[rfc] build-style: go: set buildmode=pie globally

[dkwo]

• Packages that fail to build with pie (due to not using the go build style) or set CGO_ENABLED=0 have nopie set.

Todo: revbump all.
[ci skip]

Latest go 1.25.7 world rebuild on aarch64 performed.

Notes:

lxd-lts, lxd: remove?
chronograph, gotify-server: fail to build on master on aarch64

[leahneukirchen]

So, which packages do you expect to fail and why?

I'd also recommend do apply this together with a Go release bump.

[CameronNemo]

Regarding LXD / Incus... I do want to migrate to Incus and completely remove LXD down the line. Don't really have time for that right now though :/

[benalb]

about bombadillo, I tried to rise an issue upstream, but they do not allow rising issues without a tilde account, that I do not have. Right now I am in the #helpedesk channel in tilde irc, waiting to someone to reply to me.

Update, very nicely, they created an tilde account for me, I could rise an issue about the timeout error, and also they pointed me to go-gitea/gitea#27945

It seems the bug issue has been resolved, I can donwload the tar.gz again.

[dkwo]

Second rebuild completed, nothing new to report.

[dkwo]

@leahneukirchen Can you take a look?
In summary, sbctl is fixed in linked pr; lxd is broken since go 1.21 (unnoticed b/c they moved distfiles) and should be replaced with incus anyway; clipman has no distfiles, but builds fine with pie if using alternative ones, so not an issue here.

[leahneukirchen]

sgtm!

[classabbyamp]

why does nopie need nostrip set? go packages have been stripped for a while now

[dkwo]

Indeed, nostrip is not necessary anymore, I removed it.