Problem Definition

In our work monorepo we have a crate called workspace-hack which serves as a way to deduplicate features across our crates. When this crate is compiled, rules_rs' non-hermeticity check triggers because /workspace is present in the crate's paths.

Solution

Set the prefix to either:

• Something random determined at VM start, e.g. /workspace-zb7feq8rnv7e.
• Something like Bazel's execroot, maybe just /execroot, which is very unlikely anyway.

There is also a fix on rules_rs side to do the check more carefully, I think.