(for PR #29368)

2026-02-10 15:24.05: New job: test mirage-crypto.2.0.3, using opam dev
                              from https://github.com/ocaml/opam-repository.git#refs/pull/29368/head (66e177c9ccf11298b53a7c2c24dada57dd487d9b)
                              on debian-13-ocaml-5.4/arm32v7

To reproduce locally:

cd $(mktemp -d)
git clone --recursive "https://github.com/ocaml/opam-repository.git" && cd "opam-repository" && git fetch origin "refs/pull/29368/head" && git reset --hard 66e177c9
git fetch origin master
git merge --no-edit f4c12add9cacd610d7ec6cc9fcb057902ca0a0f6
cat > ../Dockerfile <<'END-OF-DOCKERFILE'
FROM ocaml/opam:debian-13-ocaml-5.4@sha256:628d83c867e791f319d5ec6bd52c7ce2bd581e34e823ea51810a8afa91590ba4
SHELL [ "/usr/bin/linux32", "/bin/sh", "-c" ]
USER 1000:1000
WORKDIR /home/opam
RUN sudo ln -f /usr/bin/opam-dev /usr/bin/opam
RUN opam init --reinit -ni
RUN opam option solver=builtin-0install && opam config report
ENV OPAMDOWNLOADJOBS="1"
ENV OPAMERRLOGLEN="0"
ENV OPAMPRECISETRACKING="1"
ENV CI="true"
ENV OPAM_REPO_CI="true"
RUN rm -rf opam-repository/
COPY --chown=1000:1000 . opam-repository/
RUN opam repository set-url --strict default opam-repository/
RUN opam update --depexts || true
RUN opam pin add -k version -yn mirage-crypto.2.0.3 2.0.3
RUN opam reinstall mirage-crypto.2.0.3; \
    res=$?; \
    test "$res" != 31 && exit "$res"; \
    export OPAMCLI=2.0; \
    build_dir=$(opam var prefix)/.opam-switch/build; \
    failed=$(ls "$build_dir"); \
    partial_fails=""; \
    for pkg in $failed; do \
    if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"debian-13\""; then \
    echo "A package failed and has been disabled for CI using the 'x-ci-accept-failures' field."; \
    fi; \
    test "$pkg" != 'mirage-crypto.2.0.3' && partial_fails="$partial_fails $pkg"; \
    done; \
    test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}"; \
    exit 1
RUN (opam reinstall --with-test mirage-crypto.2.0.3) || true
RUN opam reinstall --with-test --verbose mirage-crypto.2.0.3; \
    res=$?; \
    test "$res" != 31 && exit "$res"; \
    export OPAMCLI=2.0; \
    build_dir=$(opam var prefix)/.opam-switch/build; \
    failed=$(ls "$build_dir"); \
    partial_fails=""; \
    for pkg in $failed; do \
    if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"debian-13\""; then \
    echo "A package failed and has been disabled for CI using the 'x-ci-accept-failures' field."; \
    fi; \
    test "$pkg" != 'mirage-crypto.2.0.3' && partial_fails="$partial_fails $pkg"; \
    done; \
    test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}"; \
    exit 1

END-OF-DOCKERFILE
docker build -f ../Dockerfile .

2026-02-10 15:24.05: Using cache hint "ocaml/opam:debian-13-ocaml-5.4@sha256:628d83c867e791f319d5ec6bd52c7ce2bd581e34e823ea51810a8afa91590ba4-mirage-crypto.2.0.3-66e177c9ccf11298b53a7c2c24dada57dd487d9b"
2026-02-10 15:24.05: Using OBuilder spec:
((from ocaml/opam:debian-13-ocaml-5.4@sha256:628d83c867e791f319d5ec6bd52c7ce2bd581e34e823ea51810a8afa91590ba4)
 (shell /usr/bin/linux32 /bin/sh -c)
 (user (uid 1000) (gid 1000))
 (workdir /home/opam)
 (run (shell "sudo ln -f /usr/bin/opam-dev /usr/bin/opam"))
 (run (network host)
      (shell "opam init --reinit --config .opamrc-sandbox -ni"))
 (run (shell "opam option solver=builtin-0install && opam config report"))
 (env OPAMDOWNLOADJOBS 1)
 (env OPAMERRLOGLEN 0)
 (env OPAMPRECISETRACKING 1)
 (env CI true)
 (env OPAM_REPO_CI true)
 (run (shell "rm -rf opam-repository/"))
 (copy (src .) (dst opam-repository/))
 (run (shell "opam repository set-url --strict default opam-repository/"))
 (run (network host)
      (shell "opam update --depexts || true"))
 (run (shell "opam pin add -k version -yn mirage-crypto.2.0.3 2.0.3"))
 (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
      (network host)
      (shell  "opam reinstall mirage-crypto.2.0.3;\
             \n        res=$?;\
             \n        test \"$res\" != 31 && exit \"$res\";\
             \n        export OPAMCLI=2.0;\
             \n        build_dir=$(opam var prefix)/.opam-switch/build;\
             \n        failed=$(ls \"$build_dir\");\
             \n        partial_fails=\"\";\
             \n        for pkg in $failed; do\
             \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
             \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
             \n          fi;\
             \n          test \"$pkg\" != 'mirage-crypto.2.0.3' && partial_fails=\"$partial_fails $pkg\";\
             \n        done;\
             \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
             \n        exit 1"))
 (run (network host)
      (shell "(opam reinstall --with-test mirage-crypto.2.0.3) || true"))
 (run (shell  "opam reinstall --with-test --verbose mirage-crypto.2.0.3;\
             \n        res=$?;\
             \n        test \"$res\" != 31 && exit \"$res\";\
             \n        export OPAMCLI=2.0;\
             \n        build_dir=$(opam var prefix)/.opam-switch/build;\
             \n        failed=$(ls \"$build_dir\");\
             \n        partial_fails=\"\";\
             \n        for pkg in $failed; do\
             \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
             \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
             \n          fi;\
             \n          test \"$pkg\" != 'mirage-crypto.2.0.3' && partial_fails=\"$partial_fails $pkg\";\
             \n        done;\
             \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
             \n        exit 1"))
)

2026-02-10 15:24.05: Waiting for resource in pool OCluster
2026-02-10 15:24.07: Waiting for worker…
2026-02-10 15:25.46: Got resource from pool OCluster
Building on molpadia.caelum.ci.dev
All commits already cached
Updating files:  73% (14180/19367)
Updating files:  74% (14332/19367)
Updating files:  75% (14526/19367)
Updating files:  76% (14719/19367)
Updating files:  77% (14913/19367)
Updating files:  78% (15107/19367)
Updating files:  79% (15300/19367)
Updating files:  80% (15494/19367)
Updating files:  81% (15688/19367)
Updating files:  82% (15881/19367)
Updating files:  83% (16075/19367)
Updating files:  84% (16269/19367)
Updating files:  85% (16462/19367)
Updating files:  86% (16656/19367)
Updating files:  87% (16850/19367)
Updating files:  88% (17043/19367)
Updating files:  89% (17237/19367)
Updating files:  90% (17431/19367)
Updating files:  91% (17624/19367)
Updating files:  92% (17818/19367)
Updating files:  93% (18012/19367)
Updating files:  94% (18205/19367)
Updating files:  95% (18399/19367)
Updating files:  96% (18593/19367)
Updating files:  97% (18786/19367)
Updating files:  98% (18980/19367)
Updating files:  99% (19174/19367)
Updating files: 100% (19367/19367)
Updating files: 100% (19367/19367), done.
HEAD is now at f4c12add9c Merge pull request #29362 from xvw/fix-primavera-ownership
Updating f4c12add9c..66e177c9cc
Fast-forward
 .../mirage-crypto-ec/mirage-crypto-ec.2.0.3/opam   | 62 ++++++++++++++++++++++
 .../mirage-crypto-pk/mirage-crypto-pk.2.0.3/opam   | 43 +++++++++++++++
 .../mirage-crypto-rng-miou-unix.2.0.3/opam         | 39 ++++++++++++++
 .../mirage-crypto-rng-mirage.2.0.3/opam            | 40 ++++++++++++++
 .../mirage-crypto-rng-mkernel.2.0.3/opam           | 38 +++++++++++++
 .../mirage-crypto-rng/mirage-crypto-rng.2.0.3/opam | 42 +++++++++++++++
 packages/mirage-crypto/mirage-crypto.2.0.3/opam    | 39 ++++++++++++++
 7 files changed, 303 insertions(+)
 create mode 100644 packages/mirage-crypto-ec/mirage-crypto-ec.2.0.3/opam
 create mode 100644 packages/mirage-crypto-pk/mirage-crypto-pk.2.0.3/opam
 create mode 100644 packages/mirage-crypto-rng-miou-unix/mirage-crypto-rng-miou-unix.2.0.3/opam
 create mode 100644 packages/mirage-crypto-rng-mirage/mirage-crypto-rng-mirage.2.0.3/opam
 create mode 100644 packages/mirage-crypto-rng-mkernel/mirage-crypto-rng-mkernel.2.0.3/opam
 create mode 100644 packages/mirage-crypto-rng/mirage-crypto-rng.2.0.3/opam
 create mode 100644 packages/mirage-crypto/mirage-crypto.2.0.3/opam

(from ocaml/opam:debian-13-ocaml-5.4@sha256:628d83c867e791f319d5ec6bd52c7ce2bd581e34e823ea51810a8afa91590ba4)
Unable to find image 'ocaml/opam:debian-13-ocaml-5.4@sha256:628d83c867e791f319d5ec6bd52c7ce2bd581e34e823ea51810a8afa91590ba4' locally
docker.io/ocaml/opam@sha256:628d83c867e791f319d5ec6bd52c7ce2bd581e34e823ea51810a8afa91590ba4: Pulling from ocaml/opam
e712004ad7e7: Already exists
f4a2e9816aad: Already exists
b14c4857e1a9: Already exists
9c930e2cb2ec: Already exists
19df24c44b68: Already exists
2a9173c17dde: Already exists
f05d30e027df: Already exists
847f46d86916: Already exists
3eeb3101b6ee: Already exists
5da418d5a6de: Already exists
462770ac6080: Already exists
aa0023295cef: Already exists
257f31c177b1: Already exists
336791f88cff: Already exists
be89abc29155: Already exists
f77baff82d34: Already exists
907bc802738d: Already exists
907bc802738d: Already exists
81c246c404f9: Already exists
b6e475e3854d: Already exists
fef9953c549d: Already exists
38fcba0da00a: Already exists
4f4fb700ef54: Already exists
03880e84f14b: Already exists
b5aeaeb94e07: Already exists
38a9bd2f4744: Already exists
5e65f7efc058: Already exists
5edbaf3e2682: Already exists
ffcaad2b6111: Already exists
8b0ebaf5f4b3: Already exists
be3c368bde1b: Already exists
b62f8f7e31ae: Already exists
11c7d2a34a82: Already exists
b35308a43e0f: Already exists
d86292649578: Already exists
561950a070c6: Already exists
ef19f07d583e: Already exists
0e25da84ed2f: Already exists
09d767361b2b: Already exists
4550e0b1212a: Already exists
a26a297765ea: Already exists
733a40f77b8a: Pulling fs layer
be94bce5bfa5: Pulling fs layer
efbf7b6b27cb: Pulling fs layer
255833240456: Pulling fs layer
2fe358b981f9: Pulling fs layer
e69853d66542: Pulling fs layer
129311f42223: Pulling fs layer
255833240456: Waiting
2fe358b981f9: Waiting
e69853d66542: Waiting
129311f42223: Waiting
be94bce5bfa5: Verifying Checksum
be94bce5bfa5: Download complete
733a40f77b8a: Verifying Checksum
733a40f77b8a: Download complete
733a40f77b8a: Pull complete
be94bce5bfa5: Pull complete
2fe358b981f9: Verifying Checksum
2fe358b981f9: Download complete
e69853d66542: Verifying Checksum
e69853d66542: Download complete
efbf7b6b27cb: Verifying Checksum
efbf7b6b27cb: Download complete
efbf7b6b27cb: Pull complete
129311f42223: Verifying Checksum
129311f42223: Download complete
255833240456: Download complete
255833240456: Pull complete
2fe358b981f9: Pull complete
e69853d66542: Pull complete
129311f42223: Pull complete
Digest: sha256:628d83c867e791f319d5ec6bd52c7ce2bd581e34e823ea51810a8afa91590ba4
Status: Downloaded newer image for ocaml/opam@sha256:628d83c867e791f319d5ec6bd52c7ce2bd581e34e823ea51810a8afa91590ba4
2026-02-10 15:25.48 ---> using "886b69aed9ea9c1ba3ffd96ef12e36c903582bcf74205ba852be92083f58b0ad" from cache

/: (shell /usr/bin/linux32 /bin/sh -c)

/: (user (uid 1000) (gid 1000))

/: (workdir /home/opam)

/home/opam: (run (shell "sudo ln -f /usr/bin/opam-dev /usr/bin/opam"))
2026-02-10 15:25.48 ---> using "99a805d93d1f4d4ab7508e424dab408f42d36917b2fc115cb29ee706a7538e80" from cache

/home/opam: (run (network host)
                 (shell "opam init --reinit --config .opamrc-sandbox -ni"))
Configuring from /home/opam/.opamrc-sandbox, then /home/opam/.opamrc, and finally from built-in defaults.
Checking for available remotes: rsync and local, git.
  - you won't be able to use mercurial repositories unless you install the hg command on your system.
  - you won't be able to use darcs repositories unless you install the darcs command on your system.

