Organisationsmirageca-certs-nssc74971 (main)debian-12-5.2+flambda_opam-2.2

debian-12-5.2+flambda_opam-2.2

Link Copied
Code Copied

Logs

2024-09-11 13:38.32: New job: test mirage/ca-certs-nss https://github.com/mirage/ca-certs-nss.git#refs/heads/main (c749713c6a0dd2236e9aa39a9366b70495fbd022) (linux-x86_64:debian-12-5.2+flambda_opam-2.2)
Base: ocaml/opam:debian-12-ocaml-5.2-flambda@sha256:7daef57dee20ef9e9da31876dfb6071c17575e44cf81614d5a2d374d0a5b3000
Opam project build


To reproduce locally:


git clone --recursive "https://github.com/mirage/ca-certs-nss.git" -b "main" && cd "ca-certs-nss" && git reset --hard c749713c
cat > Dockerfile <<'END-OF-DOCKERFILE'
FROM ocaml/opam:debian-12-ocaml-5.2-flambda@sha256:7daef57dee20ef9e9da31876dfb6071c17575e44cf81614d5a2d374d0a5b3000
# debian-12-5.2+flambda_opam-2.2
USER 1000:1000
ENV CLICOLOR_FORCE="1"
ENV OPAMCOLOR="always"
WORKDIR /src
RUN sudo ln -f /usr/bin/opam-2.2 /usr/bin/opam
RUN opam init --reinit -ni
RUN uname -rs && opam exec -- ocaml -version && opam --version
WORKDIR /src
RUN sudo chown opam /src
RUN cd ~/opam-repository && (git cat-file -e 0329818dcfd3de1a722ea09eeeed94cd24caa375 || git fetch origin master) && git reset -q --hard 0329818dcfd3de1a722ea09eeeed94cd24caa375 && git log --no-decorate -n1 --oneline && opam update -u
COPY --chown=1000:1000 ca-certs-nss.opam ./
RUN opam pin add -yn ca-certs-nss.dev './'
ENV DEPS="alcotest.1.8.0 asn1-combinators.0.3.2 astring.0.8.5 base-bigarray.base base-domains.base base-nnp.base base-threads.base base-unix.base base64.3.5.1 bos.0.2.1 cmdliner.1.3.0 conf-gmp.4 conf-gmp-powm-sec.3 conf-pkg-config.3 csexp.1.5.2 digestif.1.2.0 domain-name.0.4.0 dune.3.16.0 dune-configurator.3.16.0 duration.0.2.1 eqaf.0.10 fmt.0.9.0 fpath.0.7.3 gmap.0.3.0 host-arch-x86_64.1 host-system-other.1 ipaddr.5.6.0 kdf.1.0.0 logs.0.7.0 macaddr.5.6.0 mirage-clock.4.2.0 mirage-crypto.1.1.0 mirage-crypto-ec.1.1.0 mirage-crypto-pk.1.1.0 mirage-crypto-rng.1.1.0 ocaml.5.2.0 ocaml-config.3 ocaml-syntax-shims.1.0.0 ocaml-variants.5.2.0+options ocamlbuild.0.15.0 ocamlfind.1.9.6 ohex.0.2.0 ptime.1.2.0 re.1.12.0 rresult.0.7.0 seq.base stdlib-shims.0.3.0 topkg.1.0.7 uutf.1.0.3 x509.1.0.3 zarith.1.14"
ENV CI="true"
ENV OCAMLCI="true"
RUN opam update --depexts && opam install --cli=2.2 --depext-only -y ca-certs-nss.dev $DEPS
RUN opam install $DEPS
COPY --chown=1000:1000 . /src
RUN opam exec -- dune build @install @check @runtest && rm -rf _build


END-OF-DOCKERFILE
docker build .
END-REPRO-BLOCK


2024-09-11 13:38.32: Using cache hint "mirage/ca-certs-nss-ocaml/opam:debian-12-ocaml-5.2-flambda@sha256:7daef57dee20ef9e9da31876dfb6071c17575e44cf81614d5a2d374d0a5b3000-debian-12-5.2+flambda_opam-2.2-5d825ca587228691eaeba4b1e53a0a6d"
2024-09-11 13:38.32: Using OBuilder spec:
((from ocaml/opam:debian-12-ocaml-5.2-flambda@sha256:7daef57dee20ef9e9da31876dfb6071c17575e44cf81614d5a2d374d0a5b3000)
 (comment debian-12-5.2+flambda_opam-2.2)
 (user (uid 1000) (gid 1000))
 (env CLICOLOR_FORCE 1)
 (env OPAMCOLOR always)
 (workdir /src)
 (run (shell "sudo ln -f /usr/bin/opam-2.2 /usr/bin/opam"))
 (run (shell "opam init --reinit -ni"))
 (run (shell "uname -rs && opam exec -- ocaml -version && opam --version"))
 (workdir /src)
 (run (shell "sudo chown opam /src"))
 (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
      (network host)
      (shell "cd ~/opam-repository && (git cat-file -e 0329818dcfd3de1a722ea09eeeed94cd24caa375 || git fetch origin master) && git reset -q --hard 0329818dcfd3de1a722ea09eeeed94cd24caa375 && git log --no-decorate -n1 --oneline && opam update -u"))
 (copy (src ca-certs-nss.opam) (dst ./))
 (run (network host)
      (shell "opam pin add -yn ca-certs-nss.dev './'"))
 (env DEPS "alcotest.1.8.0 asn1-combinators.0.3.2 astring.0.8.5 base-bigarray.base base-domains.base base-nnp.base base-threads.base base-unix.base base64.3.5.1 bos.0.2.1 cmdliner.1.3.0 conf-gmp.4 conf-gmp-powm-sec.3 conf-pkg-config.3 csexp.1.5.2 digestif.1.2.0 domain-name.0.4.0 dune.3.16.0 dune-configurator.3.16.0 duration.0.2.1 eqaf.0.10 fmt.0.9.0 fpath.0.7.3 gmap.0.3.0 host-arch-x86_64.1 host-system-other.1 ipaddr.5.6.0 kdf.1.0.0 logs.0.7.0 macaddr.5.6.0 mirage-clock.4.2.0 mirage-crypto.1.1.0 mirage-crypto-ec.1.1.0 mirage-crypto-pk.1.1.0 mirage-crypto-rng.1.1.0 ocaml.5.2.0 ocaml-config.3 ocaml-syntax-shims.1.0.0 ocaml-variants.5.2.0+options ocamlbuild.0.15.0 ocamlfind.1.9.6 ohex.0.2.0 ptime.1.2.0 re.1.12.0 rresult.0.7.0 seq.base stdlib-shims.0.3.0 topkg.1.0.7 uutf.1.0.3 x509.1.0.3 zarith.1.14")
 (env CI true)
 (env OCAMLCI true)
 (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
      (network host)
      (shell "opam update --depexts && opam install --cli=2.2 --depext-only -y ca-certs-nss.dev $DEPS"))
 (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
      (network host)
      (shell "opam install $DEPS"))
 (copy (src .) (dst /src))
 (run (shell "opam exec -- dune build @install @check @runtest && rm -rf _build"))
)


2024-09-11 13:38.32: Waiting for resource in pool OCluster
2024-09-11 15:44.13: Waiting for worker…
2024-09-11 15:47.23: Got resource from pool OCluster
Building on x86-bm-c17.sw.ocaml.org
All commits already cached
HEAD is now at c749713 fix dependencies: digestif added, mirage-crypto removed, x509 lower bound


(from ocaml/opam:debian-12-ocaml-5.2-flambda@sha256:7daef57dee20ef9e9da31876dfb6071c17575e44cf81614d5a2d374d0a5b3000)
2024-09-11 15:48.30 ---> saved as "f63350997a245578e743986fad4bbab62e8ebc210cde6a3c1f3bc68fd693c8eb"


/: (comment debian-12-5.2+flambda_opam-2.2)


/: (user (uid 1000) (gid 1000))


/: (env CLICOLOR_FORCE 1)


/: (env OPAMCOLOR always)


/: (workdir /src)


/src: (run (shell "sudo ln -f /usr/bin/opam-2.2 /usr/bin/opam"))
2024-09-11 15:48.31 ---> saved as "47b45965c6d056d3836604ec7a851ac466339ada0e953b3dc1e5ae50c62494b7"


/src: (run (shell "opam init --reinit -ni"))
Configuring from /home/opam/.opamrc and then from built-in defaults.
Checking for available remotes: rsync and local, git.
  - you won't be able to use mercurial repositories unless you install the hg command on your system.
  - you won't be able to use darcs repositories unless you install the darcs command on your system.


This development version of opam requires an update to the layout of /home/opam/.opam from version 2.0 to version 2.2, which can't be reverted.
You may want to back it up before going further.


Continue? [y/n] y
[NOTE] The 'jobs' option was reset, its value was 39 and its new value will vary according to the current number of cores on your machine. You can restore the fixed value using:
           opam option jobs=39 --global
Format upgrade done.


<><> Updating repositories ><><><><><><><><><><><><><><><><><><><><><><><><><><>
[default] synchronised from file:///home/opam/opam-repository
2024-09-11 15:50.20 ---> saved as "e6582525ddf3968ef0c56ec7a548c1618ed8e86eb686739984dddb908ed3a001"


/src: (run (shell "uname -rs && opam exec -- ocaml -version && opam --version"))
Linux 5.15.0-119-generic
The OCaml toplevel, version 5.2.0
2.2.1
2024-09-11 15:50.21 ---> saved as "ff15df50fa1323cb4cd4c74cec15c9d72eb50f432efe6f20dbfbc6beb3ccc9e5"


/src: (workdir /src)


/src: (run (shell "sudo chown opam /src"))
2024-09-11 15:50.21 ---> saved as "5c00250d5a06880badf7f14c0e3b32f09ffea29161b1b4df5cefc78e98045da6"


/src: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
           (network host)
           (shell "cd ~/opam-repository && (git cat-file -e 0329818dcfd3de1a722ea09eeeed94cd24caa375 || git fetch origin master) && git reset -q --hard 0329818dcfd3de1a722ea09eeeed94cd24caa375 && git log --no-decorate -n1 --oneline && opam update -u"))
From https://github.com/ocaml/opam-repository
 * branch                  master     -> FETCH_HEAD
   e89899ac28..0329818dcf  master     -> origin/master
0329818dcf Merge pull request #26527 from dbuenzli/b0-publish-mtime.2.1.0-etc-b00ab5a8b3cb608d


<><> Updating package repositories ><><><><><><><><><><><><><><><><><><><><><><>
[default] synchronised from file:///home/opam/opam-repository


Everything as up-to-date as possible (run with --verbose to show unavailable upgrades).
However, you may "opam upgrade" these packages explicitly, which will ask permission to downgrade or uninstall the conflicting packages.
Nothing to do.
# Run eval $(opam env) to update the current shell environment
2024-09-11 15:51.57 ---> saved as "af680c729637bc57e3c9cd5030388ed4a204b5fd79d72b8d22c482d56b21ac33"


/src: (copy (src ca-certs-nss.opam) (dst ./))
2024-09-11 15:51.57 ---> saved as "9a3e55437eaf863b3ebbb5ea29ceba2be7f9b510a8e4a3f665d9721238d64b61"


/src: (run (network host)
           (shell "opam pin add -yn ca-certs-nss.dev './'"))
[ca-certs-nss.dev] synchronised (file:///src)
ca-certs-nss is now pinned to file:///src (version dev)
2024-09-11 15:52.00 ---> saved as "fa33bf241ec1d23a5b9e39365326794fdd2e3a07295baa779b5e1f873ad9402d"


