Build:
  1. 0
2026-04-02 12:52.43: New job: test restricted.2.0.0, using opam dev
                              from https://github.com/ocaml/opam-repository.git#refs/pull/29619/head (0852225205a4cfdf8a6d981fc03c6e5da5e09f00)
                              on debian-13-ocaml-5.4/amd64

To reproduce locally:

cd $(mktemp -d)
git clone --recursive "https://github.com/ocaml/opam-repository.git" && cd "opam-repository" && git fetch origin "refs/pull/29619/head" && git reset --hard 08522252
git fetch origin master
git merge --no-edit e34c4d0122fad3f61c29adc7454cb6f12dc5b64d
cat > ../Dockerfile <<'END-OF-DOCKERFILE'
FROM ocaml/opam:debian-13-ocaml-5.4@sha256:13f453bea920b1b323f4a04f2b81ee06601f2feba7e1f1aa31e088bc65526b6e
USER 1000:1000
WORKDIR /home/opam
RUN sudo ln -f /usr/bin/opam-dev /usr/bin/opam
RUN opam init --reinit -ni
RUN opam option solver=builtin-0install && opam config report
ENV OPAMDOWNLOADJOBS="1"
ENV OPAMERRLOGLEN="0"
ENV OPAMPRECISETRACKING="1"
ENV CI="true"
ENV OPAM_REPO_CI="true"
RUN rm -rf opam-repository/
COPY --chown=1000:1000 . opam-repository/
RUN opam repository set-url --strict default opam-repository/
RUN opam update --depexts || true
RUN opam pin add -k version -yn restricted.2.0.0 2.0.0
RUN opam reinstall restricted.2.0.0; \
    res=$?; \
    test "$res" != 31 && exit "$res"; \
    export OPAMCLI=2.0; \
    build_dir=$(opam var prefix)/.opam-switch/build; \
    failed=$(ls "$build_dir"); \
    partial_fails=""; \
    for pkg in $failed; do \
    if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"debian-13\""; then \
    echo "A package failed and has been disabled for CI using the 'x-ci-accept-failures' field."; \
    fi; \
    test "$pkg" != 'restricted.2.0.0' && partial_fails="$partial_fails $pkg"; \
    done; \
    test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}"; \
    exit 1
RUN (opam reinstall --with-test restricted.2.0.0) || true
RUN opam reinstall --with-test --verbose restricted.2.0.0; \
    res=$?; \
    test "$res" != 31 && exit "$res"; \
    export OPAMCLI=2.0; \
    build_dir=$(opam var prefix)/.opam-switch/build; \
    failed=$(ls "$build_dir"); \
    partial_fails=""; \
    for pkg in $failed; do \
    if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"debian-13\""; then \
    echo "A package failed and has been disabled for CI using the 'x-ci-accept-failures' field."; \
    fi; \
    test "$pkg" != 'restricted.2.0.0' && partial_fails="$partial_fails $pkg"; \
    done; \
    test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}"; \
    exit 1

END-OF-DOCKERFILE
docker build -f ../Dockerfile .

