tribuchet: building on eliza Machine state will be reset. To keep it, pass --keep-machine-state start all VLans (finished: start all VLans, in 0.00 seconds) Test will time out and terminate in 3600.0 seconds run the VM test script server: waiting for unit niks3.service server: waiting for the VM to finish booting server: starting vm server # Disk image does not exist, creating the virtualisation disk image... server: QEMU running (pid 45) server # Formatting '/build/vm-state-server/tmp.UPJkuLgvjh', fmt=raw size=1073741824 server # mke2fs 1.47.4 (6-Mar-2025) server # Discarding device blocks: 0/262144 done server # Creating filesystem with 262144 4k blocks and 65536 inodes server # Filesystem UUID: abbe4b13-edc9-4369-987d-3ab3cce3e567 server # Superblock backups stored on blocks: server # 32768, 98304, 163840, 229376 server # server # Allocating group tables: 0/8 done server # Writing inode tables: 0/8 done server # Creating journal (8192 blocks): done server # Writing superblocks and filesystem accounting information: 0/8 done server # server # Virtualisation disk image created. server # Starting virtiofs daemons... server # [2026-10-08T21:39:28Z WARN virtiofsd::passthrough] Failed to open file handle for the root node: Operation not permitted (os error 1) server # [2026-10-08T21:39:28Z WARN virtiofsd::passthrough] File handles do not appear safe to use, disabling file handles altogether server # [2026-10-08T21:39:28Z INFO virtiofsd] Waiting for vhost-user socket connection... server # [2026-10-08T21:39:28Z WARN virtiofsd::passthrough] Failed to open file handle for the root node: Operation not permitted (os error 1) server # [2026-10-08T21:39:28Z WARN virtiofsd::passthrough] File handles do not appear safe to use, disabling file handles altogether server # [2026-10-08T21:39:28Z INFO virtiofsd] Waiting for vhost-user socket connection... server # [2026-10-08T21:39:28Z WARN virtiofsd::passthrough] Failed to open file handle for the root node: Operation not permitted (os error 1) server # [2026-10-08T21:39:28Z WARN virtiofsd::passthrough] File handles do not appear safe to use, disabling file handles altogether server # [2026-10-08T21:39:28Z INFO virtiofsd] Waiting for vhost-user socket connection... server # [2026-10-08T21:39:28Z INFO virtiofsd] Client connected, servicing requests server # [2026-10-08T21:39:28Z INFO virtiofsd] Client connected, servicing requests server # [2026-10-08T21:39:28Z INFO virtiofsd] Client connected, servicing requests server # [ 0.000000] Booting Linux on physical CPU 0x0000000000 [0xc00fac40] server # [ 0.000000] Linux version 6.18.54 (nixbld@localhost) (gcc (GCC) 16.2.0, GNU ld (GNU Binutils) 2.46) #1-NixOS SMP PREEMPT Fri Sep 25 14:35:54 UTC 2026 server # [ 0.000000] KASLR enabled server # [ 0.000000] random: crng init done server # [ 0.000000] Machine model: linux,dummy-virt server # [ 0.000000] efi: UEFI not found. server # [ 0.000000] OF: reserved mem: Reserved memory: No reserved-memory node in the DT server # [ 0.000000] NUMA: Faking a node at [mem 0x0000000040000000-0x000000007fffffff] server # [ 0.000000] NODE_DATA(0) allocated [mem 0x7fded700-0x7fdf0e7f] server # [ 0.000000] Zone ranges: server # [ 0.000000] DMA [mem 0x0000000040000000-0x000000007fffffff] server # [ 0.000000] DMA32 empty server # [ 0.000000] Normal empty server # [ 0.000000] Device empty server # [ 0.000000] Movable zone start for each node server # [ 0.000000] Early memory node ranges server # [ 0.000000] node 0: [mem 0x0000000040000000-0x000000007fffffff] server # [ 0.000000] Initmem setup node 0 [mem 0x0000000040000000-0x000000007fffffff] server # [ 0.000000] cma: Reserved 32 MiB at 0x000000007cc00000 server # [ 0.000000] psci: probing for conduit method from DT. server # [ 0.000000] psci: PSCIv1.3 detected in firmware. server # [ 0.000000] psci: Using standard PSCI v0.2 function IDs server # [ 0.000000] psci: Trusted OS migration not required server # [ 0.000000] psci: SMC Calling Convention v1.1 server # [ 0.000000] smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003) server # [ 0.000000] percpu: Embedded 76 pages/cpu s186776 r8192 d116328 u311296 server # [ 0.000000] Detected PIPT I-cache on CPU0 server # [ 0.000000] CPU features: detected: Address authentication (architected QARMA5 algorithm) server # [ 0.000000] CPU features: detected: GICv3 CPU interface server # [ 0.000000] CPU features: detected: Spectre-v4 server # [ 0.000000] CPU features: detected: Spectre-BHB server # [ 0.000000] CPU features: detected: AmpereOne erratum AC03_CPU_38 server # [ 0.000000] CPU features: detected: AmpereOne erratum AC04_CPU_23 server # [ 0.000000] alternatives: applying boot alternatives server # [ 0.000000] Kernel command line: console=ttyAMA0 console=tty0 panic=1 boot.panic_on_fail clocksource=acpi_pm root=fstab loglevel=7 net.ifnames=0 lsm=landlock,yama,bpf init=/nix/store/d545c07q2cxh5ga9b8ak906ckf75kvy7-nixos-system-server-test/init regInfo=/nix/.ro-store/mf28kq9whyljravaixlkscc4wckl0qpg-closure-info/registration console=ttyAMA0,115200n8 console=tty0 server # [ 0.000000] Unknown kernel command line parameters "regInfo=/nix/.ro-store/mf28kq9whyljravaixlkscc4wckl0qpg-closure-info/registration", will be passed to user space. server # [ 0.000000] printk: log buffer data + meta data: 131072 + 458752 = 589824 bytes server # [ 0.000000] Dentry cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) server # [ 0.000000] Inode-cache hash table entries: 65536 (order: 7, 524288 bytes, linear) server # [ 0.000000] software IO TLB: SWIOTLB bounce buffer size adjusted to 1MB server # [ 0.000000] software IO TLB: area num 1. server # [ 0.000000] software IO TLB: mapped [mem 0x000000007ca80000-0x000000007cb80000] (1MB) server # [ 0.000000] Fallback order for Node 0: 0 server # [ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 262144 server # [ 0.000000] Policy zone: DMA server # [ 0.000000] mem auto-init: stack:all(zero), heap alloc:on, heap free:off server # [ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=1, Nodes=1 server # [ 0.000000] allocated 2097152 bytes of page_ext server # [ 0.000000] ftrace: allocating 75026 entries in 294 pages server # [ 0.000000] ftrace: allocated 294 pages with 4 groups server # [ 0.000000] rcu: Hierarchical RCU implementation. server # [ 0.000000] rcu: RCU event tracing is enabled. server # [ 0.000000] rcu: RCU restricting CPUs from NR_CPUS=384 to nr_cpu_ids=1. server # [ 0.000000] Trampoline variant of Tasks RCU enabled. server # [ 0.000000] Rude variant of Tasks RCU enabled. server # [ 0.000000] Tracing variant of Tasks RCU enabled. server # [ 0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 25 jiffies. server # [ 0.000000] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=1 server # [ 0.000000] RCU Tasks: Setting shift to 0 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=1. server # [ 0.000000] RCU Tasks Rude: Setting shift to 0 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=1. server # [ 0.000000] RCU Tasks Trace: Setting shift to 0 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=1. server # [ 0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 server # [ 0.000000] GICv3: 256 SPIs implemented server # [ 0.000000] GICv3: 0 Extended SPIs implemented server # [ 0.000000] Root IRQ handler: gic_handle_irq server # [ 0.000000] GICv3: GICv3 features: 16 PPIs, DirectLPI server # [ 0.000000] GICv3: GICD_CTLR.DS=1, SCR_EL3.FIQ=0 server # [ 0.000000] GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000 server # [ 0.000000] ITS [mem 0x08080000-0x0809ffff] server # [ 0.000000] ITS@0x0000000008080000: allocated 8192 Devices @44cf0000 (indirect, esz 8, psz 64K, shr 1) server # [ 0.000000] ITS@0x0000000008080000: allocated 8192 Interrupt Collections @44d00000 (flat, esz 8, psz 64K, shr 1) server # [ 0.000000] GICv3: using LPI property table @0x0000000044d10000 server # [ 0.000000] GICv3: CPU0: using allocated LPI pending table @0x0000000044d20000 server # [ 0.000000] rcu: srcu_init: Setting srcu_struct sizes based on contention. server # [ 0.000000] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns server # [ 0.000000] arch_timer: cp15 timer running at 1000.00MHz (virt). server # [ 0.000000] clocksource: arch_sys_counter: mask: 0x1fffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns server # [ 0.000000] sched_clock: 61 bits at 1000MHz, resolution 1ns, wraps every 4398046511103ns server # [ 0.000033] arm-pv: using stolen time PV server # [ 0.000520] kfence: initialized - using 2097152 bytes for 255 objects at 0x(____ptrval____)-0x(____ptrval____) server # [ 0.000688] Console: colour dummy device 80x25 server # [ 0.000697] printk: legacy console [tty0] enabled server # [ 0.000892] Calibrating delay loop (skipped), value calculated using timer frequency.. 2000.00 BogoMIPS (lpj=4000000) server # [ 0.000899] pid_max: default: 32768 minimum: 301 server # [ 0.000972] LSM: initializing lsm=capability,landlock,yama,bpf,ima server # [ 0.001176] landlock: Up and running. server # [ 0.001180] Yama: becoming mindful. server # [ 0.001751] LSM support for eBPF active server # [ 0.001884] Mount-cache hash table entries: 2048 (order: 2, 16384 bytes, linear) server # [ 0.001905] Mountpoint-cache hash table entries: 2048 (order: 2, 16384 bytes, linear) server # [ 0.003856] rcu: Hierarchical SRCU implementation. server # [ 0.003862] rcu: Max phase no-delay instances is 1000. server # [ 0.005138] fsl-mc MSI: its@8080000 domain created server # [ 0.005263] EFI services will not be available. server # [ 0.005385] smp: Bringing up secondary CPUs ... server # [ 0.005394] smp: Brought up 1 node, 1 CPU server # [ 0.005397] SMP: Total of 1 processors activated. server # [ 0.005400] CPU: All CPU(s) started at EL1 server # [ 0.005410] CPU features: detected: Branch Target Identification server # [ 0.005418] CPU features: detected: ARMv8.4 Translation Table Level server # [ 0.005421] CPU features: detected: Instruction cache invalidation not required for I/D coherence server # [ 0.005425] CPU features: detected: Data cache clean to the PoU not required for I/D coherence server # [ 0.005429] CPU features: detected: Common not Private translations server # [ 0.005432] CPU features: detected: CRC32 instructions server # [ 0.005435] CPU features: detected: Data cache clean to Point of Deep Persistence server # [ 0.005439] CPU features: detected: Data cache clean to Point of Persistence server # [ 0.005442] CPU features: detected: Data independent timing control (DIT) server # [ 0.005445] CPU features: detected: E0PD server # [ 0.005448] CPU features: detected: Enhanced Counter Virtualization server # [ 0.005451] CPU features: detected: Enhanced Counter Virtualization (CNTPOFF) server # [ 0.005454] CPU features: detected: Enhanced Virtualization Traps server # [ 0.005457] CPU features: detected: Fine Grained Traps server # [ 0.005460] CPU features: detected: Generic authentication (architected QARMA5 algorithm) server # [ 0.005465] CPU features: detected: RCpc load-acquire (LDAPR) server # [ 0.005468] CPU features: detected: LSE atomic instructions server # [ 0.005471] CPU features: detected: Privileged Access Never server # [ 0.005473] CPU features: detected: PMUv3 server # [ 0.005476] CPU features: detected: RAS Extension Support server # [ 0.005479] CPU features: detected: RASv1p1 Extension Support server # [ 0.005482] CPU features: detected: Random Number Generator server # [ 0.005485] CPU features: detected: Speculation barrier (SB) server # [ 0.005487] CPU features: detected: Stage-2 Force Write-Back server # [ 0.005490] CPU features: detected: TLB range maintenance instructions server # [ 0.005494] CPU features: detected: Speculative Store Bypassing Safe (SSBS) server # [ 0.005533] alternatives: applying system-wide alternatives server # [ 0.008509] CPU features: detected: BBM Level 2 without TLB conflict abort server # [ 0.008687] Memory: 893112K/1048576K available (24512K kernel code, 7094K rwdata, 26568K rodata, 4736K init, 1106K bss, 114128K reserved, 32768K cma-reserved) server # [ 0.009022] devtmpfs: initialized server # [ 0.010779] posixtimers hash table entries: 512 (order: 1, 8192 bytes, linear) server # [ 0.010802] futex hash table entries: 256 (16384 bytes on 1 NUMA nodes, total 16 KiB, linear). server # [ 0.011048] 2G module region forced by RANDOMIZE_MODULE_REGION_FULL server # [ 0.011053] 0 pages in range for non-PLT usage server # [ 0.011054] 508208 pages in range for PLT usage server # [ 0.011184] pinctrl core: initialized pinctrl subsystem server # [ 0.012006] DMI not present or invalid. server # [ 0.015528] NET: Registered PF_NETLINK/PF_ROUTE protocol family server # [ 0.017957] DMA: preallocated 128 KiB GFP_KERNEL pool for atomic allocations server # [ 0.018092] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations server # [ 0.018250] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations server # [ 0.018273] audit: initializing netlink subsys (disabled) server # [ 0.018887] thermal_sys: Registered thermal governor 'fair_share' server # [ 0.018889] thermal_sys: Registered thermal governor 'bang_bang' server # [ 0.018893] thermal_sys: Registered thermal governor 'step_wise' server # [ 0.018896] thermal_sys: Registered thermal governor 'user_space' server # [ 0.018898] thermal_sys: Registered thermal governor 'power_allocator' server # [ 0.018936] audit: type=2000 audit(0.016:1): state=initialized audit_enabled=0 res=1 server # [ 0.018945] cpuidle: using governor ladder server # [ 0.018952] cpuidle: using governor menu server # [ 0.019172] hw-breakpoint: found 16 breakpoint and 4 watchpoint registers. server # [ 0.019187] ASID allocator initialised with 65536 entries server # [ 0.020530] Serial: AMBA PL011 UART driver server # [ 0.026365] 9000000.pl011: ttyAMA0 at MMIO 0x9000000 (irq = 13, base_baud = 0) is a PL011 rev1 server # [ 0.026534] printk: console [ttyAMA0] enabled server # [ 0.158051] HugeTLB: registered 1.00 GiB page size, pre-allocated 0 pages server # [ 0.158060] HugeTLB: 0 KiB vmemmap can be freed for a 1.00 GiB page server # [ 0.158064] HugeTLB: registered 32.0 MiB page size, pre-allocated 0 pages server # [ 0.158066] HugeTLB: 0 KiB vmemmap can be freed for a 32.0 MiB page server # [ 0.158069] HugeTLB: registered 2.00 MiB page size, pre-allocated 0 pages server # [ 0.158072] HugeTLB: 0 KiB vmemmap can be freed for a 2.00 MiB page server # [ 0.158075] HugeTLB: registered 64.0 KiB page size, pre-allocated 0 pages server # [ 0.158078] HugeTLB: 0 KiB vmemmap can be freed for a 64.0 KiB page server # [ 0.159298] fbcon: Taking over console server # [ 0.159308] ACPI: Interpreter disabled. server # [ 0.169158] iommu: Default domain type: Translated server # [ 0.169163] iommu: DMA domain TLB invalidation policy: strict mode server # [ 0.169562] SCSI subsystem initialized server # [ 0.171731] usbcore: registered new interface driver usbfs server # [ 0.171761] usbcore: registered new interface driver hub server # [ 0.171778] usbcore: registered new device driver usb server # [ 0.172063] pps_core: LinuxPPS API ver. 1 registered server # [ 0.172067] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti server # [ 0.172076] PTP clock support registered server # [ 0.172111] EDAC MC: Ver: 3.0.0 server # [ 0.178617] scmi_core: SCMI protocol bus registered server # [ 0.179028] FPGA manager framework server # [ 0.179588] vgaarb: loaded server # [ 0.182137] clocksource: Switched to clocksource arch_sys_counter server # [ 0.189923] VFS: Disk quotas dquot_6.6.0 server # [ 0.189959] VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) server # [ 0.193470] netfs: FS-Cache loaded server # [ 0.193596] pnp: PnP ACPI: disabled server # [ 0.198174] NET: Registered PF_INET protocol family server # [ 0.198341] IP idents hash table entries: 16384 (order: 5, 131072 bytes, linear) server # [ 0.227474] tcp_listen_portaddr_hash hash table entries: 512 (order: 1, 8192 bytes, linear) server # [ 0.227503] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) server # [ 0.227526] TCP established hash table entries: 8192 (order: 4, 65536 bytes, linear) server # [ 0.227567] TCP bind hash table entries: 8192 (order: 6, 262144 bytes, linear) server # [ 0.227641] TCP: Hash tables configured (established 8192 bind 8192) server # [ 0.227719] MPTCP token hash table entries: 1024 (order: 3, 24576 bytes, linear) server # [ 0.227747] UDP hash table entries: 512 (order: 3, 32768 bytes, linear) server # [ 0.227793] UDP-Lite hash table entries: 512 (order: 3, 32768 bytes, linear) server # [ 0.235662] NET: Registered PF_UNIX/PF_LOCAL protocol family server # [ 0.235681] NET: Registered PF_XDP protocol family server # [ 0.235697] PCI: CLS 0 bytes, default 64 server # [ 0.235938] Trying to unpack rootfs image as initramfs... server # [ 0.246526] kvm [1]: HYP mode not available server # [ 0.332540] Initialise system trusted keyrings server # [ 0.332680] workingset: timestamp_bits=42 max_order=18 bucket_order=0 server # [ 0.333166] squashfs: version 4.0 (2009/01/31) Phillip Lougher server # [ 0.333216] 9p: Installing v9fs 9p2000 file system support server # [ 0.361232] Key type asymmetric registered server # [ 0.361250] Asymmetric key parser 'x509' registered server # [ 0.361320] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 242) server # [ 0.361475] io scheduler mq-deadline registered server # [ 0.361480] io scheduler kyber registered server # [ 0.374252] pl061_gpio 9030000.pl061: PL061 GPIO chip registered server # [ 0.376681] ledtrig-cpu: registered to indicate activity on CPUs server # [ 0.377077] pci-host-generic 4010000000.pcie: host bridge /pcie@10000000 ranges: server # [ 0.377092] pci-host-generic 4010000000.pcie: IO 0x003eff0000..0x003effffff -> 0x0000000000 server # [ 0.377102] pci-host-generic 4010000000.pcie: MEM 0x0010000000..0x003efeffff -> 0x0010000000 server # [ 0.377108] pci-host-generic 4010000000.pcie: MEM 0x8000000000..0xffffffffff -> 0x8000000000 server # [ 0.377127] pci-host-generic 4010000000.pcie: Memory resource size exceeds max for 32 bits server # [ 0.377147] pci-host-generic 4010000000.pcie: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff] server # [ 0.377221] pci-host-generic 4010000000.pcie: PCI host bridge to bus 0000:00 server # [ 0.377227] pci_bus 0000:00: root bus resource [bus 00-ff] server # [ 0.377231] pci_bus 0000:00: root bus resource [io 0x0000-0xffff] server # [ 0.377235] pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff] server # [ 0.377238] pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff] server # [ 0.377323] pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 conventional PCI endpoint server # [ 0.377766] pci 0000:00:01.0: [1af4:1000] type 00 class 0x020000 conventional PCI endpoint server # [ 0.377954] pci 0000:00:01.0: BAR 0 [io 0x0000-0x001f] server # [ 0.377965] pci 0000:00:01.0: BAR 1 [mem 0x00000000-0x00000fff] server # [ 0.377992] pci 0000:00:01.0: BAR 4 [mem 0x00000000-0x00003fff 64bit pref] server # [ 0.378004] pci 0000:00:01.0: ROM [mem 0x00000000-0x0003ffff pref] server # [ 0.378490] pci 0000:00:02.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint server # [ 0.378676] pci 0000:00:02.0: BAR 0 [io 0x0000-0x001f] server # [ 0.378688] pci 0000:00:02.0: BAR 1 [mem 0x00000000-0x00000fff] server # [ 0.378713] pci 0000:00:02.0: BAR 4 [mem 0x00000000-0x00003fff 64bit pref] server # [ 0.379244] pci 0000:00:03.0: [1af4:1001] type 00 class 0x010000 conventional PCI endpoint server # [ 0.379429] pci 0000:00:03.0: BAR 0 [io 0x0000-0x007f] server # [ 0.379441] pci 0000:00:03.0: BAR 1 [mem 0x00000000-0x00000fff] server # [ 0.379466] pci 0000:00:03.0: BAR 4 [mem 0x00000000-0x00003fff 64bit pref] server # [ 0.412045] pci 0000:00:04.0: [1af4:1000] type 00 class 0x020000 conventional PCI endpoint server # [ 0.412246] pci 0000:00:04.0: BAR 0 [io 0x0000-0x001f] server # [ 0.412258] pci 0000:00:04.0: BAR 1 [mem 0x00000000-0x00000fff] server # [ 0.412284] pci 0000:00:04.0: BAR 4 [mem 0x00000000-0x00003fff 64bit pref] server # [ 0.412296] pci 0000:00:04.0: ROM [mem 0x00000000-0x0003ffff pref] server # [ 0.412795] pci 0000:00:05.0: [1af4:1050] type 00 class 0x038000 conventional PCI endpoint server # [ 0.412987] pci 0000:00:05.0: BAR 1 [mem 0x00000000-0x00000fff] server # [ 0.413013] pci 0000:00:05.0: BAR 4 [mem 0x00000000-0x00003fff 64bit pref] server # [ 0.413483] pci 0000:00:06.0: [1af4:1052] type 00 class 0x090000 conventional PCI endpoint server # [ 0.413674] pci 0000:00:06.0: BAR 1 [mem 0x00000000-0x00000fff] server # [ 0.413699] pci 0000:00:06.0: BAR 4 [mem 0x00000000-0x00003fff 64bit pref] server # [ 0.414097] pci 0000:00:07.0: [8086:24cd] type 00 class 0x0c0320 conventional PCI endpoint server # [ 0.414283] pci 0000:00:07.0: BAR 0 [mem 0x00000000-0x00000fff] server # [ 0.414564] pci 0000:00:08.0: [1af4:105a] type 00 class 0x018000 conventional PCI endpoint server # [ 0.414756] pci 0000:00:08.0: BAR 1 [mem 0x00000000-0x00000fff] server # [ 0.414782] pci 0000:00:08.0: BAR 4 [mem 0x00000000-0x00003fff 64bit pref] server # [ 0.415260] pci 0000:00:09.0: [1af4:105a] type 00 class 0x018000 conventional PCI endpoint server # [ 0.415449] pci 0000:00:09.0: BAR 1 [mem 0x00000000-0x00000fff] server # [ 0.415475] pci 0000:00:09.0: BAR 4 [mem 0x00000000-0x00003fff 64bit pref] server # [ 0.432805] pci 0000:00:0a.0: [1af4:105a] type 00 class 0x018000 conventional PCI endpoint server # [ 0.432989] pci 0000:00:0a.0: BAR 1 [mem 0x00000000-0x00000fff] server # [ 0.433015] pci 0000:00:0a.0: BAR 4 [mem 0x00000000-0x00003fff 64bit pref] server # [ 0.433481] pci 0000:00:0b.0: [1af4:1003] type 00 class 0x078000 conventional PCI endpoint server # [ 0.433742] pci 0000:00:0b.0: BAR 0 [io 0x0000-0x003f] server # [ 0.433754] pci 0000:00:0b.0: BAR 1 [mem 0x00000000-0x00000fff] server # [ 0.433780] pci 0000:00:0b.0: BAR 4 [mem 0x00000000-0x00003fff 64bit pref] server # [ 0.434250] pci 0000:00:0c.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint server # [ 0.434435] pci 0000:00:0c.0: BAR 0 [io 0x0000-0x001f] server # [ 0.434447] pci 0000:00:0c.0: BAR 1 [mem 0x00000000-0x00000fff] server # [ 0.434472] pci 0000:00:0c.0: BAR 4 [mem 0x00000000-0x00003fff 64bit pref] server # [ 0.435080] pci 0000:00:01.0: ROM [mem 0x10000000-0x1003ffff pref]: assigned server # [ 0.435086] pci 0000:00:04.0: ROM [mem 0x10040000-0x1007ffff pref]: assigned server # [ 0.435090] pci 0000:00:01.0: BAR 4 [mem 0x8000000000-0x8000003fff 64bit pref]: assigned server # [ 0.435134] pci 0000:00:02.0: BAR 4 [mem 0x8000004000-0x8000007fff 64bit pref]: assigned server # [ 0.435178] pci 0000:00:03.0: BAR 4 [mem 0x8000008000-0x800000bfff 64bit pref]: assigned server # [ 0.435223] pci 0000:00:04.0: BAR 4 [mem 0x800000c000-0x800000ffff 64bit pref]: assigned server # [ 0.435266] pci 0000:00:05.0: BAR 4 [mem 0x8000010000-0x8000013fff 64bit pref]: assigned server # [ 0.435309] pci 0000:00:06.0: BAR 4 [mem 0x8000014000-0x8000017fff 64bit pref]: assigned server # [ 0.435353] pci 0000:00:08.0: BAR 4 [mem 0x8000018000-0x800001bfff 64bit pref]: assigned server # [ 0.435396] pci 0000:00:09.0: BAR 4 [mem 0x800001c000-0x800001ffff 64bit pref]: assigned server # [ 0.435439] pci 0000:00:0a.0: BAR 4 [mem 0x8000020000-0x8000023fff 64bit pref]: assigned server # [ 0.435482] pci 0000:00:0b.0: BAR 4 [mem 0x8000024000-0x8000027fff 64bit pref]: assigned server # [ 0.435549] pci 0000:00:0c.0: BAR 4 [mem 0x8000028000-0x800002bfff 64bit pref]: assigned server # [ 0.435591] pci 0000:00:01.0: BAR 1 [mem 0x10080000-0x10080fff]: assigned server # [ 0.435608] pci 0000:00:02.0: BAR 1 [mem 0x10081000-0x10081fff]: assigned server # [ 0.435626] pci 0000:00:03.0: BAR 1 [mem 0x10082000-0x10082fff]: assigned server # [ 0.435643] pci 0000:00:04.0: BAR 1 [mem 0x10083000-0x10083fff]: assigned server # [ 0.435660] pci 0000:00:05.0: BAR 1 [mem 0x10084000-0x10084fff]: assigned server # [ 0.435678] pci 0000:00:06.0: BAR 1 [mem 0x10085000-0x10085fff]: assigned server # [ 0.435695] pci 0000:00:07.0: BAR 0 [mem 0x10086000-0x10086fff]: assigned server # [ 0.435713] pci 0000:00:08.0: BAR 1 [mem 0x10087000-0x10087fff]: assigned server # [ 0.435730] pci 0000:00:09.0: BAR 1 [mem 0x10088000-0x10088fff]: assigned server # [ 0.435751] pci 0000:00:0a.0: BAR 1 [mem 0x10089000-0x10089fff]: assigned server # [ 0.435769] pci 0000:00:0b.0: BAR 1 [mem 0x1008a000-0x1008afff]: assigned server # [ 0.435787] pci 0000:00:0c.0: BAR 1 [mem 0x1008b000-0x1008bfff]: assigned server # [ 0.435805] pci 0000:00:03.0: BAR 0 [io 0x1000-0x107f]: assigned server # [ 0.435822] pci 0000:00:0b.0: BAR 0 [io 0x1080-0x10bf]: assigned server # [ 0.475875] pci 0000:00:01.0: BAR 0 [io 0x10c0-0x10df]: assigned server # [ 0.475938] pci 0000:00:02.0: BAR 0 [io 0x10e0-0x10ff]: assigned server # [ 0.475957] pci 0000:00:04.0: BAR 0 [io 0x1100-0x111f]: assigned server # [ 0.475976] pci 0000:00:0c.0: BAR 0 [io 0x1120-0x113f]: assigned server # [ 0.476002] pci_bus 0000:00: resource 4 [io 0x0000-0xffff] server # [ 0.476007] pci_bus 0000:00: resource 5 [mem 0x10000000-0x3efeffff] server # [ 0.476010] pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff] server # [ 0.476874] pci 0000:00:07.0: enabling device (0000 -> 0002) server # [ 0.509812] virtio-pci 0000:00:01.0: enabling device (0000 -> 0003) server # [ 0.511986] virtio-pci 0000:00:02.0: enabling device (0000 -> 0003) server # [ 0.513789] virtio-pci 0000:00:03.0: enabling device (0000 -> 0003) server # [ 0.515490] virtio-pci 0000:00:04.0: enabling device (0000 -> 0003) server # [ 0.517311] virtio-pci 0000:00:05.0: enabling device (0000 -> 0002) server # [ 0.519152] virtio-pci 0000:00:06.0: enabling device (0000 -> 0002) server # [ 0.540978] virtio-pci 0000:00:08.0: enabling device (0000 -> 0002) server # [ 0.542746] virtio-pci 0000:00:09.0: enabling device (0000 -> 0002) server # [ 0.546251] virtio-pci 0000:00:0a.0: enabling device (0000 -> 0002) server # [ 0.548970] virtio-pci 0000:00:0b.0: enabling device (0000 -> 0003) server # [ 0.551000] virtio-pci 0000:00:0c.0: enabling device (0000 -> 0003) server # [ 0.569099] Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled server # [ 0.570986] msm_serial: driver initialized server # [ 0.571122] SuperH (H)SCI(F) driver initialized server # [ 0.571180] STM32 USART driver initialized server # [ 0.604749] loop: module loaded server # [ 0.604921] virtio_blk virtio2: 1/0/0 default/read/poll queues server # [ 0.605669] virtio_blk virtio2: [vda] 2097152 512-byte logical blocks (1.07 GB/1.00 GiB) server # [ 0.612476] megasas: 07.734.00.00-rc1 server # [ 0.613205] physmap-flash 0.flash: physmap platform flash device: [mem 0x00000000-0x03ffffff] server # [ 0.615177] 0.flash: Found 2 x16 devices at 0x0 in 32-bit bank. Manufacturer ID 0x000000 Chip ID 0x000000 server # [ 0.615194] Intel/Sharp Extended Query Table at 0x0031 server # [ 0.628860] Using buffer write method server # [ 0.628899] physmap-flash 0.flash: physmap platform flash device: [mem 0x04000000-0x07ffffff] server # [ 0.630627] 0.flash: Found 2 x16 devices at 0x0 in 32-bit bank. Manufacturer ID 0x000000 Chip ID 0x000000 server # [ 0.630683] Intel/Sharp Extended Query Table at 0x0031 server # [ 0.635978] Using buffer write method server # [ 0.635995] Concatenating MTD devices: server # [ 0.635998] (0): "0.flash" server # [ 0.636000] (1): "0.flash" server # [ 0.636002] into device "0.flash" server # [ 0.901960] Freeing initrd memory: 26948K server # [ 0.908272] tun: Universal TUN/TAP device driver, 1.6 server # [ 0.911412] thunder_xcv, ver 1.0 server # [ 0.911443] thunder_bgx, ver 1.0 server # [ 0.911462] nicpf, ver 1.0 server # [ 0.914058] e1000: Intel(R) PRO/1000 Network Driver server # [ 0.914063] e1000: Copyright (c) 1999-2006 Intel Corporation. server # [ 0.914087] e1000e: Intel(R) PRO/1000 Network Driver server # [ 0.914094] e1000e: Copyright(c) 1999 - 2015 Intel Corporation. server # [ 0.914122] igb: Intel(R) Gigabit Ethernet Network Driver server # [ 0.914125] igb: Copyright (c) 2007-2014 Intel Corporation. server # [ 0.914146] igbvf: Intel(R) Gigabit Virtual Function Network Driver server # [ 0.914150] igbvf: Copyright (c) 2009 - 2012 Intel Corporation. server # [ 0.914291] sky2: driver version 1.30 