2025-04-15 16:18.30: New job: test mirage/ca-certs https://github.com/mirage/ca-certs.git#refs/pull/36/head (f02894e446c48fbbf93b2afc464b7058db798273) (linux-x86_64:fedora-41-4.14_opam-2.3)
Base: ocaml/opam:fedora-41-ocaml-4.14@sha256:04326c5eca39e1637781592b0718d8226617ff4fcc53dd0c1903fc69bdda25c1
Opam project build
To reproduce locally:
git clone --recursive "https://github.com/mirage/ca-certs.git" && cd "ca-certs" && git fetch origin "refs/pull/36/head" && git reset --hard f02894e4
cat > Dockerfile <<'END-OF-DOCKERFILE'
FROM ocaml/opam:fedora-41-ocaml-4.14@sha256:04326c5eca39e1637781592b0718d8226617ff4fcc53dd0c1903fc69bdda25c1
# fedora-41-4.14_opam-2.3
USER 1000:1000
ENV CLICOLOR_FORCE="1"
ENV OPAMCOLOR="always"
WORKDIR /src
RUN sudo dnf install -y findutils
RUN sudo ln -f /usr/bin/opam-2.3 /usr/bin/opam
RUN opam init --reinit -ni
RUN uname -rs && opam exec -- ocaml -version && opam --version
WORKDIR /src
RUN sudo chown opam /src
RUN cd ~/opam-repository && (git cat-file -e ebbcec92a028ec6a4c71de7a7c3ed42739479745 || git fetch origin master) && git reset -q --hard ebbcec92a028ec6a4c71de7a7c3ed42739479745 && git log --no-decorate -n1 --oneline && opam update -u
COPY --chown=1000:1000 ca-certs.opam ./
RUN opam pin add -yn ca-certs.dev './'
RUN echo '(lang dune 3.0)' > './dune-project'
ENV DEPS="alcotest.1.9.0 asn1-combinators.0.3.2 astring.0.8.5 base-bigarray.base base-threads.base base-unix.base base64.3.5.1 bos.0.2.1 cmdliner.1.3.0 conf-gmp.5 conf-gmp-powm-sec.4 conf-pkg-config.4 csexp.1.5.2 digestif.1.2.0 domain-name.0.4.1 dune.3.18.0 dune-configurator.3.18.0 duration.0.2.1 eqaf.0.10 fmt.0.10.0 fpath.0.7.3 gmap.0.3.0 ipaddr.5.6.0 kdf.1.0.0 logs.0.8.0 macaddr.5.6.0 mirage-crypto.2.0.0 mirage-crypto-ec.2.0.0 mirage-crypto-pk.2.0.0 mirage-crypto-rng.2.0.0 ocaml.4.14.2 ocaml-base-compiler.4.14.2 ocaml-config.2 ocaml-options-vanilla.1 ocaml-syntax-shims.1.0.0 ocamlbuild.0.16.1 ocamlfind.1.9.8 ohex.0.2.0 ptime.1.2.0 re.1.12.0 rresult.0.7.0 seq.base stdlib-shims.0.3.0 topkg.1.0.8 uutf.1.0.4 x509.1.0.5 zarith.1.14"
ENV CI="true"
ENV OCAMLCI="true"
RUN opam update --depexts && opam install --cli=2.3 --depext-only -y ca-certs.dev $DEPS
RUN opam install $DEPS
COPY --chown=1000:1000 . /src
RUN opam exec -- dune build @install @check @runtest && rm -rf _build
END-OF-DOCKERFILE
docker build .
