CI/CD: Secure reliable cross-compilation via explicit Cross.toml registry and container isolation safeguards to solve MIPS, FreeBSD, and GLIBC failures

.github/workflows/release.yml

@@ -62,14 +62,17 @@ jobs:
             target: aarch64-unknown-linux-musl
             artifact_name: ostp
             release_name: ostp-linux-arm64.tar.gz
+            use_cross: true
           - os: ubuntu-latest
             target: armv7-unknown-linux-musleabihf
             artifact_name: ostp
             release_name: ostp-linux-armv7.tar.gz
+            use_cross: true
           - os: ubuntu-latest
             target: x86_64-unknown-freebsd
             artifact_name: ostp
             release_name: ostp-freebsd-amd64.tar.gz
+            use_cross: true
 
           # ==========================================
           # 🛰️ ROUTER & SPECIAL ARCHITECTURES (Cross)
@@ -109,6 +112,7 @@ jobs:
         uses: dtolnay/rust-toolchain@stable
 
       - name: Activate rust compilation caching
+        if: ${{ !matrix.use_cross }}
         uses: swatinem/rust-cache@v2
 
       - name: Setup local MUSL linker dependencies

Cross.toml

@@ -0,0 +1,19 @@
+# Professional Cross-Compilation Target Environment Registry
+
+[target.mipsel-unknown-linux-musl]
+image = "ghcr.io/cross-rs/mipsel-unknown-linux-musl:edge"
+
+[target.riscv64gc-unknown-linux-gnu]
+image = "ghcr.io/cross-rs/riscv64gc-unknown-linux-gnu:edge"
+
+[target.aarch64-linux-android]
+image = "ghcr.io/cross-rs/aarch64-linux-android:edge"
+
+[target.x86_64-unknown-freebsd]
+image = "ghcr.io/cross-rs/x86_64-unknown-freebsd:edge"
+
+[target.aarch64-unknown-linux-musl]
+image = "ghcr.io/cross-rs/aarch64-unknown-linux-musl:edge"
+
+[target.armv7-unknown-linux-musleabihf]
+image = "ghcr.io/cross-rs/armv7-unknown-linux-musleabihf:edge"