tribuchet: building on eliza
Machine state will be reset. To keep it, pass --keep-machine-state
start all VLans
(finished: start all VLans, in 0.01 seconds)
Test will time out and terminate in 3600.0 seconds
run the VM test script
server: waiting for unit niks3.service
server: waiting for the VM to finish booting
server: starting vm
server # Disk image does not exist, creating the virtualisation disk image...
server: QEMU running (pid 45)
server # Formatting '/build/vm-state-server/tmp.75u6t8QTRr', fmt=raw size=1073741824
server # mke2fs 1.47.4 (6-Mar-2025)
server # Discarding device blocks:      0/262144             done
server # Creating filesystem with 262144 4k blocks and 65536 inodes
server # Filesystem UUID: 809a6477-54d1-4793-89d1-afdaceadb63f
server # Superblock backups stored on blocks:
server # 	32768, 98304, 163840, 229376
server # 
server # Allocating group tables: 0/8   done
server # Writing inode tables: 0/8   done
server # Creating journal (8192 blocks): done
server # Writing superblocks and filesystem accounting information: 0/8   done
server # 
server # Virtualisation disk image created.
server # Starting virtiofs daemons...
server # [2026-10-27T08:50:20Z WARN  virtiofsd::passthrough] Failed to open file handle for the root node: Operation not permitted (os error 1)
server # [2026-10-27T08:50:20Z WARN  virtiofsd::passthrough] File handles do not appear safe to use, disabling file handles altogether
server # [2026-10-27T08:50:20Z WARN  virtiofsd::passthrough] Failed to open file handle for the root node: Operation not permitted (os error 1)
server # [2026-10-27T08:50:20Z WARN  virtiofsd::passthrough] File handles do not appear safe to use, disabling file handles altogether
server # [2026-10-27T08:50:20Z INFO  virtiofsd] Waiting for vhost-user socket connection...
server # [2026-10-27T08:50:20Z INFO  virtiofsd] Waiting for vhost-user socket connection...
server # [2026-10-27T08:50:20Z WARN  virtiofsd::passthrough] Failed to open file handle for the root node: Operation not permitted (os error 1)
server # [2026-10-27T08:50:20Z WARN  virtiofsd::passthrough] File handles do not appear safe to use, disabling file handles altogether
server # [2026-10-27T08:50:20Z INFO  virtiofsd] Waiting for vhost-user socket connection...
server # [2026-10-27T08:50:20Z INFO  virtiofsd] Client connected, servicing requests
server # [2026-10-27T08:50:20Z INFO  virtiofsd] Client connected, servicing requests
server # [2026-10-27T08:50:20Z INFO  virtiofsd] Client connected, servicing requests
server # [    0.000000] Booting Linux on physical CPU 0x0000000000 [0xc00fac40]
server # [    0.000000] Linux version 6.18.58 (nixbld@localhost) (gcc (GCC) 16.2.0, GNU ld (GNU Binutils) 2.46) #1-NixOS SMP PREEMPT @1792571549
server # [    0.000000] KASLR enabled
server # [    0.000000] random: crng init done
server # [    0.000000] Machine model: linux,dummy-virt
server # [    0.000000] efi: UEFI not found.
server # [    0.000000] OF: reserved mem: Reserved memory: No reserved-memory node in the DT
server # [    0.000000] NUMA: Faking a node at [mem 0x0000000040000000-0x000000007fffffff]
server # [    0.000000] NODE_DATA(0) allocated [mem 0x7fded700-0x7fdf0e7f]
server # [    0.000000] Zone ranges:
server # [    0.000000]   DMA      [mem 0x0000000040000000-0x000000007fffffff]
server # [    0.000000]   DMA32    empty
server # [    0.000000]   Normal   empty
server # [    0.000000]   Device   empty
server # [    0.000000] Movable zone start for each node
server # [    0.000000] Early memory node ranges
server # [    0.000000]   node   0: [mem 0x0000000040000000-0x000000007fffffff]
server # [    0.000000] Initmem setup node 0 [mem 0x0000000040000000-0x000000007fffffff]
server # [    0.000000] cma: Reserved 32 MiB at 0x000000007cc00000
server # [    0.000000] psci: probing for conduit method from DT.
server # [    0.000000] psci: PSCIv1.3 detected in firmware.
server # [    0.000000] psci: Using standard PSCI v0.2 function IDs
server # [    0.000000] psci: Trusted OS migration not required
server # [    0.000000] psci: SMC Calling Convention v1.1
server # [    0.000000] smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003)
server # [    0.000000] percpu: Embedded 76 pages/cpu s187672 r8192 d115432 u311296
server # [    0.000000] Detected PIPT I-cache on CPU0
server # [    0.000000] CPU features: detected: Address authentication (architected QARMA5 algorithm)
server # [    0.000000] CPU features: detected: GICv3 CPU interface
server # [    0.000000] CPU features: detected: Spectre-v4
server # [    0.000000] CPU features: detected: Spectre-BHB
server # [    0.000000] CPU features: detected: AmpereOne erratum AC03_CPU_38
server # [    0.000000] CPU features: detected: AmpereOne erratum AC04_CPU_23
server # [    0.000000] alternatives: applying boot alternatives
server # [    0.000000] Kernel command line: console=ttyAMA0 console=tty0 panic=1 boot.panic_on_fail clocksource=acpi_pm root=fstab loglevel=7 net.ifnames=0 lsm=landlock,yama,bpf init=/nix/store/5far09hk1hc2px2bnx4s12fj9d20qb2h-nixos-system-server-test/init regInfo=/nix/.ro-store/va6jyyyav34gi9jj9k23ba3jm61c07qa-closure-info/registration console=ttyAMA0,115200n8 console=tty0
server # [    0.000000] Unknown kernel command line parameters "regInfo=/nix/.ro-store/va6jyyyav34gi9jj9k23ba3jm61c07qa-closure-info/registration", will be passed to user space.
server # [    0.000000] printk: log buffer data + meta data: 1048576 + 3670016 = 4718592 bytes
server # [    0.000000] Dentry cache hash table entries: 131072 (order: 8, 1048576 bytes, linear)
server # [    0.000000] Inode-cache hash table entries: 65536 (order: 7, 524288 bytes, linear)
server # [    0.000000] software IO TLB: SWIOTLB bounce buffer size adjusted to 1MB
server # [    0.000000] software IO TLB: area num 1.
server # [    0.000000] software IO TLB: mapped [mem 0x000000007ca80000-0x000000007cb80000] (1MB)
server # [    0.000000] Fallback order for Node 0: 0
server # [    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 262144
server # [    0.000000] Policy zone: DMA
server # [    0.000000] mem auto-init: stack:all(zero), heap alloc:on, heap free:off
server # [    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=1, Nodes=1
server # [    0.000000] allocated 2097152 bytes of page_ext
server # [    0.000000] ftrace: allocating 75304 entries in 296 pages
server # [    0.000000] ftrace: allocated 296 pages with 3 groups
server # [    0.000000] rcu: Hierarchical RCU implementation.
server # [    0.000000] rcu: 	RCU event tracing is enabled.
server # [    0.000000] rcu: 	RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=1.
server # [    0.000000] 	Trampoline variant of Tasks RCU enabled.
server # [    0.000000] 	Rude variant of Tasks RCU enabled.
server # [    0.000000] 	Tracing variant of Tasks RCU enabled.
server # [    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 25 jiffies.
server # [    0.000000] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=1
server # [    0.000000] RCU Tasks: Setting shift to 0 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=1.
server # [    0.000000] RCU Tasks Rude: Setting shift to 0 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=1.
server # [    0.000000] RCU Tasks Trace: Setting shift to 0 and lim to 1 rcu_task_cb_adjust=1 rcu_task_cpu_ids=1.
server # [    0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0
server # [    0.000000] GICv3: 256 SPIs implemented
server # [    0.000000] GICv3: 0 Extended SPIs implemented
server # [    0.000000] Root IRQ handler: gic_handle_irq
server # [    0.000000] GICv3: GICv3 features: 16 PPIs, DirectLPI
server # [    0.000000] GICv3: GICD_CTLR.DS=1, SCR_EL3.FIQ=0
server # [    0.000000] GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000
server # [    0.000000] ITS [mem 0x08080000-0x0809ffff]
server # [    0.000000] ITS@0x0000000008080000: allocated 8192 Devices @450e0000 (indirect, esz 8, psz 64K, shr 1)
server # [    0.000000] ITS@0x0000000008080000: allocated 8192 Interrupt Collections @450f0000 (flat, esz 8, psz 64K, shr 1)
server # [    0.000000] GICv3: using LPI property table @0x0000000045100000
server # [    0.000000] GICv3: CPU0: using allocated LPI pending table @0x0000000045110000
server # [    0.000000] rcu: srcu_init: Setting srcu_struct sizes based on contention.
server # [    0.000000] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns
server # [    0.000000] arch_timer: cp15 timer running at 1000.00MHz (virt).
server # [    0.000000] clocksource: arch_sys_counter: mask: 0x1fffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns
server # [    0.000000] sched_clock: 61 bits at 1000MHz, resolution 1ns, wraps every 4398046511103ns
server # [    0.000034] arm-pv: using stolen time PV
server # [    0.000465] kfence: initialized - using 2097152 bytes for 255 objects at 0x(____ptrval____)-0x(____ptrval____)
server # [    0.001265] Console: colour dummy device 80x25
server # [    0.001274] printk: legacy console [tty0] enabled
server # [    0.001458] Calibrating delay loop (skipped), value calculated using timer frequency.. 2000.00 BogoMIPS (lpj=4000000)
server # [    0.001465] pid_max: default: 32768 minimum: 301
server # [    0.001559] LSM: initializing lsm=lockdown,capability,landlock,yama,bpf,ima
server # [    0.001697] landlock: Up and running.
server # [    0.001701] Yama: becoming mindful.
server # [    0.002165] LSM support for eBPF active
server # [    0.002614] Mount-cache hash table entries: 2048 (order: 2, 16384 bytes, linear)
server # [    0.002635] Mountpoint-cache hash table entries: 2048 (order: 2, 16384 bytes, linear)
server # [    0.006283] rcu: Hierarchical SRCU implementation.
server # [    0.006291] rcu: 	Max phase no-delay instances is 1000.
server # [    0.008676] fsl-mc MSI: its@8080000 domain created
server # [    0.008799] EFI services will not be available.
server # [    0.008889] smp: Bringing up secondary CPUs ...
server # [    0.008899] smp: Brought up 1 node, 1 CPU
server # [    0.008902] SMP: Total of 1 processors activated.
server # [    0.008905] CPU: All CPU(s) started at EL1
server # [    0.008915] CPU features: detected: Branch Target Identification
server # [    0.008920] CPU features: detected: ARMv8.4 Translation Table Level
server # [    0.008923] CPU features: detected: Instruction cache invalidation not required for I/D coherence
server # [    0.008927] CPU features: detected: Data cache clean to the PoU not required for I/D coherence
server # [    0.008935] CPU features: detected: Common not Private translations
server # [    0.008938] CPU features: detected: CRC32 instructions
server # [    0.008941] CPU features: detected: Data cache clean to Point of Deep Persistence
server # [    0.008945] CPU features: detected: Data cache clean to Point of Persistence
server # [    0.008948] CPU features: detected: Data independent timing control (DIT)
server # [    0.008951] CPU features: detected: E0PD
server # [    0.008953] CPU features: detected: Enhanced Counter Virtualization
server # [    0.008956] CPU features: detected: Enhanced Counter Virtualization (CNTPOFF)
server # [    0.008960] CPU features: detected: Enhanced Virtualization Traps
server # [    0.008963] CPU features: detected: Fine Grained Traps
server # [    0.008966] CPU features: detected: Generic authentication (architected QARMA5 algorithm)
server # [    0.008971] CPU features: detected: RCpc load-acquire (LDAPR)
server # [    0.008974] CPU features: detected: LSE atomic instructions
server # [    0.008977] CPU features: detected: Privileged Access Never
server # [    0.008979] CPU features: detected: PMUv3
server # [    0.008982] CPU features: detected: RAS Extension Support
server # [    0.008985] CPU features: detected: RASv1p1 Extension Support
server # [    0.008988] CPU features: detected: Random Number Generator
server # [    0.008993] CPU features: detected: Speculation barrier (SB)
server # [    0.008996] CPU features: detected: Stage-2 Force Write-Back
server # [    0.008999] CPU features: detected: TLB range maintenance instructions
server # [    0.009004] CPU features: detected: Speculative Store Bypassing Safe (SSBS)
server # [    0.009041] alternatives: applying system-wide alternatives
server # [    0.012088] CPU features: detected: BBM Level 2 without TLB conflict abort
server # [    0.012710] Memory: 887292K/1048576K available (24640K kernel code, 10246K rwdata, 26664K rodata, 7808K init, 2086K bss, 119776K reserved, 32768K cma-reserved)
server # [    0.013263] devtmpfs: initialized
server # [    0.015746] posixtimers hash table entries: 512 (order: 1, 8192 bytes, linear)
server # [    0.015771] futex hash table entries: 256 (16384 bytes on 1 NUMA nodes, total 16 KiB, linear).
server # [    0.015999] 2G module region forced by RANDOMIZE_MODULE_REGION_FULL
server # [    0.016004] 0 pages in range for non-PLT usage
server # [    0.016005] 506368 pages in range for PLT usage
server # [    0.016100] pinctrl core: initialized pinctrl subsystem
server # [    0.016930] DMI not present or invalid.
server # [    0.022156] NET: Registered PF_NETLINK/PF_ROUTE protocol family
server # [    0.026872] DMA: preallocated 128 KiB GFP_KERNEL pool for atomic allocations
server # [    0.027527] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations
server # [    0.028102] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations
server # [    0.028131] audit: initializing netlink subsys (disabled)
server # [    0.029084] thermal_sys: Registered thermal governor 'fair_share'
server # [    0.029087] thermal_sys: Registered thermal governor 'bang_bang'
server # [    0.029091] thermal_sys: Registered thermal governor 'step_wise'
server # [    0.029094] thermal_sys: Registered thermal governor 'user_space'
server # [    0.029097] thermal_sys: Registered thermal governor 'power_allocator'
server # [    0.029127] audit: type=2000 audit(0.024:1): state=initialized audit_enabled=0 res=1
server # [    0.029138] cpuidle: using governor ladder
server # [    0.029144] cpuidle: using governor menu
server # [    0.029334] hw-breakpoint: found 16 breakpoint and 4 watchpoint registers.
server # [    0.029352] ASID allocator initialised with 65536 entries
server # [    0.031805] Serial: AMBA PL011 UART driver
server # [    0.039983] 9000000.pl011: ttyAMA0 at MMIO 0x9000000 (irq = 13, base_baud = 0) is a PL011 rev1
server # [    0.040122] printk: console [ttyAMA0] enabled
server # [    0.169666] HugeTLB: registered 1.00 GiB page size, pre-allocated 0 pages
server # [    0.169681] HugeTLB: 0 KiB vmemmap can be freed for a 1.00 GiB page
server # [    0.169684] HugeTLB: registered 32.0 MiB page size, pre-allocated 0 pages
server # [    0.169687] HugeTLB: 0 KiB vmemmap can be freed for a 32.0 MiB page
server # [    0.169690] HugeTLB: registered 2.00 MiB page size, pre-allocated 0 pages
server # [    0.169692] HugeTLB: 0 KiB vmemmap can be freed for a 2.00 MiB page
server # [    0.169698] HugeTLB: registered 64.0 KiB page size, pre-allocated 0 pages
server # [    0.169702] HugeTLB: 0 KiB vmemmap can be freed for a 64.0 KiB page
server # [    0.190004] fbcon: Taking over console
server # [    0.190095] ACPI: Interpreter disabled.
server # [    0.193262] iommu: Default domain type: Translated
server # [    0.193267] iommu: DMA domain TLB invalidation policy: strict mode
server # [    0.193732] SCSI subsystem initialized
server # [    0.199562] usbcore: registered new interface driver usbfs
server # [    0.200350] usbcore: registered new interface driver hub
server # [    0.200394] usbcore: registered new device driver usb
server # [    0.210465] pps_core: LinuxPPS API ver. 1 registered
server # [    0.210471] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it>
server # [    0.211067] PTP clock support registered
server # [    0.211124] EDAC MC: Ver: 3.0.0
server # [    0.211411] scmi_core: SCMI protocol bus registered
server # [    0.211782] FPGA manager framework
server # [    0.212436] vgaarb: loaded
server # [    0.212785] clocksource: Switched to clocksource arch_sys_counter
server # [    0.213981] VFS: Disk quotas dquot_6.6.0
server # [    0.214023] VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes)
server # [    0.224602] netfs: FS-Cache loaded
server # [    0.224757] pnp: PnP ACPI: disabled
server # [    0.238562] NET: Registered PF_INET protocol family
server # [    0.238825] IP idents hash table entries: 16384 (order: 5, 131072 bytes, linear)
server # [    0.277040] tcp_listen_portaddr_hash hash table entries: 512 (order: 1, 8192 bytes, linear)
server # [    0.277085] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
server # [    0.277111] TCP established hash table entries: 8192 (order: 4, 65536 bytes, linear)
server # [    0.277156] TCP bind hash table entries: 8192 (order: 6, 262144 bytes, linear)
server # [    0.277229] TCP: Hash tables configured (established 8192 bind 8192)
server # [    0.277353] MPTCP token hash table entries: 1024 (order: 3, 24576 bytes, linear)
server # [    0.277420] UDP hash table entries: 512 (order: 3, 32768 bytes, linear)
server # [    0.277473] UDP-Lite hash table entries: 512 (order: 3, 32768 bytes, linear)
server # [    0.277556] NET: Registered PF_UNIX/PF_LOCAL protocol family
server # [    0.277580] NET: Registered PF_XDP protocol family
server # [    0.277600] PCI: CLS 0 bytes, default 64
server # [    0.277845] Trying to unpack rootfs image as initramfs...
server # [    0.296809] kvm [1]: HYP mode not available
server # [    0.408287] Initialise system trusted keyrings
server # [    0.408332] Key type blacklist registered
server # [    0.408650] workingset: timestamp_bits=42 max_order=18 bucket_order=0
server # [    0.411330] squashfs: version 4.0 (2009/01/31) Phillip Lougher
server # [    0.413569] 9p: Installing v9fs 9p2000 file system support
server # [    0.413873] integrity: Platform Keyring initialized
server # [    0.413884] integrity: Machine keyring initialized
server # [    0.442087] Key type asymmetric registered
server # [    0.442109] Asymmetric key parser 'x509' registered
server # [    0.442315] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 242)
server # [    0.442466] io scheduler mq-deadline registered
server # [    0.442471] io scheduler kyber registered
server # [    0.455551] pl061_gpio 9030000.pl061: PL061 GPIO chip registered
server # [    0.456259] ledtrig-cpu: registered to indicate activity on CPUs
server # [    0.456669] pci-host-generic 4010000000.pcie: host bridge /pcie@10000000 ranges:
server # [    0.456684] pci-host-generic 4010000000.pcie:       IO 0x003eff0000..0x003effffff -> 0x0000000000
server # [    0.456703] pci-host-generic 4010000000.pcie:      MEM 0x0010000000..0x003efeffff -> 0x0010000000
server # [    0.456715] pci-host-generic 4010000000.pcie:      MEM 0x8000000000..0xffffffffff -> 0x8000000000
server # [    0.456734] pci-host-generic 4010000000.pcie: Memory resource size exceeds max for 32 bits
server # [    0.456753] pci-host-generic 4010000000.pcie: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff]
server # [    0.473407] pci-host-generic 4010000000.pcie: PCI host bridge to bus 0000:00
server # [    0.473426] pci_bus 0000:00: root bus resource [bus 00-ff]
server # [    0.473432] pci_bus 0000:00: root bus resource [io  0x0000-0xffff]
server # [    0.473435] pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff]
server # [    0.473439] pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff]
server # [    0.473562] pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 conventional PCI endpoint
server # [    0.474047] pci 0000:00:01.0: [1af4:1000] type 00 class 0x020000 conventional PCI endpoint
server # [    0.474325] pci 0000:00:01.0: BAR 0 [io  0x0000-0x001f]
server # [    0.474338] pci 0000:00:01.0: BAR 1 [mem 0x00000000-0x00000fff]
server # [    0.474364] pci 0000:00:01.0: BAR 4 [mem 0x00000000-0x00003fff 64bit pref]
server # [    0.474376] pci 0000:00:01.0: ROM [mem 0x00000000-0x0003ffff pref]
server # [    0.474842] pci 0000:00:02.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint
server # [    0.475030] pci 0000:00:02.0: BAR 0 [io  0x0000-0x001f]
server # [    0.475042] pci 0000:00:02.0: BAR 1 [mem 0x00000000-0x00000fff]
server # [    0.475068] pci 0000:00:02.0: BAR 4 [mem 0x00000000-0x00003fff 64bit pref]
server # [    0.475541] pci 0000:00:03.0: [1af4:1001] type 00 class 0x010000 conventional PCI endpoint
server # [    0.475729] pci 0000:00:03.0: BAR 0 [io  0x0000-0x007f]
server # [    0.475740] pci 0000:00:03.0: BAR 1 [mem 0x00000000-0x00000fff]
server # [    0.475766] pci 0000:00:03.0: BAR 4 [mem 0x00000000-0x00003fff 64bit pref]
server # [    0.476223] pci 0000:00:04.0: [1af4:1000] type 00 class 0x020000 conventional PCI endpoint
server # [    0.476409] pci 0000:00:04.0: BAR 0 [io  0x0000-0x001f]
server # [    0.476421] pci 0000:00:04.0: BAR 1 [mem 0x00000000-0x00000fff]
server # [    0.476447] pci 0000:00:04.0: BAR 4 [mem 0x00000000-0x00003fff 64bit pref]
server # [    0.476459] pci 0000:00:04.0: ROM [mem 0x00000000-0x0003ffff pref]
server # [    0.497068] pci 0000:00:05.0: [1af4:1050] type 00 class 0x038000 conventional PCI endpoint
server # [    0.497267] pci 0000:00:05.0: BAR 1 [mem 0x00000000-0x00000fff]
server # [    0.497300] pci 0000:00:05.0: BAR 4 [mem 0x00000000-0x00003fff 64bit pref]
server # [    0.497781] pci 0000:00:06.0: [1af4:1052] type 00 class 0x090000 conventional PCI endpoint
server # [    0.497978] pci 0000:00:06.0: BAR 1 [mem 0x00000000-0x00000fff]
server # [    0.498005] pci 0000:00:06.0: BAR 4 [mem 0x00000000-0x00003fff 64bit pref]
server # [    0.498481] pci 0000:00:07.0: [8086:24cd] type 00 class 0x0c0320 conventional PCI endpoint
server # [    0.498670] pci 0000:00:07.0: BAR 0 [mem 0x00000000-0x00000fff]
server # [    0.498950] pci 0000:00:08.0: [1af4:105a] type 00 class 0x018000 conventional PCI endpoint
server # [    0.499143] pci 0000:00:08.0: BAR 1 [mem 0x00000000-0x00000fff]
server # [    0.499177] pci 0000:00:08.0: BAR 4 [mem 0x00000000-0x00003fff 64bit pref]
server # [    0.499672] pci 0000:00:09.0: [1af4:105a] type 00 class 0x018000 conventional PCI endpoint
server # [    0.499866] pci 0000:00:09.0: BAR 1 [mem 0x00000000-0x00000fff]
server # [    0.499902] pci 0000:00:09.0: BAR 4 [mem 0x00000000-0x00003fff 64bit pref]
server # [    0.500390] pci 0000:00:0a.0: [1af4:105a] type 00 class 0x018000 conventional PCI endpoint
server # [    0.500586] pci 0000:00:0a.0: BAR 1 [mem 0x00000000-0x00000fff]
server # [    0.500614] pci 0000:00:0a.0: BAR 4 [mem 0x00000000-0x00003fff 64bit pref]
server # [    0.521252] pci 0000:00:0b.0: [1af4:1003] type 00 class 0x078000 conventional PCI endpoint
server # [    0.521561] pci 0000:00:0b.0: BAR 0 [io  0x0000-0x003f]
server # [    0.521579] pci 0000:00:0b.0: BAR 1 [mem 0x00000000-0x00000fff]
server # [    0.521607] pci 0000:00:0b.0: BAR 4 [mem 0x00000000-0x00003fff 64bit pref]
server # [    0.522108] pci 0000:00:0c.0: [1af4:1005] type 00 class 0x00ff00 conventional PCI endpoint
server # [    0.522390] pci 0000:00:0c.0: BAR 0 [io  0x0000-0x001f]
server # [    0.522403] pci 0000:00:0c.0: BAR 1 [mem 0x00000000-0x00000fff]
server # [    0.522430] pci 0000:00:0c.0: BAR 4 [mem 0x00000000-0x00003fff 64bit pref]
server # [    0.523084] pci 0000:00:01.0: ROM [mem 0x10000000-0x1003ffff pref]: assigned
server # [    0.523092] pci 0000:00:04.0: ROM [mem 0x10040000-0x1007ffff pref]: assigned
server # [    0.523095] pci 0000:00:01.0: BAR 4 [mem 0x8000000000-0x8000003fff 64bit pref]: assigned
server # [    0.523142] pci 0000:00:02.0: BAR 4 [mem 0x8000004000-0x8000007fff 64bit pref]: assigned
server # [    0.523187] pci 0000:00:03.0: BAR 4 [mem 0x8000008000-0x800000bfff 64bit pref]: assigned
server # [    0.523231] pci 0000:00:04.0: BAR 4 [mem 0x800000c000-0x800000ffff 64bit pref]: assigned
server # [    0.523276] pci 0000:00:05.0: BAR 4 [mem 0x8000010000-0x8000013fff 64bit pref]: assigned
server # [    0.523329] pci 0000:00:06.0: BAR 4 [mem 0x8000014000-0x8000017fff 64bit pref]: assigned
server # [    0.523373] pci 0000:00:08.0: BAR 4 [mem 0x8000018000-0x800001bfff 64bit pref]: assigned
server # [    0.523418] pci 0000:00:09.0: BAR 4 [mem 0x800001c000-0x800001ffff 64bit pref]: assigned
server # [    0.523463] pci 0000:00:0a.0: BAR 4 [mem 0x8000020000-0x8000023fff 64bit pref]: assigned
server # [    0.523508] pci 0000:00:0b.0: BAR 4 [mem 0x8000024000-0x8000027fff 64bit pref]: assigned
server # [    0.523583] pci 0000:00:0c.0: BAR 4 [mem 0x8000028000-0x800002bfff 64bit pref]: assigned
server # [    0.523626] pci 0000:00:01.0: BAR 1 [mem 0x10080000-0x10080fff]: assigned
server # [    0.523644] pci 0000:00:02.0: BAR 1 [mem 0x10081000-0x10081fff]: assigned
server # [    0.523661] pci 0000:00:03.0: BAR 1 [mem 0x10082000-0x10082fff]: assigned
server # [    0.523678] pci 0000:00:04.0: BAR 1 [mem 0x10083000-0x10083fff]: assigned
server # [    0.523696] pci 0000:00:05.0: BAR 1 [mem 0x10084000-0x10084fff]: assigned
server # [    0.523713] pci 0000:00:06.0: BAR 1 [mem 0x10085000-0x10085fff]: assigned
server # [    0.523731] pci 0000:00:07.0: BAR 0 [mem 0x10086000-0x10086fff]: assigned
server # [    0.523750] pci 0000:00:08.0: BAR 1 [mem 0x10087000-0x10087fff]: assigned
server # [    0.523769] pci 0000:00:09.0: BAR 1 [mem 0x10088000-0x10088fff]: assigned
server # [    0.523787] pci 0000:00:0a.0: BAR 1 [mem 0x10089000-0x10089fff]: assigned
server # [    0.523805] pci 0000:00:0b.0: BAR 1 [mem 0x1008a000-0x1008afff]: assigned
server # [    0.523823] pci 0000:00:0c.0: BAR 1 [mem 0x1008b000-0x1008bfff]: assigned
server # [    0.523840] pci 0000:00:03.0: BAR 0 [io  0x1000-0x107f]: assigned
server # [    0.523858] pci 0000:00:0b.0: BAR 0 [io  0x1080-0x10bf]: assigned
server # [    0.523877] pci 0000:00:01.0: BAR 0 [io  0x10c0-0x10df]: assigned
server # [    0.523897] pci 0000:00:02.0: BAR 0 [io  0x10e0-0x10ff]: assigned
server # [    0.523915] pci 0000:00:04.0: BAR 0 [io  0x1100-0x111f]: assigned
server # [    0.523936] pci 0000:00:0c.0: BAR 0 [io  0x1120-0x113f]: assigned
server # [    0.523961] pci_bus 0000:00: resource 4 [io  0x0000-0xffff]
server # [    0.523971] pci_bus 0000:00: resource 5 [mem 0x10000000-0x3efeffff]
server # [    0.523979] pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff]
server # [    0.562032] pci 0000:00:07.0: enabling device (0000 -> 0002)
server # [    0.594402] virtio-pci 0000:00:01.0: enabling device (0000 -> 0003)
server # [    0.606393] virtio-pci 0000:00:02.0: enabling device (0000 -> 0003)
server # [    0.626414] virtio-pci 0000:00:03.0: enabling device (0000 -> 0003)
server # [    0.628521] virtio-pci 0000:00:04.0: enabling device (0000 -> 0003)
server # [    0.718579] virtio-pci 0000:00:05.0: enabling device (0000 -> 0002)
server # [    0.722312] virtio-pci 0000:00:06.0: enabling device (0000 -> 0002)
server # [    0.724156] virtio-pci 0000:00:08.0: enabling device (0000 -> 0002)
server # [    0.734284] virtio-pci 0000:00:09.0: enabling device (0000 -> 0002)
server # [    0.736236] virtio-pci 0000:00:0a.0: enabling device (0000 -> 0002)
server # [    0.739930] virtio-pci 0000:00:0b.0: enabling device (0000 -> 0003)
server # [    1.230593] virtio-pci 0000:00:0c.0: enabling device (0000 -> 0003)
server # [    1.245046] Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled
server # [    1.251440] msm_serial: driver initialized
server # [    1.251598] SuperH (H)SCI(F) driver initialized
server # [    1.251660] STM32 USART driver initialized
server # [    1.286072] loop: module loaded
server # [    1.286459] virtio_blk virtio2: 1/0/0 default/read/poll queues
server # [    1.287307] virtio_blk virtio2: [vda] 2097152 512-byte logical blocks (1.07 GB/1.00 GiB)
server # [    1.297547] megasas: 07.734.00.00-rc1
server # [    1.298459] physmap-flash 0.flash: physmap platform flash device: [mem 0x00000000-0x03ffffff]
server # [    1.300654] 0.flash: Found 2 x16 devices at 0x0 in 32-bit bank. Manufacturer ID 0x000000 Chip ID 0x000000
server # [    1.300709] Intel/Sharp Extended Query Table at 0x0031
server # [    1.305920] Using buffer write method
server # [    1.305958] physmap-flash 0.flash: physmap platform flash device: [mem 0x04000000-0x07ffffff]
server # [    1.361663] 0.flash: Found 2 x16 devices at 0x0 in 32-bit bank. Manufacturer ID 0x000000 Chip ID 0x000000
server # [    1.361691] Intel/Sharp Extended Query Table at 0x0031
server # [    1.364381] Using buffer write method
server # [    1.364398] Concatenating MTD devices:
server # [    1.364401] (0): "0.flash"
server # [    1.364404] (1): "0.flash"
server # [    1.364406] into device "0.flash"
server # [    1.369980] Freeing initrd memory: 25236K
server # [    1.376538] tun: Universal TUN/TAP device driver, 1.6
server # [    1.380473] thunder_xcv, ver 1.0
server # [    1.380498] thunder_bgx, ver 1.0
server # [    1.380516] nicpf, ver 1.0
server # [    1.382384] e1000: Intel(R) PRO/1000 Network Driver
server # [    1.382390] e1000: Copyright (c) 1999-2006 Intel Corporation.
server # [    1.382416] e1000e: Intel(R) PRO/1000 Network Driver
server # [    1.382423] e1000e: Copyright(c) 1999 - 2015 Intel Corporation.
server # [    1.382447] igb: Intel(R) Gigabit Ethernet Network Driver
server # [    1.382450] igb: Copyright (c) 2007-2014 Intel Corporation.
server # [    1.382470] igbvf: Intel(R) Gigabit Virtual Function Network Driver
server # [    1.382474] igbvf: Copyright (c) 2009 - 2012 Intel Corporation.
server # [    1.382611] sky2: driver version 1.30
server # [    1.384318] usbcore: registered new interface driver usb-storage
server # [    1.384372] usbcore: registered new interface driver usbserial_generic
server # [    1.384382] usbserial: USB Serial support registered for generic
server # [    1.385495] ehci-pci 0000:00:07.0: EHCI Host Controller
server # [    1.385517] ehci-pci 0000:00:07.0: new USB bus registered, assigned bus number 1
server # [    1.385732] ehci-pci 0000:00:07.0: irq 16, io mem 0x10086000
server # [    1.397068] hv_vmbus: registering driver hyperv_keyboard
server # [    1.398098] ehci-pci 0000:00:07.0: USB 2.0 started, EHCI 1.00
server # [    1.398448] hub 1-0:1.0: USB hub found
server # [    1.398473] hub 1-0:1.0: 6 ports detected
server # [    1.399044] rtc-pl031 9010000.pl031: registered as rtc0
server # [    1.399073] rtc-pl031 9010000.pl031: setting system clock to 2026-10-27T08:50:24 UTC (1793091024)
server # [    1.399402] i2c_dev: i2c /dev entries driver
server # [    1.407518] sdhci: Secure Digital Host Controller Interface driver
server # [    1.407524] sdhci: Copyright(c) Pierre Ossman
server # [    1.407804] Synopsys Designware Multimedia Card Interface Driver
server # [    1.408198] sdhci-pltfm: SDHCI platform and OF driver helper
server # [    1.413009] hid: raw HID events driver (C) Jiri Kosina
server # [    1.413254] usbcore: registered new interface driver usbhid
server # [    1.413259] usbhid: USB HID core driver
server # [    1.414473] hw perfevents: enabled with armv8_pmuv3 PMU driver, 11 (0,800003ff) counters available
server # [    1.416071] drop_monitor: Initializing network drop monitor service
server # [    1.416757] NET: Registered PF_INET6 protocol family
server # [    1.422921] Segment Routing with IPv6
server # [    1.422935] In-situ OAM (IOAM) with IPv6
server # [    1.422964] NET: Registered PF_PACKET protocol family
server # [    1.423019] 9pnet: Installing 9P2000 support
server # [    1.423066] Key type dns_resolver registered
server # [    1.434801] registered taskstats version 1
server # [    1.435035] Loading compiled-in X.509 certificates
server # [    1.444303] Demotion targets for Node 0: null
server # [    1.444428] Key type .fscrypt registered
server # [    1.444432] Key type fscrypt-provisioning registered
server # [    1.444538] ima: No TPM chip found, activating TPM-bypass!
server # [    1.444559] ima: Allocated hash algorithm: sha1
server # [    1.444581] ima: No architecture policies found
server # [    1.449764] input: gpio-keys as /devices/platform/gpio-keys/input/input0
server # [    1.468184] clk: Disabling unused clocks
server # [    1.468202] PM: genpd: Disabling unused power domains
server # [    1.475077] Freeing unused kernel memory: 7808K
server # [    1.475315] Run /init as init process
server # [    1.491429] systemd[1]: Successfully made /usr/ read-only.
server # [    1.644925] usb 1-1: new high-speed USB device number 2 using ehci-pci
server # [    1.796728] input: QEMU QEMU USB Keyboard as /devices/platform/4010000000.pcie/pci0000:00/0000:00:07.0/usb1/1-1/1-1:1.0/0003:0627:0001.0001/input/input1
server # [    1.825508] systemd[1]: systemd 262 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE)
server # [    1.825545] systemd[1]: Detected virtualization qemu.
server # [    1.825608] systemd[1]: Detected architecture arm64.
server # [    1.825618] systemd[1]: Running in initrd.
server # [    1.826380] systemd[1]: Initializing machine ID from random generator.
server # [    1.826701] systemd[1]: Hostname set to <server>.
server # [    1.897086] hid-generic 0003:0627:0001.0001: input,hidraw0: USB HID v1.11 Keyboard [QEMU QEMU USB Keyboard] on usb-0000:00:07.0-1/input0
server # [    1.964767] systemd[1]: bpf-restrict-fs: LSM BPF program attached
server # [    2.016840] usb 1-2: new high-speed USB device number 3 using ehci-pci
server # [    2.019729] systemd[1]: Queued start job for default target Initrd Default Target.
server # [    2.027326] systemd[1]: Created slice Slice /system/modprobe.
server # [    2.027494] systemd[1]: Started Dispatch Password Requests to Console Directory Watch.
server # [    2.027522] systemd[1]: Expecting device /dev/disk/by-label/nixos...
server # [    2.027541] systemd[1]: Reached target Path Units.
server # [    2.027554] systemd[1]: Reached target Slice Units.
server # [    2.027568] systemd[1]: Reached target Swaps.
server # [    2.027582] systemd[1]: Reached target Timer Units.
server # [    2.027706] systemd[1]: Listening on D-Bus System Message Bus Socket.
server # [    2.027846] systemd[1]: Listening on Journal Socket (/dev/log).
server # [    2.027976] systemd[1]: Listening on Journal Sockets.
server # [    2.028045] systemd[1]: Listening on udev Kernel Socket.
server # [    2.028198] systemd[1]: Listening on udev Varlink Socket.
server # [    2.028214] systemd[1]: Reached target Socket Units.
server # [    2.039045] systemd[1]: Starting Create List of Static Device Nodes...
server # [    2.039102] systemd[1]: Load Kernel Module configfs skipped, unmet condition check ConditionKernelModuleLoaded=!configfs
server # [    2.048342] systemd[1]: Mounting Kernel Configuration File System...
server # [    2.063628] systemd[1]: Starting Journal Service...
server # [    2.076963] systemd[1]: Starting Load Kernel Modules...
server # [    2.077075] systemd[1]: Early TPM SRK Setup skipped, unmet condition check ConditionSecurity=measured-os
server # [    2.089546] systemd[1]: Starting Coldplug All udev Devices...
server # [    2.105037] systemd[1]: Finished Create List of Static Device Nodes.
server # [    2.106363] systemd[1]: Mounted Kernel Configuration File System.
server # [    2.133023] systemd[1]: Starting Create Static Device Nodes in /dev gracefully...
server # [    2.134473] dm_mod: module verification failed: signature and/or required key missing - tainting kernel
server # [    2.146732] systemd-journald[70]: Collecting audit messages is disabled.
server # [    2.155587] device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log.
server # [    2.158758] device-mapper: ioctl: 4.50.0-ioctl (2025-04-28) initialised: dm-devel@lists.linux.dev
server # [    2.180679] input: QEMU QEMU USB Tablet as /devices/platform/4010000000.pcie/pci0000:00/0000:00:07.0/usb1/1-2/1-2:1.0/0003:0627:0001.0002/input/input2
server # [    2.182681] hid-generic 0003:0627:0001.0002: input,hidraw1: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:07.0-2/input0
server # [    2.184483] [drm] pci: virtio-gpu-pci detected at 0000:00:05.0
server # [    2.184721] [drm] features: -virgl +edid -resource_blob -host_visible
server # [    2.184724] [drm] features: -context_init
server # [    2.198273] [drm] number of scanouts: 1
server # [    2.198289] [drm] number of cap sets: 0
server # [    2.199263] systemd[1]: Finished Create Static Device Nodes in /dev gracefully.
server # [    2.203175] virtio-pci 0000:00:05.0: [drm] Registered 1 planes with drm panic
server # [    2.203191] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:05.0 on minor 0
server # [    2.213243] systemd[1]: Starting Create Static Device Nodes in /dev...
server # [    2.245249] Console: switching to colour frame buffer device 160x50
server # [    2.265898] virtio-pci 0000:00:05.0: [drm] fb0: virtio_gpudrmfb frame buffer device
server # [    2.277553] systemd[1]: Finished Load Kernel Modules.
server # [    2.281937] systemd[1]: Starting Apply Kernel Variables...
server # [    2.309300] systemd[1]: Finished Create Static Device Nodes in /dev.
server # [    2.309619] systemd[1]: Reached target Preparation for Local File Systems.
server # [    2.309655] systemd[1]: Reached target Local File Systems.
server # [    2.312447] systemd[1]: Starting Rule-based Manager for Device Events and Files...
server # [    2.311331] systemd-modules-load[71]: Inserted module 'dm_mod'
server # [    2.317858] systemd-modules-load[71]: Module 'virtio_balloon' is built in
server # [    2.319948] systemd-modules-load[71]: Module 'virtio_console' is built in[    2.337286] systemd[1]: Started Journal Service.
server # 
server # [    2.325903] systemd-modules-load[71]: Inserted module 'virtio_gpu'
server # [    2.334565] systemd-modules-load[71]: Module 'virtio_rng' is built in
server # [    2.344341] systemd[1]: Finished Apply Kernel Variables.
server # [    2.346580] systemd[1]: Starting Create System Files and Directories...
server # [    2.393216] systemd-udevd[79]: Using default interface naming scheme 'v261'.
server # [    2.410344] systemd[1]: Finished Create System Files and Directories.
server # [    2.435293] systemd[1]: Started Rule-based Manager for Device Events and Files.
server # [    2.540201] systemd[1]: Starting Virtual Console Setup...
server # [    2.620721] systemd-vconsole-setup[101]: Configuration of first virtual console was skipped, ignoring remaining ones.
server # [    2.631066] systemd[1]: Finished Virtual Console Setup.
server # [    3.295508] systemd[1]: Finished Coldplug All udev Devices.
server # [    3.300960] systemd[1]: Reached target System Initialization.
server # [    3.301997] systemd[1]: Reached target Basic System.
server # [    3.424179] (udev-worker)[99]: eth1: Config file /etc/systemd/network/40-eth1.link is applied to device based on potentially unpredictable interface name.
server # [    3.465526] (udev-worker)[99]: Network interface NamePolicy= disabled on kernel command line.
server # [    3.485709] (udev-worker)[90]: Network interface NamePolicy= disabled on kernel command line.
server # [    3.577997] systemd[1]: Found device /dev/disk/by-label/nixos.
server # [    3.581682] systemd[1]: Reached target Initrd Root Device.
server # [    3.587025] systemd[1]: Starting File System Check on /dev/disk/by-label/nixos...
server # [    3.636238] systemd-fsck[110]: nixos: clean, 12/65536 files, 13019/262144 blocks
server # [    3.643737] systemd[1]: Finished File System Check on /dev/disk/by-label/nixos.
server # [    3.647510] systemd[1]: Mounting /sysroot...
server # [    3.711212] EXT4-fs (vda): mounted filesystem 809a6477-54d1-4793-89d1-afdaceadb63f r/w with ordered data mode. Quota mode: none.
server # [    3.695666] systemd[1]: Mounted /sysroot.
server # [    3.698568] systemd[1]: Reached target Initrd Root File System.
server # [    3.708136] systemd[1]: Starting Mountpoints Configured in the Real Root...
server # [    3.735258] systemd-sysroot-fstab-check[118]: /sysroot should be mounted in the initrd, will request daemon-reload.
server # [    3.742982] systemd[1]: Reload requested from client PID 118 ('systemd-sysroot') (unit initrd-parse-etc.service)...
server # [    3.746045] systemd[1]: Reloading...
server # [    3.968106] systemd[1]: Reloading finished in 226 ms.
server # [    4.001127] systemd-sysroot-fstab-check[118]: Requesting initrd-fs.target/start/replace...
server # [    4.006174] systemd-sysroot-fstab-check[118]: Requesting swap.target/start/replace...
server # [    4.014097] systemd[1]: initrd-parse-etc.service: Deactivated successfully.
server # [    4.016703] systemd[1]: Finished Mountpoints Configured in the Real Root.
server # [    4.018755] systemd[1]: initrd-parse-etc.service: Triggering OnSuccess= dependencies.
server # [    4.075660] systemd[1]: Mounting /sysroot/nix/.ro-store...
server # [    4.087435] systemd[1]: Mounting /sysroot/nix/.rw-store...
server # [    4.101863] systemd[1]: Mounting /sysroot/run...
server # [    4.124081] systemd[1]: Mounting /sysroot/tmp/shared...
server # [    4.148353] systemd[1]: Mounting /sysroot/tmp/xchg...
server # [    4.174444] systemd[1]: Mounted /sysroot/nix/.rw-store.
server # [    4.240182] fuse: init (API version 7.45)
server # [    4.249618] virtiofs virtio6: discovered new tag: nix-store
server # [    4.250543] virtiofs virtio6: virtio_fs_setup_dax: No cache capability
server # [    4.240423] systemd[1]: Starting rw-sysroot-nix-store.service...
server # [    4.243092] systemd[1]: Mounted /sysroot/run.
server # [    4.267494] virtiofs virtio7: discovered new tag: shared
server # [    4.268301] virtiofs virtio7: virtio_fs_setup_dax: No cache capability
server # [    4.254425] systemd[1]: rw-sysroot-nix-store.service: Deactivated successfully.
server # [    4.257683] systemd[1]: Finished rw-sysroot-nix-store.service.
server # [    4.290885] virtiofs virtio8: discovered new tag: xchg
server # [    4.291983] virtiofs virtio8: virtio_fs_setup_dax: No cache capability
server # [    4.279861] systemd[1]: Mounted /sysroot/tmp/shared.
server # [    4.287066] systemd[1]: Mounted /sysroot/tmp/xchg.
server # [    4.289016] systemd[1]: Mounted /sysroot/nix/.ro-store.
server # [    4.919905] (udev-worker)[99]: mtd0ro: Failed to find and pin callout binary "/nix/store/rzzrvlm7r31iq3im3h66nhxc2zh996l9-systemd-262/lib/udev/mtd_probe": No such file or directory
server # [    4.922621] (udev-worker)[99]: mtd0ro: /etc/udev/rules.d/75-probe_mtd.rules:5 IMPORT{program}="mtd_probe $devnode": Failed to execute "mtd_probe /dev/mtd0ro", ignoring: No such file or directory
server # [    4.963293] systemd[1]: systemd-vconsole-setup.service: Deactivated successfully.
server # [    4.964557] systemd[1]: Stopped Virtual Console Setup.
server # [    4.965365] systemd[1]: Stopping Virtual Console Setup...
server # [    4.968532] systemd[1]: Starting Virtual Console Setup...
server # [    4.985178] systemd[1]: systemd-vconsole-setup.service: Deactivated successfully.
server # [    4.987711] systemd[1]: Stopped Virtual Console Setup.
server # [    4.989184] systemd[1]: Starting Virtual Console Setup...
server # [    5.012250] systemd-vconsole-setup[157]: Configuration of first virtual console was skipped, ignoring remaining ones.
server # [    5.015551] systemd[1]: Finished Virtual Console Setup.
server # [    5.074126] systemd[1]: Mounting /sysroot/nix/store...
server # [    5.118706] systemd[1]: Mounted /sysroot/nix/store.
server # [    5.120952] systemd[1]: Reached target Initrd File Systems.
server # [    5.124546] systemd[1]: Starting Find NixOS closure...
server # [    5.136399] systemd[1]: Starting Create Volatile Files and Directories in the Real Root...
server # [    5.168247] systemd[1]: Finished Create Volatile Files and Directories in the Real Root.
server # [    5.171720] systemd[1]: sysroot-run-credentials-systemd\x2dtmpfiles\x2dsetup\x2dsysroot.service.mount: Deactivated successfully.
server # [    5.184409] systemd[1]: Finished Find NixOS closure.
server # [    5.186821] systemd[1]: Reached target Initrd Default Target.
server # [    5.188316] systemd[1]: Starting Cleaning Up and Shutting Down Daemons...
server # [    5.214318] systemd[1]: Stopped target Initrd Default Target.
server # [    5.216202] systemd[1]: Stopped target Basic System.
server # [    5.217424] systemd[1]: Stopped target Initrd Root Device.
server # [    5.220405] systemd[1]: Stopped target Path Units.
server # [    5.221287] systemd[1]: systemd-ask-password-console.path: Deactivated successfully.
server # [    5.224207] systemd[1]: Stopped Dispatch Password Requests to Console Directory Watch.
server # [    5.228158] systemd[1]: Stopped target Slice Units.
server # [    5.229047] systemd[1]: Stopped target Socket Units.
server # [    5.230494] systemd[1]: Stopped target System Initialization.
server # [    5.232576] systemd[1]: Stopped target Swaps.
server # [    5.236193] systemd[1]: Stopped target Timer Units.
server # [    5.237059] systemd[1]: dbus.socket: Deactivated successfully.
server # [    5.238038] systemd[1]: Closed D-Bus System Message Bus Socket.
server # [    5.240140] systemd[1]: initrd-find-nixos-closure.service: Deactivated successfully.
server # [    5.245346] systemd[1]: Stopped Find NixOS closure.
server # [    5.247090] systemd[1]: Starting rw-sysroot-nix-store.service...
server # [    5.251904] systemd[1]: systemd-sysctl.service: Deactivated successfully.
server # [    5.254515] systemd[1]: Stopped Apply Kernel Variables.
server # [    5.264385] systemd[1]: systemd-modules-load.service: Deactivated successfully.
server # [    5.268254] systemd[1]: Stopped Load Kernel Modules.
server # [    5.269338] systemd[1]: systemd-tmpfiles-setup-sysroot.service: Deactivated successfully.
server # [    5.276130] systemd[1]: Stopped Create Volatile Files and Directories in the Real Root.
server # [    5.277812] systemd[1]: systemd-tmpfiles-setup.service: Deactivated successfully.
server # [    5.286906] systemd[1]: Stopped Create System Files and Directories.
server # [    5.288837] systemd[1]: Stopped target Local File Systems.
server # [    5.297259] systemd[1]: Stopped target Preparation for Local File Systems.
server # [    5.298362] systemd[1]: systemd-udev-trigger.service: Deactivated successfully.
server # [    5.299394] systemd[1]: Stopped Coldplug All udev Devices.
server # [    5.302629] systemd[1]: Stopping Rule-based Manager for Device Events and Files...
server # [    5.303765] systemd[1]: systemd-vconsole-setup.service: Deactivated successfully.
server # [    5.306245] systemd[1]: Stopped Virtual Console Setup.
server # [    5.309563] systemd[1]: initrd-cleanup.service: Deactivated successfully.
server # [    5.311870] systemd[1]: Finished Cleaning Up and Shutting Down Daemons.
server # [    5.313035] systemd[1]: systemd-udevd.service: Deactivated successfully.
server # [    5.313992] systemd[1]: Stopped Rule-based Manager for Device Events and Files.
server # [    5.315144] systemd[1]: systemd-udevd.service: Consumed 1.545s CPU time over 2.992s wall clock time, 24M memory peak.
server # [    5.320276] systemd[1]: systemd-udevd-varlink.socket: Deactivated successfully.
server # [    5.321409] systemd[1]: Closed udev Varlink Socket.
server # [    5.323468] systemd[1]: Starting Cleanup udev Database...
server # [    5.328287] systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully.
server # [    5.329425] systemd[1]: Stopped Create Static Device Nodes in /dev.
server # [    5.330307] systemd[1]: systemd-tmpfiles-setup-dev-early.service: Deactivated successfully.
server # [    5.331437] systemd[1]: Stopped Create Static Device Nodes in /dev gracefully.
server # [    5.336228] systemd[1]: kmod-static-nodes.service: Deactivated successfully.
server # [    5.337268] systemd[1]: Stopped Create List of Static Device Nodes.
server # [    5.338178] systemd[1]: rw-sysroot-nix-store.service: Deactivated successfully.
server # [    5.344349] systemd[1]: Finished rw-sysroot-nix-store.service.
server # [    5.368817] systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully.
server # [    5.370549] systemd[1]: Finished Cleanup udev Database.
server # [    5.372831] systemd[1]: Reached target Switch Root.
server # [    5.375291] systemd[1]: Starting NixOS Activation...
server # [    5.459012] initrd-nixos-activation-start[180]: booting system configuration /nix/store/5far09hk1hc2px2bnx4s12fj9d20qb2h-nixos-system-server-test
server # [    5.495645] initrd-nixos-activation-start[180]: running activation script...
server # [    5.746510] initrd-nixos-activation-start[203]: setting up /etc...
server # [    5.868869] systemd[1]: initrd-nixos-activation.service: Deactivated successfully.
server # [    5.871898] systemd[1]: Finished NixOS Activation.
server # [    5.873300] systemd[1]: Starting Switch Root...
server # [    5.896862] systemd[1]: Switching root.
server # [    6.087283] systemd-journald[70]: Received SIGTERM from PID 1 (systemd).
server # [    6.574986] systemd[1]: systemd 262 running in system mode (+PAM +AUDIT -SELINUX +APPARMOR +IMA +IPE +SMACK +SECCOMP -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 +KMOD +LIBCRYPTSETUP +LIBCRYPTSETUP_PLUGINS +LIBFDISK +PCRE2 +PWQUALITY +P11KIT +QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD +BPF_FRAMEWORK -BTF -XKBCOMMON +UTMP +LIBARCHIVE)
server # [    6.575047] systemd[1]: Detected virtualization qemu.
server # [    6.575114] systemd[1]: Detected architecture arm64.
server # [    6.575260] systemd[1]: Detected first boot.
server # [    6.586238] systemd[1]: Initializing machine ID from random generator.
server # [    6.732593] systemd[1]: bpf-restrict-fs: LSM BPF program attached
server # [    6.983440] systemd[1]: Applying preset policy.
server # [    7.194754] systemd[1]: Populated /etc with preset unit settings.
server # [    7.414907] systemd[1]: initrd-switch-root.service: Deactivated successfully.
server # [    7.415803] systemd[1]: Stopped initrd-switch-root.service.
server # [    7.420444] systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1.
server # [    7.424436] systemd[1]: Created slice Slice /system/getty.
server # [    7.427358] systemd[1]: Created slice User and Session Slice.
server # [    7.427910] systemd[1]: Started Dispatch Password Requests to Console Directory Watch.
server # [    7.428475] systemd[1]: Started Forward Password Requests to Wall Directory Watch.
server # [    7.432150] systemd[1]: Expecting device /dev/hvc0...
server # [    7.432538] systemd[1]: Expecting device /dev/ttyAMA0...
server # [    7.435043] systemd[1]: Reached target Local Encrypted Volumes.
server # [    7.435431] systemd[1]: Stopped target initrd-fs.target.
server # [    7.435977] systemd[1]: Stopped target initrd-root-fs.target.
server # [    7.436518] systemd[1]: Stopped target initrd-switch-root.target.
server # [    7.440504] systemd[1]: Reached target Virtual Machines and Containers.
server # [    7.442436] systemd[1]: Reached target Path Units.
server # [    7.442839] systemd[1]: Reached target Remote File Systems.
server # [    7.443411] systemd[1]: Reached target Slice Units.
server # [    7.443962] systemd[1]: Reached target Swaps.
server # [    7.448551] systemd[1]: Listening on Query the User Interactively for a Password.
server # [    7.451551] systemd[1]: Listening on Process Core Dump Socket.
server # [    7.453636] systemd[1]: Listening on Credential Encryption/Decryption.
server # [    7.454985] systemd[1]: Listening on Factory Reset Management.
server # [    7.455481] systemd[1]: Listening on Hostname Service Socket.
server # [    7.461968] systemd[1]: Starting Journal Log Access Socket...
server # [    7.463623] systemd[1]: Listening on Journal Audit Socket.
server # [    7.467250] systemd[1]: Listening on Console Output Muting Service Socket.
server # [    7.467972] systemd[1]: Listening on Userspace Out-Of-Memory (OOM) Killer Socket.
server # [    7.468465] systemd[1]: TPM PCR Measurements skipped, unmet condition check ConditionSecurity=measured-os
server # [    7.474386] systemd[1]: Make TPM PCR Policy skipped, unmet condition check ConditionSecurity=measured-uki
server # [    7.481127] systemd[1]: Listening on Disk Repartitioning Service Socket.
server # [    7.481636] systemd[1]: Listening on udev Varlink Socket.
server # [    7.484230] systemd[1]: Mounting Huge Pages File System...
server # [    7.492939] systemd[1]: Mounting POSIX Message Queue File System...
server # [    7.504967] systemd[1]: Mounting Kernel Debug File System...
server # [    7.526043] systemd[1]: Mounting Kernel Trace File System...
server # [    7.554695] systemd[1]: Starting Create List of Static Device Nodes...
server # [    7.555221] systemd[1]: Load Kernel Module configfs skipped, unmet condition check ConditionKernelModuleLoaded=!configfs
server # [    7.573975] systemd[1]: Mounting Kernel Configuration File System...
server # [    7.576141] systemd[1]: Load Kernel Module drm skipped, unmet condition check ConditionKernelModuleLoaded=!drm
server # [    7.581840] systemd[1]: Load Kernel Module efi_pstore skipped, unmet condition check ConditionKernelModuleLoaded=!efi_pstore
server # [    7.587669] systemd[1]: Load Kernel Module fuse skipped, unmet condition check ConditionKernelModuleLoaded=!fuse
server # [    7.613885] systemd[1]: Mounting FUSE Control File System...
server # [    7.614400] systemd[1]: Clear Stale Hibernate Storage Info skipped, unmet condition check ConditionPathExists=/sys/firmware/efi/efivars/HibernateLocation-8cf2644b-4b0b-428f-9387-6d876050dc67
server # [    7.649342] systemd[1]: Starting Journal Service...
server # [    7.682617] systemd[1]: Starting Load Kernel Modules...
server # [    7.694807] systemd[1]: Starting Userspace Out-Of-Memory (OOM) Killer...
server # [    7.714949] systemd-journald[274]: Collecting audit messages is enabled.
server # [    7.722639] systemd[1]: Starting Remount Root and Kernel File Systems...
server # [    7.723109] systemd[1]: Early TPM SRK Setup skipped, unmet condition check ConditionSecurity=measured-os
server # [    7.708535] systemd[1]: Queued start job for default target Multi-User System.
server # [    7.709954] systemd[1]: systemd-journald.service: Deactivated successfully.
server # [    7.756214] systemd[1]: Starting Coldplug All udev Devices...
server # [    7.768502] systemd[1]: Started Journal Service.
server # [    7.762851] systemd-modules-load[276]: Module 'atkbd' is built in
server # [    7.764485] systemd-modules-load[276]: Module 'loop' is built in
server # [    7.775055] systemd[1]: Listening on Journal Log Access Socket.
server # [    7.781002] systemd[1]: Mounted Huge Pages File System.
server # [    7.781941] systemd[1]: Mounted POSIX Message Queue File System.
server # [    7.791431] systemd[1]: Mounted Kernel Debug File System.
server # [    7.794829] systemd[1]: Mounted Kernel Trace File System.
server # [    7.800797] systemd[1]: Finished Create List of Static Device Nodes.
server # [    7.801822] systemd[1]: Mounted Kernel Configuration File System.
server # [    7.809656] systemd[1]: Finished Load Kernel Modules.
server # [    7.838694] systemd[1]: Starting Firewall...
server # [    7.847674] systemd[1]: Starting Apply Kernel Variables...
server # [    7.851027] systemd[1]: Starting Create Static Device Nodes in /dev gracefully...
server # [    7.888910] EXT4-fs (vda): re-mounted 809a6477-54d1-4793-89d1-afdaceadb63f.
server # [    7.893279] systemd[1]: Finished Remount Root and Kernel File Systems.
server # [    7.904206] systemd[1]: Listening on Disk Image Download Service Socket.
server # [    7.939566] systemd[1]: Starting Flush Journal to Persistent Storage...
server # [    7.946636] systemd[1]: Platform Persistent Storage Archival skipped, unmet condition check ConditionDirectoryNotEmpty=/sys/fs/pstore
server # [    7.960286] systemd-oomd[277]: No swap; memory pressure usage will be degraded
server # [    7.970989] systemd[1]: Starting Load/Save OS Random Seed...
server # [    7.980640] systemd[1]: TPM SRK Setup skipped, unmet condition check ConditionSecurity=measured-os
server # [    7.982178] systemd[1]: Started Userspace Out-Of-Memory (OOM) Killer.
server # [    8.059408] systemd[1]: Mounted FUSE Control File System.
server # [    8.133050] systemd-journald[274]: Received client request to flush runtime journal.
server # [    8.184440] systemd[1]: Finished Apply Kernel Variables.
server # [    8.185602] systemd[1]: Finished Load/Save OS Random Seed.
server # [    8.186498] systemd[1]: Reached target First Boot Complete.
server # [    8.187323] systemd[1]: Finished Create Static Device Nodes in /dev gracefully.
server # [    8.209239] systemd[1]: Starting Create Static Device Nodes in /dev...
server # [    8.210783] systemd[1]: Finished Flush Journal to Persistent Storage.
server # [    8.332926] systemd[1]: Finished Create Static Device Nodes in /dev.
server # [    8.336257] systemd[1]: Reached target Preparation for Local File Systems.
server # [    8.342291] systemd[1]: Starting Rule-based Manager for Device Events and Files...
server # [    8.408731] systemd[1]: Mounting /run/wrappers...
server # [    8.478605] systemd[1]: Mounted /run/wrappers.
server # [    8.479466] systemd[1]: Reached target Local File Systems.
server # [    8.484439] systemd[1]: Listening on Boot Loader Control Service Socket.
server # [    8.491341] systemd[1]: Starting register-nix-paths.service...
server # [    8.499128] systemd[1]: Starting Create SUID/SGID Wrappers...
server # [    8.502809] systemd[1]: Update Boot Loader Random Seed skipped, no trigger condition checks were met.
server # [    8.511635] systemd-udevd[313]: Using default interface naming scheme 'v261'.
server # [    8.516390] systemd[1]: Starting Save Transient machine-id to Disk...
server # [    8.534538] systemd[1]: Starting Create System Files and Directories...
server # [    8.691451] systemd[1]: etc-machine\x2did.mount: Deactivated successfully.
server # [    8.705819] systemd[1]: Finished Save Transient machine-id to Disk.
server # [    8.791631] systemd[1]: Started Rule-based Manager for Device Events and Files.
server # [    8.876346] systemd[1]: Finished Create System Files and Directories.
server # [    8.897972] systemd[1]: Starting Rebuild Journal Catalog...
server # [    8.943234] systemd[1]: Starting Record System Boot/Shutdown in UTMP...
server # [    9.091594] systemd[1]: Finished Record System Boot/Shutdown in UTMP.
server # [    9.148772] systemd[1]: Finished Rebuild Journal Catalog.
server # [    9.159348] systemd[1]: Starting Update is Completed...
server # [    9.324746] systemd[1]: Finished Update is Completed.
server # [   10.044389] systemd[1]: Finished Coldplug All udev Devices.
server # [   10.080721] systemd[1]: suid-sgid-wrappers.service: Deactivated successfully.
server # [   10.089142] systemd[1]: Finished Create SUID/SGID Wrappers.
server # [   10.097225] systemd[1]: Finished register-nix-paths.service.
server # [   10.102817] systemd[1]: Reached target System Initialization.
server # [   10.106128] systemd[1]: Started Discard unused filesystem blocks once a week.
server # [   10.107306] systemd[1]: Started niks3 garbage collection timer.
server # [   10.112700] systemd[1]: Started Daily Cleanup of Temporary Directories.
server # [   10.113792] systemd[1]: Reached target Timer Units.
server # [   10.114560] systemd[1]: Listening on D-Bus System Message Bus Socket.
server # [   10.123533] systemd[1]: Listening on niks3 server socket.
server # [   10.125910] systemd[1]: Listening on Nix Daemon Socket.
server # [   10.126774] systemd[1]: Listening on Virtual Machine and Container Registration Service Socket.
server # [   10.134473] systemd[1]: Reached target Socket Units.
server # [   10.135386] systemd[1]: Reached target Basic System.
server # [   10.140719] systemd[1]: Starting Import lastlog data into lastlog2 database...
server # [   10.141946] systemd[1]: Starting Name Service Cache Daemon (nsncd)...
server # [   10.149074] systemd[1]: Started openbao-dev.service.
server # [   10.175529] systemd[1]: Starting openbao-setup.service...
server # [   10.204246] systemd[1]: Starting Post-Boot Actions...
server # [   10.228208] systemd[1]: Started Reset console on configuration changes.
server # [   10.280153] systemd[1]: Starting resolvconf update...
server # [   10.389252] systemd[1]: Started Name Service Cache Daemon (nsncd).
server # [   10.423659] systemd[1]: Reached target Host and Network Name Lookups.
server # [   10.456352] systemd[1]: Reached target User and Group Name Lookups.
server # [   10.463066] nsncd[451]: Oct 27 08:50:33.581 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"
server # [   10.480125] systemd[1]: Starting D-Bus System Message Bus...
server # [   10.482893] systemd[1]: Load Kernel Module configfs skipped, unmet condition check ConditionKernelModuleLoaded=!configfs
server # [   10.494524] systemd[1]: Load Kernel Module fuse skipped, unmet condition check ConditionKernelModuleLoaded=!fuse
server # [   10.515777] systemd[1]: Starting User Login Management...
server # [   10.540099] systemd[1]: Finished Post-Boot Actions.
server # [   10.580290] systemd[1]: Finished Import lastlog data into lastlog2 database.
server # [   10.852772] systemd-logind[484]: New seat seat0.
server # [   10.865060] systemd[1]: Started User Login Management.
server # [   10.884144] systemd[1]: Starting linger-users.service...
server # [   10.891237] systemd[1]: Condition check resulted in /dev/hvc0 being skipped.
server # [   10.923705] dbus-broker-launch[482]: Looking up NSS user entry for 'systemd-timesync'...
server # [   10.946588] dbus-broker-launch[482]: NSS returned no entry for 'systemd-timesync'
server # [   10.947853] dbus-broker-launch[482]: Invalid user-name in /nix/store/96wk06sfrajmvphmhm9cg28s4sr3qrvm-system-path/share/dbus-1/system.d/org.freedesktop.timesync1.conf +16: user="systemd-timesync"
server # [   11.002937] systemd[1]: Started D-Bus System Message Bus.
server # [   11.085587] systemd[1]: Stopped target Host and Network Name Lookups.
server # [   11.099165] systemd[1]: Stopping Host and Network Name Lookups...
server # [   11.106042] systemd[1]: Stopped target User and Group Name Lookups.
server # [   11.107000] systemd[1]: Stopping User and Group Name Lookups...
server # [   11.107865] systemd[1]: Stopping Name Service Cache Daemon (nsncd)...
server # [   11.123941] systemd[1]: nscd.service: Deactivated successfully.
server # [   11.131061] dbus-broker-launch[482]: Ready
server # [   11.139308] systemd[1]: Stopped Name Service Cache Daemon (nsncd).
server # [   11.148643] systemd[1]: linger-users.service: Deactivated successfully.
server # [   11.149765] systemd[1]: Finished linger-users.service.
server # [   11.210542] systemd[1]: Condition check resulted in /dev/ttyAMA0 being skipped.
server # [   11.233061] systemd[1]: Started backdoor.service.
server # [   11.250404] systemd[1]: Starting Name Service Cache Daemon (nsncd)...
server # [   11.399903] systemd[1]: Finished resolvconf update.
server # [   11.414468] systemd[1]: Starting DHCP Client...
server # [   11.479726] systemd[1]: Started Name Service Cache Daemon (nsncd).
server # [   11.490225] nsncd[574]: Oct 27 08:50:34.601 INFO started, config: Config { ignored_request_types: {}, worker_count: 8, handoff_timeout: 10s }, path: "/var/run/nscd/socket"
server # [   11.509823] systemd[1]: Reached target Host and Network Name Lookups.
server # [   11.510911] systemd[1]: Reached target User and Group Name Lookups.
server # connecting to host...
server: Guest shell says: b'Spawning backdoor root shell...\n'
server: connected to guest root shell
server # [   11.632883] (udev-worker)[351]: eth1: Config file /etc/systemd/network/40-eth1.link is applied to device based on potentially unpredictable interface name.
server: (connecting took 11.89 seconds)
server: (finished: waiting for the VM to finish booting, in 14.52 seconds)
server # [   11.650658] (udev-worker)[351]: Network interface NamePolicy= disabled on kernel command line.
server # [   11.666786] (udev-worker)[361]: Network interface NamePolicy= disabled on kernel command line.
server # [   11.676357] systemd[1]: Finished Firewall.
server # [   11.706234] systemd[1]: Reached target Preparation for Network.
server # [   11.764535] systemd[1]: Starting Extra networking commands....
server # [   11.991668] systemd[1]: Condition check resulted in Virtio network device being skipped.
server # [   12.012724] systemd[1]: Starting Address configuration of eth1...
server # [   12.208614] dhcpcd[609]: dhcpcd-10.3.2 starting
server # [   12.235682] dhcpcd[636]: dev: loaded udev
server # [   12.347592] 8021q: 802.1Q VLAN Support v1.8
server # [   12.353274] 8021q: adding VLAN 0 to HW filter on device eth1
server # [   12.353163] bao[452]: 2026-10-27T08:50:35.473Z [INFO]  proxy environment: http_proxy="" https_proxy="" no_proxy=""
server # [   12.388334] bao[452]: 2026-10-27T08:50:35.509Z [WARN]  no `api_addr` value specified in config or in BAO_API_ADDR; falling back to detection if possible, but this value should be manually set
server # [   12.402017] network-addresses-eth1-start[625]: adding address 192.168.1.1/24... done
server # [   12.413557] bao[452]: 2026-10-27T08:50:35.533Z [INFO]  core: Initializing version history cache for core
server # [   12.414981] bao[452]: ==> OpenBao server configuration:
server # [   12.415715] bao[452]:              Api Address: http://127.0.0.1:8200
server # [   12.428164] bao[452]:                      Cgo: enabled
server # [   12.435121] bao[452]:          Cluster Address: https://127.0.0.1:8201
server # [   12.450091] bao[452]:    Environment Variables: HOME, INVOCATION_ID, IO_PRESSURE_WATCH, IO_PRESSURE_WRITE, JOURNAL_STREAM, LANG, LOCALE_ARCHIVE, LOGNAME, MEMORY_PRESSURE_WATCH, MEMORY_PRESSURE_WRITE, PATH, RUNTIME_DIRECTORY, STATE_DIRECTORY, SYSTEMD_EXEC_PID, TZDIR, USER
server # [   12.464107] bao[452]:               Go Version: go1.27.3
server # [   12.464942] bao[452]:               Listener 1: tcp (addr: "127.0.0.1:8200", cluster address: "127.0.0.1:8201", max_request_duration: "1m30s", max_request_json_memory: "34078720", max_request_json_strings: "1000", max_request_size: "33554432", tls: "disabled")
server # [   12.467921] bao[452]:                Log Level:
server # [   12.483964] bao[452]:            Recovery Mode: false
server # [   12.484880] bao[452]:                  Storage: inmem
server # [   12.485751] bao[452]:                  Version: OpenBao v2.7.1, committed 1970-01-01T00:00:00Z
server # [   12.486939] bao[452]:              Version Sha: refs/tags/v2.7.1
server # [   12.487801] bao[452]: 2026-10-27T08:50:35.546Z [INFO]  core: security barrier not initialized
server # [   12.507697] bao[452]: 2026-10-27T08:50:35.551Z [INFO]  core: security barrier initialized: shares=1 threshold=1
server # [   12.516433] bao[452]: 2026-10-27T08:50:35.552Z [INFO]  core: post-unseal setup starting
server # [   12.517797] network-addresses-eth1-start[625]: adding address 2001:db8:1::1/64... done
server # [   12.518926] bao[452]: 2026-10-27T08:50:35.621Z [INFO]  core: loaded wrapping token key
server # [   12.540429] bao[452]: 2026-10-27T08:50:35.635Z [INFO]  core: successfully setup plugin catalog: plugin-directory=""
server # [   12.548511] bao[452]: 2026-10-27T08:50:35.666Z [INFO]  core: reading transactional mount table
server # [   12.559065] bao[452]: 2026-10-27T08:50:35.674Z [INFO]  core: no mounts in transactional mount table; adding default mount table
server # [   12.575373] systemd[1]: Finished Address configuration of eth1.
server # [   12.582514] bao[452]: 2026-10-27T08:50:35.703Z [INFO]  core: successfully mounted: type=cubbyhole version="v2.7.1+builtin.bao" path=cubbyhole/ namespace="ID: root. Path: "
server # [   12.593668] bao[452]: 2026-10-27T08:50:35.715Z [INFO]  core: successfully mounted: type=system version="v2.7.1+builtin.bao" path=sys/ namespace="ID: root. Path: "
server # [   12.601812] bao[452]: 2026-10-27T08:50:35.720Z [INFO]  core: successfully mounted: type=identity version="v2.7.1+builtin.bao" path=identity/ namespace="ID: root. Path: "
server # [   12.617801] bao[452]: 2026-10-27T08:50:35.726Z [INFO]  core: reading transactional auth mount table
server # [   12.619109] bao[452]: 2026-10-27T08:50:35.726Z [INFO]  core: no auth mounts in transactional auth mount table; adding default auth mount table
server # [   12.628430] bao[452]: 2026-10-27T08:50:35.726Z [INFO]  core: successfully mounted: type=token version="v2.7.1+builtin.bao" path=token/ namespace="ID: root. Path: "
server # [   12.630512] bao[452]: 2026-10-27T08:50:35.727Z [INFO]  rollback: Starting the rollback manager with 256 workers
server # [   12.631860] bao[452]: 2026-10-27T08:50:35.729Z [INFO]  core: restoring leases
server # [   12.660955] cfg80211: Loading compiled-in X.509 certificates for regulatory database
server # [   12.646680] bao[452]: 2026-10-27T08:50:35.763Z [INFO]  expiration: lease restore complete
server # [   12.647805] bao[452]: 2026-10-27T08:50:35.763Z [INFO]  rollback: starting rollback manager
server # [   12.672054] Loaded X.509 cert 'sforshee: 00b28ddf47aef9cea7'
server # [   12.672541] Loaded X.509 cert 'wens: 61c038651aabdcf94bd0ac7ff06c7248db18c600'
server # [   12.678631] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
server # [   12.678952] cfg80211: failed to load regulatory.db
server # [   12.662353] bao[452]: 2026-10-27T08:50:35.764Z [INFO]  core: entities restored
server # [   12.663389] bao[452]: 2026-10-27T08:50:35.764Z [INFO]  core: groups restored
server # [   12.672614] bao[452]: 2026-10-27T08:50:35.764Z [INFO]  core: Recorded vault version: vault version=2.7.1 upgrade time="2026-10-27 08:50:35.76429776 +0000 UTC" commit date=1970-01-01T00:00:00Z
server # [   12.675116] bao[452]: 2026-10-27T08:50:35.764Z [INFO]  core: post-unseal setup complete
server # [   12.688926] bao[452]: 2026-10-27T08:50:35.765Z [INFO]  core: root token generated
server # [   12.689973] bao[452]: 2026-10-27T08:50:35.765Z [INFO]  core: pre-seal teardown starting
server # [   12.691156] bao[452]: 2026-10-27T08:50:35.776Z [INFO]  rollback: stopping rollback manager
server # [   12.707515] bao[452]: 2026-10-27T08:50:35.776Z [INFO]  core: pre-seal teardown complete
server # [   12.713434] bao[452]: 2026-10-27T08:50:35.777Z [INFO]  core.cluster-listener.tcp: starting listener: listener_address=127.0.0.1:8201
server # [   12.715107] bao[452]: 2026-10-27T08:50:35.777Z [INFO]  core.cluster-listener: serving cluster requests: cluster_listen_address=127.0.0.1:8201
server # [   12.730639] bao[452]: 2026-10-27T08:50:35.789Z [INFO]  core: post-unseal setup starting
server # [   12.731801] bao[452]: 2026-10-27T08:50:35.789Z [INFO]  core: loaded wrapping token key
server # [   12.745728] bao[452]: 2026-10-27T08:50:35.789Z [INFO]  core: successfully setup plugin catalog: plugin-directory=""
server # [   12.747195] bao[452]: 2026-10-27T08:50:35.791Z [INFO]  core: reading transactional mount table
server # [   12.756237] bao[452]: 2026-10-27T08:50:35.793Z [INFO]  core: successfully mounted: type=system version="v2.7.1+builtin.bao" path=sys/ namespace="ID: root. Path: "
server # [   12.758409] systemd[1]: Finished Extra networking commands..
server # [   12.759218] bao[452]: 2026-10-27T08:50:35.825Z [INFO]  core: successfully mounted: type=identity version="v2.7.1+builtin.bao" path=identity/ namespace="ID: root. Path: "
server # [   12.782992] bao[452]: 2026-10-27T08:50:35.825Z [INFO]  core: successfully mounted: type=cubbyhole version="v2.7.1+builtin.bao" path=cubbyhole/ namespace="ID: root. Path: "
server # [   12.792975] bao[452]: 2026-10-27T08:50:35.832Z [INFO]  core: reading transactional auth mount table
server # [   12.794279] bao[452]: 2026-10-27T08:50:35.832Z [INFO]  core: successfully mounted: type=token version="v2.7.1+builtin.bao" path=token/ namespace="ID: root. Path: "
server # [   12.808263] bao[452]: 2026-10-27T08:50:35.833Z [INFO]  rollback: Starting the rollback manager with 256 workers
server # [   12.817124] bao[452]: 2026-10-27T08:50:35.841Z [INFO]  core: restoring leases
server # [   12.818154] bao[452]: 2026-10-27T08:50:35.844Z [INFO]  rollback: starting rollback manager
server # [   12.819239] bao[452]: 2026-10-27T08:50:35.845Z [INFO]  expiration: lease restore complete
server # [   12.833413] bao[452]: 2026-10-27T08:50:35.858Z [INFO]  core: entities restored
server # [   12.834510] bao[452]: 2026-10-27T08:50:35.858Z [INFO]  core: groups restored
server # [   12.835460] bao[452]: 2026-10-27T08:50:35.858Z [INFO]  core: post-unseal setup complete
server # [   12.844222] bao[452]: 2026-10-27T08:50:35.858Z [INFO]  core: vault is unsealed
server # [   12.845550] systemd[1]: Reached target Network.
server # [   12.846274] bao[452]: 2026-10-27T08:50:35.893Z [INFO]  expiration: revoked lease: lease_id=auth/token/root/h3d8a935234d88c6b1ebc093b0a703c31d3057bce1b8f8d86e9529dcd05f7d445
server # [   12.858299] bao[452]: 2026-10-27T08:50:35.925Z [INFO]  core: successful mount: namespace="" path=secret/ type=kv version=""
server # [   12.863686] bao[452]: 2026-10-27T08:50:35.925Z [INFO]  beginning post-unseal configuration
server # [   12.868245] bao[452]: ==> OpenBao server started!
server # [   12.869136] bao[452]: 2026-10-27T08:50:35.935Z [INFO]  secrets.kv.kv_42c08bd8: collecting keys to upgrade
server # [   12.870536] bao[452]: 2026-10-27T08:50:35.935Z [INFO]  secrets.kv.kv_42c08bd8: done collecting keys: num_keys=1
server # [   12.871933] bao[452]: 2026-10-27T08:50:35.935Z [INFO]  secrets.kv.kv_42c08bd8: upgrading keys finished
server # [   12.887394] systemd[1]: Starting PostgreSQL Server...
server # [   12.897397] systemd[1]: Started RustFS S3-compatible object storage.
server # [   12.898422] systemd[1]: Starting Setup RustFS bucket...
server # [   12.899197] systemd[1]: Starting Permit User Sessions...
server # [   12.916476] bao[452]: WARNING! dev mode is enabled! In this mode, OpenBao runs entirely in-memory
server # [   12.928863] bao[452]: and starts unsealed with a single unseal key. The root token is already
server # [   12.930165] bao[452]: authenticated to the CLI, so you can immediately begin using OpenBao.
server # [   12.931288] bao[452]: You may need to set the following environment variables:
server # [   12.946414] bao[452]:     $ export BAO_ADDR='http://127.0.0.1:8200'
server # [   12.947357] bao[452]: The unseal key and root token are displayed below in case you want to
server # [   12.960589] bao[452]: seal/unseal the Vault or re-authenticate.
server # [   12.961513] bao[452]: Unseal Key: 3BZde1Hw4XxYncGQQ5yGPSI6s28HlTzEjKyVl2r4jtk=
server # [   12.962470] bao[452]: Root Token: root
server # [   12.963006] bao[452]: Development mode should NOT be used in production installations!
server # [   13.004218] 8021q: adding VLAN 0 to HW filter on device eth0
server # [   12.991448] dhcpcd[636]: eth0: waiting for carrier
server # [   12.995764] dhcpcd[636]: eth0: carrier acquired
server # [   13.023595] dhcpcd[636]: DUID 00:01:00:01:32:73:22:5c:52:54:00:12:34:56
server # [   13.030671] dhcpcd[636]: eth0: IAID 00:12:34:56
server # [   13.031421] dhcpcd[636]: eth0: adding address fe80::5054:ff:fe12:3456
server # [   13.067404] systemd[1]: Finished Permit User Sessions.
server # [   13.086073] systemd[1]: Started Getty on tty1.
server # [   13.089028] systemd[1]: Reached target Login Prompts.
server # [   13.257583] systemd-logind[484]: Watching system buttons on /dev/input/event0 (gpio-keys)
server # [   13.685467] postgresql-pre-start[726]: The files belonging to this database system will be owned by user "postgres".
server # [   13.687085] postgresql-pre-start[726]: This user must also own the server process.
server # [   13.729914] postgresql-pre-start[726]: The database cluster will be initialized with locale "en_US.UTF-8".
server # [   13.731380] postgresql-pre-start[726]: The default database encoding has accordingly been set to "UTF8".
server # [   13.752344] postgresql-pre-start[726]: The default text search configuration will be set to "english".
server # [   13.753886] postgresql-pre-start[726]: Data page checksums are enabled.
server # [   13.754981] postgresql-pre-start[726]: fixing permissions on existing directory /var/lib/postgresql/18 ... ok
server # [   13.776677] postgresql-pre-start[726]: creating subdirectories ... ok
server # [   13.777666] postgresql-pre-start[726]: selecting dynamic shared memory implementation ... posix
server # [   13.937006] mousedev: PS/2 mouse device common for all mice
server # [   14.252719] systemd-logind[484]: Watching system buttons on /dev/input/event1 (QEMU QEMU USB Keyboard)
server # [   14.329055] postgresql-pre-start[726]: selecting default "max_connections" ... 100
server # [   14.823502] postgresql-pre-start[726]: selecting default "shared_buffers" ... 128MB
server # [   14.850465] bao[452]: 2026-10-27T08:50:37.971Z [INFO]  core: successful mount: namespace="" path=transit/ type=transit version=""
server # [   14.864505] dhcpcd[636]: eth0: soliciting a DHCP lease
server # [   14.874067] openbao-setup-start[752]: Success! Enabled the transit secrets engine at: transit/
server # [   14.875377] dhcpcd[636]: eth0: offered 10.0.2.15 from 10.0.2.2
server # [   14.883411] dhcpcd[636]: eth0: probing address 10.0.2.15/24
server # [   14.989756] dhcpcd[636]: eth0: soliciting an IPv6 router
server # [   14.996319] dhcpcd[636]: eth0: Router Advertisement from fe80::2
server # [   14.997249] dhcpcd[636]: eth0: adding address fec0::5054:ff:fe12:3456/64
server # [   14.998286] dhcpcd[636]: eth0: adding route to fec0::/64
server # [   14.999080] dhcpcd[636]: eth0: adding default route via fe80::2
server # [   15.320606] openbao-setup-start[788]: Retrieving wrapping key.
server # [   16.944676] input: QEMU Virtio Keyboard as /devices/platform/4010000000.pcie/pci0000:00/0000:00:06.0/virtio5/input/input3
server # [   17.979602] systemd[1]: Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch.
server # [   17.995927] systemd[1]: Starting Virtual Console Setup...
server # [   18.028647] openbao-setup-start[788]: Wrapping source key with ephemeral key.
server # [   18.029930] openbao-setup-start[788]: Encrypting ephemeral key with wrapping key.
server # [   18.030934] openbao-setup-start[788]: Submitting wrapped key.
server # [   18.041320] systemd[1]: systemd-vconsole-setup.service: Deactivated successfully.
server # [   18.042511] systemd[1]: Stopped Virtual Console Setup.
server # [   18.051730] systemd[1]: Starting Virtual Console Setup...
server # [   18.083703] openbao-setup-start[788]: Success!
server # [   18.164690] systemd[1]: Finished openbao-setup.service.
server # [   18.220447] systemd-logind[484]: Watching system buttons on /dev/input/event3 (QEMU Virtio Keyboard)
server # [   18.497478] systemd-vconsole-setup[833]: Configuration of first virtual console was skipped, ignoring remaining ones.
server # [   18.502337] systemd[1]: Finished Virtual Console Setup.
server # [   18.655859] postgresql-pre-start[726]: selecting default time zone ... UTC
server # [   18.658752] postgresql-pre-start[726]: creating configuration files ... ok
server # [   18.906795] postgresql-pre-start[726]: running bootstrap script ... ok
server # [   19.571361] postgresql-pre-start[726]: performing post-bootstrap initialization ... ok
server # [   19.735598] postgresql-pre-start[726]: syncing data to disk ... ok
server # [   19.736905] postgresql-pre-start[726]: initdb: warning: enabling "trust" authentication for local connections
server # [   19.738486] postgresql-pre-start[726]: initdb: hint: You can change this by editing pg_hba.conf or using the option -A, or --auth-local and --auth-host, the next time you run initdb.
server # [   19.740860] postgresql-pre-start[726]: Success. You can now start the database server using:
server # [   19.742077] postgresql-pre-start[726]:     pg_ctl -D /var/lib/postgresql/18 -l logfile start
server # [   19.815802] dhcpcd[636]: eth0: leased 10.0.2.15 for 86400 seconds
server # [   19.819112] dhcpcd[636]: eth0: adding route to 10.0.2.0/24
server # [   19.819951] dhcpcd[636]: eth0: adding default route via 10.0.2.2
server # [   19.849400] postgres[865]: [865] LOG:  starting PostgreSQL 18.6 on aarch64-unknown-linux-gnu, compiled by clang version 21.1.8, 64-bit
server # [   19.853884] postgres[865]: [865] LOG:  listening on IPv6 address "::1", port 5432
server # [   19.855570] postgres[865]: [865] LOG:  listening on IPv4 address "127.0.0.1", port 5432
server # [   19.858433] postgres[865]: [865] LOG:  listening on Unix socket "/run/postgresql/.s.PGSQL.5432"
server # [   19.876572] postgres[880]: [880] LOG:  database system was shut down at 2026-10-27 08:50:42 GMT
server # [   19.885526] postgres[865]: [865] LOG:  database system is ready to accept connections
server # [   19.895657] systemd[1]: Started PostgreSQL Server.
server # [   19.905547] systemd[1]: Starting PostgreSQL Setup Scripts...
server # [   20.023474] systemd[1]: Started DHCP Client.
server # [   20.159603] postgresql-setup-start[940]: CREATE DATABASE
server # [   20.203178] postgresql-setup-start[945]: CREATE ROLE
server # [   20.222687] postgresql-setup-start[947]: ALTER DATABASE
server # [   20.229603] systemd[1]: Finished PostgreSQL Setup Scripts.
server # [   20.231804] systemd[1]: Reached target PostgreSQL.
server # [   32.706229] rustfs-setup-start[1068]: mb s3://niks3-test
server # [   32.716998] systemd[1]: Finished Setup RustFS bucket.
server # [   32.726754] systemd[1]: Starting niks3 server...
server # [   32.969063] niks3-server[1079]: 2026/10/27 08:50:56 INFO Configured external signer program=/nix/store/4zvhilq4z8dd7g8zl1153v3fj0h9rl7w-niks3-openbao-signer/bin/niks3-openbao-signer
server # [   33.020981] niks3-server[1079]: 2026/10/27 08:50:56 INFO Read proxy enabled — serving cache objects from S3
server # [   33.026351] niks3-server[1079]: 2026/10/27 08:50:56 INFO Using socket-activated listener address=0.0.0.0:5751
server # [   33.027808] niks3-server[1079]: 2026/10/27 08:50:56 INFO systemd watchdog enabled interval=15s
server # [   33.030518] niks3-server[1079]: 2026/10/27 08:50:56 INFO Starting HTTP server address=0.0.0.0:5751
server # [   33.032001] systemd[1]: Started niks3 server.
server # [   33.032806] systemd[1]: Reached target Multi-User System.
server # [   33.033970] systemd[1]: Startup finished in 1.459s (kernel) + 4.681s (initrd) + 26.889s (userspace) = 33.030s.
server: (finished: waiting for unit niks3.service, in 36.53 seconds)
server: waiting for TCP port 5751 on localhost
server # Connection to localhost (127.0.0.1) 5751 port [tcp/*] succeeded!
server: (finished: waiting for TCP port 5751 on localhost, in 0.05 seconds)
server: must succeed: echo -n 'test-token-that-is-at-least-36-characters-long' > /tmp/auth-token
server: (finished: must succeed: echo -n 'test-token-that-is-at-least-36-characters-long' > /tmp/auth-token, in 0.02 seconds)
subtest: narinfos signed through OpenBao verify against the public key
server: must succeed: nix-build -E 'derivation { name="signer-1"; system=builtins.currentSystem; builder="/bin/sh"; args=["-c" "echo signer-1 > $out"]; }' --no-out-link
server # this derivation will be built:
server #   /nix/store/llf1sz2nwwvckwzgd3kx46my44a4lw37-signer-1.drv
server # building '/nix/store/llf1sz2nwwvckwzgd3kx46my44a4lw37-signer-1.drv'...
server: (finished: must succeed: nix-build -E 'derivation { name="signer-1"; system=builtins.currentSystem; builder="/bin/sh"; args=["-c" "echo signer-1 > $out"]; }' --no-out-link, in 0.20 seconds)
server: must succeed: NIKS3_SERVER_URL=http://localhost:5751 NIKS3_AUTH_TOKEN_FILE=/tmp/auth-token /nix/store/ilvq8flwabpicaww29g5mjl6ixh6m9s4-niks3-1.15.0/bin/niks3 push /nix/store/lqml7ay4d3x2fvdbdff94fwrdh1br5ng-signer-1
server # [   34.094249] niks3-server[1079]: 2026/10/27 08:50:57 INFO Received push request method=POST path=/api/pushes
server # time=2026-10-27T08:50:57.223Z level=INFO msg="Uploading 1 paths to localhost (0 already cached)"
server # time=2026-10-27T08:50:57.224Z level=INFO msg="Uploading lqml7ay4d3x2fvdbdff94fwrdh1br5ng-signer-1 (128B)"
server # [   34.146179] niks3-server[1079]: 2026/10/27 08:50:57 INFO Received sign narinfos request method=POST path=/api/pushes/1/sign
server # [   34.169509] niks3-server[1079]: 2026/10/27 08:50:57 INFO Registered completed upload object_key=nar/1xbdd0jsa3f9d9xz2wfpcjbcrx5dpyy490mg6cnrlkqswmwsm6j0.nar.zst
server # [   34.220506] niks3-server[1079]: 2026/10/27 08:50:57 INFO Registered completed upload object_key=lqml7ay4d3x2fvdbdff94fwrdh1br5ng.ls
server # [   34.225200] niks3-server[1079]: 2026/10/27 08:50:57 INFO Registered completed upload object_key=log/llf1sz2nwwvckwzgd3kx46my44a4lw37-signer-1.drv
server # [   34.262670] niks3-server[1079]: 2026/10/27 08:50:57 INFO Signed narinfos id=1 count=1
server # time=2026-10-27T08:50:57.386Z level=INFO msg="Uploading 1 narinfos"
server # [   34.284152] niks3-server[1079]: 2026/10/27 08:50:57 INFO Received complete push request method=POST path=/api/pushes/1/complete
server # time=2026-10-27T08:50:57.417Z level=INFO msg="Upload complete. (267ms)"
server # [   34.296990] niks3-server[1079]: 2026/10/27 08:50:57 INFO Completed push id=1 objects=4 duration=12.86166ms
server # [   34.304107] niks3-server[1079]: 2026/10/27 08:50:57 INFO Registered completed upload object_key=lqml7ay4d3x2fvdbdff94fwrdh1br5ng.narinfo
server: (finished: must succeed: NIKS3_SERVER_URL=http://localhost:5751 NIKS3_AUTH_TOKEN_FILE=/tmp/auth-token /nix/store/ilvq8flwabpicaww29g5mjl6ixh6m9s4-niks3-1.15.0/bin/niks3 push /nix/store/lqml7ay4d3x2fvdbdff94fwrdh1br5ng-signer-1, in 0.39 seconds)
server: must succeed: nix copy --from http://localhost:5751 --to /tmp/store-1 /nix/store/lqml7ay4d3x2fvdbdff94fwrdh1br5ng-signer-1
server # copying 1 paths...
server # copying path '/nix/store/lqml7ay4d3x2fvdbdff94fwrdh1br5ng-signer-1' from 'http://localhost:5751'...
server: (finished: must succeed: nix copy --from http://localhost:5751 --to /tmp/store-1 /nix/store/lqml7ay4d3x2fvdbdff94fwrdh1br5ng-signer-1, in 0.12 seconds)
server: must succeed: nix --store /tmp/store-1 store cat /nix/store/lqml7ay4d3x2fvdbdff94fwrdh1br5ng-signer-1 | grep -F signer-
server: (finished: must succeed: nix --store /tmp/store-1 store cat /nix/store/lqml7ay4d3x2fvdbdff94fwrdh1br5ng-signer-1 | grep -F signer-, in 0.15 seconds)
(finished: subtest: narinfos signed through OpenBao verify against the public key, in 0.86 seconds)
subtest: the signing process is reused across pushes
server: must succeed: pgrep -x niks3-openbao-s | head -n1
server: (finished: must succeed: pgrep -x niks3-openbao-s | head -n1, in 0.10 seconds)
server: must succeed: nix-build -E 'derivation { name="signer-2"; system=builtins.currentSystem; builder="/bin/sh"; args=["-c" "echo signer-2 > $out"]; }' --no-out-link
server # this derivation will be built:
server #   /nix/store/yxz8hnxsx36kwxkczzaa10chm50zxs5n-signer-2.drv
server # building '/nix/store/yxz8hnxsx36kwxkczzaa10chm50zxs5n-signer-2.drv'...
server: (finished: must succeed: nix-build -E 'derivation { name="signer-2"; system=builtins.currentSystem; builder="/bin/sh"; args=["-c" "echo signer-2 > $out"]; }' --no-out-link, in 0.18 seconds)
server: must succeed: NIKS3_SERVER_URL=http://localhost:5751 NIKS3_AUTH_TOKEN_FILE=/tmp/auth-token /nix/store/ilvq8flwabpicaww29g5mjl6ixh6m9s4-niks3-1.15.0/bin/niks3 push /nix/store/r2hcia81arzi3kgl7nxpvnvnd950y3hk-signer-2
server # [   34.998337] niks3-server[1079]: 2026/10/27 08:50:58 INFO Received push request method=POST path=/api/pushes
server # time=2026-10-27T08:50:58.127Z level=INFO msg="Uploading 1 paths to localhost (0 already cached)"
server # time=2026-10-27T08:50:58.128Z level=INFO msg="Uploading r2hcia81arzi3kgl7nxpvnvnd950y3hk-signer-2 (128B)"
server # [   35.038372] niks3-server[1079]: 2026/10/27 08:50:58 INFO Registered completed upload object_key=nar/0nwavznx6l2iygh4lpjn8msr9hyp614fcfihlbm95zgkr76jikcj.nar.zst
server # [   35.047817] niks3-server[1079]: 2026/10/27 08:50:58 INFO Registered completed upload object_key=r2hcia81arzi3kgl7nxpvnvnd950y3hk.ls
server # [   35.055182] niks3-server[1079]: 2026/10/27 08:50:58 INFO Received sign narinfos request method=POST path=/api/pushes/2/sign
server # time=2026-10-27T08:50:58.179Z level=INFO msg="Uploading 1 narinfos"
server # [   35.060974] niks3-server[1079]: 2026/10/27 08:50:58 INFO Signed narinfos id=2 count=1
server # [   35.066549] niks3-server[1079]: 2026/10/27 08:50:58 INFO Registered completed upload object_key=log/yxz8hnxsx36kwxkczzaa10chm50zxs5n-signer-2.drv
server # [   35.079210] niks3-server[1079]: 2026/10/27 08:50:58 INFO Received complete push request method=POST path=/api/pushes/2/complete
server # time=2026-10-27T08:50:58.205Z level=INFO msg="Upload complete. (150ms)"
server # [   35.084897] niks3-server[1079]: 2026/10/27 08:50:58 INFO Completed push id=2 objects=4 duration=7.53978ms
server # [   35.088259] niks3-server[1079]: 2026/10/27 08:50:58 INFO Registered completed upload object_key=r2hcia81arzi3kgl7nxpvnvnd950y3hk.narinfo
server: (finished: must succeed: NIKS3_SERVER_URL=http://localhost:5751 NIKS3_AUTH_TOKEN_FILE=/tmp/auth-token /nix/store/ilvq8flwabpicaww29g5mjl6ixh6m9s4-niks3-1.15.0/bin/niks3 push /nix/store/r2hcia81arzi3kgl7nxpvnvnd950y3hk-signer-2, in 0.24 seconds)
server: must succeed: nix copy --from http://localhost:5751 --to /tmp/store-2 /nix/store/r2hcia81arzi3kgl7nxpvnvnd950y3hk-signer-2
server # copying 1 paths...
server # copying path '/nix/store/r2hcia81arzi3kgl7nxpvnvnd950y3hk-signer-2' from 'http://localhost:5751'...
server: (finished: must succeed: nix copy --from http://localhost:5751 --to /tmp/store-2 /nix/store/r2hcia81arzi3kgl7nxpvnvnd950y3hk-signer-2, in 0.10 seconds)
server: must succeed: nix --store /tmp/store-2 store cat /nix/store/r2hcia81arzi3kgl7nxpvnvnd950y3hk-signer-2 | grep -F signer-
server: (finished: must succeed: nix --store /tmp/store-2 store cat /nix/store/r2hcia81arzi3kgl7nxpvnvnd950y3hk-signer-2 | grep -F signer-, in 0.09 seconds)
server: must succeed: pgrep -x niks3-openbao-s | head -n1
server: (finished: must succeed: pgrep -x niks3-openbao-s | head -n1, in 0.04 seconds)
(finished: subtest: the signing process is reused across pushes, in 0.75 seconds)
subtest: a killed signing process is restarted
server: must succeed: pkill -KILL -x niks3-openbao-s
server: (finished: must succeed: pkill -KILL -x niks3-openbao-s, in 0.03 seconds)
server: must succeed: nix-build -E 'derivation { name="signer-3"; system=builtins.currentSystem; builder="/bin/sh"; args=["-c" "echo signer-3 > $out"]; }' --no-out-link
server # this derivation will be built:
server #   /nix/store/8rqr6n12ycly8w0l9d1pwxwhhf70frn3-signer-3.drv
server # building '/nix/store/8rqr6n12ycly8w0l9d1pwxwhhf70frn3-signer-3.drv'...
server: (finished: must succeed: nix-build -E 'derivation { name="signer-3"; system=builtins.currentSystem; builder="/bin/sh"; args=["-c" "echo signer-3 > $out"]; }' --no-out-link, in 0.19 seconds)
server: must succeed: NIKS3_SERVER_URL=http://localhost:5751 NIKS3_AUTH_TOKEN_FILE=/tmp/auth-token /nix/store/ilvq8flwabpicaww29g5mjl6ixh6m9s4-niks3-1.15.0/bin/niks3 push /nix/store/67p4vpgam0q82zlxd8ancmpxkjql6cnx-signer-3
server # [   35.670006] niks3-server[1079]: 2026/10/27 08:50:58 INFO Received push request method=POST path=/api/pushes
server # time=2026-10-27T08:50:58.799Z level=INFO msg="Uploading 1 paths to localhost (0 already cached)"
server # time=2026-10-27T08:50:58.801Z level=INFO msg="Uploading 67p4vpgam0q82zlxd8ancmpxkjql6cnx-signer-3 (128B)"
server # [   35.711726] niks3-server[1079]: 2026/10/27 08:50:58 INFO Registered completed upload object_key=nar/0a5xm19dinsl6r6mgmzvlxv91jdb1hr34kxlyic4f5w7c5db29z4.nar.zst
server # [   35.718547] niks3-server[1079]: 2026/10/27 08:50:58 INFO Received sign narinfos request method=POST path=/api/pushes/3/sign
server # [   35.723780] niks3-server[1079]: 2026/10/27 08:50:58 INFO Registered completed upload object_key=log/8rqr6n12ycly8w0l9d1pwxwhhf70frn3-signer-3.drv
server # [   35.729724] niks3-server[1079]: 2026/10/27 08:50:58 INFO Registered completed upload object_key=67p4vpgam0q82zlxd8ancmpxkjql6cnx.ls
server # time=2026-10-27T08:50:58.860Z level=INFO msg="Uploading 1 narinfos"
server # [   35.740330] niks3-server[1079]: 2026/10/27 08:50:58 INFO Signed narinfos id=3 count=1
server # [   35.753334] niks3-server[1079]: 2026/10/27 08:50:58 INFO Received complete push request method=POST path=/api/pushes/3/complete
server # time=2026-10-27T08:50:58.888Z level=INFO msg="Upload complete. (151ms)"
server # [   35.767308] niks3-server[1079]: 2026/10/27 08:50:58 INFO Completed push id=3 objects=4 duration=13.25402ms
server # [   35.775275] niks3-server[1079]: 2026/10/27 08:50:58 INFO Registered completed upload object_key=67p4vpgam0q82zlxd8ancmpxkjql6cnx.narinfo
server: (finished: must succeed: NIKS3_SERVER_URL=http://localhost:5751 NIKS3_AUTH_TOKEN_FILE=/tmp/auth-token /nix/store/ilvq8flwabpicaww29g5mjl6ixh6m9s4-niks3-1.15.0/bin/niks3 push /nix/store/67p4vpgam0q82zlxd8ancmpxkjql6cnx-signer-3, in 0.24 seconds)
server: must succeed: nix copy --from http://localhost:5751 --to /tmp/store-3 /nix/store/67p4vpgam0q82zlxd8ancmpxkjql6cnx-signer-3
server # copying 1 paths...
server # copying path '/nix/store/67p4vpgam0q82zlxd8ancmpxkjql6cnx-signer-3' from 'http://localhost:5751'...
server: (finished: must succeed: nix copy --from http://localhost:5751 --to /tmp/store-3 /nix/store/67p4vpgam0q82zlxd8ancmpxkjql6cnx-signer-3, in 0.14 seconds)
server: must succeed: nix --store /tmp/store-3 store cat /nix/store/67p4vpgam0q82zlxd8ancmpxkjql6cnx-signer-3 | grep -F signer-
server: (finished: must succeed: nix --store /tmp/store-3 store cat /nix/store/67p4vpgam0q82zlxd8ancmpxkjql6cnx-signer-3 | grep -F signer-, in 0.07 seconds)
(finished: subtest: a killed signing process is restarted, in 0.66 seconds)
subtest: OpenBao errors fail the push without crashing the server
server: must succeed: systemctl stop openbao-dev.service
server # [   36.010607] bao[452]: ==> OpenBao shutdown triggered
server # [   36.011451] bao[452]: 2026-10-27T08:50:59.130Z [INFO]  core: marked as sealed
server # [   36.015576] bao[452]: 2026-10-27T08:50:59.130Z [INFO]  core: pre-seal teardown starting
server # [   36.017391] bao[452]: 2026-10-27T08:50:59.131Z [INFO]  rollback: stopping rollback manager
server # [   36.019456] bao[452]: 2026-10-27T08:50:59.131Z [INFO]  core: pre-seal teardown complete
server # [   36.020644] bao[452]: 2026-10-27T08:50:59.131Z [INFO]  core: stopping cluster listeners
server # [   36.021819] bao[452]: 2026-10-27T08:50:59.131Z [INFO]  core.cluster-listener: forwarding rpc listeners stopped
server # [   36.023441] systemd[1]: Stopping openbao-dev.service...
server # [   36.300260] bao[452]: 2026-10-27T08:50:59.416Z [INFO]  core.cluster-listener: rpc listeners successfully shut down
server # [   36.302720] bao[452]: 2026-10-27T08:50:59.416Z [INFO]  core: cluster listeners successfully shut down
server # [   36.305080] bao[452]: 2026-10-27T08:50:59.416Z [INFO]  core: vault is sealed
server # [   36.314431] systemd[1]: openbao-dev.service: Deactivated successfully.
server # [   36.317425] systemd[1]: Stopped openbao-dev.service.
server # [   36.320764] systemd[1]: openbao-dev.service: Consumed 1.623s CPU time over 26.168s wall clock time, 77.9M memory peak, 4.4K incoming IP traffic, 4.9K outgoing IP traffic.
server: (finished: must succeed: systemctl stop openbao-dev.service, in 0.34 seconds)
server: must succeed: nix-build -E 'derivation { name="signer-4"; system=builtins.currentSystem; builder="/bin/sh"; args=["-c" "echo signer-4 > $out"]; }' --no-out-link
server # this derivation will be built:
server #   /nix/store/ki984inl969jjq7pdvamz0p6z4dd145x-signer-4.drv
server # building '/nix/store/ki984inl969jjq7pdvamz0p6z4dd145x-signer-4.drv'...
server: (finished: must succeed: nix-build -E 'derivation { name="signer-4"; system=builtins.currentSystem; builder="/bin/sh"; args=["-c" "echo signer-4 > $out"]; }' --no-out-link, in 0.17 seconds)
server: must fail: NIKS3_SERVER_URL=http://localhost:5751 NIKS3_AUTH_TOKEN_FILE=/tmp/auth-token /nix/store/ilvq8flwabpicaww29g5mjl6ixh6m9s4-niks3-1.15.0/bin/niks3 push /nix/store/90jgq0hrfwlpwxc5awzm1b2zmy0mda4g-signer-4
server # [   36.656810] niks3-server[1079]: 2026/10/27 08:50:59 INFO Received push request method=POST path=/api/pushes
server # time=2026-10-27T08:50:59.793Z level=INFO msg="Uploading 1 paths to localhost (0 already cached)"
server # time=2026-10-27T08:50:59.795Z level=INFO msg="Uploading 90jgq0hrfwlpwxc5awzm1b2zmy0mda4g-signer-4 (128B)"
server # [   36.759099] niks3-server[1079]: 2026/10/27 08:50:59 INFO Registered completed upload object_key=90jgq0hrfwlpwxc5awzm1b2zmy0mda4g.ls
server # [   36.766412] niks3-server[1079]: 2026/10/27 08:50:59 INFO Received sign narinfos request method=POST path=/api/pushes/4/sign
server # time=2026-10-27T08:50:59.890Z level=WARN msg="Request returned retryable status, retrying" attempt=1 backoff=100ms status=500 url=http://localhost:5751/api/pushes/4/sign
server # [   36.774075] niks3-server[1079]: 2026/10/27 08:50:59 ERROR Failed to sign narinfos signer=niks3-test-1 error="signing program: narinfo \"90jgq0hrfwlpwxc5awzm1b2zmy0mda4g.narinfo\": reading token: open /run/openbao-signer/token: no such file or directory"
server # [   36.779120] niks3-server[1079]: 2026/10/27 08:50:59 INFO Registered completed upload object_key=nar/08bvxj5dmksfdkqa4pjy110ni52l4pkvb9a02p3qa256f0idj24s.nar.zst
server # [   36.781987] niks3-server[1079]: 2026/10/27 08:50:59 INFO Registered completed upload object_key=log/ki984inl969jjq7pdvamz0p6z4dd145x-signer-4.drv
server # [   36.873923] niks3-server[1079]: 2026/10/27 08:50:59 INFO Received sign narinfos request method=POST path=/api/pushes/4/sign
server # time=2026-10-27T08:50:59.998Z level=WARN msg="Request returned retryable status, retrying" attempt=2 backoff=206.155554ms status=500 url=http://localhost:5751/api/pushes/4/sign
server # [   36.880224] niks3-server[1079]: 2026/10/27 08:50:59 ERROR Failed to sign narinfos signer=niks3-test-1 error="signing program: narinfo \"90jgq0hrfwlpwxc5awzm1b2zmy0mda4g.narinfo\": reading token: open /run/openbao-signer/token: no such file or directory"
server # [   37.093084] niks3-server[1079]: 2026/10/27 08:51:00 INFO Received sign narinfos request method=POST path=/api/pushes/4/sign
server # [   37.095057] niks3-server[1079]: 2026/10/27 08:51:00 ERROR Failed to sign narinfos signer=niks3-test-1 error="signing program: narinfo \"90jgq0hrfwlpwxc5awzm1b2zmy0mda4g.narinfo\": reading token: open /run/openbao-signer/token: no such file or directory"
server # time=2026-10-27T08:51:00.220Z level=WARN msg="Request returned retryable status, retrying" attempt=3 backoff=380.845958ms status=500 url=http://localhost:5751/api/pushes/4/sign
server # [   37.483884] niks3-server[1079]: 2026/10/27 08:51:00 INFO Received sign narinfos request method=POST path=/api/pushes/4/sign
server # time=2026-10-27T08:51:00.609Z level=WARN msg="Request returned retryable status, retrying" attempt=4 backoff=868.168088ms status=500 url=http://localhost:5751/api/pushes/4/sign
server # [   37.491800] niks3-server[1079]: 2026/10/27 08:51:00 ERROR Failed to sign narinfos signer=niks3-test-1 error="signing program: narinfo \"90jgq0hrfwlpwxc5awzm1b2zmy0mda4g.narinfo\": reading token: open /run/openbao-signer/token: no such file or directory"
server # [   38.361536] niks3-server[1079]: 2026/10/27 08:51:01 INFO Received sign narinfos request method=POST path=/api/pushes/4/sign
server # [   38.365699] niks3-server[1079]: 2026/10/27 08:51:01 ERROR Failed to sign narinfos signer=niks3-test-1 error="signing program: narinfo \"90jgq0hrfwlpwxc5awzm1b2zmy0mda4g.narinfo\": reading token: open /run/openbao-signer/token: no such file or directory"
server # time=2026-10-27T08:51:01.487Z level=WARN msg="Request returned retryable status, retrying" attempt=5 backoff=1.541172033s status=500 url=http://localhost:5751/api/pushes/4/sign
server # [   39.940844] niks3-server[1079]: 2026/10/27 08:51:03 INFO Received sign narinfos request method=POST path=/api/pushes/4/sign
server # [   39.947163] niks3-server[1079]: 2026/10/27 08:51:03 ERROR Failed to sign narinfos signer=niks3-test-1 error="signing program: narinfo \"90jgq0hrfwlpwxc5awzm1b2zmy0mda4g.narinfo\": reading token: open /run/openbao-signer/token: no such file or directory"
server # time=2026-10-27T08:51:03.085Z level=ERROR msg="Fatal error" error="pushing paths: signing and uploading narinfos: signing narinfos for closure 4: server returned 500: failed to sign narinfos: signing program: narinfo \"90jgq0hrfwlpwxc5awzm1b2zmy0mda4g.narinfo\": reading token: open /run/openbao-signer/token: no such file or directory\n"
server: (finished: must fail: NIKS3_SERVER_URL=http://localhost:5751 NIKS3_AUTH_TOKEN_FILE=/tmp/auth-token /nix/store/ilvq8flwabpicaww29g5mjl6ixh6m9s4-niks3-1.15.0/bin/niks3 push /nix/store/90jgq0hrfwlpwxc5awzm1b2zmy0mda4g-signer-4, in 3.49 seconds)
server: must succeed: systemctl restart openbao-setup.service
server # [   40.041136] niks3-server[1079]: 2026/10/27 08:51:03 INFO Shutdown signal received, draining in-flight requests timeout=10s
server # [   40.047324] systemd[1]: Stopping niks3 server...
server # [   40.072780] systemd[1]: niks3.service: Deactivated successfully.
server # [   40.074730] systemd[1]: Stopped niks3 server.
server # [   40.076307] systemd[1]: niks3.service: Consumed 196ms CPU time over 7.347s wall clock time, 40.3M memory peak, 19.1K incoming IP traffic, 24.6K outgoing IP traffic.
server # [   40.084153] systemd[1]: openbao-setup.service: Deactivated successfully.
server # [   40.087708] systemd[1]: Stopped openbao-setup.service.
server # [   40.088958] systemd[1]: openbao-setup.service: Consumed 780ms CPU time over 29.911s wall clock time, 53.6M memory peak, 3K incoming IP traffic, 2.8K outgoing IP traffic.
server # [   40.091006] systemd[1]: Stopping openbao-setup.service...
server # [   40.095018] systemd[1]: Started openbao-dev.service.
server # [   40.097693] systemd[1]: Starting openbao-setup.service...
server # [   40.392219] bao[1288]: 2026-10-27T08:51:03.510Z [INFO]  proxy environment: http_proxy="" https_proxy="" no_proxy=""
server # [   40.393814] bao[1288]: 2026-10-27T08:51:03.511Z [WARN]  no `api_addr` value specified in config or in BAO_API_ADDR; falling back to detection if possible, but this value should be manually set
server # [   40.396963] bao[1288]: 2026-10-27T08:51:03.512Z [INFO]  core: Initializing version history cache for core
server # [   40.404253] bao[1288]: ==> OpenBao server configuration:
server # [   40.405166] bao[1288]:              Api Address: http://127.0.0.1:8200
server # [   40.406047] bao[1288]:                      Cgo: enabled
server # [   40.406787] bao[1288]:          Cluster Address: https://127.0.0.1:8201
server # [   40.407673] bao[1288]:    Environment Variables: HOME, INVOCATION_ID, IO_PRESSURE_WATCH, IO_PRESSURE_WRITE, JOURNAL_STREAM, LANG, LOCALE_ARCHIVE, LOGNAME, MEMORY_PRESSURE_WATCH, MEMORY_PRESSURE_WRITE, PATH, RUNTIME_DIRECTORY, STATE_DIRECTORY, SYSTEMD_EXEC_PID, TZDIR, USER
server # [   40.416493] bao[1288]:               Go Version: go1.27.3
server # [   40.417455] bao[1288]:               Listener 1: tcp (addr: "127.0.0.1:8200", cluster address: "127.0.0.1:8201", max_request_duration: "1m30s", max_request_json_memory: "34078720", max_request_json_strings: "1000", max_request_size: "33554432", tls: "disabled")
server # [   40.428242] bao[1288]:                Log Level:
server # [   40.428998] bao[1288]:            Recovery Mode: false
server # [   40.429818] bao[1288]:                  Storage: inmem
server # [   40.430573] bao[1288]:                  Version: OpenBao v2.7.1, committed 1970-01-01T00:00:00Z
server # [   40.432112] bao[1288]:              Version Sha: refs/tags/v2.7.1
server # [   40.432957] bao[1288]: 2026-10-27T08:51:03.513Z [INFO]  core: security barrier not initialized
server # [   40.434189] bao[1288]: 2026-10-27T08:51:03.518Z [INFO]  core: security barrier initialized: shares=1 threshold=1
server # [   40.435525] bao[1288]: 2026-10-27T08:51:03.520Z [INFO]  core: post-unseal setup starting
server # [   40.442228] bao[1288]: 2026-10-27T08:51:03.546Z [INFO]  core: loaded wrapping token key
server # [   40.443371] bao[1288]: 2026-10-27T08:51:03.546Z [INFO]  core: successfully setup plugin catalog: plugin-directory=""
server # [   40.446058] bao[1288]: 2026-10-27T08:51:03.547Z [INFO]  core: reading transactional mount table
server # [   40.452190] bao[1288]: 2026-10-27T08:51:03.547Z [INFO]  core: no mounts in transactional mount table; adding default mount table
server # [   40.453910] bao[1288]: 2026-10-27T08:51:03.547Z [INFO]  core: successfully mounted: type=cubbyhole version="v2.7.1+builtin.bao" path=cubbyhole/ namespace="ID: root. Path: "
server # [   40.460178] bao[1288]: 2026-10-27T08:51:03.548Z [INFO]  core: successfully mounted: type=system version="v2.7.1+builtin.bao" path=sys/ namespace="ID: root. Path: "
server # [   40.462257] bao[1288]: 2026-10-27T08:51:03.549Z [INFO]  core: successfully mounted: type=identity version="v2.7.1+builtin.bao" path=identity/ namespace="ID: root. Path: "
server # [   40.466493] bao[1288]: 2026-10-27T08:51:03.559Z [INFO]  core: reading transactional auth mount table
server # [   40.467774] bao[1288]: 2026-10-27T08:51:03.559Z [INFO]  core: no auth mounts in transactional auth mount table; adding default auth mount table
server # [   40.476373] bao[1288]: 2026-10-27T08:51:03.559Z [INFO]  core: successfully mounted: type=token version="v2.7.1+builtin.bao" path=token/ namespace="ID: root. Path: "
server # [   40.478454] bao[1288]: 2026-10-27T08:51:03.559Z [INFO]  rollback: Starting the rollback manager with 256 workers
server # [   40.479755] bao[1288]: 2026-10-27T08:51:03.560Z [INFO]  core: restoring leases
server # [   40.484216] bao[1288]: 2026-10-27T08:51:03.569Z [INFO]  expiration: lease restore complete
server # [   40.485504] bao[1288]: 2026-10-27T08:51:03.569Z [INFO]  rollback: starting rollback manager
server # [   40.486616] bao[1288]: 2026-10-27T08:51:03.570Z [INFO]  core: entities restored
server # [   40.487597] bao[1288]: 2026-10-27T08:51:03.570Z [INFO]  core: groups restored
server # [   40.491121] bao[1288]: 2026-10-27T08:51:03.570Z [INFO]  core: Recorded vault version: vault version=2.7.1 upgrade time="2026-10-27 08:51:03.5702569 +0000 UTC" commit date=1970-01-01T00:00:00Z
server # [   40.496182] bao[1288]: 2026-10-27T08:51:03.570Z [INFO]  core: post-unseal setup complete
server # [   40.497355] bao[1288]: 2026-10-27T08:51:03.571Z [INFO]  core: root token generated
server # [   40.499311] bao[1288]: 2026-10-27T08:51:03.571Z [INFO]  core: pre-seal teardown starting
server # [   40.500507] bao[1288]: 2026-10-27T08:51:03.573Z [INFO]  rollback: stopping rollback manager
server # [   40.501707] bao[1288]: 2026-10-27T08:51:03.578Z [INFO]  core: pre-seal teardown complete
server # [   40.502795] bao[1288]: 2026-10-27T08:51:03.580Z [INFO]  core.cluster-listener.tcp: starting listener: listener_address=127.0.0.1:8201
server # [   40.504797] bao[1288]: 2026-10-27T08:51:03.580Z [INFO]  core.cluster-listener: serving cluster requests: cluster_listen_address=127.0.0.1:8201
server # [   40.506480] bao[1288]: 2026-10-27T08:51:03.580Z [INFO]  core: post-unseal setup starting
server # [   40.507556] bao[1288]: 2026-10-27T08:51:03.581Z [INFO]  core: loaded wrapping token key
server # [   40.508674] bao[1288]: 2026-10-27T08:51:03.581Z [INFO]  core: successfully setup plugin catalog: plugin-directory=""
server # [   40.510125] bao[1288]: 2026-10-27T08:51:03.586Z [INFO]  core: reading transactional mount table
server # [   40.511294] bao[1288]: 2026-10-27T08:51:03.587Z [INFO]  core: successfully mounted: type=identity version="v2.7.1+builtin.bao" path=identity/ namespace="ID: root. Path: "
server # [   40.513553] bao[1288]: 2026-10-27T08:51:03.592Z [INFO]  core: successfully mounted: type=system version="v2.7.1+builtin.bao" path=sys/ namespace="ID: root. Path: "
server # [   40.515426] bao[1288]: 2026-10-27T08:51:03.592Z [INFO]  core: successfully mounted: type=cubbyhole version="v2.7.1+builtin.bao" path=cubbyhole/ namespace="ID: root. Path: "
server # [   40.517604] bao[1288]: 2026-10-27T08:51:03.593Z [INFO]  core: reading transactional auth mount table
server # [   40.518827] bao[1288]: 2026-10-27T08:51:03.593Z [INFO]  core: successfully mounted: type=token version="v2.7.1+builtin.bao" path=token/ namespace="ID: root. Path: "
server # [   40.520757] bao[1288]: 2026-10-27T08:51:03.594Z [INFO]  rollback: Starting the rollback manager with 256 workers
server # [   40.522188] bao[1288]: 2026-10-27T08:51:03.595Z [INFO]  core: restoring leases
server # [   40.523156] bao[1288]: 2026-10-27T08:51:03.597Z [INFO]  expiration: lease restore complete
server # [   40.524286] bao[1288]: 2026-10-27T08:51:03.597Z [INFO]  rollback: starting rollback manager
server # [   40.525608] bao[1288]: 2026-10-27T08:51:03.602Z [INFO]  core: entities restored
server # [   40.526641] bao[1288]: 2026-10-27T08:51:03.602Z [INFO]  core: groups restored
server # [   40.527599] bao[1288]: 2026-10-27T08:51:03.603Z [INFO]  core: post-unseal setup complete
server # [   40.528731] bao[1288]: 2026-10-27T08:51:03.603Z [INFO]  core: vault is unsealed
server # [   40.529712] bao[1288]: 2026-10-27T08:51:03.605Z [INFO]  expiration: revoked lease: lease_id=auth/token/root/h810419a5ed1200a05eafc469ad72a8d72b02f48156fd6b55176c2e41bf3fbbc5
server # [   40.531682] bao[1288]: 2026-10-27T08:51:03.616Z [INFO]  core: successful mount: namespace="" path=secret/ type=kv version=""
server # [   40.533292] bao[1288]: 2026-10-27T08:51:03.616Z [INFO]  beginning post-unseal configuration
server # [   40.534407] bao[1288]: ==> OpenBao server started!
server # [   40.535057] bao[1288]: 2026-10-27T08:51:03.616Z [INFO]  secrets.kv.kv_a77dd917: collecting keys to upgrade
server # [   40.536461] bao[1288]: 2026-10-27T08:51:03.616Z [INFO]  secrets.kv.kv_a77dd917: done collecting keys: num_keys=1
server # [   40.537809] bao[1288]: 2026-10-27T08:51:03.616Z [INFO]  secrets.kv.kv_a77dd917: upgrading keys finished
server # [   40.596840] bao[1288]: WARNING! dev mode is enabled! In this mode, OpenBao runs entirely in-memory
server # [   40.598984] bao[1288]: and starts unsealed with a single unseal key. The root token is already
server # [   40.600972] bao[1288]: authenticated to the CLI, so you can immediately begin using OpenBao.
server # [   40.603744] bao[1288]: You may need to set the following environment variables:
server # [   40.605522] bao[1288]:     $ export BAO_ADDR='http://127.0.0.1:8200'
server # [   40.606816] bao[1288]: The unseal key and root token are displayed below in case you want to
server # [   40.608610] bao[1288]: seal/unseal the Vault or re-authenticate.
server # [   40.609849] bao[1288]: Unseal Key: whCncIi7R52x/hImBCFHVrs76OmOvg8KEQDOks4L/j8=
server # [   40.611346] bao[1288]: Root Token: root
server # [   40.612199] bao[1288]: Development mode should NOT be used in production installations!
server # [   41.765175] bao[1288]: 2026-10-27T08:51:04.886Z [INFO]  core: successful mount: namespace="" path=transit/ type=transit version=""
server # [   41.772326] openbao-setup-start[1309]: Success! Enabled the transit secrets engine at: transit/
server # [   41.893618] openbao-setup-start[1319]: Retrieving wrapping key.
server # [   42.127468] openbao-setup-start[1319]: Wrapping source key with ephemeral key.
server # [   42.128873] openbao-setup-start[1319]: Encrypting ephemeral key with wrapping key.
server # [   42.129904] openbao-setup-start[1319]: Submitting wrapped key.
server # [   42.144130] openbao-setup-start[1319]: Success!
server # [   42.156811] systemd[1]: Finished openbao-setup.service.
server # [   42.163977] systemd[1]: Starting niks3 server...
server: (finished: must succeed: systemctl restart openbao-setup.service, in 2.18 seconds)
server: must succeed: nix-build -E 'derivation { name="signer-5"; system=builtins.currentSystem; builder="/bin/sh"; args=["-c" "echo signer-5 > $out"]; }' --no-out-link
server # [   42.276743] niks3-server[1327]: 2026/10/27 08:51:05 INFO Configured external signer program=/nix/store/4zvhilq4z8dd7g8zl1153v3fj0h9rl7w-niks3-openbao-signer/bin/niks3-openbao-signer
server # [   42.314762] niks3-server[1327]: 2026/10/27 08:51:05 INFO Read proxy enabled — serving cache objects from S3
server # [   42.321080] niks3-server[1327]: 2026/10/27 08:51:05 INFO Using socket-activated listener address=0.0.0.0:5751
server # [   42.322477] niks3-server[1327]: 2026/10/27 08:51:05 INFO systemd watchdog enabled interval=15s
server # [   42.328795] niks3-server[1327]: 2026/10/27 08:51:05 INFO Starting HTTP server address=0.0.0.0:5751
server # [   42.334135] systemd[1]: Started niks3 server.
server # this derivation will be built:
server #   /nix/store/w75vzpgwgrd413yswvyf8d3724yriqqp-signer-5.drv
server # building '/nix/store/w75vzpgwgrd413yswvyf8d3724yriqqp-signer-5.drv'...
server: (finished: must succeed: nix-build -E 'derivation { name="signer-5"; system=builtins.currentSystem; builder="/bin/sh"; args=["-c" "echo signer-5 > $out"]; }' --no-out-link, in 0.26 seconds)
server: must succeed: NIKS3_SERVER_URL=http://localhost:5751 NIKS3_AUTH_TOKEN_FILE=/tmp/auth-token /nix/store/ilvq8flwabpicaww29g5mjl6ixh6m9s4-niks3-1.15.0/bin/niks3 push /nix/store/0n0a44xfrfpmp9affrd9prwip4j5nbyx-signer-5
server # [   42.668117] niks3-server[1327]: 2026/10/27 08:51:05 INFO Received push request method=POST path=/api/pushes
server # time=2026-10-27T08:51:05.797Z level=INFO msg="Uploading 1 paths to localhost (0 already cached)"
server # time=2026-10-27T08:51:05.798Z level=INFO msg="Uploading 0n0a44xfrfpmp9affrd9prwip4j5nbyx-signer-5 (128B)"
server # [   42.711260] niks3-server[1327]: 2026/10/27 08:51:05 INFO Received sign narinfos request method=POST path=/api/pushes/5/sign
server # [   42.728090] niks3-server[1327]: 2026/10/27 08:51:05 INFO Registered completed upload object_key=0n0a44xfrfpmp9affrd9prwip4j5nbyx.ls
server # [   42.765508] niks3-server[1327]: 2026/10/27 08:51:05 INFO Signed narinfos id=5 count=1
server # time=2026-10-27T08:51:05.888Z level=INFO msg="Uploading 1 narinfos"
server # [   42.769197] niks3-server[1327]: 2026/10/27 08:51:05 INFO Registered completed upload object_key=log/w75vzpgwgrd413yswvyf8d3724yriqqp-signer-5.drv
server # [   42.773865] niks3-server[1327]: 2026/10/27 08:51:05 INFO Registered completed upload object_key=nar/1rrjdxihgavl3xr6jzkh49lrd92dlyrdgs4inygpqssjvgcrjh9x.nar.zst
server # [   42.787994] niks3-server[1327]: 2026/10/27 08:51:05 INFO Received complete push request method=POST path=/api/pushes/5/complete
server # time=2026-10-27T08:51:05.914Z level=INFO msg="Upload complete. (188ms)"
server # [   42.794149] niks3-server[1327]: 2026/10/27 08:51:05 INFO Completed push id=5 objects=4 duration=9.264ms
server # [   42.795967] niks3-server[1327]: 2026/10/27 08:51:05 INFO Registered completed upload object_key=0n0a44xfrfpmp9affrd9prwip4j5nbyx.narinfo
server: (finished: must succeed: NIKS3_SERVER_URL=http://localhost:5751 NIKS3_AUTH_TOKEN_FILE=/tmp/auth-token /nix/store/ilvq8flwabpicaww29g5mjl6ixh6m9s4-niks3-1.15.0/bin/niks3 push /nix/store/0n0a44xfrfpmp9affrd9prwip4j5nbyx-signer-5, in 0.36 seconds)
server: must succeed: nix copy --from http://localhost:5751 --to /tmp/store-5 /nix/store/0n0a44xfrfpmp9affrd9prwip4j5nbyx-signer-5
server # copying 1 paths...
server # copying path '/nix/store/0n0a44xfrfpmp9affrd9prwip4j5nbyx-signer-5' from 'http://localhost:5751'...
server: (finished: must succeed: nix copy --from http://localhost:5751 --to /tmp/store-5 /nix/store/0n0a44xfrfpmp9affrd9prwip4j5nbyx-signer-5, in 0.09 seconds)
server: must succeed: nix --store /tmp/store-5 store cat /nix/store/0n0a44xfrfpmp9affrd9prwip4j5nbyx-signer-5 | grep -F signer-
server: (finished: must succeed: nix --store /tmp/store-5 store cat /nix/store/0n0a44xfrfpmp9affrd9prwip4j5nbyx-signer-5 | grep -F signer-, in 0.07 seconds)
(finished: subtest: OpenBao errors fail the push without crashing the server, in 6.98 seconds)
(finished: run the VM test script, in 45.85 seconds)
test script finished in 45.89s
cleanup
kill QemuMachine (pid 45)
server # qemu-system-aarch64: terminating on signal 15 from pid 39 (/nix/store/lq2fsnmg0q3y0vlxn91w8s8wvj1m6fld-python3-3.14.8/bin/python3.14)
server # [2026-10-27T08:51:06Z INFO  virtiofsd] Client disconnected, shutting down
server # [2026-10-27T08:51:06Z INFO  virtiofsd] Client disconnected, shutting down
server # [2026-10-27T08:51:06Z INFO  virtiofsd] Client disconnected, shutting down
(finished: cleanup, in 0.50 seconds)
additionally exposed symbols:
    server,
    vlan1,
    start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh