Skip to content

[bazel] Use in-tree openssl for Rust openssl-sys#30706

Merged
luismarques merged 2 commits into
lowRISC:earlgrey_1.0.0from
sasdf:mjTktoxolxx
Jul 14, 2026
Merged

[bazel] Use in-tree openssl for Rust openssl-sys#30706
luismarques merged 2 commits into
lowRISC:earlgrey_1.0.0from
sasdf:mjTktoxolxx

Conversation

@sasdf

@sasdf sasdf commented Jul 10, 2026

Copy link
Copy Markdown
Contributor

The PR #30621 brings newer openssl in-tree, and this PR utilize this openssl for the rust binding.
This change allows ml-dsa cert verification which requires newer openssl.

@sasdf sasdf requested review from cfrantz, jwnrt and pamaury July 10, 2026 05:04
@sasdf sasdf marked this pull request as ready for review July 10, 2026 05:23
Comment thread MODULE.bazel Outdated
repositories = ["crate_index"],
)

inject_repo(crate, "openssl")

@pamaury pamaury Jul 10, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The openssl name is a bit generic, especially for the crate extension which handles a lot of thing. I would suggest to inject_repo(crate, ot_openssl="openssl") just to be sure.
Also, do you really need to inject the repository? I would have expected that the point of having a build_script_data attribute is to avoid this kind of hacks.

@sasdf sasdf Jul 10, 2026

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank, update with ot_openssl="openssl".

Without inject_repo, bazel can't resolve the openssl repo referrenced in build_script_data.

ERROR: no such package '@@[unknown repo 'openssl' requested from @@rules_rust++crate+crate_index__openssl-sys-0.9.102]//':
The repository '@@[unknown repo 'openssl' requested from @@rules_rust++crate+crate_index__openssl-sys-0.9.102]' could not be resolved:
No repository visible as '@openssl' from repository '@@rules_rust++crate+crate_index__openssl-sys-0.9.102'

Comment thread MODULE.bazel Outdated
@sasdf sasdf force-pushed the mjTktoxolxx branch 2 times, most recently from ff4df87 to 736b5e1 Compare July 10, 2026 16:58
@sasdf sasdf added the CI:Rerun Rerun failed CI jobs label Jul 10, 2026
@github-actions github-actions Bot removed the CI:Rerun Rerun failed CI jobs label Jul 10, 2026
sasdf added 2 commits July 10, 2026 22:25
Add `--host_jvm_args=-Xmx8g` to the default `BAZELISK` command in
`prep-bazel-airgapped-build.sh` to prevent JVM out-of-memory errors
during the airgapped prep.

Signed-off-by: Yi-Hsuan Deng <yhdeng@google.com>
Change-Id: Ie8d4ff2990ba18307c3165b0aaf1ff006a6a6964
Signed-off-by: Yi-Hsuan Deng <yhdeng@google.com>
Change-Id: If6b2be221d2330cbe42062f8cd061da26a6a6964
@sasdf sasdf requested a review from pamaury July 13, 2026 23:32

@jwnrt jwnrt left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thanks

@luismarques luismarques merged commit d358479 into lowRISC:earlgrey_1.0.0 Jul 14, 2026
35 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants