tribuchet: building on jamie
Machine state will be reset. To keep it, pass --keep-machine-state
start all VLans
(finished: start all VLans, in 0.00 seconds)
Initializing machine ID from random generator.
Test will time out and terminate in 3600.0 seconds
run the VM test script
start all VMs
agent: systemd-nspawn running (pid 52)
client: systemd-nspawn running (pid 53)
agent: Waiting for journal at /build/vm-state-agent/var/log/journal...
client: Waiting for journal at /build/vm-state-client/var/log/journal...
relay: systemd-nspawn running (pid 55)
relay: Waiting for journal at /build/vm-state-relay/var/log/journal...
(finished: start all VMs, in 0.00 seconds)
relay: waiting for unit flakelet-relay.service
nixos-nspawn(client): TAP vde-tap1 not found; container will be isolated from VDE
nixos-nspawn(client): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.
nixos-nspawn(agent): TAP vde-tap1 not found; container will be isolated from VDE
nixos-nspawn(agent): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.
nixos-nspawn(relay): TAP vde-tap1 not found; container will be isolated from VDE
nixos-nspawn(relay): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.
Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.
Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.
░ Spawning container agent on /build/vm-state-agent.
░ Spawning container client on /build/vm-state-client.
Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.
░ Spawning container relay on /build/vm-state-relay.
agent # No journal files were found.
agent # No journal boot entry found for the specified boot (+0).
client # No journal files were found.
relay # No journal files were found.
client # No journal boot entry found for the specified boot (+0).
relay # No journal boot entry found for the specified boot (+0).
agent # [ 6489.770528] agent systemd-journald[57]: Journal started
agent # [ 6489.770570] agent systemd-journald[57]: Runtime Journal (/run/log/journal/b1fdb1dce89b492c8d2930df51a4408f) is 8M, max 4G, 3.9G free.
agent # [ 6489.780648] agent systemd[1]: Finished Apply Kernel Variables.
agent # [ 6489.792430] agent systemd[1]: Finished Create Static Device Nodes in /dev gracefully.
agent # [ 6489.806578] agent systemd[1]: Starting Flush Journal to Persistent Storage...
agent # [ 6489.807262] agent systemd[1]: Starting Create Static Device Nodes in /dev...
agent # [ 6489.840237] agent systemd-journald[57]: Time spent on flushing to /var/log/journal/b1fdb1dce89b492c8d2930df51a4408f is 1.465ms for 6 entries.
agent # [ 6489.840237] agent systemd-journald[57]: System Journal (/var/log/journal/b1fdb1dce89b492c8d2930df51a4408f) is 512B, max 4G, 3.9G free.
agent # [ 6489.849995] agent systemd[1]: Finished Create Static Device Nodes in /dev.
agent # [ 6489.850689] agent systemd[1]: Reached target Preparation for Local File Systems.
agent # [ 6489.850792] agent systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys
agent # [ 6489.865077] agent systemd[1]: Finished Flush Journal to Persistent Storage.
agent # [ 6489.921479] agent systemd[1]: Finished Firewall.
agent # [ 6490.780510] agent systemd[1]: Mounting /run/wrappers...
relay # [ 6489.771473] relay systemd-journald[57]: Journal started
relay # [ 6489.771514] relay systemd-journald[57]: Runtime Journal (/run/log/journal/b893045a583043ae92a959ddb134e1f6) is 8M, max 4G, 3.9G free.
relay # [ 6489.783285] relay systemd[1]: Finished Apply Kernel Variables.
relay # [ 6489.794934] relay systemd[1]: Finished Create Static Device Nodes in /dev gracefully.
relay # [ 6489.809221] relay systemd[1]: Starting Flush Journal to Persistent Storage...
relay # [ 6489.809787] relay systemd[1]: Starting Create Static Device Nodes in /dev...
relay # [ 6489.840662] relay systemd-journald[57]: Time spent on flushing to /var/log/journal/b893045a583043ae92a959ddb134e1f6 is 1.365ms for 6 entries.
relay # [ 6489.840662] relay systemd-journald[57]: System Journal (/var/log/journal/b893045a583043ae92a959ddb134e1f6) is 512B, max 4G, 3.9G free.
relay # [ 6489.848940] relay systemd[1]: Finished Create Static Device Nodes in /dev.
relay # [ 6489.849712] relay systemd[1]: Reached target Preparation for Local File Systems.
relay # [ 6489.849826] relay systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys
relay # [ 6489.863537] relay systemd[1]: Finished Flush Journal to Persistent Storage.
relay # [ 6489.951649] relay systemd[1]: Finished Firewall.
relay # [ 6490.777528] relay systemd[1]: Mounting /run/wrappers...
relay # [ 6490.835913] relay systemd[1]: Mounted /run/wrappers.
relay # [ 6490.837092] relay systemd[1]: Reached target Local File Systems.
relay # [ 6490.838159] relay systemd[1]: Listening on Boot Loader Control Service Socket.
relay # [ 6490.839744] relay systemd[1]: Starting Create SUID/SGID Wrappers...
relay # [ 6490.839780] relay systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container
relay # [ 6490.840788] relay systemd[1]: Starting Save Transient machine-id to Disk...
relay # [ 6490.841836] relay systemd[1]: Starting Create System Files and Directories...
client # [ 6489.777074] client systemd-journald[57]: Journal started
client # [ 6489.777115] client systemd-journald[57]: Runtime Journal (/run/log/journal/387011b69f904649aed15fbbbaa29d81) is 8M, max 4G, 3.9G free.
client # [ 6489.788442] client systemd[1]: Finished Apply Kernel Variables.
client # [ 6489.800176] client systemd[1]: Finished Create Static Device Nodes in /dev gracefully.
client # [ 6489.834667] client systemd[1]: Starting Flush Journal to Persistent Storage...
client # [ 6489.835396] client systemd[1]: Starting Create Static Device Nodes in /dev...
client # [ 6489.843583] client systemd-journald[57]: Time spent on flushing to /var/log/journal/387011b69f904649aed15fbbbaa29d81 is 1.718ms for 6 entries.
client # [ 6489.843583] client systemd-journald[57]: System Journal (/var/log/journal/387011b69f904649aed15fbbbaa29d81) is 512B, max 4G, 3.9G free.
client # [ 6489.852825] client systemd[1]: Finished Create Static Device Nodes in /dev.
client # [ 6489.853525] client systemd[1]: Reached target Preparation for Local File Systems.
client # [ 6489.853645] client systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys
client # [ 6489.867385] client systemd[1]: Finished Flush Journal to Persistent Storage.
client # [ 6489.927499] client systemd[1]: Finished Firewall.
client # [ 6490.777433] client systemd[1]: Mounting /run/wrappers...
relay # [ 6490.861099] relay systemd-tmpfiles[169]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted
relay # [ 6490.861506] relay systemd-tmpfiles[169]: fchmod() of /var/log/journal failed: Operation not permitted
relay # [ 6490.861815] relay systemd-tmpfiles[169]: fchmod() of /var/log/journal/b893045a583043ae92a959ddb134e1f6 failed: Operation not permitted
client # [ 6490.845957] client systemd[1]: Mounted /run/wrappers.
agent # [ 6490.846084] agent systemd[1]: Mounted /run/wrappers.
client # [ 6490.847185] client systemd[1]: Reached target Local File Systems.
agent # [ 6490.847333] agent systemd[1]: Reached target Local File Systems.
client # [ 6490.848550] client systemd[1]: Listening on Boot Loader Control Service Socket.
agent # [ 6490.848848] agent systemd[1]: Listening on Boot Loader Control Service Socket.
client # [ 6490.849711] client systemd[1]: Starting Create SUID/SGID Wrappers...
agent # [ 6490.850243] agent systemd[1]: Starting Create SUID/SGID Wrappers...
client # [ 6490.849756] client systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container
agent # [ 6490.850287] agent systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container
client # [ 6490.850661] client systemd[1]: Starting Save Transient machine-id to Disk...
agent # [ 6490.851807] agent systemd[1]: Starting Save Transient machine-id to Disk...
client # [ 6490.851608] client systemd[1]: Starting Create System Files and Directories...
agent # [ 6490.853341] agent systemd[1]: Starting Create System Files and Directories...
client # [ 6490.870101] client suid-sgid-wrappers-start[168]: chmod: changing permissions of '/run/wrappers/wrappers.bRN2u6D8x3/chsh': Operation not permitted
agent # [ 6490.871235] agent systemd-tmpfiles[161]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted
client # [ 6490.871253] client systemd-tmpfiles[161]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted
agent # [ 6490.871636] agent systemd-tmpfiles[161]: fchmod() of /var/log/journal failed: Operation not permitted
client # [ 6490.871665] client systemd-tmpfiles[161]: fchmod() of /var/log/journal failed: Operation not permitted
agent # [ 6490.871941] agent systemd-tmpfiles[161]: fchmod() of /var/log/journal/b1fdb1dce89b492c8d2930df51a4408f failed: Operation not permitted
client # [ 6490.871979] client systemd-tmpfiles[161]: fchmod() of /var/log/journal/387011b69f904649aed15fbbbaa29d81 failed: Operation not permitted
agent # [ 6490.872336] agent systemd-tmpfiles[161]: fchmod() of /run/log/journal failed: Operation not permitted
client # [ 6490.872344] client systemd-tmpfiles[161]: fchmod() of /run/log/journal failed: Operation not permitted
client # [ 6490.934695] client systemd[1]: etc-machine\x2did.mount: Deactivated successfully.
client # [ 6490.953637] client systemd[1]: suid-sgid-wrappers.service: Main process exited, code=exited, status=1/FAILURE
client # [ 6490.953673] client systemd[1]: suid-sgid-wrappers.service: Failed with result 'exit-code'.
client # [ 6490.953715] client systemd[1]: Failed to start Create SUID/SGID Wrappers.
client # [ 6490.953849] client systemd[1]: Finished Save Transient machine-id to Disk.
client # [ 6490.954313] client systemd[1]: Finished Create System Files and Directories.
client # [ 6490.980802] client systemd[1]: Starting Rebuild Journal Catalog...
client # [ 6490.982233] client systemd[1]: Starting Record System Boot/Shutdown in UTMP...
client # [ 6490.995164] client systemd[1]: Finished Record System Boot/Shutdown in UTMP.
client # [ 6491.002089] client systemd[1]: Finished Rebuild Journal Catalog.
client # [ 6491.003079] client systemd[1]: Starting Update is Completed...
client # [ 6491.011585] client systemd[1]: Finished Update is Completed.
client # [ 6491.011674] client systemd[1]: Reached target System Initialization.
client # [ 6491.011756] client systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container
client # [ 6491.011779] client systemd[1]: Started Daily Cleanup of Temporary Directories.
client # [ 6491.011796] client systemd[1]: Reached target Timer Units.
client # [ 6491.011885] client systemd[1]: Listening on D-Bus System Message Bus Socket.
client # [ 6491.012034] client systemd[1]: Listening on Nix Daemon Socket.
client # [ 6491.012127] client systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.
client # [ 6491.012141] client systemd[1]: Reached target Socket Units.
client # [ 6491.012167] client systemd[1]: Reached target Basic System.
client # [ 6491.013131] client systemd[1]: Starting Import lastlog data into lastlog2 database...
client # [ 6491.013952] client systemd[1]: Starting Name Service Cache Daemon (nsncd)...
client # [ 6491.014574] client systemd[1]: Starting resolvconf update...
relay # [ 6490.862059] relay suid-sgid-wrappers-start[176]: chmod: changing permissions of '/run/wrappers/wrappers.Vt1SNURo61/chsh': Operation not permitted
relay # [ 6490.862155] relay systemd-tmpfiles[169]: fchmod() of /run/log/journal failed: Operation not permitted
relay # [ 6490.865441] relay systemd[1]: suid-sgid-wrappers.service: Main process exited, code=exited, status=1/FAILURE
relay # [ 6490.865729] relay systemd[1]: suid-sgid-wrappers.service: Failed with result 'exit-code'.
relay # [ 6490.865934] relay systemd[1]: Failed to start Create SUID/SGID Wrappers.
relay # [ 6490.886847] relay systemd[1]: Finished Create System Files and Directories.
relay # [ 6490.928185] relay systemd[1]: etc-machine\x2did.mount: Deactivated successfully.
relay # [ 6490.939938] relay systemd[1]: Finished Save Transient machine-id to Disk.
relay # [ 6490.943967] relay systemd[1]: Starting Rebuild Journal Catalog...
relay # [ 6490.945011] relay systemd[1]: Starting Record System Boot/Shutdown in UTMP...
relay # [ 6490.990155] relay systemd[1]: Finished Record System Boot/Shutdown in UTMP.
relay # [ 6490.997361] relay systemd[1]: Finished Rebuild Journal Catalog.
relay # [ 6490.998501] relay systemd[1]: Starting Update is Completed...
relay # [ 6491.006632] relay systemd[1]: Finished Update is Completed.
relay # [ 6491.006720] relay systemd[1]: Reached target System Initialization.
relay # [ 6491.006789] relay systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container
relay # [ 6491.006810] relay systemd[1]: Started Daily Cleanup of Temporary Directories.
relay # [ 6491.006824] relay systemd[1]: Reached target Timer Units.
relay # [ 6491.006915] relay systemd[1]: Listening on D-Bus System Message Bus Socket.
relay # [ 6491.007107] relay systemd[1]: Listening on Nix Daemon Socket.
relay # [ 6491.007202] relay systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.
relay # [ 6491.007216] relay systemd[1]: Reached target Socket Units.
relay # [ 6491.007244] relay systemd[1]: Reached target Basic System.
relay # [ 6491.008554] relay systemd[1]: Started device-mock.service.
relay # [ 6491.009243] relay systemd[1]: Starting Re-link flakelet services at boot...
relay # [ 6491.010247] relay systemd[1]: Starting Import lastlog data into lastlog2 database...
relay # [ 6491.011110] relay systemd[1]: Starting Name Service Cache Daemon (nsncd)...
relay # [ 6491.011849] relay systemd[1]: Starting resolvconf update...
relay # [ 6491.020756] relay systemd[1]: Finished Re-link flakelet services at boot.
relay # [ 6491.022394] relay systemd[1]: Starting Reconcile flakelet services with the host configuration...
relay # [ 6491.028534] relay systemd[1]: Finished Import lastlog data into lastlog2 database.
agent # [ 6490.872519] agent suid-sgid-wrappers-start[168]: chmod: changing permissions of '/run/wrappers/wrappers.tW1nQLZzZI/chsh': Operation not permitted
agent # [ 6490.924551] agent systemd[1]: etc-machine\x2did.mount: Deactivated successfully.
agent # [ 6490.936235] agent systemd[1]: suid-sgid-wrappers.service: Main process exited, code=exited, status=1/FAILURE
agent # [ 6490.936330] agent systemd[1]: suid-sgid-wrappers.service: Failed with result 'exit-code'.
agent # [ 6490.936492] agent systemd[1]: Failed to start Create SUID/SGID Wrappers.
agent # [ 6490.936713] agent systemd[1]: Finished Save Transient machine-id to Disk.
agent # [ 6490.937152] agent systemd[1]: Finished Create System Files and Directories.
agent # [ 6490.980679] agent systemd[1]: Starting Rebuild Journal Catalog...
agent # [ 6490.981922] agent systemd[1]: Starting Record System Boot/Shutdown in UTMP...
agent # [ 6490.995017] agent systemd[1]: Finished Record System Boot/Shutdown in UTMP.
agent # [ 6491.001589] agent systemd[1]: Finished Rebuild Journal Catalog.
agent # [ 6491.002578] agent systemd[1]: Starting Update is Completed...
agent # [ 6491.012225] agent systemd[1]: Finished Update is Completed.
agent # [ 6491.013095] agent systemd[1]: Reached target System Initialization.
agent # [ 6491.013265] agent systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container
agent # [ 6491.013317] agent systemd[1]: Started Daily Cleanup of Temporary Directories.
agent # [ 6491.013341] agent systemd[1]: Reached target Timer Units.
agent # [ 6491.013516] agent systemd[1]: Listening on D-Bus System Message Bus Socket.
agent # [ 6491.013833] agent systemd[1]: Listening on Nix Daemon Socket.
agent # [ 6491.014021] agent systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.
agent # [ 6491.014048] agent systemd[1]: Reached target Socket Units.
agent # [ 6491.014097] agent systemd[1]: Reached target Basic System.
agent # [ 6491.015830] agent systemd[1]: Starting Re-link flakelet services at boot...
agent # [ 6491.017021] agent systemd[1]: Starting Import lastlog data into lastlog2 database...
agent # [ 6491.018471] agent systemd[1]: Starting Name Service Cache Daemon (nsncd)...
agent # [ 6491.019630] agent systemd[1]: Starting resolvconf update...
agent # [ 6491.028619] agent systemd[1]: Finished Re-link flakelet services at boot.
agent # [ 6491.031329] agent systemd[1]: Starting Reconcile flakelet services with the host configuration...
agent # [ 6491.037445] agent systemd[1]: Finished Import lastlog data into lastlog2 database.
agent # [ 6491.041666] agent systemd[1]: Finished Reconcile flakelet services with the host configuration.
agent # [ 6491.104603] agent systemd[1]: nscd.service: Deactivated successfully.
agent # [ 6491.104718] agent systemd[1]: Stopped Name Service Cache Daemon (nsncd).
agent # [ 6491.138439] agent systemd[1]: Finished resolvconf update.
agent # [ 6491.139897] agent systemd[1]: Reached target Preparation for Network.
agent # [ 6491.141550] agent systemd[1]: Starting Address configuration of eth1...
agent # [ 6491.142876] agent systemd[1]: Starting Extra networking commands....
agent # [ 6491.144431] agent systemd[1]: Starting Name Service Cache Daemon (nsncd)...
