ci: use ring and cache Rust builds

Author: stevefan1999-personal

.github/workflows/targets.yml

@@ -34,7 +34,6 @@ on:
       - rust-toolchain.toml
 
 env:
-  AWS_LC_SYS_NO_JITTER_ENTROPY: "1"
   CARGO_INCREMENTAL: "0"
   # Hosted runners have 14 GB disks. Keep symbols for panic backtraces but do
   # not emit DWARF into every dependency and test binary.
@@ -102,8 +101,14 @@ jobs:
     env:
       DEN_TEST_CC: ${{ matrix.cc }}
       DEN_TEST_CC_ARGS: ${{ matrix.cc_args }}
+      RUSTC_WRAPPER: sccache
+      SCCACHE_GHA_ENABLED: "true"
     steps:
       - uses: actions/checkout@v4
+      - name: Install sccache
+        uses: mozilla-actions/sccache-action@fc920bf0ec8de6ee65d409111f7ec508035751ba # v0.0.11
+        with:
+          version: v0.16.0
       - name: Fetch pinned WPT fixture
         shell: bash
         run: |
@@ -232,21 +237,27 @@ jobs:
         -isystem /usr/lib/llvm-18/lib/clang/18/include
         -idirafter /usr/include
       CROSS_BUILD_ENV_PASSTHROUGH: >-
-        AWS_LC_SYS_NO_JITTER_ENTROPY
+        ACTIONS_CACHE_SERVICE_V2 ACTIONS_RESULTS_URL ACTIONS_RUNTIME_TOKEN
         BINDGEN_EXTRA_CLANG_ARGS_i686_pc_windows_gnu
         DEN_TEST_CC INSTA_UPDATE INSTA_WORKSPACE_ROOT
         RUST_BACKTRACE RUST_TEST_THREADS
+        SCCACHE_GHA_ENABLED
         RUSTFLAGS TARGET TARGET_FEATURES TARGET_WASM CARGO_INCREMENTAL
         CARGO_PROFILE_DEV_DEBUG CARGO_PROFILE_TEST_DEBUG
         CARGO_PROFILE_DEV_OPT_LEVEL CARGO_PROFILE_TEST_OPT_LEVEL
       DEN_TEST_CC: ${{ matrix.cc }}
       RUSTFLAGS: ${{ matrix.rustflags }}
       RUST_TEST_THREADS: "1"
+      SCCACHE_GHA_ENABLED: "true"
       TARGET: ${{ matrix.target }}
       TARGET_FEATURES: ${{ matrix.features }}
       TARGET_WASM: ${{ matrix.wasm }}
     steps:
       - uses: actions/checkout@v4
+      - name: Install sccache
+        uses: mozilla-actions/sccache-action@fc920bf0ec8de6ee65d409111f7ec508035751ba # v0.0.11
+        with:
+          version: v0.16.0
       - name: Fetch pinned WPT fixture
         run: |
           wpt_rev=$(git ls-tree HEAD vendor/wpt | awk '{print $3}')
@@ -265,6 +276,8 @@ jobs:
           rustup toolchain install stable --profile minimal --no-self-update
           --target ${{ matrix.target }}
       - name: Install cross
+        env:
+          RUSTC_WRAPPER: sccache
         run: >-
           cargo install cross --git https://github.com/cross-rs/cross
           --rev 8c1a8aa4b661711f4b7b6ac07c2e8929ce2f7d27 --locked
@@ -273,9 +286,12 @@ jobs:
         run: |
           # cross-util discards the container exit status, so require a success marker.
           status_file="target/.nextest-$TARGET.ok"
+          mkdir -p target
+          cp "$SCCACHE_PATH" target/sccache
           rm -f "$status_file"
           cross-util run --target "$TARGET" -- '
             set -eu
+            export RUSTC_WRAPPER=/target/sccache
             archive=/tmp/cargo-nextest.tar.gz
             curl --proto "=https" --tlsv1.2 -fsSLo "$archive" \
               https://github.com/nextest-rs/nextest/releases/download/cargo-nextest-0.9.143/cargo-nextest-0.9.143-x86_64-unknown-linux-gnu.tar.gz
@@ -284,13 +300,6 @@ jobs:
               "$archive" | sha256sum -c -
             tar -xzf "$archive" -C /tmp
 
-            case "$TARGET" in
-              i686-pc-windows-gnu|x86_64-pc-windows-gnu)
-                apt-get update
-                apt-get install -y --no-install-recommends nasm
-                ;;
-            esac
-
             set --
             if [ "${TARGET_WASM:-1}" = 0 ]; then
               set -- --exclude den-stdlib-wasm
@@ -319,9 +328,15 @@ jobs:
       CARGO_PROFILE_TEST_OPT_LEVEL: "1"
       RUSTFLAGS: -C target-feature=-crt-static
       RUST_TEST_THREADS: "1"
+      RUSTC_WRAPPER: sccache
+      SCCACHE_GHA_ENABLED: "true"
       TARGET: ${{ matrix.target }}
     steps:
       - uses: actions/checkout@v4
+      - name: Install sccache
+        uses: mozilla-actions/sccache-action@fc920bf0ec8de6ee65d409111f7ec508035751ba # v0.0.11
+        with:
+          version: v0.16.0
       - name: Fetch pinned WPT fixture
         run: |
           wpt_rev=$(git ls-tree HEAD vendor/wpt | awk '{print $3}')
@@ -377,8 +392,15 @@ jobs:
     name: x86_64-unknown-linux-musl release
     runs-on: ubuntu-24.04
     timeout-minutes: 30
+    env:
+      RUSTC_WRAPPER: sccache
+      SCCACHE_GHA_ENABLED: "true"
     steps:
       - uses: actions/checkout@v4
+      - name: Install sccache
+        uses: mozilla-actions/sccache-action@fc920bf0ec8de6ee65d409111f7ec508035751ba # v0.0.11
+        with:
+          version: v0.16.0
       - name: Install musl target and toolchain
         run: |
           rustup target add x86_64-unknown-linux-musl
@@ -606,6 +628,8 @@ jobs:
           run: |
             export PATH="$HOME/.cargo/bin:/usr/llvm/19/bin:/usr/gnu/bin:/opt/csw/bin:$PATH"
             export LIBCLANG_PATH=/usr/llvm/19/lib/amd64
+            export CC_x86_64_pc_solaris=clang
+            export CFLAGS_x86_64_pc_solaris=-D_STRICT_SYMBOLS
             cargo nextest run --locked --profile compat --no-fail-fast --workspace \
               --exclude den-stdlib-wasm --target x86_64-pc-solaris \
               --no-default-features \