(for PR #29092)

2025-12-22 21:10.37: New job: build binsec_codex.1.0-rc4, using opam dev
                              from https://github.com/ocaml/opam-repository.git#refs/pull/29092/head (9992c9eeb5759412c4c08720b431f6dc300cf097)
                              on debian-13-ocaml-5.4/amd64

To reproduce locally:

cd $(mktemp -d)
git clone --recursive "https://github.com/ocaml/opam-repository.git" && cd "opam-repository" && git fetch origin "refs/pull/29092/head" && git reset --hard 9992c9ee
git fetch origin master
git merge --no-edit a4dd3b1992058b894be01d35cfa8d2f497a70bd0
cat > ../Dockerfile <<'END-OF-DOCKERFILE'
FROM ocaml/opam:debian-13-ocaml-5.4@sha256:8c62cc7b043f64833949d4049211997093b28a2f1b98377748d3e185ae301c04
USER 1000:1000
WORKDIR /home/opam
RUN sudo ln -f /usr/bin/opam-dev /usr/bin/opam
RUN opam init --reinit -ni
RUN opam option solver=builtin-0install && opam config report
ENV OPAMDOWNLOADJOBS="1"
ENV OPAMERRLOGLEN="0"
ENV OPAMPRECISETRACKING="1"
ENV CI="true"
ENV OPAM_REPO_CI="true"
RUN rm -rf opam-repository/
COPY --chown=1000:1000 . opam-repository/
RUN opam repository set-url --strict default opam-repository/
RUN opam update --depexts || true
RUN opam pin add -k version -yn binsec_codex.1.0-rc4 1.0-rc4
RUN opam reinstall binsec_codex.1.0-rc4; \
    res=$?; \
    test "$res" != 31 && exit "$res"; \
    export OPAMCLI=2.0; \
    build_dir=$(opam var prefix)/.opam-switch/build; \
    failed=$(ls "$build_dir"); \
    partial_fails=""; \
    for pkg in $failed; do \
    if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"debian-13\""; then \
    echo "A package failed and has been disabled for CI using the 'x-ci-accept-failures' field."; \
    fi; \
    test "$pkg" != 'binsec_codex.1.0-rc4' && partial_fails="$partial_fails $pkg"; \
    done; \
    test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}"; \
    exit 1

END-OF-DOCKERFILE
docker build -f ../Dockerfile .

2025-12-22 21:10.37: Using cache hint "ocaml/opam:debian-13-ocaml-5.4@sha256:8c62cc7b043f64833949d4049211997093b28a2f1b98377748d3e185ae301c04-binsec_codex.1.0-rc4-9992c9eeb5759412c4c08720b431f6dc300cf097"
2025-12-22 21:10.37: Using OBuilder spec:
((from ocaml/opam:debian-13-ocaml-5.4@sha256:8c62cc7b043f64833949d4049211997093b28a2f1b98377748d3e185ae301c04)
 (user (uid 1000) (gid 1000))
 (workdir /home/opam)
 (run (shell "sudo ln -f /usr/bin/opam-dev /usr/bin/opam"))
 (run (network host)
      (shell "opam init --reinit --config .opamrc-sandbox -ni"))
 (run (shell "opam option solver=builtin-0install && opam config report"))
 (env OPAMDOWNLOADJOBS 1)
 (env OPAMERRLOGLEN 0)
 (env OPAMPRECISETRACKING 1)
 (env CI true)
 (env OPAM_REPO_CI true)
 (run (shell "rm -rf opam-repository/"))
 (copy (src .) (dst opam-repository/))
 (run (shell "opam repository set-url --strict default opam-repository/"))
 (run (network host)
      (shell "opam update --depexts || true"))
 (run (shell "opam pin add -k version -yn binsec_codex.1.0-rc4 1.0-rc4"))
 (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
      (network host)
      (shell  "opam reinstall binsec_codex.1.0-rc4;\
             \n        res=$?;\
             \n        test \"$res\" != 31 && exit \"$res\";\
             \n        export OPAMCLI=2.0;\
             \n        build_dir=$(opam var prefix)/.opam-switch/build;\
             \n        failed=$(ls \"$build_dir\");\
             \n        partial_fails=\"\";\
             \n        for pkg in $failed; do\
             \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
             \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
             \n          fi;\
             \n          test \"$pkg\" != 'binsec_codex.1.0-rc4' && partial_fails=\"$partial_fails $pkg\";\
             \n        done;\
             \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
             \n        exit 1"))
)

2025-12-22 21:10.37: Waiting for resource in pool OCluster
2025-12-22 21:10.37: Waiting for worker…
2025-12-22 21:11.33: Got resource from pool OCluster
Building on laodoke.caelum.ci.dev
All commits already cached
HEAD is now at a4dd3b1992 Merge pull request #29124 from Alasdair/release-sail-0.20.1
Merge made by the 'ort' strategy.
 packages/binsec_codex/binsec_codex.1.0-rc4/opam   | 54 +++++++++++++
 packages/codex/codex.1.0-rc4/opam                 | 92 +++++++++++++++++++++++
 packages/frama_c_codex/frama_c_codex.1.0-rc4/opam | 55 ++++++++++++++
 3 files changed, 201 insertions(+)
 create mode 100644 packages/binsec_codex/binsec_codex.1.0-rc4/opam
 create mode 100644 packages/codex/codex.1.0-rc4/opam
 create mode 100644 packages/frama_c_codex/frama_c_codex.1.0-rc4/opam

(from ocaml/opam:debian-13-ocaml-5.4@sha256:8c62cc7b043f64833949d4049211997093b28a2f1b98377748d3e185ae301c04)
2025-12-22 21:12.19 ---> using "5f87df8c1f6f0886e7311dfd3df40b8bbb961cc34c83c0d033c6dd248c84bc7d" from cache

/: (user (uid 1000) (gid 1000))

/: (workdir /home/opam)

/home/opam: (run (shell "sudo ln -f /usr/bin/opam-dev /usr/bin/opam"))
2025-12-22 21:12.19 ---> using "f1296791f2d76481058db697105a569091a6b6345f05c94bbc5a650f1a364f9a" from cache

/home/opam: (run (network host)
                 (shell "opam init --reinit --config .opamrc-sandbox -ni"))
Configuring from /home/opam/.opamrc-sandbox, then /home/opam/.opamrc, and finally from built-in defaults.
Checking for available remotes: rsync and local, git.
  - you won't be able to use mercurial repositories unless you install the hg command on your system.
  - you won't be able to use darcs repositories unless you install the darcs command on your system.

This version of opam requires an update to the layout of /home/opam/.opam from version 2.0 to version 2.2, which can't be reverted.
You may want to back it up before going further.

Continue? [Y/n] y
Format upgrade done.

<><> Updating repositories ><><><><><><><><><><><><><><><><><><><><><><><><><><>
[default] Initialised
2025-12-22 21:12.19 ---> using "0cac9a31b4750e6a46df8ed8d2f68352091a988199fdf62c52779549510cd6bf" from cache

/home/opam: (run (shell "opam option solver=builtin-0install && opam config report"))
Set to 'builtin-0install' the field solver in global configuration
# opam config report
# opam-version         2.5.0
# self-upgrade         no
# system               arch=x86_64 os=linux os-distribution=debian os-version=13
# solver               builtin-0install
# install-criteria     -changed,-count[avoid-version,solution]
# upgrade-criteria     -count[avoid-version,solution]
# jobs                 71
# repositories         1 (version-controlled)
# pinned               1 (version)
# current-switch       5.4
# invariant            ["ocaml-base-compiler" {>= "5.4.0"}]
# compiler-packages    ocaml-base-compiler.5.4.0, ocaml-compiler.5.4.0, ocaml-options-vanilla.1
# ocaml:native         true
# ocaml:native-tools   true
# ocaml:native-dynlink true
# ocaml:stubsdir       /home/opam/.opam/5.4/lib/ocaml/stublibs:/home/opam/.opam/5.4/lib/ocaml
# ocaml:preinstalled   false
# ocaml:compiler       5.4.0
2025-12-22 21:12.19 ---> using "1deb91dc3badca969976ed6f3bc5fe7c443d73a2cfa957be662fd6f93e30aa7b" from cache

/home/opam: (env OPAMDOWNLOADJOBS 1)

/home/opam: (env OPAMERRLOGLEN 0)

/home/opam: (env OPAMPRECISETRACKING 1)

/home/opam: (env CI true)

/home/opam: (env OPAM_REPO_CI true)

/home/opam: (run (shell "rm -rf opam-repository/"))
2025-12-22 21:12.19 ---> using "1a02438c8753bf7228a9eb625e65b7af26778a022b9ce0b16be5ef4f294c58cd" from cache

/home/opam: (copy (src .) (dst opam-repository/))
2025-12-22 21:12.39 ---> saved as "b2afc363529a7195bd2b203cb2ac191c983701747f87c1ea95deaa5d61ee9607"

/home/opam: (run (shell "opam repository set-url --strict default opam-repository/"))
[default] Initialised
2025-12-22 21:13.01 ---> saved as "2ae1910f73afb31298b6840541ebc252a071fc8df02c868edc810bf24f120815"

/home/opam: (run (network host)
                 (shell "opam update --depexts || true"))
+ /usr/bin/sudo "apt-get" "update"
- Hit:1 http://deb.debian.org/debian trixie InRelease
- Get:2 http://deb.debian.org/debian trixie-updates InRelease [47.3 kB]
- Get:3 http://deb.debian.org/debian-security trixie-security InRelease [43.4 kB]
- Get:4 http://deb.debian.org/debian-security trixie-security/main amd64 Packages [93.7 kB]
- Fetched 184 kB in 0s (1552 kB/s)
- Reading package lists...
- 
2025-12-22 21:13.02 ---> saved as "9d47d5ffdeaa5fe0bce3ccbe7a70d456fc080020805cd8fd39fe5a4709a1ae54"

/home/opam: (run (shell "opam pin add -k version -yn binsec_codex.1.0-rc4 1.0-rc4"))
binsec_codex is now pinned to version 1.0-rc4
2025-12-22 21:13.03 ---> saved as "80a1c4932a11c6d8a228805c44c657aeea907b028293e779c14e76d0976836f8"

/home/opam: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
                 (network host)
                 (shell  "opam reinstall binsec_codex.1.0-rc4;\
                        \n        res=$?;\
                        \n        test \"$res\" != 31 && exit \"$res\";\
                        \n        export OPAMCLI=2.0;\
                        \n        build_dir=$(opam var prefix)/.opam-switch/build;\
                        \n        failed=$(ls \"$build_dir\");\
                        \n        partial_fails=\"\";\
                        \n        for pkg in $failed; do\
                        \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
                        \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
                        \n          fi;\
                        \n          test \"$pkg\" != 'binsec_codex.1.0-rc4' && partial_fails=\"$partial_fails $pkg\";\
                        \n        done;\
                        \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
                        \n        exit 1"))
binsec_codex.1.0-rc4 is not installed. Install it? [Y/n] y
  * Incompatible packages:
    - (invariant) -> ocaml-base-compiler >= 5.4.0
    - binsec_codex -> codex -> pacomb >= 1.3 -> ppxlib < 0.36.0 -> ocaml < 4.10 -> ocaml-variants (< 4.05.2~ | >= 4.06.0)
    You can temporarily relax the switch invariant with `--update-invariant'
  * Incompatible packages:
    - (invariant) -> ocaml-base-compiler >= 5.4.0
    - binsec_codex -> codex -> pacomb >= 1.3 -> ppxlib < 0.36.0 -> ocaml-migrate-parsetree >= 1.3.1 -> ocaml < 4.13 -> dkml-base-compiler
  * Missing dependency:
    - binsec_codex -> codex -> pacomb >= 1.3 -> ppxlib < 0.36.0 -> ocaml-migrate-parsetree >= 1.3.1 -> ocaml < 4.09.0 -> ocaml-base-compiler (<= 3.07+1 | = 3.07+2 | = 3.08.0 | = 3.08.1 | = 3.08.2 | = 3.08.3 | = 3.08.4 | = 3.09.0) | ocaml-system (<= 3.07+1 | = 3.07+2 | >= 3.08.0) | ocaml-variants < 3.09.1~
    not available because the package is pinned to version 5.4.0
    unmet availability conditions, e.g. 'sys-ocaml-version = "5.4.0" & (os != "win32" | sys-ocaml-libc = "msvc")'
    no matching version
  * Missing dependency:
    - binsec_codex -> codex -> pacomb >= 1.3 -> ppxlib < 0.36.0 -> ocaml < 4.10 -> ocaml-variants >= 4.06.0 -> ocaml-beta
    unmet availability conditions: 'enable-ocaml-beta-repository'
  * Missing dependency:
    - binsec_codex -> codex -> pacomb >= 1.3 -> ppxlib < 0.36.0 -> ocaml < 4.10 -> ocaml-variants >= 4.06.0 -> system-msvc
    unmet availability conditions: 'os = "win32"'

No solution found, exiting
"/usr/bin/env" "bash" "-c" "opam reinstall binsec_codex.1.0-rc4;
        res=$?;
        test "$res" != 31 && exit "$res";
        export OPAMCLI=2.0;
        build_dir=$(opam var prefix)/.opam-switch/build;
        failed=$(ls "$build_dir");
        partial_fails="";
        for pkg in $failed; do
          if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"debian-13\""; then
            echo "A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.";
          fi;
          test "$pkg" != 'binsec_codex.1.0-rc4' && partial_fails="$partial_fails $pkg";
        done;
        test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}";
        exit 1" failed with exit status 20
2025-12-22 21:13.24: Job failed: Failed: Build failed
2025-12-22 21:13.24: Log analysis:
2025-12-22 21:13.24: >>> 
No solution found, exiting
 (score = 100)
2025-12-22 21:13.24: [SKIP] Package not available