Build:
  1. 0
2026-04-18 09:24.52: New job: test ca-certs-nss.3.118 with duration.0.3.1, using opam dev
                              from https://github.com/ocaml/opam-repository.git#refs/pull/29735/head (d2994e251ba9715f6918de9964575588ce23b570)
                              on debian-13-ocaml-4.14/amd64

To reproduce locally:

cd $(mktemp -d)
git clone --recursive "https://github.com/ocaml/opam-repository.git" && cd "opam-repository" && git fetch origin "refs/pull/29735/head" && git reset --hard d2994e25
git fetch origin master
git merge --no-edit d78d992b37e877fcbf807cdf22e0013f4b79b8fb
cat > ../Dockerfile <<'END-OF-DOCKERFILE'
FROM ocaml/opam:debian-13-ocaml-4.14@sha256:ec5999d94ff5da2754b2d163583ef868ccaefbaaabbe66412fde8712ae6f5126
USER 1000:1000
WORKDIR /home/opam
RUN sudo ln -f /usr/bin/opam-dev /usr/bin/opam
RUN opam init --reinit -ni
RUN opam option solver=builtin-0install && opam config report
ENV OPAMDOWNLOADJOBS="1"
ENV OPAMERRLOGLEN="0"
ENV OPAMPRECISETRACKING="1"
ENV CI="true"
ENV OPAM_REPO_CI="true"
RUN rm -rf opam-repository/
COPY --chown=1000:1000 . opam-repository/
RUN opam repository set-url --strict default opam-repository/
RUN opam update --depexts || true
RUN opam pin add -k version -yn duration.0.3.1 0.3.1
RUN opam reinstall duration.0.3.1; \
    res=$?; \
    test "$res" != 31 && exit "$res"; \
    export OPAMCLI=2.0; \
    build_dir=$(opam var prefix)/.opam-switch/build; \
    failed=$(ls "$build_dir"); \
    partial_fails=""; \
    for pkg in $failed; do \
    if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"debian-13\""; then \
    echo "A package failed and has been disabled for CI using the 'x-ci-accept-failures' field."; \
    fi; \
    test "$pkg" != 'duration.0.3.1' && partial_fails="$partial_fails $pkg"; \
    done; \
    test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}"; \
    exit 1
RUN opam reinstall ca-certs-nss.3.118; \
    res=$?; \
    test "$res" != 31 && exit "$res"; \
    export OPAMCLI=2.0; \
    build_dir=$(opam var prefix)/.opam-switch/build; \
    failed=$(ls "$build_dir"); \
    partial_fails=""; \
    for pkg in $failed; do \
    if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"debian-13\""; then \
    echo "A package failed and has been disabled for CI using the 'x-ci-accept-failures' field."; \
    fi; \
    test "$pkg" != 'ca-certs-nss.3.118' && partial_fails="$partial_fails $pkg"; \
    done; \
    test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}"; \
    exit 1
RUN (opam reinstall --with-test ca-certs-nss.3.118) || true
RUN opam reinstall --with-test --verbose ca-certs-nss.3.118; \
    res=$?; \
    test "$res" != 31 && exit "$res"; \
    export OPAMCLI=2.0; \
    build_dir=$(opam var prefix)/.opam-switch/build; \
    failed=$(ls "$build_dir"); \
    partial_fails=""; \
    for pkg in $failed; do \
    if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"debian-13\""; then \
    echo "A package failed and has been disabled for CI using the 'x-ci-accept-failures' field."; \
    fi; \
    test "$pkg" != 'ca-certs-nss.3.118' && partial_fails="$partial_fails $pkg"; \
    done; \
    test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}"; \
    exit 1

END-OF-DOCKERFILE
docker build -f ../Dockerfile .

2026-04-18 09:24.52: Using cache hint "ocaml/opam:debian-13-ocaml-4.14@sha256:ec5999d94ff5da2754b2d163583ef868ccaefbaaabbe66412fde8712ae6f5126-duration.0.3.1-ca-certs-nss.3.118-d2994e251ba9715f6918de9964575588ce23b570"
2026-04-18 09:24.52: Using OBuilder spec:
((from ocaml/opam:debian-13-ocaml-4.14@sha256:ec5999d94ff5da2754b2d163583ef868ccaefbaaabbe66412fde8712ae6f5126)
 (user (uid 1000) (gid 1000))
 (workdir /home/opam)
 (run (shell "sudo ln -f /usr/bin/opam-dev /usr/bin/opam"))
 (run (network host)
      (shell "opam init --reinit --config .opamrc-sandbox -ni"))
 (run (shell "opam option solver=builtin-0install && opam config report"))
 (env OPAMDOWNLOADJOBS 1)
 (env OPAMERRLOGLEN 0)
 (env OPAMPRECISETRACKING 1)
 (env CI true)
 (env OPAM_REPO_CI true)
 (run (shell "rm -rf opam-repository/"))
 (copy (src .) (dst opam-repository/))
 (run (shell "opam repository set-url --strict default opam-repository/"))
 (run (network host)
      (shell "opam update --depexts || true"))
 (run (shell "opam pin add -k version -yn duration.0.3.1 0.3.1"))
 (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
      (network host)
      (shell  "opam reinstall duration.0.3.1;\
             \n        res=$?;\
             \n        test \"$res\" != 31 && exit \"$res\";\
             \n        export OPAMCLI=2.0;\
             \n        build_dir=$(opam var prefix)/.opam-switch/build;\
             \n        failed=$(ls \"$build_dir\");\
             \n        partial_fails=\"\";\
             \n        for pkg in $failed; do\
             \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
             \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
             \n          fi;\
             \n          test \"$pkg\" != 'duration.0.3.1' && partial_fails=\"$partial_fails $pkg\";\
             \n        done;\
             \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
             \n        exit 1"))
 (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
      (network host)
      (shell  "opam reinstall ca-certs-nss.3.118;\
             \n        res=$?;\
             \n        test \"$res\" != 31 && exit \"$res\";\
             \n        export OPAMCLI=2.0;\
             \n        build_dir=$(opam var prefix)/.opam-switch/build;\
             \n        failed=$(ls \"$build_dir\");\
             \n        partial_fails=\"\";\
             \n        for pkg in $failed; do\
             \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
             \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
             \n          fi;\
             \n          test \"$pkg\" != 'ca-certs-nss.3.118' && partial_fails=\"$partial_fails $pkg\";\
             \n        done;\
             \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
             \n        exit 1"))
 (run (network host)
      (shell "(opam reinstall --with-test ca-certs-nss.3.118) || true"))
 (run (shell  "opam reinstall --with-test --verbose ca-certs-nss.3.118;\
             \n        res=$?;\
             \n        test \"$res\" != 31 && exit \"$res\";\
             \n        export OPAMCLI=2.0;\
             \n        build_dir=$(opam var prefix)/.opam-switch/build;\
             \n        failed=$(ls \"$build_dir\");\
             \n        partial_fails=\"\";\
             \n        for pkg in $failed; do\
             \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
             \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
             \n          fi;\
             \n          test \"$pkg\" != 'ca-certs-nss.3.118' && partial_fails=\"$partial_fails $pkg\";\
             \n        done;\
             \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
             \n        exit 1"))
)

