2025-09-10 00:50.01: New job: test mirage/ca-certs https://github.com/mirage/ca-certs.git#refs/heads/main (319c8a6e7c06da6a4fc3dab5db41cdd28be2e9cf) (linux-x86_64:debian-11-4.14_opam-2.4) Base: ocaml/opam:debian-11-ocaml-4.14@sha256:8c2e415b2ca77f49b7ab634960c8a6ee01e83dff47d2fed017ae4179868ee543 Opam project build To reproduce locally: git clone --recursive "https://github.com/mirage/ca-certs.git" -b "main" && cd "ca-certs" && git reset --hard 319c8a6e cat > Dockerfile <<'END-OF-DOCKERFILE' FROM ocaml/opam:debian-11-ocaml-4.14@sha256:8c2e415b2ca77f49b7ab634960c8a6ee01e83dff47d2fed017ae4179868ee543 # debian-11-4.14_opam-2.4 USER 1000:1000 ENV CLICOLOR_FORCE="1" ENV OPAMCOLOR="always" WORKDIR /src RUN sudo ln -f /usr/bin/opam-2.4 /usr/bin/opam RUN opam init --reinit -ni RUN uname -rs && opam exec -- ocaml -version && opam --version WORKDIR /src RUN sudo chown opam /src RUN cd ~/opam-repository && (git cat-file -e 109398e2fd61803126becd398df0f1eabc9f3ca2 || git fetch origin master) && git reset -q --hard 109398e2fd61803126becd398df0f1eabc9f3ca2 && git log --no-decorate -n1 --oneline && opam update -u COPY --chown=1000:1000 ca-certs.opam ./ RUN opam pin add -yn ca-certs.dev './' RUN echo '(lang dune 3.0)' > './dune-project' ENV DEPS="alcotest.1.9.0 asn1-combinators.0.3.2 astring.0.8.5 base-bigarray.base base-threads.base base-unix.base base64.3.5.1 bos.0.2.1 cmdliner.1.3.0 conf-gmp.5 conf-gmp-powm-sec.4 conf-pkg-config.4 csexp.1.5.2 digestif.1.3.0 domain-name.0.4.1 dune.3.20.2 dune-configurator.3.20.2 duration.0.2.1 eqaf.0.10 fmt.0.11.0 fpath.0.7.3 gmap.0.3.0 ipaddr.5.6.1 kdf.1.0.0 logs.0.9.0 macaddr.5.6.1 mirage-crypto.2.0.2 mirage-crypto-ec.2.0.2 mirage-crypto-pk.2.0.2 mirage-crypto-rng.2.0.2 ocaml.4.14.2 ocaml-base-compiler.4.14.2 ocaml-config.2 ocaml-options-vanilla.1 ocaml-syntax-shims.1.0.0 ocamlbuild.0.16.1 ocamlfind.1.9.8 ohex.0.2.0 ptime.1.2.0 re.1.13.2 rresult.0.7.0 seq.base stdlib-shims.0.3.0 topkg.1.1.0 uutf.1.0.4 x509.1.0.6 zarith.1.14" ENV CI="true" ENV OCAMLCI="true" RUN opam update --depexts && opam install --cli=2.4 --depext-only -y ca-certs.dev $DEPS RUN opam install $DEPS COPY --chown=1000:1000 . /src RUN opam exec -- dune build @install @check @runtest && rm -rf _build END-OF-DOCKERFILE docker build . END-REPRO-BLOCK 2025-09-10 00:50.01: Using cache hint "mirage/ca-certs-ocaml/opam:debian-11-ocaml-4.14@sha256:8c2e415b2ca77f49b7ab634960c8a6ee01e83dff47d2fed017ae4179868ee543-debian-11-4.14_opam-2.4-eda908ab12fafa712490aca095278814" 2025-09-10 00:50.01: Using OBuilder spec: ((from ocaml/opam:debian-11-ocaml-4.14@sha256:8c2e415b2ca77f49b7ab634960c8a6ee01e83dff47d2fed017ae4179868ee543) (comment debian-11-4.14_opam-2.4) (user (uid 1000) (gid 1000)) (env CLICOLOR_FORCE 1) (env OPAMCOLOR always) (workdir /src) (run (shell "sudo ln -f /usr/bin/opam-2.4 /usr/bin/opam")) (run (shell "opam init --reinit -ni")) (run (shell "uname -rs && opam exec -- ocaml -version && opam --version")) (workdir /src) (run (shell "sudo chown opam /src")) (run (cache (opam-archives (target /home/opam/.opam/download-cache))) (network host) (shell "cd ~/opam-repository && (git cat-file -e 109398e2fd61803126becd398df0f1eabc9f3ca2 || git fetch origin master) && git reset -q --hard 109398e2fd61803126becd398df0f1eabc9f3ca2 && git log --no-decorate -n1 --oneline && opam update -u")) (copy (src ca-certs.opam) (dst ./)) (run (network host) (shell "opam pin add -yn ca-certs.dev './'")) (run (network host) (shell "echo '(lang dune 3.0)' > './dune-project'")) (env DEPS "alcotest.1.9.0 asn1-combinators.0.3.2 astring.0.8.5 base-bigarray.base base-threads.base base-unix.base base64.3.5.1 bos.0.2.1 cmdliner.1.3.0 conf-gmp.5 conf-gmp-powm-sec.4 conf-pkg-config.4 csexp.1.5.2 digestif.1.3.0 domain-name.0.4.1 dune.3.20.2 dune-configurator.3.20.2 duration.0.2.1 eqaf.0.10 fmt.0.11.0 fpath.0.7.3 gmap.0.3.0 ipaddr.5.6.1 kdf.1.0.0 logs.0.9.0 macaddr.5.6.1 mirage-crypto.2.0.2 mirage-crypto-ec.2.0.2 mirage-crypto-pk.2.0.2 mirage-crypto-rng.2.0.2 ocaml.4.14.2 ocaml-base-compiler.4.14.2 ocaml-config.2 ocaml-options-vanilla.1 ocaml-syntax-shims.1.0.0 ocamlbuild.0.16.1 ocamlfind.1.9.8 ohex.0.2.0 ptime.1.2.0 re.1.13.2 rresult.0.7.0 seq.base stdlib-shims.0.3.0 topkg.1.1.0 uutf.1.0.4 x509.1.0.6 zarith.1.14") (env CI true) (env OCAMLCI true) (run (cache (opam-archives (target /home/opam/.opam/download-cache))) (network host) (shell "opam update --depexts && opam install --cli=2.4 --depext-only -y ca-certs.dev $DEPS")) (run (cache (opam-archives (target /home/opam/.opam/download-cache))) (network host) (shell "opam install $DEPS")) (copy (src .) (dst /src)) (run (shell "opam exec -- dune build @install @check @runtest && rm -rf _build")) ) 2025-09-10 00:50.01: Waiting for resource in pool OCluster 2025-09-10 05:56.28: Waiting for worker… 2025-09-10 05:59.06: Got resource from pool OCluster Building on asteria.caelum.ci.dev All commits already cached HEAD is now at 319c8a6 changes for 1.0.1 (from ocaml/opam:debian-11-ocaml-4.14@sha256:8c2e415b2ca77f49b7ab634960c8a6ee01e83dff47d2fed017ae4179868ee543) 2025-09-10 05:59.06 ---> using "20430553185e882d0574319af237804318683abfcd45027e383d9997e2cf7a31" from cache /: (comment debian-11-4.14_opam-2.4) /: (user (uid 1000) (gid 1000)) /: (env CLICOLOR_FORCE 1) /: (env OPAMCOLOR always) /: (workdir /src) /src: (run (shell "sudo ln -f /usr/bin/opam-2.4 /usr/bin/opam")) 2025-09-10 05:59.06 ---> using "f018d8f05d51256790687a4dbec1a9835ef4bf4dff59a3649a1353bda37c38c8" from cache /src: (run (shell "opam init --reinit -ni")) Configuring from /home/opam/.opamrc and then from built-in defaults. Checking for available remotes: rsync and local, git. - you won't be able to use mercurial repositories unless you install the hg command on your system. - you won't be able to use darcs repositories unless you install the darcs command on your system. This version of opam requires an update to the layout of /home/opam/.opam from version 2.0 to version 2.2, which can't be reverted. You may want to back it up before going further. Continue? [Y/n] y Format upgrade done. <><> Updating repositories ><><><><><><><><><><><><><><><><><><><><><><><><><><> [default] Initialised 2025-09-10 05:59.06 ---> using "72a3e3689e30b3a063cbe7e87aebc8bd377bf5a634a08663019d20e1c3d77442" from cache /src: (run (shell "uname -rs && opam exec -- ocaml -version && opam --version")) Linux 5.15.0-142-generic The OCaml toplevel, version 4.14.2 2.4.1 2025-09-10 05:59.06 ---> using "010ba561d104916ad9aa9a2fd026e01f7d898a90808ce58ec94fbd297a8cf8cb" from cache /src: (workdir /src) /src: (run (shell "sudo chown opam /src")) 2025-09-10 05:59.06 ---> using "5c96ec5197471eb8af48f2ec5bd74d15e681f4fb11de06c449e3c3ff40bb069f" from cache /src: (run (cache (opam-archives (target /home/opam/.opam/download-cache))) (network host) (shell "cd ~/opam-repository && (git cat-file -e 109398e2fd61803126becd398df0f1eabc9f3ca2 || git fetch origin master) && git reset -q --hard 109398e2fd61803126becd398df0f1eabc9f3ca2 && git log --no-decorate -n1 --oneline && opam update -u")) From https://github.com/ocaml/opam-repository * branch master -> FETCH_HEAD ee24528071..ea994caae6 master -> origin/master 109398e2fd Merge pull request #28437 from maiste/release-dune-3.20.2 <><> Updating package repositories ><><><><><><><><><><><><><><><><><><><><><><> [default] synchronised from git+file:///home/opam/opam-repository Everything as up-to-date as possible (run with --verbose to show unavailable upgrades). However, you may "opam upgrade" these packages explicitly at these versions (e.g. "opam upgrade ocaml.5.3.0"), which will ask permission to downgrade or uninstall the conflicting packages. Nothing to do. # To update the current shell environment, run: eval $(opam env) 2025-09-10 05:59.06 ---> using "cbcd9f720e41efb35dab99f5fded5000947546af81912d7d3af3ea9308583371" from cache /src: (copy (src ca-certs.opam) (dst ./)) 2025-09-10 05:59.06 ---> using "d5b43cff09adee8284c973ea911b5507811370eeb2eef8eac5c16316904db1a2" from cache /src: (run (network host) (shell "opam pin add -yn ca-certs.dev './'")) [ca-certs.dev] synchronised (file:///src) ca-certs is now pinned to file:///src (version dev) 2025-09-10 05:59.06 ---> using "1bff78a1e1a8160ea5423894bea1f9cadad25b6e99472a732eed3493556d2527" from cache /src: (run (network host) (shell "echo '(lang dune 3.0)' > './dune-project'")) 2025-09-10 05:59.06 ---> using "630a9bfad92a77cb1d0bb669ae4a8bdabbf56c71d6aaadd1bee89f7e4e295c83" from cache /src: (env DEPS "alcotest.1.9.0 asn1-combinators.0.3.2 astring.0.8.5 base-bigarray.base base-threads.base base-unix.base base64.3.5.1 bos.0.2.1 cmdliner.1.3.0 conf-gmp.5 conf-gmp-powm-sec.4 conf-pkg-config.4 csexp.1.5.2 digestif.1.3.0 domain-name.0.4.1 dune.3.20.2 dune-configurator.3.20.2 duration.0.2.1 eqaf.0.10 fmt.0.11.0 fpath.0.7.3 gmap.0.3.0 ipaddr.5.6.1 kdf.1.0.0 logs.0.9.0 macaddr.5.6.1 mirage-crypto.2.0.2 mirage-crypto-ec.2.0.2 mirage-crypto-pk.2.0.2 mirage-crypto-rng.2.0.2 ocaml.4.14.2 ocaml-base-compiler.4.14.2 ocaml-config.2 ocaml-options-vanilla.1 ocaml-syntax-shims.1.0.0 ocamlbuild.0.16.1 ocamlfind.1.9.8 ohex.0.2.0 ptime.1.2.0 re.1.13.2 rresult.0.7.0 seq.base stdlib-shims.0.3.0 topkg.1.1.0 uutf.1.0.4 x509.1.0.6 zarith.1.14") /src: (env CI true) /src: (env OCAMLCI true) /src: (run (cache (opam-archives (target /home/opam/.opam/download-cache))) (network host) (shell "opam update --depexts && opam install --cli=2.4 --depext-only -y ca-certs.dev $DEPS")) + /usr/bin/sudo "apt-get" "update" - Hit:1 http://deb.debian.org/debian bullseye InRelease - Get:2 http://deb.debian.org/debian-security bullseye-security InRelease [27.2 kB] - Hit:3 http://deb.debian.org/debian bullseye-updates InRelease - Get:4 http://deb.debian.org/debian-security bullseye-security/main amd64 Packages [394 kB] - Fetched 421 kB in 0s (991 kB/s) - Reading package lists... <><> Synchronising pinned packages ><><><><><><><><><><><><><><><><><><><><><><> [ca-certs.dev] synchronised (file:///src) [NOTE] Package ocaml-options-vanilla is already installed (current version is 1). [NOTE] Package ocaml-config is already installed (current version is 2). [NOTE] Package ocaml-base-compiler is already installed (current version is 4.14.2). [NOTE] Package ocaml is already installed (current version is 4.14.2). [NOTE] Package base-unix is already installed (current version is base). [NOTE] Package base-threads is already installed (current version is base). [NOTE] Package base-bigarray is already installed (current version is base). The following system packages will first need to be installed: libgmp-dev pkg-config <><> Handling external dependencies <><><><><><><><><><><><><><><><><><><><><><> + /usr/bin/sudo "apt-get" "install" "-qq" "-yy" "libgmp-dev" "pkg-config" - debconf: delaying package configuration, since apt-utils is not installed - Selecting previously unselected package libglib2.0-0:amd64. - (Reading database ... (Reading database ... 5% (Reading database ... 10% (Reading database ... 15% (Reading database ... 20% (Reading database ... 25% (Reading database ... 30% (Reading database ... 35% (Reading database ... 40% (Reading database ... 45% (Reading database ... 50% (Reading database ... 55% (Reading database ... 60% (Reading database ... 65% (Reading database ... 70% (Reading database ... 75% (Reading database ... 80% (Reading database ... 85% (Reading database ... 90% (Reading database ... 95% (Reading database ... 100% (Reading database ... 18342 files and directories currently installed.) - Preparing to unpack .../0-libglib2.0-0_2.66.8-1+deb11u6_amd64.deb ... - Unpacking libglib2.0-0:amd64 (2.66.8-1+deb11u6) ... - Selecting previously unselected package libglib2.0-data. - Preparing to unpack .../1-libglib2.0-data_2.66.8-1+deb11u6_all.deb ... - Unpacking libglib2.0-data (2.66.8-1+deb11u6) ... - Selecting previously unselected package libgmpxx4ldbl:amd64. - Preparing to unpack .../2-libgmpxx4ldbl_2%3a6.2.1+dfsg-1+deb11u1_amd64.deb ... - Unpacking libgmpxx4ldbl:amd64 (2:6.2.1+dfsg-1+deb11u1) ... - Selecting previously unselected package libgmp-dev:amd64. - Preparing to unpack .../3-libgmp-dev_2%3a6.2.1+dfsg-1+deb11u1_amd64.deb ... - Unpacking libgmp-dev:amd64 (2:6.2.1+dfsg-1+deb11u1) ... - Selecting previously unselected package libicu67:amd64. - Preparing to unpack .../4-libicu67_67.1-7+deb11u1_amd64.deb ... - Unpacking libicu67:amd64 (67.1-7+deb11u1) ... - Selecting previously unselected package libxml2:amd64. - Preparing to unpack .../5-libxml2_2.9.10+dfsg-6.7+deb11u8_amd64.deb ... - Unpacking libxml2:amd64 (2.9.10+dfsg-6.7+deb11u8) ... - Selecting previously unselected package pkg-config. - Preparing to unpack .../6-pkg-config_0.29.2-1_amd64.deb ... - Unpacking pkg-config (0.29.2-1) ... - Selecting previously unselected package shared-mime-info. - Preparing to unpack .../7-shared-mime-info_2.0-1_amd64.deb ... - Unpacking shared-mime-info (2.0-1) ... - Selecting previously unselected package xdg-user-dirs. - Preparing to unpack .../8-xdg-user-dirs_0.17-2_amd64.deb ... - Unpacking xdg-user-dirs (0.17-2) ... - Setting up libicu67:amd64 (67.1-7+deb11u1) ... - Setting up xdg-user-dirs (0.17-2) ... - Setting up libglib2.0-0:amd64 (2.66.8-1+deb11u6) ... - No schema files found: doing nothing. - Setting up libglib2.0-data (2.66.8-1+deb11u6) ... - Setting up libgmpxx4ldbl:amd64 (2:6.2.1+dfsg-1+deb11u1) ... - Setting up pkg-config (0.29.2-1) ... - Setting up libxml2:amd64 (2.9.10+dfsg-6.7+deb11u8) ... - Setting up libgmp-dev:amd64 (2:6.2.1+dfsg-1+deb11u1) ... - Setting up shared-mime-info (2.0-1) ... - Processing triggers for libc-bin (2.31-13+deb11u13) ... 2025-09-10 05:59.06 ---> using "d4dd586e57abcf4ed7a841b33e15eb5a81e36562ef4c339481cc4c9d8cb57d75" from cache /src: (run (cache (opam-archives (target /home/opam/.opam/download-cache))) (network host) (shell "opam install $DEPS")) [NOTE] Package ocaml-options-vanilla is already installed (current version is 1). [NOTE] Package ocaml-config is already installed (current version is 2). [NOTE] Package ocaml-base-compiler is already installed (current version is 4.14.2). [NOTE] Package ocaml is already installed (current version is 4.14.2). [NOTE] Package base-unix is already installed (current version is base). [NOTE] Package base-threads is already installed (current version is base). [NOTE] Package base-bigarray is already installed (current version is base). The following actions will be performed: === install 40 packages - install alcotest 1.9.0 - install asn1-combinators 0.3.2 - install astring 0.8.5 - install base64 3.5.1 - install bos 0.2.1 - install cmdliner 1.3.0 - install conf-gmp 5 - install conf-gmp-powm-sec 4 - install conf-pkg-config 4 - install csexp 1.5.2 - install digestif 1.3.0 - install domain-name 0.4.1 - install dune 3.20.2 - install dune-configurator 3.20.2 - install duration 0.2.1 - install eqaf 0.10 - install fmt 0.11.0 - install fpath 0.7.3 - install gmap 0.3.0 - install ipaddr 5.6.1 - install kdf 1.0.0 - install logs 0.9.0 - install macaddr 5.6.1 - install mirage-crypto 2.0.2 - install mirage-crypto-ec 2.0.2 - install mirage-crypto-pk 2.0.2 - install mirage-crypto-rng 2.0.2 - install ocaml-syntax-shims 1.0.0 - install ocamlbuild 0.16.1 - install ocamlfind 1.9.8 - install ohex 0.2.0 - install ptime 1.2.0 - install re 1.13.2 - install rresult 0.7.0 - install seq base - install stdlib-shims 0.3.0 - install topkg 1.1.0 - install uutf 1.0.4 - install x509 1.0.6 - install zarith 1.14 <><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><> -> retrieved alcotest.1.9.0 (cached) -> retrieved asn1-combinators.0.3.2 (cached) -> retrieved astring.0.8.5 (cached) -> retrieved base64.3.5.1 (cached) -> retrieved conf-gmp.5 (cached) -> retrieved conf-gmp-powm-sec.4 (cached) -> retrieved bos.0.2.1 (cached) -> retrieved cmdliner.1.3.0 (cached) -> retrieved csexp.1.5.2 (cached) -> installed conf-gmp.5 -> installed conf-pkg-config.4 -> retrieved domain-name.0.4.1 (cached) -> installed conf-gmp-powm-sec.4 -> retrieved duration.0.2.1 (cached) -> retrieved eqaf.0.10 (cached) -> retrieved fmt.0.11.0 (cached) -> retrieved fpath.0.7.3 (cached) -> retrieved gmap.0.3.0 (cached) -> retrieved ipaddr.5.6.1, macaddr.5.6.1 (cached) -> retrieved kdf.1.0.0 (cached) -> retrieved logs.0.9.0 (cached) -> retrieved digestif.1.3.0 (cached) -> retrieved ocaml-syntax-shims.1.0.0 (cached) -> retrieved ocamlbuild.0.16.1 (cached) -> retrieved ocamlfind.1.9.8 (cached) -> retrieved ohex.0.2.0 (cached) -> retrieved ptime.1.2.0 (cached) -> retrieved mirage-crypto.2.0.2, mirage-crypto-ec.2.0.2, mirage-crypto-pk.2.0.2, mirage-crypto-rng.2.0.2 (cached) -> retrieved dune.3.20.2, dune-configurator.3.20.2 (cached) -> retrieved seq.base (cached) -> installed seq.base -> retrieved re.1.13.2 (cached) -> retrieved rresult.0.7.0 (cached) -> retrieved stdlib-shims.0.3.0 (cached) -> retrieved uutf.1.0.4 (cached) -> retrieved topkg.1.1.0 (cached) -> retrieved zarith.1.14 (cached) -> retrieved x509.1.0.6 (cached) -> installed cmdliner.1.3.0 -> installed ocamlbuild.0.16.1 -> installed ocamlfind.1.9.8 -> installed zarith.1.14 -> installed topkg.1.1.0 -> installed rresult.0.7.0 -> installed uutf.1.0.4 -> installed fmt.0.11.0 -> installed ptime.1.2.0 -> installed astring.0.8.5 -> installed fpath.0.7.3 -> installed logs.0.9.0 -> installed bos.0.2.1 -> installed dune.3.20.2 -> installed csexp.1.5.2 -> installed asn1-combinators.0.3.2 -> installed base64.3.5.1 -> installed domain-name.0.4.1 -> installed duration.0.2.1 -> installed eqaf.0.10 -> installed gmap.0.3.0 -> installed macaddr.5.6.1 -> installed ocaml-syntax-shims.1.0.0 -> installed ohex.0.2.0 -> installed re.1.13.2 -> installed stdlib-shims.0.3.0 -> installed ipaddr.5.6.1 -> installed digestif.1.3.0 -> installed alcotest.1.9.0 -> installed dune-configurator.3.20.2 -> installed mirage-crypto.2.0.2 -> installed kdf.1.0.0 -> installed mirage-crypto-rng.2.0.2 -> installed mirage-crypto-pk.2.0.2 -> installed mirage-crypto-ec.2.0.2 -> installed x509.1.0.6 Done. # To update the current shell environment, run: eval $(opam env) 2025-09-10 05:59.06 ---> using "e3e44b7b2f74e1e976325c5506560364256c6f1e5ea4f4d8aa03a068e04d9eb9" from cache /src: (copy (src .) (dst /src)) 2025-09-10 05:59.07 ---> saved as "6d636458e36b6d23fd4cd3937b6a284d5dfe9d067d7895e68e6c8e65e43d1356" /src: (run (shell "opam exec -- dune build @install @check @runtest && rm -rf _build")) (cd _build/default/test && ./tests.exe) Testing `verification tests'. This run has ID `J1U8QHL0'. [OK] X509 certificate validation 0 google.com. [OK] X509 certificate validation 1 extended-validation.... [OK] X509 certificate validation 2 self-signed.badssl.com. [OK] X509 certificate validation 3 expired.badssl.com. [OK] X509 certificate validation 4 untrusted-root.badss... [OK] X509 certificate validation 5 wrong.host.badssl.com. [OK] X509 certificate validation 6 incomplete-chain.bad... [OK] X509 certificate validation 7 sha1-intermediate.ba... [OK] X509 certificate validation 8 wrong.host.google.com. Full test results in `/src/_build/default/test/_build/_tests/verification tests'. Test Successful in 0.002s. 9 tests run. tests.exe: [EXEC:55] ['uname' '-s'] tests.exe: [WARNING] negative serial number ee2b 3deb d421 de14 a862 ac04 f3dd c401 2025-09-10 05:59.08 ---> saved as "dd3757e2ee908ec4a5c39b1b9d169648b1072696b5c892838151d415ad3d3a36" Job succeeded 2025-09-10 05:59.08: Job succeeded