fix build with vendored mimalloc and boringssl

Author: zh-jq

.github/workflows/static.yml

@@ -25,7 +25,7 @@ env:
 
 jobs:
   musl-gcc:
-    name: musl-c
+    name: musl-gcc
     runs-on: ubuntu-latest
     strategy:
       matrix:
@@ -48,19 +48,24 @@ jobs:
           sudo apt-get install capnproto musl-tools
       - name: Cargo build
         run: cargo build --target=x86_64-unknown-linux-musl --no-default-features --features secure-vendored-mimalloc,${{ matrix.feature }},quic,vendored-c-ares
-  musl-gxx:
-    name: musl-g++
+  musl-clang:
+    name: musl-clang
     runs-on: ubuntu-latest
     container:
       image: ghcr.io/rust-lang/rust:nightly-alpine
       env:
         CARGO_TERM_COLOR: always
-        RUSTFLAGS: -C target-feature=+crt-static
+        RUSTFLAGS: -Ctarget-feature=+crt-static -Clinker=clang -Clink-arg=-fuse-ld=lld
         UNSTABLE_OPTIONS: -Ztarget-applies-to-host -Zhost-config
+        CC: clang
+        CXX: clang++
+        CXXSTDLIB: c++
     strategy:
       matrix:
         feature:
-          - vendored-boringssl,rustls-ring
+          # aws-lc won't link with a c++ runtime library
+          - vendored-aws-lc,rustls-aws-lc
+          - vendored-aws-lc-fips,rustls-aws-lc-fips
     steps:
       - name: Install base tools
         run: |
@@ -71,20 +76,22 @@ jobs:
           submodules: true
       - name: Install dependencies
         run: |
-          apk add --no-cache musl-dev linux-headers libunwind-static
-          apk add --no-cache g++ capnproto-dev cmake make
-          apk add --no-cache perl nasm
-          apk add --no-cache libstdc++-dev clang-libclang
+          apk add --no-cache musl-dev linux-headers libc++-dev libunwind-static
+          apk add --no-cache clang lld capnproto-dev clang-libclang cmake make
+      - name: Install Go for AWS-LC-FIPS
+        if: contains(matrix.feature, 'vendored-aws-lc-fips')
+        run: apk add --no-cache go perl nasm
       - name: Cargo build
         run: cargo $UNSTABLE_OPTIONS build --no-default-features --features secure-vendored-mimalloc,${{ matrix.feature }},quic,vendored-c-ares
   musl-clang-libcxx:
-    name: musl-clang-libcxx
+    name: musl-clang-libc++
     runs-on: ubuntu-latest
     container:
       image: ghcr.io/rust-lang/rust:nightly-alpine
       env:
         CARGO_TERM_COLOR: always
-        RUSTFLAGS: -C target-feature=+crt-static
+        # The c++abi lib is needed when build boringssl in cmake Debug mode. Enable it when build with debug profile
+        RUSTFLAGS: -Ctarget-feature=+crt-static -Clinker=clang -Clink-arg=-fuse-ld=lld # -Clink-arg=-lc++abi
         UNSTABLE_OPTIONS: -Ztarget-applies-to-host -Zhost-config
         CC: clang
         CXX: clang++
@@ -93,8 +100,7 @@ jobs:
     strategy:
       matrix:
         feature:
-          - vendored-aws-lc,rustls-aws-lc
-          - vendored-aws-lc-fips,rustls-aws-lc-fips
+          - vendored-boringssl,rustls-ring
     steps:
       - name: Install base tools
         run: |
@@ -106,12 +112,9 @@ jobs:
       - name: Install dependencies
         run: |
           apk add --no-cache musl-dev linux-headers libc++-dev libc++-static libunwind-static
-          apk add --no-cache clang capnproto-dev clang-libclang cmake make
-      - name: Install Go for AWS-LC-FIPS
-        if: contains(matrix.feature, 'vendored-aws-lc-fips')
-        run: apk add --no-cache go perl nasm
+          apk add --no-cache clang lld capnproto-dev clang-libclang cmake make
       - name: Cargo build
-        run: cargo $UNSTABLE_OPTIONS build --no-default-features --features secure-vendored-mimalloc,${{ matrix.feature }},quic,vendored-c-ares
+        run: cargo $UNSTABLE_OPTIONS build --profile release --no-default-features --features secure-vendored-mimalloc,${{ matrix.feature }},quic,vendored-c-ares
   msvc-vcpkg:
     name: msvc-vcpkg
     runs-on: windows-latest

Cargo.lock

@@ -168,8 +168,8 @@ tokio-rustls = { version = "0.26", default-features = false, features = ["tls12"
 quinn = { version = "0.11", default-features = false, features = ["runtime-tokio"] }
 quinn-udp = { version = "0.5.9", default-features = false, features = ["fast-apple-datapath"] }
 #
-openssl = { package = "variant-ssl", version = "0.17.11" }
-openssl-sys = { package = "variant-ssl-sys", version = "0.17.11" }
+openssl = { package = "variant-ssl", version = "0.17.30" }
+openssl-sys = { package = "variant-ssl-sys", version = "0.17.30" }
 openssl-probe = "0.2"
 #
 kanal = { version = "0.1.1", default-features = false }