(for PR #28222)
2025-08-21 14:28.35: New job: test ca-certs-nss.3.63.1 with lwt.6.0.0~alpha01, using opam 2.3
from https://github.com/ocaml/opam-repository.git#refs/pull/28222/head (a14b2680809606d7e55ae7ed410b73438cb77bd0)
on debian-12-ocaml-5.3/amd64
To reproduce locally:
cd $(mktemp -d)
git clone --recursive "https://github.com/ocaml/opam-repository.git" && cd "opam-repository" && git fetch origin "refs/pull/28222/head" && git reset --hard a14b2680
git fetch origin master
git merge --no-edit 4bae7ec4df49df4454ea492c8d7a1196aeae04e0
cat > ../Dockerfile <<'END-OF-DOCKERFILE'
FROM ocaml/opam:debian-12-ocaml-5.3@sha256:ea4d070703e4c16aa9fe1cdf0b1a22c669ee514080881d205b570783be9040da
USER 1000:1000
WORKDIR /home/opam
RUN sudo ln -f /usr/bin/opam-2.3 /usr/bin/opam
RUN opam init --reinit -ni
RUN opam option solver=builtin-0install && opam config report
ENV OPAMDOWNLOADJOBS="1"
ENV OPAMERRLOGLEN="0"
ENV OPAMPRECISETRACKING="1"
ENV CI="true"
ENV OPAM_REPO_CI="true"
RUN rm -rf opam-repository/
COPY --chown=1000:1000 . opam-repository/
RUN opam repository set-url --strict default opam-repository/
RUN opam update --depexts || true
RUN opam pin add -k version -yn lwt.6.0.0~alpha01 6.0.0~alpha01
RUN opam reinstall lwt.6.0.0~alpha01; \
res=$?; \
test "$res" != 31 && exit "$res"; \
export OPAMCLI=2.0; \
build_dir=$(opam var prefix)/.opam-switch/build; \
failed=$(ls "$build_dir"); \
partial_fails=""; \
for pkg in $failed; do \
if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"debian-12\""; then \
echo "A package failed and has been disabled for CI using the 'x-ci-accept-failures' field."; \
fi; \
test "$pkg" != 'lwt.6.0.0~alpha01' && partial_fails="$partial_fails $pkg"; \
done; \
test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}"; \
exit 1
RUN opam reinstall ca-certs-nss.3.63.1; \
res=$?; \
test "$res" != 31 && exit "$res"; \
export OPAMCLI=2.0; \
build_dir=$(opam var prefix)/.opam-switch/build; \
failed=$(ls "$build_dir"); \
partial_fails=""; \
for pkg in $failed; do \
if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"debian-12\""; then \
echo "A package failed and has been disabled for CI using the 'x-ci-accept-failures' field."; \
fi; \
test "$pkg" != 'ca-certs-nss.3.63.1' && partial_fails="$partial_fails $pkg"; \
done; \
test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}"; \
exit 1
RUN (opam reinstall --with-test ca-certs-nss.3.63.1) || true
RUN opam reinstall --with-test --verbose ca-certs-nss.3.63.1; \
res=$?; \
test "$res" != 31 && exit "$res"; \
export OPAMCLI=2.0; \
build_dir=$(opam var prefix)/.opam-switch/build; \
failed=$(ls "$build_dir"); \
partial_fails=""; \
for pkg in $failed; do \
if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"debian-12\""; then \
echo "A package failed and has been disabled for CI using the 'x-ci-accept-failures' field."; \
fi; \
test "$pkg" != 'ca-certs-nss.3.63.1' && partial_fails="$partial_fails $pkg"; \
done; \
test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}"; \
exit 1
END-OF-DOCKERFILE
docker build -f ../Dockerfile .
2025-08-21 14:28.35: Using cache hint "ocaml/opam:debian-12-ocaml-5.3@sha256:ea4d070703e4c16aa9fe1cdf0b1a22c669ee514080881d205b570783be9040da-lwt.6.0.0~alpha01-ca-certs-nss.3.63.1-a14b2680809606d7e55ae7ed410b73438cb77bd0"
2025-08-21 14:28.35: Using OBuilder spec:
((from ocaml/opam:debian-12-ocaml-5.3@sha256:ea4d070703e4c16aa9fe1cdf0b1a22c669ee514080881d205b570783be9040da)
(user (uid 1000) (gid 1000))
(workdir /home/opam)
(run (shell "sudo ln -f /usr/bin/opam-2.3 /usr/bin/opam"))
(run (network host)
(shell "opam init --reinit --config .opamrc-sandbox -ni"))
(run (shell "opam option solver=builtin-0install && opam config report"))
(env OPAMDOWNLOADJOBS 1)
(env OPAMERRLOGLEN 0)
(env OPAMPRECISETRACKING 1)
(env CI true)
(env OPAM_REPO_CI true)
(run (shell "rm -rf opam-repository/"))
(copy (src .) (dst opam-repository/))
(run (shell "opam repository set-url --strict default opam-repository/"))
(run (network host)
(shell "opam update --depexts || true"))
(run (shell "opam pin add -k version -yn lwt.6.0.0~alpha01 6.0.0~alpha01"))
(run (cache (opam-archives (target /home/opam/.opam/download-cache)))
(network host)
(shell "opam reinstall lwt.6.0.0~alpha01;\
\n res=$?;\
\n test \"$res\" != 31 && exit \"$res\";\
\n export OPAMCLI=2.0;\
\n build_dir=$(opam var prefix)/.opam-switch/build;\
\n failed=$(ls \"$build_dir\");\
\n partial_fails=\"\";\
\n for pkg in $failed; do\
\n if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-12\\\"\"; then\
\n echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
\n fi;\