2026-04-02 12:52.43: Using cache hint "ocaml/opam:debian-13-ocaml-5.4@sha256:13f453bea920b1b323f4a04f2b81ee06601f2feba7e1f1aa31e088bc65526b6e-restricted.2.0.0-0852225205a4cfdf8a6d981fc03c6e5da5e09f00"
2026-04-02 12:52.43: Using OBuilder spec:
((from ocaml/opam:debian-13-ocaml-5.4@sha256:13f453bea920b1b323f4a04f2b81ee06601f2feba7e1f1aa31e088bc65526b6e)
 (user (uid 1000) (gid 1000))
 (workdir /home/opam)
 (run (shell "sudo ln -f /usr/bin/opam-dev /usr/bin/opam"))
 (run (network host)
      (shell "opam init --reinit --config .opamrc-sandbox -ni"))
 (run (shell "opam option solver=builtin-0install && opam config report"))
 (env OPAMDOWNLOADJOBS 1)
 (env OPAMERRLOGLEN 0)
 (env OPAMPRECISETRACKING 1)
 (env CI true)
 (env OPAM_REPO_CI true)
 (run (shell "rm -rf opam-repository/"))
 (copy (src .) (dst opam-repository/))
 (run (shell "opam repository set-url --strict default opam-repository/"))
 (run (network host)
      (shell "opam update --depexts || true"))
 (run (shell "opam pin add -k version -yn restricted.2.0.0 2.0.0"))
 (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
      (network host)
      (shell  "opam reinstall restricted.2.0.0;\
             \n        res=$?;\
             \n        test \"$res\" != 31 && exit \"$res\";\
             \n        export OPAMCLI=2.0;\
             \n        build_dir=$(opam var prefix)/.opam-switch/build;\
             \n        failed=$(ls \"$build_dir\");\
             \n        partial_fails=\"\";\
             \n        for pkg in $failed; do\
             \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
             \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
             \n          fi;\
             \n          test \"$pkg\" != 'restricted.2.0.0' && partial_fails=\"$partial_fails $pkg\";\
             \n        done;\
             \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
             \n        exit 1"))
 (run (network host)
      (shell "(opam reinstall --with-test restricted.2.0.0) || true"))
 (run (shell  "opam reinstall --with-test --verbose restricted.2.0.0;\
             \n        res=$?;\
             \n        test \"$res\" != 31 && exit \"$res\";\
             \n        export OPAMCLI=2.0;\
             \n        build_dir=$(opam var prefix)/.opam-switch/build;\
             \n        failed=$(ls \"$build_dir\");\
             \n        partial_fails=\"\";\
             \n        for pkg in $failed; do\
             \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
             \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
             \n          fi;\
             \n          test \"$pkg\" != 'restricted.2.0.0' && partial_fails=\"$partial_fails $pkg\";\
             \n        done;\
             \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
             \n        exit 1"))
)

2026-04-02 12:52.43: Waiting for resource in pool OCluster
2026-04-02 12:52.44: Waiting for worker…
2026-04-02 12:52.44: Got resource from pool OCluster
Building on phoebe.caelum.ci.dev
All commits already cached
HEAD is now at e34c4d0122 Merge pull request #29630 from recoules/release-binsec-0.11.1
Merge made by the 'ort' strategy.
 packages/restricted/restricted.2.0.0/opam | 51 +++++++++++++++++++++++++++++++
 1 file changed, 51 insertions(+)
 create mode 100644 packages/restricted/restricted.2.0.0/opam

(from ocaml/opam:debian-13-ocaml-5.4@sha256:13f453bea920b1b323f4a04f2b81ee06601f2feba7e1f1aa31e088bc65526b6e)
2026-04-02 12:53.03 ---> using "04accec92e2bf0fc058f8f78760257a004a3abe580d28a2e712fdd6bd38bbb3e" from cache

/: (user (uid 1000) (gid 1000))

/: (workdir /home/opam)

/home/opam: (run (shell "sudo ln -f /usr/bin/opam-dev /usr/bin/opam"))
2026-04-02 12:53.03 ---> using "55be5c75d97cce6d0c85146d99e2d19cbd4b6c23bbab392b149f23269ad44f5a" from cache

/home/opam: (run (network host)
                 (shell "opam init --reinit --config .opamrc-sandbox -ni"))
Configuring from /home/opam/.opamrc-sandbox, then /home/opam/.opamrc, and finally from built-in defaults.
Checking for available remotes: rsync and local, git.
  - you won't be able to use mercurial repositories unless you install the hg command on your system.
  - you won't be able to use darcs repositories unless you install the darcs command on your system.

This version of opam requires an update to the layout of /home/opam/.opam from version 2.0 to version 2.2, which can't be reverted.
You may want to back it up before going further.

Continue? [Y/n] y
Format upgrade done.

<><> Updating repositories ><><><><><><><><><><><><><><><><><><><><><><><><><><>
[default] Initialised
2026-04-02 12:53.03 ---> using "cb81601bf5ca0a036e701f32d1dd52e883da5e6a376ec0e2e934250247bea436" from cache

/home/opam: (run (shell "opam option solver=builtin-0install && opam config report"))
Set to 'builtin-0install' the field solver in global configuration
# opam config report
# opam-version         2.5.0
# self-upgrade         no
# system               arch=x86_64 os=linux os-distribution=debian os-version=13
# solver               builtin-0install
# install-criteria     -changed,-count[avoid-version,solution]
# upgrade-criteria     -count[avoid-version,solution]
# jobs                 71
# repositories         1 (version-controlled)
# pinned               1 (version)
# current-switch       5.4
# invariant            ["ocaml-base-compiler" {= "5.4.1"}]
# compiler-packages    ocaml-base-compiler.5.4.1, ocaml-compiler.5.4.1, ocaml-options-vanilla.1
# ocaml:native         true
# ocaml:native-tools   true
# ocaml:native-dynlink true
# ocaml:stubsdir       /home/opam/.opam/5.4/lib/ocaml/stublibs:/home/opam/.opam/5.4/lib/ocaml
# ocaml:preinstalled   false
# ocaml:compiler       5.4.1
2026-04-02 12:53.03 ---> using "c8d363e61eb558daaf2125e55111985ec4782dc41b9492241350e7418f36d4d8" from cache

/home/opam: (env OPAMDOWNLOADJOBS 1)

/home/opam: (env OPAMERRLOGLEN 0)

/home/opam: (env OPAMPRECISETRACKING 1)

/home/opam: (env CI true)

/home/opam: (env OPAM_REPO_CI true)

/home/opam: (run (shell "rm -rf opam-repository/"))
2026-04-02 12:53.03 ---> using "951cf337435093db2a2fde4866f1fda5737c4cc37e34b0d936972f7c5053b176" from cache

/home/opam: (copy (src .) (dst opam-repository/))
2026-04-02 12:53.09 ---> saved as "bcc5211baab68286bee07ba234c79b39da01e75e5dd10e66bbf662f592b54527"

/home/opam: (run (shell "opam repository set-url --strict default opam-repository/"))
[default] Initialised
2026-04-02 12:53.27 ---> saved as "54123fc13ca8873534ad5ea5c4ebea0f6d30905b595036089ac34f09d567a92f"

/home/opam: (run (network host)
                 (shell "opam update --depexts || true"))
+ /usr/bin/sudo "apt-get" "update"
- Hit:1 http://deb.debian.org/debian trixie InRelease
- Get:2 http://deb.debian.org/debian trixie-updates InRelease [47.3 kB]
- Get:3 http://deb.debian.org/debian-security trixie-security InRelease [43.4 kB]
- Get:4 http://deb.debian.org/debian-security trixie-security/main amd64 Packages [119 kB]
- Fetched 210 kB in 0s (1504 kB/s)
- Reading package lists...
2026-04-02 12:53.28 ---> saved as "ec7b2b4c06b05e64d47ce0f9e00627f3e8f6f84ec5294c306ce82a3e8241b243"

/home/opam: (run (shell "opam pin add -k version -yn restricted.2.0.0 2.0.0"))
restricted is now pinned to version 2.0.0
2026-04-02 12:53.28 ---> saved as "b30966ba4fd26b15a804f5ac05d3e5d9ca046e1fb7f4ca0a0d5cebe225290d3d"

/home/opam: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
                 (network host)
                 (shell  "opam reinstall restricted.2.0.0;\
                        \n        res=$?;\
                        \n        test \"$res\" != 31 && exit \"$res\";\
                        \n        export OPAMCLI=2.0;\
                        \n        build_dir=$(opam var prefix)/.opam-switch/build;\
                        \n        failed=$(ls \"$build_dir\");\
                        \n        partial_fails=\"\";\
                        \n        for pkg in $failed; do\
                        \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
                        \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
                        \n          fi;\
                        \n          test \"$pkg\" != 'restricted.2.0.0' && partial_fails=\"$partial_fails $pkg\";\
                        \n        done;\
                        \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
                        \n        exit 1"))
restricted.2.0.0 is not installed. Install it? [Y/n] y
The following actions will be performed:
=== install 27 packages
  - install base                    v0.17.3        [required by ppx_inline_test]
  - install csexp                   1.5.2          [required by dune-configurator]
  - install dune                    3.22.0         [required by restricted]
  - install dune-configurator       3.22.0         [required by base]
  - install jane-street-headers     v0.17.0        [required by time_now]
  - install jst-config              v0.17.0        [required by time_now]
  - install ocaml-compiler-libs     v0.17.0        [required by ppxlib]
  - install ocaml_intrinsics_kernel v0.17.1        [required by base]
  - install ppx_assert              v0.17.0        [required by jst-config]
  - install ppx_base                v0.17.0        [required by time_now]
  - install ppx_cold                v0.17.0        [required by ppx_base]
  - install ppx_compare             v0.17.0        [required by ppx_base]
  - install ppx_derivers            1.2.1          [required by ppxlib]
  - install ppx_enumerate           v0.17.0        [required by ppx_base]
  - install ppx_globalize           v0.17.2        [required by ppx_base]
  - install ppx_hash                v0.17.0        [required by ppx_base]
  - install ppx_here                v0.17.0        [required by ppx_assert]
  - install ppx_inline_test         v0.17.1        [required by restricted]
  - install ppx_optcomp             v0.17.1        [required by time_now]
  - install ppx_sexp_conv           v0.17.1        [required by ppx_base]
  - install ppxlib                  0.38.0         [required by ppx_inline_test]
  - install ppxlib_jane             v0.17.4        [required by ppx_globalize, ppx_enumerate, ppx_hash]
  - install restricted              2.0.0 (pinned)
  - install sexplib0                v0.17.0        [required by base, ppxlib]
  - install stdio                   v0.17.0        [required by ppx_optcomp]
  - install stdlib-shims            0.3.0          [required by ppxlib]
  - install time_now                v0.17.0        [required by ppx_inline_test]

<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
-> retrieved base.v0.17.3  (cached)
-> retrieved csexp.1.5.2  (cached)
-> retrieved dune.3.22.0, dune-configurator.3.22.0  (cached)
-> retrieved jane-street-headers.v0.17.0  (cached)
-> retrieved jst-config.v0.17.0  (cached)
-> retrieved ocaml-compiler-libs.v0.17.0  (cached)
-> retrieved ocaml_intrinsics_kernel.v0.17.1  (cached)
-> retrieved ppx_assert.v0.17.0  (cached)
-> retrieved ppx_base.v0.17.0  (cached)
-> retrieved ppx_cold.v0.17.0  (cached)
-> retrieved ppx_compare.v0.17.0  (cached)
-> retrieved ppx_derivers.1.2.1  (cached)
-> retrieved ppx_enumerate.v0.17.0  (cached)
-> retrieved ppx_globalize.v0.17.2  (cached)
-> retrieved ppx_hash.v0.17.0  (cached)
-> retrieved ppx_here.v0.17.0  (cached)
-> retrieved ppx_inline_test.v0.17.1  (cached)
-> retrieved ppx_optcomp.v0.17.1  (cached)
-> retrieved ppx_sexp_conv.v0.17.1  (cached)
-> retrieved ppxlib.0.38.0  (cached)
-> retrieved ppxlib_jane.v0.17.4  (cached)
-> retrieved restricted.2.0.0  (cached)
-> retrieved sexplib0.v0.17.0  (cached)
-> retrieved stdio.v0.17.0  (cached)
-> retrieved stdlib-shims.0.3.0  (cached)
-> retrieved time_now.v0.17.0  (cached)
-> installed dune.3.22.0
-> installed jane-street-headers.v0.17.0
-> installed ppx_derivers.1.2.1
-> installed csexp.1.5.2
-> installed ocaml-compiler-libs.v0.17.0
-> installed ocaml_intrinsics_kernel.v0.17.1
-> installed sexplib0.v0.17.0
-> installed stdlib-shims.0.3.0
-> installed dune-configurator.3.22.0
-> installed base.v0.17.3
-> installed stdio.v0.17.0
-> installed ppxlib.0.38.0
-> installed ppx_optcomp.v0.17.1
-> installed ppxlib_jane.v0.17.4
-> installed ppx_cold.v0.17.0
-> installed ppx_here.v0.17.0
-> installed ppx_enumerate.v0.17.0
-> installed ppx_globalize.v0.17.2
-> installed ppx_compare.v0.17.0
-> installed ppx_sexp_conv.v0.17.1
-> installed ppx_hash.v0.17.0
-> installed ppx_assert.v0.17.0
-> installed ppx_base.v0.17.0
-> installed jst-config.v0.17.0
-> installed time_now.v0.17.0
-> installed ppx_inline_test.v0.17.1
-> installed restricted.2.0.0
Done.
# To update the current shell environment, run: eval $(opam env)
2026-04-02 12:54.52 ---> saved as "24c2fa5c31b52fd5337f55bc95d6d9f4729558f123549deb06113fcff79c21fa"

/home/opam: (run (network host)
                 (shell "(opam reinstall --with-test restricted.2.0.0) || true"))
The following actions will be performed:
=== recompile 1 package
  - recompile restricted 2.0.0 (pinned)

<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
-> retrieved restricted.2.0.0  (https://codeberg.org/removewingman/restricted/releases/download/v2.0.0/ocaml-restricted-2.0.0.tar.gz)
-> removed   restricted.2.0.0
-> installed restricted.2.0.0
Done.
# To update the current shell environment, run: eval $(opam env)
2026-04-02 12:54.59 ---> saved as "d22006543878d0a454b6b9aabdf84bdda891f332ea0b47aed437fe5d1e5ebaec"

/home/opam: (run (shell  "opam reinstall --with-test --verbose restricted.2.0.0;\
                        \n        res=$?;\
                        \n        test \"$res\" != 31 && exit \"$res\";\
                        \n        export OPAMCLI=2.0;\
                        \n        build_dir=$(opam var prefix)/.opam-switch/build;\
                        \n        failed=$(ls \"$build_dir\");\
                        \n        partial_fails=\"\";\
                        \n        for pkg in $failed; do\
                        \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
                        \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
                        \n          fi;\
                        \n          test \"$pkg\" != 'restricted.2.0.0' && partial_fails=\"$partial_fails $pkg\";\
                        \n        done;\
                        \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
                        \n        exit 1"))
The following actions will be performed:
=== recompile 1 package
  - recompile restricted 2.0.0 (pinned)

<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
Processing  1/4: [restricted.2.0.0: extract]
-> retrieved restricted.2.0.0  (cached)
Processing  2/4: [restricted: dune build]
+ /home/opam/.opam/opam-init/hooks/sandbox.sh "build" "dune" "build" "-p" "restricted" "-j" "71" "@install" "@runtest" (CWD=/home/opam/.opam/5.4/.opam-switch/build/restricted.2.0.0)
-> compiled  restricted.2.0.0
-> removed   restricted.2.0.0
-> installed restricted.2.0.0
Done.
# To update the current shell environment, run: eval $(opam env)
2026-04-02 12:55.08 ---> saved as "8d36ed90f7d5c4d680e7b94b77d31ae54230638c347ac661ef7a3bab2e9f0d4e"
Job succeeded
2026-04-02 12:55.14: Job succeeded