server # [ 0.922951] ehci-pci 0000:00:07.0: EHCI Host Controller server # [ 0.922976] ehci-pci 0000:00:07.0: new USB bus registered, assigned bus number 1 server # [ 0.923177] ehci-pci 0000:00:07.0: irq 16, io mem 0x10086000 server # [ 0.923517] usbcore: registered new interface driver usb-storage server # [ 0.923635] usbcore: registered new interface driver usbserial_generic server # [ 0.923647] usbserial: USB Serial support registered for generic server # [ 0.929151] hv_vmbus: registering driver hyperv_keyboard server # [ 0.930079] rtc-pl031 9010000.pl031: registered as rtc0 server # [ 0.930101] rtc-pl031 9010000.pl031: setting system clock to 2026-10-08T21:39:30 UTC (1791495570) server # [ 0.930438] i2c_dev: i2c /dev entries driver server # [ 0.933873] sdhci: Secure Digital Host Controller Interface driver server # [ 0.933889] sdhci: Copyright(c) Pierre Ossman server # [ 0.934185] Synopsys Designware Multimedia Card Interface Driver server # [ 0.934578] sdhci-pltfm: SDHCI platform and OF driver helper server # [ 0.935881] ehci-pci 0000:00:07.0: USB 2.0 started, EHCI 1.00 server # [ 0.936197] hub 1-0:1.0: USB hub found server # [ 0.936218] hub 1-0:1.0: 6 ports detected server # [ 0.944812] hid: raw HID events driver (C) Jiri Kosina server # [ 0.945078] usbcore: registered new interface driver usbhid server # [ 0.945082] usbhid: USB HID core driver server # [ 0.985201] hw perfevents: enabled with armv8_pmuv3 PMU driver, 11 (0,800003ff) counters available server # [ 0.986933] drop_monitor: Initializing network drop monitor service server # [ 0.987081] NET: Registered PF_INET6 protocol family server # [ 0.987609] Segment Routing with IPv6 server # [ 0.987621] In-situ OAM (IOAM) with IPv6 server # [ 0.987646] NET: Registered PF_PACKET protocol family server # [ 0.987700] 9pnet: Installing 9P2000 support server # [ 0.987739] Key type dns_resolver registered server # [ 0.999159] registered taskstats version 1 server # [ 0.999308] Loading compiled-in X.509 certificates server # [ 1.007821] Demotion targets for Node 0: null server # [ 1.007961] Key type .fscrypt registered server # [ 1.007965] Key type fscrypt-provisioning registered server # [ 1.008059] ima: No TPM chip found, activating TPM-bypass! server # [ 1.008076] ima: Allocated hash algorithm: sha1 server # [ 1.008119] ima: No architecture policies found server # [ 1.012731] input: gpio-keys as /devices/platform/gpio-keys/input/input0 server # [ 1.030682] clk: Disabling unused clocks server # [ 1.030699] PM: genpd: Disabling unused power domains server # [ 1.034919] Freeing unused kernel memory: 4736K server # [ 1.035123] Run /init as init process server # [ 1.050163] systemd[1]: Successfully made /usr/ read-only. server # [ 1.203881] usb 1-1: new high-speed USB device number 2 using ehci-pci server # [ 1.353535] input: QEMU QEMU USB Keyboard as /devices/platform/4010000000.pcie/pci0000:00/0000:00:07.0/usb1/1-1/1-1:1.0/0003:0627:0001.0001/input/input1 server # [ 1.386947] systemd[1]: systemd 261.3 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) server # [ 1.386973] systemd[1]: Detected virtualization qemu. server # [ 1.387015] systemd[1]: Detected architecture arm64. server # [ 1.387024] systemd[1]: Running in initrd. server # [ 1.387514] systemd[1]: Initializing machine ID from random generator. server # [ 1.387724] systemd[1]: Hostname set to . server # [ 1.452062] hid-generic 0003:0627:0001.0001: input,hidraw0: USB HID v1.11 Keyboard [QEMU QEMU USB Keyboard] on usb-0000:00:07.0-1/input0 server # [ 1.519588] systemd[1]: bpf-restrict-fs: LSM BPF program attached server # [ 1.571881] usb 1-2: new high-speed USB device number 3 using ehci-pci server # [ 1.574711] systemd[1]: Queued start job for default target Initrd Default Target. server # [ 1.580012] systemd[1]: Created slice Slice /system/modprobe. server # [ 1.580178] systemd[1]: Started Dispatch Password Requests to Console Directory Watch. server # [ 1.580206] systemd[1]: Expecting device /dev/disk/by-label/nixos... server # [ 1.580231] systemd[1]: Reached target Path Units. server # [ 1.580246] systemd[1]: Reached target Slice Units. server # [ 1.580263] systemd[1]: Reached target Swaps. server # [ 1.580281] systemd[1]: Reached target Timer Units. server # [ 1.580402] systemd[1]: Listening on D-Bus System Message Bus Socket. server # [ 1.580544] systemd[1]: Listening on Journal Socket (/dev/log). server # [ 1.580667] systemd[1]: Listening on Journal Sockets. server # [ 1.580778] systemd[1]: Listening on udev Control Socket. server # [ 1.580868] systemd[1]: Listening on udev Kernel Socket. server # [ 1.580886] systemd[1]: Reached target Socket Units. server # [ 1.582113] systemd[1]: Starting Create List of Static Device Nodes... server # [ 1.582167] systemd[1]: Load Kernel Module configfs skipped, unmet condition check ConditionKernelModuleLoaded=!configfs server # [ 1.599627] systemd[1]: Mounting Kernel Configuration File System... server # [ 1.620022] systemd[1]: Starting Journal Service... server # [ 1.630652] systemd[1]: Starting Load Kernel Modules... server # [ 1.630743] systemd[1]: Early TPM SRK Setup skipped, unmet condition check ConditionSecurity=measured-os server # [ 1.636407] systemd[1]: Starting Coldplug All udev Devices... server # [ 1.648947] systemd[1]: Finished Create List of Static Device Nodes. server # [ 1.649855] systemd[1]: Mounted Kernel Configuration File System. server # [ 1.661244] systemd[1]: Starting Create Static Device Nodes in /dev gracefully... server # [ 1.672954] systemd-journald[71]: Collecting audit messages is disabled. server # [ 1.716614] systemd[1]: Finished Create Static Device Nodes in /dev gracefully. server # [ 1.718258] systemd[1]: Starting Create Static Device Nodes in /dev... server # [ 1.730020] device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. server # [ 1.736445] input: QEMU QEMU USB Tablet as /devices/platform/4010000000.pcie/pci0000:00/0000:00:07.0/usb1/1-2/1-2:1.0/0003:0627:0001.0002/input/input2 server # [ 1.736597] hid-generic 0003:0627:0001.0002: input,hidraw1: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:07.0-2/input0 server # [ 1.747909] device-mapper: ioctl: 4.50.0-ioctl (2025-04-28) initialised: dm-devel@lists.linux.dev server # [ 1.766593] [drm] pci: virtio-gpu-pci detected at 0000:00:05.0 server # [ 1.766841] [drm] features: -virgl +edid -resource_blob -host_visible server # [ 1.766844] [drm] features: -context_init server # [ 1.767594] [drm] number of scanouts: 1 server # [ 1.767605] [drm] number of cap sets: 0 server # [ 1.779653] virtio-pci 0000:00:05.0: [drm] Registered 1 planes with drm panic server # [ 1.779666] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:05.0 on minor 0 server # [ 1.792022] systemd[1]: Finished Create Static Device Nodes in /dev. server # [ 1.792225] systemd[1]: Reached target Preparation for Local File Systems. server # [ 1.792254] systemd[1]: Reached target Local File Systems. server # [ 1.798582] systemd[1]: Starting Rule-based Manager for Device Events and Files... server # [ 1.816119] Console: switching to colour frame buffer device 160x50 server # [ 1.836402] virtio-pci 0000:00:05.0: [drm] fb0: virtio_gpudrmfb frame buffer device server # [ 1.848163] systemd[1]: Started Journal Service. server # [ 1.841614] systemd-modules-load[72]: Inserted module 'dm_mod' server # [ 1.842909] systemd-modules-load[72]: Module 'virtio_balloon' is built in server # [ 1.848939] systemd-modules-load[72]: Module 'virtio_console' is built in server # [ 1.856310] systemd-modules-load[72]: Inserted module 'virtio_gpu' server # [ 1.860327] systemd-modules-load[72]: Module 'virtio_rng' is built in server # [ 1.864309] systemd[1]: Finished Load Kernel Modules. server # [ 1.868276] systemd[1]: Starting Apply Kernel Variables... server # [ 1.870268] systemd[1]: Starting Create System Files and Directories... server # [ 1.884101] systemd-udevd[78]: Using default interface naming scheme 'v261'. server # [ 1.917459] systemd[1]: Finished Apply Kernel Variables. server # [ 1.921070] systemd[1]: Finished Create System Files and Directories. server # [ 1.938351] systemd[1]: Started Rule-based Manager for Device Events and Files. server # [ 2.002288] systemd[1]: Starting Virtual Console Setup... server # [ 2.076517] systemd-vconsole-setup[100]: Configuration of first virtual console was skipped, ignoring remaining ones. server # [ 2.084152] systemd[1]: Finished Virtual Console Setup. server # [ 2.707922] systemd[1]: Finished Coldplug All udev Devices. server # [ 2.709314] systemd[1]: Reached target System Initialization. server # [ 2.712424] systemd[1]: Reached target Basic System. server # [ 2.855484] (udev-worker)[95]: eth1: Config file /etc/systemd/network/40-eth1.link is applied to device based on potentially unpredictable interface name. server # [ 2.879085] (udev-worker)[89]: Network interface NamePolicy= disabled on kernel command line. server # [ 2.893984] (udev-worker)[95]: Network interface NamePolicy= disabled on kernel command line. server # [ 2.947846] systemd[1]: Found device /dev/disk/by-label/nixos. server # [ 2.952943] systemd[1]: Reached target Initrd Root Device. server # [ 2.956863] systemd[1]: Starting File System Check on /dev/disk/by-label/nixos... server # [ 3.008846] systemd-fsck[109]: nixos: clean, 12/65536 files, 13019/262144 blocks server # [ 3.014880] systemd[1]: Finished File System Check on /dev/disk/by-label/nixos. server # [ 3.021753] systemd[1]: Mounting /sysroot... server # [ 3.070756] EXT4-fs (vda): mounted filesystem abbe4b13-edc9-4369-987d-3ab3cce3e567 r/w with ordered data mode. Quota mode: none. server # [ 3.059507] systemd[1]: Mounted /sysroot. server # [ 3.062140] systemd[1]: Reached target Initrd Root File System. server # [ 3.072136] systemd[1]: Starting Mountpoints Configured in the Real Root... server # [ 3.096344] systemd-sysroot-fstab-check[117]: /sysroot should be mounted in the initrd, will request daemon-reload. server # [ 3.103877] systemd[1]: Reload requested from client PID 117 ('systemd-sysroot') (unit initrd-parse-etc.service)... server # [ 3.107604] systemd[1]: Reloading... server # [ 3.319969] systemd[1]: Reloading finished in 213 ms. server # [ 3.355531] systemd-sysroot-fstab-check[117]: Requesting initrd-fs.target/start/replace... server # [ 3.359687] systemd-sysroot-fstab-check[117]: Requesting swap.target/start/replace... server # [ 3.363727] systemd[1]: initrd-parse-etc.service: Deactivated successfully. server # [ 3.366489] systemd[1]: Finished Mountpoints Configured in the Real Root. server # [ 3.368667] systemd[1]: initrd-parse-etc.service: Triggering OnSuccess= dependencies. server # [ 3.626438] systemd[1]: Mounting /sysroot/nix/.ro-store... server # [ 3.644112] systemd[1]: Mounting /sysroot/nix/.rw-store... server # [ 3.646409] systemd[1]: Mounting /sysroot/run... server # [ 3.666018] systemd[1]: Mounting /sysroot/tmp/shared... server # [ 3.676723] systemd[1]: Mounting /sysroot/tmp/xchg... server # [ 3.723810] systemd[1]: Mounted /sysroot/nix/.rw-store. server # [ 3.755055] systemd[1]: Starting rw-sysroot-nix-store.service... server # [ 3.758848] systemd[1]: Mounted /sysroot/run. server # [ 3.783951] fuse: init (API version 7.45) server # [ 3.798041] virtiofs virtio6: discovered new tag: nix-store server # [ 3.798927] virtiofs virtio6: virtio_fs_setup_dax: No cache capability server # [ 3.813532] virtiofs virtio7: discovered new tag: shared server # [ 3.814293] virtiofs virtio7: virtio_fs_setup_dax: No cache capability server # [ 3.820754] virtiofs virtio8: discovered new tag: xchg server # [ 3.821509] virtiofs virtio8: virtio_fs_setup_dax: No cache capability server # [ 3.816744] systemd[1]: Mounted /sysroot/tmp/shared. server # [ 3.824719] systemd[1]: Mounted /sysroot/tmp/xchg. server # [ 3.828785] systemd[1]: Mounted /sysroot/nix/.ro-store. server # [ 3.829673] systemd[1]: rw-sysroot-nix-store.service: Deactivated successfully. server # [ 3.833017] systemd[1]: Finished rw-sysroot-nix-store.service. server # [ 4.229195] (udev-worker)[92]: mtd0ro: Failed to find and pin callout binary "/nix/store/8w0qabyr98chcmr4y9hh6h6l26albldx-systemd-261.3/lib/udev/mtd_probe": No such file or directory server # [ 4.236653] (udev-worker)[92]: mtd0ro: /etc/udev/rules.d/75-probe_mtd.rules:5 IMPORT{program}="mtd_probe $devnode": Failed to execute "mtd_probe /dev/mtd0ro", ignoring: No such file or directory server # [ 4.264544] systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. server # [ 4.266193] systemd[1]: Stopped Virtual Console Setup. server # [ 4.269199] systemd[1]: Stopping Virtual Console Setup... server # [ 4.276089] systemd[1]: Starting Virtual Console Setup... server # [ 4.290223] systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. server # [ 4.291773] systemd[1]: Stopped Virtual Console Setup. server # [ 4.296256] systemd[1]: Starting Virtual Console Setup... server # [ 4.321266] systemd-vconsole-setup[155]: Configuration of first virtual console was skipped, ignoring remaining ones. server # [ 4.324581] systemd[1]: Finished Virtual Console Setup. server # [ 4.625739] systemd[1]: Mounting /sysroot/nix/store... server # [ 4.665311] systemd[1]: Mounted /sysroot/nix/store. server # [ 4.667683] systemd[1]: Reached target Initrd File Systems. server # [ 4.671689] systemd[1]: Starting Find NixOS closure... server # [ 4.680668] systemd[1]: Starting Create Volatile Files and Directories in the Real Root... server # [ 4.718851] systemd[1]: Finished Create Volatile Files and Directories in the Real Root. server # [ 4.723957] systemd[1]: sysroot-run-credentials-systemd\x2dtmpfiles\x2dsetup\x2dsysroot.service.mount: Deactivated successfully. server # [ 4.735739] systemd[1]: Finished Find NixOS closure. server # [ 4.737651] systemd[1]: Reached target Initrd Default Target. server # [ 4.740770] systemd[1]: Starting Cleaning Up and Shutting Down Daemons... server # [ 4.759745] systemd[1]: Stopped target Initrd Default Target. server # [ 4.761857] systemd[1]: Stopped target Basic System. server # [ 4.763037] systemd[1]: Stopped target Initrd Root