openssl: build static

overlay/default.nix

@@ -115,7 +115,9 @@ in {
 
   ncurses = addPatchesHost [ ./ncurses/genode.patch ] ncurses;
 
-  openssl = overrideAttrsHost (attrs: {
+  openssl =
+    overrideHost { static = true; } # shared library comes out stupid big
+    (overrideAttrsHost (attrs: {
       outputs = [ "out" ]
         ++ builtins.filter (x: x != "bin" && x != "out") attrs.outputs;
       patches = attrs.patches or [ ] ++ [ ./openssl/genode.patch ];
@@ -126,7 +128,7 @@ in {
       configureFlags = attrs.configureFlags ++ [ "no-devcryptoeng" ];
       postInstall =
         "rm $out/bin/c_rehash"; # eliminate the perl runtime dependency
-  }) openssl;
+    }) openssl);
 
   rsync = overrideHost {
     enableACLs = false;