debugging ci

Author: moztcampbell

libs/build-nss-desktop.sh

@@ -78,6 +78,12 @@ elif [[ "$(uname -s)" == "Darwin" ]] || [[ "$(uname -s)" == "Linux" ]]; then
     -Dsign_libs=0 \
     -Ddisable_libpkix=1
   NSS_DIST_DIR="${NSS_SRC_DIR}/dist"
+
+  # Debug output for CI
+  if [[ -f "${NSS_SRC_DIR}/out/Release/build.ninja" ]]; then
+    echo "=== Dumping build.ninja for nss-desktop ==="
+    cat "${NSS_SRC_DIR}/out/Release/build.ninja"
+  fi
 fi
 
 # Assemble the DIST_DIR with relevant libraries and headers

libs/build-nss-ios.sh

@@ -93,6 +93,8 @@ gyp -f ninja "${NSS_SRC_DIR}/nss/nss.gyp" \
   -Dpython=python3
 
 GENERATED_DIR="${NSS_SRC_DIR}/nss/out/Release-$(echo ${OS_COMPILER} | tr '[:upper:]' '[:lower:]')/"
+echo "=== Dumping build.ninja for nss-ios ==="
+cat "${GENERATED_DIR}/build.ninja"
 ninja -C "${GENERATED_DIR}"
 
 # Assemble the DIST_DIR with relevant libraries and headers

libs/build-nss-macos-cross.sh

@@ -47,30 +47,39 @@ if [[ -z "${!nss_dir_var}" ]]; then
 fi
 
 # Use toolchain configuration from environment
-eval "CC=\$${RUST_ANDROID_PREFIX}_CC"
+eval "BASE_CC=\$${RUST_ANDROID_PREFIX}_CC"
 eval "AR=\$${RUST_ANDROID_PREFIX}_AR"
+eval "AS=\$${RUST_ANDROID_PREFIX}_AS"
 eval "RANLIB=\$${RUST_ANDROID_PREFIX}_RANLIB"
+eval "LD=\$${RUST_ANDROID_PREFIX}_LD"
 eval "STRIP=\$${RUST_ANDROID_PREFIX}_TOOLCHAIN_PREFIX/${NSS_TARGET}-strip"
+eval "TOOLCHAIN_BIN=\$${RUST_ANDROID_PREFIX}_TOOLCHAIN_PREFIX"
 eval "CFLAGS=\$${RUST_ANDROID_PREFIX}_CFLAGS_${NSS_TARGET//-/_}"
-eval "LDFLAGS=\$${RUST_ANDROID_PREFIX}_LDFLAGS_${NSS_TARGET//-/_}"
+
+# Bake all compiler/linker flags into CC like build-nss-ios.sh does
+# This ensures ninja picks up the flags for both compilation and linking
+CC="${BASE_CC} ${CFLAGS}"
+export CC
 
 # Build NSPR
 NSPR_BUILD_DIR=$(mktemp -d)
 pushd "${NSPR_BUILD_DIR}"
-"${NSS_SRC_DIR}"/nspr/configure \
+if ! "${NSS_SRC_DIR}"/nspr/configure \
   STRIP="${STRIP}" \
   RANLIB="${RANLIB}" \
   AR="${AR}" \
-  AS="${AS:-${AR}}" \
-  LD="${LD:-${AR}}" \
+  AS="${AS}" \
+  LD="${LD}" \
   CC="${CC}" \
   CCC="${CC}" \
-  CFLAGS="${CFLAGS}" \
-  LDFLAGS="${LDFLAGS}" \
   --target="${NSS_TARGET}" \
   --enable-64bit \
   --disable-debug \
-  --enable-optimize
+  --enable-optimize; then
+  echo "=== NSPR configure failed, dumping config.log ==="
+  cat config.log
+  exit 1
+fi
 make
 popd
 
@@ -97,7 +106,19 @@ gyp -f ninja "${NSS_SRC_DIR}/nss/nss.gyp" \
   -Dpython=python3
 
 GENERATED_DIR="${NSS_SRC_DIR}/nss/out/Release/"
-ninja -C "${GENERATED_DIR}"
+echo "=== Dumping build.ninja for nss-macos-cross ==="
+cat "${GENERATED_DIR}/build.ninja"
+
+# Only build static library targets, not shared libraries
+# This avoids issues with Linux vs macOS linker flag differences (-soname vs -install_name)
+# The copy-nss-libs.sh script only needs .a files anyway
+ninja -C "${GENERATED_DIR}" \
+  libplc4.a libplds4.a libnspr4.a \
+  libcertdb.a libcerthi.a libcryptohi.a libfreebl_static.a \
+  libnss_static.a libmozpkix.a libnssb.a libnssdev.a libnsspki.a \
+  libnssutil.a libpk11wrap_static.a libpkcs12.a libpkcs7.a \
+  libsmime.a libsoftokn_static.a libssl.a \
+  libarmv8_c_lib.a libgcm-aes-aarch64_c_lib.a
 
 # Assemble the DIST_DIR with relevant libraries and headers
 ./copy-nss-libs.sh \

taskcluster/scripts/toolchain/cross-compile-setup.sh

@@ -29,11 +29,12 @@ for TARGET in x86_64-apple-darwin aarch64-apple-darwin; do
   export ${RUST_ANDROID_PREFIX}_CC=${CLANG_BIN}/clang-20
   export ${RUST_ANDROID_PREFIX}_TOOLCHAIN_PREFIX=${CCTOOL_BIN}
   export ${RUST_ANDROID_PREFIX}_AR=${CCTOOL_BIN}/${TARGET}-ar
+  export ${RUST_ANDROID_PREFIX}_AS=${CCTOOL_BIN}/${TARGET}-as
   export ${RUST_ANDROID_PREFIX}_RANLIB=${CCTOOL_BIN}/${TARGET}-ranlib
+  export ${RUST_ANDROID_PREFIX}_LD=${CCTOOL_BIN}/${TARGET}-ld
   export ${RUST_ANDROID_PREFIX}_LD_LIBRARY_PATH=${CLANG_LIB}
   export ${RUST_ANDROID_PREFIX}_RUSTFLAGS="-C linker=${CLANG_BIN}/clang-20 -C link-arg=-fuse-ld=${CCTOOL_BIN}/${TARGET}-ld -C link-arg=-B -C link-arg=${CCTOOL_BIN} -C link-arg=-target -C link-arg=${TARGET} -C link-arg=-isysroot -C link-arg=${SYSROOT} -C link-arg=-Wl,-syslibroot,${SYSROOT} -C link-arg=-Wl,-dead_strip"
-  export ${RUST_ANDROID_PREFIX}_CFLAGS_${TARGET//-/_}="-B ${CCTOOL_BIN} -target ${TARGET} -isysroot ${SYSROOT}"
-  export ${RUST_ANDROID_PREFIX}_LDFLAGS_${TARGET//-/_}="-B ${CCTOOL_BIN} -target ${TARGET} -isysroot ${SYSROOT} -Wl,-syslibroot,${SYSROOT} -Wl,-dead_strip"
+  export ${RUST_ANDROID_PREFIX}_CFLAGS_${TARGET//-/_}="-B ${CCTOOL_BIN} -target ${TARGET} -isysroot ${SYSROOT} -fuse-ld=${CCTOOL_BIN}/${TARGET}-ld"
   export ${RUST_ANDROID_PREFIX}_BINDGEN_EXTRA_CLANG_ARGS="--sysroot ${SYSROOT}"
 done
 

taskcluster/scripts/toolchain/desktop-macos.sh

@@ -5,8 +5,8 @@ git submodule update --init
 ./taskcluster/scripts/toolchain/setup-fetched-rust-toolchain.sh
 . ./taskcluster/scripts/toolchain/cross-compile-setup.sh
 pushd libs
-./build-all.sh darwin-x86-64
 ./build-all.sh darwin-aarch64
+./build-all.sh darwin-x86-64
 popd
 mkdir -p "$UPLOAD_DIR"
 tar -czf "$UPLOAD_DIR"/macos.tar.gz libs/desktop