- github
- ocaml
- opam-repository
- b7ee11
- freebsd,freebsd-14.2-ocaml-5.3-amd64,ca-certs.1.0.1
(not at the head of any monitored branch or PR)
2025-04-15 17:08.15: New job: build ca-certs.1.0.1, using opam 2.3
from https://github.com/ocaml/opam-repository.git#refs/pull/27764/head (b7ee11260826c0c63ececdc0a5719b3240aab107)
on freebsd-14.2-ocaml-5.3/amd64
To reproduce locally:
cd $(mktemp -d)
git clone --recursive "https://github.com/ocaml/opam-repository.git" && cd "opam-repository" && git fetch origin "refs/pull/27764/head" && git reset --hard b7ee1126
git fetch origin master
git merge --no-edit e6dedb1eed4b290f755e8755ac00728e09854600
cat > ../Dockerfile <<'END-OF-DOCKERFILE'
FROM freebsd-14.2-ocaml-5.3
USER 1000:1000
WORKDIR /home/opam
RUN sudo ln -f /usr/local/bin/opam-2.3 /usr/local/bin/opam
RUN opam init --reinit -ni
RUN opam option solver=builtin-0install && opam config report
ENV OPAMDOWNLOADJOBS="1"
ENV OPAMERRLOGLEN="0"
ENV OPAMPRECISETRACKING="1"
ENV CI="true"
ENV OPAM_REPO_CI="true"
RUN rm -rf opam-repository/
COPY --chown=1000:1000 . opam-repository/
RUN opam repository set-url --strict default opam-repository/
RUN opam update --depexts || true
RUN opam pin add -k version -yn ca-certs.1.0.1 1.0.1
RUN opam reinstall ca-certs.1.0.1; \
res=$?; \
test "$res" != 31 && exit "$res"; \
export OPAMCLI=2.0; \
build_dir=$(opam var prefix)/.opam-switch/build; \
failed=$(ls "$build_dir"); \
partial_fails=""; \
for pkg in $failed; do \
if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"freebsd-14.2\""; then \
echo "A package failed and has been disabled for CI using the 'x-ci-accept-failures' field."; \
fi; \
test "$pkg" != 'ca-certs.1.0.1' && partial_fails="$partial_fails $pkg"; \
done; \
test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}"; \
exit 1
END-OF-DOCKERFILE
docker build -f ../Dockerfile .
2025-04-15 17:08.15: Using cache hint "freebsd-14.2-ocaml-5.3-ca-certs.1.0.1-b7ee11260826c0c63ececdc0a5719b3240aab107"
2025-04-15 17:08.15: Using OBuilder spec:
((from freebsd-14.2-ocaml-5.3)
(user (uid 1000) (gid 1000))
(workdir /home/opam)
(run (shell "sudo ln -f /usr/local/bin/opam-2.3 /usr/local/bin/opam"))
(run (network host)
(shell "opam init --reinit -ni"))
(run (shell "opam option solver=builtin-0install && opam config report"))
(env OPAMDOWNLOADJOBS 1)
(env OPAMERRLOGLEN 0)
(env OPAMPRECISETRACKING 1)
(env CI true)
(env OPAM_REPO_CI true)
(run (shell "rm -rf opam-repository/"))
(copy (src .) (dst opam-repository/))
(run (shell "opam repository set-url --strict default opam-repository/"))
(run (network host)
(shell "opam update --depexts || true"))
(run (shell "opam pin add -k version -yn ca-certs.1.0.1 1.0.1"))
(run (cache (opam-archives (target /home/opam/.opam/download-cache)))
(network host)
(shell "opam reinstall ca-certs.1.0.1;\
\n res=$?;\
\n test \"$res\" != 31 && exit \"$res\";\
\n export OPAMCLI=2.0;\
\n build_dir=$(opam var prefix)/.opam-switch/build;\
\n failed=$(ls \"$build_dir\");\
\n partial_fails=\"\";\
\n for pkg in $failed; do\
\n if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"freebsd-14.2\\\"\"; then\
\n echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
\n fi;\
\n test \"$pkg\" != 'ca-certs.1.0.1' && partial_fails=\"$partial_fails $pkg\";\
\n done;\
\n test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
\n exit 1"))
)
2025-04-15 17:08.15: Waiting for resource in pool OCluster
2025-04-15 17:08.16: Waiting for worker…
2025-04-15 17:08.16: Got resource from pool OCluster
Building on spring
Updating files: 100% (22866/22866), done.
HEAD is now at b39d2f53cb [new release] x509 (1.0.6)
HEAD is now at e6dedb1eed Merge pull request #27749 from toots/opam-publish-ffmpeg.1.2.3
Updating e6dedb1eed..b7ee112608
Fast-forward
packages/ca-certs/ca-certs.1.0.1/opam | 61 +++++++++++++++++++++++++++++++++++
1 file changed, 61 insertions(+)
create mode 100644 packages/ca-certs/ca-certs.1.0.1/opam
(from freebsd-14.2-ocaml-5.3)
2025-04-15 16:53.50 ---> using "47c9a03b962be450225081ed69acde1f5c6dadb6d1106d9b1a8b4fd61c2defa6" from cache
/: (user (uid 1000) (gid 1000))
/: (workdir /home/opam)
/home/opam: (run (shell "sudo ln -f /usr/local/bin/opam-2.3 /usr/local/bin/opam"))
2025-04-15 16:53.51 ---> using "c100fcff2c574e3682914186172801ecf5aff24e34775f062038baff6ab92d09" from cache
/home/opam: (run (network host)
(shell "opam init --reinit -ni"))
No configuration file found, using built-in defaults.
Checking for available remotes: rsync and local, git.
- you won't be able to use mercurial repositories unless you install the hg command on your system.
- you won't be able to use darcs repositories unless you install the darcs command on your system.
This version of opam requires an update to the layout of /home/opam/.opam from version 2.1 to version 2.2, which can't be reverted.
You may want to back it up before going further.
Continue? [y/n] y
[NOTE] The 'jobs' option was reset, its value was 1 and its new value will vary according to the current number of cores on your machine. You can restore the fixed value using:
opam option jobs=1 --global
Format upgrade done.
<><> Updating repositories ><><><><><><><><><><><><><><><><><><><><><><><><><><>
[default] no changes from git+file:///home/opam/opam-repository
2025-04-15 16:53.52 ---> using "795fd05166930ba4ba9cad58e2d3788b4915a835784217393e74e9f87e2e9159" from cache
/home/opam: (run (shell "opam option solver=builtin-0install && opam config report"))
Set to 'builtin-0install' the field solver in global configuration
# opam config report
# opam-version 2.3.0
# self-upgrade no
# system arch=x86_64 os=freebsd os-distribution=freebsd os-version=1402000
# solver builtin-0install
# install-criteria -changed,-count[avoid-version,solution]
# upgrade-criteria -count[avoid-version,solution]
# jobs 7
# repositories 1 (version-controlled)
# pinned 0
# current-switch 5.3.0
# invariant ["ocaml-base-compiler" {= "5.3.0"} | "ocaml-system" {= "5.3.0"}]
# compiler-packages ocaml-base-compiler.5.3.0, ocaml-compiler.5.3.0, ocaml-options-vanilla.1
# ocaml:native true
# ocaml:native-tools true
# ocaml:native-dynlink true
# ocaml:stubsdir /home/opam/.opam/5.3.0/lib/ocaml/stublibs:/home/opam/.opam/5.3.0/lib/ocaml
# ocaml:preinstalled false
# ocaml:compiler 5.3.0
2025-04-15 16:53.52 ---> using "ff597a628b140c0da12c4190032d4f8ce25cc29eb9a812ed6ff0e3d186fb8562" from cache
/home/opam: (env OPAMDOWNLOADJOBS 1)
/home/opam: (env OPAMERRLOGLEN 0)
/home/opam: (env OPAMPRECISETRACKING 1)
/home/opam: (env CI true)
/home/opam: (env OPAM_REPO_CI true)
/home/opam: (run (shell "rm -rf opam-repository/"))
2025-04-15 16:53.52 ---> using "57e3f7248fa0ab3baaa290ad1e0a00da01320b9679720df35c01763d06b21aa3" from cache
/home/opam: (copy (src .) (dst opam-repository/))
2025-04-15 16:54.29 ---> saved as "df11bdb28d081a93d3357e1f7cbfd3c7288e863ee8d4d8f8c106e6bfc7d98f54"
/home/opam: (run (shell "opam repository set-url --strict default opam-repository/"))
[default] Initialised
2025-04-15 16:54.58 ---> saved as "6926c69dc6c8f002df034186931bf38ec8262a808e27777efdada03422fbca4a"
/home/opam: (run (network host)
(shell "opam update --depexts || true"))
[WARNING] Unknown update command for bsd, skipping system update
2025-04-15 16:54.59 ---> saved as "a69d20499682c8e1d85838047238f5e2781681ed097031cdd4a1cf4f78930a55"
/home/opam: (run (shell "opam pin add -k version -yn ca-certs.1.0.1 1.0.1"))
ca-certs is now pinned to version 1.0.1
2025-04-15 16:55.00 ---> saved as "46685a67eeab2d9ad3b80e111b9d680d441f5156b82449490cfeab49e5b26444"
/home/opam: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
(network host)
(shell "opam reinstall ca-certs.1.0.1;\
\n res=$?;\
\n test \"$res\" != 31 && exit \"$res\";\
\n export OPAMCLI=2.0;\
\n build_dir=$(opam var prefix)/.opam-switch/build;\
\n failed=$(ls \"$build_dir\");\
\n partial_fails=\"\";\
\n for pkg in $failed; do\
\n if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"freebsd-14.2\\\"\"; then\
\n echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
\n fi;\
\n test \"$pkg\" != 'ca-certs.1.0.1' && partial_fails=\"$partial_fails $pkg\";\
\n done;\
\n test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
\n exit 1"))
ca-certs.1.0.1 is not installed. Install it? [y/n] y
The following actions will be performed:
=== install 34 packages
∗ asn1-combinators 0.3.2 [required by x509]
∗ astring 0.8.5 [required by bos]
∗ base64 3.5.1 [required by x509]
∗ bos 0.2.1 [required by ca-certs]
∗ ca-certs 1.0.1 (pinned)
∗ conf-gmp 5 [required by conf-gmp-powm-sec, zarith]
∗ conf-gmp-powm-sec 4 [required by mirage-crypto-pk]
∗ conf-pkg-config 4 [required by zarith]
∗ csexp 1.5.2 [required by dune-configurator]
∗ digestif 1.2.0 [required by ca-certs]
∗ domain-name 0.4.1 [required by x509]
∗ dune 3.18.0 [required by ca-certs]
∗ dune-configurator 3.18.0 [required by mirage-crypto]
∗ duration 0.2.1 [required by mirage-crypto-rng]
∗ eqaf 0.10 [required by digestif, mirage-crypto]
∗ fmt 0.10.0 [required by bos, x509]
∗ fpath 0.7.3 [required by ca-certs]
∗ gmap 0.3.0 [required by x509]
∗ ipaddr 5.6.0 [required by x509]
∗ kdf 1.0.0 [required by x509]
∗ logs 0.8.0 [required by ca-certs]
∗ macaddr 5.6.0 [required by ipaddr]
∗ mirage-crypto 2.0.0 [required by ca-certs]
∗ mirage-crypto-ec 2.0.0 [required by x509]
∗ mirage-crypto-pk 2.0.0 [required by x509]
∗ mirage-crypto-rng 2.0.0 [required by x509]
∗ ocamlbuild 0.16.1 [required by bos, ptime]
∗ ocamlfind 1.9.8 [required by bos, ptime]
∗ ohex 0.2.0 [required by ca-certs]
∗ ptime 1.2.0 [required by ca-certs]
∗ rresult 0.7.0 [required by bos]
∗ topkg 1.0.8 [required by bos, ptime]
∗ x509 1.0.5 [required by ca-certs]
∗ zarith 1.14 [required by mirage-crypto-pk]
The following system packages will first need to be installed:
ca_root_nss gmp
<><> Handling external dependencies <><><><><><><><><><><><><><><><><><><><><><>
opam believes some required external dependencies are missing. opam can:
> 1. Run pkg to install them (may need root/sudo access)
2. Display the recommended pkg command and wait while you run it manually (e.g. in another terminal)
3. Continue anyway, and, upon success, permanently register that this external dependency is present, but not detectable
4. Abort the installation
[1/2/3/4] 1
+ /usr/local/bin/sudo "pkg" "install" "-y" "ca_root_nss" "gmp"
- Updating FreeBSD repository catalogue...
- [spring] Fetching data.pkg: ...
- ......
- . done
- Processing entries:
- ..
- ..
- ..
- ..
- .
- . done
- FreeBSD repository update completed. 34724 packages processed.
- All repositories are up to date.
- New version of pkg detected; it needs to be installed first.
- The following 1 package(s) will be affected (of 0 checked):
-
- Installed packages to be UPGRADED:
- pkg: 1.21.3 -> 2.1.0
-
- Number of packages to be upgraded: 1
-
- 12 MiB to be downloaded.
- [spring] [1/1] Fetching pkg-2.1.0.pkg: .
- ...
- ...
- ... done
- Checking integrity... done (0 conflicting)
- [spring] [1/1] Upgrading pkg from 1.21.3 to 2.1.0...
- [spring] [1/1] Extracting pkg-2.1.0: .......... done
- Updating FreeBSD repository catalogue...
- FreeBSD repository is up to date.
- All repositories are up to date.
- The following 2 package(s) will be affected (of 0 checked):
-
- New packages to be INSTALLED:
- ca_root_nss: 3.108
- gmp: 6.3.0
-
- Number of packages to be installed: 2
-
- The process will require 3 MiB more space.
- 780 KiB to be downloaded.
- [spring] [1/2] Fetching gmp-6.3.0.pkg: .
- ......... done
- [spring] [2/2] Fetching ca_root_nss-3.108.pkg: .......... done
- Checking integrity... done (0 conflicting)
- [spring] [1/2] Installing ca_root_nss-3.108...
- [spring] [1/2] Extracting ca_root_nss-3.108: ....... done
- Scanning /usr/share/certs/untrusted for certificates...
- Scanning /usr/share/certs/trusted for certificates...
- Scanning /usr/local/share/certs for certificates...
- [spring] [2/2] Installing gmp-6.3.0...
- [spring] [2/2] Extracting gmp-6.3.0: .......... done
- =====
- Message from ca_root_nss-3.108:
-
- --
- FreeBSD does not, and can not warrant that the certification authorities
- whose certificates are included in this package have in any way been
- audited for trustworthiness or RFC 3647 compliance.
-
- Assessment and verification of trust is the complete responsibility of
- the system administrator.
-
- This package installs symlinks to support root certificate discovery
- for software that either uses other cryptographic libraries than
- OpenSSL, or use OpenSSL but do not follow recommended practice.
-
- If you prefer to do this manually, replace the following symlinks with
- either an empty file or your site-local certificate bundle.
-
- * /etc/ssl/cert.pem
- * /usr/local/etc/ssl/cert.pem
- * /usr/local/openssl/cert.pem
<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
⬇ retrieved asn1-combinators.0.3.2 (cached)
⬇ retrieved astring.0.8.5 (cached)
⬇ retrieved base64.3.5.1 (cached)
⬇ retrieved bos.0.2.1 (cached)
⬇ retrieved ca-certs.1.0.1 (https://github.com/mirage/ca-certs/releases/download/v1.0.1/ca-certs-1.0.1.tbz)
⬇ retrieved conf-gmp.5 (cached)
⬇ retrieved conf-gmp-powm-sec.4 (cached)
∗ installed conf-pkg-config.4
∗ installed conf-gmp.5
⬇ retrieved csexp.1.5.2 (cached)
∗ installed conf-gmp-powm-sec.4
⬇ retrieved digestif.1.2.0 (cached)
⬇ retrieved domain-name.0.4.1 (cached)
⬇ retrieved dune.3.18.0, dune-configurator.3.18.0 (cached)
⬇ retrieved duration.0.2.1 (cached)
⬇ retrieved eqaf.0.10 (cached)
⬇ retrieved fmt.0.10.0 (cached)
⬇ retrieved fpath.0.7.3 (cached)
⬇ retrieved gmap.0.3.0 (cached)
⬇ retrieved ipaddr.5.6.0, macaddr.5.6.0 (cached)
⬇ retrieved kdf.1.0.0 (cached)
⬇ retrieved logs.0.8.0 (cached)
⬇ retrieved mirage-crypto.2.0.0, mirage-crypto-ec.2.0.0, mirage-crypto-pk.2.0.0, mirage-crypto-rng.2.0.0 (cached)
⬇ retrieved ocamlbuild.0.16.1 (cached)
⬇ retrieved ocamlfind.1.9.8 (cached)
⬇ retrieved ohex.0.2.0 (cached)
⬇ retrieved ptime.1.2.0 (cached)
⬇ retrieved rresult.0.7.0 (cached)
⬇ retrieved topkg.1.0.8 (cached)
⬇ retrieved x509.1.0.5 (cached)
⬇ retrieved zarith.1.14 (cached)
∗ installed ocamlbuild.0.16.1
∗ installed ocamlfind.1.9.8
∗ installed zarith.1.14
∗ installed topkg.1.0.8
∗ installed rresult.0.7.0
∗ installed fmt.0.10.0
∗ installed ptime.1.2.0
∗ installed astring.0.8.5
∗ installed dune.3.18.0
∗ installed duration.0.2.1
∗ installed domain-name.0.4.1
∗ installed fpath.0.7.3
∗ installed csexp.1.5.2
∗ installed logs.0.8.0
∗ installed ohex.0.2.0
∗ installed macaddr.5.6.0
∗ installed gmap.0.3.0
∗ installed eqaf.0.10
∗ installed base64.3.5.1
∗ installed asn1-combinators.0.3.2
∗ installed ipaddr.5.6.0
∗ installed dune-configurator.3.18.0
∗ installed digestif.1.2.0
∗ installed bos.0.2.1
∗ installed mirage-crypto.2.0.0
∗ installed kdf.1.0.0
∗ installed mirage-crypto-rng.2.0.0
∗ installed mirage-crypto-pk.2.0.0
∗ installed mirage-crypto-ec.2.0.0
∗ installed x509.1.0.5
∗ installed ca-certs.1.0.1
Done.
2025-04-15 16:57.13 ---> saved as "8848a641c95877c997480b8f224574ad30c2954edb7401a35f7ed391fe8a6364"
Job succeeded
2025-04-15 17:12.28: Job succeeded