END-REPRO-BLOCK
2025-04-15 16:18.30: Using cache hint "mirage/ca-certs-ocaml/opam:fedora-41-ocaml-4.14@sha256:04326c5eca39e1637781592b0718d8226617ff4fcc53dd0c1903fc69bdda25c1-fedora-41-4.14_opam-2.3-9975481c6b9193b060fb1a23f1fae9fe"
2025-04-15 16:18.30: Using OBuilder spec:
((from ocaml/opam:fedora-41-ocaml-4.14@sha256:04326c5eca39e1637781592b0718d8226617ff4fcc53dd0c1903fc69bdda25c1)
(comment fedora-41-4.14_opam-2.3)
(user (uid 1000) (gid 1000))
(env CLICOLOR_FORCE 1)
(env OPAMCOLOR always)
(workdir /src)
(run (network host)
(shell "sudo dnf install -y findutils"))
(run (shell "sudo ln -f /usr/bin/opam-2.3 /usr/bin/opam"))
(run (shell "opam init --reinit -ni"))
(run (shell "uname -rs && opam exec -- ocaml -version && opam --version"))
(workdir /src)
(run (shell "sudo chown opam /src"))
(run (cache (opam-archives (target /home/opam/.opam/download-cache)))
(network host)
(shell "cd ~/opam-repository && (git cat-file -e ebbcec92a028ec6a4c71de7a7c3ed42739479745 || git fetch origin master) && git reset -q --hard ebbcec92a028ec6a4c71de7a7c3ed42739479745 && git log --no-decorate -n1 --oneline && opam update -u"))
(copy (src ca-certs.opam) (dst ./))
(run (network host)
(shell "opam pin add -yn ca-certs.dev './'"))
(run (network host)
(shell "echo '(lang dune 3.0)' > './dune-project'"))
(env DEPS "alcotest.1.9.0 asn1-combinators.0.3.2 astring.0.8.5 base-bigarray.base base-threads.base base-unix.base base64.3.5.1 bos.0.2.1 cmdliner.1.3.0 conf-gmp.5 conf-gmp-powm-sec.4 conf-pkg-config.4 csexp.1.5.2 digestif.1.2.0 domain-name.0.4.1 dune.3.18.0 dune-configurator.3.18.0 duration.0.2.1 eqaf.0.10 fmt.0.10.0 fpath.0.7.3 gmap.0.3.0 ipaddr.5.6.0 kdf.1.0.0 logs.0.8.0 macaddr.5.6.0 mirage-crypto.2.0.0 mirage-crypto-ec.2.0.0 mirage-crypto-pk.2.0.0 mirage-crypto-rng.2.0.0 ocaml.4.14.2 ocaml-base-compiler.4.14.2 ocaml-config.2 ocaml-options-vanilla.1 ocaml-syntax-shims.1.0.0 ocamlbuild.0.16.1 ocamlfind.1.9.8 ohex.0.2.0 ptime.1.2.0 re.1.12.0 rresult.0.7.0 seq.base stdlib-shims.0.3.0 topkg.1.0.8 uutf.1.0.4 x509.1.0.5 zarith.1.14")
(env CI true)
(env OCAMLCI true)
(run (cache (opam-archives (target /home/opam/.opam/download-cache)))
(network host)
(shell "opam update --depexts && opam install --cli=2.3 --depext-only -y ca-certs.dev $DEPS"))
(run (cache (opam-archives (target /home/opam/.opam/download-cache)))
(network host)
(shell "opam install $DEPS"))
(copy (src .) (dst /src))
(run (shell "opam exec -- dune build @install @check @runtest && rm -rf _build"))
)
2025-04-15 16:18.30: Waiting for resource in pool OCluster
2025-04-15 16:18.30: Waiting for worker…
2025-04-15 16:21.22: Got resource from pool OCluster
Building on phoebe.caelum.ci.dev
HEAD is now at 81605d7 add maintenance intent
HEAD is now at f02894e report number of ignored trust anchors on warn level
(from ocaml/opam:fedora-41-ocaml-4.14@sha256:04326c5eca39e1637781592b0718d8226617ff4fcc53dd0c1903fc69bdda25c1)
Unable to find image 'ocaml/opam:fedora-41-ocaml-4.14@sha256:04326c5eca39e1637781592b0718d8226617ff4fcc53dd0c1903fc69bdda25c1' locally
docker.io/ocaml/opam@sha256:04326c5eca39e1637781592b0718d8226617ff4fcc53dd0c1903fc69bdda25c1: Pulling from ocaml/opam
2398ca8da14a: Pulling fs layer
2398ca8da14a: Verifying Checksum
2398ca8da14a: Download complete
2398ca8da14a: Pull complete
Digest: sha256:04326c5eca39e1637781592b0718d8226617ff4fcc53dd0c1903fc69bdda25c1
Status: Downloaded newer image for ocaml/opam@sha256:04326c5eca39e1637781592b0718d8226617ff4fcc53dd0c1903fc69bdda25c1
2025-04-15 16:23.56 ---> saved as "3b513f1f998f2d0a31a77800be2ddc9fb442a2e593fa1bc635608352df3731f1"
/: (comment fedora-41-4.14_opam-2.3)
/: (user (uid 1000) (gid 1000))
/: (env CLICOLOR_FORCE 1)
/: (env OPAMCOLOR always)
/: (workdir /src)
/src: (run (network host)
(shell "sudo dnf install -y findutils"))
Updating and loading repositories:
Fedora 41 openh264 (From Cisco) - x86_ 100% | 6.8 KiB/s | 989.0 B | 00m00s
Fedora 41 - x86_64 - Updates 100% | 180.3 KiB/s | 24.5 KiB | 00m00s
Fedora 41 - x86_64 100% | 187.7 KiB/s | 26.3 KiB | 00m00s
Fedora 41 - x86_64 - Updates 100% | 4.3 MiB/s | 6.0 MiB | 00m01s
Repositories loaded.
