tce-load -i compiletc libtasn1-4-dev libffi-dev

wget https://github.com/p11-glue/p11-kit/releases/download/0.23.22/p11-kit-0.23.22.tar.xz

cd p11-kit-0.23.22

CC="gcc -flto -mtune=generic -Os -pipe" CXX="g++ -flto -mtune=generic -Os -pipe -fno-exceptions -fno-rtti" ./configure --prefix=/usr/local --localstatedir=/var --disable-static --libexecdir=/usr/local/lib --with-trust-paths=/usr/local/etc/ssl/certs/ca-certificates.crt

find . -name Makefile -type f -exec sed -i 's/-g -O2 -g//g' {} \;
find . -name Makefile -type f -exec sed -i 's/-O2//g' {} \;

make [0m 52.16s]
sudo make install

    Host:                            x86_64-pc-linux-gnu
    Debug build:                     default (-g, debug output)
    Strict build:                    no
    Build documentation:             no (no manual or reference)
    System global config:            ${prefix}/etc/pkcs11/pkcs11.conf
    System module config directory:  ${prefix}/etc/pkcs11/modules
    Package module config directory: ${pkgdatadir}/modules
    User global config:              ~/.config/pkcs11/pkcs11.conf
    User module config directory:    ~/.config/pkcs11/modules
    Load relative module paths from: ${exec_prefix}/lib/pkcs11

    With libtasn1 dependency:        yes
    With libffi:                     yes
    With hash implementation:        internal
    With systemd:                    no

    Build trust module:              yes
    Trust module paths:              /usr/local/etc/ssl/certs/ca-certificates.crt