datadog-agent: override openssf-compiler-options to permit lazy binding

With this, we can re-enable GPU support.

Fixes: chainguard-dev/internal-dev#7725

Signed-off-by: dann frazier <[email protected]>

datadog-agent.yaml

@@ -81,6 +81,8 @@ environment:
     CGO_CFLAGS: "-Os -I/usr/include/"
     # Pass options to the linker.
     CGO_LDFLAGS: "-L/usr/lib/"
+    # See https://github.com/wolfi-dev/os/issues/34568
+    GCC_SPEC_FILE: /home/build/openssf.spec
     # disables generation of debugging information
     GOFLAGS: "-ldflags=-w"
     # The version of linux-headers to fetch kernel headers for
@@ -95,12 +97,9 @@ pipeline:
       tag: ${{package.version}}
       expected-commit: 646618687e4f9351b5fe19cce678c9cd4b011e74
 
-  # disable GPU support for the agent as it causes test failures at runtime
-  # error: agent: undefined symbol: nvmlVgpuTypeGetCapabilities
-  # upstream issue to track https://github.com/DataDog/datadog-agent/issues/32419
-  - uses: patch
-    with:
-      patches: /home/build/disable-gpu.patch
+  - runs: |
+      gccdir="$(GCC_SPEC_FILE=/dev/null gcc --print-search-dirs | grep ^install: | cut -d' ' -f2)"
+      sed -r 's/,?-z,now//' < "$gccdir/openssf.spec" > /home/build/openssf.spec
 
   # Install `invoke` (build) dependencies. We ultimately package with venv so
   # these won't leak into the package.