2026-04-18 09:24.52: Waiting for resource in pool OCluster
2026-04-18 09:37.20: Waiting for worker…
2026-04-18 09:39.23: Got resource from pool OCluster
Building on clete.caelum.ci.dev
All commits already cached
Updating files:  65% (12245/18764)
Updating files:  66% (12385/18764)
Updating files:  67% (12572/18764)
Updating files:  68% (12760/18764)
Updating files:  69% (12948/18764)
Updating files:  70% (13135/18764)
Updating files:  71% (13323/18764)
Updating files:  72% (13511/18764)
Updating files:  73% (13698/18764)
Updating files:  74% (13886/18764)
Updating files:  75% (14073/18764)
Updating files:  76% (14261/18764)
Updating files:  77% (14449/18764)
Updating files:  78% (14636/18764)
Updating files:  79% (14824/18764)
Updating files:  80% (15012/18764)
Updating files:  81% (15199/18764)
Updating files:  82% (15387/18764)
Updating files:  83% (15575/18764)
Updating files:  84% (15762/18764)
Updating files:  85% (15950/18764)
Updating files:  86% (16138/18764)
Updating files:  87% (16325/18764)
Updating files:  88% (16513/18764)
Updating files:  89% (16700/18764)
Updating files:  90% (16888/18764)
Updating files:  91% (17076/18764)
Updating files:  92% (17263/18764)
Updating files:  93% (17451/18764)
Updating files:  94% (17639/18764)
Updating files:  95% (17826/18764)
Updating files:  96% (18014/18764)
Updating files:  97% (18202/18764)
Updating files:  98% (18389/18764)
Updating files:  99% (18577/18764)
Updating files: 100% (18764/18764)
Updating files: 100% (18764/18764), done.
HEAD is now at d78d992b37 Merge pull request #29739 from janestreet/core.v0.17.2-available-arch-arm32
Merge made by the 'ort' strategy.
 packages/duration/duration.0.3.1/opam | 34 ++++++++++++++++++++++++++++++++++
 1 file changed, 34 insertions(+)
 create mode 100644 packages/duration/duration.0.3.1/opam

(from ocaml/opam:debian-13-ocaml-4.14@sha256:ec5999d94ff5da2754b2d163583ef868ccaefbaaabbe66412fde8712ae6f5126)
Unable to find image 'ocaml/opam:debian-13-ocaml-4.14@sha256:ec5999d94ff5da2754b2d163583ef868ccaefbaaabbe66412fde8712ae6f5126' locally
docker.io/ocaml/opam@sha256:ec5999d94ff5da2754b2d163583ef868ccaefbaaabbe66412fde8712ae6f5126: Pulling from ocaml/opam
8f6ad858d0a4: Already exists
9cb5e198c8cf: Already exists
2d346d36dcf2: Already exists
cdc35e289b8d: Already exists
aeb7244bb580: Already exists
fc1943254a0d: Already exists
84238c416f8e: Already exists
fbbfe75d3112: Already exists
221fdc5d9929: Already exists
1fec9149b52a: Already exists
9c6e52557f24: Already exists
8737f5036aae: Already exists
d69c4074de14: Already exists
7237152a5f04: Already exists
fba4b414d8a0: Already exists
40d552afb3ef: Already exists
077cc17dc8e4: Already exists
077cc17dc8e4: Already exists
169e1be36a55: Already exists
0a8a005097ab: Already exists
caba3ec4b361: Already exists
6a364dc641f8: Already exists
4f4fb700ef54: Already exists
ab8052928cdc: Already exists
f5717a28dd6a: Already exists
79233a9b9bed: Already exists
d832d53e7392: Already exists
1872dad82243: Already exists
bfd849b08ba7: Already exists
834a8024ef15: Already exists
98ccec79258b: Already exists
fb48f36a0542: Already exists
3688b13db8e7: Already exists
a5c099f5f72c: Already exists
1ff1760de5b0: Already exists
98eec6764aa5: Already exists
aa22ae69debd: Already exists
12bfb7b962a2: Already exists
ec25ce9bb816: Already exists
beadd3cf7357: Already exists
d0d0c65a426d: Already exists
27080da82c6b: Pulling fs layer
3b99adeb504e: Pulling fs layer
867c8a52ad10: Pulling fs layer
01ca275a6ca2: Pulling fs layer
01ca275a6ca2: Waiting
867c8a52ad10: Download complete
01ca275a6ca2: Verifying Checksum
01ca275a6ca2: Download complete
3b99adeb504e: Verifying Checksum
3b99adeb504e: Download complete
27080da82c6b: Verifying Checksum
27080da82c6b: Download complete
27080da82c6b: Pull complete
3b99adeb504e: Pull complete
867c8a52ad10: Pull complete
01ca275a6ca2: Pull complete
Digest: sha256:ec5999d94ff5da2754b2d163583ef868ccaefbaaabbe66412fde8712ae6f5126
Status: Downloaded newer image for ocaml/opam@sha256:ec5999d94ff5da2754b2d163583ef868ccaefbaaabbe66412fde8712ae6f5126
2026-04-18 09:39.42 ---> using "d0e330c08fa445d83f06df86dbe749aac73c20b9c3be340824d01a143f189b82" from cache

/: (user (uid 1000) (gid 1000))

/: (workdir /home/opam)

/home/opam: (run (shell "sudo ln -f /usr/bin/opam-dev /usr/bin/opam"))
2026-04-18 09:39.42 ---> using "3ec7ac935151f5277a236626f366bf7f6f18395cb01e6e86eff2abeffc750f69" from cache

/home/opam: (run (network host)
                 (shell "opam init --reinit --config .opamrc-sandbox -ni"))
Configuring from /home/opam/.opamrc-sandbox, then /home/opam/.opamrc, and finally from built-in defaults.
Checking for available remotes: rsync and local, git.
  - you won't be able to use mercurial repositories unless you install the hg command on your system.
  - you won't be able to use darcs repositories unless you install the darcs command on your system.

This version of opam requires an update to the layout of /home/opam/.opam from version 2.0 to version 2.2, which can't be reverted.
You may want to back it up before going further.

Continue? [Y/n] y
Format upgrade done.

<><> Updating repositories ><><><><><><><><><><><><><><><><><><><><><><><><><><>
[default] Initialised
2026-04-18 09:39.42 ---> using "b5a0847c35501fd963cedc3388b00c999e5617a9db85df5529c240a6fc10a617" from cache

/home/opam: (run (shell "opam option solver=builtin-0install && opam config report"))
Set to 'builtin-0install' the field solver in global configuration
# opam config report
# opam-version         2.5.0
# self-upgrade         no
# system               arch=x86_64 os=linux os-distribution=debian os-version=13
# solver               builtin-0install
# install-criteria     -changed,-count[avoid-version,solution]
# upgrade-criteria     -count[avoid-version,solution]
# jobs                 71
# repositories         1 (version-controlled)
# pinned               1 (version)
# current-switch       4.14
# invariant            ["ocaml-base-compiler" {= "4.14.3"}]
# compiler-packages    ocaml-base-compiler.4.14.3, ocaml-options-vanilla.1
# ocaml:native         true
# ocaml:native-tools   true
# ocaml:native-dynlink true
# ocaml:stubsdir       /home/opam/.opam/4.14/lib/ocaml/stublibs:/home/opam/.opam/4.14/lib/ocaml
# ocaml:preinstalled   false
# ocaml:compiler       4.14.3
2026-04-18 09:39.42 ---> using "28464b62e165a839b63b1c2ae024a4b4fcbe23c1802c3adf881d35db6bc1d4c2" from cache

/home/opam: (env OPAMDOWNLOADJOBS 1)

/home/opam: (env OPAMERRLOGLEN 0)

/home/opam: (env OPAMPRECISETRACKING 1)

/home/opam: (env CI true)

/home/opam: (env OPAM_REPO_CI true)

/home/opam: (run (shell "rm -rf opam-repository/"))
2026-04-18 09:39.42 ---> using "4dfd69403557bd9c8ecec7a8b2fdd9b50feea12943fd8b9150cd347ede8d5f38" from cache

/home/opam: (copy (src .) (dst opam-repository/))
2026-04-18 09:39.44 ---> using "759507880501226b3a4a06faff283e6ff3e281c32469c857034064b70d2a1b8d" from cache

/home/opam: (run (shell "opam repository set-url --strict default opam-repository/"))
[default] Initialised
default (at file:///home/opam/opam-repository): 
    [WARNING] opam is out-of-date. Please consider updating it (https://opam.ocaml.org/doc/Install.html)

default (at file:///home/opam/opam-repository): 
    [INFO] opam 2.5.1 includes security fixes; please consider upgrading (https://opam.ocaml.org/doc/Install.html)

2026-04-18 09:39.44 ---> using "a0d3d38fb4e77cd27330ca20b716a51e767214189f7fcb5911d3beba5a04c3a5" from cache

/home/opam: (run (network host)
                 (shell "opam update --depexts || true"))
+ /usr/bin/sudo "apt-get" "update"
- Hit:1 http://deb.debian.org/debian trixie InRelease
- Get:2 http://deb.debian.org/debian trixie-updates InRelease [47.3 kB]
- Get:3 http://deb.debian.org/debian-security trixie-security InRelease [43.4 kB]
- Get:4 http://deb.debian.org/debian-security trixie-security/main amd64 Packages [124 kB]
- Fetched 214 kB in 0s (2243 kB/s)
- Reading package lists...
2026-04-18 09:39.44 ---> using "4104ada0674f169fcb1459f7b80daa558383dd9b998929b5289b2dc1d57e4bb5" from cache

/home/opam: (run (shell "opam pin add -k version -yn duration.0.3.1 0.3.1"))
duration is now pinned to version 0.3.1
2026-04-18 09:39.44 ---> using "724c4ab40512f79792175af0d7f52dc3d5ee38cd4e698f1dd5a7f619d7f0f26e" from cache

/home/opam: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
                 (network host)
                 (shell  "opam reinstall duration.0.3.1;\
                        \n        res=$?;\
                        \n        test \"$res\" != 31 && exit \"$res\";\
                        \n        export OPAMCLI=2.0;\
                        \n        build_dir=$(opam var prefix)/.opam-switch/build;\
                        \n        failed=$(ls \"$build_dir\");\
                        \n        partial_fails=\"\";\
                        \n        for pkg in $failed; do\
                        \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
                        \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
                        \n          fi;\
                        \n          test \"$pkg\" != 'duration.0.3.1' && partial_fails=\"$partial_fails $pkg\";\
                        \n        done;\
                        \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
                        \n        exit 1"))
duration.0.3.1 is not installed. Install it? [Y/n] y
The following actions will be performed:
=== install 2 packages
  - install dune     3.22.2         [required by duration]
  - install duration 0.3.1 (pinned)

<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
-> retrieved dune.3.22.2  (cached)
-> retrieved duration.0.3.1  (cached)
-> installed dune.3.22.2
-> installed duration.0.3.1
Done.
# To update the current shell environment, run: eval $(opam env)
2026-04-18 09:39.44 ---> using "de0cd7c089d1242dd17c16666c5ea041173fbf19beb029312729d4310651e915" from cache

/home/opam: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
                 (network host)
                 (shell  "opam reinstall ca-certs-nss.3.118;\
                        \n        res=$?;\
                        \n        test \"$res\" != 31 && exit \"$res\";\
                        \n        export OPAMCLI=2.0;\
                        \n        build_dir=$(opam var prefix)/.opam-switch/build;\
                        \n        failed=$(ls \"$build_dir\");\
                        \n        partial_fails=\"\";\
                        \n        for pkg in $failed; do\
                        \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
                        \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
                        \n          fi;\
                        \n          test \"$pkg\" != 'ca-certs-nss.3.118' && partial_fails=\"$partial_fails $pkg\";\
                        \n        done;\
                        \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
                        \n        exit 1"))
ca-certs-nss.3.118 is not installed. Install it? [Y/n] y
The following actions will be performed:
=== install 34 packages
  - install asn1-combinators  0.3.2  [required by x509]
  - install astring           0.8.5  [required by bos]
  - install base64            3.5.2  [required by x509]
  - install bos               0.2.1  [required by ca-certs-nss]
  - install ca-certs-nss      3.118
  - install cmdliner          2.1.0  [required by ca-certs-nss]
  - install conf-gmp          5      [required by conf-gmp-powm-sec, zarith]
  - install conf-gmp-powm-sec 4      [required by mirage-crypto-pk]
  - install conf-pkg-config   4      [required by zarith]
  - install csexp             1.5.2  [required by dune-configurator]
  - install digestif          1.3.0  [required by ca-certs-nss]
  - install domain-name       0.5.0  [required by x509]
  - install dune-configurator 3.22.2 [required by mirage-crypto-ec]
  - install eqaf              0.10   [required by digestif]
  - install fmt               0.11.0 [required by ca-certs-nss]
  - install fpath             0.7.3  [required by bos]
  - install gmap              0.3.0  [required by x509]
  - install ipaddr            5.6.2  [required by x509]
  - install kdf               1.0.0  [required by x509]
  - install logs              0.10.0 [required by ca-certs-nss]
  - install macaddr           5.6.2  [required by ipaddr]
  - install mirage-crypto     2.1.0  [required by x509]
  - install mirage-crypto-ec  2.1.0  [required by x509]
  - install mirage-crypto-pk  2.1.0  [required by x509]
  - install mirage-crypto-rng 2.1.0  [required by x509]
  - install mirage-ptime      5.2.0  [required by ca-certs-nss]
  - install ocamlbuild        0.16.1 [required by bos]
  - install ocamlfind         1.9.8  [required by bos]
  - install ohex              0.2.0  [required by x509]
  - install ptime             1.2.0  [required by mirage-ptime, x509]
  - install rresult           0.7.0  [required by bos]
  - install topkg             1.1.1  [required by bos]
  - install x509              1.0.6  [required by ca-certs-nss]
  - install zarith            1.14   [required by mirage-crypto-pk]

The following system packages will first need to be installed:
    libgmp-dev pkg-config

<><> Handling external dependencies <><><><><><><><><><><><><><><><><><><><><><>

opam believes some required external dependencies are missing. opam can:
> 1. Run apt-get to install them (may need root/sudo access)
  2. Display the recommended apt-get command and wait while you run it manually (e.g. in another terminal)
  3. Continue anyway, and, upon success, permanently register that this external dependency is present, but not detectable
  4. Abort the installation

[1/2/3/4] 1

+ /usr/bin/sudo "apt-get" "install" "-qq" "-yy" "libgmp-dev" "pkg-config"
- Selecting previously unselected package libgmpxx4ldbl:amd64.
- (Reading database ... 
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 20623 files and directories currently installed.)
- Preparing to unpack .../0-libgmpxx4ldbl_2%3a6.3.0+dfsg-3_amd64.deb ...
- Unpacking libgmpxx4ldbl:amd64 (2:6.3.0+dfsg-3) ...
- Selecting previously unselected package libgmp-dev:amd64.
- Preparing to unpack .../1-libgmp-dev_2%3a6.3.0+dfsg-3_amd64.deb ...
- Unpacking libgmp-dev:amd64 (2:6.3.0+dfsg-3) ...
- Selecting previously unselected package libpkgconf3:amd64.
- Preparing to unpack .../2-libpkgconf3_1.8.1-4_amd64.deb ...
- Unpacking libpkgconf3:amd64 (1.8.1-4) ...
- Selecting previously unselected package pkgconf-bin.
- Preparing to unpack .../3-pkgconf-bin_1.8.1-4_amd64.deb ...
- Unpacking pkgconf-bin (1.8.1-4) ...
- Selecting previously unselected package pkgconf:amd64.
- Preparing to unpack .../4-pkgconf_1.8.1-4_amd64.deb ...
- Unpacking pkgconf:amd64 (1.8.1-4) ...
- Selecting previously unselected package pkg-config:amd64.
- Preparing to unpack .../5-pkg-config_1.8.1-4_amd64.deb ...
- Unpacking pkg-config:amd64 (1.8.1-4) ...
- Setting up libpkgconf3:amd64 (1.8.1-4) ...
- Setting up libgmpxx4ldbl:amd64 (2:6.3.0+dfsg-3) ...
- Setting up pkgconf-bin (1.8.1-4) ...
- Setting up libgmp-dev:amd64 (2:6.3.0+dfsg-3) ...
- Setting up pkgconf:amd64 (1.8.1-4) ...
- Setting up pkg-config:amd64 (1.8.1-4) ...
- Processing triggers for libc-bin (2.41-12+deb13u2) ...

