Add AWS_LC_SYS_CFLAGS, drop arm/v7 support

Author: alpeb

.github/workflows/release-cni-plugin.yml

@@ -47,7 +47,7 @@ jobs:
                 build-cni-plugin-image \
                   --cache-from type=local,src="$RUNNER_TEMP/.buildx-cache" \
                   --cache-to type=local,dest="$RUNNER_TEMP/.buildx-cache",mode=max \
-                  --platform linux/amd64,linux/arm64,linux/arm/v7
+                  --platform linux/amd64,linux/arm64
       - run: just-dev prune-action-cache "$RUNNER_TEMP/.buildx-cache"
 
       # Only publish images on release
@@ -63,7 +63,7 @@ jobs:
                 build-cni-plugin-image \
                   --cache-from type=local,src="$RUNNER_TEMP/.buildx-cache" \
                   --cache-to type=local,dest="$RUNNER_TEMP/.buildx-cache",mode=max \
-                  --platform linux/amd64,linux/arm64,linux/arm/v7 \
+                  --platform linux/amd64,linux/arm64 \
                   --output type=registry
       - if: needs.meta.outputs.mode == 'release'
         uses: sigstore/cosign-installer@d58896d6a1865668819e1d91763c7751a165e159

Dockerfile-cni-plugin

@@ -29,10 +29,14 @@ RUN --mount=type=cache,target=target \
     target=$(case "$TARGETARCH" in \
         amd64) echo x86_64-unknown-linux-musl ;; \
         arm64) echo aarch64-unknown-linux-musl ;; \
-        arm) echo armv7-unknown-linux-musleabihf ;; \
         *) echo "unsupported architecture: $TARGETARCH" >&2; exit 1 ;; \
     esac) && \
-    just cni-repair-controller arch="$TARGETARCH" profile=release build && \
+    cflags=$(case "$TARGETARCH" in \
+        amd64) echo '' ;; \
+        arm64) echo '-fuse-ld=/usr/aarch64-linux-gnu/bin/ld' ;; \
+        *) echo "unsupported architecture: $TARGETARCH" >&2; exit 1 ;; \
+    esac) && \
+    AWS_LC_SYS_CFLAGS=$cflags just cni-repair-controller arch="$TARGETARCH" profile=release build && \
     mv "target/$target/release/linkerd-cni-repair-controller" .
 
 FROM --platform=$TARGETPLATFORM alpine:3.22.1 as runtime