\n test \"$pkg\" != 'lwt.6.0.0~alpha01' && partial_fails=\"$partial_fails $pkg\";\
\n done;\
\n test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
\n exit 1"))
(run (cache (opam-archives (target /home/opam/.opam/download-cache)))
(network host)
(shell "opam reinstall ca-certs-nss.3.63.1;\
\n res=$?;\
\n test \"$res\" != 31 && exit \"$res\";\
\n export OPAMCLI=2.0;\
\n build_dir=$(opam var prefix)/.opam-switch/build;\
\n failed=$(ls \"$build_dir\");\
\n partial_fails=\"\";\
\n for pkg in $failed; do\
\n if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-12\\\"\"; then\
\n echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
\n fi;\
\n test \"$pkg\" != 'ca-certs-nss.3.63.1' && partial_fails=\"$partial_fails $pkg\";\
\n done;\
\n test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
\n exit 1"))
(run (network host)
(shell "(opam reinstall --with-test ca-certs-nss.3.63.1) || true"))
(run (shell "opam reinstall --with-test --verbose ca-certs-nss.3.63.1;\
\n res=$?;\
\n test \"$res\" != 31 && exit \"$res\";\
\n export OPAMCLI=2.0;\
\n build_dir=$(opam var prefix)/.opam-switch/build;\
\n failed=$(ls \"$build_dir\");\
\n partial_fails=\"\";\
\n for pkg in $failed; do\
\n if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-12\\\"\"; then\
\n echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
\n fi;\
\n test \"$pkg\" != 'ca-certs-nss.3.63.1' && partial_fails=\"$partial_fails $pkg\";\
\n done;\
\n test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
\n exit 1"))
)
2025-08-21 14:28.35: Waiting for resource in pool OCluster
2025-08-21 14:45.12: Waiting for worker…
2025-08-21 14:46.55: Got resource from pool OCluster
Building on bremusa.ocamllabs.io
All commits already cached
Updating files: 68% (12372/18065)
Updating files: 69% (12465/18065)
Updating files: 70% (12646/18065)
Updating files: 71% (12827/18065)
Updating files: 72% (13007/18065)
Updating files: 73% (13188/18065)
Updating files: 74% (13369/18065)
Updating files: 75% (13549/18065)
Updating files: 76% (13730/18065)
Updating files: 77% (13911/18065)
Updating files: 78% (14091/18065)
Updating files: 79% (14272/18065)
Updating files: 80% (14452/18065)
Updating files: 81% (14633/18065)
Updating files: 82% (14814/18065)
Updating files: 83% (14994/18065)
Updating files: 84% (15175/18065)
Updating files: 85% (15356/18065)
Updating files: 86% (15536/18065)
Updating files: 87% (15717/18065)
Updating files: 88% (15898/18065)
Updating files: 89% (16078/18065)
Updating files: 90% (16259/18065)
Updating files: 91% (16440/18065)
Updating files: 92% (16620/18065)
Updating files: 93% (16801/18065)
Updating files: 94% (16982/18065)
Updating files: 95% (17162/18065)
Updating files: 96% (17343/18065)
Updating files: 97% (17524/18065)
Updating files: 98% (17704/18065)
Updating files: 99% (17885/18065)
Updating files: 100% (18065/18065)
Updating files: 100% (18065/18065), done.
HEAD is now at 4bae7ec4df Merge pull request #28375 from jmid/opam-compiler-re-bounds
Merge made by the 'ort' strategy.
packages/curl_lwt/curl_lwt.0.10.0/opam | 2 +-
packages/lwt/lwt.6.0.0~alpha01/opam | 69 +++++++++++++++++++++++
packages/lwt_direct/lwt_direct.6.0.0~alpha01/opam | 44 +++++++++++++++
packages/lwt_glib/lwt_glib.1.0.1/opam | 2 +-
packages/lwt_glib/lwt_glib.1.1.0/opam | 2 +-
packages/lwt_glib/lwt_glib.1.1.1/opam | 2 +-
packages/lwt_log/lwt_log.1.1.0/opam | 2 +-
packages/lwt_log/lwt_log.1.1.1/opam | 2 +-
packages/lwt_log/lwt_log.1.1.2/opam | 2 +-
packages/ocurl/ocurl.0.7.6/opam | 1 +
packages/ocurl/ocurl.0.7.7/opam | 1 +
packages/ocurl/ocurl.0.7.8/opam | 1 +
packages/ocurl/ocurl.0.7.9/opam | 1 +
packages/ocurl/ocurl.0.8.1/opam | 1 +
packages/ocurl/ocurl.0.8.2/opam | 1 +
packages/ocurl/ocurl.0.9.0/opam | 1 +
packages/ocurl/ocurl.0.9.1/opam | 1 +
packages/ocurl/ocurl.0.9.2/opam | 1 +
18 files changed, 129 insertions(+), 7 deletions(-)
create mode 100644 packages/lwt/lwt.6.0.0~alpha01/opam
create mode 100644 packages/lwt_direct/lwt_direct.6.0.0~alpha01/opam
(from ocaml/opam:debian-12-ocaml-5.3@sha256:ea4d070703e4c16aa9fe1cdf0b1a22c669ee514080881d205b570783be9040da)
2025-08-21 14:47.14 ---> using "7b3e7b3709bbd37e599e66041e6848f5fe2736f92dc6c0cdd0ce7e7e3b68a5fe" from cache
/: (user (uid 1000) (gid 1000))
/: (workdir /home/opam)
/home/opam: (run (shell "sudo ln -f /usr/bin/opam-2.3 /usr/bin/opam"))
2025-08-21 14:47.14 ---> using "fdb2f3150c6149944c5fb21481d03894b2a1eb858b0e57dd2c9a75abe976a37d" from cache
/home/opam: (run (network host)
(shell "opam init --reinit --config .opamrc-sandbox -ni"))
Configuring from /home/opam/.opamrc-sandbox, then /home/opam/.opamrc, and finally from built-in defaults.
