The opam tarball comes with a ocp-build.boot bytecode file which writes to $HOME, right at the beginning of the build process. ocp-build/README.md says the sources are in TypeRex[1]. After a quick look I don't find a way to generate a fresh ocp-build. Commenting the first call to ocp-build leads to systrace that prevents curl from calling home.
''curl --insecure -OL \ https://gforge.inria.fr/frs/download.php/31910/cudf-0.6.3.tar.gz'' This doesn't smell good imho. :) [1] https://github.com/OCamlPro/typerex/ -- Jérémie Courrèges-Anglas GPG Key fingerprint: 61DB D9A0 00A4 67CF 2A90 8961 6191 8FBF 06A1 1494