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:06:51.774927Z","level":"INFO","message":"start","id":"752b38101f2c71b7d565910ae2faaaee","flakelet":"other","rule":"admins","relay":"relay","caller":"Some(\"oidc:mock:groups:wheel\\noidc:mock:someone\")","target":"flakelet_relay::agent::conn"} agent # [ 3733.813532] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:06:51.775355Z","level":"INFO","message":"update starting","flakelet":"other","ids":"[\"752b38101f2c71b7d565910ae2faaaee\"]","target":"flakelet_relay::agent::jobs"} agent # [ 3733.870731] agent systemd[1]: Starting flakelet update other (via relay)... agent # [ 3733.899926] agent systemd[1]: Started flakelet update other (via relay). agent # [ 3733.904035] agent flakelet[1303]: other: using prebuilt artifact /nix/store/hmr990n0b4v6rpzrcpyyw738r9xi7z95-flakelet-other-v1 agent # [ 3733.904561] agent flakelet[1303]: other: up to date agent # [ 3733.905503] agent systemd[1]: flakelet-relay-job-other.service: Deactivated successfully. client: (finished: must succeed: push --relay https://relay:7443 deploy agent/other 2>&1, in 0.67 seconds) (finished: subtest: push login via device flow, cached token used afterwards, in 3.36 seconds) subtest: waves: failing first wave skips the second agent: must succeed: jq '.services.app.prebuilt="/nix/store/8282rnbvyk847q4l4zby3zwcq3jpzrvw-flakelet-app-broken"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json agent: (finished: must succeed: jq '.services.app.prebuilt="/nix/store/8282rnbvyk847q4l4zby3zwcq3jpzrvw-flakelet-app-broken"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json, in 0.01 seconds) client: must fail: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/app --wave agent/other 2>&1 agent # [ 3734.460960] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:06:52.422702Z","level":"INFO","message":"update finished","flakelet":"other","status":"Unchanged","generation":"Some(1)","target":"flakelet_relay::agent::jobs"} agent # [ 3734.494929] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:06:52.456731Z","level":"INFO","message":"start","id":"9aa46e5f9632eea32ded29297d039c70","flakelet":"app","rule":"admins","relay":"relay","caller":"Some(\"x509:email:admin@example.org\")","target":"flakelet_relay::agent::conn"} agent # [ 3734.495351] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:06:52.457173Z","level":"INFO","message":"update starting","flakelet":"app","ids":"[\"9aa46e5f9632eea32ded29297d039c70\"]","target":"flakelet_relay::agent::jobs"} agent # [ 3734.539175] agent systemd[1]: Starting flakelet update app (via relay)... agent # [ 3734.566831] agent systemd[1]: Started flakelet update app (via relay). agent # [ 3734.571496] agent flakelet[1344]: app: using prebuilt artifact /nix/store/8282rnbvyk847q4l4zby3zwcq3jpzrvw-flakelet-app-broken agent # [ 3734.572209] agent flakelet[1344]: app: activating generation 4 agent # [ 3734.583836] agent systemd[1]: Stopping app v1... agent # [ 3734.585206] agent systemd[1]: app.service: Deactivated successfully. agent # [ 3734.585423] agent systemd[1]: Stopped app v1. agent # [ 3734.599276] agent systemd[1]: Reload requested from client PID 1351 ('systemctl') (unit flakelet-relay-job-app.service)... agent # [ 3734.599332] agent systemd[1]: Reloading... relay # [ 3734.462183] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:06:52.423985Z","level":"INFO","message":"deploy finished","job":"3901caf5e8b837f2ccd55833b4a4c654","ok":true,"target":"flakelet_relay::relay::api"} relay # [ 3734.494774] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:06:52.456570Z","level":"INFO","message":"deploy accepted","job":"f8c9871dafe4785fa0ee067769aeb98e","caller":"x509:email:admin@example.org","targets":"[\"agent/app\", \"agent/other\"]","target":"flakelet_relay::relay::api"} agent # [ 3734.967497] agent systemd[1]: Reloading finished in 367 ms. agent # [ 3735.062949] agent systemd[1]: Reload requested from client PID 1381 ('systemctl') (unit flakelet-relay-job-app.service)... agent # [ 3735.062988] agent systemd[1]: Reloading... agent # [ 3735.405940] agent systemd[1]: Reloading finished in 342 ms. agent # [ 3735.494868] agent systemd[1]: Reload requested from client PID 1410 ('systemctl') (unit flakelet-relay-job-app.service)... agent # [ 3735.494906] agent systemd[1]: Reloading... agent # [ 3735.880462] agent systemd[1]: Reloading finished in 385 ms. agent # [ 3735.974033] agent systemd[1]: Reload requested from client PID 1441 ('systemctl') (unit flakelet-relay-job-app.service)... agent # [ 3735.974069] agent systemd[1]: Reloading... agent # [ 3736.305615] agent systemd[1]: Reloading finished in 331 ms. agent # [ 3736.392616] agent systemd[1]: Starting app broken... agent # [ 3736.398601] agent (nonexistent)[1471]: app.service: Unable to locate executable '/nonexistent': No such file or directory agent # [ 3736.398624] agent (nonexistent)[1471]: app.service: Failed at step EXEC spawning /nonexistent: No such file or directory agent # [ 3736.400625] agent systemd[1]: app.service: Main process exited, code=exited, status=203/EXEC agent # [ 3736.400755] agent systemd[1]: app.service: Failed with result 'exit-code'. agent # [ 3736.401098] agent systemd[1]: Failed to start app broken. agent # [ 3736.432189] agent systemd[1]: Reload requested from client PID 1480 ('systemctl') (unit flakelet-relay-job-app.service)... agent # [ 3736.432225] agent systemd[1]: Reloading... agent # [ 3736.757644] agent systemd[1]: Reloading finished in 325 ms. agent # [ 3736.869431] agent systemd[1]: Reload requested from client PID 1512 ('systemctl') (unit flakelet-relay-job-app.service)... agent # [ 3736.869478] agent systemd[1]: Reloading... agent # [ 3737.209603] agent systemd[1]: Reloading finished in 339 ms. agent # [ 3737.315941] agent systemd[1]: Reload requested from client PID 1545 ('systemctl') (unit flakelet-relay-job-app.service)... agent # [ 3737.315975] agent systemd[1]: Reloading... agent # [ 3737.653269] agent systemd[1]: Reloading finished in 336 ms. agent # [ 3737.761342] agent systemd[1]: Reload requested from client PID 1576 ('systemctl') (unit flakelet-relay-job-app.service)... agent # [ 3737.761379] agent systemd[1]: Reloading... agent # [ 3738.113875] agent systemd[1]: Reloading finished in 352 ms. agent # [ 3738.196768] agent systemd[1]: Starting app v1... agent # [ 3738.226289] agent systemd[1]: Started app v1. agent # [ 3738.227366] agent flakelet[1344]: app: deploy failed, rolled back: systemctl start app.service failed: agent # [ 3738.227366] agent flakelet[1344]: failed units: app.service. See journalctl -u app.service agent # [ 3738.229383] agent systemd[1]: flakelet-relay-job-app.service: Main process exited, code=exited, status=1/FAILURE agent # [ 3738.229479] agent systemd[1]: flakelet-relay-job-app.service: Failed with result 'exit-code'. client: (finished: must fail: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/app --wave agent/other 2>&1, in 4.83 seconds) agent: must succeed: systemctl show app.service -p Description | grep -q 'app v1' agent: (finished: must succeed: systemctl show app.service -p Description | grep -q 'app v1', in 0.01 seconds) (finished: subtest: waves: failing first wave skips the second, in 4.85 seconds) subtest: host patterns expand on the relay agent: must succeed: jq '.services.app.prebuilt="/nix/store/hysydfr96ds875vr0jgw5rjxi4p39h2j-flakelet-app-v1"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json agent: (finished: must succeed: jq '.services.app.prebuilt="/nix/store/hysydfr96ds875vr0jgw5rjxi4p39h2j-flakelet-app-v1"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json, in 0.01 seconds) client: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy '@all/app' 2>&1 agent # [ 3739.299451] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:06:57.261190Z","level":"INFO","message":"update finished","flakelet":"app","status":"RolledBack","generation":"Some(3)","target":"flakelet_relay::agent::jobs"} relay # [ 3739.300617] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:06:57.262375Z","level":"INFO","message":"deploy finished","job":"f8c9871dafe4785fa0ee067769aeb98e","ok":false,"target":"flakelet_relay::relay::api"} agent # [ 3739.344301] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:06:57.306104Z","level":"INFO","message":"start","id":"d18610a77956f0cbd98e8fddbc9d162b","flakelet":"app","rule":"admins","relay":"relay","caller":"Some(\"x509:email:admin@example.org\")","target":"flakelet_relay::agent::conn"} relay # [ 3739.344050] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:06:57.305821Z","level":"INFO","message":"deploy accepted","job":"bca30794c6bdfb2cf9d19b405482415b","caller":"x509:email:admin@example.org","targets":"[\"agent/app\"]","target":"flakelet_relay::relay::api"} agent # [ 3739.344625] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:06:57.306456Z","level":"INFO","message":"update starting","flakelet":"app","ids":"[\"d18610a77956f0cbd98e8fddbc9d162b\"]","target":"flakelet_relay::agent::jobs"} agent # [ 3739.397261] agent systemd[1]: Starting flakelet update app (via relay)... agent # [ 3739.403997] agent systemd[1]: Started flakelet update app (via relay). agent # [ 3739.407866] agent flakelet[1652]: app: using prebuilt artifact /nix/store/hysydfr96ds875vr0jgw5rjxi4p39h2j-flakelet-app-v1 agent # [ 3739.408583] agent flakelet[1652]: app: up to date agent # [ 3739.409516] agent systemd[1]: flakelet-relay-job-app.service: Deactivated successfully. client: (finished: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy '@all/app' 2>&1, in 0.64 seconds) client: must fail: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy '*/app' 2>&1 agent # [ 3739.959540] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:06:57.921297Z","level":"INFO","message":"update finished","flakelet":"app","status":"Unchanged","generation":"Some(3)","target":"flakelet_relay::agent::jobs"} agent # [ 3739.981969] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:06:57.943773Z","level":"INFO","message":"start","id":"6d5322197bf045c97e1dcdc85d3e1fb4","flakelet":"app","rule":"admins","relay":"relay","caller":"Some(\"x509:email:admin@example.org\")","target":"flakelet_relay::agent::conn"} agent # [ 3739.982247] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:06:57.944074Z","level":"INFO","message":"update starting","flakelet":"app","ids":"[\"6d5322197bf045c97e1dcdc85d3e1fb4\"]","target":"flakelet_relay::agent::jobs"} agent # [ 3740.030530] agent systemd[1]: Starting flakelet update app (via relay)... agent # [ 3740.037287] agent systemd[1]: Started flakelet update app (via relay). agent # [ 3740.042245] agent flakelet[1680]: app: using prebuilt artifact /nix/store/hysydfr96ds875vr0jgw5rjxi4p39h2j-flakelet-app-v1 agent # [ 3740.042775] agent flakelet[1680]: app: up to date agent # [ 3740.045052] agent systemd[1]: flakelet-relay-job-app.service: Deactivated successfully. relay # [ 3739.960508] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:06:57.922246Z","level":"INFO","message":"deploy finished","job":"bca30794c6bdfb2cf9d19b405482415b","ok":true,"target":"flakelet_relay::relay::api"} relay # [ 3739.981641] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:06:57.943452Z","level":"INFO","message":"deploy accepted","job":"99abc3acc1555f9ea36daa7753c3ffb7","caller":"x509:email:admin@example.org","targets":"[\"agent/app\", \"ghost/app\"]","target":"flakelet_relay::relay::api"} client: (finished: must fail: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy '*/app' 2>&1, in 1.63 seconds) client: must fail: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/app --wave '*/app' 2>&1 relay # [ 3741.587832] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:06:59.549578Z","level":"INFO","message":"deploy finished","job":"99abc3acc1555f9ea36daa7753c3ffb7","ok":false,"target":"flakelet_relay::relay::api"} relay # [ 3741.608688] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:06:59.570485Z","level":"INFO","message":"deploy accepted","job":"a19615bc96b8c3aaf5da692be00dc7c9","caller":"x509:email:admin@example.org","targets":"[\"agent/app\", \"ghost/app\"]","target":"flakelet_relay::relay::api"} agent # [ 3741.586801] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:06:59.548524Z","level":"INFO","message":"update finished","flakelet":"app","status":"Unchanged","generation":"Some(3)","target":"flakelet_relay::agent::jobs"} agent # [ 3741.609053] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:06:59.570867Z","level":"INFO","message":"start","id":"12ccd906b60f4a0ea3046ca445f7058d","flakelet":"app","rule":"admins","relay":"relay","caller":"Some(\"x509:email:admin@example.org\")","target":"flakelet_relay::agent::conn"} agent # [ 3741.609267] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:06:59.571095Z","level":"INFO","message":"update starting","flakelet":"app","ids":"[\"12ccd906b60f4a0ea3046ca445f7058d\"]","target":"flakelet_relay::agent::jobs"} agent # [ 3741.665028] agent systemd[1]: Starting flakelet update app (via relay)... agent # [ 3741.691199] agent systemd[1]: Started flakelet update app (via relay). agent # [ 3741.695905] agent flakelet[1719]: app: using prebuilt artifact /nix/store/hysydfr96ds875vr0jgw5rjxi4p39h2j-flakelet-app-v1 agent # [ 3741.696445] agent flakelet[1719]: app: up to date agent # [ 3741.697448] agent systemd[1]: flakelet-relay-job-app.service: Deactivated successfully. client: (finished: must fail: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/app --wave '*/app' 2>&1, in 1.66 seconds) client: must fail: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy '@all/nope' 2>&1 client: (finished: must fail: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy '@all/nope' 2>&1, in 0.03 seconds) (finished: subtest: host patterns expand on the relay, in 3.96 seconds) subtest: detach returns once the job is accepted agent: must succeed: jq '.services.app.prebuilt="/nix/store/ln47rsd5km8a04hd5zlkz4q1v352zqh3-flakelet-app-slow2"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json agent: (finished: must succeed: jq '.services.app.prebuilt="/nix/store/ln47rsd5km8a04hd5zlkz4q1v352zqh3-flakelet-app-slow2"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json, in 0.01 seconds) client: must succeed: timeout 20 push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy --detach agent/app 2>&1 client: (finished: must succeed: timeout 20 push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy --detach agent/app 2>&1, in 0.02 seconds) agent: waiting for success: systemctl is-active flakelet-relay-job-app.service relay # [ 3743.246389] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:07:01.208152Z","level":"INFO","message":"deploy finished","job":"a19615bc96b8c3aaf5da692be00dc7c9","ok":false,"target":"flakelet_relay::relay::api"} relay # [ 3743.308610] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:07:01.270383Z","level":"INFO","message":"deploy accepted","job":"5b8c6c1afd171bca0e170ef2f1761332","caller":"x509:email:admin@example.org","targets":"[\"agent/app\"]","target":"flakelet_relay::relay::api"} agent # [ 3743.245107] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:07:01.206823Z","level":"INFO","message":"update finished","flakelet":"app","status":"Unchanged","generation":"Some(3)","target":"flakelet_relay::agent::jobs"} agent # [ 3743.308859] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:07:01.270655Z","level":"INFO","message":"start","id":"93d93d3f8646b9676387032a7275cfd3","flakelet":"app","rule":"admins","relay":"relay","caller":"Some(\"x509:email:admin@example.org\")","target":"flakelet_relay::agent::conn"} agent # [ 3743.309398] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:07:01.271218Z","level":"INFO","message":"update starting","flakelet":"app","ids":"[\"93d93d3f8646b9676387032a7275cfd3\"]","target":"flakelet_relay::agent::jobs"} agent # [ 3743.367031] agent systemd[1]: Starting flakelet update app (via relay)... agent # [ 3743.374878] agent systemd[1]: Started flakelet update app (via relay). agent # [ 3743.378521] agent flakelet[1762]: app: using prebuilt artifact /nix/store/ln47rsd5km8a04hd5zlkz4q1v352zqh3-flakelet-app-slow2 agent # [ 3743.379180] agent flakelet[1762]: app: activating generation 4 agent # [ 3743.395838] agent systemd[1]: Stopping app v1... agent # [ 3743.396315] agent systemd[1]: app.service: Deactivated successfully. agent # [ 3743.396581] agent systemd[1]: Stopped app v1. agent # [ 3743.415858] agent systemd[1]: Reload requested from client PID 1769 ('systemctl') (unit flakelet-relay-job-app.service)... agent # [ 3743.415916] agent systemd[1]: Reloading... agent # [ 3743.780042] agent systemd[1]: Reloading finished in 363 ms. agent # [ 3743.870286] agent systemd[1]: Reload requested from client PID 1799 ('systemctl') (unit flakelet-relay-job-app.service)... agent # [ 3743.870325] agent systemd[1]: Reloading... agent # [ 3744.247697] agent systemd[1]: Reloading finished in 376 ms. agent # [ 3744.326396] agent systemd[1]: Reload requested from client PID 1828 ('systemctl') (unit flakelet-relay-job-app.service)... agent # [ 3744.326443] agent systemd[1]: Reloading... agent: (finished: waiting for success: systemctl is-active flakelet-relay-job-app.service, in 1.49 seconds) ??? Warning (UserWarning): wait_until_fails(): passing a bare int/float as a duration is deprecated. Use datetime.timedelta instead. File "/nix/store/fv4yr9c0f9kyrfc00100i4rlshiiidbd-nixos-test-driver-1.1/lib/python3.14/site-packages/test_driver/duration.py", line 39 agent: waiting for failure: systemctl is-active flakelet-relay-job-app.service ??? Warning (UserWarning): execute(): passing a bare int/float as a duration is deprecated. Use datetime.timedelta instead. File "/nix/store/fv4yr9c0f9kyrfc00100i4rlshiiidbd-nixos-test-driver-1.1/lib/python3.14/site-packages/test_driver/duration.py", line 39 agent # [ 3744.708496] agent systemd[1]: Reloading finished in 381 ms. agent # [ 3744.813290] agent systemd[1]: Reload requested from client PID 1864 ('systemctl') (unit flakelet-relay-job-app.service)... agent # [ 3744.813326] agent systemd[1]: Reloading... agent # [ 3745.363370] agent systemd[1]: Reloading finished in 549 ms. agent # [ 3745.455573] agent systemd[1]: Starting app slow2... agent: (finished: waiting for failure: systemctl is-active flakelet-relay-job-app.service, in 6.72 seconds) (finished: subtest: detach returns once the job is accepted, in 8.24 seconds) subtest: unknown host is final, missing agent is retried, agents listing client: must fail: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy nope/app 2>&1 client: (finished: must fail: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy nope/app 2>&1, in 0.02 seconds) agent: must succeed: systemctl stop flakelet-agent agent: (finished: must succeed: systemctl stop flakelet-agent, in 0.04 seconds) relay: waiting for success: curl -sf http://127.0.0.1:7400/metrics | grep -q 'agent_up{host="agent"} 0' relay: (finished: waiting for success: curl -sf http://127.0.0.1:7400/metrics | grep -q 'agent_up{host="agent"} 0', in 0.01 seconds) client: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/other > /tmp/retry.out 2>&1 & client: (finished: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/other > /tmp/retry.out 2>&1 &, in 0.01 seconds) client: waiting for success: grep -q 'agent_unavailable.*retrying' /tmp/retry.out relay # [ 3751.552113] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:07:09.513881Z","level":"INFO","message":"agent disconnected: websocket closed","host":"agent","target":"flakelet_relay::relay::agent_conn"} agent # [ 3751.476115] agent systemd[1]: Started app slow2. agent # [ 3751.493635] agent flakelet[1762]: app: updated to generation 4 agent # [ 3751.496721] agent systemd[1]: flakelet-relay-job-app.service: Deactivated successfully. agent # [ 3751.551868] agent systemd[1]: Stopping flakelet-agent... agent # [ 3751.577918] agent systemd[1]: flakelet-agent.service: Deactivated successfully. agent # [ 3751.578322] agent systemd[1]: Stopped flakelet-agent. agent # [ 3751.578782] agent systemd[1]: flakelet-agent.service: Consumed 2.182s CPU time over 33.248s wall clock time. client: (finished: waiting for success: grep -q 'agent_unavailable.*retrying' /tmp/retry.out, in 1.02 seconds) agent: must succeed: systemctl start flakelet-agent agent: (finished: must succeed: systemctl start flakelet-agent, in 0.14 seconds) ??? Warning (UserWarning): wait_until_succeeds(): passing a bare int/float as a duration is deprecated. Use datetime.timedelta instead. File "/nix/store/fv4yr9c0f9kyrfc00100i4rlshiiidbd-nixos-test-driver-1.1/lib/python3.14/site-packages/test_driver/duration.py", line 39 client: waiting for success: grep -q 'agent/other: unchanged' /tmp/retry.out agent # [ 3752.629621] agent systemd[1]: Starting flakelet-agent... agent # [ 3752.691269] agent flakelet-agent[1952]: {"timestamp":"2026-09-06T08:07:10.653066Z","level":"INFO","message":"reattaching to running unit","flakelet":"app","ids":"[\"93d93d3f8646b9676387032a7275cfd3\"]","target":"flakelet_relay::agent::jobs"} agent # [ 3752.758158] agent systemd[1]: Started flakelet-agent. agent # [ 3752.764669] agent flakelet-agent[1952]: {"timestamp":"2026-09-06T08:07:10.726482Z","level":"INFO","message":"connected","relay":"https://relay:7443","relay_name":"relay","relay_version":"0.1.0","host":"agent","target":"flakelet_relay::agent::conn"} relay # [ 3752.764726] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:07:10.726519Z","level":"INFO","message":"agent connected","host":"agent","version":"0.1.0","flakelets":"[Named { name: \"app\", generation: Some(4), revision: Some(\"prebuilt:app\") }, Named { name: \"other\", generation: Some(1), revision: Some(\"prebuilt:other\") }]","target":"flakelet_relay::relay::agent_conn"} agent # [ 3753.259512] agent flakelet-agent[1952]: {"timestamp":"2026-09-06T08:07:11.221296Z","level":"INFO","message":"update finished","flakelet":"app","status":"Updated","generation":"Some(4)","target":"flakelet_relay::agent::jobs"} relay # [ 3754.619845] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:07:12.581606Z","level":"INFO","message":"deploy accepted","job":"a0d51d63c494ba51c639add0279645be","caller":"x509:email:admin@example.org","targets":"[\"agent/other\"]","target":"flakelet_relay::relay::api"} agent # [ 3754.620157] agent flakelet-agent[1952]: {"timestamp":"2026-09-06T08:07:12.581946Z","level":"INFO","message":"start","id":"fae0f38c6a1c17350bcb0237ff5631a6","flakelet":"other","rule":"admins","relay":"relay","caller":"Some(\"x509:email:admin@example.org\")","target":"flakelet_relay::agent::conn"} agent # [ 3754.620650] agent flakelet-agent[1952]: {"timestamp":"2026-09-06T08:07:12.582305Z","level":"INFO","message":"update starting","flakelet":"other","ids":"[\"fae0f38c6a1c17350bcb0237ff5631a6\"]","target":"flakelet_relay::agent::jobs"} agent # [ 3754.677765] agent systemd[1]: Starting flakelet update other (via relay)... agent # [ 3754.686844] agent systemd[1]: Started flakelet update other (via relay). agent # [ 3754.691672] agent flakelet[2385]: other: using prebuilt artifact /nix/store/hmr990n0b4v6rpzrcpyyw738r9xi7z95-flakelet-other-v1 agent # [ 3754.692331] agent flakelet[2385]: other: up to date agent # [ 3754.692602] agent systemd[1]: flakelet-relay-job-other.service: Deactivated successfully. relay # [ 3755.239983] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:07:13.201757Z","level":"INFO","message":"deploy finished","job":"a0d51d63c494ba51c639add0279645be","ok":true,"target":"flakelet_relay::relay::api"} agent # [ 3755.239148] agent flakelet-agent[1952]: {"timestamp":"2026-09-06T08:07:13.200961Z","level":"INFO","message":"update finished","flakelet":"other","status":"Unchanged","generation":"Some(1)","target":"flakelet_relay::agent::jobs"} client: (finished: waiting for success: grep -q 'agent/other: unchanged' /tmp/retry.out, in 3.04 seconds) client: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem agents client: (finished: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem agents, in 0.02 seconds) client: must succeed: echo '{"groups": []}' | step crypto jwt sign --key /nix/store/r7sclamg09v434w8zjlfnrcrn1w79wh6-flakelet-relay-test-issuer/jwk.json --iss https://relay:8443 --aud flakelet-relay --sub 'repo:github:example/app:ref:refs/heads/main' --exp $(( $(date +%s) + 300 )) --jti $(head -c8 /dev/urandom | base32) client: (finished: must succeed: echo '{"groups": []}' | step crypto jwt sign --key /nix/store/r7sclamg09v434w8zjlfnrcrn1w79wh6-flakelet-relay-test-issuer/jwk.json --iss https://relay:8443 --aud flakelet-relay --sub 'repo:github:example/app:ref:refs/heads/main' --exp $(( $(date +%s) + 300 )) --jti $(head -c8 /dev/urandom | base32), in 0.06 seconds) client: must succeed: FLAKELET_RELAY_TOKEN_COMMAND='echo eyJhbGciOiJFZERTQSIsImtpZCI6ImsxIiwidHlwIjoiSldUIn0.eyJhdWQiOiJmbGFrZWxldC1yZWxheSIsImV4cCI6MTc4ODY4MjMzMywiZ3JvdXBzIjpbXSwiaWF0IjoxNzg4NjgyMDMzLCJpc3MiOiJodHRwczovL3JlbGF5Ojg0NDMiLCJqdGkiOiI1NVEzQVVXSElRRDZHPT09IiwibmJmIjoxNzg4NjgyMDMzLCJzdWIiOiJyZXBvOmdpdGh1YjpleGFtcGxlL2FwcDpyZWY6cmVmcy9oZWFkcy9tYWluIn0.sxAH8BS1oJVxK5Rz7Q2NthAXSpmmqWCLJt0aJl4viSTD9lZf-gLzbBD-8Z00_wyzCq1DL-MdI5zNLsSH-CHPBg' push --relay https://relay:7443 agents client: (finished: must succeed: FLAKELET_RELAY_TOKEN_COMMAND='echo eyJhbGciOiJFZERTQSIsImtpZCI6ImsxIiwidHlwIjoiSldUIn0.eyJhdWQiOiJmbGFrZWxldC1yZWxheSIsImV4cCI6MTc4ODY4MjMzMywiZ3JvdXBzIjpbXSwiaWF0IjoxNzg4NjgyMDMzLCJpc3MiOiJodHRwczovL3JlbGF5Ojg0NDMiLCJqdGkiOiI1NVEzQVVXSElRRDZHPT09IiwibmJmIjoxNzg4NjgyMDMzLCJzdWIiOiJyZXBvOmdpdGh1YjpleGFtcGxlL2FwcDpyZWY6cmVmcy9oZWFkcy9tYWluIn0.sxAH8BS1oJVxK5Rz7Q2NthAXSpmmqWCLJt0aJl4viSTD9lZf-gLzbBD-8Z00_wyzCq1DL-MdI5zNLsSH-CHPBg' push --relay https://relay:7443 agents, in 0.02 seconds) (finished: subtest: unknown host is final, missing agent is retried, agents listing, in 4.38 seconds) subtest: out-of-band flakelet update reaches the relay without reconnect agent: must succeed: flakelet status --json app | jq '.[0].generation' agent: (finished: must succeed: flakelet status --json app | jq '.[0].generation', in 0.05 seconds) agent: must succeed: journalctl -u flakelet-agent -o cat | grep -c '"connected"' || true agent: (finished: must succeed: journalctl -u flakelet-agent -o cat | grep -c '"connected"' || true, in 0.01 seconds) agent: must succeed: jq '.services.app.prebuilt="/nix/store/6ili1vxjlag9d7dy0bxrbxk6bpi5qh9p-flakelet-app-v2"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json agent: (finished: must succeed: jq '.services.app.prebuilt="/nix/store/6ili1vxjlag9d7dy0bxrbxk6bpi5qh9p-flakelet-app-v2"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json, in 0.01 seconds) agent: must succeed: flakelet update app app: using prebuilt artifact /nix/store/6ili1vxjlag9d7dy0bxrbxk6bpi5qh9p-flakelet-app-v2 app: activating generation 5 agent # [ 3755.993354] agent systemd[1]: Stopping app slow2... agent # [ 3755.993826] agent systemd[1]: app.service: Deactivated successfully. agent # [ 3755.994117] agent systemd[1]: Stopped app slow2. agent # [ 3756.011800] agent systemd[1]: Reload requested from client PID 2433 ('systemctl')... agent # [ 3756.011868] agent systemd[1]: Reloading... agent # [ 3756.373362] agent systemd[1]: Reloading finished in 360 ms. agent # [ 3756.474266] agent systemd[1]: Reload requested from client PID 2462 ('systemctl')... agent # [ 3756.474302] agent systemd[1]: Reloading... agent # [ 3756.832233] agent systemd[1]: Reloading finished in 357 ms. agent # [ 3756.918798] agent systemd[1]: Reload requested from client PID 2492 ('systemctl')... agent # [ 3756.918834] agent systemd[1]: Reloading... agent # [ 3757.260759] agent systemd[1]: Reloading finished in 341 ms. agent # [ 3757.350671] agent systemd[1]: Reload requested from client PID 2523 ('systemctl')... agent # [ 3757.350710] agent systemd[1]: Reloading... agent: (finished: must succeed: flakelet update app, in 1.86 seconds) client: waiting for success: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem agents | grep -q 'app@5' agent # [ 3757.698785] agent systemd[1]: Reloading finished in 347 ms. agent # [ 3757.797083] agent systemd[1]: Starting app v2... agent # [ 3757.809449] agent systemd[1]: Started app v2. client: (finished: waiting for success: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem agents | grep -q 'app@5', in 1.07 seconds) agent: must succeed: journalctl -u flakelet-agent -o cat | grep -c '"connected"' || true agent: (finished: must succeed: journalctl -u flakelet-agent -o cat | grep -c '"connected"' || true, in 0.01 seconds) agent: must succeed: jq '.services.app.prebuilt="/nix/store/hysydfr96ds875vr0jgw5rjxi4p39h2j-flakelet-app-v1"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json agent: (finished: must succeed: jq '.services.app.prebuilt="/nix/store/hysydfr96ds875vr0jgw5rjxi4p39h2j-flakelet-app-v1"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json, in 0.01 seconds) agent: must succeed: flakelet update app app: using prebuilt artifact /nix/store/hysydfr96ds875vr0jgw5rjxi4p39h2j-flakelet-app-v1 app: activating generation 6 agent # [ 3758.945385] agent systemd[1]: Stopping app v2... agent # [ 3758.945846] agent systemd[1]: app.service: Deactivated successfully. agent # [ 3758.946131] agent systemd[1]: Stopped app v2. agent # [ 3758.965391] agent systemd[1]: Reload requested from client PID 2582 ('systemctl')... agent # [ 3758.965457] agent systemd[1]: Reloading... agent # [ 3759.336967] agent systemd[1]: Reloading finished in 370 ms. agent # [ 3759.433664] agent systemd[1]: Reload requested from client PID 2611 ('systemctl')... agent # [ 3759.433698] agent systemd[1]: Reloading... agent # [ 3759.815414] agent systemd[1]: Reloading finished in 381 ms. agent # [ 3759.894107] agent systemd[1]: Reload requested from client PID 2639 ('systemctl')... agent # [ 3759.894143] agent systemd[1]: Reloading... agent # [ 3760.245295] agent systemd[1]: Reloading finished in 350 ms. agent # [ 3760.336675] agent systemd[1]: Reload requested from client PID 2668 ('systemctl')... agent # [ 3760.336719] agent systemd[1]: Reloading... agent # [ 3760.682262] agent systemd[1]: Reloading finished in 345 ms. agent: (finished: must succeed: flakelet update app, in 1.88 seconds) client: waiting for success: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem agents | grep -q 'app@6' agent # [ 3760.779080] agent systemd[1]: Starting app v1... agent # [ 3760.788266] agent systemd[1]: Started app v1. client: (finished: waiting for success: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem agents | grep -q 'app@6', in 2.06 seconds) (finished: subtest: out-of-band flakelet update reaches the relay without reconnect, in 6.96 seconds) subtest: certificate not listed under agents cannot connect as agent client: must succeed: curl -s -o /dev/null -w '%{http_code}' --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/mallory/cert.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/mallory/key.pem -H 'Upgrade: websocket' -H 'Connection: Upgrade' -H 'Sec-WebSocket-Version: 13' -H 'Sec-WebSocket-Key: dGhlIHNhbXBsZSBub25jZQ==' https://relay:7443/v1/agent client: (finished: must succeed: curl -s -o /dev/null -w '%{http_code}' --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/mallory/cert.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/mallory/key.pem -H 'Upgrade: websocket' -H 'Connection: Upgrade' -H 'Sec-WebSocket-Version: 13' -H 'Sec-WebSocket-Key: dGhlIHNhbXBsZSBub25jZQ==' https://relay:7443/v1/agent, in 0.02 seconds) (finished: subtest: certificate not listed under agents cannot connect as agent, in 0.02 seconds) subtest: metrics relay: must succeed: curl -sf http://127.0.0.1:7400/metrics relay: (finished: must succeed: curl -sf http://127.0.0.1:7400/metrics, in 0.01 seconds) (finished: subtest: metrics, in 0.01 seconds) subtest: agent link drop mid-run replays missed lines once agent: must succeed: jq '.services.app.prebuilt="/nix/store/c67jj8kx3m50nyj874aqmdqf21w5iznd-flakelet-app-slow"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json agent: (finished: must succeed: jq '.services.app.prebuilt="/nix/store/c67jj8kx3m50nyj874aqmdqf21w5iznd-flakelet-app-slow"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json, in 0.01 seconds) agent: must succeed: date +%s agent: (finished: must succeed: date +%s, in 0.01 seconds) client: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/app > /tmp/slow.out 2>&1 & client: (finished: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/app > /tmp/slow.out 2>&1 &, in 0.01 seconds) agent: waiting for success: journalctl -u flakelet-relay-job-app.service --since=@1788682040 | grep -q 'app-slow' relay # [ 3762.883496] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:07:20.845266Z","level":"INFO","message":"agent rejected: no agents entry matches","principals":"[\"x509:dns:mallory\"]","target":"flakelet_relay::relay::agent_conn"} relay # [ 3762.931823] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:07:20.893603Z","level":"INFO","message":"deploy accepted","job":"299dcac2ca34e5dd338dc619fb0c5923","caller":"x509:email:admin@example.org","targets":"[\"agent/app\"]","target":"flakelet_relay::relay::api"} agent # [ 3762.932055] agent flakelet-agent[1952]: {"timestamp":"2026-09-06T08:07:20.893802Z","level":"INFO","message":"start","id":"119b272bfb57e7ab266feeddf1ed1236","flakelet":"app","rule":"admins","relay":"relay","caller":"Some(\"x509:email:admin@example.org\")","target":"flakelet_relay::agent::conn"} agent # [ 3762.932479] agent flakelet-agent[1952]: {"timestamp":"2026-09-06T08:07:20.894153Z","level":"INFO","message":"update starting","flakelet":"app","ids":"[\"119b272bfb57e7ab266feeddf1ed1236\"]","target":"flakelet_relay::agent::jobs"} agent # [ 3762.981336] agent systemd[1]: Starting flakelet update app (via relay)... agent # [ 3762.988847] agent systemd[1]: Started flakelet update app (via relay). agent # [ 3762.993173] agent flakelet[2735]: app: using prebuilt artifact /nix/store/c67jj8kx3m50nyj874aqmdqf21w5iznd-flakelet-app-slow agent # [ 3762.993747] agent flakelet[2735]: app: activating generation 7 agent # [ 3763.000964] agent systemd[1]: Stopping app v1... agent # [ 3763.001670] agent systemd[1]: app.service: Deactivated successfully. agent # [ 3763.001869] agent systemd[1]: Stopped app v1. agent # [ 3763.013209] agent systemd[1]: Reload requested from client PID 2742 ('systemctl') (unit flakelet-relay-job-app.service)... agent # [ 3763.013246] agent systemd[1]: Reloading... agent # [ 3763.364844] agent systemd[1]: Reloading finished in 351 ms. agent # [ 3763.448879] agent systemd[1]: Reload requested from client PID 2772 ('systemctl') (unit flakelet-relay-job-app.service)... agent # [ 3763.448918] agent systemd[1]: Reloading... agent: (finished: waiting for success: journalctl -u flakelet-relay-job-app.service --since=@1788682040 | grep -q 'app-slow', in 1.02 seconds) agent: must succeed: for a in $(getent ahosts relay | cut -d' ' -f1 | sort -u); do ip route add unreachable $a; done agent: (finished: must succeed: for a in $(getent ahosts relay | cut -d' ' -f1 | sort -u); do ip route add unreachable $a; done, in 0.02 seconds) relay: must succeed: for a in $(getent ahosts agent | cut -d' ' -f1 | sort -u); do ss -K dst "[$a]"; done relay: (finished: must succeed: for a in $(getent ahosts agent | cut -d' ' -f1 | sort -u); do ss -K dst "[$a]"; done, in 0.07 seconds) agent: must succeed: ss -K dport = 7443 agent # [ 3763.784557] agent systemd[1]: Reloading finished in 335 ms. agent # [ 3763.864439] agent systemd[1]: Reload requested from client PID 2801 ('systemctl') (unit flakelet-relay-job-app.service)... agent # [ 3763.864476] agent systemd[1]: Reloading... agent: (finished: must succeed: ss -K dport = 7443, in 0.04 seconds) agent: waiting for success: journalctl -u flakelet-relay-job-app.service --since=@1788682040 | grep -q 'updated to generation' relay # [ 3764.029500] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:07:21.991259Z","level":"INFO","message":"agent disconnected: Software caused connection abort (os error 103)","host":"agent","target":"flakelet_relay::relay::agent_conn"} agent # [ 3764.066792] agent flakelet-agent[1952]: {"timestamp":"2026-09-06T08:07:22.028474Z","level":"INFO","message":"disconnected: Software caused connection abort (os error 103)","relay":"https://relay:7443","target":"flakelet_relay::agent::conn"} agent # [ 3764.301939] agent systemd[1]: Reloading finished in 437 ms. agent # [ 3764.398971] agent systemd[1]: Reload requested from client PID 2846 ('systemctl') (unit flakelet-relay-job-app.service)... agent # [ 3764.399019] agent systemd[1]: Reloading... agent # [ 3764.781583] agent systemd[1]: Reloading finished in 382 ms. agent # [ 3764.877242] agent systemd[1]: Starting app slow... agent # [ 3765.069189] agent flakelet-agent[1952]: {"timestamp":"2026-09-06T08:07:23.030733Z","level":"WARN","message":"connect failed: connect relay:7443: No route to host (os error 113)","relay":"https://relay:7443","target":"flakelet_relay::agent::conn"} agent # [ 3767.072056] agent flakelet-agent[1952]: {"timestamp":"2026-09-06T08:07:25.033778Z","level":"WARN","message":"connect failed: connect relay:7443: No route to host (os error 113)","relay":"https://relay:7443","target":"flakelet_relay::agent::conn"} agent: (finished: waiting for success: journalctl -u flakelet-relay-job-app.service --since=@1788682040 | grep -q 'updated to generation', in 7.10 seconds) agent: must succeed: for a in $(getent ahosts relay | cut -d' ' -f1 | sort -u); do ip route del unreachable $a; done agent: (finished: must succeed: for a in $(getent ahosts relay | cut -d' ' -f1 | sort -u); do ip route del unreachable $a; done, in 0.02 seconds) client: waiting for success: grep -q 'agent/app: updated' /tmp/slow.out agent # [ 3770.929901] agent systemd[1]: Started app slow. agent # [ 3770.950296] agent flakelet[2735]: app: updated to generation 7 agent # [ 3770.955101] agent systemd[1]: flakelet-relay-job-app.service: Deactivated successfully. agent # [ 3771.074533] agent flakelet-agent[1952]: {"timestamp":"2026-09-06T08:07:29.036292Z","level":"WARN","message":"connect failed: connect relay:7443: No route to host (os error 113)","relay":"https://relay:7443","target":"flakelet_relay::agent::conn"} agent # [ 3771.983032] agent flakelet-agent[1952]: {"timestamp":"2026-09-06T08:07:29.944807Z","level":"INFO","message":"update finished","flakelet":"app","status":"Updated","generation":"Some(7)","target":"flakelet_relay::agent::jobs"} client: (finished: waiting for success: grep -q 'agent/app: updated' /tmp/slow.out, in 8.09 seconds) client: must succeed: cat /tmp/slow.out client: (finished: must succeed: cat /tmp/slow.out, in 0.01 seconds) (finished: subtest: agent link drop mid-run replays missed lines once, in 16.39 seconds) subtest: agent restart mid-run reattaches to the unit agent: must succeed: jq '.services.app.prebuilt="/nix/store/ln47rsd5km8a04hd5zlkz4q1v352zqh3-flakelet-app-slow2"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json agent: (finished: must succeed: jq '.services.app.prebuilt="/nix/store/ln47rsd5km8a04hd5zlkz4q1v352zqh3-flakelet-app-slow2"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json, in 0.01 seconds) client: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/app > /tmp/restart.out 2>&1 & client: (finished: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/app > /tmp/restart.out 2>&1 &, in 0.01 seconds) agent: waiting for success: journalctl -u flakelet-relay-job-app.service --since -20s | grep -q 'app-slow2' agent # [ 3779.078747] agent flakelet-agent[1952]: {"timestamp":"2026-09-06T08:07:37.040527Z","level":"INFO","message":"connected","relay":"https://relay:7443","relay_name":"relay","relay_version":"0.1.0","host":"agent","target":"flakelet_relay::agent::conn"} agent # [ 3779.079971] agent flakelet-agent[1952]: {"timestamp":"2026-09-06T08:07:37.041795Z","level":"INFO","message":"start","id":"119b272bfb57e7ab266feeddf1ed1236","flakelet":"app","rule":"admins","relay":"relay","caller":"Some(\"x509:email:admin@example.org\")","target":"flakelet_relay::agent::conn"} agent # [ 3779.314777] agent flakelet-agent[1952]: {"timestamp":"2026-09-06T08:07:37.276545Z","level":"INFO","message":"start","id":"5e31c6815724e5f5cf21726e751b7b67","flakelet":"app","rule":"admins","relay":"relay","caller":"Some(\"x509:email:admin@example.org\")","target":"flakelet_relay::agent::conn"} agent # [ 3779.315408] agent flakelet-agent[1952]: {"timestamp":"2026-09-06T08:07:37.277228Z","level":"INFO","message":"update starting","flakelet":"app","ids":"[\"5e31c6815724e5f5cf21726e751b7b67\"]","target":"flakelet_relay::agent::jobs"} relay # [ 3779.078825] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:07:37.040607Z","level":"INFO","message":"agent connected","host":"agent","version":"0.1.0","flakelets":"[Named { name: \"app\", generation: Some(7), revision: Some(\"prebuilt:app\") }, Named { name: \"other\", generation: Some(1), revision: Some(\"prebuilt:other\") }]","target":"flakelet_relay::relay::agent_conn"} relay # [ 3779.080367] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:07:37.042191Z","level":"INFO","message":"deploy finished","job":"299dcac2ca34e5dd338dc619fb0c5923","ok":true,"target":"flakelet_relay::relay::api"} relay # [ 3779.314344] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:07:37.276139Z","level":"INFO","message":"deploy accepted","job":"7c105d639142f8efc57dc90f22a7492c","caller":"x509:email:admin@example.org","targets":"[\"agent/app\"]","target":"flakelet_relay::relay::api"} agent # [ 3779.353056] agent systemd[1]: Starting flakelet update app (via relay)... agent # [ 3779.385408] agent systemd[1]: Started flakelet update app (via relay). agent # [ 3779.391291] agent flakelet[3028]: app: using prebuilt artifact /nix/store/ln47rsd5km8a04hd5zlkz4q1v352zqh3-flakelet-app-slow2 agent # [ 3779.392303] agent flakelet[3028]: app: activating generation 8 agent # [ 3779.404721] agent systemd[1]: Stopping app slow... agent # [ 3779.406410] agent systemd[1]: app.service: Deactivated successfully. agent # [ 3779.406685] agent systemd[1]: Stopped app slow. agent # [ 3779.422239] agent systemd[1]: Reload requested from client PID 3035 ('systemctl') (unit flakelet-relay-job-app.service)... agent # [ 3779.422310] agent systemd[1]: Reloading... agent # [ 3779.786125] agent systemd[1]: Reloading finished in 363 ms. agent # [ 3779.874221] agent systemd[1]: Reload requested from client PID 3065 ('systemctl') (unit flakelet-relay-job-app.service)... agent # [ 3779.874262] agent systemd[1]: Reloading... agent: (finished: waiting for success: journalctl -u flakelet-relay-job-app.service --since -20s | grep -q 'app-slow2', in 1.02 seconds) agent: must succeed: systemctl restart flakelet-agent agent # [ 3780.227703] agent systemd[1]: Reloading finished in 353 ms. agent # [ 3780.312319] agent systemd[1]: Reload requested from client PID 3094 ('systemctl') (unit flakelet-relay-job-app.service)... agent # [ 3780.312360] agent systemd[1]: Reloading... agent # [ 3780.658381] agent systemd[1]: Reloading finished in 345 ms. agent # [ 3780.751095] agent systemd[1]: Stopping flakelet-agent... agent # [ 3780.760646] agent systemd[1]: Reload requested from client PID 3129 ('systemctl') (unit flakelet-relay-job-app.service)... agent # [ 3780.760686] agent systemd[1]: Reloading... relay # [ 3780.751330] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:07:38.713105Z","level":"INFO","message":"agent disconnected: websocket closed","host":"agent","target":"flakelet_relay::relay::agent_conn"} agent: (finished: must succeed: systemctl restart flakelet-agent, in 0.99 seconds) agent: must succeed: test -n "$(ls /var/lib/flakelet-agent/jobs)" agent: (finished: must succeed: test -n "$(ls /var/lib/flakelet-agent/jobs)", in 0.01 seconds) client: waiting for success: grep -q 'agent/app: updated' /tmp/restart.out agent # [ 3781.110067] agent systemd[1]: Reloading finished in 349 ms. agent # [ 3781.193410] agent systemd[1]: flakelet-agent.service: Deactivated successfully. agent # [ 3781.193624] agent systemd[1]: Stopped flakelet-agent. agent # [ 3781.193640] agent systemd[1]: flakelet-agent.service: Consumed 1.342s CPU time over 28.563s wall clock time. agent # [ 3781.197767] agent systemd[1]: Starting flakelet-agent... agent # [ 3781.200494] agent systemd[1]: Starting app slow2... agent # [ 3781.259957] agent flakelet-agent[3160]: {"timestamp":"2026-09-06T08:07:39.221717Z","level":"INFO","message":"reattaching to running unit","flakelet":"app","ids":"[\"5e31c6815724e5f5cf21726e751b7b67\"]","target":"flakelet_relay::agent::jobs"} agent # [ 3781.313343] agent systemd[1]: Started flakelet-agent. agent # [ 3781.322882] agent flakelet-agent[3160]: {"timestamp":"2026-09-06T08:07:39.284701Z","level":"INFO","message":"connected","relay":"https://relay:7443","relay_name":"relay","relay_version":"0.1.0","host":"agent","target":"flakelet_relay::agent::conn"} agent # [ 3781.323073] agent flakelet-agent[3160]: {"timestamp":"2026-09-06T08:07:39.284905Z","level":"INFO","message":"start","id":"5e31c6815724e5f5cf21726e751b7b67","flakelet":"app","rule":"admins","relay":"relay","caller":"Some(\"x509:email:admin@example.org\")","target":"flakelet_relay::agent::conn"} relay # [ 3781.323102] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:07:39.284792Z","level":"INFO","message":"agent connected","host":"agent","version":"0.1.0","flakelets":"[Named { name: \"app\", generation: Some(7), revision: Some(\"prebuilt:app\") }, Named { name: \"other\", generation: Some(1), revision: Some(\"prebuilt:other\") }]","target":"flakelet_relay::relay::agent_conn"} agent # [ 3787.277318] agent systemd[1]: Started app slow2. agent # [ 3787.290979] agent flakelet[3028]: app: updated to generation 8 agent # [ 3787.292883] agent systemd[1]: flakelet-relay-job-app.service: Deactivated successfully. relay # [ 3787.864445] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:07:45.826219Z","level":"INFO","message":"deploy finished","job":"7c105d639142f8efc57dc90f22a7492c","ok":true,"target":"flakelet_relay::relay::api"} agent # [ 3787.863357] agent flakelet-agent[3160]: {"timestamp":"2026-09-06T08:07:45.825150Z","level":"INFO","message":"update finished","flakelet":"app","status":"Updated","generation":"Some(8)","target":"flakelet_relay::agent::jobs"} client: (finished: waiting for success: grep -q 'agent/app: updated' /tmp/restart.out, in 7.08 seconds) client: must succeed: cat /tmp/restart.out client: (finished: must succeed: cat /tmp/restart.out, in 0.01 seconds) agent: must succeed: systemctl is-active app.service agent: (finished: must succeed: systemctl is-active app.service, in 0.01 seconds) (finished: subtest: agent restart mid-run reattaches to the unit, in 9.13 seconds) subtest: relay restart mid-run, push resumes via /v1/jobs agent: must succeed: jq '.services.app.prebuilt="/nix/store/c67jj8kx3m50nyj874aqmdqf21w5iznd-flakelet-app-slow"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json agent: (finished: must succeed: jq '.services.app.prebuilt="/nix/store/c67jj8kx3m50nyj874aqmdqf21w5iznd-flakelet-app-slow"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json, in 0.01 seconds) agent: must succeed: date +%s agent: (finished: must succeed: date +%s, in 0.01 seconds) client: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/app > /tmp/resume.out 2>&1 & client: (finished: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/app > /tmp/resume.out 2>&1 &, in 0.00 seconds) agent: waiting for success: journalctl -u flakelet-relay-job-app.service --since=@1788682066 | grep -q 'app-slow' agent # [ 3788.456787] agent flakelet-agent[3160]: {"timestamp":"2026-09-06T08:07:46.418569Z","level":"INFO","message":"start","id":"7c08440c398a467ca1cd0c4f6cedbb9b","flakelet":"app","rule":"admins","relay":"relay","caller":"Some(\"x509:email:admin@example.org\")","target":"flakelet_relay::agent::conn"} agent # [ 3788.457205] agent flakelet-agent[3160]: {"timestamp":"2026-09-06T08:07:46.419032Z","level":"INFO","message":"update starting","flakelet":"app","ids":"[\"7c08440c398a467ca1cd0c4f6cedbb9b\"]","target":"flakelet_relay::agent::jobs"} agent # [ 3788.493919] agent systemd[1]: Starting flakelet update app (via relay)... agent # [ 3788.500413] agent systemd[1]: Started flakelet update app (via relay). agent # [ 3788.504156] agent flakelet[3645]: app: using prebuilt artifact /nix/store/c67jj8kx3m50nyj874aqmdqf21w5iznd-flakelet-app-slow agent # [ 3788.504653] agent flakelet[3645]: app: activating generation 9 agent # [ 3788.512431] agent systemd[1]: Stopping app slow2... agent # [ 3788.513142] agent systemd[1]: app.service: Deactivated successfully. agent # [ 3788.513272] agent systemd[1]: Stopped app slow2. agent # [ 3788.528156] agent systemd[1]: Reload requested from client PID 3652 ('systemctl') (unit flakelet-relay-job-app.service)... agent # [ 3788.528213] agent systemd[1]: Reloading... relay # [ 3788.456433] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:07:46.418223Z","level":"INFO","message":"deploy accepted","job":"4a2e9d6da4f588ebc1c8bd434af5e8b1","caller":"x509:email:admin@example.org","targets":"[\"agent/app\"]","target":"flakelet_relay::relay::api"} agent # [ 3788.901934] agent systemd[1]: Reloading finished in 373 ms. agent # [ 3788.988936] agent systemd[1]: Reload requested from client PID 3682 ('systemctl') (unit flakelet-relay-job-app.service)... agent # [ 3788.988980] agent systemd[1]: Reloading... agent: (finished: waiting for success: journalctl -u flakelet-relay-job-app.service --since=@1788682066 | grep -q 'app-slow', in 1.03 seconds) relay: must succeed: systemctl restart flakelet-relay agent # [ 3789.343324] agent systemd[1]: Reloading finished in 353 ms. agent # [ 3789.436452] agent systemd[1]: Reload requested from client PID 3713 ('systemctl') (unit flakelet-relay-job-app.service)... agent # [ 3789.436494] agent systemd[1]: Reloading... agent # [ 3789.494161] agent flakelet-agent[3160]: {"timestamp":"2026-09-06T08:07:47.455935Z","level":"INFO","message":"disconnected: websocket closed","relay":"https://relay:7443","target":"flakelet_relay::agent::conn"} relay # [ 3789.493804] relay systemd[1]: Stopping flakelet-relay... relay # [ 3789.534376] relay systemd[1]: flakelet-relay.service: Deactivated successfully. relay # [ 3789.534878] relay systemd[1]: Stopped flakelet-relay. relay # [ 3789.534930] relay systemd[1]: flakelet-relay.service: Consumed 2.386s CPU time over 1min 10.048s wall clock time. relay # [ 3789.576862] relay systemd[1]: Starting flakelet-relay... agent # [ 3789.804477] agent systemd[1]: Reloading finished in 367 ms. agent # [ 3789.895679] agent systemd[1]: Reload requested from client PID 3749 ('systemctl') (unit flakelet-relay-job-app.service)... agent # [ 3789.895717] agent systemd[1]: Reloading... agent # [ 3790.253174] agent systemd[1]: Reloading finished in 357 ms. agent # [ 3790.339356] agent systemd[1]: Starting app slow... agent # [ 3790.497148] agent flakelet-agent[3160]: {"timestamp":"2026-09-06T08:07:48.458840Z","level":"WARN","message":"connect failed: connect relay:7443: Connection refused (os error 111)","relay":"https://relay:7443","target":"flakelet_relay::agent::conn"} relay: (finished: must succeed: systemctl restart flakelet-relay, in 1.71 seconds) client: waiting for success: grep -q '» ok' /tmp/resume.out relay # [ 3791.177813] relay flakelet-relay[934]: {"timestamp":"2026-09-06T08:07:49.139580Z","level":"INFO","message":"listening on 127.0.0.1:7400","target":"flakelet_relay::relay::server"} relay # [ 3791.178576] relay flakelet-relay[934]: {"timestamp":"2026-09-06T08:07:49.140101Z","level":"INFO","message":"listening on [::]:7443","target":"flakelet_relay::relay::server"} relay # [ 3791.178432] relay systemd[1]: Started flakelet-relay. relay # [ 3792.513122] relay flakelet-relay[934]: {"timestamp":"2026-09-06T08:07:50.474840Z","level":"INFO","message":"agent connected","host":"agent","version":"0.1.0","flakelets":"[Named { name: \"app\", generation: Some(8), revision: Some(\"prebuilt:app\") }, Named { name: \"other\", generation: Some(1), revision: Some(\"prebuilt:other\") }]","target":"flakelet_relay::relay::agent_conn"} relay # [ 3792.514144] relay flakelet-relay[934]: {"timestamp":"2026-09-06T08:07:50.475808Z","level":"INFO","message":"job reattached","job":"4a2e9d6da4f588ebc1c8bd434af5e8b1","targets":"[\"agent/app\"]","target":"flakelet_relay::relay::api"} agent # [ 3792.512854] agent flakelet-agent[3160]: {"timestamp":"2026-09-06T08:07:50.474618Z","level":"INFO","message":"connected","relay":"https://relay:7443","relay_name":"relay","relay_version":"0.1.0","host":"agent","target":"flakelet_relay::agent::conn"} agent # [ 3796.385729] agent systemd[1]: Started app slow. agent # [ 3796.405913] agent flakelet[3645]: app: updated to generation 9 agent # [ 3796.408861] agent systemd[1]: flakelet-relay-job-app.service: Deactivated successfully. agent # [ 3797.496065] agent flakelet-agent[3160]: {"timestamp":"2026-09-06T08:07:55.457814Z","level":"INFO","message":"update finished","flakelet":"app","status":"Updated","generation":"Some(9)","target":"flakelet_relay::agent::jobs"} client: (finished: waiting for success: grep -q '» ok' /tmp/resume.out, in 7.09 seconds) client: must succeed: cat /tmp/resume.out client: (finished: must succeed: cat /tmp/resume.out, in 0.01 seconds) (finished: subtest: relay restart mid-run, push resumes via /v1/jobs, in 9.86 seconds) subtest: job history comes from the agents and survives a relay restart client: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy --id hist1 agent/other 2>&1 relay # [ 3798.298404] relay flakelet-relay[934]: {"timestamp":"2026-09-06T08:07:56.260198Z","level":"INFO","message":"deploy accepted","job":"188b06c4636b65849b3ba8daac22dc7c","caller":"x509:email:admin@example.org","targets":"[\"agent/other\"]","target":"flakelet_relay::relay::api"} agent # [ 3798.298878] agent flakelet-agent[3160]: {"timestamp":"2026-09-06T08:07:56.260609Z","level":"INFO","message":"start","id":"5be20c693e5c0b60e3f85779794dfb86","flakelet":"other","rule":"admins","relay":"relay","caller":"Some(\"x509:email:admin@example.org\")","target":"flakelet_relay::agent::conn"} agent # [ 3798.299507] agent flakelet-agent[3160]: {"timestamp":"2026-09-06T08:07:56.261324Z","level":"INFO","message":"update starting","flakelet":"other","ids":"[\"5be20c693e5c0b60e3f85779794dfb86\"]","target":"flakelet_relay::agent::jobs"} agent # [ 3798.344347] agent systemd[1]: Starting flakelet update other (via relay)... agent # [ 3798.378989] agent systemd[1]: Started flakelet update other (via relay). agent # [ 3798.383628] agent flakelet[3862]: other: using prebuilt artifact /nix/store/hmr990n0b4v6rpzrcpyyw738r9xi7z95-flakelet-other-v1 agent # [ 3798.384307] agent flakelet[3862]: other: up to date agent # [ 3798.386442] agent systemd[1]: flakelet-relay-job-other.service: Deactivated successfully. client: (finished: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy --id hist1 agent/other 2>&1, in 0.65 seconds) relay: must succeed: systemctl restart flakelet-relay agent # [ 3798.929617] agent flakelet-agent[3160]: {"timestamp":"2026-09-06T08:07:56.891386Z","level":"INFO","message":"update finished","flakelet":"other","status":"Unchanged","generation":"Some(1)","target":"flakelet_relay::agent::jobs"} agent # [ 3798.946512] agent flakelet-agent[3160]: {"timestamp":"2026-09-06T08:07:56.908280Z","level":"INFO","message":"disconnected: websocket closed","relay":"https://relay:7443","target":"flakelet_relay::agent::conn"} relay # [ 3798.930880] relay flakelet-relay[934]: {"timestamp":"2026-09-06T08:07:56.892644Z","level":"INFO","message":"deploy finished","job":"188b06c4636b65849b3ba8daac22dc7c","ok":true,"target":"flakelet_relay::relay::api"} relay # [ 3798.946365] relay systemd[1]: Stopping flakelet-relay... relay # [ 3798.978280] relay systemd[1]: flakelet-relay.service: Deactivated successfully. relay # [ 3798.978682] relay systemd[1]: Stopped flakelet-relay. relay # [ 3798.978726] relay systemd[1]: flakelet-relay.service: Consumed 1.939s CPU time over 9.401s wall clock time. relay # [ 3799.014781] relay systemd[1]: Starting flakelet-relay... agent # [ 3799.948933] agent flakelet-agent[3160]: {"timestamp":"2026-09-06T08:07:57.910712Z","level":"WARN","message":"connect failed: connect relay:7443: Connection refused (os error 111)","relay":"https://relay:7443","target":"flakelet_relay::agent::conn"} relay: (finished: must succeed: systemctl restart flakelet-relay, in 1.73 seconds) relay: waiting for success: curl -sf http://127.0.0.1:7400/metrics | grep -q 'agent_up{host="agent"} 1' relay # [ 3800.657426] relay flakelet-relay[1324]: {"timestamp":"2026-09-06T08:07:58.619183Z","level":"INFO","message":"listening on 127.0.0.1:7400","target":"flakelet_relay::relay::server"} relay # [ 3800.658286] relay flakelet-relay[1324]: {"timestamp":"2026-09-06T08:07:58.619626Z","level":"INFO","message":"listening on [::]:7443","target":"flakelet_relay::relay::server"} relay # [ 3800.658084] relay systemd[1]: Started flakelet-relay. agent # [ 3801.962062] agent flakelet-agent[3160]: {"timestamp":"2026-09-06T08:07:59.923818Z","level":"INFO","message":"connected","relay":"https://relay:7443","relay_name":"relay","relay_version":"0.1.0","host":"agent","target":"flakelet_relay::agent::conn"} relay # [ 3801.962188] relay flakelet-relay[1324]: {"timestamp":"2026-09-06T08:07:59.923963Z","level":"INFO","message":"agent connected","host":"agent","version":"0.1.0","flakelets":"[Named { name: \"app\", generation: Some(9), revision: Some(\"prebuilt:app\") }, Named { name: \"other\", generation: Some(1), revision: Some(\"prebuilt:other\") }]","target":"flakelet_relay::relay::agent_conn"} relay: (finished: waiting for success: curl -sf http://127.0.0.1:7400/metrics | grep -q 'agent_up{host="agent"} 1', in 2.06 seconds) client: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem jobs client: (finished: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem jobs, in 0.02 seconds) client: must succeed: echo '{"groups": []}' | step crypto jwt sign --key /nix/store/r7sclamg09v434w8zjlfnrcrn1w79wh6-flakelet-relay-test-issuer/jwk.json --iss https://relay:8443 --aud flakelet-relay --sub 'repo:github:example/app:ref:refs/heads/main' --exp $(( $(date +%s) + 300 )) --jti $(head -c8 /dev/urandom | base32) client: (finished: must succeed: echo '{"groups": []}' | step crypto jwt sign --key /nix/store/r7sclamg09v434w8zjlfnrcrn1w79wh6-flakelet-relay-test-issuer/jwk.json --iss https://relay:8443 --aud flakelet-relay --sub 'repo:github:example/app:ref:refs/heads/main' --exp $(( $(date +%s) + 300 )) --jti $(head -c8 /dev/urandom | base32), in 0.05 seconds) client: must succeed: FLAKELET_RELAY_TOKEN_COMMAND='echo eyJhbGciOiJFZERTQSIsImtpZCI6ImsxIiwidHlwIjoiSldUIn0.eyJhdWQiOiJmbGFrZWxldC1yZWxheSIsImV4cCI6MTc4ODY4MjM4MCwiZ3JvdXBzIjpbXSwiaWF0IjoxNzg4NjgyMDgwLCJpc3MiOiJodHRwczovL3JlbGF5Ojg0NDMiLCJqdGkiOiJOM0xZS1VHWTZVUkZJPT09IiwibmJmIjoxNzg4NjgyMDgwLCJzdWIiOiJyZXBvOmdpdGh1YjpleGFtcGxlL2FwcDpyZWY6cmVmcy9oZWFkcy9tYWluIn0.zH7hoDhDv8NeW79tYk4HmD6uois7tU83VFb8etClo-uWCZcWlN1cCR_M8XORVba6pj2ZQ0h01_ksIcgxgdM8BA' push --relay https://relay:7443 jobs client: (finished: must succeed: FLAKELET_RELAY_TOKEN_COMMAND='echo eyJhbGciOiJFZERTQSIsImtpZCI6ImsxIiwidHlwIjoiSldUIn0.eyJhdWQiOiJmbGFrZWxldC1yZWxheSIsImV4cCI6MTc4ODY4MjM4MCwiZ3JvdXBzIjpbXSwiaWF0IjoxNzg4NjgyMDgwLCJpc3MiOiJodHRwczovL3JlbGF5Ojg0NDMiLCJqdGkiOiJOM0xZS1VHWTZVUkZJPT09IiwibmJmIjoxNzg4NjgyMDgwLCJzdWIiOiJyZXBvOmdpdGh1YjpleGFtcGxlL2FwcDpyZWY6cmVmcy9oZWFkcy9tYWluIn0.zH7hoDhDv8NeW79tYk4HmD6uois7tU83VFb8etClo-uWCZcWlN1cCR_M8XORVba6pj2ZQ0h01_ksIcgxgdM8BA' push --relay https://relay:7443 jobs, in 0.02 seconds) (finished: subtest: job history comes from the agents and survives a relay restart, in 4.53 seconds) subtest: dashboard login via authorization code flow client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -o /dev/null -w '%{http_code} %{redirect_url}' https://relay:7443/ui/ | grep -q '303 https://relay:7443/ui/login' client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -o /dev/null -w '%{http_code} %{redirect_url}' https://relay:7443/ui/ | grep -q '303 https://relay:7443/ui/login', in 0.02 seconds) client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -L https://relay:7443/ui/login client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -L https://relay:7443/ui/login, in 0.09 seconds) client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar https://relay:7443/ui/jobs client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar https://relay:7443/ui/jobs, in 0.02 seconds) client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -f https://relay:7443/v1/jobs | grep -q hist1 client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -f https://relay:7443/v1/jobs | grep -q hist1, in 0.02 seconds) client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -N --max-time 10 https://relay:7443/ui/jobs/hist1/events || true client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -N --max-time 10 https://relay:7443/ui/jobs/hist1/events || true, in 0.02 seconds) client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -o /dev/null -w '%{http_code}' -X POST 'https://relay:7443/ui/deploy?arg=other' | grep -q 403 client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -o /dev/null -w '%{http_code}' -X POST 'https://relay:7443/ui/deploy?arg=other' | grep -q 403, in 0.02 seconds) client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -D - -o /dev/null -H 'HX-Request: true' -X POST 'https://relay:7443/ui/deploy?arg=other' client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -D - -o /dev/null -H 'HX-Request: true' -X POST 'https://relay:7443/ui/deploy?arg=other', in 0.02 seconds) client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -N --max-time 30 https://relay:7443/ui/jobs/7a241383af16a8e406de8d83f814c9ac/events || true relay # [ 3802.861793] relay 93sn3sv24fj26ksccpppzwg6kbf10s4w-device-mock[185]: 127.0.0.1 - - [06/Sep/2026 08:08:00] "GET /authorize?response_type=code&client_id=dashboard&redirect_uri=https%3A%2F%2Frelay%3A7443%2Fui%2Fcallback&scope=openid%20profile%20email%20groups&state=jg76-h7hDZxR8OUK0JD-6azS7aFZZKH15RtaahqHl4c&code_challenge=0MJ19on2OXeMV_yqg4jZy55KAfpLGaw4aHHt3KAhQXg&code_challenge_method=S256 HTTP/1.1" 302 - relay # [ 3802.915839] relay 93sn3sv24fj26ksccpppzwg6kbf10s4w-device-mock[185]: 127.0.0.1 - - [06/Sep/2026 08:08:00] "POST /token HTTP/1.1" 200 - relay # [ 3802.916910] relay flakelet-relay[1324]: {"timestamp":"2026-09-06T08:08:00.878707Z","level":"INFO","message":"login","name":"someone","principals":"[\"oidc:mock:someone\", \"oidc:mock:groups:wheel\"]","target":"flakelet_relay::relay::login"} relay # [ 3802.977367] relay flakelet-relay[1324]: {"timestamp":"2026-09-06T08:08:00.939168Z","level":"INFO","message":"job reattached","job":"188b06c4636b65849b3ba8daac22dc7c","targets":"[\"agent/other\"]","target":"flakelet_relay::relay::api"} relay # [ 3803.017650] relay flakelet-relay[1324]: {"timestamp":"2026-09-06T08:08:00.979459Z","level":"INFO","message":"deploy accepted","job":"f9de7b17aa735b99b01746960bb8ec0f","caller":"oidc:mock:someone\noidc:mock:groups:wheel","targets":"[\"agent/other\"]","target":"flakelet_relay::relay::api"} relay # [ 3803.035339] relay flakelet-relay[1324]: {"timestamp":"2026-09-06T08:08:00.997158Z","level":"INFO","message":"job reattached","job":"f9de7b17aa735b99b01746960bb8ec0f","targets":"[\"agent/other\"]","target":"flakelet_relay::relay::api"} agent # [ 3803.017928] agent flakelet-agent[3160]: {"timestamp":"2026-09-06T08:08:00.979689Z","level":"INFO","message":"start","id":"c2b14bc36ee48760c91bdd09173799b5","flakelet":"other","rule":"admins","relay":"relay","caller":"Some(\"oidc:mock:someone\\noidc:mock:groups:wheel\")","target":"flakelet_relay::agent::conn"} agent # [ 3803.018799] agent flakelet-agent[3160]: {"timestamp":"2026-09-06T08:08:00.980306Z","level":"INFO","message":"update starting","flakelet":"other","ids":"[\"c2b14bc36ee48760c91bdd09173799b5\"]","target":"flakelet_relay::agent::jobs"} agent # [ 3803.069794] agent systemd[1]: Starting flakelet update other (via relay)... agent # [ 3803.102505] agent systemd[1]: Started flakelet update other (via relay). agent # [ 3803.107148] agent flakelet[3910]: other: using prebuilt artifact /nix/store/hmr990n0b4v6rpzrcpyyw738r9xi7z95-flakelet-other-v1 agent # [ 3803.107639] agent flakelet[3910]: other: up to date agent # [ 3803.108093] agent systemd[1]: flakelet-relay-job-other.service: Deactivated successfully. client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -N --max-time 30 https://relay:7443/ui/jobs/7a241383af16a8e406de8d83f814c9ac/events || true, in 1.64 seconds) client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar https://relay:7443/ui/jobs/7a241383af16a8e406de8d83f814c9ac client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar https://relay:7443/ui/jobs/7a241383af16a8e406de8d83f814c9ac, in 0.02 seconds) client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -sf -o /dev/null https://relay:7443/ui/static/htmx.min.js client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -sf -o /dev/null https://relay:7443/ui/static/htmx.min.js, in 0.02 seconds) client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar 'https://relay:7443/ui/?q=status%3Ahealthy+oth' client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar 'https://relay:7443/ui/?q=status%3Ahealthy+oth', in 0.03 seconds) client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar https://relay:7443/ui/flakelets/other client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar https://relay:7443/ui/flakelets/other, in 0.02 seconds) client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar 'https://relay:7443/ui/hosts?q=status%3Adisconnected' client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar 'https://relay:7443/ui/hosts?q=status%3Adisconnected', in 0.02 seconds) client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -o /dev/null -w '%{http_code}' -H 'HX-Request: true' -X