Package "findutils-1:4.10.0-4.fc41.x86_64" is already installed.
Nothing to do.
2025-04-15 16:24.05 ---> saved as "daa6082c6c546cccddd12e6aecce94cdce51a3225789b6f8d71dd8a90d7563ff"
/src: (run (shell "sudo ln -f /usr/bin/opam-2.3 /usr/bin/opam"))
2025-04-15 16:24.05 ---> saved as "13f1cdcc6140791f356911f2a4623e8708e6bd1b1fecd8ca637cfd9dfb2eafa3"
/src: (run (shell "opam init --reinit -ni"))
Configuring from /home/opam/.opamrc and then from built-in defaults.
Checking for available remotes: rsync and local, git.
- you won't be able to use mercurial repositories unless you install the hg command on your system.
- you won't be able to use darcs repositories unless you install the darcs command on your system.
This development version of opam requires an update to the layout of /home/opam/.opam from version 2.0 to version 2.2, which can't be reverted.
You may want to back it up before going further.
Continue? [y/n] y
Format upgrade done.
<><> Updating repositories ><><><><><><><><><><><><><><><><><><><><><><><><><><>
[ERROR] Could not update repository "opam-repository-archive": "/usr/bin/git fetch -q" exited with code 128 "fatal: unable to access 'https://github.com/ocaml/opam-repository-archive/': Could not resolve host: github.com"
[default] synchronised from file:///home/opam/opam-repository
2025-04-15 16:25.47 ---> saved as "43c0761621909e17234bbd30a7bf0e4f6e5b16351d10422a6f52afe64f5f647c"
/src: (run (shell "uname -rs && opam exec -- ocaml -version && opam --version"))
Linux 5.15.0-134-generic
The OCaml toplevel, version 4.14.2
2.3.0
2025-04-15 16:25.48 ---> saved as "a9f85f1ffbbdb7c517e07fa0be5446aa8a7c499800fd852879625311e1036bbf"
/src: (workdir /src)
/src: (run (shell "sudo chown opam /src"))
2025-04-15 16:25.48 ---> saved as "40f52c85e489327393f2a1d6cd1a986dc028c7964466d7c55ed04c462aa11fab"
/src: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
(network host)
(shell "cd ~/opam-repository && (git cat-file -e ebbcec92a028ec6a4c71de7a7c3ed42739479745 || git fetch origin master) && git reset -q --hard ebbcec92a028ec6a4c71de7a7c3ed42739479745 && git log --no-decorate -n1 --oneline && opam update -u"))
From https://github.com/ocaml/opam-repository
* branch master -> FETCH_HEAD
a8ed476033..70b82be6e2 master -> origin/master
ebbcec92a0 Merge pull request #23330 from mseri/fix-gmp
<><> Updating package repositories ><><><><><><><><><><><><><><><><><><><><><><>
[opam-repository-archive] synchronised from git+https://github.com/ocaml/opam-repository-archive
[default] synchronised from file:///home/opam/opam-repository
Everything as up-to-date as possible (run with --verbose to show unavailable upgrades).
