(for PR #29368)

2026-02-10 15:24.05: New job: build mirage-crypto.2.0.3, using opam 2.0
                              from https://github.com/ocaml/opam-repository.git#refs/pull/29368/head (66e177c9ccf11298b53a7c2c24dada57dd487d9b)
                              on debian-13-ocaml-4.14/amd64

To reproduce locally:

cd $(mktemp -d)
git clone --recursive "https://github.com/ocaml/opam-repository.git" && cd "opam-repository" && git fetch origin "refs/pull/29368/head" && git reset --hard 66e177c9
git fetch origin master
git merge --no-edit f4c12add9cacd610d7ec6cc9fcb057902ca0a0f6
cat > ../Dockerfile <<'END-OF-DOCKERFILE'
FROM ocaml/opam:debian-13-ocaml-4.14@sha256:04864ce35c9a53a8f91e1b6ddfe19ff405f2881ec1201cdca698239b3b811633
USER 1000:1000
WORKDIR /home/opam
RUN sudo ln -f /usr/bin/opam-2.0 /usr/bin/opam
RUN opam init --reinit -ni
RUN opam config report
ENV OPAMDOWNLOADJOBS="1"
ENV OPAMERRLOGLEN="0"
ENV OPAMPRECISETRACKING="1"
ENV CI="true"
ENV OPAM_REPO_CI="true"
RUN rm -rf opam-repository/
COPY --chown=1000:1000 . opam-repository/
RUN opam repository set-url --strict default opam-repository/
RUN opam depext -u || true
RUN opam pin add -k version -yn mirage-crypto.2.0.3 2.0.3
RUN opam depext mirage-crypto.2.0.3 && opam reinstall mirage-crypto.2.0.3; \
    res=$?; \
    test "$res" != 31 && exit "$res"; \
    export OPAMCLI=2.0; \
    build_dir=$(opam var prefix)/.opam-switch/build; \
    failed=$(ls "$build_dir"); \
    partial_fails=""; \
    for pkg in $failed; do \
    if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"debian-13\""; then \
    echo "A package failed and has been disabled for CI using the 'x-ci-accept-failures' field."; \
    fi; \
    test "$pkg" != 'mirage-crypto.2.0.3' && partial_fails="$partial_fails $pkg"; \
    done; \
    test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}"; \
    exit 1

END-OF-DOCKERFILE
docker build -f ../Dockerfile .

2026-02-10 15:24.05: Using cache hint "ocaml/opam:debian-13-ocaml-4.14@sha256:04864ce35c9a53a8f91e1b6ddfe19ff405f2881ec1201cdca698239b3b811633-mirage-crypto.2.0.3-66e177c9ccf11298b53a7c2c24dada57dd487d9b"
2026-02-10 15:24.05: Using OBuilder spec:
((from ocaml/opam:debian-13-ocaml-4.14@sha256:04864ce35c9a53a8f91e1b6ddfe19ff405f2881ec1201cdca698239b3b811633)
 (user (uid 1000) (gid 1000))
 (workdir /home/opam)
 (run (shell "sudo ln -f /usr/bin/opam-2.0 /usr/bin/opam"))
 (run (network host)
      (shell "opam init --reinit --config .opamrc-sandbox -ni"))
 (run (shell "opam config report"))
 (env OPAMDOWNLOADJOBS 1)
 (env OPAMERRLOGLEN 0)
 (env OPAMPRECISETRACKING 1)
 (env CI true)
 (env OPAM_REPO_CI true)
 (run (shell "rm -rf opam-repository/"))
 (copy (src .) (dst opam-repository/))
 (run (shell "opam repository set-url --strict default opam-repository/"))
 (run (network host)
      (shell "opam depext -u || true"))
 (run (shell "opam pin add -k version -yn mirage-crypto.2.0.3 2.0.3"))
 (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
      (network host)
      (shell  "opam depext mirage-crypto.2.0.3 && opam reinstall mirage-crypto.2.0.3;\
             \n        res=$?;\
             \n        test \"$res\" != 31 && exit \"$res\";\
             \n        export OPAMCLI=2.0;\
             \n        build_dir=$(opam var prefix)/.opam-switch/build;\
             \n        failed=$(ls \"$build_dir\");\
             \n        partial_fails=\"\";\
             \n        for pkg in $failed; do\
             \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
             \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
             \n          fi;\
             \n          test \"$pkg\" != 'mirage-crypto.2.0.3' && partial_fails=\"$partial_fails $pkg\";\
             \n        done;\
             \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
             \n        exit 1"))
)

2026-02-10 15:24.05: Waiting for resource in pool OCluster
2026-02-10 15:36.53: Waiting for worker…
2026-02-10 15:39.47: Got resource from pool OCluster
Building on eumache
All commits already cached
Updating files:  74% (14519/19367)
Updating files:  75% (14526/19367)
Updating files:  76% (14719/19367)
Updating files:  77% (14913/19367)
Updating files:  78% (15107/19367)
Updating files:  79% (15300/19367)
Updating files:  80% (15494/19367)
Updating files:  81% (15688/19367)
Updating files:  82% (15881/19367)
Updating files:  83% (16075/19367)
Updating files:  84% (16269/19367)
Updating files:  85% (16462/19367)
Updating files:  86% (16656/19367)
Updating files:  87% (16850/19367)
Updating files:  88% (17043/19367)
Updating files:  89% (17237/19367)
Updating files:  90% (17431/19367)
Updating files:  91% (17624/19367)
Updating files:  92% (17818/19367)
Updating files:  93% (18012/19367)
Updating files:  94% (18205/19367)
Updating files:  95% (18399/19367)
Updating files:  96% (18593/19367)
Updating files:  97% (18786/19367)
Updating files:  98% (18980/19367)
Updating files:  99% (19174/19367)
Updating files: 100% (19367/19367)
Updating files: 100% (19367/19367), done.
HEAD is now at f4c12add9c Merge pull request #29362 from xvw/fix-primavera-ownership
Updating f4c12add9c..66e177c9cc
Fast-forward
 .../mirage-crypto-ec/mirage-crypto-ec.2.0.3/opam   | 62 ++++++++++++++++++++++
 .../mirage-crypto-pk/mirage-crypto-pk.2.0.3/opam   | 43 +++++++++++++++
 .../mirage-crypto-rng-miou-unix.2.0.3/opam         | 39 ++++++++++++++
 .../mirage-crypto-rng-mirage.2.0.3/opam            | 40 ++++++++++++++
 .../mirage-crypto-rng-mkernel.2.0.3/opam           | 38 +++++++++++++
 .../mirage-crypto-rng/mirage-crypto-rng.2.0.3/opam | 42 +++++++++++++++
 packages/mirage-crypto/mirage-crypto.2.0.3/opam    | 39 ++++++++++++++
 7 files changed, 303 insertions(+)
 create mode 100644 packages/mirage-crypto-ec/mirage-crypto-ec.2.0.3/opam
 create mode 100644 packages/mirage-crypto-pk/mirage-crypto-pk.2.0.3/opam
 create mode 100644 packages/mirage-crypto-rng-miou-unix/mirage-crypto-rng-miou-unix.2.0.3/opam
 create mode 100644 packages/mirage-crypto-rng-mirage/mirage-crypto-rng-mirage.2.0.3/opam
 create mode 100644 packages/mirage-crypto-rng-mkernel/mirage-crypto-rng-mkernel.2.0.3/opam
 create mode 100644 packages/mirage-crypto-rng/mirage-crypto-rng.2.0.3/opam
 create mode 100644 packages/mirage-crypto/mirage-crypto.2.0.3/opam

(from ocaml/opam:debian-13-ocaml-4.14@sha256:04864ce35c9a53a8f91e1b6ddfe19ff405f2881ec1201cdca698239b3b811633)
2026-02-10 15:41.43 ---> using "d6079ab6cce1b58b34ac9b5ed11aa86b7980ab728c75f5a6ba9271e98dc1ac1c" from cache

/: (user (uid 1000) (gid 1000))

/: (workdir /home/opam)

/home/opam: (run (shell "sudo ln -f /usr/bin/opam-2.0 /usr/bin/opam"))
2026-02-10 15:41.43 ---> using "0b67f23dfefec5ba3e50da7b15b5b005e035a700d7156a35a97d7f54648aefa3" from cache

/home/opam: (run (network host)
                 (shell "opam init --reinit --config .opamrc-sandbox -ni"))
[NOTE] Will configure from /home/opam/.opamrc-sandbox, then /home/opam/.opamrc, and finally from built-in defaults.
Checking for available remotes: rsync and local, git.
  - you won't be able to use mercurial repositories unless you install the hg command on your system.
  - you won't be able to use darcs repositories unless you install the darcs command on your system.

[WARNING] Recommended dependencies -- most packages rely on these:
  - m4

<><> Updating repositories ><><><><><><><><><><><><><><><><><><><><><><><><><><>
[default] Initialised
default (at git+file:///home/opam/opam-repository): 
    [INFO] opam 2.1 and 2.2 include many performance and security improvements over 2.0; please consider upgrading (https://opam.ocaml.org/doc/Install.html)

2026-02-10 15:41.56 ---> saved as "687d42d18e1f0d83126b6886564b9f4f41a8da92203c5a21775f77361f6516d6"

/home/opam: (run (shell "opam config report"))
# opam config report
# opam-version      2.0.10 (adc1e1829a2bef5b240746df80341b508290fe3b) 
# self-upgrade      no
# system            arch=x86_64 os=linux os-distribution=debian os-version=13
# solver            builtin-mccs+glpk
# install-criteria  -removed,-count[version-lag,request],-count[version-lag,changed],-changed
# upgrade-criteria  -removed,-count[version-lag,solution],-new
# jobs              71
# repositories      1 (version-controlled)
# pinned            1 (version)
# current-switch    4.14
2026-02-10 15:41.58 ---> saved as "1a312237e6cc317162bf6e7c10f0ca280a9c903bfe96f1b5ff573baf72b38463"

/home/opam: (env OPAMDOWNLOADJOBS 1)

/home/opam: (env OPAMERRLOGLEN 0)

/home/opam: (env OPAMPRECISETRACKING 1)

/home/opam: (env CI true)

/home/opam: (env OPAM_REPO_CI true)

/home/opam: (run (shell "rm -rf opam-repository/"))
2026-02-10 15:42.09 ---> saved as "fbb61444c2f0aa9a7b16e970009a0bb8e791b4932a513f59e5ee3ea339cb39a0"

/home/opam: (copy (src .) (dst opam-repository/))
2026-02-10 15:42.15 ---> saved as "84add13be922b3cd7d5b96f18da3868015f229d09e564050540c27749192f43e"

/home/opam: (run (shell "opam repository set-url --strict default opam-repository/"))
[default] Initialised
default (at file:///home/opam/opam-repository): 
    [INFO] opam 2.1 and 2.2 include many performance and security improvements over 2.0; please consider upgrading (https://opam.ocaml.org/doc/Install.html)

2026-02-10 15:42.31 ---> saved as "3eea11089702eb56f7e6abb89e03a1ae78938d5766b11dc0138ee0fc014b0547"

/home/opam: (run (network host)
                 (shell "opam depext -u || true"))
# Detecting depexts using vars: arch=x86_64, os=linux, os-distribution=debian, os-family=debian
# No extra OS packages requirements found.
# All required OS packages found.
The following command needs to be run through "sudo":
    apt-get update
Hit:1 http://deb.debian.org/debian trixie InRelease
Get:2 http://deb.debian.org/debian trixie-updates InRelease [47.3 kB]
Get:3 http://deb.debian.org/debian-security trixie-security InRelease [43.4 kB]
Get:4 http://deb.debian.org/debian-security trixie-security/main amd64 Packages [104 kB]
Fetched 195 kB in 0s (1878 kB/s)
Reading package lists...
# OS package update successful
2026-02-10 15:42.33 ---> saved as "4cad074a8be52c3e9ac3d19c3599822b22d685033c2fbeee72290f3e0c3edafd"

/home/opam: (run (shell "opam pin add -k version -yn mirage-crypto.2.0.3 2.0.3"))
mirage-crypto is now pinned to version 2.0.3
2026-02-10 15:42.34 ---> saved as "e85f0fa22bd5ed3131a79353a7e4f26695917292e1a8ffafbbf67e352d1738bc"

/home/opam: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
                 (network host)
                 (shell  "opam depext mirage-crypto.2.0.3 && opam reinstall mirage-crypto.2.0.3;\
                        \n        res=$?;\
                        \n        test \"$res\" != 31 && exit \"$res\";\
                        \n        export OPAMCLI=2.0;\
                        \n        build_dir=$(opam var prefix)/.opam-switch/build;\
                        \n        failed=$(ls \"$build_dir\");\
                        \n        partial_fails=\"\";\
                        \n        for pkg in $failed; do\
                        \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"debian-13\\\"\"; then\
                        \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
                        \n          fi;\
                        \n          test \"$pkg\" != 'mirage-crypto.2.0.3' && partial_fails=\"$partial_fails $pkg\";\
                        \n        done;\
                        \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
                        \n        exit 1"))
# Detecting depexts using vars: arch=x86_64, os=linux, os-distribution=debian, os-family=debian
# No extra OS packages requirements found.
# All required OS packages found.
mirage-crypto.2.0.3 is not installed. Install it? [Y/n] y
The following actions will be performed:
  - install dune              3.21.0 [required by mirage-crypto]
  - install eqaf              0.10   [required by mirage-crypto]
  - install csexp             1.5.2  [required by dune-configurator]
  - install dune-configurator 3.21.0 [required by mirage-crypto]
  - install mirage-crypto     2.0.3*
===== 5 to install =====

<><> Gathering sources ><><><><><><><><><><><><><><><><><><><><><><><><><><><><>
[csexp.1.5.2] found in cache
[dune.3.21.0] found in cache
[dune-configurator.3.21.0] found in cache
[eqaf.0.10] found in cache
[mirage-crypto.2.0.3] found in cache

<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
-> installed dune.3.21.0
-> installed csexp.1.5.2
-> installed eqaf.0.10
-> installed dune-configurator.3.21.0
-> installed mirage-crypto.2.0.3
Done.
# Run eval $(opam env) to update the current shell environment
2026-02-10 15:43.24 ---> saved as "256a8ce7e990def15eb5a3f5fc0638c127e6cbb000f03eba560b9e0d2dfb793d"
Job succeeded
2026-02-10 15:43.28: Job succeeded