<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
-> retrieved asn1-combinators.0.3.2  (cached)
-> retrieved astring.0.8.5  (cached)
-> retrieved base64.3.5.2  (cached)
-> retrieved bos.0.2.1  (cached)
-> retrieved ca-certs-nss.3.118  (https://opam.ocaml.org/cache)
-> retrieved cmdliner.2.1.0  (cached)
-> retrieved conf-gmp.5  (cached)
-> retrieved conf-gmp-powm-sec.4  (cached)
-> installed base64.3.5.2
-> retrieved csexp.1.5.2  (cached)
-> installed conf-gmp.5
-> installed conf-pkg-config.4
-> installed conf-gmp-powm-sec.4
-> installed csexp.1.5.2
-> retrieved digestif.1.3.0  (cached)
-> retrieved domain-name.0.5.0  (cached)
-> installed domain-name.0.5.0
-> retrieved dune-configurator.3.22.2  (cached)
-> retrieved eqaf.0.10  (cached)
-> retrieved fmt.0.11.0  (cached)
-> retrieved fpath.0.7.3  (cached)
-> retrieved gmap.0.3.0  (cached)
-> retrieved ipaddr.5.6.2, macaddr.5.6.2  (cached)
-> retrieved kdf.1.0.0  (cached)
-> retrieved logs.0.10.0  (cached)
-> installed cmdliner.2.1.0
-> installed gmap.0.3.0
-> installed macaddr.5.6.2
-> installed dune-configurator.3.22.2
-> installed eqaf.0.10
-> retrieved mirage-crypto.2.1.0, mirage-crypto-ec.2.1.0, mirage-crypto-pk.2.1.0, mirage-crypto-rng.2.1.0  (cached)
-> retrieved mirage-ptime.5.2.0  (cached)
-> retrieved ocamlbuild.0.16.1  (cached)
-> installed ipaddr.5.6.2
-> retrieved ocamlfind.1.9.8  (cached)
-> retrieved ohex.0.2.0  (cached)
-> retrieved ptime.1.2.0  (cached)
-> retrieved rresult.0.7.0  (cached)
-> retrieved topkg.1.1.1  (cached)
-> retrieved x509.1.0.6  (cached)
-> retrieved zarith.1.14  (cached)
-> installed ohex.0.2.0
-> installed digestif.1.3.0
-> installed mirage-crypto.2.1.0
-> installed kdf.1.0.0
-> installed ocamlfind.1.9.8
-> installed ocamlbuild.0.16.1
-> installed zarith.1.14
-> installed topkg.1.1.1
-> installed rresult.0.7.0
-> installed fmt.0.11.0
-> installed ptime.1.2.0
-> installed mirage-ptime.5.2.0
-> installed astring.0.8.5
-> installed asn1-combinators.0.3.2
-> installed logs.0.10.0
-> installed fpath.0.7.3
-> installed mirage-crypto-rng.2.1.0
-> installed mirage-crypto-pk.2.1.0
-> installed bos.0.2.1
-> installed mirage-crypto-ec.2.1.0
-> installed x509.1.0.6
-> installed ca-certs-nss.3.118
Done.
# To update the current shell environment, run: eval $(opam env)
2026-04-18 09:41.01 ---> saved as "4d2764472a4c84cec0bacf1c89b1d3e9e9a3f48f24a7fc87886431e935464d88"

/home/opam: (run (network host)
                 (shell "(opam reinstall --with-test ca-certs-nss.3.118) || true"))
The following actions will be performed:
=== recompile 1 package
  - recompile ca-certs-nss       3.118
=== install 5 packages
  - install   alcotest           1.9.1  [required by ca-certs-nss]
  - install   ocaml-syntax-shims 1.0.0  [required by alcotest]
  - install   re                 1.14.0 [required by alcotest]
  - install   stdlib-shims       0.3.0  [required by alcotest]
  - install   uutf               1.0.4  [required by alcotest]

<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
-> retrieved alcotest.1.9.1  (https://opam.ocaml.org/cache)
-> retrieved ca-certs-nss.3.118  (https://opam.ocaml.org/cache)
-> retrieved ocaml-syntax-shims.1.0.0  (https://opam.ocaml.org/cache)
-> retrieved re.1.14.0  (https://opam.ocaml.org/cache)
-> retrieved stdlib-shims.0.3.0  (https://opam.ocaml.org/cache)
-> retrieved uutf.1.0.4  (https://opam.ocaml.org/cache)
-> installed stdlib-shims.0.3.0
-> installed ocaml-syntax-shims.1.0.0
-> installed re.1.14.0
-> removed   ca-certs-nss.3.118
-> installed uutf.1.0.4
-> installed alcotest.1.9.1
-> installed ca-certs-nss.3.118
Done.
# To update the current shell environment, run: eval $(opam env)
2026-04-18 09:41.17 ---> saved as "5f9ff714aeb914b0c9605388c9b15663e06535679d2b5dae4d28b6ab4499cb74"

/home/opam: (run (shell  "opam reinstall --with-test --verbose ca-certs-nss.3.118;\
                        \n        res=$?;\
                        \n        test \"$res\" != 31 && exit \"$res\";\
                        \n        export OPAMCLI=2.0;\
                        \n        build_dir=$(opam var prefix)/.opam-switch/build;\
                        \n        failed=$(ls \"$build_dir\");\
                        \n        partial_fails=\"\";\
                        \n        for pkg in $failed; do\
                        \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
                        \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
                        \n          fi;\
                        \n          test \"$pkg\" != 'ca-certs-nss.3.118' && partial_fails=\"$partial_fails $pkg\";\
                        \n        done;\
                        \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
                        \n        exit 1"))
The following actions will be performed:
=== recompile 1 package
  - recompile ca-certs-nss 3.118

<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
Processing  1/4: [ca-certs-nss.3.118: extract]
-> retrieved ca-certs-nss.3.118  (cached)
Processing  2/4: [ca-certs-nss: dune build]
+ /home/opam/.opam/opam-init/hooks/sandbox.sh "build" "dune" "build" "-p" "ca-certs-nss" "-j" "71" "@install" "@runtest" (CWD=/home/opam/.opam/4.14/.opam-switch/build/ca-certs-nss.3.118)
- (cd _build/default/lib && ../../install/default/bin/extract-from-certdata certdata.txt --output trust_anchor.ml)
- extract-from-certdata: [WARNING] Untrusted certificate "Go Daddy Class 2 CA" (serial 020100)
- extract-from-certdata: [WARNING] Untrusted certificate "Starfield Class 2 CA" (serial 020100)
- (cd _build/default/test && ./tests.exe)
- Testing `verification tests'.
- This run has ID `9OTE8LR4'.
- 
-   [OK]          X509 certificate validation          0   google.com.
-   [OK]          X509 certificate validation          1   extended-validation....
-   [OK]          X509 certificate validation          2   self-signed.badssl.com.
-   [OK]          X509 certificate validation          3   expired.badssl.com.
-   [OK]          X509 certificate validation          4   untrusted-root.badss...
-   [OK]          X509 certificate validation          5   wrong.host.badssl.com.
-   [OK]          X509 certificate validation          6   incomplete-chain.bad...
-   [OK]          X509 certificate validation          7   sha1-intermediate.ba...
-   [OK]          X509 certificate validation          8   wrong.host.google.com.
- 
- Full test results in `~/.opam/4.14/.opam-switch/build/ca-certs-nss.3.118/_build/default/test/_build/_tests/verification tests'.
- Test Successful in 0.004s. 9 tests run.
-> compiled  ca-certs-nss.3.118
-> removed   ca-certs-nss.3.118
-> installed ca-certs-nss.3.118
Done.
# To update the current shell environment, run: eval $(opam env)
2026-04-18 09:41.24 ---> saved as "9e0dc2454b1ffa634476e03439755c7237f69580b391ad466e1fe635ac02e43f"
Job succeeded
2026-04-18 09:41.30: Job succeeded