(for PR #29368)

2026-02-10 15:24.04: New job: build mirage-crypto-rng.2.0.3, using opam dev
                              from https://github.com/ocaml/opam-repository.git#refs/pull/29368/head (66e177c9ccf11298b53a7c2c24dada57dd487d9b)
                              on freebsd-14.3-ocaml-5.4/amd64

To reproduce locally:

cd $(mktemp -d)
git clone --recursive "https://github.com/ocaml/opam-repository.git" && cd "opam-repository" && git fetch origin "refs/pull/29368/head" && git reset --hard 66e177c9
git fetch origin master
git merge --no-edit f4c12add9cacd610d7ec6cc9fcb057902ca0a0f6
cat > ../Dockerfile <<'END-OF-DOCKERFILE'
FROM freebsd-14.3-ocaml-5.4
USER 1000:1000
WORKDIR /home/opam
RUN sudo ln -f /usr/local/bin/opam-dev /usr/local/bin/opam
RUN opam init --reinit -ni
RUN opam option solver=builtin-0install && opam config report
ENV OPAMDOWNLOADJOBS="1"
ENV OPAMERRLOGLEN="0"
ENV OPAMPRECISETRACKING="1"
ENV CI="true"
ENV OPAM_REPO_CI="true"
RUN rm -rf opam-repository/
COPY --chown=1000:1000 . opam-repository/
RUN opam repository set-url --strict default opam-repository/
RUN opam update --depexts || true
RUN opam pin add -k version -yn mirage-crypto-rng.2.0.3 2.0.3
RUN opam reinstall mirage-crypto-rng.2.0.3; \
    res=$?; \
    test "$res" != 31 && exit "$res"; \
    export OPAMCLI=2.0; \
    build_dir=$(opam var prefix)/.opam-switch/build; \
    failed=$(ls "$build_dir"); \
    partial_fails=""; \
    for pkg in $failed; do \
    if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"freebsd-14.3\""; then \
    echo "A package failed and has been disabled for CI using the 'x-ci-accept-failures' field."; \
    fi; \
    test "$pkg" != 'mirage-crypto-rng.2.0.3' && partial_fails="$partial_fails $pkg"; \
    done; \
    test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}"; \
    exit 1

END-OF-DOCKERFILE
docker build -f ../Dockerfile .

2026-02-10 15:24.04: Using cache hint "freebsd-14.3-ocaml-5.4-mirage-crypto-rng.2.0.3-66e177c9ccf11298b53a7c2c24dada57dd487d9b"
2026-02-10 15:24.04: Using OBuilder spec:
((from freebsd-14.3-ocaml-5.4)
 (user (uid 1000) (gid 1000))
 (workdir /home/opam)
 (run (shell "sudo ln -f /usr/local/bin/opam-dev /usr/local/bin/opam"))
 (run (network host)
      (shell "opam init --reinit -ni"))
 (run (shell "opam option solver=builtin-0install && opam config report"))
 (env OPAMDOWNLOADJOBS 1)
 (env OPAMERRLOGLEN 0)
 (env OPAMPRECISETRACKING 1)
 (env CI true)
 (env OPAM_REPO_CI true)
 (run (shell "rm -rf opam-repository/"))
 (copy (src .) (dst opam-repository/))
 (run (shell "opam repository set-url --strict default opam-repository/"))
 (run (network host)
      (shell "opam update --depexts || true"))
 (run (shell "opam pin add -k version -yn mirage-crypto-rng.2.0.3 2.0.3"))
 (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
      (network host)
      (shell  "opam reinstall mirage-crypto-rng.2.0.3;\
             \n        res=$?;\
             \n        test \"$res\" != 31 && exit \"$res\";\
             \n        export OPAMCLI=2.0;\
             \n        build_dir=$(opam var prefix)/.opam-switch/build;\
             \n        failed=$(ls \"$build_dir\");\
             \n        partial_fails=\"\";\
             \n        for pkg in $failed; do\
             \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"freebsd-14.3\\\"\"; then\
             \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
             \n          fi;\
             \n          test \"$pkg\" != 'mirage-crypto-rng.2.0.3' && partial_fails=\"$partial_fails $pkg\";\
             \n        done;\
             \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
             \n        exit 1"))
)

2026-02-10 15:24.04: Waiting for resource in pool OCluster
2026-02-10 15:24.06: Waiting for worker…
2026-02-10 15:24.07: Got resource from pool OCluster
Building on rosemary
All commits already cached
Updating files: 100% (19367/19367), done.
HEAD is now at f4c12add9c Merge pull request #29362 from xvw/fix-primavera-ownership
Updating f4c12add9c..66e177c9cc
Fast-forward
 .../mirage-crypto-ec/mirage-crypto-ec.2.0.3/opam   | 62 ++++++++++++++++++++++
 .../mirage-crypto-pk/mirage-crypto-pk.2.0.3/opam   | 43 +++++++++++++++
 .../mirage-crypto-rng-miou-unix.2.0.3/opam         | 39 ++++++++++++++
 .../mirage-crypto-rng-mirage.2.0.3/opam            | 40 ++++++++++++++
 .../mirage-crypto-rng-mkernel.2.0.3/opam           | 38 +++++++++++++
 .../mirage-crypto-rng/mirage-crypto-rng.2.0.3/opam | 42 +++++++++++++++
 packages/mirage-crypto/mirage-crypto.2.0.3/opam    | 39 ++++++++++++++
 7 files changed, 303 insertions(+)
 create mode 100644 packages/mirage-crypto-ec/mirage-crypto-ec.2.0.3/opam
 create mode 100644 packages/mirage-crypto-pk/mirage-crypto-pk.2.0.3/opam
 create mode 100644 packages/mirage-crypto-rng-miou-unix/mirage-crypto-rng-miou-unix.2.0.3/opam
 create mode 100644 packages/mirage-crypto-rng-mirage/mirage-crypto-rng-mirage.2.0.3/opam
 create mode 100644 packages/mirage-crypto-rng-mkernel/mirage-crypto-rng-mkernel.2.0.3/opam
 create mode 100644 packages/mirage-crypto-rng/mirage-crypto-rng.2.0.3/opam
 create mode 100644 packages/mirage-crypto/mirage-crypto.2.0.3/opam

(from freebsd-14.3-ocaml-5.4)
2026-02-10 15:58.01 ---> using "463e9b939b79b2568bf98b05cff00f85b3ec5717170cf88773a44ae3b08f11e7" from cache

/: (user (uid 1000) (gid 1000))

/: (workdir /home/opam)

/home/opam: (run (shell "sudo ln -f /usr/local/bin/opam-dev /usr/local/bin/opam"))
2026-02-10 15:58.02 ---> using "0f4f38cca0f09ffdac905c0015fdbe56f9214c89e28a28ae3325cd6eed47fd99" from cache

/home/opam: (run (network host)
                 (shell "opam init --reinit -ni"))
No configuration file found, using built-in defaults.
Checking for available remotes: rsync and local, git.
  - you won't be able to use mercurial repositories unless you install the hg command on your system.
  - you won't be able to use darcs repositories unless you install the darcs command on your system.

This version of opam requires an update to the layout of /home/opam/.opam from version 2.1 to version 2.2, which can't be reverted.
You may want to back it up before going further.

Continue? [Y/n] y
[NOTE] The 'jobs' option was reset, its value was 1 and its new value will vary according to the current number of cores on your machine. You can restore the fixed value using:
           opam option jobs=1 --global
Format upgrade done.

<><> Updating repositories ><><><><><><><><><><><><><><><><><><><><><><><><><><>
[default] no changes from git+file:///home/opam/opam-repository
2026-02-10 15:58.02 ---> using "430d75e95f6be08ef0776e6e6bb864bc698709d5f7d071fd7fbbf37d0a8617d5" from cache

/home/opam: (run (shell "opam option solver=builtin-0install && opam config report"))
Set to 'builtin-0install' the field solver in global configuration
# opam config report
# opam-version         2.5.0
# self-upgrade         no
# system               arch=x86_64 os=freebsd os-distribution=freebsd os-version=1403000
# solver               builtin-0install
# install-criteria     -changed,-count[avoid-version,solution]
# upgrade-criteria     -count[avoid-version,solution]
# jobs                 39
# repositories         1 (version-controlled)
# pinned               0
# current-switch       5.4.0
# invariant            ["ocaml-base-compiler" {= "5.4.0"} | "ocaml-system" {= "5.4.0"}]
# compiler-packages    ocaml-base-compiler.5.4.0, ocaml-compiler.5.4.0, ocaml-options-vanilla.1
# ocaml:native         true
# ocaml:native-tools   true
# ocaml:native-dynlink true
# ocaml:stubsdir       /home/opam/.opam/5.4.0/lib/ocaml/stublibs:/home/opam/.opam/5.4.0/lib/ocaml
# ocaml:preinstalled   false
# ocaml:compiler       5.4.0
2026-02-10 15:58.03 ---> using "8a5a57fecc1d42886ddc4a5b75b36583eef8196838ccdc1bf870bc7798f6f185" from cache

/home/opam: (env OPAMDOWNLOADJOBS 1)

/home/opam: (env OPAMERRLOGLEN 0)

/home/opam: (env OPAMPRECISETRACKING 1)

/home/opam: (env CI true)

/home/opam: (env OPAM_REPO_CI true)

/home/opam: (run (shell "rm -rf opam-repository/"))
2026-02-10 15:58.03 ---> using "5d57b5e6a2b42d2aa72fb2cc8558fd5735263edde7f2032c7588b729f1b1565f" from cache

/home/opam: (copy (src .) (dst opam-repository/))
2026-02-10 15:58.05 ---> using "5d6972a878858fe2917c32ed9a9c84ea437b215beb9e78339ec2d73e292f1dfa" from cache

/home/opam: (run (shell "opam repository set-url --strict default opam-repository/"))
[default] Initialised
2026-02-10 15:58.06 ---> saved as "7b876e979e0c4a3a988626bd0f83b4986b681fb59729e6d66ae79e7bcd083a9a"

/home/opam: (run (network host)
                 (shell "opam update --depexts || true"))
[WARNING] Unknown update command for bsd, skipping system update
2026-02-10 15:58.06 ---> saved as "3838b291f5e1d07d42b0a4ca6a72e329e881851552afb7e359e13fbd0877eecb"

/home/opam: (run (shell "opam pin add -k version -yn mirage-crypto-rng.2.0.3 2.0.3"))
mirage-crypto-rng is now pinned to version 2.0.3
2026-02-10 15:58.11 ---> saved as "7000f712f2d3b3b6c770f693149253d9eb4dc50f445d0acffda9d64c39a1be3a"

/home/opam: (run (cache (opam-archives (target /home/opam/.opam/download-cache)))
                 (network host)
                 (shell  "opam reinstall mirage-crypto-rng.2.0.3;\
                        \n        res=$?;\
                        \n        test \"$res\" != 31 && exit \"$res\";\
                        \n        export OPAMCLI=2.0;\
                        \n        build_dir=$(opam var prefix)/.opam-switch/build;\
                        \n        failed=$(ls \"$build_dir\");\
                        \n        partial_fails=\"\";\
                        \n        for pkg in $failed; do\
                        \n          if opam show -f x-ci-accept-failures: \"$pkg\" | grep -qF \"\\\"freebsd-14.3\\\"\"; then\
                        \n            echo \"A package failed and has been disabled for CI using the 'x-ci-accept-failures' field.\";\
                        \n          fi;\
                        \n          test \"$pkg\" != 'mirage-crypto-rng.2.0.3' && partial_fails=\"$partial_fails $pkg\";\
                        \n        done;\
                        \n        test \"${partial_fails}\" != \"\" && echo \"opam-repo-ci detected dependencies failing: ${partial_fails}\";\
                        \n        exit 1"))
mirage-crypto-rng.2.0.3 is not installed. Install it? [Y/n] y
The following actions will be performed:
=== install 12 packages
  ∗ csexp             1.5.2          [required by dune-configurator]
  ∗ digestif          1.3.0          [required by mirage-crypto-rng]
  ∗ dune              3.21.0         [required by mirage-crypto-rng]
  ∗ dune-configurator 3.21.0         [required by mirage-crypto-rng]
  ∗ duration          0.2.1          [required by mirage-crypto-rng]
  ∗ eqaf              0.10           [required by digestif, mirage-crypto]
  ∗ logs              0.10.0         [required by mirage-crypto-rng]
  ∗ mirage-crypto     2.0.3          [required by mirage-crypto-rng]
  ∗ mirage-crypto-rng 2.0.3 (pinned)
  ∗ ocamlbuild        0.16.1         [required by logs]
  ∗ ocamlfind         1.9.8          [required by logs]
  ∗ topkg             1.1.1          [required by logs]

<><> Processing actions <><><><><><><><><><><><><><><><><><><><><><><><><><><><>
⬇ retrieved csexp.1.5.2  (cached)
⬇ retrieved digestif.1.3.0  (cached)
⬇ retrieved duration.0.2.1  (cached)
⬇ retrieved eqaf.0.10  (cached)
⬇ retrieved logs.0.10.0  (cached)
⬇ retrieved mirage-crypto.2.0.3, mirage-crypto-rng.2.0.3  (https://github.com/mirage/mirage-crypto/releases/download/v2.0.3/mirage-crypto-2.0.3.tbz)
⬇ retrieved ocamlbuild.0.16.1  (cached)
⬇ retrieved ocamlfind.1.9.8  (cached)
⬇ retrieved topkg.1.1.1  (cached)
∗ installed ocamlfind.1.9.8
∗ installed ocamlbuild.0.16.1
∗ installed topkg.1.1.1
∗ installed logs.0.10.0

#=== ERROR while fetching sources for dune.3.21.0 and dune-configurator.3.21.0 #
OpamSolution.Fetch_fail("Cannot remove /tmp/opam-13934-767f8a/dune-3.21.0/test/blackbox-tests/test-cases/coq/coqdoc-dir-target-clash.t/dune (/usr/local/bin/opam: \"unlink\" failed on /tmp/opam-13934-767f8a/dune-3.21.0/test/blackbox-tests/test-cases/coq/coqdoc-dir-target-clash.t/dune: No such file or directory).")


<><> Error report <><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>
┌─ The following actions failed
│ ⬇ fetch dune.3.21.0, dune-configurator.3.21.0 
└─ 
┌─ The following changes have been performed (the rest was aborted)
│ ∗ install logs       0.10.0
│ ∗ install ocamlbuild 0.16.1
│ ∗ install ocamlfind  1.9.8
│ ∗ install topkg      1.1.1
└─ 

The former state can be restored with:
    /usr/local/bin/opam switch import "/home/opam/.opam/5.4.0/.opam-switch/backup/state-20260210155813.export"
jail: /usr/bin/su -l opam -c cd '/home/opam' && env OPAM_REPO_CI='true' CI='true' OPAMPRECISETRACKING='1' OPAMERRLOGLEN='0' OPAMDOWNLOADJOBS='1' '/usr/bin/env' 'bash' '-c' 'opam reinstall mirage-crypto-rng.2.0.3;
        res=$?;
        test "$res" != 31 && exit "$res";
        export OPAMCLI=2.0;
        build_dir=$(opam var prefix)/.opam-switch/build;
        failed=$(ls "$build_dir");
        partial_fails="";
        for pkg in $failed; do
          if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"freebsd-14.3\""; then
            echo "A package failed and has been disabled for CI using the '\''x-ci-accept-failures'\'' field.";
          fi;
          test "$pkg" != '\''mirage-crypto-rng.2.0.3'\'' && partial_fails="$partial_fails $pkg";
        done;
        test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}";
        exit 1': failed
"jail" "-c" "name=obuilder_56181_129527" "mount.fstab=/tmp/obuilder-jail-29e2d5/fstab" "mount.devfs" "path=/obuilder/result/79b4da9fce237385d6fe062bebbc5f7aec3a4636fa9eb935a1244d5cd5e527d2/rootfs" "host=inherit" "ip6=inherit" "ip4=inherit" "command=/usr/bin/su" "-l" "opam" "-c" "cd '/home/opam' && env OPAM_REPO_CI='true' CI='true' OPAMPRECISETRACKING='1' OPAMERRLOGLEN='0' OPAMDOWNLOADJOBS='1' '/usr/bin/env' 'bash' '-c' 'opam reinstall mirage-crypto-rng.2.0.3;
        res=$?;
        test "$res" != 31 && exit "$res";
        export OPAMCLI=2.0;
        build_dir=$(opam var prefix)/.opam-switch/build;
        failed=$(ls "$build_dir");
        partial_fails="";
        for pkg in $failed; do
          if opam show -f x-ci-accept-failures: "$pkg" | grep -qF "\"freebsd-14.3\""; then
            echo "A package failed and has been disabled for CI using the '\''x-ci-accept-failures'\'' field.";
          fi;
          test "$pkg" != '\''mirage-crypto-rng.2.0.3'\'' && partial_fails="$partial_fails $pkg";
        done;
        test "${partial_fails}" != "" && echo "opam-repo-ci detected dependencies failing: ${partial_fails}";
        exit 1'" failed with exit status 1
2026-02-10 17:15.10: Job failed: Failed: Build failed