agent # [ 6491.159071] agent network-addresses-eth1-start[240]: adding address 192.168.1.1/24... done
agent # [ 6491.162320] agent network-addresses-eth1-start[240]: adding address 2001:db8:1::1/64... done
agent # [ 6491.168441] agent systemd[1]: Finished Address configuration of eth1.
agent # [ 6491.218252] agent systemd[1]: Finished Extra networking commands..
agent # [ 6491.218379] agent systemd[1]: Reached target Network.
agent # [ 6491.219391] agent systemd[1]: Starting flakelet-agent...
agent # [ 6491.220059] agent systemd[1]: Starting Update flakelet service app...
agent # [ 6491.220729] agent systemd[1]: Starting Update flakelet service other...
agent # [ 6491.239780] agent systemd[1]: nscd.service: Deactivated successfully.
agent # [ 6491.239908] agent systemd[1]: Stopped Name Service Cache Daemon (nsncd).
agent # [ 6491.242286] agent systemd[1]: Starting Name Service Cache Daemon (nsncd)...
agent # [ 6491.244501] agent flakelet[305]: app: using prebuilt artifact /nix/store/hysydfr96ds875vr0jgw5rjxi4p39h2j-flakelet-app-v1
agent # [ 6491.245048] agent flakelet[305]: app: activating generation 1
agent # [ 6491.246012] agent flakelet[306]: other: using prebuilt artifact /nix/store/hmr990n0b4v6rpzrcpyyw738r9xi7z95-flakelet-other-v1
agent # [ 6491.246538] agent flakelet[306]: other: activating generation 1
agent # [ 6491.248571] agent systemd[1]: Reload requested from client PID 312 ('systemctl') (unit flakelet-app.service)...
agent # [ 6491.248606] agent systemd[1]: Reloading...
agent # [ 6491.277469] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:52:49.239170Z","level":"WARN","message":"SRV _flakelet-relay._tcp.test: lookup failed","target":"flakelet_agent"}
client # [ 6491.033274] client systemd[1]: Finished Import lastlog data into lastlog2 database.
client # [ 6491.099524] client systemd[1]: nscd.service: Deactivated successfully.
client # [ 6491.099648] client systemd[1]: Stopped Name Service Cache Daemon (nsncd).
client # [ 6491.101087] client systemd[1]: Finished resolvconf update.
client # [ 6491.101889] client systemd[1]: Reached target Preparation for Network.
client # [ 6491.102907] client systemd[1]: Starting Address configuration of eth1...
client # [ 6491.103739] client systemd[1]: Starting Extra networking commands....
client # [ 6491.104141] client systemd[1]: nscd.service: Failed to spawn executor: No such file or directory
client # [ 6491.104253] client systemd[1]: nscd.service: Failed to spawn 'start' task: No such file or directory
client # [ 6491.104287] client systemd[1]: nscd.service: Failed with result 'resources'.
client # [ 6491.104327] client systemd[1]: Failed to start Name Service Cache Daemon (nsncd).
client # [ 6491.104337] client systemd[1]: Dependency failed for User and Group Name Lookups.
client # [ 6491.104345] client systemd[1]: nss-user-lookup.target: Job nss-user-lookup.target/start failed with result 'dependency'.
client # [ 6491.104353] client systemd[1]: Dependency failed for Host and Network Name Lookups.
client # [ 6491.104357] client systemd[1]: nss-lookup.target: Job nss-lookup.target/start failed with result 'dependency'.
client # [ 6491.106035] client systemd[1]: nscd.service: Scheduled restart job immediately on client request, restart counter is at 1.
client # [ 6491.138683] client systemd[1]: Starting Name Service Cache Daemon (nsncd)...
client # [ 6491.155948] client network-addresses-eth1-start[236]: adding address 192.168.1.2/24... done
client # [ 6491.160294] client network-addresses-eth1-start[236]: adding address 2001:db8:1::2/64... done
client # [ 6491.165177] client systemd[1]: Finished Address configuration of eth1.
client # [ 6491.214442] client systemd[1]: Finished Extra networking commands..
client # [ 6491.214567] client systemd[1]: Reached target Network.
client # [ 6491.249138] client systemd[1]: nscd.service: Deactivated successfully.
client # [ 6491.249312] client systemd[1]: Stopped Name Service Cache Daemon (nsncd).
client # [ 6491.251744] client systemd[1]: Starting Name Service Cache Daemon (nsncd)...
relay # [ 6491.032495] relay systemd[1]: Finished Reconcile flakelet services with the host configuration.
relay # [ 6491.100750] relay systemd[1]: Finished resolvconf update.
relay # [ 6491.100889] relay systemd[1]: Reached target Preparation for Network.
relay # [ 6491.101983] relay systemd[1]: Starting Address configuration of eth1...
relay # [ 6491.103094] relay systemd[1]: Starting Extra networking commands....
relay # [ 6491.103256] relay systemd[1]: nscd.service: Deactivated successfully.
relay # [ 6491.103374] relay systemd[1]: Stopped Name Service Cache Daemon (nsncd).
relay # [ 6491.138760] relay systemd[1]: Starting Name Service Cache Daemon (nsncd)...
relay # [ 6491.155090] relay network-addresses-eth1-start[247]: adding address 192.168.1.3/24... done
relay # [ 6491.159928] relay network-addresses-eth1-start[247]: adding address 2001:db8:1::3/64... done
relay # [ 6491.165493] relay systemd[1]: Finished Address configuration of eth1.
relay # [ 6491.202805] relay systemd[1]: Finished Extra networking commands..
relay # [ 6491.203080] relay systemd[1]: Reached target Network.
relay # [ 6491.205270] relay systemd[1]: Starting Dnsmasq Daemon...
relay # [ 6491.206869] relay systemd[1]: Starting Nginx Web Server...
relay # [ 6491.208258] relay systemd[1]: Starting Update flakelet service flakelet-relay...
relay # [ 6491.218862] relay flakelet[311]: flakelet-relay: using prebuilt artifact /nix/store/h395iyz9mh3cgzdb5h23w492d95kp8l0-flakelet-flakelet-relay
relay # [ 6491.219532] relay flakelet[311]: flakelet-relay: activating generation 1
relay # [ 6491.224653] relay systemd[1]: Reload requested from client PID 314 ('systemctl') (unit flakelet-flakelet-relay.service)...
relay # [ 6491.224718] relay systemd[1]: Reloading...
agent # [ 6491.566606] agent nsncd[311]: Sep 06 08:52:49.528 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"
agent # [ 6491.695212] agent systemd[1]: Reloading finished in 446 ms.
relay # [ 6491.585359] relay nsncd[251]: Sep 06 08:52:49.547 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"
relay # [ 6491.704688] relay systemd[1]: Reloading finished in 464 ms.
relay # [ 6491.824709] relay systemd[1]: Started Name Service Cache Daemon (nsncd).
relay # [ 6491.825654] relay systemd[1]: Reached target Host and Network Name Lookups.
relay # [ 6491.825745] relay systemd[1]: Reached target User and Group Name Lookups.
relay # [ 6491.827133] relay systemd[1]: Starting User Login Management...
relay # [ 6491.828406] relay systemd[1]: Starting Permit User Sessions...
client # [ 6491.570481] client nsncd[305]: Sep 06 08:52:49.532 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"
client # [ 6491.576194] client systemd[1]: Started Name Service Cache Daemon (nsncd).
client # [ 6491.576284] client systemd[1]: Reached target Host and Network Name Lookups.
client # [ 6491.576384] client systemd[1]: Reached target User and Group Name Lookups.
client # [ 6491.578881] client systemd[1]: Starting User Login Management...
client # [ 6491.580285] client systemd[1]: Starting Permit User Sessions...
client # [ 6491.614234] client systemd[1]: Finished Permit User Sessions.
client # [ 6491.616217] client systemd[1]: Started Console Getty.
client # [ 6491.616265] client systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0
client # [ 6491.616295] client systemd[1]: Reached target Login Prompts.
agent # [ 6491.823800] agent systemd[1]: Started flakelet-agent.
agent # [ 6491.823900] agent systemd[1]: Started Name Service Cache Daemon (nsncd).
agent # [ 6491.825704] agent systemd[1]: Reached target Host and Network Name Lookups.
agent # [ 6491.825786] agent systemd[1]: Reached target User and Group Name Lookups.
agent # [ 6491.827189] agent systemd[1]: Starting User Login Management...
agent # [ 6491.828256] agent systemd[1]: Starting Permit User Sessions...
agent # [ 6491.829356] agent systemd[1]: Reload requested from client PID 318 ('systemctl') (unit flakelet-other.service)...
agent # [ 6491.829386] agent systemd[1]: Reloading...
relay # [ 6491.837392] relay dnsmasq-pre-start[359]: dnsmasq: syntax check OK.
relay # [ 6491.845934] relay systemd[1]: Reload requested from client PID 360 ('systemctl') (unit flakelet-flakelet-relay.service)...
relay # [ 6491.845967] relay systemd[1]: Reloading...
agent # [ 6492.215122] agent systemd[1]: Reloading finished in 385 ms.
agent # [ 6492.348327] agent systemd[1]: Finished Permit User Sessions.
agent # [ 6492.351767] agent systemd[1]: Started Console Getty.
agent # [ 6492.351793] agent systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0
agent # [ 6492.351804] agent systemd[1]: Reached target Login Prompts.
agent # [ 6492.356416] agent systemd[1]: Reload requested from client PID 777 ('systemctl') (unit flakelet-app.service)...
agent # [ 6492.356444] agent systemd[1]: Reloading...
relay # [ 6492.224346] relay systemd[1]: Reloading finished in 378 ms.
relay # [ 6492.349193] relay systemd[1]: Finished Permit User Sessions.
relay # [ 6492.353349] relay systemd[1]: Started Console Getty.
relay # [ 6492.353419] relay systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0
relay # [ 6492.353492] relay systemd[1]: Reached target Login Prompts.
relay # [ 6492.376318] relay systemd[1]: Starting flakelet-relay...
agent # [ 6492.716457] agent systemd[1]: Reloading finished in 359 ms.
agent # [ 6492.782887] agent systemd[1]: Reload requested from client PID 779 ('systemctl') (unit flakelet-other.service)...
agent # [ 6492.782930] agent systemd[1]: Reloading...
client # [ 6492.982384] client systemd-logind[317]: New seat seat0.
client # [ 6492.982864] client systemd[1]: Started User Login Management.
client # [ 6492.985119] client systemd[1]: Starting D-Bus System Message Bus...
client # [ 6492.986720] client systemd[1]: Starting linger-users.service...
client # [ 6493.021056] client systemd[1]: linger-users.service: Deactivated successfully.
client # [ 6493.021433] client systemd[1]: Finished linger-users.service.
client # [ 6493.021768] client systemd[1]: Reached target Multi-User System.
relay # [ 6492.897156] relay nginx-pre-start[402]: nginx: the configuration file /nix/store/01avjj26wcihp926xgasszcj5s0k7cbs-nginx.conf syntax is ok
relay # [ 6492.897769] relay nginx-pre-start[402]: nginx: configuration file /nix/store/01avjj26wcihp926xgasszcj5s0k7cbs-nginx.conf test is successful
relay # [ 6492.917890] relay systemd[1]: Started Nginx Web Server.
relay # [ 6493.016408] relay systemd[1]: Starting D-Bus System Message Bus...
agent # [ 6493.137071] agent systemd[1]: Reloading finished in 353 ms.
agent # [ 6493.213642] agent systemd[1]: Starting other v1...
agent # [ 6493.216166] agent systemd[1]: Starting app v1...
agent # [ 6493.245398] agent systemd[1]: Started app v1.
agent # [ 6493.245962] agent systemd[1]: Started other v1.
agent # [ 6493.259871] agent flakelet[306]: other: updated to generation 1
agent # [ 6493.261573] agent systemd[1]: Finished Update flakelet service other.
agent # [ 6493.264801] agent flakelet[305]: app: updated to generation 1
agent # [ 6493.266266] agent systemd[1]: Finished Update flakelet service app.
agent # [ 6493.266388] agent systemd[1]: Reached target flakelet managed services.
agent # [ 6493.365560] agent systemd-logind[741]: New seat seat0.
agent # [ 6493.366669] agent systemd[1]: Starting D-Bus System Message Bus...
agent # [ 6493.366736] agent systemd[1]: Started User Login Management.
agent # [ 6493.367781] agent systemd[1]: Starting linger-users.service...
agent # [ 6493.400489] agent systemd[1]: linger-users.service: Deactivated successfully.
agent # [ 6493.400785] agent systemd[1]: Finished linger-users.service.
agent # [ 6493.401159] agent systemd[1]: Reached target Multi-User System.
client # [ 6493.521560] client dbus-broker-launch[327]: Looking up NSS user entry for 'systemd-timesync'...
client # [ 6493.523116] client dbus-broker-launch[327]: NSS returned no entry for 'systemd-timesync'
client # [ 6493.523116] client dbus-broker-launch[327]: Invalid user-name in /nix/store/zf4qd09sm09a3f6c7ph9j8x45mxdi014-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"
client # [ 6493.523903] client systemd[1]: Started D-Bus System Message Bus.
client # [ 6493.524413] client systemd[1]: Startup finished in 4.188s.
client # [ 6493.529964] client dbus-broker-launch[327]: Ready
relay # [ 6493.370641] relay systemd-logind[354]: New seat seat0.
relay # [ 6493.371046] relay systemd[1]: Started User Login Management.
relay # [ 6493.392065] relay systemd[1]: Starting linger-users.service...
relay # [ 6493.416929] relay systemd[1]: linger-users.service: Deactivated successfully.
relay # [ 6493.417112] relay systemd[1]: Finished linger-users.service.
relay # [ 6493.547403] relay dbus-broker-launch[408]: Looking up NSS user entry for 'systemd-timesync'...
relay # [ 6493.548439] relay dbus-broker-launch[408]: NSS returned no entry for 'systemd-timesync'
relay # [ 6493.548439] relay dbus-broker-launch[408]: Invalid user-name in /nix/store/27h4g2jdw18vrabfh6p1l0n8ss5dhbp5-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"
relay # [ 6493.549158] relay systemd[1]: Started D-Bus System Message Bus.
relay # [ 6493.555784] relay dbus-broker-launch[408]: Ready
relay # [ 6493.559123] relay systemd[1]: Started Dnsmasq Daemon.
relay # [ 6493.561129] relay dnsmasq[394]: started, version 2.93 cachesize 150
relay # [ 6493.561136] relay dnsmasq[394]: compile time options: IPv6 GNU-getopt DBus no-UBus no-i18n IDN2 DHCP DHCPv6 no-Lua TFTP conntrack ipset nftset auth DNSSEC loop-detect inotify dumpfile
relay # [ 6493.561143] relay dnsmasq[394]: DBus support enabled: connected to system bus
relay # [ 6493.561150] relay dnsmasq[394]: no upstream servers configured - please set them from DBus
relay # [ 6493.561246] relay dnsmasq[394]: read /etc/hosts - 9 names
agent # [ 6493.809420] agent dbus-broker-launch[854]: Looking up NSS user entry for 'systemd-timesync'...
agent # [ 6493.810668] agent dbus-broker-launch[854]: NSS returned no entry for 'systemd-timesync'
agent # [ 6493.810668] agent dbus-broker-launch[854]: Invalid user-name in /nix/store/q3c2gxfm178wqgzv8m87na4aa72wxc04-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"
agent # [ 6493.811880] agent systemd[1]: Started D-Bus System Message Bus.
agent # [ 6493.812375] agent systemd[1]: Startup finished in 4.468s.
agent # [ 6493.817165] agent dbus-broker-launch[854]: Ready
relay # [ 6494.326492] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:52:52.288161Z","level":"INFO","message":"listening on 127.0.0.1:7400","target":"flakelet_relay::relay::server"}
relay # [ 6494.327459] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:52:52.288925Z","level":"INFO","message":"listening on [::]:7443","target":"flakelet_relay::relay::server"}
relay # [ 6494.327303] relay systemd[1]: Started flakelet-relay.
relay # [ 6494.337227] relay systemd[1]: Starting health for flakelet-relay...
relay # [ 6494.581124] relay systemd[1]: flakelet-relay-health.service: Deactivated successfully.
relay # [ 6494.581487] relay systemd[1]: Finished health for flakelet-relay.
relay # [ 6494.625402] relay flakelet[311]: flakelet-relay: updated to generation 1
relay # [ 6494.628073] relay systemd[1]: Finished Update flakelet service flakelet-relay.
relay # [ 6494.628636] relay systemd[1]: Reached target flakelet managed services.
relay # [ 6494.628819] relay systemd[1]: Reached target Multi-User System.
relay # [ 6494.629096] relay systemd[1]: Startup finished in 5.291s.
