p11-kit: mark broken if !stdenv.buildPlatform.canExecute stdenv.hostPlatform

[ghost]

Description of changes

p11-kit does not cross-compile. This prevents the NixOS installer from cross-compiling. Therefore, we mark it broken in this case and omit it.

Things done

• Built on platform(s)
  • x86_64-linux
  • aarch64-linux
  • x86_64-darwin
  • aarch64-darwin
• For non-Linux: Is sandbox = true set in nix.conf? (See Nix manual)
• Tested, as applicable:
  • NixOS test(s) (look inside nixos/tests)
  • and/or package tests
  • or, for functions and "core" functionality, tests in lib/tests or pkgs/test
  • made sure NixOS tests are linked to the relevant packages
• Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
• Tested basic functionality of all binary files (usually in ./result/bin/)
• 23.11 Release Notes (or backporting 23.05 Release notes)
  • (Package updates) Added a release notes entry if the change is major or breaking
  • (Module updates) Added a release notes entry if the change is significant
  • (Module addition) Added a release notes entry if adding a new NixOS module
• Fits CONTRIBUTING.md.

[ius]

These are in staging and should fix cross #244633 #245124

[yu-re-ka]

Also see #246360 #246602

[ghost]

git cherry-pick 3ca33e5ef4f8c3e24013905cf741330c9ace3a6c
git cherry-pick 64fe5a97f1938c3883273444f2e4252a3448a71e

[ghost]

Hrm, this is still broken in situations where we don't have an emulator for the hostPlatform. And p11-kit is an optional (not mandatory) dependency of its two primary downstream users (nss and gnutls). So I'd like to bring this back at some point in the form of broken = !emulatorAvailable.

FWIW, the case where no emulator is available, for me, is -march=octeon, which QEMU doesn't support. And the octeon extensions (unaligned loads, bit manipulation instructions, AES) are way way way more important to me than p11-kit is.