(for PR #28924)
2025-11-19 21:53.32: New job: build ca-certs-nss.3.118, using opam dev
from https://github.com/ocaml/opam-repository.git#refs/pull/28924/head (7439b7177962ba406cbaeaa3316b51f37a7b0b76)
on debian-13-ocaml-5.0/amd64
To reproduce locally:
cd $(mktemp -d)
git clone --recursive "https://github.com/ocaml/opam-repository.git" && cd "opam-repository" && git fetch origin "refs/pull/28924/head" && git reset --hard 7439b717
git fetch origin master
git merge --no-edit 87196fafe7f6488827fc23a7037de5c7e34867da
cat > ../Dockerfile <<'END-OF-DOCKERFILE'
FROM ocaml/opam:debian-13-ocaml-5.0@sha256:03754099c3757b039397e6a357bcca95f29047e59f9a715bd5d44180db305d45
USER 1000:1000
WORKDIR /home/opam
RUN sudo ln -f /usr/bin/opam-dev /usr/bin/opam
RUN opam init --reinit -ni
RUN opam option solver=builtin-0install && opam config report
ENV OPAMDOWNLOADJOBS="1"
ENV OPAMERRLOGLEN="0"
ENV OPAMPRECISETRACKING="1"
ENV CI="true"
ENV OPAM_REPO_CI="true"
RUN rm -rf opam-repository/
COPY --chown=1000:1000 . opam-repository/
RUN opam repository set-url --strict default opam-repository/
RUN opam update --depexts || true
RUN opam pin add -k version -yn ca-certs-nss.3.118 3.118
RUN opam reinstall ca-certs-nss.3.118; \
res=$?; \
test "$res" != 31 && exit "$res"; \
export OPAMCLI=2.0; \
build_dir=$(opam var prefix)/.opam-switch/build; \
failed=$(ls "$build_dir"); \
partial_fails=""; \
for pkg in $failed; do \
if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"debian-13\""; then \
echo "A package failed and has been disabled for CI using the 'x-ci-accept-failures' field."; \
fi; \
test "$pkg" != 'ca-certs-nss.3.118' && partial_fails="$partial_fails $pkg"; \
done; \
test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}"; \
exit 1
END-OF-DOCKERFILE
docker build -f ../Dockerfile .
2025-11-19 21:53.32: Using cache hint "ocaml/opam:debian-13-ocaml-5.0@sha256:03754099c3757b039397e6a357bcca95f29047e59f9a715bd5d44180db305d45-ca-certs-nss.3.118-7439b7177962ba406cbaeaa3316b51f37a7b0b76"
2025-11-19 21:53.32: Using OBuilder spec:
((from ocaml/opam:debian-13-ocaml-5.0@sha256:03754099c3757b039397e6a357bcca95f29047e59f9a715bd5d44180db305d45)
(user (uid 1000) (gid 1000))
(workdir /home/opam)
(run (shell "sudo ln -f /usr/bin/opam-dev /usr/bin/opam"))
(run (network host)
(shell "opam init --reinit --config .opamrc-sandbox -ni"))
(run (shell "opam option solver=builtin-0install && opam config report"))
(env OPAMDOWNLOADJOBS 1)
(env OPAMERRLOGLEN 0)
(env OPAMPRECISETRACKING 1)
(env CI true)
(env OPAM_REPO_CI true)
(run (shell "rm -rf opam-repository/"))
(copy (src .) (dst opam-repository/))
(run (shell "opam repository set-url --strict default opam-repository/"))
(run (network host)
(shell "opam update --depexts || true"))
(run (shell "opam pin add -k version -yn ca-certs-nss.3.118 3.118"))
(run (cache (opam-archives (target /home/opam/.opam/download-cache)))
(network host)
(shell "opam reinstall ca-certs-nss.3.118;\
\n res=$?;\
\n test \"$res\" != 31 && exit \"$res\";\
\n export OPAMCLI=2.0;\
\n build_dir=$(opam var prefix)/.opam-switch/build;\
\n failed=$(ls \"$build_dir\");\
\n partial_fails=\"\";\
\n for pkg in $failed; do\
\n if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
\n echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
\n fi;\
\n test \"$pkg\" != 'ca-certs-nss.3.118' && partial_fails=\"$partial_fails $pkg\";\
\n done;\
\n test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
\n exit 1"))
)
2025-11-19 21:53.32: Waiting for resource in pool OCluster
2025-11-19 21:53.33: Waiting for worker…
2025-11-19 21:53.33: Got resource from pool OCluster
Building on asteria.caelum.ci.dev
All commits already cached
HEAD is now at 87196fafe7 Merge pull request #28927 from dinosaure/release-lun-v0.0.2
Merge made by the 'ort' strategy.
packages/ca-certs-nss/ca-certs-nss.3.118/opam | 54 +++++++++++++++++++++++++++
1 file changed, 54 insertions(+)
create mode 100644 packages/ca-certs-nss/ca-certs-nss.3.118/opam
(from ocaml/opam:debian-13-ocaml-5.0@sha256:03754099c3757b039397e6a357bcca95f29047e59f9a715bd5d44180db305d45)
Unable to find image 'ocaml/opam:debian-13-ocaml-5.0@sha256:03754099c3757b039397e6a357bcca95f29047e59f9a715bd5d44180db305d45' locally
docker.io/ocaml/opam@sha256:03754099c3757b039397e6a357bcca95f29047e59f9a715bd5d44180db305d45: Pulling from ocaml/opam
13cc39f8244a: Already exists
9d7c1cac6af4: Already exists
979e6521bf84: Already exists
b129e961d700: Already exists
9288fc69cd29: Already exists
b232c90b1855: Already exists
658a78f60f44: Already exists
b3e6010fbc4c: Already exists
e75ac7b73fdb: Already exists
f1dbfc01d8b6: Already exists
42e8958c94a5: Already exists
1c77fd15fa4b: Already exists
f8ae0ec2765e: Already exists
87b5808a8709: Already exists
6551add7b2f4: Already exists
a050a941214a: Already exists
da6cadefa7ea: Already exists
0a3e89137cf8: Already exists
cc34154fc322: Already exists
eb7661180f3a: Already exists
faad806bf7c5: Already exists
4f4fb700ef54: Already exists
fe5692607199: Already exists
caa548e7f855: Already exists
8ad66e641b14: Already exists
b9d5d27dc0b6: Already exists
788961b65661: Already exists
9ed95272e11f: Already exists
82c1497059a3: Already exists
8abbeded2fb9: Already exists
1276181ef5dc: Already exists
0bd63c9342a5: Already exists
0294cf425d8c: Already exists
def43d8fc04c: Already exists
c87ed18f9ca6: Already exists
056f995b50a2: Already exists
c9f03af6c585: Already exists
4e0df0b17574: Already exists
1fcd55c53252: Already exists
9fe15f147c9c: Already exists
f0a8b8e5304f: Pulling fs layer
3f85055c1c44: Pulling fs layer
93584a8616e4: Pulling fs layer
a8a0442c0014: Pulling fs layer
a8a0442c0014: Waiting
3f85055c1c44: Verifying Checksum
3f85055c1c44: Download complete
93584a8616e4: Verifying Checksum
93584a8616e4: Download complete
a8a0442c0014: Verifying Checksum
a8a0442c0014: Download complete
f0a8b8e5304f: Verifying Checksum
f0a8b8e5304f: Download complete
f0a8b8e5304f: Pull complete
3f85055c1c44: Pull complete
93584a8616e4: Pull complete
a8a0442c0014: Pull complete
Digest: sha256:03754099c3757b039397e6a357bcca95f29047e59f9a715bd5d44180db305d45
Status: Downloaded newer image for ocaml/opam@sha256:03754099c3757b039397e6a357bcca95f29047e59f9a715bd5d44180db305d45
2025-11-19 21:53.48 ---> using "8eb808928be62b980bf34435fb5d25dc54e9452b40c7ade2555f4170f9c17651" from cache
/: (user (uid 1000) (gid 1000))
/: (workdir /home/opam)
/home/opam: (run (shell "sudo ln -f /usr/bin/opam-dev /usr/bin/opam"))
2025-11-19 21:53.48 ---> using "e455f99698116adeb2dbc9f0fff243e7195ebe70194668c4cd8897d277f517e2" from cache
/home/opam: (run (network host)
(shell "opam init --reinit --config .opamrc-sandbox -ni"))
Configuring from /home/opam/.opamrc-sandbox, then /home/opam/.opamrc, and finally from built-in defaults.
Checking for available remotes: rsync and local, git.
- you won't be able to use mercurial repositories unless you install the hg command on your system.
- you won't be able to use darcs repositories unless you install the darcs command on your system.
This version of opam requires an update to the layout of /home/opam/.opam from version 2.0 to version 2.2, which can't be reverted.
You may want to back it up before going further.
Continue? [Y/n] y
[NOTE] The 'jobs' option was reset, its value was 71 and its new value will vary according to the current number of cores on your machine. You can restore the fixed value using:
opam option jobs=71 --global
Format upgrade done.
<><> Updating repositories ><><><><><><><><><><><><><><><><><><><><><><><><><><>
[default] Initialised
2025-11-19 21:53.48 ---> using "9a1e841070b74253967ba8185111964405fa763ca271eddb485333c92bf5af0c" from cache
/home/opam: (run (shell "opam option solver=builtin-0install && opam config report"))
Set to 'builtin-0install' the field solver in global configuration
# opam config report
# opam-version 2.5.0~beta1
# self-upgrade no
# system arch=x86_64 os=linux os-distribution=debian os-version=13
# solver builtin-0install
# install-criteria -changed,-count[avoid-version,solution]
# upgrade-criteria -count[avoid-version,solution]
# jobs 255
# repositories 1 (version-controlled)
# pinned 1 (version)
# current-switch 5.0
# invariant ["ocaml-base-compiler" {= "5.0.0"}]
# compiler-packages ocaml-base-compiler.5.0.0, ocaml-options-vanilla.1
# ocaml:native true
# ocaml:native-tools true
# ocaml:native-dynlink true
# ocaml:stubsdir /home/opam/.opam/5.0/lib/ocaml/stublibs:/home/opam/.opam/5.0/lib/ocaml
# ocaml:preinstalled false
# ocaml:compiler 5.0.0
2025-11-19 21:53.48 ---> using "3da18b59c977ecb24303ac8b00f21d648c79b3bac9fb2dacffc4e089d0c59b00" from cache
/home/opam: (env OPAMDOWNLOADJOBS 1)
/home/opam: (env OPAMERRLOGLEN 0)
/home/opam: (env OPAMPRECISETRACKING 1)
/home/opam: (env CI true)
/home/opam: (env OPAM_REPO_CI true)
/home/opam: (run (shell "rm -rf opam-repository/"))
2025-11-19 21:53.48 ---> using "c23afcc8c3c6cee2954758a54f15fcda2401dfbc93d47b4e1a5ff7844b4dabf1" from cache
/home/opam: (copy (src .) (dst opam-repository/))
2025-11-19 21:53.59 ---> saved as "034fb526d2530be719fe5ec7e9a0d786802876c931bce1657ef1a150fff9b02a"
/home/opam: (run (shell "opam repository set-url --strict default opam-repository/"))
[default] Initialised
2025-11-19 21:54.17 ---> saved as "22833f7a743df8477afaf378c553bd4b6aceef7bd8d4f3fec64201e7e7a3cccc"
/home/opam: (run (network host)
(shell "opam update --depexts || true"))
+ /usr/bin/sudo "apt-get" "update"
- Get:1 http://deb.debian.org/debian trixie InRelease [140 kB]
- Get:2 http://deb.debian.org/debian trixie-updates InRelease [47.3 kB]
- Get:3 http://deb.debian.org/debian-security trixie-security InRelease [43.4 kB]
- Get:4 http://deb.debian.org/debian trixie/main amd64 Packages [9670 kB]
- Get:5 http://deb.debian.org/debian-security trixie-security/main amd64 Packages [71.8 kB]
- Fetched 9973 kB in 1s (9937 kB/s)
- Reading package lists...
2025-11-19 21:54.19 ---> saved as "9dd7059585a221706f2c0c036cfa2f49b32fa3aa9ffe1d1f1c175686d84f184c"
/home/opam: (run (shell "opam pin add -k version -yn ca-certs-nss.3.118 3.118"))
ca-certs-nss is now pinned to version 3.118
2025-11-19 21:54.20 ---> saved as "cef9fb225b336179871138a8dc810bafa6ae5dcf54823931bc92099275ebf233"
/home/opam: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
(network host)
(shell "opam reinstall ca-certs-nss.3.118;\
\n res=$?;\
\n test \"$res\" != 31 && exit \"$res\";\
\n export OPAMCLI=2.0;\
\n build_dir=$(opam var prefix)/.opam-switch/build;\
\n failed=$(ls \"$build_dir\");\
\n partial_fails=\"\";\
\n for pkg in $failed; do\
\n if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
\n echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
\n fi;\
\n test \"$pkg\" != 'ca-certs-nss.3.118' && partial_fails=\"$partial_fails $pkg\";\
\n done;\
\n test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
\n exit 1"))
ca-certs-nss.3.118 is not installed. Install it? [Y/n] y
The following actions will be performed:
=== install 36 packages
- install asn1-combinators 0.3.2 [required by x509]
- install astring 0.8.5 [required by bos]
- install base64 3.5.2 [required by x509]
- install bos 0.2.1 [required by ca-certs-nss]
- install ca-certs-nss 3.118 (pinned)
- install cmdliner 2.0.0 [required by ca-certs-nss]
- install conf-gmp 5 [required by conf-gmp-powm-sec, zarith]
- install conf-gmp-powm-sec 4 [required by mirage-crypto-pk]
- install conf-pkg-config 4 [required by zarith]
- install csexp 1.5.2 [required by dune-configurator]
- install digestif 1.3.0 [required by ca-certs-nss]
- install domain-name 0.5.0 [required by x509]
- install dune 3.20.2 [required by ca-certs-nss]
- install dune-configurator 3.20.2 [required by mirage-crypto-ec]
- install duration 0.2.1 [required by mirage-crypto-rng]
- install eqaf 0.10 [required by digestif]
- install fmt 0.11.0 [required by ca-certs-nss]
- install fpath 0.7.3 [required by bos]
- install gmap 0.3.0 [required by x509]
- install ipaddr 5.6.1 [required by x509]
- install kdf 1.0.0 [required by x509]
- install logs 0.10.0 [required by ca-certs-nss]
- install macaddr 5.6.1 [required by ipaddr]
- install mirage-crypto 2.0.2 [required by x509]
- install mirage-crypto-ec 2.0.2 [required by x509]
- install mirage-crypto-pk 2.0.2 [required by x509]
- install mirage-crypto-rng 2.0.2 [required by x509]
- install mirage-ptime 5.2.0 [required by ca-certs-nss]
- install ocamlbuild 0.16.1 [required by bos]
- install ocamlfind 1.9.8 [required by bos]
- install ohex 0.2.0 [required by x509]
- install ptime 1.2.0 [required by mirage-ptime, x509]
- install rresult 0.7.0 [required by bos]
- install topkg 1.1.1 [required by bos]
- install x509 1.0.6 [required by ca-certs-nss]
- install zarith 1.14 [required by mirage-crypto-pk]
The following system packages will first need to be installed:
libgmp-dev pkg-config
<><> Handling external dependencies <><><><><><><><><><><><><><><><><><><><><><>
opam believes some required external dependencies are missing. opam can:
> 1. Run apt-get to install them (may need root/sudo access)
2. Display the recommended apt-get command and wait while you run it manually (e.g. in another terminal)
3. Continue anyway, and, upon success, permanently register that this external dependency is present, but not detectable
4. Abort the installation
[1/2/3/4] 1
+ /usr/bin/sudo "apt-get" "install" "-qq" "-yy" "libgmp-dev" "pkg-config"
- Selecting previously unselected package libgmpxx4ldbl:amd64.
- (Reading database ...
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 20622 files and directories currently installed.)
- Preparing to unpack .../0-libgmpxx4ldbl_2%3a6.3.0+dfsg-3_amd64.deb ...
- Unpacking libgmpxx4ldbl:amd64 (2:6.3.0+dfsg-3) ...
- Selecting previously unselected package libgmp-dev:amd64.
- Preparing to unpack .../1-libgmp-dev_2%3a6.3.0+dfsg-3_amd64.deb ...
- Unpacking libgmp-dev:amd64 (2:6.3.0+dfsg-3) ...
- Selecting previously unselected package libpkgconf3:amd64.
- Preparing to unpack .../2-libpkgconf3_1.8.1-4_amd64.deb ...
- Unpacking libpkgconf3:amd64 (1.8.1-4) ...
- Selecting previously unselected package pkgconf-bin.
- Preparing to unpack .../3-pkgconf-bin_1.8.1-4_amd64.deb ...
- Unpacking pkgconf-bin (1.8.1-4) ...
- Selecting previously unselected package pkgconf:amd64.
- Preparing to unpack .../4-pkgconf_1.8.1-4_amd64.deb ...
- Unpacking pkgconf:amd64 (1.8.1-4) ...
- Selecting previously unselected package pkg-config:amd64.
- Preparing to unpack .../5-pkg-config_1.8.1-4_amd64.deb ...
- Unpacking pkg-config:amd64 (1.8.1-4) ...
- Setting up libpkgconf3:amd64 (1.8.1-4) ...
- Setting up libgmpxx4ldbl:amd64 (2:6.3.0+dfsg-3) ...
- Setting up pkgconf-bin (1.8.1-4) ...
- Setting up libgmp-dev:amd64 (2:6.3.0+dfsg-3) ...
- Setting up pkgconf:amd64 (1.8.1-4) ...
- Setting up pkg-config:amd64 (1.8.1-4) ...
- Processing triggers for libc-bin (2.41-12) ...
<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
-> retrieved asn1-combinators.0.3.2 (cached)
-> retrieved astring.0.8.5 (cached)
-> retrieved base64.3.5.2 (cached)
-> retrieved bos.0.2.1 (cached)
-> retrieved ca-certs-nss.3.118 (https://github.com/mirage/ca-certs-nss/releases/download/v3.118/ca-certs-nss-3.118.tbz)
-> retrieved cmdliner.2.0.0 (cached)
-> retrieved conf-gmp.5 (cached)
-> retrieved conf-gmp-powm-sec.4 (cached)
-> retrieved csexp.1.5.2 (cached)
-> installed conf-pkg-config.4
-> installed conf-gmp.5
-> installed conf-gmp-powm-sec.4
-> retrieved digestif.1.3.0 (cached)
-> retrieved domain-name.0.5.0 (cached)
-> retrieved dune.3.20.2, dune-configurator.3.20.2 (cached)
-> retrieved duration.0.2.1 (cached)
-> retrieved eqaf.0.10 (cached)
-> retrieved fmt.0.11.0 (cached)
-> retrieved fpath.0.7.3 (cached)
-> retrieved gmap.0.3.0 (cached)
-> retrieved ipaddr.5.6.1, macaddr.5.6.1 (cached)
-> retrieved kdf.1.0.0 (cached)
-> retrieved logs.0.10.0 (cached)
-> installed cmdliner.2.0.0
-> retrieved mirage-crypto.2.0.2, mirage-crypto-ec.2.0.2, mirage-crypto-pk.2.0.2, mirage-crypto-rng.2.0.2 (cached)
-> retrieved mirage-ptime.5.2.0 (https://opam.ocaml.org/cache)
-> retrieved ocamlbuild.0.16.1 (cached)
-> retrieved ocamlfind.1.9.8 (cached)
-> retrieved ohex.0.2.0 (cached)
-> retrieved ptime.1.2.0 (cached)
-> retrieved rresult.0.7.0 (cached)
-> retrieved topkg.1.1.1 (cached)
-> retrieved x509.1.0.6 (cached)
-> retrieved zarith.1.14 (cached)
-> installed ocamlfind.1.9.8
-> installed ocamlbuild.0.16.1
-> installed zarith.1.14
-> installed topkg.1.1.1
-> installed rresult.0.7.0
-> installed fmt.0.11.0
-> installed ptime.1.2.0
-> installed astring.0.8.5
-> installed fpath.0.7.3
-> installed dune.3.20.2
-> installed logs.0.10.0
-> installed duration.0.2.1
-> installed csexp.1.5.2
-> installed asn1-combinators.0.3.2
-> installed base64.3.5.2
-> installed domain-name.0.5.0
-> installed eqaf.0.10
-> installed gmap.0.3.0
-> installed macaddr.5.6.1
-> installed mirage-ptime.5.2.0
-> installed ohex.0.2.0
-> installed ipaddr.5.6.1
-> installed digestif.1.3.0
-> installed bos.0.2.1
-> installed dune-configurator.3.20.2
-> installed mirage-crypto.2.0.2
-> installed kdf.1.0.0
-> installed mirage-crypto-rng.2.0.2
-> installed mirage-crypto-pk.2.0.2
-> installed mirage-crypto-ec.2.0.2
-> installed x509.1.0.6
-> installed ca-certs-nss.3.118
Done.
# To update the current shell environment, run: eval $(opam env)
2025-11-19 21:55.01 ---> saved as "b109f10aed29a728fd378e5b385c13e1c1c5eb3a897bb57e6fa6b1dcff59cbaa"
Job succeeded
2025-11-19 21:55.07: Job succeeded