(for PR #29368)

2026-02-10 15:24.03: New job: build mirage-crypto-rng-mkernel.2.0.3, using opam dev
                              from https://github.com/ocaml/opam-repository.git#refs/pull/29368/head (66e177c9ccf11298b53a7c2c24dada57dd487d9b)
                              on debian-13-ocaml-4.11/amd64

To reproduce locally:

cd $(mktemp -d)
git clone --recursive "https://github.com/ocaml/opam-repository.git" && cd "opam-repository" && git fetch origin "refs/pull/29368/head" && git reset --hard 66e177c9
git fetch origin master
git merge --no-edit f4c12add9cacd610d7ec6cc9fcb057902ca0a0f6
cat > ../Dockerfile <<'END-OF-DOCKERFILE'
FROM ocaml/opam:debian-13-ocaml-4.11@sha256:ebb21465b4557dde6b9d881fa06ca017bb601e1ca7c643a011c2b1755d1d7e57
USER 1000:1000
WORKDIR /home/opam
RUN sudo ln -f /usr/bin/opam-dev /usr/bin/opam
RUN opam init --reinit -ni
RUN opam option solver=builtin-0install && opam config report
ENV OPAMDOWNLOADJOBS="1"
ENV OPAMERRLOGLEN="0"
ENV OPAMPRECISETRACKING="1"
ENV CI="true"
ENV OPAM_REPO_CI="true"
RUN rm -rf opam-repository/
COPY --chown=1000:1000 . opam-repository/
RUN opam repository set-url --strict default opam-repository/
RUN opam update --depexts || true
RUN opam pin add -k version -yn mirage-crypto-rng-mkernel.2.0.3 2.0.3
RUN opam reinstall mirage-crypto-rng-mkernel.2.0.3; \
    res=$?; \
    test "$res" != 31 && exit "$res"; \
    export OPAMCLI=2.0; \
    build_dir=$(opam var prefix)/.opam-switch/build; \
    failed=$(ls "$build_dir"); \
    partial_fails=""; \
    for pkg in $failed; do \
    if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"debian-13\""; then \
    echo "A package failed and has been disabled for CI using the 'x-ci-accept-failures' field."; \
    fi; \
    test "$pkg" != 'mirage-crypto-rng-mkernel.2.0.3' && partial_fails="$partial_fails $pkg"; \
    done; \
    test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}"; \
    exit 1

END-OF-DOCKERFILE
docker build -f ../Dockerfile .

2026-02-10 15:24.03: Using cache hint "ocaml/opam:debian-13-ocaml-4.11@sha256:ebb21465b4557dde6b9d881fa06ca017bb601e1ca7c643a011c2b1755d1d7e57-mirage-crypto-rng-mkernel.2.0.3-66e177c9ccf11298b53a7c2c24dada57dd487d9b"
2026-02-10 15:24.03: Using OBuilder spec:
((from ocaml/opam:debian-13-ocaml-4.11@sha256:ebb21465b4557dde6b9d881fa06ca017bb601e1ca7c643a011c2b1755d1d7e57)
 (user (uid 1000) (gid 1000))
 (workdir /home/opam)
 (run (shell "sudo ln -f /usr/bin/opam-dev /usr/bin/opam"))
 (run (network host)
      (shell "opam init --reinit --config .opamrc-sandbox -ni"))
 (run (shell "opam option solver=builtin-0install && opam config report"))
 (env OPAMDOWNLOADJOBS 1)
 (env OPAMERRLOGLEN 0)
 (env OPAMPRECISETRACKING 1)
 (env CI true)
 (env OPAM_REPO_CI true)
 (run (shell "rm -rf opam-repository/"))
 (copy (src .) (dst opam-repository/))
 (run (shell "opam repository set-url --strict default opam-repository/"))
 (run (network host)
      (shell "opam update --depexts || true"))
 (run (shell "opam pin add -k version -yn mirage-crypto-rng-mkernel.2.0.3 2.0.3"))
 (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
      (network host)
      (shell  "opam reinstall mirage-crypto-rng-mkernel.2.0.3;\
             \n        res=$?;\
             \n        test \"$res\" != 31 && exit \"$res\";\
             \n        export OPAMCLI=2.0;\
             \n        build_dir=$(opam var prefix)/.opam-switch/build;\
             \n        failed=$(ls \"$build_dir\");\
             \n        partial_fails=\"\";\
             \n        for pkg in $failed; do\
             \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
             \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
             \n          fi;\
             \n          test \"$pkg\" != 'mirage-crypto-rng-mkernel.2.0.3' && partial_fails=\"$partial_fails $pkg\";\
             \n        done;\
             \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
             \n        exit 1"))
)

2026-02-10 15:24.03: Waiting for resource in pool OCluster
2026-02-10 15:24.06: Waiting for worker…
2026-02-10 15:26.06: Got resource from pool OCluster
Building on laodoke.caelum.ci.dev
All commits already cached
Updating files:  63% (12254/19367)
Updating files:  64% (12395/19367)
Updating files:  65% (12589/19367)
Updating files:  66% (12783/19367)
Updating files:  67% (12976/19367)
Updating files:  68% (13170/19367)
Updating files:  69% (13364/19367)
Updating files:  70% (13557/19367)
Updating files:  71% (13751/19367)
Updating files:  72% (13945/19367)
Updating files:  73% (14138/19367)
Updating files:  74% (14332/19367)
Updating files:  75% (14526/19367)
Updating files:  76% (14719/19367)
Updating files:  77% (14913/19367)
Updating files:  78% (15107/19367)
Updating files:  79% (15300/19367)
Updating files:  80% (15494/19367)
Updating files:  81% (15688/19367)
Updating files:  82% (15881/19367)
Updating files:  83% (16075/19367)
Updating files:  84% (16269/19367)
Updating files:  85% (16462/19367)
Updating files:  86% (16656/19367)
Updating files:  87% (16850/19367)
Updating files:  88% (17043/19367)
Updating files:  89% (17237/19367)
Updating files:  90% (17431/19367)
Updating files:  91% (17624/19367)
Updating files:  92% (17818/19367)
Updating files:  93% (18012/19367)
Updating files:  94% (18205/19367)
Updating files:  95% (18399/19367)
Updating files:  96% (18593/19367)
Updating files:  97% (18786/19367)
Updating files:  98% (18980/19367)
Updating files:  99% (19174/19367)
Updating files: 100% (19367/19367)
Updating files: 100% (19367/19367), done.
HEAD is now at f4c12add9c Merge pull request #29362 from xvw/fix-primavera-ownership
Updating f4c12add9c..66e177c9cc
Fast-forward
 .../mirage-crypto-ec/mirage-crypto-ec.2.0.3/opam   | 62 ++++++++++++++++++++++
 .../mirage-crypto-pk/mirage-crypto-pk.2.0.3/opam   | 43 +++++++++++++++
 .../mirage-crypto-rng-miou-unix.2.0.3/opam         | 39 ++++++++++++++
 .../mirage-crypto-rng-mirage.2.0.3/opam            | 40 ++++++++++++++
 .../mirage-crypto-rng-mkernel.2.0.3/opam           | 38 +++++++++++++
 .../mirage-crypto-rng/mirage-crypto-rng.2.0.3/opam | 42 +++++++++++++++
 packages/mirage-crypto/mirage-crypto.2.0.3/opam    | 39 ++++++++++++++
 7 files changed, 303 insertions(+)
 create mode 100644 packages/mirage-crypto-ec/mirage-crypto-ec.2.0.3/opam
 create mode 100644 packages/mirage-crypto-pk/mirage-crypto-pk.2.0.3/opam
 create mode 100644 packages/mirage-crypto-rng-miou-unix/mirage-crypto-rng-miou-unix.2.0.3/opam
 create mode 100644 packages/mirage-crypto-rng-mirage/mirage-crypto-rng-mirage.2.0.3/opam
 create mode 100644 packages/mirage-crypto-rng-mkernel/mirage-crypto-rng-mkernel.2.0.3/opam
 create mode 100644 packages/mirage-crypto-rng/mirage-crypto-rng.2.0.3/opam
 create mode 100644 packages/mirage-crypto/mirage-crypto.2.0.3/opam

