try glibc 2.17

Author: sxlijin

.github/workflows/build-typescript-release-aarch64-glibc.yaml

@@ -30,7 +30,7 @@ jobs:
             # Do not use -latest, since it uses a different glibc version!
             host: ubuntu-22.04-arm
             # ubuntu-22.04-arm, the oldest available GHA runner, has glibc 2.35
-            container: ghcr.io/rust-cross/manylinux_2_28-cross:aarch64
+            container: ghcr.io/rust-cross/manylinux2014-cross:aarch64
             node_build: pnpm build:napi-release --target aarch64-unknown-linux-gnu
             cargo_args: -p baml-typescript-ffi -p baml-python-ffi
 
@@ -39,6 +39,10 @@ jobs:
     container: ${{ matrix._.container }}
     env:
       ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION: true
+      # manylinux2014 cross toolchain does not define __ARM_ARCH for ring's asm;
+      # force it via target-specific CFLAGS so cc-rs sets it when compiling asm.
+      CFLAGS_aarch64_unknown_linux_gnu: "-D__ARM_ARCH=8"
+      CFLAGS_aarch64-unknown-linux-gnu: "-D__ARM_ARCH=8"
     steps:
       - name: Checkout
         uses: actions/checkout@v4