tribuchet: building on eliza
Machine state will be reset. To keep it, pass --keep-machine-state
start all VLans
(finished: start all VLans, in 0.00 seconds)
Test will time out and terminate in 3600.0 seconds
run the VM test script
server: waiting for unit niks3.service
server: waiting for the VM to finish booting
server: starting vm
server # Disk image does not exist, creating the virtualisation disk image...
server: QEMU running (pid 45)
server # Formatting '/build/vm-state-server/tmp.FhOoZqzxlR', fmt=raw size=1073741824
server # mke2fs 1.47.4 (6-Mar-2025)
server # Discarding device blocks:      0/262144             done
server # Creating filesystem with 262144 4k blocks and 65536 inodes
server # Filesystem UUID: 41f6c8ba-28b6-472f-8f1a-3360ae17135a
server # Superblock backups stored on blocks:
server # 	32768, 98304, 163840, 229376
server # 
server # Allocating group tables: 0/8   done
server # Writing inode tables: 0/8   done
server # Creating journal (8192 blocks): done
server # Writing superblocks and filesystem accounting information: 0/8   done
server # 
server # Virtualisation disk image created.
server # Starting virtiofs daemons...
server # [2026-10-25T16:05:53Z WARN  virtiofsd::passthrough] Failed to open file handle for the root node: Operation not permitted (os error 1)
server # [2026-10-25T16:05:53Z WARN  virtiofsd::passthrough] Failed to open file handle for the root node: Operation not permitted (os error 1)
server # [2026-10-25T16:05:53Z WARN  virtiofsd::passthrough] File handles do not appear safe to use, disabling file handles altogether
server # [2026-10-25T16:05:53Z WARN  virtiofsd::passthrough] File handles do not appear safe to use, disabling file handles altogether
server # [2026-10-25T16:05:53Z WARN  virtiofsd::passthrough] Failed to open file handle for the root node: Operation not permitted (os error 1)
server # [2026-10-25T16:05:53Z WARN  virtiofsd::passthrough] File handles do not appear safe to use, disabling file handles altogether
server # [2026-10-25T16:05:53Z INFO  virtiofsd] Waiting for vhost-user socket connection...
server # [2026-10-25T16:05:53Z INFO  virtiofsd] Waiting for vhost-user socket connection...
server # [2026-10-25T16:05:53Z INFO  virtiofsd] Waiting for vhost-user socket connection...
server # [2026-10-25T16:05:53Z INFO  virtiofsd] Client connected, servicing requests
server # [2026-10-25T16:05:53Z INFO  virtiofsd] Client connected, servicing requests
server # [2026-10-25T16:05:53Z INFO  virtiofsd] Client connected, servicing requests
server # [    0.000000] Booting Linux on physical CPU 0x0000000000 [0xc00fac40]
server # [    0.000000] Linux version 6.18.55 (nixbld@localhost) (gcc (GCC) 16.2.0, GNU ld (GNU Binutils) 2.46) #1-NixOS SMP PREEMPT Sat Oct  3 10:39:03 UTC 2026
server # [    0.000000] KASLR enabled
server # [    0.000000] random: crng init done
server # [    0.000000] Machine model: linux,dummy-virt
server # [    0.000000] efi: UEFI not found.
server # [    0.000000] OF: reserved mem: Reserved memory: No reserved-memory node in the DT
server # [    0.000000] NUMA: Faking a node at [mem 0x0000000040000000-0x000000007fffffff]
server # [    0.000000] NODE_DATA(0) allocated [mem 0x7fded700-0x7fdf0e7f]
server # [    0.000000] Zone ranges:
server # [    0.000000]   DMA      [mem 0x0000000040000000-0x000000007fffffff]
server # [    0.000000]   DMA32    empty
server # [    0.000000]   Normal   empty
server # [    0.000000]   Device   empty
server # [    0.000000] Movable zone start for each node
server # [    0.000000] Early memory node ranges
server # [    0.000000]   node   0: [mem 0x0000000040000000-0x000000007fffffff]
server # [    0.000000] Initmem setup node 0 [mem 0x0000000040000000-0x000000007fffffff]
server # [    0.000000] cma: Reserved 32 MiB at 0x000000007cc00000
server # [    0.000000] psci: probing for conduit method from DT.
server # [    0.000000] psci: PSCIv1.3 detected in firmware.
server # [    0.000000] psci: Using standard PSCI v0.2 function IDs
server # [    0.000000] psci: Trusted OS migration not required
server # [    0.000000] psci: SMC Calling Convention v1.1
server # [    0.000000] smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003)
server # [    0.000000] percpu: Embedded 76 pages/cpu s186840 r8192 d116264 u311296
server # [    0.000000] Detected PIPT I-cache on CPU0
server # [    0.000000] CPU features: detected: Address authentication (architected QARMA5 algorithm)
server # [    0.000000] CPU features: detected: GICv3 CPU interface
server # [    0.000000] CPU features: detected: Spectre-v4
server # [    0.000000] CPU features: detected: Spectre-BHB
server # [    0.000000] CPU features: detected: AmpereOne erratum AC03_CPU_38
server # [    0.000000] CPU features: detected: AmpereOne erratum AC04_CPU_23
server # [    0.000000] alternatives: applying boot alternatives
server # [    0.000000] Kernel command line: console=ttyAMA0 console=tty0 panic=1 boot.panic_on_fail clocksource=acpi_pm root=fstab loglevel=7 net.ifnames=0 lsm=landlock,yama,bpf init=/nix/store/95gca4q11nd2jkqqzlqvmsmgfsqsir6b-nixos-system-server-test/init regInfo=/nix/.ro-store/vza2xr2lglyldqxc6f7w48csz7d1g8d5-closure-info/registration console=ttyAMA0,115200n8 console=tty0
server # [    0.000000] Unknown kernel command line parameters "regInfo=/nix/.ro-store/vza2xr2lglyldqxc6f7w48csz7d1g8d5-closure-info/registration", will be passed to user space.
server # [    0.000000] printk: log buffer data + meta data: 131072 + 458752 = 589824 bytes
server # [    0.000000] Dentry cache hash table entries: 131072 (order: 8, 1048576 bytes, linear)
server # [    0.000000] Inode-cache hash table entries: 65536 (order: 7, 524288 bytes, linear)
server # [    0.000000] software IO TLB: SWIOTLB bounce buffer size adjusted to 1MB
server # [    0.000000] software IO TLB: area num 1.
server # [    0.000000] software IO TLB: mapped [mem 0x000000007ca80000-0x000000007cb80000] (1MB)
server # [    0.000000] Fallback order for Node 0: 0
server # [    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 262144
server # [    0.000000] Policy zone: DMA
server # [    0.000000] mem auto-init: stack:all(zero), heap alloc:on, heap free:off
server # [    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
server # [    0.000000] allocated 2097152 bytes of page_ext
server # [    0.000000] ftrace: allocating 75039 entries in 294 pages
server # [    0.000000] ftrace: allocated 294 pages with 4 groups
server # [    0.000000] rcu: Hierarchical RCU implementation.
server # [    0.000000] rcu: 	RCU event tracing is enabled.
server # [    0.000000] rcu: 	RCU restricting CPUs from NR_CPUS=384 to nr_cpu_ids=1.
server # [    0.000000] 	Trampoline variant of Tasks RCU enabled.
server # [    0.000000] 	Rude variant of Tasks RCU enabled.
server # [    0.000000] 	Tracing variant of Tasks RCU enabled.
server # [    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 25 jiffies.
server # [    0.000000] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=1
server # [    0.000000] RCU Tasks: Setting shift to 0 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=1.
server # [    0.000000] RCU Tasks Rude: Setting shift to 0 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=1.
server # [    0.000000] RCU Tasks Trace: Setting shift to 0 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=1.
server # [    0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0
server # [    0.000000] GICv3: 256 SPIs implemented
server # [    0.000000] GICv3: 0 Extended SPIs implemented
server # [    0.000000] Root IRQ handler: gic_handle_irq
server # [    0.000000] GICv3: GICv3 features: 16 PPIs, DirectLPI
server # [    0.000000] GICv3: GICD_CTLR.DS=1, SCR_EL3.FIQ=0
server # [    0.000000] GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000
server # [    0.000000] ITS [mem 0x08080000-0x0809ffff]
server # [    0.000000] ITS@0x0000000008080000: allocated 8192 Devices @44cf0000 (indirect, esz 8, psz 64K, shr 1)
server # [    0.000000] ITS@0x0000000008080000: allocated 8192 Interrupt Collections @44d00000 (flat, esz 8, psz 64K, shr 1)
server # [    0.000000] GICv3: using LPI property table @0x0000000044d10000
server # [    0.000000] GICv3: CPU0: using allocated LPI pending table @0x0000000044d20000
server # [    0.000000] rcu: srcu_init: Setting srcu_struct sizes based on contention.
server # [    0.000000] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns
server # [    0.000000] arch_timer: cp15 timer running at 1000.00MHz (virt).
server # [    0.000000] clocksource: arch_sys_counter: mask: 0x1fffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns
server # [    0.000000] sched_clock: 61 bits at 1000MHz, resolution 1ns, wraps every 4398046511103ns
server # [    0.000032] arm-pv: using stolen time PV
server # [    0.000405] kfence: initialized - using 2097152 bytes for 255 objects at 0x(____ptrval____)-0x(____ptrval____)
server # [    0.000611] Console: colour dummy device 80x25
server # [    0.000619] printk: legacy console [tty0] enabled
server # [    0.000815] Calibrating delay loop (skipped), value calculated using timer frequency.. 2000.00 BogoMIPS (lpj=4000000)
server # [    0.000822] pid_max: default: 32768 minimum: 301
server # [    0.000899] LSM: initializing lsm=capability,landlock,yama,bpf,ima
server # [    0.001021] landlock: Up and running.
server # [    0.001024] Yama: becoming mindful.
server # [    0.001486] LSM support for eBPF active
server # [    0.001615] Mount-cache hash table entries: 2048 (order: 2, 16384 bytes, linear)
server # [    0.001635] Mountpoint-cache hash table entries: 2048 (order: 2, 16384 bytes, linear)
server # [    0.003690] rcu: Hierarchical SRCU implementation.
server # [    0.003698] rcu: 	Max phase no-delay instances is 1000.
server # [    0.005318] fsl-mc MSI: its@8080000 domain created
server # [    0.005447] EFI services will not be available.
server # [    0.005555] smp: Bringing up secondary CPUs ...
server # [    0.005565] smp: Brought up 1 node, 1 CPU
server # [    0.005568] SMP: Total of 1 processors activated.
server # [    0.005570] CPU: All CPU(s) started at EL1
server # [    0.005581] CPU features: detected: Branch Target Identification
server # [    0.005589] CPU features: detected: ARMv8.4 Translation Table Level
server # [    0.005592] CPU features: detected: Instruction cache invalidation not required for I/D coherence
server # [    0.005596] CPU features: detected: Data cache clean to the PoU not required for I/D coherence
server # [    0.005600] CPU features: detected: Common not Private translations
server # [    0.005603] CPU features: detected: CRC32 instructions
server # [    0.005606] CPU features: detected: Data cache clean to Point of Deep Persistence
server # [    0.005610] CPU features: detected: Data cache clean to Point of Persistence
server # [    0.005613] CPU features: detected: Data independent timing control (DIT)
server # [    0.005616] CPU features: detected: E0PD
server # [    0.005618] CPU features: detected: Enhanced Counter Virtualization
server # [    0.005621] CPU features: detected: Enhanced Counter Virtualization (CNTPOFF)
server # [    0.005625] CPU features: detected: Enhanced Virtualization Traps
server # [    0.005628] CPU features: detected: Fine Grained Traps
server # [    0.005632] CPU features: detected: Generic authentication (architected QARMA5 algorithm)
server # [    0.005637] CPU features: detected: RCpc load-acquire (LDAPR)
server # [    0.005640] CPU features: detected: LSE atomic instructions
server # [    0.005643] CPU features: detected: Privileged Access Never
server # [    0.005645] CPU features: detected: PMUv3
server # [    0.005648] CPU features: detected: RAS Extension Support
server # [    0.005651] CPU features: detected: RASv1p1 Extension Support
server # [    0.005653] CPU features: detected: Random Number Generator
server # [    0.005656] CPU features: detected: Speculation barrier (SB)
server # [    0.005659] CPU features: detected: Stage-2 Force Write-Back
server # [    0.005661] CPU features: detected: TLB range maintenance instructions
server # [    0.005666] CPU features: detected: Speculative Store Bypassing Safe (SSBS)
server # [    0.005707] alternatives: applying system-wide alternatives
server # [    0.008766] CPU features: detected: BBM Level 2 without TLB conflict abort
server # [    0.008945] Memory: 893048K/1048576K available (24576K kernel code, 7094K rwdata, 26568K rodata, 4736K init, 1106K bss, 114188K reserved, 32768K cma-reserved)
server # [    0.009299] devtmpfs: initialized
server # [    0.011083] posixtimers hash table entries: 512 (order: 1, 8192 bytes, linear)
server # [    0.011113] futex hash table entries: 256 (16384 bytes on 1 NUMA nodes, total 16 KiB, linear).
server # [    0.011310] 2G module region forced by RANDOMIZE_MODULE_REGION_FULL
server # [    0.011320] 0 pages in range for non-PLT usage
server # [    0.011321] 508192 pages in range for PLT usage
server # [    0.011533] pinctrl core: initialized pinctrl subsystem
server # [    0.012381] DMI not present or invalid.
server # [    0.015605] NET: Registered PF_NETLINK/PF_ROUTE protocol family
server # [    0.017998] DMA: preallocated 128 KiB GFP_KERNEL pool for atomic allocations
server # [    0.018138] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations
server # [    0.018306] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations
server # [    0.018331] audit: initializing netlink subsys (disabled)
server # [    0.019013] thermal_sys: Registered thermal governor 'fair_share'
server # [    0.019016] thermal_sys: Registered thermal governor 'bang_bang'
server # [    0.019019] thermal_sys: Registered thermal governor 'step_wise'
server # [    0.019022] thermal_sys: Registered thermal governor 'user_space'
server # [    0.019025] thermal_sys: Registered thermal governor 'power_allocator'
server # [    0.019055] audit: type=2000 audit(0.016:1): state=initialized audit_enabled=0 res=1
server # [    0.019064] cpuidle: using governor ladder
server # [    0.019071] cpuidle: using governor menu
server # [    0.019256] hw-breakpoint: found 16 breakpoint and 4 watchpoint registers.
server # [    0.019273] ASID allocator initialised with 65536 entries
server # [    0.020632] Serial: AMBA PL011 UART driver
server # [    0.026361] 9000000.pl011: ttyAMA0 at MMIO 0x9000000 (irq = 13, base_baud = 0) is a PL011 rev1
server # [    0.026539] printk: console [ttyAMA0] enabled
server # [    0.156423] HugeTLB: registered 1.00 GiB page size, pre-allocated 0 pages
server # [    0.156433] HugeTLB: 0 KiB vmemmap can be freed for a 1.00 GiB page
server # [    0.156437] HugeTLB: registered 32.0 MiB page size, pre-allocated 0 pages
server # [    0.156439] HugeTLB: 0 KiB vmemmap can be freed for a 32.0 MiB page
server # [    0.156442] HugeTLB: registered 2.00 MiB page size, pre-allocated 0 pages
server # [    0.156445] HugeTLB: 0 KiB vmemmap can be freed for a 2.00 MiB page
server # [    0.156448] HugeTLB: registered 64.0 KiB page size, pre-allocated 0 pages
server # [    0.156451] HugeTLB: 0 KiB vmemmap can be freed for a 64.0 KiB page
server # [    0.157734] fbcon: Taking over console
server # [    0.157744] ACPI: Interpreter disabled.
server # [    0.167818] iommu: Default domain type: Translated
server # [    0.167824] iommu: DMA domain TLB invalidation policy: strict mode
server # [    0.168258] SCSI subsystem initialized
server # [    0.170396] usbcore: registered new interface driver usbfs
server # [    0.170425] usbcore: registered new interface driver hub
server # [    0.170442] usbcore: registered new device driver usb
server # [    0.170748] pps_core: LinuxPPS API ver. 1 registered
server # [    0.170752] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it>
server # [    0.170759] PTP clock support registered
server # [    0.170799] EDAC MC: Ver: 3.0.0
server # [    0.177241] scmi_core: SCMI protocol bus registered
server # [    0.177619] FPGA manager framework
server # [    0.178168] vgaarb: loaded
server # [    0.178450] clocksource: Switched to clocksource arch_sys_counter
server # [    0.188498] VFS: Disk quotas dquot_6.6.0
server # [    0.188532] VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes)
server # [    0.192071] netfs: FS-Cache loaded
server # [    0.192207] pnp: PnP ACPI: disabled
server # [    0.196816] NET: Registered PF_INET protocol family
server # [    0.196971] IP idents hash table entries: 16384 (order: 5, 131072 bytes, linear)
server # [    0.229069] tcp_listen_portaddr_hash hash table entries: 512 (order: 1, 8192 bytes, linear)
server # [    0.229119] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
server # [    0.229144] TCP established hash table entries: 8192 (order: 4, 65536 bytes, linear)
server # [    0.229198] TCP bind hash table entries: 8192 (order: 6, 262144 bytes, linear)
server # [    0.229270] TCP: Hash tables configured (established 8192 bind 8192)
server # [    0.229365] MPTCP token hash table entries: 1024 (order: 3, 24576 bytes, linear)
server # [    0.229426] UDP hash table entries: 512 (order: 3, 32768 bytes, linear)
server # [    0.229473] UDP-Lite hash table entries: 512 (order: 3, 32768 bytes, linear)
server # [    0.229555] NET: Registered PF_UNIX/PF_LOCAL protocol family
server # [    0.229630] NET: Registered PF_XDP protocol family
server # [    0.229648] PCI: CLS 0 bytes, default 64
server # [    0.229928] Trying to unpack rootfs image as initramfs...
server # [    0.248810] kvm [1]: HYP mode not available
server # [    0.381339] Initialise system trusted keyrings
server # [    0.381481] workingset: timestamp_bits=42 max_order=18 bucket_order=0
server # [    0.381877] squashfs: version 4.0 (2009/01/31) Phillip Lougher
server # [    0.381924] 9p: Installing v9fs 9p2000 file system support
server # [    0.405124] Key type asymmetric registered
server # [    0.405142] Asymmetric key parser 'x509' registered
server # [    0.405232] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 242)
server # [    0.414518] io scheduler mq-deadline registered
server # [    0.414533] io scheduler kyber registered
server # [    0.426900] pl061_gpio 9030000.pl061: PL061 GPIO chip registered
server # [    0.427739] ledtrig-cpu: registered to indicate activity on CPUs
server # [    0.428123] pci-host-generic 4010000000.pcie: host bridge /pcie@10000000 ranges:
server # [    0.428136] pci-host-generic 4010000000.pcie:       IO 0x003eff0000..0x003effffff -> 0x0000000000
server # [    0.428161] pci-host-generic 4010000000.pcie:      MEM 0x0010000000..0x003efeffff -> 0x0010000000
server # [    0.428167] pci-host-generic 4010000000.pcie:      MEM 0x8000000000..0xffffffffff -> 0x8000000000
server # [    0.428186] pci-host-generic 4010000000.pcie: Memory resource size exceeds max for 32 bits
server # [    0.428207] pci-host-generic 4010000000.pcie: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff]
server # [    0.428297] pci-host-generic 4010000000.pcie: PCI host bridge to bus 0000:00
server # [    0.428304] pci_bus 0000:00: root bus resource [bus 00-ff]
server # [    0.428308] pci_bus 0000:00: root bus resource [io  0x0000-0xffff]
server # [    0.428311] pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff]
server # [    0.428314] pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff]
server # [    0.428415] pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 conventional PCI endpoint
server # [    0.428868] pci 0000:00:01.0: [1af4:1000] type 00 class 0x020000 conventional PCI endpoint
server # [    0.429060] pci 0000:00:01.0: BAR 0 [io  0x0000-0x001f]
server # [    0.429072] pci 0000:00:01.0: BAR 1 [mem 0x00000000-0x00000fff]
server # [    0.429099] pci 0000:00:01.0: BAR 4 [mem 0x00000000-0x00003fff 64bit pref]
server # [    0.429111] pci 0000:00:01.0: ROM [mem 0x00000000-0x0003ffff pref]
server # [    0.429588] pci 0000:00:02.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint
server # [    0.429777] pci 0000:00:02.0: BAR 0 [io  0x0000-0x001f]
server # [    0.429788] pci 0000:00:02.0: BAR 1 [mem 0x00000000-0x00000fff]
server # [    0.429814] pci 0000:00:02.0: BAR 4 [mem 0x00000000-0x00003fff 64bit pref]
server # [    0.430288] pci 0000:00:03.0: [1af4:1001] type 00 class 0x010000 conventional PCI endpoint
server # [    0.458613] pci 0000:00:03.0: BAR 0 [io  0x0000-0x007f]
server # [    0.458635] pci 0000:00:03.0: BAR 1 [mem 0x00000000-0x00000fff]
server # [    0.458661] pci 0000:00:03.0: BAR 4 [mem 0x00000000-0x00003fff 64bit pref]
server # [    0.459198] pci 0000:00:04.0: [1af4:1000] type 00 class 0x020000 conventional PCI endpoint
server # [    0.459392] pci 0000:00:04.0: BAR 0 [io  0x0000-0x001f]
server # [    0.459404] pci 0000:00:04.0: BAR 1 [mem 0x00000000-0x00000fff]
server # [    0.459522] pci 0000:00:04.0: BAR 4 [mem 0x00000000-0x00003fff 64bit pref]
server # [    0.459535] pci 0000:00:04.0: ROM [mem 0x00000000-0x0003ffff pref]
server # [    0.460009] pci 0000:00:05.0: [1af4:1050] type 00 class 0x038000 conventional PCI endpoint
server # [    0.460204] pci 0000:00:05.0: BAR 1 [mem 0x00000000-0x00000fff]
server # [    0.460230] pci 0000:00:05.0: BAR 4 [mem 0x00000000-0x00003fff 64bit pref]
server # [    0.460695] pci 0000:00:06.0: [1af4:1052] type 00 class 0x090000 conventional PCI endpoint
server # [    0.460888] pci 0000:00:06.0: BAR 1 [mem 0x00000000-0x00000fff]
server # [    0.460913] pci 0000:00:06.0: BAR 4 [mem 0x00000000-0x00003fff 64bit pref]
server # [    0.461324] pci 0000:00:07.0: [8086:24cd] type 00 class 0x0c0320 conventional PCI endpoint
server # [    0.461511] pci 0000:00:07.0: BAR 0 [mem 0x00000000-0x00000fff]
server # [    0.461804] pci 0000:00:08.0: [1af4:105a] type 00 class 0x018000 conventional PCI endpoint
server # [    0.461995] pci 0000:00:08.0: BAR 1 [mem 0x00000000-0x00000fff]
server # [    0.462021] pci 0000:00:08.0: BAR 4 [mem 0x00000000-0x00003fff 64bit pref]
server # [    0.479124] pci 0000:00:09.0: [1af4:105a] type 00 class 0x018000 conventional PCI endpoint
server # [    0.479317] pci 0000:00:09.0: BAR 1 [mem 0x00000000-0x00000fff]
server # [    0.479342] pci 0000:00:09.0: BAR 4 [mem 0x00000000-0x00003fff 64bit pref]
server # [    0.479857] pci 0000:00:0a.0: [1af4:105a] type 00 class 0x018000 conventional PCI endpoint
server # [    0.480049] pci 0000:00:0a.0: BAR 1 [mem 0x00000000-0x00000fff]
server # [    0.480075] pci 0000:00:0a.0: BAR 4 [mem 0x00000000-0x00003fff 64bit pref]
server # [    0.480549] pci 0000:00:0b.0: [1af4:1003] type 00 class 0x078000 conventional PCI endpoint
server # [    0.480834] pci 0000:00:0b.0: BAR 0 [io  0x0000-0x003f]
server # [    0.480846] pci 0000:00:0b.0: BAR 1 [mem 0x00000000-0x00000fff]
server # [    0.480872] pci 0000:00:0b.0: BAR 4 [mem 0x00000000-0x00003fff 64bit pref]
server # [    0.481347] pci 0000:00:0c.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint
server # [    0.481536] pci 0000:00:0c.0: BAR 0 [io  0x0000-0x001f]
server # [    0.481547] pci 0000:00:0c.0: BAR 1 [mem 0x00000000-0x00000fff]
server # [    0.481573] pci 0000:00:0c.0: BAR 4 [mem 0x00000000-0x00003fff 64bit pref]
server # [    0.482189] pci 0000:00:01.0: ROM [mem 0x10000000-0x1003ffff pref]: assigned
server # [    0.482196] pci 0000:00:04.0: ROM [mem 0x10040000-0x1007ffff pref]: assigned
server # [    0.482199] pci 0000:00:01.0: BAR 4 [mem 0x8000000000-0x8000003fff 64bit pref]: assigned
server # [    0.482245] pci 0000:00:02.0: BAR 4 [mem 0x8000004000-0x8000007fff 64bit pref]: assigned
server # [    0.482290] pci 0000:00:03.0: BAR 4 [mem 0x8000008000-0x800000bfff 64bit pref]: assigned
server # [    0.482334] pci 0000:00:04.0: BAR 4 [mem 0x800000c000-0x800000ffff 64bit pref]: assigned
server # [    0.482378] pci 0000:00:05.0: BAR 4 [mem 0x8000010000-0x8000013fff 64bit pref]: assigned
server # [    0.482422] pci 0000:00:06.0: BAR 4 [mem 0x8000014000-0x8000017fff 64bit pref]: assigned
server # [    0.510592] pci 0000:00:08.0: BAR 4 [mem 0x8000018000-0x800001bfff 64bit pref]: assigned
server # [    0.510649] pci 0000:00:09.0: BAR 4 [mem 0x800001c000-0x800001ffff 64bit pref]: assigned
server # [    0.510694] pci 0000:00:0a.0: BAR 4 [mem 0x8000020000-0x8000023fff 64bit pref]: assigned
server # [    0.510739] pci 0000:00:0b.0: BAR 4 [mem 0x8000024000-0x8000027fff 64bit pref]: assigned
server # [    0.510866] pci 0000:00:0c.0: BAR 4 [mem 0x8000028000-0x800002bfff 64bit pref]: assigned
server # [    0.510912] pci 0000:00:01.0: BAR 1 [mem 0x10080000-0x10080fff]: assigned
server # [    0.510932] pci 0000:00:02.0: BAR 1 [mem 0x10081000-0x10081fff]: assigned
server # [    0.510951] pci 0000:00:03.0: BAR 1 [mem 0x10082000-0x10082fff]: assigned
server # [    0.510970] pci 0000:00:04.0: BAR 1 [mem 0x10083000-0x10083fff]: assigned
server # [    0.510989] pci 0000:00:05.0: BAR 1 [mem 0x10084000-0x10084fff]: assigned
server # [    0.511008] pci 0000:00:06.0: BAR 1 [mem 0x10085000-0x10085fff]: assigned
server # [    0.511026] pci 0000:00:07.0: BAR 0 [mem 0x10086000-0x10086fff]: assigned
server # [    0.511046] pci 0000:00:08.0: BAR 1 [mem 0x10087000-0x10087fff]: assigned
server # [    0.511064] pci 0000:00:09.0: BAR 1 [mem 0x10088000-0x10088fff]: assigned
server # [    0.511087] pci 0000:00:0a.0: BAR 1 [mem 0x10089000-0x10089fff]: assigned
server # [    0.511105] pci 0000:00:0b.0: BAR 1 [mem 0x1008a000-0x1008afff]: assigned
server # [    0.511124] pci 0000:00:0c.0: BAR 1 [mem 0x1008b000-0x1008bfff]: assigned
server # [    0.511142] pci 0000:00:03.0: BAR 0 [io  0x1000-0x107f]: assigned
server # [    0.511159] pci 0000:00:0b.0: BAR 0 [io  0x1080-0x10bf]: assigned
server # [    0.511176] pci 0000:00:01.0: BAR 0 [io  0x10c0-0x10df]: assigned
server # [    0.511194] pci 0000:00:02.0: BAR 0 [io  0x10e0-0x10ff]: assigned
server # [    0.511212] pci 0000:00:04.0: BAR 0 [io  0x1100-0x111f]: assigned
server # [    0.511229] pci 0000:00:0c.0: BAR 0 [io  0x1120-0x113f]: assigned
server # [    0.511255] pci_bus 0000:00: resource 4 [io  0x0000-0xffff]
server # [    0.511261] pci_bus 0000:00: resource 5 [mem 0x10000000-0x3efeffff]
server # [    0.511264] pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff]
server # [    0.512132] pci 0000:00:07.0: enabling device (0000 -> 0002)
server # [    0.556425] virtio-pci 0000:00:01.0: enabling device (0000 -> 0003)
server # [    0.566652] virtio-pci 0000:00:02.0: enabling device (0000 -> 0003)
server # [    0.569253] virtio-pci 0000:00:03.0: enabling device (0000 -> 0003)
server # [    0.580102] virtio-pci 0000:00:04.0: enabling device (0000 -> 0003)
server # [    0.582222] virtio-pci 0000:00:05.0: enabling device (0000 -> 0002)
server # [    0.586104] virtio-pci 0000:00:06.0: enabling device (0000 -> 0002)
server # [    0.596012] virtio-pci 0000:00:08.0: enabling device (0000 -> 0002)
server # [    0.597872] virtio-pci 0000:00:09.0: enabling device (0000 -> 0002)
server # [    0.601444] virtio-pci 0000:00:0a.0: enabling device (0000 -> 0002)
server # [    0.604293] virtio-pci 0000:00:0b.0: enabling device (0000 -> 0003)
server # [    0.615135] virtio-pci 0000:00:0c.0: enabling device (0000 -> 0003)
server # [    0.628808] Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled
server # [    0.631481] msm_serial: driver initialized
server # [    0.631642] SuperH (H)SCI(F) driver initialized
server # [    0.631701] STM32 USART driver initialized
server # [    0.668424] loop: module loaded
server # [    0.668629] virtio_blk virtio2: 1/0/0 default/read/poll queues
server # [    0.669516] virtio_blk virtio2: [vda] 2097152 512-byte logical blocks (1.07 GB/1.00 GiB)
server # [    0.675171] megasas: 07.734.00.00-rc1
server # [    0.676195] physmap-flash 0.flash: physmap platform flash device: [mem 0x00000000-0x03ffffff]
server # [    0.687712] 0.flash: Found 2 x16 devices at 0x0 in 32-bit bank. Manufacturer ID 0x000000 Chip ID 0x000000
server # [    0.687736] Intel/Sharp Extended Query Table at 0x0031
server # [    0.689555] Using buffer write method
server # [    0.689626] physmap-flash 0.flash: physmap platform flash device: [mem 0x04000000-0x07ffffff]
server # [    0.703950] 0.flash: Found 2 x16 devices at 0x0 in 32-bit bank. Manufacturer ID 0x000000 Chip ID 0x000000
server # [    0.703975] Intel/Sharp Extended Query Table at 0x0031
server # [    0.705899] Using buffer write method
server # [    0.705917] Concatenating MTD devices:
server # [    0.705920] (0): "0.flash"
server # [    0.705922] (1): "0.flash"
server # [    0.705924] into device "0.flash"
server # [    1.004922] Freeing initrd memory: 26944K
server # [    1.011378] tun: Universal TUN/TAP device driver, 1.6
server # [    1.015432] thunder_xcv, ver 1.0
server # [    1.015467] thunder_bgx, ver 1.0
server # [    1.015486] nicpf, ver 1.0
server # [    1.016071] e1000: Intel(R) PRO/1000 Network Driver
server # [    1.016075] e1000: Copyright (c) 1999-2006 Intel Corporation.
server # [    1.016103] e1000e: Intel(R) PRO/1000 Network Driver
server # [    1.016110] e1000e: Copyright(c) 1999 - 2015 Intel Corporation.
server # [    1.016133] igb: Intel(R) Gigabit Ethernet Network Driver
server # [    1.016136] igb: Copyright (c) 2007-2014 Intel Corporation.
server # [    1.016156] igbvf: Intel(R) Gigabit Virtual Function Network Driver
server # [    1.016160] igbvf: Copyright (c) 2009 - 2012 Intel Corporation.
server # [    1.016297] sky2: driver version 1.30
server # [    1.017970] usbcore: registered new interface driver usb-storage
server # [    1.018054] usbcore: registered new interface driver usbserial_generic
server # [    1.018064] usbserial: USB Serial support registered for generic
server # [    1.019168] ehci-pci 0000:00:07.0: EHCI Host Controller
server # [    1.019186] ehci-pci 0000:00:07.0: new USB bus registered, assigned bus number 1
server # [    1.019355] ehci-pci 0000:00:07.0: irq 16, io mem 0x10086000
server # [    1.031874] ehci-pci 0000:00:07.0: USB 2.0 started, EHCI 1.00
server # [    1.032260] hub 1-0:1.0: USB hub found
server # [    1.032291] hub 1-0:1.0: 6 ports detected
server # [    1.033015] hv_vmbus: registering driver hyperv_keyboard
server # [    1.033991] rtc-pl031 9010000.pl031: registered as rtc0
server # [    1.034015] rtc-pl031 9010000.pl031: setting system clock to 2026-10-25T16:05:54 UTC (1792944354)
server # [    1.034332] i2c_dev: i2c /dev entries driver
server # [    1.042413] sdhci: Secure Digital Host Controller Interface driver
server # [    1.042421] sdhci: Copyright(c) Pierre Ossman
server # [    1.044151] Synopsys Designware Multimedia Card Interface Driver
server # [    1.044544] sdhci-pltfm: SDHCI platform and OF driver helper
server # [    1.046175] hid: raw HID events driver (C) Jiri Kosina
server # [    1.046408] usbcore: registered new interface driver usbhid
server # [    1.046412] usbhid: USB HID core driver
server # [    1.051061] hw perfevents: enabled with armv8_pmuv3 PMU driver, 11 (0,800003ff) counters available
server # [    1.052712] drop_monitor: Initializing network drop monitor service
server # [    1.052916] NET: Registered PF_INET6 protocol family
server # [    1.053479] Segment Routing with IPv6
server # [    1.053491] In-situ OAM (IOAM) with IPv6
server # [    1.053517] NET: Registered PF_PACKET protocol family
server # [    1.053573] 9pnet: Installing 9P2000 support
server # [    1.053611] Key type dns_resolver registered
server # [    1.065144] registered taskstats version 1
server # [    1.065292] Loading compiled-in X.509 certificates
server # [    1.074121] Demotion targets for Node 0: null
server # [    1.074243] Key type .fscrypt registered
server # [    1.074247] Key type fscrypt-provisioning registered
server # [    1.074353] ima: No TPM chip found, activating TPM-bypass!
server # [    1.074371] ima: Allocated hash algorithm: sha1
server # [    1.074392] ima: No architecture policies found
server # [    1.078800] input: gpio-keys as /devices/platform/gpio-keys/input/input0
server # [    1.097522] clk: Disabling unused clocks
server # [    1.097540] PM: genpd: Disabling unused power domains
server # [    1.101783] Freeing unused kernel memory: 4736K
server # [    1.101973] Run /init as init process
server # [    1.117053] systemd[1]: Successfully made /usr/ read-only.
server # [    1.278512] usb 1-1: new high-speed USB device number 2 using ehci-pci
server # [    1.428294] input: QEMU QEMU USB Keyboard as /devices/platform/4010000000.pcie/pci0000:00/0000:00:07.0/usb1/1-1/1-1:1.0/0003:0627:0001.0001/input/input1
server # [    1.451072] systemd[1]: systemd 261.3 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE)
server # [    1.451098] systemd[1]: Detected virtualization qemu.
server # [    1.451146] systemd[1]: Detected architecture arm64.
server # [    1.451155] systemd[1]: Running in initrd.
server # [    1.451818] systemd[1]: Initializing machine ID from random generator.
server # [    1.451970] systemd[1]: Hostname set to <server>.
server # [    1.518683] hid-generic 0003:0627:0001.0001: input,hidraw0: USB HID v1.11 Keyboard [QEMU QEMU USB Keyboard] on usb-0000:00:07.0-1/input0
server # [    1.582427] systemd[1]: bpf-restrict-fs: LSM BPF program attached
server # [    1.638512] usb 1-2: new high-speed USB device number 3 using ehci-pci
server # [    1.640726] systemd[1]: Queued start job for default target Initrd Default Target.
server # [    1.646904] systemd[1]: Created slice Slice /system/modprobe.
server # [    1.647101] systemd[1]: Started Dispatch Password Requests to Console Directory Watch.
server # [    1.647129] systemd[1]: Expecting device /dev/disk/by-label/nixos...
server # [    1.647154] systemd[1]: Reached target Path Units.
server # [    1.647166] systemd[1]: Reached target Slice Units.
server # [    1.647179] systemd[1]: Reached target Swaps.
server # [    1.647192] systemd[1]: Reached target Timer Units.
server # [    1.647323] systemd[1]: Listening on D-Bus System Message Bus Socket.
server # [    1.647489] systemd[1]: Listening on Journal Socket (/dev/log).
server # [    1.647612] systemd[1]: Listening on Journal Sockets.
server # [    1.647720] systemd[1]: Listening on udev Control Socket.
server # [    1.647808] systemd[1]: Listening on udev Kernel Socket.
server # [    1.647823] systemd[1]: Reached target Socket Units.
server # [    1.649151] systemd[1]: Starting Create List of Static Device Nodes...
server # [    1.649207] systemd[1]: Load Kernel Module configfs skipped, unmet condition check ConditionKernelModuleLoaded=!configfs
server # [    1.666688] systemd[1]: Mounting Kernel Configuration File System...
server # [    1.690747] systemd[1]: Starting Journal Service...
server # [    1.698722] systemd[1]: Starting Load Kernel Modules...
server # [    1.698851] systemd[1]: Early TPM SRK Setup skipped, unmet condition check ConditionSecurity=measured-os
server # [    1.705413] systemd[1]: Starting Coldplug All udev Devices...
server # [    1.718999] systemd[1]: Finished Create List of Static Device Nodes.
server # [    1.719802] systemd[1]: Mounted Kernel Configuration File System.
server # [    1.734952] systemd[1]: Starting Create Static Device Nodes in /dev gracefully...
server # [    1.761853] systemd-journald[71]: Collecting audit messages is disabled.
server # [    1.777754] device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log.
server # [    1.796902] device-mapper: ioctl: 4.50.0-ioctl (2025-04-28) initialised: dm-devel@lists.linux.dev
server # [    1.802787] input: QEMU QEMU USB Tablet as /devices/platform/4010000000.pcie/pci0000:00/0000:00:07.0/usb1/1-2/1-2:1.0/0003:0627:0001.0002/input/input2
server # [    1.802950] hid-generic 0003:0627:0001.0002: input,hidraw1: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:07.0-2/input0
server # [    1.816269] [drm] pci: virtio-gpu-pci detected at 0000:00:05.0
server # [    1.816512] [drm] features: -virgl +edid -resource_blob -host_visible
server # [    1.816515] [drm] features: -context_init
server # [    1.817255] [drm] number of scanouts: 1
server # [    1.817266] [drm] number of cap sets: 0
server # [    1.817560] systemd[1]: Finished Create Static Device Nodes in /dev gracefully.
server # [    1.826693] systemd[1]: Starting Create Static Device Nodes in /dev...
server # [    1.842827] virtio-pci 0000:00:05.0: [drm] Registered 1 planes with drm panic
server # [    1.842844] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:05.0 on minor 0
server # [    1.870819] Console: switching to colour frame buffer device 160x50
server # [    1.891754] virtio-pci 0000:00:05.0: [drm] fb0: virtio_gpudrmfb frame buffer device
server # [    1.892811] systemd[1]: Finished Create Static Device Nodes in /dev.
server # [    1.893317] systemd[1]: Reached target Preparation for Local File Systems.
server # [    1.893344] systemd[1]: Reached target Local File Systems.
server # [    1.903270] systemd[1]: Starting Rule-based Manager for Device Events and Files...
server # [    1.914732] systemd[1]: Finished Load Kernel Modules.
server # [    1.919594] systemd[1]: Starting Apply Kernel Variables...
server # [    1.936402] systemd-modules-load[72]: Inserted module 'dm_mod'
server # [    1.937673] systemd-modules-load[72]: Module 'virtio_balloon' is built in
server # [    1.938829] systemd-modules-load[72]: Module 'virtio_console' is built in
server # [    1.939920] systemd-modules-load[72]: Inserted module 'virtio_gpu'
server # [    1.959514] systemd[1]: Started Journal Service.
server # [    1.956595] systemd-modules-load[72]: Module 'virtio_rng' is built in
server # [    1.964166] systemd[1]: Starting Create System Files and Directories...
server # [    1.989241] systemd[1]: Finished Apply Kernel Variables.
server # [    2.016606] systemd[1]: Finished Create System Files and Directories.
server # [    2.019721] systemd-udevd[78]: Using default interface naming scheme 'v261'.
server # [    2.052145] systemd[1]: Started Rule-based Manager for Device Events and Files.
server # [    2.140903] systemd[1]: Starting Virtual Console Setup...
server # [    2.224595] systemd-vconsole-setup[100]: Configuration of first virtual console was skipped, ignoring remaining ones.
server # [    2.228485] systemd[1]: Finished Virtual Console Setup.
server # [    2.841169] systemd[1]: Finished Coldplug All udev Devices.
server # [    2.844151] systemd[1]: Reached target System Initialization.
server # [    2.848168] systemd[1]: Reached target Basic System.
server # [    2.976317] (udev-worker)[91]: Network interface NamePolicy= disabled on kernel command line.
server # [    3.031821] (udev-worker)[94]: eth1: Config file /etc/systemd/network/40-eth1.link is applied to device based on potentially unpredictable interface name.
server # [    3.037389] (udev-worker)[94]: Network interface NamePolicy= disabled on kernel command line.
server # [    3.100144] systemd[1]: Found device /dev/disk/by-label/nixos.
server # [    3.102495] systemd[1]: Reached target Initrd Root Device.
server # [    3.108208] systemd[1]: Starting File System Check on /dev/disk/by-label/nixos...
server # [    3.167202] systemd-fsck[109]: nixos: clean, 12/65536 files, 13019/262144 blocks
server # [    3.181086] systemd[1]: Finished File System Check on /dev/disk/by-label/nixos.
server # [    3.192330] systemd[1]: Mounting /sysroot...
server # [    3.244853] EXT4-fs (vda): mounted filesystem 41f6c8ba-28b6-472f-8f1a-3360ae17135a r/w with ordered data mode. Quota mode: none.
server # [    3.234087] systemd[1]: Mounted /sysroot.
server # [    3.236172] systemd[1]: Reached target Initrd Root File System.
server # [    3.237779] systemd[1]: Starting Mountpoints Configured in the Real Root...
server # [    3.271719] systemd-sysroot-fstab-check[117]: /sysroot should be mounted in the initrd, will request daemon-reload.
server # [    3.279517] systemd[1]: Reload requested from client PID 117 ('systemd-sysroot') (unit initrd-parse-etc.service)...
server # [    3.283043] systemd[1]: Reloading...
server # [    3.515394] systemd[1]: Reloading finished in 237 ms.
server # [    3.551042] systemd-sysroot-fstab-check[117]: Requesting initrd-fs.target/start/replace...
server # [    3.553939] systemd-sysroot-fstab-check[117]: Requesting swap.target/start/replace...
server # [    3.557572] systemd[1]: initrd-parse-etc.service: Deactivated successfully.
server # [    3.562490] systemd[1]: Finished Mountpoints Configured in the Real Root.
server # [    3.568276] systemd[1]: initrd-parse-etc.service: Triggering OnSuccess= dependencies.
server # [    3.700251] systemd[1]: Mounting /sysroot/nix/.ro-store...
server # [    3.719422] systemd[1]: Mounting /sysroot/nix/.rw-store...
server # [    3.725410] systemd[1]: Mounting /sysroot/run...
server # [    3.738644] systemd[1]: Mounting /sysroot/tmp/shared...
server # [    3.766762] systemd[1]: Mounting /sysroot/tmp/xchg...
server # [    3.841016] fuse: init (API version 7.45)
server # [    3.859145] virtiofs virtio6: discovered new tag: nix-store
server # [    3.860050] virtiofs virtio6: virtio_fs_setup_dax: No cache capability
server # [    3.847455] systemd[1]: Mounted /sysroot/nix/.rw-store.
server # [    3.876291] virtiofs virtio7: discovered new tag: shared
server # [    3.877079] virtiofs virtio7: virtio_fs_setup_dax: No cache capability
server # [    3.883804] virtiofs virtio8: discovered new tag: xchg
server # [    3.884595] virtiofs virtio8: virtio_fs_setup_dax: No cache capability
server # [    3.878952] systemd[1]: Starting rw-sysroot-nix-store.service...
server # [    3.881593] systemd[1]: Mounted /sysroot/run.
server # [    3.909978] systemd[1]: Mounted /sysroot/nix/.ro-store.
server # [    3.911364] systemd[1]: Mounted /sysroot/tmp/shared.
server # [    3.921536] systemd[1]: Mounted /sysroot/tmp/xchg.
server # [    3.923566] systemd[1]: rw-sysroot-nix-store.service: Deactivated successfully.
server # [    3.928206] systemd[1]: Finished rw-sysroot-nix-store.service.
server # [    4.505391] (udev-worker)[99]: mtd0ro: Failed to find and pin callout binary "/nix/store/8w0qabyr98chcmr4y9hh6h6l26albldx-systemd-261.3/lib/udev/mtd_probe": No such file or directory
server # [    4.516615] (udev-worker)[99]: mtd0ro: /etc/udev/rules.d/75-probe_mtd.rules:5 IMPORT{program}="mtd_probe $devnode": Failed to execute "mtd_probe /dev/mtd0ro", ignoring: No such file or directory
server # [    4.550649] systemd[1]: systemd-vconsole-setup.service: Deactivated successfully.
server # [    4.553245] systemd[1]: Stopped Virtual Console Setup.
server # [    4.556363] systemd[1]: Stopping Virtual Console Setup...
server # [    4.557401] systemd[1]: Starting Virtual Console Setup...
server # [    4.570242] systemd[1]: systemd-vconsole-setup.service: Deactivated successfully.
server # [    4.572378] systemd[1]: Stopped Virtual Console Setup.
server # [    4.575619] systemd[1]: Starting Virtual Console Setup...
server # [    4.607307] systemd-vconsole-setup[152]: Configuration of first virtual console was skipped, ignoring remaining ones.
server # [    4.611164] systemd[1]: Finished Virtual Console Setup.
server # [    4.700552] systemd[1]: Mounting /sysroot/nix/store...
server # [    4.743390] systemd[1]: Mounted /sysroot/nix/store.
server # [    4.747685] systemd[1]: Reached target Initrd File Systems.
server # [    4.752333] systemd[1]: Starting Find NixOS closure...
server # [    4.759725] systemd[1]: Starting Create Volatile Files and Directories in the Real Root...
server # [    4.797103] systemd[1]: Finished Create Volatile Files and Directories in the Real Root.
server # [    4.801604] systemd[1]: sysroot-run-credentials-systemd\x2dtmpfiles\x2dsetup\x2dsysroot.service.mount: Deactivated successfully.
server # [    4.809833] systemd[1]: Finished Find NixOS closure.
server # [    4.811249] systemd[1]: Reached target Initrd Default Target.
server # [    4.813975] systemd[1]: Starting Cleaning Up and Shutting Down Daemons...
server # [    4.839124] systemd[1]: Stopped target Initrd Default Target.
server # [    4.840952] systemd[1]: Stopped target Basic System.
server # [    4.842060] systemd[1]: Stopped target Initrd Root Device.
server # [    4.843255] systemd[1]: Stopped target Path Units.
server # [    4.848239] systemd[1]: systemd-ask-password-console.path: Deactivated successfully.
server # [    4.849528] systemd[1]: Stopped Dispatch Password Requests to Console Directory Watch.
server # [    4.851177] systemd[1]: Stopped target Slice Units.
server # [    4.852552] systemd[1]: Stopped target Socket Units.
server # [    4.854739] systemd[1]: Stopped target System Initialization.
server # [    4.857464] systemd[1]: Stopped target Swaps.
server # [    4.860516] systemd[1]: Stopped target Timer Units.
server # [    4.865150] systemd[1]: dbus.socket: Deactivated successfully.
server # [    4.866549] systemd[1]: Closed D-Bus System Message Bus Socket.
server # [    4.871640] systemd[1]: initrd-find-nixos-closure.service: Deactivated successfully.
server # [    4.873887] systemd[1]: Stopped Find NixOS closure.
server # [    4.879167] systemd[1]: Starting rw-sysroot-nix-store.service...
server # [    4.881947] systemd[1]: systemd-sysctl.service: Deactivated successfully.
server # [    4.883059] systemd[1]: Stopped Apply Kernel Variables.
server # [    4.890399] systemd[1]: systemd-modules-load.service: Deactivated successfully.
server # [    4.892451] systemd[1]: Stopped Load Kernel Modules.
server # [    4.896382] systemd[1]: systemd-tmpfiles-setup-sysroot.service: Deactivated successfully.
server # [    4.901980] systemd[1]: Stopped Create Volatile Files and Directories in the Real Root.
server # [    4.903284] systemd[1]: systemd-tmpfiles-setup.service: Deactivated successfully.
server # [    4.906348] systemd[1]: Stopped Create System Files and Directories.
server # [    4.908104] systemd[1]: Stopped target Local File Systems.
server # [    4.912354] systemd[1]: Stopped target Preparation for Local File Systems.
server # [    4.914450] systemd[1]: systemd-udev-trigger.service: Deactivated successfully.
server # [    4.916214] systemd[1]: Stopped Coldplug All udev Devices.
server # [    4.918248] systemd[1]: Stopping Rule-based Manager for Device Events and Files...
server # [    4.920396] systemd[1]: systemd-vconsole-setup.service: Deactivated successfully.
server # [    4.922473] systemd[1]: Stopped Virtual Console Setup.
server # [    4.923372] systemd[1]: initrd-cleanup.service: Deactivated successfully.
server # [    4.924487] systemd[1]: Finished Cleaning Up and Shutting Down Daemons.
server # [    4.925456] systemd[1]: systemd-udevd.service: Deactivated successfully.
server # [    4.926426] systemd[1]: Stopped Rule-based Manager for Device Events and Files.
server # [    4.927456] systemd[1]: systemd-udevd.service: Consumed 1.542s CPU time over 3.009s wall clock time, 25.4M memory peak.
server # [    4.932280] systemd[1]: systemd-udevd-control.socket: Deactivated successfully.
server # [    4.935102] systemd[1]: Closed udev Control Socket.
server # [    4.936297] systemd[1]: Starting Cleanup udev Database...
server # [    4.940227] systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully.
server # [    4.941459] systemd[1]: Stopped Create Static Device Nodes in /dev.
server # [    4.942374] systemd[1]: systemd-tmpfiles-setup-dev-early.service: Deactivated successfully.
server # [    4.948183] systemd[1]: Stopped Create Static Device Nodes in /dev gracefully.
server # [    4.949327] systemd[1]: kmod-static-nodes.service: Deactivated successfully.
server # [    4.950321] systemd[1]: Stopped Create List of Static Device Nodes.
server # [    4.951223] systemd[1]: rw-sysroot-nix-store.service: Deactivated successfully.
server # [    4.956465] systemd[1]: Finished rw-sysroot-nix-store.service.
server # [    4.982377] systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully.
server # [    4.986121] systemd[1]: Finished Cleanup udev Database.
server # [    4.987030] systemd[1]: Reached target Switch Root.
server # [    4.989053] systemd[1]: Starting NixOS Activation...
server # [    5.093538] initrd-nixos-activation-start[176]: booting system configuration /nix/store/95gca4q11nd2jkqqzlqvmsmgfsqsir6b-nixos-system-server-test
server # [    5.131615] initrd-nixos-activation-start[176]: running activation script...
server # [    5.392576] initrd-nixos-activation-start[199]: setting up /etc...
server # [    5.509968] systemd[1]: initrd-nixos-activation.service: Deactivated successfully.
server # [    5.513098] systemd[1]: Finished NixOS Activation.
server # [    5.514371] systemd[1]: Starting Switch Root...
server # [    5.536815] systemd[1]: Switching root.
server # [    5.715410] systemd-journald[71]: Received SIGTERM from PID 1 (systemd).
server # [   22.532888] systemd[1]: systemd 261.3 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE)
server # [   22.532935] systemd[1]: Detected virtualization qemu.
server # [   22.532991] systemd[1]: Detected architecture arm64.
server # [   22.533094] systemd[1]: Detected first boot.
server # [   22.545214] systemd[1]: Initializing machine ID from random generator.
server # [   22.767773] systemd[1]: bpf-restrict-fs: LSM BPF program attached
server # [   23.301846] systemd[1]: Applying preset policy.
server # [   23.538619] systemd[1]: Populated /etc with preset unit settings.
server # [   23.786400] systemd[1]: initrd-switch-root.service: Deactivated successfully.
server # [   23.788395] systemd[1]: Stopped initrd-switch-root.service.
server # [   23.792567] systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1.
server # [   23.794199] systemd[1]: Created slice Slice /system/getty.
server # [   23.797773] systemd[1]: Created slice User and Session Slice.
server # [   23.798260] systemd[1]: Started Dispatch Password Requests to Console Directory Watch.
server # [   23.800770] systemd[1]: Started Forward Password Requests to Wall Directory Watch.
server # [   23.801456] systemd[1]: Expecting device /dev/hvc0...
server # [   23.802083] systemd[1]: Expecting device /dev/ttyAMA0...
server # [   23.805803] systemd[1]: Reached target Local Encrypted Volumes.
server # [   23.806194] systemd[1]: Stopped target initrd-fs.target.
server # [   23.808248] systemd[1]: Stopped target initrd-root-fs.target.
server # [   23.808993] systemd[1]: Stopped target initrd-switch-root.target.
server # [   23.809656] systemd[1]: Reached target Virtual Machines and Containers.
server # [   23.810300] systemd[1]: Reached target Path Units.
server # [   23.814027] systemd[1]: Reached target Remote File Systems.
server # [   23.816107] systemd[1]: Reached target Slice Units.
server # [   23.816515] systemd[1]: Reached target Swaps.
server # [   23.820270] systemd[1]: Listening on Query the User Interactively for a Password.
server # [   23.822454] systemd[1]: Listening on Process Core Dump Socket.
server # [   23.825852] systemd[1]: Listening on Credential Encryption/Decryption.
server # [   23.829019] systemd[1]: Listening on Factory Reset Management.
server # [   23.829558] systemd[1]: Listening on Hostname Service Socket.
server # [   23.835769] systemd[1]: Starting Journal Log Access Socket...
server # [   23.836860] systemd[1]: Listening on Journal Audit Socket.
server # [   23.840890] systemd[1]: Listening on Console Output Muting Service Socket.
server # [   23.841715] systemd[1]: Listening on Userspace Out-Of-Memory (OOM) Killer Socket.
server # [   23.842246] systemd[1]: TPM PCR Measurements skipped, unmet condition check ConditionSecurity=measured-os
server # [   23.846151] systemd[1]: Make TPM PCR Policy skipped, unmet condition check ConditionSecurity=measured-uki
server # [   23.853338] systemd[1]: Listening on Disk Repartitioning Service Socket.
server # [   23.853973] systemd[1]: Listening on udev Control Socket.
server # [   23.857111] systemd[1]: Listening on udev Varlink Socket.
server # [   23.861365] systemd[1]: Mounting Huge Pages File System...
server # [   23.865094] systemd[1]: Mounting POSIX Message Queue File System...
server # [   23.878886] systemd[1]: Mounting Kernel Debug File System...
server # [   23.892660] systemd[1]: Mounting Kernel Trace File System...
server # [   23.907351] systemd[1]: Starting Create List of Static Device Nodes...
server # [   23.908842] systemd[1]: Load Kernel Module configfs skipped, unmet condition check ConditionKernelModuleLoaded=!configfs
server # [   23.926841] systemd[1]: Mounting Kernel Configuration File System...
server # [   23.927464] systemd[1]: Load Kernel Module drm skipped, unmet condition check ConditionKernelModuleLoaded=!drm
server # [   23.928801] systemd[1]: Load Kernel Module efi_pstore skipped, unmet condition check ConditionKernelModuleLoaded=!efi_pstore
server # [   23.938960] systemd[1]: Load Kernel Module fuse skipped, unmet condition check ConditionKernelModuleLoaded=!fuse
server # [   23.967608] systemd[1]: Mounting FUSE Control File System...
server # [   23.968192] systemd[1]: Clear Stale Hibernate Storage Info skipped, unmet condition check ConditionPathExists=/sys/firmware/efi/efivars/HibernateLocation-8cf2644b-4b0b-428f-9387-6d876050dc67
server # [   24.010784] systemd[1]: Starting Journal Service...
server # [   24.030402] systemd[1]: Starting Load Kernel Modules...
server # [   24.062817] systemd[1]: Starting Userspace Out-Of-Memory (OOM) Killer...
server # [   24.086548] systemd[1]: Starting Remount Root and Kernel File Systems...
server # [   24.087093] systemd[1]: Early TPM SRK Setup skipped, unmet condition check ConditionSecurity=measured-os
server # [   24.107730] systemd[1]: Starting Coldplug All udev Devices...
server # [   24.115030] systemd-journald[269]: Collecting audit messages is enabled.
server # [   24.133899] systemd[1]: Listening on Journal Log Access Socket.
server # [   24.134435] systemd[1]: Mounted Huge Pages File System.
server # [   24.119341] systemd[1]: Queued start job for default target Multi-User System.
server # [   24.141878] systemd[1]: Started Journal Service.
server # [   24.221621] EXT4-fs (vda): re-mounted 41f6c8ba-28b6-472f-8f1a-3360ae17135a.
server # [   24.121212] systemd[1]: systemd-journald.service: Deactivated successfully.
server # [   24.764081] systemd-journald[269]: Received client request to flush runtime journal.
server # [   24.825317] systemd[1]: Mounted POSIX Message Queue File System.
server # [   24.826534] systemd[1]: Mounted Kernel Debug File System.
server # [   24.827569] systemd[1]: Mounted Kernel Trace File System.
server # [   24.840552] systemd[1]: Finished Create List of Static Device Nodes.
server # [   24.845174] systemd[1]: Mounted Kernel Configuration File System.
server # [   24.846436] systemd-modules-load[270]: Module 'atkbd' is built in
server # [   24.847503] systemd-modules-load[270]: Module 'loop' is built in
server # [   24.859008] systemd[1]: Starting Create Static Device Nodes in /dev gracefully...
server # [   24.862498] systemd[1]: Finished Load Kernel Modules.
server # [   24.863513] systemd[1]: Starting Firewall...
server # [   24.870921] systemd[1]: Starting Apply Kernel Variables...
server # [   24.880982] systemd[1]: Finished Remount Root and Kernel File Systems.
server # [   24.882265] systemd[1]: Listening on Disk Image Download Service Socket.
server # [   24.883707] systemd-oomd[272]: No swap; memory pressure usage will be degraded
server # [   24.898874] systemd[1]: Starting Flush Journal to Persistent Storage...
server # [   24.906527] systemd[1]: Platform Persistent Storage Archival skipped, unmet condition check ConditionDirectoryNotEmpty=/sys/fs/pstore
server # [   24.911492] systemd[1]: Starting Load/Save OS Random Seed...
server # [   24.918250] systemd[1]: TPM SRK Setup skipped, unmet condition check ConditionSecurity=measured-os
server # [   24.919577] systemd[1]: Started Userspace Out-Of-Memory (OOM) Killer.
server # [   24.924505] systemd[1]: Mounted FUSE Control File System.
server # [   24.925437] systemd[1]: Finished Create Static Device Nodes in /dev gracefully.
server # [   24.926499] systemd[1]: Starting Create Static Device Nodes in /dev...
server # [   24.927479] systemd[1]: Finished Load/Save OS Random Seed.
server # [   24.932329] systemd[1]: Reached target First Boot Complete.
server # [   24.933201] systemd[1]: Finished Apply Kernel Variables.
server # [   24.933983] systemd[1]: Finished Create Static Device Nodes in /dev.
server # [   24.934890] systemd[1]: Reached target Preparation for Local File Systems.
server # [   24.935913] systemd[1]: Starting Rule-based Manager for Device Events and Files...
server # [   24.956810] systemd-udevd[296]: Using default interface naming scheme 'v261'.
server # [   24.958034] systemd[1]: Mounting /run/wrappers...
server # [   24.958834] systemd[1]: Finished Flush Journal to Persistent Storage.
server # [   24.959786] systemd[1]: Mounted /run/wrappers.
server # [   24.974389] systemd[1]: Reached target Local File Systems.
server # [   24.975279] systemd[1]: Listening on Boot Loader Control Service Socket.
server # [   24.989504] systemd[1]: Starting register-nix-paths.service...
server # [   24.990448] systemd[1]: Starting Create SUID/SGID Wrappers...
server # [   24.991295] systemd[1]: Update Boot Loader Random Seed skipped, no trigger condition checks were met.
server # [   25.008402] systemd[1]: Starting Save Transient machine-id to Disk...
server # [   25.009573] systemd[1]: Starting Create System Files and Directories...
server # [   25.083723] systemd[1]: Started Rule-based Manager for Device Events and Files.
server # [   25.271818] systemd[1]: Finished Create System Files and Directories.
server # [   25.283712] systemd[1]: Starting Rebuild Journal Catalog...
server # [   25.294899] systemd[1]: Starting Record System Boot/Shutdown in UTMP...
server # [   25.462058] systemd[1]: Finished Record System Boot/Shutdown in UTMP.
server # [   25.514444] systemd[1]: Finished Rebuild Journal Catalog.
server # [   25.525334] systemd[1]: Starting Update is Completed...
server # [   25.627221] systemd[1]: Finished Update is Completed.
server # [   26.349642] systemd[1]: Finished Coldplug All udev Devices.
server # [   26.391041] systemd[1]: Load Kernel Module configfs skipped, unmet condition check ConditionKernelModuleLoaded=!configfs
server # [   26.461427] systemd[1]: Load Kernel Module fuse skipped, unmet condition check ConditionKernelModuleLoaded=!fuse
server # [   26.508859] systemd[1]: Finished register-nix-paths.service.
server # [   26.517401] systemd[1]: suid-sgid-wrappers.service: Deactivated successfully.
server # [   26.522153] systemd[1]: Finished Create SUID/SGID Wrappers.
server # [   26.526626] systemd[1]: Reached target System Initialization.
server # [   26.531468] systemd[1]: Started Discard unused filesystem blocks once a week.
server # [   26.535854] systemd[1]: Started niks3 garbage collection timer.
server # [   26.538954] systemd[1]: Started Daily Cleanup of Temporary Directories.
server # [   26.540007] systemd[1]: Reached target Timer Units.
server # [   26.546927] systemd[1]: Listening on D-Bus System Message Bus Socket.
server # [   26.547943] systemd[1]: Listening on niks3 server socket.
server # [   26.556266] systemd[1]: Listening on Nix Daemon Socket.
server # [   26.557227] systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.
server # [   26.558473] systemd[1]: Reached target Socket Units.
server # [   26.559238] systemd[1]: Reached target Basic System.
server # [   26.560001] systemd[1]: Starting Import lastlog data into lastlog2 database...
server # [   26.570946] systemd[1]: Starting Name Service Cache Daemon (nsncd)...
server # [   26.578171] systemd[1]: Started openbao-dev.service.
server # [   26.615889] systemd[1]: Starting openbao-setup.service...
server # [   26.638658] systemd[1]: Starting Post-Boot Actions...
server # [   26.669814] systemd[1]: Started Reset console on configuration changes.
server # [   26.737121] systemd[1]: Starting resolvconf update...
server # [   26.803114] nsncd[452]: Oct 25 16:06:20.284 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"
server # [   26.842240] systemd[1]: Starting D-Bus System Message Bus...
server # [   26.848427] systemd[1]: Started Name Service Cache Daemon (nsncd).
server # [   26.860498] systemd[1]: Reached target Host and Network Name Lookups.
server # [   26.861712] systemd[1]: Reached target User and Group Name Lookups.
server # [   26.919687] systemd[1]: Starting User Login Management...
server # [   26.925731] systemd[1]: Finished Post-Boot Actions.
server # [   27.019764] systemd[1]: Finished Import lastlog data into lastlog2 database.
server # [   27.041367] systemd[1]: Condition check resulted in /dev/hvc0 being skipped.
server # [   27.138158] systemd[1]: Condition check resulted in /dev/ttyAMA0 being skipped.
server # [   27.160939] systemd[1]: Started backdoor.service.
server # [   27.310708] dbus-broker-launch[472]: Looking up NSS user entry for 'systemd-timesync'...
server # [   27.334988] dbus-broker-launch[472]: NSS returned no entry for 'systemd-timesync'
server # [   27.352374] dbus-broker-launch[472]: Invalid user-name in /nix/store/1y12c8i9gcv03065b7gyn1x6lbszsrmh-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"
server # [   27.385155] systemd-logind[487]: New seat seat0.
server # [   27.397238] systemd[1]: Started User Login Management.
server # [   27.414520] systemd[1]: Starting linger-users.service...
server # [   27.424518] systemd[1]: Started D-Bus System Message Bus.
server # connecting to host...
server # [   27.492620] systemd[1]: Stopped target Host and Network Name Lookups.
server # [   27.493819] systemd[1]: Stopping Host and Network Name Lookups...
server # [   27.509057] systemd[1]: Stopped target User and Group Name Lookups.
server # [   27.510230] systemd[1]: Stopping User and Group Name Lookups...
server # [   27.511084] systemd[1]: Stopping Name Service Cache Daemon (nsncd)...
server # [   27.525957] dbus-broker-launch[472]: Ready
server # [   27.526794] systemd[1]: nscd.service: Deactivated successfully.
server # [   27.542342] systemd[1]: Stopped Name Service Cache Daemon (nsncd).
server: Guest shell says: b'Spawning backdoor root shell...\n'
server: connected to guest root shell
server: (connecting took 27.86 seconds)
server: (finished: waiting for the VM to finish booting, in 28.32 seconds)
server # [   27.619225] systemd[1]: Starting Name Service Cache Daemon (nsncd)...
server # [   27.627456] systemd[1]: linger-users.service: Deactivated successfully.
server # [   27.635214] systemd[1]: Finished linger-users.service.
server # [   27.709058] (udev-worker)[411]: Network interface NamePolicy= disabled on kernel command line.
server # [   27.729683] (udev-worker)[345]: eth1: Config file /etc/systemd/network/40-eth1.link is applied to device based on potentially unpredictable interface name.
server # [   27.746510] (udev-worker)[345]: Network interface NamePolicy= disabled on kernel command line.
server # [   27.762394] systemd[1]: Finished Firewall.
server # [   27.801940] nsncd[577]: Oct 25 16:06:21.284 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"
server # [   27.823639] systemd[1]: Started Name Service Cache Daemon (nsncd).
server # [   27.835447] systemd[1]: Finished resolvconf update.
server # [   27.856666] systemd[1]: Reached target Preparation for Network.
server # [   27.863116] systemd[1]: Reached target Host and Network Name Lookups.
server # [   27.869555] systemd[1]: Reached target User and Group Name Lookups.
server # [   27.881799] systemd[1]: Starting DHCP Client...
server # [   27.905157] systemd[1]: Starting Extra networking commands....
server # [   27.971377] systemd[1]: Condition check resulted in Virtio network device being skipped.
server # [   27.997094] systemd[1]: Starting Address configuration of eth1...
server # [   28.294061] network-addresses-eth1-start[615]: adding address 192.168.1.1/24... done
server # [   28.364218] network-addresses-eth1-start[615]: adding address 2001:db8:1::1/64... done
server # [   28.466446] systemd[1]: Finished Address configuration of eth1.
server # [   28.511157] dhcpcd[624]: dhcpcd-10.3.2 starting
server # [   28.539096] dhcpcd[679]: dev: loaded udev
server # [   28.545301] bao[453]: 2026-10-25T16:06:22.025Z [INFO]  proxy environment: http_proxy="" https_proxy="" no_proxy=""
server # [   28.562991] bao[453]: 2026-10-25T16:06:22.046Z [WARN]  no `api_addr` value specified in config or in BAO_API_ADDR; falling back to detection if possible, but this value should be manually set
server # [   28.581197] bao[453]: 2026-10-25T16:06:22.065Z [INFO]  core: Initializing version history cache for core
server # [   28.592373] bao[453]: ==> OpenBao server configuration:
server # [   28.593383] bao[453]:              Api Address: http://127.0.0.1:8200
server # [   28.594288] bao[453]:                      Cgo: enabled
server # [   28.595010] bao[453]:          Cluster Address: https://127.0.0.1:8201
server # [   28.595888] bao[453]:    Environment Variables: HOME, INVOCATION_ID, IO_PRESSURE_WATCH, IO_PRESSURE_WRITE, JOURNAL_STREAM, LANG, LOCALE_ARCHIVE, LOGNAME, MEMORY_PRESSURE_WATCH, MEMORY_PRESSURE_WRITE, PATH, RUNTIME_DIRECTORY, STATE_DIRECTORY, SYSTEMD_EXEC_PID, TZDIR, USER
server # [   28.637607] 8021q: 802.1Q VLAN Support v1.8
server # [   28.637982] 8021q: adding VLAN 0 to HW filter on device eth1
server # [   28.623833] bao[453]:               Go Version: go1.27.2
server # [   28.629649] bao[453]:               Listener 1: tcp (addr: "127.0.0.1:8200", cluster address: "127.0.0.1:8201", max_request_duration: "1m30s", max_request_json_memory: "34078720", max_request_json_strings: "1000", max_request_size: "33554432", tls: "disabled")
server # [   28.644168] bao[453]:                Log Level:
server # [   28.644959] bao[453]:            Recovery Mode: false
server # [   28.648694] bao[453]:                  Storage: inmem
server # [   28.649626] bao[453]:                  Version: OpenBao v2.7.1, committed 1970-01-01T00:00:00Z
server # [   28.650763] bao[453]:              Version Sha: refs/tags/v2.7.1
server # [   28.651575] bao[453]: 2026-10-25T16:06:22.073Z [INFO]  core: security barrier not initialized
server # [   28.665748] bao[453]: 2026-10-25T16:06:22.094Z [INFO]  core: security barrier initialized: shares=1 threshold=1
server # [   28.667305] bao[453]: 2026-10-25T16:06:22.099Z [INFO]  core: post-unseal setup starting
server # [   28.674409] bao[453]: 2026-10-25T16:06:22.140Z [INFO]  core: loaded wrapping token key
server # [   28.675561] bao[453]: 2026-10-25T16:06:22.143Z [INFO]  core: successfully setup plugin catalog: plugin-directory=""
server # [   28.683636] bao[453]: 2026-10-25T16:06:22.147Z [INFO]  core: reading transactional mount table
server # [   28.690961] bao[453]: 2026-10-25T16:06:22.147Z [INFO]  core: no mounts in transactional mount table; adding default mount table
server # [   28.698609] bao[453]: 2026-10-25T16:06:22.149Z [INFO]  core: successfully mounted: type=cubbyhole version="v2.7.1+builtin.bao" path=cubbyhole/ namespace="ID: root. Path: "
server # [   28.708488] systemd[1]: Finished Extra networking commands..
server # [   28.709395] bao[453]: 2026-10-25T16:06:22.161Z [INFO]  core: successfully mounted: type=system version="v2.7.1+builtin.bao" path=sys/ namespace="ID: root. Path: "
server # [   28.711260] bao[453]: 2026-10-25T16:06:22.164Z [INFO]  core: successfully mounted: type=identity version="v2.7.1+builtin.bao" path=identity/ namespace="ID: root. Path: "
server # [   28.732280] bao[453]: 2026-10-25T16:06:22.170Z [INFO]  core: reading transactional auth mount table
server # [   28.733633] bao[453]: 2026-10-25T16:06:22.170Z [INFO]  core: no auth mounts in transactional auth mount table; adding default auth mount table
server # [   28.735305] bao[453]: 2026-10-25T16:06:22.170Z [INFO]  core: successfully mounted: type=token version="v2.7.1+builtin.bao" path=token/ namespace="ID: root. Path: "
server # [   28.764198] bao[453]: 2026-10-25T16:06:22.170Z [INFO]  rollback: Starting the rollback manager with 256 workers
server # [   28.765718] bao[453]: 2026-10-25T16:06:22.189Z [INFO]  rollback: starting rollback manager
server # [   28.766825] bao[453]: 2026-10-25T16:06:22.190Z [INFO]  core: restoring leases
server # [   28.779346] systemd[1]: Reached target Network.
server # [   28.789212] bao[453]: 2026-10-25T16:06:22.245Z [INFO]  core: entities restored
server # [   28.790296] bao[453]: 2026-10-25T16:06:22.245Z [INFO]  core: groups restored
server # [   28.791251] bao[453]: 2026-10-25T16:06:22.246Z [INFO]  core: Recorded vault version: vault version=2.7.1 upgrade time="2026-10-25 16:06:22.24590554 +0000 UTC" commit date=1970-01-01T00:00:00Z
server # [   28.808164] bao[453]: 2026-10-25T16:06:22.255Z [INFO]  expiration: lease restore complete
server # [   28.809500] bao[453]: 2026-10-25T16:06:22.257Z [INFO]  core: post-unseal setup complete
server # [   28.810574] bao[453]: 2026-10-25T16:06:22.257Z [INFO]  core: root token generated
server # [   28.811622] bao[453]: 2026-10-25T16:06:22.257Z [INFO]  core: pre-seal teardown starting
server # [   28.835894] bao[453]: 2026-10-25T16:06:22.261Z [INFO]  rollback: stopping rollback manager
server # [   28.844176] bao[453]: 2026-10-25T16:06:22.261Z [INFO]  core: pre-seal teardown complete
server # [   28.845448] bao[453]: 2026-10-25T16:06:22.262Z [INFO]  core.cluster-listener.tcp: starting listener: listener_address=127.0.0.1:8201
server # [   28.847051] bao[453]: 2026-10-25T16:06:22.262Z [INFO]  core.cluster-listener: serving cluster requests: cluster_listen_address=127.0.0.1:8201
server # [   28.869820] systemd[1]: Starting PostgreSQL Server...
server # [   28.870723] bao[453]: 2026-10-25T16:06:22.280Z [INFO]  core: post-unseal setup starting
server # [   28.871818] bao[453]: 2026-10-25T16:06:22.280Z [INFO]  core: loaded wrapping token key
server # [   28.887890] bao[453]: 2026-10-25T16:06:22.280Z [INFO]  core: successfully setup plugin catalog: plugin-directory=""
server # [   28.906161] bao[453]: 2026-10-25T16:06:22.281Z [INFO]  core: reading transactional mount table
server # [   28.907417] bao[453]: 2026-10-25T16:06:22.282Z [INFO]  core: successfully mounted: type=identity version="v2.7.1+builtin.bao" path=identity/ namespace="ID: root. Path: "
server # [   28.916858] bao[453]: 2026-10-25T16:06:22.283Z [INFO]  core: successfully mounted: type=system version="v2.7.1+builtin.bao" path=sys/ namespace="ID: root. Path: "
server # [   28.918885] bao[453]: 2026-10-25T16:06:22.283Z [INFO]  core: successfully mounted: type=cubbyhole version="v2.7.1+builtin.bao" path=cubbyhole/ namespace="ID: root. Path: "
server # [   28.941078] bao[453]: 2026-10-25T16:06:22.284Z [INFO]  core: reading transactional auth mount table
server # [   28.951083] bao[453]: 2026-10-25T16:06:22.299Z [INFO]  core: successfully mounted: type=token version="v2.7.1+builtin.bao" path=token/ namespace="ID: root. Path: "
server # [   28.969458] bao[453]: 2026-10-25T16:06:22.299Z [INFO]  rollback: Starting the rollback manager with 256 workers
server # [   28.979250] bao[453]: 2026-10-25T16:06:22.300Z [INFO]  core: restoring leases
server # [   28.990592] bao[453]: 2026-10-25T16:06:22.310Z [INFO]  expiration: lease restore complete
server # [   28.991783] bao[453]: 2026-10-25T16:06:22.310Z [INFO]  rollback: starting rollback manager
server # [   29.015270] cfg80211: Loading compiled-in X.509 certificates for regulatory database
server # [   29.011719] bao[453]: 2026-10-25T16:06:22.310Z [INFO]  core: entities restored
server # [   29.022452] bao[453]: 2026-10-25T16:06:22.310Z [INFO]  core: groups restored
server # [   29.028168] bao[453]: 2026-10-25T16:06:22.311Z [INFO]  core: post-unseal setup complete
server # [   29.029361] bao[453]: 2026-10-25T16:06:22.311Z [INFO]  core: vault is unsealed
server # [   29.030337] bao[453]: 2026-10-25T16:06:22.326Z [INFO]  expiration: revoked lease: lease_id=auth/token/root/heb70cb80d241aa202b0bf84854d9f6d25b9f56324a6474a43d79bba602213067
server # [   29.057300] systemd[1]: Started RustFS S3-compatible object storage.
server # [   29.058545] bao[453]: 2026-10-25T16:06:22.375Z [INFO]  core: successful mount: namespace="" path=secret/ type=kv version=""
server # [   29.075004] bao[453]: 2026-10-25T16:06:22.375Z [INFO]  beginning post-unseal configuration
server # [   29.081651] bao[453]: ==> OpenBao server started!
server # [   29.082419] bao[453]: 2026-10-25T16:06:22.396Z [INFO]  secrets.kv.kv_a716fa63: collecting keys to upgrade
server # [   29.083689] bao[453]: 2026-10-25T16:06:22.396Z [INFO]  secrets.kv.kv_a716fa63: done collecting keys: num_keys=1
server # [   29.103951] bao[453]: 2026-10-25T16:06:22.396Z [INFO]  secrets.kv.kv_a716fa63: upgrading keys finished
server # [   29.113505] bao[453]: WARNING! dev mode is enabled! In this mode, OpenBao runs entirely in-memory
server # [   29.114794] bao[453]: and starts unsealed with a single unseal key. The root token is already
server # [   29.115924] bao[453]: authenticated to the CLI, so you can immediately begin using OpenBao.
server # [   29.134652] bao[453]: You may need to set the following environment variables:
server # [   29.135771] bao[453]:     $ export BAO_ADDR='http://127.0.0.1:8200'
server # [   29.145939] bao[453]: The unseal key and root token are displayed below in case you want to
server # [   29.147142] bao[453]: seal/unseal the Vault or re-authenticate.
server # [   29.147937] bao[453]: Unseal Key: Jil4VFAEqTef2WTfmfdXSXALPSBhnvfsqsK2jEdAwcg=
server # [   29.172327] Loaded X.509 cert 'sforshee: 00b28ddf47aef9cea7'
server # [   29.172864] Loaded X.509 cert 'wens: 61c038651aabdcf94bd0ac7ff06c7248db18c600'
server # [   29.167177] bao[453]: Root Token: root
server # [   29.184369] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
server # [   29.184728] cfg80211: failed to load regulatory.db
server # [   29.174310] bao[453]: Development mode should NOT be used in production installations!
server # [   29.188552] systemd[1]: Starting Setup RustFS bucket...
server # [   29.189701] systemd[1]: Starting Permit User Sessions...
server # [   29.190683] systemd[1]: Finished Permit User Sessions.
server # [   29.191971] systemd[1]: Started Getty on tty1.
server # [   29.217882] systemd[1]: Reached target Login Prompts.
server # [   29.218715] systemd[1]: etc-machine\x2did.mount: Deactivated successfully.
server # [   29.219670] systemd[1]: Finished Save Transient machine-id to Disk.
server # [   29.316206] systemd-logind[487]: Watching system buttons on /dev/input/event0 (gpio-keys)
server # [   29.442835] dhcpcd[679]: eth0: waiting for carrier
server # [   29.458912] 8021q: adding VLAN 0 to HW filter on device eth0
server # [   29.449036] dhcpcd[679]: libudev: received NULL device
server # [   29.455216] dhcpcd[679]: libudev: received NULL device
server # [   29.459243] dhcpcd[679]: eth0: carrier acquired
server # [   29.477798] dhcpcd[679]: DUID 00:01:00:01:32:70:e5:7e:52:54:00:12:34:56
server # [   29.478901] dhcpcd[679]: eth0: IAID 00:12:34:56
server # [   29.479572] dhcpcd[679]: eth0: adding address fe80::5054:ff:fe12:3456
server # [   29.570271] postgresql-pre-start[722]: The files belonging to this database system will be owned by user "postgres".
server # [   29.571851] postgresql-pre-start[722]: This user must also own the server process.
server # [   29.594534] postgresql-pre-start[722]: The database cluster will be initialized with locale "en_US.UTF-8".
server # [   29.601505] postgresql-pre-start[722]: The default database encoding has accordingly been set to "UTF8".
server # [   29.605076] postgresql-pre-start[722]: The default text search configuration will be set to "english".