Checking for available remotes: rsync and local, git.
- you won't be able to use mercurial repositories unless you install the hg command on your system.
- you won't be able to use darcs repositories unless you install the darcs command on your system.
This development version of opam requires an update to the layout of /home/opam/.opam from version 2.0 to version 2.2, which can't be reverted.
You may want to back it up before going further.
Continue? [y/n] y
Format upgrade done.
<><> Updating repositories ><><><><><><><><><><><><><><><><><><><><><><><><><><>
[default] Initialised
2025-08-21 14:47.14 ---> using "17e4912cc343bf9d6e06e48e9e9351b5dc4e90574d8d51e624e13d87c1256c34" from cache
/home/opam: (run (shell "opam option solver=builtin-0install && opam config report"))
Set to 'builtin-0install' the field solver in global configuration
# opam config report
# opam-version 2.3.0 (35acd0c5abc5e66cdbd5be16ba77aa6c33a4c724)
# self-upgrade no
# system arch=x86_64 os=linux os-distribution=debian os-version=12
# solver builtin-0install
# install-criteria -changed,-count[avoid-version,solution]
# upgrade-criteria -count[avoid-version,solution]
# jobs 71
# repositories 1 (version-controlled)
# pinned 1 (version)
# current-switch 5.3
# invariant ["ocaml-base-compiler" {= "5.3.0"}]
# compiler-packages ocaml-base-compiler.5.3.0, ocaml-compiler.5.3.0, ocaml-options-vanilla.1
# ocaml:native true
# ocaml:native-tools true
# ocaml:native-dynlink true
# ocaml:stubsdir /home/opam/.opam/5.3/lib/ocaml/stublibs:/home/opam/.opam/5.3/lib/ocaml
# ocaml:preinstalled false
# ocaml:compiler 5.3.0
2025-08-21 14:47.14 ---> using "6706a07cda0f456729fd8ea317c1b2e469be2575c65745711a34e940deb30914" from cache
/home/opam: (env OPAMDOWNLOADJOBS 1)
/home/opam: (env OPAMERRLOGLEN 0)
/home/opam: (env OPAMPRECISETRACKING 1)
/home/opam: (env CI true)
/home/opam: (env OPAM_REPO_CI true)
/home/opam: (run (shell "rm -rf opam-repository/"))
2025-08-21 14:47.14 ---> using "446e092e760c930913d6e325d53ad558bf56968ae9672a6e786f97fb5382a4a2" from cache
/home/opam: (copy (src .) (dst opam-repository/))
2025-08-21 14:47.15 ---> using "e2d8033e36d0fb3ddcd7c5ffe7ca15b94d06ebe44acbaee74a0996ef8753f31d" from cache
/home/opam: (run (shell "opam repository set-url --strict default opam-repository/"))
[default] Initialised
2025-08-21 14:47.16 ---> using "102a3119b01dda2f8e376fe34bff237f44bca320d513614a9a351f4b25965402" from cache
/home/opam: (run (network host)
(shell "opam update --depexts || true"))
+ /usr/bin/sudo "apt-get" "update"
- Hit:1 http://deb.debian.org/debian bookworm InRelease
- Get:2 http://deb.debian.org/debian bookworm-updates InRelease [55.4 kB]
- Get:3 http://deb.debian.org/debian-security bookworm-security InRelease [48.0 kB]
- Get:4 http://deb.debian.org/debian-security bookworm-security/main amd64 Packages [274 kB]
- Fetched 378 kB in 0s (840 kB/s)
- Reading package lists...
-
2025-08-21 14:47.16 ---> using "24d874fb0411c6b2f2d4776fdc89242207712820407a8f30cf172d2fdb697872" from cache
/home/opam: (run (shell "opam pin add -k version -yn lwt.6.0.0~alpha01 6.0.0~alpha01"))
lwt is now pinned to version 6.0.0~alpha01
2025-08-21 14:47.16 ---> using "6ab5442de9272c0f0db61129d10e60bfa1be8d0f95173d943f2d541603c9d186" from cache
/home/opam: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
(network host)
(shell "opam reinstall lwt.6.0.0~alpha01;\
\n res=$?;\
\n test \"$res\" != 31 && exit \"$res\";\
\n export OPAMCLI=2.0;\
\n build_dir=$(opam var prefix)/.opam-switch/build;\
\n failed=$(ls \"$build_dir\");\
\n partial_fails=\"\";\
\n for pkg in $failed; do\
\n if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-12\\\"\"; then\
\n echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
\n fi;\
\n test \"$pkg\" != 'lwt.6.0.0~alpha01' && partial_fails=\"$partial_fails $pkg\";\
\n done;\
\n test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
\n exit 1"))
lwt.6.0.0~alpha01 is not installed. Install it? [y/n] y
The following actions will be performed:
=== install 9 packages
- install base-bytes base [required by ocplib-endian]
- install cppo 1.8.0 [required by lwt]
- install csexp 1.5.2 [required by dune-configurator]
- install domain_shims 0.1.0 [required by lwt]
- install dune 3.20.0 [required by lwt]
- install dune-configurator 3.20.0 [required by lwt]
- install lwt 6.0.0~alpha01 (pinned)
- install ocamlfind 1.9.8 [required by base-bytes]
- install ocplib-endian 1.2 [required by lwt]
<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
-> retrieved cppo.1.8.0 (cached)
-> retrieved csexp.1.5.2 (cached)
-> retrieved domain_shims.0.1.0 (cached)
-> retrieved dune.3.20.0, dune-configurator.3.20.0 (cached)
-> retrieved lwt.6.0.0~alpha01 (cached)
-> retrieved ocamlfind.1.9.8 (cached)
-> retrieved ocplib-endian.1.2 (cached)
-> installed ocamlfind.1.9.8
-> installed base-bytes.base
-> installed dune.3.20.0
-> installed domain_shims.0.1.0
-> installed csexp.1.5.2
-> installed cppo.1.8.0
-> installed ocplib-endian.1.2
-> installed dune-configurator.3.20.0
-> installed lwt.6.0.0~alpha01
Done.
# To update the current shell environment, run: eval $(opam env)
2025-08-21 14:47.16 ---> using "934ae348bdb4eb1a3fa9f44645715c7fa3377f89d2dc4f3d2bd34a7121234837" from cache
/home/opam: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
(network host)
(shell "opam reinstall ca-certs-nss.3.63.1;\
\n res=$?;\
\n test \"$res\" != 31 && exit \"$res\";\
\n export OPAMCLI=2.0;\
\n build_dir=$(opam var prefix)/.opam-switch/build;\
\n failed=$(ls \"$build_dir\");\
\n partial_fails=\"\";\
\n for pkg in $failed; do\
\n if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-12\\\"\"; then\
\n echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
\n fi;\
\n test \"$pkg\" != 'ca-certs-nss.3.63.1' && partial_fails=\"$partial_fails $pkg\";\
\n done;\
\n test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
\n exit 1"))
ca-certs-nss.3.63.1 is not installed. Install it? [y/n] y
The following actions will be performed:
=== install 32 packages
- install asn1-combinators 0.2.6 [required by x509]
- install astring 0.8.5 [required by ca-certs-nss]
- install base64 3.5.1 [required by x509]
- install bigarray-compat 1.1.0 [required by cstruct]
- install bos 0.2.1 [required by ca-certs-nss]
- install ca-certs-nss 3.63.1
- install cmdliner 1.3.0 [required by ca-certs-nss]
- install conf-gmp 5 [required by zarith, conf-gmp-powm-sec]
- install conf-gmp-powm-sec 4 [required by mirage-crypto-pk]
- install conf-pkg-config 4 [required by zarith]
- install cstruct 6.0.1 [required by mirage-crypto, hex, x509]
- install domain-name 0.4.1 [required by x509]
- install duration 0.2.1 [required by mirage-crypto-rng]
- install eqaf 0.9 [required by mirage-crypto]
- install fmt 0.11.0 [required by ca-certs-nss]
- install fpath 0.7.3 [required by bos]
- install gmap 0.3.0 [required by x509]
- install hex 1.5.0 [required by ca-certs-nss]
- install logs 0.9.0 [required by ca-certs-nss]
- install mirage-clock 4.2.0 [required by ca-certs-nss]
- install mirage-crypto 0.11.3 [required by ca-certs-nss]
- install mirage-crypto-ec 0.11.3 [required by x509]
- install mirage-crypto-pk 0.11.3 [required by x509]
- install mirage-crypto-rng 0.11.3 [required by x509]
- install ocamlbuild 0.16.1 [required by astring, bos]
- install pbkdf 1.2.0 [required by x509]
- install ptime 1.2.0 [required by x509]
- install rresult 0.7.0 [required by ca-certs-nss]
- install sexplib0 v0.17.0 [required by mirage-crypto-pk]
- install topkg 1.1.0 [required by astring, bos]
- install x509 0.12.0 [required by ca-certs-nss]
- install zarith 1.14 [required by asn1-combinators, mirage-crypto-pk]
The following system packages will first need to be installed:
libgmp-dev pkg-config
<><> Handling external dependencies <><><><><><><><><><><><><><><><><><><><><><>
opam believes some required external dependencies are missing. opam can:
> 1. Run apt-get to install them (may need root/sudo access)
2. Display the recommended apt-get command and wait while you run it manually (e.g. in another terminal)
3. Continue anyway, and, upon success, permanently register that this external dependency is present, but not detectable
4. Abort the installation
[1/2/3/4] 1
+ /usr/bin/sudo "apt-get" "install" "-qq" "-yy" "libgmp-dev" "pkg-config"
- debconf: delaying package configuration, since apt-utils is not installed
- Selecting previously unselected package libgmpxx4ldbl:amd64.
- (Reading database ...
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 18778 files and directories currently installed.)
- Preparing to unpack .../0-libgmpxx4ldbl_2%3a6.2.1+dfsg1-1.1_amd64.deb ...
- Unpacking libgmpxx4ldbl:amd64 (2:6.2.1+dfsg1-1.1) ...
- Selecting previously unselected package libgmp-dev:amd64.
- Preparing to unpack .../1-libgmp-dev_2%3a6.2.1+dfsg1-1.1_amd64.deb ...
- Unpacking libgmp-dev:amd64 (2:6.2.1+dfsg1-1.1) ...
- Selecting previously unselected package libpkgconf3:amd64.
- Preparing to unpack .../2-libpkgconf3_1.8.1-1_amd64.deb ...
- Unpacking libpkgconf3:amd64 (1.8.1-1) ...
- Selecting previously unselected package pkgconf-bin.
- Preparing to unpack .../3-pkgconf-bin_1.8.1-1_amd64.deb ...
- Unpacking pkgconf-bin (1.8.1-1) ...
- Selecting previously unselected package pkgconf:amd64.
- Preparing to unpack .../4-pkgconf_1.8.1-1_amd64.deb ...
- Unpacking pkgconf:amd64 (1.8.1-1) ...
- Selecting previously unselected package pkg-config:amd64.
- Preparing to unpack .../5-pkg-config_1.8.1-1_amd64.deb ...
- Unpacking pkg-config:amd64 (1.8.1-1) ...
- Setting up libpkgconf3:amd64 (1.8.1-1) ...
- Setting up libgmpxx4ldbl:amd64 (2:6.2.1+dfsg1-1.1) ...
- Setting up pkgconf-bin (1.8.1-1) ...
- Setting up libgmp-dev:amd64 (2:6.2.1+dfsg1-1.1) ...
- Setting up pkgconf:amd64 (1.8.1-1) ...
- Setting up pkg-config:amd64 (1.8.1-1) ...
- Processing triggers for libc-bin (2.36-9+deb12u10) ...
<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
-> retrieved asn1-combinators.0.2.6 (cached)
-> retrieved astring.0.8.5 (cached)
-> retrieved base64.3.5.1 (cached)
-> retrieved bigarray-compat.1.1.0 (cached)
-> retrieved bos.0.2.1 (cached)
-> retrieved ca-certs-nss.3.63.1 (cached)
-> retrieved cmdliner.1.3.0 (cached)
-> retrieved conf-gmp.5 (cached)
-> retrieved conf-gmp-powm-sec.4 (cached)
-> retrieved cstruct.6.0.1 (cached)
-> installed conf-gmp.5
-> installed conf-pkg-config.4
-> retrieved domain-name.0.4.1 (cached)
-> retrieved duration.0.2.1 (cached)
-> retrieved eqaf.0.9 (cached)
-> retrieved fmt.0.11.0 (cached)
-> installed conf-gmp-powm-sec.4
-> retrieved fpath.0.7.3 (cached)
-> retrieved gmap.0.3.0 (cached)
-> retrieved hex.1.5.0 (cached)
-> installed bigarray-compat.1.1.0
-> retrieved logs.0.9.0 (cached)
-> retrieved mirage-clock.4.2.0 (cached)
-> installed base64.3.5.1
-> installed duration.0.2.1
-> installed gmap.0.3.0
-> installed domain-name.0.4.1
-> installed mirage-clock.4.2.0
-> installed cstruct.6.0.1
-> installed hex.1.5.0
-> retrieved mirage-crypto.0.11.3, mirage-crypto-ec.0.11.3, mirage-crypto-pk.0.11.3, mirage-crypto-rng.0.11.3 (cached)
-> retrieved ocamlbuild.0.16.1 (cached)
-> installed eqaf.0.9
-> retrieved pbkdf.1.2.0 (cached)
-> retrieved ptime.1.2.0 (cached)
-> retrieved rresult.0.7.0 (cached)
-> retrieved sexplib0.v0.17.0 (cached)
-> retrieved topkg.1.1.0 (cached)
-> retrieved x509.0.12.0 (cached)
-> retrieved zarith.1.14 (cached)
-> installed sexplib0.v0.17.0
-> installed cmdliner.1.3.0
-> installed mirage-crypto.0.11.3
-> installed pbkdf.1.2.0
-> installed zarith.1.14
-> installed ocamlbuild.0.16.1
-> installed topkg.1.1.0
-> installed rresult.0.7.0
-> installed fmt.0.11.0
-> installed ptime.1.2.0
-> installed astring.0.8.5
-> installed asn1-combinators.0.2.6
-> installed fpath.0.7.3
-> installed logs.0.9.0
-> installed mirage-crypto-rng.0.11.3
-> installed mirage-crypto-pk.0.11.3
-> installed bos.0.2.1
-> installed mirage-crypto-ec.0.11.3
-> installed x509.0.12.0
-> installed ca-certs-nss.3.63.1
Done.
# To update the current shell environment, run: eval $(opam env)
2025-08-21 14:48.10 ---> saved as "778301f32ac173a8f38c03f2b797b968f1cd86f29afc1b01ea7b3deea78bb7ad"
/home/opam: (run (network host)
(shell "(opam reinstall --with-test ca-certs-nss.3.63.1) || true"))
The following actions will be performed:
=== recompile 1 package
- recompile ca-certs-nss 3.63.1
=== install 6 packages
- install alcotest 1.9.0 [required by ca-certs-nss]
- install ocaml-syntax-shims 1.0.0 [required by alcotest]
- install re 1.13.2 [required by alcotest]
- install seq base [required by re]
- install stdlib-shims 0.3.0 [required by alcotest]
- install uutf 1.0.4 [required by alcotest]
<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
-> retrieved alcotest.1.9.0 (https://opam.ocaml.org/cache)
-> retrieved ca-certs-nss.3.63.1 (https://opam.ocaml.org/cache)
-> retrieved ocaml-syntax-shims.1.0.0 (https://opam.ocaml.org/cache)
-> retrieved re.1.13.2 (https://opam.ocaml.org/cache)
-> retrieved seq.base (2 extra sources)
-> retrieved seq.base (2 extra sources)
-> installed seq.base
-> retrieved stdlib-shims.0.3.0 (https://opam.ocaml.org/cache)
-> retrieved uutf.1.0.4 (https://opam.ocaml.org/cache)
-> installed stdlib-shims.0.3.0
-> installed ocaml-syntax-shims.1.0.0
-> installed re.1.13.2
-> removed ca-certs-nss.3.63.1
-> installed uutf.1.0.4
-> installed alcotest.1.9.0
-> installed ca-certs-nss.3.63.1
Done.
# To update the current shell environment, run: eval $(opam env)
2025-08-21 14:48.22 ---> saved as "c2b7b159c00089920a534bdf3f4ac9a9339d9db1414369d1650747e10f910af5"
/home/opam: (run (shell "opam reinstall --with-test --verbose ca-certs-nss.3.63.1;\
\n res=$?;\
\n test \"$res\" != 31 && exit \"$res\";\
\n export OPAMCLI=2.0;\
\n build_dir=$(opam var prefix)/.opam-switch/build;\
\n failed=$(ls \"$build_dir\");\
\n partial_fails=\"\";\
\n for pkg in $failed; do\
\n if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-12\\\"\"; then\
\n echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
\n fi;\
\n test \"$pkg\" != 'ca-certs-nss.3.63.1' && partial_fails=\"$partial_fails $pkg\";\
\n done;\
\n test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
\n exit 1"))
The following actions will be performed:
=== recompile 1 package
- recompile ca-certs-nss 3.63.1
<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
Processing 1/4: [ca-certs-nss.3.63.1: extract]
-> retrieved ca-certs-nss.3.63.1 (cached)
Processing 2/4: [ca-certs-nss: dune build]
+ /home/opam/.opam/opam-init/hooks/sandbox.sh "build" "dune" "build" "-p" "ca-certs-nss" "-j" "71" "@install" "@runtest" (CWD=/home/opam/.opam/5.3/.opam-switch/build/ca-certs-nss.3.63.1)
- (cd _build/default && /home/opam/.opam/5.3/bin/ocamlc.opt -w -40 -g -bin-annot -bin-annot-occurrences -I bin/.extract_from_certdata.eobjs/byte -I /home/opam/.opam/5.3/lib/asn1-combinators -I /home/opam/.opam/5.3/lib/astring -I /home/opam/.opam/5.3/lib/base64 -I /home/opam/.opam/5.3/lib/bigarray-compat -I /home/opam/.opam/5.3/lib/bos -I /home/opam/.opam/5.3/lib/cmdliner -I /home/opam/.opam/5.3/lib/cstruct -I /home/opam/.opam/5.3/lib/domain-name -I /home/opam/.opam/5.3/lib/eqaf -I /home/opam/.opam/5.3/lib/eqaf/bigstring -I /home/opam/.opam/5.3/lib/eqaf/cstruct -I /home/opam/.opam/5.3/lib/fmt -I /home/opam/.opam/5.3/lib/fmt/cli -I /home/opam/.opam/5.3/lib/fmt/tty -I /home/opam/.opam/5.3/lib/fpath -I /home/opam/.opam/5.3/lib/gmap -I /home/opam/.opam/5.3/lib/hex -I /home/opam/.opam/5.3/lib/logs -I /home/opam/.opam/5.3/lib/logs/cli -I /home/opam/.opam/5.3/lib/logs/fmt -I /home/opam/.opam/5.3/lib/mirage-crypto -I /home/opam/.opam/5.3/lib/mirage-crypto-ec -I /home/opam/.opam/5.3/lib/mirage-crypto-pk -I /home/opam/.opam/5.3/lib/mirage-crypto-rng -I /home/opam/.opam/5.3/lib/ocaml/unix -I /home/opam/.opam/5.3/lib/pbkdf -I /home/opam/.opam/5.3/lib/ptime -I /home/opam/.opam/5.3/lib/rresult -I /home/opam/.opam/5.3/lib/sexplib0 -I /home/opam/.opam/5.3/lib/x509 -I /home/opam/.opam/5.3/lib/zarith -no-alias-deps -o bin/.extract_from_certdata.eobjs/byte/dune__exe__Extract_from_certdata.cmo -c -impl bin/extract_from_certdata.ml)
- File "bin/extract_from_certdata.ml", line 206, characters 2-10:
- 206 | Fmt.strf "(* processed %d certificates, %d untrusted, %d trusted. *)%s"
- ^^^^^^^^
- Alert deprecated: Fmt.strf
- use Fmt.str instead.
-
- File "bin/extract_from_certdata.ml", line 269, characters 4-13:
- 269 | Term.info "extract-from-certdata" ~version:"3.63.1" ~doc )
- ^^^^^^^^^
- Alert deprecated: Cmdliner.Term.info
- Use Cmd.info instead.
-
- File "bin/extract_from_certdata.ml", line 271, characters 15-24:
- 271 | let () = match Term.eval cmd with `Ok () -> exit 0 | _ -> exit 1
- ^^^^^^^^^
- Alert deprecated: Cmdliner.Term.eval
- Use Cmd.v and one of Cmd.eval* instead.
- (cd _build/default && /home/opam/.opam/5.3/bin/ocamlopt.opt -w -40 -g -I bin/.extract_from_certdata.eobjs/byte -I bin/.extract_from_certdata.eobjs/native -I /home/opam/.opam/5.3/lib/asn1-combinators -I /home/opam/.opam/5.3/lib/astring -I /home/opam/.opam/5.3/lib/base64 -I /home/opam/.opam/5.3/lib/bigarray-compat -I /home/opam/.opam/5.3/lib/bos -I /home/opam/.opam/5.3/lib/cmdliner -I /home/opam/.opam/5.3/lib/cstruct -I /home/opam/.opam/5.3/lib/domain-name -I /home/opam/.opam/5.3/lib/eqaf -I /home/opam/.opam/5.3/lib/eqaf/bigstring -I /home/opam/.opam/5.3/lib/eqaf/cstruct -I /home/opam/.opam/5.3/lib/fmt -I /home/opam/.opam/5.3/lib/fmt/cli -I /home/opam/.opam/5.3/lib/fmt/tty -I /home/opam/.opam/5.3/lib/fpath -I /home/opam/.opam/5.3/lib/gmap -I /home/opam/.opam/5.3/lib/hex -I /home/opam/.opam/5.3/lib/logs -I /home/opam/.opam/5.3/lib/logs/cli -I /home/opam/.opam/5.3/lib/logs/fmt -I /home/opam/.opam/5.3/lib/mirage-crypto -I /home/opam/.opam/5.3/lib/mirage-crypto-ec -I /home/opam/.opam/5.3/lib/mirage-crypto-pk -I /home/opam/.opam/5.3/lib/mirage-crypto-rng -I /home/opam/.opam/5.3/lib/ocaml/unix -I /home/opam/.opam/5.3/lib/pbkdf -I /home/opam/.opam/5.3/lib/ptime -I /home/opam/.opam/5.3/lib/rresult -I /home/opam/.opam/5.3/lib/sexplib0 -I /home/opam/.opam/5.3/lib/x509 -I /home/opam/.opam/5.3/lib/zarith -cmi-file bin/.extract_from_certdata.eobjs/byte/dune__exe__Extract_from_certdata.cmi -no-alias-deps -o bin/.extract_from_certdata.eobjs/native/dune__exe__Extract_from_certdata.cmx -c -impl bin/extract_from_certdata.ml)
- File "bin/extract_from_certdata.ml", line 206, characters 2-10:
- 206 | Fmt.strf "(* processed %d certificates, %d untrusted, %d trusted. *)%s"
- ^^^^^^^^
- Alert deprecated: Fmt.strf
- use Fmt.str instead.
-
- File "bin/extract_from_certdata.ml", line 269, characters 4-13:
- 269 | Term.info "extract-from-certdata" ~version:"3.63.1" ~doc )
- ^^^^^^^^^
- Alert deprecated: Cmdliner.Term.info
- Use Cmd.info instead.
-
- File "bin/extract_from_certdata.ml", line 271, characters 15-24:
- 271 | let () = match Term.eval cmd with `Ok () -> exit 0 | _ -> exit 1
- ^^^^^^^^^
- Alert deprecated: Cmdliner.Term.eval
- Use Cmd.v and one of Cmd.eval* instead.
- (cd _build/default/lib && ../../install/default/bin/extract-from-certdata certdata.txt --output trust_anchor.ml)
- extract-from-certdata: [WARNING] Untrusted certificate "Explicitly Distrust DigiNotar Root CA" (serial 02100fffffffffffffffffffffffffffffff)
- extract-from-certdata: [WARNING] Untrusted certificate "Explicitly Distrusted DigiNotar PKIoverheid G2" (serial 02040fffffff)
- (cd _build/default && /home/opam/.opam/5.3/bin/ocamlc.opt -w -40 -g -bin-annot -bin-annot-occurrences -I test/.tests.eobjs/byte -I /home/opam/.opam/5.3/lib/alcotest -I /home/opam/.opam/5.3/lib/alcotest/engine -I /home/opam/.opam/5.3/lib/alcotest/stdlib_ext -I /home/opam/.opam/5.3/lib/asn1-combinators -I /home/opam/.opam/5.3/lib/astring -I /home/opam/.opam/5.3/lib/base64 -I /home/opam/.opam/5.3/lib/bigarray-compat -I /home/opam/.opam/5.3/lib/cmdliner -I /home/opam/.opam/5.3/lib/cstruct -I /home/opam/.opam/5.3/lib/domain-name -I /home/opam/.opam/5.3/lib/eqaf -I /home/opam/.opam/5.3/lib/eqaf/bigstring -I /home/opam/.opam/5.3/lib/eqaf/cstruct -I /home/opam/.opam/5.3/lib/fmt -I /home/opam/.opam/5.3/lib/fmt/cli -I /home/opam/.opam/5.3/lib/fmt/tty -I /home/opam/.opam/5.3/lib/gmap -I /home/opam/.opam/5.3/lib/logs -I /home/opam/.opam/5.3/lib/mirage-clock -I /home/opam/.opam/5.3/lib/mirage-crypto -I /home/opam/.opam/5.3/lib/mirage-crypto-ec -I /home/opam/.opam/5.3/lib/mirage-crypto-pk -I /home/opam/.opam/5.3/lib/mirage-crypto-rng -I /home/opam/.opam/5.3/lib/ocaml/unix -I /home/opam/.opam/5.3/lib/pbkdf -I /home/opam/.opam/5.3/lib/ptime -I /home/opam/.opam/5.3/lib/re -I /home/opam/.opam/5.3/lib/rresult -I /home/opam/.opam/5.3/lib/seq -I /home/opam/.opam/5.3/lib/sexplib0 -I /home/opam/.opam/5.3/lib/stdlib-shims -I /home/opam/.opam/5.3/lib/uutf -I /home/opam/.opam/5.3/lib/x509 -I /home/opam/.opam/5.3/lib/zarith -I lib/.ca_certs_nss.objs/byte -no-alias-deps -o test/.tests.eobjs/byte/dune__exe__Tests.cmo -c -impl test/tests.ml)
- File "test/tests.ml", line 60, characters 26-30:
- 60 | Fmt.(list ~sep:(unit ", ") X509.Certificate.pp) ppf chain
- ^^^^
- Alert deprecated: Fmt.unit
- use Fmt.any instead.
- (cd _build/default && /home/opam/.opam/5.3/bin/ocamlopt.opt -w -40 -g -I test/.tests.eobjs/byte -I test/.tests.eobjs/native -I /home/opam/.opam/5.3/lib/alcotest -I /home/opam/.opam/5.3/lib/alcotest/engine -I /home/opam/.opam/5.3/lib/alcotest/stdlib_ext -I /home/opam/.opam/5.3/lib/asn1-combinators -I /home/opam/.opam/5.3/lib/astring -I /home/opam/.opam/5.3/lib/base64 -I /home/opam/.opam/5.3/lib/bigarray-compat -I /home/opam/.opam/5.3/lib/cmdliner -I /home/opam/.opam/5.3/lib/cstruct -I /home/opam/.opam/5.3/lib/domain-name -I /home/opam/.opam/5.3/lib/eqaf -I /home/opam/.opam/5.3/lib/eqaf/bigstring -I /home/opam/.opam/5.3/lib/eqaf/cstruct -I /home/opam/.opam/5.3/lib/fmt -I /home/opam/.opam/5.3/lib/fmt/cli -I /home/opam/.opam/5.3/lib/fmt/tty -I /home/opam/.opam/5.3/lib/gmap -I /home/opam/.opam/5.3/lib/logs -I /home/opam/.opam/5.3/lib/mirage-clock -I /home/opam/.opam/5.3/lib/mirage-crypto -I /home/opam/.opam/5.3/lib/mirage-crypto-ec -I /home/opam/.opam/5.3/lib/mirage-crypto-pk -I /home/opam/.opam/5.3/lib/mirage-crypto-rng -I /home/opam/.opam/5.3/lib/ocaml/unix -I /home/opam/.opam/5.3/lib/pbkdf -I /home/opam/.opam/5.3/lib/ptime -I /home/opam/.opam/5.3/lib/re -I /home/opam/.opam/5.3/lib/rresult -I /home/opam/.opam/5.3/lib/seq -I /home/opam/.opam/5.3/lib/sexplib0 -I /home/opam/.opam/5.3/lib/stdlib-shims -I /home/opam/.opam/5.3/lib/uutf -I /home/opam/.opam/5.3/lib/x509 -I /home/opam/.opam/5.3/lib/zarith -I lib/.ca_certs_nss.objs/byte -I lib/.ca_certs_nss.objs/native -cmi-file test/.tests.eobjs/byte/dune__exe__Tests.cmi -no-alias-deps -o test/.tests.eobjs/native/dune__exe__Tests.cmx -c -impl test/tests.ml)
- File "test/tests.ml", line 60, characters 26-30:
- 60 | Fmt.(list ~sep:(unit ", ") X509.Certificate.pp) ppf chain
- ^^^^
- Alert deprecated: Fmt.unit
- use Fmt.any instead.
- (cd _build/default/test && ./tests.exe)
- Testing `verification tests'.
- This run has ID `UE9G3NQ2'.
-
- [OK] X509 certificate validation 0 google.com.
- [OK] X509 certificate validation 1 extended-validation....
- [OK] X509 certificate validation 2 self-signed.badssl.com.
- [OK] X509 certificate validation 3 expired.badssl.com.
- [OK] X509 certificate validation 4 untrusted-root.badss...
- [OK] X509 certificate validation 5 wrong.host.badssl.com.
- [OK] X509 certificate validation 6 incomplete-chain.bad...
- [OK] X509 certificate validation 7 sha1-intermediate.ba...
- [OK] X509 certificate validation 8 wrong.host.google.com.
-
- Full test results in `~/.opam/5.3/.opam-switch/build/ca-certs-nss.3.63.1/_build/default/test/_build/_tests/verification tests'.
- Test Successful in 0.002s. 9 tests run.
-> compiled ca-certs-nss.3.63.1
-> removed ca-certs-nss.3.63.1
-> installed ca-certs-nss.3.63.1
Done.
# To update the current shell environment, run: eval $(opam env)
2025-08-21 14:48.29 ---> saved as "1882aeff33c6cb5448443dc527c6169f8a6bd93c56f471deb0d10b49ad44c3fe"
Job succeeded
2025-08-21 14:48.42: Job succeeded