2026-02-20 10:12.41: New job: test mirage/ca-certs https://github.com/mirage/ca-certs.git#refs/heads/main (319c8a6e7c06da6a4fc3dab5db41cdd28be2e9cf) (linux-x86_64:alpine-3.22-4.14_opam-2.5) Base: ocaml/opam:alpine-3.22-ocaml-4.14@sha256:1c3a5ef9216cc43d14bea2bc9b42f4b1ee30cd78bf2e6993672b4c0c52909216 Opam project build To reproduce locally: git clone --recursive "https://github.com/mirage/ca-certs.git" -b "main" && cd "ca-certs" && git reset --hard 319c8a6e cat > Dockerfile <<'END-OF-DOCKERFILE' FROM ocaml/opam:alpine-3.22-ocaml-4.14@sha256:1c3a5ef9216cc43d14bea2bc9b42f4b1ee30cd78bf2e6993672b4c0c52909216 # alpine-3.22-4.14_opam-2.5 USER 1000:1000 ENV CLICOLOR_FORCE="1" ENV OPAMCOLOR="always" WORKDIR /src RUN sudo ln -f /usr/bin/opam-2.5 /usr/bin/opam RUN opam init --reinit -ni RUN uname -rs && opam exec -- ocaml -version && opam --version WORKDIR /src RUN sudo chown opam /src RUN cd ~/opam-repository && (git cat-file -e d18d14011e4188f5c398421e2e99b297dd8150fb || git fetch origin master) && git reset -q --hard d18d14011e4188f5c398421e2e99b297dd8150fb && git log --no-decorate -n1 --oneline && opam update -u COPY --chown=1000:1000 ca-certs.opam ./ RUN opam pin add -yn ca-certs.dev './' RUN echo '(lang dune 3.0)' > './dune-project' ENV DEPS="alcotest.1.9.1 asn1-combinators.0.3.2 astring.0.8.5 base-bigarray.base base-threads.base base-unix.base base64.3.5.2 bos.0.2.1 cmdliner.2.1.0 conf-gmp.5 conf-gmp-powm-sec.4 conf-pkg-config.4 csexp.1.5.2 digestif.1.3.0 domain-name.0.5.0 dune.3.21.1 dune-configurator.3.21.1 duration.0.2.1 eqaf.0.10 fmt.0.11.0 fpath.0.7.3 gmap.0.3.0 ipaddr.5.6.2 kdf.1.0.0 logs.0.10.0 macaddr.5.6.2 mirage-crypto.2.0.3 mirage-crypto-ec.2.0.3 mirage-crypto-pk.2.0.3 mirage-crypto-rng.2.0.3 ocaml.4.14.2 ocaml-base-compiler.4.14.2 ocaml-config.2 ocaml-options-vanilla.1 ocaml-syntax-shims.1.0.0 ocamlbuild.0.16.1 ocamlfind.1.9.8 ohex.0.2.0 ptime.1.2.0 re.1.14.0 rresult.0.7.0 stdlib-shims.0.3.0 topkg.1.1.1 uutf.1.0.4 x509.1.0.6 zarith.1.14" ENV CI="true" ENV OCAMLCI="true" RUN opam update --depexts && opam install --cli=2.5 --depext-only -y ca-certs.dev $DEPS RUN opam install $DEPS COPY --chown=1000:1000 . /src RUN opam exec -- dune build @install @check @runtest && rm -rf _build END-OF-DOCKERFILE docker build . END-REPRO-BLOCK 2026-02-20 10:12.41: Using cache hint "mirage/ca-certs-ocaml/opam:alpine-3.22-ocaml-4.14@sha256:1c3a5ef9216cc43d14bea2bc9b42f4b1ee30cd78bf2e6993672b4c0c52909216-alpine-3.22-4.14_opam-2.5-24daba5c188bd5218e623b0abb5c9fd7" 2026-02-20 10:12.41: Using OBuilder spec: ((from ocaml/opam:alpine-3.22-ocaml-4.14@sha256:1c3a5ef9216cc43d14bea2bc9b42f4b1ee30cd78bf2e6993672b4c0c52909216) (comment alpine-3.22-4.14_opam-2.5) (user (uid 1000) (gid 1000)) (env CLICOLOR_FORCE 1) (env OPAMCOLOR always) (workdir /src) (run (shell "sudo ln -f /usr/bin/opam-2.5 /usr/bin/opam")) (run (shell "opam init --reinit -ni")) (run (shell "uname -rs && opam exec -- ocaml -version && opam --version")) (workdir /src) (run (shell "sudo chown opam /src")) (run (cache (opam-archives (target /home/opam/.opam/download-cache))) (network host) (shell "cd ~/opam-repository && (git cat-file -e d18d14011e4188f5c398421e2e99b297dd8150fb || git fetch