Continue? [Y/n] y
This version of opam requires an update to the layout of /home/opam/.opam from version 2.0 to version 2.2, which can't be reverted.
You may want to back it up before going further.

Format upgrade done.

<><> Updating repositories ><><><><><><><><><><><><><><><><><><><><><><><><><><>
[default] Initialised
2026-02-10 15:25.48 ---> using "51d2676b1d31a009f36b6da90885076b61e203e744a363ffc7e40ea6365b944c" from cache

/home/opam: (run (shell "opam option solver=builtin-0install && opam config report"))
Set to 'builtin-0install' the field solver in global configuration
# opam config report
# opam-version         2.5.0
# self-upgrade         no
# system               arch=arm32 os=linux os-distribution=debian os-version=13
# solver               builtin-0install
# install-criteria     -changed,-count[avoid-version,solution]
# upgrade-criteria     -count[avoid-version,solution]
# jobs                 79
# repositories         1 (version-controlled)
# pinned               1 (version)
# current-switch       5.4
# invariant            ["ocaml-base-compiler" {>= "5.4.0"}]
# compiler-packages    ocaml-base-compiler.5.4.0, ocaml-compiler.5.4.0, ocaml-option-bytecode-only.1, ocaml-options-vanilla.1
# ocaml:native         false
# ocaml:native-tools   false
# ocaml:native-dynlink false
# ocaml:stubsdir       /home/opam/.opam/5.4/lib/ocaml/stublibs:/home/opam/.opam/5.4/lib/ocaml
# ocaml:preinstalled   false
# ocaml:compiler       5.4.0+bytecode-only
2026-02-10 15:25.48 ---> using "b603c1f47cccbd10e9a7cd0b1557750f8a3a4af22201ff4221e14417b692356a" from cache

/home/opam: (env OPAMDOWNLOADJOBS 1)

/home/opam: (env OPAMERRLOGLEN 0)

/home/opam: (env OPAMPRECISETRACKING 1)

/home/opam: (env CI true)

/home/opam: (env OPAM_REPO_CI true)

/home/opam: (run (shell "rm -rf opam-repository/"))
2026-02-10 15:25.48 ---> using "55c8aeca62644a3697db5f59561b9985e4487625931de56ce56241d1b52cadca" from cache

/home/opam: (copy (src .) (dst opam-repository/))
2026-02-10 15:25.49 ---> using "2cdbac3600b335d2ebec9b69e68558687005ce3d6bb9a75a5fcade34e627e72b" from cache

/home/opam: (run (shell "opam repository set-url --strict default opam-repository/"))
[default] Initialised
2026-02-10 15:26.12 ---> saved as "3ea9a22ebb5c43bb19739dc14a15994d71b757ca1699230fd723df6a84e90b10"

/home/opam: (run (network host)
                 (shell "opam update --depexts || true"))
+ /usr/bin/sudo "apt-get" "update"
- Hit:1 http://deb.debian.org/debian trixie InRelease
- Get:2 http://deb.debian.org/debian trixie-updates InRelease [47.3 kB]
- Get:3 http://deb.debian.org/debian-security trixie-security InRelease [43.4 kB]
- Get:4 http://deb.debian.org/debian-security trixie-security/main armhf Packages [98.0 kB]
- Fetched 189 kB in 0s (962 kB/s)
- Reading package lists...
- 
2026-02-10 15:26.14 ---> saved as "5aa597fe8aaf7ed1b831174c64027b7f32144bd14ed48698be034cfab7fdc5d2"

/home/opam: (run (shell "opam pin add -k version -yn mirage-crypto.2.0.3 2.0.3"))
mirage-crypto is now pinned to version 2.0.3
2026-02-10 15:26.14 ---> saved as "4042f0e8135258547ecc2ace282ff115077b9943aa2a29db86452cac67ddd5ff"

/home/opam: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
                 (network host)
                 (shell  "opam reinstall mirage-crypto.2.0.3;\
                        \n        res=$?;\
                        \n        test \"$res\" != 31 && exit \"$res\";\
                        \n        export OPAMCLI=2.0;\
                        \n        build_dir=$(opam var prefix)/.opam-switch/build;\
                        \n        failed=$(ls \"$build_dir\");\
                        \n        partial_fails=\"\";\
                        \n        for pkg in $failed; do\
                        \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
                        \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
                        \n          fi;\
                        \n          test \"$pkg\" != 'mirage-crypto.2.0.3' && partial_fails=\"$partial_fails $pkg\";\
                        \n        done;\
                        \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
                        \n        exit 1"))
mirage-crypto.2.0.3 is not installed. Install it? [Y/n] y
The following actions will be performed:
=== install 5 packages
  - install csexp             1.5.2          [required by dune-configurator]
  - install dune              3.21.0         [required by mirage-crypto]
  - install dune-configurator 3.21.0         [required by mirage-crypto]
  - install eqaf              0.10           [required by mirage-crypto]
  - install mirage-crypto     2.0.3 (pinned)

<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
-> retrieved csexp.1.5.2  (cached)
-> retrieved dune.3.21.0, dune-configurator.3.21.0  (cached)
-> retrieved eqaf.0.10  (cached)
-> retrieved mirage-crypto.2.0.3  (cached)
-> installed dune.3.21.0
-> installed csexp.1.5.2
-> installed eqaf.0.10
-> installed dune-configurator.3.21.0
-> installed mirage-crypto.2.0.3
Done.
# To update the current shell environment, run: eval $(opam env)
2026-02-10 15:27.23 ---> saved as "389473de9690ba179a288ffab9c57966ca712b51243aa1a8f28a06d6d672282d"

/home/opam: (run (network host)
                 (shell "(opam reinstall --with-test mirage-crypto.2.0.3) || true"))
The following actions will be performed:
=== recompile 1 package
  - recompile mirage-crypto 2.0.3 (pinned)
=== install 4 packages
  - install   ohex          0.2.0          [required by mirage-crypto]
  - install   ounit2        2.2.7          [required by mirage-crypto]
  - install   seq           base           [required by ounit2]
  - install   stdlib-shims  0.3.0          [required by ounit2]

<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
-> retrieved ohex.0.2.0  (https://opam.ocaml.org/cache)
-> retrieved ounit2.2.2.7  (https://opam.ocaml.org/cache)
-> installed ohex.0.2.0
-> retrieved seq.base  (2 extra sources)
-> retrieved seq.base  (2 extra sources)
-> installed seq.base
-> retrieved stdlib-shims.0.3.0  (https://opam.ocaml.org/cache)
-> removed   mirage-crypto.2.0.3
-> installed stdlib-shims.0.3.0
-> installed ounit2.2.2.7
-> installed mirage-crypto.2.0.3
Done.
# To update the current shell environment, run: eval $(opam env)
2026-02-10 15:27.34 ---> saved as "e77df578bd7f9effe9621fb01a2b61eff5caf5495326b9ad4ae0eac100796b92"

/home/opam: (run (shell  "opam reinstall --with-test --verbose mirage-crypto.2.0.3;\
                        \n        res=$?;\
                        \n        test \"$res\" != 31 && exit \"$res\";\
                        \n        export OPAMCLI=2.0;\
                        \n        build_dir=$(opam var prefix)/.opam-switch/build;\
                        \n        failed=$(ls \"$build_dir\");\
                        \n        partial_fails=\"\";\
                        \n        for pkg in $failed; do\
                        \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
                        \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
                        \n          fi;\
                        \n          test \"$pkg\" != 'mirage-crypto.2.0.3' && partial_fails=\"$partial_fails $pkg\";\
                        \n        done;\
                        \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
                        \n        exit 1"))
The following actions will be performed:
=== recompile 1 package
  - recompile mirage-crypto 2.0.3 (pinned)

<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
Processing  2/4: [mirage-crypto: dune build]
+ /home/opam/.opam/opam-init/hooks/sandbox.sh "build" "dune" "build" "-p" "mirage-crypto" "-j" "79" (CWD=/home/opam/.opam/5.4/.opam-switch/build/mirage-crypto.2.0.3)
Processing  2/4: [mirage-crypto: dune runtest]
+ /home/opam/.opam/opam-init/hooks/sandbox.sh "build" "dune" "runtest" "-p" "mirage-crypto" "-j" "79" (CWD=/home/opam/.opam/5.4/.opam-switch/build/mirage-crypto.2.0.3)
- (cd _build/default/tests && ./test_symmetric_runner.exe)
- accel: 
- ................................................................
- Ran: 64 tests in: 0.17 seconds.
- OK
-> compiled  mirage-crypto.2.0.3
-> removed   mirage-crypto.2.0.3
-> installed mirage-crypto.2.0.3
Done.
# To update the current shell environment, run: eval $(opam env)
2026-02-10 15:27.42 ---> saved as "0603e4d9a18f71db199fe1d7e9872bda576db53b9a4c553a1128a499c91bf5a3"
Job succeeded
2026-02-10 15:27.50: Job succeeded