Skip to content

Use POSIX -u instead of GNU --undefined for zig linker support#236

Merged
Shnatsel merged 1 commit intorust-secure-code:masterfrom
zanieb:zb/zig-build
Mar 3, 2026
Merged

Use POSIX -u instead of GNU --undefined for zig linker support#236
Shnatsel merged 1 commit intorust-secure-code:masterfrom
zanieb:zb/zig-build

Conversation

@zanieb
Copy link
Contributor

@zanieb zanieb commented Mar 3, 2026

Closes #179

@Shnatsel
Copy link
Member

Shnatsel commented Mar 3, 2026

Oh, it would be great if this was all I had to do to be compatible with zig! Fingers crossed

Copy link
Member

@Shnatsel Shnatsel left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LTO tests pass on CI, and for me locally with mold and lld. Looks great!

Not sure why this is a draft, but I'm happy to merge whenever you're ready.

@zanieb
Copy link
Contributor Author

zanieb commented Mar 3, 2026

I just wanted to see if CI passed before marking it as ready for review :)

I tested this with zig downstream in uv's Dockerfile and it seems to be working great.

@zanieb zanieb marked this pull request as ready for review March 3, 2026 15:56
@Shnatsel Shnatsel merged commit caa964b into rust-secure-code:master Mar 3, 2026
9 checks passed
zanieb added a commit to astral-sh/uv that referenced this pull request Mar 3, 2026
Adds SBOM attestations
https://docs.docker.com/build/metadata/attestations/sbom/

Requires rust-secure-code/cargo-auditable#236
for our uv binaries and their dependencies to be included in the SBOM

You can inspect the SBOM with, e.g.:

```
docker buildx imagetools inspect ghcr.io/astral-sh/uv-dev:sha-ece6427 --format '{{json .SBOM}}' | jq
docker buildx imagetools inspect ghcr.io/astral-sh/uv-dev:sha-ece6427-python3.9-trixie --format '{{json .SBOM}}' | jq
```

Also explicitly sets
https://docs.docker.com/build/metadata/attestations/slsa-provenance/#max
but there appears to be no change as all of the max SLSA data is already
present.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Build fails with cargo zigbuild

2 participants