Build:
  1. 0
2026-01-27 19:22.53: New job: test tls.0.14.1 with mirage-runtime.4.10.0, using opam dev
                              from https://github.com/ocaml/opam-repository.git#refs/pull/29297/head (bec96dd4b29b0e3eb148af9966895e70442e68e2)
                              on debian-13-ocaml-5.4/amd64

To reproduce locally:

cd $(mktemp -d)
git clone --recursive "https://github.com/ocaml/opam-repository.git" && cd "opam-repository" && git fetch origin "refs/pull/29297/head" && git reset --hard bec96dd4
git fetch origin master
git merge --no-edit 88150787b3c9df767fd8dadf5d416641f8ee58f8
cat > ../Dockerfile <<'END-OF-DOCKERFILE'
FROM ocaml/opam:debian-13-ocaml-5.4@sha256:7b75eb963f7d9195aa7a042832bacc96efd4ab4b0279914c2953f9f23ee6d1e6
USER 1000:1000
WORKDIR /home/opam
RUN sudo ln -f /usr/bin/opam-dev /usr/bin/opam
RUN opam init --reinit -ni
RUN opam option solver=builtin-0install && opam config report
ENV OPAMDOWNLOADJOBS="1"
ENV OPAMERRLOGLEN="0"
ENV OPAMPRECISETRACKING="1"
ENV CI="true"
ENV OPAM_REPO_CI="true"
RUN rm -rf opam-repository/
COPY --chown=1000:1000 . opam-repository/
RUN opam repository set-url --strict default opam-repository/
RUN opam update --depexts || true
RUN opam pin add -k version -yn mirage-runtime.4.10.0 4.10.0
RUN opam reinstall mirage-runtime.4.10.0; \
    res=$?; \
    test "$res" != 31 && exit "$res"; \
    export OPAMCLI=2.0; \
    build_dir=$(opam var prefix)/.opam-switch/build; \
    failed=$(ls "$build_dir"); \
    partial_fails=""; \
    for pkg in $failed; do \
    if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"debian-13\""; then \
    echo "A package failed and has been disabled for CI using the 'x-ci-accept-failures' field."; \
    fi; \
    test "$pkg" != 'mirage-runtime.4.10.0' && partial_fails="$partial_fails $pkg"; \
    done; \
    test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}"; \
    exit 1
RUN opam reinstall tls.0.14.1; \
    res=$?; \
    test "$res" != 31 && exit "$res"; \
    export OPAMCLI=2.0; \
    build_dir=$(opam var prefix)/.opam-switch/build; \
    failed=$(ls "$build_dir"); \
    partial_fails=""; \
    for pkg in $failed; do \
    if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"debian-13\""; then \
    echo "A package failed and has been disabled for CI using the 'x-ci-accept-failures' field."; \
    fi; \
    test "$pkg" != 'tls.0.14.1' && partial_fails="$partial_fails $pkg"; \
    done; \
    test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}"; \
    exit 1
RUN (opam reinstall --with-test tls.0.14.1) || true
RUN opam reinstall --with-test --verbose tls.0.14.1; \
    res=$?; \
    test "$res" != 31 && exit "$res"; \
    export OPAMCLI=2.0; \
    build_dir=$(opam var prefix)/.opam-switch/build; \
    failed=$(ls "$build_dir"); \
    partial_fails=""; \
    for pkg in $failed; do \
    if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"debian-13\""; then \
    echo "A package failed and has been disabled for CI using the 'x-ci-accept-failures' field."; \
    fi; \
    test "$pkg" != 'tls.0.14.1' && partial_fails="$partial_fails $pkg"; \
    done; \
    test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}"; \
    exit 1

END-OF-DOCKERFILE
docker build -f ../Dockerfile .

2026-01-27 19:22.53: Using cache hint "ocaml/opam:debian-13-ocaml-5.4@sha256:7b75eb963f7d9195aa7a042832bacc96efd4ab4b0279914c2953f9f23ee6d1e6-mirage-runtime.4.10.0-tls.0.14.1-bec96dd4b29b0e3eb148af9966895e70442e68e2"
2026-01-27 19:22.53: Using OBuilder spec:
((from ocaml/opam:debian-13-ocaml-5.4@sha256:7b75eb963f7d9195aa7a042832bacc96efd4ab4b0279914c2953f9f23ee6d1e6)
 (user (uid 1000) (gid 1000))
 (workdir /home/opam)
 (run (shell "sudo ln -f /usr/bin/opam-dev /usr/bin/opam"))
 (run (network host)
      (shell "opam init --reinit --config .opamrc-sandbox -ni"))
 (run (shell "opam option solver=builtin-0install && opam config report"))
 (env OPAMDOWNLOADJOBS 1)
 (env OPAMERRLOGLEN 0)
 (env OPAMPRECISETRACKING 1)
 (env CI true)
 (env OPAM_REPO_CI true)
 (run (shell "rm -rf opam-repository/"))
 (copy (src .) (dst opam-repository/))
 (run (shell "opam repository set-url --strict default opam-repository/"))
 (run (network host)
      (shell "opam update --depexts || true"))
 (run (shell "opam pin add -k version -yn mirage-runtime.4.10.0 4.10.0"))
 (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
      (network host)
      (shell  "opam reinstall mirage-runtime.4.10.0;\
             \n        res=$?;\
             \n        test \"$res\" != 31 && exit \"$res\";\
             \n        export OPAMCLI=2.0;\
             \n        build_dir=$(opam var prefix)/.opam-switch/build;\
             \n        failed=$(ls \"$build_dir\");\
             \n        partial_fails=\"\";\
             \n        for pkg in $failed; do\
             \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
             \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
             \n          fi;\
             \n          test \"$pkg\" != 'mirage-runtime.4.10.0' && partial_fails=\"$partial_fails $pkg\";\
             \n        done;\
             \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
             \n        exit 1"))
 (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
      (network host)
      (shell  "opam reinstall tls.0.14.1;\
             \n        res=$?;\
             \n        test \"$res\" != 31 && exit \"$res\";\
             \n        export OPAMCLI=2.0;\
             \n        build_dir=$(opam var prefix)/.opam-switch/build;\
             \n        failed=$(ls \"$build_dir\");\
             \n        partial_fails=\"\";\
             \n        for pkg in $failed; do\
             \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
             \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
             \n          fi;\
             \n          test \"$pkg\" != 'tls.0.14.1' && partial_fails=\"$partial_fails $pkg\";\
             \n        done;\
             \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
             \n        exit 1"))
 (run (network host)
      (shell "(opam reinstall --with-test tls.0.14.1) || true"))
 (run (shell  "opam reinstall --with-test --verbose tls.0.14.1;\
             \n        res=$?;\
             \n        test \"$res\" != 31 && exit \"$res\";\
             \n        export OPAMCLI=2.0;\
             \n        build_dir=$(opam var prefix)/.opam-switch/build;\
             \n        failed=$(ls \"$build_dir\");\
             \n        partial_fails=\"\";\
             \n        for pkg in $failed; do\
             \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
             \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
             \n          fi;\
             \n          test \"$pkg\" != 'tls.0.14.1' && partial_fails=\"$partial_fails $pkg\";\
             \n        done;\
             \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
             \n        exit 1"))
)

2026-01-27 19:22.53: Waiting for resource in pool OCluster
2026-01-27 22:55.35: Waiting for worker…
2026-01-27 22:58.13: Got resource from pool OCluster
Building on laodoke.caelum.ci.dev
All commits already cached
HEAD is now at 88150787b3 Merge pull request #29287 from dinosaure/release-git-kv-v0.2.1
Merge made by the 'ort' strategy.
 packages/mirage-runtime/mirage-runtime.4.0.0/opam       | 2 +-
 packages/mirage-runtime/mirage-runtime.4.0.0~beta3/opam | 2 +-
 packages/mirage-runtime/mirage-runtime.4.10.0/opam      | 2 +-
 packages/mirage-runtime/mirage-runtime.4.10.1/opam      | 2 +-
 packages/mirage-runtime/mirage-runtime.4.10.2/opam      | 2 +-
 packages/mirage-runtime/mirage-runtime.4.10.3/opam      | 2 +-
 packages/mirage-runtime/mirage-runtime.4.10.4/opam      | 2 +-
 packages/mirage-runtime/mirage-runtime.4.7.0/opam       | 2 +-
 packages/mirage-runtime/mirage-runtime.4.9.0/opam       | 2 +-
 9 files changed, 9 insertions(+), 9 deletions(-)

(from ocaml/opam:debian-13-ocaml-5.4@sha256:7b75eb963f7d9195aa7a042832bacc96efd4ab4b0279914c2953f9f23ee6d1e6)
2026-01-27 22:58.20 ---> using "ec0b9239d97b1eba002b8666d90bcda143b1414915128d32a0b6cb8a1bd9f05c" from cache

/: (user (uid 1000) (gid 1000))

/: (workdir /home/opam)

/home/opam: (run (shell "sudo ln -f /usr/bin/opam-dev /usr/bin/opam"))
2026-01-27 22:58.20 ---> using "cd9db1bfd75ad168f36443d6cd7ffe58df2d9e73878dee80fe00f4ec900a65e4" from cache

/home/opam: (run (network host)
                 (shell "opam init --reinit --config .opamrc-sandbox -ni"))
Configuring from /home/opam/.opamrc-sandbox, then /home/opam/.opamrc, and finally from built-in defaults.
Checking for available remotes: rsync and local, git.
  - you won't be able to use mercurial repositories unless you install the hg command on your system.
  - you won't be able to use darcs repositories unless you install the darcs command on your system.

This version of opam requires an update to the layout of /home/opam/.opam from version 2.0 to version 2.2, which can't be reverted.
You may want to back it up before going further.

Continue? [Y/n] y
Format upgrade done.

<><> Updating repositories ><><><><><><><><><><><><><><><><><><><><><><><><><><>
[default] Initialised
2026-01-27 22:58.37 ---> saved as "cbe59c2111ee2f6ebb74444b6a2e449be1401fb2a7e89471df12d7734c31aef0"

/home/opam: (run (shell "opam option solver=builtin-0install && opam config report"))
Set to 'builtin-0install' the field solver in global configuration
# opam config report
# opam-version         2.5.0
# self-upgrade         no
# system               arch=x86_64 os=linux os-distribution=debian os-version=13
# solver               builtin-0install
# install-criteria     -changed,-count[avoid-version,solution]
# upgrade-criteria     -count[avoid-version,solution]
# jobs                 71
# repositories         1 (version-controlled)
# pinned               1 (version)
# current-switch       5.4
# invariant            ["ocaml-base-compiler" {>= "5.4.0"}]
# compiler-packages    ocaml-base-compiler.5.4.0, ocaml-compiler.5.4.0, ocaml-options-vanilla.1
# ocaml:native         true
# ocaml:native-tools   true
# ocaml:native-dynlink true
# ocaml:stubsdir       /home/opam/.opam/5.4/lib/ocaml/stublibs:/home/opam/.opam/5.4/lib/ocaml
# ocaml:preinstalled   false
# ocaml:compiler       5.4.0
2026-01-27 22:58.37 ---> saved as "bfb3fee637cd4ed2c6e4ef53b349cc70b7b5c70d4fb4d56c09378a42134b6bf5"

/home/opam: (env OPAMDOWNLOADJOBS 1)

/home/opam: (env OPAMERRLOGLEN 0)

/home/opam: (env OPAMPRECISETRACKING 1)

/home/opam: (env CI true)

/home/opam: (env OPAM_REPO_CI true)

/home/opam: (run (shell "rm -rf opam-repository/"))
2026-01-27 22:59.05 ---> saved as "a80806ab1cec707e8afb5a047be43e19f2c71735f9ef12880c11228115befadd"

/home/opam: (copy (src .) (dst opam-repository/))
2026-01-27 22:59.23 ---> saved as "29f6e5bc90fed1f3ca0dbfa7880bf07b07ed9305f0af011f54a2924d95990898"

/home/opam: (run (shell "opam repository set-url --strict default opam-repository/"))
[default] Initialised
2026-01-27 22:59.39 ---> saved as "0859ca9de64aae35bcc4a34df9c8711b7e38cf8dc80a303c3ac16dd388a11c6c"

/home/opam: (run (network host)
                 (shell "opam update --depexts || true"))
+ /usr/bin/sudo "apt-get" "update"
- Hit:1 http://deb.debian.org/debian trixie InRelease
- Get:2 http://deb.debian.org/debian trixie-updates InRelease [47.3 kB]
- Get:3 http://deb.debian.org/debian-security trixie-security InRelease [43.4 kB]
- Get:4 http://deb.debian.org/debian-security trixie-security/main amd64 Packages [97.9 kB]
- Fetched 189 kB in 0s (1759 kB/s)
- Reading package lists...
2026-01-27 22:59.40 ---> saved as "259e4b9b0f8fe427b0b1d267335e5f38c5e7f40c70220e295abceff1731dbbb3"

/home/opam: (run (shell "opam pin add -k version -yn mirage-runtime.4.10.0 4.10.0"))
mirage-runtime is now pinned to version 4.10.0
2026-01-27 22:59.40 ---> saved as "aed6a1482fca3e735b9adece1f2cfff7435e6840f730c84ededaf7b9d1d1b933"

/home/opam: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
                 (network host)
                 (shell  "opam reinstall mirage-runtime.4.10.0;\
                        \n        res=$?;\
                        \n        test \"$res\" != 31 && exit \"$res\";\
                        \n        export OPAMCLI=2.0;\
                        \n        build_dir=$(opam var prefix)/.opam-switch/build;\
                        \n        failed=$(ls \"$build_dir\");\
                        \n        partial_fails=\"\";\
                        \n        for pkg in $failed; do\
                        \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
                        \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
                        \n          fi;\
                        \n          test \"$pkg\" != 'mirage-runtime.4.10.0' && partial_fails=\"$partial_fails $pkg\";\
                        \n        done;\
                        \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
                        \n        exit 1"))
mirage-runtime.4.10.0 is not installed. Install it? [Y/n] y
The following actions will be performed:
=== install 16 packages
  - install base-bytes        base            [required by ocplib-endian]
  - install cmdliner          2.1.0           [required by mirage-runtime]
  - install cppo              1.8.0           [required by lwt]
  - install csexp             1.5.2           [required by dune-configurator]
  - install domain-name       0.5.0           [required by ipaddr]
  - install dune              3.21.0          [required by mirage-runtime]
  - install dune-configurator 3.21.0          [required by lwt]
  - install ipaddr            5.6.1           [required by mirage-runtime]
  - install logs              0.10.0          [required by mirage-runtime]
  - install lwt               5.9.2           [required by mirage-runtime]
  - install macaddr           5.6.1           [required by ipaddr]
  - install mirage-runtime    4.10.0 (pinned)
  - install ocamlbuild        0.16.1          [required by logs]
  - install ocamlfind         1.9.8           [required by logs]
  - install ocplib-endian     1.2             [required by lwt]
  - install topkg             1.1.1           [required by logs]

<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
-> retrieved cmdliner.2.1.0  (cached)
-> retrieved cppo.1.8.0  (cached)
-> retrieved csexp.1.5.2  (cached)
-> retrieved domain-name.0.5.0  (cached)
-> retrieved dune.3.21.0, dune-configurator.3.21.0  (cached)
-> retrieved ipaddr.5.6.1, macaddr.5.6.1  (cached)
-> retrieved logs.0.10.0  (cached)
-> retrieved lwt.5.9.2  (cached)
-> retrieved mirage-runtime.4.10.0  (cached)
-> installed cmdliner.2.1.0
-> retrieved ocamlbuild.0.16.1  (cached)
-> retrieved ocamlfind.1.9.8  (cached)
-> retrieved ocplib-endian.1.2  (cached)
-> retrieved topkg.1.1.1  (cached)
-> installed ocamlfind.1.9.8
-> installed base-bytes.base
-> installed ocamlbuild.0.16.1
-> installed topkg.1.1.1
-> installed dune.3.21.0
-> installed csexp.1.5.2
-> installed cppo.1.8.0
-> installed domain-name.0.5.0
-> installed macaddr.5.6.1
-> installed ocplib-endian.1.2
-> installed ipaddr.5.6.1
-> installed dune-configurator.3.21.0
-> installed lwt.5.9.2
-> installed logs.0.10.0
-> installed mirage-runtime.4.10.0
Done.
# To update the current shell environment, run: eval $(opam env)
2026-01-27 23:00.20 ---> saved as "e77645fc0944aa05778f87442ea7da505c8cb36f1a6668a8fe351d538e53875e"

/home/opam: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
                 (network host)
                 (shell  "opam reinstall tls.0.14.1;\
                        \n        res=$?;\
                        \n        test \"$res\" != 31 && exit \"$res\";\
                        \n        export OPAMCLI=2.0;\
                        \n        build_dir=$(opam var prefix)/.opam-switch/build;\
                        \n        failed=$(ls \"$build_dir\");\
                        \n        partial_fails=\"\";\
                        \n        for pkg in $failed; do\
                        \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
                        \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
                        \n          fi;\
                        \n          test \"$pkg\" != 'tls.0.14.1' && partial_fails=\"$partial_fails $pkg\";\
                        \n        done;\
                        \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
                        \n        exit 1"))
tls.0.14.1 is not installed. Install it? [Y/n] y
The following actions will be performed:
=== recompile 2 packages
  - recompile logs                    0.10.0             [uses fmt]
  - recompile mirage-runtime          4.10.0 (pinned)    [uses logs]
=== install 38 packages
  - install   asn1-combinators        0.2.6              [required by x509]
  - install   base                    v0.17.3            [required by ppx_sexp_conv]
  - install   base64                  3.5.2              [required by x509]
  - install   conf-gmp                5                  [required by conf-gmp-powm-sec, zarith]
  - install   conf-gmp-powm-sec       4                  [required by mirage-crypto-pk]
  - install   conf-pkg-config         4                  [required by mirage-crypto-ec]
  - install   cstruct                 6.2.0              [required by tls]
  - install   cstruct-sexp            6.2.0              [required by tls]
  - install   duration                0.2.1              [required by mirage-crypto-rng]
  - install   eqaf                    0.9                [required by mirage-crypto-ec, mirage-crypto-pk]
  - install   fmt                     0.11.0             [required by tls]
  - install   gmap                    0.3.0              [required by x509]
  - install   hkdf                    1.0.4 (deprecated) [required by tls]
  - install   mirage-crypto           0.10.7             [required by tls]
  - install   mirage-crypto-ec        0.10.7             [required by tls]
  - install   mirage-crypto-pk        0.10.7             [required by tls]
  - install   mirage-crypto-rng       0.10.7             [required by tls]
  - install   mirage-no-solo5         1 (deprecated)     [required by mirage-crypto-pk]
  - install   mirage-no-xen           1 (deprecated)     [required by mirage-crypto-pk]
  - install   mtime                   2.1.0              [required by mirage-crypto-rng]
  - install   num                     1.6                [required by sexplib]
  - install   ocaml-compiler-libs     v0.17.0            [required by ppxlib]
  - install   ocaml_intrinsics_kernel v0.17.1            [required by base]
  - install   parsexp                 v0.17.0            [required by sexplib]
  - install   pbkdf                   1.2.0              [required by x509]
  - install   ppx_cstruct             6.2.0              [required by tls]
  - install   ppx_derivers            1.2.1              [required by ppxlib]
  - install   ppx_sexp_conv           v0.17.1            [required by tls]
  - install   ppxlib                  0.37.0             [required by ppx_cstruct, ppx_sexp_conv]
  - install   ppxlib_jane             v0.17.4            [required by ppx_sexp_conv]
  - install   ptime                   1.2.0              [required by tls]
  - install   rresult                 0.7.0              [required by tls]
  - install   sexplib                 v0.17.0            [required by tls]
  - install   sexplib0                v0.17.0            [required by mirage-crypto-pk, ppx_sexp_conv]
  - install   stdlib-shims            0.3.0              [required by ppxlib]
  - install   tls                     0.14.1
  - install   x509                    0.14.1             [required by tls]
  - install   zarith                  1.14               [required by mirage-crypto-pk]

The following system packages will first need to be installed:
    libgmp-dev pkg-config

<><> Handling external dependencies <><><><><><><><><><><><><><><><><><><><><><>

opam believes some required external dependencies are missing. opam can:
> 1. Run apt-get to install them (may need root/sudo access)
  2. Display the recommended apt-get command and wait while you run it manually (e.g. in another terminal)
  3. Continue anyway, and, upon success, permanently register that this external dependency is present, but not detectable
  4. Abort the installation

[1/2/3/4] 1

+ /usr/bin/sudo "apt-get" "install" "-qq" "-yy" "libgmp-dev" "pkg-config"
- Selecting previously unselected package libgmpxx4ldbl:amd64.
- (Reading database ... 
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 20654 files and directories currently installed.)
- Preparing to unpack .../0-libgmpxx4ldbl_2%3a6.3.0+dfsg-3_amd64.deb ...
- Unpacking libgmpxx4ldbl:amd64 (2:6.3.0+dfsg-3) ...
- Selecting previously unselected package libgmp-dev:amd64.
- Preparing to unpack .../1-libgmp-dev_2%3a6.3.0+dfsg-3_amd64.deb ...
- Unpacking libgmp-dev:amd64 (2:6.3.0+dfsg-3) ...
- Selecting previously unselected package libpkgconf3:amd64.
- Preparing to unpack .../2-libpkgconf3_1.8.1-4_amd64.deb ...
- Unpacking libpkgconf3:amd64 (1.8.1-4) ...
- Selecting previously unselected package pkgconf-bin.
- Preparing to unpack .../3-pkgconf-bin_1.8.1-4_amd64.deb ...
- Unpacking pkgconf-bin (1.8.1-4) ...
- Selecting previously unselected package pkgconf:amd64.
- Preparing to unpack .../4-pkgconf_1.8.1-4_amd64.deb ...
- Unpacking pkgconf:amd64 (1.8.1-4) ...
- Selecting previously unselected package pkg-config:amd64.
- Preparing to unpack .../5-pkg-config_1.8.1-4_amd64.deb ...
- Unpacking pkg-config:amd64 (1.8.1-4) ...
- Setting up libpkgconf3:amd64 (1.8.1-4) ...
- Setting up libgmpxx4ldbl:amd64 (2:6.3.0+dfsg-3) ...
- Setting up pkgconf-bin (1.8.1-4) ...
- Setting up libgmp-dev:amd64 (2:6.3.0+dfsg-3) ...
- Setting up pkgconf:amd64 (1.8.1-4) ...
- Setting up pkg-config:amd64 (1.8.1-4) ...
- Processing triggers for libc-bin (2.41-12+deb13u1) ...

<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
-> retrieved asn1-combinators.0.2.6  (cached)
-> retrieved base.v0.17.3  (cached)
-> retrieved base64.3.5.2  (cached)
-> retrieved conf-gmp.5  (cached)
-> retrieved conf-gmp-powm-sec.4  (cached)
-> retrieved cstruct.6.2.0, cstruct-sexp.6.2.0, ppx_cstruct.6.2.0  (cached)
-> retrieved duration.0.2.1  (cached)
-> retrieved eqaf.0.9  (cached)
-> retrieved fmt.0.11.0  (cached)
-> retrieved gmap.0.3.0  (cached)
-> retrieved hkdf.1.0.4  (cached)
-> retrieved logs.0.10.0  (cached)
-> installed conf-gmp.5
-> installed base64.3.5.2
-> retrieved mirage-crypto.0.10.7, mirage-crypto-ec.0.10.7, mirage-crypto-pk.0.10.7, mirage-crypto-rng.0.10.7  (cached)
-> installed mirage-no-solo5.1
-> installed mirage-no-xen.1
-> installed duration.0.2.1
-> retrieved mtime.2.1.0  (cached)
-> retrieved num.1.6  (cached)
-> installed conf-pkg-config.4
-> retrieved ocaml-compiler-libs.v0.17.0  (cached)
-> retrieved ocaml_intrinsics_kernel.v0.17.1  (cached)
-> retrieved parsexp.v0.17.0  (cached)
-> installed gmap.0.3.0
-> retrieved pbkdf.1.2.0  (cached)
-> retrieved ppx_derivers.1.2.1  (cached)
-> retrieved ppx_sexp_conv.v0.17.1  (cached)
-> installed conf-gmp-powm-sec.4
-> retrieved ppxlib.0.37.0  (cached)
-> retrieved ppxlib_jane.v0.17.4  (cached)
-> retrieved ptime.1.2.0  (cached)
-> retrieved rresult.0.7.0  (cached)
-> retrieved sexplib.v0.17.0  (cached)
-> retrieved sexplib0.v0.17.0  (cached)
-> retrieved stdlib-shims.0.3.0  (cached)
-> retrieved tls.0.14.1  (cached)
-> retrieved x509.0.14.1  (cached)
-> retrieved zarith.1.14  (cached)
-> installed ocaml_intrinsics_kernel.v0.17.1
-> installed ppx_derivers.1.2.1
-> installed stdlib-shims.0.3.0
-> removed   mirage-runtime.4.10.0
-> removed   logs.0.10.0
-> installed fmt.0.11.0
-> installed mtime.2.1.0
-> installed sexplib0.v0.17.0
-> installed rresult.0.7.0
-> installed cstruct.6.2.0
-> installed ocaml-compiler-libs.v0.17.0
-> installed ptime.1.2.0
-> installed num.1.6
-> installed eqaf.0.9
-> installed logs.0.10.0
-> installed mirage-runtime.4.10.0
-> installed parsexp.v0.17.0
-> installed sexplib.v0.17.0
-> installed cstruct-sexp.6.2.0
-> installed mirage-crypto.0.10.7
-> installed hkdf.1.0.4
-> installed pbkdf.1.2.0
-> installed zarith.1.14
-> installed mirage-crypto-rng.0.10.7
-> installed mirage-crypto-pk.0.10.7
-> installed asn1-combinators.0.2.6
-> installed base.v0.17.3
-> installed mirage-crypto-ec.0.10.7
-> installed x509.0.14.1
-> installed ppxlib.0.37.0
-> installed ppxlib_jane.v0.17.4
-> installed ppx_cstruct.6.2.0
-> installed ppx_sexp_conv.v0.17.1
-> installed tls.0.14.1
Done.

<><> mirage-no-xen.1 installed successfully <><><><><><><><><><><><><><><><><><>
=> Note: This package is deprecated.

<><> mirage-no-solo5.1 installed successfully <><><><><><><><><><><><><><><><><>
=> Note: This package is deprecated.

<><> hkdf.1.0.4 installed successfully ><><><><><><><><><><><><><><><><><><><><>
=> Note: This package is deprecated.
# To update the current shell environment, run: eval $(opam env)
2026-01-27 23:02.35 ---> saved as "66867fa40080706c93abd00594b9a09cdb5ca3b9e21393a4abceb7d5b9251e4c"

/home/opam: (run (network host)
                 (shell "(opam reinstall --with-test tls.0.14.1) || true"))
The following actions will be performed:
=== remove 1 package
  - remove    mirage-runtime     4.10.0 (pinned) [conflicts with lwt]
=== recompile 6 packages
  - recompile logs               0.10.0          [uses lwt]
  - recompile mirage-crypto-ec   0.10.7          [uses mirage-crypto-rng]
  - recompile mirage-crypto-pk   0.10.7          [uses mirage-runtime]
  - recompile mirage-crypto-rng  0.10.7          [uses lwt]
  - recompile tls                0.14.1
  - recompile x509               0.14.1          [uses logs]
=== upgrade 1 package
  - upgrade   lwt                5.9.2 to 6.0.0  [required by tls]
=== install 9 packages
  - install   alcotest           1.9.1           [required by tls]
  - install   astring            0.8.5           [required by alcotest]
  - install   cstruct-unix       6.2.0           [required by tls]
  - install   ocaml-syntax-shims 1.0.0           [required by alcotest]
  - install   ounit2             2.2.7           [required by tls]
  - install   randomconv         0.1.3           [required by tls]
  - install   re                 1.14.0          [required by alcotest]
  - install   seq                base            [required by ounit2]
  - install   uutf               1.0.4           [required by alcotest]

<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
-> retrieved alcotest.1.9.1  (https://opam.ocaml.org/cache)
-> retrieved astring.0.8.5  (https://opam.ocaml.org/cache)
-> retrieved cstruct-unix.6.2.0  (https://opam.ocaml.org/cache)
-> retrieved logs.0.10.0  (https://opam.ocaml.org/cache)
-> retrieved lwt.6.0.0  (https://opam.ocaml.org/cache)
-> installed cstruct-unix.6.2.0
-> retrieved mirage-crypto-ec.0.10.7, mirage-crypto-pk.0.10.7, mirage-crypto-rng.0.10.7  (https://opam.ocaml.org/cache)
-> retrieved ocaml-syntax-shims.1.0.0  (https://opam.ocaml.org/cache)
-> retrieved ounit2.2.2.7  (https://opam.ocaml.org/cache)
-> retrieved randomconv.0.1.3  (https://opam.ocaml.org/cache)
-> retrieved re.1.14.0  (https://opam.ocaml.org/cache)
-> installed randomconv.0.1.3
-> retrieved seq.base  (2 extra sources)
-> retrieved seq.base  (2 extra sources)
-> installed seq.base
-> retrieved tls.0.14.1  (https://opam.ocaml.org/cache)
-> retrieved uutf.1.0.4  (https://opam.ocaml.org/cache)
-> retrieved x509.0.14.1  (https://opam.ocaml.org/cache)
-> installed astring.0.8.5
-> installed ocaml-syntax-shims.1.0.0
-> installed ounit2.2.2.7
-> installed uutf.1.0.4
-> installed re.1.14.0
-> removed   tls.0.14.1
-> removed   x509.0.14.1
-> removed   mirage-crypto-ec.0.10.7
-> removed   mirage-crypto-pk.0.10.7
-> removed   mirage-crypto-rng.0.10.7
-> removed   mirage-runtime.4.10.0
-> removed   logs.0.10.0
-> removed   lwt.5.9.2
-> installed lwt.6.0.0
-> installed alcotest.1.9.1
-> installed logs.0.10.0
-> installed mirage-crypto-rng.0.10.7
-> installed mirage-crypto-pk.0.10.7
-> installed mirage-crypto-ec.0.10.7
-> installed x509.0.14.1
-> installed tls.0.14.1
Done.
# To update the current shell environment, run: eval $(opam env)
2026-01-27 23:03.25 ---> saved as "963f2abbc49e49c6e7b4b0dbed5ef069f01e04b25ebe118ebb9c768821081f00"

/home/opam: (run (shell  "opam reinstall --with-test --verbose tls.0.14.1;\
                        \n        res=$?;\
                        \n        test \"$res\" != 31 && exit \"$res\";\
                        \n        export OPAMCLI=2.0;\
                        \n        build_dir=$(opam var prefix)/.opam-switch/build;\
                        \n        failed=$(ls \"$build_dir\");\
                        \n        partial_fails=\"\";\
                        \n        for pkg in $failed; do\
                        \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
                        \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
                        \n          fi;\
                        \n          test \"$pkg\" != 'tls.0.14.1' && partial_fails=\"$partial_fails $pkg\";\
                        \n        done;\
                        \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
                        \n        exit 1"))
The following actions will be performed:
=== recompile 1 package
  - recompile tls 0.14.1

<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
Processing  1/4: [tls.0.14.1: extract]
-> retrieved tls.0.14.1  (cached)
Processing  2/4: [tls: dune build]
+ /home/opam/.opam/opam-init/hooks/sandbox.sh "build" "dune" "build" "-p" "tls" "-j" "71" (CWD=/home/opam/.opam/5.4/.opam-switch/build/tls.0.14.1)
- (cd _build/default && /home/opam/.opam/5.4/bin/ocamlc.opt -w -40 -g -bin-annot -bin-annot-occurrences -I lib/.tls.objs/byte -I /home/opam/.opam/5.4/lib/asn1-combinators -I /home/opam/.opam/5.4/lib/base64 -I /home/opam/.opam/5.4/lib/cstruct -I /home/opam/.opam/5.4/lib/cstruct-sexp -I /home/opam/.opam/5.4/lib/domain-name -I /home/opam/.opam/5.4/lib/eqaf -I /home/opam/.opam/5.4/lib/eqaf/bigstring -I /home/opam/.opam/5.4/lib/eqaf/cstruct -I /home/opam/.opam/5.4/lib/fmt -I /home/opam/.opam/5.4/lib/gmap -I /home/opam/.opam/5.4/lib/hkdf -I /home/opam/.opam/5.4/lib/logs -I /home/opam/.opam/5.4/lib/mirage-crypto -I /home/opam/.opam/5.4/lib/mirage-crypto-ec -I /home/opam/.opam/5.4/lib/mirage-crypto-pk -I /home/opam/.opam/5.4/lib/mirage-crypto-rng -I /home/opam/.opam/5.4/lib/parsexp -I /home/opam/.opam/5.4/lib/pbkdf -I /home/opam/.opam/5.4/lib/ppx_sexp_conv/runtime-lib -I /home/opam/.opam/5.4/lib/ptime -I /home/opam/.opam/5.4/lib/rresult -I /home/opam/.opam/5.4/lib/sexplib -I /home/opam/.opam/5.4/lib/sexplib0 -I /home/opam/.opam/5.4/lib/x509 -I /home/opam/.opam/5.4/lib/zarith -cmi-file lib/.tls.objs/byte/tls__Reader.cmi -no-alias-deps -open Tls -o lib/.tls.objs/byte/tls__Reader.cmo -c -impl lib/reader.pp.ml)
- File "lib/reader.ml", line 185, characters 29-33:
- 185 |        | 0 -> let hostname = copy buf 3 entrylen in
-                                    ^^^^
- Alert deprecated: Cstruct.copy
- this is just like [to_string] without defaults, were you looking for [sub_copy]?
- (cd _build/default && /home/opam/.opam/5.4/bin/ocamlopt.opt -w -40 -g -I lib/.tls.objs/byte -I lib/.tls.objs/native -I /home/opam/.opam/5.4/lib/asn1-combinators -I /home/opam/.opam/5.4/lib/base64 -I /home/opam/.opam/5.4/lib/cstruct -I /home/opam/.opam/5.4/lib/cstruct-sexp -I /home/opam/.opam/5.4/lib/domain-name -I /home/opam/.opam/5.4/lib/eqaf -I /home/opam/.opam/5.4/lib/eqaf/bigstring -I /home/opam/.opam/5.4/lib/eqaf/cstruct -I /home/opam/.opam/5.4/lib/fmt -I /home/opam/.opam/5.4/lib/gmap -I /home/opam/.opam/5.4/lib/hkdf -I /home/opam/.opam/5.4/lib/logs -I /home/opam/.opam/5.4/lib/mirage-crypto -I /home/opam/.opam/5.4/lib/mirage-crypto-ec -I /home/opam/.opam/5.4/lib/mirage-crypto-pk -I /home/opam/.opam/5.4/lib/mirage-crypto-rng -I /home/opam/.opam/5.4/lib/parsexp -I /home/opam/.opam/5.4/lib/pbkdf -I /home/opam/.opam/5.4/lib/ppx_sexp_conv/runtime-lib -I /home/opam/.opam/5.4/lib/ptime -I /home/opam/.opam/5.4/lib/rresult -I /home/opam/.opam/5.4/lib/sexplib -I /home/opam/.opam/5.4/lib/sexplib0 -I /home/opam/.opam/5.4/lib/x509 -I /home/opam/.opam/5.4/lib/zarith -cmi-file lib/.tls.objs/byte/tls__Reader.cmi -no-alias-deps -open Tls -o lib/.tls.objs/native/tls__Reader.cmx -c -impl lib/reader.pp.ml)
- File "lib/reader.ml", line 185, characters 29-33:
- 185 |        | 0 -> let hostname = copy buf 3 entrylen in
-                                    ^^^^
- Alert deprecated: Cstruct.copy
- this is just like [to_string] without defaults, were you looking for [sub_copy]?
Processing  2/4: [tls: dune runtest]
+ /home/opam/.opam/opam-init/hooks/sandbox.sh "build" "dune" "runtest" "-p" "tls" "-j" "71" (CWD=/home/opam/.opam/5.4/.opam-switch/build/tls.0.14.1)
- (cd _build/default/tests && ./key_derivation.exe)
- Testing `Key derivation tests'.
- This run has ID `BW3UCCG2'.
- 
-   [OK]          key extraction and derivation          0   initial extract.
-   [OK]          key extraction and derivation          1   initial derive.
-   [OK]          key extraction and derivation          2   handshake extract.
-   [OK]          key extraction and derivation          3   derive c hs.
-   [OK]          key extraction and derivation          4   derive s hs.
-   [OK]          key extraction and derivation          5   derive finished.
-   [OK]          key extraction and derivation          6   derive master.
-   [OK]          key extraction and derivation          7   extract master.
-   [OK]          key extraction and derivation          8   derive handshake k...
-   [OK]          key extraction and derivation          9   derive traffic keys.
-   [OK]          key extraction and derivation         10   application write ...
-   [OK]          key extraction and derivation         11   application read k...
-   [OK]          key extraction and derivation         12   hs read keys.
-   [OK]          key extraction and derivation         13   resumption key.
-   [OK]          key extraction and derivation         14   payload.
-   [OK]          key extraction and derivation         15   processed payload.
-   [OK]          key extraction and derivation         16   self signature.
-   [OK]          key extraction and derivation         17   wire signature.
-   [OK]          key extraction and derivation         18   res secret.
-   [OK]          key extraction and derivation         19   early resumed.
-   [OK]          key extraction and derivation         20   binder.
-   [OK]          key extraction and derivation         21   x25519.
- 
- Full test results in `~/.opam/5.4/.opam-switch/build/tls.0.14.1/_build/default/tests/_build/_tests/Key derivation tests'.
- Test Successful in 0.012s. 22 tests run.
- (cd _build/default/tests && ./unittestrunner.exe)
- .............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
- Ran: 605 tests in: 0.86 seconds.
- OK
-> compiled  tls.0.14.1
-> removed   tls.0.14.1
-> installed tls.0.14.1
Done.
# To update the current shell environment, run: eval $(opam env)
2026-01-27 23:03.46 ---> saved as "1fa78328f026c014c3ac40530ca182bcf46615c367595980273ccdea3c641011"
Job succeeded
2026-01-27 23:04.12: Job succeeded