ci: building on linux is hard

.github/workflows/python.yml

@@ -80,6 +80,7 @@ jobs:
           target: ${{ matrix.target }}
           manylinux: ${{ matrix.manylinux }}
           args: --release --out dist --interpreter ${{ matrix.interpreter || '3.8 3.9 3.10 3.11 3.12 3.13 pypy3.9 pypy3.10' }} --manifest-path python/Cargo.toml
+          rust-toolchain: 1.81 # https://github.com/geoarrow/geoarrow-rs/issues/716
           before-script-linux: |
             # If we're running on rhel centos, install needed packages.
             if command -v yum &> /dev/null; then

Cargo.toml

@@ -56,6 +56,7 @@ mime = "0.3.17"
 mockito = "1.5"
 object_store = "0.11.0"
 openssl = { version = "0.10.68", features = ["vendored"] }
+openssl-src = "=300.3.1+3.3.1"                                # joinked from https://github.com/iopsystems/rpc-perf/commit/705b290d2105af6f33150da04b217422c6d68701#diff-2e9d962a08321605940b5a657135052fbcef87b5e360662bb527c96d9a615542R41 to cross-compile Python
 parquet = { version = "52.2", default-features = false }
 pgstac = { version = "0.2.1", path = "crates/pgstac" }
 pyo3 = "0.22.3"

python/Cargo.toml

@@ -32,6 +32,7 @@ stac = { workspace = true, features = [
 stac-api = { workspace = true, features = ["client"] }
 stac-duckdb.workspace = true
 openssl.workspace = true # only so we can vendor it when cross-compiling
+openssl-src.workspace = true # work around https://github.com/openssl/openssl/issues/25366
 tokio = { workspace = true, features = ["rt"] }
 
 [package.metadata.cross.target.x86_64-unknown-linux-gnu]

python/src/lib.rs

@@ -11,6 +11,7 @@ mod write;
 use duckdb as _;
 use error::Error;
 use openssl as _;
+use openssl_src as _;
 use pyo3::prelude::*;
 
 type Result<T> = std::result::Result<T, Error>;