2024-10-01 14:15.09: New job: test mirage/ca-certs-nss https://github.com/mirage/ca-certs-nss.git#refs/heads/main (c749713c6a0dd2236e9aa39a9366b70495fbd022) (linux-x86_64:fedora-40-4.14_opam-2.2)Base: ocaml/opam:fedora-40-ocaml-4.14@sha256:960f785da90b856a0e8e1eaefa0151fa19dd048c873a5bc6b5e5ea216905caf8Opam project buildTo reproduce locally:git clone --recursive "https://github.com/mirage/ca-certs-nss.git" -b "main" && cd "ca-certs-nss" && git reset --hard c749713ccat > Dockerfile <<'END-OF-DOCKERFILE'FROM ocaml/opam:fedora-40-ocaml-4.14@sha256:960f785da90b856a0e8e1eaefa0151fa19dd048c873a5bc6b5e5ea216905caf8# fedora-40-4.14_opam-2.2USER 1000:1000ENV CLICOLOR_FORCE="1"ENV OPAMCOLOR="always"WORKDIR /srcRUN sudo dnf install -y findutilsRUN sudo ln -f /usr/bin/opam-2.2 /usr/bin/opamRUN opam init --reinit -niRUN uname -rs && opam exec -- ocaml -version && opam --versionWORKDIR /srcRUN sudo chown opam /srcRUN cd ~/opam-repository && (git cat-file -e f7c5ed58d4e80e295c4022514da894342e69bfa0 || git fetch origin master) && git reset -q --hard f7c5ed58d4e80e295c4022514da894342e69bfa0 && git log --no-decorate -n1 --oneline && opam update -uCOPY --chown=1000:1000 ca-certs-nss.opam ./RUN opam pin add -yn ca-certs-nss.dev './'ENV DEPS="alcotest.1.8.0 asn1-combinators.0.3.2 astring.0.8.5 base-bigarray.base base-threads.base base-unix.base base64.3.5.1 bos.0.2.1 cmdliner.1.3.0 conf-gmp.4 conf-gmp-powm-sec.3 conf-pkg-config.3 csexp.1.5.2 digestif.1.2.0 domain-name.0.4.0 dune.3.16.0 dune-configurator.3.16.0 duration.0.2.1 eqaf.0.10 fmt.0.9.0 fpath.0.7.3 gmap.0.3.0 host-arch-x86_64.1 host-system-other.1 ipaddr.5.6.0 kdf.1.0.0 logs.0.7.0 macaddr.5.6.0 mirage-clock.4.2.0 mirage-crypto.1.1.0 mirage-crypto-ec.1.1.0 mirage-crypto-pk.1.1.0 mirage-crypto-rng.1.1.0 ocaml.4.14.2 ocaml-base-compiler.4.14.2 ocaml-config.2 ocaml-options-vanilla.1 ocaml-syntax-shims.1.0.0 ocamlbuild.0.15.0 ocamlfind.1.9.6 ohex.0.2.0 ptime.1.2.0 re.1.12.0 rresult.0.7.0 seq.base stdlib-shims.0.3.0 topkg.1.0.7 uutf.1.0.3 x509.1.0.4 zarith.1.14"ENV CI="true"ENV OCAMLCI="true"RUN opam update --depexts && opam install --cli=2.2 --depext-only -y ca-certs-nss.dev $DEPSRUN opam install $DEPSCOPY --chown=1000:1000 . /srcRUN opam exec -- dune build @install @check @runtest && rm -rf _buildEND-OF-DOCKERFILEdocker build .END-REPRO-BLOCK2024-10-01 14:15.09: Using cache hint "mirage/ca-certs-nss-ocaml/opam:fedora-40-ocaml-4.14@sha256:960f785da90b856a0e8e1eaefa0151fa19dd048c873a5bc6b5e5ea216905caf8-fedora-40-4.14_opam-2.2-50ced100a332dd901e20e89061b279d4"2024-10-01 14:15.09: Using OBuilder spec:((from ocaml/opam:fedora-40-ocaml-4.14@sha256:960f785da90b856a0e8e1eaefa0151fa19dd048c873a5bc6b5e5ea216905caf8)(comment fedora-40-4.14_opam-2.2)(user (uid 1000) (gid 1000))(env CLICOLOR_FORCE 1)(env OPAMCOLOR always)(workdir /src)(run (network host)(shell "sudo dnf install -y findutils"))(run (shell "sudo ln -f /usr/bin/opam-2.2 /usr/bin/opam"))(run (shell "opam init --reinit -ni"))(run (shell "uname -rs && opam exec -- ocaml -version && opam --version"))(workdir /src)(run (shell "sudo chown opam /src"))(run (cache (opam-archives (target /home/opam/.opam/download-cache)))(network host)(shell "cd ~/opam-repository && (git cat-file -e f7c5ed58d4e80e295c4022514da894342e69bfa0 || git fetch origin master) && git reset -q --hard f7c5ed58d4e80e295c4022514da894342e69bfa0 && git log --no-decorate -n1 --oneline && opam update -u"))(copy (src ca-certs-nss.opam) (dst ./))(run (network host)(shell "opam pin add -yn ca-certs-nss.dev './'"))(env DEPS "alcotest.1.8.0 asn1-combinators.0.3.2 astring.0.8.5 base-bigarray.base base-threads.base base-unix.base base64.3.5.1 bos.0.2.1 cmdliner.1.3.0 conf-gmp.4 conf-gmp-powm-sec.3 conf-pkg-config.3 csexp.1.5.2 digestif.1.2.0 domain-name.0.4.0 dune.3.16.0 dune-configurator.3.16.0 duration.0.2.1 eqaf.0.10 fmt.0.9.0 fpath.0.7.3 gmap.0.3.0 host-arch-x86_64.1 host-system-other.1 ipaddr.5.6.0 kdf.1.0.0 logs.0.7.0 macaddr.5.6.0 mirage-clock.4.2.0 mirage-crypto.1.1.0 mirage-crypto-ec.1.1.0 mirage-crypto-pk.1.1.0 mirage-crypto-rng.1.1.0 ocaml.4.14.2 ocaml-base-compiler.4.14.2 ocaml-config.2 ocaml-options-vanilla.1 ocaml-syntax-shims.1.0.0 ocamlbuild.0.15.0 ocamlfind.1.9.6 ohex.0.2.0 ptime.1.2.0 re.1.12.0 rresult.0.7.0 seq.base stdlib-shims.0.3.0 topkg.1.0.7 uutf.1.0.3 x509.1.0.4 zarith.1.14")(env CI true)(env OCAMLCI true)(run (cache (opam-archives (target /home/opam/.opam/download-cache)))(network host)(shell "opam update --depexts && opam install --cli=2.2 --depext-only -y ca-certs-nss.dev $DEPS"))(run (cache (opam-archives (target /home/opam/.opam/download-cache)))(network host)(shell "opam install $DEPS"))(copy (src .) (dst /src))(run (shell "opam exec -- dune build @install @check @runtest && rm -rf _build")))2024-10-01 14:15.09: Waiting for resource in pool OCluster2024-10-01 18:46.24: Waiting for worker…2024-10-01 18:48.23: Got resource from pool OClusterBuilding on x86-bm-c8.sw.ocaml.orghint: Using 'master' as the name for the initial branch. This default branch namehint: is subject to change. To configure the initial branch name to use in allhint: of your new repositories, which will suppress this warning, call:hint:hint: git config --global init.defaultBranch <name>hint:hint: Names commonly chosen instead of 'master' are 'main', 'trunk' andhint: 'development'. The just-created branch can be renamed via this command:hint:hint: git branch -m <name>Initialized empty Git repository in /var/cache/obuilder/ocluster/git/ca-certs-nss.git-8dfc537b4f246667f750566fd3d577e36cd3d9fd/.git/HEAD is now at c749713 fix dependencies: digestif added, mirage-crypto removed, x509 lower bound(from ocaml/opam:fedora-40-ocaml-4.14@sha256:960f785da90b856a0e8e1eaefa0151fa19dd048c873a5bc6b5e5ea216905caf8)Unable to find image 'ocaml/opam:fedora-40-ocaml-4.14@sha256:960f785da90b856a0e8e1eaefa0151fa19dd048c873a5bc6b5e5ea216905caf8' locallydocker.io/ocaml/opam@sha256:960f785da90b856a0e8e1eaefa0151fa19dd048c873a5bc6b5e5ea216905caf8: Pulling from ocaml/opam7225fb4e93f9: Pulling fs layer7225fb4e93f9: Verifying Checksum7225fb4e93f9: Download complete7225fb4e93f9: Pull completeDigest: sha256:960f785da90b856a0e8e1eaefa0151fa19dd048c873a5bc6b5e5ea216905caf8Status: Downloaded newer image for ocaml/opam@sha256:960f785da90b856a0e8e1eaefa0151fa19dd048c873a5bc6b5e5ea216905caf82024-10-01 18:48.25 ---> using "34adc61e9ebedde377f2d933483dd2fd9214b94f41ae056287dd6d7acac7fdbb" from cache/: (comment fedora-40-4.14_opam-2.2)/: (user (uid 1000) (gid 1000))/: (env CLICOLOR_FORCE 1)/: (env OPAMCOLOR always)/: (workdir /src)/src: (run (network host)(shell "sudo dnf install -y findutils"))Fedora 40 - x86_64 323 kB/s | 28 kB 00:00Fedora 40 - x86_64 - Updates 305 kB/s | 26 kB 00:00Fedora 40 - x86_64 - Updates 5.2 MB/s | 5.3 MB 00:01Package findutils-1:4.9.0-9.fc40.x86_64 is already installed.Dependencies resolved.Nothing to do.Complete!2024-10-01 18:48.25 ---> using "336d28cd9a6272b1cea2a6e6e7f5cd90dce7752203bb0f3bebaa8a1befa21bb9" from cache/src: (run (shell "sudo ln -f /usr/bin/opam-2.2 /usr/bin/opam"))2024-10-01 18:48.25 ---> using "b120e5f6b4ea21a143d3ae9808e7b967315fc2a90c7fe80fc697ab4ca1d40303" from cache/src: (run (shell "opam init --reinit -ni"))Configuring from /home/opam/.opamrc and then from built-in defaults.Checking for available remotes: rsync and local, git.- you won't be able to use mercurial repositories unless you install the hg command on your system.- you won't be able to use darcs repositories unless you install the darcs command on your system.Continue? [y/n] yThis development version of opam requires an update to the layout of /home/opam/.opam from version 2.0 to version 2.2, which can't be reverted.You may want to back it up before going further.Format upgrade done.[NOTE] The 'jobs' option was reset, its value was 39 and its new value will vary according to the current number of cores on your machine. You can restore the fixed value using:opam option jobs=39 --global<><> Updating repositories ><><><><><><><><><><><><><><><><><><><><><><><><><><>[default] synchronised from file:///home/opam/opam-repository2024-10-01 18:48.25 ---> using "2b909e4402043984295a4d0b998a45626a717dd8777c4aa2f998eaeae3e7c625" from cache/src: (run (shell "uname -rs && opam exec -- ocaml -version && opam --version"))Linux 5.15.0-122-genericThe OCaml toplevel, version 4.14.22.2.12024-10-01 18:48.25 ---> using "da75a4cf55480ad553278d06416fc74fe872e027b687eddf0815c032aa16a6ff" from cache/src: (workdir /src)/src: (run (shell "sudo chown opam /src"))2024-10-01 18:48.25 ---> using "8bd2ce507780fbdc90bf44dbf4425c06c9654f603d1f920ea61bcd3aa26c0c12" from cache/src: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))(network host)(shell "cd ~/opam-repository && (git cat-file -e f7c5ed58d4e80e295c4022514da894342e69bfa0 || git fetch origin master) && git reset -q --hard f7c5ed58d4e80e295c4022514da894342e69bfa0 && git log --no-decorate -n1 --oneline && opam update -u"))From https://github.com/ocaml/opam-repository* branch master -> FETCH_HEAD75006f8c5e..1b4da5019e master -> origin/masterf7c5ed58d4 Merge pull request #26635 from hannesm/release-x509-v1.0.4<><> Updating package repositories ><><><><><><><><><><><><><><><><><><><><><><>[default] synchronised from file:///home/opam/opam-repositoryEverything as up-to-date as possible (run with --verbose to show unavailable upgrades).However, you may "opam upgrade" these packages explicitly, which will ask permission to downgrade or uninstall the conflicting packages.Nothing to do.# Run eval $(opam env) to update the current shell environment2024-10-01 18:49.03 ---> saved as "a18ac51e5fcad803327b074646fa210900270c42f6f2e8ad79ac9e38c3f23871"/src: (copy (src ca-certs-nss.opam) (dst ./))2024-10-01 18:49.03 ---> saved as "101341487d76bb7d7516a2939b62205afc484aed6a290440bf2a2be4b905aced"/src: (run (network host)(shell "opam pin add -yn ca-certs-nss.dev './'"))[ca-certs-nss.dev] synchronised (file:///src)ca-certs-nss is now pinned to file:///src (version dev)2024-10-01 18:49.04 ---> saved as "f4ad47ca9083194ead940054adfbcf99213936cfa2292a18ecfc981ef0ef7fa9"/src: (env DEPS "alcotest.1.8.0 asn1-combinators.0.3.2 astring.0.8.5 base-bigarray.base base-threads.base base-unix.base base64.3.5.1 bos.0.2.1 cmdliner.1.3.0 conf-gmp.4 conf-gmp-powm-sec.3 conf-pkg-config.3 csexp.1.5.2 digestif.1.2.0 domain-name.0.4.0 dune.3.16.0 dune-configurator.3.16.0 duration.0.2.1 eqaf.0.10 fmt.0.9.0 fpath.0.7.3 gmap.0.3.0 host-arch-x86_64.1 host-system-other.1 ipaddr.5.6.0 kdf.1.0.0 logs.0.7.0 macaddr.5.6.0 mirage-clock.4.2.0 mirage-crypto.1.1.0 mirage-crypto-ec.1.1.0 mirage-crypto-pk.1.1.0 mirage-crypto-rng.1.1.0 ocaml.4.14.2 ocaml-base-compiler.4.14.2 ocaml-config.2 ocaml-options-vanilla.1 ocaml-syntax-shims.1.0.0 ocamlbuild.0.15.0 ocamlfind.1.9.6 ohex.0.2.0 ptime.1.2.0 re.1.12.0 rresult.0.7.0 seq.base stdlib-shims.0.3.0 topkg.1.0.7 uutf.1.0.3 x509.1.0.4 zarith.1.14")/src: (env CI true)/src: (env OCAMLCI true)/src: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))(network host)(shell "opam update --depexts && opam install --cli=2.2 --depext-only -y ca-certs-nss.dev $DEPS"))+ /usr/bin/sudo "yum" "makecache"- Fedora 40 - x86_64 344 kB/s | 28 kB 00:00- Fedora 40 openh264 (From Cisco) - x86_64 15 kB/s | 989 B 00:00- Fedora 40 - x86_64 - Updates 311 kB/s | 26 kB 00:00- Metadata cache created.<><> Synchronising pinned packages ><><><><><><><><><><><><><><><><><><><><><><>[ca-certs-nss.dev] synchronised (no changes)[NOTE] Package ocaml-options-vanilla is already installed (current version is 1).[NOTE] Package ocaml-config is already installed (current version is 2).[NOTE] Package ocaml-base-compiler is already installed (current version is 4.14.2).[NOTE] Package ocaml is already installed (current version is 4.14.2).[NOTE] Package host-system-other is already installed (current version is 1).[NOTE] Package host-arch-x86_64 is already installed (current version is 1).[NOTE] Package base-unix is already installed (current version is base).[NOTE] Package base-threads is already installed (current version is base).[NOTE] Package base-bigarray is already installed (current version is base).The following system packages will first need to be installed:gmp-devel<><> Handling external dependencies <><><><><><><><><><><><><><><><><><><><><><>+ /usr/bin/sudo "yum" "install" "-y" "gmp-devel"- Last metadata expiration check: 0:00:21 ago on Tue Oct 1 18:49:05 2024.- Dependencies resolved.- ================================================================================- Package Architecture Version Repository Size- ================================================================================- Installing:- gmp-devel x86_64 1:6.2.1-8.fc40 fedora 173 k- Installing dependencies:- gmp-c++ x86_64 1:6.2.1-8.fc40 fedora 18 k-- Transaction Summary- ================================================================================- Install 2 Packages-- Total download size: 191 k- Installed size: 382 k- Downloading Packages:- (1/2): gmp-c++-6.2.1-8.fc40.x86_64.rpm 318 kB/s | 18 kB 00:00- (2/2): gmp-devel-6.2.1-8.fc40.x86_64.rpm 1.8 MB/s | 173 kB 00:00- --------------------------------------------------------------------------------- Total 1.0 MB/s | 191 kB 00:00- Running transaction check- Transaction check succeeded.- Running transaction test- Transaction test succeeded.- Running transaction- Preparing : 1/1- Installing : gmp-c++-1:6.2.1-8.fc40.x86_64 1/2- Installing : gmp-devel-1:6.2.1-8.fc40.x86_64 2/2- Running scriptlet: gmp-devel-1:6.2.1-8.fc40.x86_64 2/2-- Installed:- gmp-c++-1:6.2.1-8.fc40.x86_64 gmp-devel-1:6.2.1-8.fc40.x86_64-- Complete!+ /usr/bin/rpm "-q" "--whatprovides" "gmp-devel"- gmp-devel-6.2.1-8.fc40.x86_642024-10-01 18:49.28 ---> saved as "19eaaebfbc1ac7338e2a0fc8e3f47e2406fed739e3d4e471595451ebce1dcf02"/src: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))(network host)(shell "opam install $DEPS"))[NOTE] Package ocaml-options-vanilla is already installed (current version is 1).[NOTE] Package ocaml-config is already installed (current version is 2).[NOTE] Package ocaml-base-compiler is already installed (current version is 4.14.2).[NOTE] Package ocaml is already installed (current version is 4.14.2).[NOTE] Package host-system-other is already installed (current version is 1).[NOTE] Package host-arch-x86_64 is already installed (current version is 1).[NOTE] Package base-unix is already installed (current version is base).[NOTE] Package base-threads is already installed (current version is base).[NOTE] Package base-bigarray is already installed (current version is base).The following actions will be performed:=== install 41 packages- install alcotest 1.8.0- install asn1-combinators 0.3.2- install astring 0.8.5- install base64 3.5.1- install bos 0.2.1- install cmdliner 1.3.0- install conf-gmp 4- install conf-gmp-powm-sec 3- install conf-pkg-config 3- install csexp 1.5.2- install digestif 1.2.0- install domain-name 0.4.0- install dune 3.16.0- install dune-configurator 3.16.0- install duration 0.2.1- install eqaf 0.10- install fmt 0.9.0- install fpath 0.7.3- install gmap 0.3.0- install ipaddr 5.6.0- install kdf 1.0.0- install logs 0.7.0- install macaddr 5.6.0- install mirage-clock 4.2.0- install mirage-crypto 1.1.0- install mirage-crypto-ec 1.1.0- install mirage-crypto-pk 1.1.0- install mirage-crypto-rng 1.1.0- install ocaml-syntax-shims 1.0.0- install ocamlbuild 0.15.0- install ocamlfind 1.9.6- install ohex 0.2.0- install ptime 1.2.0- install re 1.12.0- install rresult 0.7.0- install seq base- install stdlib-shims 0.3.0- install topkg 1.0.7- install uutf 1.0.3- install x509 1.0.4- install zarith 1.14<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>-> retrieved asn1-combinators.0.3.2 (cached)-> retrieved astring.0.8.5 (cached)-> retrieved base64.3.5.1 (cached)-> retrieved bos.0.2.1 (cached)-> retrieved conf-gmp.4 (cached)-> retrieved conf-gmp-powm-sec.3 (cached)-> retrieved alcotest.1.8.0 (cached)-> retrieved cmdliner.1.3.0 (cached)-> retrieved csexp.1.5.2 (cached)-> installed conf-gmp.4-> installed conf-pkg-config.3-> retrieved domain-name.0.4.0 (cached)-> retrieved duration.0.2.1 (cached)-> retrieved eqaf.0.10 (cached)-> installed conf-gmp-powm-sec.3-> retrieved fmt.0.9.0 (cached)-> retrieved fpath.0.7.3 (cached)-> retrieved gmap.0.3.0 (cached)-> retrieved ipaddr.5.6.0, macaddr.5.6.0 (cached)-> retrieved kdf.1.0.0 (cached)-> retrieved logs.0.7.0 (cached)-> retrieved mirage-clock.4.2.0 (cached)-> retrieved digestif.1.2.0 (cached)-> retrieved ocaml-syntax-shims.1.0.0 (cached)-> retrieved ocamlbuild.0.15.0 (cached)-> retrieved ocamlfind.1.9.6 (cached)-> retrieved dune.3.16.0, dune-configurator.3.16.0 (cached)-> retrieved mirage-crypto.1.1.0, mirage-crypto-ec.1.1.0, mirage-crypto-pk.1.1.0, mirage-crypto-rng.1.1.0 (cached)-> retrieved ohex.0.2.0 (cached)-> retrieved ptime.1.2.0 (cached)-> retrieved seq.base (cached)-> retrieved rresult.0.7.0 (cached)-> retrieved stdlib-shims.0.3.0 (cached)-> retrieved uutf.1.0.3 (cached)-> retrieved re.1.12.0 (cached)-> installed cmdliner.1.3.0-> installed seq.base-> retrieved topkg.1.0.7 (cached)-> retrieved x509.1.0.4 (cached)-> retrieved zarith.1.14 (cached)-> installed ocamlfind.1.9.6-> installed ocamlbuild.0.15.0-> installed zarith.1.14-> installed topkg.1.0.7-> installed rresult.0.7.0-> installed uutf.1.0.3-> installed fmt.0.9.0-> installed ptime.1.2.0-> installed astring.0.8.5-> installed fpath.0.7.3-> installed logs.0.7.0-> installed bos.0.2.1-> installed dune.3.16.0-> installed mirage-clock.4.2.0-> installed gmap.0.3.0-> installed duration.0.2.1-> installed domain-name.0.4.0-> installed csexp.1.5.2-> installed asn1-combinators.0.3.2-> installed base64.3.5.1-> installed eqaf.0.10-> installed macaddr.5.6.0-> installed ocaml-syntax-shims.1.0.0-> installed ohex.0.2.0-> installed stdlib-shims.0.3.0-> installed re.1.12.0-> installed ipaddr.5.6.0-> installed digestif.1.2.0-> installed alcotest.1.8.0-> installed dune-configurator.3.16.0-> installed mirage-crypto.1.1.0-> installed kdf.1.0.0-> installed mirage-crypto-rng.1.1.0-> installed mirage-crypto-pk.1.1.0-> installed mirage-crypto-ec.1.1.0-> installed x509.1.0.4Done.# Run eval $(opam env) to update the current shell environment2024-10-01 18:50.51 ---> saved as "2719197ee8f0dc299cff556e84fddce256011d301c14af79813840f65a201d80"/src: (copy (src .) (dst /src))2024-10-01 18:50.51 ---> saved as "a240687dd098b04e84120e9ea443f773219acab6858ed0cb65c894c0a49b2f18"/src: (run (shell "opam exec -- dune build @install @check @runtest && rm -rf _build"))(cd _build/default/lib && ../../install/default/bin/extract-from-certdata certdata.txt --output trust_anchor.ml)extract-from-certdata: [WARNING] Untrusted certificate "Explicitly Distrust DigiNotar Root CA" (serial 02100fffffffffffffffffffffffffffffff)(cd _build/default/test && ./tests.exe)Testing `verification tests'.This run has ID `HGUPET4D'.[OK] X509 certificate validation 0 google.com.[OK] X509 certificate validation 1 extended-validation....[OK] X509 certificate validation 2 self-signed.badssl.com.[OK] X509 certificate validation 3 expired.badssl.com.[OK] X509 certificate validation 4 untrusted-root.badss...[OK] X509 certificate validation 5 wrong.host.badssl.com.[OK] X509 certificate validation 6 incomplete-chain.bad...[OK] X509 certificate validation 7 sha1-intermediate.ba...[OK] X509 certificate validation 8 wrong.host.google.com.Full test results in `/src/_build/default/test/_build/_tests/verification tests'.Test Successful in 0.004s. 9 tests run.2024-10-01 18:50.54 ---> saved as "40df0a6050cc075e9b065edb70b0a014080771b7a91de59be47e2ff6f32da549"Job succeeded2024-10-01 18:50.54: Job succeeded