构建Rust容器时遇'-m64'选项不识别错误，求解决方案

问题背景 #

项目结构 #

.
├── ./Cargo.lock
├── ./Cargo.toml
├── ./Dockerfile
├── ./Readme.md
├── ./docker-compose.yml
├── ./facade-service
│	├── ./facade-service/Cargo.toml
│	└── ./facade-service/src
│		└── ./facade-service/src/main.rs
├── ./logging-service
│	├── ./logging-service/Cargo.toml
│	└── ./logging-service/src
│		└── ./logging-service/src/main.rs
├── ./messages-service
│	├── ./messages-service/Cargo.toml
│	└── ./messages-service/src
│		└── ./messages-service/src/main.rs
├── ./src
│	└── ./src/main.rs

Cargo工作区配置 #

[workspace]
members = [
    "facade-service",
    "logging-service",
    "messages-service",
]
resolver = "2"

Dockerfile内容 #

FROM rust:1.75.0 as builder
RUN apt-get update -y && apt-get install -y pkg-config make g++ libssl-dev musl-tools
RUN apt update && apt -y upgrade

WORKDIR /usr/src/app

COPY .. .

RUN rustup target add x86_64-unknown-linux-musl
RUN cargo build --target x86_64-unknown-linux-musl --release

FROM rust:alpine3.19 as facade-service

RUN apk add --no-cache openssl-dev pkgconfig

COPY --from=builder /usr/src/app/target/x86_64-unknown-linux-musl/release/facade-service /usr/local/bin/facade-service

CMD ["facade-service"]

docker-compose.yml内容 #

version: '3.8'

services:
  facade-service:
    build:
      context: .
      dockerfile: Dockerfile
      target: facade-service
    ports:
      - "8000:8000"

问题描述 #

本地执行cargo build时所有工作区成员均可正常编译，但执行docker compose up时，在cargo build --target x86_64-unknown-linux-musl --release步骤中出现编译错误：OpenSSL构建时musl-gcc无法识别'-m64'选项，导致构建失败。

原因分析 #

错误核心是交叉编译时，通过apt安装的libssl-dev是针对glibc编译的版本，pkg-config会错误地将该版本的编译参数（包括-m64）传递给musl-gcc。而musl-gcc不支持-m64选项，因此触发编译失败。同时当前构建流程未为musl目标单独适配OpenSSL依赖，直接复用了主机系统的glibc版本库，加剧了参数不兼容问题。

修复方案 #

方案一：使用rustls替代系统OpenSSL（推荐） #

切换到纯Rust实现的TLS库rustls，彻底规避系统OpenSSL的交叉编译依赖问题。修改对应服务的Cargo.toml，替换TLS相关依赖：

# 以reqwest为例，启用rustls特性
reqwest = { version = "0.11", features = ["rustls-tls"] }

# 以hyper为例，替换hyper-tls为hyper-rustls
hyper = "0.14"
hyper-rustls = "0.23"

方案二：为musl目标构建静态链接的OpenSSL #

若必须使用系统OpenSSL，需在builder阶段为musl目标编译适配的静态OpenSSL库，让pkg-config指向该版本：

FROM rust:1.75.0 as builder
RUN apt-get update -y && apt-get install -y pkg-config make g++ musl-tools wget tar

# 编译musl版本的OpenSSL
WORKDIR /tmp/openssl
RUN wget https://www.openssl.org/source/openssl-1.1.1w.tar.gz && tar xzf openssl-1.1.1w.tar.gz
WORKDIR /tmp/openssl/openssl-1.1.1w
RUN ./Configure no-shared no-zlib --prefix=/usr/local/musl --openssldir=/usr/local/musl/ssl linux-x86_64
RUN make CC=musl-gcc
RUN make install

WORKDIR /usr/src/app

# 设置环境变量指定musl版本OpenSSL路径
ENV PKG_CONFIG_ALLOW_CROSS=1
ENV PKG_CONFIG_PATH=/usr/local/musl/lib/pkgconfig
ENV OPENSSL_DIR=/usr/local/musl

COPY .. .

RUN rustup target add x86_64-unknown-linux-musl
RUN cargo build --target x86_64-unknown-linux-musl --release

FROM rust:alpine3.19 as facade-service

RUN apk add --no-cache openssl-dev pkgconfig

COPY --from=builder /usr/src/app/target/x86_64-unknown-linux-musl/release/facade-service /usr/local/bin/facade-service

CMD ["facade-service"]

方案三：使用alpine作为builder基础镜像 #

利用alpine默认使用musl libc的特性，避免交叉编译的参数冲突：

FROM rust:1.75.0-alpine3.19 as builder
RUN apk add --no-cache pkgconfig make g++ openssl-dev musl-dev

WORKDIR /usr/src/app

COPY .. .

RUN cargo build --release

FROM alpine:3.19 as facade-service

RUN apk add --no-cache openssl

COPY --from=builder /usr/src/app/target/release/facade-service /usr/local/bin/facade-service

CMD ["facade-service"]

内容的提问来源于stack exchange，提问作者Nazar Demchuk