$ docker run --rm --name validator-libsodium-usage-ruby-rbnacl-secretbox-keygen-bytes-48096 -t --mount type=bind,src=/tmp/validator-status-libsodium-usage-ruby-rbnacl-secretbox-keygen-bytes,dst=/validator/status --mount type=bind,src=/home/runner/work/validator/validator/.work/pages-artifacts/debs/port/libsodium,dst=/override-debs,readonly validator-libsodium-shared bash -lc 'set -euo pipefail
/validator/tests/_shared/install_override_debs.sh
exec /validator/tests/_shared/run_library_tests.sh "$@"' validator-testcase libsodium usage-ruby-rbnacl-secretbox-keygen-bytes -- bash -c 'PS4=$1; shift; set -x; source "$@"' validator-xtrace '__VALIDATOR_XTRACE__ ' /validator/tests/libsodium/tests/cases/usage/usage-ruby-rbnacl-secretbox-keygen-bytes.sh
installing override packages from /override-debs
(Reading database ... (Reading database ... 5%(Reading database ... 10%(Reading database ... 15%(Reading database ... 20%(Reading database ... 25%(Reading database ... 30%(Reading database ... 35%(Reading database ... 40%(Reading database ... 45%(Reading database ... 50%(Reading database ... 55%(Reading database ... 60%(Reading database ... 65%(Reading database ... 70%(Reading database ... 75%(Reading database ... 80%(Reading database ... 85%(Reading database ... 90%(Reading database ... 95%(Reading database ... 100%(Reading database ... 22270 files and directories currently installed.)
Preparing to unpack .../libsodium-dev_1.0.18-1ubuntu0.24.04.1+safelibs1778011697_amd64.deb ...
Unpacking libsodium-dev:amd64 (1.0.18-1ubuntu0.24.04.1+safelibs1778011697) over (1.0.18-1ubuntu0.24.04.1) ...
Preparing to unpack .../libsodium23_1.0.18-1ubuntu0.24.04.1+safelibs1778011697_amd64.deb ...
Unpacking libsodium23:amd64 (1.0.18-1ubuntu0.24.04.1+safelibs1778011697) over (1.0.18-1ubuntu0.24.04.1) ...
Setting up libsodium23:amd64 (1.0.18-1ubuntu0.24.04.1+safelibs1778011697) ...
Setting up libsodium-dev:amd64 (1.0.18-1ubuntu0.24.04.1+safelibs1778011697) ...
Processing triggers for libc-bin (2.39-0ubuntu8.7) ...
key = RbNaCl::Random.random_bytes(RbNaCl::SecretBox::KEYBYTES)
raise "unexpected key length: #{key.bytesize}" unless key.bytesize == 32

box = RbNaCl::SecretBox.new(key)
raise "SecretBox::KEYBYTES != 32" unless RbNaCl::SecretBox::KEYBYTES == 32
raise "SecretBox::NONCEBYTES != 24" unless RbNaCl::SecretBox::NONCEBYTES == 24
raise "instance key_bytes != 32" unless box.key_bytes == 32
raise "instance nonce_bytes != 24" unless box.nonce_bytes == 24

# tag_bytes (Poly1305 authenticator length) is exposed on the instance.
# Some RbNaCl versions do not expose a SecretBox::MACBYTES constant, so fall
# back to the libsodium wire constant 16 if neither tag_bytes nor MACBYTES is
# available.
tag_bytes =
  if box.respond_to?(:tag_bytes)
    box.tag_bytes
  elsif RbNaCl::SecretBox.const_defined?(:MACBYTES)
    RbNaCl::SecretBox::MACBYTES
  else
    16
  end
raise "unexpected tag_bytes: #{tag_bytes}" unless tag_bytes == 16

nonce = ("\x00".b * box.nonce_bytes)
plaintext = "rbnacl secretbox length payload"
ciphertext = box.encrypt(nonce, plaintext)
expected_len = plaintext.bytesize + tag_bytes
raise "ciphertext length #{ciphertext.bytesize} != expected #{expected_len}" unless ciphertext.bytesize == expected_len

recovered = box.decrypt(nonce, ciphertext)
raise "roundtrip mismatch" unless recovered == plaintext

puts "ok #{ciphertext.bytesize}"
'
ok 47