server # [   29.616264] postgresql-pre-start[722]: Data page checksums are enabled.
server # [   29.617476] postgresql-pre-start[722]: fixing permissions on existing directory /var/lib/postgresql/18 ... ok
server # [   29.618807] postgresql-pre-start[722]: creating subdirectories ... ok
server # [   29.619683] postgresql-pre-start[722]: selecting dynamic shared memory implementation ... posix
server # [   29.660211] mousedev: PS/2 mouse device common for all mice
server # [   29.914566] postgresql-pre-start[722]: selecting default "max_connections" ... 100
server # [   30.012528] systemd-logind[487]: Watching system buttons on /dev/input/event1 (QEMU QEMU USB Keyboard)
server # [   30.226440] postgresql-pre-start[722]: selecting default "shared_buffers" ... 128MB
server # [   30.330666] dhcpcd[679]: eth0: soliciting a DHCP lease
server # [   30.339602] dhcpcd[679]: eth0: offered 10.0.2.15 from 10.0.2.2
server # [   30.344276] dhcpcd[679]: eth0: probing address 10.0.2.15/24
server # [   30.516592] bao[453]: 2026-10-25T16:06:23.998Z [INFO]  core: successful mount: namespace="" path=transit/ type=transit version=""
server # [   30.527400] openbao-setup-start[753]: Success! Enabled the transit secrets engine at: transit/
server # [   31.009639] openbao-setup-start[772]: Retrieving wrapping key.
server # [   31.224741] dhcpcd[679]: eth0: soliciting an IPv6 router
server # [   31.228323] dhcpcd[679]: eth0: Router Advertisement from fe80::2
server # [   31.229287] dhcpcd[679]: eth0: adding address fec0::5054:ff:fe12:3456/64
server # [   31.230271] dhcpcd[679]: eth0: adding route to fec0::/64
server # [   31.231046] dhcpcd[679]: eth0: adding default route via fe80::2
server # [   32.661869] input: QEMU Virtio Keyboard as /devices/platform/4010000000.pcie/pci0000:00/0000:00:06.0/virtio5/input/input3
server # [   34.605617] systemd[1]: Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch.
server # [   34.634473] systemd[1]: Starting Virtual Console Setup...
server # [   34.656094] systemd[1]: systemd-vconsole-setup.service: Deactivated successfully.
server # [   34.661624] systemd[1]: Stopped Virtual Console Setup.
server # [   34.684962] systemd[1]: Starting Virtual Console Setup...
server # [   34.787049] systemd-logind[487]: Watching system buttons on /dev/input/event3 (QEMU Virtio Keyboard)
server # [   35.265435] openbao-setup-start[772]: Wrapping source key with ephemeral key.
server # [   35.266596] openbao-setup-start[772]: Encrypting ephemeral key with wrapping key.
server # [   35.268908] openbao-setup-start[772]: Submitting wrapped key.
server # [   35.304522] openbao-setup-start[772]: Success!
server # [   35.336623] systemd[1]: Finished openbao-setup.service.
server # [   35.419167] systemd-vconsole-setup[838]: Configuration of first virtual console was skipped, ignoring remaining ones.
server # [   35.424094] systemd[1]: Finished Virtual Console Setup.
server # [   35.644885] dhcpcd[679]: eth0: leased 10.0.2.15 for 86400 seconds
server # [   35.645951] dhcpcd[679]: eth0: adding route to 10.0.2.0/24
server # [   35.646799] dhcpcd[679]: eth0: adding default route via 10.0.2.2
server # [   35.782305] postgresql-pre-start[722]: selecting default time zone ... UTC
server # [   35.785667] postgresql-pre-start[722]: creating configuration files ... ok
server # [   35.820008] systemd[1]: Started DHCP Client.
server # [   36.041684] postgresql-pre-start[722]: running bootstrap script ... ok
server # [   36.657839] postgresql-pre-start[722]: performing post-bootstrap initialization ... ok
server # [   36.830360] postgresql-pre-start[722]: syncing data to disk ... ok
server # [   36.831338] postgresql-pre-start[722]: initdb: warning: enabling "trust" authentication for local connections
server # [   36.832990] postgresql-pre-start[722]: initdb: hint: You can change this by editing pg_hba.conf or using the option -A, or --auth-local and --auth-host, the next time you run initdb.
server # [   36.835131] postgresql-pre-start[722]: Success. You can now start the database server using:
server # [   36.836404] postgresql-pre-start[722]:     pg_ctl -D /var/lib/postgresql/18 -l logfile start
server # [   36.932779] postgres[926]: [926] LOG:  starting PostgreSQL 18.6 on aarch64-unknown-linux-gnu, compiled by clang version 21.1.8, 64-bit
server # [   36.935744] postgres[926]: [926] LOG:  listening on IPv6 address "::1", port 5432
server # [   36.937362] postgres[926]: [926] LOG:  listening on IPv4 address "127.0.0.1", port 5432
server # [   36.939048] postgres[926]: [926] LOG:  listening on Unix socket "/run/postgresql/.s.PGSQL.5432"
server # [   36.951220] postgres[935]: [935] LOG:  database system was shut down at 2026-10-25 16:06:30 GMT
server # [   36.957958] postgres[926]: [926] LOG:  database system is ready to accept connections
server # [   36.961924] systemd[1]: Started PostgreSQL Server.
server # [   36.970870] systemd[1]: Starting PostgreSQL Setup Scripts...
server # [   37.173779] postgresql-setup-start[946]: CREATE DATABASE
server # [   37.223041] postgresql-setup-start[951]: CREATE ROLE
server # [   37.249516] postgresql-setup-start[953]: ALTER DATABASE
server # [   37.257122] systemd[1]: Finished PostgreSQL Setup Scripts.
server # [   37.259757] systemd[1]: Reached target PostgreSQL.
server # [   43.580330] rustfs-setup-start[1018]: mb s3://niks3-test
server # [   43.594744] systemd[1]: Finished Setup RustFS bucket.
server # [   43.605171] systemd[1]: Starting niks3 server...
server # [   43.797545] niks3-server[1029]: 2026/10/25 16:06:37 INFO Configured external signer program=/nix/store/vjqln7qss9csxkck9qxiabirk1d4m9iy-niks3-openbao-signer/bin/niks3-openbao-signer
server # [   43.833455] niks3-server[1029]: 2026/10/25 16:06:37 INFO Read proxy enabled — serving cache objects from S3
server # [   43.839246] niks3-server[1029]: 2026/10/25 16:06:37 INFO Using socket-activated listener address=0.0.0.0:5751
server # [   43.844282] niks3-server[1029]: 2026/10/25 16:06:37 INFO systemd watchdog enabled interval=15s
server # [   43.847202] niks3-server[1029]: 2026/10/25 16:06:37 INFO Starting HTTP server address=0.0.0.0:5751
server # [   43.849168] systemd[1]: Started niks3 server.
server # [   43.850045] systemd[1]: Reached target Multi-User System.
server # [   43.850851] systemd[1]: Startup finished in 1.088s (kernel) + 20.986s (initrd) + 21.766s (userspace) = 43.842s.
server: (finished: waiting for unit niks3.service, in 45.03 seconds)
server: waiting for TCP port 5751 on localhost
server # Connection to localhost (127.0.0.1) 5751 port [tcp/*] succeeded!
server: (finished: waiting for TCP port 5751 on localhost, in 0.05 seconds)
server: must succeed: echo -n 'test-token-that-is-at-least-36-characters-long' > /tmp/auth-token
server: (finished: must succeed: echo -n 'test-token-that-is-at-least-36-characters-long' > /tmp/auth-token, in 0.02 seconds)
subtest: narinfos signed through OpenBao verify against the public key
server: must succeed: nix-build -E 'derivation { name="signer-1"; system=builtins.currentSystem; builder="/bin/sh"; args=["-c" "echo signer-1 > $out"]; }' --no-out-link
server # this derivation will be built:
server #   /nix/store/llf1sz2nwwvckwzgd3kx46my44a4lw37-signer-1.drv
server # building '/nix/store/llf1sz2nwwvckwzgd3kx46my44a4lw37-signer-1.drv'...
server: (finished: must succeed: nix-build -E 'derivation { name="signer-1"; system=builtins.currentSystem; builder="/bin/sh"; args=["-c" "echo signer-1 > $out"]; }' --no-out-link, in 0.19 seconds)
server: must succeed: NIKS3_SERVER_URL=http://localhost:5751 NIKS3_AUTH_TOKEN_FILE=/tmp/auth-token /nix/store/knh7iwzlmjv38qf28c6waqgmrdvjr5zg-niks3-1.15.0/bin/niks3 push /nix/store/lqml7ay4d3x2fvdbdff94fwrdh1br5ng-signer-1
server # [   44.695468] niks3-server[1029]: 2026/10/25 16:06:38 INFO Received push request method=POST path=/api/pushes
server # time=2026-10-25T16:06:38.188Z level=INFO msg="Uploading 1 paths to localhost (0 already cached)"
server # time=2026-10-25T16:06:38.190Z level=INFO msg="Uploading lqml7ay4d3x2fvdbdff94fwrdh1br5ng-signer-1 (128B)"
server # [   44.748101] niks3-server[1029]: 2026/10/25 16:06:38 INFO Registered completed upload object_key=nar/1xbdd0jsa3f9d9xz2wfpcjbcrx5dpyy490mg6cnrlkqswmwsm6j0.nar.zst
server # [   44.757380] niks3-server[1029]: 2026/10/25 16:06:38 INFO Received sign narinfos request method=POST path=/api/pushes/1/sign
server # [   44.766275] niks3-server[1029]: 2026/10/25 16:06:38 INFO Registered completed upload object_key=lqml7ay4d3x2fvdbdff94fwrdh1br5ng.ls
server # [   44.808798] niks3-server[1029]: 2026/10/25 16:06:38 INFO Registered completed upload object_key=log/llf1sz2nwwvckwzgd3kx46my44a4lw37-signer-1.drv
server # time=2026-10-25T16:06:38.311Z level=INFO msg="Uploading 1 narinfos"
server # [   44.828154] niks3-server[1029]: 2026/10/25 16:06:38 INFO Signed narinfos id=1 count=1
server # [   44.850819] niks3-server[1029]: 2026/10/25 16:06:38 INFO Received complete push request method=POST path=/api/pushes/1/complete
server # [   44.865235] niks3-server[1029]: 2026/10/25 16:06:38 INFO Completed push id=1 objects=4 duration=14.7971ms
server # time=2026-10-25T16:06:38.351Z level=INFO msg="Upload complete. (235ms)"
server # [   44.871621] niks3-server[1029]: 2026/10/25 16:06:38 INFO Registered completed upload object_key=lqml7ay4d3x2fvdbdff94fwrdh1br5ng.narinfo
server: (finished: must succeed: NIKS3_SERVER_URL=http://localhost:5751 NIKS3_AUTH_TOKEN_FILE=/tmp/auth-token /nix/store/knh7iwzlmjv38qf28c6waqgmrdvjr5zg-niks3-1.15.0/bin/niks3 push /nix/store/lqml7ay4d3x2fvdbdff94fwrdh1br5ng-signer-1, in 0.35 seconds)
server: must succeed: nix copy --from http://localhost:5751 --to /tmp/store-1 /nix/store/lqml7ay4d3x2fvdbdff94fwrdh1br5ng-signer-1
server # copying 1 paths...
server # copying path '/nix/store/lqml7ay4d3x2fvdbdff94fwrdh1br5ng-signer-1' from 'http://localhost:5751'...
server: (finished: must succeed: nix copy --from http://localhost:5751 --to /tmp/store-1 /nix/store/lqml7ay4d3x2fvdbdff94fwrdh1br5ng-signer-1, in 0.11 seconds)
server: must succeed: nix --store /tmp/store-1 store cat /nix/store/lqml7ay4d3x2fvdbdff94fwrdh1br5ng-signer-1 | grep -F signer-
server: (finished: must succeed: nix --store /tmp/store-1 store cat /nix/store/lqml7ay4d3x2fvdbdff94fwrdh1br5ng-signer-1 | grep -F signer-, in 0.07 seconds)
(finished: subtest: narinfos signed through OpenBao verify against the public key, in 0.72 seconds)
subtest: the signing process is reused across pushes
server: must succeed: pgrep -x niks3-openbao-s | head -n1
server: (finished: must succeed: pgrep -x niks3-openbao-s | head -n1, in 0.04 seconds)
server: must succeed: nix-build -E 'derivation { name="signer-2"; system=builtins.currentSystem; builder="/bin/sh"; args=["-c" "echo signer-2 > $out"]; }' --no-out-link
server # this derivation will be built:
server #   /nix/store/yxz8hnxsx36kwxkczzaa10chm50zxs5n-signer-2.drv
server # building '/nix/store/yxz8hnxsx36kwxkczzaa10chm50zxs5n-signer-2.drv'...
server: (finished: must succeed: nix-build -E 'derivation { name="signer-2"; system=builtins.currentSystem; builder="/bin/sh"; args=["-c" "echo signer-2 > $out"]; }' --no-out-link, in 0.16 seconds)
server: must succeed: NIKS3_SERVER_URL=http://localhost:5751 NIKS3_AUTH_TOKEN_FILE=/tmp/auth-token /nix/store/knh7iwzlmjv38qf28c6waqgmrdvjr5zg-niks3-1.15.0/bin/niks3 push /nix/store/r2hcia81arzi3kgl7nxpvnvnd950y3hk-signer-2
server # [   45.382313] niks3-server[1029]: 2026/10/25 16:06:38 INFO Received push request method=POST path=/api/pushes
server # time=2026-10-25T16:06:38.871Z level=INFO msg="Uploading 1 paths to localhost (0 already cached)"
server # time=2026-10-25T16:06:38.872Z level=INFO msg="Uploading r2hcia81arzi3kgl7nxpvnvnd950y3hk-signer-2 (128B)"
server # [   45.425888] niks3-server[1029]: 2026/10/25 16:06:38 INFO Received sign narinfos request method=POST path=/api/pushes/2/sign
server # time=2026-10-25T16:06:38.919Z level=INFO msg="Uploading 1 narinfos"
server # [   45.436166] niks3-server[1029]: 2026/10/25 16:06:38 INFO Registered completed upload object_key=r2hcia81arzi3kgl7nxpvnvnd950y3hk.ls
server # [   45.437857] niks3-server[1029]: 2026/10/25 16:06:38 INFO Signed narinfos id=2 count=1
server # [   45.448082] niks3-server[1029]: 2026/10/25 16:06:38 INFO Registered completed upload object_key=log/yxz8hnxsx36kwxkczzaa10chm50zxs5n-signer-2.drv
server # [   45.463401] niks3-server[1029]: 2026/10/25 16:06:38 INFO Registered completed upload object_key=nar/0nwavznx6l2iygh4lpjn8msr9hyp614fcfihlbm95zgkr76jikcj.nar.zst
server # [   45.471303] niks3-server[1029]: 2026/10/25 16:06:38 INFO Received complete push request method=POST path=/api/pushes/2/complete
server # time=2026-10-25T16:06:38.963Z level=INFO msg="Upload complete. (157ms)"
server # [   45.480656] niks3-server[1029]: 2026/10/25 16:06:38 INFO Completed push id=2 objects=4 duration=11.69482ms
server # [   45.485040] niks3-server[1029]: 2026/10/25 16:06:38 INFO Registered completed upload object_key=r2hcia81arzi3kgl7nxpvnvnd950y3hk.narinfo
server: (finished: must succeed: NIKS3_SERVER_URL=http://localhost:5751 NIKS3_AUTH_TOKEN_FILE=/tmp/auth-token /nix/store/knh7iwzlmjv38qf28c6waqgmrdvjr5zg-niks3-1.15.0/bin/niks3 push /nix/store/r2hcia81arzi3kgl7nxpvnvnd950y3hk-signer-2, in 0.24 seconds)
server: must succeed: nix copy --from http://localhost:5751 --to /tmp/store-2 /nix/store/r2hcia81arzi3kgl7nxpvnvnd950y3hk-signer-2
server # copying 1 paths...
server # copying path '/nix/store/r2hcia81arzi3kgl7nxpvnvnd950y3hk-signer-2' from 'http://localhost:5751'...
server: (finished: must succeed: nix copy --from http://localhost:5751 --to /tmp/store-2 /nix/store/r2hcia81arzi3kgl7nxpvnvnd950y3hk-signer-2, in 0.35 seconds)
server: must succeed: nix --store /tmp/store-2 store cat /nix/store/r2hcia81arzi3kgl7nxpvnvnd950y3hk-signer-2 | grep -F signer-
server: (finished: must succeed: nix --store /tmp/store-2 store cat /nix/store/r2hcia81arzi3kgl7nxpvnvnd950y3hk-signer-2 | grep -F signer-, in 0.14 seconds)
server: must succeed: pgrep -x niks3-openbao-s | head -n1
server: (finished: must succeed: pgrep -x niks3-openbao-s | head -n1, in 0.06 seconds)
(finished: subtest: the signing process is reused across pushes, in 0.99 seconds)
subtest: a killed signing process is restarted
server: must succeed: pkill -KILL -x niks3-openbao-s
server: (finished: must succeed: pkill -KILL -x niks3-openbao-s, in 0.05 seconds)
server: must succeed: nix-build -E 'derivation { name="signer-3"; system=builtins.currentSystem; builder="/bin/sh"; args=["-c" "echo signer-3 > $out"]; }' --no-out-link
server # this derivation will be built:
server #   /nix/store/8rqr6n12ycly8w0l9d1pwxwhhf70frn3-signer-3.drv
server # building '/nix/store/8rqr6n12ycly8w0l9d1pwxwhhf70frn3-signer-3.drv'...
server: (finished: must succeed: nix-build -E 'derivation { name="signer-3"; system=builtins.currentSystem; builder="/bin/sh"; args=["-c" "echo signer-3 > $out"]; }' --no-out-link, in 0.41 seconds)
server: must succeed: NIKS3_SERVER_URL=http://localhost:5751 NIKS3_AUTH_TOKEN_FILE=/tmp/auth-token /nix/store/knh7iwzlmjv38qf28c6waqgmrdvjr5zg-niks3-1.15.0/bin/niks3 push /nix/store/67p4vpgam0q82zlxd8ancmpxkjql6cnx-signer-3
server # [   46.696848] niks3-server[1029]: 2026/10/25 16:06:40 INFO Received push request method=POST path=/api/pushes
server # time=2026-10-25T16:06:40.211Z level=INFO msg="Uploading 1 paths to localhost (0 already cached)"
server # time=2026-10-25T16:06:40.213Z level=INFO msg="Uploading 67p4vpgam0q82zlxd8ancmpxkjql6cnx-signer-3 (128B)"
server # [   47.136391] niks3-server[1029]: 2026/10/25 16:06:40 INFO Received sign narinfos request method=POST path=/api/pushes/3/sign
server # [   47.145895] niks3-server[1029]: 2026/10/25 16:06:40 INFO Registered completed upload object_key=67p4vpgam0q82zlxd8ancmpxkjql6cnx.ls
server # [   47.147606] niks3-server[1029]: 2026/10/25 16:06:40 INFO Registered completed upload object_key=nar/0a5xm19dinsl6r6mgmzvlxv91jdb1hr34kxlyic4f5w7c5db29z4.nar.zst
server # [   47.262166] niks3-server[1029]: 2026/10/25 16:06:40 INFO Registered completed upload object_key=log/8rqr6n12ycly8w0l9d1pwxwhhf70frn3-signer-3.drv
server # time=2026-10-25T16:06:40.815Z level=INFO msg="Uploading 1 narinfos"
server # [   47.338701] niks3-server[1029]: 2026/10/25 16:06:40 INFO Signed narinfos id=3 count=1
server # [   47.400103] niks3-server[1029]: 2026/10/25 16:06:40 INFO Received complete push request method=POST path=/api/pushes/3/complete
server # [   47.480166] niks3-server[1029]: 2026/10/25 16:06:40 INFO Completed push id=3 objects=4 duration=78.98952ms
server # time=2026-10-25T16:06:40.975Z level=INFO msg="Upload complete. (888ms)"
server # [   47.492318] niks3-server[1029]: 2026/10/25 16:06:40 INFO Registered completed upload object_key=67p4vpgam0q82zlxd8ancmpxkjql6cnx.narinfo
server: (finished: must succeed: NIKS3_SERVER_URL=http://localhost:5751 NIKS3_AUTH_TOKEN_FILE=/tmp/auth-token /nix/store/knh7iwzlmjv38qf28c6waqgmrdvjr5zg-niks3-1.15.0/bin/niks3 push /nix/store/67p4vpgam0q82zlxd8ancmpxkjql6cnx-signer-3, in 0.99 seconds)
server: must succeed: nix copy --from http://localhost:5751 --to /tmp/store-3 /nix/store/67p4vpgam0q82zlxd8ancmpxkjql6cnx-signer-3
server # copying 1 paths...
server # copying path '/nix/store/67p4vpgam0q82zlxd8ancmpxkjql6cnx-signer-3' from 'http://localhost:5751'...
server: (finished: must succeed: nix copy --from http://localhost:5751 --to /tmp/store-3 /nix/store/67p4vpgam0q82zlxd8ancmpxkjql6cnx-signer-3, in 1.09 seconds)
server: must succeed: nix --store /tmp/store-3 store cat /nix/store/67p4vpgam0q82zlxd8ancmpxkjql6cnx-signer-3 | grep -F signer-
server: (finished: must succeed: nix --store /tmp/store-3 store cat /nix/store/67p4vpgam0q82zlxd8ancmpxkjql6cnx-signer-3 | grep -F signer-, in 0.11 seconds)
(finished: subtest: a killed signing process is restarted, in 2.65 seconds)
subtest: OpenBao errors fail the push without crashing the server
server: must succeed: systemctl stop openbao-dev.service
server # [   48.811717] bao[453]: ==> OpenBao shutdown triggered
server # [   48.816467] bao[453]: 2026-10-25T16:06:42.295Z [INFO]  core: marked as sealed
server # [   48.818275] bao[453]: 2026-10-25T16:06:42.299Z [INFO]  core: pre-seal teardown starting
server # [   48.915685] systemd[1]: Stopping openbao-dev.service...
server # [   48.968554] bao[453]: 2026-10-25T16:06:42.452Z [INFO]  rollback: stopping rollback manager
server # [   48.971495] bao[453]: 2026-10-25T16:06:42.455Z [INFO]  core: pre-seal teardown complete
server # [   48.973550] bao[453]: 2026-10-25T16:06:42.457Z [INFO]  core: stopping cluster listeners
server # [   48.975299] bao[453]: 2026-10-25T16:06:42.459Z [INFO]  core.cluster-listener: forwarding rpc listeners stopped
server # [   49.310217] bao[453]: 2026-10-25T16:06:42.794Z [INFO]  core.cluster-listener: rpc listeners successfully shut down
server # [   49.320391] bao[453]: 2026-10-25T16:06:42.794Z [INFO]  core: cluster listeners successfully shut down
server # [   49.323477] bao[453]: 2026-10-25T16:06:42.794Z [INFO]  core: vault is sealed
server # [   49.332577] systemd[1]: openbao-dev.service: Deactivated successfully.
server # [   49.336230] systemd[1]: Stopped openbao-dev.service.
server # [   49.350675] systemd[1]: openbao-dev.service: Consumed 2.486s CPU time over 22.762s wall clock time, 78.3M memory peak, 4.4K incoming IP traffic, 4.9K outgoing IP traffic.
server: (finished: must succeed: systemctl stop openbao-dev.service, in 0.67 seconds)
server: must succeed: nix-build -E 'derivation { name="signer-4"; system=builtins.currentSystem; builder="/bin/sh"; args=["-c" "echo signer-4 > $out"]; }' --no-out-link
server # this derivation will be built:
server #   /nix/store/ki984inl969jjq7pdvamz0p6z4dd145x-signer-4.drv
server # building '/nix/store/ki984inl969jjq7pdvamz0p6z4dd145x-signer-4.drv'...
server: (finished: must succeed: nix-build -E 'derivation { name="signer-4"; system=builtins.currentSystem; builder="/bin/sh"; args=["-c" "echo signer-4 > $out"]; }' --no-out-link, in 0.51 seconds)
server: must fail: NIKS3_SERVER_URL=http://localhost:5751 NIKS3_AUTH_TOKEN_FILE=/tmp/auth-token /nix/store/knh7iwzlmjv38qf28c6waqgmrdvjr5zg-niks3-1.15.0/bin/niks3 push /nix/store/90jgq0hrfwlpwxc5awzm1b2zmy0mda4g-signer-4
server # [   50.121117] niks3-server[1029]: 2026/10/25 16:06:43 INFO Received push request method=POST path=/api/pushes
server # time=2026-10-25T16:06:43.620Z level=INFO msg="Uploading 1 paths to localhost (0 already cached)"
server # time=2026-10-25T16:06:43.622Z level=INFO msg="Uploading 90jgq0hrfwlpwxc5awzm1b2zmy0mda4g-signer-4 (128B)"
server # [   50.265034] niks3-server[1029]: 2026/10/25 16:06:43 INFO Registered completed upload object_key=90jgq0hrfwlpwxc5awzm1b2zmy0mda4g.ls
server # [   50.295375] niks3-server[1029]: 2026/10/25 16:06:43 INFO Received sign narinfos request method=POST path=/api/pushes/4/sign
server # time=2026-10-25T16:06:43.785Z level=WARN msg="Request returned retryable status, retrying" attempt=1 backoff=100ms status=500 url=http://localhost:5751/api/pushes/4/sign
server # [   50.306164] niks3-server[1029]: 2026/10/25 16:06:43 ERROR Failed to sign narinfos signer=niks3-test-1 error="signing program: narinfo \"90jgq0hrfwlpwxc5awzm1b2zmy0mda4g.narinfo\": reading token: open /run/openbao-signer/token: no such file or directory"
server # [   50.313796] niks3-server[1029]: 2026/10/25 16:06:43 INFO Registered completed upload object_key=log/ki984inl969jjq7pdvamz0p6z4dd145x-signer-4.drv
server # [   50.320076] niks3-server[1029]: 2026/10/25 16:06:43 INFO Registered completed upload object_key=nar/08bvxj5dmksfdkqa4pjy110ni52l4pkvb9a02p3qa256f0idj24s.nar.zst
server # [   50.404823] niks3-server[1029]: 2026/10/25 16:06:43 INFO Received sign narinfos request method=POST path=/api/pushes/4/sign
server # time=2026-10-25T16:06:43.895Z level=WARN msg="Request returned retryable status, retrying" attempt=2 backoff=210.238329ms status=500 url=http://localhost:5751/api/pushes/4/sign
server # [   50.415175] niks3-server[1029]: 2026/10/25 16:06:43 ERROR Failed to sign narinfos signer=niks3-test-1 error="signing program: narinfo \"90jgq0hrfwlpwxc5awzm1b2zmy0mda4g.narinfo\": reading token: open /run/openbao-signer/token: no such file or directory"
server # [   50.647173] niks3-server[1029]: 2026/10/25 16:06:44 INFO Received sign narinfos request method=POST path=/api/pushes/4/sign
server # [   50.761232] niks3-server[1029]: 2026/10/25 16:06:44 ERROR Failed to sign narinfos signer=niks3-test-1 error="signing program: narinfo \"90jgq0hrfwlpwxc5awzm1b2zmy0mda4g.narinfo\": reading token: open /run/openbao-signer/token: no such file or directory"
server # time=2026-10-25T16:06:44.259Z level=WARN msg="Request returned retryable status, retrying" attempt=3 backoff=385.175517ms status=500 url=http://localhost:5751/api/pushes/4/sign
server # [   51.165617] niks3-server[1029]: 2026/10/25 16:06:44 INFO Received sign narinfos request method=POST path=/api/pushes/4/sign
server # [   51.172912] niks3-server[1029]: 2026/10/25 16:06:44 ERROR Failed to sign narinfos signer=niks3-test-1 error="signing program: narinfo \"90jgq0hrfwlpwxc5awzm1b2zmy0mda4g.narinfo\": reading token: open /run/openbao-signer/token: no such file or directory"
server # time=2026-10-25T16:06:44.667Z level=WARN msg="Request returned retryable status, retrying" attempt=4 backoff=795.733936ms status=500 url=http://localhost:5751/api/pushes/4/sign
server # [   51.987542] niks3-server[1029]: 2026/10/25 16:06:45 INFO Received sign narinfos request method=POST path=/api/pushes/4/sign
server # time=2026-10-25T16:06:45.475Z level=WARN msg="Request returned retryable status, retrying" attempt=5 backoff=1.562382281s status=500 url=http://localhost:5751/api/pushes/4/sign
server # [   51.992958] niks3-server[1029]: 2026/10/25 16:06:45 ERROR Failed to sign narinfos signer=niks3-test-1 error="signing program: narinfo \"90jgq0hrfwlpwxc5awzm1b2zmy0mda4g.narinfo\": reading token: open /run/openbao-signer/token: no such file or directory"
server # [   53.561649] niks3-server[1029]: 2026/10/25 16:06:47 INFO Received sign narinfos request method=POST path=/api/pushes/4/sign
server # [   53.565090] niks3-server[1029]: 2026/10/25 16:06:47 ERROR Failed to sign narinfos signer=niks3-test-1 error="signing program: narinfo \"90jgq0hrfwlpwxc5awzm1b2zmy0mda4g.narinfo\": reading token: open /run/openbao-signer/token: no such file or directory"
server # time=2026-10-25T16:06:47.054Z level=ERROR msg="Fatal error" error="pushing paths: signing and uploading narinfos: signing narinfos for closure 4: server returned 500: failed to sign narinfos: signing program: narinfo \"90jgq0hrfwlpwxc5awzm1b2zmy0mda4g.narinfo\": reading token: open /run/openbao-signer/token: no such file or directory\n"
server: (finished: must fail: NIKS3_SERVER_URL=http://localhost:5751 NIKS3_AUTH_TOKEN_FILE=/tmp/auth-token /nix/store/knh7iwzlmjv38qf28c6waqgmrdvjr5zg-niks3-1.15.0/bin/niks3 push /nix/store/90jgq0hrfwlpwxc5awzm1b2zmy0mda4g-signer-4, in 3.72 seconds)
server: must succeed: systemctl restart openbao-setup.service
server # [   53.635759] niks3-server[1029]: 2026/10/25 16:06:47 INFO Shutdown signal received, draining in-flight requests timeout=10s
server # [   53.666642] systemd[1]: Stopping niks3 server...
server # [   53.677303] systemd[1]: niks3.service: Deactivated successfully.
server # [   53.679794] systemd[1]: Stopped niks3 server.
server # [   53.682638] systemd[1]: niks3.service: Consumed 568ms CPU time over 10.074s wall clock time, 40.2M memory peak, 19.2K incoming IP traffic, 24.8K outgoing IP traffic.
server # [   53.690700] systemd[1]: openbao-setup.service: Deactivated successfully.
server # [   53.695310] systemd[1]: Stopped openbao-setup.service.
server # [   53.697012] systemd[1]: openbao-setup.service: Consumed 650ms CPU time over 27.077s wall clock time, 52.6M memory peak, 3K incoming IP traffic, 2.8K outgoing IP traffic.
server # [   53.699925] systemd[1]: Stopping openbao-setup.service...
server # [   53.706521] systemd[1]: Started openbao-dev.service.
server # [   53.717196] systemd[1]: Starting openbao-setup.service...
server # [   54.141012] bao[1238]: 2026-10-25T16:06:47.624Z [INFO]  proxy environment: http_proxy="" https_proxy="" no_proxy=""
server # [   54.146892] bao[1238]: 2026-10-25T16:06:47.628Z [WARN]  no `api_addr` value specified in config or in BAO_API_ADDR; falling back to detection if possible, but this value should be manually set
server # [   54.156178] bao[1238]: 2026-10-25T16:06:47.629Z [INFO]  core: Initializing version history cache for core
server # [   54.158184] bao[1238]: ==> OpenBao server configuration:
server # [   54.159213] bao[1238]:              Api Address: http://127.0.0.1:8200
server # [   54.160555] bao[1238]:                      Cgo: enabled
server # [   54.161673] bao[1238]:          Cluster Address: https://127.0.0.1:8201
server # [   54.162909] bao[1238]:    Environment Variables: HOME, INVOCATION_ID, IO_PRESSURE_WATCH, IO_PRESSURE_WRITE, JOURNAL_STREAM, LANG, LOCALE_ARCHIVE, LOGNAME, MEMORY_PRESSURE_WATCH, MEMORY_PRESSURE_WRITE, PATH, RUNTIME_DIRECTORY, STATE_DIRECTORY, SYSTEMD_EXEC_PID, TZDIR, USER
server # [   54.176198] bao[1238]:               Go Version: go1.27.2
server # [   54.177598] bao[1238]:               Listener 1: tcp (addr: "127.0.0.1:8200", cluster address: "127.0.0.1:8201", max_request_duration: "1m30s", max_request_json_memory: "34078720", max_request_json_strings: "1000", max_request_size: "33554432", tls: "disabled")
server # [   54.184147] bao[1238]:                Log Level:
server # [   54.185316] bao[1238]:            Recovery Mode: false
server # [   54.186313] bao[1238]:                  Storage: inmem
server # [   54.187300] bao[1238]:                  Version: OpenBao v2.7.1, committed 1970-01-01T00:00:00Z
server # [   54.194172] bao[1238]:              Version Sha: refs/tags/v2.7.1
server # [   54.195181] bao[1238]: 2026-10-25T16:06:47.631Z [INFO]  core: security barrier not initialized
server # [   54.200229] bao[1238]: 2026-10-25T16:06:47.635Z [INFO]  core: security barrier initialized: shares=1 threshold=1
server # [   54.202171] bao[1238]: 2026-10-25T16:06:47.635Z [INFO]  core: post-unseal setup starting
server # [   54.203203] bao[1238]: 2026-10-25T16:06:47.654Z [INFO]  core: loaded wrapping token key
server # [   54.208214] bao[1238]: 2026-10-25T16:06:47.654Z [INFO]  core: successfully setup plugin catalog: plugin-directory=""
server # [   54.210155] bao[1238]: 2026-10-25T16:06:47.655Z [INFO]  core: reading transactional mount table
server # [   54.211234] bao[1238]: 2026-10-25T16:06:47.655Z [INFO]  core: no mounts in transactional mount table; adding default mount table
server # [   54.216162] bao[1238]: 2026-10-25T16:06:47.667Z [INFO]  core: successfully mounted: type=cubbyhole version="v2.7.1+builtin.bao" path=cubbyhole/ namespace="ID: root. Path: "
server # [   54.219006] bao[1238]: 2026-10-25T16:06:47.674Z [INFO]  core: successfully mounted: type=system version="v2.7.1+builtin.bao" path=sys/ namespace="ID: root. Path: "
server # [   54.228237] bao[1238]: 2026-10-25T16:06:47.675Z [INFO]  core: successfully mounted: type=identity version="v2.7.1+builtin.bao" path=identity/ namespace="ID: root. Path: "
server # [   54.231464] bao[1238]: 2026-10-25T16:06:47.677Z [INFO]  core: reading transactional auth mount table
server # [   54.236155] bao[1238]: 2026-10-25T16:06:47.677Z [INFO]  core: no auth mounts in transactional auth mount table; adding default auth mount table
server # [   54.238853] bao[1238]: 2026-10-25T16:06:47.677Z [INFO]  core: successfully mounted: type=token version="v2.7.1+builtin.bao" path=token/ namespace="ID: root. Path: "
server # [   54.246212] bao[1238]: 2026-10-25T16:06:47.677Z [INFO]  rollback: Starting the rollback manager with 256 workers
server # [   54.252183] bao[1238]: 2026-10-25T16:06:47.681Z [INFO]  core: restoring leases
server # [   54.253452] bao[1238]: 2026-10-25T16:06:47.683Z [INFO]  expiration: lease restore complete
server # [   54.254566] bao[1238]: 2026-10-25T16:06:47.684Z [INFO]  rollback: starting rollback manager
server # [   54.260243] bao[1238]: 2026-10-25T16:06:47.688Z [INFO]  core: entities restored
server # [   54.262140] bao[1238]: 2026-10-25T16:06:47.688Z [INFO]  core: groups restored
server # [   54.263673] bao[1238]: 2026-10-25T16:06:47.689Z [INFO]  core: Recorded vault version: vault version=2.7.1 upgrade time="2026-10-25 16:06:47.68901726 +0000 UTC" commit date=1970-01-01T00:00:00Z
server # [   54.267744] bao[1238]: 2026-10-25T16:06:47.689Z [INFO]  core: post-unseal setup complete
server # [   54.269637] bao[1238]: 2026-10-25T16:06:47.689Z [INFO]  core: root token generated
server # [   54.271128] bao[1238]: 2026-10-25T16:06:47.689Z [INFO]  core: pre-seal teardown starting
server # [   54.272714] bao[1238]: 2026-10-25T16:06:47.690Z [INFO]  rollback: stopping rollback manager
server # [   54.274246] bao[1238]: 2026-10-25T16:06:47.690Z [INFO]  core: pre-seal teardown complete
server # [   54.275827] bao[1238]: 2026-10-25T16:06:47.691Z [INFO]  core.cluster-listener.tcp: starting listener: listener_address=127.0.0.1:8201
server # [   54.278269] bao[1238]: 2026-10-25T16:06:47.691Z [INFO]  core.cluster-listener: serving cluster requests: cluster_listen_address=127.0.0.1:8201
server # [   54.280875] bao[1238]: 2026-10-25T16:06:47.691Z [INFO]  core: post-unseal setup starting
server # [   54.282440] bao[1238]: 2026-10-25T16:06:47.691Z [INFO]  core: loaded wrapping token key
server # [   54.284061] bao[1238]: 2026-10-25T16:06:47.691Z [INFO]  core: successfully setup plugin catalog: plugin-directory=""
server # [   54.286217] bao[1238]: 2026-10-25T16:06:47.691Z [INFO]  core: reading transactional mount table
server # [   54.287872] bao[1238]: 2026-10-25T16:06:47.697Z [INFO]  core: successfully mounted: type=identity version="v2.7.1+builtin.bao" path=identity/ namespace="ID: root. Path: "
server # [   54.290913] bao[1238]: 2026-10-25T16:06:47.698Z [INFO]  core: successfully mounted: type=system version="v2.7.1+builtin.bao" path=sys/ namespace="ID: root. Path: "
server # [   54.293761] bao[1238]: 2026-10-25T16:06:47.699Z [INFO]  core: successfully mounted: type=cubbyhole version="v2.7.1+builtin.bao" path=cubbyhole/ namespace="ID: root. Path: "
server # [   54.296814] bao[1238]: 2026-10-25T16:06:47.706Z [INFO]  core: reading transactional auth mount table
server # [   54.298184] bao[1238]: 2026-10-25T16:06:47.707Z [INFO]  core: successfully mounted: type=token version="v2.7.1+builtin.bao" path=token/ namespace="ID: root. Path: "
server # [   54.299982] bao[1238]: 2026-10-25T16:06:47.707Z [INFO]  rollback: Starting the rollback manager with 256 workers
server # [   54.302071] bao[1238]: 2026-10-25T16:06:47.708Z [INFO]  core: restoring leases
server # [   54.303468] bao[1238]: 2026-10-25T16:06:47.718Z [INFO]  rollback: starting rollback manager
server # [   54.305272] bao[1238]: 2026-10-25T16:06:47.719Z [INFO]  expiration: lease restore complete
server # [   54.306928] bao[1238]: 2026-10-25T16:06:47.720Z [INFO]  core: entities restored
server # [   54.308422] bao[1238]: 2026-10-25T16:06:47.720Z [INFO]  core: groups restored
server # [   54.309898] bao[1238]: 2026-10-25T16:06:47.726Z [INFO]  core: post-unseal setup complete
server # [   54.311382] bao[1238]: 2026-10-25T16:06:47.726Z [INFO]  core: vault is unsealed
server # [   54.312822] bao[1238]: 2026-10-25T16:06:47.729Z [INFO]  expiration: revoked lease: lease_id=auth/token/root/h82fe718f4651ae12f46814bf02b8c6efc17a0df430baa9df44305a3bcdcaf121
server # [   54.315701] bao[1238]: 2026-10-25T16:06:47.742Z [INFO]  core: successful mount: namespace="" path=secret/ type=kv version=""
server # [   54.318005] bao[1238]: 2026-10-25T16:06:47.743Z [INFO]  beginning post-unseal configuration
server # [   54.319642] bao[1238]: ==> OpenBao server started!
server # [   54.320686] bao[1238]: 2026-10-25T16:06:47.743Z [INFO]  secrets.kv.kv_5e598e8b: collecting keys to upgrade
server # [   54.322459] bao[1238]: 2026-10-25T16:06:47.743Z [INFO]  secrets.kv.kv_5e598e8b: done collecting keys: num_keys=1
server # [   54.324370] bao[1238]: 2026-10-25T16:06:47.743Z [INFO]  secrets.kv.kv_5e598e8b: upgrading keys finished
server # [   54.359959] bao[1238]: WARNING! dev mode is enabled! In this mode, OpenBao runs entirely in-memory
server # [   54.362157] bao[1238]: and starts unsealed with a single unseal key. The root token is already
server # [   54.363800] bao[1238]: authenticated to the CLI, so you can immediately begin using OpenBao.
server # [   54.365646] bao[1238]: You may need to set the following environment variables:
server # [   54.366648] bao[1238]:     $ export BAO_ADDR='http://127.0.0.1:8200'
server # [   54.367485] bao[1238]: The unseal key and root token are displayed below in case you want to
server # [   54.368968] bao[1238]: seal/unseal the Vault or re-authenticate.
server # [   54.370176] bao[1238]: Unseal Key: s/KMa7hOCaFkyWoo9/3Aq/fFG70Az3uh4Rsg9dhnSAI=
server # [   54.371642] bao[1238]: Root Token: root
server # [   54.372476] bao[1238]: Development mode should NOT be used in production installations!
server # [   55.521277] bao[1238]: 2026-10-25T16:06:49.005Z [INFO]  core: successful mount: namespace="" path=transit/ type=transit version=""
server # [   55.528626] openbao-setup-start[1260]: Success! Enabled the transit secrets engine at: transit/
server # [   55.778410] openbao-setup-start[1270]: Retrieving wrapping key.
server # [   58.851951] openbao-setup-start[1270]: Wrapping source key with ephemeral key.
server # [   58.853775] openbao-setup-start[1270]: Encrypting ephemeral key with wrapping key.
server # [   58.854832] openbao-setup-start[1270]: Submitting wrapped key.
server # [   58.872136] openbao-setup-start[1270]: Success!
server # [   58.890117] systemd[1]: Finished openbao-setup.service.
server # [   58.898317] systemd[1]: Starting niks3 server...
server: (finished: must succeed: systemctl restart openbao-setup.service, in 5.32 seconds)
server: must succeed: nix-build -E 'derivation { name="signer-5"; system=builtins.currentSystem; builder="/bin/sh"; args=["-c" "echo signer-5 > $out"]; }' --no-out-link
server # [   59.042193] niks3-server[1279]: 2026/10/25 16:06:52 INFO Configured external signer program=/nix/store/vjqln7qss9csxkck9qxiabirk1d4m9iy-niks3-openbao-signer/bin/niks3-openbao-signer
server # this derivation will be built:
server #   /nix/store/w75vzpgwgrd413yswvyf8d3724yriqqp-signer-5.drv
server # [   59.099694] niks3-server[1279]: 2026/10/25 16:06:52 INFO Read proxy enabled — serving cache objects from S3
server # [   59.109882] niks3-server[1279]: 2026/10/25 16:06:52 INFO Using socket-activated listener address=0.0.0.0:5751
server # [   59.111245] niks3-server[1279]: 2026/10/25 16:06:52 INFO systemd watchdog enabled interval=15s
server # [   59.119548] niks3-server[1279]: 2026/10/25 16:06:52 INFO Starting HTTP server address=0.0.0.0:5751
server # [   59.133874] systemd[1]: Started niks3 server.
server # building '/nix/store/w75vzpgwgrd413yswvyf8d3724yriqqp-signer-5.drv'...
server: (finished: must succeed: nix-build -E 'derivation { name="signer-5"; system=builtins.currentSystem; builder="/bin/sh"; args=["-c" "echo signer-5 > $out"]; }' --no-out-link, in 0.46 seconds)
server: must succeed: NIKS3_SERVER_URL=http://localhost:5751 NIKS3_AUTH_TOKEN_FILE=/tmp/auth-token /nix/store/knh7iwzlmjv38qf28c6waqgmrdvjr5zg-niks3-1.15.0/bin/niks3 push /nix/store/0n0a44xfrfpmp9affrd9prwip4j5nbyx-signer-5
server # [   59.642450] niks3-server[1279]: 2026/10/25 16:06:53 INFO Received push request method=POST path=/api/pushes
server # time=2026-10-25T16:06:53.136Z level=INFO msg="Uploading 1 paths to localhost (0 already cached)"
server # time=2026-10-25T16:06:53.138Z level=INFO msg="Uploading 0n0a44xfrfpmp9affrd9prwip4j5nbyx-signer-5 (128B)"
server # [   59.718557] niks3-server[1279]: 2026/10/25 16:06:53 INFO Registered completed upload object_key=0n0a44xfrfpmp9affrd9prwip4j5nbyx.ls
server # [   59.727456] niks3-server[1279]: 2026/10/25 16:06:53 INFO Received sign narinfos request method=POST path=/api/pushes/5/sign
server # [   59.761303] niks3-server[1279]: 2026/10/25 16:06:53 INFO Registered completed upload object_key=log/w75vzpgwgrd413yswvyf8d3724yriqqp-signer-5.drv
server # [   59.775287] niks3-server[1279]: 2026/10/25 16:06:53 INFO Registered completed upload object_key=nar/1rrjdxihgavl3xr6jzkh49lrd92dlyrdgs4inygpqssjvgcrjh9x.nar.zst
server # [   59.786570] niks3-server[1279]: 2026/10/25 16:06:53 INFO Signed narinfos id=5 count=1
server # time=2026-10-25T16:06:53.273Z level=INFO msg="Uploading 1 narinfos"
server # [   59.813372] niks3-server[1279]: 2026/10/25 16:06:53 INFO Received complete push request method=POST path=/api/pushes/5/complete
server # time=2026-10-25T16:06:53.307Z level=INFO msg="Upload complete. (285ms)"
server # [   59.824650] niks3-server[1279]: 2026/10/25 16:06:53 INFO Completed push id=5 objects=4 duration=14.25028ms
server # [   59.838608] niks3-server[1279]: 2026/10/25 16:06:53 INFO Registered completed upload object_key=0n0a44xfrfpmp9affrd9prwip4j5nbyx.narinfo
server: (finished: must succeed: NIKS3_SERVER_URL=http://localhost:5751 NIKS3_AUTH_TOKEN_FILE=/tmp/auth-token /nix/store/knh7iwzlmjv38qf28c6waqgmrdvjr5zg-niks3-1.15.0/bin/niks3 push /nix/store/0n0a44xfrfpmp9affrd9prwip4j5nbyx-signer-5, in 0.47 seconds)
server: must succeed: nix copy --from http://localhost:5751 --to /tmp/store-5 /nix/store/0n0a44xfrfpmp9affrd9prwip4j5nbyx-signer-5
server # copying 1 paths...
server # copying path '/nix/store/0n0a44xfrfpmp9affrd9prwip4j5nbyx-signer-5' from 'http://localhost:5751'...
server: (finished: must succeed: nix copy --from http://localhost:5751 --to /tmp/store-5 /nix/store/0n0a44xfrfpmp9affrd9prwip4j5nbyx-signer-5, in 0.30 seconds)
server: must succeed: nix --store /tmp/store-5 store cat /nix/store/0n0a44xfrfpmp9affrd9prwip4j5nbyx-signer-5 | grep -F signer-
server: (finished: must succeed: nix --store /tmp/store-5 store cat /nix/store/0n0a44xfrfpmp9affrd9prwip4j5nbyx-signer-5 | grep -F signer-, in 0.39 seconds)
(finished: subtest: OpenBao errors fail the push without crashing the server, in 11.84 seconds)
(finished: run the VM test script, in 61.30 seconds)
test script finished in 67.93s
cleanup
kill QemuMachine (pid 45)
server # qemu-system-aarch64: terminating on signal 15 from pid 39 (/nix/store/81ag9nxz1flw3xjkv1vvqg8y2ipx2ins-python3-3.14.7/bin/python3.14)
server # [2026-10-25T16:07:01Z INFO  virtiofsd] Client disconnected, shutting down
server # [2026-10-25T16:07:01Z INFO  virtiofsd] Client disconnected, shutting down
server # [2026-10-25T16:07:01Z INFO  virtiofsd] Client disconnected, shutting down
(finished: cleanup, in 1.12 seconds)
additionally exposed symbols:
    server,
    vlan1,
    start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh