ci: bump base image for reproducible builds (#16307)

Author: shekhirin

Dockerfile.reproducible

@@ -1,8 +1,8 @@
-# Use the Rust 1.86 image based on Debian Bullseye
-FROM rust:1.86-bullseye AS builder
+# Use the Rust 1.86 image based on Debian Bookworm
+FROM rust:1.86-bookworm AS builder
 
 # Install specific version of libclang-dev
-RUN apt-get update && apt-get install -y libclang-dev=1:11.0-51+nmu5
+RUN apt-get update && apt-get install -y libclang-dev=1:14.0-55.7~deb12u1
 
 # Copy the project to the container
 COPY ./ /app

Makefile

@@ -65,7 +65,7 @@ RUST_BUILD_FLAGS =
 # Enable static linking to ensure reproducibility across builds
 RUST_BUILD_FLAGS += --C target-feature=+crt-static
 # Set the linker to use static libgcc to ensure reproducibility across builds
-RUST_BUILD_FLAGS += -Clink-arg=-static-libgcc
+RUST_BUILD_FLAGS += -C link-arg=-static-libgcc
 # Remove build ID from the binary to ensure reproducibility across builds
 RUST_BUILD_FLAGS += -C link-arg=-Wl,--build-id=none
 # Remove metadata hash from symbol names to ensure reproducible builds