(for PR #29368)

2026-02-10 15:43.17: New job: test dnssec.10.2.2 with mirage-crypto-ec.2.0.3, using opam dev
                              from https://github.com/ocaml/opam-repository.git#refs/pull/29368/head (66e177c9ccf11298b53a7c2c24dada57dd487d9b)
                              on debian-13-ocaml-4.14/amd64

To reproduce locally:

cd $(mktemp -d)
git clone --recursive "https://github.com/ocaml/opam-repository.git" && cd "opam-repository" && git fetch origin "refs/pull/29368/head" && git reset --hard 66e177c9
git fetch origin master
git merge --no-edit f4c12add9cacd610d7ec6cc9fcb057902ca0a0f6
cat > ../Dockerfile <<'END-OF-DOCKERFILE'
FROM ocaml/opam:debian-13-ocaml-4.14@sha256:04864ce35c9a53a8f91e1b6ddfe19ff405f2881ec1201cdca698239b3b811633
USER 1000:1000
WORKDIR /home/opam
RUN sudo ln -f /usr/bin/opam-dev /usr/bin/opam
RUN opam init --reinit -ni
RUN opam option solver=builtin-0install && opam config report
ENV OPAMDOWNLOADJOBS="1"
ENV OPAMERRLOGLEN="0"
ENV OPAMPRECISETRACKING="1"
ENV CI="true"
ENV OPAM_REPO_CI="true"
RUN rm -rf opam-repository/
COPY --chown=1000:1000 . opam-repository/
RUN opam repository set-url --strict default opam-repository/
RUN opam update --depexts || true
RUN opam pin add -k version -yn mirage-crypto-ec.2.0.3 2.0.3
RUN opam reinstall mirage-crypto-ec.2.0.3; \
    res=$?; \
    test "$res" != 31 && exit "$res"; \
    export OPAMCLI=2.0; \
    build_dir=$(opam var prefix)/.opam-switch/build; \
    failed=$(ls "$build_dir"); \
    partial_fails=""; \
    for pkg in $failed; do \
    if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"debian-13\""; then \
    echo "A package failed and has been disabled for CI using the 'x-ci-accept-failures' field."; \
    fi; \
    test "$pkg" != 'mirage-crypto-ec.2.0.3' && partial_fails="$partial_fails $pkg"; \
    done; \
    test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}"; \
    exit 1
RUN opam reinstall dnssec.10.2.2; \
    res=$?; \
    test "$res" != 31 && exit "$res"; \
    export OPAMCLI=2.0; \
    build_dir=$(opam var prefix)/.opam-switch/build; \
    failed=$(ls "$build_dir"); \
    partial_fails=""; \
    for pkg in $failed; do \
    if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"debian-13\""; then \
    echo "A package failed and has been disabled for CI using the 'x-ci-accept-failures' field."; \
    fi; \
    test "$pkg" != 'dnssec.10.2.2' && partial_fails="$partial_fails $pkg"; \
    done; \
    test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}"; \
    exit 1
RUN (opam reinstall --with-test dnssec.10.2.2) || true
RUN opam reinstall --with-test --verbose dnssec.10.2.2; \
    res=$?; \
    test "$res" != 31 && exit "$res"; \
    export OPAMCLI=2.0; \
    build_dir=$(opam var prefix)/.opam-switch/build; \
    failed=$(ls "$build_dir"); \
    partial_fails=""; \
    for pkg in $failed; do \
    if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"debian-13\""; then \
    echo "A package failed and has been disabled for CI using the 'x-ci-accept-failures' field."; \
    fi; \
    test "$pkg" != 'dnssec.10.2.2' && partial_fails="$partial_fails $pkg"; \
    done; \
    test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}"; \
    exit 1

END-OF-DOCKERFILE
docker build -f ../Dockerfile .

