(for PR #29368)

2026-02-10 15:24.04: New job: test mirage-crypto-rng.2.0.3, using opam dev
                              from https://github.com/ocaml/opam-repository.git#refs/pull/29368/head (66e177c9ccf11298b53a7c2c24dada57dd487d9b)
                              on opensuse-15.6-ocaml-4.14/amd64

To reproduce locally:

cd $(mktemp -d)
git clone --recursive "https://github.com/ocaml/opam-repository.git" && cd "opam-repository" && git fetch origin "refs/pull/29368/head" && git reset --hard 66e177c9
git fetch origin master
git merge --no-edit f4c12add9cacd610d7ec6cc9fcb057902ca0a0f6
cat > ../Dockerfile <<'END-OF-DOCKERFILE'
FROM ocaml/opam:opensuse-15.6-ocaml-4.14@sha256:f3077431a67a17e2dc9038e4a0cc7398c72940a21ecd3f4f8a1e24532ab72b48
USER 1000:1000
WORKDIR /home/opam
RUN sudo ln -f /usr/bin/opam-dev /usr/bin/opam
RUN opam init --reinit -ni
RUN opam option solver=builtin-0install && opam config report
ENV OPAMDOWNLOADJOBS="1"
ENV OPAMERRLOGLEN="0"
ENV OPAMPRECISETRACKING="1"
ENV CI="true"
ENV OPAM_REPO_CI="true"
RUN rm -rf opam-repository/
COPY --chown=1000:1000 . opam-repository/
RUN opam repository set-url --strict default opam-repository/
RUN opam update --depexts || true
RUN opam pin add -k version -yn mirage-crypto-rng.2.0.3 2.0.3
RUN opam reinstall mirage-crypto-rng.2.0.3; \
    res=$?; \
    test "$res" != 31 && exit "$res"; \
    export OPAMCLI=2.0; \
    build_dir=$(opam var prefix)/.opam-switch/build; \
    failed=$(ls "$build_dir"); \
    partial_fails=""; \
    for pkg in $failed; do \
    if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"opensuse-15.6\""; then \
    echo "A package failed and has been disabled for CI using the 'x-ci-accept-failures' field."; \
    fi; \
    test "$pkg" != 'mirage-crypto-rng.2.0.3' && partial_fails="$partial_fails $pkg"; \
    done; \
    test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}"; \
    exit 1
RUN (opam reinstall --with-test mirage-crypto-rng.2.0.3) || true
RUN opam reinstall --with-test --verbose mirage-crypto-rng.2.0.3; \
    res=$?; \
    test "$res" != 31 && exit "$res"; \
    export OPAMCLI=2.0; \
    build_dir=$(opam var prefix)/.opam-switch/build; \
    failed=$(ls "$build_dir"); \
    partial_fails=""; \
    for pkg in $failed; do \
    if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"opensuse-15.6\""; then \
    echo "A package failed and has been disabled for CI using the 'x-ci-accept-failures' field."; \
    fi; \
    test "$pkg" != 'mirage-crypto-rng.2.0.3' && partial_fails="$partial_fails $pkg"; \
    done; \
    test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}"; \
    exit 1

END-OF-DOCKERFILE
docker build -f ../Dockerfile .

2026-02-10 15:24.04: Using cache hint "ocaml/opam:opensuse-15.6-ocaml-4.14@sha256:f3077431a67a17e2dc9038e4a0cc7398c72940a21ecd3f4f8a1e24532ab72b48-mirage-crypto-rng.2.0.3-66e177c9ccf11298b53a7c2c24dada57dd487d9b"
2026-02-10 15:24.04: Using OBuilder spec:
((from ocaml/opam:opensuse-15.6-ocaml-4.14@sha256:f3077431a67a17e2dc9038e4a0cc7398c72940a21ecd3f4f8a1e24532ab72b48)
 (user (uid 1000) (gid 1000))
 (workdir /home/opam)
 (run (shell "sudo ln -f /usr/bin/opam-dev /usr/bin/opam"))
 (run (network host)
      (shell "opam init --reinit --config .opamrc-sandbox -ni"))
 (run (shell "opam option solver=builtin-0install && opam config report"))
 (env OPAMDOWNLOADJOBS 1)
 (env OPAMERRLOGLEN 0)
 (env OPAMPRECISETRACKING 1)
 (env CI true)
 (env OPAM_REPO_CI true)
 (run (shell "rm -rf opam-repository/"))
 (copy (src .) (dst opam-repository/))
 (run (shell "opam repository set-url --strict default opam-repository/"))
 (run (network host)
      (shell "opam update --depexts || true"))
 (run (shell "opam pin add -k version -yn mirage-crypto-rng.2.0.3 2.0.3"))
 (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
      (network host)
      (shell  "opam reinstall mirage-crypto-rng.2.0.3;\
             \n        res=$?;\
             \n        test \"$res\" != 31 && exit \"$res\";\
             \n        export OPAMCLI=2.0;\
             \n        build_dir=$(opam var prefix)/.opam-switch/build;\
             \n        failed=$(ls \"$build_dir\");\
             \n        partial_fails=\"\";\
             \n        for pkg in $failed; do\
             \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"opensuse-15.6\\\"\"; then\
             \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
             \n          fi;\
             \n          test \"$pkg\" != 'mirage-crypto-rng.2.0.3' && partial_fails=\"$partial_fails $pkg\";\
             \n        done;\
             \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
             \n        exit 1"))
 (run (network host)
      (shell "(opam reinstall --with-test mirage-crypto-rng.2.0.3) || true"))
 (run (shell  "opam reinstall --with-test --verbose mirage-crypto-rng.2.0.3;\
             \n        res=$?;\
             \n        test \"$res\" != 31 && exit \"$res\";\
             \n        export OPAMCLI=2.0;\
             \n        build_dir=$(opam var prefix)/.opam-switch/build;\
             \n        failed=$(ls \"$build_dir\");\
             \n        partial_fails=\"\";\
             \n        for pkg in $failed; do\
             \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"opensuse-15.6\\\"\"; then\
             \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
             \n          fi;\
             \n          test \"$pkg\" != 'mirage-crypto-rng.2.0.3' && partial_fails=\"$partial_fails $pkg\";\
             \n        done;\
             \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
             \n        exit 1"))
)

2026-02-10 15:24.04: Waiting for resource in pool OCluster
2026-02-10 15:32.19: Waiting for worker…
2026-02-10 15:35.50: Got resource from pool OCluster
Building on asteria.caelum.ci.dev
All commits already cached
HEAD is now at f4c12add9c Merge pull request #29362 from xvw/fix-primavera-ownership
Updating f4c12add9c..66e177c9cc
Fast-forward
 .../mirage-crypto-ec/mirage-crypto-ec.2.0.3/opam   | 62 ++++++++++++++++++++++
 .../mirage-crypto-pk/mirage-crypto-pk.2.0.3/opam   | 43 +++++++++++++++
 .../mirage-crypto-rng-miou-unix.2.0.3/opam         | 39 ++++++++++++++
 .../mirage-crypto-rng-mirage.2.0.3/opam            | 40 ++++++++++++++
 .../mirage-crypto-rng-mkernel.2.0.3/opam           | 38 +++++++++++++
 .../mirage-crypto-rng/mirage-crypto-rng.2.0.3/opam | 42 +++++++++++++++
 packages/mirage-crypto/mirage-crypto.2.0.3/opam    | 39 ++++++++++++++
 7 files changed, 303 insertions(+)
 create mode 100644 packages/mirage-crypto-ec/mirage-crypto-ec.2.0.3/opam
 create mode 100644 packages/mirage-crypto-pk/mirage-crypto-pk.2.0.3/opam
 create mode 100644 packages/mirage-crypto-rng-miou-unix/mirage-crypto-rng-miou-unix.2.0.3/opam
 create mode 100644 packages/mirage-crypto-rng-mirage/mirage-crypto-rng-mirage.2.0.3/opam
 create mode 100644 packages/mirage-crypto-rng-mkernel/mirage-crypto-rng-mkernel.2.0.3/opam
 create mode 100644 packages/mirage-crypto-rng/mirage-crypto-rng.2.0.3/opam
 create mode 100644 packages/mirage-crypto/mirage-crypto.2.0.3/opam

