chore: remove openssl-sys

Author: aptend

.github/workflows/release-rust.yml

@@ -67,8 +67,6 @@ jobs:
         working-directory: memoria
         env:
           SQLX_OFFLINE: "true"
-          # Cross image has libssl-dev 1.0.2 (Xenial); openssl-sys requires 1.1+ or 3.x. Force vendored.
-          OPENSSL_NO_PKG_CONFIG: "1"
         run: cross build --release -p memoria-cli --target ${{ matrix.target }}
 
       - name: Build (native)

memoria/Cargo.lock

@@ -19,7 +19,7 @@ rust-version = "1.85"
 tokio = { version = "1.40", features = ["full"] }
 axum = { version = "0.7", features = ["macros"] }
 futures = "0.3"
-sqlx = { version = "0.8", features = ["runtime-tokio", "mysql", "chrono", "json", "macros"] }
+sqlx = { version = "0.8", features = ["runtime-tokio", "tls-rustls", "mysql", "chrono", "json", "macros"] }
 serde = { version = "1.0", features = ["derive"] }
 serde_json = "1.0"
 chrono = { version = "0.4", features = ["serde"] }
@@ -28,7 +28,7 @@ anyhow = "1.0"
 tracing = "0.1"
 tracing-subscriber = { version = "0.3", features = ["env-filter"] }
 clap = { version = "4.5", features = ["derive", "env"] }
-reqwest = { version = "0.12", features = ["json"] }
+reqwest = { version = "0.12", default-features = false, features = ["json", "rustls-tls"] }
 uuid = { version = "1.0", features = ["v4"] }
 async-trait = "0.1"
 tower = "0.4"

memoria/Cargo.toml

@@ -1,10 +1,5 @@
 [target.aarch64-unknown-linux-gnu]
-# Vendored OpenSSL needs a C compiler, perl, and make (perl/make already in cross image).
-# Do NOT install system libssl-dev — the cross image (Xenial) has 1.0.2 which is
-# incompatible with openssl-sys. We use openssl = { features = ["vendored"] } instead.
+# No special setup needed — we use rustls (pure Rust TLS), no system OpenSSL required.
 
 [build.env]
-# Pass these into the cross Docker container so vendored OpenSSL build works:
-# - OPENSSL_NO_PKG_CONFIG: skip system libssl, force build from source
-# - SQLX_OFFLINE: don't require a live database for compile-time query checks
-passthrough = ["OPENSSL_NO_PKG_CONFIG", "SQLX_OFFLINE"]
+passthrough = ["SQLX_OFFLINE"]

memoria/Cross.toml

@@ -29,6 +29,4 @@ tracing = { workspace = true }
 tracing-subscriber = { workspace = true }
 tower-http = { workspace = true }
 sqlx = { workspace = true }
-reqwest = { version = "0.12", features = ["json", "blocking"] }
-# Vendored OpenSSL for cross-compilation (aarch64-linux has no system OpenSSL in CI)
-openssl = { version = "0.10", features = ["vendored"] }
+reqwest = { version = "0.12", default-features = false, features = ["json", "rustls-tls", "blocking"] }

memoria/crates/memoria-cli/Cargo.toml

@@ -15,7 +15,7 @@ uuid = { workspace = true }
 async-trait = { workspace = true }
 tracing = { workspace = true }
 tokio = { workspace = true }
-sqlx = { workspace = true, features = ["mysql", "runtime-tokio-native-tls"] }
+sqlx = { workspace = true, features = ["mysql", "runtime-tokio-rustls"] }
 memoria-git = { path = "../memoria-git" }
 
 [dev-dependencies]