(from ocaml/opam:debian-13-ocaml-4.11@sha256:ebb21465b4557dde6b9d881fa06ca017bb601e1ca7c643a011c2b1755d1d7e57)
Unable to find image 'ocaml/opam:debian-13-ocaml-4.11@sha256:ebb21465b4557dde6b9d881fa06ca017bb601e1ca7c643a011c2b1755d1d7e57' locally
docker.io/ocaml/opam@sha256:ebb21465b4557dde6b9d881fa06ca017bb601e1ca7c643a011c2b1755d1d7e57: Pulling from ocaml/opam
ef235bf1a09a: Already exists
58b06b604a42: Already exists
b55f23c32d5a: Already exists
aa415425edb7: Already exists
c4f39ed7469c: Already exists
ca248a2fdd5e: Already exists
74109c509b2f: Already exists
18c2fa2271cb: Already exists
37d4d41661a2: Already exists
0b2f35f78814: Already exists
e65f29522a9a: Already exists
603a51b67573: Already exists
89b2faa02f16: Already exists
e5f11471afd4: Already exists
d7b0e5daa224: Already exists
7bec4d50f3b2: Already exists
d3a70ed71f1c: Already exists
90de03d9b27a: Already exists
a28f685cf2db: Already exists
5bb5e02041c7: Already exists
74f9af816199: Already exists
74c2f6cb4138: Already exists
4f4fb700ef54: Already exists
5ce9bdcb2952: Already exists
bf18c14e9b34: Already exists
bb4b67501479: Already exists
89e7ed0468f5: Already exists
640077527026: Already exists
363b481ff012: Already exists
437bd8bc3ce9: Already exists
2bcf3429833a: Already exists
3e5fe21454e9: Already exists
f3afb11ae499: Already exists
c3a5b88f5e5f: Already exists
124a1dc355b1: Already exists
0a9982d37abd: Already exists
9b8b724665ed: Already exists
f81507befe71: Already exists
7984e4546bf9: Already exists
3579b890ab6e: Already exists
e83772930ba8: Already exists
e205ee8e132a: Pulling fs layer
ffab9f0a4fc9: Pulling fs layer
4d79877a61df: Pulling fs layer
c5758db2fd58: Pulling fs layer
c5758db2fd58: Waiting
ffab9f0a4fc9: Verifying Checksum
ffab9f0a4fc9: Download complete
4d79877a61df: Verifying Checksum
4d79877a61df: Download complete
c5758db2fd58: Verifying Checksum
c5758db2fd58: Download complete
e205ee8e132a: Verifying Checksum
e205ee8e132a: Download complete
e205ee8e132a: Pull complete
ffab9f0a4fc9: Pull complete
4d79877a61df: Pull complete
c5758db2fd58: Pull complete
Digest: sha256:ebb21465b4557dde6b9d881fa06ca017bb601e1ca7c643a011c2b1755d1d7e57
Status: Downloaded newer image for ocaml/opam@sha256:ebb21465b4557dde6b9d881fa06ca017bb601e1ca7c643a011c2b1755d1d7e57
2026-02-10 15:27.43 ---> saved as "088528b419177c5e5241235f1540b595ce0a714da367354bfd8336e630bc04c1"

/: (user (uid 1000) (gid 1000))

/: (workdir /home/opam)

/home/opam: (run (shell "sudo ln -f /usr/bin/opam-dev /usr/bin/opam"))
2026-02-10 15:27.43 ---> saved as "5da5315053647cf81afbd4047047bcbfe41ce513ff89ae6d2f62b973c7cd476b"

/home/opam: (run (network host)
                 (shell "opam init --reinit --config .opamrc-sandbox -ni"))
Configuring from /home/opam/.opamrc-sandbox, then /home/opam/.opamrc, and finally from built-in defaults.
Checking for available remotes: rsync and local, git.
  - you won't be able to use mercurial repositories unless you install the hg command on your system.
  - you won't be able to use darcs repositories unless you install the darcs command on your system.

This version of opam requires an update to the layout of /home/opam/.opam from version 2.0 to version 2.2, which can't be reverted.
You may want to back it up before going further.

Continue? [Y/n] y
Format upgrade done.

<><> Updating repositories ><><><><><><><><><><><><><><><><><><><><><><><><><><>
[default] Initialised
2026-02-10 15:28.30 ---> saved as "56696207f2117589d41db58bb9adcd407723cfde33800433aaac6763d7515ebf"

/home/opam: (run (shell "opam option solver=builtin-0install && opam config report"))
Set to 'builtin-0install' the field solver in global configuration
# opam config report
# opam-version         2.5.0
# self-upgrade         no
# system               arch=x86_64 os=linux os-distribution=debian os-version=13
# solver               builtin-0install
# install-criteria     -changed,-count[avoid-version,solution]
# upgrade-criteria     -count[avoid-version,solution]
# jobs                 71
# repositories         1 (version-controlled)
# pinned               1 (version)
# current-switch       4.11
# invariant            ["ocaml-base-compiler" {= "4.11.2"}]
# compiler-packages    ocaml-base-compiler.4.11.2
# ocaml:native         true
# ocaml:native-tools   true
# ocaml:native-dynlink true
# ocaml:stubsdir       /home/opam/.opam/4.11/lib/ocaml/stublibs:/home/opam/.opam/4.11/lib/ocaml
# ocaml:preinstalled   false
# ocaml:compiler       4.11.2
2026-02-10 15:28.31 ---> saved as "c2de03b7ffece9aaffcfb0f34ed7690960a0b63f8b3bcb2f6d8009f29dbd15c1"

/home/opam: (env OPAMDOWNLOADJOBS 1)

/home/opam: (env OPAMERRLOGLEN 0)

/home/opam: (env OPAMPRECISETRACKING 1)

/home/opam: (env CI true)

/home/opam: (env OPAM_REPO_CI true)

/home/opam: (run (shell "rm -rf opam-repository/"))
2026-02-10 15:28.46 ---> saved as "f83d960cba26cdcd939c331b706efec2fc678d2d1fc8e6a9692607c05a16eeb2"

/home/opam: (copy (src .) (dst opam-repository/))
2026-02-10 15:29.07 ---> saved as "53495c50fa1b2fd1dfee38e9dcd1aff15232ee0334f1bc46455efd0ce0964db2"

/home/opam: (run (shell "opam repository set-url --strict default opam-repository/"))
[default] Initialised
2026-02-10 15:29.39 ---> saved as "f0ee9e51995285c89fa2dd7a823c24a5749d66a21c8b48c3e9d563fae2e78895"

/home/opam: (run (network host)
                 (shell "opam update --depexts || true"))
+ /usr/bin/sudo "apt-get" "update"
- Hit:1 http://deb.debian.org/debian trixie InRelease
- Get:2 http://deb.debian.org/debian trixie-updates InRelease [47.3 kB]
- Get:3 http://deb.debian.org/debian-security trixie-security InRelease [43.4 kB]
- Get:4 http://deb.debian.org/debian-security trixie-security/main amd64 Packages [104 kB]
- Fetched 195 kB in 0s (971 kB/s)
- Reading package lists...
- 
2026-02-10 15:29.42 ---> saved as "c5acee3bc89ce2a70f0078b3e6dae0491690a0cc696a0fc5fbdcf9998323ef3f"

/home/opam: (run (shell "opam pin add -k version -yn mirage-crypto-rng-mkernel.2.0.3 2.0.3"))
mirage-crypto-rng-mkernel is now pinned to version 2.0.3
2026-02-10 15:29.43 ---> saved as "9fb49a307f5a0fc90748264e40641601cedd0d06b40fa2f1fcfaea1b53aa44aa"

/home/opam: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
                 (network host)
                 (shell  "opam reinstall mirage-crypto-rng-mkernel.2.0.3;\
                        \n        res=$?;\
                        \n        test \"$res\" != 31 && exit \"$res\";\
                        \n        export OPAMCLI=2.0;\
                        \n        build_dir=$(opam var prefix)/.opam-switch/build;\
                        \n        failed=$(ls \"$build_dir\");\
                        \n        partial_fails=\"\";\
                        \n        for pkg in $failed; do\
                        \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
                        \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
                        \n          fi;\
                        \n          test \"$pkg\" != 'mirage-crypto-rng-mkernel.2.0.3' && partial_fails=\"$partial_fails $pkg\";\
                        \n        done;\
                        \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
                        \n        exit 1"))
mirage-crypto-rng-mkernel.2.0.3 is not installed. Install it? [Y/n] y
  * Incompatible packages:
    - (invariant) -> ocaml-base-compiler = 4.11.2
    - mirage-crypto-rng-mkernel -> ocaml >= 5.0.0 -> ocaml-variants < 5.5.1~
    You can temporarily relax the switch invariant with `--update-invariant'
  * Missing dependency:
    - mirage-crypto-rng-mkernel -> ocaml >= 5.0.0 -> ocaml-variants < 5.5.1~ -> ocaml-beta
    unmet availability conditions: 'enable-ocaml-beta-repository'
  * Missing dependency:
    - mirage-crypto-rng-mkernel -> ocaml >= 5.0.0 -> ocaml-variants >= 5.0.0~ -> system-msvc
    unmet availability conditions: 'os = "win32"'

No solution found, exiting
"/usr/bin/env" "bash" "-c" "opam reinstall mirage-crypto-rng-mkernel.2.0.3;
        res=$?;
        test "$res" != 31 && exit "$res";
        export OPAMCLI=2.0;
        build_dir=$(opam var prefix)/.opam-switch/build;
        failed=$(ls "$build_dir");
        partial_fails="";
        for pkg in $failed; do
          if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"debian-13\""; then
            echo "A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.";
          fi;
          test "$pkg" != 'mirage-crypto-rng-mkernel.2.0.3' && partial_fails="$partial_fails $pkg";
        done;
        test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}";
        exit 1" failed with exit status 20
2026-02-10 15:30.15: Job failed: Failed: Build failed
2026-02-10 15:30.15: Log analysis:
2026-02-10 15:30.15: >>> 
No solution found, exiting
 (score = 100)
2026-02-10 15:30.15: [SKIP] Package not available