origin master) && git reset -q --hard d18d14011e4188f5c398421e2e99b297dd8150fb && git log --no-decorate -n1 --oneline && opam update -u")) (copy (src ca-certs.opam) (dst ./)) (run (network host) (shell "opam pin add -yn ca-certs.dev './'")) (run (network host) (shell "echo '(lang dune 3.0)' > './dune-project'")) (env DEPS "alcotest.1.9.1 asn1-combinators.0.3.2 astring.0.8.5 base-bigarray.base base-threads.base base-unix.base base64.3.5.2 bos.0.2.1 cmdliner.2.1.0 conf-gmp.5 conf-gmp-powm-sec.4 conf-pkg-config.4 csexp.1.5.2 digestif.1.3.0 domain-name.0.5.0 dune.3.21.1 dune-configurator.3.21.1 duration.0.2.1 eqaf.0.10 fmt.0.11.0 fpath.0.7.3 gmap.0.3.0 ipaddr.5.6.2 kdf.1.0.0 logs.0.10.0 macaddr.5.6.2 mirage-crypto.2.0.3 mirage-crypto-ec.2.0.3 mirage-crypto-pk.2.0.3 mirage-crypto-rng.2.0.3 ocaml.4.14.2 ocaml-base-compiler.4.14.2 ocaml-config.2 ocaml-options-vanilla.1 ocaml-syntax-shims.1.0.0 ocamlbuild.0.16.1 ocamlfind.1.9.8 ohex.0.2.0 ptime.1.2.0 re.1.14.0 rresult.0.7.0 stdlib-shims.0.3.0 topkg.1.1.1 uutf.1.0.4 x509.1.0.6 zarith.1.14") (env CI true) (env OCAMLCI true) (run (cache (opam-archives (target /home/opam/.opam/download-cache))) (network host) (shell "opam update --depexts && opam install --cli=2.5 --depext-only -y ca-certs.dev $DEPS")) (run (cache (opam-archives (target /home/opam/.opam/download-cache))) (network host) (shell "opam install $DEPS")) (copy (src .) (dst /src)) (run (shell "opam exec -- dune build @install @check @runtest && rm -rf _build")) ) 2026-02-20 10:12.41: Waiting for resource in pool OCluster 2026-02-20 12:19.50: Waiting for worker… 2026-02-20 12:23.14: Got resource from pool OCluster Building on laodoke.caelum.ci.dev All commits already cached HEAD is now at 319c8a6 changes for 1.0.1 (from ocaml/opam:alpine-3.22-ocaml-4.14@sha256:1c3a5ef9216cc43d14bea2bc9b42f4b1ee30cd78bf2e6993672b4c0c52909216) Unable to find image 'ocaml/opam:alpine-3.22-ocaml-4.14@sha256:1c3a5ef9216cc43d14bea2bc9b42f4b1ee30cd78bf2e6993672b4c0c52909216' locally docker.io/ocaml/opam@sha256:1c3a5ef9216cc43d14bea2bc9b42f4b1ee30cd78bf2e6993672b4c0c52909216: Pulling from ocaml/opam 2d35ebdb57d9: Already exists adfc86c1accf: Already exists d09377907434: Already exists a699cf44908b: Already exists c088e74f1f31: Already exists 7e99e6eaa847: Already exists db4b89a22482: Already exists f1f17593da04: Already exists bb79fbf72548: Already exists cf69890848e3: Already exists 80e325d6146c: Already exists 66a526c41d4c: Already exists 347d38b311ac: Already exists 984612fde4c4: Already exists 0ac0da982daa: Already exists 209c9bca9b0e: Already exists 3d3356d548ff: Already exists c072da09f122: Already exists 4f4fb700ef54: Already exists eff3d806a4a8: Already exists f5c413f5234b: Already exists 09ddc5430e22: Already exists 2c7c283b1afc: Already exists 4af9a971b585: Already exists df8d9be3e30d: Already exists 5e55ae3325a7: Already exists 635cb27b4304: Already exists 898fbde8ad42: Already exists 66c0ffc92413: Already exists c8cca855638d: Already exists 45d2501a899c: Already exists 10b0fe6926c2: Already exists 0a1d7b83a687: Already exists 2c3441915309: Already exists 3d1a575b1bb0: Already exists 6e5fa830b59d: Already exists 72225f5a6449: Already exists 5a8b6a59afe3: Pulling fs layer 81299dd100ce: Pulling fs layer ad267db4d3a7: Pulling fs layer de32f8de692b: Pulling fs layer ad267db4d3a7: Waiting de32f8de692b: Waiting 81299dd100ce: Verifying Checksum 81299dd100ce: Download complete ad267db4d3a7: Verifying Checksum ad267db4d3a7: Download complete de32f8de692b: Download complete 5a8b6a59afe3: Verifying Checksum 5a8b6a59afe3: Download complete 5a8b6a59afe3: Pull complete 81299dd100ce: Pull complete ad267db4d3a7: Pull complete de32f8de692b: Pull complete Digest: sha256:1c3a5ef9216cc43d14bea2bc9b42f4b1ee30cd78bf2e6993672b4c0c52909216 Status: Downloaded newer image for ocaml/opam@sha256:1c3a5ef9216cc43d14bea2bc9b42f4b1ee30cd78bf2e6993672b4c0c52909216 2026-02-20 12:23.15 ---> using "d1cef22083ba59d6db4e2f107091c68dd70ebdcc64c3894ad7db7be62ad17f4a" from cache /: (comment alpine-3.22-4.14_opam-2.5) /: (user (uid 1000) (gid 1000)) /: (env CLICOLOR_FORCE 1) /: (env OPAMCOLOR always) /: (workdir /src) /src: (run (shell "sudo ln -f /usr/bin/opam-2.5 /usr/bin/opam")) 2026-02-20 12:23.15 ---> using "7c7cce50f5e947565c3d5dbad3ac3b61d12cac1cb4c13b6c802d6a8bb10d1345" from cache /src: (run (shell "opam init --reinit -ni")) Configuring from /home/opam/.opamrc and then from built-in defaults. Checking for available remotes: rsync and local, git. - you won't be able to use mercurial repositories unless you install the hg command on your system. - you won't be able to use darcs repositories unless you install the darcs command on your system. This version of opam requires an update to the layout of /home/opam/.opam from version 2.0 to version 2.2, which can't be reverted. You may want to back it up before going further. [NOTE] The 'jobs' option was reset, its value was 255 and its new value will vary according to the current number of cores on your machine. You can restore the fixed value using: opam option jobs=255 --global Continue? [Y/n] y Format upgrade done. <><> Updating repositories ><><><><><><><><><><><><><><><><><><><><><><><><><><> [default] Initialised 2026-02-20 12:23.15 ---> using "d95bbd73a24778f1321e62f69802692f647c727b93c3a5bbd318b81d4a471a07" from cache /src: (run (shell "uname -rs && opam exec -- ocaml -version && opam --version")) Linux 6.8.0-90-generic The OCaml toplevel, version 4.14.2 2.5.0 2026-02-20 12:23.15 ---> using "0946bc50f9a71a954b4e3169058449c50f765d27decff1e10b17d7843ccd9459" from cache /src: (workdir /src) /src: (run (shell "sudo chown opam /src")) 2026-02-20 12:23.15 ---> using "f598dcec640aed1c1320fd535f3be224f496aae5fd076bc0ab3a32f9d65fd942" from cache /src: (run (cache (opam-archives (target /home/opam/.opam/download-cache))) (network host) (shell "cd ~/opam-repository && (git cat-file -e d18d14011e4188f5c398421e2e99b297dd8150fb || git fetch origin master) && git reset -q --hard d18d14011e4188f5c398421e2e99b297dd8150fb && git log --no-decorate -n1 --oneline && opam update -u")) From https://github.com/ocaml/opam-repository * branch master -> FETCH_HEAD a6b2f19780..d18d14011e master -> origin/master d18d14011e Merge pull request #29430 from hannesm/release-ipaddr-v5.6.2 <><> Updating package repositories ><><><><><><><><><><><><><><><><><><><><><><> [default] synchronised from git+file:///home/opam/opam-repository Everything as up-to-date as possible (run with --verbose to show unavailable upgrades). However, you may "opam upgrade" these packages explicitly at these versions (e.g. "opam upgrade ocaml.5.4.1"), which will ask permission to downgrade or uninstall the conflicting packages. Nothing to do. # To update the current shell environment, run: eval $(opam env) 2026-02-20 12:23.15 ---> using "31d44a8fdb694713c647635db5d5df0e7183b45cada275cc974025f5580ea4b0" from cache /src: (copy (src ca-certs.opam) (dst ./)) 2026-02-20 12:23.15 ---> using "9706fe30e3545bdfb2c5b6d9961b2d690fa510ef35949a5cf5a1f93c4bec2438" from cache /src: (run (network host) (shell "opam pin add -yn ca-certs.dev './'")) [ca-certs.dev] synchronised (file:///src) ca-certs is now pinned to file:///src (version dev) 2026-02-20 12:23.15 ---> using "b03bb7fd55a6a6ac08e243ad1a7de213b3097ee39c06f285ddf57a0da70aecb2" from cache /src: (run (network host) (shell "echo '(lang dune 3.0)' > './dune-project'")) 2026-02-20 12:23.15 ---> using "ccf28352d7dcbe3faedfa3dd75134d9a89bac7f2b0c1aceae27f4c4643044f22" from cache /src: (env DEPS "alcotest.1.9.1 asn1-combinators.0.3.2 astring.0.8.5 base-bigarray.base base-threads.base base-unix.base base64.3.5.2 bos.0.2.1 cmdliner.2.1.0 conf-gmp.5 conf-gmp-powm-sec.4 conf-pkg-config.4 csexp.1.5.2 digestif.1.3.0 domain-name.0.5.0 dune.3.21.1 dune-configurator.3.21.1 duration.0.2.1 eqaf.0.10 fmt.0.11.0 fpath.0.7.3 gmap.0.3.0 ipaddr.5.6.2 kdf.1.0.0 logs.0.10.0 macaddr.5.6.2 mirage-crypto.2.0.3 mirage-crypto-ec.2.0.3 mirage-crypto-pk.2.0.3 mirage-crypto-rng.2.0.3 ocaml.4.14.2 ocaml-base-compiler.4.14.2 ocaml-config.2 ocaml-options-vanilla.1 ocaml-syntax-shims.1.0.0 ocamlbuild.0.16.1 ocamlfind.1.9.8 ohex.0.2.0 ptime.1.2.0 re.1.14.0 rresult.0.7.0 stdlib-shims.0.3.0 topkg.1.1.1 uutf.1.0.4 x509.1.0.6 zarith.1.14") /src: (env CI true) /src: (env OCAMLCI true) /src: (run (cache (opam-archives (target /home/opam/.opam/download-cache))) (network host) (shell "opam update --depexts && opam install --cli=2.5 --depext-only -y ca-certs.dev $DEPS")) + /usr/bin/sudo "apk" "update" - fetch https://dl-cdn.alpinelinux.org/alpine/v3.22/main/x86_64/APKINDEX.tar.gz - fetch https://dl-cdn.alpinelinux.org/alpine/v3.22/community/x86_64/APKINDEX.tar.gz - fetch https://dl-cdn.alpinelinux.org/alpine/edge/main/x86_64/APKINDEX.tar.gz - fetch https://dl-cdn.alpinelinux.org/alpine/edge/community/x86_64/APKINDEX.tar.gz - fetch https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz - v3.22.3-26-g8fb9a298e2f [https://dl-cdn.alpinelinux.org/alpine/v3.22/main] - v3.22.3-25-gac70517ead7 [https://dl-cdn.alpinelinux.org/alpine/v3.22/community] - v20260127-1412-gc8afd7ed078 [https://dl-cdn.alpinelinux.org/alpine/edge/main] - v20260127-1431-g8b686e50b01 [https://dl-cdn.alpinelinux.org/alpine/edge/community] - v20260127-1431-g8b686e50b01 [https://dl-cdn.alpinelinux.org/alpine/edge/testing] - OK: 60977 distinct packages available <><> Synchronising pinned packages ><><><><><><><><><><><><><><><><><><><><><><> [ca-certs.dev] synchronised (file:///src) [NOTE] Package ocaml-options-vanilla is already installed (current version is 1). [NOTE] Package ocaml-config is already installed (current version is 2). [NOTE] Package ocaml-base-compiler is already installed (current version is 4.14.2). [NOTE] Package ocaml is already installed (current version is 4.14.2). [NOTE] Package base-unix is already installed (current version is base). [NOTE] Package base-threads is already installed (current version is base). [NOTE] Package base-bigarray is already installed (current version is base). The following system packages will first need to be installed: gmp-dev <><> Handling external dependencies <><><><><><><><><><><><><><><><><><><><><><> + /usr/bin/sudo "apk" "add" "gmp-dev" - (1/2) Installing libgmpxx (6.3.0-r3) - (2/2) Installing gmp-dev (6.3.0-r3) - OK: 307 MiB in 104 packages # To update the current shell environment, run: eval $(opam env) 2026-02-20 12:23.15 ---> using "c35fde92bc0a9b462dec6755420bf3321c1540ccd3c31d27b1bf16e3ce8bcb64" from cache /src: (run (cache (opam-archives (target /home/opam/.opam/download-cache))) (network host) (shell "opam install $DEPS")) [NOTE] Package ocaml-options-vanilla is already installed (current version is 1). [NOTE] Package ocaml-config is already installed (current version is 2). [NOTE] Package ocaml-base-compiler is already installed (current version is 4.14.2). [NOTE] Package ocaml is already installed (current version is 4.14.2). [NOTE] Package base-unix is already installed (current version is base). [NOTE] Package base-threads is already installed (current version is base). [NOTE] Package base-bigarray is already installed (current version is base). The following actions will be performed: === install 39 packages - install alcotest 1.9.1 - install asn1-combinators 0.3.2 - install astring 0.8.5 - install base64 3.5.2 - install bos 0.2.1 - install cmdliner 2.1.0 - install conf-gmp 5 - install conf-gmp-powm-sec 4 - install conf-pkg-config 4 - install csexp 1.5.2 - install digestif 1.3.0 - install domain-name 0.5.0 - install dune 3.21.1 - install dune-configurator 3.21.1 - install duration 0.2.1 - install eqaf 0.10 - install fmt 0.11.0 - install fpath 0.7.3 - install gmap 0.3.0 - install ipaddr 5.6.2 - install kdf 1.0.0 - install logs 0.10.0 - install macaddr 5.6.2 - install mirage-crypto 2.0.3 - install mirage-crypto-ec 2.0.3 - install mirage-crypto-pk 2.0.3 - install mirage-crypto-rng 2.0.3 - install ocaml-syntax-shims 1.0.0 - install ocamlbuild 0.16.1 - install ocamlfind 1.9.8 - install ohex 0.2.0 - install ptime 1.2.0 - install re 1.14.0 - install rresult 0.7.0 - install stdlib-shims 0.3.0 - install topkg 1.1.1 - install uutf 1.0.4 - install x509 1.0.6 - install zarith 1.14 <><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><> -> retrieved alcotest.1.9.1 (cached) -> retrieved asn1-combinators.0.3.2 (cached) -> retrieved astring.0.8.5 (cached) -> retrieved base64.3.5.2 (cached) -> retrieved conf-gmp.5 (cached) -> retrieved conf-gmp-powm-sec.4 (cached) -> retrieved bos.0.2.1 (cached) -> retrieved cmdliner.2.1.0 (cached) -> retrieved csexp.1.5.2 (cached) -> installed conf-gmp.5 -> installed conf-pkg-config.4 -> retrieved domain-name.0.5.0 (cached) -> installed conf-gmp-powm-sec.4 -> retrieved duration.0.2.1 (cached) -> retrieved eqaf.0.10 (cached) -> retrieved fmt.0.11.0 (cached) -> retrieved fpath.0.7.3 (cached) -> retrieved gmap.0.3.0 (cached) -> retrieved ipaddr.5.6.2, macaddr.5.6.2 (cached) -> retrieved kdf.1.0.0 (cached) -> retrieved logs.0.10.0 (cached) -> retrieved digestif.1.3.0 (cached) -> retrieved dune.3.21.1, dune-configurator.3.21.1 (cached) -> retrieved mirage-crypto.2.0.3, mirage-crypto-ec.2.0.3, mirage-crypto-pk.2.0.3, mirage-crypto-rng.2.0.3 (cached) -> retrieved ocaml-syntax-shims.1.0.0 (cached) -> retrieved ocamlbuild.0.16.1 (cached) -> retrieved ocamlfind.1.9.8 (cached) -> retrieved ohex.0.2.0 (cached) -> retrieved ptime.1.2.0 (cached) -> retrieved re.1.14.0 (cached) -> installed cmdliner.2.1.0 -> retrieved rresult.0.7.0 (cached) -> retrieved stdlib-shims.0.3.0 (cached) -> retrieved topkg.1.1.1 (cached) -> retrieved uutf.1.0.4 (cached) -> retrieved zarith.1.14 (cached) -> retrieved x509.1.0.6 (cached) -> installed ocamlfind.1.9.8 -> installed ocamlbuild.0.16.1 -> installed zarith.1.14 -> installed topkg.1.1.1 -> installed rresult.0.7.0 -> installed fmt.0.11.0 -> installed uutf.1.0.4 -> installed ptime.1.2.0 -> installed astring.0.8.5 -> installed logs.0.10.0 -> installed fpath.0.7.3 -> installed bos.0.2.1 -> installed dune.3.21.1 -> installed csexp.1.5.2 -> installed asn1-combinators.0.3.2 -> installed base64.3.5.2 -> installed domain-name.0.5.0 -> installed duration.0.2.1 -> installed eqaf.0.10 -> installed gmap.0.3.0 -> installed macaddr.5.6.2 -> installed ocaml-syntax-shims.1.0.0 -> installed ohex.0.2.0 -> installed re.1.14.0 -> installed stdlib-shims.0.3.0 -> installed ipaddr.5.6.2 -> installed digestif.1.3.0 -> installed alcotest.1.9.1 -> installed dune-configurator.3.21.1 -> installed mirage-crypto.2.0.3 -> installed kdf.1.0.0 -> installed mirage-crypto-rng.2.0.3 -> installed mirage-crypto-pk.2.0.3 -> installed mirage-crypto-ec.2.0.3 -> installed x509.1.0.6 Done. # To update the current shell environment, run: eval $(opam env) 2026-02-20 12:25.05 ---> saved as "34ad907f0d233c9f99aad297820d5ecdd7beaf186e74490ff39c3b0c29a9ea4d" /src: (copy (src .) (dst /src)) 2026-02-20 12:25.06 ---> saved as "ba1a6db397a31bab20b1e731d22289b00b6c09ffb18f1d29665d064bef95d7f7" /src: (run (shell "opam exec -- dune build @install @check @runtest && rm -rf _build")) (cd _build/default/test && ./tests.exe) Testing `verification tests'. This run has ID `MFXZWWWW'. [OK] X509 certificate validation 0 google.com. [OK] X509 certificate validation 1 extended-validation.... [OK] X509 certificate validation 2 self-signed.badssl.com. [OK] X509 certificate validation 3 expired.badssl.com. [OK] X509 certificate validation 4 untrusted-root.badss... [OK] X509 certificate validation 5 wrong.host.badssl.com. [OK] X509 certificate validation 6 incomplete-chain.bad... [OK] X509 certificate validation 7 sha1-intermediate.ba... [OK] X509 certificate validation 8 wrong.host.google.com. Full test results in `/src/_build/default/test/_build/_tests/verification tests'. Test Successful in 0.005s. 9 tests run. tests.exe: [EXEC:45] ['uname' '-s'] 2026-02-20 12:25.08 ---> saved as "d6ef2528c27ce52865b3bf44c1ae3ab97fba01d7321d9563f612440ca70a9700" Job succeeded 2026-02-20 12:25.07: Job succeeded