[TrapsterDK]

Part of #12482

Change

• New patches/rules_py/host_libc_glibc.patch: on Linux, rules_py_uv_host reports glibc / 2.28 (the glibc floor of the hermetic cc toolchain) instead of running ldd --version, which is not on PATH in the hermetic consumer.
• Wired into the root MODULE.bazel override, RULES_PY_PATCHES in tools/testing/nested/src/compose.rs, the harness/release consumer data and patches/README.md.

Tests

• Local: //patches:render_unit_test, //tools/testing/nested:dx_nested_test, //tools/testing/hermetic:hermetic_unit_test pass; @rules_py_uv_host//:defs.bzl fetches as glibc/2.28.
• Not run locally: //tools/testing/hermetic:cpp_rust, cpp_fixture_gcc, c_fixture_gcc and other nested/consumer tests (CI only). tools/dx check --affected timed out on aspect errors in untouched packages (rust/tests/fixtures/native_call, ocaml/private/coverage, dotnet/private/fuzz, lua/private/coverage).

Remaining

• //patches:update_readme_test fails on main (fmt has no override in MODULE.bazel), untouched here.
• Evidence: run 43560359806 (linux_x86_64, //tools/testing/hermetic:cpp_rust, combo of rules_py: uv host repo reports glibc 2.28 without running ldd (part of #12482) #12485 + hermetic: no_refetch ignores local_path_override modules and local = True repository rules (part of #11443) #12703 + gazelle/julia: use upstream julia rules, no patched attr for consumers (part of #11418) #12641 on main): fetch and fetch_coverage pass with no Unable to determine host libc; the run is red only in hermetic: no_refetch ignores local_path_override modules and local = True repository rules (part of #11443) #12703's new refetch_rules probe (bazel mod evaluates rules_python's publish pip extension offline).
• analysis check: red on //rust/tests/fixtures/native_call:native_mixed_crt, a known main failure (also red on merged comments: delete indented # comments in cc, elixir, erlang, ocaml, capnproto .bzl (part of #11249) #12706, kotlin diagnostics test: use dx_testing::scratch_dir (part of #9216) #12702, docstrings: one-line docstrings in android, apple and swift .bzl (part of #11249) #12695).
• Not run locally: nested and *_consumer_test targets (CI only).
• Upstream: no rules_py issue opened for the ldd host libc probe.

🤖 Generated with Claude Code

https://claude.ai/code/session_01Xut2hygW8NyPkC1Ea1mT4L

[TrapsterDK]

Review: approve

No must-fix items. The patch, MODULE.bazel override, RULES_PY_PATCHES, consumer data and README row are consistent. Two notes that do not block:

• patches/rules_py/host_libc_glibc.patch returns glibc 2.28 for every Linux host, including musl hosts. That is fine for the hermetic consumer.
• The PR must stay draft until the evidence rerun is green after rust: rules_dx crate hub locks pin @@//rust/private labels that break consumers (regression from #11969) #12527.

🤖 Generated with Claude Code

https://claude.ai/code/session_01Xut2hygW8NyPkC1Ea1mT4L