Getting StartedDocumentation
Organisationsmirageca-certs332e48 ()debian-13-5.4_arm64_opam-2.5

debian-13-5.4_arm64_opam-2.5

Link Copied
Code Copied

Logs

Show raw logs
2026-05-05 15:37.29: New job: test mirage/ca-certs https://github.com/mirage/ca-certs.git#refs/pull/39/head (332e4834a865fccbd34855af56ec6485622f08ab) (linux-arm64:debian-13-5.4_arm64_opam-2.5)
Base: ocaml/opam:debian-13-ocaml-5.4@sha256:9e336bd0d3030e5c8bf370816f5f12a9a305f14093690ecfcb61804cf309f981
Opam project build


To reproduce locally:


git clone --recursive "https://github.com/mirage/ca-certs.git" && cd "ca-certs" && git fetch origin "refs/pull/39/head" && git reset --hard 332e4834
cat > Dockerfile <<'END-OF-DOCKERFILE'
FROM ocaml/opam:debian-13-ocaml-5.4@sha256:9e336bd0d3030e5c8bf370816f5f12a9a305f14093690ecfcb61804cf309f981
# debian-13-5.4_arm64_opam-2.5
USER 1000:1000
ENV CLICOLOR_FORCE="1"
ENV OPAMCOLOR="always"
WORKDIR /src
RUN sudo ln -f /usr/bin/opam-2.5 /usr/bin/opam
RUN opam init --reinit -ni
RUN uname -rs && opam exec -- ocaml -version && opam --version
WORKDIR /src
RUN sudo chown opam /src
RUN cd ~/opam-repository && (git cat-file -e a70af20c7161f9d2e1ede477647f5f9e06d6e78f || git fetch origin master) && git reset -q --hard a70af20c7161f9d2e1ede477647f5f9e06d6e78f && git log --no-decorate -n1 --oneline && opam update -u
COPY --chown=1000:1000 ca-certs.opam ./
RUN opam pin add -yn ca-certs.dev './'
RUN echo '(lang dune 3.0)' > './dune-project'
ENV DEPS="alcotest.1.9.1 asn1-combinators.0.3.2 astring.0.8.5 base-bigarray.base base-domains.base base-effects.base base-nnp.base base-threads.base base-unix.base base64.3.5.2 bos.0.3.0 cmdliner.2.1.1 conf-gmp.5 conf-gmp-powm-sec.4 conf-pkg-config.4 csexp.1.5.2 digestif.1.3.0 domain-name.0.5.0 dune.3.23.0 dune-configurator.3.23.0 duration.0.3.1 eqaf.0.10 fmt.0.11.0 fpath.0.7.3 gmap.0.3.0 ipaddr.5.6.2 kdf.1.0.0 logs.0.10.0 macaddr.5.6.2 mirage-crypto.2.1.0 mirage-crypto-ec.2.1.0 mirage-crypto-pk.2.1.0 mirage-crypto-rng.2.1.0 ocaml.5.4.1 ocaml-base-compiler.5.4.1 ocaml-compiler.5.4.1 ocaml-config.3 ocaml-options-vanilla.1 ocaml-syntax-shims.1.0.0 ocamlbuild.0.16.1 ocamlfind.1.9.8 ohex.0.2.0 ptime.1.2.0 re.1.14.0 rresult.0.7.0 stdlib-shims.0.3.0 topkg.1.1.1 uutf.1.0.4 x509.1.0.6 zarith.1.14"
ENV CI="true"
ENV OCAMLCI="true"
RUN opam update --depexts && opam install --cli=2.5 --depext-only -y ca-certs.dev $DEPS
RUN opam install $DEPS
COPY --chown=1000:1000 . /src
RUN opam exec -- dune build @install @check @runtest && rm -rf _build


END-OF-DOCKERFILE
docker build .
END-REPRO-BLOCK


2026-05-05 15:37.29: Using cache hint "mirage/ca-certs-ocaml/opam:debian-13-ocaml-5.4@sha256:9e336bd0d3030e5c8bf370816f5f12a9a305f14093690ecfcb61804cf309f981-debian-13-5.4_arm64_opam-2.5-10cef224eb43408a3d698dfcc25bb915"
2026-05-05 15:37.29: Using OBuilder spec:
((from ocaml/opam:debian-13-ocaml-5.4@sha256:9e336bd0d3030e5c8bf370816f5f12a9a305f14093690ecfcb61804cf309f981)
(comment debian-13-5.4_arm64_opam-2.5)
(user (uid 1000) (gid 1000))
(env CLICOLOR_FORCE 1)
(env OPAMCOLOR always)
(workdir /src)
(run (shell "sudo ln -f /usr/bin/opam-2.5 /usr/bin/opam"))
(run (shell "opam init --reinit -ni"))
(run (shell "uname -rs && opam exec -- ocaml -version && opam --version"))
(workdir /src)
(run (shell "sudo chown opam /src"))
(run (cache (opam-archives (target /home/opam/.opam/download-cache)))
(network host)
(shell "cd ~/opam-repository && (git cat-file -e a70af20c7161f9d2e1ede477647f5f9e06d6e78f || git fetch origin master) && git reset -q --hard a70af20c7161f9d2e1ede477647f5f9e06d6e78f && git log --no-decorate -n1 --oneline && opam update -u"))
(copy (src ca-certs.opam) (dst ./))
(run (network host)
(shell "opam pin add -yn ca-certs.dev './'"))
(run (shell "echo '(lang dune 3.0)' > './dune-project'"))
(env DEPS "alcotest.1.9.1 asn1-combinators.0.3.2 astring.0.8.5 base-bigarray.base base-domains.base base-effects.base base-nnp.base base-threads.base base-unix.base base64.3.5.2 bos.0.3.0 cmdliner.2.1.1 conf-gmp.5 conf-gmp-powm-sec.4 conf-pkg-config.4 csexp.1.5.2 digestif.1.3.0 domain-name.0.5.0 dune.3.23.0 dune-configurator.3.23.0 duration.0.3.1 eqaf.0.10 fmt.0.11.0 fpath.0.7.3 gmap.0.3.0 ipaddr.5.6.2 kdf.1.0.0 logs.0.10.0 macaddr.5.6.2 mirage-crypto.2.1.0 mirage-crypto-ec.2.1.0 mirage-crypto-pk.2.1.0 mirage-crypto-rng.2.1.0 ocaml.5.4.1 ocaml-base-compiler.5.4.1 ocaml-compiler.5.4.1 ocaml-config.3 ocaml-options-vanilla.1 ocaml-syntax-shims.1.0.0 ocamlbuild.0.16.1 ocamlfind.1.9.8 ohex.0.2.0 ptime.1.2.0 re.1.14.0 rresult.0.7.0 stdlib-shims.0.3.0 topkg.1.1.1 uutf.1.0.4 x509.1.0.6 zarith.1.14")
(env CI true)
(env OCAMLCI true)
(run (cache (opam-archives (target /home/opam/.opam/download-cache)))
(network host)
(shell "opam update --depexts && opam install --cli=2.5 --depext-only -y ca-certs.dev $DEPS"))
(run (cache (opam-archives (target /home/opam/.opam/download-cache)))
(network host)
(shell "opam install $DEPS"))
(copy (src .) (dst /src))
(run (shell "opam exec -- dune build @install @check @runtest && rm -rf _build"))
)


2026-05-05 15:37.29: Waiting for resource in pool OCluster
2026-05-05 15:37.29: Waiting for worker…
2026-05-05 15:38.12: Got resource from pool OCluster
Building on kydoime.caelum.ci.dev
HEAD is now at 02acd04 Merge pull request #38 from mirage/dependabot/github_actions/actions/checkout-6
HEAD is now at 332e483 DragonFlyBSD: use FreeBSD location


(from ocaml/opam:debian-13-ocaml-5.4@sha256:9e336bd0d3030e5c8bf370816f5f12a9a305f14093690ecfcb61804cf309f981)
2026-05-05 15:38.13 ---> using "fedff45d71f4e2a7219b04789e723fe5dc928d6bd0c027a3b2fc4ad43336df83" from cache


/: (comment debian-13-5.4_arm64_opam-2.5)


/: (user (uid 1000) (gid 1000))


/: (env CLICOLOR_FORCE 1)


/: (env OPAMCOLOR always)


/: (workdir /src)


/src: (run (shell "sudo ln -f /usr/bin/opam-2.5 /usr/bin/opam"))
2026-05-05 15:38.13 ---> using "2b92c518bc1a34fc4f618b52856237a94786e68f750d863a8d6f584d753cda16" from cache


/src: (run (shell "opam init --reinit -ni"))
Configuring from /home/opam/.opamrc and then from built-in defaults.
Checking for available remotes: rsync and local, git.
- you won't be able to use mercurial repositories unless you install the hg command on your system.
- you won't be able to use darcs repositories unless you install the darcs command on your system.


This version of opam requires an update to the layout of /home/opam/.opam from version 2.0 to version 2.2, which can't be reverted.
You may want to back it up before going further.


Continue? [Y/n] y
Format upgrade done.


<><> Updating repositories ><><><><><><><><><><><><><><><><><><><><><><><><><><>
[default] Initialised
2026-05-05 15:38.13 ---> using "d605141c553345cb16d517d1744672971ce851dddb26488685a94b2fb5d78853" from cache


/src: (run (shell "uname -rs && opam exec -- ocaml -version && opam --version"))
Linux 6.8.0-111-generic
The OCaml toplevel, version 5.4.1
2.5.1
2026-05-05 15:38.13 ---> using "3559373d7fa50fbee667544be91f891f29a3cc7d7c5628c2c46262b5e4f93c74" from cache


/src: (workdir /src)


/src: (run (shell "sudo chown opam /src"))
2026-05-05 15:38.13 ---> using "3774ca1ecb4fa65a25868b4a7b15652de324e19cef52c484899c3233dcfb5b85" from cache


/src: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
(network host)
(shell "cd ~/opam-repository && (git cat-file -e a70af20c7161f9d2e1ede477647f5f9e06d6e78f || git fetch origin master) && git reset -q --hard a70af20c7161f9d2e1ede477647f5f9e06d6e78f && git log --no-decorate -n1 --oneline && opam update -u"))
From https://github.com/ocaml/opam-repository
* branch                  master     -> FETCH_HEAD
d78d992b37..a70af20c71  master     -> origin/master
a70af20c71 Merge pull request #29844 from shonfeder/release-dune-3.23.0


<><> Updating package repositories ><><><><><><><><><><><><><><><><><><><><><><>
[default] synchronised from git+file:///home/opam/opam-repository


Everything as up-to-date as possible
However, you may "opam upgrade" these packages explicitly at these versions (e.g. "opam upgrade ocaml.5.5.0"), which will ask permission to downgrade or uninstall the conflicting packages.
Nothing to do.
# To update the current shell environment, run: eval $(opam env)
2026-05-05 15:38.13 ---> using "99bf4a600406cd247db7ba744587ac668bd0c841f20a7dbff7fa09e6f3f45cb3" from cache


/src: (copy (src ca-certs.opam) (dst ./))
2026-05-05 15:38.13 ---> using "052b742557d58ccbade0f93327357dfae955a52dbb19d86282be1197c8d9ee92" from cache


/src: (run (network host)
(shell "opam pin add -yn ca-certs.dev './'"))
[ca-certs.dev] synchronised (file:///src)
ca-certs is now pinned to file:///src (version dev)
2026-05-05 15:38.13 ---> using "6638b127e0f5d94fa4f0e39ae1aa7176c6f63a696480d003e9808256e42b5db4" from cache


/src: (run (shell "echo '(lang dune 3.0)' > './dune-project'"))
2026-05-05 15:38.13 ---> using "2ffdb3f8d7fbd95ec9855498383be872b0e48003a713610fb47e8290c32a04be" from cache


/src: (env DEPS "alcotest.1.9.1 asn1-combinators.0.3.2 astring.0.8.5 base-bigarray.base base-domains.base base-effects.base base-nnp.base base-threads.base base-unix.base base64.3.5.2 bos.0.3.0 cmdliner.2.1.1 conf-gmp.5 conf-gmp-powm-sec.4 conf-pkg-config.4 csexp.1.5.2 digestif.1.3.0 domain-name.0.5.0 dune.3.23.0 dune-configurator.3.23.0 duration.0.3.1 eqaf.0.10 fmt.0.11.0 fpath.0.7.3 gmap.0.3.0 ipaddr.5.6.2 kdf.1.0.0 logs.0.10.0 macaddr.5.6.2 mirage-crypto.2.1.0 mirage-crypto-ec.2.1.0 mirage-crypto-pk.2.1.0 mirage-crypto-rng.2.1.0 ocaml.5.4.1 ocaml-base-compiler.5.4.1 ocaml-compiler.5.4.1 ocaml-config.3 ocaml-options-vanilla.1 ocaml-syntax-shims.1.0.0 ocamlbuild.0.16.1 ocamlfind.1.9.8 ohex.0.2.0 ptime.1.2.0 re.1.14.0 rresult.0.7.0 stdlib-shims.0.3.0 topkg.1.1.1 uutf.1.0.4 x509.1.0.6 zarith.1.14")


/src: (env CI true)


/src: (env OCAMLCI true)


/src: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
(network host)
(shell "opam update --depexts && opam install --cli=2.5 --depext-only -y ca-certs.dev $DEPS"))
+ /usr/bin/sudo "apt-get" "update"
- Hit:1 http://deb.debian.org/debian trixie InRelease
- Get:2 http://deb.debian.org/debian trixie-updates InRelease [47.3 kB]
- Get:3 http://deb.debian.org/debian-security trixie-security InRelease [43.4 kB]
- Get:4 http://deb.debian.org/debian-security trixie-security/main arm64 Packages [130 kB]
- Fetched 221 kB in 0s (1357 kB/s)
- Reading package lists...


<><> Synchronising pinned packages ><><><><><><><><><><><><><><><><><><><><><><>
[ca-certs.dev] synchronised (file:///src)


[NOTE] Package ocaml-options-vanilla is already installed (current version is 1).
[NOTE] Package ocaml-config is already installed (current version is 3).
[NOTE] Package ocaml-compiler is already installed (current version is 5.4.1).
[NOTE] Package ocaml-base-compiler is already installed (current version is 5.4.1).
[NOTE] Package ocaml is already installed (current version is 5.4.1).
[NOTE] Package base-unix is already installed (current version is base).
[NOTE] Package base-threads is already installed (current version is base).
[NOTE] Package base-nnp is already installed (current version is base).
[NOTE] Package base-effects is already installed (current version is base).
[NOTE] Package base-domains is already installed (current version is base).
[NOTE] Package base-bigarray is already installed (current version is base).


The following system packages will first need to be installed:
libgmp-dev pkg-config


<><> Handling external dependencies <><><><><><><><><><><><><><><><><><><><><><>


+ /usr/bin/sudo "apt-get" "install" "-qq" "-yy" "libgmp-dev" "pkg-config"
- Selecting previously unselected package libgmpxx4ldbl:arm64.
- (Reading database ... 
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 20768 files and directories currently installed.)
- Preparing to unpack .../0-libgmpxx4ldbl_2%3a6.3.0+dfsg-3_arm64.deb ...
- Unpacking libgmpxx4ldbl:arm64 (2:6.3.0+dfsg-3) ...
- Selecting previously unselected package libgmp-dev:arm64.
- Preparing to unpack .../1-libgmp-dev_2%3a6.3.0+dfsg-3_arm64.deb ...
- Unpacking libgmp-dev:arm64 (2:6.3.0+dfsg-3) ...
- Selecting previously unselected package libpkgconf3:arm64.
- Preparing to unpack .../2-libpkgconf3_1.8.1-4_arm64.deb ...
- Unpacking libpkgconf3:arm64 (1.8.1-4) ...
- Selecting previously unselected package pkgconf-bin.
- Preparing to unpack .../3-pkgconf-bin_1.8.1-4_arm64.deb ...
- Unpacking pkgconf-bin (1.8.1-4) ...
- Selecting previously unselected package pkgconf:arm64.
- Preparing to unpack .../4-pkgconf_1.8.1-4_arm64.deb ...
- Unpacking pkgconf:arm64 (1.8.1-4) ...
- Selecting previously unselected package pkg-config:arm64.
- Preparing to unpack .../5-pkg-config_1.8.1-4_arm64.deb ...
- Unpacking pkg-config:arm64 (1.8.1-4) ...
- Setting up libpkgconf3:arm64 (1.8.1-4) ...
- Setting up libgmpxx4ldbl:arm64 (2:6.3.0+dfsg-3) ...
- Setting up pkgconf-bin (1.8.1-4) ...
- Setting up libgmp-dev:arm64 (2:6.3.0+dfsg-3) ...
- Setting up pkgconf:arm64 (1.8.1-4) ...
- Setting up pkg-config:arm64 (1.8.1-4) ...
- Processing triggers for libc-bin (2.41-12+deb13u2) ...
# To update the current shell environment, run: eval $(opam env)
2026-05-05 15:38.13 ---> using "0d7338d19c4428c7db51d3e1d7836582d5f1f904fc01c3686a0c70da482cec87" from cache


/src: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
(network host)
(shell "opam install $DEPS"))
[NOTE] Package ocaml-options-vanilla is already installed (current version is 1).
[NOTE] Package ocaml-config is already installed (current version is 3).
[NOTE] Package ocaml-compiler is already installed (current version is 5.4.1).
[NOTE] Package ocaml-base-compiler is already installed (current version is 5.4.1).
[NOTE] Package ocaml is already installed (current version is 5.4.1).
[NOTE] Package base-unix is already installed (current version is base).
[NOTE] Package base-threads is already installed (current version is base).
[NOTE] Package base-nnp is already installed (current version is base).
[NOTE] Package base-effects is already installed (current version is base).
[NOTE] Package base-domains is already installed (current version is base).
[NOTE] Package base-bigarray is already installed (current version is base).
The following actions will be performed:
=== install 39 packages
- install alcotest           1.9.1
- install asn1-combinators   0.3.2
- install astring            0.8.5
- install base64             3.5.2
- install bos                0.3.0
- install cmdliner           2.1.1
- install conf-gmp           5
- install conf-gmp-powm-sec  4
- install conf-pkg-config    4
- install csexp              1.5.2
- install digestif           1.3.0
- install domain-name        0.5.0
- install dune               3.23.0
- install dune-configurator  3.23.0
- install duration           0.3.1
- install eqaf               0.10
- install fmt                0.11.0
- install fpath              0.7.3
- install gmap               0.3.0
- install ipaddr             5.6.2
- install kdf                1.0.0
- install logs               0.10.0
- install macaddr            5.6.2
- install mirage-crypto      2.1.0
- install mirage-crypto-ec   2.1.0
- install mirage-crypto-pk   2.1.0
- install mirage-crypto-rng  2.1.0
- install ocaml-syntax-shims 1.0.0
- install ocamlbuild         0.16.1
- install ocamlfind          1.9.8
- install ohex               0.2.0
- install ptime              1.2.0
- install re                 1.14.0
- install rresult            0.7.0
- install stdlib-shims       0.3.0
- install topkg              1.1.1
- install uutf               1.0.4
- install x509               1.0.6
- install zarith             1.14


<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
-> retrieved alcotest.1.9.1  (cached)
-> retrieved asn1-combinators.0.3.2  (cached)
-> retrieved astring.0.8.5  (cached)
-> retrieved base64.3.5.2  (cached)
-> retrieved conf-gmp.5  (cached)
-> retrieved conf-gmp-powm-sec.4  (cached)
-> installed conf-pkg-config.4
-> retrieved bos.0.3.0  (cached)
-> retrieved cmdliner.2.1.1  (cached)
-> retrieved csexp.1.5.2  (cached)
-> installed conf-gmp.5
-> retrieved domain-name.0.5.0  (cached)
-> installed conf-gmp-powm-sec.4
-> retrieved duration.0.3.1  (cached)
-> retrieved eqaf.0.10  (cached)
-> retrieved fmt.0.11.0  (cached)
-> retrieved fpath.0.7.3  (cached)
-> retrieved gmap.0.3.0  (cached)
-> retrieved ipaddr.5.6.2, macaddr.5.6.2  (cached)
-> retrieved kdf.1.0.0  (cached)
-> retrieved logs.0.10.0  (cached)
-> retrieved digestif.1.3.0  (cached)
-> retrieved ocaml-syntax-shims.1.0.0  (cached)
-> retrieved ocamlbuild.0.16.1  (cached)
-> retrieved ocamlfind.1.9.8  (cached)
-> retrieved ohex.0.2.0  (cached)
-> retrieved ptime.1.2.0  (cached)
-> retrieved re.1.14.0  (cached)
-> retrieved dune.3.23.0, dune-configurator.3.23.0  (cached)
-> retrieved mirage-crypto.2.1.0, mirage-crypto-ec.2.1.0, mirage-crypto-pk.2.1.0, mirage-crypto-rng.2.1.0  (cached)
-> retrieved rresult.0.7.0  (cached)
-> retrieved stdlib-shims.0.3.0  (cached)
-> retrieved uutf.1.0.4  (cached)
-> retrieved topkg.1.1.1  (cached)
-> retrieved x509.1.0.6  (cached)
-> installed cmdliner.2.1.1
-> retrieved zarith.1.14  (cached)
-> installed ocamlfind.1.9.8
-> installed zarith.1.14
-> installed ocamlbuild.0.16.1
-> installed topkg.1.1.1
-> installed rresult.0.7.0
-> installed uutf.1.0.4
-> installed fmt.0.11.0
-> installed ptime.1.2.0
-> installed astring.0.8.5
-> installed fpath.0.7.3
-> installed logs.0.10.0
-> installed bos.0.3.0
-> installed dune.3.23.0
-> installed ohex.0.2.0
-> installed base64.3.5.2
-> installed csexp.1.5.2
-> installed asn1-combinators.0.3.2
-> installed domain-name.0.5.0
-> installed duration.0.3.1
-> installed eqaf.0.10
-> installed gmap.0.3.0
-> installed macaddr.5.6.2
-> installed ocaml-syntax-shims.1.0.0
-> installed re.1.14.0
-> installed stdlib-shims.0.3.0
-> installed ipaddr.5.6.2
-> installed digestif.1.3.0
-> installed dune-configurator.3.23.0
-> installed alcotest.1.9.1
-> installed mirage-crypto.2.1.0
-> installed kdf.1.0.0
-> installed mirage-crypto-rng.2.1.0
-> installed mirage-crypto-pk.2.1.0
-> installed mirage-crypto-ec.2.1.0
-> installed x509.1.0.6
Done.
# To update the current shell environment, run: eval $(opam env)
2026-05-05 15:38.13 ---> using "4fdd7847b17d6b19533caea16440845ba02e09d1e248753118c0cdda3fc28508" from cache


/src: (copy (src .) (dst /src))
2026-05-05 15:38.13 ---> saved as "40a97a14ae510e14749b70a391783b972c550db9d7700618e8673fbdaf284f78"


/src: (run (shell "opam exec -- dune build @install @check @runtest && rm -rf _build"))
(cd _build/default/test && ./tests.exe)
Testing `verification tests'.
This run has ID `R6T7VV2M'.


[OK]          X509 certificate validation          0   google.com.
[OK]          X509 certificate validation          1   extended-validation....
[OK]          X509 certificate validation          2   self-signed.badssl.com.
[OK]          X509 certificate validation          3   expired.badssl.com.
[OK]          X509 certificate validation          4   untrusted-root.badss...
[OK]          X509 certificate validation          5   wrong.host.badssl.com.
[OK]          X509 certificate validation          6   incomplete-chain.bad...
[OK]          X509 certificate validation          7   sha1-intermediate.ba...
[OK]          X509 certificate validation          8   wrong.host.google.com.


Full test results in `/src/_build/default/test/_build/_tests/verification tests'.
Test Successful in 0.002s. 9 tests run.
tests.exe: [EXEC:104] ['uname' '-s']
2026-05-05 15:38.15 ---> saved as "2a7d8d9490decda070d9065af7901c2339c23076699404089bbc23b2433cb836"
Job succeeded
2026-05-05 15:38.15: Job succeeded