build: Switch from from-scratch builds to using AWS-vendored build im…

…age to work around `aws-lc-rs` target allowlist

Signed-off-by: Felicitas Pojtinger <felicitas@pojtinger.com>

.github/workflows/hydrun.yaml

@@ -17,14 +17,14 @@ jobs:
           # Binaries
           - id: rust.x86_64
             src: .
-            os: alpine:edge
+            os: public.ecr.aws/firecracker/fcuvm:v75
             flags: ""
             cmd: ./Hydrunfile rust x86_64
             dst: out/*
             runner: depot-ubuntu-22.04-32
           - id: rust.aarch64
             src: .
-            os: alpine:edge
+            os: public.ecr.aws/firecracker/fcuvm:v75
             flags: ""
             cmd: ./Hydrunfile rust aarch64
             dst: out/*

Hydrunfile

@@ -4,16 +4,12 @@ set -e
 
 # Rust
 if [ "$1" = "rust" ]; then
-    # Install native dependencies
-    apk add rust cargo clang-dev cmake linux-headers make git
-
     # Configure Git
     git config --global --add safe.directory '*'
 
     # Build
-    cp "resources/seccomp/$2-unknown-linux-musl.json" "resources/seccomp/$2-alpine-linux-musl.json"
     export RUSTFLAGS='-C target-feature=+crt-static'
-    cargo build --package firecracker --package jailer --package seccompiler --package rebase-snap --package cpu-template-helper --target "$2-alpine-linux-musl" --all-features --release
+    cargo build --package firecracker --package jailer --package seccompiler --package rebase-snap --package cpu-template-helper --target "$2-unknown-linux-musl" --all-features --release
 
     # Stage binaries
     mkdir -p out