Device. server # [ 4.767549] systemd[1]: Stopped target Path Units. server # [ 4.768502] systemd[1]: systemd-ask-password-console.path: Deactivated successfully. server # [ 4.769704] systemd[1]: Stopped Dispatch Password Requests to Console Directory Watch. server # [ 4.772226] systemd[1]: Stopped target Slice Units. server # [ 4.774300] systemd[1]: Stopped target Socket Units. server # [ 4.779801] systemd[1]: Stopped target System Initialization. server # [ 4.780930] systemd[1]: Stopped target Swaps. server # [ 4.781672] systemd[1]: Stopped target Timer Units. server # [ 4.782478] systemd[1]: dbus.socket: Deactivated successfully. server # [ 4.783477] systemd[1]: Closed D-Bus System Message Bus Socket. server # [ 4.792236] systemd[1]: initrd-find-nixos-closure.service: Deactivated successfully. server # [ 4.793406] systemd[1]: Stopped Find NixOS closure. server # [ 4.794289] systemd[1]: Starting rw-sysroot-nix-store.service... server # [ 4.795184] systemd[1]: systemd-sysctl.service: Deactivated successfully. server # [ 4.808317] systemd[1]: Stopped Apply Kernel Variables. server # [ 4.809198] systemd[1]: systemd-modules-load.service: Deactivated successfully. server # [ 4.810368] systemd[1]: Stopped Load Kernel Modules. server # [ 4.811135] systemd[1]: systemd-tmpfiles-setup-sysroot.service: Deactivated successfully. server # [ 4.816147] systemd[1]: Stopped Create Volatile Files and Directories in the Real Root. server # [ 4.817420] systemd[1]: systemd-tmpfiles-setup.service: Deactivated successfully. server # [ 4.818514] systemd[1]: Stopped Create System Files and Directories. server # [ 4.819448] systemd[1]: Stopped target Local File Systems. server # [ 4.828603] systemd[1]: Stopped target Preparation for Local File Systems. server # [ 4.829776] systemd[1]: systemd-udev-trigger.service: Deactivated successfully. server # [ 4.830843] systemd[1]: Stopped Coldplug All udev Devices. server # [ 4.833130] systemd[1]: Stopping Rule-based Manager for Device Events and Files... server # [ 4.834366] systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. server # [ 4.835472] systemd[1]: Stopped Virtual Console Setup. server # [ 4.836374] systemd[1]: initrd-cleanup.service: Deactivated successfully. server # [ 4.837356] systemd[1]: Finished Cleaning Up and Shutting Down Daemons. server # [ 4.838318] systemd[1]: rw-sysroot-nix-store.service: Deactivated successfully. server # [ 4.839378] systemd[1]: Finished rw-sysroot-nix-store.service. server # [ 4.844244] systemd[1]: systemd-udevd.service: Deactivated successfully. server # [ 4.845296] systemd[1]: Stopped Rule-based Manager for Device Events and Files. server # [ 4.848366] systemd[1]: systemd-udevd.service: Consumed 1.418s CPU time over 3.039s wall clock time, 22.7M memory peak. server # [ 4.852420] systemd[1]: systemd-udevd-control.socket: Deactivated successfully. server # [ 4.853548] systemd[1]: Closed udev Control Socket. server # [ 4.856106] systemd[1]: Starting Cleanup udev Database... server # [ 4.856955] systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. server # [ 4.860108] systemd[1]: Stopped Create Static Device Nodes in /dev. server # [ 4.861056] systemd[1]: systemd-tmpfiles-setup-dev-early.service: Deactivated successfully. server # [ 4.864349] systemd[1]: Stopped Create Static Device Nodes in /dev gracefully. server # [ 4.868312] systemd[1]: kmod-static-nodes.service: Deactivated successfully. server # [ 4.872251] systemd[1]: Stopped Create List of Static Device Nodes. server # [ 4.895788] systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. server # [ 4.898783] systemd[1]: Finished Cleanup udev Database. server # [ 4.900441] systemd[1]: Reached target Switch Root. server # [ 4.904133] systemd[1]: Starting NixOS Activation... server # [ 4.984720] initrd-nixos-activation-start[178]: booting system configuration /nix/store/d545c07q2cxh5ga9b8ak906ckf75kvy7-nixos-system-server-test server # [ 5.015257] initrd-nixos-activation-start[178]: running activation script... server # [ 5.252378] initrd-nixos-activation-start[201]: setting up /etc... server # [ 5.367941] systemd[1]: initrd-nixos-activation.service: Deactivated successfully. server # [ 5.370916] systemd[1]: Finished NixOS Activation. server # [ 5.372183] systemd[1]: Starting Switch Root... server # [ 5.395451] systemd[1]: Switching root. server # [ 5.577093] systemd-journald[71]: Received SIGTERM from PID 1 (systemd). server # [ 6.307865] systemd[1]: systemd 261.3 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE) server # [ 6.307930] systemd[1]: Detected virtualization qemu. server # [ 6.307990] systemd[1]: Detected architecture arm64. server # [ 6.308110] systemd[1]: Detected first boot. server # [ 6.310512] systemd[1]: Initializing machine ID from random generator. server # [ 6.442473] systemd[1]: bpf-restrict-fs: LSM BPF program attached server # [ 6.583503] systemd[1]: Applying preset policy. server # [ 6.781372] systemd[1]: Populated /etc with preset unit settings. server # [ 6.993059] systemd[1]: initrd-switch-root.service: Deactivated successfully. server # [ 6.993452] systemd[1]: Stopped initrd-switch-root.service. server # [ 6.998136] systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. server # [ 6.999420] systemd[1]: Created slice Slice /system/getty. server # [ 7.003074] systemd[1]: Created slice User and Session Slice. server # [ 7.003642] systemd[1]: Started Dispatch Password Requests to Console Directory Watch. server # [ 7.006459] systemd[1]: Started Forward Password Requests to Wall Directory Watch. server # [ 7.006951] systemd[1]: Expecting device /dev/hvc0... server # [ 7.007388] systemd[1]: Expecting device /dev/ttyAMA0... server # [ 7.010581] systemd[1]: Reached target Local Encrypted Volumes. server # [ 7.011000] systemd[1]: Stopped target initrd-fs.target. server # [ 7.011494] systemd[1]: Stopped target initrd-root-fs.target. server # [ 7.014631] systemd[1]: Stopped target initrd-switch-root.target. server # [ 7.015094] systemd[1]: Reached target Virtual Machines and Containers. server # [ 7.015586] systemd[1]: Reached target Path Units. server # [ 7.018797] systemd[1]: Reached target Remote File Systems. server # [ 7.019170] systemd[1]: Reached target Slice Units. server # [ 7.019691] systemd[1]: Reached target Swaps. server # [ 7.024152] systemd[1]: Listening on Query the User Interactively for a Password. server # [ 7.026140] systemd[1]: Listening on Process Core Dump Socket. server # [ 7.027546] systemd[1]: Listening on Credential Encryption/Decryption. server # [ 7.031789] systemd[1]: Listening on Factory Reset Management. server # [ 7.033647] systemd[1]: Listening on Hostname Service Socket. server # [ 7.037439] systemd[1]: Starting Journal Log Access Socket... server # [ 7.038863] systemd[1]: Listening on Journal Audit Socket. server # [ 7.042595] systemd[1]: Listening on Console Output Muting Service Socket. server # [ 7.043301] systemd[1]: Listening on Userspace Out-Of-Memory (OOM) Killer Socket. server # [ 7.043794] systemd[1]: TPM PCR Measurements skipped, unmet condition check ConditionSecurity=measured-os server # [ 7.048060] systemd[1]: Make TPM PCR Policy skipped, unmet condition check ConditionSecurity=measured-uki server # [ 7.054204] systemd[1]: Listening on Disk Repartitioning Service Socket. server # [ 7.054737] systemd[1]: Listening on udev Control Socket. server # [ 7.055471] systemd[1]: Listening on udev Varlink Socket. server # [ 7.060961] systemd[1]: Mounting Huge Pages File System... server # [ 7.063806] systemd[1]: Mounting POSIX Message Queue File System... server # [ 7.077148] systemd[1]: Mounting Kernel Debug File System... server # [ 7.081053] systemd[1]: Mounting Kernel Trace File System... server # [ 7.101014] systemd[1]: Starting Create List of Static Device Nodes... server # [ 7.101539] systemd[1]: Load Kernel Module configfs skipped, unmet condition check ConditionKernelModuleLoaded=!configfs server # [ 7.116827] systemd[1]: Mounting Kernel Configuration File System... server # [ 7.117329] systemd[1]: Load Kernel Module drm skipped, unmet condition check ConditionKernelModuleLoaded=!drm server # [ 7.122689] systemd[1]: Load Kernel Module efi_pstore skipped, unmet condition check ConditionKernelModuleLoaded=!efi_pstore server # [ 7.127180] systemd[1]: Load Kernel Module fuse skipped, unmet condition check ConditionKernelModuleLoaded=!fuse server # [ 7.145799] systemd[1]: Mounting FUSE Control File System... server # [ 7.149150] systemd[1]: Clear Stale Hibernate Storage Info skipped, unmet condition check ConditionPathExists=/sys/firmware/efi/efivars/HibernateLocation-8cf2644b-4b0b-428f-9387-6d876050dc67 server # [ 7.186145] systemd[1]: Starting Journal Service... server # [ 7.206125] systemd[1]: Starting Load Kernel Modules... server # [ 7.234398] systemd[1]: Starting Userspace Out-Of-Memory (OOM) Killer... server # [ 7.253459] systemd[1]: Starting Remount Root and Kernel File Systems... server # [ 7.253851] systemd[1]: Early TPM SRK Setup skipped, unmet condition check ConditionSecurity=measured-os server # [ 7.271785] systemd[1]: Starting Coldplug All udev Devices... server # [ 7.275143] systemd[1]: Listening on Journal Log Access Socket. server # [ 7.275588] systemd[1]: Mounted Huge Pages File System. server # [ 7.286262] systemd[1]: Mounted POSIX Message Queue File System. server # [ 7.286771] systemd[1]: Mounted Kernel Debug File System. server # [ 7.287168] systemd[1]: Mounted Kernel Trace File System. server # [ 7.299344] systemd[1]: Finished Create List of Static Device Nodes. server # [ 7.304576] systemd[1]: Finished Load Kernel Modules. server # [ 7.324288] systemd-journald[271]: Collecting audit messages is enabled. server # [ 7.332303] systemd[1]: Starting Firewall... server # [ 7.324351] systemd[1]: Queued start job for default target Multi-User System. server # [ 7.325724] systemd[1]: systemd-journald.service: Deactivated successfully. server # [ 7.327008] systemd-modules-load[272]: Module 'atkbd' is built in server # [ 7.342371] systemd-modules-load[272]: Module 'loop' is built in server # [ 7.356179] systemd[1]: Starting Apply Kernel Variables... server # [ 7.384388] systemd[1]: Starting Create Static Device Nodes in /dev gracefully... server # [ 7.385839] systemd[1]: Started Journal Service. server # [ 7.377456] systemd-oomd[273]: No swap; memory pressure usage will be degraded server # [ 7.411175] EXT4-fs (vda): re-mounted abbe4b13-edc9-4369-987d-3ab3cce3e567. server # [ 7.406594] systemd[1]: Started Userspace Out-Of-Memory (OOM) Killer. server # [ 7.423220] systemd[1]: Mounted Kernel Configuration File System. server # [ 7.435080] systemd[1]: Finished Remount Root and Kernel File Systems. server # [ 7.475248] systemd[1]: Listening on Disk Image Download Service Socket. server # [ 7.493890] systemd[1]: Starting Flush Journal to Persistent Storage... server # [ 7.495042] systemd[1]: Platform Persistent Storage Archival skipped, unmet condition check ConditionDirectoryNotEmpty=/sys/fs/pstore server # [ 7.507412] systemd[1]: Starting Load/Save OS Random Seed... server # [ 7.514770] systemd[1]: TPM SRK Setup skipped, unmet condition check ConditionSecurity=measured-os server # [ 7.517144] systemd[1]: Mounted FUSE Control File System. server # [ 7.540155] systemd[1]: Finished Apply Kernel Variables. server # [ 7.558205] systemd[1]: Finished Create Static Device Nodes in /dev gracefully. server # [ 7.565308] systemd[1]: Starting Create Static Device Nodes in /dev... server # [ 7.604137] systemd-journald[271]: Received client request to flush runtime journal. server # [ 7.659754] systemd[1]: Finished Load/Save OS Random Seed. server # [ 7.663624] systemd[1]: Reached target First Boot Complete. server # [ 7.668697] systemd[1]: Finished Flush Journal to Persistent Storage. server # [ 7.737945] systemd[1]: Finished Create Static Device Nodes in /dev. server # [ 7.739150] systemd[1]: Reached target Preparation for Local File Systems. server # [ 7.744515] systemd[1]: Starting Rule-based Manager for Device Events and Files... server # [ 7.870422] systemd-udevd[310]: Using default interface naming scheme 'v261'. server # [ 7.992150] systemd[1]: Mounting /run/wrappers... server # [ 8.008384] systemd[1]: Started Rule-based Manager for Device Events and Files. server # [ 8.063291] systemd[1]: Mounted /run/wrappers. server # [ 8.068188] systemd[1]: Reached target Local File Systems. server # [ 8.078795] systemd[1]: Listening on Boot Loader Control Service Socket. server # [ 8.082020] systemd[1]: Starting register-nix-paths.service... server # [ 8.088212] systemd[1]: Starting Create SUID/SGID Wrappers... server # [ 8.089133] systemd[1]: Update Boot Loader Random Seed skipped, no trigger condition checks were met. server # [ 8.097028] systemd[1]: Starting Save Transient machine-id to Disk... server # [ 8.114527] systemd[1]: Starting Create System Files and Directories... server # [ 8.248700] systemd[1]: etc-machine\x2did.mount: Deactivated successfully. server # [ 8.257949] systemd[1]: Finished Save Transient machine-id to Disk. server # [ 8.339918] systemd[1]: Finished Create System Files and Directories. server # [ 8.349782] systemd[1]: Starting Rebuild Journal Catalog... server # [ 8.357890] systemd[1]: Starting Record System Boot/Shutdown in UTMP... server # [ 8.499338] systemd[1]: Finished Record System Boot/Shutdown in UTMP. server # [ 8.528159] systemd[1]: Finished Rebuild Journal Catalog. server # [ 8.541319] systemd[1]: Starting Update is Completed... server # [ 8.614527] systemd[1]: Finished Update is Completed. server # [ 9.250269] systemd[1]: Finished Coldplug All udev Devices. server # [ 9.313874] systemd[1]: suid-sgid-wrappers.service: Deactivated successfully. server # [ 9.316845] systemd[1]: Finished Create SUID/SGID Wrappers. server # [ 9.330446] systemd[1]: Load Kernel Module configfs skipped, unmet condition check ConditionKernelModuleLoaded=!configfs server # [ 9.344630] systemd[1]: Finished register-nix-paths.service. server # [ 9.345611] systemd[1]: Reached target System Initialization. server # [ 9.351499] systemd[1]: Started Discard unused filesystem blocks once a week. server # [ 9.356561] systemd[1]: Started niks3 garbage collection timer. server # [ 9.357554] systemd[1]: Started Daily Cleanup of Temporary Directories. server # [ 9.358555] systemd[1]: Reached target Timer Units. server # [ 9.359330] systemd[1]: Listening on D-Bus System Message Bus Socket. server # [ 9.368916] systemd[1]: Listening on niks3 server socket. server # [ 9.369798] systemd[1]: Listening on Nix Daemon Socket. server # [ 9.370608] systemd[1]: Listening on Virtual Machine and Container Registration Service Socket. server # [ 9.371846] systemd[1]: Reached target Socket Units. server # [ 9.382106] systemd[1]: Reached target Basic System. server # [ 9.382992] systemd[1]: Starting Import lastlog data into lastlog2 database... server # [ 9.390610] systemd[1]: Starting Name Service Cache Daemon (nsncd)... server # [ 9.391750] systemd[1]: Started openbao-dev.service. server # [ 9.400537] systemd[1]: Starting openbao-setup.service... server # [ 9.430783] systemd[1]: Starting Post-Boot Actions... server # [ 9.470178] systemd[1]: Started Reset console on configuration changes. server # [ 9.520538] systemd[1]: Starting resolvconf update... server # [ 9.609616] nsncd[456]: Oct 08 21:39:39.194 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket" server # [ 9.628765] systemd[1]: Starting D-Bus System Message Bus... server # [ 9.635135] systemd[1]: Load Kernel Module fuse skipped, unmet condition check ConditionKernelModuleLoaded=!fuse server # [ 9.647617] systemd[1]: Started Name Service Cache Daemon (nsncd). server # [ 9.688211] systemd[1]: Finished Post-Boot Actions. server # [ 9.689120] systemd[1]: Reached target Host and Network Name Lookups. server # [ 9.690060] systemd[1]: Reached target User and Group Name Lookups. server # [ 9.713972] systemd[1]: Starting User Login Management... server # [ 9.720990] systemd[1]: Finished Import lastlog data into lastlog2 database. server # [ 9.899022] systemd[1]: Condition check resulted in /dev/hvc0 being skipped. server # [ 9.963221] dbus-broker-launch[488]: Looking up NSS user entry for 'systemd-timesync'... server # [ 9.976042] dbus-broker-launch[488]: NSS returned no entry for 'systemd-timesync' server # [ 9.984625] dbus-broker-launch[488]: Invalid user-name in /nix/store/7f4fzspickmfarnam7pnh1mczs8kb36k-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync" server # [ 9.987055] systemd[1]: Condition check resulted in /dev/ttyAMA0 being skipped. server # [ 10.007042] systemd[1]: Started backdoor.service. server # [ 10.049230] systemd[1]: Started D-Bus System Message Bus. server # [ 10.061691] systemd-logind[495]: New seat seat0. server # [ 10.069214] systemd[1]: Started User Login Management. server # [ 10.080144] systemd[1]: Starting linger-users.service... server # [ 10.129909] dbus-broker-launch[488]: Ready server # [ 10.195101] systemd[1]: Stopped target Host and Network Name Lookups. server # [ 10.206923] systemd[1]: Stopping Host and Network Name Lookups... server # [ 10.207993] systemd[1]: Stopped target User and Group Name Lookups. server # [ 10.219331] systemd[1]: Stopping User and Group Name Lookups... server # [ 10.224738] systemd[1]: Stopping Name Service Cache Daemon (nsncd)... server # [ 10.225732] systemd[1]: nscd.service: Deactivated successfully. server # [ 10.226601] systemd[1]: Stopped Name Service Cache Daemon (nsncd). server # connecting to host... server # [ 10.240246] systemd[1]: linger-users.service: Deactivated successfully. server # [ 10.249244] systemd[1]: Finished linger-users.service. server: Guest shell says: b'Spawning backdoor root shell...\n' server # [ 10.298141] systemd[1]: Starting Name Service Cache Daemon (nsncd)... server: connected to guest root shell server: (connecting took 10.76 seconds) server: (finished: waiting for the VM to finish booting, in 11.08 seconds) server # [ 10.311708] systemd[1]: Finished Firewall. server # [ 10.453475] systemd[1]: Started Name Service Cache Daemon (nsncd). server # [ 10.462451] nsncd[577]: Oct 08 21:39:40.040 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket" server # [ 10.506737] systemd[1]: Reached target Host and Network Name Lookups. server # [ 10.515732] systemd[1]: Reached target User and Group Name Lookups. server # [ 10.533137] systemd[1]: Finished resolvconf update. server # [ 10.536612] systemd[1]: Reached target Preparation for Network. server # [ 10.553639] systemd[1]: Starting DHCP Client... server # [ 10.565880] systemd[1]: Starting Extra networking commands.... server # [ 10.582604] (udev-worker)[334]: eth1: Config file /etc/systemd/network/40-eth1.link is applied to device based on potentially unpredictable interface name. server # [ 10.610799] (udev-worker)[334]: Network interface NamePolicy= disabled on kernel command line. server # [ 10.659057] (udev-worker)[335]: Network interface NamePolicy= disabled on kernel command line. server # [ 10.998312] systemd[1]: Condition check resulted in Virtio network device being skipped. server # [ 11.004468] dhcpcd[618]: dhcpcd-10.3.2 starting server # [ 11.012944] systemd[1]: Starting Address configuration of eth1... server # [ 11.022257] dhcpcd[636]: dev: loaded udev server # [ 11.038570] bao[457]: 2026-10-08T21:39:40.623Z [INFO] proxy environment: http_proxy="" https_proxy="" no_proxy="" server # [ 11.056489] bao[457]: 2026-10-08T21:39:40.642Z [WARN] no `api_addr` value specified in config or in BAO_API_ADDR; falling back to detection if possible, but this value should be manually set server # [ 11.087122] bao[457]: 2026-10-08T21:39:40.671Z [INFO] core: Initializing version history cache for core server # [ 11.093926] bao[457]: ==> OpenBao server configuration: server # [ 11.094715] bao[457]: Api Address: http://127.0.0.1:8200 server # [ 11.095613] bao[457]: Cgo: enabled server # [ 11.123093] 8021q: 802.1Q VLAN Support v1.8 server # [ 11.109448] bao[457]: Cluster Address: https://127.0.0.1:8201 server # [ 11.110371] bao[457]: Environment Variables: HOME, INVOCATION_ID, IO_PRESSURE_WATCH, IO_PRESSURE_WRITE, JOURNAL_STREAM, LANG, LOCALE_ARCHIVE, LOGNAME, MEMORY_PRESSURE_WATCH, MEMORY_PRESSURE_WRITE, PATH, RUNTIME_DIRECTORY, STATE_DIRECTORY, SYSTEMD_EXEC_PID, TZDIR, USER server # [ 11.131505] bao[457]: Go Version: go1.27.1 server # [ 11.136437] bao[457]: Listener 1: tcp (addr: "127.0.0.1:8200", cluster address: "127.0.0.1:8201", max_request_duration: "1m30s", max_request_json_memory: "34078720", max_request_json_strings: "1000", max_request_size: "33554432", tls: "disabled") server # [ 11.139508] bao[457]: Log Level: server # [ 11.154186] bao[457]: Recovery Mode: false server # [ 11.160313] bao[457]: Storage: inmem server # [ 11.161088] bao[457]: Version: OpenBao v2.7.1, committed 1970-01-01T00:00:00Z server # [ 11.162247] bao[457]: Version Sha: refs/tags/v2.7.1 server # [ 11.163202] bao[457]: 2026-10-08T21:39:40.678Z [INFO] core: security barrier not initialized server # [ 11.178988] bao[457]: 2026-10-08T21:39:40.686Z [INFO] core: security barrier initialized: shares=1 threshold=1 server # [ 11.190813] bao[457]: 2026-10-08T21:39:40.686Z [INFO] core: post-unseal setup starting server # [ 11.198012] bao[457]: 2026-10-08T21:39:40.728Z [INFO] core: loaded wrapping token key server # [ 11.199191] bao[457]: 2026-10-08T21:39:40.733Z [INFO] core: successfully setup plugin catalog: plugin-directory="" server # [ 11.211428] bao[457]: 2026-10-08T21:39:40.745Z [INFO] core: reading transactional mount table server # [ 11.232626] 8021q: adding VLAN 0 to HW filter on device eth1 server # [ 11.223933] bao[457]: 2026-10-08T21:39:40.745Z [INFO] core: no mounts in transactional mount table; adding default mount table server # [ 11.231519] bao[457]: 2026-10-08T21:39:40.767Z [INFO] core: successfully mounted: type=cubbyhole version="v2.7.1+builtin.bao" path=cubbyhole/ namespace="ID: root. Path: " server # [ 11.248073] bao[457]: 2026-10-08T21:39:40.791Z [INFO] core: successfully mounted: type=system version="v2.7.1+builtin.bao" path=sys/ namespace="ID: root. Path: " server # [ 11.250044] bao[457]: 2026-10-08T21:39:40.806Z [INFO] core: successfully mounted: type=identity version="v2.7.1+builtin.bao" path=identity/ namespace="ID: root. Path: " server # [ 11.272972] bao[457]: 2026-10-08T21:39:40.807Z [INFO] core: reading transactional auth mount table server # [ 11.274305] bao[457]: 2026-10-08T21:39:40.807Z [INFO] core: no auth mounts in transactional auth mount table; adding default auth mount table server # [ 11.282720] bao[457]: 2026-10-08T21:39:40.814Z [INFO] core: successfully mounted: type=token version="v2.7.1+builtin.bao" path=token/ namespace="ID: root. Path: " server # [ 11.292170] bao[457]: 2026-10-08T21:39:40.814Z [INFO] rollback: Starting the rollback manager with 256 workers server # [ 11.293690] bao[457]: 2026-10-08T21:39:40.829Z [INFO] rollback: starting rollback manager server # [ 11.294793] bao[457]: 2026-10-08T21:39:40.830Z [INFO] core: restoring leases server # [ 11.310181] bao[457]: 2026-10-08T21:39:40.833Z [INFO] core: entities restored server # [ 11.311246] bao[457]: 2026-10-08T21:39:40.833Z [INFO] core: groups restored server # [ 11.319784] bao[457]: 2026-10-08T21:39:40.833Z [INFO] core: Recorded vault version: vault version=2.7.1 upgrade time="2026-10-08 21:39:40.83334222 +0000 UTC" commit date=1970-01-01T00:00:00Z server # [ 11.329814] bao[457]: 2026-10-08T21:39:40.858Z [INFO] expiration: lease restore complete server # [ 11.331063] bao[457]: 2026-10-08T21:39:40.864Z [INFO] core: post-unseal setup complete server # [ 11.344440] bao[457]: 2026-10-08T21:39:40.864Z [INFO] core: root token generated server # [ 11.345522] bao[457]: 2026-10-08T21:39:40.864Z [INFO] core: pre-seal teardown starting server # [ 11.346610] bao[457]: 2026-10-08T21:39:40.865Z [INFO] rollback: stopping rollback manager server # [ 11.347742] bao[457]: 2026-10-08T21:39:40.870Z [INFO] core: pre-seal teardown complete server # [ 11.360357] bao[457]: 2026-10-08T21:39:40.871Z [INFO] core.cluster-listener.tcp: starting listener: listener_address=127.0.0.1:8201 server # [ 11.361954] bao[457]: 2026-10-08T21:39:40.871Z [INFO] core.cluster-listener: serving cluster requests: cluster_listen_address=127.0.0.1:8201 server # [ 11.363691] bao[457]: 2026-10-08T21:39:40.871Z [INFO] core: post-unseal setup starting server # [ 11.382656] bao[457]: 2026-10-08T21:39:40.871Z [INFO] core: loaded wrapping token key server # [ 11.383822] bao[457]: 2026-10-08T21:39:40.871Z [INFO] core: successfully setup plugin catalog: plugin-directory="" server # [ 11.394168] bao[457]: 2026-10-08T21:39:40.871Z [INFO] core: reading transactional mount table server # [ 11.395385] bao[457]: 2026-10-08T21:39:40.872Z [INFO] core: successfully mounted: type=identity version="v2.7.1+builtin.bao" path=identity/ namespace="ID: root. Path: " server # [ 11.414048] cfg80211: Loading compiled-in X.509 certificates for regulatory database server # [ 11.408347] bao[457]: 2026-10-08T21:39:40.883Z [INFO] core: successfully mounted: type=system version="v2.7.1+builtin.bao" path=sys/ namespace="ID: root. Path: " server # [ 11.410292] bao[457]: 2026-10-08T21:39:40.883Z [INFO] core: successfully mounted: type=cubbyhole version="v2.7.1+builtin.bao" path=cubbyhole/ namespace="ID: root. Path: " server # [ 11.431259] bao[457]: 2026-10-08T21:39:40.884Z [INFO] core: reading transactional auth mount table server # [ 11.436045] bao[457]: 2026-10-08T21:39:40.884Z [INFO] core: successfully mounted: type=token version="v2.7.1+builtin.bao" path=token/ namespace="ID: root. Path: " server # [ 11.438015] bao[457]: 2026-10-08T21:39:40.885Z [INFO] rollback: Starting the rollback manager with 256 workers server # [ 11.439352] bao[457]: 2026-10-08T21:39:40.912Z [INFO] core: restoring leases server # [ 11.452638] bao[457]: 2026-10-08T21:39:40.936Z [INFO] expiration: lease restore complete server # [ 11.453786] bao[457]: 2026-10-08T21:39:40.937Z [INFO] rollback: starting rollback manager server # [ 11.454917] bao[457]: 2026-10-08T21:39:40.937Z [INFO] core: entities restored server # [ 11.455904] bao[457]: 2026-10-08T21:39:40.937Z [INFO] core: groups restored server # [ 11.470104] bao[457]: 2026-10-08T21:39:40.940Z [INFO] core: post-unseal setup complete server # [ 11.471280] bao[457]: 2026-10-08T21:39:40.940Z [INFO] core: vault is unsealed server # [ 11.475703] bao[457]: 2026-10-08T21:39:40.952Z [INFO] expiration: revoked lease: lease_id=auth/token/root/h843c7f254541e264964c4b9c6cb28b541dd7bddc4e85981365e89d94d4ad5655 server # [ 11.483199] network-addresses-eth1-start[634]: adding address 192.168.1.1/24... done server # [ 11.489066] network-addresses-eth1-start[634]: adding address 2001:db8:1::1/64... done server # [ 11.490496] systemd[1]: Finished Extra networking commands.. server # [ 11.491419] bao[457]: 2026-10-08T21:39:41.002Z [INFO] core: successful mount: namespace="" path=secret/ type=kv version="" server # [ 11.503561] bao[457]: 2026-10-08T21:39:41.002Z [INFO] beginning post-unseal configuration server # [ 11.507045] bao[457]: ==> OpenBao server started! server # [ 11.507757] bao[457]: 2026-10-08T21:39:41.011Z [INFO] secrets.kv.kv_af839ea9: collecting keys to upgrade server # [ 11.515304] bao[457]: 2026-10-08T21:39:41.011Z [INFO] secrets.kv.kv_af839ea9: done collecting keys: num_keys=1 server # [ 11.523623] bao[457]: 2026-10-08T21:39:41.011Z [INFO] secrets.kv.kv_af839ea9: upgrading keys finished server # [ 11.535177] systemd[1]: Reached target Network. server # [ 11.552259] Loaded X.509 cert 'sforshee: 00b28ddf47aef9cea7' server # [ 11.552767] Loaded X.509 cert 'wens: 61c038651aabdcf94bd0ac7ff06c7248db18c600' server # [ 11.543725] bao[457]: WARNING! dev mode is enabled! In this mode, OpenBao runs entirely in-memory server # [ 11.561115] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2 server # [ 11.561438] cfg80211: failed to load regulatory.db server # [ 11.558792] bao[457]: and starts unsealed with a single unseal key. The root token is already server # [ 11.565945] bao[457]: authenticated to the CLI, so you can immediately begin using OpenBao. server # [ 11.567130] bao[457]: You may need to set the following environment variables: server # [ 11.581768] bao[457]: $ export BAO_ADDR='http://127.0.0.1:8200' server # [ 11.582682] bao[457]: The unseal key and root token are displayed below in case you want to server # [ 11.583819] bao[457]: seal/unseal the Vault or re-authenticate. server # [ 11.599013] bao[457]: Unseal Key: y2l8NLYhCRop6Pul+kJFWdYOyfs100mUI45w8J+9wBo= server # [ 11.607607] bao[457]: Root Token: root server # [ 11.612162] bao[457]: Development mode should NOT be used in production installations! server # [ 11.623871] systemd[1]: Starting PostgreSQL Server... server # [ 11.627410] systemd[1]: Started RustFS S3-compatible object storage. server # [ 11.638068] systemd[1]: Starting Setup RustFS bucket... server # [ 11.639368] systemd-logind[495]: Watching system buttons on /dev/input/event0 (gpio-keys) server # [ 11.657216] systemd[1]: Starting Permit User Sessions... server # [ 11.658078] systemd[1]: Finished Address configuration of eth1. server # [ 11.671802] systemd[1]: Finished Permit User Sessions. server # [ 11.690766] systemd[1]: Started Getty on tty1. server # [ 11.691630] systemd[1]: Reached target Login Prompts. server # [ 11.778125] 8021q: adding VLAN 0 to HW filter on device eth0 server # [ 11.766018] dhcpcd[636]: eth0: waiting for carrier server # [ 11.771584] dhcpcd[636]: eth0: carrier acquired server # [ 11.800433] dhcpcd[636]: DUID 00:01:00:01:32:5a:ca:1d:52:54:00:12:34:56 server # [ 11.802135] dhcpcd[636]: eth0: IAID 00:12:34:56 server # [ 11.802806] dhcpcd[636]: eth0: adding address fe80::5054:ff:fe12:3456 server # [ 12.063104] postgresql-pre-start[729]: The files belonging to this database system will be owned by user "postgres". server # [ 12.068170] postgresql-pre-start[729]: This user must also own the server process. server # [ 12.089034] mousedev: PS/2 mouse device common for all mice server # [ 12.082659] postgresql-pre-start[729]: The database cluster will be initialized with locale "en_US.UTF-8". server # [ 12.084271] postgresql-pre-start[729]: The default database encoding has accordingly been set to "UTF8". server # [ 12.087916] postgresql-pre-start[729]: The default text search configuration will be set to "english". server # [ 12.094509] postgresql-pre-start[729]: Data page checksums are enabled. server # [ 12.103590] postgresql-pre-start[729]: fixing permissions on existing directory /var/lib/postgresql/18 ... ok server # [ 12.112348] postgresql-pre-start[729]: creating subdirectories ... ok server # [ 12.113302] postgresql-pre-start[729]: selecting dynamic shared memory implementation ... posix server # [ 12.397866] postgresql-pre-start[729]: selecting default "max_connections" ... 100 server # [ 12.423858] systemd-logind[495]: Watching system buttons on /dev/input/event1 (QEMU QEMU USB Keyboard) server # [ 12.687674] dhcpcd[636]: eth0: soliciting a DHCP lease server # [ 12.693129] dhcpcd[636]: eth0: offered 10.0.2.15 from 10.0.2.2 server # [ 12.700280] dhcpcd[636]: eth0: probing address 10.0.2.15/24 server # [ 12.716448] postgresql-pre-start[729]: selecting default "shared_buffers" ... 128MB server # [ 12.899625] bao[457]: 2026-10-08T21:39:42.484Z [INFO] core: successful mount: namespace="" path=transit/ type=transit version="" server # [ 12.906975] openbao-setup-start[754]: Success! Enabled the transit secrets engine at: transit/ server # [ 13.348260] openbao-setup-start[767]: Retrieving wrapping key. server # [ 14.350229] input: QEMU Virtio Keyboard as /devices/platform/4010000000.pcie/pci0000:00/0000:00:06.0/virtio5/input/input3 server # [ 14.513139] dhcpcd[636]: eth0: soliciting an IPv6 router server # [ 14.513272] dhcpcd[636]: eth0: Router Advertisement from fe80::2 server # [ 14.513318] dhcpcd[636]: eth0: adding address fec0::5054:ff:fe12:3456/64 server # [ 14.513361] dhcpcd[636]: eth0: adding route to fec0::/64 server # [ 14.513444] dhcpcd[636]: eth0: adding default route via fe80::2 server # [ 14.622776] openbao-setup-start[767]: Wrapping source key with ephemeral key. server # [ 14.630333] openbao-setup-start[767]: Encrypting ephemeral key with wrapping key. server # [ 14.631429] openbao-setup-start[767]: Submitting wrapped key. server # [ 14.655900] openbao-setup-start[767]: Success! server # [ 14.684866] systemd[1]: Finished openbao-setup.service. server # [ 14.869837] systemd[1]: Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. server # [ 14.880578] systemd[1]: Starting Virtual Console Setup... server # [ 14.900450] systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. server # [ 14.901631] systemd[1]: Stopped Virtual Console Setup. server # [ 14.905908] systemd[1]: Starting Virtual Console Setup... server # [ 15.008104] systemd-logind[495]: Watching system buttons on /dev/input/event3 (QEMU Virtio Keyboard) server # [ 15.219729] systemd-vconsole-setup[810]: Configuration of first virtual console was skipped, ignoring remaining ones. server # [ 15.223269] systemd[1]: Finished Virtual Console Setup. server # [ 15.519807] postgresql-pre-start[729]: selecting default time zone ... UTC server # [ 15.522533] postgresql-pre-start[729]: creating configuration files ... ok server # [ 15.742656] postgresql-pre-start[729]: running bootstrap script ... ok server # [ 16.265719] postgresql-pre-start[729]: performing post-bootstrap initialization ... ok server # [ 16.396159] postgresql-pre-start[729]: syncing data to disk ... ok server # [ 16.398372] postgresql-pre-start[729]: initdb: warning: enabling "trust" authentication for local connections server # [ 16.399715] postgresql-pre-start[729]: initdb: hint: You can change this by editing pg_hba.conf or using the option -A, or --auth-local and --auth-host, the next time you run initdb. server # [ 16.402071] postgresql-pre-start[729]: Success. You can now start the database server using: server # [ 16.403268] postgresql-pre-start[729]: pg_ctl -D /var/lib/postgresql/18 -l logfile start server # [ 16.502116] postgres[829]: [829] LOG: starting PostgreSQL 18.6 on aarch64-unknown-linux-gnu, compiled by clang version 21.1.8, 64-bit server # [ 16.506538] postgres[829]: [829] LOG: listening on IPv6 address "::1", port 5432 server # [ 16.508097] postgres[829]: [829] LOG: listening on IPv4 address "127.0.0.1", port 5432 server # [ 16.509939] postgres[829]: [829] LOG: listening on Unix socket "/run/postgresql/.s.PGSQL.5432" server # [ 16.529413] postgres[842]: [842] LOG: database system was shut down at 2026-10-08 21:39:45 GMT server # [ 16.537512] postgres[829]: [829] LOG: database system is ready to accept connections server # [ 16.540690] systemd[1]: Started PostgreSQL Server. server # [ 16.556111] systemd[1]: Starting PostgreSQL Setup Scripts... server # [ 16.786620] postgresql-setup-start[863]: CREATE DATABASE server # [ 16.823296] postgresql-setup-start[868]: CREATE ROLE server # [ 16.838068] postgresql-setup-start[870]: ALTER DATABASE server # [ 16.844194] systemd[1]: Finished PostgreSQL Setup Scripts. server # [ 16.846043] systemd[1]: Reached target PostgreSQL. server # [ 17.941360] dhcpcd[636]: eth0: leased 10.0.2.15 for 86400 seconds server # [ 17.941547] dhcpcd[636]: eth0: adding route to 10.0.2.0/24 server # [ 17.941656] dhcpcd[636]: eth0: adding default route via 10.0.2.2 server # [ 18.045615] systemd[1]: Started DHCP Client. server # [ 24.474579] rustfs-setup-start[999]: mb s3://niks3-test server # [ 24.487026] systemd[1]: Finished Setup RustFS bucket. server # [ 24.494978] systemd[1]: Starting niks3 server... server # [ 24.659279] niks3-server[1009]: 2026/10/08 21:39:54 INFO Configured external signer program=/nix/store/vjqln7qss9csxkck9qxiabirk1d4m9iy-niks3-openbao-signer/bin/niks3-openbao-signer server # [ 24.685892] niks3-server[1009]: 2026/10/08 21:39:54 INFO Read proxy enabled — serving cache objects from S3 server # [ 24.691911] niks3-server[1009]: 2026/10/08 21:39:54 INFO Using socket-activated listener address=0.0.0.0:5751 server # [ 24.695188] niks3-server[1009]: 2026/10/08 21:39:54 INFO systemd watchdog enabled interval=15s server # [ 24.696634] niks3-server[1009]: 2026/10/08 21:39:54 INFO Starting HTTP server address=0.0.0.0:5751 server # [ 24.698503] systemd[1]: Started niks3 server. server # [ 24.699304] systemd[1]: Reached target Multi-User System. server # [ 24.700977] systemd[1]: Startup finished in 1.024s (kernel) + 4.852s (initrd) + 18.814s (userspace) = 24.691s. server: (finished: waiting for unit niks3.service, in 25.91 seconds) server: waiting for TCP port 5751 on localhost server # Connection to localhost (127.0.0.1) 5751 port [tcp/*] succeeded! server: (finished: waiting for TCP port 5751 on localhost, in 0.04 seconds) server: must succeed: echo -n 'test-token-that-is-at-least-36-characters-long' > /tmp/auth-token server: (finished: must succeed: echo -n 'test-token-that-is-at-least-36-characters-long' > /tmp/auth-token, in 0.02 seconds) subtest: narinfos signed through OpenBao verify against the public key server: must succeed: nix-build -E 'derivation { name="signer-1"; system=builtins.currentSystem; builder="/bin/sh"; args=["-c" "echo signer-1 > $out"]; }' --no-out-link server # this derivation will be built: server # /nix/store/llf1sz2nwwvckwzgd3kx46my44a4lw37-signer-1.drv server # building '/nix/store/llf1sz2nwwvckwzgd3kx46my44a4lw37-signer-1.drv'... server: (finished: must succeed: nix-build -E 'derivation { name="signer-1"; system=builtins.currentSystem; builder="/bin/sh"; args=["-c" "echo signer-1 > $out"]; }' --no-out-link, in 0.17 seconds) server: must succeed: NIKS3_SERVER_URL=http://localhost:5751 NIKS3_AUTH_TOKEN_FILE=/tmp/auth-token /nix/store/5khiha7jnfkdv9s9wji4gqn288v2j1dx-niks3-1.15.0/bin/niks3 push /nix/store/lqml7ay4d3x2fvdbdff94fwrdh1br5ng-signer-1 server # [ 25.514271] niks3-server[1009]: 2026/10/08 21:39:55 INFO Received push request method=POST path=/api/pushes server # time=2026-10-08T21:39:55.106Z level=INFO msg="Uploading 1 paths to localhost (0 already cached)" server # time=2026-10-08T21:39:55.107Z level=INFO msg="Uploading lqml7ay4d3x2fvdbdff94fwrdh1br5ng-signer-1 (128B)" server # [ 25.564090] niks3-server[1009]: 2026/10/08 21:39:55 INFO Received sign narinfos request method=POST path=/api/pushes/1/sign server # [ 25.582232] niks3-server[1009]: 2026/10/08 21:39:55 INFO Registered completed upload object_key=lqml7ay4d3x2fvdbdff94fwrdh1br5ng.ls server # [ 25.609913] niks3-server[1009]: 2026/10/08 21:39:55 INFO Registered completed upload object_key=nar/1xbdd0jsa3f9d9xz2wfpcjbcrx5dpyy490mg6cnrlkqswmwsm6j0.nar.zst server # [ 25.617185] niks3-server[1009]: 2026/10/08 21:39:55 INFO Registered completed upload object_key=log/llf1sz2nwwvckwzgd3kx46my44a4lw37-signer-1.drv server # [ 25.655940] niks3-server[1009]: 2026/10/08 21:39:55 INFO Signed narinfos id=1 count=1 server # time=2026-10-08T21:39:55.243Z level=INFO msg="Uploading 1 narinfos" server # [ 25.669557] niks3-server[1009]: 2026/10/08 21:39:55 INFO Received complete push request method=POST path=/api/pushes/1/complete server # time=2026-10-08T21:39:55.269Z level=INFO msg="Upload complete. (224ms)" server # [ 25.685231] niks3-server[1009]: 2026/10/08 21:39:55 INFO Completed push id=1 objects=4 duration=14.29252ms server # [ 25.687619] niks3-server[1009]: 2026/10/08 21:39:55 INFO Registered completed upload object_key=lqml7ay4d3x2fvdbdff94fwrdh1br5ng.narinfo server: (finished: must succeed: NIKS3_SERVER_URL=http://localhost:5751 NIKS3_AUTH_TOKEN_FILE=/tmp/auth-token /nix/store/5khiha7jnfkdv9s9wji4gqn288v2j1dx-niks3-1.15.0/bin/niks3 push /nix/store/lqml7ay4d3x2fvdbdff94fwrdh1br5ng-signer-1, in 0.33 seconds) server: must succeed: nix copy --from http://localhost:5751 --to /tmp/store-1 /nix/store/lqml7ay4d3x2fvdbdff94fwrdh1br5ng-signer-1 server # copying 1 paths... server # copying path '/nix/store/lqml7ay4d3x2fvdbdff94fwrdh1br5ng-signer-1' from 'http://localhost:5751'... server: (finished: must succeed: nix copy --from http://localhost:5751 --to /tmp/store-1 /nix/store/lqml7ay4d3x2fvdbdff94fwrdh1br5ng-signer-1, in 0.09 seconds) server: must succeed: nix --store /tmp/store-1 store cat /nix/store/lqml7ay4d3x2fvdbdff94fwrdh1br5ng-signer-1 | grep -F signer- server: (finished: must succeed: nix --store /tmp/store-1 store cat /nix/store/lqml7ay4d3x2fvdbdff94fwrdh1br5ng-signer-1 | grep -F signer-, in 0.06 seconds) (finished: subtest: narinfos signed through OpenBao verify against the public key, in 0.65 seconds) subtest: the signing process is reused across pushes server: must succeed: pgrep -x niks3-openbao-s | head -n1 server: (finished: must succeed: pgrep -x niks3-openbao-s | head -n1, in 0.04 seconds) server: must succeed: nix-build -E 'derivation { name="signer-2"; system=builtins.currentSystem; builder="/bin/sh"; args=["-c" "echo signer-2 > $out"]; }' --no-out-link server # this derivation will be built: server # /nix/store/yxz8hnxsx36kwxkczzaa10chm50zxs5n-signer-2.drv server # building '/nix/store/yxz8hnxsx36kwxkczzaa10chm50zxs5n-signer-2.drv'... server: (finished: must succeed: nix-build -E 'derivation { name="signer-2"; system=builtins.currentSystem; builder="/bin/sh"; args=["-c" "echo signer-2 > $out"]; }' --no-out-link, in 0.14 seconds) server: must succeed: NIKS3_SERVER_URL=http://localhost:5751 NIKS3_AUTH_TOKEN_FILE=/tmp/auth-token /nix/store/5khiha7jnfkdv9s9wji4gqn288v2j1dx-niks3-1.15.0/bin/niks3 push /nix/store/r2hcia81arzi3kgl7nxpvnvnd950y3hk-signer-2 server # [ 26.140988] niks3-server[1009]: 2026/10/08 21:39:55 INFO Received push request method=POST path=/api/pushes server # time=2026-10-08T21:39:55.732Z level=INFO msg="Uploading 1 paths to localhost (0 already cached)" server # time=2026-10-08T21:39:55.733Z level=INFO msg="Uploading r2hcia81arzi3kgl7nxpvnvnd950y3hk-signer-2 (128B)" server # [ 26.169943] niks3-server[1009]: 2026/10/08 21:39:55 INFO Registered completed upload object_key=log/yxz8hnxsx36kwxkczzaa10chm50zxs5n-signer-2.drv server # time=2026-10-08T21:39:55.761Z level=INFO msg="Uploading 1 narinfos" server # [ 26.179038] niks3-server[1009]: 2026/10/08 21:39:55 INFO Received sign narinfos request method=POST path=/api/pushes/2/sign server # [ 26.185297] niks3-server[1009]: 2026/10/08 21:39:55 INFO Signed narinfos id=2 count=1 server # [ 26.186425] niks3-server[1009]: 2026/10/08 21:39:55 INFO Registered completed upload object_key=nar/0nwavznx6l2iygh4lpjn8msr9hyp614fcfihlbm95zgkr76jikcj.nar.zst server # [ 26.195934] niks3-server[1009]: 2026/10/08 21:39:55 INFO Registered completed upload object_key=r2hcia81arzi3kgl7nxpvnvnd950y3hk.ls server # time=2026-10-08T21:39:55.785Z level=INFO msg="Upload complete. (108ms)" server # [ 26.204436] niks3-server[1009]: 2026/10/08 21:39:55 INFO Received complete push request method=POST path=/api/pushes/2/complete server # [ 26.206039] niks3-server[1009]: 2026/10/08 21:39:55 INFO Completed push id=2 objects=4 duration=6.88112ms server # [ 26.207393] niks3-server[1009]: 2026/10/08 21:39:55 INFO Registered completed upload object_key=r2hcia81arzi3kgl7nxpvnvnd950y3hk.narinfo server: (finished: must succeed: NIKS3_SERVER_URL=http://localhost:5751 NIKS3_AUTH_TOKEN_FILE=/tmp/auth-token /nix/store/5khiha7jnfkdv9s9wji4gqn288v2j1dx-niks3-1.15.0/bin/niks3 push /nix/store/r2hcia81arzi3kgl7nxpvnvnd950y3hk-signer-2, in 0.18 seconds) server: must succeed: nix copy --from http://localhost:5751 --to /tmp/store-2 /nix/store/r2hcia81arzi3kgl7nxpvnvnd950y3hk-signer-2 server # copying 1 paths... server # copying path '/nix/store/r2hcia81arzi3kgl7nxpvnvnd950y3hk-signer-2' from 'http://localhost:5751'... server: (finished: must succeed: nix copy --from http://localhost:5751 --to /tmp/store-2 /nix/store/r2hcia81arzi3kgl7nxpvnvnd950y3hk-signer-2, in 0.08 seconds) server: must succeed: nix --store /tmp/store-2 store cat /nix/store/r2hcia81arzi3kgl7nxpvnvnd950y3hk-signer-2 | grep -F signer- server: (finished: must succeed: nix --store /tmp/store-2 store cat /nix/store/r2hcia81arzi3kgl7nxpvnvnd950y3hk-signer-2 | grep -F signer-, in 0.06 seconds) server: must succeed: pgrep -x niks3-openbao-s | head -n1 server: (finished: must succeed: pgrep -x niks3-openbao-s | head -n1, in 0.03 seconds) (finished: subtest: the signing process is reused across pushes, in 0.54 seconds) subtest: a killed signing process is restarted server: must succeed: pkill -KILL -x niks3-openbao-s server: (finished: must succeed: pkill -KILL -x niks3-openbao-s, in 0.03 seconds) server: must succeed: nix-build -E 'derivation { name="signer-3"; system=builtins.currentSystem; builder="/bin/sh"; args=["-c" "echo signer-3 > $out"]; }' --no-out-link server # this derivation will be built: server # /nix/store/8rqr6n12ycly8w0l9d1pwxwhhf70frn3-signer-3.drv server # building '/nix/store/8rqr6n12ycly8w0l9d1pwxwhhf70frn3-signer-3.drv'... server: (finished: must succeed: nix-build -E 'derivation { name="signer-3"; system=builtins.currentSystem; builder="/bin/sh"; args=["-c" "echo signer-3 > $out"]; }' --no-out-link, in 0.13 seconds) server: must succeed: NIKS3_SERVER_URL=http://localhost:5751 NIKS3_AUTH_TOKEN_FILE=/tmp/auth-token /nix/store/5khiha7jnfkdv9s9wji4gqn288v2j1dx-niks3-1.15.0/bin/niks3 push /nix/store/67p4vpgam0q82zlxd8ancmpxkjql6cnx-signer-3 server # [ 26.659711] niks3-server[1009]: 2026/10/08 21:39:56 INFO Received push request method=POST path=/api/pushes server # time=2026-10-08T21:39:56.249Z level=INFO msg="Uploading 1 paths to localhost (0 already cached)" server # time=2026-10-08T21:39:56.251Z level=INFO msg="Uploading 67p4vpgam0q82zlxd8ancmpxkjql6cnx-signer-3 (128B)" server # [ 26.683566] niks3-server[1009]: 2026/10/08 21:39:56 INFO Registered completed upload object_key=log/8rqr6n12ycly8w0l9d1pwxwhhf70frn3-signer-3.drv server # [ 26.691766] niks3-server[1009]: 2026/10/08 21:39:56 INFO Received sign narinfos request method=POST path=/api/pushes/3/sign server # [ 26.698300] niks3-server[1009]: 2026/10/08 21:39:56 INFO Registered completed upload object_key=67p4vpgam0q82zlxd8ancmpxkjql6cnx.ls server # [ 26.703235] niks3-server[1009]: 2026/10/08 21:39:56 INFO Registered completed upload object_key=nar/0a5xm19dinsl6r6mgmzvlxv91jdb1hr34kxlyic4f5w7c5db29z4.nar.zst server # [ 26.715646] niks3-server[1009]: 2026/10/08 21:39:56 INFO Signed narinfos id=3 count=1 server # time=2026-10-08T21:39:56.302Z level=INFO msg="Uploading 1 narinfos" server # [ 26.724363] niks3-server[1009]: 2026/10/08 21:39:56 INFO Received complete push request method=POST path=/api/pushes/3/complete server # time=2026-10-08T21:39:56.314Z level=INFO msg="Upload complete. (119ms)" server # [ 26.730256] niks3-server[1009]: 2026/10/08 21:39:56 INFO Completed push id=3 objects=4 duration=5.54664ms server # [ 26.734500] niks3-server[1009]: 2026/10/08 21:39:56 INFO Registered completed upload object_key=67p4vpgam0q82zlxd8ancmpxkjql6cnx.narinfo server: (finished: must succeed: NIKS3_SERVER_URL=http://localhost:5751 NIKS3_AUTH_TOKEN_FILE=/tmp/auth-token /nix/store/5khiha7jnfkdv9s9wji4gqn288v2j1dx-niks3-1.15.0/bin/niks3 push /nix/store/67p4vpgam0q82zlxd8ancmpxkjql6cnx-signer-3, in 0.19 seconds) server: must succeed: nix copy --from http://localhost:5751 --to /tmp/store-3 /nix/store/67p4vpgam0q82zlxd8ancmpxkjql6cnx-signer-3 server # copying 1 paths... server # copying path '/nix/store/67p4vpgam0q82zlxd8ancmpxkjql6cnx-signer-3' from 'http://localhost:5751'... server: (finished: must succeed: nix copy --from http://localhost:5751 --to /tmp/store-3 /nix/store/67p4vpgam0q82zlxd8ancmpxkjql6cnx-signer-3, in 0.08 seconds) server: must succeed: nix --store /tmp/store-3 store cat /nix/store/67p4vpgam0q82zlxd8ancmpxkjql6cnx-signer-3 | grep -F signer- server: (finished: must succeed: nix --store /tmp/store-3 store cat /nix/store/67p4vpgam0q82zlxd8ancmpxkjql6cnx-signer-3 | grep -F signer-, in 0.06 seconds) (finished: subtest: a killed signing process is restarted, in 0.49 seconds) subtest: OpenBao errors fail the push without crashing the server server: must succeed: systemctl stop openbao-dev.service server # [ 26.905698] bao[457]: ==> OpenBao shutdown triggered server # [ 26.906534] bao[457]: 2026-10-08T21:39:56.489Z [INFO] core: marked as sealed server # [ 26.907576] bao[457]: 2026-10-08T21:39:56.489Z [INFO] core: pre-seal teardown starting server # [ 26.909690] bao[457]: 2026-10-08T21:39:56.490Z [INFO] rollback: stopping rollback manager server # [ 26.910859] bao[457]: 2026-10-08T21:39:56.490Z [INFO] core: pre-seal teardown complete server # [ 26.911946] bao[457]: 2026-10-08T21:39:56.490Z [INFO] core: stopping cluster listeners server # [ 26.914348] bao[457]: 2026-10-08T21:39:56.490Z [INFO] core.cluster-listener: forwarding rpc listeners stopped server # [ 26.916512] systemd[1]: Stopping openbao-dev.service... server # [ 27.381469] bao[457]: 2026-10-08T21:39:56.966Z [INFO] core.cluster-listener: rpc listeners successfully shut down server # [ 27.392242] bao[457]: 2026-10-08T21:39:56.969Z [INFO] core: cluster listeners successfully shut down server # [ 27.394293] bao[457]: 2026-10-08T21:39:56.969Z [INFO] core: vault is sealed server # [ 27.398819] systemd[1]: openbao-dev.service: Deactivated successfully. server # [ 27.402210] systemd[1]: Stopped openbao-dev.service. server # [ 27.405817] systemd[1]: openbao-dev.service: Consumed 879ms CPU time over 18.016s wall clock time, 70.9M memory peak, 4.4K incoming IP traffic, 4.9K outgoing IP traffic. server: (finished: must succeed: systemctl stop openbao-dev.service, in 0.53 seconds) server: must succeed: nix-build -E 'derivation { name="signer-4"; system=builtins.currentSystem; builder="/bin/sh"; args=["-c" "echo signer-4 > $out"]; }' --no-out-link server # this derivation will be built: server # /nix/store/ki984inl969jjq7pdvamz0p6z4dd145x-signer-4.drv server # building '/nix/store/ki984inl969jjq7pdvamz0p6z4dd145x-signer-4.drv'... server: (finished: must succeed: nix-build -E 'derivation { name="signer-4"; system=builtins.currentSystem; builder="/bin/sh"; args=["-c" "echo signer-4 > $out"]; }' --no-out-link, in 0.15 seconds) server: must fail: NIKS3_SERVER_URL=http://localhost:5751 NIKS3_AUTH_TOKEN_FILE=/tmp/auth-token /nix/store/5khiha7jnfkdv9s9wji4gqn288v2j1dx-niks3-1.15.0/bin/niks3 push /nix/store/90jgq0hrfwlpwxc5awzm1b2zmy0mda4g-signer-4 server # [ 27.679907] niks3-server[1009]: 2026/10/08 21:39:57 INFO Received push request method=POST path=/api/pushes server # time=2026-10-08T21:39:57.271Z level=INFO msg="Uploading 1 paths to localhost (0 already cached)" server # time=2026-10-08T21:39:57.272Z level=INFO msg="Uploading 90jgq0hrfwlpwxc5awzm1b2zmy0mda4g-signer-4 (128B)" server # [ 27.709677] niks3-server[1009]: 2026/10/08 21:39:57 INFO Registered completed upload object_key=nar/08bvxj5dmksfdkqa4pjy110ni52l4pkvb9a02p3qa256f0idj24s.nar.zst server # time=2026-10-08T21:39:57.302Z level=WARN msg="Request returned retryable status, retrying" attempt=1 backoff=100ms status=500 url=http://localhost:5751/api/pushes/4/sign server # [ 27.720813] niks3-server[1009]: 2026/10/08 21:39:57 INFO Received sign narinfos request method=POST path=/api/pushes/4/sign server # [ 27.722440] niks3-server[1009]: 2026/10/08 21:39:57 INFO Registered completed upload object_key=90jgq0hrfwlpwxc5awzm1b2zmy0mda4g.ls server # [ 27.726715] niks3-server[1009]: 2026/10/08 21:39:57 ERROR Failed to sign narinfos signer=niks3-test-1 error="signing program: narinfo \"90jgq0hrfwlpwxc5awzm1b2zmy0mda4g.narinfo\": reading token: open /run/openbao-signer/token: no such file or directory" server # [ 27.734109] niks3-server[1009]: 2026/10/08 21:39:57 INFO Registered completed upload object_key=log/ki984inl969jjq7pdvamz0p6z4dd145x-signer-4.drv server # [ 27.827792] niks3-server[1009]: 2026/10/08 21:39:57 INFO Received sign narinfos request method=POST path=/api/pushes/4/sign server # time=2026-10-08T21:39:57.416Z level=WARN msg="Request returned retryable status, retrying" attempt=2 backoff=187.373912ms status=500 url=http://localhost:5751/api/pushes/4/sign server # [ 27.833918] niks3-server[1009]: 2026/10/08 21:39:57 ERROR Failed to sign narinfos signer=niks3-test-1 error="signing program: narinfo \"90jgq0hrfwlpwxc5awzm1b2zmy0mda4g.narinfo\": reading token: open /run/openbao-signer/token: no such file or directory" server # [ 28.028214] niks3-server[1009]: 2026/10/08 21:39:57 INFO Received sign narinfos request method=POST path=/api/pushes/4/sign server # time=2026-10-08T21:39:57.617Z level=WARN msg="Request returned retryable status, retrying" attempt=3 backoff=387.231532ms status=500 url=http://localhost:5751/api/pushes/4/sign server # [ 28.034987] niks3-server[1009]: 2026/10/08 21:39:57 ERROR Failed to sign narinfos signer=niks3-test-1 error="signing program: narinfo \"90jgq0hrfwlpwxc5awzm1b2zmy0mda4g.narinfo\": reading token: open /run/openbao-signer/token: no such file or directory" server # [ 28.428328] niks3-server[1009]: 2026/10/08 21:39:58 INFO Received sign narinfos request method=POST path=/api/pushes/4/sign server # time=2026-10-08T21:39:58.017Z level=WARN msg="Request returned retryable status, retrying" attempt=4 backoff=743.642999ms status=500 url=http://localhost:5751/api/pushes/4/sign server # [ 28.435103] niks3-server[1009]: 2026/10/08 21:39:58 ERROR Failed to sign narinfos signer=niks3-test-1 error="signing program: narinfo \"90jgq0hrfwlpwxc5awzm1b2zmy0mda4g.narinfo\": reading token: open /run/openbao-signer/token: no such file or directory" server # [ 29.185113] niks3-server[1009]: 2026/10/08 21:39:58 INFO Received sign narinfos request method=POST path=/api/pushes/4/sign server # [ 29.188971] niks3-server[1009]: 2026/10/08 21:39:58 ERROR Failed to sign narinfos signer=niks3-test-1 error="signing program: narinfo \"90jgq0hrfwlpwxc5awzm1b2zmy0mda4g.narinfo\": reading token: open /run/openbao-signer/token: no such file or directory" server # time=2026-10-08T21:39:58.779Z level=WARN msg="Request returned retryable status, retrying" attempt=5 backoff=1.446512225s status=500 url=http://localhost:5751/api/pushes/4/sign server # [ 30.645992] niks3-server[1009]: 2026/10/08 21:40:00 INFO Received sign narinfos request method=POST path=/api/pushes/4/sign server: (finished: must fail: NIKS3_SERVER_URL=http://localhost:5751 NIKS3_AUTH_TOKEN_FILE=/tmp/auth-token /nix/store/5khiha7jnfkdv9s9wji4gqn288v2j1dx-niks3-1.15.0/bin/niks3 push /nix/store/90jgq0hrfwlpwxc5awzm1b2zmy0mda4g-signer-4, in 3.09 seconds) server: must succeed: systemctl restart openbao-setup.service server # [ 30.649869] niks3-server[1009]: 2026/10/08 21:40:00 ERROR Failed to sign narinfos signer=niks3-test-1 error="signing program: narinfo \"90jgq0hrfwlpwxc5awzm1b2zmy0mda4g.narinfo\": reading token: open /run/openbao-signer/token: no such file or directory" server # time=2026-10-08T21:40:00.236Z level=ERROR msg="Fatal error" error="pushing paths: signing and uploading narinfos: signing narinfos for closure 4: server returned 500: failed to sign narinfos: signing program: narinfo \"90jgq0hrfwlpwxc5awzm1b2zmy0mda4g.narinfo\": reading token: open /run/openbao-signer/token: no such file or directory\n" server # [ 30.690982] niks3-server[1009]: 2026/10/08 21:40:00 INFO Shutdown signal received, draining in-flight requests timeout=10s server # [ 30.739732] systemd[1]: Stopping niks3 server... server # [ 30.741056] systemd[1]: niks3.service: Deactivated successfully. server # [ 30.742003] systemd[1]: Stopped niks3 server. server # [ 30.742695] systemd[1]: niks3.service: Consumed 151ms CPU time over 6.235s wall clock time, 40.2M memory peak, 19.1K incoming IP traffic, 24.5K outgoing IP traffic. server # [ 30.751405] systemd[1]: openbao-setup.service: Deactivated successfully. server # [ 30.754516] systemd[1]: Stopped openbao-setup.service. server # [ 30.757873] systemd[1]: openbao-setup.service: Consumed 619ms CPU time over 21.337s wall clock time, 60.9M memory peak, 3K incoming IP traffic, 2.8K outgoing IP traffic. server # [ 30.759999] systemd[1]: Stopping openbao-setup.service... server # [ 30.764132] systemd[1]: Started openbao-dev.service. server # [ 30.764928] systemd[1]: Starting openbao-setup.service... server # [ 31.057042] bao[1215]: 2026-10-08T21:40:00.638Z [INFO] proxy environment: http_proxy="" https_proxy="" no_proxy="" server # [ 31.061389] bao[1215]: 2026-10-08T21:40:00.645Z [WARN] no `api_addr` value specified in config or in BAO_API_ADDR; falling back to detection if possible, but this value should be manually set server # [ 31.063764] bao[1215]: 2026-10-08T21:40:00.645Z [INFO] core: Initializing version history cache for core server # [ 31.068716] bao[1215]: ==> OpenBao server configuration: server # [ 31.069505] bao[1215]: Api Address: http://127.0.0.1:8200 server # [ 31.070396] bao[1215]: Cgo: enabled server # [ 31.071152] bao[1215]: Cluster Address: https://127.0.0.1:8201 server # [ 31.076331] bao[1215]: Environment Variables: HOME, INVOCATION_ID, IO_PRESSURE_WATCH, IO_PRESSURE_WRITE, JOURNAL_STREAM, LANG, LOCALE_ARCHIVE, LOGNAME, MEMORY_PRESSURE_WATCH, MEMORY_PRESSURE_WRITE, PATH, RUNTIME_DIRECTORY, STATE_DIRECTORY, SYSTEMD_EXEC_PID, TZDIR, USER server # [ 31.079455] bao[1215]: Go Version: go1.27.1 server # [ 31.084185] bao[1215]: Listener 1: tcp (addr: "127.0.0.1:8200", cluster address: "127.0.0.1:8201", max_request_duration: "1m30s", max_request_json_memory: "34078720", max_request_json_strings: "1000", max_request_size: "33554432", tls: "disabled") server # [ 31.087217] bao[1215]: Log Level: server # [ 31.087871] bao[1215]: Recovery Mode: false server # [ 31.096263] bao[1215]: Storage: inmem server # [ 31.097047] bao[1215]: Version: OpenBao v2.7.1, committed 1970-01-01T00:00:00Z server # [ 31.098207] bao[1215]: Version Sha: refs/tags/v2.7.1 server # [ 31.099059] bao[1215]: 2026-10-08T21:40:00.646Z [INFO] core: security barrier not initialized server # [ 31.103432] bao[1215]: 2026-10-08T21:40:00.651Z [INFO] core: security barrier initialized: shares=1 threshold=1 server # [ 31.108376] bao[1215]: 2026-10-08T21:40:00.651Z [INFO] core: post-unseal setup starting server # [ 31.109480] bao[1215]: 2026-10-08T21:40:00.661Z [INFO] core: loaded wrapping token key server # [ 31.110553] bao[1215]: 2026-10-08T21:40:00.661Z [INFO] core: successfully setup plugin catalog: plugin-directory="" server # [ 31.115126] bao[1215]: 2026-10-08T21:40:00.666Z [INFO] core: reading transactional mount table server # [ 31.116580] bao[1215]: 2026-10-08T21:40:00.666Z [INFO] core: no mounts in transactional mount table; adding default mount table server # [ 31.118112] bao[1215]: 2026-10-08T21:40:00.678Z [INFO] core: successfully mounted: type=cubbyhole version="v2.7.1+builtin.bao" path=cubbyhole/ namespace="ID: root. Path: " server # [ 31.123895] bao[1215]: 2026-10-08T21:40:00.680Z [INFO] core: successfully mounted: type=system version="v2.7.1+builtin.bao" path=sys/ namespace="ID: root. Path: " server # [ 31.129321] bao[1215]: 2026-10-08T21:40:00.680Z [INFO] core: successfully mounted: type=identity version="v2.7.1+builtin.bao" path=identity/ namespace="ID: root. Path: " server # [ 31.131401] bao[1215]: 2026-10-08T21:40:00.681Z [INFO] core: reading transactional auth mount table server # [ 31.137086] bao[1215]: 2026-10-08T21:40:00.686Z [INFO] core: no auth mounts in transactional auth mount table; adding default auth mount table server # [ 31.138887] bao[1215]: 2026-10-08T21:40:00.686Z [INFO] core: successfully mounted: type=token version="v2.7.1+builtin.bao" path=token/ namespace="ID: root. Path: " server # [ 31.146262] bao[1215]: 2026-10-08T21:40:00.686Z [INFO] rollback: Starting the rollback manager with 256 workers server # [ 31.147703] bao[1215]: 2026-10-08T21:40:00.688Z [INFO] core: restoring leases server # [ 31.152241] bao[1215]: 2026-10-08T21:40:00.690Z [INFO] rollback: starting rollback manager server # [ 31.153439] bao[1215]: 2026-10-08T21:40:00.691Z [INFO] expiration: lease restore complete server # [ 31.154550] bao[1215]: 2026-10-08T21:40:00.692Z [INFO] core: entities restored server # [ 31.155601] bao[1215]: 2026-10-08T21:40:00.692Z [INFO] core: groups restored server # [ 31.159886] bao[1215]: 2026-10-08T21:40:00.692Z [INFO] core: Recorded vault version: vault version=2.7.1 upgrade time="2026-10-08 21:40:00.69248984 +0000 UTC" commit date=1970-01-01T00:00:00Z server # [ 31.163635] bao[1215]: 2026-10-08T21:40:00.692Z [INFO] core: post-unseal setup complete server # [ 31.164889] bao[1215]: 2026-10-08T21:40:00.693Z [INFO] core: root token generated server # [ 31.165922] bao[1215]: 2026-10-08T21:40:00.693Z [INFO] core: pre-seal teardown starting server # [ 31.167022] bao[1215]: 2026-10-08T21:40:00.693Z [INFO] rollback: stopping rollback manager server # [ 31.168173] bao[1215]: 2026-10-08T21:40:00.698Z [INFO] core: pre-seal teardown complete server # [ 31.169268] bao[1215]: 2026-10-08T21:40:00.698Z [INFO] core.cluster-listener.tcp: starting listener: listener_address=127.0.0.1:8201 server # [ 31.170931] bao[1215]: 2026-10-08T21:40:00.698Z [INFO] core.cluster-listener: serving cluster requests: cluster_listen_address=127.0.0.1:8201 server # [ 31.172679] bao[1215]: 2026-10-08T21:40:00.698Z [INFO] core: post-unseal setup starting server # [ 31.173766] bao[1215]: 2026-10-08T21:40:00.698Z [INFO] core: loaded wrapping token key server # [ 31.174901] bao[1215]: 2026-10-08T21:40:00.698Z [INFO] core: successfully setup plugin catalog: plugin-directory="" server # [ 31.176306] bao[1215]: 2026-10-08T21:40:00.698Z [INFO] core: reading transactional mount table server # [ 31.177471] bao[1215]: 2026-10-08T21:40:00.699Z [INFO] core: successfully mounted: type=identity version="v2.7.1+builtin.bao" path=identity/ namespace="ID: root. Path: " server # [ 31.179422] bao[1215]: 2026-10-08T21:40:00.700Z [INFO] core: successfully mounted: type=system version="v2.7.1+builtin.bao" path=sys/ namespace="ID: root. Path: " server # [ 31.181536] bao[1215]: 2026-10-08T21:40:00.700Z [INFO] core: successfully mounted: type=cubbyhole version="v2.7.1+builtin.bao" path=cubbyhole/ namespace="ID: root. Path: " server # [ 31.184708] bao[1215]: 2026-10-08T21:40:00.707Z [INFO] core: reading transactional auth mount table server # [ 31.186006] bao[1215]: 2026-10-08T21:40:00.707Z [INFO] core: successfully mounted: type=token version="v2.7.1+builtin.bao" path=token/ namespace="ID: root. Path: " server # [ 31.187980] bao[1215]: 2026-10-08T21:40:00.708Z [INFO] rollback: Starting the rollback manager with 256 workers server # [ 31.189509] bao[1215]: 2026-10-08T21:40:00.711Z [INFO] core: restoring leases server # [ 31.190495] bao[1215]: 2026-10-08T21:40:00.720Z [INFO] expiration: lease restore complete server # [ 31.191612] bao[1215]: 2026-10-08T21:40:00.721Z [INFO] rollback: starting rollback manager server # [ 31.192803] bao[1215]: 2026-10-08T21:40:00.721Z [INFO] core: entities restored server # [ 31.193786] bao[1215]: 2026-10-08T21:40:00.721Z [INFO] core: groups restored server # [ 31.194839] bao[1215]: 2026-10-08T21:40:00.721Z [INFO] core: post-unseal setup complete server # [ 31.195930] bao[1215]: 2026-10-08T21:40:00.721Z [INFO] core: vault is unsealed server # [ 31.197008] bao[1215]: 2026-10-08T21:40:00.731Z [INFO] expiration: revoked lease: lease_id=auth/token/root/h3a3fa58911514833536127854497d625195b3c40d43dba45c7e26d10c7fa56c7 server # [ 31.199033] bao[1215]: 2026-10-08T21:40:00.744Z [INFO] core: successful mount: namespace="" path=secret/ type=kv version="" server # [ 31.200580] bao[1215]: 2026-10-08T21:40:00.744Z [INFO] beginning post-unseal configuration server # [ 31.201692] bao[1215]: ==> OpenBao server started! server # [ 31.202359] bao[1215]: 2026-10-08T21:40:00.745Z [INFO] secrets.kv.kv_da59ba45: collecting keys to upgrade server # [ 31.203635] bao[1215]: 2026-10-08T21:40:00.748Z [INFO] secrets.kv.kv_da59ba45: done collecting keys: num_keys=1 server # [ 31.205052] bao[1215]: 2026-10-08T21:40:00.748Z [INFO] secrets.kv.kv_da59ba45: upgrading keys finished server # [ 31.263882] bao[1215]: WARNING! dev mode is enabled! In this mode, OpenBao runs entirely in-memory server # [ 31.265907] bao[1215]: and starts unsealed with a single unseal key. The root token is already server # [ 31.267690] bao[1215]: authenticated to the CLI, so you can immediately begin using OpenBao. server # [ 31.269453] bao[1215]: You may need to set the following environment variables: server # [ 31.270927] bao[1215]: $ export BAO_ADDR='http://127.0.0.1:8200' server # [ 31.272259] bao[1215]: The unseal key and root token are displayed below in case you want to server # [ 31.274086] bao[1215]: seal/unseal the Vault or re-authenticate. server # [ 31.275384] bao[1215]: Unseal Key: cE/cIzi2T4ELvjCCpTERG1+k8ruEukpK7DPSzDpZHyU= server # [ 31.276917] bao[1215]: Root Token: root server # [ 31.277779] bao[1215]: Development mode should NOT be used in production installations! server # [ 32.412444] bao[1215]: 2026-10-08T21:40:01.997Z [INFO] core: successful mount: namespace="" path=transit/ type=transit version="" server # [ 32.419028] openbao-setup-start[1237]: Success! Enabled the transit secrets engine at: transit/ server # [ 32.537054] openbao-setup-start[1247]: Retrieving wrapping key. server # [ 32.827890] openbao-setup-start[1247]: Wrapping source key with ephemeral key. server # [ 32.832182] openbao-setup-start[1247]: Encrypting ephemeral key with wrapping key. server # [ 32.833287] openbao-setup-start[1247]: Submitting wrapped key. server # [ 32.848212] openbao-setup-start[1247]: Success! server # [ 32.860222] systemd[1]: Finished openbao-setup.service. server # [ 32.866600] systemd[1]: Starting niks3 server... server: (finished: must succeed: systemctl restart openbao-setup.service, in 2.22 seconds) server: must succeed: nix-build -E 'derivation { name="signer-5"; system=builtins.currentSystem; builder="/bin/sh"; args=["-c" "echo signer-5 > $out"]; }' --no-out-link server # [ 32.975193] niks3-server[1255]: 2026/10/08 21:40:02 INFO Configured external signer program=/nix/store/vjqln7qss9csxkck9qxiabirk1d4m9iy-niks3-openbao-signer/bin/niks3-openbao-signer server # [ 33.002967] niks3-server[1255]: 2026/10/08 21:40:02 INFO Read proxy enabled — serving cache objects from S3 server # [ 33.005978] niks3-server[1255]: 2026/10/08 21:40:02 INFO Using socket-activated listener address=0.0.0.0:5751 server # [ 33.007391] niks3-server[1255]: 2026/10/08 21:40:02 INFO systemd watchdog enabled interval=15s server # [ 33.013351] niks3-server[1255]: 2026/10/08 21:40:02 INFO Starting HTTP server address=0.0.0.0:5751 server # [ 33.014652] systemd[1]: Started niks3 server. server # this derivation will be built: server # /nix/store/w75vzpgwgrd413yswvyf8d3724yriqqp-signer-5.drv server # building '/nix/store/w75vzpgwgrd413yswvyf8d3724yriqqp-signer-5.drv'... server: (finished: must succeed: nix-build -E 'derivation { name="signer-5"; system=builtins.currentSystem; builder="/bin/sh"; args=["-c" "echo signer-5 > $out"]; }' --no-out-link, in 0.24 seconds) server: must succeed: NIKS3_SERVER_URL=http://localhost:5751 NIKS3_AUTH_TOKEN_FILE=/tmp/auth-token /nix/store/5khiha7jnfkdv9s9wji4gqn288v2j1dx-niks3-1.15.0/bin/niks3 push /nix/store/0n0a44xfrfpmp9affrd9prwip4j5nbyx-signer-5 server # [ 33.267788] niks3-server[1255]: 2026/10/08 21:40:02 INFO Received push request method=POST path=/api/pushes server # time=2026-10-08T21:40:02.859Z level=INFO msg="Uploading 1 paths to localhost (0 already cached)" server # time=2026-10-08T21:40:02.860Z level=INFO msg="Uploading 0n0a44xfrfpmp9affrd9prwip4j5nbyx-signer-5 (128B)" server # [ 33.308400] niks3-server[1255]: 2026/10/08 21:40:02 INFO Received sign narinfos request method=POST path=/api/pushes/5/sign server # [ 33.317797] niks3-server[1255]: 2026/10/08 21:40:02 INFO Registered completed upload object_key=log/w75vzpgwgrd413yswvyf8d3724yriqqp-signer-5.drv server # [ 33.341679] niks3-server[1255]: 2026/10/08 21:40:02 INFO Registered completed upload object_key=0n0a44xfrfpmp9affrd9prwip4j5nbyx.ls server # [ 33.348496] niks3-server[1255]: 2026/10/08 21:40:02 INFO Registered completed upload object_key=nar/1rrjdxihgavl3xr6jzkh49lrd92dlyrdgs4inygpqssjvgcrjh9x.nar.zst server # time=2026-10-08T21:40:02.942Z level=INFO msg="Uploading 1 narinfos" server # [ 33.357900] niks3-server[1255]: 2026/10/08 21:40:02 INFO Signed narinfos id=5 count=1 server # [ 33.368381] niks3-server[1255]: 2026/10/08 21:40:02 INFO Received complete push request method=POST path=/api/pushes/5/complete server # time=2026-10-08T21:40:02.961Z level=INFO msg="Upload complete. (164ms)" server # [ 33.376913] niks3-server[1255]: 2026/10/08 21:40:02 INFO Completed push id=5 objects=4 duration=11.23186ms server # [ 33.382221] niks3-server[1255]: 2026/10/08 21:40:02 INFO Registered completed upload object_key=0n0a44xfrfpmp9affrd9prwip4j5nbyx.narinfo server: (finished: must succeed: NIKS3_SERVER_URL=http://localhost:5751 NIKS3_AUTH_TOKEN_FILE=/tmp/auth-token /nix/store/5khiha7jnfkdv9s9wji4gqn288v2j1dx-niks3-1.15.0/bin/niks3 push /nix/store/0n0a44xfrfpmp9affrd9prwip4j5nbyx-signer-5, in 0.27 seconds) server: must succeed: nix copy --from http://localhost:5751 --to /tmp/store-5 /nix/store/0n0a44xfrfpmp9affrd9prwip4j5nbyx-signer-5 server # copying 1 paths... server # copying path '/nix/store/0n0a44xfrfpmp9affrd9prwip4j5nbyx-signer-5' from 'http://localhost:5751'... server: (finished: must succeed: nix copy --from http://localhost:5751 --to /tmp/store-5 /nix/store/0n0a44xfrfpmp9affrd9prwip4j5nbyx-signer-5, in 0.08 seconds) server: must succeed: nix --store /tmp/store-5 store cat /nix/store/0n0a44xfrfpmp9affrd9prwip4j5nbyx-signer-5 | grep -F signer- server: (finished: must succeed: nix --store /tmp/store-5 store cat /nix/store/0n0a44xfrfpmp9affrd9prwip4j5nbyx-signer-5 | grep -F signer-, in 0.06 seconds) (finished: subtest: OpenBao errors fail the push without crashing the server, in 6.65 seconds) (finished: run the VM test script, in 34.30 seconds) test script finished in 34.35s cleanup kill QemuMachine (pid 45) server # qemu-system-aarch64: terminating on signal 15 from pid 39 (/nix/store/81ag9nxz1flw3xjkv1vvqg8y2ipx2ins-python3-3.14.7/bin/python3.14) server # [2026-10-08T21:40:03Z INFO virtiofsd] Client disconnected, shutting down server # [2026-10-08T21:40:03Z INFO virtiofsd] Client disconnected, shutting down server # [2026-10-08T21:40:03Z INFO virtiofsd] Client disconnected, shutting down (finished: cleanup, in 0.28 seconds) additionally exposed symbols: server, vlan1, start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh