(not at the head of any monitored branch or PR)
2025-11-19 21:53.32: New job: build ca-certs-nss.3.118, using opam dev
                              from https://github.com/ocaml/opam-repository.git#refs/pull/28924/head (7439b7177962ba406cbaeaa3316b51f37a7b0b76)
                              on centos-9-ocaml-5.4/amd64

To reproduce locally:

cd $(mktemp -d)
git clone --recursive "https://github.com/ocaml/opam-repository.git" && cd "opam-repository" && git fetch origin "refs/pull/28924/head" && git reset --hard 7439b717
git fetch origin master
git merge --no-edit 87196fafe7f6488827fc23a7037de5c7e34867da
cat > ../Dockerfile <<'END-OF-DOCKERFILE'
FROM ocaml/opam:centos-9-ocaml-5.4@sha256:b062c9d7f6c767b2ae3427db539b7b8be422f82b98a02ef58a11792ec618de79
USER 1000:1000
WORKDIR /home/opam
RUN sudo ln -f /usr/bin/opam-dev /usr/bin/opam
RUN opam init --reinit -ni
RUN opam option solver=builtin-0install && opam config report
ENV OPAMDOWNLOADJOBS="1"
ENV OPAMERRLOGLEN="0"
ENV OPAMPRECISETRACKING="1"
ENV CI="true"
ENV OPAM_REPO_CI="true"
RUN rm -rf opam-repository/
COPY --chown=1000:1000 . opam-repository/
RUN opam repository set-url --strict default opam-repository/
RUN opam update --depexts || true
RUN opam pin add -k version -yn ca-certs-nss.3.118 3.118
RUN opam reinstall ca-certs-nss.3.118; \
    res=$?; \
    test "$res" != 31 && exit "$res"; \
    export OPAMCLI=2.0; \
    build_dir=$(opam var prefix)/.opam-switch/build; \
    failed=$(ls "$build_dir"); \
    partial_fails=""; \
    for pkg in $failed; do \
    if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"centos-9\""; then \
    echo "A package failed and has been disabled for CI using the 'x-ci-accept-failures' field."; \
    fi; \
    test "$pkg" != 'ca-certs-nss.3.118' && partial_fails="$partial_fails $pkg"; \
    done; \
    test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}"; \
    exit 1

END-OF-DOCKERFILE
docker build -f ../Dockerfile .

2025-11-19 21:53.32: Using cache hint "ocaml/opam:centos-9-ocaml-5.4@sha256:b062c9d7f6c767b2ae3427db539b7b8be422f82b98a02ef58a11792ec618de79-ca-certs-nss.3.118-7439b7177962ba406cbaeaa3316b51f37a7b0b76"
2025-11-19 21:53.32: Using OBuilder spec:
((from ocaml/opam:centos-9-ocaml-5.4@sha256:b062c9d7f6c767b2ae3427db539b7b8be422f82b98a02ef58a11792ec618de79)
 (user (uid 1000) (gid 1000))
 (workdir /home/opam)
 (run (shell "sudo ln -f /usr/bin/opam-dev /usr/bin/opam"))
 (run (network host)
      (shell "opam init --reinit --config .opamrc-sandbox -ni"))
 (run (shell "opam option solver=builtin-0install && opam config report"))
 (env OPAMDOWNLOADJOBS 1)
 (env OPAMERRLOGLEN 0)
 (env OPAMPRECISETRACKING 1)
 (env CI true)
 (env OPAM_REPO_CI true)
 (run (shell "rm -rf opam-repository/"))
 (copy (src .) (dst opam-repository/))
 (run (shell "opam repository set-url --strict default opam-repository/"))
 (run (network host)
      (shell "opam update --depexts || true"))
 (run (shell "opam pin add -k version -yn ca-certs-nss.3.118 3.118"))
 (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
      (network host)
      (shell  "opam reinstall ca-certs-nss.3.118;\
             \n        res=$?;\
             \n        test \"$res\" != 31 && exit \"$res\";\
             \n        export OPAMCLI=2.0;\
             \n        build_dir=$(opam var prefix)/.opam-switch/build;\
             \n        failed=$(ls \"$build_dir\");\
             \n        partial_fails=\"\";\
             \n        for pkg in $failed; do\
             \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"centos-9\\\"\"; then\
             \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
             \n          fi;\
             \n          test \"$pkg\" != 'ca-certs-nss.3.118' && partial_fails=\"$partial_fails $pkg\";\
             \n        done;\
             \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
             \n        exit 1"))
)

2025-11-19 21:53.32: Waiting for resource in pool OCluster
2025-11-19 21:53.33: Waiting for worker…
2025-11-19 21:53.34: Got resource from pool OCluster
Building on laodoke.caelum.ci.dev
All commits already cached
HEAD is now at 87196fafe7 Merge pull request #28927 from dinosaure/release-lun-v0.0.2
Merge made by the 'ort' strategy.
 packages/ca-certs-nss/ca-certs-nss.3.118/opam | 54 +++++++++++++++++++++++++++
 1 file changed, 54 insertions(+)
 create mode 100644 packages/ca-certs-nss/ca-certs-nss.3.118/opam

(from ocaml/opam:centos-9-ocaml-5.4@sha256:b062c9d7f6c767b2ae3427db539b7b8be422f82b98a02ef58a11792ec618de79)
2025-11-19 21:54.19 ---> using "a3aca29ffef21c49f3a7ab11619e553fed2e41b80ca36a084324cb4bbcc79bea" from cache

/: (user (uid 1000) (gid 1000))

/: (workdir /home/opam)

/home/opam: (run (shell "sudo ln -f /usr/bin/opam-dev /usr/bin/opam"))
2025-11-19 21:54.19 ---> using "d02acc3ae8d5e2220d689a1cf7ebc2bb1e35c594c2cd69b97e52cd42d877d82a" from cache

/home/opam: (run (network host)
                 (shell "opam init --reinit --config .opamrc-sandbox -ni"))
Configuring from /home/opam/.opamrc-sandbox, then /home/opam/.opamrc, and finally from built-in defaults.
Checking for available remotes: rsync and local, git.
  - you won't be able to use mercurial repositories unless you install the hg command on your system.
  - you won't be able to use darcs repositories unless you install the darcs command on your system.

This version of opam requires an update to the layout of /home/opam/.opam from version 2.0 to version 2.2, which can't be reverted.
You may want to back it up before going further.

Continue? [Y/n] y
Format upgrade done.

<><> Updating repositories ><><><><><><><><><><><><><><><><><><><><><><><><><><>
[default] Initialised
2025-11-19 21:54.19 ---> using "3b3060bf3fe60605d1a1742074a75ed5a3f3dd3c8b96c91b6b6d2496dddf4943" from cache

/home/opam: (run (shell "opam option solver=builtin-0install && opam config report"))
Set to 'builtin-0install' the field solver in global configuration
# opam config report
# opam-version         2.5.0~beta1
# self-upgrade         no
# system               arch=x86_64 os=linux os-distribution=centos os-version=9
# solver               builtin-0install
# install-criteria     -changed,-count[avoid-version,solution]
# upgrade-criteria     -count[avoid-version,solution]
# jobs                 71
# repositories         1 (version-controlled)
# pinned               1 (version)
# current-switch       5.4
# invariant            ["ocaml-base-compiler" {>= "5.4.0"}]
# compiler-packages    ocaml-base-compiler.5.4.0, ocaml-compiler.5.4.0, ocaml-options-vanilla.1
# ocaml:native         true
# ocaml:native-tools   true
# ocaml:native-dynlink true
# ocaml:stubsdir       /home/opam/.opam/5.4/lib/ocaml/stublibs:/home/opam/.opam/5.4/lib/ocaml
# ocaml:preinstalled   false
# ocaml:compiler       5.4.0
2025-11-19 21:54.19 ---> using "c3edcf993d6b4c726f736a788c21d4bbd0e5052a0a3d5a6f1f717446740281ba" from cache

