better build profiles

Signed-off-by: Sylvain Hellegouarch <[email protected]>

Author: Lawouach

.cargo/config.toml

@@ -0,0 +1,39 @@
+[build]
+# No global rustflags here; target-specific below.
+# If you always target a specific platform for the server, set:
+# target = "x86_64-unknown-linux-gnu"
+
+# -------- Server target (GNU Linux example) --------
+[target.x86_64-unknown-linux-gnu]
+rustflags = [
+  "-C", "target-cpu=native",          # use host CPU features for the server
+  "-C", "symbol-mangling-version=v0",
+  "-C", "link-arg=-Wl,--gc-sections",
+]
+
+# macOS (if you build/run locally)
+[target.aarch64-apple-darwin]
+rustflags = [
+  "-C", "target-cpu=native",
+  "-C", "symbol-mangling-version=v0",
+  "-C", "link-arg=-Wl,-dead_strip",
+]
+
+# -------- eBPF target (Aya / bpfel-unknown-none as an example) --------
+# Adjust this triple to your actual BPF target (bpfel-unknown-none or bpfeb)
+[target.bpfel-unknown-none]
+rustflags = [
+  # keep minimal & portable; let profiles set panic=abort
+  "-C", "link-arg=-z",   # placeholder; typically no special link args here
+  # (avoid target-cpu=native, avoid exotic link flags)
+]
+
+# -------- Optional MUSL for small static server builds --------
+# [target.x86_64-unknown-linux-musl]
+# linker = "musl-gcc"
+# rustflags = [
+#   "-C", "target-cpu=x86-64-v3",
+#   "-C", "embed-bitcode=no",
+#   "-C", "symbol-mangling-version=v0",
+#   "-C", "link-arg=-Wl,--gc-sections",
+# ]

.github/workflows/release.yaml

@@ -185,17 +185,17 @@ jobs:
 
       - name: Build Linux/MacOSX (shared)
         if: matrix.os != 'windows-latest' && matrix.target != 'x86_64-unknown-linux-musl' && matrix.target != 'aarch64-unknown-linux-musl'
-        run: cargo +nightly build --release --features agent --target ${{ matrix.target }}
+        run: cargo +nightly build --profile prod-fast --features agent --target ${{ matrix.target }}
         working-directory: ./fault-cli
 
       - name: Build Windows (shared)
         if: matrix.os == 'windows-latest'
-        run: cargo +nightly build --release --target ${{ matrix.target }}
+        run: cargo +nightly build --profile prod-fast --target ${{ matrix.target }}
         working-directory: ./fault-cli
 
       - name: Build (static)
         if: matrix.target == 'x86_64-unknown-linux-musl' || matrix.target == 'aarch64-unknown-linux-musl'
-        run: cargo +nightly zigbuild --release --target ${{ matrix.target }}
+        run: cargo +nightly zigbuild --profile prod-small --target ${{ matrix.target }}
         working-directory: ./fault-cli
 
       - name: Upload binaries to release
@@ -320,7 +320,7 @@ jobs:
         if: matrix.target != 'x86_64-unknown-linux-musl' && matrix.target != 'aarch64-unknown-linux-musl'
         run: |
           cargo install bpf-linker --git https://github.com/aya-rs/bpf-linker.git
-          cargo +nightly build --release --features stealth --target ${{ matrix.target }}
+          cargo +nightly build --profile prod-fast --features stealth --target ${{ matrix.target }}
           cargo +nightly build \
             --release \
             -p fault-ebpf-programs \
@@ -332,7 +332,7 @@ jobs:
         if: matrix.target == 'x86_64-unknown-linux-musl' || matrix.target == 'aarch64-unknown-linux-musl'
         run: |
           cargo install bpf-linker --git https://github.com/aya-rs/bpf-linker.git
-          cargo +nightly zigbuild --release --features stealth --target ${{ matrix.target }}
+          cargo +nightly zigbuild --profile prod-fast --features stealth --target ${{ matrix.target }}
           cargo +nightly build \
             --release \
             -p fault-ebpf-programs \

Cargo.toml

@@ -24,11 +24,49 @@ include = [
 which = { version = "8.0.0", default-features = false, features = ["real-sys"] }
 anyhow = { version = "1", default-features = false }
 
+[profile.dev]
+opt-level = 0
+debug = 2
+debug-assertions = true
+overflow-checks = true
+incremental = true
+
 [profile.release]
-lto = true
+opt-level = 3
+lto = "thin"          # profile-level (allowed)
+codegen-units = 1
+panic = "abort"       # profile-level (allowed)
+incremental = false
+debug-assertions = false
+overflow-checks = false
+strip = "debuginfo"   # profile-level (allowed)
+
+# ---------- Server-focused profiles you select explicitly ----------
+[profile.prod-fast]
+inherits = "release"
+lto = "fat"
+opt-level = 3
+strip = "debuginfo"
+
+[profile.prod-small]
+inherits = "release"
+lto = "thin"
+opt-level = "z"
+strip = "symbols"
+
+# ---------- Per-package overrides (ONLY allowed keys) ----------
+
+# (Optional) tweak the server crate a bit; do NOT set lto/strip/panic here
+[profile.release.package.fault-cli]
+opt-level = 3
 codegen-units = 1
-panic = "abort"
+# (leave out panic/lto/strip)
 
+# eBPF crate: conservative tweaks; again, no panic/lto/strip here
 [profile.release.package.fault-ebpf-programs]
+opt-level = "z"
 codegen-units = 1
-debug = 2
+debug = 0
+debug-assertions = false
+overflow-checks = false
+# (leave out panic/lto/strip)

fault-cli/Cargo.toml

@@ -158,8 +158,7 @@ path = "src/main.rs"
 default = [
     "demo",
     "scenario",
-    "injection",
-    "agent"
+    "injection"
 ]
 demo = []
 scenario = [