(from ocaml/opam:opensuse-15.6-ocaml-4.14@sha256:f3077431a67a17e2dc9038e4a0cc7398c72940a21ecd3f4f8a1e24532ab72b48)
2026-02-10 15:36.26 ---> using "86f9d27920f24f7829035e74a201e5bf92075b21d91069281a0eb4c8a056fa12" from cache

/: (user (uid 1000) (gid 1000))

/: (workdir /home/opam)

/home/opam: (run (shell "sudo ln -f /usr/bin/opam-dev /usr/bin/opam"))
2026-02-10 15:36.26 ---> using "e8d0ad9236f24d1d101a8dba2d0d1041c07ed98fe2c6f8218fab62e53ca4a215" from cache

/home/opam: (run (network host)
                 (shell "opam init --reinit --config .opamrc-sandbox -ni"))
Configuring from /home/opam/.opamrc-sandbox, then /home/opam/.opamrc, and finally from built-in defaults.
Checking for available remotes: rsync and local, git.
  - you won't be able to use mercurial repositories unless you install the hg command on your system.
  - you won't be able to use darcs repositories unless you install the darcs command on your system.

This version of opam requires an update to the layout of /home/opam/.opam from version 2.0 to version 2.2, which can't be reverted.
You may want to back it up before going further.

Continue? [Y/n] y
Format upgrade done.

<><> Updating repositories ><><><><><><><><><><><><><><><><><><><><><><><><><><>
[default] Initialised
2026-02-10 15:36.26 ---> using "a3fdb20745f30cf29f6b47f92cf905cb5f08c9193418ceae5023c96e4988a8aa" from cache

/home/opam: (run (shell "opam option solver=builtin-0install && opam config report"))
Set to 'builtin-0install' the field solver in global configuration
# opam config report
# opam-version         2.5.0
# self-upgrade         no
# system               arch=x86_64 os=linux os-distribution=opensuse-leap os-version=15.6
# solver               builtin-0install
# install-criteria     -changed,-count[avoid-version,solution]
# upgrade-criteria     -count[avoid-version,solution]
# jobs                 255
# repositories         1 (version-controlled)
# pinned               1 (version)
# current-switch       4.14
# invariant            ["ocaml-base-compiler" {= "4.14.2"}]
# compiler-packages    ocaml-base-compiler.4.14.2, ocaml-options-vanilla.1
# ocaml:native         true
# ocaml:native-tools   true
# ocaml:native-dynlink true
# ocaml:stubsdir       /home/opam/.opam/4.14/lib/ocaml/stublibs:/home/opam/.opam/4.14/lib/ocaml
# ocaml:preinstalled   false
# ocaml:compiler       4.14.2
2026-02-10 15:36.26 ---> using "62b897e9b4c21e368c4dde4dd6e9fe51bf76e875019444ce017b792494949bfe" from cache

/home/opam: (env OPAMDOWNLOADJOBS 1)

/home/opam: (env OPAMERRLOGLEN 0)

/home/opam: (env OPAMPRECISETRACKING 1)

/home/opam: (env CI true)

/home/opam: (env OPAM_REPO_CI true)

/home/opam: (run (shell "rm -rf opam-repository/"))
2026-02-10 15:36.26 ---> using "f99349d66575d3d8e74b89f14fd4f29aa2bef511909e80b2b9f8ce42f5d5b0b3" from cache

/home/opam: (copy (src .) (dst opam-repository/))
2026-02-10 15:36.27 ---> using "acc3f1e61e90a43ccc4e5e5f4f3efb48f0cb3374f40434c6c5874c884a56defa" from cache

/home/opam: (run (shell "opam repository set-url --strict default opam-repository/"))
[default] Initialised
2026-02-10 15:36.45 ---> saved as "6c22127d4dd4f4a0a76458251f5b64fbbc31ca36da30716275d430be5a6b3c43"

/home/opam: (run (network host)
                 (shell "opam update --depexts || true"))
+ /usr/bin/sudo "zypper" "--non-interactive" "refresh"
- Retrieving repository 'Update repository of openSUSE Backports' metadata [..
- Looking for gpg keys in repository Update repository of openSUSE Backports.
-   gpgkey=http://download.opensuse.org/update/leap/15.6/backports/repodata/repomd.xml.key
- ....
- ....
- ....
- ....
- .............
- .done]
- Building repository 'Update repository of openSUSE Backports' cache [....done]
- Retrieving repository 'Update repository with updates from SUSE Linux Enterprise 15' metadata [..
- Looking for gpg keys in repository Update repository with updates from SUSE Linux Enterprise 15.
-   gpgkey=http://download.opensuse.org/update/leap/15.6/sle/repodata/repomd.xml.key
- ......
- ....
- ....
- ....
- ....
- ....
- ............
- .................
- ..........
- ..........
- ..........
- .........
- ................done]
- Building repository 'Update repository with updates from SUSE Linux Enterprise 15' cache [..
- ..done]
- Retrieving repository 'Main Update Repository' metadata [..
- Looking for gpg keys in repository Main Update Repository.
-   gpgkey=http://download.opensuse.org/update/leap/15.6/oss/repodata/repomd.xml.key
- ..
- .....
- ....
- ....
- ....
- ....
- ..............done]
- Building repository 'Main Update Repository' cache [....done]
- Repository 'Update Repository (Non-Oss)' is up to date.
- Repository 'Non-OSS Repository' is up to date.
- Repository 'Main Repository' is up to date.
- All repositories have been refreshed.
2026-02-10 15:37.27 ---> saved as "5fd1bb16c8b3e421420aec66e0d909b1921ec05c55bcc7f7daffb305f404ec15"

/home/opam: (run (shell "opam pin add -k version -yn mirage-crypto-rng.2.0.3 2.0.3"))
mirage-crypto-rng is now pinned to version 2.0.3
2026-02-10 15:37.28 ---> saved as "b9d725313e65254896275521a3c5c4bb6a19c5028f7d289b47a284103e8900d8"

/home/opam: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
                 (network host)
                 (shell  "opam reinstall mirage-crypto-rng.2.0.3;\
                        \n        res=$?;\
                        \n        test \"$res\" != 31 && exit \"$res\";\
                        \n        export OPAMCLI=2.0;\
                        \n        build_dir=$(opam var prefix)/.opam-switch/build;\
                        \n        failed=$(ls \"$build_dir\");\
                        \n        partial_fails=\"\";\
                        \n        for pkg in $failed; do\
                        \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"opensuse-15.6\\\"\"; then\
                        \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
                        \n          fi;\
                        \n          test \"$pkg\" != 'mirage-crypto-rng.2.0.3' && partial_fails=\"$partial_fails $pkg\";\
                        \n        done;\
                        \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
                        \n        exit 1"))
mirage-crypto-rng.2.0.3 is not installed. Install it? [Y/n] y
The following actions will be performed:
=== install 12 packages
  - install csexp             1.5.2          [required by dune-configurator]
  - install digestif          1.3.0          [required by mirage-crypto-rng]
  - install dune              3.21.0         [required by mirage-crypto-rng]
  - install dune-configurator 3.21.0         [required by mirage-crypto-rng]
  - install duration          0.2.1          [required by mirage-crypto-rng]
  - install eqaf              0.10           [required by digestif, mirage-crypto]
  - install logs              0.10.0         [required by mirage-crypto-rng]
  - install mirage-crypto     2.0.3          [required by mirage-crypto-rng]
  - install mirage-crypto-rng 2.0.3 (pinned)
  - install ocamlbuild        0.16.1         [required by logs]
  - install ocamlfind         1.9.8          [required by logs]
  - install topkg             1.1.1          [required by logs]

<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
-> retrieved csexp.1.5.2  (cached)
-> retrieved digestif.1.3.0  (cached)
-> retrieved dune.3.21.0, dune-configurator.3.21.0  (cached)
-> retrieved duration.0.2.1  (cached)
-> retrieved eqaf.0.10  (cached)
-> retrieved logs.0.10.0  (cached)
-> retrieved mirage-crypto.2.0.3, mirage-crypto-rng.2.0.3  (cached)
-> retrieved ocamlbuild.0.16.1  (cached)
-> retrieved ocamlfind.1.9.8  (cached)
-> retrieved topkg.1.1.1  (cached)
-> installed ocamlfind.1.9.8
-> installed ocamlbuild.0.16.1
-> installed topkg.1.1.1
-> installed logs.0.10.0
-> installed dune.3.21.0
-> installed duration.0.2.1
-> installed csexp.1.5.2
-> installed eqaf.0.10
-> installed digestif.1.3.0
-> installed dune-configurator.3.21.0
-> installed mirage-crypto.2.0.3
-> installed mirage-crypto-rng.2.0.3
Done.
# To update the current shell environment, run: eval $(opam env)
2026-02-10 15:38.02 ---> saved as "dc1bee6898c9a315d17eed7c5b0f245c3521ce035318e3bd59bce6e25bfe66d9"

/home/opam: (run (network host)
                 (shell "(opam reinstall --with-test mirage-crypto-rng.2.0.3) || true"))
The following actions will be performed:
=== recompile 1 package
  - recompile mirage-crypto-rng 2.0.3 (pinned)
=== install 5 packages
  - install   ohex              0.2.0          [required by mirage-crypto-rng]
  - install   ounit2            2.2.7          [required by mirage-crypto-rng]
  - install   randomconv        0.2.0          [required by mirage-crypto-rng]
  - install   seq               base           [required by ounit2]
  - install   stdlib-shims      0.3.0          [required by ounit2]

<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
-> retrieved ohex.0.2.0  (https://opam.ocaml.org/cache)
-> retrieved ounit2.2.2.7  (https://opam.ocaml.org/cache)
-> retrieved randomconv.0.2.0  (https://opam.ocaml.org/cache)
-> installed ohex.0.2.0
-> retrieved seq.base  (2 extra sources)
-> retrieved seq.base  (2 extra sources)
-> installed seq.base
-> retrieved stdlib-shims.0.3.0  (https://opam.ocaml.org/cache)
-> installed randomconv.0.2.0
-> removed   mirage-crypto-rng.2.0.3
-> installed stdlib-shims.0.3.0
-> installed ounit2.2.2.7
-> installed mirage-crypto-rng.2.0.3
Done.
# To update the current shell environment, run: eval $(opam env)
2026-02-10 15:38.08 ---> saved as "19222497c7f2079fde1d05e2d8697d2319d3206aa5fb6936331b8600e09022c9"

/home/opam: (run (shell  "opam reinstall --with-test --verbose mirage-crypto-rng.2.0.3;\
                        \n        res=$?;\
                        \n        test \"$res\" != 31 && exit \"$res\";\
                        \n        export OPAMCLI=2.0;\
                        \n        build_dir=$(opam var prefix)/.opam-switch/build;\
                        \n        failed=$(ls \"$build_dir\");\
                        \n        partial_fails=\"\";\
                        \n        for pkg in $failed; do\
                        \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"opensuse-15.6\\\"\"; then\
                        \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
                        \n          fi;\
                        \n          test \"$pkg\" != 'mirage-crypto-rng.2.0.3' && partial_fails=\"$partial_fails $pkg\";\
                        \n        done;\
                        \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
                        \n        exit 1"))
The following actions will be performed:
=== recompile 1 package
  - recompile mirage-crypto-rng 2.0.3 (pinned)

<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
Processing  2/4: [mirage-crypto-rng: dune build]
+ /home/opam/.opam/opam-init/hooks/sandbox.sh "build" "dune" "build" "-p" "mirage-crypto-rng" "-j" "255" (CWD=/home/opam/.opam/4.14/.opam-switch/build/mirage-crypto-rng.2.0.3)
Processing  2/4: [mirage-crypto-rng: dune runtest]
+ /home/opam/.opam/opam-init/hooks/sandbox.sh "build" "dune" "runtest" "-p" "mirage-crypto-rng" "-j" "255" (CWD=/home/opam/.opam/4.14/.opam-switch/build/mirage-crypto-rng.2.0.3)
- (cd _build/default/tests && ./test_entropy.exe)
- test entropy OK
- (cd _build/default/tests && ./test_random_runner.exe)
- .........
- Ran: 9 tests in: 0.11 seconds.
- OK
-> compiled  mirage-crypto-rng.2.0.3
-> removed   mirage-crypto-rng.2.0.3
-> installed mirage-crypto-rng.2.0.3
Done.
# To update the current shell environment, run: eval $(opam env)
2026-02-10 15:38.12 ---> saved as "baf6fe011df12242d20f0a5004865a973c7174d24388471df75069b06ccea843"
Job succeeded
2026-02-10 15:39.02: Job succeeded