Fix CI job

Dockerfile.build

@@ -9,6 +9,8 @@ FROM --platform=$BUILDPLATFORM rust:slim-trixie AS base
 ENV DEBIAN_FRONTEND="noninteractive" \
     BINSTALL_DISABLE_TELEMETRY=true \
     CARGO_TERM_COLOR=always \
+    CARGO_NET_RETRY=10 \
+    CARGO_NET_GIT_FETCH_WITH_CLI=true \
     LANG=C.UTF-8 \
     TZ=UTC \
     TERM=xterm-256color \
@@ -21,7 +23,7 @@ RUN \
     rm -f /etc/apt/apt.conf.d/docker-clean && \
     echo 'Binary::apt::APT::Keep-Downloaded-Packages "true";' >/etc/apt/apt.conf.d/keep-cache && \
     apt-get update && \
-    apt-get install -yq --no-install-recommends ca-certificates curl jq xz-utils make libclang-19-dev
+    apt-get install -yq --no-install-recommends ca-certificates curl git jq xz-utils make libclang-19-dev
 # Zig is pinned to 0.13.0. Zig 0.14+ changed how its default target ABI is
 # resolved for `x86_64-linux-gnu`-style triples, and on this dependency tree
 # (aws-lc-sys, libsqlite3-sys, rust-std 1.87+) that surfaces as ld.lld
@@ -34,8 +36,19 @@ RUN \
     zig version
 # Install cargo-binstall
 RUN curl --retry 5 -fL --proto '=https' --tlsv1.2 -sSf https://raw.githubusercontent.com/cargo-bins/cargo-binstall/main/install-from-binstall-release.sh | bash
-# Install cargo-chef & sccache & cargo-zigbuild
-RUN cargo binstall --no-confirm cargo-chef sccache cargo-zigbuild
+# Install cargo-chef & sccache & cargo-zigbuild. Versions are pinned so that an
+# upstream release without prebuilt binaries for this platform cannot silently
+# turn this into a from-source build, and the `compile` strategy is disabled
+# because that fallback needs an OpenSSL toolchain this image does not carry:
+# it burns minutes and then fails. A transient GitHub fetch failure is retried.
+RUN \
+    for attempt in 1 2 3; do \
+        cargo binstall --no-confirm --disable-strategies compile \
+            cargo-chef@0.1.78 sccache@0.17.0 cargo-zigbuild@0.23.2 && break; \
+        echo "cargo binstall attempt ${attempt} failed, retrying"; \
+        sleep $((attempt * 15)); \
+    done && \
+    command -v cargo-chef && command -v sccache && command -v cargo-zigbuild
 
 # *****************
 # Planner