Boring build broken for non-FIPS about ztunnel

[nmittler]

The latest cloudflare boring build works fine for me on M1 osx. It's just that the particular version ztunnel is using is now broken (I assume something changed in upstream boringssl).

ztunnel has platform conditionals that render non-linux builds mostly useless anyway.

While true, there's a lot of development that can still be done without requiring linux. All/most of unit tests run fine on osx, for example.

[bleggett]

I do think/agree non-FIPS linux builds are something we need to support broadly, since as I've mentioned before FIPS is a massive pain and many orgs/users will not need it, or expressly will not want it (e.g. they will want to use newer crypto libs than the USG certifies).

That being said, without even basic "does it build" CI for $platform+$arch it's going to be effectively impossible to guard against breakage long-term for that $platform+$arch. And we are (probably) never adding ztunnel CI for macOS.

[nmittler]

FYI, I suspect this is blocked by cloudflare/boring#156.

[bleggett]

fwiw I gave up trying to rebuild boringssl from scratch on M1 Mac with a macOS/unix target and just use one of

• a local linux/arm64 VM (lima works nicely and stays out of the way)
• make shell (effectively linux/arm64)

to do ztunnel builds.

ztunnel has platform conditionals that render non-linux builds mostly useless anyway.

[nmittler]

Yeah, I think the main guard against macOS breakage is simply developers for the project (I know I'm not the only one on mac).