Add libssl to RPATH

[nyabinary]

Prevents situations like this :P
https://discourse.nixos.org/t/github-action-fails-to-find-glibc-while-running-nix-provisioned-rsync/56831/16

[wathiede]

It seems like this isn't limited to libssl. I'm having a problem where libpq.so.5 can't be found when a binary dynamically linked to it is built w/ fenix.

Is there no workaround from this?

My builds and binaries were working with oxalica's rust-overlay, but I was trying to switch away from that, to fenix, because (ironically) it was including too many dependencies in the derivation.

[Hogeyama]

I've run into the same issue recently, and I believe the behavior changed starting from Rust nightly 2024-05-18. That version includes a change where rust-lld becomes the default linker for the x86_64-unknown-linux-gnu target.

In my case, updating fenix caused binaries that previously worked to fail at runtime due to missing dynamic libraries like libssl.so.

As a workaround, I was able to disable the implicit use of rust-lld by setting:

export RUSTFLAGS="-Zlinker-features=-lld"

This is described in the linker_features - The Rust Unstable Book.
Hope this helps!

[nyabinary]

It seems like figsoda is a bit inactive so maybe someone can reach out to nix-community and say they want to co-maintain this?

[nyabinary]

cc: @Mic92

[Mic92]

#195

[eureka-cpu]

Just merged #131, which should remedy the linker issue. If this is related to that, can you please check if this is no longer necessary?

[BrenekH]

Building my package output works as expected, but I have to disable rust-lld with env.RUSTFLAGS = "-C linker-features=-lld" to get cargo run to work in a dev shell.

[eureka-cpu]

@BrenekH is your project open source? Do you have pkg-config in your nativeBuildInputs and openssl.dev in your buildInputs? Also, not always the right decision for every project, but if you aren't 100% married to native TLS, most crates have a rustls feature which is very nice for avoiding the openssl/pkg-config dance entirely.

[BrenekH]

Yes, the flake is at https://codeberg.org/BrenekH/docker-dns-exporter/src/branch/master/flake.nix

The shell uses packages, which is just an alias for nativeBuildInputs. I'm not using buildInputs at all because the shell should just work for the current system. Cross-compilation is only needed for the packages output.

Edit: I just wanted to add an additional note that cargo run worked with oxalica/rust-overlay (further back in the commit history), it's just when moving to fenix for cross-compiling the packages output that the issue presented itself.

[eureka-cpu]

Yes, the flake is at https://codeberg.org/BrenekH/docker-dns-exporter/src/branch/master/flake.nix

Cool I will check it out when I have some time.

Edit: I just wanted to add an additional note that cargo run worked with oxalica/rust-overlay (further back in the commit history), it's just when moving to fenix for cross-compiling the packages output that the issue presented itself.

That's to be expected since rust-overlay includes libssl in the rpath, but fenix does not.