However, you may "opam upgrade" these packages explicitly, which will ask permission to downgrade or uninstall the conflicting packages.
Nothing to do.
# To update the current shell environment, run: eval $(opam env)
2025-04-15 16:27.29 ---> saved as "4788ca8fd59df55568ba9c179b7a6197d0d4eb501f788a9d7afc501f0cd7465e"
/src: (copy (src ca-certs.opam) (dst ./))
2025-04-15 16:27.32 ---> saved as "f8366a06d42308e5a9262a609195ed3f983f8c6971aec609ce236f37813e75b3"
/src: (run (network host)
(shell "opam pin add -yn ca-certs.dev './'"))
[ca-certs.dev] synchronised (file:///src)
ca-certs is now pinned to file:///src (version dev)
2025-04-15 16:27.34 ---> saved as "722316881c9d60e087cadb5e594d5e859da0473a2f8527e251d2cd3807134706"
/src: (run (network host)
(shell "echo '(lang dune 3.0)' > './dune-project'"))
2025-04-15 16:27.34 ---> saved as "9a448ac69b5ad976787e38bde1d5fcd5c696f68b370e18e4c156aa56a2ceb0ed"
/src: (env DEPS "alcotest.1.9.0 asn1-combinators.0.3.2 astring.0.8.5 base-bigarray.base base-threads.base base-unix.base base64.3.5.1 bos.0.2.1 cmdliner.1.3.0 conf-gmp.5 conf-gmp-powm-sec.4 conf-pkg-config.4 csexp.1.5.2 digestif.1.2.0 domain-name.0.4.1 dune.3.18.0 dune-configurator.3.18.0 duration.0.2.1 eqaf.0.10 fmt.0.10.0 fpath.0.7.3 gmap.0.3.0 ipaddr.5.6.0 kdf.1.0.0 logs.0.8.0 macaddr.5.6.0 mirage-crypto.2.0.0 mirage-crypto-ec.2.0.0 mirage-crypto-pk.2.0.0 mirage-crypto-rng.2.0.0 ocaml.4.14.2 ocaml-base-compiler.4.14.2 ocaml-config.2 ocaml-options-vanilla.1 ocaml-syntax-shims.1.0.0 ocamlbuild.0.16.1 ocamlfind.1.9.8 ohex.0.2.0 ptime.1.2.0 re.1.12.0 rresult.0.7.0 seq.base stdlib-shims.0.3.0 topkg.1.0.8 uutf.1.0.4 x509.1.0.5 zarith.1.14")
/src: (env CI true)
/src: (env OCAMLCI true)
/src: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
(network host)
(shell "opam update --depexts && opam install --cli=2.3 --depext-only -y ca-certs.dev $DEPS"))
+ /usr/bin/sudo "yum" "makecache"
- Updating and loading repositories:
- Repositories loaded.
- Metadata cache created.
<><> Synchronising pinned packages ><><><><><><><><><><><><><><><><><><><><><><>
[ca-certs.dev] synchronised (file:///src)
[NOTE] Package ocaml-options-vanilla is already installed (current version is 1).
[NOTE] Package ocaml-config is already installed (current version is 2).
[NOTE] Package ocaml-base-compiler is already installed (current version is 4.14.2).
[NOTE] Package ocaml is already installed (current version is 4.14.2).
[NOTE] Package base-unix is already installed (current version is base).
[NOTE] Package base-threads is already installed (current version is base).
[NOTE] Package base-bigarray is already installed (current version is base).
The following system packages will first need to be installed:
gmp-devel
<><> Handling external dependencies <><><><><><><><><><><><><><><><><><><><><><>
+ /usr/bin/sudo "yum" "install" "-y" "gmp-devel"
- Updating and loading repositories:
- Repositories loaded.
- Package Arch Version Repository Size
- Installing:
- gmp-devel x86_64 1:6.3.0-2.fc41 fedora 352.3 KiB
- Installing dependencies:
- gmp-c++ x86_64 1:6.3.0-2.fc41 fedora 31.8 KiB
-
- Transaction Summary:
- Installing: 2 packages
-
- Total size of inbound packages is 193 KiB. Need to download 193 KiB.
- After this operation, 384 KiB extra will be used (install 384 KiB, remove 0 B).
- [1/2] gmp-c++-1:6.3.0-2.fc41.x86_64 100% | 159.2 KiB/s | 18.6 KiB | 00m00s
- [2/2] gmp-devel-1:6.3.0-2.fc41.x86_64 100% | 885.4 KiB/s | 174.4 KiB | 00m00s
- --------------------------------------------------------------------------------
- [2/2] Total 100% | 421.5 KiB/s | 193.0 KiB | 00m00s
- Running transaction
- [1/4] Verify package files 100% | 666.0 B/s | 2.0 B | 00m00s
- [2/4] Prepare transaction 100% | 28.0 B/s | 2.0 B | 00m00s
- [3/4] Installing gmp-c++-1:6.3.0-2.fc41 100% | 10.6 MiB/s | 32.6 KiB | 00m00s
- [4/4] Installing gmp-devel-1:6.3.0-2.fc 100% | 4.8 MiB/s | 354.1 KiB | 00m00s
- Complete!
+ /usr/bin/rpm "-q" "--whatprovides" "gmp-devel"
- gmp-devel-6.3.0-2.fc41.x86_64
2025-04-15 16:28.11 ---> saved as "71cc3b2e9d4d46b1f7964f0cef18502cf5072efc57982346e34aa072c5872c60"
/src: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
(network host)
(shell "opam install $DEPS"))
[NOTE] Package ocaml-options-vanilla is already installed (current version is 1).
[NOTE] Package ocaml-config is already installed (current version is 2).
[NOTE] Package ocaml-base-compiler is already installed (current version is 4.14.2).
[NOTE] Package ocaml is already installed (current version is 4.14.2).
[NOTE] Package base-unix is already installed (current version is base).
[NOTE] Package base-threads is already installed (current version is base).
[NOTE] Package base-bigarray is already installed (current version is base).
The following actions will be performed:
=== install 40 packages
- install alcotest 1.9.0
- install asn1-combinators 0.3.2
- install astring 0.8.5
- install base64 3.5.1
- install bos 0.2.1
- install cmdliner 1.3.0
- install conf-gmp 5
- install conf-gmp-powm-sec 4
- install conf-pkg-config 4
- install csexp 1.5.2
- install digestif 1.2.0
- install domain-name 0.4.1
- install dune 3.18.0
- install dune-configurator 3.18.0
- install duration 0.2.1
- install eqaf 0.10
- install fmt 0.10.0
- install fpath 0.7.3
- install gmap 0.3.0
- install ipaddr 5.6.0
- install kdf 1.0.0
- install logs 0.8.0
- install macaddr 5.6.0
- install mirage-crypto 2.0.0
- install mirage-crypto-ec 2.0.0
- install mirage-crypto-pk 2.0.0
- install mirage-crypto-rng 2.0.0
- install ocaml-syntax-shims 1.0.0
- install ocamlbuild 0.16.1
- install ocamlfind 1.9.8
- install ohex 0.2.0
- install ptime 1.2.0
- install re 1.12.0
- install rresult 0.7.0
- install seq base
- install stdlib-shims 0.3.0
- install topkg 1.0.8
- install uutf 1.0.4
- install x509 1.0.5
- install zarith 1.14
<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
-> retrieved asn1-combinators.0.3.2 (cached)
-> retrieved astring.0.8.5 (cached)
-> retrieved alcotest.1.9.0 (cached)
-> retrieved base64.3.5.1 (cached)
-> retrieved conf-gmp.5 (cached)
-> retrieved conf-gmp-powm-sec.4 (cached)
-> retrieved bos.0.2.1 (cached)
-> retrieved cmdliner.1.3.0 (cached)
-> retrieved csexp.1.5.2 (cached)
-> installed conf-gmp.5
-> installed conf-pkg-config.4
-> retrieved domain-name.0.4.1 (cached)
-> installed conf-gmp-powm-sec.4
-> retrieved duration.0.2.1 (cached)
-> retrieved eqaf.0.10 (cached)
-> retrieved fmt.0.10.0 (cached)
-> retrieved fpath.0.7.3 (cached)
-> retrieved gmap.0.3.0 (cached)
-> retrieved ipaddr.5.6.0, macaddr.5.6.0 (cached)
-> retrieved kdf.1.0.0 (cached)
-> retrieved logs.0.8.0 (cached)
-> retrieved digestif.1.2.0 (cached)
-> retrieved ocaml-syntax-shims.1.0.0 (cached)
-> retrieved ocamlbuild.0.16.1 (cached)
-> retrieved ocamlfind.1.9.8 (cached)
-> retrieved dune.3.18.0, dune-configurator.3.18.0 (cached)
-> retrieved mirage-crypto.2.0.0, mirage-crypto-ec.2.0.0, mirage-crypto-pk.2.0.0, mirage-crypto-rng.2.0.0 (cached)
-> retrieved ohex.0.2.0 (cached)
-> retrieved ptime.1.2.0 (cached)
-> retrieved seq.base (cached)
-> retrieved re.1.12.0 (cached)
-> retrieved rresult.0.7.0 (cached)
-> retrieved stdlib-shims.0.3.0 (cached)
-> retrieved uutf.1.0.4 (cached)
-> installed cmdliner.1.3.0
-> installed seq.base
-> retrieved topkg.1.0.8 (cached)
-> retrieved x509.1.0.5 (cached)
-> retrieved zarith.1.14 (cached)
-> installed ocamlfind.1.9.8
-> installed ocamlbuild.0.16.1
-> installed zarith.1.14
-> installed topkg.1.0.8
-> installed rresult.0.7.0
-> installed uutf.1.0.4
-> installed fmt.0.10.0
-> installed ptime.1.2.0
-> installed astring.0.8.5
-> installed fpath.0.7.3
-> installed logs.0.8.0
-> installed bos.0.2.1
-> installed dune.3.18.0
-> installed gmap.0.3.0
-> installed domain-name.0.4.1
-> installed duration.0.2.1
-> installed ohex.0.2.0
-> installed csexp.1.5.2
-> installed asn1-combinators.0.3.2
-> installed base64.3.5.1
-> installed eqaf.0.10
-> installed macaddr.5.6.0
-> installed ocaml-syntax-shims.1.0.0
-> installed re.1.12.0
-> installed stdlib-shims.0.3.0
-> installed ipaddr.5.6.0
-> installed digestif.1.2.0
-> installed alcotest.1.9.0
-> installed dune-configurator.3.18.0
-> installed mirage-crypto.2.0.0
-> installed kdf.1.0.0
-> installed mirage-crypto-rng.2.0.0
-> installed mirage-crypto-pk.2.0.0
-> installed mirage-crypto-ec.2.0.0
-> installed x509.1.0.5
Done.
# To update the current shell environment, run: eval $(opam env)
2025-04-15 16:30.52 ---> saved as "d981caf0218985b9b90545811dd024d997215879d35d62f2d74c57fb3fdb13d6"
/src: (copy (src .) (dst /src))
2025-04-15 16:30.52 ---> saved as "367ddf2bbca137c3c526582aad5e11ac8e8e54c35fc804ee4b3e88833cc0c793"
/src: (run (shell "opam exec -- dune build @install @check @runtest && rm -rf _build"))
(cd _build/default/test && ./tests.exe)
Testing `verification tests'.
This run has ID `ON0QRZ8H'.
[OK] X509 certificate validation 0 google.com.
[OK] X509 certificate validation 1 extended-validation....
[OK] X509 certificate validation 2 self-signed.badssl.com.
[OK] X509 certificate validation 3 expired.badssl.com.
[OK] X509 certificate validation 4 untrusted-root.badss...
[OK] X509 certificate validation 5 wrong.host.badssl.com.
[OK] X509 certificate validation 6 incomplete-chain.bad...
[OK] X509 certificate validation 7 sha1-intermediate.ba...
[OK] X509 certificate validation 8 wrong.host.google.com.
Full test results in `/src/_build/default/test/_build/_tests/verification tests'.
Test Successful in 0.005s. 9 tests run.
tests.exe: [EXEC:47] ['uname' '-s']
2025-04-15 16:30.55 ---> saved as "00c7d1f40cfc4297621f1178830857e422423c6cf385b761cfd3dac6dc26a739"
Job succeeded
2025-04-15 16:30.55: Job succeeded