relay: (finished: waiting for unit flakelet-relay.service, in 6.16 seconds)
relay: waiting for unit nginx.service
relay: (finished: waiting for unit nginx.service, in 0.02 seconds)
agent: waiting for unit flakelet.target
agent: (finished: waiting for unit flakelet.target, in 0.02 seconds)
agent: waiting for unit flakelet-agent.service
agent: (finished: waiting for unit flakelet-agent.service, in 0.02 seconds)
client: waiting for unit multi-user.target
client: (finished: waiting for unit multi-user.target, in 0.02 seconds)
relay: waiting for success: curl -sf http://127.0.0.1:7400/metrics | grep -q 'agent_up{host="agent"} 1'
agent # [ 6496.299263] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:52:54.261026Z","level":"INFO","message":"connected","relay":"https://relay:7443","relay_name":"relay","relay_version":"0.1.0","host":"agent","target":"flakelet_relay::agent::conn"}
relay # [ 6496.299645] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:52:54.261357Z","level":"INFO","message":"agent connected","host":"agent","version":"0.1.0","flakelets":"[Named { name: \"app\", generation: Some(1), revision: Some(\"prebuilt:app\") }, Named { name: \"other\", generation: Some(1), revision: Some(\"prebuilt:other\") }]","target":"flakelet_relay::relay::agent_conn"}
relay: (finished: waiting for success: curl -sf http://127.0.0.1:7400/metrics | grep -q 'agent_up{host="agent"} 1', in 2.05 seconds)
agent: must succeed: systemctl is-active app.service other.service
agent: (finished: must succeed: systemctl is-active app.service other.service, in 0.01 seconds)
subtest: deploy with client certificate, relay found via SRV
agent: must succeed: jq '.services.app.prebuilt="/nix/store/6ili1vxjlag9d7dy0bxrbxk6bpi5qh9p-flakelet-app-v2"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json
agent: (finished: must succeed: jq '.services.app.prebuilt="/nix/store/6ili1vxjlag9d7dy0bxrbxk6bpi5qh9p-flakelet-app-v2"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json, in 0.01 seconds)
client: must succeed: push --relay-srv test --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/app 2>&1
agent # [ 6497.172819] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:52:55.134586Z","level":"INFO","message":"start","id":"4540a4fcf844438b65e27e71b048b17c","flakelet":"app","rule":"admins","relay":"relay","caller":"Some(\"x509:email:admin@example.org\")","target":"flakelet_relay::agent::conn"}
agent # [ 6497.173762] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:52:55.135584Z","level":"INFO","message":"update starting","flakelet":"app","ids":"[\"4540a4fcf844438b65e27e71b048b17c\"]","target":"flakelet_relay::agent::jobs"}
agent # [ 6497.223960] agent systemd[1]: Starting flakelet update app (via relay)...
agent # [ 6497.256101] agent systemd[1]: Started flakelet update app (via relay).
agent # [ 6497.260994] agent flakelet[883]: app: using prebuilt artifact /nix/store/6ili1vxjlag9d7dy0bxrbxk6bpi5qh9p-flakelet-app-v2
agent # [ 6497.261643] agent flakelet[883]: app: activating generation 2
agent # [ 6497.274705] agent systemd[1]: Stopping app v1...
agent # [ 6497.275199] agent systemd[1]: app.service: Deactivated successfully.
agent # [ 6497.275463] agent systemd[1]: Stopped app v1.
agent # [ 6497.297349] agent systemd[1]: Reload requested from client PID 892 ('systemctl') (unit flakelet-relay-job-app.service)...
agent # [ 6497.297415] agent systemd[1]: Reloading...
relay # [ 6497.172135] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:52:55.133844Z","level":"INFO","message":"deploy accepted","job":"a6a9af5bb0313e5df650650e58fcc52b","caller":"x509:email:admin@example.org","targets":"[\"agent/app\"]","target":"flakelet_relay::relay::api"}
agent # [ 6497.628142] agent systemd[1]: Reloading finished in 329 ms.
agent # [ 6497.716103] agent systemd[1]: Reload requested from client PID 924 ('systemctl') (unit flakelet-relay-job-app.service)...
agent # [ 6497.716137] agent systemd[1]: Reloading...
agent # [ 6498.038187] agent systemd[1]: Reloading finished in 321 ms.
agent # [ 6498.114360] agent systemd[1]: Reload requested from client PID 954 ('systemctl') (unit flakelet-relay-job-app.service)...
agent # [ 6498.114397] agent systemd[1]: Reloading...
agent # [ 6498.433899] agent systemd[1]: Reloading finished in 319 ms.
agent # [ 6498.518035] agent systemd[1]: Reload requested from client PID 988 ('systemctl') (unit flakelet-relay-job-app.service)...
agent # [ 6498.518072] agent systemd[1]: Reloading...
agent # [ 6498.839154] agent systemd[1]: Reloading finished in 320 ms.
agent # [ 6498.915739] agent systemd[1]: Starting app v2...
agent # [ 6498.947529] agent systemd[1]: Started app v2.
agent # [ 6498.961402] agent flakelet[883]: app: updated to generation 2
agent # [ 6498.963563] agent systemd[1]: flakelet-relay-job-app.service: Deactivated successfully.
client: (finished: must succeed: push --relay-srv test --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/app 2>&1, in 2.93 seconds)
agent: must succeed: systemctl show app.service -p Description | grep -q 'app v2'
agent: (finished: must succeed: systemctl show app.service -p Description | grep -q 'app v2', in 0.01 seconds)
agent: must succeed: journalctl -u flakelet-relay-job-app.service | grep -q 'generation 2'
agent: (finished: must succeed: journalctl -u flakelet-relay-job-app.service | grep -q 'generation 2', in 0.01 seconds)
(finished: subtest: deploy with client certificate, relay found via SRV, in 2.97 seconds)
subtest: deploy with OIDC token, sub principal
agent: must succeed: jq '.services.app.prebuilt="/nix/store/hysydfr96ds875vr0jgw5rjxi4p39h2j-flakelet-app-v1"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json
agent: (finished: must succeed: jq '.services.app.prebuilt="/nix/store/hysydfr96ds875vr0jgw5rjxi4p39h2j-flakelet-app-v1"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json, in 0.01 seconds)
client: must succeed: echo '{"groups": []}' | step crypto jwt sign --key /nix/store/r7sclamg09v434w8zjlfnrcrn1w79wh6-flakelet-relay-test-issuer/jwk.json --iss https://relay:8443 --aud flakelet-relay --sub 'repo:github:example/app:ref:refs/heads/main' --exp $(( $(date +%s) + 300 )) --jti $(head -c8 /dev/urandom | base32)
client: (finished: must succeed: echo '{"groups": []}' | step crypto jwt sign --key /nix/store/r7sclamg09v434w8zjlfnrcrn1w79wh6-flakelet-relay-test-issuer/jwk.json --iss https://relay:8443 --aud flakelet-relay --sub 'repo:github:example/app:ref:refs/heads/main' --exp $(( $(date +%s) + 300 )) --jti $(head -c8 /dev/urandom | base32), in 0.05 seconds)
client: must succeed: FLAKELET_RELAY_TOKEN_COMMAND='echo eyJhbGciOiJFZERTQSIsImtpZCI6ImsxIiwidHlwIjoiSldUIn0.eyJhdWQiOiJmbGFrZWxldC1yZWxheSIsImV4cCI6MTc4ODY4NTA3OCwiZ3JvdXBzIjpbXSwiaWF0IjoxNzg4Njg0Nzc4LCJpc3MiOiJodHRwczovL3JlbGF5Ojg0NDMiLCJqdGkiOiJFRlI2UjJISFBWUjZNPT09IiwibmJmIjoxNzg4Njg0Nzc4LCJzdWIiOiJyZXBvOmdpdGh1YjpleGFtcGxlL2FwcDpyZWY6cmVmcy9oZWFkcy9tYWluIn0.7VU7ZjIINFzEPRMYVvhPH9YaJ0TFmdyMm5kF-LpzwT-i8hnVFqKfEurHmcrmCV7UavdUUkyNE1rwabcPOapMBQ' push --relay https://relay:7443 deploy agent/app 2>&1
agent # [ 6500.068615] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:52:58.030368Z","level":"INFO","message":"update finished","flakelet":"app","status":"Updated","generation":"Some(2)","target":"flakelet_relay::agent::jobs"}
agent # [ 6500.190239] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:52:58.152000Z","level":"INFO","message":"start","id":"efa1d529b0777ff214b066090f0329ad","flakelet":"app","rule":"ci","relay":"relay","caller":"Some(\"oidc:mock:repo:github:example/app:ref:refs/heads/main\")","target":"flakelet_relay::agent::conn"}
agent # [ 6500.190482] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:52:58.152316Z","level":"INFO","message":"update starting","flakelet":"app","ids":"[\"efa1d529b0777ff214b066090f0329ad\"]","target":"flakelet_relay::agent::jobs"}
agent # [ 6500.240139] agent systemd[1]: Starting flakelet update app (via relay)...
agent # [ 6500.272046] agent systemd[1]: Started flakelet update app (via relay).
agent # [ 6500.276858] agent flakelet[1068]: app: using prebuilt artifact /nix/store/hysydfr96ds875vr0jgw5rjxi4p39h2j-flakelet-app-v1
agent # [ 6500.277731] agent flakelet[1068]: app: activating generation 3
agent # [ 6500.291442] agent systemd[1]: Stopping app v2...
agent # [ 6500.293131] agent systemd[1]: app.service: Deactivated successfully.
agent # [ 6500.293499] agent systemd[1]: Stopped app v2.
agent # [ 6500.308131] agent systemd[1]: Reload requested from client PID 1075 ('systemctl') (unit flakelet-relay-job-app.service)...
agent # [ 6500.308194] agent systemd[1]: Reloading...
relay # [ 6500.070187] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:52:58.031844Z","level":"INFO","message":"deploy finished","job":"a6a9af5bb0313e5df650650e58fcc52b","ok":true,"target":"flakelet_relay::relay::api"}
relay # [ 6500.190079] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:52:58.151767Z","level":"INFO","message":"deploy accepted","job":"09c3b7e4ad8240e6d11058fb86263412","caller":"oidc:mock:repo:github:example/app:ref:refs/heads/main","targets":"[\"agent/app\"]","target":"flakelet_relay::relay::api"}
agent # [ 6500.643285] agent systemd[1]: Reloading finished in 334 ms.
agent # [ 6500.716199] agent systemd[1]: Reload requested from client PID 1105 ('systemctl') (unit flakelet-relay-job-app.service)...
agent # [ 6500.716234] agent systemd[1]: Reloading...
agent # [ 6501.038416] agent systemd[1]: Reloading finished in 321 ms.
agent # [ 6501.112422] agent systemd[1]: Reload requested from client PID 1134 ('systemctl') (unit flakelet-relay-job-app.service)...
agent # [ 6501.112459] agent systemd[1]: Reloading...
agent # [ 6501.433247] agent systemd[1]: Reloading finished in 320 ms.
agent # [ 6501.509700] agent systemd[1]: Reload requested from client PID 1168 ('systemctl') (unit flakelet-relay-job-app.service)...
agent # [ 6501.509736] agent systemd[1]: Reloading...
agent # [ 6501.832099] agent systemd[1]: Reloading finished in 322 ms.
agent # [ 6501.898635] agent systemd[1]: Starting app v1...
agent # [ 6501.928837] agent systemd[1]: Started app v1.
agent # [ 6501.938952] agent flakelet[1068]: app: updated to generation 3
agent # [ 6501.940642] agent systemd[1]: flakelet-relay-job-app.service: Deactivated successfully.
client: (finished: must succeed: FLAKELET_RELAY_TOKEN_COMMAND='echo eyJhbGciOiJFZERTQSIsImtpZCI6ImsxIiwidHlwIjoiSldUIn0.eyJhdWQiOiJmbGFrZWxldC1yZWxheSIsImV4cCI6MTc4ODY4NTA3OCwiZ3JvdXBzIjpbXSwiaWF0IjoxNzg4Njg0Nzc4LCJpc3MiOiJodHRwczovL3JlbGF5Ojg0NDMiLCJqdGkiOiJFRlI2UjJISFBWUjZNPT09IiwibmJmIjoxNzg4Njg0Nzc4LCJzdWIiOiJyZXBvOmdpdGh1YjpleGFtcGxlL2FwcDpyZWY6cmVmcy9oZWFkcy9tYWluIn0.7VU7ZjIINFzEPRMYVvhPH9YaJ0TFmdyMm5kF-LpzwT-i8hnVFqKfEurHmcrmCV7UavdUUkyNE1rwabcPOapMBQ' push --relay https://relay:7443 deploy agent/app 2>&1, in 2.89 seconds)
(finished: subtest: deploy with OIDC token, sub principal, in 2.95 seconds)
subtest: policy denies uncovered target
client: must fail: FLAKELET_RELAY_TOKEN_COMMAND='echo eyJhbGciOiJFZERTQSIsImtpZCI6ImsxIiwidHlwIjoiSldUIn0.eyJhdWQiOiJmbGFrZWxldC1yZWxheSIsImV4cCI6MTc4ODY4NTA3OCwiZ3JvdXBzIjpbXSwiaWF0IjoxNzg4Njg0Nzc4LCJpc3MiOiJodHRwczovL3JlbGF5Ojg0NDMiLCJqdGkiOiJFRlI2UjJISFBWUjZNPT09IiwibmJmIjoxNzg4Njg0Nzc4LCJzdWIiOiJyZXBvOmdpdGh1YjpleGFtcGxlL2FwcDpyZWY6cmVmcy9oZWFkcy9tYWluIn0.7VU7ZjIINFzEPRMYVvhPH9YaJ0TFmdyMm5kF-LpzwT-i8hnVFqKfEurHmcrmCV7UavdUUkyNE1rwabcPOapMBQ' push --relay https://relay:7443 deploy agent/other 2>&1
client: (finished: must fail: FLAKELET_RELAY_TOKEN_COMMAND='echo eyJhbGciOiJFZERTQSIsImtpZCI6ImsxIiwidHlwIjoiSldUIn0.eyJhdWQiOiJmbGFrZWxldC1yZWxheSIsImV4cCI6MTc4ODY4NTA3OCwiZ3JvdXBzIjpbXSwiaWF0IjoxNzg4Njg0Nzc4LCJpc3MiOiJodHRwczovL3JlbGF5Ojg0NDMiLCJqdGkiOiJFRlI2UjJISFBWUjZNPT09IiwibmJmIjoxNzg4Njg0Nzc4LCJzdWIiOiJyZXBvOmdpdGh1YjpleGFtcGxlL2FwcDpyZWY6cmVmcy9oZWFkcy9tYWluIn0.7VU7ZjIINFzEPRMYVvhPH9YaJ0TFmdyMm5kF-LpzwT-i8hnVFqKfEurHmcrmCV7UavdUUkyNE1rwabcPOapMBQ' push --relay https://relay:7443 deploy agent/other 2>&1, in 0.02 seconds)
(finished: subtest: policy denies uncovered target, in 0.02 seconds)
subtest: claim principal from groups, unchanged counts as success
client: must succeed: echo '{"groups": ["wheel"]}' | step crypto jwt sign --key /nix/store/r7sclamg09v434w8zjlfnrcrn1w79wh6-flakelet-relay-test-issuer/jwk.json --iss https://relay:8443 --aud flakelet-relay --sub 'someone' --exp $(( $(date +%s) + 300 )) --jti $(head -c8 /dev/urandom | base32)
client: (finished: must succeed: echo '{"groups": ["wheel"]}' | step crypto jwt sign --key /nix/store/r7sclamg09v434w8zjlfnrcrn1w79wh6-flakelet-relay-test-issuer/jwk.json --iss https://relay:8443 --aud flakelet-relay --sub 'someone' --exp $(( $(date +%s) + 300 )) --jti $(head -c8 /dev/urandom | base32), in 0.06 seconds)
client: must succeed: FLAKELET_RELAY_TOKEN_COMMAND='echo eyJhbGciOiJFZERTQSIsImtpZCI6ImsxIiwidHlwIjoiSldUIn0.eyJhdWQiOiJmbGFrZWxldC1yZWxheSIsImV4cCI6MTc4ODY4NTA4MSwiZ3JvdXBzIjpbIndoZWVsIl0sImlhdCI6MTc4ODY4NDc4MSwiaXNzIjoiaHR0cHM6Ly9yZWxheTo4NDQzIiwianRpIjoiWEw1QUY3QzVDVEZYWT09PSIsIm5iZiI6MTc4ODY4NDc4MSwic3ViIjoic29tZW9uZSJ9.X6jRZM2pOsxxdAsJg_6RuC9E422JMXWnCNbQwJi3V2_jVAuddxXMzCjNhM8DZHW72tC-HxUjZRV-NSIM9PWHBA' push --relay https://relay:7443 deploy agent/other 2>&1
agent # [ 6503.048497] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:53:01.010249Z","level":"INFO","message":"update finished","flakelet":"app","status":"Updated","generation":"Some(3)","target":"flakelet_relay::agent::jobs"}
agent # [ 6503.148929] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:53:01.110650Z","level":"INFO","message":"start","id":"d74606fcb6dc8aecaa6063a90fa8d1bf","flakelet":"other","rule":"admins","relay":"relay","caller":"Some(\"oidc:mock:groups:wheel\\noidc:mock:someone\")","target":"flakelet_relay::agent::conn"}
agent # [ 6503.149229] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:53:01.111056Z","level":"INFO","message":"update starting","flakelet":"other","ids":"[\"d74606fcb6dc8aecaa6063a90fa8d1bf\"]","target":"flakelet_relay::agent::jobs"}
agent # [ 6503.184179] agent systemd[1]: Starting flakelet update other (via relay)...
agent # [ 6503.212030] agent systemd[1]: Started flakelet update other (via relay).
agent # [ 6503.216629] agent flakelet[1234]: other: using prebuilt artifact /nix/store/hmr990n0b4v6rpzrcpyyw738r9xi7z95-flakelet-other-v1
agent # [ 6503.217145] agent flakelet[1234]: other: up to date
agent # [ 6503.217560] agent systemd[1]: flakelet-relay-job-other.service: Deactivated successfully.
relay # [ 6503.049791] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:53:01.011508Z","level":"INFO","message":"deploy finished","job":"09c3b7e4ad8240e6d11058fb86263412","ok":true,"target":"flakelet_relay::relay::api"}
relay # [ 6503.148684] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:53:01.110431Z","level":"INFO","message":"deploy accepted","job":"df57a2fccba79f4783e8b043faa72b61","caller":"oidc:mock:groups:wheel","targets":"[\"agent/other\"]","target":"flakelet_relay::relay::api"}
client: (finished: must succeed: FLAKELET_RELAY_TOKEN_COMMAND='echo eyJhbGciOiJFZERTQSIsImtpZCI6ImsxIiwidHlwIjoiSldUIn0.eyJhdWQiOiJmbGFrZWxldC1yZWxheSIsImV4cCI6MTc4ODY4NTA4MSwiZ3JvdXBzIjpbIndoZWVsIl0sImlhdCI6MTc4ODY4NDc4MSwiaXNzIjoiaHR0cHM6Ly9yZWxheTo4NDQzIiwianRpIjoiWEw1QUY3QzVDVEZYWT09PSIsIm5iZiI6MTc4ODY4NDc4MSwic3ViIjoic29tZW9uZSJ9.X6jRZM2pOsxxdAsJg_6RuC9E422JMXWnCNbQwJi3V2_jVAuddxXMzCjNhM8DZHW72tC-HxUjZRV-NSIM9PWHBA' push --relay https://relay:7443 deploy agent/other 2>&1, in 1.64 seconds)
(finished: subtest: claim principal from groups, unchanged counts as success, in 1.69 seconds)
subtest: push login via device flow, cached token used afterwards
client: must succeed: push login --issuer https://relay:8443 --client-id flakelet-relay 2>&1
agent # [ 6504.760740] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:53:02.722478Z","level":"INFO","message":"update finished","flakelet":"other","status":"Unchanged","generation":"Some(1)","target":"flakelet_relay::agent::jobs"}
relay # [ 6504.762211] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:53:02.723955Z","level":"INFO","message":"deploy finished","job":"df57a2fccba79f4783e8b043faa72b61","ok":true,"target":"flakelet_relay::relay::api"}
relay # [ 6504.784588] relay 93sn3sv24fj26ksccpppzwg6kbf10s4w-device-mock[186]: 127.0.0.1 - - [06/Sep/2026 08:53:02] "POST /device HTTP/1.1" 200 -
relay # [ 6505.789996] relay 93sn3sv24fj26ksccpppzwg6kbf10s4w-device-mock[186]: 127.0.0.1 - - [06/Sep/2026 08:53:03] "POST /token HTTP/1.1" 400 -
client: (finished: must succeed: push login --issuer https://relay:8443 --client-id flakelet-relay 2>&1, in 2.08 seconds)
client: must succeed: test "$(stat -c %a /root/.local/state/flakelet-push/token.json)" = 600
client: (finished: must succeed: test "$(stat -c %a /root/.local/state/flakelet-push/token.json)" = 600, in 0.01 seconds)
client: must succeed: push --relay https://relay:7443 deploy agent/other 2>&1
relay # [ 6506.838977] relay 93sn3sv24fj26ksccpppzwg6kbf10s4w-device-mock[186]: 127.0.0.1 - - [06/Sep/2026 08:53:04] "POST /token HTTP/1.1" 200 -
relay # [ 6506.869834] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:53:04.831608Z","level":"INFO","message":"deploy accepted","job":"179d05d3e036ef8880adb508e235bd45","caller":"oidc:mock:groups:wheel","targets":"[\"agent/other\"]","target":"flakelet_relay::relay::api"}
agent # [ 6506.870218] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:53:04.831965Z","level":"INFO","message":"start","id":"58f309081cb9c1b2851bf9edc087cf40","flakelet":"other","rule":"admins","relay":"relay","caller":"Some(\"oidc:mock:groups:wheel\\noidc:mock:someone\")","target":"flakelet_relay::agent::conn"}
agent # [ 6506.870996] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:53:04.832592Z","level":"INFO","message":"update starting","flakelet":"other","ids":"[\"58f309081cb9c1b2851bf9edc087cf40\"]","target":"flakelet_relay::agent::jobs"}
agent # [ 6506.920380] agent systemd[1]: Starting flakelet update other (via relay)...
agent # [ 6506.940979] agent systemd[1]: Started flakelet update other (via relay).
agent # [ 6506.945351] agent flakelet[1283]: other: using prebuilt artifact /nix/store/hmr990n0b4v6rpzrcpyyw738r9xi7z95-flakelet-other-v1
agent # [ 6506.945847] agent flakelet[1283]: other: up to date
agent # [ 6506.947688] agent systemd[1]: flakelet-relay-job-other.service: Deactivated successfully.
client: (finished: must succeed: push --relay https://relay:7443 deploy agent/other 2>&1, in 0.65 seconds)
client: must succeed: push --relay https://relay:7443 deploy agent/other 2>&1
agent # [ 6507.499113] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:53:05.460845Z","level":"INFO","message":"update finished","flakelet":"other","status":"Unchanged","generation":"Some(1)","target":"flakelet_relay::agent::jobs"}
agent # [ 6507.519438] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:53:05.481244Z","level":"INFO","message":"start","id":"2971284c9d1f118b5171ff6266a14f02","flakelet":"other","rule":"admins","relay":"relay","caller":"Some(\"oidc:mock:groups:wheel\\noidc:mock:someone\")","target":"flakelet_relay::agent::conn"}
agent # [ 6507.519854] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:53:05.481676Z","level":"INFO","message":"update starting","flakelet":"other","ids":"[\"2971284c9d1f118b5171ff6266a14f02\"]","target":"flakelet_relay::agent::jobs"}
agent # [ 6507.578867] agent systemd[1]: Starting flakelet update other (via relay)...
agent # [ 6507.611040] agent systemd[1]: Started flakelet update other (via relay).
agent # [ 6507.615222] agent flakelet[1321]: other: using prebuilt artifact /nix/store/hmr990n0b4v6rpzrcpyyw738r9xi7z95-flakelet-other-v1
agent # [ 6507.615740] agent flakelet[1321]: other: up to date
agent # [ 6507.618086] agent systemd[1]: flakelet-relay-job-other.service: Deactivated successfully.
relay # [ 6507.500399] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:53:05.462123Z","level":"INFO","message":"deploy finished","job":"179d05d3e036ef8880adb508e235bd45","ok":true,"target":"flakelet_relay::relay::api"}
relay # [ 6507.519155] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:53:05.480960Z","level":"INFO","message":"deploy accepted","job":"68faeaff17cc78ecbff08c8e6c356e71","caller":"oidc:mock:groups:wheel","targets":"[\"agent/other\"]","target":"flakelet_relay::relay::api"}
client: (finished: must succeed: push --relay https://relay:7443 deploy agent/other 2>&1, in 0.67 seconds)
(finished: subtest: push login via device flow, cached token used afterwards, in 3.41 seconds)
subtest: waves: failing first wave skips the second
agent: must succeed: jq '.services.app.prebuilt="/nix/store/8282rnbvyk847q4l4zby3zwcq3jpzrvw-flakelet-app-broken"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json
agent: (finished: must succeed: jq '.services.app.prebuilt="/nix/store/8282rnbvyk847q4l4zby3zwcq3jpzrvw-flakelet-app-broken"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json, in 0.01 seconds)
client: must fail: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/app --wave agent/other 2>&1
agent # [ 6508.167410] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:53:06.129155Z","level":"INFO","message":"update finished","flakelet":"other","status":"Unchanged","generation":"Some(1)","target":"flakelet_relay::agent::jobs"}
agent # [ 6508.203400] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:53:06.165165Z","level":"INFO","message":"start","id":"65549a143167aea58684bc11630958db","flakelet":"app","rule":"admins","relay":"relay","caller":"Some(\"x509:email:admin@example.org\")","target":"flakelet_relay::agent::conn"}
agent # [ 6508.203764] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:53:06.165585Z","level":"INFO","message":"update starting","flakelet":"app","ids":"[\"65549a143167aea58684bc11630958db\"]","target":"flakelet_relay::agent::jobs"}
agent # [ 6508.240419] agent systemd[1]: Starting flakelet update app (via relay)...
agent # [ 6508.266951] agent systemd[1]: Started flakelet update app (via relay).
agent # [ 6508.270620] agent flakelet[1352]: app: using prebuilt artifact /nix/store/8282rnbvyk847q4l4zby3zwcq3jpzrvw-flakelet-app-broken
agent # [ 6508.271244] agent flakelet[1352]: app: activating generation 4
agent # [ 6508.283829] agent systemd[1]: Stopping app v1...
agent # [ 6508.284308] agent systemd[1]: app.service: Deactivated successfully.
agent # [ 6508.284571] agent systemd[1]: Stopped app v1.
agent # [ 6508.300822] agent systemd[1]: Reload requested from client PID 1359 ('systemctl') (unit flakelet-relay-job-app.service)...
agent # [ 6508.300890] agent systemd[1]: Reloading...
relay # [ 6508.169074] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:53:06.130781Z","level":"INFO","message":"deploy finished","job":"68faeaff17cc78ecbff08c8e6c356e71","ok":true,"target":"flakelet_relay::relay::api"}
relay # [ 6508.203198] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:53:06.164949Z","level":"INFO","message":"deploy accepted","job":"bd96702727922a14b179d06b57d41ad7","caller":"x509:email:admin@example.org","targets":"[\"agent/app\", \"agent/other\"]","target":"flakelet_relay::relay::api"}
agent # [ 6508.633776] agent systemd[1]: Reloading finished in 332 ms.
agent # [ 6508.703861] agent systemd[1]: Reload requested from client PID 1389 ('systemctl') (unit flakelet-relay-job-app.service)...
agent # [ 6508.703897] agent systemd[1]: Reloading...
agent # [ 6509.026365] agent systemd[1]: Reloading finished in 322 ms.
agent # [ 6509.095021] agent systemd[1]: Reload requested from client PID 1418 ('systemctl') (unit flakelet-relay-job-app.service)...
agent # [ 6509.095059] agent systemd[1]: Reloading...
agent # [ 6509.415940] agent systemd[1]: Reloading finished in 320 ms.
agent # [ 6509.487124] agent systemd[1]: Reload requested from client PID 1452 ('systemctl') (unit flakelet-relay-job-app.service)...
agent # [ 6509.487159] agent systemd[1]: Reloading...
agent # [ 6509.806100] agent systemd[1]: Reloading finished in 318 ms.
agent # [ 6509.877673] agent systemd[1]: Starting app broken...
agent # [ 6509.904546] agent (nonexistent)[1484]: app.service: Unable to locate executable '/nonexistent': No such file or directory
agent # [ 6509.904568] agent (nonexistent)[1484]: app.service: Failed at step EXEC spawning /nonexistent: No such file or directory
agent # [ 6509.905413] agent systemd[1]: app.service: Main process exited, code=exited, status=203/EXEC
agent # [ 6509.905503] agent systemd[1]: app.service: Failed with result 'exit-code'.
agent # [ 6509.905705] agent systemd[1]: Failed to start app broken.
agent # [ 6509.937167] agent systemd[1]: Reload requested from client PID 1496 ('systemctl') (unit flakelet-relay-job-app.service)...
agent # [ 6509.937204] agent systemd[1]: Reloading...
agent # [ 6510.261078] agent systemd[1]: Reloading finished in 323 ms.
agent # [ 6510.334779] agent systemd[1]: Reload requested from client PID 1526 ('systemctl') (unit flakelet-relay-job-app.service)...
agent # [ 6510.334816] agent systemd[1]: Reloading...
agent # [ 6510.655353] agent systemd[1]: Reloading finished in 320 ms.
agent # [ 6510.720405] agent systemd[1]: Reload requested from client PID 1556 ('systemctl') (unit flakelet-relay-job-app.service)...
agent # [ 6510.720441] agent systemd[1]: Reloading...
agent # [ 6511.042483] agent systemd[1]: Reloading finished in 321 ms.
agent # [ 6511.112964] agent systemd[1]: Reload requested from client PID 1586 ('systemctl') (unit flakelet-relay-job-app.service)...
agent # [ 6511.113038] agent systemd[1]: Reloading...
agent # [ 6511.436088] agent systemd[1]: Reloading finished in 322 ms.
agent # [ 6511.505405] agent systemd[1]: Starting app v1...
agent # [ 6511.542205] agent systemd[1]: Started app v1.
agent # [ 6511.543339] agent flakelet[1352]: app: deploy failed, rolled back: systemctl start app.service failed:
agent # [ 6511.543339] agent flakelet[1352]: failed units: app.service. See journalctl -u app.service
agent # [ 6511.544099] agent systemd[1]: flakelet-relay-job-app.service: Main process exited, code=exited, status=1/FAILURE
agent # [ 6511.544189] agent systemd[1]: flakelet-relay-job-app.service: Failed with result 'exit-code'.
client: (finished: must fail: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/app --wave agent/other 2>&1, in 4.09 seconds)
agent: must succeed: systemctl show app.service -p Description | grep -q 'app v1'
agent: (finished: must succeed: systemctl show app.service -p Description | grep -q 'app v1', in 0.01 seconds)
(finished: subtest: waves: failing first wave skips the second, in 4.12 seconds)
subtest: host patterns expand on the relay
agent: must succeed: jq '.services.app.prebuilt="/nix/store/hysydfr96ds875vr0jgw5rjxi4p39h2j-flakelet-app-v1"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json
agent: (finished: must succeed: jq '.services.app.prebuilt="/nix/store/hysydfr96ds875vr0jgw5rjxi4p39h2j-flakelet-app-v1"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json, in 0.01 seconds)
client: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy '@all/app' 2>&1
agent # [ 6512.273462] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:53:10.235208Z","level":"INFO","message":"update finished","flakelet":"app","status":"RolledBack","generation":"Some(3)","target":"flakelet_relay::agent::jobs"}
agent # [ 6512.320477] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:53:10.282246Z","level":"INFO","message":"start","id":"39cb05974466617196824d74cbe9f861","flakelet":"app","rule":"admins","relay":"relay","caller":"Some(\"x509:email:admin@example.org\")","target":"flakelet_relay::agent::conn"}
agent # [ 6512.320875] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:53:10.282697Z","level":"INFO","message":"update starting","flakelet":"app","ids":"[\"39cb05974466617196824d74cbe9f861\"]","target":"flakelet_relay::agent::jobs"}
agent # [ 6512.352676] agent systemd[1]: Starting flakelet update app (via relay)...
agent # [ 6512.388128] agent systemd[1]: Started flakelet update app (via relay).
agent # [ 6512.391735] agent flakelet[1660]: app: using prebuilt artifact /nix/store/hysydfr96ds875vr0jgw5rjxi4p39h2j-flakelet-app-v1
agent # [ 6512.392264] agent flakelet[1660]: app: up to date
agent # [ 6512.395011] agent systemd[1]: flakelet-relay-job-app.service: Deactivated successfully.
relay # [ 6512.274986] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:53:10.236719Z","level":"INFO","message":"deploy finished","job":"bd96702727922a14b179d06b57d41ad7","ok":false,"target":"flakelet_relay::relay::api"}
relay # [ 6512.320240] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:53:10.282004Z","level":"INFO","message":"deploy accepted","job":"649850350eac9bde2c7ac03a47d262e0","caller":"x509:email:admin@example.org","targets":"[\"agent/app\"]","target":"flakelet_relay::relay::api"}
client: (finished: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy '@all/app' 2>&1, in 0.65 seconds)
client: must fail: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy '*/app' 2>&1
agent # [ 6512.949945] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:53:10.911701Z","level":"INFO","message":"update finished","flakelet":"app","status":"Unchanged","generation":"Some(3)","target":"flakelet_relay::agent::jobs"}
agent # [ 6512.971576] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:53:10.933396Z","level":"INFO","message":"start","id":"3ecc3f09bb625886e198b31772e7d944","flakelet":"app","rule":"admins","relay":"relay","caller":"Some(\"x509:email:admin@example.org\")","target":"flakelet_relay::agent::conn"}
agent # [ 6512.971782] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:53:10.933611Z","level":"INFO","message":"update starting","flakelet":"app","ids":"[\"3ecc3f09bb625886e198b31772e7d944\"]","target":"flakelet_relay::agent::jobs"}
agent # [ 6513.013046] agent systemd[1]: Starting flakelet update app (via relay)...
agent # [ 6513.046575] agent systemd[1]: Started flakelet update app (via relay).
agent # [ 6513.051287] agent flakelet[1688]: app: using prebuilt artifact /nix/store/hysydfr96ds875vr0jgw5rjxi4p39h2j-flakelet-app-v1
agent # [ 6513.051841] agent flakelet[1688]: app: up to date
agent # [ 6513.053764] agent systemd[1]: flakelet-relay-job-app.service: Deactivated successfully.
relay # [ 6512.951253] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:53:10.912992Z","level":"INFO","message":"deploy finished","job":"649850350eac9bde2c7ac03a47d262e0","ok":true,"target":"flakelet_relay::relay::api"}
relay # [ 6512.971387] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:53:10.933193Z","level":"INFO","message":"deploy accepted","job":"89d60575ee3c90f9f5f244caa1b34e61","caller":"x509:email:admin@example.org","targets":"[\"agent/app\", \"ghost/app\"]","target":"flakelet_relay::relay::api"}
client: (finished: must fail: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy '*/app' 2>&1, in 0.65 seconds)
client: must fail: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/app --wave '*/app' 2>&1
agent # [ 6513.603551] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:53:11.565305Z","level":"INFO","message":"update finished","flakelet":"app","status":"Unchanged","generation":"Some(3)","target":"flakelet_relay::agent::jobs"}
agent # [ 6513.625833] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:53:11.587642Z","level":"INFO","message":"start","id":"d53771828f8d33d8e32f30c4e970679e","flakelet":"app","rule":"admins","relay":"relay","caller":"Some(\"x509:email:admin@example.org\")","target":"flakelet_relay::agent::conn"}
agent # [ 6513.626117] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:53:11.587944Z","level":"INFO","message":"update starting","flakelet":"app","ids":"[\"d53771828f8d33d8e32f30c4e970679e\"]","target":"flakelet_relay::agent::jobs"}
agent # [ 6513.676967] agent systemd[1]: Starting flakelet update app (via relay)...
agent # [ 6513.710093] agent systemd[1]: Started flakelet update app (via relay).
agent # [ 6513.714959] agent flakelet[1726]: app: using prebuilt artifact /nix/store/hysydfr96ds875vr0jgw5rjxi4p39h2j-flakelet-app-v1
agent # [ 6513.715887] agent flakelet[1726]: app: up to date
agent # [ 6513.716934] agent systemd[1]: flakelet-relay-job-app.service: Deactivated successfully.
relay # [ 6513.604530] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:53:11.566250Z","level":"INFO","message":"deploy finished","job":"89d60575ee3c90f9f5f244caa1b34e61","ok":false,"target":"flakelet_relay::relay::api"}
relay # [ 6513.625611] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:53:11.587415Z","level":"INFO","message":"deploy accepted","job":"abd68c2f219f2d2fb55b36af978d0e84","caller":"x509:email:admin@example.org","targets":"[\"agent/app\", \"ghost/app\"]","target":"flakelet_relay::relay::api"}
client: (finished: must fail: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/app --wave '*/app' 2>&1, in 0.66 seconds)
client: must fail: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy '@all/nope' 2>&1
client: (finished: must fail: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy '@all/nope' 2>&1, in 0.02 seconds)
(finished: subtest: host patterns expand on the relay, in 2.00 seconds)
subtest: detach returns once the job is accepted
agent: must succeed: jq '.services.app.prebuilt="/nix/store/ln47rsd5km8a04hd5zlkz4q1v352zqh3-flakelet-app-slow2"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json
agent: (finished: must succeed: jq '.services.app.prebuilt="/nix/store/ln47rsd5km8a04hd5zlkz4q1v352zqh3-flakelet-app-slow2"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json, in 0.01 seconds)
client: must succeed: timeout 20 push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy --detach agent/app 2>&1
client: (finished: must succeed: timeout 20 push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy --detach agent/app 2>&1, in 0.02 seconds)
agent: waiting for success: systemctl is-active flakelet-relay-job-app.service
agent # [ 6514.267761] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:53:12.229510Z","level":"INFO","message":"update finished","flakelet":"app","status":"Unchanged","generation":"Some(3)","target":"flakelet_relay::agent::jobs"}
agent # [ 6514.321628] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:53:12.283401Z","level":"INFO","message":"start","id":"020d497664e133255ddaeecdf4c1726e","flakelet":"app","rule":"admins","relay":"relay","caller":"Some(\"x509:email:admin@example.org\")","target":"flakelet_relay::agent::conn"}
agent # [ 6514.321885] agent flakelet-agent[304]: {"timestamp":"2026-09-06T08:53:12.283710Z","level":"INFO","message":"update starting","flakelet":"app","ids":"[\"020d497664e133255ddaeecdf4c1726e\"]","target":"flakelet_relay::agent::jobs"}
agent # [ 6514.371971] agent systemd[1]: Starting flakelet update app (via relay)...
agent # [ 6514.401231] agent systemd[1]: Started flakelet update app (via relay).
agent # [ 6514.405956] agent flakelet[1758]: app: using prebuilt artifact /nix/store/ln47rsd5km8a04hd5zlkz4q1v352zqh3-flakelet-app-slow2
agent # [ 6514.406593] agent flakelet[1758]: app: activating generation 4
agent # [ 6514.420195] agent systemd[1]: Stopping app v1...
agent # [ 6514.420652] agent systemd[1]: app.service: Deactivated successfully.
agent # [ 6514.420919] agent systemd[1]: Stopped app v1.
agent # [ 6514.438617] agent systemd[1]: Reload requested from client PID 1765 ('systemctl') (unit flakelet-relay-job-app.service)...
agent # [ 6514.438681] agent systemd[1]: Reloading...
relay # [ 6514.268737] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:53:12.230480Z","level":"INFO","message":"deploy finished","job":"abd68c2f219f2d2fb55b36af978d0e84","ok":false,"target":"flakelet_relay::relay::api"}
relay # [ 6514.321431] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:53:12.283202Z","level":"INFO","message":"deploy accepted","job":"89592fa4a4bf6dbe96c9135f51589b54","caller":"x509:email:admin@example.org","targets":"[\"agent/app\"]","target":"flakelet_relay::relay::api"}
agent # [ 6514.771346] agent systemd[1]: Reloading finished in 331 ms.
agent # [ 6514.842203] agent systemd[1]: Reload requested from client PID 1795 ('systemctl') (unit flakelet-relay-job-app.service)...
agent # [ 6514.842237] agent systemd[1]: Reloading...
agent # [ 6515.161689] agent systemd[1]: Reloading finished in 319 ms.
agent # [ 6515.218330] agent systemd[1]: Reload requested from client PID 1824 ('systemctl') (unit flakelet-relay-job-app.service)...
agent # [ 6515.218365] agent systemd[1]: Reloading...
agent: (finished: waiting for success: systemctl is-active flakelet-relay-job-app.service, in 1.28 seconds)
??? Warning (UserWarning): wait_until_fails(): passing a bare int/float as a duration is deprecated. Use datetime.timedelta instead.
    File "/nix/store/fv4yr9c0f9kyrfc00100i4rlshiiidbd-nixos-test-driver-1.1/lib/python3.14/site-packages/test_driver/duration.py", line 39
agent: waiting for failure: systemctl is-active flakelet-relay-job-app.service
??? Warning (UserWarning): execute(): passing a bare int/float as a duration is deprecated. Use datetime.timedelta instead.
    File "/nix/store/fv4yr9c0f9kyrfc00100i4rlshiiidbd-nixos-test-driver-1.1/lib/python3.14/site-packages/test_driver/duration.py", line 39
agent # [ 6515.539819] agent systemd[1]: Reloading finished in 321 ms.
agent # [ 6515.612139] agent systemd[1]: Reload requested from client PID 1859 ('systemctl') (unit flakelet-relay-job-app.service)...
agent # [ 6515.612171] agent systemd[1]: Reloading...
agent # [ 6515.933438] agent systemd[1]: Reloading finished in 320 ms.
agent # [ 6516.001851] agent systemd[1]: Starting app slow2...
agent # [ 6522.079613] agent systemd[1]: Started app slow2.
agent # [ 6522.097174] agent flakelet[1758]: app: updated to generation 4
agent # [ 6522.099909] agent systemd[1]: flakelet-relay-job-app.service: Deactivated successfully.
agent: (finished: waiting for failure: systemctl is-active flakelet-relay-job-app.service, in 7.49 seconds)
(finished: subtest: detach returns once the job is accepted, in 8.80 seconds)
subtest: unknown host is final, missing agent is retried, agents listing
client: must fail: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy nope/app 2>&1
client: (finished: must fail: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy nope/app 2>&1, in 0.02 seconds)
agent: must succeed: systemctl stop flakelet-agent
agent: (finished: must succeed: systemctl stop flakelet-agent, in 0.04 seconds)
relay: waiting for success: curl -sf http://127.0.0.1:7400/metrics | grep -q 'agent_up{host="agent"} 0'
relay: (finished: waiting for success: curl -sf http://127.0.0.1:7400/metrics | grep -q 'agent_up{host="agent"} 0', in 0.02 seconds)
client: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/other > /tmp/retry.out 2>&1 &
client: (finished: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/other > /tmp/retry.out 2>&1 &, in 0.01 seconds)
client: waiting for success: grep -q 'agent_unavailable.*retrying' /tmp/retry.out
agent # [ 6523.128809] agent systemd[1]: Stopping flakelet-agent...
agent # [ 6523.153254] agent systemd[1]: flakelet-agent.service: Deactivated successfully.
agent # [ 6523.153693] agent systemd[1]: Stopped flakelet-agent.
agent # [ 6523.154085] agent systemd[1]: flakelet-agent.service: Consumed 2.756s CPU time over 31.933s wall clock time.
relay # [ 6523.128888] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:53:21.090597Z","level":"INFO","message":"agent disconnected: IO error: peer closed connection without sending TLS close_notify: https://docs.rs/rustls/latest/rustls/manual/_03_howto/index.html#unexpected-eof","host":"agent","target":"flakelet_relay::relay::agent_conn"}
client: (finished: waiting for success: grep -q 'agent_unavailable.*retrying' /tmp/retry.out, in 1.02 seconds)
agent: must succeed: systemctl start flakelet-agent
agent: (finished: must succeed: systemctl start flakelet-agent, in 0.12 seconds)
??? Warning (UserWarning): wait_until_succeeds(): passing a bare int/float as a duration is deprecated. Use datetime.timedelta instead.
    File "/nix/store/fv4yr9c0f9kyrfc00100i4rlshiiidbd-nixos-test-driver-1.1/lib/python3.14/site-packages/test_driver/duration.py", line 39
client: waiting for success: grep -q 'agent/other: unchanged' /tmp/retry.out
agent # [ 6524.212226] agent systemd[1]: Starting flakelet-agent...
agent # [ 6524.260536] agent flakelet-agent[1951]: {"timestamp":"2026-09-06T08:53:22.222335Z","level":"INFO","message":"reattaching to running unit","flakelet":"app","ids":"[\"020d497664e133255ddaeecdf4c1726e\"]","target":"flakelet_relay::agent::jobs"}
agent # [ 6524.311680] agent systemd[1]: Started flakelet-agent.
agent # [ 6524.324941] agent flakelet-agent[1951]: {"timestamp":"2026-09-06T08:53:22.286737Z","level":"INFO","message":"connected","relay":"https://relay:7443","relay_name":"relay","relay_version":"0.1.0","host":"agent","target":"flakelet_relay::agent::conn"}
relay # [ 6524.325091] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:53:22.286806Z","level":"INFO","message":"agent connected","host":"agent","version":"0.1.0","flakelets":"[Named { name: \"app\", generation: Some(4), revision: Some(\"prebuilt:app\") }, Named { name: \"other\", generation: Some(1), revision: Some(\"prebuilt:other\") }]","target":"flakelet_relay::relay::agent_conn"}
agent # [ 6524.805202] agent flakelet-agent[1951]: {"timestamp":"2026-09-06T08:53:22.766965Z","level":"INFO","message":"update finished","flakelet":"app","status":"Updated","generation":"Some(4)","target":"flakelet_relay::agent::jobs"}
agent # [ 6526.195982] agent flakelet-agent[1951]: {"timestamp":"2026-09-06T08:53:24.157716Z","level":"INFO","message":"start","id":"f5d5c2ead8a9fd9b9acd6dd2ff05e53a","flakelet":"other","rule":"admins","relay":"relay","caller":"Some(\"x509:email:admin@example.org\")","target":"flakelet_relay::agent::conn"}
agent # [ 6526.196859] agent flakelet-agent[1951]: {"timestamp":"2026-09-06T08:53:24.158461Z","level":"INFO","message":"update starting","flakelet":"other","ids":"[\"f5d5c2ead8a9fd9b9acd6dd2ff05e53a\"]","target":"flakelet_relay::agent::jobs"}
agent # [ 6526.252817] agent systemd[1]: Starting flakelet update other (via relay)...
agent # [ 6526.284114] agent systemd[1]: Started flakelet update other (via relay).
agent # [ 6526.288638] agent flakelet[2384]: other: using prebuilt artifact /nix/store/hmr990n0b4v6rpzrcpyyw738r9xi7z95-flakelet-other-v1
agent # [ 6526.289167] agent flakelet[2384]: other: up to date
agent # [ 6526.290867] agent systemd[1]: flakelet-relay-job-other.service: Deactivated successfully.
relay # [ 6526.195635] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:53:24.157351Z","level":"INFO","message":"deploy accepted","job":"64ded87ccac615e854df4d0473e68b65","caller":"x509:email:admin@example.org","targets":"[\"agent/other\"]","target":"flakelet_relay::relay::api"}
relay # [ 6526.843318] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:53:24.805046Z","level":"INFO","message":"deploy finished","job":"64ded87ccac615e854df4d0473e68b65","ok":true,"target":"flakelet_relay::relay::api"}
agent # [ 6526.841925] agent flakelet-agent[1951]: {"timestamp":"2026-09-06T08:53:24.803695Z","level":"INFO","message":"update finished","flakelet":"other","status":"Unchanged","generation":"Some(1)","target":"flakelet_relay::agent::jobs"}
client: (finished: waiting for success: grep -q 'agent/other: unchanged' /tmp/retry.out, in 3.04 seconds)
client: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem agents
client: (finished: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem agents, in 0.02 seconds)
client: must succeed: echo '{"groups": []}' | step crypto jwt sign --key /nix/store/r7sclamg09v434w8zjlfnrcrn1w79wh6-flakelet-relay-test-issuer/jwk.json --iss https://relay:8443 --aud flakelet-relay --sub 'repo:github:example/app:ref:refs/heads/main' --exp $(( $(date +%s) + 300 )) --jti $(head -c8 /dev/urandom | base32)
client: (finished: must succeed: echo '{"groups": []}' | step crypto jwt sign --key /nix/store/r7sclamg09v434w8zjlfnrcrn1w79wh6-flakelet-relay-test-issuer/jwk.json --iss https://relay:8443 --aud flakelet-relay --sub 'repo:github:example/app:ref:refs/heads/main' --exp $(( $(date +%s) + 300 )) --jti $(head -c8 /dev/urandom | base32), in 0.05 seconds)
client: must succeed: FLAKELET_RELAY_TOKEN_COMMAND='echo eyJhbGciOiJFZERTQSIsImtpZCI6ImsxIiwidHlwIjoiSldUIn0.eyJhdWQiOiJmbGFrZWxldC1yZWxheSIsImV4cCI6MTc4ODY4NTEwNSwiZ3JvdXBzIjpbXSwiaWF0IjoxNzg4Njg0ODA1LCJpc3MiOiJodHRwczovL3JlbGF5Ojg0NDMiLCJqdGkiOiI2VVFISFA2TUU1TUlHPT09IiwibmJmIjoxNzg4Njg0ODA1LCJzdWIiOiJyZXBvOmdpdGh1YjpleGFtcGxlL2FwcDpyZWY6cmVmcy9oZWFkcy9tYWluIn0.Dlt8Oh_eBybaNJ6WnjIpSfifhR0WvvZHTVgk6qEECiHhzLh3BlmuEqqGeEkbHlo-YXVGUDQ_cTZJI8w1YRiWDA' push --relay https://relay:7443 agents
client: (finished: must succeed: FLAKELET_RELAY_TOKEN_COMMAND='echo eyJhbGciOiJFZERTQSIsImtpZCI6ImsxIiwidHlwIjoiSldUIn0.eyJhdWQiOiJmbGFrZWxldC1yZWxheSIsImV4cCI6MTc4ODY4NTEwNSwiZ3JvdXBzIjpbXSwiaWF0IjoxNzg4Njg0ODA1LCJpc3MiOiJodHRwczovL3JlbGF5Ojg0NDMiLCJqdGkiOiI2VVFISFA2TUU1TUlHPT09IiwibmJmIjoxNzg4Njg0ODA1LCJzdWIiOiJyZXBvOmdpdGh1YjpleGFtcGxlL2FwcDpyZWY6cmVmcy9oZWFkcy9tYWluIn0.Dlt8Oh_eBybaNJ6WnjIpSfifhR0WvvZHTVgk6qEECiHhzLh3BlmuEqqGeEkbHlo-YXVGUDQ_cTZJI8w1YRiWDA' push --relay https://relay:7443 agents, in 0.02 seconds)
(finished: subtest: unknown host is final, missing agent is retried, agents listing, in 4.35 seconds)
subtest: out-of-band flakelet update reaches the relay without reconnect
agent: must succeed: flakelet status --json app | jq '.[0].generation'
agent: (finished: must succeed: flakelet status --json app | jq '.[0].generation', in 0.04 seconds)
agent: must succeed: journalctl -u flakelet-agent -o cat | grep -c '"connected"' || true
agent: (finished: must succeed: journalctl -u flakelet-agent -o cat | grep -c '"connected"' || true, in 0.01 seconds)
agent: must succeed: jq '.services.app.prebuilt="/nix/store/6ili1vxjlag9d7dy0bxrbxk6bpi5qh9p-flakelet-app-v2"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json
agent: (finished: must succeed: jq '.services.app.prebuilt="/nix/store/6ili1vxjlag9d7dy0bxrbxk6bpi5qh9p-flakelet-app-v2"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json, in 0.01 seconds)
agent: must succeed: flakelet update app
app: using prebuilt artifact /nix/store/6ili1vxjlag9d7dy0bxrbxk6bpi5qh9p-flakelet-app-v2
app: activating generation 5
agent # [ 6527.532317] agent systemd[1]: Stopping app slow2...
agent # [ 6527.532786] agent systemd[1]: app.service: Deactivated successfully.
agent # [ 6527.533066] agent systemd[1]: Stopped app slow2.
agent # [ 6527.550579] agent systemd[1]: Reload requested from client PID 2432 ('systemctl')...
agent # [ 6527.550645] agent systemd[1]: Reloading...
agent # [ 6527.882459] agent systemd[1]: Reloading finished in 331 ms.
agent # [ 6527.953400] agent systemd[1]: Reload requested from client PID 2461 ('systemctl')...
agent # [ 6527.953438] agent systemd[1]: Reloading...
agent # [ 6528.270912] agent systemd[1]: Reloading finished in 317 ms.
agent # [ 6528.343883] agent systemd[1]: Reload requested from client PID 2492 ('systemctl')...
agent # [ 6528.343921] agent systemd[1]: Reloading...
agent # [ 6528.661477] agent systemd[1]: Reloading finished in 317 ms.
agent # [ 6528.727116] agent systemd[1]: Reload requested from client PID 2523 ('systemctl')...
agent # [ 6528.727148] agent systemd[1]: Reloading...
agent # [ 6529.049441] agent systemd[1]: Reloading finished in 321 ms.
agent: (finished: must succeed: flakelet update app, in 1.66 seconds)
client: waiting for success: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem agents | grep -q 'app@5'
agent # [ 6529.118735] agent systemd[1]: Starting app v2...
agent # [ 6529.155108] agent systemd[1]: Started app v2.
client: (finished: waiting for success: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem agents | grep -q 'app@5', in 2.07 seconds)
agent: must succeed: journalctl -u flakelet-agent -o cat | grep -c '"connected"' || true
agent: (finished: must succeed: journalctl -u flakelet-agent -o cat | grep -c '"connected"' || true, in 0.01 seconds)
agent: must succeed: jq '.services.app.prebuilt="/nix/store/hysydfr96ds875vr0jgw5rjxi4p39h2j-flakelet-app-v1"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json
agent: (finished: must succeed: jq '.services.app.prebuilt="/nix/store/hysydfr96ds875vr0jgw5rjxi4p39h2j-flakelet-app-v1"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json, in 0.01 seconds)
agent: must succeed: flakelet update app
app: using prebuilt artifact /nix/store/hysydfr96ds875vr0jgw5rjxi4p39h2j-flakelet-app-v1
app: activating generation 6
agent # [ 6531.280601] agent systemd[1]: Stopping app v2...
agent # [ 6531.281070] agent systemd[1]: app.service: Deactivated successfully.
agent # [ 6531.281334] agent systemd[1]: Stopped app v2.
agent # [ 6531.297657] agent systemd[1]: Reload requested from client PID 2581 ('systemctl')...
agent # [ 6531.297724] agent systemd[1]: Reloading...
agent # [ 6531.638026] agent systemd[1]: Reloading finished in 339 ms.
agent # [ 6531.715750] agent systemd[1]: Reload requested from client PID 2610 ('systemctl')...
agent # [ 6531.715786] agent systemd[1]: Reloading...
agent # [ 6532.035754] agent systemd[1]: Reloading finished in 319 ms.
agent # [ 6532.107241] agent systemd[1]: Reload requested from client PID 2638 ('systemctl')...
agent # [ 6532.107279] agent systemd[1]: Reloading...
agent # [ 6532.428382] agent systemd[1]: Reloading finished in 320 ms.
agent # [ 6532.500478] agent systemd[1]: Reload requested from client PID 2670 ('systemctl')...
agent # [ 6532.500514] agent systemd[1]: Reloading...
agent # [ 6532.821963] agent systemd[1]: Reloading finished in 321 ms.
agent: (finished: must succeed: flakelet update app, in 1.68 seconds)
client: waiting for success: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem agents | grep -q 'app@6'
agent # [ 6532.889744] agent systemd[1]: Starting app v1...
agent # [ 6532.921559] agent systemd[1]: Started app v1.
client: (finished: waiting for success: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem agents | grep -q 'app@6', in 2.07 seconds)
(finished: subtest: out-of-band flakelet update reaches the relay without reconnect, in 7.56 seconds)
subtest: certificate not listed under agents cannot connect as agent
client: must succeed: curl -s -o /dev/null -w '%{http_code}' --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/mallory/cert.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/mallory/key.pem -H 'Upgrade: websocket' -H 'Connection: Upgrade' -H 'Sec-WebSocket-Version: 13' -H 'Sec-WebSocket-Key: dGhlIHNhbXBsZSBub25jZQ==' https://relay:7443/v1/agent
client: (finished: must succeed: curl -s -o /dev/null -w '%{http_code}' --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/mallory/cert.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/mallory/key.pem -H 'Upgrade: websocket' -H 'Connection: Upgrade' -H 'Sec-WebSocket-Version: 13' -H 'Sec-WebSocket-Key: dGhlIHNhbXBsZSBub25jZQ==' https://relay:7443/v1/agent, in 0.02 seconds)
(finished: subtest: certificate not listed under agents cannot connect as agent, in 0.03 seconds)
subtest: metrics
relay: must succeed: curl -sf http://127.0.0.1:7400/metrics
relay: (finished: must succeed: curl -sf http://127.0.0.1:7400/metrics, in 0.02 seconds)
(finished: subtest: metrics, in 0.02 seconds)
subtest: agent link drop mid-run replays missed lines once
agent: must succeed: jq '.services.app.prebuilt="/nix/store/c67jj8kx3m50nyj874aqmdqf21w5iznd-flakelet-app-slow"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json
agent: (finished: must succeed: jq '.services.app.prebuilt="/nix/store/c67jj8kx3m50nyj874aqmdqf21w5iznd-flakelet-app-slow"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json, in 0.01 seconds)
agent: must succeed: date +%s
agent: (finished: must succeed: date +%s, in 0.01 seconds)
client: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/app > /tmp/slow.out 2>&1 &
client: (finished: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/app > /tmp/slow.out 2>&1 &, in 0.01 seconds)
agent: waiting for success: journalctl -u flakelet-relay-job-app.service --since=@1788684813 | grep -q 'app-slow'
relay # [ 6535.023532] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:53:32.985258Z","level":"INFO","message":"agent rejected: no agents entry matches","principals":"[\"x509:dns:mallory\"]","target":"flakelet_relay::relay::agent_conn"}
relay # [ 6535.082967] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:53:33.044716Z","level":"INFO","message":"deploy accepted","job":"49e3ab226a6e34e03b088c720f73012d","caller":"x509:email:admin@example.org","targets":"[\"agent/app\"]","target":"flakelet_relay::relay::api"}
agent # [ 6535.083411] agent flakelet-agent[1951]: {"timestamp":"2026-09-06T08:53:33.045184Z","level":"INFO","message":"start","id":"09d60b21ac81ccedd16559a9dade8fe6","flakelet":"app","rule":"admins","relay":"relay","caller":"Some(\"x509:email:admin@example.org\")","target":"flakelet_relay::agent::conn"}
agent # [ 6535.083937] agent flakelet-agent[1951]: {"timestamp":"2026-09-06T08:53:33.045761Z","level":"INFO","message":"update starting","flakelet":"app","ids":"[\"09d60b21ac81ccedd16559a9dade8fe6\"]","target":"flakelet_relay::agent::jobs"}
agent # [ 6535.136845] agent systemd[1]: Starting flakelet update app (via relay)...
agent # [ 6535.172096] agent systemd[1]: Started flakelet update app (via relay).
agent # [ 6535.176432] agent flakelet[2734]: app: using prebuilt artifact /nix/store/c67jj8kx3m50nyj874aqmdqf21w5iznd-flakelet-app-slow
agent # [ 6535.177027] agent flakelet[2734]: app: activating generation 7
agent # [ 6535.188540] agent systemd[1]: Stopping app v1...
agent # [ 6535.188989] agent systemd[1]: app.service: Deactivated successfully.
agent # [ 6535.189276] agent systemd[1]: Stopped app v1.
agent # [ 6535.206999] agent systemd[1]: Reload requested from client PID 2741 ('systemctl') (unit flakelet-relay-job-app.service)...
agent # [ 6535.207076] agent systemd[1]: Reloading...
agent # [ 6535.546834] agent systemd[1]: Reloading finished in 339 ms.
agent # [ 6535.631569] agent systemd[1]: Reload requested from client PID 2771 ('systemctl') (unit flakelet-relay-job-app.service)...
agent # [ 6535.631606] agent systemd[1]: Reloading...
agent: (finished: waiting for success: journalctl -u flakelet-relay-job-app.service --since=@1788684813 | grep -q 'app-slow', in 1.02 seconds)
agent: must succeed: for a in $(getent ahosts relay | cut -d' ' -f1 | sort -u); do ip route add unreachable $a; done
agent: (finished: must succeed: for a in $(getent ahosts relay | cut -d' ' -f1 | sort -u); do ip route add unreachable $a; done, in 0.02 seconds)
relay: must succeed: for a in $(getent ahosts agent | cut -d' ' -f1 | sort -u); do ss -K dst "[$a]"; done
relay: (finished: must succeed: for a in $(getent ahosts agent | cut -d' ' -f1 | sort -u); do ss -K dst "[$a]"; done, in 0.06 seconds)
agent: must succeed: ss -K dport = 7443
agent: (finished: must succeed: ss -K dport = 7443, in 0.03 seconds)
agent: waiting for success: journalctl -u flakelet-relay-job-app.service --since=@1788684813 | grep -q 'updated to generation'
agent # [ 6535.953032] agent systemd[1]: Reloading finished in 321 ms.
agent # [ 6536.018504] agent systemd[1]: Reload requested from client PID 2800 ('systemctl') (unit flakelet-relay-job-app.service)...
agent # [ 6536.018541] agent systemd[1]: Reloading...
agent # [ 6536.201315] agent flakelet-agent[1951]: {"timestamp":"2026-09-06T08:53:34.163074Z","level":"INFO","message":"disconnected: IO error: Software caused connection abort (os error 103)","relay":"https://relay:7443","target":"flakelet_relay::agent::conn"}
relay # [ 6536.169902] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:53:34.131651Z","level":"INFO","message":"agent disconnected: IO error: Software caused connection abort (os error 103)","host":"agent","target":"flakelet_relay::relay::agent_conn"}
agent # [ 6536.340117] agent systemd[1]: Reloading finished in 321 ms.
agent # [ 6536.408018] agent systemd[1]: Reload requested from client PID 2848 ('systemctl') (unit flakelet-relay-job-app.service)...
agent # [ 6536.408053] agent systemd[1]: Reloading...
agent # [ 6536.731370] agent systemd[1]: Reloading finished in 322 ms.
agent # [ 6536.793145] agent systemd[1]: Starting app slow...
agent # [ 6537.203985] agent flakelet-agent[1951]: {"timestamp":"2026-09-06T08:53:35.165726Z","level":"WARN","message":"connect failed: connect relay:7443: No route to host (os error 113)","relay":"https://relay:7443","target":"flakelet_relay::agent::conn"}
agent # [ 6539.206345] agent flakelet-agent[1951]: {"timestamp":"2026-09-06T08:53:37.168088Z","level":"WARN","message":"connect failed: connect relay:7443: No route to host (os error 113)","relay":"https://relay:7443","target":"flakelet_relay::agent::conn"}
agent # [ 6542.862058] agent systemd[1]: Started app slow.
agent # [ 6542.879423] agent flakelet[2734]: app: updated to generation 7
agent # [ 6542.882304] agent systemd[1]: flakelet-relay-job-app.service: Deactivated successfully.
agent: (finished: waiting for success: journalctl -u flakelet-relay-job-app.service --since=@1788684813 | grep -q 'updated to generation', in 7.10 seconds)
agent: must succeed: for a in $(getent ahosts relay | cut -d' ' -f1 | sort -u); do ip route del unreachable $a; done
agent: (finished: must succeed: for a in $(getent ahosts relay | cut -d' ' -f1 | sort -u); do ip route del unreachable $a; done, in 0.02 seconds)
client: waiting for success: grep -q 'agent/app: updated' /tmp/slow.out
agent # [ 6543.209162] agent flakelet-agent[1951]: {"timestamp":"2026-09-06T08:53:41.170682Z","level":"WARN","message":"connect failed: connect relay:7443: No route to host (os error 113)","relay":"https://relay:7443","target":"flakelet_relay::agent::conn"}
agent # [ 6543.994649] agent flakelet-agent[1951]: {"timestamp":"2026-09-06T08:53:41.956402Z","level":"INFO","message":"update finished","flakelet":"app","status":"Updated","generation":"Some(7)","target":"flakelet_relay::agent::jobs"}
client: (finished: waiting for success: grep -q 'agent/app: updated' /tmp/slow.out, in 8.09 seconds)
client: must succeed: cat /tmp/slow.out
client: (finished: must succeed: cat /tmp/slow.out, in 0.01 seconds)
(finished: subtest: agent link drop mid-run replays missed lines once, in 16.38 seconds)
subtest: agent restart mid-run reattaches to the unit
agent: must succeed: jq '.services.app.prebuilt="/nix/store/ln47rsd5km8a04hd5zlkz4q1v352zqh3-flakelet-app-slow2"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json
agent: (finished: must succeed: jq '.services.app.prebuilt="/nix/store/ln47rsd5km8a04hd5zlkz4q1v352zqh3-flakelet-app-slow2"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json, in 0.01 seconds)
client: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/app > /tmp/restart.out 2>&1 &
client: (finished: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/app > /tmp/restart.out 2>&1 &, in 0.01 seconds)
agent: waiting for success: journalctl -u flakelet-relay-job-app.service --since -20s | grep -q 'app-slow2'
agent # [ 6551.213347] agent flakelet-agent[1951]: {"timestamp":"2026-09-06T08:53:49.175077Z","level":"INFO","message":"connected","relay":"https://relay:7443","relay_name":"relay","relay_version":"0.1.0","host":"agent","target":"flakelet_relay::agent::conn"}
agent # [ 6551.214494] agent flakelet-agent[1951]: {"timestamp":"2026-09-06T08:53:49.176315Z","level":"INFO","message":"start","id":"09d60b21ac81ccedd16559a9dade8fe6","flakelet":"app","rule":"admins","relay":"relay","caller":"Some(\"x509:email:admin@example.org\")","target":"flakelet_relay::agent::conn"}
agent # [ 6551.455471] agent flakelet-agent[1951]: {"timestamp":"2026-09-06T08:53:49.417248Z","level":"INFO","message":"start","id":"0937cc1655f684a3adbecc641824cdb1","flakelet":"app","rule":"admins","relay":"relay","caller":"Some(\"x509:email:admin@example.org\")","target":"flakelet_relay::agent::conn"}
agent # [ 6551.455949] agent flakelet-agent[1951]: {"timestamp":"2026-09-06T08:53:49.417775Z","level":"INFO","message":"update starting","flakelet":"app","ids":"[\"0937cc1655f684a3adbecc641824cdb1\"]","target":"flakelet_relay::agent::jobs"}
agent # [ 6551.490695] agent systemd[1]: Starting flakelet update app (via relay)...
relay # [ 6551.213426] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:53:49.175143Z","level":"INFO","message":"agent connected","host":"agent","version":"0.1.0","flakelets":"[Named { name: \"app\", generation: Some(7), revision: Some(\"prebuilt:app\") }, Named { name: \"other\", generation: Some(1), revision: Some(\"prebuilt:other\") }]","target":"flakelet_relay::relay::agent_conn"}
relay # [ 6551.215027] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:53:49.176819Z","level":"INFO","message":"deploy finished","job":"49e3ab226a6e34e03b088c720f73012d","ok":true,"target":"flakelet_relay::relay::api"}
relay # [ 6551.455114] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:53:49.416838Z","level":"INFO","message":"deploy accepted","job":"1a229b2fbfbe3a13da0807345d6dedd7","caller":"x509:email:admin@example.org","targets":"[\"agent/app\"]","target":"flakelet_relay::relay::api"}
agent # [ 6551.520026] agent systemd[1]: Started flakelet update app (via relay).
agent # [ 6551.524311] agent flakelet[3027]: app: using prebuilt artifact /nix/store/ln47rsd5km8a04hd5zlkz4q1v352zqh3-flakelet-app-slow2
agent # [ 6551.525022] agent flakelet[3027]: app: activating generation 8
agent # [ 6551.540952] agent systemd[1]: Stopping app slow...
agent # [ 6551.541412] agent systemd[1]: app.service: Deactivated successfully.
agent # [ 6551.541690] agent systemd[1]: Stopped app slow.
agent # [ 6551.557789] agent systemd[1]: Reload requested from client PID 3034 ('systemctl') (unit flakelet-relay-job-app.service)...
agent # [ 6551.557853] agent systemd[1]: Reloading...
agent # [ 6551.895697] agent systemd[1]: Reloading finished in 337 ms.
agent # [ 6551.980803] agent systemd[1]: Reload requested from client PID 3064 ('systemctl') (unit flakelet-relay-job-app.service)...
agent # [ 6551.980842] agent systemd[1]: Reloading...
agent: (finished: waiting for success: journalctl -u flakelet-relay-job-app.service --since -20s | grep -q 'app-slow2', in 1.02 seconds)
agent: must succeed: systemctl restart flakelet-agent
agent # [ 6552.302892] agent systemd[1]: Reloading finished in 321 ms.
agent # [ 6552.372046] agent systemd[1]: Reload requested from client PID 3095 ('systemctl') (unit flakelet-relay-job-app.service)...
agent # [ 6552.372081] agent systemd[1]: Reloading...
agent # [ 6552.699581] agent systemd[1]: Reloading finished in 327 ms.
agent # [ 6552.765547] agent systemd[1]: Stopping flakelet-agent...
agent # [ 6552.765674] agent systemd[1]: Failed to start new connection bus: Connection reset by peer
agent # [ 6552.769205] agent systemd[1]: Reload requested from client PID 3132 ('systemctl') (unit flakelet-relay-job-app.service)...
agent # [ 6552.769244] agent systemd[1]: Reloading...
relay # [ 6552.765910] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:53:50.727614Z","level":"INFO","message":"agent disconnected: IO error: peer closed connection without sending TLS close_notify: https://docs.rs/rustls/latest/rustls/manual/_03_howto/index.html#unexpected-eof","host":"agent","target":"flakelet_relay::relay::agent_conn"}
agent: (finished: must succeed: systemctl restart flakelet-agent, in 0.84 seconds)
agent: must succeed: test -n "$(ls /var/lib/flakelet-agent/jobs)"
agent: (finished: must succeed: test -n "$(ls /var/lib/flakelet-agent/jobs)", in 0.01 seconds)
client: waiting for success: grep -q 'agent/app: updated' /tmp/restart.out
agent # [ 6553.100370] agent systemd[1]: Reloading finished in 330 ms.
agent # [ 6553.168418] agent systemd[1]: flakelet-agent.service: Deactivated successfully.
agent # [ 6553.168624] agent systemd[1]: Stopped flakelet-agent.
agent # [ 6553.168640] agent systemd[1]: flakelet-agent.service: Consumed 1.881s CPU time over 28.956s wall clock time.
agent # [ 6553.172603] agent systemd[1]: Starting flakelet-agent...
agent # [ 6553.175058] agent systemd[1]: Starting app slow2...
agent # [ 6553.229074] agent flakelet-agent[3163]: {"timestamp":"2026-09-06T08:53:51.190854Z","level":"INFO","message":"reattaching to running unit","flakelet":"app","ids":"[\"0937cc1655f684a3adbecc641824cdb1\"]","target":"flakelet_relay::agent::jobs"}
agent # [ 6553.306406] agent systemd[1]: Started flakelet-agent.
agent # [ 6553.316618] agent flakelet-agent[3163]: {"timestamp":"2026-09-06T08:53:51.278420Z","level":"INFO","message":"connected","relay":"https://relay:7443","relay_name":"relay","relay_version":"0.1.0","host":"agent","target":"flakelet_relay::agent::conn"}
agent # [ 6553.317773] agent flakelet-agent[3163]: {"timestamp":"2026-09-06T08:53:51.279594Z","level":"INFO","message":"start","id":"0937cc1655f684a3adbecc641824cdb1","flakelet":"app","rule":"admins","relay":"relay","caller":"Some(\"x509:email:admin@example.org\")","target":"flakelet_relay::agent::conn"}
relay # [ 6553.316710] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:53:51.278439Z","level":"INFO","message":"agent connected","host":"agent","version":"0.1.0","flakelets":"[Named { name: \"app\", generation: Some(7), revision: Some(\"prebuilt:app\") }, Named { name: \"other\", generation: Some(1), revision: Some(\"prebuilt:other\") }]","target":"flakelet_relay::relay::agent_conn"}
agent # [ 6559.244086] agent systemd[1]: Started app slow2.
agent # [ 6559.263710] agent flakelet[3027]: app: updated to generation 8
agent # [ 6559.266604] agent systemd[1]: flakelet-relay-job-app.service: Deactivated successfully.
relay # [ 6559.832041] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:53:57.793770Z","level":"INFO","message":"deploy finished","job":"1a229b2fbfbe3a13da0807345d6dedd7","ok":true,"target":"flakelet_relay::relay::api"}
agent # [ 6559.831150] agent flakelet-agent[3163]: {"timestamp":"2026-09-06T08:53:57.792906Z","level":"INFO","message":"update finished","flakelet":"app","status":"Updated","generation":"Some(8)","target":"flakelet_relay::agent::jobs"}
client: (finished: waiting for success: grep -q 'agent/app: updated' /tmp/restart.out, in 7.08 seconds)
client: must succeed: cat /tmp/restart.out
client: (finished: must succeed: cat /tmp/restart.out, in 0.01 seconds)
agent: must succeed: systemctl is-active app.service
agent: (finished: must succeed: systemctl is-active app.service, in 0.01 seconds)
(finished: subtest: agent restart mid-run reattaches to the unit, in 9.00 seconds)
subtest: relay restart mid-run, push resumes via /v1/jobs
agent: must succeed: jq '.services.app.prebuilt="/nix/store/c67jj8kx3m50nyj874aqmdqf21w5iznd-flakelet-app-slow"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json
agent: (finished: must succeed: jq '.services.app.prebuilt="/nix/store/c67jj8kx3m50nyj874aqmdqf21w5iznd-flakelet-app-slow"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json, in 0.01 seconds)
agent: must succeed: date +%s
agent: (finished: must succeed: date +%s, in 0.01 seconds)
client: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/app > /tmp/resume.out 2>&1 &
client: (finished: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/app > /tmp/resume.out 2>&1 &, in 0.01 seconds)
agent: waiting for success: journalctl -u flakelet-relay-job-app.service --since=@1788684838 | grep -q 'app-slow'
agent # [ 6560.460380] agent flakelet-agent[3163]: {"timestamp":"2026-09-06T08:53:58.422105Z","level":"INFO","message":"start","id":"d325e1b5bef76535e03ccd56529c636f","flakelet":"app","rule":"admins","relay":"relay","caller":"Some(\"x509:email:admin@example.org\")","target":"flakelet_relay::agent::conn"}
agent # [ 6560.460956] agent flakelet-agent[3163]: {"timestamp":"2026-09-06T08:53:58.422775Z","level":"INFO","message":"update starting","flakelet":"app","ids":"[\"d325e1b5bef76535e03ccd56529c636f\"]","target":"flakelet_relay::agent::jobs"}
agent # [ 6560.508952] agent systemd[1]: Starting flakelet update app (via relay)...
agent # [ 6560.536970] agent systemd[1]: Started flakelet update app (via relay).
agent # [ 6560.541704] agent flakelet[3648]: app: using prebuilt artifact /nix/store/c67jj8kx3m50nyj874aqmdqf21w5iznd-flakelet-app-slow
agent # [ 6560.542312] agent flakelet[3648]: app: activating generation 9
agent # [ 6560.554893] agent systemd[1]: Stopping app slow2...
agent # [ 6560.555368] agent systemd[1]: app.service: Deactivated successfully.
agent # [ 6560.555631] agent systemd[1]: Stopped app slow2.
agent # [ 6560.572512] agent systemd[1]: Reload requested from client PID 3655 ('systemctl') (unit flakelet-relay-job-app.service)...
agent # [ 6560.572578] agent systemd[1]: Reloading...
relay # [ 6560.459920] relay flakelet-relay[400]: {"timestamp":"2026-09-06T08:53:58.421662Z","level":"INFO","message":"deploy accepted","job":"8089717932c09ac0ce0202fb8bd8debe","caller":"x509:email:admin@example.org","targets":"[\"agent/app\"]","target":"flakelet_relay::relay::api"}
agent # [ 6560.908735] agent systemd[1]: Reloading finished in 335 ms.
agent # [ 6560.984201] agent systemd[1]: Reload requested from client PID 3685 ('systemctl') (unit flakelet-relay-job-app.service)...
agent # [ 6560.984250] agent systemd[1]: Reloading...
agent # [ 6561.307035] agent systemd[1]: Reloading finished in 322 ms.
agent: (finished: waiting for success: journalctl -u flakelet-relay-job-app.service --since=@1788684838 | grep -q 'app-slow', in 1.02 seconds)
relay: must succeed: systemctl restart flakelet-relay
agent # [ 6561.391522] agent systemd[1]: Reload requested from client PID 3716 ('systemctl') (unit flakelet-relay-job-app.service)...
agent # [ 6561.391558] agent systemd[1]: Reloading...
agent # [ 6561.484666] agent flakelet-agent[3163]: {"timestamp":"2026-09-06T08:53:59.446402Z","level":"INFO","message":"disconnected: IO error: peer closed connection without sending TLS close_notify: https://docs.rs/rustls/latest/rustls/manual/_03_howto/index.html#unexpected-eof","relay":"https://relay:7443","target":"flakelet_relay::agent::conn"}
relay # [ 6561.484287] relay systemd[1]: Stopping flakelet-relay...
relay # [ 6561.520101] relay systemd[1]: flakelet-relay.service: Deactivated successfully.
relay # [ 6561.520570] relay systemd[1]: Stopped flakelet-relay.
relay # [ 6561.520611] relay systemd[1]: flakelet-relay.service: Consumed 2.725s CPU time over 1min 9.143s wall clock time.
relay # [ 6561.557394] relay systemd[1]: Starting flakelet-relay...
agent # [ 6561.719584] agent systemd[1]: Reloading finished in 327 ms.
agent # [ 6561.813468] agent systemd[1]: Reload requested from client PID 3752 ('systemctl') (unit flakelet-relay-job-app.service)...
agent # [ 6561.813506] agent systemd[1]: Reloading...
agent # [ 6562.145292] agent systemd[1]: Reloading finished in 331 ms.
agent # [ 6562.227763] agent systemd[1]: Starting app slow...
agent # [ 6562.487795] agent flakelet-agent[3163]: {"timestamp":"2026-09-06T08:54:00.449366Z","level":"WARN","message":"connect failed: connect relay:7443: Connection refused (os error 111)","relay":"https://relay:7443","target":"flakelet_relay::agent::conn"}
relay: (finished: must succeed: systemctl restart flakelet-relay, in 1.52 seconds)
client: waiting for success: grep -q '» ok' /tmp/resume.out
relay # [ 6562.983597] relay flakelet-relay[933]: {"timestamp":"2026-09-06T08:54:00.945340Z","level":"INFO","message":"listening on 127.0.0.1:7400","target":"flakelet_relay::relay::server"}
relay # [ 6562.984419] relay flakelet-relay[933]: {"timestamp":"2026-09-06T08:54:00.945787Z","level":"INFO","message":"listening on [::]:7443","target":"flakelet_relay::relay::server"}
relay # [ 6562.984192] relay systemd[1]: Started flakelet-relay.
agent # [ 6564.498710] agent flakelet-agent[3163]: {"timestamp":"2026-09-06T08:54:02.460416Z","level":"INFO","message":"connected","relay":"https://relay:7443","relay_name":"relay","relay_version":"0.1.0","host":"agent","target":"flakelet_relay::agent::conn"}
relay # [ 6564.498989] relay flakelet-relay[933]: {"timestamp":"2026-09-06T08:54:02.460662Z","level":"INFO","message":"agent connected","host":"agent","version":"0.1.0","flakelets":"[Named { name: \"app\", generation: Some(8), revision: Some(\"prebuilt:app\") }, Named { name: \"other\", generation: Some(1), revision: Some(\"prebuilt:other\") }]","target":"flakelet_relay::relay::agent_conn"}
agent # [ 6568.295118] agent systemd[1]: Started app slow.
agent # [ 6568.313700] agent flakelet[3648]: app: updated to generation 9
agent # [ 6568.316601] agent systemd[1]: flakelet-relay-job-app.service: Deactivated successfully.
relay # [ 6568.503480] relay flakelet-relay[933]: {"timestamp":"2026-09-06T08:54:06.465209Z","level":"INFO","message":"job reattached","job":"8089717932c09ac0ce0202fb8bd8debe","targets":"[\"agent/app\"]","target":"flakelet_relay::relay::api"}
agent # [ 6569.402034] agent flakelet-agent[3163]: {"timestamp":"2026-09-06T08:54:07.363788Z","level":"INFO","message":"update finished","flakelet":"app","status":"Updated","generation":"Some(9)","target":"flakelet_relay::agent::jobs"}
client: (finished: waiting for success: grep -q '» ok' /tmp/resume.out, in 7.08 seconds)
client: must succeed: cat /tmp/resume.out
client: (finished: must succeed: cat /tmp/resume.out, in 0.01 seconds)
(finished: subtest: relay restart mid-run, push resumes via /v1/jobs, in 9.66 seconds)
subtest: job history comes from the agents and survives a relay restart
client: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy --id hist1 agent/other 2>&1
relay # [ 6570.100305] relay flakelet-relay[933]: {"timestamp":"2026-09-06T08:54:08.062043Z","level":"INFO","message":"deploy accepted","job":"188b06c4636b65849b3ba8daac22dc7c","caller":"x509:email:admin@example.org","targets":"[\"agent/other\"]","target":"flakelet_relay::relay::api"}
agent # [ 6570.100691] agent flakelet-agent[3163]: {"timestamp":"2026-09-06T08:54:08.062425Z","level":"INFO","message":"start","id":"5be20c693e5c0b60e3f85779794dfb86","flakelet":"other","rule":"admins","relay":"relay","caller":"Some(\"x509:email:admin@example.org\")","target":"flakelet_relay::agent::conn"}
agent # [ 6570.101269] agent flakelet-agent[3163]: {"timestamp":"2026-09-06T08:54:08.063086Z","level":"INFO","message":"update starting","flakelet":"other","ids":"[\"5be20c693e5c0b60e3f85779794dfb86\"]","target":"flakelet_relay::agent::jobs"}
agent # [ 6570.155789] agent systemd[1]: Starting flakelet update other (via relay)...
agent # [ 6570.187069] agent systemd[1]: Started flakelet update other (via relay).
agent # [ 6570.191708] agent flakelet[3865]: other: using prebuilt artifact /nix/store/hmr990n0b4v6rpzrcpyyw738r9xi7z95-flakelet-other-v1
agent # [ 6570.192260] agent flakelet[3865]: other: up to date
agent # [ 6570.193949] agent systemd[1]: flakelet-relay-job-other.service: Deactivated successfully.
client: (finished: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy --id hist1 agent/other 2>&1, in 0.67 seconds)
relay: must succeed: systemctl restart flakelet-relay
agent # [ 6570.744488] agent flakelet-agent[3163]: {"timestamp":"2026-09-06T08:54:08.706244Z","level":"INFO","message":"update finished","flakelet":"other","status":"Unchanged","generation":"Some(1)","target":"flakelet_relay::agent::jobs"}
agent # [ 6570.761544] agent flakelet-agent[3163]: {"timestamp":"2026-09-06T08:54:08.723362Z","level":"INFO","message":"disconnected: IO error: peer closed connection without sending TLS close_notify: https://docs.rs/rustls/latest/rustls/manual/_03_howto/index.html#unexpected-eof","relay":"https://relay:7443","target":"flakelet_relay::agent::conn"}
relay # [ 6570.745365] relay flakelet-relay[933]: {"timestamp":"2026-09-06T08:54:08.707099Z","level":"INFO","message":"deploy finished","job":"188b06c4636b65849b3ba8daac22dc7c","ok":true,"target":"flakelet_relay::relay::api"}
relay # [ 6570.761373] relay systemd[1]: Stopping flakelet-relay...
relay # [ 6570.812673] relay systemd[1]: flakelet-relay.service: Deactivated successfully.
relay # [ 6570.813142] relay systemd[1]: Stopped flakelet-relay.
relay # [ 6570.813181] relay systemd[1]: flakelet-relay.service: Consumed 2.268s CPU time over 9.255s wall clock time.
relay # [ 6570.849723] relay systemd[1]: Starting flakelet-relay...
agent # [ 6571.765228] agent flakelet-agent[3163]: {"timestamp":"2026-09-06T08:54:09.726949Z","level":"WARN","message":"connect failed: connect relay:7443: Connection refused (os error 111)","relay":"https://relay:7443","target":"flakelet_relay::agent::conn"}
relay: (finished: must succeed: systemctl restart flakelet-relay, in 1.49 seconds)
relay: waiting for success: curl -sf http://127.0.0.1:7400/metrics | grep -q 'agent_up{host="agent"} 1'
relay # [ 6572.232145] relay flakelet-relay[1323]: {"timestamp":"2026-09-06T08:54:10.193897Z","level":"INFO","message":"listening on 127.0.0.1:7400","target":"flakelet_relay::relay::server"}
relay # [ 6572.232938] relay flakelet-relay[1323]: {"timestamp":"2026-09-06T08:54:10.194405Z","level":"INFO","message":"listening on [::]:7443","target":"flakelet_relay::relay::server"}
relay # [ 6572.232767] relay systemd[1]: Started flakelet-relay.
agent # [ 6573.778910] agent flakelet-agent[3163]: {"timestamp":"2026-09-06T08:54:11.740624Z","level":"INFO","message":"connected","relay":"https://relay:7443","relay_name":"relay","relay_version":"0.1.0","host":"agent","target":"flakelet_relay::agent::conn"}
relay # [ 6573.779161] relay flakelet-relay[1323]: {"timestamp":"2026-09-06T08:54:11.740871Z","level":"INFO","message":"agent connected","host":"agent","version":"0.1.0","flakelets":"[Named { name: \"app\", generation: Some(9), revision: Some(\"prebuilt:app\") }, Named { name: \"other\", generation: Some(1), revision: Some(\"prebuilt:other\") }]","target":"flakelet_relay::relay::agent_conn"}
relay: (finished: waiting for success: curl -sf http://127.0.0.1:7400/metrics | grep -q 'agent_up{host="agent"} 1', in 2.05 seconds)
client: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem jobs
client: (finished: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem jobs, in 0.02 seconds)
client: must succeed: echo '{"groups": []}' | step crypto jwt sign --key /nix/store/r7sclamg09v434w8zjlfnrcrn1w79wh6-flakelet-relay-test-issuer/jwk.json --iss https://relay:8443 --aud flakelet-relay --sub 'repo:github:example/app:ref:refs/heads/main' --exp $(( $(date +%s) + 300 )) --jti $(head -c8 /dev/urandom | base32)
client: (finished: must succeed: echo '{"groups": []}' | step crypto jwt sign --key /nix/store/r7sclamg09v434w8zjlfnrcrn1w79wh6-flakelet-relay-test-issuer/jwk.json --iss https://relay:8443 --aud flakelet-relay --sub 'repo:github:example/app:ref:refs/heads/main' --exp $(( $(date +%s) + 300 )) --jti $(head -c8 /dev/urandom | base32), in 0.06 seconds)
client: must succeed: FLAKELET_RELAY_TOKEN_COMMAND='echo eyJhbGciOiJFZERTQSIsImtpZCI6ImsxIiwidHlwIjoiSldUIn0.eyJhdWQiOiJmbGFrZWxldC1yZWxheSIsImV4cCI6MTc4ODY4NTE1MiwiZ3JvdXBzIjpbXSwiaWF0IjoxNzg4Njg0ODUyLCJpc3MiOiJodHRwczovL3JlbGF5Ojg0NDMiLCJqdGkiOiI2NTRRR05LTVpLVEtXPT09IiwibmJmIjoxNzg4Njg0ODUyLCJzdWIiOiJyZXBvOmdpdGh1YjpleGFtcGxlL2FwcDpyZWY6cmVmcy9oZWFkcy9tYWluIn0.jZuMOfJrGjKXkpdhSS-Qy35czju_-CF8_Ue38Dqy7xSy4b78d327xxfVtkqGi6bZs3cPSoi1S_MileCjMcQBBw' push --relay https://relay:7443 jobs
client: (finished: must succeed: FLAKELET_RELAY_TOKEN_COMMAND='echo eyJhbGciOiJFZERTQSIsImtpZCI6ImsxIiwidHlwIjoiSldUIn0.eyJhdWQiOiJmbGFrZWxldC1yZWxheSIsImV4cCI6MTc4ODY4NTE1MiwiZ3JvdXBzIjpbXSwiaWF0IjoxNzg4Njg0ODUyLCJpc3MiOiJodHRwczovL3JlbGF5Ojg0NDMiLCJqdGkiOiI2NTRRR05LTVpLVEtXPT09IiwibmJmIjoxNzg4Njg0ODUyLCJzdWIiOiJyZXBvOmdpdGh1YjpleGFtcGxlL2FwcDpyZWY6cmVmcy9oZWFkcy9tYWluIn0.jZuMOfJrGjKXkpdhSS-Qy35czju_-CF8_Ue38Dqy7xSy4b78d327xxfVtkqGi6bZs3cPSoi1S_MileCjMcQBBw' push --relay https://relay:7443 jobs, in 0.02 seconds)
(finished: subtest: job history comes from the agents and survives a relay restart, in 4.30 seconds)
subtest: dashboard login via authorization code flow
client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -o /dev/null -w '%{http_code} %{redirect_url}' https://relay:7443/ui/ | grep -q '303 https://relay:7443/ui/login'
client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -o /dev/null -w '%{http_code} %{redirect_url}' https://relay:7443/ui/ | grep -q '303 https://relay:7443/ui/login', in 0.02 seconds)
client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -L https://relay:7443/ui/login
client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -L https://relay:7443/ui/login, in 0.09 seconds)
client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar https://relay:7443/ui/jobs
client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar https://relay:7443/ui/jobs, in 0.02 seconds)
client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -f https://relay:7443/v1/jobs | grep -q hist1
client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -f https://relay:7443/v1/jobs | grep -q hist1, in 0.02 seconds)
client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -N --max-time 10 https://relay:7443/ui/jobs/hist1/events || true
client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -N --max-time 10 https://relay:7443/ui/jobs/hist1/events || true, in 0.02 seconds)
client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -o /dev/null -w '%{http_code}' -X POST 'https://relay:7443/ui/deploy?arg=other' | grep -q 403
client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -o /dev/null -w '%{http_code}' -X POST 'https://relay:7443/ui/deploy?arg=other' | grep -q 403, in 0.02 seconds)
client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -D - -o /dev/null -H 'HX-Request: true' -X POST 'https://relay:7443/ui/deploy?arg=other'
client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -D - -o /dev/null -H 'HX-Request: true' -X POST 'https://relay:7443/ui/deploy?arg=other', in 0.02 seconds)
client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -N --max-time 30 https://relay:7443/ui/jobs/9de6fe9d17c0ffb7d38e91066e4d4459/events || true
relay # [ 6574.430526] relay 93sn3sv24fj26ksccpppzwg6kbf10s4w-device-mock[186]: 127.0.0.1 - - [06/Sep/2026 08:54:12] "GET /authorize?response_type=code&client_id=dashboard&redirect_uri=https%3A%2F%2Frelay%3A7443%2Fui%2Fcallback&scope=openid%20profile%20email%20groups&state=xLzEEqwsuIWbPDlhvsv4SI_g7oEYJQFrJN7r2dIfxuE&code_challenge=Ml1TWgatRxhUmQqXyYVTF5XGxFwEsmzUnGM6YN51dvM&code_challenge_method=S256 HTTP/1.1" 302 -
relay # [ 6574.481267] relay 93sn3sv24fj26ksccpppzwg6kbf10s4w-device-mock[186]: 127.0.0.1 - - [06/Sep/2026 08:54:12] "POST /token HTTP/1.1" 200 -
relay # [ 6574.482767] relay flakelet-relay[1323]: {"timestamp":"2026-09-06T08:54:12.444565Z","level":"INFO","message":"login","name":"someone","principals":"[\"oidc:mock:someone\", \"oidc:mock:groups:wheel\"]","target":"flakelet_relay::relay::login"}
relay # [ 6574.540953] relay flakelet-relay[1323]: {"timestamp":"2026-09-06T08:54:12.502703Z","level":"INFO","message":"job reattached","job":"188b06c4636b65849b3ba8daac22dc7c","targets":"[\"agent/other\"]","target":"flakelet_relay::relay::api"}
relay # [ 6574.582660] relay flakelet-relay[1323]: {"timestamp":"2026-09-06T08:54:12.544417Z","level":"INFO","message":"deploy accepted","job":"203695b8a73820ef7d4be6636ca769b0","caller":"oidc:mock:someone","targets":"[\"agent/other\"]","target":"flakelet_relay::relay::api"}
relay # [ 6574.605309] relay flakelet-relay[1323]: {"timestamp":"2026-09-06T08:54:12.567114Z","level":"INFO","message":"job reattached","job":"203695b8a73820ef7d4be6636ca769b0","targets":"[\"agent/other\"]","target":"flakelet_relay::relay::api"}
agent # [ 6574.582923] agent flakelet-agent[3163]: {"timestamp":"2026-09-06T08:54:12.544665Z","level":"INFO","message":"start","id":"a354978fbbfbb1b533dbe9d0675c962d","flakelet":"other","rule":"admins","relay":"relay","caller":"Some(\"oidc:mock:someone\\noidc:mock:groups:wheel\")","target":"flakelet_relay::agent::conn"}
agent # [ 6574.583307] agent flakelet-agent[3163]: {"timestamp":"2026-09-06T08:54:12.545015Z","level":"INFO","message":"update starting","flakelet":"other","ids":"[\"a354978fbbfbb1b533dbe9d0675c962d\"]","target":"flakelet_relay::agent::jobs"}
agent # [ 6574.635217] agent systemd[1]: Starting flakelet update other (via relay)...
agent # [ 6574.667078] agent systemd[1]: Started flakelet update other (via relay).
agent # [ 6574.671649] agent flakelet[3913]: other: using prebuilt artifact /nix/store/hmr990n0b4v6rpzrcpyyw738r9xi7z95-flakelet-other-v1
agent # [ 6574.672185] agent flakelet[3913]: other: up to date
agent # [ 6574.675359] agent systemd[1]: flakelet-relay-job-other.service: Deactivated successfully.
client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -N --max-time 30 https://relay:7443/ui/jobs/9de6fe9d17c0ffb7d38e91066e4d4459/events || true, in 0.65 seconds)
client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar https://relay:7443/ui/jobs/9de6fe9d17c0ffb7d38e91066e4d4459
client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar https://relay:7443/ui/jobs/9de6fe9d17c0ffb7d38e91066e4d4459, in 0.02 seconds)
client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -sf -o /dev/null https://relay:7443/ui/static/htmx.min.js
client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -sf -o /dev/null https://relay:7443/ui/static/htmx.min.js, in 0.02 seconds)
client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar 'https://relay:7443/ui/?q=status%3Ahealthy+oth'
client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar 'https://relay:7443/ui/?q=status%3Ahealthy+oth', in 0.02 seconds)
client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar https://relay:7443/ui/flakelets/other
client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar https://relay:7443/ui/flakelets/other, in 0.02 seconds)
client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar 'https://relay:7443/ui/hosts?q=status%3Adisconnected'
client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar 'https://relay:7443/ui/hosts?q=status%3Adisconnected', in 0.02 seconds)
client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -o /dev/null -w '%{http_code}' -H 'HX-Request: true' -X POST 'https://relay:7443/ui/retry?arg=9de6fe9d17c0ffb7d38e91066e4d4459' | grep -q 400
client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -o /dev/null -w '%{http_code}' -H 'HX-Request: true' -X POST 'https://relay:7443/ui/retry?arg=9de6fe9d17c0ffb7d38e91066e4d4459' | grep -q 400, in 0.02 seconds)
client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -N --max-time 15 'https://relay:7443/ui/events?path=jobs' > /tmp/ev.out 2>&1 &
client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -N --max-time 15 'https://relay:7443/ui/events?path=jobs' > /tmp/ev.out 2>&1 &, in 0.01 seconds)
client: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy --id live1 agent/other
» job 38796a7ba508eadfe82a1cd5def000bc via relay 0.1.0 (agents: agent 0.1.0)
» wave 0
agent/other | Starting flakelet update other (via relay)...
agent/other | Started flakelet update other (via relay).
agent/other | other: using prebuilt artifact /nix/store/hmr990n0b4v6rpzrcpyyw738r9xi7z95-flakelet-other-v1
agent/other | other: up to date
agent # [ 6575.228336] agent flakelet-agent[3163]: {"timestamp":"2026-09-06T08:54:13.190089Z","level":"INFO","message":"update finished","flakelet":"other","status":"Unchanged","generation":"Some(1)","target":"flakelet_relay::agent::jobs"}
agent # [ 6575.379873] agent flakelet-agent[3163]: {"timestamp":"2026-09-06T08:54:13.341631Z","level":"INFO","message":"start","id":"5e317fc57863c2a7c03ebe1bdacd1356","flakelet":"other","rule":"admins","relay":"relay","caller":"Some(\"x509:email:admin@example.org\")","target":"flakelet_relay::agent::conn"}
agent # [ 6575.380238] agent flakelet-agent[3163]: {"timestamp":"2026-09-06T08:54:13.342021Z","level":"INFO","message":"update starting","flakelet":"other","ids":"[\"5e317fc57863c2a7c03ebe1bdacd1356\"]","target":"flakelet_relay::agent::jobs"}
agent # [ 6575.428178] agent systemd[1]: Starting flakelet update other (via relay)...
agent # [ 6575.464213] agent systemd[1]: Started flakelet update other (via relay).
agent # [ 6575.469406] agent flakelet[3951]: other: using prebuilt artifact /nix/store/hmr990n0b4v6rpzrcpyyw738r9xi7z95-flakelet-other-v1
agent # [ 6575.469987] agent flakelet[3951]: other: up to date
agent # [ 6575.471945] agent systemd[1]: flakelet-relay-job-other.service: Deactivated successfully.
agent/other | flakelet-relay-job-other.service: Deactivated successfully.
relay # [ 6575.379564] relay flakelet-relay[1323]: {"timestamp":"2026-09-06T08:54:13.341309Z","level":"INFO","message":"deploy accepted","job":"38796a7ba508eadfe82a1cd5def000bc","caller":"x509:email:admin@example.org","targets":"[\"agent/other\"]","target":"flakelet_relay::relay::api"}
» agent/other: unchanged (generation 1)
» ok
client: (finished: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy --id live1 agent/other, in 0.67 seconds)
client: waiting for success: grep -q live1 /tmp/ev.out
client: (finished: waiting for success: grep -q live1 /tmp/ev.out, in 0.01 seconds)
client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -X POST -o /dev/null https://relay:7443/ui/logout
client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -X POST -o /dev/null https://relay:7443/ui/logout, in 0.02 seconds)
client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -o /dev/null -w '%{http_code}' https://relay:7443/ui/ | grep -q 303
client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -o /dev/null -w '%{http_code}' https://relay:7443/ui/ | grep -q 303, in 0.02 seconds)
(finished: subtest: dashboard login via authorization code flow, in 1.70 seconds)
(finished: run the VM test script, in 87.25 seconds)
test script finished in 87.29s
cleanup
kill NspawnMachine (pid 52)
kill NspawnMachine (pid 53)
Container agent terminated by signal KILL.
kill NspawnMachine (pid 55)
Container client terminated by signal KILL.
relay # [ 6576.025958] relay flakelet-relay[1323]: {"timestamp":"2026-09-06T08:54:13.987689Z","level":"INFO","message":"deploy finished","job":"38796a7ba508eadfe82a1cd5def000bc","ok":true,"target":"flakelet_relay::relay::api"}
(finished: cleanup, in 0.34 seconds)
additionally exposed symbols:
    agent, client, relay,
    vlan1,
    start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh
» job a6a9af5bb0313e5df650650e58fcc52b via relay 0.1.0 (agents: agent 0.1.0)
» wave 0
agent/app | Starting flakelet update app (via relay)...
agent/app | Started flakelet update app (via relay).
agent/app | app: using prebuilt artifact /nix/store/6ili1vxjlag9d7dy0bxrbxk6bpi5qh9p-flakelet-app-v2
agent/app | app: activating generation 2
agent/app | app: updated to generation 2
agent/app | flakelet-relay-job-app.service: Deactivated successfully.
» agent/app: updated (generation 2)
» ok

» job bd96702727922a14b179d06b57d41ad7 via relay 0.1.0 (agents: agent 0.1.0)
» wave 0
agent/app | Starting flakelet update app (via relay)...
agent/app | Started flakelet update app (via relay).
agent/app | app: using prebuilt artifact /nix/store/8282rnbvyk847q4l4zby3zwcq3jpzrvw-flakelet-app-broken
agent/app | app: activating generation 4
agent/app | app: deploy failed, rolled back: systemctl start app.service failed:
agent/app | failed units: app.service. See journalctl -u app.service
agent/app | flakelet-relay-job-app.service: Main process exited, code=exited, status=1/FAILURE
agent/app | flakelet-relay-job-app.service: Failed with result 'exit-code'.
» agent/app: rolled-back (generation 3)
agent/app │ Starting app v1...
agent/app │ Started app v1.
agent/app │ Stopping app v1...
agent/app │ app.service: Deactivated successfully.
agent/app │ Stopped app v1.
agent/app │ Starting app v2...
agent/app │ Started app v2.
agent/app │ Stopping app v2...
agent/app │ app.service: Deactivated successfully.
agent/app │ Stopped app v2.
agent/app │ Starting app v1...
agent/app │ Started app v1.
agent/app │ Stopping app v1...
agent/app │ app.service: Deactivated successfully.
agent/app │ Stopped app v1.
agent/app │ Starting app broken...
agent/app │ app.service: Unable to locate executable '/nonexistent': No such file or directory
agent/app │ app.service: Failed at step EXEC spawning /nonexistent: No such file or directory
agent/app │ app.service: Main process exited, code=exited, status=203/EXEC
agent/app │ app.service: Failed with result 'exit-code'.
agent/app │ Failed to start app broken.
agent/app │ Starting app v1...
agent/app │ Started app v1.
» skipped: agent/other
» failed

» job 49e3ab226a6e34e03b088c720f73012d via relay 0.1.0 (agents: agent 0.1.0)
» wave 0
agent/app | Starting flakelet update app (via relay)...
agent/app | Started flakelet update app (via relay).
agent/app | app: using prebuilt artifact /nix/store/c67jj8kx3m50nyj874aqmdqf21w5iznd-flakelet-app-slow
agent/app | app: activating generation 7
agent/app | app: updated to generation 7
agent/app | flakelet-relay-job-app.service: Deactivated successfully.
» agent/app: updated (generation 7)
» ok

» job 1a229b2fbfbe3a13da0807345d6dedd7 via relay 0.1.0 (agents: agent 0.1.0)
» wave 0
agent/app | Starting flakelet update app (via relay)...
agent/app | Started flakelet update app (via relay).
agent/app | app: using prebuilt artifact /nix/store/ln47rsd5km8a04hd5zlkz4q1v352zqh3-flakelet-app-slow2
agent/app | app: activating generation 8
agent/app | app: updated to generation 8
agent/app | flakelet-relay-job-app.service: Deactivated successfully.
» agent/app: updated (generation 8)
» ok

» job 8089717932c09ac0ce0202fb8bd8debe via relay 0.1.0 (agents: agent 0.1.0)
» wave 0
agent/app | Starting flakelet update app (via relay)...
agent/app | Started flakelet update app (via relay).
agent/app | app: using prebuilt artifact /nix/store/c67jj8kx3m50nyj874aqmdqf21w5iznd-flakelet-app-slow
agent/app | app: activating generation 9
flakelet-push: stream: error reading a body from connection, resuming job 320b83e0ee8b12f2f5ed11e88314d0f2
flakelet-push: https://relay:7443: connect relay:7443: Connection refused (os error 111), retrying in 1s
flakelet-push: https://relay:7443: connect relay:7443: Connection refused (os error 111), retrying in 2s
flakelet-push: https://relay:7443: 404 Not Found: unknown_job: no connected agent knows this job, retrying in 4s
» job 8089717932c09ac0ce0202fb8bd8debe via relay 0.1.0 (agents: agent 0.1.0)
» wave 0
agent/app | app: updated to generation 9
agent/app | flakelet-relay-job-app.service: Deactivated successfully.
» agent/app: updated (generation 9)
» ok

1788684848	hist1	x509:email:admin@example.org	agent/other:unchanged
1788684838	320b83e0ee8b12f2f5ed11e88314d0f2	x509:email:admin@example.org	agent/app:updated
1788684829	9b196702c101c5f8c5171b2854af62d3	x509:email:admin@example.org	agent/app:updated
1788684813	a5ed2cf418a559252c030281d4e3d309	x509:email:admin@example.org	agent/app:updated
1788684804	75e9774fb3f77ffdb6a8488b29d7b114	x509:email:admin@example.org	agent/other:unchanged
1788684792	a9f71554242e4db75d1745a1a9701564	x509:email:admin@example.org	agent/app:updated
1788684791	5165b7a010227614b6741f172e8d307d	x509:email:admin@example.org	agent/app:unchanged
1788684790	585a1cf57368c38cbc3e0c2de9a5c9b8	x509:email:admin@example.org	agent/app:unchanged
1788684790	fb42557e05607c70a190bdb797d31cc6	x509:email:admin@example.org	agent/app:unchanged
1788684786	c816f5be129c422ff254a5a917160416	x509:email:admin@example.org	agent/app:rolled-back
1788684785	b4505fa03540890fb410a210abd70d43	oidc:mock:groups:wheel	agent/other:unchanged
1788684784	eab7f3f19ba04caccf280fb4a5358026	oidc:mock:groups:wheel	agent/other:unchanged
1788684781	b0a34e94c92e4881bad994c59211c82a	oidc:mock:groups:wheel	agent/other:unchanged
1788684778	314419376166b41f337dfaf234f7b420	oidc:mock:repo:github:example/app:ref:refs/heads/main	agent/app:updated
1788684775	73de8a2281dfbbcd2fe5a8f2ca1d92fc	x509:email:admin@example.org	agent/app:updated

Container relay terminated by signal KILL.