2026-02-10 15:43.17: Using cache hint "ocaml/opam:debian-13-ocaml-4.14@sha256:04864ce35c9a53a8f91e1b6ddfe19ff405f2881ec1201cdca698239b3b811633-mirage-crypto-ec.2.0.3-dnssec.10.2.2-66e177c9ccf11298b53a7c2c24dada57dd487d9b"
2026-02-10 15:43.17: Using OBuilder spec:
((from ocaml/opam:debian-13-ocaml-4.14@sha256:04864ce35c9a53a8f91e1b6ddfe19ff405f2881ec1201cdca698239b3b811633)
 (user (uid 1000) (gid 1000))
 (workdir /home/opam)
 (run (shell "sudo ln -f /usr/bin/opam-dev /usr/bin/opam"))
 (run (network host)
      (shell "opam init --reinit --config .opamrc-sandbox -ni"))
 (run (shell "opam option solver=builtin-0install && opam config report"))
 (env OPAMDOWNLOADJOBS 1)
 (env OPAMERRLOGLEN 0)
 (env OPAMPRECISETRACKING 1)
 (env CI true)
 (env OPAM_REPO_CI true)
 (run (shell "rm -rf opam-repository/"))
 (copy (src .) (dst opam-repository/))
 (run (shell "opam repository set-url --strict default opam-repository/"))
 (run (network host)
      (shell "opam update --depexts || true"))
 (run (shell "opam pin add -k version -yn mirage-crypto-ec.2.0.3 2.0.3"))
 (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
      (network host)
      (shell  "opam reinstall mirage-crypto-ec.2.0.3;\
             \n        res=$?;\
             \n        test \"$res\" != 31 && exit \"$res\";\
             \n        export OPAMCLI=2.0;\
             \n        build_dir=$(opam var prefix)/.opam-switch/build;\
             \n        failed=$(ls \"$build_dir\");\
             \n        partial_fails=\"\";\
             \n        for pkg in $failed; do\
             \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
             \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
             \n          fi;\
             \n          test \"$pkg\" != 'mirage-crypto-ec.2.0.3' && partial_fails=\"$partial_fails $pkg\";\
             \n        done;\
             \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
             \n        exit 1"))
 (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
      (network host)
      (shell  "opam reinstall dnssec.10.2.2;\
             \n        res=$?;\
             \n        test \"$res\" != 31 && exit \"$res\";\
             \n        export OPAMCLI=2.0;\
             \n        build_dir=$(opam var prefix)/.opam-switch/build;\
             \n        failed=$(ls \"$build_dir\");\
             \n        partial_fails=\"\";\
             \n        for pkg in $failed; do\
             \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
             \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
             \n          fi;\
             \n          test \"$pkg\" != 'dnssec.10.2.2' && partial_fails=\"$partial_fails $pkg\";\
             \n        done;\
             \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
             \n        exit 1"))
 (run (network host)
      (shell "(opam reinstall --with-test dnssec.10.2.2) || true"))
 (run (shell  "opam reinstall --with-test --verbose dnssec.10.2.2;\
             \n        res=$?;\
             \n        test \"$res\" != 31 && exit \"$res\";\
             \n        export OPAMCLI=2.0;\
             \n        build_dir=$(opam var prefix)/.opam-switch/build;\
             \n        failed=$(ls \"$build_dir\");\
             \n        partial_fails=\"\";\
             \n        for pkg in $failed; do\
             \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
             \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
             \n          fi;\
             \n          test \"$pkg\" != 'dnssec.10.2.2' && partial_fails=\"$partial_fails $pkg\";\
             \n        done;\
             \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
             \n        exit 1"))
)

2026-02-10 15:43.17: Waiting for resource in pool OCluster
2026-02-10 16:50.23: Waiting for worker…
2026-02-10 17:04.35: Got resource from pool OCluster
Building on clete
All commits already cached
Updating files:  55% (10812/19367)
Updating files:  56% (10846/19367)
Updating files:  57% (11040/19367)
Updating files:  58% (11233/19367)
Updating files:  59% (11427/19367)
Updating files:  60% (11621/19367)
Updating files:  61% (11814/19367)
Updating files:  62% (12008/19367)
Updating files:  63% (12202/19367)
Updating files:  64% (12395/19367)
Updating files:  65% (12589/19367)
Updating files:  66% (12783/19367)
Updating files:  67% (12976/19367)
Updating files:  68% (13170/19367)
Updating files:  69% (13364/19367)
Updating files:  70% (13557/19367)
Updating files:  71% (13751/19367)
Updating files:  72% (13945/19367)
Updating files:  73% (14138/19367)
Updating files:  74% (14332/19367)
Updating files:  75% (14526/19367)
Updating files:  76% (14719/19367)
Updating files:  77% (14913/19367)
Updating files:  78% (15107/19367)
Updating files:  79% (15300/19367)
Updating files:  80% (15494/19367)
Updating files:  81% (15688/19367)
Updating files:  82% (15881/19367)
Updating files:  83% (16075/19367)
Updating files:  84% (16269/19367)
Updating files:  85% (16462/19367)
Updating files:  86% (16656/19367)
Updating files:  87% (16850/19367)
Updating files:  88% (17043/19367)
Updating files:  89% (17237/19367)
Updating files:  90% (17431/19367)
Updating files:  91% (17624/19367)
Updating files:  92% (17818/19367)
Updating files:  93% (18012/19367)
Updating files:  94% (18205/19367)
Updating files:  95% (18399/19367)
Updating files:  96% (18593/19367)
Updating files:  97% (18786/19367)
Updating files:  98% (18980/19367)
Updating files:  99% (19174/19367)
Updating files: 100% (19367/19367)
Updating files: 100% (19367/19367), done.
HEAD is now at f4c12add9c Merge pull request #29362 from xvw/fix-primavera-ownership
Updating f4c12add9c..66e177c9cc
Fast-forward
 .../mirage-crypto-ec/mirage-crypto-ec.2.0.3/opam   | 62 ++++++++++++++++++++++
 .../mirage-crypto-pk/mirage-crypto-pk.2.0.3/opam   | 43 +++++++++++++++
 .../mirage-crypto-rng-miou-unix.2.0.3/opam         | 39 ++++++++++++++
 .../mirage-crypto-rng-mirage.2.0.3/opam            | 40 ++++++++++++++
 .../mirage-crypto-rng-mkernel.2.0.3/opam           | 38 +++++++++++++
 .../mirage-crypto-rng/mirage-crypto-rng.2.0.3/opam | 42 +++++++++++++++
 packages/mirage-crypto/mirage-crypto.2.0.3/opam    | 39 ++++++++++++++
 7 files changed, 303 insertions(+)
 create mode 100644 packages/mirage-crypto-ec/mirage-crypto-ec.2.0.3/opam
 create mode 100644 packages/mirage-crypto-pk/mirage-crypto-pk.2.0.3/opam
 create mode 100644 packages/mirage-crypto-rng-miou-unix/mirage-crypto-rng-miou-unix.2.0.3/opam
 create mode 100644 packages/mirage-crypto-rng-mirage/mirage-crypto-rng-mirage.2.0.3/opam
 create mode 100644 packages/mirage-crypto-rng-mkernel/mirage-crypto-rng-mkernel.2.0.3/opam
 create mode 100644 packages/mirage-crypto-rng/mirage-crypto-rng.2.0.3/opam
 create mode 100644 packages/mirage-crypto/mirage-crypto.2.0.3/opam

(from ocaml/opam:debian-13-ocaml-4.14@sha256:04864ce35c9a53a8f91e1b6ddfe19ff405f2881ec1201cdca698239b3b811633)
Unable to find image 'ocaml/opam:debian-13-ocaml-4.14@sha256:04864ce35c9a53a8f91e1b6ddfe19ff405f2881ec1201cdca698239b3b811633' locally
docker.io/ocaml/opam@sha256:04864ce35c9a53a8f91e1b6ddfe19ff405f2881ec1201cdca698239b3b811633: Pulling from ocaml/opam
ef235bf1a09a: Already exists
58b06b604a42: Already exists
b55f23c32d5a: Already exists
aa415425edb7: Already exists
c4f39ed7469c: Already exists
ca248a2fdd5e: Already exists
74109c509b2f: Already exists
18c2fa2271cb: Already exists
37d4d41661a2: Already exists
0b2f35f78814: Already exists
e65f29522a9a: Already exists
603a51b67573: Already exists
89b2faa02f16: Already exists
e5f11471afd4: Already exists
d7b0e5daa224: Already exists
7bec4d50f3b2: Already exists
d3a70ed71f1c: Already exists
90de03d9b27a: Already exists
a28f685cf2db: Already exists
5bb5e02041c7: Already exists
74f9af816199: Already exists
74c2f6cb4138: Already exists
4f4fb700ef54: Already exists
5ce9bdcb2952: Already exists
bf18c14e9b34: Already exists
bb4b67501479: Already exists
89e7ed0468f5: Already exists
640077527026: Already exists
363b481ff012: Already exists
437bd8bc3ce9: Already exists
2bcf3429833a: Already exists
3e5fe21454e9: Already exists
f3afb11ae499: Already exists
c3a5b88f5e5f: Already exists
124a1dc355b1: Already exists
0a9982d37abd: Already exists
9b8b724665ed: Already exists
f81507befe71: Already exists
7984e4546bf9: Already exists
3579b890ab6e: Already exists
e83772930ba8: Already exists
01bb609bb248: Pulling fs layer
7597cc56d4df: Pulling fs layer
9dbeadd31c61: Pulling fs layer
f436be41184a: Pulling fs layer
f436be41184a: Waiting
7597cc56d4df: Verifying Checksum
7597cc56d4df: Download complete
9dbeadd31c61: Download complete
f436be41184a: Verifying Checksum
f436be41184a: Download complete
01bb609bb248: Verifying Checksum
01bb609bb248: Download complete
01bb609bb248: Pull complete
7597cc56d4df: Pull complete
9dbeadd31c61: Pull complete
f436be41184a: Pull complete
Digest: sha256:04864ce35c9a53a8f91e1b6ddfe19ff405f2881ec1201cdca698239b3b811633
Status: Downloaded newer image for ocaml/opam@sha256:04864ce35c9a53a8f91e1b6ddfe19ff405f2881ec1201cdca698239b3b811633
2026-02-10 17:04.47 ---> using "d6079ab6cce1b58b34ac9b5ed11aa86b7980ab728c75f5a6ba9271e98dc1ac1c" from cache

/: (user (uid 1000) (gid 1000))

/: (workdir /home/opam)

/home/opam: (run (shell "sudo ln -f /usr/bin/opam-dev /usr/bin/opam"))
2026-02-10 17:04.47 ---> using "3c00c47f9d923b8bd6ffb2b949e4b9efd562ec1af5385aec1656ef10f01c4450" from cache

/home/opam: (run (network host)
                 (shell "opam init --reinit --config .opamrc-sandbox -ni"))
Configuring from /home/opam/.opamrc-sandbox, then /home/opam/.opamrc, and finally from built-in defaults.
Checking for available remotes: rsync and local, git.
  - you won't be able to use mercurial repositories unless you install the hg command on your system.
  - you won't be able to use darcs repositories unless you install the darcs command on your system.

This version of opam requires an update to the layout of /home/opam/.opam from version 2.0 to version 2.2, which can't be reverted.
You may want to back it up before going further.

Continue? [Y/n] y
Format upgrade done.

<><> Updating repositories ><><><><><><><><><><><><><><><><><><><><><><><><><><>
[default] Initialised
2026-02-10 17:04.47 ---> using "a92b73fe3956045426c13ac4a0686c952a1f3abe3c88ddfc7b2f3a6ed1e46736" from cache

/home/opam: (run (shell "opam option solver=builtin-0install && opam config report"))
Set to 'builtin-0install' the field solver in global configuration
# opam config report
# opam-version         2.5.0
# self-upgrade         no
# system               arch=x86_64 os=linux os-distribution=debian os-version=13
# solver               builtin-0install
# install-criteria     -changed,-count[avoid-version,solution]
# upgrade-criteria     -count[avoid-version,solution]
# jobs                 71
# repositories         1 (version-controlled)
# pinned               1 (version)
# current-switch       4.14
# invariant            ["ocaml-base-compiler" {= "4.14.2"}]
# compiler-packages    ocaml-base-compiler.4.14.2, ocaml-options-vanilla.1
# ocaml:native         true
# ocaml:native-tools   true
# ocaml:native-dynlink true
# ocaml:stubsdir       /home/opam/.opam/4.14/lib/ocaml/stublibs:/home/opam/.opam/4.14/lib/ocaml
# ocaml:preinstalled   false
# ocaml:compiler       4.14.2
2026-02-10 17:04.47 ---> using "cae9d187aa902d60c82d0c2150bbd9c0de1870c923aa0b0063ad5a25247acae5" from cache

/home/opam: (env OPAMDOWNLOADJOBS 1)

/home/opam: (env OPAMERRLOGLEN 0)

/home/opam: (env OPAMPRECISETRACKING 1)

/home/opam: (env CI true)

/home/opam: (env OPAM_REPO_CI true)

/home/opam: (run (shell "rm -rf opam-repository/"))
2026-02-10 17:04.47 ---> using "feb31a4f8ccbcfb9943e7338a457db5bc00688ce26b7db5634b111626cd4af24" from cache

/home/opam: (copy (src .) (dst opam-repository/))
2026-02-10 17:04.49 ---> using "93dc0d2e62909a5f361eb04763bd9b1dd4cbd969681f0a55c0fa2e0398250699" from cache

/home/opam: (run (shell "opam repository set-url --strict default opam-repository/"))
[default] Initialised
2026-02-10 17:04.49 ---> using "ace817da947834207eda7668afc774cff671da0a3c8ab7a8acd6201f539bc7a4" from cache

/home/opam: (run (network host)
                 (shell "opam update --depexts || true"))
+ /usr/bin/sudo "apt-get" "update"
- Hit:1 http://deb.debian.org/debian trixie InRelease
- Get:2 http://deb.debian.org/debian trixie-updates InRelease [47.3 kB]
- Get:3 http://deb.debian.org/debian-security trixie-security InRelease [43.4 kB]
- Get:4 http://deb.debian.org/debian-security trixie-security/main amd64 Packages [104 kB]
- Fetched 195 kB in 0s (1651 kB/s)
- Reading package lists...
- 
2026-02-10 17:04.49 ---> using "9068783cb9cfd1693be9d529972f64bd8fdf2f5eba4d594a06d9ab5b6b6ea546" from cache

/home/opam: (run (shell "opam pin add -k version -yn mirage-crypto-ec.2.0.3 2.0.3"))
mirage-crypto-ec is now pinned to version 2.0.3
2026-02-10 17:04.49 ---> using "8619201ed3f93ce82b24199b14029fd1a32fd36ebb32a37fea90e94a097f6559" from cache

/home/opam: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
                 (network host)
                 (shell  "opam reinstall mirage-crypto-ec.2.0.3;\
                        \n        res=$?;\
                        \n        test \"$res\" != 31 && exit \"$res\";\
                        \n        export OPAMCLI=2.0;\
                        \n        build_dir=$(opam var prefix)/.opam-switch/build;\
                        \n        failed=$(ls \"$build_dir\");\
                        \n        partial_fails=\"\";\
                        \n        for pkg in $failed; do\
                        \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
                        \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
                        \n          fi;\
                        \n          test \"$pkg\" != 'mirage-crypto-ec.2.0.3' && partial_fails=\"$partial_fails $pkg\";\
                        \n        done;\
                        \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
                        \n        exit 1"))
mirage-crypto-ec.2.0.3 is not installed. Install it? [Y/n] y
The following actions will be performed:
=== install 13 packages
  - install csexp             1.5.2          [required by dune-configurator]
  - install digestif          1.3.0          [required by mirage-crypto-ec]
  - install dune              3.21.0         [required by mirage-crypto-ec]
  - install dune-configurator 3.21.0         [required by mirage-crypto-ec]
  - install duration          0.2.1          [required by mirage-crypto-rng]
  - install eqaf              0.10           [required by mirage-crypto-ec]
  - install logs              0.10.0         [required by mirage-crypto-rng]
  - install mirage-crypto     2.0.3          [required by mirage-crypto-rng]
  - install mirage-crypto-ec  2.0.3 (pinned)
  - install mirage-crypto-rng 2.0.3          [required by mirage-crypto-ec]
  - install ocamlbuild        0.16.1         [required by logs]
  - install ocamlfind         1.9.8          [required by logs]
  - install topkg             1.1.1          [required by logs]

<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
-> retrieved csexp.1.5.2  (cached)
-> retrieved digestif.1.3.0  (cached)
-> retrieved dune.3.21.0, dune-configurator.3.21.0  (cached)
-> retrieved duration.0.2.1  (cached)
-> retrieved eqaf.0.10  (cached)
-> retrieved logs.0.10.0  (cached)
-> retrieved mirage-crypto.2.0.3, mirage-crypto-ec.2.0.3, mirage-crypto-rng.2.0.3  (cached)
-> retrieved ocamlbuild.0.16.1  (cached)
-> retrieved ocamlfind.1.9.8  (cached)
-> retrieved topkg.1.1.1  (cached)
-> installed ocamlfind.1.9.8
-> installed ocamlbuild.0.16.1
-> installed topkg.1.1.1
-> installed logs.0.10.0
-> installed dune.3.21.0
-> installed duration.0.2.1
-> installed csexp.1.5.2
-> installed eqaf.0.10
-> installed digestif.1.3.0
-> installed dune-configurator.3.21.0
-> installed mirage-crypto.2.0.3
-> installed mirage-crypto-rng.2.0.3
-> installed mirage-crypto-ec.2.0.3
Done.
# To update the current shell environment, run: eval $(opam env)
2026-02-10 17:04.49 ---> using "d92344777beefc79820ad9a0a0fe4de097d4f83523530d7af035b3e0cf778a0a" from cache

/home/opam: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
                 (network host)
                 (shell  "opam reinstall dnssec.10.2.2;\
                        \n        res=$?;\
                        \n        test \"$res\" != 31 && exit \"$res\";\
                        \n        export OPAMCLI=2.0;\
                        \n        build_dir=$(opam var prefix)/.opam-switch/build;\
                        \n        failed=$(ls \"$build_dir\");\
                        \n        partial_fails=\"\";\
                        \n        for pkg in $failed; do\
                        \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
                        \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
                        \n          fi;\
                        \n          test \"$pkg\" != 'dnssec.10.2.2' && partial_fails=\"$partial_fails $pkg\";\
                        \n        done;\
                        \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
                        \n        exit 1"))
dnssec.10.2.2 is not installed. Install it? [Y/n] y
The following actions will be performed:
=== recompile 3 packages
  - recompile logs              0.10.0         [uses fmt]
  - recompile mirage-crypto-ec  2.0.3 (pinned) [uses mirage-crypto-rng]
  - recompile mirage-crypto-rng 2.0.3          [uses logs]
=== install 19 packages
  - install   base64            3.5.2          [required by dns]
  - install   conf-gmp          5              [required by conf-gmp-powm-sec, zarith]
  - install   conf-gmp-powm-sec 4              [required by mirage-crypto-pk]
  - install   conf-pkg-config   4              [required by zarith]
  - install   dns               10.2.2         [required by dnssec]
  - install   dnssec            10.2.2
  - install   domain-name       0.5.0          [required by dnssec]
  - install   fmt               0.11.0         [required by dns]
  - install   gmap              0.3.0          [required by dns]
  - install   ipaddr            5.6.1          [required by dns]
  - install   lru               0.3.1          [required by dns]
  - install   macaddr           5.6.1          [required by ipaddr]
  - install   metrics           0.5.0          [required by dns]
  - install   mirage-crypto-pk  2.0.3          [required by dnssec]
  - install   ohex              0.2.0          [required by dns]
  - install   psq               0.2.1          [required by lru]
  - install   ptime             1.2.0          [required by dns]
  - install   seq               base           [required by psq]
  - install   zarith            1.14           [required by mirage-crypto-pk]

The following system packages will first need to be installed:
    libgmp-dev pkg-config

<><> Handling external dependencies <><><><><><><><><><><><><><><><><><><><><><>

opam believes some required external dependencies are missing. opam can:
> 1. Run apt-get to install them (may need root/sudo access)
  2. Display the recommended apt-get command and wait while you run it manually (e.g. in another terminal)
  3. Continue anyway, and, upon success, permanently register that this external dependency is present, but not detectable
  4. Abort the installation

[1/2/3/4] 1

+ /usr/bin/sudo "apt-get" "install" "-qq" "-yy" "libgmp-dev" "pkg-config"
- Selecting previously unselected package libgmpxx4ldbl:amd64.
- (Reading database ... 
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 20623 files and directories currently installed.)
- Preparing to unpack .../0-libgmpxx4ldbl_2%3a6.3.0+dfsg-3_amd64.deb ...
- Unpacking libgmpxx4ldbl:amd64 (2:6.3.0+dfsg-3) ...
- Selecting previously unselected package libgmp-dev:amd64.
- Preparing to unpack .../1-libgmp-dev_2%3a6.3.0+dfsg-3_amd64.deb ...
- Unpacking libgmp-dev:amd64 (2:6.3.0+dfsg-3) ...
- Selecting previously unselected package libpkgconf3:amd64.
- Preparing to unpack .../2-libpkgconf3_1.8.1-4_amd64.deb ...
- Unpacking libpkgconf3:amd64 (1.8.1-4) ...
- Selecting previously unselected package pkgconf-bin.
- Preparing to unpack .../3-pkgconf-bin_1.8.1-4_amd64.deb ...
- Unpacking pkgconf-bin (1.8.1-4) ...
- Selecting previously unselected package pkgconf:amd64.
- Preparing to unpack .../4-pkgconf_1.8.1-4_amd64.deb ...
- Unpacking pkgconf:amd64 (1.8.1-4) ...
- Selecting previously unselected package pkg-config:amd64.
- Preparing to unpack .../5-pkg-config_1.8.1-4_amd64.deb ...
- Unpacking pkg-config:amd64 (1.8.1-4) ...
- Setting up libpkgconf3:amd64 (1.8.1-4) ...
- Setting up libgmpxx4ldbl:amd64 (2:6.3.0+dfsg-3) ...
- Setting up pkgconf-bin (1.8.1-4) ...
- Setting up libgmp-dev:amd64 (2:6.3.0+dfsg-3) ...
- Setting up pkgconf:amd64 (1.8.1-4) ...
- Setting up pkg-config:amd64 (1.8.1-4) ...
- Processing triggers for libc-bin (2.41-12+deb13u1) ...

<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
-> retrieved base64.3.5.2  (cached)
-> retrieved conf-gmp.5  (cached)
-> retrieved conf-gmp-powm-sec.4  (cached)
-> installed conf-gmp.5
-> installed conf-pkg-config.4
-> retrieved dns.10.2.2, dnssec.10.2.2  (cached)
-> installed conf-gmp-powm-sec.4
-> retrieved domain-name.0.5.0  (cached)
-> retrieved fmt.0.11.0  (cached)
-> retrieved gmap.0.3.0  (cached)
-> retrieved ipaddr.5.6.1, macaddr.5.6.1  (cached)
-> retrieved logs.0.10.0  (cached)
-> retrieved lru.0.3.1  (cached)
-> retrieved metrics.0.5.0  (cached)
-> installed base64.3.5.2
-> installed domain-name.0.5.0
-> installed gmap.0.3.0
-> installed macaddr.5.6.1
-> retrieved mirage-crypto-ec.2.0.3, mirage-crypto-pk.2.0.3, mirage-crypto-rng.2.0.3  (cached)
-> retrieved ohex.0.2.0  (cached)
-> retrieved psq.0.2.1  (cached)
-> retrieved ptime.1.2.0  (cached)
-> retrieved seq.base  (cached)
-> installed seq.base
-> retrieved zarith.1.14  (cached)
-> installed ipaddr.5.6.1
-> removed   mirage-crypto-ec.2.0.3
-> removed   mirage-crypto-rng.2.0.3
-> removed   logs.0.10.0
-> installed fmt.0.11.0
-> installed ohex.0.2.0
-> installed psq.0.2.1
-> installed metrics.0.5.0
-> installed lru.0.3.1
-> installed logs.0.10.0
-> installed ptime.1.2.0
-> installed mirage-crypto-rng.2.0.3
-> installed dns.10.2.2
-> installed zarith.1.14
-> installed mirage-crypto-pk.2.0.3
-> installed mirage-crypto-ec.2.0.3
-> installed dnssec.10.2.2
Done.
# To update the current shell environment, run: eval $(opam env)
2026-02-10 17:05.32 ---> saved as "1c8f526fdfe29c5d5703e2a710d21e54485d0428a78048cc09b07d42b1812af2"

/home/opam: (run (network host)
                 (shell "(opam reinstall --with-test dnssec.10.2.2) || true"))
The following actions will be performed:
=== recompile 8 packages
  - recompile dns                10.2.2         [uses fmt]
  - recompile dnssec             10.2.2
  - recompile fmt                0.11.0         [uses cmdliner]
  - recompile logs               0.10.0         [uses cmdliner]
  - recompile metrics            0.5.0          [uses fmt]
  - recompile mirage-crypto-ec   2.0.3 (pinned) [uses mirage-crypto-rng]
  - recompile mirage-crypto-pk   2.0.3          [uses mirage-crypto-rng]
  - recompile mirage-crypto-rng  2.0.3          [uses logs]
=== install 7 packages
  - install   alcotest           1.9.1          [required by dnssec]
  - install   astring            0.8.5          [required by alcotest]
  - install   cmdliner           2.1.0          [required by alcotest]
  - install   ocaml-syntax-shims 1.0.0          [required by alcotest]
  - install   re                 1.14.0         [required by alcotest]
  - install   stdlib-shims       0.3.0          [required by alcotest]
  - install   uutf               1.0.4          [required by alcotest]

<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
-> retrieved alcotest.1.9.1  (https://opam.ocaml.org/cache)
-> retrieved astring.0.8.5  (https://opam.ocaml.org/cache)
-> retrieved cmdliner.2.1.0  (https://opam.ocaml.org/cache)
-> retrieved dns.10.2.2, dnssec.10.2.2  (https://opam.ocaml.org/cache)
-> retrieved fmt.0.11.0  (https://opam.ocaml.org/cache)
-> retrieved logs.0.10.0  (https://opam.ocaml.org/cache)
-> retrieved metrics.0.5.0  (https://opam.ocaml.org/cache)
-> retrieved mirage-crypto-ec.2.0.3, mirage-crypto-pk.2.0.3, mirage-crypto-rng.2.0.3  (https://github.com/mirage/mirage-crypto/releases/download/v2.0.3/mirage-crypto-2.0.3.tbz)
-> installed astring.0.8.5
-> retrieved ocaml-syntax-shims.1.0.0  (https://opam.ocaml.org/cache)
-> retrieved re.1.14.0  (https://opam.ocaml.org/cache)
-> retrieved stdlib-shims.0.3.0  (https://opam.ocaml.org/cache)
-> retrieved uutf.1.0.4  (https://opam.ocaml.org/cache)
-> installed stdlib-shims.0.3.0
-> installed ocaml-syntax-shims.1.0.0
-> installed re.1.14.0
-> removed   dnssec.10.2.2
-> removed   dns.10.2.2
-> removed   metrics.0.5.0
-> removed   mirage-crypto-ec.2.0.3
-> removed   mirage-crypto-pk.2.0.3
-> removed   mirage-crypto-rng.2.0.3
-> removed   logs.0.10.0
-> removed   fmt.0.11.0
-> installed cmdliner.2.1.0
-> installed uutf.1.0.4
-> installed fmt.0.11.0
-> installed metrics.0.5.0
-> installed logs.0.10.0
-> installed alcotest.1.9.1
-> installed mirage-crypto-rng.2.0.3
-> installed mirage-crypto-pk.2.0.3
-> installed dns.10.2.2
-> installed mirage-crypto-ec.2.0.3
-> installed dnssec.10.2.2
Done.
# To update the current shell environment, run: eval $(opam env)
2026-02-10 17:06.18 ---> saved as "c9b4da4806e3d62ddad1e91a930f3edec03f444d8c22b06c407e956ce2d02e0b"

/home/opam: (run (shell  "opam reinstall --with-test --verbose dnssec.10.2.2;\
                        \n        res=$?;\
                        \n        test \"$res\" != 31 && exit \"$res\";\
                        \n        export OPAMCLI=2.0;\
                        \n        build_dir=$(opam var prefix)/.opam-switch/build;\
                        \n        failed=$(ls \"$build_dir\");\
                        \n        partial_fails=\"\";\
                        \n        for pkg in $failed; do\
                        \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
                        \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
                        \n          fi;\
                        \n          test \"$pkg\" != 'dnssec.10.2.2' && partial_fails=\"$partial_fails $pkg\";\
                        \n        done;\
                        \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
                        \n        exit 1"))
The following actions will be performed:
=== recompile 1 package
  - recompile dnssec 10.2.2

