these 22 derivations will be built: /nix/store/3mp849ja21196pkcc0k9x1j0iwzay4qz-nix.conf.drv /nix/store/1z32wxyk4vx6ah2n7g149ypb5gh7rpq0-unit-nix-grpc-daemon-strict.service.drv /nix/store/73l9c20p7j001af6g0jrxkai1svaylym-unit-nix-grpc-daemon.service.drv /nix/store/csk61vqhi5nv8x69fvm63i8qmfr5i2fq-system-path.drv /nix/store/j3yfm747aprn0mb5nilhq9alpw6x188m-dbus-1.drv /nix/store/w4mkpz7giazv2k28vl1v9lkjxqw7czy5-X-Restart-Triggers-dbus-broker.drv /nix/store/ljhyv8fggnrgw8cxiyc3h96crq2ncs4k-unit-dbus-broker.service.drv /nix/store/32ymjbd607j3mif8d968p0d93k6k5nkz-X-Restart-Triggers-nix-daemon.drv /nix/store/pfy8kxgy6vyz0ffs64yp6pbgxkadk4b6-unit-nix-daemon.service.drv /nix/store/qz5bmk19fl2v85z6gr7jkr8i99afz7v9-unit-nix-grpc-daemon-mtls.service.drv /nix/store/azvgx8jnl4dpgg5hvzafyfyfkzf3inap-system-units.drv /nix/store/j87hd9s4x39fwdmi9pc0iyy18zanmk6s-unit-dbus-broker.service.drv /nix/store/q0gg5a9dabq215fnjyr32vsfx2vsmys4-user-units.drv /nix/store/1za4rg841j3alb3x4y9vqmdg7j81ilm6-etc.drv /nix/store/772km5qnfh2ycvq76q45m8ba92dad2zn-activate.drv /nix/store/mwgg0bxkfdwfw94cvsx67q8inbpzhy44-nixos-system-machine-test.drv /nix/store/pbd32a5jakmgwj3m8dxicxgw6fpfrl22-closure-info.drv /nix/store/4jhi1wsnr5rvgygagmkrilfyfvhrz565-run-nixos-vm.drv /nix/store/i4pay72s4mayy3y3wccvsz726pc1i7x0-nixos-vm.drv /nix/store/mr2gxh41zcgd4zz356khh17max71f6ml-driverConfiguration.json.drv /nix/store/1g9h46v84p73n7mj8d0pvfyvsa87blhs-nixos-test-driver-nix-grpc-store.drv /nix/store/qj2hpgh2g5wsmn2y09av0riskhlyrvya-vm-test-run-nix-grpc-store.drv error: Cannot build '/nix/store/qj2hpgh2g5wsmn2y09av0riskhlyrvya-vm-test-run-nix-grpc-store.drv'. Reason: builder failed with exit code 1. Output paths: /nix/store/1zryf7ykfdbk7msbshzx5lxg0dfnq0fw-vm-test-run-nix-grpc-store Last 25 log lines: > machine: must succeed: nix store sign -k /root/cache-key --store /root/aclsrc '/nix/store/7nic3haixsfagxk2ynsy2rjnyy5aj951-acl-blob' > machine # added 1 signatures > machine: (finished: must succeed: nix store sign -k /root/cache-key --store /root/aclsrc '/nix/store/7nic3haixsfagxk2ynsy2rjnyy5aj951-acl-blob', in 0.21 seconds) > machine: must succeed: nix copy --no-check-sigs --from /root/aclsrc --to 'grpc://localhost:50052?ca-cert=/run/nix-grpc-certs/ca.pem&client-cert=/run/nix-grpc-certs/rw.pem&client-key=/run/nix-grpc-certs/rw.key' '/nix/store/7nic3haixsfagxk2ynsy2rjnyy5aj951-acl-blob' > machine # [ 36.579557] nix-grpc-daemon[789]: ts=2026-09-21T09:27:24Z level=info event=denied method=Connect cn=rw-client role=write > machine # error: gRPC Connect on 'localhost:50052' failed: role 'write' may not call Connect > machine # error: cannot open connection to remote store 'grpc://localhost:50052': error: Nix daemon disconnected unexpectedly (maybe it crashed?) > machine: output: > !!! Test "certificate ACL: write role enforces signatures" failed with error: "command `nix copy --no-check-sigs --from /root/aclsrc --to 'grpc://localhost:50052?ca-cert=/run/nix-grpc-certs/ca.pem&client-cert=/run/nix-grpc-certs/rw.pem&client-key=/run/nix-grpc-certs/rw.key' '/nix/store/7nic3haixsfagxk2ynsy2rjnyy5aj951-acl-blob'` failed (exit code 1)" > !!! Traceback (most recent call last): > !!! File "", line 175, in > !!! machine.succeed( > !!! > !!! RequestedAssertionFailed: command `nix copy --no-check-sigs --from /root/aclsrc --to 'grpc://localhost:50052?ca-cert=/run/nix-grpc-certs/ca.pem&client-cert=/run/nix-grpc-certs/rw.pem&client-key=/run/nix-grpc-certs/rw.key' '/nix/store/7nic3haixsfagxk2ynsy2rjnyy5aj951-acl-blob'` failed (exit code 1) > cleanup > kill QemuMachine (pid 45) > machine # qemu-system-x86_64: terminating on signal 15 from pid 39 (/nix/store/b5bpi6zfajzzrwwpgba2q6li3nnya4bs-python3-3.14.7/bin/python3.14) > (finished: cleanup, in 0.22 seconds) > additionally exposed symbols: > machine, > vlan1, > start_all, test_script, machines, machines_qemu, machines_nspawn, vlans, driver, log, os, create_machine, subtest, run_tests, join_all, retry, serial_stdout_off, serial_stdout_on, polling_condition, BaseMachine, QemuMachine, NspawnMachine, t, debug, dump_machine_ssh > error: gRPC QueryMissing on 'localhost:50053' failed: server requires a TLS client certificate or bearer token > hint: TLS handshake failed and no client certificate was presented. If the server requires mTLS set 'client-cert'/'client-key' or install client.crt/client.key in $XDG_DATA_HOME/nix-grpc-store or /var/lib/nix-grpc-store. Set NIX_GRPC_DEBUG=1 for a handshake trace. > For full logs, run: nix log /nix/store/qj2hpgh2g5wsmn2y09av0riskhlyrvya-vm-test-run-nix-grpc-store.drv