/home/opam: (env OPAMDOWNLOADJOBS 1)

/home/opam: (env OPAMERRLOGLEN 0)

/home/opam: (env OPAMPRECISETRACKING 1)

/home/opam: (env CI true)

/home/opam: (env OPAM_REPO_CI true)

/home/opam: (run (shell "rm -rf opam-repository/"))
2025-11-19 21:54.19 ---> using "08b725c09850fa742733bbc2fbb6a9449e36a971649fceba843528ecf8f49398" from cache

/home/opam: (copy (src .) (dst opam-repository/))
2025-11-19 21:54.28 ---> saved as "5ed38d7656c3cc73507ca5dd2506a67ed62697d7be210905c8cc49437e18ef63"

/home/opam: (run (shell "opam repository set-url --strict default opam-repository/"))
[default] Initialised
2025-11-19 21:54.48 ---> saved as "1b393db0e79d8a1a6bd2bf879b5f4d717ee331216a9f076b213d397b731e4bd8"

/home/opam: (run (network host)
                 (shell "opam update --depexts || true"))
+ /usr/bin/sudo "yum" "makecache"
- CentOS Stream 9 - BaseOS                         99 kB/s |  14 kB     00:00    
- CentOS Stream 9 - BaseOS                        6.5 MB/s | 8.8 MB     00:01    
- CentOS Stream 9 - AppStream                      91 kB/s |  14 kB     00:00    
- CentOS Stream 9 - AppStream                      12 MB/s |  25 MB     00:02    
- CentOS Stream 9 - CRB                           105 kB/s |  14 kB     00:00    
- CentOS Stream 9 - CRB                           4.3 MB/s | 7.3 MB     00:01    
- CentOS Stream 9 - Extras packages               109 kB/s |  16 kB     00:00    
- Metadata cache created.
2025-11-19 21:55.07 ---> saved as "286b243ef50f0f59234c0a25f61b33b7a1209ef8ca8239f1345b55442f2bbe6c"

/home/opam: (run (shell "opam pin add -k version -yn ca-certs-nss.3.118 3.118"))
ca-certs-nss is now pinned to version 3.118
2025-11-19 21:55.09 ---> saved as "bd1c4ecbdc43cc0bd43b24ac46a9a36698693ab8b5ee3aaa86cebe2a635a55d7"

/home/opam: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
                 (network host)
                 (shell  "opam reinstall ca-certs-nss.3.118;\
                        \n        res=$?;\
                        \n        test \"$res\" != 31 && exit \"$res\";\
                        \n        export OPAMCLI=2.0;\
                        \n        build_dir=$(opam var prefix)/.opam-switch/build;\
                        \n        failed=$(ls \"$build_dir\");\
                        \n        partial_fails=\"\";\
                        \n        for pkg in $failed; do\
                        \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"centos-9\\\"\"; then\
                        \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
                        \n          fi;\
                        \n          test \"$pkg\" != 'ca-certs-nss.3.118' && partial_fails=\"$partial_fails $pkg\";\
                        \n        done;\
                        \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
                        \n        exit 1"))
ca-certs-nss.3.118 is not installed. Install it? [Y/n] y
The following actions will be performed:
=== install 36 packages
  - install asn1-combinators  0.3.2          [required by x509]
  - install astring           0.8.5          [required by bos]
  - install base64            3.5.2          [required by x509]
  - install bos               0.2.1          [required by ca-certs-nss]
  - install ca-certs-nss      3.118 (pinned)
  - install cmdliner          2.0.0          [required by ca-certs-nss]
  - install conf-gmp          5              [required by conf-gmp-powm-sec, zarith]
  - install conf-gmp-powm-sec 4              [required by mirage-crypto-pk]
  - install conf-pkg-config   4              [required by zarith]
  - install csexp             1.5.2          [required by dune-configurator]
  - install digestif          1.3.0          [required by ca-certs-nss]
  - install domain-name       0.5.0          [required by x509]
  - install dune              3.20.2         [required by ca-certs-nss]
  - install dune-configurator 3.20.2         [required by mirage-crypto-ec]
  - install duration          0.2.1          [required by mirage-crypto-rng]
  - install eqaf              0.10           [required by digestif]
  - install fmt               0.11.0         [required by ca-certs-nss]
  - install fpath             0.7.3          [required by bos]
  - install gmap              0.3.0          [required by x509]
  - install ipaddr            5.6.1          [required by x509]
  - install kdf               1.0.0          [required by x509]
  - install logs              0.10.0         [required by ca-certs-nss]
  - install macaddr           5.6.1          [required by ipaddr]
  - install mirage-crypto     2.0.2          [required by x509]
  - install mirage-crypto-ec  2.0.2          [required by x509]
  - install mirage-crypto-pk  2.0.2          [required by x509]
  - install mirage-crypto-rng 2.0.2          [required by x509]
  - install mirage-ptime      5.2.0          [required by ca-certs-nss]
  - install ocamlbuild        0.16.1         [required by bos]
  - install ocamlfind         1.9.8          [required by bos]
  - install ohex              0.2.0          [required by x509]
  - install ptime             1.2.0          [required by mirage-ptime, x509]
  - install rresult           0.7.0          [required by bos]
  - install topkg             1.1.1          [required by bos]
  - install x509              1.0.6          [required by ca-certs-nss]
  - install zarith            1.14           [required by mirage-crypto-pk]

The following system packages will first need to be installed:
    gmp-devel

<><> Handling external dependencies <><><><><><><><><><><><><><><><><><><><><><>

opam believes some required external dependencies are missing. opam can:
> 1. Run yum to install them (may need root/sudo access)
  2. Display the recommended yum command and wait while you run it manually (e.g. in another terminal)
  3. Continue anyway, and, upon success, permanently register that this external dependency is present, but not detectable
  4. Abort the installation

[1/2/3/4] 1

+ /usr/bin/sudo "yum" "install" "-y" "gmp-devel"
- Last metadata expiration check: 0:00:08 ago on Wed Nov 19 21:55:05 2025.
- Dependencies resolved.
- ================================================================================
-  Package          Architecture  Version                  Repository        Size
- ================================================================================
- Installing:
-  gmp-devel        x86_64        1:6.2.0-13.el9           appstream        174 k
- Installing dependencies:
-  gmp-c++          x86_64        1:6.2.0-13.el9           appstream         19 k
- 
- Transaction Summary
- ================================================================================
- Install  2 Packages
- 
- Total download size: 193 k
- Installed size: 382 k
- Downloading Packages:
- (1/2): gmp-c++-6.2.0-13.el9.x86_64.rpm           51 kB/s |  19 kB     00:00    
- (2/2): gmp-devel-6.2.0-13.el9.x86_64.rpm        449 kB/s | 174 kB     00:00    
- --------------------------------------------------------------------------------
- Total                                           364 kB/s | 193 kB     00:00     
- Running transaction check
- Transaction check succeeded.
- Running transaction test
- Transaction test succeeded.
- Running transaction
-   Preparing        :                                                        1/1 
-   Installing       : gmp-c++-1:6.2.0-13.el9.x86_64                          1/2 
-   Installing       : gmp-devel-1:6.2.0-13.el9.x86_64                        2/2 
-   Running scriptlet: gmp-devel-1:6.2.0-13.el9.x86_64                        2/2 
-   Verifying        : gmp-c++-1:6.2.0-13.el9.x86_64                          1/2 
-   Verifying        : gmp-devel-1:6.2.0-13.el9.x86_64                        2/2 
- 
- Installed:
-   gmp-c++-1:6.2.0-13.el9.x86_64         gmp-devel-1:6.2.0-13.el9.x86_64        
- 
- Complete!
+ /usr/bin/rpm "-q" "--whatprovides" "gmp-devel"
- gmp-devel-6.2.0-13.el9.x86_64

<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
-> retrieved asn1-combinators.0.3.2  (cached)
-> retrieved astring.0.8.5  (cached)
-> retrieved base64.3.5.2  (cached)
-> retrieved bos.0.2.1  (cached)
-> retrieved ca-certs-nss.3.118  (cached)
-> retrieved cmdliner.2.0.0  (cached)
-> retrieved conf-gmp.5  (cached)
-> retrieved conf-gmp-powm-sec.4  (cached)
-> retrieved csexp.1.5.2  (cached)
-> installed conf-gmp.5
-> installed conf-pkg-config.4
-> installed conf-gmp-powm-sec.4
-> retrieved digestif.1.3.0  (cached)
-> retrieved domain-name.0.5.0  (cached)
-> retrieved dune.3.20.2, dune-configurator.3.20.2  (cached)
-> retrieved duration.0.2.1  (cached)
-> retrieved eqaf.0.10  (cached)
-> retrieved fmt.0.11.0  (cached)
-> retrieved fpath.0.7.3  (cached)
-> retrieved gmap.0.3.0  (cached)
-> retrieved ipaddr.5.6.1, macaddr.5.6.1  (cached)
-> retrieved kdf.1.0.0  (cached)
-> retrieved logs.0.10.0  (cached)
-> installed cmdliner.2.0.0
-> retrieved mirage-crypto.2.0.2, mirage-crypto-ec.2.0.2, mirage-crypto-pk.2.0.2, mirage-crypto-rng.2.0.2  (cached)
-> retrieved mirage-ptime.5.2.0  (cached)
-> retrieved ocamlbuild.0.16.1  (cached)
-> retrieved ocamlfind.1.9.8  (cached)
-> retrieved ohex.0.2.0  (cached)
-> retrieved ptime.1.2.0  (cached)
-> retrieved rresult.0.7.0  (cached)
-> retrieved topkg.1.1.1  (cached)
-> retrieved x509.1.0.6  (cached)
-> retrieved zarith.1.14  (cached)
-> installed ocamlfind.1.9.8
-> installed ocamlbuild.0.16.1
-> installed zarith.1.14
-> installed topkg.1.1.1
-> installed rresult.0.7.0
-> installed fmt.0.11.0
-> installed ptime.1.2.0
-> installed astring.0.8.5
-> installed logs.0.10.0
-> installed fpath.0.7.3
-> installed bos.0.2.1
-> installed dune.3.20.2
-> installed ohex.0.2.0
-> installed gmap.0.3.0
-> installed duration.0.2.1
-> installed base64.3.5.2
-> installed csexp.1.5.2
-> installed asn1-combinators.0.3.2
-> installed domain-name.0.5.0
-> installed eqaf.0.10
-> installed macaddr.5.6.1
-> installed mirage-ptime.5.2.0
-> installed ipaddr.5.6.1
-> installed digestif.1.3.0
-> installed dune-configurator.3.20.2
-> installed mirage-crypto.2.0.2
-> installed kdf.1.0.0
-> installed mirage-crypto-rng.2.0.2
-> installed mirage-crypto-pk.2.0.2
-> installed mirage-crypto-ec.2.0.2
-> installed x509.1.0.6
-> installed ca-certs-nss.3.118
Done.
# To update the current shell environment, run: eval $(opam env)
2025-11-19 21:56.14 ---> saved as "65ec93a7adbc54ac88cc7a747ef2dd8d06840b4f54ea57dbb5962f72fecae097"
Job succeeded
2025-11-19 21:56.32: Job succeeded