/src: (env DEPS "alcotest.1.8.0 asn1-combinators.0.3.2 astring.0.8.5 base-bigarray.base base-domains.base base-nnp.base base-threads.base base-unix.base base64.3.5.1 bos.0.2.1 cmdliner.1.3.0 conf-gmp.4 conf-gmp-powm-sec.3 conf-pkg-config.3 csexp.1.5.2 digestif.1.2.0 domain-name.0.4.0 dune.3.16.0 dune-configurator.3.16.0 duration.0.2.1 eqaf.0.10 fmt.0.9.0 fpath.0.7.3 gmap.0.3.0 host-arch-x86_64.1 host-system-other.1 ipaddr.5.6.0 kdf.1.0.0 logs.0.7.0 macaddr.5.6.0 mirage-clock.4.2.0 mirage-crypto.1.1.0 mirage-crypto-ec.1.1.0 mirage-crypto-pk.1.1.0 mirage-crypto-rng.1.1.0 ocaml.5.2.0 ocaml-config.3 ocaml-syntax-shims.1.0.0 ocaml-variants.5.2.0+options ocamlbuild.0.15.0 ocamlfind.1.9.6 ohex.0.2.0 ptime.1.2.0 re.1.12.0 rresult.0.7.0 seq.base stdlib-shims.0.3.0 topkg.1.0.7 uutf.1.0.3 x509.1.0.3 zarith.1.14")


/src: (env CI true)


/src: (env OCAMLCI true)


/src: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
           (network host)
           (shell "opam update --depexts && opam install --cli=2.2 --depext-only -y ca-certs-nss.dev $DEPS"))
+ /usr/bin/sudo "apt-get" "update"
- Get:1 http://deb.debian.org/debian bookworm InRelease [151 kB]
- Get:2 http://deb.debian.org/debian bookworm-updates InRelease [55.4 kB]
- Get:3 http://deb.debian.org/debian-security bookworm-security InRelease [48.0 kB]
- Get:4 http://deb.debian.org/debian bookworm/main amd64 Packages [8787 kB]
- Get:5 http://deb.debian.org/debian bookworm-updates/main amd64 Packages.diff/Index [11.7 kB]
- Get:6 http://deb.debian.org/debian bookworm-updates/main amd64 Packages T-2024-09-10-2011.55-F-2024-09-10-2011.55.pdiff [1116 B]
- Get:6 http://deb.debian.org/debian bookworm-updates/main amd64 Packages T-2024-09-10-2011.55-F-2024-09-10-2011.55.pdiff [1116 B]
- Get:7 http://deb.debian.org/debian-security bookworm-security/main amd64 Packages [179 kB]
- Fetched 9234 kB in 2s (3945 kB/s)
- Reading package lists...
- 


<><> Synchronising pinned packages ><><><><><><><><><><><><><><><><><><><><><><>
[ca-certs-nss.dev] synchronised (no changes)


[NOTE] Package ocaml-variants is already installed (current version is 5.2.0+options).
[NOTE] Package ocaml-config is already installed (current version is 3).
[NOTE] Package ocaml is already installed (current version is 5.2.0).
[NOTE] Package host-system-other is already installed (current version is 1).
[NOTE] Package host-arch-x86_64 is already installed (current version is 1).
[NOTE] Package base-unix is already installed (current version is base).
[NOTE] Package base-threads is already installed (current version is base).
[NOTE] Package base-nnp is already installed (current version is base).
[NOTE] Package base-domains is already installed (current version is base).
[NOTE] Package base-bigarray is already installed (current version is base).


The following system packages will first need to be installed:
    libgmp-dev pkg-config


<><> Handling external dependencies <><><><><><><><><><><><><><><><><><><><><><>


+ /usr/bin/sudo "apt-get" "install" "-qq" "-yy" "libgmp-dev" "pkg-config"
- debconf: delaying package configuration, since apt-utils is not installed


2024-09-11 15:52.30 ---> saved as "e96f80888b46590e5f09808b57a05e201f43ae47c86dc97337d3cd7d0a331dc8"


/src: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
           (network host)
           (shell "opam install $DEPS"))
[NOTE] Package ocaml-variants is already installed (current version is 5.2.0+options).
[NOTE] Package ocaml-config is already installed (current version is 3).
[NOTE] Package ocaml is already installed (current version is 5.2.0).
[NOTE] Package host-system-other is already installed (current version is 1).
[NOTE] Package host-arch-x86_64 is already installed (current version is 1).
[NOTE] Package base-unix is already installed (current version is base).
[NOTE] Package base-threads is already installed (current version is base).
[NOTE] Package base-nnp is already installed (current version is base).
[NOTE] Package base-domains is already installed (current version is base).
[NOTE] Package base-bigarray is already installed (current version is base).
The following actions will be performed:
=== install 41 packages
  - install alcotest           1.8.0
  - install asn1-combinators   0.3.2
  - install astring            0.8.5
  - install base64             3.5.1
  - install bos                0.2.1
  - install cmdliner           1.3.0
  - install conf-gmp           4
  - install conf-gmp-powm-sec  3
  - install conf-pkg-config    3
  - install csexp              1.5.2
  - install digestif           1.2.0
  - install domain-name        0.4.0
  - install dune               3.16.0
  - install dune-configurator  3.16.0
  - install duration           0.2.1
  - install eqaf               0.10
  - install fmt                0.9.0
  - install fpath              0.7.3
  - install gmap               0.3.0
  - install ipaddr             5.6.0
  - install kdf                1.0.0
  - install logs               0.7.0
  - install macaddr            5.6.0
  - install mirage-clock       4.2.0
  - install mirage-crypto      1.1.0
  - install mirage-crypto-ec   1.1.0
  - install mirage-crypto-pk   1.1.0
  - install mirage-crypto-rng  1.1.0
  - install ocaml-syntax-shims 1.0.0
  - install ocamlbuild         0.15.0
  - install ocamlfind          1.9.6
  - install ohex               0.2.0
  - install ptime              1.2.0
  - install re                 1.12.0
  - install rresult            0.7.0
  - install seq                base
  - install stdlib-shims       0.3.0
  - install topkg              1.0.7
  - install uutf               1.0.3
  - install x509               1.0.3
  - install zarith             1.14


<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
-> retrieved asn1-combinators.0.3.2  (cached)
-> retrieved base64.3.5.1  (cached)
-> retrieved astring.0.8.5  (cached)
-> retrieved bos.0.2.1  (cached)
-> retrieved conf-gmp.4  (cached)
-> retrieved conf-gmp-powm-sec.3  (cached)
-> retrieved alcotest.1.8.0  (cached)
-> retrieved cmdliner.1.3.0  (cached)
-> retrieved csexp.1.5.2  (cached)
-> installed conf-gmp.4
-> installed conf-pkg-config.3
-> retrieved domain-name.0.4.0  (cached)
-> retrieved duration.0.2.1  (cached)
-> retrieved eqaf.0.10  (cached)
-> retrieved fmt.0.9.0  (cached)
-> retrieved fpath.0.7.3  (cached)
-> retrieved gmap.0.3.0  (cached)
-> installed conf-gmp-powm-sec.3
-> retrieved ipaddr.5.6.0, macaddr.5.6.0  (cached)
-> retrieved kdf.1.0.0  (cached)
-> retrieved logs.0.7.0  (cached)
-> retrieved mirage-clock.4.2.0  (cached)
-> retrieved digestif.1.2.0  (cached)
-> retrieved ocaml-syntax-shims.1.0.0  (cached)
-> retrieved ocamlbuild.0.15.0  (cached)
-> retrieved ocamlfind.1.9.6  (cached)
-> retrieved dune.3.16.0, dune-configurator.3.16.0  (cached)
-> retrieved mirage-crypto.1.1.0, mirage-crypto-ec.1.1.0, mirage-crypto-pk.1.1.0, mirage-crypto-rng.1.1.0  (cached)
-> retrieved ohex.0.2.0  (cached)
-> retrieved ptime.1.2.0  (cached)
-> retrieved seq.base  (cached)
-> retrieved rresult.0.7.0  (cached)
-> retrieved stdlib-shims.0.3.0  (cached)
-> retrieved re.1.12.0  (cached)
-> retrieved uutf.1.0.3  (cached)
-> installed cmdliner.1.3.0
-> installed seq.base
-> retrieved topkg.1.0.7  (cached)
-> retrieved x509.1.0.3  (cached)
-> retrieved zarith.1.14  (cached)
-> installed ocamlfind.1.9.6
-> installed zarith.1.14
-> installed ocamlbuild.0.15.0
-> installed topkg.1.0.7
-> installed rresult.0.7.0
-> installed uutf.1.0.3
-> installed fmt.0.9.0
-> installed ptime.1.2.0
-> installed astring.0.8.5
-> installed fpath.0.7.3
-> installed logs.0.7.0
-> installed bos.0.2.1
-> installed dune.3.16.0
-> installed mirage-clock.4.2.0
-> installed csexp.1.5.2
-> installed asn1-combinators.0.3.2
-> installed base64.3.5.1
-> installed domain-name.0.4.0
-> installed duration.0.2.1
-> installed eqaf.0.10
-> installed gmap.0.3.0
-> installed macaddr.5.6.0
-> installed ohex.0.2.0
-> installed stdlib-shims.0.3.0
-> installed ocaml-syntax-shims.1.0.0
-> installed re.1.12.0
-> installed ipaddr.5.6.0
-> installed dune-configurator.3.16.0
-> installed digestif.1.2.0
-> installed alcotest.1.8.0
-> installed mirage-crypto.1.1.0
-> installed kdf.1.0.0
-> installed mirage-crypto-rng.1.1.0
-> installed mirage-crypto-pk.1.1.0
-> installed mirage-crypto-ec.1.1.0
-> installed x509.1.0.3
Done.
# Run eval $(opam env) to update the current shell environment
2024-09-11 15:54.20 ---> saved as "7884fe9eb37661bbcea86e326459088d5b46ab6930cdd5f9aef0df8ec1812170"


/src: (copy (src .) (dst /src))
2024-09-11 15:54.20 ---> saved as "469c5f50767281f98f192ce6aac34145996192409e12959ba25421d3c5cac1c3"


/src: (run (shell "opam exec -- dune build @install @check @runtest && rm -rf _build"))
(cd _build/default/lib && ../../install/default/bin/extract-from-certdata certdata.txt --output trust_anchor.ml)
extract-from-certdata: [WARNING] Untrusted certificate "Explicitly Distrust DigiNotar Root CA" (serial 02100fffffffffffffffffffffffffffffff)
(cd _build/default/test && ./tests.exe)
Testing `verification tests'.
This run has ID `Y7DNDU2I'.


  [OK]          X509 certificate validation          0   google.com.
  [OK]          X509 certificate validation          1   extended-validation....
  [OK]          X509 certificate validation          2   self-signed.badssl.com.
  [OK]          X509 certificate validation          3   expired.badssl.com.
  [OK]          X509 certificate validation          4   untrusted-root.badss...
  [OK]          X509 certificate validation          5   wrong.host.badssl.com.
  [OK]          X509 certificate validation          6   incomplete-chain.bad...
  [OK]          X509 certificate validation          7   sha1-intermediate.ba...
  [OK]          X509 certificate validation          8   wrong.host.google.com.


Full test results in `/src/_build/default/test/_build/_tests/verification tests'.
Test Successful in 0.004s. 9 tests run.
2024-09-11 15:54.23 ---> saved as "519f53994904a9d5ce5aca74f22051293b9fcb762026cfb4d34756f05d567c50"
Job succeeded
2024-09-11 15:54.23: Job succeeded