POST 'https://relay:7443/ui/retry?arg=7a241383af16a8e406de8d83f814c9ac' | grep -q 400 client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -o /dev/null -w '%{http_code}' -H 'HX-Request: true' -X POST 'https://relay:7443/ui/retry?arg=7a241383af16a8e406de8d83f814c9ac' | grep -q 400, in 0.02 seconds) client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -N --max-time 15 'https://relay:7443/ui/events?path=jobs' > /tmp/ev.out 2>&1 & client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -N --max-time 15 'https://relay:7443/ui/events?path=jobs' > /tmp/ev.out 2>&1 &, in 0.00 seconds) client: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy --id live1 agent/other » job 38796a7ba508eadfe82a1cd5def000bc via relay 0.1.0 (agents: agent 0.1.0) » wave 0 agent # [ 3804.660129] agent flakelet-agent[3160]: {"timestamp":"2026-09-06T08:08:02.621914Z","level":"INFO","message":"update finished","flakelet":"other","status":"Unchanged","generation":"Some(1)","target":"flakelet_relay::agent::jobs"} agent # [ 3804.806630] agent flakelet-agent[3160]: {"timestamp":"2026-09-06T08:08:02.768375Z","level":"INFO","message":"start","id":"5e317fc57863c2a7c03ebe1bdacd1356","flakelet":"other","rule":"admins","relay":"relay","caller":"Some(\"x509:email:admin@example.org\")","target":"flakelet_relay::agent::conn"} agent # [ 3804.807210] agent flakelet-agent[3160]: {"timestamp":"2026-09-06T08:08:02.769030Z","level":"INFO","message":"update starting","flakelet":"other","ids":"[\"5e317fc57863c2a7c03ebe1bdacd1356\"]","target":"flakelet_relay::agent::jobs"} agent # [ 3804.882735] agent systemd[1]: Starting flakelet update other (via relay)... agent/other | Starting flakelet update other (via relay)... agent/other | Started flakelet update other (via relay). relay # [ 3804.806392] relay flakelet-relay[1324]: {"timestamp":"2026-09-06T08:08:02.768149Z","level":"INFO","message":"deploy accepted","job":"38796a7ba508eadfe82a1cd5def000bc","caller":"x509:email:admin@example.org","targets":"[\"agent/other\"]","target":"flakelet_relay::relay::api"} agent # [ 3804.918919] agent systemd[1]: Started flakelet update other (via relay). agent # [ 3804.924500] agent flakelet[3949]: other: using prebuilt artifact /nix/store/hmr990n0b4v6rpzrcpyyw738r9xi7z95-flakelet-other-v1 agent # [ 3804.925395] agent flakelet[3949]: other: up to date agent # [ 3804.927734] agent systemd[1]: flakelet-relay-job-other.service: Deactivated successfully. agent/other | other: using prebuilt artifact /nix/store/hmr990n0b4v6rpzrcpyyw738r9xi7z95-flakelet-other-v1 agent/other | other: up to date agent/other | flakelet-relay-job-other.service: Deactivated successfully. » agent/other: unchanged (generation 1) » ok client: (finished: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy --id live1 agent/other, in 0.69 seconds) client: waiting for success: grep -q live1 /tmp/ev.out client: (finished: waiting for success: grep -q live1 /tmp/ev.out, in 0.01 seconds) client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -X POST -o /dev/null https://relay:7443/ui/logout client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -X POST -o /dev/null https://relay:7443/ui/logout, in 0.03 seconds) client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -o /dev/null -w '%{http_code}' https://relay:7443/ui/ | grep -q 303 client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -o /dev/null -w '%{http_code}' https://relay:7443/ui/ | grep -q 303, in 0.02 seconds) (finished: subtest: dashboard login via authorization code flow, in 2.73 seconds) (finished: run the VM test script, in 89.54 seconds) test script finished in 89.58s cleanup kill NspawnMachine (pid 52) kill NspawnMachine (pid 53) Container agent terminated by signal KILL. kill NspawnMachine (pid 54) Container client terminated by signal KILL. Container relay terminated by signal KILL. (finished: cleanup, in 0.39 seconds) additionally exposed symbols: agent, client, relay, vlan1, start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh » job f6b4a01f952bd26817363b94ad1f4314 via relay 0.1.0 (agents: agent 0.1.0) » wave 0 agent/app | Starting flakelet update app (via relay)... agent/app | Started flakelet update app (via relay). agent/app | app: using prebuilt artifact /nix/store/6ili1vxjlag9d7dy0bxrbxk6bpi5qh9p-flakelet-app-v2 agent/app | app: activating generation 2 agent/app | app: updated to generation 2 agent/app | flakelet-relay-job-app.service: Deactivated successfully. » agent/app: updated (generation 2) » ok » job f8c9871dafe4785fa0ee067769aeb98e via relay 0.1.0 (agents: agent 0.1.0) » wave 0 agent/app | Starting flakelet update app (via relay)... agent/app | Started flakelet update app (via relay). agent/app | app: using prebuilt artifact /nix/store/8282rnbvyk847q4l4zby3zwcq3jpzrvw-flakelet-app-broken agent/app | app: activating generation 4 agent/app | app: deploy failed, rolled back: systemctl start app.service failed: agent/app | failed units: app.service. See journalctl -u app.service agent/app | flakelet-relay-job-app.service: Main process exited, code=exited, status=1/FAILURE agent/app | flakelet-relay-job-app.service: Failed with result 'exit-code'. » agent/app: rolled-back (generation 3) agent/app │ Starting app v1... agent/app │ Started app v1. agent/app │ Stopping app v1... agent/app │ app.service: Deactivated successfully. agent/app │ Stopped app v1. agent/app │ Starting app v2... agent/app │ Started app v2. agent/app │ Stopping app v2... agent/app │ app.service: Deactivated successfully. agent/app │ Stopped app v2. agent/app │ Starting app v1... agent/app │ Started app v1. agent/app │ Stopping app v1... agent/app │ app.service: Deactivated successfully. agent/app │ Stopped app v1. agent/app │ Starting app broken... agent/app │ app.service: Unable to locate executable '/nonexistent': No such file or directory agent/app │ app.service: Failed at step EXEC spawning /nonexistent: No such file or directory agent/app │ app.service: Main process exited, code=exited, status=203/EXEC agent/app │ app.service: Failed with result 'exit-code'. agent/app │ Failed to start app broken. agent/app │ Starting app v1... agent/app │ Started app v1. » skipped: agent/other » failed » job 299dcac2ca34e5dd338dc619fb0c5923 via relay 0.1.0 (agents: agent 0.1.0) » wave 0 agent/app | Starting flakelet update app (via relay)... agent/app | Started flakelet update app (via relay). agent/app | app: using prebuilt artifact /nix/store/c67jj8kx3m50nyj874aqmdqf21w5iznd-flakelet-app-slow agent/app | app: activating generation 7 agent/app | app: updated to generation 7 agent/app | flakelet-relay-job-app.service: Deactivated successfully. » agent/app: updated (generation 7) » ok » job 7c105d639142f8efc57dc90f22a7492c via relay 0.1.0 (agents: agent 0.1.0) » wave 0 agent/app | Starting flakelet update app (via relay)... agent/app | Started flakelet update app (via relay). agent/app | app: using prebuilt artifact /nix/store/ln47rsd5km8a04hd5zlkz4q1v352zqh3-flakelet-app-slow2 agent/app | app: activating generation 8 agent/app | app: updated to generation 8 agent/app | flakelet-relay-job-app.service: Deactivated successfully. » agent/app: updated (generation 8) » ok » job 4a2e9d6da4f588ebc1c8bd434af5e8b1 via relay 0.1.0 (agents: agent 0.1.0) » wave 0 agent/app | Starting flakelet update app (via relay)... agent/app | Started flakelet update app (via relay). agent/app | app: using prebuilt artifact /nix/store/c67jj8kx3m50nyj874aqmdqf21w5iznd-flakelet-app-slow agent/app | app: activating generation 9 flakelet-push: stream: error reading a body from connection, resuming job cbf27e5ac1cd2091eb2259be342662cc flakelet-push: https://relay:7443: connect relay:7443: Connection refused (os error 111), retrying in 1s flakelet-push: https://relay:7443: connect relay:7443: Connection refused (os error 111), retrying in 2s » job 4a2e9d6da4f588ebc1c8bd434af5e8b1 via relay 0.1.0 (agents: agent 0.1.0) » wave 0 agent/app | app: updated to generation 9 agent/app | flakelet-relay-job-app.service: Deactivated successfully. » agent/app: updated (generation 9) » ok 1788682076 hist1 x509:email:admin@example.org agent/other:unchanged 1788682066 cbf27e5ac1cd2091eb2259be342662cc x509:email:admin@example.org agent/app:updated 1788682057 77f01ee0405a4c51610547a2803f3e59 x509:email:admin@example.org agent/app:updated 1788682040 5a6fd65dc935742c60aabe2d241217fc x509:email:admin@example.org agent/app:updated 1788682032 2e75cecf2c1fa353321c0e7be56c5722 x509:email:admin@example.org agent/other:unchanged 1788682021 68fbd7d1c58e59d53d374fb858932ad3 x509:email:admin@example.org agent/app:updated 1788682019 8908431036055355d130719a760d397b x509:email:admin@example.org agent/app:unchanged 1788682017 af52e393b4598113716eafbc1e19b992 x509:email:admin@example.org agent/app:unchanged 1788682017 de82ab2efd3a1639541471a65596ab2d x509:email:admin@example.org agent/app:unchanged 1788682012 05e3d1c96b34c436768094ed2f6567ef x509:email:admin@example.org agent/app:rolled-back 1788682011 7981d30189185f02a5a49912c9b9864a oidc:mock:groups:wheel agent/other:unchanged 1788682011 c331c7acab417f64c4b1cee2c604787f oidc:mock:groups:wheel agent/other:unchanged 1788682008 b57d7b9cc285db4fe8194f525c8d5a5c oidc:mock:groups:wheel agent/other:unchanged 1788682005 cc434b9fe415d9ce883b2fabe964fcff oidc:mock:repo:github:example/app:ref:refs/heads/main agent/app:updated 1788682002 41ccf25088220b91790e3094551e20cf x509:email:admin@example.org agent/app:updated