(for PR #28924)
2025-11-19 21:53.32: New job: build ca-certs-nss.3.118, using opam dev
from https://github.com/ocaml/opam-repository.git#refs/pull/28924/head (7439b7177962ba406cbaeaa3316b51f37a7b0b76)
on debian-13-ocaml-4.11/amd64
To reproduce locally:
cd $(mktemp -d)
git clone --recursive "https://github.com/ocaml/opam-repository.git" && cd "opam-repository" && git fetch origin "refs/pull/28924/head" && git reset --hard 7439b717
git fetch origin master
git merge --no-edit 87196fafe7f6488827fc23a7037de5c7e34867da
cat > ../Dockerfile <<'END-OF-DOCKERFILE'
FROM ocaml/opam:debian-13-ocaml-4.11@sha256:38fac689e3959378d281fb4beca10547fe9b05127faa09ce7c9c3b617d183539
USER 1000:1000
WORKDIR /home/opam
RUN sudo ln -f /usr/bin/opam-dev /usr/bin/opam
RUN opam init --reinit -ni
RUN opam option solver=builtin-0install && opam config report
ENV OPAMDOWNLOADJOBS="1"
ENV OPAMERRLOGLEN="0"
ENV OPAMPRECISETRACKING="1"
ENV CI="true"
ENV OPAM_REPO_CI="true"
RUN rm -rf opam-repository/
COPY --chown=1000:1000 . opam-repository/
RUN opam repository set-url --strict default opam-repository/
RUN opam update --depexts || true
RUN opam pin add -k version -yn ca-certs-nss.3.118 3.118
RUN opam reinstall ca-certs-nss.3.118; \
res=$?; \
test "$res" != 31 && exit "$res"; \
export OPAMCLI=2.0; \
build_dir=$(opam var prefix)/.opam-switch/build; \
failed=$(ls "$build_dir"); \
partial_fails=""; \
for pkg in $failed; do \
if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"debian-13\""; then \
echo "A package failed and has been disabled for CI using the 'x-ci-accept-failures' field."; \
fi; \
test "$pkg" != 'ca-certs-nss.3.118' && partial_fails="$partial_fails $pkg"; \
done; \
test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}"; \
exit 1
END-OF-DOCKERFILE
docker build -f ../Dockerfile .
2025-11-19 21:53.32: Using cache hint "ocaml/opam:debian-13-ocaml-4.11@sha256:38fac689e3959378d281fb4beca10547fe9b05127faa09ce7c9c3b617d183539-ca-certs-nss.3.118-7439b7177962ba406cbaeaa3316b51f37a7b0b76"
2025-11-19 21:53.32: Using OBuilder spec:
((from ocaml/opam:debian-13-ocaml-4.11@sha256:38fac689e3959378d281fb4beca10547fe9b05127faa09ce7c9c3b617d183539)
(user (uid 1000) (gid 1000))
(workdir /home/opam)
(run (shell "sudo ln -f /usr/bin/opam-dev /usr/bin/opam"))
(run (network host)
(shell "opam init --reinit --config .opamrc-sandbox -ni"))
(run (shell "opam option solver=builtin-0install && opam config report"))
(env OPAMDOWNLOADJOBS 1)
(env OPAMERRLOGLEN 0)
(env OPAMPRECISETRACKING 1)
(env CI true)
(env OPAM_REPO_CI true)
(run (shell "rm -rf opam-repository/"))
(copy (src .) (dst opam-repository/))
(run (shell "opam repository set-url --strict default opam-repository/"))
(run (network host)
(shell "opam update --depexts || true"))
(run (shell "opam pin add -k version -yn ca-certs-nss.3.118 3.118"))
(run (cache (opam-archives (target /home/opam/.opam/download-cache)))
(network host)
(shell "opam reinstall ca-certs-nss.3.118;\
\n res=$?;\
\n test \"$res\" != 31 && exit \"$res\";\
\n export OPAMCLI=2.0;\
\n build_dir=$(opam var prefix)/.opam-switch/build;\
\n failed=$(ls \"$build_dir\");\
\n partial_fails=\"\";\
\n for pkg in $failed; do\
\n if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
\n echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
\n fi;\
\n test \"$pkg\" != 'ca-certs-nss.3.118' && partial_fails=\"$partial_fails $pkg\";\
\n done;\
\n test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
\n exit 1"))
)
2025-11-19 21:53.32: Waiting for resource in pool OCluster
2025-11-19 21:53.33: Waiting for worker…
2025-11-19 21:53.33: Got resource from pool OCluster
Building on clete
HEAD is now at adc5db1552 [new release] ocaml-protoc (4 packages) (4.0)
HEAD is now at 87196fafe7 Merge pull request #28927 from dinosaure/release-lun-v0.0.2
Merge made by the 'ort' strategy.
packages/ca-certs-nss/ca-certs-nss.3.118/opam | 54 +++++++++++++++++++++++++++
1 file changed, 54 insertions(+)
create mode 100644 packages/ca-certs-nss/ca-certs-nss.3.118/opam
(from ocaml/opam:debian-13-ocaml-4.11@sha256:38fac689e3959378d281fb4beca10547fe9b05127faa09ce7c9c3b617d183539)
2025-11-19 21:53.38 ---> using "a8bae4d45b432f1b9c733c34732efbf585113d6350544f2d563b0b9c6055dd86" from cache
/: (user (uid 1000) (gid 1000))
/: (workdir /home/opam)
/home/opam: (run (shell "sudo ln -f /usr/bin/opam-dev /usr/bin/opam"))
2025-11-19 21:53.38 ---> using "d0beacd02378873792aaa3ed8287af08466fe98fa1532d6688ceeddbe699a65e" from cache
/home/opam: (run (network host)
(shell "opam init --reinit --config .opamrc-sandbox -ni"))
Configuring from /home/opam/.opamrc-sandbox, then /home/opam/.opamrc, and finally from built-in defaults.
Checking for available remotes: rsync and local, git.
- you won't be able to use mercurial repositories unless you install the hg command on your system.
- you won't be able to use darcs repositories unless you install the darcs command on your system.
This version of opam requires an update to the layout of /home/opam/.opam from version 2.0 to version 2.2, which can't be reverted.
You may want to back it up before going further.
Continue? [Y/n] y
Format upgrade done.
<><> Updating repositories ><><><><><><><><><><><><><><><><><><><><><><><><><><>
[default] Initialised
2025-11-19 21:53.38 ---> using "a214b143a1051e71ed35bd03cc02f97abf728dbe6630f14f000357c2ba3d5510" from cache
/home/opam: (run (shell "opam option solver=builtin-0install && opam config report"))
Set to 'builtin-0install' the field solver in global configuration
# opam config report
# opam-version 2.5.0~beta1
# self-upgrade no
# system arch=x86_64 os=linux os-distribution=debian os-version=13
# solver builtin-0install
# install-criteria -changed,-count[avoid-version,solution]
# upgrade-criteria -count[avoid-version,solution]
# jobs 71
# repositories 1 (version-controlled)
# pinned 1 (version)
# current-switch 4.11
# invariant ["ocaml-base-compiler" {= "4.11.2"}]
# compiler-packages ocaml-base-compiler.4.11.2
# ocaml:native true
# ocaml:native-tools true
# ocaml:native-dynlink true
# ocaml:stubsdir /home/opam/.opam/4.11/lib/ocaml/stublibs:/home/opam/.opam/4.11/lib/ocaml
# ocaml:preinstalled false
# ocaml:compiler 4.11.2
2025-11-19 21:53.38 ---> using "c940c0cf3c80cc56b7fe8720e628986a4f8e6bddcd3d030cd649b958115ae986" from cache
/home/opam: (env OPAMDOWNLOADJOBS 1)
/home/opam: (env OPAMERRLOGLEN 0)
/home/opam: (env OPAMPRECISETRACKING 1)
/home/opam: (env CI true)
/home/opam: (env OPAM_REPO_CI true)
/home/opam: (run (shell "rm -rf opam-repository/"))
2025-11-19 21:53.38 ---> using "729c0e8cf8cef1375e457617b7ebba13f727462d5b690c96ef2ed902af13f881" from cache
/home/opam: (copy (src .) (dst opam-repository/))
2025-11-19 21:53.53 ---> saved as "7ab51a452f9ff128aad145e347a7aceaf073ccc55f1b78d7a0ef0d42415ce2b4"
/home/opam: (run (shell "opam repository set-url --strict default opam-repository/"))
[default] Initialised
2025-11-19 21:54.11 ---> saved as "7c4df9957818fdb05d924e2ed75b2b99e186db3e556d5926e4c633af3e862ef2"
/home/opam: (run (network host)
(shell "opam update --depexts || true"))
+ /usr/bin/sudo "apt-get" "update"
- Get:1 http://deb.debian.org/debian trixie InRelease [140 kB]
- Get:2 http://deb.debian.org/debian trixie-updates InRelease [47.3 kB]
- Get:3 http://deb.debian.org/debian-security trixie-security InRelease [43.4 kB]
- Get:4 http://deb.debian.org/debian trixie/main amd64 Packages [9670 kB]
- Get:5 http://deb.debian.org/debian-security trixie-security/main amd64 Packages [71.8 kB]
- Fetched 9973 kB in 2s (6016 kB/s)
- Reading package lists...
-
2025-11-19 21:54.14 ---> saved as "35cd4ff70d96915c2eb0e197beaf715fc0f23bbc0594b4dc789020a55158ce58"
/home/opam: (run (shell "opam pin add -k version -yn ca-certs-nss.3.118 3.118"))
ca-certs-nss is now pinned to version 3.118
2025-11-19 21:54.15 ---> saved as "1dc370c48916e1a59767e5331aa7fac315dc2a67ec99e9eae497dc81a29d0484"
/home/opam: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
(network host)
(shell "opam reinstall ca-certs-nss.3.118;\
\n res=$?;\
\n test \"$res\" != 31 && exit \"$res\";\
\n export OPAMCLI=2.0;\
\n build_dir=$(opam var prefix)/.opam-switch/build;\
\n failed=$(ls \"$build_dir\");\
\n partial_fails=\"\";\
\n for pkg in $failed; do\
\n if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
\n echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
\n fi;\
\n test \"$pkg\" != 'ca-certs-nss.3.118' && partial_fails=\"$partial_fails $pkg\";\
\n done;\
\n test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
\n exit 1"))
ca-certs-nss.3.118 is not installed. Install it? [Y/n] y
* No agreement on the version of ocaml:
- (invariant) -> ocaml-base-compiler = 4.11.2 -> ocaml = 4.11.2
- ca-certs-nss >= 3.118 -> ocaml >= 4.13.0
You can temporarily relax the switch invariant with `--update-invariant'
No solution found, exiting
"/usr/bin/env" "bash" "-c" "opam reinstall ca-certs-nss.3.118;
res=$?;
test "$res" != 31 && exit "$res";
export OPAMCLI=2.0;
build_dir=$(opam var prefix)/.opam-switch/build;
failed=$(ls "$build_dir");
partial_fails="";
for pkg in $failed; do
if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"debian-13\""; then
echo "A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.";
fi;
test "$pkg" != 'ca-certs-nss.3.118' && partial_fails="$partial_fails $pkg";
done;
test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}";
exit 1" failed with exit status 20
2025-11-19 21:54.32: Job failed: Failed: Build failed
2025-11-19 21:54.32: Log analysis:
2025-11-19 21:54.32: >>>
No solution found, exiting
(score = 100)
2025-11-19 21:54.32: [SKIP] Package not available