This builds fine here, but I have not spent much time thinking about the diff.
Only two small things for now: > @@ -1,12 +1,17 @@ > COMMENT = reverse-proxy with built-in authentication and auditing > > +# Intersection of GO_ARCHS and RUST_ARCHS, and without i386 and 32-bit arm > +# because Teleport disables those on purpose in its RDP client build rules. > +ONLY_FOR_ARCHS = aarch64 amd64 > + Pretty sure you can skip this. You have bdeps on lang/rust and lang/go from their use in the modules, so you already get the intersection of the two architectures from their respective ONLY_FOR_ARCHS, and this excludes i386 because i386 is not in RUST_ARCHS. Do you know how aws-lc is used? If it is used as the backend for rustls. If so, you will probably need USE_NOBTCFI, see e.g., the top of devel/zizmor.
