tce-load -i compiletc libtasn1-dev libffi-dev

cd p11-kit-0.23.10

CC="gcc -flto -fuse-linker-plugin -mtune=generic -Os -pipe" CXX="g++ -flto -fuse-linker-plugin -mtune=generic -Os -pipe -fno-exceptions -fno-rtti" ./configure --prefix=/usr/local --localstatedir=/var --disable-static --with-trust-paths=/usr/local/etc/ssl/certs/ca-certificates.crt --libexecdir=/usr/local/lib

find . -name Makefile -type f -exec sed -i 's/-g -O2 -g//g' {} \;
find . -name Makefile -type f -exec sed -i 's/-O2//g' {} \;

make
sudo make install

    Host:                            x86_64-pc-linux-gnu
    Debug build:                     default (-g, debug output)
    Strict build:                    no
    Build documentation:             no (no manual or reference)
    System global config:            ${prefix}/etc/pkcs11/pkcs11.conf
    System module config directory:  ${prefix}/etc/pkcs11/modules
    Package module config directory: ${pkgdatadir}/modules
    User global config:              ~/.config/pkcs11/pkcs11.conf
    User module config directory:    ~/.config/pkcs11/modules
    Load relative module paths from: ${exec_prefix}/lib/pkcs11

    With libtasn1 dependency:        yes
    With libffi:                     yes
    With hash implementation:        internal

    Build trust module:              yes
    Trust module paths:              /usr/local/etc/ssl/certs/ca-certificates.crt