Apply upstream patch to workaround arm64 crash

Ruby 3.3.0 has a bug that crashes many programs on arm64. https://bugs.ruby-lang.org/issues/20085

Workaround this bug by applying the upstream fix/backport in ruby/ruby#9385 .

Co-authored-by: Tianon Gravi <[email protected]>

Author: osyoyu

Dockerfile.template

@@ -253,11 +253,14 @@ RUN set -eux; \
 			;; \
 	esac; \
 {{ ) else "" end -}}
-{{ if .version | . == "3.3.0" then ( -}}
-	# workaround crash on aarch64 Linux (e.g. Docker Desktop on macOS)
-	# https://bugs.ruby-lang.org/issues/20085#note-5
-	# https://github.com/ruby/ruby/pull/9371
-	export ASFLAGS="${ASFLAGS:-} -mbranch-protection=pac-ret"; \
+{{ if .version == "3.3.0" then ( -}}
+	# workaround crash on arm64
+	# https://bugs.ruby-lang.org/issues/20085
+	# https://github.com/ruby/ruby/pull/9385 <- https://github.com/ruby/ruby/pull/9371
+	wget -O 'arm64-fix.patch' 'https://github.com/ruby/ruby/commit/7f97e3540ce448b501bcbee15afac5f94bb22dd9.patch?full_index=1'; \
+	echo '86bc65415fd62cb2272a4df249f39fb79db15617ad05c540e05a22f02eae73b3 *arm64-fix.patch' | sha256sum --check --strict; \
+	patch -p1 -i arm64-fix.patch; \
+	rm arm64-fix.patch; \
 {{ ) else "" end -}}
 	gnuArch="$(dpkg-architecture --query DEB_BUILD_GNU_TYPE)"; \
 	./configure \