attempt to accelerate CI by shortening OpenSSL compile time

[keldonin]

This one is about shortening compilation time. Building kryoptic is just taking forever as OpenSSL has to be built. I deactivated tests and docs. We'll see how it goes.

[Copilot]

Pull request overview

This PR optimizes the CI build time by disabling OpenSSL documentation and test compilation during the build process. The change adds no-docs no-tests flags to the OpenSSL Configure command in the kryoptic-fips workflow.

Changes:

• Modified OpenSSL Configure command to skip building documentation and tests, reducing compilation time

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[keldonin]

That seems to accelerate. However, when looking closer at the logs, openssl is being built twice: once externally (as a dependency), and once through the build of kryoptic crate...

https://github.com/latchset/kryoptic/blob/main/ossl/build.rs

duplication of effort?

[wiktor-k]

This is already an improvement 👌 It'd be good to get to the bottom of this and if possible use packaged versions... maybe we can switch to Fedora for these jobs? CC @Jakuje

[Jakuje]

thank you!

[Jakuje]

That seems to accelerate. However, when looking closer at the logs, openssl is being built twice: once externally (as a dependency), and once through the build of kryoptic crate...

AFAIK the first run should be cached and second run should just call make that should verify the artifacts are already up to date from the first step, but I did not dive into that deeper.

This is already an improvement 👌 It'd be good to get to the bottom of this and if possible use packaged versions... maybe we can switch to Fedora for these jobs? CC @Jakuje

The build of kryoptic itself is fast as it is linking against the system openssl. The only slow pipeline is the kryoptic-fips which really does not have a rpm packaged version as for now.

[keldonin]

I guess I can squash and merge at this point?

[keldonin]

I'm not offered the squash-and-merge option, just "Merge pull request"... Something you could enable for the project? Otherwise the branch commits will pollute the commit history. Alternatively, I could rebase, but enabling squash on github is more straightforward.
Thanks!

[wiktor-k]

I think only @hug-dev can do that...