Build:
  1. 0
2026-01-13 04:05.03: New job: test certify.0.3.3 with dune.3.21.0, using opam dev
                              from https://github.com/ocaml/opam-repository.git#refs/pull/29216/head (001b427da21d4d746e124eaaffab7b4134813f6d)
                              on debian-13-ocaml-4.14/amd64

To reproduce locally:

cd $(mktemp -d)
git clone --recursive "https://github.com/ocaml/opam-repository.git" && cd "opam-repository" && git fetch origin "refs/pull/29216/head" && git reset --hard 001b427d
git fetch origin master
git merge --no-edit 1c361fac36225534ee877701522e296785f9a9db
cat > ../Dockerfile <<'END-OF-DOCKERFILE'
FROM ocaml/opam:debian-13-ocaml-4.14@sha256:d765b54c014ef238f3a84185055fd22f6a5e5bea6d6bbe9ec94a1c7ac9087afa
USER 1000:1000
WORKDIR /home/opam
RUN sudo ln -f /usr/bin/opam-dev /usr/bin/opam
RUN opam init --reinit -ni
RUN opam option solver=builtin-0install && opam config report
ENV OPAMDOWNLOADJOBS="1"
ENV OPAMERRLOGLEN="0"
ENV OPAMPRECISETRACKING="1"
ENV CI="true"
ENV OPAM_REPO_CI="true"
RUN rm -rf opam-repository/
COPY --chown=1000:1000 . opam-repository/
RUN opam repository set-url --strict default opam-repository/
RUN opam update --depexts || true
RUN opam pin add -k version -yn dune.3.21.0 3.21.0
RUN opam reinstall dune.3.21.0; \
    res=$?; \
    test "$res" != 31 && exit "$res"; \
    export OPAMCLI=2.0; \
    build_dir=$(opam var prefix)/.opam-switch/build; \
    failed=$(ls "$build_dir"); \
    partial_fails=""; \
    for pkg in $failed; do \
    if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"debian-13\""; then \
    echo "A package failed and has been disabled for CI using the 'x-ci-accept-failures' field."; \
    fi; \
    test "$pkg" != 'dune.3.21.0' && partial_fails="$partial_fails $pkg"; \
    done; \
    test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}"; \
    exit 1
RUN opam reinstall certify.0.3.3; \
    res=$?; \
    test "$res" != 31 && exit "$res"; \
    export OPAMCLI=2.0; \
    build_dir=$(opam var prefix)/.opam-switch/build; \
    failed=$(ls "$build_dir"); \
    partial_fails=""; \
    for pkg in $failed; do \
    if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"debian-13\""; then \
    echo "A package failed and has been disabled for CI using the 'x-ci-accept-failures' field."; \
    fi; \
    test "$pkg" != 'certify.0.3.3' && partial_fails="$partial_fails $pkg"; \
    done; \
    test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}"; \
    exit 1
RUN (opam reinstall --with-test certify.0.3.3) || true
RUN opam reinstall --with-test --verbose certify.0.3.3; \
    res=$?; \
    test "$res" != 31 && exit "$res"; \
    export OPAMCLI=2.0; \
    build_dir=$(opam var prefix)/.opam-switch/build; \
    failed=$(ls "$build_dir"); \
    partial_fails=""; \
    for pkg in $failed; do \
    if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"debian-13\""; then \
    echo "A package failed and has been disabled for CI using the 'x-ci-accept-failures' field."; \
    fi; \
    test "$pkg" != 'certify.0.3.3' && partial_fails="$partial_fails $pkg"; \
    done; \
    test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}"; \
    exit 1

END-OF-DOCKERFILE
docker build -f ../Dockerfile .

2026-01-13 04:05.03: Using cache hint "ocaml/opam:debian-13-ocaml-4.14@sha256:d765b54c014ef238f3a84185055fd22f6a5e5bea6d6bbe9ec94a1c7ac9087afa-dune.3.21.0-certify.0.3.3-001b427da21d4d746e124eaaffab7b4134813f6d"
2026-01-13 04:05.03: Using OBuilder spec:
((from ocaml/opam:debian-13-ocaml-4.14@sha256:d765b54c014ef238f3a84185055fd22f6a5e5bea6d6bbe9ec94a1c7ac9087afa)
 (user (uid 1000) (gid 1000))
 (workdir /home/opam)
 (run (shell "sudo ln -f /usr/bin/opam-dev /usr/bin/opam"))
 (run (network host)
      (shell "opam init --reinit --config .opamrc-sandbox -ni"))
 (run (shell "opam option solver=builtin-0install && opam config report"))
 (env OPAMDOWNLOADJOBS 1)
 (env OPAMERRLOGLEN 0)
 (env OPAMPRECISETRACKING 1)
 (env CI true)
 (env OPAM_REPO_CI true)
 (run (shell "rm -rf opam-repository/"))
 (copy (src .) (dst opam-repository/))
 (run (shell "opam repository set-url --strict default opam-repository/"))
 (run (network host)
      (shell "opam update --depexts || true"))
 (run (shell "opam pin add -k version -yn dune.3.21.0 3.21.0"))
 (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
      (network host)
      (shell  "opam reinstall dune.3.21.0;\
             \n        res=$?;\
             \n        test \"$res\" != 31 && exit \"$res\";\
             \n        export OPAMCLI=2.0;\
             \n        build_dir=$(opam var prefix)/.opam-switch/build;\
             \n        failed=$(ls \"$build_dir\");\
             \n        partial_fails=\"\";\
             \n        for pkg in $failed; do\
             \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
             \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
             \n          fi;\
             \n          test \"$pkg\" != 'dune.3.21.0' && partial_fails=\"$partial_fails $pkg\";\
             \n        done;\
             \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
             \n        exit 1"))
 (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
      (network host)
      (shell  "opam reinstall certify.0.3.3;\
             \n        res=$?;\
             \n        test \"$res\" != 31 && exit \"$res\";\
             \n        export OPAMCLI=2.0;\
             \n        build_dir=$(opam var prefix)/.opam-switch/build;\
             \n        failed=$(ls \"$build_dir\");\
             \n        partial_fails=\"\";\
             \n        for pkg in $failed; do\
             \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
             \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
             \n          fi;\
             \n          test \"$pkg\" != 'certify.0.3.3' && partial_fails=\"$partial_fails $pkg\";\
             \n        done;\
             \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
             \n        exit 1"))
 (run (network host)
      (shell "(opam reinstall --with-test certify.0.3.3) || true"))
 (run (shell  "opam reinstall --with-test --verbose certify.0.3.3;\
             \n        res=$?;\
             \n        test \"$res\" != 31 && exit \"$res\";\
             \n        export OPAMCLI=2.0;\
             \n        build_dir=$(opam var prefix)/.opam-switch/build;\
             \n        failed=$(ls \"$build_dir\");\
             \n        partial_fails=\"\";\
             \n        for pkg in $failed; do\
             \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
             \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
             \n          fi;\
             \n          test \"$pkg\" != 'certify.0.3.3' && partial_fails=\"$partial_fails $pkg\";\
             \n        done;\
             \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
             \n        exit 1"))
)

2026-01-13 04:05.03: Waiting for resource in pool OCluster
2026-01-13 19:21.01: Waiting for worker…
2026-01-13 19:24.05: Got resource from pool OCluster
Building on asteria.caelum.ci.dev
All commits already cached
HEAD is now at 1c361fac36 Merge pull request #29210 from dinosaure/release-miou-v0.5.1
Merge made by the 'ort' strategy.
 packages/chrome-trace/chrome-trace.3.21.0/opam     | 41 ++++++++++++
 .../dune-action-plugin.3.21.0/opam                 | 54 ++++++++++++++++
 .../dune-build-info/dune-build-info.3.21.0/opam    | 47 ++++++++++++++
 .../dune-configurator.3.21.0/opam                  | 51 +++++++++++++++
 packages/dune-glob/dune-glob.3.21.0/opam           | 44 +++++++++++++
 .../dune-private-libs.3.21.0/opam                  | 52 +++++++++++++++
 packages/dune-rpc-lwt/dune-rpc-lwt.3.21.0/opam     | 43 +++++++++++++
 packages/dune-rpc/dune-rpc.3.21.0/opam             | 46 +++++++++++++
 packages/dune-site/dune-site.3.21.0/opam           | 39 +++++++++++
 packages/dune/dune.3.21.0/opam                     | 75 ++++++++++++++++++++++
 packages/dyn/dyn.3.21.0/opam                       | 42 ++++++++++++
 packages/fs-io/fs-io.3.21.0/opam                   | 41 ++++++++++++
 packages/ocamlc-loc/ocamlc-loc.3.21.0/opam         | 45 +++++++++++++
 packages/ordering/ordering.3.21.0/opam             | 40 ++++++++++++
 packages/stdune/stdune.3.21.0/opam                 | 48 ++++++++++++++
 packages/top-closure/top-closure.3.21.0/opam       | 40 ++++++++++++
 packages/xdg/xdg.3.21.0/opam                       | 41 ++++++++++++
 17 files changed, 789 insertions(+)
 create mode 100644 packages/chrome-trace/chrome-trace.3.21.0/opam
 create mode 100644 packages/dune-action-plugin/dune-action-plugin.3.21.0/opam
 create mode 100644 packages/dune-build-info/dune-build-info.3.21.0/opam
 create mode 100644 packages/dune-configurator/dune-configurator.3.21.0/opam
 create mode 100644 packages/dune-glob/dune-glob.3.21.0/opam
 create mode 100644 packages/dune-private-libs/dune-private-libs.3.21.0/opam
 create mode 100644 packages/dune-rpc-lwt/dune-rpc-lwt.3.21.0/opam
 create mode 100644 packages/dune-rpc/dune-rpc.3.21.0/opam
 create mode 100644 packages/dune-site/dune-site.3.21.0/opam
 create mode 100644 packages/dune/dune.3.21.0/opam
 create mode 100644 packages/dyn/dyn.3.21.0/opam
 create mode 100644 packages/fs-io/fs-io.3.21.0/opam
 create mode 100644 packages/ocamlc-loc/ocamlc-loc.3.21.0/opam
 create mode 100644 packages/ordering/ordering.3.21.0/opam
 create mode 100644 packages/stdune/stdune.3.21.0/opam
 create mode 100644 packages/top-closure/top-closure.3.21.0/opam
 create mode 100644 packages/xdg/xdg.3.21.0/opam

(from ocaml/opam:debian-13-ocaml-4.14@sha256:d765b54c014ef238f3a84185055fd22f6a5e5bea6d6bbe9ec94a1c7ac9087afa)
2026-01-13 19:24.36 ---> using "2ecda48447fc68e8dcd256d2898af0a11126a077e05d747a0dcdff2845100de1" from cache

/: (user (uid 1000) (gid 1000))

/: (workdir /home/opam)

/home/opam: (run (shell "sudo ln -f /usr/bin/opam-dev /usr/bin/opam"))
2026-01-13 19:24.36 ---> using "79eb1218297339daa5e94be48ad16ae73f417b872defa106efeff5b5f3323e6e" from cache

/home/opam: (run (network host)
                 (shell "opam init --reinit --config .opamrc-sandbox -ni"))
Configuring from /home/opam/.opamrc-sandbox, then /home/opam/.opamrc, and finally from built-in defaults.
Checking for available remotes: rsync and local, git.
  - you won't be able to use mercurial repositories unless you install the hg command on your system.
  - you won't be able to use darcs repositories unless you install the darcs command on your system.

This version of opam requires an update to the layout of /home/opam/.opam from version 2.0 to version 2.2, which can't be reverted.
You may want to back it up before going further.

Continue? [Y/n] y
[NOTE] The 'jobs' option was reset, its value was 71 and its new value will vary according to the current number of cores on your machine. You can restore the fixed value using:
           opam option jobs=71 --global
Format upgrade done.

<><> Updating repositories ><><><><><><><><><><><><><><><><><><><><><><><><><><>
[default] Initialised
2026-01-13 19:24.36 ---> using "bf81485066c79fc9faf7a51b95869ba9d998fe2bf3de5ff7f59b253fc915122f" from cache

/home/opam: (run (shell "opam option solver=builtin-0install && opam config report"))
Set to 'builtin-0install' the field solver in global configuration
# opam config report
# opam-version         2.5.0
# self-upgrade         no
# system               arch=x86_64 os=linux os-distribution=debian os-version=13
# solver               builtin-0install
# install-criteria     -changed,-count[avoid-version,solution]
# upgrade-criteria     -count[avoid-version,solution]
# jobs                 255
# repositories         1 (version-controlled)
# pinned               1 (version)
# current-switch       4.14
# invariant            ["ocaml-base-compiler" {= "4.14.2"}]
# compiler-packages    ocaml-base-compiler.4.14.2, ocaml-options-vanilla.1
# ocaml:native         true
# ocaml:native-tools   true
# ocaml:native-dynlink true
# ocaml:stubsdir       /home/opam/.opam/4.14/lib/ocaml/stublibs:/home/opam/.opam/4.14/lib/ocaml
# ocaml:preinstalled   false
# ocaml:compiler       4.14.2
2026-01-13 19:24.36 ---> using "f7c0c02658daf7a6d6c7671a8028e0e553264100bd569724894645b7844f6d7f" from cache

/home/opam: (env OPAMDOWNLOADJOBS 1)

/home/opam: (env OPAMERRLOGLEN 0)

/home/opam: (env OPAMPRECISETRACKING 1)

/home/opam: (env CI true)

/home/opam: (env OPAM_REPO_CI true)

/home/opam: (run (shell "rm -rf opam-repository/"))
2026-01-13 19:24.36 ---> using "9b3e592c65565b9b3dc8b88c605e54ddba818eb105df981d794040a64c2f9916" from cache

/home/opam: (copy (src .) (dst opam-repository/))
2026-01-13 19:24.37 ---> using "09c39d7126e88ed573ca8f78acbffb48c0088baecebf7a9155a91c3290ace20b" from cache

/home/opam: (run (shell "opam repository set-url --strict default opam-repository/"))
[default] Initialised
2026-01-13 19:24.37 ---> using "1f9ebb837e22c3f42b1c3f6e7178a2aa2fcb8206685e62bba70fde550083c584" from cache

/home/opam: (run (network host)
                 (shell "opam update --depexts || true"))
+ /usr/bin/sudo "apt-get" "update"
- Get:1 http://deb.debian.org/debian trixie InRelease [140 kB]
- Get:2 http://deb.debian.org/debian trixie-updates InRelease [47.3 kB]
- Get:3 http://deb.debian.org/debian-security trixie-security InRelease [43.4 kB]
- Get:4 http://deb.debian.org/debian trixie/main amd64 Packages [9670 kB]
- Get:5 http://deb.debian.org/debian-security trixie-security/main amd64 Packages [95.5 kB]
- Fetched 9997 kB in 1s (9884 kB/s)
- Reading package lists...
2026-01-13 19:24.37 ---> using "bc5a313c83583d746179a868806b410c236b5a3d4895b7d8bc464eed6cfe706e" from cache

/home/opam: (run (shell "opam pin add -k version -yn dune.3.21.0 3.21.0"))
dune is now pinned to version 3.21.0
2026-01-13 19:24.37 ---> using "448b2b0e77526967dc1d84c9cd1fd4fdf010f08d862d127b94c63a52bbc324d1" from cache

/home/opam: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
                 (network host)
                 (shell  "opam reinstall dune.3.21.0;\
                        \n        res=$?;\
                        \n        test \"$res\" != 31 && exit \"$res\";\
                        \n        export OPAMCLI=2.0;\
                        \n        build_dir=$(opam var prefix)/.opam-switch/build;\
                        \n        failed=$(ls \"$build_dir\");\
                        \n        partial_fails=\"\";\
                        \n        for pkg in $failed; do\
                        \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
                        \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
                        \n          fi;\
                        \n          test \"$pkg\" != 'dune.3.21.0' && partial_fails=\"$partial_fails $pkg\";\
                        \n        done;\
                        \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
                        \n        exit 1"))
dune.3.21.0 is not installed. Install it? [Y/n] y
The following actions will be performed:
=== install 1 package
  - install dune 3.21.0 (pinned)

<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
-> retrieved dune.3.21.0  (cached)
-> installed dune.3.21.0
Done.
# To update the current shell environment, run: eval $(opam env)
2026-01-13 19:24.37 ---> using "5acb627376dc8b6ecaceedd8635589b9dfb44ea06abcf3fc03092c3e94ea4126" from cache

/home/opam: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
                 (network host)
                 (shell  "opam reinstall certify.0.3.3;\
                        \n        res=$?;\
                        \n        test \"$res\" != 31 && exit \"$res\";\
                        \n        export OPAMCLI=2.0;\
                        \n        build_dir=$(opam var prefix)/.opam-switch/build;\
                        \n        failed=$(ls \"$build_dir\");\
                        \n        partial_fails=\"\";\
                        \n        for pkg in $failed; do\
                        \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
                        \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
                        \n          fi;\
                        \n          test \"$pkg\" != 'certify.0.3.3' && partial_fails=\"$partial_fails $pkg\";\
                        \n        done;\
                        \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
                        \n        exit 1"))
certify.0.3.3 is not installed. Install it? [Y/n] y
The following actions will be performed:
=== install 39 packages
  - install asn1-combinators  0.2.6          [required by x509]
  - install base-bytes        base           [required by ocplib-endian]
  - install base64            3.5.2          [required by x509]
  - install bigarray-compat   1.1.0          [required by cstruct]
  - install certify           0.3.3
  - install cmdliner          1.3.0          [required by certify]
  - install conf-gmp          5              [required by conf-gmp-powm-sec, zarith]
  - install conf-gmp-powm-sec 4              [required by mirage-crypto-pk]
  - install conf-pkg-config   4              [required by zarith, mirage-crypto, mirage-crypto-ec]
  - install cppo              1.8.0          [required by lwt]
  - install csexp             1.5.2          [required by dune-configurator]
  - install cstruct           6.0.1          [required by certify]
  - install domain-name       0.5.0          [required by x509]
  - install dune-configurator 3.21.0         [required by mirage-crypto-rng, mirage-crypto, mirage-crypto-ec]
  - install duration          0.2.1          [required by mirage-crypto-rng]
  - install eqaf              0.9            [required by mirage-crypto-pk]
  - install fmt               0.11.0         [required by x509]
  - install gmap              0.3.0          [required by x509]
  - install ipaddr            5.6.1          [required by x509]
  - install logs              0.10.0         [required by x509]
  - install lwt               6.0.0          [required by mirage-crypto-rng]
  - install macaddr           5.6.1          [required by ipaddr]
  - install mirage-crypto     0.10.7         [required by mirage-crypto-pk, x509]
  - install mirage-crypto-ec  0.10.7         [required by x509]
  - install mirage-crypto-pk  0.10.7         [required by certify]
  - install mirage-crypto-rng 0.10.7         [required by certify]
  - install mirage-no-solo5   1 (deprecated) [required by mirage-crypto-pk]
  - install mirage-no-xen     1 (deprecated) [required by mirage-crypto-pk]
  - install mtime             2.1.0          [required by mirage-crypto-rng]
  - install ocamlbuild        0.16.1         [required by ptime]
  - install ocamlfind         1.9.8          [required by ptime]
  - install ocplib-endian     1.2            [required by lwt]
  - install pbkdf             1.2.0          [required by x509]
  - install ptime             1.2.0          [required by certify]
  - install rresult           0.7.0          [required by x509]
  - install sexplib0          v0.17.0        [required by mirage-crypto-pk]
  - install topkg             1.1.1          [required by ptime]
  - install x509              0.15.0         [required by certify]
  - install zarith            1.14           [required by mirage-crypto-pk]

The following system packages will first need to be installed:
    libgmp-dev pkg-config

<><> Handling external dependencies <><><><><><><><><><><><><><><><><><><><><><>

opam believes some required external dependencies are missing. opam can:
> 1. Run apt-get to install them (may need root/sudo access)
  2. Display the recommended apt-get command and wait while you run it manually (e.g. in another terminal)
  3. Continue anyway, and, upon success, permanently register that this external dependency is present, but not detectable
  4. Abort the installation

[1/2/3/4] 1

+ /usr/bin/sudo "apt-get" "install" "-qq" "-yy" "libgmp-dev" "pkg-config"
- Selecting previously unselected package libgmpxx4ldbl:amd64.
- (Reading database ... 
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 20622 files and directories currently installed.)
- Preparing to unpack .../0-libgmpxx4ldbl_2%3a6.3.0+dfsg-3_amd64.deb ...
- Unpacking libgmpxx4ldbl:amd64 (2:6.3.0+dfsg-3) ...
- Selecting previously unselected package libgmp-dev:amd64.
- Preparing to unpack .../1-libgmp-dev_2%3a6.3.0+dfsg-3_amd64.deb ...
- Unpacking libgmp-dev:amd64 (2:6.3.0+dfsg-3) ...
- Selecting previously unselected package libpkgconf3:amd64.
- Preparing to unpack .../2-libpkgconf3_1.8.1-4_amd64.deb ...
- Unpacking libpkgconf3:amd64 (1.8.1-4) ...
- Selecting previously unselected package pkgconf-bin.
- Preparing to unpack .../3-pkgconf-bin_1.8.1-4_amd64.deb ...
- Unpacking pkgconf-bin (1.8.1-4) ...
- Selecting previously unselected package pkgconf:amd64.
- Preparing to unpack .../4-pkgconf_1.8.1-4_amd64.deb ...
- Unpacking pkgconf:amd64 (1.8.1-4) ...
- Selecting previously unselected package pkg-config:amd64.
- Preparing to unpack .../5-pkg-config_1.8.1-4_amd64.deb ...
- Unpacking pkg-config:amd64 (1.8.1-4) ...
- Setting up libpkgconf3:amd64 (1.8.1-4) ...
- Setting up libgmpxx4ldbl:amd64 (2:6.3.0+dfsg-3) ...
- Setting up pkgconf-bin (1.8.1-4) ...
- Setting up libgmp-dev:amd64 (2:6.3.0+dfsg-3) ...
- Setting up pkgconf:amd64 (1.8.1-4) ...
- Setting up pkg-config:amd64 (1.8.1-4) ...
- Processing triggers for libc-bin (2.41-12) ...

<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
-> retrieved asn1-combinators.0.2.6  (cached)
-> retrieved base64.3.5.2  (cached)
-> retrieved bigarray-compat.1.1.0  (cached)
-> retrieved certify.0.3.3  (cached)
-> retrieved cmdliner.1.3.0  (cached)
-> retrieved conf-gmp.5  (cached)
-> retrieved conf-gmp-powm-sec.4  (cached)
-> retrieved cppo.1.8.0  (cached)
-> retrieved csexp.1.5.2  (cached)
-> retrieved cstruct.6.0.1  (cached)
-> installed conf-gmp.5
-> installed conf-pkg-config.4
-> retrieved domain-name.0.5.0  (cached)
-> installed conf-gmp-powm-sec.4
-> installed base64.3.5.2
-> installed bigarray-compat.1.1.0
-> installed csexp.1.5.2
-> installed domain-name.0.5.0
-> installed cstruct.6.0.1
-> retrieved dune-configurator.3.21.0  (cached)
-> retrieved duration.0.2.1  (cached)
-> retrieved eqaf.0.9  (cached)
-> retrieved fmt.0.11.0  (cached)
-> retrieved gmap.0.3.0  (cached)
-> retrieved ipaddr.5.6.1, macaddr.5.6.1  (cached)
-> retrieved logs.0.10.0  (cached)
-> retrieved lwt.6.0.0  (cached)
-> installed cmdliner.1.3.0
-> installed cppo.1.8.0
-> installed duration.0.2.1
-> installed gmap.0.3.0
-> retrieved mirage-crypto.0.10.7, mirage-crypto-ec.0.10.7, mirage-crypto-pk.0.10.7, mirage-crypto-rng.0.10.7  (cached)
-> installed mirage-no-solo5.1
-> installed mirage-no-xen.1
-> installed macaddr.5.6.1
-> retrieved mtime.2.1.0  (cached)
-> retrieved ocamlbuild.0.16.1  (cached)
-> installed eqaf.0.9
-> retrieved ocamlfind.1.9.8  (cached)
-> retrieved ocplib-endian.1.2  (cached)
-> retrieved pbkdf.1.2.0  (cached)
-> retrieved ptime.1.2.0  (cached)
-> retrieved rresult.0.7.0  (cached)
-> retrieved sexplib0.v0.17.0  (cached)
-> retrieved topkg.1.1.1  (cached)
-> retrieved x509.0.15.0  (cached)
-> retrieved zarith.1.14  (cached)
-> installed ipaddr.5.6.1
-> installed sexplib0.v0.17.0
-> installed dune-configurator.3.21.0
-> installed mirage-crypto.0.10.7
-> installed pbkdf.1.2.0
-> installed ocamlfind.1.9.8
-> installed base-bytes.base
-> installed ocplib-endian.1.2
-> installed ocamlbuild.0.16.1
-> installed zarith.1.14
-> installed lwt.6.0.0
-> installed topkg.1.1.1
-> installed rresult.0.7.0
-> installed mtime.2.1.0
-> installed fmt.0.11.0
-> installed ptime.1.2.0
-> installed asn1-combinators.0.2.6
-> installed logs.0.10.0
-> installed mirage-crypto-rng.0.10.7
-> installed mirage-crypto-pk.0.10.7
-> installed mirage-crypto-ec.0.10.7
-> installed x509.0.15.0
-> installed certify.0.3.3
Done.

<><> mirage-no-xen.1 installed successfully <><><><><><><><><><><><><><><><><><>
=> Note: This package is deprecated.

<><> mirage-no-solo5.1 installed successfully <><><><><><><><><><><><><><><><><>
=> Note: This package is deprecated.
# To update the current shell environment, run: eval $(opam env)
2026-01-13 19:25.09 ---> saved as "f64e1164858be024b1aaee2e7898df862d771323a1a5eb7d33334ea453789cf5"

/home/opam: (run (network host)
                 (shell "(opam reinstall --with-test certify.0.3.3) || true"))
The following actions will be performed:
=== recompile 1 package
  - recompile certify      0.3.3
=== install 1 package
  - install   conf-openssl 2     [required by certify]

<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
-> retrieved certify.0.3.3  (https://opam.ocaml.org/cache)
-> removed   certify.0.3.3
-> installed conf-openssl.2
-> installed certify.0.3.3
Done.
# To update the current shell environment, run: eval $(opam env)
2026-01-13 19:25.16 ---> saved as "4b1deb3a7b0be8128cc113338c78ac5aab3f63f449f1cd9a593bcb6859482027"

/home/opam: (run (shell  "opam reinstall --with-test --verbose certify.0.3.3;\
                        \n        res=$?;\
                        \n        test \"$res\" != 31 && exit \"$res\";\
                        \n        export OPAMCLI=2.0;\
                        \n        build_dir=$(opam var prefix)/.opam-switch/build;\
                        \n        failed=$(ls \"$build_dir\");\
                        \n        partial_fails=\"\";\
                        \n        for pkg in $failed; do\
                        \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
                        \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
                        \n          fi;\
                        \n          test \"$pkg\" != 'certify.0.3.3' && partial_fails=\"$partial_fails $pkg\";\
                        \n        done;\
                        \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
                        \n        exit 1"))
The following actions will be performed:
=== recompile 1 package
  - recompile certify 0.3.3

<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
Processing  1/4: [certify.0.3.3: extract]
-> retrieved certify.0.3.3  (cached)
Processing  2/4: [certify: dune build]
+ /home/opam/.opam/opam-init/hooks/sandbox.sh "build" "dune" "build" "-p" "certify" "-j" "255" (CWD=/home/opam/.opam/4.14/.opam-switch/build/certify.0.3.3)
- (cd _build/default && /home/opam/.opam/4.14/bin/ocamlc.opt -w -40 -g -bin-annot -I src/.certify_cli.objs/byte -I /home/opam/.opam/4.14/lib/asn1-combinators -I /home/opam/.opam/4.14/lib/base64 -I /home/opam/.opam/4.14/lib/bigarray-compat -I /home/opam/.opam/4.14/lib/cmdliner -I /home/opam/.opam/4.14/lib/cstruct -I /home/opam/.opam/4.14/lib/domain-name -I /home/opam/.opam/4.14/lib/eqaf -I /home/opam/.opam/4.14/lib/eqaf/bigstring -I /home/opam/.opam/4.14/lib/eqaf/cstruct -I /home/opam/.opam/4.14/lib/fmt -I /home/opam/.opam/4.14/lib/gmap -I /home/opam/.opam/4.14/lib/ipaddr -I /home/opam/.opam/4.14/lib/logs -I /home/opam/.opam/4.14/lib/macaddr -I /home/opam/.opam/4.14/lib/mirage-crypto -I /home/opam/.opam/4.14/lib/mirage-crypto-ec -I /home/opam/.opam/4.14/lib/mirage-crypto-pk -I /home/opam/.opam/4.14/lib/mirage-crypto-rng -I /home/opam/.opam/4.14/lib/pbkdf -I /home/opam/.opam/4.14/lib/ptime -I /home/opam/.opam/4.14/lib/ptime/clock -I /home/opam/.opam/4.14/lib/rresult -I /home/opam/.opam/4.14/lib/sexplib0 -I /home/opam/.opam/4.14/lib/x509 -I /home/opam/.opam/4.14/lib/zarith -no-alias-deps -o src/.certify_cli.objs/byte/common.cmo -c -impl src/common.ml)
- File "src/common.ml", line 82, characters 72-83:
- 82 |     let _written_bytes = Unix.single_write fd (Cstruct.to_bytes pem) 0 (Cstruct.len pem) in
-                                                                              ^^^^^^^^^^^
- Alert deprecated: Cstruct.len
- len is deprecated, you should use length instead.
- (cd _build/default && /home/opam/.opam/4.14/bin/ocamlc.opt -w -40 -g -bin-annot -I src/.certify.eobjs/byte -I /home/opam/.opam/4.14/lib/asn1-combinators -I /home/opam/.opam/4.14/lib/base64 -I /home/opam/.opam/4.14/lib/bigarray-compat -I /home/opam/.opam/4.14/lib/cmdliner -I /home/opam/.opam/4.14/lib/cstruct -I /home/opam/.opam/4.14/lib/domain-name -I /home/opam/.opam/4.14/lib/eqaf -I /home/opam/.opam/4.14/lib/eqaf/bigstring -I /home/opam/.opam/4.14/lib/eqaf/cstruct -I /home/opam/.opam/4.14/lib/fmt -I /home/opam/.opam/4.14/lib/gmap -I /home/opam/.opam/4.14/lib/ipaddr -I /home/opam/.opam/4.14/lib/logs -I /home/opam/.opam/4.14/lib/macaddr -I /home/opam/.opam/4.14/lib/mirage-crypto -I /home/opam/.opam/4.14/lib/mirage-crypto-ec -I /home/opam/.opam/4.14/lib/mirage-crypto-pk -I /home/opam/.opam/4.14/lib/mirage-crypto-rng -I /home/opam/.opam/4.14/lib/mirage-crypto-rng/unix -I /home/opam/.opam/4.14/lib/pbkdf -I /home/opam/.opam/4.14/lib/ptime -I /home/opam/.opam/4.14/lib/ptime/clock -I /home/opam/.opam/4.14/lib/rresult -I /home/opam/.opam/4.14/lib/sexplib0 -I /home/opam/.opam/4.14/lib/x509 -I /home/opam/.opam/4.14/lib/zarith -I src/.certify_cli.objs/byte -no-alias-deps -o src/.certify.eobjs/byte/csr.cmo -c -impl src/csr.ml)
- File "src/csr.ml", line 29, characters 31-35:
- 29 | let csr_t = Term.(term_result (pure csr $ org $ common_name $ length $ certfile $ keyfile))
-                                     ^^^^
- Alert deprecated: Cmdliner.Term.pure
- Use Term.const instead.
- File "src/csr.ml", line 35, characters 2-11:
- 35 |   Term.info "csr" ~doc ~man
-        ^^^^^^^^^
- Alert deprecated: Cmdliner.Term.info
- Use Cmd.info instead.
- (cd _build/default && /home/opam/.opam/4.14/bin/ocamlc.opt -w -40 -g -bin-annot -I src/.certify.eobjs/byte -I /home/opam/.opam/4.14/lib/asn1-combinators -I /home/opam/.opam/4.14/lib/base64 -I /home/opam/.opam/4.14/lib/bigarray-compat -I /home/opam/.opam/4.14/lib/cmdliner -I /home/opam/.opam/4.14/lib/cstruct -I /home/opam/.opam/4.14/lib/domain-name -I /home/opam/.opam/4.14/lib/eqaf -I /home/opam/.opam/4.14/lib/eqaf/bigstring -I /home/opam/.opam/4.14/lib/eqaf/cstruct -I /home/opam/.opam/4.14/lib/fmt -I /home/opam/.opam/4.14/lib/gmap -I /home/opam/.opam/4.14/lib/ipaddr -I /home/opam/.opam/4.14/lib/logs -I /home/opam/.opam/4.14/lib/macaddr -I /home/opam/.opam/4.14/lib/mirage-crypto -I /home/opam/.opam/4.14/lib/mirage-crypto-ec -I /home/opam/.opam/4.14/lib/mirage-crypto-pk -I /home/opam/.opam/4.14/lib/mirage-crypto-rng -I /home/opam/.opam/4.14/lib/mirage-crypto-rng/unix -I /home/opam/.opam/4.14/lib/pbkdf -I /home/opam/.opam/4.14/lib/ptime -I /home/opam/.opam/4.14/lib/ptime/clock -I /home/opam/.opam/4.14/lib/rresult -I /home/opam/.opam/4.14/lib/sexplib0 -I /home/opam/.opam/4.14/lib/x509 -I /home/opam/.opam/4.14/lib/zarith -I src/.certify_cli.objs/byte -no-alias-deps -o src/.certify.eobjs/byte/selfsign.cmo -c -impl src/selfsign.ml)
- File "src/selfsign.ml", line 28, characters 36-40:
- 28 | let selfsign_t = Term.(term_result (pure selfsign $ common_name
-                                          ^^^^
- Alert deprecated: Cmdliner.Term.pure
- Use Term.const instead.
- File "src/selfsign.ml", line 36, characters 2-11:
- 36 |   Term.info "selfsign" ~doc ~man
-        ^^^^^^^^^
- Alert deprecated: Cmdliner.Term.info
- Use Cmd.info instead.
- (cd _build/default && /home/opam/.opam/4.14/bin/ocamlc.opt -w -40 -g -bin-annot -I src/.certify.eobjs/byte -I /home/opam/.opam/4.14/lib/asn1-combinators -I /home/opam/.opam/4.14/lib/base64 -I /home/opam/.opam/4.14/lib/bigarray-compat -I /home/opam/.opam/4.14/lib/cmdliner -I /home/opam/.opam/4.14/lib/cstruct -I /home/opam/.opam/4.14/lib/domain-name -I /home/opam/.opam/4.14/lib/eqaf -I /home/opam/.opam/4.14/lib/eqaf/bigstring -I /home/opam/.opam/4.14/lib/eqaf/cstruct -I /home/opam/.opam/4.14/lib/fmt -I /home/opam/.opam/4.14/lib/gmap -I /home/opam/.opam/4.14/lib/ipaddr -I /home/opam/.opam/4.14/lib/logs -I /home/opam/.opam/4.14/lib/macaddr -I /home/opam/.opam/4.14/lib/mirage-crypto -I /home/opam/.opam/4.14/lib/mirage-crypto-ec -I /home/opam/.opam/4.14/lib/mirage-crypto-pk -I /home/opam/.opam/4.14/lib/mirage-crypto-rng -I /home/opam/.opam/4.14/lib/mirage-crypto-rng/unix -I /home/opam/.opam/4.14/lib/pbkdf -I /home/opam/.opam/4.14/lib/ptime -I /home/opam/.opam/4.14/lib/ptime/clock -I /home/opam/.opam/4.14/lib/rresult -I /home/opam/.opam/4.14/lib/sexplib0 -I /home/opam/.opam/4.14/lib/x509 -I /home/opam/.opam/4.14/lib/zarith -I src/.certify_cli.objs/byte -no-alias-deps -o src/.certify.eobjs/byte/sign.cmo -c -impl src/sign.ml)
- File "src/sign.ml", line 72, characters 32-36:
- 72 | let sign_t = Term.(term_result (pure sign $ days $ is_ca $ client $ keyin $ cain $ csrin $ certfile $ altnames))
-                                      ^^^^
- Alert deprecated: Cmdliner.Term.pure
- Use Term.const instead.
- File "src/sign.ml", line 78, characters 2-11:
- 78 |   Term.info "sign" ~doc ~man
-        ^^^^^^^^^
- Alert deprecated: Cmdliner.Term.info
- Use Cmd.info instead.
- (cd _build/default && /home/opam/.opam/4.14/bin/ocamlc.opt -w -40 -g -bin-annot -I src/.certify.eobjs/byte -I /home/opam/.opam/4.14/lib/asn1-combinators -I /home/opam/.opam/4.14/lib/base64 -I /home/opam/.opam/4.14/lib/bigarray-compat -I /home/opam/.opam/4.14/lib/cmdliner -I /home/opam/.opam/4.14/lib/cstruct -I /home/opam/.opam/4.14/lib/domain-name -I /home/opam/.opam/4.14/lib/eqaf -I /home/opam/.opam/4.14/lib/eqaf/bigstring -I /home/opam/.opam/4.14/lib/eqaf/cstruct -I /home/opam/.opam/4.14/lib/fmt -I /home/opam/.opam/4.14/lib/gmap -I /home/opam/.opam/4.14/lib/ipaddr -I /home/opam/.opam/4.14/lib/logs -I /home/opam/.opam/4.14/lib/macaddr -I /home/opam/.opam/4.14/lib/mirage-crypto -I /home/opam/.opam/4.14/lib/mirage-crypto-ec -I /home/opam/.opam/4.14/lib/mirage-crypto-pk -I /home/opam/.opam/4.14/lib/mirage-crypto-rng -I /home/opam/.opam/4.14/lib/mirage-crypto-rng/unix -I /home/opam/.opam/4.14/lib/pbkdf -I /home/opam/.opam/4.14/lib/ptime -I /home/opam/.opam/4.14/lib/ptime/clock -I /home/opam/.opam/4.14/lib/rresult -I /home/opam/.opam/4.14/lib/sexplib0 -I /home/opam/.opam/4.14/lib/x509 -I /home/opam/.opam/4.14/lib/zarith -I src/.certify_cli.objs/byte -no-alias-deps -o src/.certify.eobjs/byte/certify.cmo -c -impl src/certify.ml)
- File "src/certify.ml", line 9, characters 2-11:
- 9 |   Term.info "certify" ~doc ~man
-       ^^^^^^^^^
- Alert deprecated: Cmdliner.Term.info
- Use Cmd.info instead.
- File "src/certify.ml", line 12, characters 2-11:
- 12 |   Term.exit @@
-        ^^^^^^^^^
- Alert deprecated: Cmdliner.Term.exit
- Use Stdlib.exit and Cmd.eval instead.
- File "src/certify.ml", line 13, characters 2-18:
- 13 |   Term.eval_choice
-        ^^^^^^^^^^^^^^^^
- Alert deprecated: Cmdliner.Term.eval_choice
- Use Cmd.group and one of Cmd.eval* instead.
- (cd _build/default && /home/opam/.opam/4.14/bin/ocamlopt.opt -w -40 -g -I src/.certify_cli.objs/byte -I src/.certify_cli.objs/native -I /home/opam/.opam/4.14/lib/asn1-combinators -I /home/opam/.opam/4.14/lib/base64 -I /home/opam/.opam/4.14/lib/bigarray-compat -I /home/opam/.opam/4.14/lib/cmdliner -I /home/opam/.opam/4.14/lib/cstruct -I /home/opam/.opam/4.14/lib/domain-name -I /home/opam/.opam/4.14/lib/eqaf -I /home/opam/.opam/4.14/lib/eqaf/bigstring -I /home/opam/.opam/4.14/lib/eqaf/cstruct -I /home/opam/.opam/4.14/lib/fmt -I /home/opam/.opam/4.14/lib/gmap -I /home/opam/.opam/4.14/lib/ipaddr -I /home/opam/.opam/4.14/lib/logs -I /home/opam/.opam/4.14/lib/macaddr -I /home/opam/.opam/4.14/lib/mirage-crypto -I /home/opam/.opam/4.14/lib/mirage-crypto-ec -I /home/opam/.opam/4.14/lib/mirage-crypto-pk -I /home/opam/.opam/4.14/lib/mirage-crypto-rng -I /home/opam/.opam/4.14/lib/pbkdf -I /home/opam/.opam/4.14/lib/ptime -I /home/opam/.opam/4.14/lib/ptime/clock -I /home/opam/.opam/4.14/lib/rresult -I /home/opam/.opam/4.14/lib/sexplib0 -I /home/opam/.opam/4.14/lib/x509 -I /home/opam/.opam/4.14/lib/zarith -intf-suffix .ml -no-alias-deps -o src/.certify_cli.objs/native/common.cmx -c -impl src/common.ml)
- File "src/common.ml", line 82, characters 72-83:
- 82 |     let _written_bytes = Unix.single_write fd (Cstruct.to_bytes pem) 0 (Cstruct.len pem) in
-                                                                              ^^^^^^^^^^^
- Alert deprecated: Cstruct.len
- len is deprecated, you should use length instead.
- (cd _build/default && /home/opam/.opam/4.14/bin/ocamlopt.opt -w -40 -g -I src/.certify.eobjs/byte -I src/.certify.eobjs/native -I /home/opam/.opam/4.14/lib/asn1-combinators -I /home/opam/.opam/4.14/lib/base64 -I /home/opam/.opam/4.14/lib/bigarray-compat -I /home/opam/.opam/4.14/lib/cmdliner -I /home/opam/.opam/4.14/lib/cstruct -I /home/opam/.opam/4.14/lib/domain-name -I /home/opam/.opam/4.14/lib/eqaf -I /home/opam/.opam/4.14/lib/eqaf/bigstring -I /home/opam/.opam/4.14/lib/eqaf/cstruct -I /home/opam/.opam/4.14/lib/fmt -I /home/opam/.opam/4.14/lib/gmap -I /home/opam/.opam/4.14/lib/ipaddr -I /home/opam/.opam/4.14/lib/logs -I /home/opam/.opam/4.14/lib/macaddr -I /home/opam/.opam/4.14/lib/mirage-crypto -I /home/opam/.opam/4.14/lib/mirage-crypto-ec -I /home/opam/.opam/4.14/lib/mirage-crypto-pk -I /home/opam/.opam/4.14/lib/mirage-crypto-rng -I /home/opam/.opam/4.14/lib/mirage-crypto-rng/unix -I /home/opam/.opam/4.14/lib/pbkdf -I /home/opam/.opam/4.14/lib/ptime -I /home/opam/.opam/4.14/lib/ptime/clock -I /home/opam/.opam/4.14/lib/rresult -I /home/opam/.opam/4.14/lib/sexplib0 -I /home/opam/.opam/4.14/lib/x509 -I /home/opam/.opam/4.14/lib/zarith -I src/.certify_cli.objs/byte -I src/.certify_cli.objs/native -intf-suffix .ml -no-alias-deps -o src/.certify.eobjs/native/csr.cmx -c -impl src/csr.ml)
- File "src/csr.ml", line 29, characters 31-35:
- 29 | let csr_t = Term.(term_result (pure csr $ org $ common_name $ length $ certfile $ keyfile))
-                                     ^^^^
- Alert deprecated: Cmdliner.Term.pure
- Use Term.const instead.
- File "src/csr.ml", line 35, characters 2-11:
- 35 |   Term.info "csr" ~doc ~man
-        ^^^^^^^^^
- Alert deprecated: Cmdliner.Term.info
- Use Cmd.info instead.
- (cd _build/default && /home/opam/.opam/4.14/bin/ocamlopt.opt -w -40 -g -I src/.certify.eobjs/byte -I src/.certify.eobjs/native -I /home/opam/.opam/4.14/lib/asn1-combinators -I /home/opam/.opam/4.14/lib/base64 -I /home/opam/.opam/4.14/lib/bigarray-compat -I /home/opam/.opam/4.14/lib/cmdliner -I /home/opam/.opam/4.14/lib/cstruct -I /home/opam/.opam/4.14/lib/domain-name -I /home/opam/.opam/4.14/lib/eqaf -I /home/opam/.opam/4.14/lib/eqaf/bigstring -I /home/opam/.opam/4.14/lib/eqaf/cstruct -I /home/opam/.opam/4.14/lib/fmt -I /home/opam/.opam/4.14/lib/gmap -I /home/opam/.opam/4.14/lib/ipaddr -I /home/opam/.opam/4.14/lib/logs -I /home/opam/.opam/4.14/lib/macaddr -I /home/opam/.opam/4.14/lib/mirage-crypto -I /home/opam/.opam/4.14/lib/mirage-crypto-ec -I /home/opam/.opam/4.14/lib/mirage-crypto-pk -I /home/opam/.opam/4.14/lib/mirage-crypto-rng -I /home/opam/.opam/4.14/lib/mirage-crypto-rng/unix -I /home/opam/.opam/4.14/lib/pbkdf -I /home/opam/.opam/4.14/lib/ptime -I /home/opam/.opam/4.14/lib/ptime/clock -I /home/opam/.opam/4.14/lib/rresult -I /home/opam/.opam/4.14/lib/sexplib0 -I /home/opam/.opam/4.14/lib/x509 -I /home/opam/.opam/4.14/lib/zarith -I src/.certify_cli.objs/byte -I src/.certify_cli.objs/native -intf-suffix .ml -no-alias-deps -o src/.certify.eobjs/native/selfsign.cmx -c -impl src/selfsign.ml)
- File "src/selfsign.ml", line 28, characters 36-40:
- 28 | let selfsign_t = Term.(term_result (pure selfsign $ common_name
-                                          ^^^^
- Alert deprecated: Cmdliner.Term.pure
- Use Term.const instead.
- File "src/selfsign.ml", line 36, characters 2-11:
- 36 |   Term.info "selfsign" ~doc ~man
-        ^^^^^^^^^
- Alert deprecated: Cmdliner.Term.info
- Use Cmd.info instead.
- (cd _build/default && /home/opam/.opam/4.14/bin/ocamlopt.opt -w -40 -g -I src/.certify.eobjs/byte -I src/.certify.eobjs/native -I /home/opam/.opam/4.14/lib/asn1-combinators -I /home/opam/.opam/4.14/lib/base64 -I /home/opam/.opam/4.14/lib/bigarray-compat -I /home/opam/.opam/4.14/lib/cmdliner -I /home/opam/.opam/4.14/lib/cstruct -I /home/opam/.opam/4.14/lib/domain-name -I /home/opam/.opam/4.14/lib/eqaf -I /home/opam/.opam/4.14/lib/eqaf/bigstring -I /home/opam/.opam/4.14/lib/eqaf/cstruct -I /home/opam/.opam/4.14/lib/fmt -I /home/opam/.opam/4.14/lib/gmap -I /home/opam/.opam/4.14/lib/ipaddr -I /home/opam/.opam/4.14/lib/logs -I /home/opam/.opam/4.14/lib/macaddr -I /home/opam/.opam/4.14/lib/mirage-crypto -I /home/opam/.opam/4.14/lib/mirage-crypto-ec -I /home/opam/.opam/4.14/lib/mirage-crypto-pk -I /home/opam/.opam/4.14/lib/mirage-crypto-rng -I /home/opam/.opam/4.14/lib/mirage-crypto-rng/unix -I /home/opam/.opam/4.14/lib/pbkdf -I /home/opam/.opam/4.14/lib/ptime -I /home/opam/.opam/4.14/lib/ptime/clock -I /home/opam/.opam/4.14/lib/rresult -I /home/opam/.opam/4.14/lib/sexplib0 -I /home/opam/.opam/4.14/lib/x509 -I /home/opam/.opam/4.14/lib/zarith -I src/.certify_cli.objs/byte -I src/.certify_cli.objs/native -intf-suffix .ml -no-alias-deps -o src/.certify.eobjs/native/sign.cmx -c -impl src/sign.ml)
- File "src/sign.ml", line 72, characters 32-36:
- 72 | let sign_t = Term.(term_result (pure sign $ days $ is_ca $ client $ keyin $ cain $ csrin $ certfile $ altnames))
-                                      ^^^^
- Alert deprecated: Cmdliner.Term.pure
- Use Term.const instead.
- File "src/sign.ml", line 78, characters 2-11:
- 78 |   Term.info "sign" ~doc ~man
-        ^^^^^^^^^
- Alert deprecated: Cmdliner.Term.info
- Use Cmd.info instead.
- (cd _build/default && /home/opam/.opam/4.14/bin/ocamlopt.opt -w -40 -g -I src/.certify.eobjs/byte -I src/.certify.eobjs/native -I /home/opam/.opam/4.14/lib/asn1-combinators -I /home/opam/.opam/4.14/lib/base64 -I /home/opam/.opam/4.14/lib/bigarray-compat -I /home/opam/.opam/4.14/lib/cmdliner -I /home/opam/.opam/4.14/lib/cstruct -I /home/opam/.opam/4.14/lib/domain-name -I /home/opam/.opam/4.14/lib/eqaf -I /home/opam/.opam/4.14/lib/eqaf/bigstring -I /home/opam/.opam/4.14/lib/eqaf/cstruct -I /home/opam/.opam/4.14/lib/fmt -I /home/opam/.opam/4.14/lib/gmap -I /home/opam/.opam/4.14/lib/ipaddr -I /home/opam/.opam/4.14/lib/logs -I /home/opam/.opam/4.14/lib/macaddr -I /home/opam/.opam/4.14/lib/mirage-crypto -I /home/opam/.opam/4.14/lib/mirage-crypto-ec -I /home/opam/.opam/4.14/lib/mirage-crypto-pk -I /home/opam/.opam/4.14/lib/mirage-crypto-rng -I /home/opam/.opam/4.14/lib/mirage-crypto-rng/unix -I /home/opam/.opam/4.14/lib/pbkdf -I /home/opam/.opam/4.14/lib/ptime -I /home/opam/.opam/4.14/lib/ptime/clock -I /home/opam/.opam/4.14/lib/rresult -I /home/opam/.opam/4.14/lib/sexplib0 -I /home/opam/.opam/4.14/lib/x509 -I /home/opam/.opam/4.14/lib/zarith -I src/.certify_cli.objs/byte -I src/.certify_cli.objs/native -intf-suffix .ml -no-alias-deps -o src/.certify.eobjs/native/certify.cmx -c -impl src/certify.ml)
- File "src/certify.ml", line 9, characters 2-11:
- 9 |   Term.info "certify" ~doc ~man
-       ^^^^^^^^^
- Alert deprecated: Cmdliner.Term.info
- Use Cmd.info instead.
- File "src/certify.ml", line 12, characters 2-11:
- 12 |   Term.exit @@
-        ^^^^^^^^^
- Alert deprecated: Cmdliner.Term.exit
- Use Stdlib.exit and Cmd.eval instead.
- File "src/certify.ml", line 13, characters 2-18:
- 13 |   Term.eval_choice
-        ^^^^^^^^^^^^^^^^
- Alert deprecated: Cmdliner.Term.eval_choice
- Use Cmd.group and one of Cmd.eval* instead.
Processing  2/4: [certify: sh]
+ /home/opam/.opam/opam-init/hooks/sandbox.sh "build" "sh" "-c" "env \"CERTDIR=$(mktemp -d)\" \"KEYDIR=$(mktemp -d)\" ./test/test.sh" (CWD=/home/opam/.opam/4.14/.opam-switch/build/certify.0.3.3)
- Testing _build/install/default/bin/selfsign ...
- Testing _build/install/default/bin/csr ...
- Testing _build/install/default/bin/sign ...
- /opam-tmp/tmp.aQfJaOJJT2/signed_csr.pem: OK
-> compiled  certify.0.3.3
-> removed   certify.0.3.3
-> installed certify.0.3.3
Done.
# To update the current shell environment, run: eval $(opam env)
2026-01-13 19:25.22 ---> saved as "cb568ef9a56876580b4fe6317ee868b441555ccd92c0cf746dd8b6e782ebcffc"
Job succeeded
2026-01-13 19:25.37: Job succeeded