container-test-run-flakelet-relay
checks.x86_64-linux.nixos-test
· build #9
· raw
1tribuchet: building on jamie2Machine state will be reset. To keep it, pass --keep-machine-state3start all VLans4(finished: start all VLans, in 0.01 seconds)5Initializing machine ID from random generator.6Test will time out and terminate in 3600.0 seconds7run the VM test script8start all VMs9agent: systemd-nspawn running (pid 52)10client: systemd-nspawn running (pid 53)11relay: systemd-nspawn running (pid 54)12agent: Waiting for journal at /build/vm-state-agent/var/log/journal...13client: Waiting for journal at /build/vm-state-client/var/log/journal...14relay: Waiting for journal at /build/vm-state-relay/var/log/journal...15(finished: start all VMs, in 0.00 seconds)16relay: waiting for unit flakelet-relay.service17nixos-nspawn(agent): TAP vde-tap1 not found; container will be isolated from VDE18nixos-nspawn(agent): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.19nixos-nspawn(relay): TAP vde-tap1 not found; container will be isolated from VDE20nixos-nspawn(relay): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.21nixos-nspawn(client): TAP vde-tap1 not found; container will be isolated from VDE22nixos-nspawn(client): A common reason for this is that /dev/net is not available in the Nix sandbox. Try adding /dev/net to extra-sandbox-paths.23Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.24Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.25░ Spawning container agent on /build/vm-state-agent.26░ Spawning container relay on /build/vm-state-relay.27Note: in a future version of systemd-nspawn the default set of permitted socket address families will be restricted to AF_INET, AF_INET6 and AF_UNIX. Use --restrict-address-families= to configure the set of permitted socket address families, or set RestrictAddressFamilies= in a .nspawn file.28░ Spawning container client on /build/vm-state-client.29agent # No journal files were found.30agent # No journal boot entry found for the specified boot (+0).31client # No journal files were found.32client # No journal boot entry found for the specified boot (+0).33relay # No journal files were found.34relay # No journal boot entry found for the specified boot (+0).35agent # [25957.084264] agent systemd-journald[57]: Journal started36agent # [25957.084305] agent systemd-journald[57]: Runtime Journal (/run/log/journal/a46df14792b749a6bff455455bc1122f) is 8M, max 4G, 3.9G free.37agent # [25957.095867] agent systemd[1]: Finished Apply Kernel Variables.38agent # [25957.107632] agent systemd[1]: Finished Create Static Device Nodes in /dev gracefully.39agent # [25957.140453] agent systemd[1]: Starting Flush Journal to Persistent Storage...40agent # [25957.141184] agent systemd[1]: Starting Create Static Device Nodes in /dev...41agent # [25957.149965] agent systemd-journald[57]: Time spent on flushing to /var/log/journal/a46df14792b749a6bff455455bc1122f is 1.600ms for 6 entries.42agent # [25957.149965] agent systemd-journald[57]: System Journal (/var/log/journal/a46df14792b749a6bff455455bc1122f) is 512B, max 4G, 3.9G free.43agent # [25957.161257] agent systemd[1]: Finished Create Static Device Nodes in /dev.44agent # [25957.162129] agent systemd[1]: Reached target Preparation for Local File Systems.45agent # [25957.162251] agent systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys46agent # [25957.172200] agent systemd[1]: Finished Flush Journal to Persistent Storage.47agent # [25957.245706] agent systemd[1]: Finished Firewall.48client # [25957.076210] client systemd-journald[57]: Journal started49client # [25957.076253] client systemd-journald[57]: Runtime Journal (/run/log/journal/7a5c0b6815ba4cfd897ccdf17e159e68) is 8M, max 4G, 3.9G free.50client # [25957.084791] client systemd[1]: Finished Apply Kernel Variables.51client # [25957.096672] client systemd[1]: Finished Create Static Device Nodes in /dev gracefully.52client # [25957.110336] client systemd[1]: Starting Flush Journal to Persistent Storage...53client # [25957.110951] client systemd[1]: Starting Create Static Device Nodes in /dev...54client # [25957.146937] client systemd-journald[57]: Time spent on flushing to /var/log/journal/7a5c0b6815ba4cfd897ccdf17e159e68 is 1.838ms for 6 entries.55client # [25957.146937] client systemd-journald[57]: System Journal (/var/log/journal/7a5c0b6815ba4cfd897ccdf17e159e68) is 512B, max 4G, 3.9G free.56client # [25957.156727] client systemd[1]: Finished Create Static Device Nodes in /dev.57client # [25957.157733] client systemd[1]: Reached target Preparation for Local File Systems.58client # [25957.157848] client systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys59client # [25957.169994] client systemd[1]: Finished Flush Journal to Persistent Storage.60client # [25957.244638] client systemd[1]: Finished Firewall.61relay # [25957.084265] relay systemd-journald[57]: Journal started62relay # [25957.084308] relay systemd-journald[57]: Runtime Journal (/run/log/journal/eb1a42854a324bc399b27c0d3a6edebb) is 8M, max 4G, 3.9G free.63relay # [25957.094108] relay systemd[1]: Finished Apply Kernel Variables.64relay # [25957.105589] relay systemd[1]: Finished Create Static Device Nodes in /dev gracefully.65relay # [25957.140444] relay systemd[1]: Starting Flush Journal to Persistent Storage...66relay # [25957.141119] relay systemd[1]: Starting Create Static Device Nodes in /dev...67relay # [25957.149910] relay systemd-journald[57]: Time spent on flushing to /var/log/journal/eb1a42854a324bc399b27c0d3a6edebb is 2.737ms for 6 entries.68relay # [25957.149910] relay systemd-journald[57]: System Journal (/var/log/journal/eb1a42854a324bc399b27c0d3a6edebb) is 512B, max 4G, 3.9G free.69relay # [25957.160713] relay systemd[1]: Finished Create Static Device Nodes in /dev.70relay # [25957.161424] relay systemd[1]: Reached target Preparation for Local File Systems.71relay # [25957.161535] relay systemd[1]: Rule-based Manager for Device Events and Files skipped, unmet condition check ConditionPathIsReadWrite=/sys72relay # [25957.177182] relay systemd[1]: Finished Flush Journal to Persistent Storage.73relay # [25957.258750] relay systemd[1]: Finished Firewall.74relay # [25958.083198] relay systemd[1]: Mounting /run/wrappers...75relay # [25958.137916] relay systemd[1]: Mounted /run/wrappers.76relay # [25958.138971] relay systemd[1]: Reached target Local File Systems.77relay # [25958.140358] relay systemd[1]: Listening on Boot Loader Control Service Socket.78relay # [25958.141671] relay systemd[1]: Starting Create SUID/SGID Wrappers...79relay # [25958.141717] relay systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container80relay # [25958.142835] relay systemd[1]: Starting Save Transient machine-id to Disk...81relay # [25958.144105] relay systemd[1]: Starting Create System Files and Directories...82relay # [25958.164344] relay systemd-tmpfiles[169]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted83relay # [25958.164789] relay systemd-tmpfiles[169]: fchmod() of /var/log/journal failed: Operation not permitted84relay # [25958.165156] relay systemd-tmpfiles[169]: fchmod() of /var/log/journal/eb1a42854a324bc399b27c0d3a6edebb failed: Operation not permitted85relay # [25958.165535] relay systemd-tmpfiles[169]: fchmod() of /run/log/journal failed: Operation not permitted86agent # [25958.109720] agent systemd[1]: Mounting /run/wrappers...87agent # [25958.148211] agent systemd[1]: Mounted /run/wrappers.88agent # [25958.149439] agent systemd[1]: Reached target Local File Systems.89agent # [25958.150837] agent systemd[1]: Listening on Boot Loader Control Service Socket.90agent # [25958.152199] agent systemd[1]: Starting Create SUID/SGID Wrappers...91agent # [25958.152245] agent systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container92agent # [25958.153325] agent systemd[1]: Starting Save Transient machine-id to Disk...93agent # [25958.154472] agent systemd[1]: Starting Create System Files and Directories...94agent # [25958.175130] agent systemd-tmpfiles[161]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted95client # [25958.109759] client systemd[1]: Mounting /run/wrappers...96agent # [25958.175562] agent systemd-tmpfiles[161]: fchmod() of /var/log/journal failed: Operation not permitted97client # [25958.150124] client systemd[1]: Mounted /run/wrappers.98agent # [25958.175904] agent systemd-tmpfiles[161]: fchmod() of /var/log/journal/a46df14792b749a6bff455455bc1122f failed: Operation not permitted99client # [25958.151467] client systemd[1]: Reached target Local File Systems.100agent # [25958.176304] agent systemd-tmpfiles[161]: fchmod() of /run/log/journal failed: Operation not permitted101client # [25958.152926] client systemd[1]: Listening on Boot Loader Control Service Socket.102client # [25958.154253] client systemd[1]: Starting Create SUID/SGID Wrappers...103client # [25958.154307] client systemd[1]: Update Boot Loader Random Seed skipped, unmet condition check ConditionVirtualization=!container104client # [25958.155535] client systemd[1]: Starting Save Transient machine-id to Disk...105client # [25958.156396] client systemd[1]: Starting Create System Files and Directories...106client # [25958.175913] client systemd-tmpfiles[161]: Cannot set file attributes for '/var/empty', value=0x00000010, mask=0x00000010, ignoring: Operation not permitted107client # [25958.176368] client systemd-tmpfiles[161]: fchmod() of /var/log/journal failed: Operation not permitted108client # [25958.176719] client systemd-tmpfiles[161]: fchmod() of /var/log/journal/7a5c0b6815ba4cfd897ccdf17e159e68 failed: Operation not permitted109client # [25958.177095] client systemd-tmpfiles[161]: fchmod() of /run/log/journal failed: Operation not permitted110relay # [25958.169825] relay suid-sgid-wrappers-start[176]: chmod: changing permissions of '/run/wrappers/wrappers.Ey0SPX3KaW/chsh': Operation not permitted111relay # [25958.174347] relay systemd[1]: suid-sgid-wrappers.service: Main process exited, code=exited, status=1/FAILURE112relay # [25958.174612] relay systemd[1]: suid-sgid-wrappers.service: Failed with result 'exit-code'.113relay # [25958.174766] relay systemd[1]: Failed to start Create SUID/SGID Wrappers.114relay # [25958.183517] relay systemd[1]: Finished Create System Files and Directories.115relay # [25958.229452] relay systemd[1]: Starting Rebuild Journal Catalog...116relay # [25958.230341] relay systemd[1]: Starting Record System Boot/Shutdown in UTMP...117relay # [25958.242522] relay systemd[1]: etc-machine\x2did.mount: Deactivated successfully.118relay # [25958.257240] relay systemd[1]: Finished Save Transient machine-id to Disk.119relay # [25958.268816] relay systemd[1]: Finished Record System Boot/Shutdown in UTMP.120relay # [25958.278307] relay systemd[1]: Finished Rebuild Journal Catalog.121relay # [25958.279861] relay systemd[1]: Starting Update is Completed...122relay # [25958.292804] relay systemd[1]: Finished Update is Completed.123relay # [25958.292979] relay systemd[1]: Reached target System Initialization.124relay # [25958.293066] relay systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container125relay # [25958.293090] relay systemd[1]: Started Daily Cleanup of Temporary Directories.126relay # [25958.293107] relay systemd[1]: Reached target Timer Units.127relay # [25958.293211] relay systemd[1]: Listening on D-Bus System Message Bus Socket.128relay # [25958.293448] relay systemd[1]: Listening on Nix Daemon Socket.129relay # [25958.293550] relay systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.130relay # [25958.293563] relay systemd[1]: Reached target Socket Units.131relay # [25958.293591] relay systemd[1]: Reached target Basic System.132relay # [25958.294759] relay systemd[1]: Started device-mock.service.133relay # [25958.295551] relay systemd[1]: Starting Re-link flakelet services at boot...134relay # [25958.296391] relay systemd[1]: Starting Import lastlog data into lastlog2 database...135relay # [25958.297359] relay systemd[1]: Starting Name Service Cache Daemon (nsncd)...136relay # [25958.298341] relay systemd[1]: Starting resolvconf update...137relay # [25958.307500] relay systemd[1]: Finished Re-link flakelet services at boot.138relay # [25958.310036] relay systemd[1]: Starting Reconcile flakelet services with the host configuration...139relay # [25958.314685] relay systemd[1]: Finished Import lastlog data into lastlog2 database.140relay # [25958.320480] relay systemd[1]: Finished Reconcile flakelet services with the host configuration.141agent # [25958.177963] agent suid-sgid-wrappers-start[168]: chmod: changing permissions of '/run/wrappers/wrappers.U7HgXne5Z7/chsh': Operation not permitted142agent # [25958.251188] agent systemd[1]: etc-machine\x2did.mount: Deactivated successfully.143agent # [25958.257376] agent systemd[1]: suid-sgid-wrappers.service: Main process exited, code=exited, status=1/FAILURE144agent # [25958.257415] agent systemd[1]: suid-sgid-wrappers.service: Failed with result 'exit-code'.145agent # [25958.257470] agent systemd[1]: Failed to start Create SUID/SGID Wrappers.146agent # [25958.257619] agent systemd[1]: Finished Save Transient machine-id to Disk.147agent # [25958.258165] agent systemd[1]: Finished Create System Files and Directories.148agent # [25958.273808] agent systemd[1]: Starting Rebuild Journal Catalog...149agent # [25958.274798] agent systemd[1]: Starting Record System Boot/Shutdown in UTMP...150agent # [25958.288346] agent systemd[1]: Finished Record System Boot/Shutdown in UTMP.151agent # [25958.299084] agent systemd[1]: Finished Rebuild Journal Catalog.152agent # [25958.300382] agent systemd[1]: Starting Update is Completed...153agent # [25958.310872] agent systemd[1]: Finished Update is Completed.154agent # [25958.310989] agent systemd[1]: Reached target System Initialization.155agent # [25958.311070] agent systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container156agent # [25958.311094] agent systemd[1]: Started Daily Cleanup of Temporary Directories.157agent # [25958.311110] agent systemd[1]: Reached target Timer Units.158agent # [25958.311239] agent systemd[1]: Listening on D-Bus System Message Bus Socket.159agent # [25958.311540] agent systemd[1]: Listening on Nix Daemon Socket.160agent # [25958.311739] agent systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.161agent # [25958.311769] agent systemd[1]: Reached target Socket Units.162agent # [25958.311825] agent systemd[1]: Reached target Basic System.163agent # [25958.313610] agent systemd[1]: Starting Re-link flakelet services at boot...164agent # [25958.314594] agent systemd[1]: Starting Import lastlog data into lastlog2 database...165agent # [25958.315610] agent systemd[1]: Starting Name Service Cache Daemon (nsncd)...166agent # [25958.316670] agent systemd[1]: Starting resolvconf update...167agent # [25958.325644] agent systemd[1]: Finished Re-link flakelet services at boot.168agent # [25958.328812] agent systemd[1]: Starting Reconcile flakelet services with the host configuration...169agent # [25958.336313] agent systemd[1]: Finished Import lastlog data into lastlog2 database.170agent # [25958.340904] agent systemd[1]: Finished Reconcile flakelet services with the host configuration.171client # [25958.179317] client suid-sgid-wrappers-start[168]: chmod: changing permissions of '/run/wrappers/wrappers.hr8J4hSCfl/chsh': Operation not permitted172client # [25958.252178] client systemd[1]: etc-machine\x2did.mount: Deactivated successfully.173client # [25958.257406] client systemd[1]: suid-sgid-wrappers.service: Main process exited, code=exited, status=1/FAILURE174client # [25958.257449] client systemd[1]: suid-sgid-wrappers.service: Failed with result 'exit-code'.175client # [25958.257502] client systemd[1]: Failed to start Create SUID/SGID Wrappers.176client # [25958.257668] client systemd[1]: Finished Save Transient machine-id to Disk.177client # [25958.258344] client systemd[1]: Finished Create System Files and Directories.178client # [25958.273953] client systemd[1]: Starting Rebuild Journal Catalog...179client # [25958.275069] client systemd[1]: Starting Record System Boot/Shutdown in UTMP...180client # [25958.287962] client systemd[1]: Finished Record System Boot/Shutdown in UTMP.181client # [25958.299894] client systemd[1]: Finished Rebuild Journal Catalog.182client # [25958.301291] client systemd[1]: Starting Update is Completed...183client # [25958.312280] client systemd[1]: Finished Update is Completed.184client # [25958.313287] client systemd[1]: Reached target System Initialization.185client # [25958.313474] client systemd[1]: Discard unused filesystem blocks once a week skipped, unmet condition check ConditionVirtualization=!container186client # [25958.313533] client systemd[1]: Started Daily Cleanup of Temporary Directories.187client # [25958.313560] client systemd[1]: Reached target Timer Units.188client # [25958.313777] client systemd[1]: Listening on D-Bus System Message Bus Socket.189client # [25958.314137] client systemd[1]: Listening on Nix Daemon Socket.190client # [25958.314351] client systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.191client # [25958.314379] client systemd[1]: Reached target Socket Units.192client # [25958.314434] client systemd[1]: Reached target Basic System.193client # [25958.316068] client systemd[1]: Starting Import lastlog data into lastlog2 database...194client # [25958.317306] client systemd[1]: Starting Name Service Cache Daemon (nsncd)...195client # [25958.318201] client systemd[1]: Starting resolvconf update...196client # [25958.336364] client systemd[1]: Finished Import lastlog data into lastlog2 database.197client # [25958.423562] client systemd[1]: Finished resolvconf update.198client # [25958.423954] client systemd[1]: nscd.service: Deactivated successfully.199client # [25958.424061] client systemd[1]: Stopped Name Service Cache Daemon (nsncd).200client # [25958.427749] client systemd[1]: Reached target Preparation for Network.201client # [25958.429238] client systemd[1]: Starting Address configuration of eth1...202client # [25958.430621] client systemd[1]: Starting Extra networking commands....203client # [25958.432144] client systemd[1]: Starting Name Service Cache Daemon (nsncd)...204client # [25958.450529] client network-addresses-eth1-start[236]: adding address 192.168.1.2/24... done205client # [25958.454278] client network-addresses-eth1-start[236]: adding address 2001:db8:1::2/64... done206client # [25958.459059] client systemd[1]: Finished Address configuration of eth1.207client # [25958.506495] client systemd[1]: Finished Extra networking commands..208client # [25958.506636] client systemd[1]: Reached target Network.209client # [25958.533276] client systemd[1]: nscd.service: Deactivated successfully.210client # [25958.533426] client systemd[1]: Stopped Name Service Cache Daemon (nsncd).211client # [25958.536018] client systemd[1]: Starting Name Service Cache Daemon (nsncd)...212agent # [25958.423507] agent systemd[1]: Finished resolvconf update.213agent # [25958.423703] agent systemd[1]: nscd.service: Deactivated successfully.214agent # [25958.423742] agent systemd[1]: Stopped Name Service Cache Daemon (nsncd).215agent # [25958.425822] agent systemd[1]: Reached target Preparation for Network.216agent # [25958.426958] agent systemd[1]: Starting Address configuration of eth1...217agent # [25958.427692] agent systemd[1]: Starting Extra networking commands....218agent # [25958.428512] agent systemd[1]: Starting Name Service Cache Daemon (nsncd)...219agent # [25958.448084] agent network-addresses-eth1-start[240]: adding address 192.168.1.1/24... done220agent # [25958.451839] agent network-addresses-eth1-start[240]: adding address 2001:db8:1::1/64... done221agent # [25958.455908] agent systemd[1]: Finished Address configuration of eth1.222agent # [25958.499075] agent systemd[1]: Finished Extra networking commands..223agent # [25958.499773] agent systemd[1]: Reached target Network.224agent # [25958.500892] agent systemd[1]: Starting flakelet-agent...225agent # [25958.501698] agent systemd[1]: Starting Update flakelet service app...226agent # [25958.502471] agent systemd[1]: Starting Update flakelet service other...227agent # [25958.513088] agent flakelet[305]: app: using prebuilt artifact /nix/store/hysydfr96ds875vr0jgw5rjxi4p39h2j-flakelet-app-v1228agent # [25958.513728] agent flakelet[305]: app: activating generation 1229agent # [25958.513773] agent flakelet[306]: other: using prebuilt artifact /nix/store/hmr990n0b4v6rpzrcpyyw738r9xi7z95-flakelet-other-v1230agent # [25958.514363] agent flakelet[306]: other: activating generation 1231agent # [25958.520049] agent systemd[1]: Reload requested from client PID 308 ('systemctl') (unit flakelet-app.service)...232agent # [25958.520111] agent systemd[1]: Reloading...233agent # [25958.562698] agent flakelet-agent[304]: {"timestamp":"2026-09-05T13:51:59.691820Z","level":"WARN","message":"SRV _flakelet-relay._tcp.test: lookup failed","target":"flakelet_agent"}234relay # [25958.382854] relay systemd[1]: Finished resolvconf update.235relay # [25958.383350] relay systemd[1]: Reached target Preparation for Network.236relay # [25958.384832] relay systemd[1]: Starting Address configuration of eth1...237relay # [25958.385877] relay systemd[1]: Starting Extra networking commands....238relay # [25958.419839] relay systemd[1]: nscd.service: Deactivated successfully.239relay # [25958.423537] relay systemd[1]: Stopped Name Service Cache Daemon (nsncd).240relay # [25958.428489] relay systemd[1]: Starting Name Service Cache Daemon (nsncd)...241relay # [25958.439518] relay network-addresses-eth1-start[246]: adding address 192.168.1.3/24... done242relay # [25958.442911] relay network-addresses-eth1-start[246]: adding address 2001:db8:1::3/64... done243relay # [25958.447533] relay systemd[1]: Finished Address configuration of eth1.244relay # [25958.486886] relay systemd[1]: Finished Extra networking commands..245relay # [25958.487199] relay systemd[1]: Reached target Network.246relay # [25958.489532] relay systemd[1]: Starting Dnsmasq Daemon...247relay # [25958.491289] relay systemd[1]: Starting Nginx Web Server...248relay # [25958.492672] relay systemd[1]: Starting Update flakelet service flakelet-relay...249relay # [25958.503983] relay flakelet[311]: flakelet-relay: using prebuilt artifact /nix/store/apxxz0bw2wval3kdi1z8fmmkydzqkwi2-flakelet-flakelet-relay250relay # [25958.504674] relay flakelet[311]: flakelet-relay: activating generation 1251relay # [25958.508829] relay systemd[1]: Reload requested from client PID 314 ('systemctl') (unit flakelet-flakelet-relay.service)...252relay # [25958.508878] relay systemd[1]: Reloading...253relay # [25958.864863] relay nsncd[251]: Sep 05 13:51:59.994 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"254relay # [25958.967018] relay systemd[1]: Reloading finished in 457 ms.255relay # [25959.079290] relay systemd[1]: Started Name Service Cache Daemon (nsncd).256relay # [25959.079805] relay systemd[1]: Reached target Host and Network Name Lookups.257relay # [25959.079895] relay systemd[1]: Reached target User and Group Name Lookups.258relay # [25959.081140] relay systemd[1]: Starting User Login Management...259relay # [25959.082075] relay systemd[1]: Starting Permit User Sessions...260relay # [25959.100169] relay systemd[1]: Reload requested from client PID 357 ('systemctl') (unit flakelet-flakelet-relay.service)...261relay # [25959.100264] relay systemd[1]: Reloading...262client # [25958.837316] client nsncd[303]: Sep 05 13:51:59.966 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"263client # [25958.837364] client systemd[1]: Started Name Service Cache Daemon (nsncd).264client # [25958.837469] client systemd[1]: Reached target Host and Network Name Lookups.265client # [25958.837564] client systemd[1]: Reached target User and Group Name Lookups.266client # [25958.839939] client systemd[1]: Starting User Login Management...267client # [25958.841517] client systemd[1]: Starting Permit User Sessions...268client # [25958.876543] client systemd[1]: Finished Permit User Sessions.269client # [25958.879865] client systemd[1]: Started Console Getty.270client # [25958.879930] client systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0271client # [25958.879965] client systemd[1]: Reached target Login Prompts.272agent # [25958.958597] agent systemd[1]: Reloading finished in 437 ms.273agent # [25959.082294] agent systemd[1]: Started flakelet-agent.274agent # [25959.082725] agent systemd[1]: nscd.service: Deactivated successfully.275agent # [25959.082885] agent systemd[1]: Stopped Name Service Cache Daemon (nsncd).276agent # [25959.085763] agent systemd[1]: Reload requested from client PID 309 ('systemctl') (unit flakelet-other.service)...277agent # [25959.085825] agent systemd[1]: Reloading...278relay # [25959.129892] relay dnsmasq-pre-start[366]: dnsmasq: syntax check OK.279relay # [25959.479759] relay systemd[1]: Reloading finished in 378 ms.280relay # [25959.611127] relay systemd[1]: Finished Permit User Sessions.281relay # [25959.614265] relay systemd[1]: Started Console Getty.282relay # [25959.614345] relay systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0283relay # [25959.614430] relay systemd[1]: Reached target Login Prompts.284relay # [25959.646385] relay systemd[1]: Starting flakelet-relay...285agent # [25959.484175] agent systemd[1]: Reloading finished in 397 ms.286agent # [25959.611820] agent systemd[1]: Starting Name Service Cache Daemon (nsncd)...287agent # [25959.619759] agent systemd[1]: Reload requested from client PID 751 ('systemctl') (unit flakelet-app.service)...288agent # [25959.619848] agent systemd[1]: Reloading...289agent # [25959.931903] agent nsncd[750]: Sep 05 13:52:01.060 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"290agent # [25960.042638] agent systemd[1]: Reloading finished in 421 ms.291agent # [25960.112202] agent systemd[1]: Started Name Service Cache Daemon (nsncd).292agent # [25960.113751] agent systemd[1]: Reached target Host and Network Name Lookups.293agent # [25960.113878] agent systemd[1]: Reached target User and Group Name Lookups.294agent # [25960.115243] agent systemd[1]: Starting User Login Management...295agent # [25960.116369] agent systemd[1]: Starting Permit User Sessions...296agent # [25960.126633] agent systemd[1]: Reload requested from client PID 791 ('systemctl') (unit flakelet-other.service)...297agent # [25960.126682] agent systemd[1]: Reloading...298relay # [25960.269342] relay nginx-pre-start[402]: nginx: the configuration file /nix/store/01avjj26wcihp926xgasszcj5s0k7cbs-nginx.conf syntax is ok299relay # [25960.270038] relay nginx-pre-start[402]: nginx: configuration file /nix/store/01avjj26wcihp926xgasszcj5s0k7cbs-nginx.conf test is successful300relay # [25960.288455] relay systemd[1]: Started Nginx Web Server.301relay # [25960.302663] relay systemd[1]: Starting D-Bus System Message Bus...302client # [25960.433017] client systemd-logind[315]: New seat seat0.303client # [25960.433385] client systemd[1]: Started User Login Management.304client # [25960.435714] client systemd[1]: Starting D-Bus System Message Bus...305client # [25960.437450] client systemd[1]: Starting linger-users.service...306client # [25960.481559] client systemd[1]: linger-users.service: Deactivated successfully.307client # [25960.481897] client systemd[1]: Finished linger-users.service.308client # [25960.482127] client systemd[1]: Reached target Multi-User System.309relay # [25960.599326] relay systemd-logind[354]: New seat seat0.310relay # [25960.599633] relay systemd[1]: Started User Login Management.311relay # [25960.601998] relay systemd[1]: Starting linger-users.service...312relay # [25960.633804] relay systemd[1]: linger-users.service: Deactivated successfully.313relay # [25960.634231] relay systemd[1]: Finished linger-users.service.314agent # [25960.514304] agent systemd[1]: Reloading finished in 387 ms.315agent # [25960.595865] agent systemd[1]: Finished Permit User Sessions.316agent # [25960.598973] agent systemd[1]: Starting app v1...317agent # [25960.599948] agent systemd[1]: Started Console Getty.318agent # [25960.600040] agent systemd[1]: Getty on tty1 skipped, unmet condition check ConditionPathExists=/dev/tty0319agent # [25960.600136] agent systemd[1]: Reached target Login Prompts.320agent # [25960.622729] agent systemd[1]: Starting other v1...321agent # [25960.626842] agent systemd[1]: Started app v1.322agent # [25960.633420] agent systemd[1]: Started other v1.323agent # [25960.651747] agent flakelet[305]: app: updated to generation 1324agent # [25960.652830] agent systemd[1]: Finished Update flakelet service app.325agent # [25960.656608] agent flakelet[306]: other: updated to generation 1326agent # [25960.658431] agent systemd[1]: Finished Update flakelet service other.327agent # [25960.658579] agent systemd[1]: Reached target flakelet managed services.328client # [25960.944188] client dbus-broker-launch[325]: Looking up NSS user entry for 'systemd-timesync'...329client # [25960.945638] client dbus-broker-launch[325]: NSS returned no entry for 'systemd-timesync'330client # [25960.945638] client dbus-broker-launch[325]: Invalid user-name in /nix/store/kibywsf5mlhggzm91qkjmlwkylipfw9q-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"331client # [25960.946663] client systemd[1]: Started D-Bus System Message Bus.332client # [25960.947191] client systemd[1]: Startup finished in 4.317s.333client # [25960.952976] client dbus-broker-launch[325]: Ready334relay # [25960.876224] relay dbus-broker-launch[405]: Looking up NSS user entry for 'systemd-timesync'...335relay # [25960.877714] relay dbus-broker-launch[405]: NSS returned no entry for 'systemd-timesync'336relay # [25960.877714] relay dbus-broker-launch[405]: Invalid user-name in /nix/store/27h4g2jdw18vrabfh6p1l0n8ss5dhbp5-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"337relay # [25960.878735] relay systemd[1]: Started D-Bus System Message Bus.338relay # [25960.886123] relay dbus-broker-launch[405]: Ready339relay # [25960.890297] relay systemd[1]: Started Dnsmasq Daemon.340relay # [25960.891919] relay dnsmasq[394]: started, version 2.93 cachesize 150341relay # [25960.891928] relay dnsmasq[394]: compile time options: IPv6 GNU-getopt DBus no-UBus no-i18n IDN2 DHCP DHCPv6 no-Lua TFTP conntrack ipset nftset auth DNSSEC loop-detect inotify dumpfile342relay # [25960.891935] relay dnsmasq[394]: DBus support enabled: connected to system bus343relay # [25960.891942] relay dnsmasq[394]: no upstream servers configured - please set them from DBus344relay # [25960.892052] relay dnsmasq[394]: read /etc/hosts - 9 names345agent # [25961.473873] agent systemd-logind[789]: New seat seat0.346agent # [25961.474167] agent systemd[1]: Started User Login Management.347agent # [25961.476438] agent systemd[1]: Starting D-Bus System Message Bus...348agent # [25961.478148] agent systemd[1]: Starting linger-users.service...349agent # [25961.517872] agent systemd[1]: linger-users.service: Deactivated successfully.350agent # [25961.518374] agent systemd[1]: Finished linger-users.service.351agent # [25961.518775] agent systemd[1]: Reached target Multi-User System.352relay # [25961.692294] relay flakelet-relay[400]: {"timestamp":"2026-09-05T13:52:02.821404Z","level":"INFO","message":"listening on 127.0.0.1:7400","target":"flakelet_relay::relay::server"}353relay # [25961.693246] relay flakelet-relay[400]: {"timestamp":"2026-09-05T13:52:02.822055Z","level":"INFO","message":"listening on [::]:7443","target":"flakelet_relay::relay::server"}354relay # [25961.692858] relay systemd[1]: Started flakelet-relay.355relay # [25961.705483] relay systemd[1]: Starting health for flakelet-relay...356agent # [25961.926284] agent dbus-broker-launch[836]: Looking up NSS user entry for 'systemd-timesync'...357agent # [25961.928283] agent dbus-broker-launch[836]: NSS returned no entry for 'systemd-timesync'358agent # [25961.928283] agent dbus-broker-launch[836]: Invalid user-name in /nix/store/q3c2gxfm178wqgzv8m87na4aa72wxc04-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"359agent # [25961.929277] agent systemd[1]: Started D-Bus System Message Bus.360agent # [25961.929898] agent systemd[1]: Startup finished in 5.299s.361agent # [25961.937682] agent dbus-broker-launch[836]: Ready362relay: (finished: waiting for unit flakelet-relay.service, in 6.16 seconds)363relay: waiting for unit nginx.service364relay: (finished: waiting for unit nginx.service, in 0.02 seconds)365agent: waiting for unit flakelet.target366agent: (finished: waiting for unit flakelet.target, in 0.02 seconds)367agent: waiting for unit flakelet-agent.service368agent: (finished: waiting for unit flakelet-agent.service, in 0.02 seconds)369client: waiting for unit multi-user.target370client: (finished: waiting for unit multi-user.target, in 0.02 seconds)371relay: waiting for success: curl -sf http://127.0.0.1:7400/metrics | grep -q 'agent_up{host="agent"} 1'372relay # [25961.979102] relay systemd[1]: flakelet-relay-health.service: Deactivated successfully.373relay # [25961.979545] relay systemd[1]: Finished health for flakelet-relay.374relay # [25962.032353] relay flakelet[311]: flakelet-relay: updated to generation 1375relay # [25962.035796] relay systemd[1]: Finished Update flakelet service flakelet-relay.376relay # [25962.036409] relay systemd[1]: Reached target flakelet managed services.377relay # [25962.036590] relay systemd[1]: Reached target Multi-User System.378relay # [25962.036842] relay systemd[1]: Startup finished in 5.416s.379agent # [25963.676319] agent flakelet-agent[304]: {"timestamp":"2026-09-05T13:52:04.805553Z","level":"INFO","message":"connected","relay":"https://relay:7443","relay_name":"relay","relay_version":"0.1.0","host":"agent","target":"flakelet_relay::agent::conn"}380relay # [25963.676675] relay flakelet-relay[400]: {"timestamp":"2026-09-05T13:52:04.805848Z","level":"INFO","message":"agent connected","host":"agent","version":"0.1.0","flakelets":"[Named { name: \"app\", generation: Some(1), revision: Some(\"prebuilt:app\") }, Named { name: \"other\", generation: Some(1), revision: Some(\"prebuilt:other\") }]","target":"flakelet_relay::relay::agent_conn"}381relay: (finished: waiting for success: curl -sf http://127.0.0.1:7400/metrics | grep -q 'agent_up{host="agent"} 1', in 2.06 seconds)382agent: must succeed: systemctl is-active app.service other.service383agent: (finished: must succeed: systemctl is-active app.service other.service, in 0.01 seconds)384subtest: deploy with client certificate, relay found via SRV385agent: must succeed: jq '.services.app.prebuilt="/nix/store/6ili1vxjlag9d7dy0bxrbxk6bpi5qh9p-flakelet-app-v2"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json386agent: (finished: must succeed: jq '.services.app.prebuilt="/nix/store/6ili1vxjlag9d7dy0bxrbxk6bpi5qh9p-flakelet-app-v2"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json, in 0.01 seconds)387client: must succeed: push --relay-srv test --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/app 2>&1388agent # [25964.430237] agent flakelet-agent[304]: {"timestamp":"2026-09-05T13:52:05.559425Z","level":"INFO","message":"start","id":"4fc983ddee7cfa12cca39c9e889ab59e","flakelet":"app","rule":"admins","relay":"relay","caller":"Some(\"x509:email:admin@example.org\")","target":"flakelet_relay::agent::conn"}389agent # [25964.431109] agent flakelet-agent[304]: {"timestamp":"2026-09-05T13:52:05.560345Z","level":"INFO","message":"update starting","flakelet":"app","ids":"[\"4fc983ddee7cfa12cca39c9e889ab59e\"]","target":"flakelet_relay::agent::jobs"}390agent # [25964.494267] agent systemd[1]: Starting flakelet update app (via relay)...391agent # [25964.526324] agent systemd[1]: Started flakelet update app (via relay).392agent # [25964.531100] agent flakelet[865]: app: using prebuilt artifact /nix/store/6ili1vxjlag9d7dy0bxrbxk6bpi5qh9p-flakelet-app-v2393agent # [25964.531829] agent flakelet[865]: app: activating generation 2394agent # [25964.546312] agent systemd[1]: Stopping app v1...395agent # [25964.547569] agent systemd[1]: app.service: Deactivated successfully.396agent # [25964.547856] agent systemd[1]: Stopped app v1.397agent # [25964.562607] agent systemd[1]: Reload requested from client PID 872 ('systemctl') (unit flakelet-relay-job-app.service)...398agent # [25964.562697] agent systemd[1]: Reloading...399relay # [25964.429091] relay flakelet-relay[400]: {"timestamp":"2026-09-05T13:52:05.558296Z","level":"INFO","message":"deploy accepted","job":"28c41f55de8fbf889a1fb1390998ab13","caller":"x509:email:admin@example.org","targets":"[\"agent/app\"]","target":"flakelet_relay::relay::api"}400agent # [25964.924367] agent systemd[1]: Reloading finished in 360 ms.401agent # [25965.014568] agent systemd[1]: Reload requested from client PID 902 ('systemctl') (unit flakelet-relay-job-app.service)...402agent # [25965.014628] agent systemd[1]: Reloading...403agent # [25965.366983] agent systemd[1]: Reloading finished in 351 ms.404agent # [25965.448266] agent systemd[1]: Reload requested from client PID 931 ('systemctl') (unit flakelet-relay-job-app.service)...405agent # [25965.448321] agent systemd[1]: Reloading...406agent # [25965.799033] agent systemd[1]: Reloading finished in 350 ms.407agent # [25965.887075] agent systemd[1]: Reload requested from client PID 962 ('systemctl') (unit flakelet-relay-job-app.service)...408agent # [25965.887166] agent systemd[1]: Reloading...409agent # [25966.236081] agent systemd[1]: Reloading finished in 348 ms.410agent # [25966.318869] agent systemd[1]: Starting app v2...411agent # [25966.355281] agent systemd[1]: Started app v2.412agent # [25966.380624] agent flakelet[865]: app: updated to generation 2413agent # [25966.383974] agent systemd[1]: flakelet-relay-job-app.service: Deactivated successfully.414client: (finished: must succeed: push --relay-srv test --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/app 2>&1, in 3.05 seconds)415agent: must succeed: systemctl show app.service -p Description | grep -q 'app v2'416agent: (finished: must succeed: systemctl show app.service -p Description | grep -q 'app v2', in 0.02 seconds)417agent: must succeed: journalctl -u flakelet-relay-job-app.service | grep -q 'generation 2'418agent: (finished: must succeed: journalctl -u flakelet-relay-job-app.service | grep -q 'generation 2', in 0.01 seconds)419(finished: subtest: deploy with client certificate, relay found via SRV, in 3.09 seconds)420subtest: deploy with OIDC token, sub principal421agent: must succeed: jq '.services.app.prebuilt="/nix/store/hysydfr96ds875vr0jgw5rjxi4p39h2j-flakelet-app-v1"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json422agent: (finished: must succeed: jq '.services.app.prebuilt="/nix/store/hysydfr96ds875vr0jgw5rjxi4p39h2j-flakelet-app-v1"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json, in 0.01 seconds)423client: must succeed: echo '{"groups": []}' | step crypto jwt sign --key /nix/store/r7sclamg09v434w8zjlfnrcrn1w79wh6-flakelet-relay-test-issuer/jwk.json --iss https://relay:8443 --aud flakelet-relay --sub 'repo:github:example/app:ref:refs/heads/main' --exp $(( $(date +%s) + 300 )) --jti $(head -c8 /dev/urandom | base32)424client: (finished: must succeed: echo '{"groups": []}' | step crypto jwt sign --key /nix/store/r7sclamg09v434w8zjlfnrcrn1w79wh6-flakelet-relay-test-issuer/jwk.json --iss https://relay:8443 --aud flakelet-relay --sub 'repo:github:example/app:ref:refs/heads/main' --exp $(( $(date +%s) + 300 )) --jti $(head -c8 /dev/urandom | base32), in 0.05 seconds)425client: must succeed: FLAKELET_RELAY_TOKEN_COMMAND='echo eyJhbGciOiJFZERTQSIsImtpZCI6ImsxIiwidHlwIjoiSldUIn0.eyJhdWQiOiJmbGFrZWxldC1yZWxheSIsImV4cCI6MTc4ODYxNjYyOCwiZ3JvdXBzIjpbXSwiaWF0IjoxNzg4NjE2MzI4LCJpc3MiOiJodHRwczovL3JlbGF5Ojg0NDMiLCJqdGkiOiJBRUY1Mk5UT0hDQ01JPT09IiwibmJmIjoxNzg4NjE2MzI4LCJzdWIiOiJyZXBvOmdpdGh1YjpleGFtcGxlL2FwcDpyZWY6cmVmcy9oZWFkcy9tYWluIn0.hGHrHZBSqPKRkiSUKHA66j1Fo1ncsDUWLfZ2x1IPeRaA8QCV1V5U6anlkfbLWoMdQ5t68iFnOgBXWiLLDrP3CQ' push --relay https://relay:7443 deploy agent/app 2>&1426agent # [25967.447622] agent flakelet-agent[304]: {"timestamp":"2026-09-05T13:52:08.576897Z","level":"INFO","message":"update finished","flakelet":"app","status":"Updated","generation":"Some(2)","target":"flakelet_relay::agent::jobs"}427agent # [25967.583346] agent flakelet-agent[304]: {"timestamp":"2026-09-05T13:52:08.712560Z","level":"INFO","message":"start","id":"db541e654b2dcca84a74ef0dbe7c714e","flakelet":"app","rule":"ci","relay":"relay","caller":"Some(\"oidc:mock:repo:github:example/app:ref:refs/heads/main\")","target":"flakelet_relay::agent::conn"}428agent # [25967.583760] agent flakelet-agent[304]: {"timestamp":"2026-09-05T13:52:08.713047Z","level":"INFO","message":"update starting","flakelet":"app","ids":"[\"db541e654b2dcca84a74ef0dbe7c714e\"]","target":"flakelet_relay::agent::jobs"}429agent # [25967.643728] agent systemd[1]: Starting flakelet update app (via relay)...430agent # [25967.677331] agent systemd[1]: Started flakelet update app (via relay).431agent # [25967.681918] agent flakelet[1020]: app: using prebuilt artifact /nix/store/hysydfr96ds875vr0jgw5rjxi4p39h2j-flakelet-app-v1432agent # [25967.682599] agent flakelet[1020]: app: activating generation 3433agent # [25967.696902] agent systemd[1]: Stopping app v2...434agent # [25967.697403] agent systemd[1]: app.service: Deactivated successfully.435agent # [25967.697611] agent systemd[1]: Stopped app v2.436agent # [25967.717738] agent systemd[1]: Reload requested from client PID 1027 ('systemctl') (unit flakelet-relay-job-app.service)...437agent # [25967.717827] agent systemd[1]: Reloading...438relay # [25967.448520] relay flakelet-relay[400]: {"timestamp":"2026-09-05T13:52:08.577732Z","level":"INFO","message":"deploy finished","job":"28c41f55de8fbf889a1fb1390998ab13","ok":true,"target":"flakelet_relay::relay::api"}439relay # [25967.583073] relay flakelet-relay[400]: {"timestamp":"2026-09-05T13:52:08.712311Z","level":"INFO","message":"deploy accepted","job":"fcdef774384f33c110ad0bf76e4bd48d","caller":"oidc:mock:repo:github:example/app:ref:refs/heads/main","targets":"[\"agent/app\"]","target":"flakelet_relay::relay::api"}440agent # [25968.078246] agent systemd[1]: Reloading finished in 359 ms.441agent # [25968.168137] agent systemd[1]: Reload requested from client PID 1057 ('systemctl') (unit flakelet-relay-job-app.service)...442agent # [25968.168192] agent systemd[1]: Reloading...443agent # [25968.519752] agent systemd[1]: Reloading finished in 351 ms.444agent # [25968.581730] agent systemd[1]: Reload requested from client PID 1086 ('systemctl') (unit flakelet-relay-job-app.service)...445agent # [25968.581769] agent systemd[1]: Reloading...446agent # [25968.928695] agent systemd[1]: Reloading finished in 346 ms.447agent # [25969.014047] agent systemd[1]: Reload requested from client PID 1117 ('systemctl') (unit flakelet-relay-job-app.service)...448agent # [25969.014096] agent systemd[1]: Reloading...449agent # [25969.361628] agent systemd[1]: Reloading finished in 347 ms.450agent # [25969.448498] agent systemd[1]: Starting app v1...451agent # [25969.478373] agent systemd[1]: Started app v1.452agent # [25969.500229] agent flakelet[1020]: app: updated to generation 3453agent # [25969.503462] agent systemd[1]: flakelet-relay-job-app.service: Deactivated successfully.454client: (finished: must succeed: FLAKELET_RELAY_TOKEN_COMMAND='echo eyJhbGciOiJFZERTQSIsImtpZCI6ImsxIiwidHlwIjoiSldUIn0.eyJhdWQiOiJmbGFrZWxldC1yZWxheSIsImV4cCI6MTc4ODYxNjYyOCwiZ3JvdXBzIjpbXSwiaWF0IjoxNzg4NjE2MzI4LCJpc3MiOiJodHRwczovL3JlbGF5Ojg0NDMiLCJqdGkiOiJBRUY1Mk5UT0hDQ01JPT09IiwibmJmIjoxNzg4NjE2MzI4LCJzdWIiOiJyZXBvOmdpdGh1YjpleGFtcGxlL2FwcDpyZWY6cmVmcy9oZWFkcy9tYWluIn0.hGHrHZBSqPKRkiSUKHA66j1Fo1ncsDUWLfZ2x1IPeRaA8QCV1V5U6anlkfbLWoMdQ5t68iFnOgBXWiLLDrP3CQ' push --relay https://relay:7443 deploy agent/app 2>&1, in 3.03 seconds)455(finished: subtest: deploy with OIDC token, sub principal, in 3.09 seconds)456subtest: policy denies uncovered target457client: must fail: FLAKELET_RELAY_TOKEN_COMMAND='echo eyJhbGciOiJFZERTQSIsImtpZCI6ImsxIiwidHlwIjoiSldUIn0.eyJhdWQiOiJmbGFrZWxldC1yZWxheSIsImV4cCI6MTc4ODYxNjYyOCwiZ3JvdXBzIjpbXSwiaWF0IjoxNzg4NjE2MzI4LCJpc3MiOiJodHRwczovL3JlbGF5Ojg0NDMiLCJqdGkiOiJBRUY1Mk5UT0hDQ01JPT09IiwibmJmIjoxNzg4NjE2MzI4LCJzdWIiOiJyZXBvOmdpdGh1YjpleGFtcGxlL2FwcDpyZWY6cmVmcy9oZWFkcy9tYWluIn0.hGHrHZBSqPKRkiSUKHA66j1Fo1ncsDUWLfZ2x1IPeRaA8QCV1V5U6anlkfbLWoMdQ5t68iFnOgBXWiLLDrP3CQ' push --relay https://relay:7443 deploy agent/other 2>&1458client: (finished: must fail: FLAKELET_RELAY_TOKEN_COMMAND='echo eyJhbGciOiJFZERTQSIsImtpZCI6ImsxIiwidHlwIjoiSldUIn0.eyJhdWQiOiJmbGFrZWxldC1yZWxheSIsImV4cCI6MTc4ODYxNjYyOCwiZ3JvdXBzIjpbXSwiaWF0IjoxNzg4NjE2MzI4LCJpc3MiOiJodHRwczovL3JlbGF5Ojg0NDMiLCJqdGkiOiJBRUY1Mk5UT0hDQ01JPT09IiwibmJmIjoxNzg4NjE2MzI4LCJzdWIiOiJyZXBvOmdpdGh1YjpleGFtcGxlL2FwcDpyZWY6cmVmcy9oZWFkcy9tYWluIn0.hGHrHZBSqPKRkiSUKHA66j1Fo1ncsDUWLfZ2x1IPeRaA8QCV1V5U6anlkfbLWoMdQ5t68iFnOgBXWiLLDrP3CQ' push --relay https://relay:7443 deploy agent/other 2>&1, in 0.02 seconds)459(finished: subtest: policy denies uncovered target, in 0.02 seconds)460subtest: claim principal from groups, unchanged counts as success461client: must succeed: echo '{"groups": ["wheel"]}' | step crypto jwt sign --key /nix/store/r7sclamg09v434w8zjlfnrcrn1w79wh6-flakelet-relay-test-issuer/jwk.json --iss https://relay:8443 --aud flakelet-relay --sub 'someone' --exp $(( $(date +%s) + 300 )) --jti $(head -c8 /dev/urandom | base32)462client: (finished: must succeed: echo '{"groups": ["wheel"]}' | step crypto jwt sign --key /nix/store/r7sclamg09v434w8zjlfnrcrn1w79wh6-flakelet-relay-test-issuer/jwk.json --iss https://relay:8443 --aud flakelet-relay --sub 'someone' --exp $(( $(date +%s) + 300 )) --jti $(head -c8 /dev/urandom | base32), in 0.05 seconds)463client: must succeed: FLAKELET_RELAY_TOKEN_COMMAND='echo eyJhbGciOiJFZERTQSIsImtpZCI6ImsxIiwidHlwIjoiSldUIn0.eyJhdWQiOiJmbGFrZWxldC1yZWxheSIsImV4cCI6MTc4ODYxNjYzMSwiZ3JvdXBzIjpbIndoZWVsIl0sImlhdCI6MTc4ODYxNjMzMSwiaXNzIjoiaHR0cHM6Ly9yZWxheTo4NDQzIiwianRpIjoiS1lMVlRPNEw0Qk9RNj09PSIsIm5iZiI6MTc4ODYxNjMzMSwic3ViIjoic29tZW9uZSJ9.amroT_WAu1sZgw8u3iMkFj2WVIqyKK-Hvm_g0lNTDSvDBkVsWxtym0NBwGRf_5HZaYB19Uemd8ZBhw7tT7YADA' push --relay https://relay:7443 deploy agent/other 2>&1464relay # [25970.569619] relay flakelet-relay[400]: {"timestamp":"2026-09-05T13:52:11.698854Z","level":"INFO","message":"deploy finished","job":"fcdef774384f33c110ad0bf76e4bd48d","ok":true,"target":"flakelet_relay::relay::api"}465relay # [25970.673855] relay flakelet-relay[400]: {"timestamp":"2026-09-05T13:52:11.803098Z","level":"INFO","message":"deploy accepted","job":"ccae41991945d157f3eeb9526d6f677f","caller":"oidc:mock:groups:wheel\noidc:mock:someone","targets":"[\"agent/other\"]","target":"flakelet_relay::relay::api"}466agent # [25970.568673] agent flakelet-agent[304]: {"timestamp":"2026-09-05T13:52:11.697853Z","level":"INFO","message":"update finished","flakelet":"app","status":"Updated","generation":"Some(3)","target":"flakelet_relay::agent::jobs"}467agent # [25970.674497] agent flakelet-agent[304]: {"timestamp":"2026-09-05T13:52:11.803597Z","level":"INFO","message":"start","id":"7ff9022560b3ee5c68f649185589301c","flakelet":"other","rule":"admins","relay":"relay","caller":"Some(\"oidc:mock:groups:wheel\\noidc:mock:someone\")","target":"flakelet_relay::agent::conn"}468agent # [25970.675089] agent flakelet-agent[304]: {"timestamp":"2026-09-05T13:52:11.804310Z","level":"INFO","message":"update starting","flakelet":"other","ids":"[\"7ff9022560b3ee5c68f649185589301c\"]","target":"flakelet_relay::agent::jobs"}469agent # [25970.734267] agent systemd[1]: Starting flakelet update other (via relay)...470agent # [25970.771732] agent systemd[1]: Started flakelet update other (via relay).471agent # [25970.779602] agent flakelet[1166]: other: using prebuilt artifact /nix/store/hmr990n0b4v6rpzrcpyyw738r9xi7z95-flakelet-other-v1472agent # [25970.780540] agent flakelet[1166]: other: up to date473agent # [25970.782020] agent systemd[1]: flakelet-relay-job-other.service: Deactivated successfully.474client: (finished: must succeed: FLAKELET_RELAY_TOKEN_COMMAND='echo eyJhbGciOiJFZERTQSIsImtpZCI6ImsxIiwidHlwIjoiSldUIn0.eyJhdWQiOiJmbGFrZWxldC1yZWxheSIsImV4cCI6MTc4ODYxNjYzMSwiZ3JvdXBzIjpbIndoZWVsIl0sImlhdCI6MTc4ODYxNjMzMSwiaXNzIjoiaHR0cHM6Ly9yZWxheTo4NDQzIiwianRpIjoiS1lMVlRPNEw0Qk9RNj09PSIsIm5iZiI6MTc4ODYxNjMzMSwic3ViIjoic29tZW9uZSJ9.amroT_WAu1sZgw8u3iMkFj2WVIqyKK-Hvm_g0lNTDSvDBkVsWxtym0NBwGRf_5HZaYB19Uemd8ZBhw7tT7YADA' push --relay https://relay:7443 deploy agent/other 2>&1, in 1.70 seconds)475(finished: subtest: claim principal from groups, unchanged counts as success, in 1.75 seconds)476subtest: push login via device flow, cached token used afterwards477client: must succeed: push login --issuer https://relay:8443 --client-id flakelet-relay 2>&1478agent # [25972.343827] agent flakelet-agent[304]: {"timestamp":"2026-09-05T13:52:13.473046Z","level":"INFO","message":"update finished","flakelet":"other","status":"Unchanged","generation":"Some(1)","target":"flakelet_relay::agent::jobs"}479relay # [25972.344685] relay flakelet-relay[400]: {"timestamp":"2026-09-05T13:52:13.473935Z","level":"INFO","message":"deploy finished","job":"ccae41991945d157f3eeb9526d6f677f","ok":true,"target":"flakelet_relay::relay::api"}480relay # [25972.367939] relay 93sn3sv24fj26ksccpppzwg6kbf10s4w-device-mock[186]: 127.0.0.1 - - [05/Sep/2026 13:52:13] "POST /device HTTP/1.1" 200 -481relay # [25973.373399] relay 93sn3sv24fj26ksccpppzwg6kbf10s4w-device-mock[186]: 127.0.0.1 - - [05/Sep/2026 13:52:14] "POST /token HTTP/1.1" 400 -482client: (finished: must succeed: push login --issuer https://relay:8443 --client-id flakelet-relay 2>&1, in 2.08 seconds)483client: must succeed: test "$(stat -c %a /root/.local/state/flakelet-push/token.json)" = 600484client: (finished: must succeed: test "$(stat -c %a /root/.local/state/flakelet-push/token.json)" = 600, in 0.01 seconds)485client: must succeed: push --relay https://relay:7443 deploy agent/other 2>&1486agent # [25974.453452] agent flakelet-agent[304]: {"timestamp":"2026-09-05T13:52:15.582693Z","level":"INFO","message":"start","id":"1bcef30f483527224528622ec1614264","flakelet":"other","rule":"admins","relay":"relay","caller":"Some(\"oidc:mock:groups:wheel\\noidc:mock:someone\")","target":"flakelet_relay::agent::conn"}487agent # [25974.454428] agent flakelet-agent[304]: {"timestamp":"2026-09-05T13:52:15.583474Z","level":"INFO","message":"update starting","flakelet":"other","ids":"[\"1bcef30f483527224528622ec1614264\"]","target":"flakelet_relay::agent::jobs"}488agent # [25974.521605] agent systemd[1]: Starting flakelet update other (via relay)...489agent # [25974.552245] agent systemd[1]: Started flakelet update other (via relay).490agent # [25974.557088] agent flakelet[1185]: other: using prebuilt artifact /nix/store/hmr990n0b4v6rpzrcpyyw738r9xi7z95-flakelet-other-v1491agent # [25974.557843] agent flakelet[1185]: other: up to date492agent # [25974.561091] agent systemd[1]: flakelet-relay-job-other.service: Deactivated successfully.493relay # [25974.421199] relay 93sn3sv24fj26ksccpppzwg6kbf10s4w-device-mock[186]: 127.0.0.1 - - [05/Sep/2026 13:52:15] "POST /token HTTP/1.1" 200 -494relay # [25974.453070] relay flakelet-relay[400]: {"timestamp":"2026-09-05T13:52:15.582279Z","level":"INFO","message":"deploy accepted","job":"2937c141d7f7af3ce8220bdf9443f637","caller":"oidc:mock:groups:wheel\noidc:mock:someone","targets":"[\"agent/other\"]","target":"flakelet_relay::relay::api"}495client: (finished: must succeed: push --relay https://relay:7443 deploy agent/other 2>&1, in 0.68 seconds)496client: must succeed: push --relay https://relay:7443 deploy agent/other 2>&1497agent # [25975.114544] agent flakelet-agent[304]: {"timestamp":"2026-09-05T13:52:16.243763Z","level":"INFO","message":"update finished","flakelet":"other","status":"Unchanged","generation":"Some(1)","target":"flakelet_relay::agent::jobs"}498agent # [25975.134610] agent flakelet-agent[304]: {"timestamp":"2026-09-05T13:52:16.263828Z","level":"INFO","message":"start","id":"a3bba563f9aa9cb5ee162d699fc759b5","flakelet":"other","rule":"admins","relay":"relay","caller":"Some(\"oidc:mock:groups:wheel\\noidc:mock:someone\")","target":"flakelet_relay::agent::conn"}499agent # [25975.135108] agent flakelet-agent[304]: {"timestamp":"2026-09-05T13:52:16.264395Z","level":"INFO","message":"update starting","flakelet":"other","ids":"[\"a3bba563f9aa9cb5ee162d699fc759b5\"]","target":"flakelet_relay::agent::jobs"}500agent # [25975.194680] agent systemd[1]: Starting flakelet update other (via relay)...501agent # [25975.223344] agent systemd[1]: Started flakelet update other (via relay).502agent # [25975.228997] agent flakelet[1203]: other: using prebuilt artifact /nix/store/hmr990n0b4v6rpzrcpyyw738r9xi7z95-flakelet-other-v1503agent # [25975.229840] agent flakelet[1203]: other: up to date504agent # [25975.230977] agent systemd[1]: flakelet-relay-job-other.service: Deactivated successfully.505relay # [25975.115420] relay flakelet-relay[400]: {"timestamp":"2026-09-05T13:52:16.244643Z","level":"INFO","message":"deploy finished","job":"2937c141d7f7af3ce8220bdf9443f637","ok":true,"target":"flakelet_relay::relay::api"}506relay # [25975.134347] relay flakelet-relay[400]: {"timestamp":"2026-09-05T13:52:16.263571Z","level":"INFO","message":"deploy accepted","job":"4d9275208683394e0e5c1f4855e14863","caller":"oidc:mock:groups:wheel\noidc:mock:someone","targets":"[\"agent/other\"]","target":"flakelet_relay::relay::api"}507client: (finished: must succeed: push --relay https://relay:7443 deploy agent/other 2>&1, in 0.68 seconds)508(finished: subtest: push login via device flow, cached token used afterwards, in 3.45 seconds)509subtest: waves: failing first wave skips the second510agent: must succeed: jq '.services.app.prebuilt="/nix/store/8282rnbvyk847q4l4zby3zwcq3jpzrvw-flakelet-app-broken"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json511agent: (finished: must succeed: jq '.services.app.prebuilt="/nix/store/8282rnbvyk847q4l4zby3zwcq3jpzrvw-flakelet-app-broken"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json, in 0.02 seconds)512client: must fail: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/app --wave agent/other 2>&1513relay # [25975.790134] relay flakelet-relay[400]: {"timestamp":"2026-09-05T13:52:16.919374Z","level":"INFO","message":"deploy finished","job":"4d9275208683394e0e5c1f4855e14863","ok":true,"target":"flakelet_relay::relay::api"}514relay # [25975.826891] relay flakelet-relay[400]: {"timestamp":"2026-09-05T13:52:16.956106Z","level":"INFO","message":"deploy accepted","job":"f87dfdc5eea039e895dcfca8b5858cb3","caller":"x509:email:admin@example.org","targets":"[\"agent/app\", \"agent/other\"]","target":"flakelet_relay::relay::api"}515agent # [25975.789257] agent flakelet-agent[304]: {"timestamp":"2026-09-05T13:52:16.918475Z","level":"INFO","message":"update finished","flakelet":"other","status":"Unchanged","generation":"Some(1)","target":"flakelet_relay::agent::jobs"}516agent # [25975.827440] agent flakelet-agent[304]: {"timestamp":"2026-09-05T13:52:16.956576Z","level":"INFO","message":"start","id":"1975500c75e425ed0fccf89bff2c15ef","flakelet":"app","rule":"admins","relay":"relay","caller":"Some(\"x509:email:admin@example.org\")","target":"flakelet_relay::agent::conn"}517agent # [25975.828038] agent flakelet-agent[304]: {"timestamp":"2026-09-05T13:52:16.957276Z","level":"INFO","message":"update starting","flakelet":"app","ids":"[\"1975500c75e425ed0fccf89bff2c15ef\"]","target":"flakelet_relay::agent::jobs"}518agent # [25975.888048] agent systemd[1]: Starting flakelet update app (via relay)...519agent # [25975.921973] agent systemd[1]: Started flakelet update app (via relay).520agent # [25975.927426] agent flakelet[1224]: app: using prebuilt artifact /nix/store/8282rnbvyk847q4l4zby3zwcq3jpzrvw-flakelet-app-broken521agent # [25975.928268] agent flakelet[1224]: app: activating generation 4522agent # [25975.942262] agent systemd[1]: Stopping app v1...523agent # [25975.942824] agent systemd[1]: app.service: Deactivated successfully.524agent # [25975.943190] agent systemd[1]: Stopped app v1.525agent # [25975.963408] agent systemd[1]: Reload requested from client PID 1231 ('systemctl') (unit flakelet-relay-job-app.service)...526agent # [25975.963494] agent systemd[1]: Reloading...527agent # [25976.321287] agent systemd[1]: Reloading finished in 356 ms.528agent # [25976.418826] agent systemd[1]: Reload requested from client PID 1261 ('systemctl') (unit flakelet-relay-job-app.service)...529agent # [25976.418917] agent systemd[1]: Reloading...530agent # [25976.766830] agent systemd[1]: Reloading finished in 347 ms.531agent # [25976.862532] agent systemd[1]: Reload requested from client PID 1290 ('systemctl') (unit flakelet-relay-job-app.service)...532agent # [25976.862585] agent systemd[1]: Reloading...533agent # [25977.207838] agent systemd[1]: Reloading finished in 344 ms.534agent # [25977.285083] agent systemd[1]: Reload requested from client PID 1321 ('systemctl') (unit flakelet-relay-job-app.service)...535agent # [25977.285135] agent systemd[1]: Reloading...536agent # [25977.635823] agent systemd[1]: Reloading finished in 350 ms.537agent # [25977.733269] agent systemd[1]: Starting app broken...538agent # [25977.774654] agent (nonexistent)[1351]: app.service: Unable to locate executable '/nonexistent': No such file or directory539agent # [25977.774679] agent (nonexistent)[1351]: app.service: Failed at step EXEC spawning /nonexistent: No such file or directory540agent # [25977.776218] agent systemd[1]: app.service: Main process exited, code=exited, status=203/EXEC541agent # [25977.776338] agent systemd[1]: app.service: Failed with result 'exit-code'.542agent # [25977.776950] agent systemd[1]: Failed to start app broken.543agent # [25977.837065] agent systemd[1]: Reload requested from client PID 1358 ('systemctl') (unit flakelet-relay-job-app.service)...544agent # [25977.837157] agent systemd[1]: Reloading...545agent # [25978.197177] agent systemd[1]: Reloading finished in 359 ms.546agent # [25978.291543] agent systemd[1]: Reload requested from client PID 1389 ('systemctl') (unit flakelet-relay-job-app.service)...547agent # [25978.291585] agent systemd[1]: Reloading...548agent # [25978.638314] agent systemd[1]: Reloading finished in 346 ms.549agent # [25978.724392] agent systemd[1]: Reload requested from client PID 1418 ('systemctl') (unit flakelet-relay-job-app.service)...550agent # [25978.724438] agent systemd[1]: Reloading...551agent # [25979.072296] agent systemd[1]: Reloading finished in 347 ms.552agent # [25979.165190] agent systemd[1]: Reload requested from client PID 1448 ('systemctl') (unit flakelet-relay-job-app.service)...553agent # [25979.165235] agent systemd[1]: Reloading...554agent # [25979.512778] agent systemd[1]: Reloading finished in 347 ms.555agent # [25979.595405] agent systemd[1]: Starting app v1...556agent # [25979.628777] agent systemd[1]: Started app v1.557agent # [25979.629963] agent flakelet[1224]: app: deploy failed, rolled back: systemctl start app.service failed:558agent # [25979.629963] agent flakelet[1224]: failed units: app.service. See journalctl -u app.service559agent # [25979.632958] agent systemd[1]: flakelet-relay-job-app.service: Main process exited, code=exited, status=1/FAILURE560agent # [25979.633209] agent systemd[1]: flakelet-relay-job-app.service: Failed with result 'exit-code'.561client: (finished: must fail: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/app --wave agent/other 2>&1, in 5.36 seconds)562agent: must succeed: systemctl show app.service -p Description | grep -q 'app v1'563agent: (finished: must succeed: systemctl show app.service -p Description | grep -q 'app v1', in 0.02 seconds)564(finished: subtest: waves: failing first wave skips the second, in 5.40 seconds)565subtest: detach returns once the job is accepted566agent: must succeed: jq '.services.app.prebuilt="/nix/store/ln47rsd5km8a04hd5zlkz4q1v352zqh3-flakelet-app-slow2"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json567agent: (finished: must succeed: jq '.services.app.prebuilt="/nix/store/ln47rsd5km8a04hd5zlkz4q1v352zqh3-flakelet-app-slow2"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json, in 0.01 seconds)568client: must succeed: timeout 20 push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy --detach agent/app 2>&1569client: (finished: must succeed: timeout 20 push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy --detach agent/app 2>&1, in 0.02 seconds)570agent: waiting for success: systemctl is-active flakelet-relay-job-app.service571agent # [25981.167992] agent flakelet-agent[304]: {"timestamp":"2026-09-05T13:52:22.297207Z","level":"INFO","message":"update finished","flakelet":"app","status":"RolledBack","generation":"Some(3)","target":"flakelet_relay::agent::jobs"}572agent # [25981.221322] agent flakelet-agent[304]: {"timestamp":"2026-09-05T13:52:22.350568Z","level":"INFO","message":"start","id":"f70b7b847de6d2fccfd078612cbe0810","flakelet":"app","rule":"admins","relay":"relay","caller":"Some(\"x509:email:admin@example.org\")","target":"flakelet_relay::agent::conn"}573agent # [25981.221704] agent flakelet-agent[304]: {"timestamp":"2026-09-05T13:52:22.350958Z","level":"INFO","message":"update starting","flakelet":"app","ids":"[\"f70b7b847de6d2fccfd078612cbe0810\"]","target":"flakelet_relay::agent::jobs"}574agent # [25981.277907] agent systemd[1]: Starting flakelet update app (via relay)...575agent # [25981.311379] agent systemd[1]: Started flakelet update app (via relay).576agent # [25981.315615] agent flakelet[1504]: app: using prebuilt artifact /nix/store/ln47rsd5km8a04hd5zlkz4q1v352zqh3-flakelet-app-slow2577agent # [25981.316331] agent flakelet[1504]: app: activating generation 4578agent # [25981.331603] agent systemd[1]: Stopping app v1...579agent # [25981.332165] agent systemd[1]: app.service: Deactivated successfully.580agent # [25981.332520] agent systemd[1]: Stopped app v1.581agent # [25981.351754] agent systemd[1]: Reload requested from client PID 1511 ('systemctl') (unit flakelet-relay-job-app.service)...582agent # [25981.351852] agent systemd[1]: Reloading...583relay # [25981.168956] relay flakelet-relay[400]: {"timestamp":"2026-09-05T13:52:22.298171Z","level":"INFO","message":"deploy finished","job":"f87dfdc5eea039e895dcfca8b5858cb3","ok":false,"target":"flakelet_relay::relay::api"}584relay # [25981.220937] relay flakelet-relay[400]: {"timestamp":"2026-09-05T13:52:22.350177Z","level":"INFO","message":"deploy accepted","job":"8f29de5768460899541e45d7445d826f","caller":"x509:email:admin@example.org","targets":"[\"agent/app\"]","target":"flakelet_relay::relay::api"}585agent # [25981.714562] agent systemd[1]: Reloading finished in 361 ms.586agent # [25981.801127] agent systemd[1]: Reload requested from client PID 1541 ('systemctl') (unit flakelet-relay-job-app.service)...587agent # [25981.801218] agent systemd[1]: Reloading...588agent # [25982.151547] agent systemd[1]: Reloading finished in 349 ms.589agent # [25982.234277] agent systemd[1]: Reload requested from client PID 1570 ('systemctl') (unit flakelet-relay-job-app.service)...590agent # [25982.234361] agent systemd[1]: Reloading...591agent: (finished: waiting for success: systemctl is-active flakelet-relay-job-app.service, in 1.44 seconds)592??? Warning (UserWarning): wait_until_fails(): passing a bare int/float as a duration is deprecated. Use datetime.timedelta instead.593 File "/nix/store/fv4yr9c0f9kyrfc00100i4rlshiiidbd-nixos-test-driver-1.1/lib/python3.14/site-packages/test_driver/duration.py", line 39594agent: waiting for failure: systemctl is-active flakelet-relay-job-app.service595??? Warning (UserWarning): execute(): passing a bare int/float as a duration is deprecated. Use datetime.timedelta instead.596 File "/nix/store/fv4yr9c0f9kyrfc00100i4rlshiiidbd-nixos-test-driver-1.1/lib/python3.14/site-packages/test_driver/duration.py", line 39597agent # [25982.585846] agent systemd[1]: Reloading finished in 350 ms.598agent # [25982.670769] agent systemd[1]: Reload requested from client PID 1602 ('systemctl') (unit flakelet-relay-job-app.service)...599agent # [25982.670859] agent systemd[1]: Reloading...600agent # [25983.018132] agent systemd[1]: Reloading finished in 346 ms.601agent # [25983.099617] agent systemd[1]: Starting app slow2...602agent # [25989.179013] agent systemd[1]: Started app slow2.603agent # [25989.206073] agent flakelet[1504]: app: updated to generation 4604agent # [25989.209789] agent systemd[1]: flakelet-relay-job-app.service: Deactivated successfully.605agent: (finished: waiting for failure: systemctl is-active flakelet-relay-job-app.service, in 7.52 seconds)606(finished: subtest: detach returns once the job is accepted, in 9.00 seconds)607subtest: unknown host is final, missing agent is retried, agents listing608client: must fail: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy nope/app 2>&1609client: (finished: must fail: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy nope/app 2>&1, in 0.02 seconds)610agent: must succeed: systemctl stop flakelet-agent611agent: (finished: must succeed: systemctl stop flakelet-agent, in 0.04 seconds)612relay: waiting for success: curl -sf http://127.0.0.1:7400/metrics | grep -q 'agent_up{host="agent"} 0'613relay: (finished: waiting for success: curl -sf http://127.0.0.1:7400/metrics | grep -q 'agent_up{host="agent"} 0', in 0.02 seconds)614client: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/other > /tmp/retry.out 2>&1 &615client: (finished: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/other > /tmp/retry.out 2>&1 &, in 0.01 seconds)616client: waiting for success: grep -q 'agent_unavailable.*retrying' /tmp/retry.out617agent # [25990.222715] agent systemd[1]: Stopping flakelet-agent...618agent # [25990.246895] agent systemd[1]: flakelet-agent.service: Deactivated successfully.619agent # [25990.247387] agent systemd[1]: Stopped flakelet-agent.620agent # [25990.247888] agent systemd[1]: flakelet-agent.service: Consumed 1.457s CPU time over 31.746s wall clock time.621relay # [25990.222760] relay flakelet-relay[400]: {"timestamp":"2026-09-05T13:52:31.351996Z","level":"INFO","message":"agent disconnected: websocket closed","host":"agent","target":"flakelet_relay::relay::agent_conn"}622client: (finished: waiting for success: grep -q 'agent_unavailable.*retrying' /tmp/retry.out, in 1.02 seconds)623agent: must succeed: systemctl start flakelet-agent624agent: (finished: must succeed: systemctl start flakelet-agent, in 0.08 seconds)625??? Warning (UserWarning): wait_until_succeeds(): passing a bare int/float as a duration is deprecated. Use datetime.timedelta instead.626 File "/nix/store/fv4yr9c0f9kyrfc00100i4rlshiiidbd-nixos-test-driver-1.1/lib/python3.14/site-packages/test_driver/duration.py", line 39627client: waiting for success: grep -q 'agent/other: unchanged' /tmp/retry.out628agent # [25991.305136] agent systemd[1]: Starting flakelet-agent...629agent # [25991.367037] agent flakelet-agent[1657]: {"timestamp":"2026-09-05T13:52:32.496262Z","level":"INFO","message":"reattaching to running unit","flakelet":"app","ids":"[\"f70b7b847de6d2fccfd078612cbe0810\"]","target":"flakelet_relay::agent::jobs"}630agent # [25991.367173] agent systemd[1]: Started flakelet-agent.631agent # [25991.456025] agent flakelet-agent[1657]: {"timestamp":"2026-09-05T13:52:32.585268Z","level":"INFO","message":"connected","relay":"https://relay:7443","relay_name":"relay","relay_version":"0.1.0","host":"agent","target":"flakelet_relay::agent::conn"}632relay # [25991.456139] relay flakelet-relay[400]: {"timestamp":"2026-09-05T13:52:32.585354Z","level":"INFO","message":"agent connected","host":"agent","version":"0.1.0","flakelets":"[Named { name: \"app\", generation: Some(4), revision: Some(\"prebuilt:app\") }, Named { name: \"other\", generation: Some(1), revision: Some(\"prebuilt:other\") }]","target":"flakelet_relay::relay::agent_conn"}633agent # [25991.926913] agent flakelet-agent[1657]: {"timestamp":"2026-09-05T13:52:33.056136Z","level":"INFO","message":"update finished","flakelet":"app","status":"Updated","generation":"Some(4)","target":"flakelet_relay::agent::jobs"}634relay # [25993.292539] relay flakelet-relay[400]: {"timestamp":"2026-09-05T13:52:34.421788Z","level":"INFO","message":"deploy accepted","job":"a00cdda744601ff7c00f65556cf206b6","caller":"x509:email:admin@example.org","targets":"[\"agent/other\"]","target":"flakelet_relay::relay::api"}635agent # [25993.292906] agent flakelet-agent[1657]: {"timestamp":"2026-09-05T13:52:34.422132Z","level":"INFO","message":"start","id":"3f8f40b4176114b4fddce21c8e0be43d","flakelet":"other","rule":"admins","relay":"relay","caller":"Some(\"x509:email:admin@example.org\")","target":"flakelet_relay::agent::conn"}636agent # [25993.293535] agent flakelet-agent[1657]: {"timestamp":"2026-09-05T13:52:34.422813Z","level":"INFO","message":"update starting","flakelet":"other","ids":"[\"3f8f40b4176114b4fddce21c8e0be43d\"]","target":"flakelet_relay::agent::jobs"}637agent # [25993.349589] agent systemd[1]: Starting flakelet update other (via relay)...638agent # [25993.381841] agent systemd[1]: Started flakelet update other (via relay).639agent # [25993.386412] agent flakelet[2070]: other: using prebuilt artifact /nix/store/hmr990n0b4v6rpzrcpyyw738r9xi7z95-flakelet-other-v1640agent # [25993.387213] agent flakelet[2070]: other: up to date641agent # [25993.390320] agent systemd[1]: flakelet-relay-job-other.service: Deactivated successfully.642agent # [25993.949988] agent flakelet-agent[1657]: {"timestamp":"2026-09-05T13:52:35.079199Z","level":"INFO","message":"update finished","flakelet":"other","status":"Unchanged","generation":"Some(1)","target":"flakelet_relay::agent::jobs"}643relay # [25993.950741] relay flakelet-relay[400]: {"timestamp":"2026-09-05T13:52:35.079962Z","level":"INFO","message":"deploy finished","job":"a00cdda744601ff7c00f65556cf206b6","ok":true,"target":"flakelet_relay::relay::api"}644client: (finished: waiting for success: grep -q 'agent/other: unchanged' /tmp/retry.out, in 3.04 seconds)645client: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem agents646client: (finished: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem agents, in 0.02 seconds)647client: must succeed: echo '{"groups": []}' | step crypto jwt sign --key /nix/store/r7sclamg09v434w8zjlfnrcrn1w79wh6-flakelet-relay-test-issuer/jwk.json --iss https://relay:8443 --aud flakelet-relay --sub 'repo:github:example/app:ref:refs/heads/main' --exp $(( $(date +%s) + 300 )) --jti $(head -c8 /dev/urandom | base32)648client: (finished: must succeed: echo '{"groups": []}' | step crypto jwt sign --key /nix/store/r7sclamg09v434w8zjlfnrcrn1w79wh6-flakelet-relay-test-issuer/jwk.json --iss https://relay:8443 --aud flakelet-relay --sub 'repo:github:example/app:ref:refs/heads/main' --exp $(( $(date +%s) + 300 )) --jti $(head -c8 /dev/urandom | base32), in 0.05 seconds)649client: must succeed: FLAKELET_RELAY_TOKEN_COMMAND='echo eyJhbGciOiJFZERTQSIsImtpZCI6ImsxIiwidHlwIjoiSldUIn0.eyJhdWQiOiJmbGFrZWxldC1yZWxheSIsImV4cCI6MTc4ODYxNjY1NSwiZ3JvdXBzIjpbXSwiaWF0IjoxNzg4NjE2MzU1LCJpc3MiOiJodHRwczovL3JlbGF5Ojg0NDMiLCJqdGkiOiI2VEMyTzNUVEdONDM2PT09IiwibmJmIjoxNzg4NjE2MzU1LCJzdWIiOiJyZXBvOmdpdGh1YjpleGFtcGxlL2FwcDpyZWY6cmVmcy9oZWFkcy9tYWluIn0.Ad71UzeaXeoZpi0jwlN5Efc4vCKXNay6YhIr9UnSC_k8zI6UkMA8lOE6gSYchvb9x3e4pGD1bqUefw_iBLIABA' push --relay https://relay:7443 agents650client: (finished: must succeed: FLAKELET_RELAY_TOKEN_COMMAND='echo eyJhbGciOiJFZERTQSIsImtpZCI6ImsxIiwidHlwIjoiSldUIn0.eyJhdWQiOiJmbGFrZWxldC1yZWxheSIsImV4cCI6MTc4ODYxNjY1NSwiZ3JvdXBzIjpbXSwiaWF0IjoxNzg4NjE2MzU1LCJpc3MiOiJodHRwczovL3JlbGF5Ojg0NDMiLCJqdGkiOiI2VEMyTzNUVEdONDM2PT09IiwibmJmIjoxNzg4NjE2MzU1LCJzdWIiOiJyZXBvOmdpdGh1YjpleGFtcGxlL2FwcDpyZWY6cmVmcy9oZWFkcy9tYWluIn0.Ad71UzeaXeoZpi0jwlN5Efc4vCKXNay6YhIr9UnSC_k8zI6UkMA8lOE6gSYchvb9x3e4pGD1bqUefw_iBLIABA' push --relay https://relay:7443 agents, in 0.02 seconds)651(finished: subtest: unknown host is final, missing agent is retried, agents listing, in 4.32 seconds)652subtest: certificate not listed under agents cannot connect as agent653client: must succeed: curl -s -o /dev/null -w '%{http_code}' --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/mallory/cert.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/mallory/key.pem -H 'Upgrade: websocket' -H 'Connection: Upgrade' -H 'Sec-WebSocket-Version: 13' -H 'Sec-WebSocket-Key: dGhlIHNhbXBsZSBub25jZQ==' https://relay:7443/v1/agent654client: (finished: must succeed: curl -s -o /dev/null -w '%{http_code}' --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/mallory/cert.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/mallory/key.pem -H 'Upgrade: websocket' -H 'Connection: Upgrade' -H 'Sec-WebSocket-Version: 13' -H 'Sec-WebSocket-Key: dGhlIHNhbXBsZSBub25jZQ==' https://relay:7443/v1/agent, in 0.02 seconds)655(finished: subtest: certificate not listed under agents cannot connect as agent, in 0.03 seconds)656subtest: metrics657relay: must succeed: curl -sf http://127.0.0.1:7400/metrics658relay: (finished: must succeed: curl -sf http://127.0.0.1:7400/metrics, in 0.01 seconds)659(finished: subtest: metrics, in 0.02 seconds)660subtest: agent link drop mid-run replays missed lines once661agent: must succeed: jq '.services.app.prebuilt="/nix/store/c67jj8kx3m50nyj874aqmdqf21w5iznd-flakelet-app-slow"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json662agent: (finished: must succeed: jq '.services.app.prebuilt="/nix/store/c67jj8kx3m50nyj874aqmdqf21w5iznd-flakelet-app-slow"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json, in 0.01 seconds)663agent: must succeed: date +%s664agent: (finished: must succeed: date +%s, in 0.01 seconds)665client: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/app > /tmp/slow.out 2>&1 &666client: (finished: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/app > /tmp/slow.out 2>&1 &, in 0.01 seconds)667agent: waiting for success: journalctl -u flakelet-relay-job-app.service --since=@1788616355 | grep -q 'app-slow'668relay # [25994.525078] relay flakelet-relay[400]: {"timestamp":"2026-09-05T13:52:35.654258Z","level":"INFO","message":"agent rejected: no agents entry matches","principals":"[\"x509:dns:mallory\"]","target":"flakelet_relay::relay::agent_conn"}669relay # [25994.588695] relay flakelet-relay[400]: {"timestamp":"2026-09-05T13:52:35.717932Z","level":"INFO","message":"deploy accepted","job":"bafc88b7481da6cfb80e607b52d767a2","caller":"x509:email:admin@example.org","targets":"[\"agent/app\"]","target":"flakelet_relay::relay::api"}670agent # [25994.589164] agent flakelet-agent[1657]: {"timestamp":"2026-09-05T13:52:35.718405Z","level":"INFO","message":"start","id":"1bc7200142c5f5a8a3829a3664f9da79","flakelet":"app","rule":"admins","relay":"relay","caller":"Some(\"x509:email:admin@example.org\")","target":"flakelet_relay::agent::conn"}671agent # [25994.590198] agent flakelet-agent[1657]: {"timestamp":"2026-09-05T13:52:35.718987Z","level":"INFO","message":"update starting","flakelet":"app","ids":"[\"1bc7200142c5f5a8a3829a3664f9da79\"]","target":"flakelet_relay::agent::jobs"}672agent # [25994.642831] agent systemd[1]: Starting flakelet update app (via relay)...673agent # [25994.681257] agent systemd[1]: Started flakelet update app (via relay).674agent # [25994.685927] agent flakelet[2095]: app: using prebuilt artifact /nix/store/c67jj8kx3m50nyj874aqmdqf21w5iznd-flakelet-app-slow675agent # [25994.686701] agent flakelet[2095]: app: activating generation 5676agent # [25994.702953] agent systemd[1]: Stopping app slow2...677agent # [25994.703482] agent systemd[1]: app.service: Deactivated successfully.678agent # [25994.703844] agent systemd[1]: Stopped app slow2.679agent # [25994.723077] agent systemd[1]: Reload requested from client PID 2102 ('systemctl') (unit flakelet-relay-job-app.service)...680agent # [25994.723166] agent systemd[1]: Reloading...681agent # [25995.082832] agent systemd[1]: Reloading finished in 358 ms.682agent # [25995.174672] agent systemd[1]: Reload requested from client PID 2132 ('systemctl') (unit flakelet-relay-job-app.service)...683agent # [25995.174768] agent systemd[1]: Reloading...684agent: (finished: waiting for success: journalctl -u flakelet-relay-job-app.service --since=@1788616355 | grep -q 'app-slow', in 1.03 seconds)685agent: must succeed: for a in $(getent ahosts relay | cut -d' ' -f1 | sort -u); do ip route add unreachable $a; done686agent: (finished: must succeed: for a in $(getent ahosts relay | cut -d' ' -f1 | sort -u); do ip route add unreachable $a; done, in 0.02 seconds)687relay: must succeed: for a in $(getent ahosts agent | cut -d' ' -f1 | sort -u); do ss -K dst "[$a]"; done688relay: (finished: must succeed: for a in $(getent ahosts agent | cut -d' ' -f1 | sort -u); do ss -K dst "[$a]"; done, in 0.05 seconds)689agent: must succeed: ss -K dport = 7443690agent: (finished: must succeed: ss -K dport = 7443, in 0.03 seconds)691agent: waiting for success: journalctl -u flakelet-relay-job-app.service --since=@1788616355 | grep -q 'updated to generation'692agent # [25995.522982] agent systemd[1]: Reloading finished in 347 ms.693agent # [25995.608016] agent systemd[1]: Reload requested from client PID 2165 ('systemctl') (unit flakelet-relay-job-app.service)...694agent # [25995.608063] agent systemd[1]: Reloading...695agent # [25995.698824] agent flakelet-agent[1657]: {"timestamp":"2026-09-05T13:52:36.828051Z","level":"INFO","message":"disconnected: Software caused connection abort (os error 103)","relay":"https://relay:7443","target":"flakelet_relay::agent::conn"}696relay # [25995.669326] relay flakelet-relay[400]: {"timestamp":"2026-09-05T13:52:36.798567Z","level":"INFO","message":"agent disconnected: Software caused connection abort (os error 103)","host":"agent","target":"flakelet_relay::relay::agent_conn"}697agent # [25995.957883] agent systemd[1]: Reloading finished in 349 ms.698agent # [25996.052756] agent systemd[1]: Reload requested from client PID 2206 ('systemctl') (unit flakelet-relay-job-app.service)...699agent # [25996.052798] agent systemd[1]: Reloading...700agent # [25996.400055] agent systemd[1]: Reloading finished in 346 ms.701agent # [25996.481258] agent systemd[1]: Starting app slow...702agent # [25996.792374] agent flakelet-agent[1657]: {"timestamp":"2026-09-05T13:52:37.921603Z","level":"WARN","message":"connect failed: connect relay:7443: No route to host (os error 113)","relay":"https://relay:7443","target":"flakelet_relay::agent::conn"}703agent # [25998.878233] agent flakelet-agent[1657]: {"timestamp":"2026-09-05T13:52:40.007495Z","level":"WARN","message":"connect failed: connect relay:7443: No route to host (os error 113)","relay":"https://relay:7443","target":"flakelet_relay::agent::conn"}704agent: (finished: waiting for success: journalctl -u flakelet-relay-job-app.service --since=@1788616355 | grep -q 'updated to generation', in 7.11 seconds)705agent: must succeed: for a in $(getent ahosts relay | cut -d' ' -f1 | sort -u); do ip route del unreachable $a; done706agent: (finished: must succeed: for a in $(getent ahosts relay | cut -d' ' -f1 | sort -u); do ip route del unreachable $a; done, in 0.02 seconds)707client: waiting for success: grep -q 'agent/app: updated' /tmp/slow.out708agent # [26002.556864] agent systemd[1]: Started app slow.709agent # [26002.578637] agent flakelet[2095]: app: updated to generation 5710agent # [26002.582341] agent systemd[1]: flakelet-relay-job-app.service: Deactivated successfully.711agent # [26002.967879] agent flakelet-agent[1657]: {"timestamp":"2026-09-05T13:52:44.096968Z","level":"INFO","message":"connected","relay":"https://relay:7443","relay_name":"relay","relay_version":"0.1.0","host":"agent","target":"flakelet_relay::agent::conn"}712agent # [26002.969609] agent flakelet-agent[1657]: {"timestamp":"2026-09-05T13:52:44.098796Z","level":"INFO","message":"start","id":"1bc7200142c5f5a8a3829a3664f9da79","flakelet":"app","rule":"admins","relay":"relay","caller":"Some(\"x509:email:admin@example.org\")","target":"flakelet_relay::agent::conn"}713relay # [26002.967781] relay flakelet-relay[400]: {"timestamp":"2026-09-05T13:52:44.097035Z","level":"INFO","message":"agent connected","host":"agent","version":"0.1.0","flakelets":"[Named { name: \"app\", generation: Some(5), revision: Some(\"prebuilt:app\") }, Named { name: \"other\", generation: Some(1), revision: Some(\"prebuilt:other\") }]","target":"flakelet_relay::relay::agent_conn"}714client: (finished: waiting for success: grep -q 'agent/app: updated' /tmp/slow.out, in 1.02 seconds)715client: must succeed: cat /tmp/slow.out716client: (finished: must succeed: cat /tmp/slow.out, in 0.01 seconds)717(finished: subtest: agent link drop mid-run replays missed lines once, in 9.32 seconds)718subtest: agent restart mid-run reattaches to the unit719agent: must succeed: jq '.services.app.prebuilt="/nix/store/ln47rsd5km8a04hd5zlkz4q1v352zqh3-flakelet-app-slow2"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json720agent: (finished: must succeed: jq '.services.app.prebuilt="/nix/store/ln47rsd5km8a04hd5zlkz4q1v352zqh3-flakelet-app-slow2"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json, in 0.02 seconds)721client: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/app > /tmp/restart.out 2>&1 &722client: (finished: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/app > /tmp/restart.out 2>&1 &, in 0.01 seconds)723agent: waiting for success: journalctl -u flakelet-relay-job-app.service --since -20s | grep -q 'app-slow2'724agent # [26003.654170] agent flakelet-agent[1657]: {"timestamp":"2026-09-05T13:52:44.783382Z","level":"INFO","message":"update finished","flakelet":"app","status":"Updated","generation":"Some(5)","target":"flakelet_relay::agent::jobs"}725agent # [26003.895101] agent flakelet-agent[1657]: {"timestamp":"2026-09-05T13:52:45.024337Z","level":"INFO","message":"start","id":"318387784c459e8faac07b4f7cba8851","flakelet":"app","rule":"admins","relay":"relay","caller":"Some(\"x509:email:admin@example.org\")","target":"flakelet_relay::agent::conn"}726agent # [26003.895784] agent flakelet-agent[1657]: {"timestamp":"2026-09-05T13:52:45.025057Z","level":"INFO","message":"update starting","flakelet":"app","ids":"[\"318387784c459e8faac07b4f7cba8851\"]","target":"flakelet_relay::agent::jobs"}727relay # [26003.655029] relay flakelet-relay[400]: {"timestamp":"2026-09-05T13:52:44.784252Z","level":"INFO","message":"deploy finished","job":"bafc88b7481da6cfb80e607b52d767a2","ok":true,"target":"flakelet_relay::relay::api"}728relay # [26003.894623] relay flakelet-relay[400]: {"timestamp":"2026-09-05T13:52:45.023846Z","level":"INFO","message":"deploy accepted","job":"0f8f9b615b9769ad361f9248d5178ffc","caller":"x509:email:admin@example.org","targets":"[\"agent/app\"]","target":"flakelet_relay::relay::api"}729agent # [26003.960299] agent systemd[1]: Starting flakelet update app (via relay)...730agent # [26003.994975] agent systemd[1]: Started flakelet update app (via relay).731agent # [26004.000152] agent flakelet[2327]: app: using prebuilt artifact /nix/store/ln47rsd5km8a04hd5zlkz4q1v352zqh3-flakelet-app-slow2732agent # [26004.000955] agent flakelet[2327]: app: activating generation 6733agent # [26004.017308] agent systemd[1]: Stopping app slow...734agent # [26004.017845] agent systemd[1]: app.service: Deactivated successfully.735agent # [26004.018207] agent systemd[1]: Stopped app slow.736agent # [26004.038072] agent systemd[1]: Reload requested from client PID 2334 ('systemctl') (unit flakelet-relay-job-app.service)...737agent # [26004.038158] agent systemd[1]: Reloading...738agent # [26004.395364] agent systemd[1]: Reloading finished in 356 ms.739agent # [26004.486013] agent systemd[1]: Reload requested from client PID 2364 ('systemctl') (unit flakelet-relay-job-app.service)...740agent # [26004.486067] agent systemd[1]: Reloading...741agent: (finished: waiting for success: journalctl -u flakelet-relay-job-app.service --since -20s | grep -q 'app-slow2', in 1.03 seconds)742agent: must succeed: systemctl restart flakelet-agent743agent # [26004.836342] agent systemd[1]: Reloading finished in 349 ms.744agent # [26004.918331] agent systemd[1]: Reload requested from client PID 2397 ('systemctl') (unit flakelet-relay-job-app.service)...745agent # [26004.918375] agent systemd[1]: Reloading...746agent # [26005.266205] agent systemd[1]: Reloading finished in 347 ms.747agent # [26005.352283] agent systemd[1]: Stopping flakelet-agent...748agent # [26005.362150] agent systemd[1]: Reload requested from client PID 2428 ('systemctl') (unit flakelet-relay-job-app.service)...749agent # [26005.362192] agent systemd[1]: Reloading...750agent # [26005.715535] agent systemd[1]: Reloading finished in 352 ms.751relay # [26005.352601] relay flakelet-relay[400]: {"timestamp":"2026-09-05T13:52:46.481824Z","level":"INFO","message":"agent disconnected: websocket closed","host":"agent","target":"flakelet_relay::relay::agent_conn"}752agent: (finished: must succeed: systemctl restart flakelet-agent, in 0.94 seconds)753agent: must succeed: test -n "$(ls /var/lib/flakelet-agent/jobs)"754agent: (finished: must succeed: test -n "$(ls /var/lib/flakelet-agent/jobs)", in 0.01 seconds)755client: waiting for success: grep -q 'agent/app: updated' /tmp/restart.out756agent # [26005.785321] agent systemd[1]: flakelet-agent.service: Deactivated successfully.757agent # [26005.785688] agent systemd[1]: Stopped flakelet-agent.758agent # [26005.790194] agent systemd[1]: Starting flakelet-agent...759agent # [26005.792759] agent systemd[1]: Starting app slow2...760agent # [26005.849973] agent flakelet-agent[2459]: {"timestamp":"2026-09-05T13:52:46.979218Z","level":"INFO","message":"reattaching to running unit","flakelet":"app","ids":"[\"318387784c459e8faac07b4f7cba8851\"]","target":"flakelet_relay::agent::jobs"}761agent # [26005.850121] agent systemd[1]: Started flakelet-agent.762agent # [26005.950032] agent flakelet-agent[2459]: {"timestamp":"2026-09-05T13:52:47.079249Z","level":"INFO","message":"connected","relay":"https://relay:7443","relay_name":"relay","relay_version":"0.1.0","host":"agent","target":"flakelet_relay::agent::conn"}763agent # [26005.951212] agent flakelet-agent[2459]: {"timestamp":"2026-09-05T13:52:47.080499Z","level":"INFO","message":"start","id":"318387784c459e8faac07b4f7cba8851","flakelet":"app","rule":"admins","relay":"relay","caller":"Some(\"x509:email:admin@example.org\")","target":"flakelet_relay::agent::conn"}764relay # [26005.950176] relay flakelet-relay[400]: {"timestamp":"2026-09-05T13:52:47.079331Z","level":"INFO","message":"agent connected","host":"agent","version":"0.1.0","flakelets":"[Named { name: \"app\", generation: Some(5), revision: Some(\"prebuilt:app\") }, Named { name: \"other\", generation: Some(1), revision: Some(\"prebuilt:other\") }]","target":"flakelet_relay::relay::agent_conn"}765agent # [26011.866505] agent systemd[1]: Started app slow2.766agent # [26011.889367] agent flakelet[2327]: app: updated to generation 6767agent # [26011.893035] agent systemd[1]: flakelet-relay-job-app.service: Deactivated successfully.768agent # [26012.457830] agent flakelet-agent[2459]: {"timestamp":"2026-09-05T13:52:53.587065Z","level":"INFO","message":"update finished","flakelet":"app","status":"Updated","generation":"Some(6)","target":"flakelet_relay::agent::jobs"}769relay # [26012.458590] relay flakelet-relay[400]: {"timestamp":"2026-09-05T13:52:53.587858Z","level":"INFO","message":"deploy finished","job":"0f8f9b615b9769ad361f9248d5178ffc","ok":true,"target":"flakelet_relay::relay::api"}770client: (finished: waiting for success: grep -q 'agent/app: updated' /tmp/restart.out, in 7.08 seconds)771client: must succeed: cat /tmp/restart.out772client: (finished: must succeed: cat /tmp/restart.out, in 0.01 seconds)773agent: must succeed: systemctl is-active app.service774agent: (finished: must succeed: systemctl is-active app.service, in 0.01 seconds)775(finished: subtest: agent restart mid-run reattaches to the unit, in 9.11 seconds)776subtest: relay restart mid-run, push resumes via /v1/jobs777agent: must succeed: jq '.services.app.prebuilt="/nix/store/c67jj8kx3m50nyj874aqmdqf21w5iznd-flakelet-app-slow"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json778agent: (finished: must succeed: jq '.services.app.prebuilt="/nix/store/c67jj8kx3m50nyj874aqmdqf21w5iznd-flakelet-app-slow"' /etc/flakelet/config.json > /tmp/config.json && cp --remove-destination /tmp/config.json /etc/flakelet/config.json, in 0.01 seconds)779agent: must succeed: date +%s780agent: (finished: must succeed: date +%s, in 0.01 seconds)781client: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/app > /tmp/resume.out 2>&1 &782client: (finished: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy agent/app > /tmp/resume.out 2>&1 &, in 0.01 seconds)783agent: waiting for success: journalctl -u flakelet-relay-job-app.service --since=@1788616374 | grep -q 'app-slow'784relay # [26013.013016] relay flakelet-relay[400]: {"timestamp":"2026-09-05T13:52:54.142244Z","level":"INFO","message":"deploy accepted","job":"5dad6dd01d3f16195c12718bb8f9daca","caller":"x509:email:admin@example.org","targets":"[\"agent/app\"]","target":"flakelet_relay::relay::api"}785agent # [26013.013521] agent flakelet-agent[2459]: {"timestamp":"2026-09-05T13:52:54.142730Z","level":"INFO","message":"start","id":"9a8ff808bf0832eba06042b74ac3bca7","flakelet":"app","rule":"admins","relay":"relay","caller":"Some(\"x509:email:admin@example.org\")","target":"flakelet_relay::agent::conn"}786agent # [26013.014091] agent flakelet-agent[2459]: {"timestamp":"2026-09-05T13:52:54.143333Z","level":"INFO","message":"update starting","flakelet":"app","ids":"[\"9a8ff808bf0832eba06042b74ac3bca7\"]","target":"flakelet_relay::agent::jobs"}787agent # [26013.073681] agent systemd[1]: Starting flakelet update app (via relay)...788agent # [26013.106328] agent systemd[1]: Started flakelet update app (via relay).789agent # [26013.112073] agent flakelet[2894]: app: using prebuilt artifact /nix/store/c67jj8kx3m50nyj874aqmdqf21w5iznd-flakelet-app-slow790agent # [26013.112889] agent flakelet[2894]: app: activating generation 7791agent # [26013.128395] agent systemd[1]: Stopping app slow2...792agent # [26013.128924] agent systemd[1]: app.service: Deactivated successfully.793agent # [26013.129285] agent systemd[1]: Stopped app slow2.794agent # [26013.149429] agent systemd[1]: Reload requested from client PID 2901 ('systemctl') (unit flakelet-relay-job-app.service)...795agent # [26013.149521] agent systemd[1]: Reloading...796agent # [26013.503101] agent systemd[1]: Reloading finished in 352 ms.797agent # [26013.580950] agent systemd[1]: Reload requested from client PID 2931 ('systemctl') (unit flakelet-relay-job-app.service)...798agent # [26013.581012] agent systemd[1]: Reloading...799agent # [26013.929717] agent systemd[1]: Reloading finished in 348 ms.800agent: (finished: waiting for success: journalctl -u flakelet-relay-job-app.service --since=@1788616374 | grep -q 'app-slow', in 1.03 seconds)801relay: must succeed: systemctl restart flakelet-relay802agent # [26014.011716] agent systemd[1]: Reload requested from client PID 2960 ('systemctl') (unit flakelet-relay-job-app.service)...803agent # [26014.011764] agent systemd[1]: Reloading...804agent # [26014.040682] agent flakelet-agent[2459]: {"timestamp":"2026-09-05T13:52:55.169899Z","level":"INFO","message":"disconnected: websocket closed","relay":"https://relay:7443","target":"flakelet_relay::agent::conn"}805relay # [26014.040097] relay systemd[1]: Stopping flakelet-relay...806relay # [26014.099155] relay systemd[1]: flakelet-relay.service: Deactivated successfully.807relay # [26014.099708] relay systemd[1]: Stopped flakelet-relay.808relay # [26014.099753] relay systemd[1]: flakelet-relay.service: Consumed 2.301s CPU time over 54.452s wall clock time.809relay # [26014.137710] relay systemd[1]: Starting flakelet-relay...810agent # [26014.372718] agent systemd[1]: Reloading finished in 360 ms.811agent # [26014.451993] agent systemd[1]: Reload requested from client PID 2994 ('systemctl') (unit flakelet-relay-job-app.service)...812agent # [26014.452040] agent systemd[1]: Reloading...813agent # [26014.804357] agent systemd[1]: Reloading finished in 351 ms.814agent # [26014.890224] agent systemd[1]: Starting app slow...815agent # [26015.143533] agent flakelet-agent[2459]: {"timestamp":"2026-09-05T13:52:56.272672Z","level":"WARN","message":"connect failed: connect relay:7443: Connection refused (os error 111)","relay":"https://relay:7443","target":"flakelet_relay::agent::conn"}816relay: (finished: must succeed: systemctl restart flakelet-relay, in 1.53 seconds)817client: waiting for success: grep -q '» ok' /tmp/resume.out818relay # [26015.549575] relay flakelet-relay[933]: {"timestamp":"2026-09-05T13:52:56.678831Z","level":"INFO","message":"listening on 127.0.0.1:7400","target":"flakelet_relay::relay::server"}819relay # [26015.550499] relay flakelet-relay[933]: {"timestamp":"2026-09-05T13:52:56.679291Z","level":"INFO","message":"listening on [::]:7443","target":"flakelet_relay::relay::server"}820relay # [26015.550093] relay systemd[1]: Started flakelet-relay.821relay # [26017.245623] relay flakelet-relay[933]: {"timestamp":"2026-09-05T13:52:58.374824Z","level":"INFO","message":"agent connected","host":"agent","version":"0.1.0","flakelets":"[Named { name: \"app\", generation: Some(6), revision: Some(\"prebuilt:app\") }, Named { name: \"other\", generation: Some(1), revision: Some(\"prebuilt:other\") }]","target":"flakelet_relay::relay::agent_conn"}822agent # [26017.245609] agent flakelet-agent[2459]: {"timestamp":"2026-09-05T13:52:58.374737Z","level":"INFO","message":"connected","relay":"https://relay:7443","relay_name":"relay","relay_version":"0.1.0","host":"agent","target":"flakelet_relay::agent::conn"}823agent # [26020.972577] agent systemd[1]: Started app slow.824agent # [26020.993988] agent flakelet[2894]: app: updated to generation 7825agent # [26020.994915] agent systemd[1]: flakelet-relay-job-app.service: Deactivated successfully.826relay # [26021.060440] relay flakelet-relay[933]: {"timestamp":"2026-09-05T13:53:02.189679Z","level":"INFO","message":"job reattached","job":"5dad6dd01d3f16195c12718bb8f9daca","targets":"[\"agent/app\"]","target":"flakelet_relay::relay::api"}827agent # [26022.053383] agent flakelet-agent[2459]: {"timestamp":"2026-09-05T13:53:03.182595Z","level":"INFO","message":"update finished","flakelet":"app","status":"Updated","generation":"Some(7)","target":"flakelet_relay::agent::jobs"}828client: (finished: waiting for success: grep -q '» ok' /tmp/resume.out, in 7.09 seconds)829client: must succeed: cat /tmp/resume.out830client: (finished: must succeed: cat /tmp/resume.out, in 0.01 seconds)831(finished: subtest: relay restart mid-run, push resumes via /v1/jobs, in 9.69 seconds)832subtest: job history comes from the agents and survives a relay restart833client: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy --id hist1 agent/other 2>&1834agent # [26022.675144] agent flakelet-agent[2459]: {"timestamp":"2026-09-05T13:53:03.804293Z","level":"INFO","message":"start","id":"5be20c693e5c0b60e3f85779794dfb86","flakelet":"other","rule":"admins","relay":"relay","caller":"Some(\"x509:email:admin@example.org\")","target":"flakelet_relay::agent::conn"}835agent # [26022.675705] agent flakelet-agent[2459]: {"timestamp":"2026-09-05T13:53:03.804987Z","level":"INFO","message":"update starting","flakelet":"other","ids":"[\"5be20c693e5c0b60e3f85779794dfb86\"]","target":"flakelet_relay::agent::jobs"}836agent # [26022.737519] agent systemd[1]: Starting flakelet update other (via relay)...837agent # [26022.771067] agent systemd[1]: Started flakelet update other (via relay).838agent # [26022.775749] agent flakelet[3071]: other: using prebuilt artifact /nix/store/hmr990n0b4v6rpzrcpyyw738r9xi7z95-flakelet-other-v1839agent # [26022.776565] agent flakelet[3071]: other: up to date840agent # [26022.778121] agent systemd[1]: flakelet-relay-job-other.service: Deactivated successfully.841relay # [26022.674579] relay flakelet-relay[933]: {"timestamp":"2026-09-05T13:53:03.803799Z","level":"INFO","message":"deploy accepted","job":"188b06c4636b65849b3ba8daac22dc7c","caller":"x509:email:admin@example.org","targets":"[\"agent/other\"]","target":"flakelet_relay::relay::api"}842client: (finished: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy --id hist1 agent/other 2>&1, in 0.69 seconds)843relay: must succeed: systemctl restart flakelet-relay844agent # [26023.339118] agent flakelet-agent[2459]: {"timestamp":"2026-09-05T13:53:04.468337Z","level":"INFO","message":"update finished","flakelet":"other","status":"Unchanged","generation":"Some(1)","target":"flakelet_relay::agent::jobs"}845agent # [26023.357636] agent flakelet-agent[2459]: {"timestamp":"2026-09-05T13:53:04.486878Z","level":"INFO","message":"disconnected: websocket closed","relay":"https://relay:7443","target":"flakelet_relay::agent::conn"}846relay # [26023.339828] relay flakelet-relay[933]: {"timestamp":"2026-09-05T13:53:04.469007Z","level":"INFO","message":"deploy finished","job":"188b06c4636b65849b3ba8daac22dc7c","ok":true,"target":"flakelet_relay::relay::api"}847relay # [26023.357411] relay systemd[1]: Stopping flakelet-relay...848relay # [26023.388865] relay systemd[1]: flakelet-relay.service: Deactivated successfully.849relay # [26023.389414] relay systemd[1]: Stopped flakelet-relay.850relay # [26023.389454] relay systemd[1]: flakelet-relay.service: Consumed 1.627s CPU time over 9.251s wall clock time.851relay # [26023.426881] relay systemd[1]: Starting flakelet-relay...852agent # [26024.445855] agent flakelet-agent[2459]: {"timestamp":"2026-09-05T13:53:05.575057Z","level":"WARN","message":"connect failed: connect relay:7443: Connection refused (os error 111)","relay":"https://relay:7443","target":"flakelet_relay::agent::conn"}853relay: (finished: must succeed: systemctl restart flakelet-relay, in 1.49 seconds)854relay: waiting for success: curl -sf http://127.0.0.1:7400/metrics | grep -q 'agent_up{host="agent"} 1'855relay # [26024.827126] relay flakelet-relay[1323]: {"timestamp":"2026-09-05T13:53:05.956354Z","level":"INFO","message":"listening on 127.0.0.1:7400","target":"flakelet_relay::relay::server"}856relay # [26024.827987] relay flakelet-relay[1323]: {"timestamp":"2026-09-05T13:53:05.956831Z","level":"INFO","message":"listening on [::]:7443","target":"flakelet_relay::relay::server"}857relay # [26024.827622] relay systemd[1]: Started flakelet-relay.858relay # [26026.550151] relay flakelet-relay[1323]: {"timestamp":"2026-09-05T13:53:07.679369Z","level":"INFO","message":"agent connected","host":"agent","version":"0.1.0","flakelets":"[Named { name: \"app\", generation: Some(7), revision: Some(\"prebuilt:app\") }, Named { name: \"other\", generation: Some(1), revision: Some(\"prebuilt:other\") }]","target":"flakelet_relay::relay::agent_conn"}859relay: (finished: waiting for success: curl -sf http://127.0.0.1:7400/metrics | grep -q 'agent_up{host="agent"} 1', in 2.06 seconds)860client: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem jobs861client: (finished: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem jobs, in 0.02 seconds)862client: must succeed: echo '{"groups": []}' | step crypto jwt sign --key /nix/store/r7sclamg09v434w8zjlfnrcrn1w79wh6-flakelet-relay-test-issuer/jwk.json --iss https://relay:8443 --aud flakelet-relay --sub 'repo:github:example/app:ref:refs/heads/main' --exp $(( $(date +%s) + 300 )) --jti $(head -c8 /dev/urandom | base32)863client: (finished: must succeed: echo '{"groups": []}' | step crypto jwt sign --key /nix/store/r7sclamg09v434w8zjlfnrcrn1w79wh6-flakelet-relay-test-issuer/jwk.json --iss https://relay:8443 --aud flakelet-relay --sub 'repo:github:example/app:ref:refs/heads/main' --exp $(( $(date +%s) + 300 )) --jti $(head -c8 /dev/urandom | base32), in 0.05 seconds)864client: must succeed: FLAKELET_RELAY_TOKEN_COMMAND='echo eyJhbGciOiJFZERTQSIsImtpZCI6ImsxIiwidHlwIjoiSldUIn0.eyJhdWQiOiJmbGFrZWxldC1yZWxheSIsImV4cCI6MTc4ODYxNjY4OCwiZ3JvdXBzIjpbXSwiaWF0IjoxNzg4NjE2Mzg4LCJpc3MiOiJodHRwczovL3JlbGF5Ojg0NDMiLCJqdGkiOiI3VTZFQ1gyWldZUk5FPT09IiwibmJmIjoxNzg4NjE2Mzg4LCJzdWIiOiJyZXBvOmdpdGh1YjpleGFtcGxlL2FwcDpyZWY6cmVmcy9oZWFkcy9tYWluIn0.gToLLIoP6AwMU9BKjavqyplRU7nIK8g1AOXhhfYBaakFiAXo-GizbImA2u8QIIssrVxqvzTj1mPe0c_bDWBuBQ' push --relay https://relay:7443 jobs865agent # [26026.550154] agent flakelet-agent[2459]: {"timestamp":"2026-09-05T13:53:07.679285Z","level":"INFO","message":"connected","relay":"https://relay:7443","relay_name":"relay","relay_version":"0.1.0","host":"agent","target":"flakelet_relay::agent::conn"}866client: (finished: must succeed: FLAKELET_RELAY_TOKEN_COMMAND='echo eyJhbGciOiJFZERTQSIsImtpZCI6ImsxIiwidHlwIjoiSldUIn0.eyJhdWQiOiJmbGFrZWxldC1yZWxheSIsImV4cCI6MTc4ODYxNjY4OCwiZ3JvdXBzIjpbXSwiaWF0IjoxNzg4NjE2Mzg4LCJpc3MiOiJodHRwczovL3JlbGF5Ojg0NDMiLCJqdGkiOiI3VTZFQ1gyWldZUk5FPT09IiwibmJmIjoxNzg4NjE2Mzg4LCJzdWIiOiJyZXBvOmdpdGh1YjpleGFtcGxlL2FwcDpyZWY6cmVmcy9oZWFkcy9tYWluIn0.gToLLIoP6AwMU9BKjavqyplRU7nIK8g1AOXhhfYBaakFiAXo-GizbImA2u8QIIssrVxqvzTj1mPe0c_bDWBuBQ' push --relay https://relay:7443 jobs, in 0.02 seconds)867(finished: subtest: job history comes from the agents and survives a relay restart, in 4.33 seconds)868subtest: dashboard login via authorization code flow869client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -o /dev/null -w '%{http_code} %{redirect_url}' https://relay:7443/ui/ | grep -q '303 https://relay:7443/ui/login'870client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -o /dev/null -w '%{http_code} %{redirect_url}' https://relay:7443/ui/ | grep -q '303 https://relay:7443/ui/login', in 0.02 seconds)871client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -L https://relay:7443/ui/login872client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -L https://relay:7443/ui/login, in 0.08 seconds)873client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar https://relay:7443/ui/jobs874client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar https://relay:7443/ui/jobs, in 0.02 seconds)875client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -f https://relay:7443/v1/jobs | grep -q hist1876client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -f https://relay:7443/v1/jobs | grep -q hist1, in 0.02 seconds)877client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -N --max-time 10 https://relay:7443/ui/jobs/hist1/events || true878client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -N --max-time 10 https://relay:7443/ui/jobs/hist1/events || true, in 0.02 seconds)879client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -o /dev/null -w '%{http_code}' -X POST 'https://relay:7443/ui/deploy?arg=other' | grep -q 403880client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -o /dev/null -w '%{http_code}' -X POST 'https://relay:7443/ui/deploy?arg=other' | grep -q 403, in 0.03 seconds)881client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -D - -o /dev/null -H 'HX-Request: true' -X POST 'https://relay:7443/ui/deploy?arg=other'882client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -D - -o /dev/null -H 'HX-Request: true' -X POST 'https://relay:7443/ui/deploy?arg=other', in 0.02 seconds)883client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -N --max-time 30 https://relay:7443/ui/jobs/cb3768171ad59dcdb66d7a12371d6e48/events || true884relay # [26027.034431] relay 93sn3sv24fj26ksccpppzwg6kbf10s4w-device-mock[186]: 127.0.0.1 - - [05/Sep/2026 13:53:08] "GET /authorize?response_type=code&client_id=dashboard&redirect_uri=https%3A%2F%2Frelay%3A7443%2Fui%2Fcallback&scope=openid%20profile%20email%20groups&state=SRL915tz2fKmrm8TzWz3ffeH5OL9aZ3SjWK3Dvte74A&code_challenge=RnwDv2AQqfyYi7LF2LfhSWOTGm3iisou5Tq7qMZgOAU&code_challenge_method=S256 HTTP/1.1" 302 -885relay # [26027.082103] relay 93sn3sv24fj26ksccpppzwg6kbf10s4w-device-mock[186]: 127.0.0.1 - - [05/Sep/2026 13:53:08] "POST /token HTTP/1.1" 200 -886relay # [26027.083219] relay flakelet-relay[1323]: {"timestamp":"2026-09-05T13:53:08.212487Z","level":"INFO","message":"login","name":"someone","principals":"[\"oidc:mock:someone\", \"oidc:mock:groups:wheel\"]","target":"flakelet_relay::relay::login"}887relay # [26027.149223] relay flakelet-relay[1323]: {"timestamp":"2026-09-05T13:53:08.278439Z","level":"INFO","message":"job reattached","job":"188b06c4636b65849b3ba8daac22dc7c","targets":"[\"agent/other\"]","target":"flakelet_relay::relay::api"}888relay # [26027.198633] relay flakelet-relay[1323]: {"timestamp":"2026-09-05T13:53:08.327843Z","level":"INFO","message":"deploy accepted","job":"3d3acee169d7ffc66288c1f5fc6de99a","caller":"oidc:mock:someone\noidc:mock:groups:wheel","targets":"[\"agent/other\"]","target":"flakelet_relay::relay::api"}889relay # [26027.222066] relay flakelet-relay[1323]: {"timestamp":"2026-09-05T13:53:08.351278Z","level":"INFO","message":"job reattached","job":"3d3acee169d7ffc66288c1f5fc6de99a","targets":"[\"agent/other\"]","target":"flakelet_relay::relay::api"}890agent # [26027.198968] agent flakelet-agent[2459]: {"timestamp":"2026-09-05T13:53:08.328176Z","level":"INFO","message":"start","id":"109da4a8493c5ba6966fb935b7e32982","flakelet":"other","rule":"admins","relay":"relay","caller":"Some(\"oidc:mock:someone\\noidc:mock:groups:wheel\")","target":"flakelet_relay::agent::conn"}891agent # [26027.199545] agent flakelet-agent[2459]: {"timestamp":"2026-09-05T13:53:08.328831Z","level":"INFO","message":"update starting","flakelet":"other","ids":"[\"109da4a8493c5ba6966fb935b7e32982\"]","target":"flakelet_relay::agent::jobs"}892agent # [26027.266420] agent systemd[1]: Starting flakelet update other (via relay)...893agent # [26027.301386] agent systemd[1]: Started flakelet update other (via relay).894agent # [26027.307669] agent flakelet[3109]: other: using prebuilt artifact /nix/store/hmr990n0b4v6rpzrcpyyw738r9xi7z95-flakelet-other-v1895agent # [26027.308526] agent flakelet[3109]: other: up to date896agent # [26027.310156] agent systemd[1]: flakelet-relay-job-other.service: Deactivated successfully.897client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -N --max-time 30 https://relay:7443/ui/jobs/cb3768171ad59dcdb66d7a12371d6e48/events || true, in 0.67 seconds)898client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar https://relay:7443/ui/jobs/cb3768171ad59dcdb66d7a12371d6e48899client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar https://relay:7443/ui/jobs/cb3768171ad59dcdb66d7a12371d6e48, in 0.02 seconds)900client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -sf -o /dev/null https://relay:7443/ui/static/htmx.min.js901client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -sf -o /dev/null https://relay:7443/ui/static/htmx.min.js, in 0.02 seconds)902client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar 'https://relay:7443/ui/?q=status%3Ahealthy+oth'903client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar 'https://relay:7443/ui/?q=status%3Ahealthy+oth', in 0.02 seconds)904client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar https://relay:7443/ui/flakelets/other905client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar https://relay:7443/ui/flakelets/other, in 0.02 seconds)906client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar 'https://relay:7443/ui/hosts?q=status%3Adisconnected'907client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar 'https://relay:7443/ui/hosts?q=status%3Adisconnected', in 0.02 seconds)908client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -o /dev/null -w '%{http_code}' -H 'HX-Request: true' -X POST 'https://relay:7443/ui/retry?arg=cb3768171ad59dcdb66d7a12371d6e48' | grep -q 400909client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -o /dev/null -w '%{http_code}' -H 'HX-Request: true' -X POST 'https://relay:7443/ui/retry?arg=cb3768171ad59dcdb66d7a12371d6e48' | grep -q 400, in 0.02 seconds)910client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -N --max-time 15 'https://relay:7443/ui/events?path=jobs' > /tmp/ev.out 2>&1 &911client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -N --max-time 15 'https://relay:7443/ui/events?path=jobs' > /tmp/ev.out 2>&1 &, in 0.01 seconds)912client: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy --id live1 agent/other913» job 38796a7ba508eadfe82a1cd5def000bc via relay 0.1.0 (agents: agent 0.1.0)914» wave 0915agent # [26027.865753] agent flakelet-agent[2459]: {"timestamp":"2026-09-05T13:53:08.994976Z","level":"INFO","message":"update finished","flakelet":"other","status":"Unchanged","generation":"Some(1)","target":"flakelet_relay::agent::jobs"}916agent # [26028.019203] agent flakelet-agent[2459]: {"timestamp":"2026-09-05T13:53:09.148451Z","level":"INFO","message":"start","id":"5e317fc57863c2a7c03ebe1bdacd1356","flakelet":"other","rule":"admins","relay":"relay","caller":"Some(\"x509:email:admin@example.org\")","target":"flakelet_relay::agent::conn"}917agent # [26028.019742] agent flakelet-agent[2459]: {"timestamp":"2026-09-05T13:53:09.149034Z","level":"INFO","message":"update starting","flakelet":"other","ids":"[\"5e317fc57863c2a7c03ebe1bdacd1356\"]","target":"flakelet_relay::agent::jobs"}918agent # [26028.080360] agent systemd[1]: Starting flakelet update other (via relay)...919agent # [26028.116812] agent systemd[1]: Started flakelet update other (via relay).920agent/other | Starting flakelet update other (via relay)...921agent/other | Started flakelet update other (via relay).922relay # [26028.018988] relay flakelet-relay[1323]: {"timestamp":"2026-09-05T13:53:09.148202Z","level":"INFO","message":"deploy accepted","job":"38796a7ba508eadfe82a1cd5def000bc","caller":"x509:email:admin@example.org","targets":"[\"agent/other\"]","target":"flakelet_relay::relay::api"}923agent # [26028.122413] agent flakelet[3127]: other: using prebuilt artifact /nix/store/hmr990n0b4v6rpzrcpyyw738r9xi7z95-flakelet-other-v1924agent # [26028.123245] agent flakelet[3127]: other: up to date925agent # [26028.125742] agent systemd[1]: flakelet-relay-job-other.service: Deactivated successfully.926agent/other | other: using prebuilt artifact /nix/store/hmr990n0b4v6rpzrcpyyw738r9xi7z95-flakelet-other-v1927agent/other | other: up to date928agent/other | flakelet-relay-job-other.service: Deactivated successfully.929» agent/other: unchanged (generation 1)930» ok931client: (finished: must succeed: push --relay https://relay:7443 --cert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin.pem --key /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/admin-key.pem deploy --id live1 agent/other, in 0.68 seconds)932client: waiting for success: grep -q live1 /tmp/ev.out933client: (finished: waiting for success: grep -q live1 /tmp/ev.out, in 0.01 seconds)934client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -X POST -o /dev/null https://relay:7443/ui/logout935client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -X POST -o /dev/null https://relay:7443/ui/logout, in 0.02 seconds)936client: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -o /dev/null -w '%{http_code}' https://relay:7443/ui/ | grep -q 303937client: (finished: must succeed: curl -sS --cacert /nix/store/ydql3jgw8j7khsad67k605wlnywsd36n-flakelet-relay-test-certs/ca.pem -b /tmp/jar -c /tmp/jar -o /dev/null -w '%{http_code}' https://relay:7443/ui/ | grep -q 303, in 0.02 seconds)938(finished: subtest: dashboard login via authorization code flow, in 1.76 seconds)939(finished: run the VM test script, in 72.66 seconds)940test script finished in 72.69s941cleanup942kill NspawnMachine (pid 52)943kill NspawnMachine (pid 53)944kill NspawnMachine (pid 54)945Container agent terminated by signal KILL.946Container client terminated by signal KILL.947(finished: cleanup, in 0.29 seconds)948additionally exposed symbols:949 agent, client, relay,950 vlan1,951 start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh952» job 28c41f55de8fbf889a1fb1390998ab13 via relay 0.1.0 (agents: agent 0.1.0)953» wave 0954agent/app | Starting flakelet update app (via relay)...955agent/app | Started flakelet update app (via relay).956agent/app | app: using prebuilt artifact /nix/store/6ili1vxjlag9d7dy0bxrbxk6bpi5qh9p-flakelet-app-v2957agent/app | app: activating generation 2958agent/app | app: updated to generation 2959agent/app | flakelet-relay-job-app.service: Deactivated successfully.960» agent/app: updated (generation 2)961» ok962963» job f87dfdc5eea039e895dcfca8b5858cb3 via relay 0.1.0 (agents: agent 0.1.0)964» wave 0965agent/app | Starting flakelet update app (via relay)...966agent/app | Started flakelet update app (via relay).967agent/app | app: using prebuilt artifact /nix/store/8282rnbvyk847q4l4zby3zwcq3jpzrvw-flakelet-app-broken968agent/app | app: activating generation 4969agent/app | app: deploy failed, rolled back: systemctl start app.service failed:970agent/app | failed units: app.service. See journalctl -u app.service971agent/app | flakelet-relay-job-app.service: Main process exited, code=exited, status=1/FAILURE972agent/app | flakelet-relay-job-app.service: Failed with result 'exit-code'.973» agent/app: rolled-back (generation 3)974agent/app │ Starting app v1...975agent/app │ Started app v1.976agent/app │ Stopping app v1...977agent/app │ app.service: Deactivated successfully.978agent/app │ Stopped app v1.979agent/app │ Starting app v2...980agent/app │ Started app v2.981agent/app │ Stopping app v2...982agent/app │ app.service: Deactivated successfully.983agent/app │ Stopped app v2.984agent/app │ Starting app v1...985agent/app │ Started app v1.986agent/app │ Stopping app v1...987agent/app │ app.service: Deactivated successfully.988agent/app │ Stopped app v1.989agent/app │ Starting app broken...990agent/app │ app.service: Unable to locate executable '/nonexistent': No such file or directory991agent/app │ app.service: Failed at step EXEC spawning /nonexistent: No such file or directory992agent/app │ app.service: Main process exited, code=exited, status=203/EXEC993agent/app │ app.service: Failed with result 'exit-code'.994agent/app │ Failed to start app broken.995agent/app │ Starting app v1...996agent/app │ Started app v1.997» skipped: agent/other998» failed9991000» job bafc88b7481da6cfb80e607b52d767a2 via relay 0.1.0 (agents: agent 0.1.0)1001» wave 01002agent/app | Starting flakelet update app (via relay)...1003agent/app | Started flakelet update app (via relay).1004agent/app | app: using prebuilt artifact /nix/store/c67jj8kx3m50nyj874aqmdqf21w5iznd-flakelet-app-slow1005agent/app | app: activating generation 51006agent/app | app: updated to generation 51007agent/app | flakelet-relay-job-app.service: Deactivated successfully.1008» agent/app: updated (generation 5)1009» ok10101011» job 0f8f9b615b9769ad361f9248d5178ffc via relay 0.1.0 (agents: agent 0.1.0)1012» wave 01013agent/app | Starting flakelet update app (via relay)...1014agent/app | Started flakelet update app (via relay).1015agent/app | app: using prebuilt artifact /nix/store/ln47rsd5km8a04hd5zlkz4q1v352zqh3-flakelet-app-slow21016agent/app | app: activating generation 61017agent/app | app: updated to generation 61018agent/app | flakelet-relay-job-app.service: Deactivated successfully.1019» agent/app: updated (generation 6)1020» ok10211022» job 5dad6dd01d3f16195c12718bb8f9daca via relay 0.1.0 (agents: agent 0.1.0)1023» wave 01024agent/app | Starting flakelet update app (via relay)...1025agent/app | Started flakelet update app (via relay).1026agent/app | app: using prebuilt artifact /nix/store/c67jj8kx3m50nyj874aqmdqf21w5iznd-flakelet-app-slow1027agent/app | app: activating generation 71028flakelet-push: stream: error reading a body from connection, resuming job 64eaa2f0490a242851cc2126cfcfba051029flakelet-push: https://relay:7443: connect relay:7443: Connection refused (os error 111), retrying in 1s1030flakelet-push: https://relay:7443: connect relay:7443: Connection refused (os error 111), retrying in 2s1031flakelet-push: https://relay:7443: 404 Not Found: unknown_job: no connected agent knows this job, retrying in 4s1032» job 5dad6dd01d3f16195c12718bb8f9daca via relay 0.1.0 (agents: agent 0.1.0)1033» wave 01034agent/app | app: updated to generation 71035agent/app | flakelet-relay-job-app.service: Deactivated successfully.1036» agent/app: updated (generation 7)1037» ok103810391788616383 hist1 x509:email:admin@example.org agent/other:unchanged10401788616374 64eaa2f0490a242851cc2126cfcfba05 x509:email:admin@example.org agent/app:updated10411788616365 b07d8a56e43682da436678b42f0a4ed3 x509:email:admin@example.org agent/app:updated10421788616355 a48f992c3ad156d87a7a6b8ad1ebd3b0 x509:email:admin@example.org agent/app:updated10431788616354 ccac5cd168b326a9b67f2fc4ba03503e x509:email:admin@example.org agent/other:unchanged10441788616342 ae3c84322c64e55b0a09fe6248ffbed1 x509:email:admin@example.org agent/app:updated10451788616336 35314142dbe2bbf5471814dd046f60ca x509:email:admin@example.org agent/app:rolled-back10461788616336 c63083c51d81048430921bdbb7512746 oidc:mock:groups:wheel agent/other:unchanged10471788616335 c7e81ae0c5b527d56d9c52a701fa6a4d oidc:mock:groups:wheel agent/other:unchanged10481788616331 1ac62d781b2532f457f8ecdb26037589 oidc:mock:groups:wheel agent/other:unchanged10491788616328 6d328817c9b241a4be34bc0abda72c0b oidc:mock:repo:github:example/app:ref:refs/heads/main agent/app:updated10501788616325 874b5d4294370244aaff1d11a1827b8b x509:email:admin@example.org agent/app:updated10511052Container relay terminated by signal KILL.