[INFO] fetching crate nucleus-container 0.3.6...
[INFO] testing nucleus-container-0.3.6 against master#ec6f9a5b4413f74386267ef8efc93712c2ce6db6 for pr-155739-1
[INFO] extracting crate nucleus-container 0.3.6 into /workspace/builds/worker-1-tc1/source
[INFO] started tweaking crates.io crate nucleus-container 0.3.6
[INFO] finished tweaking crates.io crate nucleus-container 0.3.6
[INFO] tweaked toml for crates.io crate nucleus-container 0.3.6 written to /workspace/builds/worker-1-tc1/source/Cargo.toml
[INFO] validating manifest of crates.io crate nucleus-container 0.3.6 on toolchain ec6f9a5b4413f74386267ef8efc93712c2ce6db6
[INFO] running `Command { std: CARGO_HOME="/workspace/cargo-home" RUSTUP_HOME="/workspace/rustup-home" "/workspace/cargo-home/bin/cargo" "+ec6f9a5b4413f74386267ef8efc93712c2ce6db6" "metadata" "--manifest-path" "Cargo.toml" "--no-deps", kill_on_drop: false }`
[INFO] crate crates.io crate nucleus-container 0.3.6 already has a lockfile, it will not be regenerated
[INFO] running `Command { std: CARGO_HOME="/workspace/cargo-home" RUSTUP_HOME="/workspace/rustup-home" "/workspace/cargo-home/bin/cargo" "+ec6f9a5b4413f74386267ef8efc93712c2ce6db6" "fetch" "--manifest-path" "Cargo.toml", kill_on_drop: false }`
[INFO] [stderr]     Updating crates.io index
[INFO] [stderr]  Downloading crates ...
[INFO] [stderr]   Downloaded tla-connect v0.0.4
[INFO] [stderr]   Downloaded clap_lex v1.0.0
[INFO] [stderr]   Downloaded libredox v0.1.14
[INFO] [stderr]   Downloaded enumflags2_derive v0.7.12
[INFO] [stderr]   Downloaded itf v0.4.0
[INFO] [stderr]   Downloaded dashu-base v0.4.1
[INFO] [stderr]   Downloaded enumflags2 v0.7.12
[INFO] [stderr]   Downloaded tempfile v3.26.0
[INFO] [stderr]   Downloaded num-order v1.2.0
[INFO] [stderr]   Downloaded landlock v0.4.4
[INFO] [stderr]   Downloaded dashu-int v0.4.1
[INFO] [stderr]   Downloaded clap v4.5.60
[INFO] [stderr]   Downloaded schemars v0.9.0
[INFO] [stderr]   Downloaded num-modular v0.6.1
[INFO] [stderr]   Downloaded seccompiler v0.5.0
[INFO] [stderr]   Downloaded clap_builder v4.5.60
[INFO] [stderr]   Downloaded proptest v1.10.0
[INFO] [stderr]   Downloaded nix v0.31.2
[INFO] running `Command { std: "docker" "create" "-v" "/var/lib/crater-agent-workspace/builds/worker-1-tc1/target:/opt/rustwide/target:rw,Z" "-v" "/var/lib/crater-agent-workspace/builds/worker-1-tc1/source:/opt/rustwide/workdir:ro,Z" "-v" "/var/lib/crater-agent-workspace/cargo-home:/opt/rustwide/cargo-home:ro,Z" "-v" "/var/lib/crater-agent-workspace/rustup-home:/opt/rustwide/rustup-home:ro,Z" "-e" "SOURCE_DIR=/opt/rustwide/workdir" "-e" "CARGO_TARGET_DIR=/opt/rustwide/target" "-e" "CARGO_HOME=/opt/rustwide/cargo-home" "-e" "RUSTUP_HOME=/opt/rustwide/rustup-home" "-w" "/opt/rustwide/workdir" "-m" "1610612736" "--user" "0:0" "--network" "none" "ghcr.io/rust-lang/crates-build-env/linux@sha256:d429b63d4308055ea97f60fb1d3dfca48854a00942f1bd2ad806beaf015945ec" "/opt/rustwide/cargo-home/bin/cargo" "+ec6f9a5b4413f74386267ef8efc93712c2ce6db6" "metadata" "--no-deps" "--format-version=1", kill_on_drop: false }`
[INFO] [stdout] 76ace05f3d47c6023b14886b192f82bf0b25decab526a2f7e34bbf24486b1ead
[INFO] running `Command { std: "docker" "start" "-a" "76ace05f3d47c6023b14886b192f82bf0b25decab526a2f7e34bbf24486b1ead", kill_on_drop: false }`
[INFO] running `Command { std: "docker" "inspect" "76ace05f3d47c6023b14886b192f82bf0b25decab526a2f7e34bbf24486b1ead", kill_on_drop: false }`
[INFO] running `Command { std: "docker" "rm" "-f" "76ace05f3d47c6023b14886b192f82bf0b25decab526a2f7e34bbf24486b1ead", kill_on_drop: false }`
[INFO] [stdout] 76ace05f3d47c6023b14886b192f82bf0b25decab526a2f7e34bbf24486b1ead
[INFO] running `Command { std: "docker" "create" "-v" "/var/lib/crater-agent-workspace/builds/worker-1-tc1/target:/opt/rustwide/target:rw,Z" "-v" "/var/lib/crater-agent-workspace/builds/worker-1-tc1/source:/opt/rustwide/workdir:ro,Z" "-v" "/var/lib/crater-agent-workspace/cargo-home:/opt/rustwide/cargo-home:ro,Z" "-v" "/var/lib/crater-agent-workspace/rustup-home:/opt/rustwide/rustup-home:ro,Z" "-e" "SOURCE_DIR=/opt/rustwide/workdir" "-e" "CARGO_TARGET_DIR=/opt/rustwide/target" "-e" "CARGO_INCREMENTAL=0" "-e" "RUST_BACKTRACE=full" "-e" "RUSTFLAGS=--cap-lints=forbid" "-e" "RUSTDOCFLAGS=--cap-lints=forbid" "-e" "CARGO_HOME=/opt/rustwide/cargo-home" "-e" "RUSTUP_HOME=/opt/rustwide/rustup-home" "-w" "/opt/rustwide/workdir" "-m" "1610612736" "--user" "0:0" "--network" "none" "ghcr.io/rust-lang/crates-build-env/linux@sha256:d429b63d4308055ea97f60fb1d3dfca48854a00942f1bd2ad806beaf015945ec" "/opt/rustwide/cargo-home/bin/cargo" "+ec6f9a5b4413f74386267ef8efc93712c2ce6db6" "build" "--frozen" "--message-format=json", kill_on_drop: false }`
[INFO] [stdout] 980226fb7e7545b875509ddc07c370644a610adb91fed702976cb85a04699b03
[INFO] running `Command { std: "docker" "start" "-a" "980226fb7e7545b875509ddc07c370644a610adb91fed702976cb85a04699b03", kill_on_drop: false }`
[INFO] [stderr]    Compiling quote v1.0.44
[INFO] [stderr]    Compiling libc v0.2.182
[INFO] [stderr]    Compiling once_cell v1.21.3
[INFO] [stderr]    Compiling anstyle v1.0.13
[INFO] [stderr]    Compiling colorchoice v1.0.4
[INFO] [stderr]    Compiling hashbrown v0.16.1
[INFO] [stderr]    Compiling bitflags v2.11.0
[INFO] [stderr]    Compiling anstyle-parse v0.2.7
[INFO] [stderr]    Compiling cfg_aliases v0.2.1
[INFO] [stderr]    Compiling rustix v1.1.4
[INFO] [stderr]    Compiling getrandom v0.4.1
[INFO] [stderr]    Compiling regex-automata v0.4.14
[INFO] [stderr]    Compiling option-ext v0.2.0
[INFO] [stderr]    Compiling pin-project-lite v0.2.17
[INFO] [stderr]    Compiling toml_write v0.1.2
[INFO] [stderr]    Compiling clap_lex v1.0.0
[INFO] [stderr]    Compiling nix v0.31.2
[INFO] [stderr]    Compiling winnow v0.7.15
[INFO] [stderr]    Compiling linux-raw-sys v0.12.1
[INFO] [stderr]    Compiling sharded-slab v0.1.7
[INFO] [stderr]    Compiling syn v2.0.117
[INFO] [stderr]    Compiling thread_local v1.1.9
[INFO] [stderr]    Compiling tracing-core v0.1.36
[INFO] [stderr]    Compiling nu-ansi-term v0.50.3
[INFO] [stderr]    Compiling anstream v0.6.21
[INFO] [stderr]    Compiling itoa v1.0.17
[INFO] [stderr]    Compiling fastrand v2.3.0
[INFO] [stderr]    Compiling hex v0.4.3
[INFO] [stderr]    Compiling serde_json v1.0.149
[INFO] [stderr]    Compiling clap_builder v4.5.60
[INFO] [stderr]    Compiling tracing-log v0.2.0
[INFO] [stderr]    Compiling indexmap v2.13.0
[INFO] [stderr]    Compiling dirs-sys v0.4.1
[INFO] [stderr]    Compiling caps v0.5.6
[INFO] [stderr]    Compiling seccompiler v0.5.0
[INFO] [stderr]    Compiling dirs v5.0.1
[INFO] [stderr]    Compiling tempfile v3.26.0
[INFO] [stderr]    Compiling matchers v0.2.0
[INFO] [stderr]    Compiling serde_derive v1.0.228
[INFO] [stderr]    Compiling thiserror-impl v2.0.18
[INFO] [stderr]    Compiling enumflags2_derive v0.7.12
[INFO] [stderr]    Compiling tracing-attributes v0.1.31
[INFO] [stderr]    Compiling clap_derive v4.5.55
[INFO] [stderr]    Compiling zeroize_derive v1.4.3
[INFO] [stderr]    Compiling zeroize v1.8.2
[INFO] [stderr]    Compiling enumflags2 v0.7.12
[INFO] [stderr]    Compiling tracing v0.1.44
[INFO] [stderr]    Compiling tracing-subscriber v0.3.22
[INFO] [stderr]    Compiling clap v4.5.60
[INFO] [stderr]    Compiling thiserror v2.0.18
[INFO] [stderr]    Compiling landlock v0.4.4
[INFO] [stderr]    Compiling serde v1.0.228
[INFO] [stderr]    Compiling toml_datetime v0.6.11
[INFO] [stderr]    Compiling serde_spanned v0.6.9
[INFO] [stderr]    Compiling toml_edit v0.22.27
[INFO] [stderr]    Compiling toml v0.8.23
[INFO] [stderr]    Compiling nucleus-container v0.3.6 (/opt/rustwide/workdir)
[INFO] [stderr]     Finished `dev` profile [unoptimized + debuginfo] target(s) in 49.80s
[INFO] running `Command { std: "docker" "inspect" "980226fb7e7545b875509ddc07c370644a610adb91fed702976cb85a04699b03", kill_on_drop: false }`
[INFO] running `Command { std: "docker" "rm" "-f" "980226fb7e7545b875509ddc07c370644a610adb91fed702976cb85a04699b03", kill_on_drop: false }`
[INFO] [stdout] 980226fb7e7545b875509ddc07c370644a610adb91fed702976cb85a04699b03
[INFO] running `Command { std: "docker" "create" "-v" "/var/lib/crater-agent-workspace/builds/worker-1-tc1/target:/opt/rustwide/target:rw,Z" "-v" "/var/lib/crater-agent-workspace/builds/worker-1-tc1/source:/opt/rustwide/workdir:ro,Z" "-v" "/var/lib/crater-agent-workspace/cargo-home:/opt/rustwide/cargo-home:ro,Z" "-v" "/var/lib/crater-agent-workspace/rustup-home:/opt/rustwide/rustup-home:ro,Z" "-e" "SOURCE_DIR=/opt/rustwide/workdir" "-e" "CARGO_TARGET_DIR=/opt/rustwide/target" "-e" "CARGO_INCREMENTAL=0" "-e" "RUST_BACKTRACE=full" "-e" "RUSTFLAGS=--cap-lints=forbid" "-e" "RUSTDOCFLAGS=--cap-lints=forbid" "-e" "CARGO_HOME=/opt/rustwide/cargo-home" "-e" "RUSTUP_HOME=/opt/rustwide/rustup-home" "-w" "/opt/rustwide/workdir" "-m" "1610612736" "--user" "0:0" "--network" "none" "ghcr.io/rust-lang/crates-build-env/linux@sha256:d429b63d4308055ea97f60fb1d3dfca48854a00942f1bd2ad806beaf015945ec" "/opt/rustwide/cargo-home/bin/cargo" "+ec6f9a5b4413f74386267ef8efc93712c2ce6db6" "test" "--frozen" "--no-run" "--message-format=json", kill_on_drop: false }`
[INFO] [stdout] 4c3faaee251ea02d592a195283f24c606515be2f0b2c4f32b10c366340013302
[INFO] running `Command { std: "docker" "start" "-a" "4c3faaee251ea02d592a195283f24c606515be2f0b2c4f32b10c366340013302", kill_on_drop: false }`
[INFO] [stderr]    Compiling zerocopy v0.8.40
[INFO] [stderr]    Compiling fnv v1.0.7
[INFO] [stderr]    Compiling ident_case v1.0.1
[INFO] [stderr]    Compiling getrandom v0.3.4
[INFO] [stderr]    Compiling regex-syntax v0.8.10
[INFO] [stderr]    Compiling serde_json v1.0.149
[INFO] [stderr]    Compiling zerocopy-derive v0.8.40
[INFO] [stderr]    Compiling serde v1.0.228
[INFO] [stderr]    Compiling num-modular v0.6.1
[INFO] [stderr]    Compiling dashu-base v0.4.1
[INFO] [stderr]    Compiling wait-timeout v0.2.1
[INFO] [stderr]    Compiling bit-vec v0.8.0
[INFO] [stderr]    Compiling quick-error v1.2.3
[INFO] [stderr]    Compiling rayon v1.11.0
[INFO] [stderr]    Compiling is-terminal v0.4.17
[INFO] [stderr]    Compiling unarray v0.1.4
[INFO] [stderr]    Compiling similar v2.7.0
[INFO] [stderr]    Compiling darling_core v0.21.3
[INFO] [stderr]    Compiling rusty-fork v0.3.1
[INFO] [stderr]    Compiling bit-set v0.8.0
[INFO] [stderr]    Compiling num-order v1.2.0
[INFO] [stderr]    Compiling rand_core v0.9.5
[INFO] [stderr]    Compiling rand_xorshift v0.4.0
[INFO] [stderr]    Compiling rand v0.9.2
[INFO] [stderr]    Compiling toml_datetime v0.6.11
[INFO] [stderr]    Compiling serde_spanned v0.6.9
[INFO] [stderr]    Compiling dashu-int v0.4.1
[INFO] [stderr]    Compiling tinytemplate v1.2.1
[INFO] [stderr]    Compiling toml_edit v0.22.27
[INFO] [stderr]    Compiling regex-automata v0.4.14
[INFO] [stderr]    Compiling darling_macro v0.21.3
[INFO] [stderr]    Compiling darling v0.21.3
[INFO] [stderr]    Compiling serde_with_macros v3.17.0
[INFO] [stderr]    Compiling serde_with v3.17.0
[INFO] [stderr]    Compiling toml v0.8.23
[INFO] [stderr]    Compiling matchers v0.2.0
[INFO] [stderr]    Compiling regex v1.12.3
[INFO] [stderr]    Compiling tracing-subscriber v0.3.22
[INFO] [stderr]    Compiling itf v0.4.0
[INFO] [stderr]    Compiling tla-connect v0.0.4
[INFO] [stderr]    Compiling half v2.7.1
[INFO] [stderr]    Compiling ppv-lite86 v0.2.21
[INFO] [stderr]    Compiling rand_chacha v0.9.0
[INFO] [stderr]    Compiling ciborium-ll v0.2.2
[INFO] [stderr]    Compiling proptest v1.10.0
[INFO] [stderr]    Compiling nucleus-container v0.3.6 (/opt/rustwide/workdir)
[INFO] [stderr]    Compiling ciborium v0.2.2
[INFO] [stderr]    Compiling criterion v0.5.1
[INFO] [stderr]     Finished `test` profile [unoptimized + debuginfo] target(s) in 57.88s
[INFO] running `Command { std: "docker" "inspect" "4c3faaee251ea02d592a195283f24c606515be2f0b2c4f32b10c366340013302", kill_on_drop: false }`
[INFO] running `Command { std: "docker" "rm" "-f" "4c3faaee251ea02d592a195283f24c606515be2f0b2c4f32b10c366340013302", kill_on_drop: false }`
[INFO] [stdout] 4c3faaee251ea02d592a195283f24c606515be2f0b2c4f32b10c366340013302
[INFO] running `Command { std: "docker" "create" "-v" "/var/lib/crater-agent-workspace/builds/worker-1-tc1/target:/opt/rustwide/target:rw,Z" "-v" "/var/lib/crater-agent-workspace/builds/worker-1-tc1/source:/opt/rustwide/workdir:ro,Z" "-v" "/var/lib/crater-agent-workspace/cargo-home:/opt/rustwide/cargo-home:ro,Z" "-v" "/var/lib/crater-agent-workspace/rustup-home:/opt/rustwide/rustup-home:ro,Z" "-e" "SOURCE_DIR=/opt/rustwide/workdir" "-e" "CARGO_TARGET_DIR=/opt/rustwide/target" "-e" "CARGO_INCREMENTAL=0" "-e" "RUST_BACKTRACE=full" "-e" "RUSTFLAGS=--cap-lints=forbid" "-e" "RUSTDOCFLAGS=--cap-lints=forbid" "-e" "CARGO_HOME=/opt/rustwide/cargo-home" "-e" "RUSTUP_HOME=/opt/rustwide/rustup-home" "-w" "/opt/rustwide/workdir" "-m" "1610612736" "--user" "0:0" "--network" "none" "ghcr.io/rust-lang/crates-build-env/linux@sha256:d429b63d4308055ea97f60fb1d3dfca48854a00942f1bd2ad806beaf015945ec" "/opt/rustwide/cargo-home/bin/cargo" "+ec6f9a5b4413f74386267ef8efc93712c2ce6db6" "test" "--frozen", kill_on_drop: false }`
[INFO] [stdout] f06e22eaefa59880a6a5d9464edbae6c5dbd408e729063f177e423047916d00d
[INFO] running `Command { std: "docker" "start" "-a" "f06e22eaefa59880a6a5d9464edbae6c5dbd408e729063f177e423047916d00d", kill_on_drop: false }`
[INFO] [stderr]     Finished `test` profile [unoptimized + debuginfo] target(s) in 0.27s
[INFO] [stderr]      Running unittests src/lib.rs (/opt/rustwide/target/debug/deps/nucleus-4edf0355b8f959ff)
[INFO] [stdout] 
[INFO] [stdout] running 404 tests
[INFO] [stdout] test checkpoint::criu::tests::test_parse_pid_text_plain ... ok
[INFO] [stdout] test checkpoint::criu::tests::test_parse_pid_text_embedded ... ok
[INFO] [stdout] test checkpoint::criu::tests::test_parse_pidfile_strict ... ok
[INFO] [stdout] test checkpoint::criu::tests::test_checkpoint_state_transitions ... ok
[INFO] [stdout] test audit::tests::test_audit_event_serialization ... ok
[INFO] [stdout] test checkpoint::criu::tests::test_parse_pid_text_missing ... ok
[INFO] [stdout] test checkpoint::criu::tests::test_prepare_checkpoint_dir_rejects_symlinked_output_dir ... ok
[INFO] [stdout] test checkpoint::criu::tests::test_prepare_checkpoint_dir_sets_secure_permissions ... ok
[INFO] [stdout] test checkpoint::criu::tests::test_validate_binary_accepts_secure_binary ... ok
[INFO] [stdout] test checkpoint::criu::tests::test_validate_binary_accepts_owner_only_executable ... ok
[INFO] [stdout] test checkpoint::criu::tests::test_prepare_checkpoint_dir_rejects_file_as_output_dir ... ok
[INFO] [stdout] test checkpoint::state::tests::test_abort_transitions ... ok
[INFO] [stdout] test container::config::tests::test_bind_volume_source_must_exist ... ok
[INFO] [stdout] test container::config::tests::test_bind_volume_dest_must_be_absolute ... ok
[INFO] [stdout] test container::config::tests::test_config_security_builders_override_defaults ... ok
[INFO] [stdout] test container::config::tests::test_bind_volume_source_rejects_sensitive_host_subtrees ... ok
[INFO] [stdout] test checkpoint::metadata::tests::test_save_rejects_symlink_target ... ok
[INFO] [stdout] test container::config::tests::test_bind_volume_dest_rejects_reserved_container_paths ... ok
[INFO] [stdout] test container::config::tests::test_config_security_defaults_are_hardened ... ok
[INFO] [stdout] test checkpoint::metadata::tests::test_checkpoint_resource_limits_from_cgroup_dir ... ok
[INFO] [stdout] test container::config::tests::test_default_config_has_gvisor_enabled ... ok
[INFO] [stdout] test container::config::tests::test_generate_container_id_is_32_hex_chars ... ok
[INFO] [stdout] test container::config::tests::test_generate_container_id_is_unique ... ok
[INFO] [stdout] test container::config::tests::test_generate_container_id_returns_result ... ok
[INFO] [stdout] test container::config::tests::test_gvisor_accepts_custom_seccomp_profile ... ok
[INFO] [stdout] test checkpoint::criu::tests::test_validate_binary_rejects_nonexistent ... ok
[INFO] [stdout] test container::config::tests::test_gvisor_allows_copy_mode_context_integrity_verification ... ok
[INFO] [stdout] test container::config::tests::test_gvisor_allows_custom_seccomp_profile_but_rejects_native_policy_files ... ok
[INFO] [stdout] test container::config::tests::test_gvisor_rejects_bind_mount_context_integrity_verification ... ok
[INFO] [stdout] test checkpoint::criu::tests::test_prepare_checkpoint_dir_rejects_symlinked_images_dir ... ok
[INFO] [stdout] test container::config::tests::test_gvisor_rejects_exec_health_checks ... ok
[INFO] [stdout] test checkpoint::metadata::tests::test_load_rejects_zero_cpu_period_in_metadata ... ok
[INFO] [stdout] test audit::tests::test_audit_event_with_security_posture ... ok
[INFO] [stdout] test checkpoint::criu::tests::test_validate_binary_rejects_non_executable ... ok
[INFO] [stdout] test container::config::tests::test_gvisor_rejects_exec_readiness_probes ... ok
[INFO] [stdout] test checkpoint::criu::tests::test_validate_binary_rejects_group_writable ... ok
[INFO] [stdout] test container::config::tests::test_gvisor_rejects_landlock_policy_file ... ok
[INFO] [stdout] test checkpoint::criu::tests::test_validate_binary_rejects_world_writable ... ok
[INFO] [stdout] test container::config::tests::test_gvisor_rejects_seccomp_allow_without_custom_profile_projection ... ok
[INFO] [stdout] test container::config::tests::test_gvisor_rejects_trace_mode_even_with_log_path ... ok
[INFO] [stdout] test container::config::tests::test_hardening_builders_override_defaults ... ok
[INFO] [stdout] test container::config::tests::test_native_runtime_preserves_explicit_trusted_policy ... ok
[INFO] [stdout] test audit::tests::test_audit_event_error_flag ... ok
[INFO] [stdout] test container::config::tests::test_native_runtime_disables_gvisor ... ok
[INFO] [stdout] test container::config::tests::test_production_mode_rejects_chroot_fallback ... ok
[INFO] [stdout] test container::config::tests::test_production_mode_rejects_rootfs_parent_traversal ... ok
[INFO] [stdout] test container::config::tests::test_production_mode_rejects_degraded_flags ... ok
[INFO] [stdout] test container::config::tests::test_production_mode_rejects_seccomp_trace ... ok
[INFO] [stdout] test container::config::tests::test_production_mode_requires_memory_limit ... ok
[INFO] [stdout] test container::config::tests::test_production_mode_requires_cpu_limit ... ok
[INFO] [stdout] test container::config::tests::test_production_mode_requires_rootfs_attestation ... ok
[INFO] [stdout] test checkpoint::criu::tests::test_prepare_checkpoint_dir_creates_images_subdir ... ok
[INFO] [stdout] test container::config::tests::test_production_mode_rejects_security_critical_seccomp_allow ... ok
[INFO] [stdout] test container::config::tests::test_secret_dest_must_be_absolute ... ok
[INFO] [stdout] test container::config::tests::test_tmpfs_volume_rejects_parent_traversal ... ok
[INFO] [stdout] test container::config::tests::test_user_namespace_rejects_unmapped_process_identity ... ok
[INFO] [stdout] test container::config::tests::test_user_namespace_rejects_supplementary_groups ... ok
[INFO] [stdout] test container::config::tests::test_secret_dest_rejects_parent_traversal ... ok
[INFO] [stdout] test container::config::tests::test_seccomp_trace_requires_log_path ... ok
[INFO] [stdout] test container::config::tests::test_production_mode_rejects_out_of_store_rootfs ... ok
[INFO] [stdout] test container::config::tests::test_production_mode_valid_config ... ok
[INFO] [stdout] test container::config::tests::test_production_mode_requires_rootfs ... ok
[INFO] [stdout] test container::gvisor_setup::tests::test_ensure_secure_gvisor_artifact_dir_sets_owner_only_permissions ... ok
[INFO] [stdout] test container::lifecycle::tests::test_parse_signal_all_standard_names ... ok
[INFO] [stdout] test container::health::tests::test_send_sd_notify_supports_abstract_sockets ... ok
[INFO] [stdout] test container::lifecycle::tests::test_parse_signal_by_name ... ok
[INFO] [stdout] test container::lifecycle::tests::test_parse_signal_by_number ... ok
[INFO] [stdout] test container::lifecycle::tests::test_parse_signal_case_insensitive ... ok
[INFO] [stdout] test container::lifecycle::tests::test_parse_signal_invalid ... ok
[INFO] [stdout] test container::runtime::tests::test_allow_degraded_security_requires_explicit_config ... ok
[INFO] [stdout] test container::runtime::tests::test_gvisor_bridge_precreated_userns_skips_nested_oci_userns ... ok
[INFO] [stdout] test container::runtime::tests::test_gvisor_bridge_namespace_creates_userns_before_netns ... ok
[INFO] [stdout] test container::runtime::tests::test_container_config ... ok
[INFO] [stdout] test container::runtime::tests::test_container_config_with_name ... ok
[INFO] [stdout] test container::runtime::tests::test_gvisor_bridge_precreated_userns_disables_oci_no_new_privileges ... ok
[INFO] [stdout] test container::runtime::tests::test_cleanup_gvisor_artifacts_removes_artifact_dir ... ok
[INFO] [stdout] test container::runtime::tests::test_env_var_cannot_force_degraded_security_without_explicit_opt_in ... ok
[INFO] [stdout] test container::runtime::tests::test_host_network_opt_in_disables_net_namespace ... ok
[INFO] [stdout] test container::runtime::tests::test_host_network_requires_explicit_opt_in ... ok
[INFO] [stdout] test container::runtime::tests::test_gvisor_bridge_rootless_requests_external_userns_mapping ... ok
[INFO] [stdout] test container::runtime::tests::test_child_waits_for_parent_setup_before_exec_paths ... ok
[INFO] [stdout] test container::runtime::tests::test_non_host_network_does_not_require_host_opt_in ... ok
[INFO] [stdout] test container::runtime::tests::test_oci_mount_strip_prefix_no_expect ... ok
[INFO] [stdout] test container::runtime::tests::test_gvisor_artifact_base_prefers_xdg_runtime_dir ... ok
[INFO] [stdout] test container::runtime::tests::test_rlimit_failures_fatal_in_production ... ok
[INFO] [stdout] test container::runtime::tests::test_gvisor_bridge_precreated_userns_selects_runsc_rootless ... ok
[INFO] [stdout] test container::runtime::tests::test_parse_kernel_lockdown_mode ... ok
[INFO] [stdout] test container::runtime::tests::test_notify_namespace_ready_validates_write_length ... ok
[INFO] [stdout] test container::lifecycle::tests::test_access_check_owner_allowed ... ok
[INFO] [stdout] test container::runtime::tests::test_parent_setup_gate_released_after_network_policy ... ok
[INFO] [stdout] test container::runtime::tests::test_run_as_init_keeps_identity_drop_in_workload_child_path ... ok
[INFO] [stdout] test container::runtime::tests::test_gvisor_uses_inmemory_secret_staging_for_all_modes ... ok
[INFO] [stdout] test container::runtime::tests::test_native_fork_sites_assert_single_threaded ... ok
[INFO] [stdout] test container::runtime::tests::test_run_uses_immediate_start_path_with_parent_setup_gate ... ok
[INFO] [stdout] test container::runtime::tests::test_parent_setup_failure_kills_reported_target_pid ... ok
[INFO] [stdout] test container::runtime::tests::test_runtime_probes_do_not_spawn_host_nsenter ... ok
[INFO] [stdout] test container::runtime::tests::test_health_check_loop_supports_cancellation ... ok
[INFO] [stdout] test container::runtime::tests::test_tcp_readiness_probe_uses_portable_check ... ok
[INFO] [stdout] test container::state::tests::test_delete_state_handles_already_deleted ... ok
[INFO] [stdout] test container::state::tests::test_is_running_returns_false_when_start_ticks_is_zero ... ok
[INFO] [stdout] test container::runtime::tests::test_native_production_procfs_mount_is_not_rootless_best_effort ... ok
[INFO] [stdout] test container::runtime::tests::test_signal_thread_shutdown_uses_thread_directed_wakeup ... ok
[INFO] [stdout] test checkpoint::criu::tests::test_checkpoint_hmac_detects_tampering_in_images ... ok
[INFO] [stdout] test filesystem::attestation::tests::test_compare_manifest_reports_mismatch ... ok
[INFO] [stdout] test container::runtime::tests::test_stage_gvisor_secret_files_rewrites_sources_under_stage_dir ... ok
[INFO] [stdout] test filesystem::context::tests::test_should_exclude_crypto_material ... ok
[INFO] [stdout] test filesystem::context::tests::test_should_exclude_editor_swap ... ok
[INFO] [stdout] test filesystem::context::tests::test_should_exclude_env_variants ... ok
[INFO] [stdout] test filesystem::context::tests::test_should_exclude_exact_matches ... ok
[INFO] [stdout] test container::runtime::tests::test_stage_gvisor_secret_files_rejects_symlink_source ... ok
[INFO] [stdout] test filesystem::context::tests::test_should_exclude_secrets_patterns ... ok
[INFO] [stdout] test filesystem::context::tests::test_should_not_exclude_legitimate_files ... ok
[INFO] [stdout] test container::runtime::tests::test_native_runtime_uses_inmemory_secrets_for_all_modes ... ok
[INFO] [stdout] test filesystem::attestation::tests::test_context_manifest_skips_symlinks_and_excluded_files ... ok
[INFO] [stdout] test filesystem::attestation::tests::test_read_manifest_file ... ok
[INFO] [stdout] test filesystem::lazy::tests::test_context_mode_default ... ok
[INFO] [stdout] test filesystem::attestation::tests::test_rootfs_attestation_rejects_symlink_targets_outside_allowed_roots ... ok
[INFO] [stdout] test filesystem::lazy::tests::test_bind_mount_context_rejects_special_files ... ok
[INFO] [stdout] test checkpoint::criu::tests::test_checkpoint_hmac_rejects_symlinks_in_checkpoint_tree ... ok
[INFO] [stdout] test filesystem::mount::tests::test_bind_mount_source_policy_rejects_sensitive_paths_before_creation ... ok
[INFO] [stdout] test filesystem::mount::tests::test_proc_mask_includes_kpage_files ... ok
[INFO] [stdout] test filesystem::mount::tests::test_parse_mountinfo_line_uses_mountinfo_mount_point_and_flags ... ok
[INFO] [stdout] test filesystem::mount::tests::test_chroot_impl_closes_non_stdio_fds ... ok
[INFO] [stdout] test filesystem::mount::tests::test_procfs_best_effort_only_applies_without_hidepid ... ok
[INFO] [stdout] test filesystem::mount::tests::test_proc_mask_includes_oci_standard_paths ... ok
[INFO] [stdout] test filesystem::mount::tests::test_proc_mask_includes_sysrq_trigger ... ok
[INFO] [stdout] test container::state::tests::test_container_state_new ... ok
[INFO] [stdout] test filesystem::lazy::tests::test_bind_mount_nonexistent_source ... ok
[INFO] [stdout] test filesystem::mount::tests::test_proc_mask_includes_timer_stats ... ok
[INFO] [stdout] test filesystem::lazy::tests::test_bind_mount_context_remount_adds_hardening_flags ... ok
[INFO] [stdout] test filesystem::mount::tests::test_parse_mountinfo_line_decodes_escaped_mount_points ... ok
[INFO] [stdout] test filesystem::mount::tests::test_procfs_hidepid_failure_fails_closed_even_best_effort ... ok
[INFO] [stdout] test container::state::tests::test_read_start_ticks_retries_on_failure ... ok
[INFO] [stdout] test filesystem::mount::tests::test_volume_destinations_allow_data_paths ... ok
[INFO] [stdout] test container::state::tests::test_delete_state ... ok
[INFO] [stdout] test filesystem::mount::tests::test_production_rootfs_path_rejects_symlink_escape ... ok
[INFO] [stdout] test filesystem::mount::tests::test_production_rootfs_path_rejects_parent_traversal ... ok
[INFO] [stdout] test container::state::tests::test_list_states_ignores_symlinks ... ok
[INFO] [stdout] test container::state::tests::test_resolve_container_by_id ... ok
[INFO] [stdout] test container::state::tests::test_save_and_load_state ... ok
[INFO] [stdout] test container::state::tests::test_load_state_rejects_symlink ... ok
[INFO] [stdout] test container::state::tests::test_save_state_rejects_symlink_tmp ... ok
[INFO] [stdout] test container::state::tests::test_list_states ... ok
[INFO] [stdout] test filesystem::mount::tests::test_read_regular_file_nofollow_reads_regular_file ... ok
[INFO] [stdout] test filesystem::mount::tests::test_read_regular_file_nofollow_rejects_symlink ... ok
[INFO] [stdout] test filesystem::mount::tests::test_volume_destinations_reject_reserved_container_paths ... ok
[INFO] [stdout] test filesystem::mount::tests::test_production_rootfs_path_returns_canonical_store_target ... ok
[INFO] [stdout] test filesystem::mount::tests::test_validate_bind_mount_source_allows_regular_host_paths ... ok
[INFO] [stdout] test filesystem::state::tests::test_cleanup_transitions ... ok
[INFO] [stdout] test filesystem::state::tests::test_terminal_state ... ok
[INFO] [stdout] test filesystem::state::tests::test_invalid_transitions ... ok
[INFO] [stdout] test filesystem::mount::tests::test_validate_bind_mount_source_rejects_sensitive_subtrees ... ok
[INFO] [stdout] test filesystem::mount::tests::test_validate_bind_mount_source_normalizes_parent_components_before_filtering ... ok
[INFO] [stdout] test filesystem::state::tests::test_valid_transitions ... ok
[INFO] [stdout] test filesystem::tmpfs::tests::test_tmpfs_mount_new ... ok
[INFO] [stdout] test isolation::namespaces::tests::test_namespace_config_all ... ok
[INFO] [stdout] test isolation::namespaces::tests::test_namespace_config_minimal ... ok
[INFO] [stdout] test isolation::namespaces::tests::test_namespace_manager_initial_state ... ok
[INFO] [stdout] test isolation::state::tests::test_invalid_transitions ... ok
[INFO] [stdout] test isolation::state::tests::test_terminal_state ... ok
[INFO] [stdout] test isolation::state::tests::test_valid_transitions ... ok
[INFO] [stdout] test isolation::state::tests::test_unshared_to_cleaned ... ok
[INFO] [stdout] test isolation::usermap::tests::test_id_mapping_format ... ok
[INFO] [stdout] test isolation::usermap::tests::test_id_mapping_rootless ... ok
[INFO] [stdout] test isolation::usermap::tests::test_root_remapped_requires_external_writer ... ok
[INFO] [stdout] test isolation::usermap::tests::test_rootless_mapping_can_self_map_current_process ... ok
[INFO] [stdout] test isolation::usermap::tests::test_user_namespace_config_custom ... ok
[INFO] [stdout] test network::config::tests::test_port_forward_parse ... ok
[INFO] [stdout] test network::config::tests::test_validate_ipv4_addr_rejects_leading_zeros ... ok
[INFO] [stdout] test network::config::tests::test_port_forward_parse_invalid ... ok
[INFO] [stdout] test network::userspace::tests::test_auto_nat_backend_prefers_kernel_for_rootful_hosts ... ok
[INFO] [stdout] test network::bridge::tests::test_ip_allocation_rejection_sampling_range ... ok
[INFO] [stdout] test network::userspace::tests::test_slirp_userns_join_is_kept_for_root_remapped_hosts ... ok
[INFO] [stdout] test network::userspace::tests::test_slirp_command_args_disable_builtin_dns_when_explicit_dns_is_set ... ok
[INFO] [stdout] test network::userspace::tests::test_slirp_command_args_keep_userns_without_sandbox ... ok
[INFO] [stdout] test network::bridge::tests::test_setup_rollback_releases_reserved_ip ... ok
[INFO] [stdout] test network::userspace::tests::test_userspace_port_forward_request_uses_slirp_hostfwd_shape ... ok
[INFO] [stdout] test network::bridge::tests::test_port_forward_rules_include_host_ip_when_configured ... ok
[INFO] [stdout] test isolation::usermap::tests::test_user_namespace_config_rootless ... ok
[INFO] [stdout] test oci::tests::test_host_runtime_binds_uses_fixed_paths_not_host_path ... ok
[INFO] [stdout] test network::userspace::tests::test_userspace_backend_rejects_custom_guest_ip ... ok
[INFO] [stdout] test network::bridge::tests::test_bind_mount_resolv_conf_does_not_overwrite_root_tmp_symlink_on_failure ... ok
[INFO] [stdout] test network::bridge::tests::test_reserve_ip_blocks_duplicate_requested_address ... ok
[INFO] [stdout] test oci::tests::test_oci_bundle_rejects_bundle_symlink ... ok
[INFO] [stdout] test oci::tests::test_oci_config_with_empty_hooks_serializes_without_hooks ... ok
[INFO] [stdout] test network::bridge::tests::test_port_forward_rules_include_output_chain_for_local_host_clients ... ok
[INFO] [stdout] test network::bridge::tests::test_resolv_conf_staging_file_is_outside_container_root ... ok
[INFO] [stdout] test oci::tests::test_oci_config_with_resources ... ok
[INFO] [stdout] test oci::tests::test_oci_config_with_rlimits_omits_nproc_when_unlimited ... ok
[INFO] [stdout] test oci::tests::test_oci_config_with_rlimits_uses_configured_memlock ... ok
[INFO] [stdout] test oci::tests::test_oci_config_uses_hardcoded_path_not_host ... ok
[INFO] [stdout] test oci::tests::test_oci_config_new ... ok
[INFO] [stdout] test network::userspace::tests::test_userspace_backend_rejects_too_small_subnets ... ok
[INFO] [stdout] test oci::tests::test_oci_config_serialization ... ok
[INFO] [stdout] test oci::tests::test_oci_config_with_hooks ... ok
[INFO] [stdout] test oci::tests::test_oci_bundle_rejects_rootfs_symlink ... ok
[INFO] [stdout] test oci::tests::test_oci_hooks_is_empty ... ok
[INFO] [stdout] test resources::cgroup::tests::test_cgroup_name_must_be_single_path_component ... ok
[INFO] [stdout] test oci::tests::test_oci_config_with_process_identity ... ok
[INFO] [stdout] test oci::tests::test_volume_mounts_include_bind_and_tmpfs_options ... ok
[INFO] [stdout] test oci::tests::test_volume_mounts_reject_reserved_destinations ... ok
[INFO] [stdout] test oci::tests::test_oci_hooks_serialization_roundtrip ... ok
[INFO] [stdout] test oci::tests::test_oci_bundle_create ... ok
[INFO] [stdout] test resources::cgroup::tests::test_cgroup_root_override_requires_absolute_path ... ok
[INFO] [stdout] test oci::tests::test_volume_mounts_reject_sensitive_host_sources ... ok
[INFO] [stdout] test oci::tests::test_oci_hook_rejects_relative_path ... ok
[INFO] [stdout] test resources::cgroup::tests::test_set_limits_source_enables_memory_oom_group ... ok
[INFO] [stdout] test resources::cgroup::tests::test_resource_limits_unlimited ... ok
[INFO] [stdout] test network::bridge::tests::test_ip_forward_refcount_restores_original_only_after_last_release ... ok
[INFO] [stdout] test resources::cgroup::tests::test_cleanup_sets_removed_only_after_success ... ok
[INFO] [stdout] test resources::cgroup::tests::test_cleanup_source_kills_processes_before_remove_dir ... ok
[INFO] [stdout] test resources::cgroup::tests::test_parse_cgroup_events_populated ... ok
[INFO] [stdout] test resources::limits::tests::test_cpu_cores_rejects_extreme_values ... ok
[INFO] [stdout] test resources::limits::tests::test_io_device_limit_parse_all_params ... ok
[INFO] [stdout] test resources::limits::tests::test_io_device_limit_to_io_max_line ... ok
[INFO] [stdout] test resources::cgroup::tests::test_write_value_rejects_preexisting_regular_file ... ok
[INFO] [stdout] test resources::limits::tests::test_io_device_limit_parse_invalid ... ok
[INFO] [stdout] test resources::limits::tests::test_io_device_limit_parse_valid ... ok
[INFO] [stdout] test resources::limits::tests::test_memory_high_uses_integer_arithmetic ... ok
[INFO] [stdout] test resources::limits::tests::test_parse_memory_overflow_rejected ... ok
[INFO] [stdout] test resources::limits::tests::test_swap_enabled_clears_swap_limit ... ok
[INFO] [stdout] test resources::limits::tests::test_parse_memory_invalid ... ok
[INFO] [stdout] test resources::cgroup::tests::test_write_value_rejects_symlink_control_file ... ok
[INFO] [stdout] test resources::limits::tests::test_unlimited_defaults ... ok
[INFO] [stdout] test resources::cgroup::tests::test_cgroup_root_validation_rejects_regular_filesystem ... ok
[INFO] [stdout] test resources::cgroup::tests::test_create_rejects_regular_filesystem_root_before_child_creation ... ok
[INFO] [stdout] test resources::limits::tests::test_parse_memory ... ok
[INFO] [stdout] test resources::limits::tests::test_validate_runtime_sanity_rejects_invalid_deserialized_values ... ok
[INFO] [stdout] test resources::limits::tests::test_with_cpu_cores_fractional ... ok
[INFO] [stdout] test resources::limits::tests::test_with_cpu_cores_invalid ... ok
[INFO] [stdout] test resources::limits::tests::test_with_cpu_weight_invalid ... ok
[INFO] [stdout] test resources::limits::tests::test_with_cpu_cores ... ok
[INFO] [stdout] test resources::limits::tests::test_with_pids_rejects_rlim_infinity ... ok
[INFO] [stdout] test resources::limits::tests::test_with_cpu_weight_valid ... ok
[INFO] [stdout] test resources::limits::tests::test_with_memory_auto_sets_memory_high ... ok
[INFO] [stdout] test resources::state::tests::test_invalid_transitions ... ok
[INFO] [stdout] test resources::state::tests::test_valid_transitions ... ok
[INFO] [stdout] test resources::limits::tests::test_with_cpu_cores_rejects_zero_period ... ok
[INFO] [stdout] test resources::state::tests::test_error_paths ... ok
[INFO] [stdout] test resources::state::tests::test_terminal_state ... ok
[INFO] [stdout] test resources::limits::tests::test_with_memory_disables_swap_by_default ... ok
[INFO] [stdout] test security::capabilities::tests::test_capability_manager_initial_state ... ok
[INFO] [stdout] test security::capabilities::tests::test_drop_idempotent ... ok
[INFO] [stdout] test security::capabilities::tests::test_two_phase_drop ... ok
[INFO] [stdout] test security::caps_policy::tests::test_ambient_caps_promote_into_inheritable_and_permitted ... ok
[INFO] [stdout] test resources::stats::tests::test_format_memory ... ok
[INFO] [stdout] test security::caps_policy::tests::test_default_policy_is_drop_all ... ok
[INFO] [stdout] test security::caps_policy::tests::test_parse_cap_prefix ... ok
[INFO] [stdout] test security::caps_policy::tests::test_resolve_sets_preserves_set_specificity ... ok
[INFO] [stdout] test security::caps_policy::tests::test_parse_keep_some_policy ... ok
[INFO] [stdout] test security::caps_policy::tests::test_unknown_capability_error ... ok
[INFO] [stdout] test security::caps_policy::tests::test_dedup_across_sets ... ok
[INFO] [stdout] test security::caps_policy::tests::test_parse_drop_all_policy ... ok
[INFO] [stdout] test resources::stats::tests::test_format_cpu_time ... ok
[INFO] [stdout] test security::gvisor::tests::test_runsc_owner_accepts_nix_store_artifact_owner ... ok
[INFO] [stdout] test security::caps_policy::tests::test_validate_production_rejects_newly_classified_dangerous_caps ... ok
[INFO] [stdout] test security::gvisor::tests::test_supervisor_exec_allow_roots_do_not_include_procfs ... ok
[INFO] [stdout] test security::gvisor::tests::test_find_runsc ... ok
[INFO] [stdout] test security::gvisor::tests::test_gvisor_new ... ok
[INFO] [stdout] test security::landlock::tests::test_apply_idempotent ... ok
[INFO] [stdout] test security::landlock::tests::test_best_effort_on_unsupported_kernel ... ok
[INFO] [stdout] test security::gvisor::tests::test_runsc_owner_rejects_untrusted_non_store_owner ... ok
[INFO] [stdout] test security::gvisor::tests::test_exec_environment_uses_hardcoded_path ... ok
[INFO] [stdout] test security::landlock::tests::test_container_policy_keeps_default_no_new_privs ... ok
[INFO] [stdout] test security::gvisor::tests::test_validate_runsc_rejects_group_writable ... ok
[INFO] [stdout] test security::landlock::tests::test_execute_allowlist_keeps_default_no_new_privs ... ok
[INFO] [stdout] test security::gvisor::tests::test_validate_runsc_rejects_world_writable ... ok
[INFO] [stdout] test security::landlock::tests::test_landlock_manager_initial_state ... ok
[INFO] [stdout] test security::landlock::tests::test_not_enforced_returns_error_in_strict_mode ... ok
[INFO] [stdout] test security::gvisor::tests::test_runsc_staging_rejects_symlink_exec_allow_dir ... ok
[INFO] [stdout] test security::landlock::tests::test_partially_enforced_returns_error_in_strict_mode ... ok
[INFO] [stdout] test security::gvisor::tests::test_precreated_rootless_args_pass_runsc_rootless ... ok
[INFO] [stdout] test security::gvisor::tests::test_rootless_oci_args_do_not_pass_runsc_rootless ... ok
[INFO] [stdout] test security::landlock::tests::test_policy_covers_nix_store_and_secrets ... ok
[INFO] [stdout] test security::landlock::tests::test_tmp_access_excludes_execute ... ok
[INFO] [stdout] test security::landlock_policy::tests::test_all_includes_execute ... ok
[INFO] [stdout] test security::gvisor::tests::test_gvisor_availability ... ok
[INFO] [stdout] test security::landlock_policy::tests::test_default_min_abi ... ok
[INFO] [stdout] test resources::cgroup::tests::test_cgroup_root_env_rejects_regular_filesystem ... ok
[INFO] [stdout] test security::landlock::tests::test_execute_allowlist_handles_only_execute ... ok
[INFO] [stdout] test security::landlock_policy::tests::test_parse_access_flags_invalid ... ok
[INFO] [stdout] test security::landlock_policy::tests::test_abi_from_version ... ok
[INFO] [stdout] test security::landlock_policy::tests::test_parse_access_flags_valid ... ok
[INFO] [stdout] test security::landlock_policy::tests::test_all_except_execute_excludes_execute ... ok
[INFO] [stdout] test security::landlock_policy::tests::test_parse_minimal_policy ... ok
[INFO] [stdout] test security::gvisor::tests::test_runsc_root_uses_hardened_artifact_dir_not_bundle_parent ... ok
[INFO] [stdout] test security::gvisor::tests::test_non_nix_runsc_is_staged_for_supervisor_exec_policy ... ok
[INFO] [stdout] test security::seccomp::tests::test_clone3_not_allowlisted_in_minimal_filter ... ok
[INFO] [stdout] test security::landlock_policy::tests::test_parse_full_policy ... ok
[INFO] [stdout] test security::seccomp::tests::test_clone_denied_flags_include_newcgroup ... ok
[INFO] [stdout] test security::seccomp::tests::test_clone_denied_flags_include_newtime ... ok
[INFO] [stdout] test security::seccomp::tests::test_clone_is_allowed_with_arg_filter ... ok
[INFO] [stdout] test security::seccomp::tests::test_custom_profile_preserves_clone_arg_filters ... ok
[INFO] [stdout] test security::policy::tests::test_sha256_hex ... ok
[INFO] [stdout] test security::seccomp::tests::test_apply_idempotent ... ok
[INFO] [stdout] test security::seccomp::tests::test_extra_syscalls_are_merged_into_filter ... ok
[INFO] [stdout] test security::seccomp::tests::test_arg_filtered_syscalls_list_includes_critical_syscalls ... ok
[INFO] [stdout] test security::seccomp::tests::test_extra_syscalls_blocked_known_syscall_not_added ... ok
[INFO] [stdout] test security::seccomp::tests::test_extra_syscalls_keyring_remain_blocked ... ok
[INFO] [stdout] test security::seccomp::tests::test_extra_syscalls_unknown_name_is_warned_and_skipped ... ok
[INFO] [stdout] test security::seccomp::tests::test_extra_syscalls_duplicate_of_default_is_harmless ... ok
[INFO] [stdout] test security::seccomp::tests::test_extra_syscalls_opt_in_syscall_is_added ... ok
[INFO] [stdout] test security::seccomp::tests::test_extra_syscalls_empty_is_noop ... ok
[INFO] [stdout] test security::seccomp::tests::test_generic_file_syscall_names_resolve_for_profiles ... ok
[INFO] [stdout] test security::seccomp::tests::test_extra_syscalls_unshare_remains_blocked ... ok
[INFO] [stdout] test security::seccomp::tests::test_landlock_bootstrap_syscalls_present_in_base_allowlist ... ok
[INFO] [stdout] test security::seccomp::tests::test_minimal_filter_allowlist_counts_are_stable ... ok
[INFO] [stdout] test security::seccomp::tests::test_mprotect_allows_prot_exec_alone ... ok
[INFO] [stdout] test security::seccomp::tests::test_i386_compat_socketcall_range_not_allowlisted ... ok
[INFO] [stdout] test security::seccomp::tests::test_memfd_create_not_in_default_allowlist ... ok
[INFO] [stdout] test security::seccomp::tests::test_mprotect_allows_prot_none ... ok
[INFO] [stdout] test security::seccomp::tests::test_mprotect_allows_prot_read_exec ... ok
[INFO] [stdout] test security::seccomp::tests::test_mprotect_allows_prot_read_only ... ok
[INFO] [stdout] test security::seccomp::tests::test_mprotect_allows_prot_read_write ... ok
[INFO] [stdout] test security::seccomp::tests::test_mprotect_allows_prot_write_alone ... ok
[INFO] [stdout] test security::seccomp::tests::test_mprotect_rejects_prot_read_write_exec ... ok
[INFO] [stdout] test security::seccomp::tests::test_mprotect_has_arg_filtering ... ok
[INFO] [stdout] test security::seccomp::tests::test_network_enabled_socket_domains_exclude_netlink ... ok
[INFO] [stdout] test security::seccomp::tests::test_network_mode_syscalls_only_enabled_when_network_allowed ... ok
[INFO] [stdout] test security::seccomp::tests::test_network_none_socket_domains_are_unix_only ... ok
[INFO] [stdout] test security::seccomp::tests::test_preadv2_pwritev2_have_flags_arg_filtering ... ok
[INFO] [stdout] test security::seccomp::tests::test_production_validation_allows_supported_extra_syscalls ... ok
[INFO] [stdout] test security::seccomp::tests::test_seccomp_manager_initial_state ... ok
[INFO] [stdout] test security::seccomp::tests::test_mprotect_rejects_prot_write_exec ... ok
[INFO] [stdout] test security::seccomp::tests::test_security_critical_syscalls_remain_absent_from_filter ... ok
[INFO] [stdout] test security::seccomp::tests::test_extra_syscalls_clone3_remains_blocked ... ok
[INFO] [stdout] test security::seccomp_bpf::tests::test_builtin_clone3_returns_enosys ... ok
[INFO] [stdout] test security::seccomp::tests::test_extra_syscalls_do_not_override_arg_filtered ... ok
[INFO] [stdout] test security::seccomp::tests::test_generic_file_syscalls_present_in_base_allowlist ... ok
[INFO] [stdout] test security::seccomp::tests::test_unsafe_blocks_have_safety_comments ... ok
[INFO] [stdout] test security::seccomp::tests::test_x32_legacy_range_not_allowlisted ... ok
[INFO] [stdout] test security::seccomp_bpf::tests::test_arg_filtered_syscalls ... ok
[INFO] [stdout] test security::seccomp::tests::test_production_validation_rejects_unsupported_extra_syscalls ... ok
[INFO] [stdout] test security::seccomp::tests::test_production_validation_rejects_security_critical_extra_syscalls ... ok
[INFO] [stdout] test security::seccomp_bpf::tests::test_empty_rules ... ok
[INFO] [stdout] test security::seccomp_bpf::tests::test_errno_syscall_overrides_unconditional_allow ... ok
[INFO] [stdout] test security::seccomp_bpf::tests::test_high_syscall_numbers ... ok
[INFO] [stdout] test security::seccomp_bpf::tests::test_multiple_rules_per_syscall ... ok
[INFO] [stdout] test security::seccomp_bpf::tests::test_denied_syscall_cannot_match_mprotect_arg_predicate ... ok
[INFO] [stdout] test security::seccomp_bpf::tests::test_unconditional_allows ... ok
[INFO] [stdout] test security::seccomp_bpf::tests::test_builtin_prctl_cap_ambient_only_allows_is_set ... ok
[INFO] [stdout] test security::seccomp_bpf::tests::test_preadv2_pwritev2_deny_nonzero_flags ... ok
[INFO] [stdout] test security::seccomp_bpf::tests::test_wrong_arch_is_killed ... ok
[INFO] [stdout] test security::seccomp::tests::test_high_risk_syscalls_removed_from_base_allowlist ... ok
[INFO] [stdout] test security::seccomp_generate::tests::test_generate_from_trace ... ok
[INFO] [stdout] test security::seccomp_bpf::tests::test_program_size_is_compact ... ok
[INFO] [stdout] test security::seccomp_generate::tests::test_generated_profile_uses_native_arch ... ok
[INFO] [stdout] test security::seccomp_bpf::tests::test_all_jump_offsets_valid ... ok
[INFO] [stdout] test security::seccomp_bpf::tests::test_syscall_mismatch_skips_entire_arg_chain ... ok
[INFO] [stdout] test security::seccomp_generate::tests::test_generic_file_syscall_numbers_to_name ... ok
[INFO] [stdout] test security::seccomp_generate::tests::test_native_scmp_arch_matches_target ... ok
[INFO] [stdout] test security::seccomp_generate::tests::test_syscall_number_to_name ... ok
[INFO] [stdout] test security::seccomp_generate::tests::test_profile_serialization ... ok
[INFO] [stdout] test security::seccomp_bpf::tests::test_equivalence_with_linear_scan ... ok
[INFO] [stdout] test security::seccomp_trace::tests::test_cgroup_content_matches_subgroup_membership ... ok
[INFO] [stdout] test security::seccomp_trace::tests::test_deny_scope_matches_forked_child_audit_pid ... ok
[INFO] [stdout] test security::seccomp_trace::tests::test_extract_syscall_nr ... ok
[INFO] [stdout] test security::seccomp_trace::tests::test_deny_scope_matches_cgroup_member_audit_pid ... ok
[INFO] [stdout] test security::state::tests::test_invalid_transitions ... ok
[INFO] [stdout] test security::state::tests::test_self_transitions ... ok
[INFO] [stdout] test security::state::tests::test_terminal_state ... ok
[INFO] [stdout] test security::state::tests::test_valid_transitions ... ok
[INFO] [stdout] test security::syscall_numbers::tests::generic_file_syscalls_have_current_arch_numbers ... ok
[INFO] [stdout] test security::seccomp_trace::tests::test_reader_uses_nonblocking_io ... ok
[INFO] [stdout] test security::seccomp_trace::tests::test_extract_audit_pid_ignores_ppid ... ok
[INFO] [stdout] test security::seccomp_trace::tests::test_trace_record_serialization ... ok
[INFO] [stdout] test security::seccomp_trace::tests::test_extract_syscall_nr_missing ... ok
[INFO] [stdout] test security::seccomp_trace::tests::test_deny_scope_rejects_unrelated_seccomp_pid ... ok
[INFO] [stdout] test topology::config::tests::test_nat_backend_defaults_to_auto ... ok
[INFO] [stdout] test topology::config::tests::test_validate_missing_dependency ... ok
[INFO] [stdout] test topology::config::tests::test_validate_healthy_dependency_requires_health_check ... ok
[INFO] [stdout] test topology::config::tests::test_parse_minimal_topology ... ok
[INFO] [stdout] test topology::config::tests::test_validate_rejects_sensitive_persistent_volume_paths ... ok
[INFO] [stdout] test topology::dag::tests::test_circular_dependency_detected ... ok
[INFO] [stdout] test topology::config::tests::test_parse_full_topology ... ok
[INFO] [stdout] test topology::config::tests::test_topology_rejects_service_oci_hooks ... ok
[INFO] [stdout] test topology::dag::tests::test_linear_dependency ... ok
[INFO] [stdout] test topology::dag::tests::test_missing_dependency_gives_clear_error ... ok
[INFO] [stdout] test topology::config::tests::test_service_config_hash_is_stable_across_invocations ... ok
[INFO] [stdout] test topology::dag::tests::test_diamond_dependency ... ok
[INFO] [stdout] test topology::config::tests::test_validate_rejects_reserved_volume_destinations ... ok
[INFO] [stdout] test topology::config::tests::test_validate_rejects_absolute_path_volume_mounts ... ok
[INFO] [stdout] test topology::config::tests::test_validate_rejects_invalid_volume_owner ... ok
[INFO] [stdout] test topology::dag::tests::test_systemd_deps ... ok
[INFO] [stdout] test topology::dag::tests::test_no_dependencies ... ok
[INFO] [stdout] test topology::reconcile::tests::test_build_service_run_args_omit_nat_backend_for_network_none_services ... ok
[INFO] [stdout] test topology::reconcile::tests::test_build_service_run_args_include_nat_backend_for_bridge_services ... ok
[INFO] [stdout] test topology::reconcile::tests::test_build_service_run_command_passes_topology_secrets_by_fd ... ok
[INFO] [stdout] test topology::reconcile::tests::test_build_service_run_args_include_bind_and_tmpfs_volumes ... ok
[INFO] [stdout] test topology::dns::tests::test_generate_hosts_entries ... ok
[INFO] [stdout] test topology::reconcile::tests::test_topology_health_checks_do_not_spawn_host_nsenter ... ok
[INFO] [stdout] test topology::reconcile::tests::test_build_service_run_args_include_topology_hash ... ok
[INFO] [stdout] test topology::reconcile::tests::test_prepare_persistent_volume_rejects_symlink_parent ... ok
[INFO] [stdout] test topology::reconcile::tests::test_topology_reconcile_does_not_forward_oci_hooks ... ok
[INFO] [stdout] test topology::reconcile::tests::test_post_start_wait_marks_healthy_dependencies ... ok
[INFO] [stdout] test topology::reconcile::tests::test_prepare_persistent_volume_rejects_final_symlink ... ok
[INFO] [stdout] test topology::reconcile::tests::test_plan_new_topology ... ok
[INFO] [stdout] test topology::reconcile::tests::test_plan_matching_running_hash_is_no_change ... ok
[INFO] [stdout] test topology::reconcile::tests::test_health_check_rejects_shell_metacharacters ... ok
[INFO] [stdout] test oci::tests::test_oci_hook_nonzero_exit_is_error ... ok
[INFO] [stdout] test topology::reconcile::tests::test_plan_stop_for_removed_services ... ok
[INFO] [stdout] test oci::tests::test_oci_hook_executes_successfully ... ok
[INFO] [stdout] test oci::tests::test_oci_hooks_best_effort_continues_on_failure ... ok
[INFO] [stdout] test oci::tests::test_oci_hook_retries_text_file_busy_spawn ... ok
[INFO] [stdout] 
[INFO] [stdout] test result: ok. 404 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.20s
[INFO] [stdout] 
[INFO] [stderr]      Running unittests src/main.rs (/opt/rustwide/target/debug/deps/nucleus-bcf120767a9349ff)
[INFO] [stdout] 
[INFO] [stdout] running 15 tests
[INFO] [stdout] test tests::test_native_runtime_disables_gvisor ... ok
[INFO] [stdout] test tests::test_native_runtime_preserves_explicit_trust_level ... ok
[INFO] [stdout] test tests::test_privileged_helper_command_overrides_path ... ok
[INFO] [stdout] test tests::test_read_secret_specs_from_fd_reads_json_specs ... ok
[INFO] [stdout] test tests::test_resolve_process_identity_deduplicates_additional_groups ... ok
[INFO] [stdout] test tests::test_privileged_helper_resolution_prefers_trusted_path_over_path ... ok
[INFO] [stdout] test tests::test_resolve_process_identity_named_user_defaults_primary_group ... ok
[INFO] [stdout] test tests::test_detached_create_request_roundtrips_command_tokens ... ok
[INFO] [stdout] test tests::test_create_hidden_detached_config_skips_command_requirement ... ok
[INFO] [stdout] test tests::test_native_runtime_rejects_bundle_flag ... ok
[INFO] [stdout] test tests::test_resolve_process_identity_numeric_user_requires_group ... ok
[INFO] [stdout] test tests::test_resolve_systemd_credential_rejects_path_traversal ... ok
[INFO] [stdout] test tests::test_root_helper_resolution_does_not_use_path ... ok
[INFO] [stdout] test tests::test_resolve_systemd_credential_source ... ok
[INFO] [stdout] test tests::test_validate_privileged_helper_rejects_group_writable_binary ... ok
[INFO] [stdout] 
[INFO] [stdout] test result: ok. 15 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.01s
[INFO] [stdout] 
[INFO] [stderr]    Doc-tests nucleus
[INFO] [stdout] 
[INFO] [stdout] running 0 tests
[INFO] [stdout] 
[INFO] [stdout] test result: ok. 0 passed; 0 failed; 0 ignored; 0 measured; 0 filtered out; finished in 0.00s
[INFO] [stdout] 
[INFO] running `Command { std: "docker" "inspect" "f06e22eaefa59880a6a5d9464edbae6c5dbd408e729063f177e423047916d00d", kill_on_drop: false }`
[INFO] running `Command { std: "docker" "rm" "-f" "f06e22eaefa59880a6a5d9464edbae6c5dbd408e729063f177e423047916d00d", kill_on_drop: false }`
[INFO] [stdout] f06e22eaefa59880a6a5d9464edbae6c5dbd408e729063f177e423047916d00d
