Build:
- 0
2026-01-27 19:29.50: New job: test ca-certs-nss.3.118 with mirage-runtime.4.9.0, using opam dev
from https://github.com/ocaml/opam-repository.git#refs/pull/29297/head (bec96dd4b29b0e3eb148af9966895e70442e68e2)
on debian-13-ocaml-5.4/amd64
To reproduce locally:
cd $(mktemp -d)
git clone --recursive "https://github.com/ocaml/opam-repository.git" && cd "opam-repository" && git fetch origin "refs/pull/29297/head" && git reset --hard bec96dd4
git fetch origin master
git merge --no-edit 88150787b3c9df767fd8dadf5d416641f8ee58f8
cat > ../Dockerfile <<'END-OF-DOCKERFILE'
FROM ocaml/opam:debian-13-ocaml-5.4@sha256:7b75eb963f7d9195aa7a042832bacc96efd4ab4b0279914c2953f9f23ee6d1e6
USER 1000:1000
WORKDIR /home/opam
RUN sudo ln -f /usr/bin/opam-dev /usr/bin/opam
RUN opam init --reinit -ni
RUN opam option solver=builtin-0install && opam config report
ENV OPAMDOWNLOADJOBS="1"
ENV OPAMERRLOGLEN="0"
ENV OPAMPRECISETRACKING="1"
ENV CI="true"
ENV OPAM_REPO_CI="true"
RUN rm -rf opam-repository/
COPY --chown=1000:1000 . opam-repository/
RUN opam repository set-url --strict default opam-repository/
RUN opam update --depexts || true
RUN opam pin add -k version -yn mirage-runtime.4.9.0 4.9.0
RUN opam reinstall mirage-runtime.4.9.0; \
res=$?; \
test "$res" != 31 && exit "$res"; \
export OPAMCLI=2.0; \
build_dir=$(opam var prefix)/.opam-switch/build; \
failed=$(ls "$build_dir"); \
partial_fails=""; \
for pkg in $failed; do \
if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"debian-13\""; then \
echo "A package failed and has been disabled for CI using the 'x-ci-accept-failures' field."; \
fi; \
test "$pkg" != 'mirage-runtime.4.9.0' && partial_fails="$partial_fails $pkg"; \
done; \
test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}"; \
exit 1
RUN opam reinstall ca-certs-nss.3.118; \
res=$?; \
test "$res" != 31 && exit "$res"; \
export OPAMCLI=2.0; \
build_dir=$(opam var prefix)/.opam-switch/build; \
failed=$(ls "$build_dir"); \
partial_fails=""; \
for pkg in $failed; do \
if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"debian-13\""; then \
echo "A package failed and has been disabled for CI using the 'x-ci-accept-failures' field."; \
fi; \
test "$pkg" != 'ca-certs-nss.3.118' && partial_fails="$partial_fails $pkg"; \
done; \
test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}"; \
exit 1
RUN (opam reinstall --with-test ca-certs-nss.3.118) || true
RUN opam reinstall --with-test --verbose ca-certs-nss.3.118; \
res=$?; \
test "$res" != 31 && exit "$res"; \
export OPAMCLI=2.0; \
build_dir=$(opam var prefix)/.opam-switch/build; \
failed=$(ls "$build_dir"); \
partial_fails=""; \
for pkg in $failed; do \
if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"debian-13\""; then \
echo "A package failed and has been disabled for CI using the 'x-ci-accept-failures' field."; \
fi; \
test "$pkg" != 'ca-certs-nss.3.118' && partial_fails="$partial_fails $pkg"; \
done; \
test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}"; \
exit 1
END-OF-DOCKERFILE
docker build -f ../Dockerfile .
2026-01-27 19:29.50: Using cache hint "ocaml/opam:debian-13-ocaml-5.4@sha256:7b75eb963f7d9195aa7a042832bacc96efd4ab4b0279914c2953f9f23ee6d1e6-mirage-runtime.4.9.0-ca-certs-nss.3.118-bec96dd4b29b0e3eb148af9966895e70442e68e2"
2026-01-27 19:29.50: Using OBuilder spec:
((from ocaml/opam:debian-13-ocaml-5.4@sha256:7b75eb963f7d9195aa7a042832bacc96efd4ab4b0279914c2953f9f23ee6d1e6)
(user (uid 1000) (gid 1000))
(workdir /home/opam)
(run (shell "sudo ln -f /usr/bin/opam-dev /usr/bin/opam"))
(run (network host)
(shell "opam init --reinit --config .opamrc-sandbox -ni"))
(run (shell "opam option solver=builtin-0install && opam config report"))
(env OPAMDOWNLOADJOBS 1)
(env OPAMERRLOGLEN 0)
(env OPAMPRECISETRACKING 1)
(env CI true)
(env OPAM_REPO_CI true)
(run (shell "rm -rf opam-repository/"))
(copy (src .) (dst opam-repository/))
(run (shell "opam repository set-url --strict default opam-repository/"))
(run (network host)
(shell "opam update --depexts || true"))
(run (shell "opam pin add -k version -yn mirage-runtime.4.9.0 4.9.0"))
(run (cache (opam-archives (target /home/opam/.opam/download-cache)))
(network host)
(shell "opam reinstall mirage-runtime.4.9.0;\
\n res=$?;\
\n test \"$res\" != 31 && exit \"$res\";\
\n export OPAMCLI=2.0;\
\n build_dir=$(opam var prefix)/.opam-switch/build;\
\n failed=$(ls \"$build_dir\");\
\n partial_fails=\"\";\
\n for pkg in $failed; do\
\n if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
\n echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
\n fi;\
\n test \"$pkg\" != 'mirage-runtime.4.9.0' && partial_fails=\"$partial_fails $pkg\";\
\n done;\
\n test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
\n exit 1"))
(run (cache (opam-archives (target /home/opam/.opam/download-cache)))
(network host)
(shell "opam reinstall ca-certs-nss.3.118;\
\n res=$?;\
\n test \"$res\" != 31 && exit \"$res\";\
\n export OPAMCLI=2.0;\
\n build_dir=$(opam var prefix)/.opam-switch/build;\
\n failed=$(ls \"$build_dir\");\
\n partial_fails=\"\";\
\n for pkg in $failed; do\
\n if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
\n echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
\n fi;\
\n test \"$pkg\" != 'ca-certs-nss.3.118' && partial_fails=\"$partial_fails $pkg\";\
\n done;\
\n test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
\n exit 1"))
(run (network host)
(shell "(opam reinstall --with-test ca-certs-nss.3.118) || true"))
(run (shell "opam reinstall --with-test --verbose ca-certs-nss.3.118;\
\n res=$?;\
\n test \"$res\" != 31 && exit \"$res\";\
\n export OPAMCLI=2.0;\
\n build_dir=$(opam var prefix)/.opam-switch/build;\
\n failed=$(ls \"$build_dir\");\
\n partial_fails=\"\";\
\n for pkg in $failed; do\
\n if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
\n echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
\n fi;\
\n test \"$pkg\" != 'ca-certs-nss.3.118' && partial_fails=\"$partial_fails $pkg\";\
\n done;\
\n test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
\n exit 1"))
)
2026-01-27 19:29.50: Waiting for resource in pool OCluster
2026-01-28 05:16.08: Waiting for worker…
2026-01-28 05:19.41: Got resource from pool OCluster
Building on laodoke.caelum.ci.dev
All commits already cached
Updating files: 65% (12544/19285)
Updating files: 66% (12729/19285)
Updating files: 67% (12921/19285)
Updating files: 68% (13114/19285)
Updating files: 69% (13307/19285)
Updating files: 70% (13500/19285)
Updating files: 71% (13693/19285)
Updating files: 72% (13886/19285)
Updating files: 73% (14079/19285)
Updating files: 74% (14271/19285)
Updating files: 75% (14464/19285)
Updating files: 76% (14657/19285)
Updating files: 77% (14850/19285)
Updating files: 78% (15043/19285)
Updating files: 79% (15236/19285)
Updating files: 80% (15428/19285)
Updating files: 81% (15621/19285)
Updating files: 82% (15814/19285)
Updating files: 83% (16007/19285)
Updating files: 84% (16200/19285)
Updating files: 85% (16393/19285)
Updating files: 86% (16586/19285)
Updating files: 87% (16778/19285)
Updating files: 88% (16971/19285)
Updating files: 89% (17164/19285)
Updating files: 90% (17357/19285)
Updating files: 91% (17550/19285)
Updating files: 92% (17743/19285)
Updating files: 93% (17936/19285)
Updating files: 94% (18128/19285)
Updating files: 95% (18321/19285)
Updating files: 96% (18514/19285)
Updating files: 97% (18707/19285)
Updating files: 98% (18900/19285)
Updating files: 99% (19093/19285)
Updating files: 100% (19285/19285)
Updating files: 100% (19285/19285), done.
HEAD is now at 88150787b3 Merge pull request #29287 from dinosaure/release-git-kv-v0.2.1
Merge made by the 'ort' strategy.
packages/mirage-runtime/mirage-runtime.4.0.0/opam | 2 +-
packages/mirage-runtime/mirage-runtime.4.0.0~beta3/opam | 2 +-
packages/mirage-runtime/mirage-runtime.4.10.0/opam | 2 +-
packages/mirage-runtime/mirage-runtime.4.10.1/opam | 2 +-
packages/mirage-runtime/mirage-runtime.4.10.2/opam | 2 +-
packages/mirage-runtime/mirage-runtime.4.10.3/opam | 2 +-
packages/mirage-runtime/mirage-runtime.4.10.4/opam | 2 +-
packages/mirage-runtime/mirage-runtime.4.7.0/opam | 2 +-
packages/mirage-runtime/mirage-runtime.4.9.0/opam | 2 +-
9 files changed, 9 insertions(+), 9 deletions(-)
(from ocaml/opam:debian-13-ocaml-5.4@sha256:7b75eb963f7d9195aa7a042832bacc96efd4ab4b0279914c2953f9f23ee6d1e6)
2026-01-28 05:19.45 ---> using "ec0b9239d97b1eba002b8666d90bcda143b1414915128d32a0b6cb8a1bd9f05c" from cache
/: (user (uid 1000) (gid 1000))
/: (workdir /home/opam)
/home/opam: (run (shell "sudo ln -f /usr/bin/opam-dev /usr/bin/opam"))
2026-01-28 05:19.45 ---> using "cd9db1bfd75ad168f36443d6cd7ffe58df2d9e73878dee80fe00f4ec900a65e4" from cache
/home/opam: (run (network host)
(shell "opam init --reinit --config .opamrc-sandbox -ni"))
Configuring from /home/opam/.opamrc-sandbox, then /home/opam/.opamrc, and finally from built-in defaults.
Checking for available remotes: rsync and local, git.
- you won't be able to use mercurial repositories unless you install the hg command on your system.
- you won't be able to use darcs repositories unless you install the darcs command on your system.
This version of opam requires an update to the layout of /home/opam/.opam from version 2.0 to version 2.2, which can't be reverted.
You may want to back it up before going further.
Continue? [Y/n] y
Format upgrade done.
<><> Updating repositories ><><><><><><><><><><><><><><><><><><><><><><><><><><>
[default] Initialised
2026-01-28 05:19.45 ---> using "cbe59c2111ee2f6ebb74444b6a2e449be1401fb2a7e89471df12d7734c31aef0" from cache
/home/opam: (run (shell "opam option solver=builtin-0install && opam config report"))
Set to 'builtin-0install' the field solver in global configuration
# opam config report
# opam-version 2.5.0
# self-upgrade no
# system arch=x86_64 os=linux os-distribution=debian os-version=13
# solver builtin-0install
# install-criteria -changed,-count[avoid-version,solution]
# upgrade-criteria -count[avoid-version,solution]
# jobs 71
# repositories 1 (version-controlled)
# pinned 1 (version)
# current-switch 5.4
# invariant ["ocaml-base-compiler" {>= "5.4.0"}]
# compiler-packages ocaml-base-compiler.5.4.0, ocaml-compiler.5.4.0, ocaml-options-vanilla.1
# ocaml:native true
# ocaml:native-tools true
# ocaml:native-dynlink true
# ocaml:stubsdir /home/opam/.opam/5.4/lib/ocaml/stublibs:/home/opam/.opam/5.4/lib/ocaml
# ocaml:preinstalled false
# ocaml:compiler 5.4.0
2026-01-28 05:19.45 ---> using "bfb3fee637cd4ed2c6e4ef53b349cc70b7b5c70d4fb4d56c09378a42134b6bf5" from cache
/home/opam: (env OPAMDOWNLOADJOBS 1)
/home/opam: (env OPAMERRLOGLEN 0)
/home/opam: (env OPAMPRECISETRACKING 1)
/home/opam: (env CI true)
/home/opam: (env OPAM_REPO_CI true)
/home/opam: (run (shell "rm -rf opam-repository/"))
2026-01-28 05:19.45 ---> using "a80806ab1cec707e8afb5a047be43e19f2c71735f9ef12880c11228115befadd" from cache
/home/opam: (copy (src .) (dst opam-repository/))
2026-01-28 05:19.47 ---> using "29f6e5bc90fed1f3ca0dbfa7880bf07b07ed9305f0af011f54a2924d95990898" from cache
/home/opam: (run (shell "opam repository set-url --strict default opam-repository/"))
[default] Initialised
2026-01-28 05:19.47 ---> using "0859ca9de64aae35bcc4a34df9c8711b7e38cf8dc80a303c3ac16dd388a11c6c" from cache
/home/opam: (run (network host)
(shell "opam update --depexts || true"))
+ /usr/bin/sudo "apt-get" "update"
- Hit:1 http://deb.debian.org/debian trixie InRelease
- Get:2 http://deb.debian.org/debian trixie-updates InRelease [47.3 kB]
- Get:3 http://deb.debian.org/debian-security trixie-security InRelease [43.4 kB]
- Get:4 http://deb.debian.org/debian-security trixie-security/main amd64 Packages [97.9 kB]
- Fetched 189 kB in 0s (1400 kB/s)
- Reading package lists...
-
2026-01-28 05:19.47 ---> using "259e4b9b0f8fe427b0b1d267335e5f38c5e7f40c70220e295abceff1731dbbb3" from cache
/home/opam: (run (shell "opam pin add -k version -yn mirage-runtime.4.9.0 4.9.0"))
mirage-runtime is now pinned to version 4.9.0
2026-01-28 05:19.47 ---> using "356b48f080c118b01cfd7d61acf63e62192b0ded90c906d03e498ca0a9779a6f" from cache
/home/opam: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
(network host)
(shell "opam reinstall mirage-runtime.4.9.0;\
\n res=$?;\
\n test \"$res\" != 31 && exit \"$res\";\
\n export OPAMCLI=2.0;\
\n build_dir=$(opam var prefix)/.opam-switch/build;\
\n failed=$(ls \"$build_dir\");\
\n partial_fails=\"\";\
\n for pkg in $failed; do\
\n if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
\n echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
\n fi;\
\n test \"$pkg\" != 'mirage-runtime.4.9.0' && partial_fails=\"$partial_fails $pkg\";\
\n done;\
\n test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
\n exit 1"))
mirage-runtime.4.9.0 is not installed. Install it? [Y/n] y
The following actions will be performed:
=== install 16 packages
- install base-bytes base [required by ocplib-endian]
- install cmdliner 2.1.0 [required by mirage-runtime]
- install cppo 1.8.0 [required by lwt]
- install csexp 1.5.2 [required by dune-configurator]
- install domain-name 0.5.0 [required by ipaddr]
- install dune 3.21.0 [required by mirage-runtime]
- install dune-configurator 3.21.0 [required by lwt]
- install ipaddr 5.6.1 [required by mirage-runtime]
- install logs 0.10.0 [required by mirage-runtime]
- install lwt 5.9.2 [required by mirage-runtime]
- install macaddr 5.6.1 [required by ipaddr]
- install mirage-runtime 4.9.0 (pinned)
- install ocamlbuild 0.16.1 [required by logs]
- install ocamlfind 1.9.8 [required by logs]
- install ocplib-endian 1.2 [required by lwt]
- install topkg 1.1.1 [required by logs]
<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
-> retrieved cmdliner.2.1.0 (cached)
-> retrieved cppo.1.8.0 (cached)
-> retrieved csexp.1.5.2 (cached)
-> retrieved domain-name.0.5.0 (cached)
-> retrieved dune.3.21.0, dune-configurator.3.21.0 (cached)
-> retrieved ipaddr.5.6.1, macaddr.5.6.1 (cached)
-> retrieved logs.0.10.0 (cached)
-> retrieved lwt.5.9.2 (cached)
-> installed cmdliner.2.1.0
-> retrieved mirage-runtime.4.9.0 (cached)
-> retrieved ocamlbuild.0.16.1 (cached)
-> retrieved ocamlfind.1.9.8 (cached)
-> retrieved ocplib-endian.1.2 (cached)
-> retrieved topkg.1.1.1 (cached)
-> installed ocamlfind.1.9.8
-> installed base-bytes.base
-> installed ocamlbuild.0.16.1
-> installed topkg.1.1.1
-> installed dune.3.21.0
-> installed csexp.1.5.2
-> installed cppo.1.8.0
-> installed domain-name.0.5.0
-> installed macaddr.5.6.1
-> installed ocplib-endian.1.2
-> installed ipaddr.5.6.1
-> installed dune-configurator.3.21.0
-> installed lwt.5.9.2
-> installed logs.0.10.0
-> installed mirage-runtime.4.9.0
Done.
# To update the current shell environment, run: eval $(opam env)
2026-01-28 05:19.47 ---> using "475ded3bcf68b654d90fc89e6ca63f2cc3f6ca20e2a2cda8a1c85958cad49c09" from cache
/home/opam: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
(network host)
(shell "opam reinstall ca-certs-nss.3.118;\
\n res=$?;\
\n test \"$res\" != 31 && exit \"$res\";\
\n export OPAMCLI=2.0;\
\n build_dir=$(opam var prefix)/.opam-switch/build;\
\n failed=$(ls \"$build_dir\");\
\n partial_fails=\"\";\
\n for pkg in $failed; do\
\n if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
\n echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
\n fi;\
\n test \"$pkg\" != 'ca-certs-nss.3.118' && partial_fails=\"$partial_fails $pkg\";\
\n done;\
\n test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
\n exit 1"))
ca-certs-nss.3.118 is not installed. Install it? [Y/n] y
The following actions will be performed:
=== recompile 2 packages
- recompile logs 0.10.0 [uses fmt]
- recompile mirage-runtime 4.9.0 (pinned) [uses logs]
=== install 25 packages
- install asn1-combinators 0.3.2 [required by x509]
- install astring 0.8.5 [required by bos]
- install base64 3.5.2 [required by x509]
- install bos 0.2.1 [required by ca-certs-nss]
- install ca-certs-nss 3.118
- install conf-gmp 5 [required by conf-gmp-powm-sec, zarith]
- install conf-gmp-powm-sec 4 [required by mirage-crypto-pk]
- install conf-pkg-config 4 [required by zarith]
- install digestif 1.3.0 [required by ca-certs-nss]
- install duration 0.2.1 [required by mirage-crypto-rng]
- install eqaf 0.10 [required by digestif]
- install fmt 0.11.0 [required by ca-certs-nss]
- install fpath 0.7.3 [required by bos]
- install gmap 0.3.0 [required by x509]
- install kdf 1.0.0 [required by x509]
- install mirage-crypto 2.0.2 [required by x509]
- install mirage-crypto-ec 2.0.2 [required by x509]
- install mirage-crypto-pk 2.0.2 [required by x509]
- install mirage-crypto-rng 2.0.2 [required by x509]
- install mirage-ptime 5.2.0 [required by ca-certs-nss]
- install ohex 0.2.0 [required by x509]
- install ptime 1.2.0 [required by mirage-ptime, x509]
- install rresult 0.7.0 [required by bos]
- install x509 1.0.6 [required by ca-certs-nss]
- install zarith 1.14 [required by mirage-crypto-pk]
The following system packages will first need to be installed:
libgmp-dev pkg-config
<><> Handling external dependencies <><><><><><><><><><><><><><><><><><><><><><>
opam believes some required external dependencies are missing. opam can:
> 1. Run apt-get to install them (may need root/sudo access)
2. Display the recommended apt-get command and wait while you run it manually (e.g. in another terminal)
3. Continue anyway, and, upon success, permanently register that this external dependency is present, but not detectable
4. Abort the installation
[1/2/3/4] 1
+ /usr/bin/sudo "apt-get" "install" "-qq" "-yy" "libgmp-dev" "pkg-config"
- Selecting previously unselected package libgmpxx4ldbl:amd64.
- (Reading database ...
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 20654 files and directories currently installed.)
- Preparing to unpack .../0-libgmpxx4ldbl_2%3a6.3.0+dfsg-3_amd64.deb ...
- Unpacking libgmpxx4ldbl:amd64 (2:6.3.0+dfsg-3) ...
- Selecting previously unselected package libgmp-dev:amd64.
- Preparing to unpack .../1-libgmp-dev_2%3a6.3.0+dfsg-3_amd64.deb ...
- Unpacking libgmp-dev:amd64 (2:6.3.0+dfsg-3) ...
- Selecting previously unselected package libpkgconf3:amd64.
- Preparing to unpack .../2-libpkgconf3_1.8.1-4_amd64.deb ...
- Unpacking libpkgconf3:amd64 (1.8.1-4) ...
- Selecting previously unselected package pkgconf-bin.
- Preparing to unpack .../3-pkgconf-bin_1.8.1-4_amd64.deb ...
- Unpacking pkgconf-bin (1.8.1-4) ...
- Selecting previously unselected package pkgconf:amd64.
- Preparing to unpack .../4-pkgconf_1.8.1-4_amd64.deb ...
- Unpacking pkgconf:amd64 (1.8.1-4) ...
- Selecting previously unselected package pkg-config:amd64.
- Preparing to unpack .../5-pkg-config_1.8.1-4_amd64.deb ...
- Unpacking pkg-config:amd64 (1.8.1-4) ...
- Setting up libpkgconf3:amd64 (1.8.1-4) ...
- Setting up libgmpxx4ldbl:amd64 (2:6.3.0+dfsg-3) ...
- Setting up pkgconf-bin (1.8.1-4) ...
- Setting up libgmp-dev:amd64 (2:6.3.0+dfsg-3) ...
- Setting up pkgconf:amd64 (1.8.1-4) ...
- Setting up pkg-config:amd64 (1.8.1-4) ...
- Processing triggers for libc-bin (2.41-12+deb13u1) ...
<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
-> retrieved asn1-combinators.0.3.2 (cached)
-> retrieved astring.0.8.5 (cached)
-> retrieved base64.3.5.2 (cached)
-> retrieved bos.0.2.1 (cached)
-> retrieved ca-certs-nss.3.118 (cached)
-> retrieved conf-gmp.5 (cached)
-> retrieved conf-gmp-powm-sec.4 (cached)
-> installed conf-gmp.5
-> installed conf-pkg-config.4
-> installed base64.3.5.2
-> installed conf-gmp-powm-sec.4
-> retrieved digestif.1.3.0 (cached)
-> retrieved duration.0.2.1 (cached)
-> retrieved eqaf.0.10 (cached)
-> retrieved fmt.0.11.0 (cached)
-> retrieved fpath.0.7.3 (cached)
-> retrieved gmap.0.3.0 (cached)
-> retrieved kdf.1.0.0 (cached)
-> retrieved logs.0.10.0 (cached)
-> installed duration.0.2.1
-> installed gmap.0.3.0
-> installed eqaf.0.10
-> retrieved mirage-crypto.2.0.2, mirage-crypto-ec.2.0.2, mirage-crypto-pk.2.0.2, mirage-crypto-rng.2.0.2 (cached)
-> retrieved mirage-ptime.5.2.0 (cached)
-> retrieved ohex.0.2.0 (cached)
-> retrieved ptime.1.2.0 (cached)
-> retrieved rresult.0.7.0 (cached)
-> retrieved x509.1.0.6 (cached)
-> retrieved zarith.1.14 (cached)
-> installed astring.0.8.5
-> installed ohex.0.2.0
-> removed mirage-runtime.4.9.0
-> removed logs.0.10.0
-> installed fmt.0.11.0
-> installed digestif.1.3.0
-> installed rresult.0.7.0
-> installed fpath.0.7.3
-> installed ptime.1.2.0
-> installed mirage-ptime.5.2.0
-> installed logs.0.10.0
-> installed mirage-crypto.2.0.2
-> installed asn1-combinators.0.3.2
-> installed mirage-runtime.4.9.0
-> installed kdf.1.0.0
-> installed mirage-crypto-rng.2.0.2
-> installed zarith.1.14
-> installed bos.0.2.1
-> installed mirage-crypto-pk.2.0.2
-> installed mirage-crypto-ec.2.0.2
-> installed x509.1.0.6
-> installed ca-certs-nss.3.118
Done.
# To update the current shell environment, run: eval $(opam env)
2026-01-28 05:20.30 ---> saved as "ee8c3e9b4b1bb2b1e3824ed01e5be6a5911c2ecba4880884f6b6f3f822f21084"
/home/opam: (run (network host)
(shell "(opam reinstall --with-test ca-certs-nss.3.118) || true"))
The following actions will be performed:
=== remove 1 package
- remove mirage-runtime 4.9.0 (pinned) [conflicts with lwt]
=== recompile 7 packages
- recompile bos 0.2.1 [uses logs]
- recompile ca-certs-nss 3.118
- recompile logs 0.10.0 [uses lwt]
- recompile mirage-crypto-ec 2.0.2 [uses mirage-crypto-rng]
- recompile mirage-crypto-pk 2.0.2 [uses mirage-crypto-rng]
- recompile mirage-crypto-rng 2.0.2 [uses logs]
- recompile x509 1.0.6 [uses logs]
=== upgrade 1 package
- upgrade lwt 5.9.2 to 6.0.0
=== install 5 packages
- install alcotest 1.9.1 [required by ca-certs-nss]
- install ocaml-syntax-shims 1.0.0 [required by alcotest]
- install re 1.14.0 [required by alcotest]
- install stdlib-shims 0.3.0 [required by alcotest]
- install uutf 1.0.4 [required by alcotest]
<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
-> removed mirage-runtime.4.9.0
-> retrieved alcotest.1.9.1 (https://opam.ocaml.org/cache)
-> retrieved bos.0.2.1 (https://opam.ocaml.org/cache)
-> retrieved ca-certs-nss.3.118 (https://opam.ocaml.org/cache)
-> retrieved logs.0.10.0 (https://opam.ocaml.org/cache)
-> retrieved lwt.6.0.0 (https://opam.ocaml.org/cache)
-> retrieved mirage-crypto-ec.2.0.2, mirage-crypto-pk.2.0.2, mirage-crypto-rng.2.0.2 (https://opam.ocaml.org/cache)
-> retrieved ocaml-syntax-shims.1.0.0 (https://opam.ocaml.org/cache)
-> retrieved re.1.14.0 (https://opam.ocaml.org/cache)
-> retrieved stdlib-shims.0.3.0 (https://opam.ocaml.org/cache)
-> retrieved uutf.1.0.4 (https://opam.ocaml.org/cache)
-> retrieved x509.1.0.6 (https://opam.ocaml.org/cache)
-> installed stdlib-shims.0.3.0
-> installed ocaml-syntax-shims.1.0.0
-> installed uutf.1.0.4
-> installed re.1.14.0
-> removed ca-certs-nss.3.118
-> removed bos.0.2.1
-> removed x509.1.0.6
-> removed mirage-crypto-ec.2.0.2
-> removed mirage-crypto-pk.2.0.2
-> removed mirage-crypto-rng.2.0.2
-> removed logs.0.10.0
-> removed lwt.5.9.2
-> installed lwt.6.0.0
-> installed alcotest.1.9.1
-> installed logs.0.10.0
-> installed mirage-crypto-rng.2.0.2
-> installed mirage-crypto-pk.2.0.2
-> installed bos.0.2.1
-> installed mirage-crypto-ec.2.0.2
-> installed x509.1.0.6
-> installed ca-certs-nss.3.118
Done.
# To update the current shell environment, run: eval $(opam env)
2026-01-28 05:21.13 ---> saved as "1037bd76724be0845f6db28d01f415df28cd0520a5de42c57cdc244b9186bb6f"
/home/opam: (run (shell "opam reinstall --with-test --verbose ca-certs-nss.3.118;\
\n res=$?;\
\n test \"$res\" != 31 && exit \"$res\";\
\n export OPAMCLI=2.0;\
\n build_dir=$(opam var prefix)/.opam-switch/build;\
\n failed=$(ls \"$build_dir\");\
\n partial_fails=\"\";\
\n for pkg in $failed; do\
\n if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
\n echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
\n fi;\
\n test \"$pkg\" != 'ca-certs-nss.3.118' && partial_fails=\"$partial_fails $pkg\";\
\n done;\
\n test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
\n exit 1"))
The following actions will be performed:
=== recompile 1 package
- recompile ca-certs-nss 3.118
<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
Processing 1/4: [ca-certs-nss.3.118: extract]
-> retrieved ca-certs-nss.3.118 (cached)
Processing 2/4: [ca-certs-nss: dune build]
+ /home/opam/.opam/opam-init/hooks/sandbox.sh "build" "dune" "build" "-p" "ca-certs-nss" "-j" "71" "@install" "@runtest" (CWD=/home/opam/.opam/5.4/.opam-switch/build/ca-certs-nss.3.118)
- (cd _build/default/lib && ../../install/default/bin/extract-from-certdata certdata.txt --output trust_anchor.ml)
- extract-from-certdata: [WARNING] Untrusted certificate "Go Daddy Class 2 CA" (serial 020100)
- extract-from-certdata: [WARNING] Untrusted certificate "Starfield Class 2 CA" (serial 020100)
- (cd _build/default/test && ./tests.exe)
- Testing `verification tests'.
- This run has ID `TTJBPEBK'.
-
- [OK] X509 certificate validation 0 google.com.
- [OK] X509 certificate validation 1 extended-validation....
- [OK] X509 certificate validation 2 self-signed.badssl.com.
- [OK] X509 certificate validation 3 expired.badssl.com.
- [OK] X509 certificate validation 4 untrusted-root.badss...
- [OK] X509 certificate validation 5 wrong.host.badssl.com.
- [OK] X509 certificate validation 6 incomplete-chain.bad...
- [OK] X509 certificate validation 7 sha1-intermediate.ba...
- [OK] X509 certificate validation 8 wrong.host.google.com.
-
- Full test results in `~/.opam/5.4/.opam-switch/build/ca-certs-nss.3.118/_build/default/test/_build/_tests/verification tests'.
- Test Successful in 0.004s. 9 tests run.
-> compiled ca-certs-nss.3.118
-> removed ca-certs-nss.3.118
-> installed ca-certs-nss.3.118
Done.
# To update the current shell environment, run: eval $(opam env)
2026-01-28 05:21.25 ---> saved as "ee1226cc7a88df5232d3bb360c4483331aae1e6949f6e60b79c84e5f420d6ca6"
Job succeeded
2026-01-28 05:21.40: Job succeeded