2026-01-27 19:22.42: New job: test letsencrypt-app.0.5.1 with mirage-runtime.4.10.0, using opam dev
                              from https://github.com/ocaml/opam-repository.git#refs/pull/29297/head (bec96dd4b29b0e3eb148af9966895e70442e68e2)
                              on debian-13-ocaml-4.14/amd64

To reproduce locally:

cd $(mktemp -d)
git clone --recursive "https://github.com/ocaml/opam-repository.git" && cd "opam-repository" && git fetch origin "refs/pull/29297/head" && git reset --hard bec96dd4
git fetch origin master
git merge --no-edit 88150787b3c9df767fd8dadf5d416641f8ee58f8
cat > ../Dockerfile <<'END-OF-DOCKERFILE'
FROM ocaml/opam:debian-13-ocaml-4.14@sha256:b77f64f7a162903a6fb8a0d50071a7eb7a4a9bc4421699c19d2ab9050981c012
USER 1000:1000
WORKDIR /home/opam
RUN sudo ln -f /usr/bin/opam-dev /usr/bin/opam
RUN opam init --reinit -ni
RUN opam option solver=builtin-0install && opam config report
ENV OPAMDOWNLOADJOBS="1"
ENV OPAMERRLOGLEN="0"
ENV OPAMPRECISETRACKING="1"
ENV CI="true"
ENV OPAM_REPO_CI="true"
RUN rm -rf opam-repository/
COPY --chown=1000:1000 . opam-repository/
RUN opam repository set-url --strict default opam-repository/
RUN opam update --depexts || true
RUN opam pin add -k version -yn mirage-runtime.4.10.0 4.10.0
RUN opam reinstall mirage-runtime.4.10.0; \
    res=$?; \
    test "$res" != 31 && exit "$res"; \
    export OPAMCLI=2.0; \
    build_dir=$(opam var prefix)/.opam-switch/build; \
    failed=$(ls "$build_dir"); \
    partial_fails=""; \
    for pkg in $failed; do \
    if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"debian-13\""; then \
    echo "A package failed and has been disabled for CI using the 'x-ci-accept-failures' field."; \
    fi; \
    test "$pkg" != 'mirage-runtime.4.10.0' && partial_fails="$partial_fails $pkg"; \
    done; \
    test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}"; \
    exit 1
RUN opam reinstall letsencrypt-app.0.5.1; \
    res=$?; \
    test "$res" != 31 && exit "$res"; \
    export OPAMCLI=2.0; \
    build_dir=$(opam var prefix)/.opam-switch/build; \
    failed=$(ls "$build_dir"); \
    partial_fails=""; \
    for pkg in $failed; do \
    if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"debian-13\""; then \
    echo "A package failed and has been disabled for CI using the 'x-ci-accept-failures' field."; \
    fi; \
    test "$pkg" != 'letsencrypt-app.0.5.1' && partial_fails="$partial_fails $pkg"; \
    done; \
    test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}"; \
    exit 1
RUN (opam reinstall --with-test letsencrypt-app.0.5.1) || true
RUN opam reinstall --with-test --verbose letsencrypt-app.0.5.1; \
    res=$?; \
    test "$res" != 31 && exit "$res"; \
    export OPAMCLI=2.0; \
    build_dir=$(opam var prefix)/.opam-switch/build; \
    failed=$(ls "$build_dir"); \
    partial_fails=""; \
    for pkg in $failed; do \
    if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"debian-13\""; then \
    echo "A package failed and has been disabled for CI using the 'x-ci-accept-failures' field."; \
    fi; \
    test "$pkg" != 'letsencrypt-app.0.5.1' && partial_fails="$partial_fails $pkg"; \
    done; \
    test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}"; \
    exit 1

END-OF-DOCKERFILE
docker build -f ../Dockerfile .

2026-01-27 19:22.42: Using cache hint "ocaml/opam:debian-13-ocaml-4.14@sha256:b77f64f7a162903a6fb8a0d50071a7eb7a4a9bc4421699c19d2ab9050981c012-mirage-runtime.4.10.0-letsencrypt-app.0.5.1-bec96dd4b29b0e3eb148af9966895e70442e68e2"
2026-01-27 19:22.42: Using OBuilder spec:
((from ocaml/opam:debian-13-ocaml-4.14@sha256:b77f64f7a162903a6fb8a0d50071a7eb7a4a9bc4421699c19d2ab9050981c012)
 (user (uid 1000) (gid 1000))
 (workdir /home/opam)
 (run (shell "sudo ln -f /usr/bin/opam-dev /usr/bin/opam"))
 (run (network host)
      (shell "opam init --reinit --config .opamrc-sandbox -ni"))
 (run (shell "opam option solver=builtin-0install && opam config report"))
 (env OPAMDOWNLOADJOBS 1)
 (env OPAMERRLOGLEN 0)
 (env OPAMPRECISETRACKING 1)
 (env CI true)
 (env OPAM_REPO_CI true)
 (run (shell "rm -rf opam-repository/"))
 (copy (src .) (dst opam-repository/))
 (run (shell "opam repository set-url --strict default opam-repository/"))
 (run (network host)
      (shell "opam update --depexts || true"))
 (run (shell "opam pin add -k version -yn mirage-runtime.4.10.0 4.10.0"))
 (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
      (network host)
      (shell  "opam reinstall mirage-runtime.4.10.0;\
             \n        res=$?;\
             \n        test \"$res\" != 31 && exit \"$res\";\
             \n        export OPAMCLI=2.0;\
             \n        build_dir=$(opam var prefix)/.opam-switch/build;\
             \n        failed=$(ls \"$build_dir\");\
             \n        partial_fails=\"\";\
             \n        for pkg in $failed; do\
             \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
             \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
             \n          fi;\
             \n          test \"$pkg\" != 'mirage-runtime.4.10.0' && partial_fails=\"$partial_fails $pkg\";\
             \n        done;\
             \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
             \n        exit 1"))
 (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
      (network host)
      (shell  "opam reinstall letsencrypt-app.0.5.1;\
             \n        res=$?;\
             \n        test \"$res\" != 31 && exit \"$res\";\
             \n        export OPAMCLI=2.0;\
             \n        build_dir=$(opam var prefix)/.opam-switch/build;\
             \n        failed=$(ls \"$build_dir\");\
             \n        partial_fails=\"\";\
             \n        for pkg in $failed; do\
             \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
             \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
             \n          fi;\
             \n          test \"$pkg\" != 'letsencrypt-app.0.5.1' && partial_fails=\"$partial_fails $pkg\";\
             \n        done;\
             \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
             \n        exit 1"))
 (run (network host)
      (shell "(opam reinstall --with-test letsencrypt-app.0.5.1) || true"))
 (run (shell  "opam reinstall --with-test --verbose letsencrypt-app.0.5.1;\
             \n        res=$?;\
             \n        test \"$res\" != 31 && exit \"$res\";\
             \n        export OPAMCLI=2.0;\
             \n        build_dir=$(opam var prefix)/.opam-switch/build;\
             \n        failed=$(ls \"$build_dir\");\
             \n        partial_fails=\"\";\
             \n        for pkg in $failed; do\
             \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
             \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
             \n          fi;\
             \n          test \"$pkg\" != 'letsencrypt-app.0.5.1' && partial_fails=\"$partial_fails $pkg\";\
             \n        done;\
             \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
             \n        exit 1"))
)

2026-01-27 19:22.42: Waiting for resource in pool OCluster
2026-01-27 22:34.43: Waiting for worker…
2026-01-27 22:47.56: Got resource from pool OCluster
Building on odawa.caelum.ci.dev
All commits already cached
HEAD is now at 88150787b3 Merge pull request #29287 from dinosaure/release-git-kv-v0.2.1
Merge made by the 'ort' strategy.
 packages/mirage-runtime/mirage-runtime.4.0.0/opam       | 2 +-
 packages/mirage-runtime/mirage-runtime.4.0.0~beta3/opam | 2 +-
 packages/mirage-runtime/mirage-runtime.4.10.0/opam      | 2 +-
 packages/mirage-runtime/mirage-runtime.4.10.1/opam      | 2 +-
 packages/mirage-runtime/mirage-runtime.4.10.2/opam      | 2 +-
 packages/mirage-runtime/mirage-runtime.4.10.3/opam      | 2 +-
 packages/mirage-runtime/mirage-runtime.4.10.4/opam      | 2 +-
 packages/mirage-runtime/mirage-runtime.4.7.0/opam       | 2 +-
 packages/mirage-runtime/mirage-runtime.4.9.0/opam       | 2 +-
 9 files changed, 9 insertions(+), 9 deletions(-)

(from ocaml/opam:debian-13-ocaml-4.14@sha256:b77f64f7a162903a6fb8a0d50071a7eb7a4a9bc4421699c19d2ab9050981c012)
Unable to find image 'ocaml/opam:debian-13-ocaml-4.14@sha256:b77f64f7a162903a6fb8a0d50071a7eb7a4a9bc4421699c19d2ab9050981c012' locally
docker.io/ocaml/opam@sha256:b77f64f7a162903a6fb8a0d50071a7eb7a4a9bc4421699c19d2ab9050981c012: Pulling from ocaml/opam
32ef12fa09dd: Pulling fs layer
32ef12fa09dd: Waiting
32ef12fa09dd: Verifying Checksum
32ef12fa09dd: Download complete
32ef12fa09dd: Pull complete
Digest: sha256:b77f64f7a162903a6fb8a0d50071a7eb7a4a9bc4421699c19d2ab9050981c012
Status: Downloaded newer image for ocaml/opam@sha256:b77f64f7a162903a6fb8a0d50071a7eb7a4a9bc4421699c19d2ab9050981c012
2026-01-27 22:48.03 ---> using "3fd264bad5105e854dbd96d70e0cfc1d39526afdd30eb5071f64946db0e5017f" from cache

/: (user (uid 1000) (gid 1000))

/: (workdir /home/opam)

/home/opam: (run (shell "sudo ln -f /usr/bin/opam-dev /usr/bin/opam"))
2026-01-27 22:48.03 ---> using "c3cd77d504ddaf309a58ec97d6990fbd674dfde7b2abb842e8428debfcc0578e" from cache

/home/opam: (run (network host)
                 (shell "opam init --reinit --config .opamrc-sandbox -ni"))
Configuring from /home/opam/.opamrc-sandbox, then /home/opam/.opamrc, and finally from built-in defaults.
Checking for available remotes: rsync and local, git.
  - you won't be able to use mercurial repositories unless you install the hg command on your system.
  - you won't be able to use darcs repositories unless you install the darcs command on your system.

This version of opam requires an update to the layout of /home/opam/.opam from version 2.0 to version 2.2, which can't be reverted.
You may want to back it up before going further.

Continue? [Y/n] y
[NOTE] The 'jobs' option was reset, its value was 71 and its new value will vary according to the current number of cores on your machine. You can restore the fixed value using:
           opam option jobs=71 --global
Format upgrade done.

<><> Updating repositories ><><><><><><><><><><><><><><><><><><><><><><><><><><>
[default] Initialised
2026-01-27 22:48.03 ---> using "465a85423ed866bf442b5d4ea44e6d67ced29e9b9e842e1931d4e6d88019fbd3" from cache

/home/opam: (run (shell "opam option solver=builtin-0install && opam config report"))
Set to 'builtin-0install' the field solver in global configuration
# opam config report
# opam-version         2.5.0
# self-upgrade         no
# system               arch=x86_64 os=linux os-distribution=debian os-version=13
# solver               builtin-0install
# install-criteria     -changed,-count[avoid-version,solution]
# upgrade-criteria     -count[avoid-version,solution]
# jobs                 255
# repositories         1 (version-controlled)
# pinned               1 (version)
# current-switch       4.14
# invariant            ["ocaml-base-compiler" {= "4.14.2"}]
# compiler-packages    ocaml-base-compiler.4.14.2, ocaml-options-vanilla.1
# ocaml:native         true
# ocaml:native-tools   true
# ocaml:native-dynlink true
# ocaml:stubsdir       /home/opam/.opam/4.14/lib/ocaml/stublibs:/home/opam/.opam/4.14/lib/ocaml
# ocaml:preinstalled   false
# ocaml:compiler       4.14.2
2026-01-27 22:48.03 ---> using "600a99cbfa8eb664d95037ff02fc36b5d64190bc45ec2fd4792c21267b01f885" from cache

/home/opam: (env OPAMDOWNLOADJOBS 1)

/home/opam: (env OPAMERRLOGLEN 0)

/home/opam: (env OPAMPRECISETRACKING 1)

/home/opam: (env CI true)

/home/opam: (env OPAM_REPO_CI true)

/home/opam: (run (shell "rm -rf opam-repository/"))
2026-01-27 22:48.03 ---> using "7a36498140d9470d1651f2f43060608bb30c70da80a143f96ae11f513ef0d2f1" from cache

/home/opam: (copy (src .) (dst opam-repository/))
2026-01-27 22:48.03 ---> using "c9c281874add8ec6f824059ed6bc4b1cfa517948ec5e9031033d3104a09c31cb" from cache

/home/opam: (run (shell "opam repository set-url --strict default opam-repository/"))
[default] Initialised
2026-01-27 22:48.03 ---> using "53502e89c855ed9f94e21d4f7bd4f9f40b749d1356523774f70e07d214514475" from cache

/home/opam: (run (network host)
                 (shell "opam update --depexts || true"))
+ /usr/bin/sudo "apt-get" "update"
- Hit:1 http://deb.debian.org/debian trixie InRelease
- Get:2 http://deb.debian.org/debian trixie-updates InRelease [47.3 kB]
- Get:3 http://deb.debian.org/debian-security trixie-security InRelease [43.4 kB]
- Get:4 http://deb.debian.org/debian-security trixie-security/main amd64 Packages [97.9 kB]
- Fetched 189 kB in 0s (1932 kB/s)
- Reading package lists...
2026-01-27 22:48.03 ---> using "fd9c746d3f7a0ef758e388fb04e10d9013e6617bfbced5cd67effbd293bab80d" from cache

/home/opam: (run (shell "opam pin add -k version -yn mirage-runtime.4.10.0 4.10.0"))
mirage-runtime is now pinned to version 4.10.0
2026-01-27 22:48.03 ---> using "3195f1cae4eb2899135326933414219ac5b4256ad4863150c1eb7dcc6920d920" from cache

/home/opam: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
                 (network host)
                 (shell  "opam reinstall mirage-runtime.4.10.0;\
                        \n        res=$?;\
                        \n        test \"$res\" != 31 && exit \"$res\";\
                        \n        export OPAMCLI=2.0;\
                        \n        build_dir=$(opam var prefix)/.opam-switch/build;\
                        \n        failed=$(ls \"$build_dir\");\
                        \n        partial_fails=\"\";\
                        \n        for pkg in $failed; do\
                        \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
                        \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
                        \n          fi;\
                        \n          test \"$pkg\" != 'mirage-runtime.4.10.0' && partial_fails=\"$partial_fails $pkg\";\
                        \n        done;\
                        \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
                        \n        exit 1"))
mirage-runtime.4.10.0 is not installed. Install it? [Y/n] y
The following actions will be performed:
=== install 16 packages
  - install base-bytes        base            [required by ocplib-endian]
  - install cmdliner          2.1.0           [required by mirage-runtime]
  - install cppo              1.8.0           [required by lwt]
  - install csexp             1.5.2           [required by dune-configurator]
  - install domain-name       0.5.0           [required by ipaddr]
  - install dune              3.21.0          [required by mirage-runtime]
  - install dune-configurator 3.21.0          [required by lwt]
  - install ipaddr            5.6.1           [required by mirage-runtime]
  - install logs              0.10.0          [required by mirage-runtime]
  - install lwt               5.9.2           [required by mirage-runtime]
  - install macaddr           5.6.1           [required by ipaddr]
  - install mirage-runtime    4.10.0 (pinned)
  - install ocamlbuild        0.16.1          [required by logs]
  - install ocamlfind         1.9.8           [required by logs]
  - install ocplib-endian     1.2             [required by lwt]
  - install topkg             1.1.1           [required by logs]

<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
-> retrieved cmdliner.2.1.0  (cached)
-> retrieved cppo.1.8.0  (cached)
-> retrieved csexp.1.5.2  (cached)
-> retrieved domain-name.0.5.0  (cached)
-> retrieved dune.3.21.0, dune-configurator.3.21.0  (cached)
-> retrieved ipaddr.5.6.1, macaddr.5.6.1  (cached)
-> retrieved logs.0.10.0  (cached)
-> retrieved lwt.5.9.2  (cached)
-> retrieved mirage-runtime.4.10.0  (cached)
-> installed cmdliner.2.1.0
-> retrieved ocamlbuild.0.16.1  (cached)
-> retrieved ocamlfind.1.9.8  (cached)
-> retrieved ocplib-endian.1.2  (cached)
-> retrieved topkg.1.1.1  (cached)
-> installed ocamlfind.1.9.8
-> installed base-bytes.base
-> installed ocamlbuild.0.16.1
-> installed topkg.1.1.1
-> installed dune.3.21.0
-> installed domain-name.0.5.0
-> installed csexp.1.5.2
-> installed cppo.1.8.0
-> installed macaddr.5.6.1
-> installed ocplib-endian.1.2
-> installed ipaddr.5.6.1
-> installed dune-configurator.3.21.0
-> installed lwt.5.9.2
-> installed logs.0.10.0
-> installed mirage-runtime.4.10.0
Done.
# To update the current shell environment, run: eval $(opam env)
2026-01-27 22:48.03 ---> using "fb7d9011e1a8f60a66df5f2fc9b25e802ca858ddbbb85afd3b1d92af796a681f" from cache

/home/opam: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
                 (network host)
                 (shell  "opam reinstall letsencrypt-app.0.5.1;\
                        \n        res=$?;\
                        \n        test \"$res\" != 31 && exit \"$res\";\
                        \n        export OPAMCLI=2.0;\
                        \n        build_dir=$(opam var prefix)/.opam-switch/build;\
                        \n        failed=$(ls \"$build_dir\");\
                        \n        partial_fails=\"\";\
                        \n        for pkg in $failed; do\
                        \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
                        \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
                        \n          fi;\
                        \n          test \"$pkg\" != 'letsencrypt-app.0.5.1' && partial_fails=\"$partial_fails $pkg\";\
                        \n        done;\
                        \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
                        \n        exit 1"))
letsencrypt-app.0.5.1 is not installed. Install it? [Y/n] y
The following actions will be performed:
=== recompile 2 packages
  - recompile logs                0.10.0          [uses fmt]
  - recompile mirage-runtime      4.10.0 (pinned) [uses logs]
=== install 57 packages
  - install   angstrom            0.16.1          [required by uri]
  - install   asn1-combinators    0.2.6           [required by x509]
  - install   astring             0.8.5           [required by bos]
  - install   base                v0.16.4         [required by ppx_sexp_conv]
  - install   base64              3.5.2           [required by letsencrypt]
  - install   bigstringaf         0.10.0          [required by angstrom]
  - install   bos                 0.2.1           [required by letsencrypt-app]
  - install   ca-certs            0.2.3           [required by conduit-lwt-unix]
  - install   cohttp              6.2.1           [required by cohttp-lwt-unix]
  - install   cohttp-lwt          6.2.1           [required by cohttp-lwt-unix]
  - install   cohttp-lwt-unix     6.2.1           [required by letsencrypt-app]
  - install   conduit             8.0.0           [required by conduit-lwt]
  - install   conduit-lwt         8.0.0           [required by cohttp-lwt-unix]
  - install   conduit-lwt-unix    8.0.0           [required by cohttp-lwt-unix]
  - install   conf-gmp            5               [required by zarith, conf-gmp-powm-sec]
  - install   conf-gmp-powm-sec   4               [required by mirage-crypto-pk]
  - install   conf-pkg-config     4               [required by zarith]
  - install   cstruct             6.2.0           [required by letsencrypt-app]
  - install   dns                 8.0.0           [required by letsencrypt-dns]
  - install   dns-tsig            8.0.0           [required by letsencrypt-dns]
  - install   duration            0.2.1           [required by dns]
  - install   eqaf                0.9             [required by mirage-crypto]
  - install   fmt                 0.11.0          [required by letsencrypt-app]
  - install   fpath               0.7.3           [required by letsencrypt-app]
  - install   gmap                0.3.0           [required by dns]
  - install   http                6.2.1           [required by cohttp-lwt-unix]
  - install   ipaddr-sexp         5.6.1           [required by conduit-lwt-unix]
  - install   letsencrypt         0.5.1           [required by letsencrypt-app]
  - install   letsencrypt-app     0.5.1
  - install   letsencrypt-dns     0.5.1           [required by letsencrypt-app]
  - install   lru                 0.3.1           [required by dns]
  - install   magic-mime          1.3.1           [required by cohttp-lwt-unix]
  - install   metrics             0.5.0           [required by dns]
  - install   mirage-crypto       0.11.3          [required by letsencrypt]
  - install   mirage-crypto-ec    0.11.3          [required by letsencrypt]
  - install   mirage-crypto-pk    0.11.3          [required by letsencrypt]
  - install   mirage-crypto-rng   0.11.3          [required by letsencrypt-app]
  - install   ocaml-compiler-libs v0.12.4         [required by ppxlib]
  - install   ocaml-syntax-shims  1.0.0           [required by angstrom]
  - install   pbkdf               1.2.0           [required by x509]
  - install   ppx_derivers        1.2.1           [required by ppxlib]
  - install   ppx_sexp_conv       v0.16.0         [required by cohttp-lwt-unix]
  - install   ppxlib              0.35.0          [required by ppx_sexp_conv]
  - install   psq                 0.2.1           [required by lru]
  - install   ptime               1.2.0           [required by letsencrypt-app]
  - install   randomconv          0.1.3           [required by letsencrypt-app]
  - install   re                  1.14.0          [required by cohttp]
  - install   rresult             0.7.0           [required by bos]
  - install   seq                 base            [required by psq]
  - install   sexplib0            v0.16.0         [required by cohttp-lwt, cohttp, conduit-lwt]
  - install   stdlib-shims        0.3.0           [required by ppxlib]
  - install   stringext           1.6.0           [required by cohttp]
  - install   uri                 4.4.0           [required by letsencrypt]
  - install   uri-sexp            4.4.0           [required by cohttp]
  - install   x509                0.16.5          [required by letsencrypt]
  - install   yojson              3.0.0           [required by letsencrypt]
  - install   zarith              1.14            [required by asn1-combinators, mirage-crypto-pk]

The following system packages will first need to be installed:
    libgmp-dev pkg-config

<><> Handling external dependencies <><><><><><><><><><><><><><><><><><><><><><>

opam believes some required external dependencies are missing. opam can:
> 1. Run apt-get to install them (may need root/sudo access)
  2. Display the recommended apt-get command and wait while you run it manually (e.g. in another terminal)
  3. Continue anyway, and, upon success, permanently register that this external dependency is present, but not detectable
  4. Abort the installation

[1/2/3/4] 1

+ /usr/bin/sudo "apt-get" "install" "-qq" "-yy" "libgmp-dev" "pkg-config"
- Selecting previously unselected package libgmpxx4ldbl:amd64.
- (Reading database ... 
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 20623 files and directories currently installed.)
- Preparing to unpack .../0-libgmpxx4ldbl_2%3a6.3.0+dfsg-3_amd64.deb ...
- Unpacking libgmpxx4ldbl:amd64 (2:6.3.0+dfsg-3) ...
- Selecting previously unselected package libgmp-dev:amd64.
- Preparing to unpack .../1-libgmp-dev_2%3a6.3.0+dfsg-3_amd64.deb ...
- Unpacking libgmp-dev:amd64 (2:6.3.0+dfsg-3) ...
- Selecting previously unselected package libpkgconf3:amd64.
- Preparing to unpack .../2-libpkgconf3_1.8.1-4_amd64.deb ...
- Unpacking libpkgconf3:amd64 (1.8.1-4) ...
- Selecting previously unselected package pkgconf-bin.
- Preparing to unpack .../3-pkgconf-bin_1.8.1-4_amd64.deb ...
- Unpacking pkgconf-bin (1.8.1-4) ...
- Selecting previously unselected package pkgconf:amd64.
- Preparing to unpack .../4-pkgconf_1.8.1-4_amd64.deb ...
- Unpacking pkgconf:amd64 (1.8.1-4) ...
- Selecting previously unselected package pkg-config:amd64.
- Preparing to unpack .../5-pkg-config_1.8.1-4_amd64.deb ...
- Unpacking pkg-config:amd64 (1.8.1-4) ...
- Setting up libpkgconf3:amd64 (1.8.1-4) ...
- Setting up libgmpxx4ldbl:amd64 (2:6.3.0+dfsg-3) ...
- Setting up pkgconf-bin (1.8.1-4) ...
- Setting up libgmp-dev:amd64 (2:6.3.0+dfsg-3) ...
- Setting up pkgconf:amd64 (1.8.1-4) ...
- Setting up pkg-config:amd64 (1.8.1-4) ...
- Processing triggers for libc-bin (2.41-12+deb13u1) ...

<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
-> retrieved angstrom.0.16.1  (cached)
-> retrieved asn1-combinators.0.2.6  (cached)
-> retrieved astring.0.8.5  (cached)
-> retrieved base.v0.16.4  (cached)
-> retrieved base64.3.5.2  (cached)
-> retrieved bigstringaf.0.10.0  (cached)
-> retrieved bos.0.2.1  (cached)
-> retrieved ca-certs.0.2.3  (cached)
-> retrieved cohttp.6.2.1, cohttp-lwt.6.2.1, cohttp-lwt-unix.6.2.1, http.6.2.1  (cached)
-> installed base64.3.5.2
-> retrieved conduit.8.0.0, conduit-lwt.8.0.0, conduit-lwt-unix.8.0.0  (cached)
-> retrieved conf-gmp.5  (cached)
-> retrieved conf-gmp-powm-sec.4  (cached)
-> retrieved cstruct.6.2.0  (cached)
-> installed conf-pkg-config.4
-> installed conf-gmp.5
-> retrieved dns.8.0.0, dns-tsig.8.0.0  (cached)
-> installed bigstringaf.0.10.0
-> installed conf-gmp-powm-sec.4
-> retrieved duration.0.2.1  (cached)
-> retrieved eqaf.0.9  (cached)
-> retrieved fmt.0.11.0  (cached)
-> retrieved fpath.0.7.3  (cached)
-> retrieved gmap.0.3.0  (cached)
-> retrieved ipaddr-sexp.5.6.1  (cached)
-> retrieved letsencrypt.0.5.1, letsencrypt-app.0.5.1, letsencrypt-dns.0.5.1  (cached)
-> installed http.6.2.1
-> retrieved logs.0.10.0  (cached)
-> retrieved lru.0.3.1  (cached)
-> retrieved magic-mime.1.3.1  (cached)
-> retrieved metrics.0.5.0  (cached)
-> installed duration.0.2.1
-> installed gmap.0.3.0
-> retrieved mirage-crypto.0.11.3, mirage-crypto-ec.0.11.3, mirage-crypto-pk.0.11.3, mirage-crypto-rng.0.11.3  (cached)
-> installed astring.0.8.5
-> retrieved ocaml-compiler-libs.v0.12.4  (cached)
-> retrieved ocaml-syntax-shims.1.0.0  (cached)
-> installed magic-mime.1.3.1
-> retrieved pbkdf.1.2.0  (cached)
-> retrieved ppx_derivers.1.2.1  (cached)
-> retrieved ppx_sexp_conv.v0.16.0  (cached)
-> retrieved ppxlib.0.35.0  (cached)
-> removed   mirage-runtime.4.10.0
-> removed   logs.0.10.0
-> installed fmt.0.11.0
-> installed ppx_derivers.1.2.1
-> retrieved psq.0.2.1  (cached)
-> retrieved ptime.1.2.0  (cached)
-> retrieved randomconv.0.1.3  (cached)
-> retrieved re.1.14.0  (cached)
-> retrieved rresult.0.7.0  (cached)
-> retrieved seq.base  (cached)
-> installed seq.base
-> retrieved sexplib0.v0.16.0  (cached)
-> retrieved stdlib-shims.0.3.0  (cached)
-> retrieved stringext.1.6.0  (cached)
-> retrieved uri.4.4.0, uri-sexp.4.4.0  (cached)
-> retrieved x509.0.16.5  (cached)
-> retrieved yojson.3.0.0  (cached)
-> installed fpath.0.7.3
-> installed cstruct.6.2.0
-> installed metrics.0.5.0
-> installed psq.0.2.1
-> installed stdlib-shims.0.3.0
-> installed stringext.1.6.0
-> retrieved zarith.1.14  (cached)
-> installed rresult.0.7.0
-> installed ocaml-syntax-shims.1.0.0
-> installed ocaml-compiler-libs.v0.12.4
-> installed sexplib0.v0.16.0
-> installed randomconv.0.1.3
-> installed lru.0.3.1
-> installed eqaf.0.9
-> installed re.1.14.0
-> installed logs.0.10.0
-> installed ptime.1.2.0
-> installed angstrom.0.16.1
-> installed yojson.3.0.0
-> installed mirage-runtime.4.10.0
-> installed dns.8.0.0
-> installed mirage-crypto.0.11.3
-> installed uri.4.4.0
-> installed dns-tsig.8.0.0
-> installed pbkdf.1.2.0
-> installed zarith.1.14
-> installed bos.0.2.1
-> installed mirage-crypto-rng.0.11.3
-> installed base.v0.16.4
-> installed asn1-combinators.0.2.6
-> installed mirage-crypto-pk.0.11.3
-> installed mirage-crypto-ec.0.11.3
-> installed x509.0.16.5
-> installed ca-certs.0.2.3
-> installed letsencrypt.0.5.1
-> installed letsencrypt-dns.0.5.1
-> installed ppxlib.0.35.0
-> installed ppx_sexp_conv.v0.16.0
-> installed ipaddr-sexp.5.6.1
-> installed uri-sexp.4.4.0
-> installed conduit.8.0.0
-> installed cohttp.6.2.1
-> installed conduit-lwt.8.0.0
-> installed cohttp-lwt.6.2.1
-> installed conduit-lwt-unix.8.0.0
-> installed cohttp-lwt-unix.6.2.1
-> installed letsencrypt-app.0.5.1
Done.
# To update the current shell environment, run: eval $(opam env)
2026-01-27 22:48.32 ---> saved as "a3407eba888f22e32be55667a0354e29886789f10186ba892ee4670f8393eb9a"

/home/opam: (run (network host)
                 (shell "(opam reinstall --with-test letsencrypt-app.0.5.1) || true"))
The following actions will be performed:
=== remove 1 package
  - remove    mirage-runtime    4.10.0 (pinned) [conflicts with lwt]
=== recompile 18 packages
  - recompile bos               0.2.1           [uses logs]
  - recompile ca-certs          0.2.3           [uses logs]
  - recompile cohttp            6.2.1           [uses logs]
  - recompile cohttp-lwt        6.2.1           [uses lwt]
  - recompile cohttp-lwt-unix   6.2.1           [uses lwt]
  - recompile conduit           8.0.0           [uses logs]
  - recompile conduit-lwt       8.0.0           [uses lwt]
  - recompile conduit-lwt-unix  8.0.0           [uses lwt]
  - recompile dns               8.0.0           [uses logs]
  - recompile dns-tsig          8.0.0           [uses dns]
  - recompile letsencrypt       0.5.1           [uses lwt]
  - recompile letsencrypt-app   0.5.1
  - recompile letsencrypt-dns   0.5.1           [uses lwt]
  - recompile logs              0.10.0          [uses lwt]
  - recompile mirage-crypto-ec  0.11.3          [uses mirage-crypto-rng]
  - recompile mirage-crypto-pk  0.11.3          [uses mirage-crypto-rng]
  - recompile mirage-crypto-rng 0.11.3          [uses logs]
  - recompile x509              0.16.5          [uses logs]
=== upgrade 1 package
  - upgrade   lwt               5.9.2 to 6.0.0  [required by letsencrypt-app]

<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
-> removed   mirage-runtime.4.10.0
-> retrieved bos.0.2.1  (https://opam.ocaml.org/cache)
-> retrieved ca-certs.0.2.3  (https://opam.ocaml.org/cache)
-> retrieved cohttp.6.2.1, cohttp-lwt.6.2.1, cohttp-lwt-unix.6.2.1  (https://opam.ocaml.org/cache)
-> retrieved conduit.8.0.0, conduit-lwt.8.0.0, conduit-lwt-unix.8.0.0  (https://opam.ocaml.org/cache)
-> retrieved dns.8.0.0, dns-tsig.8.0.0  (https://opam.ocaml.org/cache)
-> retrieved letsencrypt.0.5.1, letsencrypt-app.0.5.1, letsencrypt-dns.0.5.1  (https://opam.ocaml.org/cache)
-> retrieved logs.0.10.0  (https://opam.ocaml.org/cache)
-> retrieved lwt.6.0.0  (https://opam.ocaml.org/cache)
-> retrieved mirage-crypto-ec.0.11.3, mirage-crypto-pk.0.11.3, mirage-crypto-rng.0.11.3  (https://opam.ocaml.org/cache)
-> retrieved x509.0.16.5  (https://opam.ocaml.org/cache)
-> removed   letsencrypt-app.0.5.1
-> removed   cohttp-lwt-unix.6.2.1
-> removed   cohttp-lwt.6.2.1
-> removed   cohttp.6.2.1
-> removed   conduit-lwt-unix.8.0.0
-> removed   ca-certs.0.2.3
-> removed   bos.0.2.1
-> removed   conduit-lwt.8.0.0
-> removed   conduit.8.0.0
-> removed   letsencrypt-dns.0.5.1
-> removed   dns-tsig.8.0.0
-> removed   dns.8.0.0
-> removed   letsencrypt.0.5.1
-> removed   x509.0.16.5
-> removed   mirage-crypto-ec.0.11.3
-> removed   mirage-crypto-pk.0.11.3
-> removed   mirage-crypto-rng.0.11.3
-> removed   logs.0.10.0
-> removed   lwt.5.9.2
-> installed lwt.6.0.0
-> installed logs.0.10.0
-> installed mirage-crypto-rng.0.11.3
-> installed mirage-crypto-pk.0.11.3
-> installed dns.8.0.0
-> installed conduit.8.0.0
-> installed dns-tsig.8.0.0
-> installed cohttp.6.2.1
-> installed bos.0.2.1
-> installed conduit-lwt.8.0.0
-> installed cohttp-lwt.6.2.1
-> installed mirage-crypto-ec.0.11.3
-> installed x509.0.16.5
-> installed ca-certs.0.2.3
-> installed letsencrypt.0.5.1
-> installed letsencrypt-dns.0.5.1
-> installed conduit-lwt-unix.8.0.0
-> installed cohttp-lwt-unix.6.2.1
-> installed letsencrypt-app.0.5.1
Done.
# To update the current shell environment, run: eval $(opam env)
2026-01-27 22:48.50 ---> saved as "1fe49f034489f3795d6d609f17fc5d9f8248d90560a8efe1c5ba5061786eecc0"

/home/opam: (run (shell  "opam reinstall --with-test --verbose letsencrypt-app.0.5.1;\
                        \n        res=$?;\
                        \n        test \"$res\" != 31 && exit \"$res\";\
                        \n        export OPAMCLI=2.0;\
                        \n        build_dir=$(opam var prefix)/.opam-switch/build;\
                        \n        failed=$(ls \"$build_dir\");\
                        \n        partial_fails=\"\";\
                        \n        for pkg in $failed; do\
                        \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
                        \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
                        \n          fi;\
                        \n          test \"$pkg\" != 'letsencrypt-app.0.5.1' && partial_fails=\"$partial_fails $pkg\";\
                        \n        done;\
                        \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
                        \n        exit 1"))
The following actions will be performed:
=== recompile 1 package
  - recompile letsencrypt-app 0.5.1

<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
Processing  1/4: [letsencrypt-app.0.5.1: extract]
-> retrieved letsencrypt-app.0.5.1  (cached)
Processing  2/4: [letsencrypt-app: dune build]
+ /home/opam/.opam/opam-init/hooks/sandbox.sh "build" "dune" "build" "-p" "letsencrypt-app" "-j" "255" (CWD=/home/opam/.opam/4.14/.opam-switch/build/letsencrypt-app.0.5.1)
Processing  2/4: [letsencrypt-app: dune runtest]
+ /home/opam/.opam/opam-init/hooks/sandbox.sh "build" "dune" "runtest" "-p" "letsencrypt-app" "-j" "255" (CWD=/home/opam/.opam/4.14/.opam-switch/build/letsencrypt-app.0.5.1)
-> compiled  letsencrypt-app.0.5.1
-> removed   letsencrypt-app.0.5.1
-> installed letsencrypt-app.0.5.1
Done.
# To update the current shell environment, run: eval $(opam env)
2026-01-27 22:48.57 ---> saved as "72b06e47a82b11e5e768cb95667eaed53e2f412a85a3ee22e915592537eca5ec"
Job succeeded
2026-01-27 22:49.08: Job succeeded