<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
Processing  1/4: [dnssec.10.2.2: extract]
-> retrieved dnssec.10.2.2  (cached)
Processing  2/4: [dnssec: dune build]
+ /home/opam/.opam/opam-init/hooks/sandbox.sh "build" "dune" "build" "-p" "dnssec" "-j" "71" (CWD=/home/opam/.opam/4.14/.opam-switch/build/dnssec.10.2.2)
Processing  2/4: [dnssec: dune runtest]
+ /home/opam/.opam/opam-init/hooks/sandbox.sh "build" "dune" "runtest" "-p" "dnssec" "-j" "71" (CWD=/home/opam/.opam/4.14/.opam-switch/build/dnssec.10.2.2)
- (cd _build/default/test && ./test_dnssec.exe)
- Testing `DNSSEC tests'.
- This run has ID `EIPD6TAR'.
- 
-   [OK]          DNSSEC tests            0   root.
-   [OK]          DNSSEC tests            1   ns for ripe.net.
-   [OK]          DNSSEC tests            2   ds for afnoc.af.mil.
-   [OK]          DNSSEC tests            3   nxdomain for or (nsec).
-   [OK]          DNSSEC tests            4   nxdomain for zz (nsec).
-   [OK]          DNSSEC tests            5   nxdomain for aa (nsec).
-   [OK]          DNSSEC tests            6   nodata for a se (nsec).
-   [OK]          DNSSEC tests            7   nodata for DS a.se (nsec).
-   [OK]          DNSSEC tests            8   nxdomain for DS a.a.se (nsec).
-   [OK]          DNSSEC tests            9   nxdomain for DS b.a.se (nsec).
-   [OK]          DNSSEC tests           10   nodata for PTR isc.org (nsec).
-   [OK]          DNSSEC tests           11   nodomain for PTR doesntexist.isc....
-   [OK]          DNSSEC tests           12   nodata (cname) for DS trac.ietf.o...
-   [OK]          DNSSEC tests           13   NS trac.ietf.org (with cname).
-   [OK]          DNSSEC tests           14   nodata for CAA ietf.org (nsec).
-   [OK]          DNSSEC tests           15   wildcard match and cname for sure...
-   [OK]          DNSSEC tests           16   wildcard match and cname, nodata ...
-   [OK]          DNSSEC tests           17   nodata for a.de (nsec3).
-   [OK]          DNSSEC tests           18   nodomain for AAAA asd.house.gov (...
-   [OK]          RFC 4035 tests          0   MX (B1).
-   [OK]          RFC 4035 tests          1   NS (B1).
-   [OK]          RFC 4035 tests          2   A (B1).
-   [OK]          RFC 4035 tests          3   AAAA (B1).
-   [OK]          RFC 4035 tests          4   A NS1 (B1).
-   [OK]          RFC 4035 tests          5   A NS2 (B1).
-   [OK]          RFC 4035 tests          6   NXDOMAIN (B2).
-   [OK]          RFC 4035 tests          7   NODATA (B3).
-   [OK]          RFC 4035 tests          8   signed delegate (B4).
-   [OK]          RFC 4035 tests          9   unsigned delegate (B5).
-   [OK]          RFC 4035 tests         10   wildcard expansion (B6).
-   [OK]          RFC 4035 tests         11   wildcard nodata (B7).
-   [OK]          RFC 4035 tests         12   DS nodata (B8).
-   [OK]          RFC 5155 tests          0   name error (b1).
-   [OK]          RFC 5155 tests          1   no data error (b2).
-   [OK]          RFC 5155 tests          2   no data (ENT) error (b2.1).
-   [OK]          RFC 5155 tests          3   refer to unsigned zone (b3).
-   [OK]          RFC 5155 tests          4   wildcard (b4).
-   [OK]          RFC 5155 tests          5   wildcard no data (b5).
-   [OK]          RFC 5155 tests          6   DS no data (b6).
- 
- Full test results in `~/.opam/4.14/.opam-switch/build/dnssec.10.2.2/_build/default/test/_build/_tests/DNSSEC tests'.
- Test Successful in 0.075s. 39 tests run.
-> compiled  dnssec.10.2.2
-> removed   dnssec.10.2.2
-> installed dnssec.10.2.2
Done.
# To update the current shell environment, run: eval $(opam env)
2026-02-10 17:06.32 ---> saved as "96ceb98bc0d770634d8297bc3b2a5ca816dddb487c2937dcaa7acce31cdaa47b"
Job succeeded
2026-02-10 17:07.03: Job succeeded