Error building ca-certificates with 21.02-rc2 SDK

I am trying to build a custom package that has a dependency on wolfssl. Wolfssl has a dependency on ca-certificates. But when i try and build it always fails with "pyenv-exec: Argument list too long" when trying to build ca-certificates. I tried upping ulimit stack in /etc/security/limits.conf to 819200 which did not help. I logged out and back in after making that change and every terminal session shows:

ulimit -a
real-time non-blocking time  (microseconds, -R) unlimited
core file size              (blocks, -c) unlimited
data seg size               (kbytes, -d) unlimited
scheduling priority                 (-e) 0
file size                   (blocks, -f) unlimited
pending signals                     (-i) 256884
max locked memory           (kbytes, -l) unlimited
max memory size             (kbytes, -m) unlimited
open files                          (-n) 50000
pipe size                (512 bytes, -p) 8
POSIX message queues         (bytes, -q) 819200
real-time priority                  (-r) 0
stack size                  (kbytes, -s) 819200
cpu time                   (seconds, -t) unlimited
max user processes                  (-u) 256884
virtual memory              (kbytes, -v) unlimited
file locks                          (-x) unlimited

Any idea what i can do to get past this. I already have the certs installed on my router, i don't need them to be built by the sdk.

Full Build Output.

#
# No change to .config
#
make[1]: Entering directory '/opt/openwrt-sdk'
make[2]: Entering directory '/opt/openwrt-sdk/package/toolchain'
Makefile:737: WARNING: skipping libgomp -- package has no install section
echo "libc" >> /opt/openwrt-sdk/staging_dir/target-mipsel_24kc_musl/pkginfo/toolchain.default.install
echo "libgcc" >> /opt/openwrt-sdk/staging_dir/target-mipsel_24kc_musl/pkginfo/toolchain.default.install
echo "libpthread" >> /opt/openwrt-sdk/staging_dir/target-mipsel_24kc_musl/pkginfo/toolchain.default.install
make[2]: Leaving directory '/opt/openwrt-sdk/package/toolchain'
time: package/toolchain/compile#0.12#0.03#0.13
make[2]: Entering directory '/opt/openwrt-sdk/feeds/base/package/libs/gettext'
make[2]: Leaving directory '/opt/openwrt-sdk/feeds/base/package/libs/gettext'
time: package/feeds/base/gettext/compile#0.15#0.03#0.15
make[2]: Entering directory '/opt/openwrt-sdk/feeds/base/package/libs/libiconv'
make[2]: Leaving directory '/opt/openwrt-sdk/feeds/base/package/libs/libiconv'
time: package/feeds/base/libiconv/compile#0.14#0.04#0.15
make[2]: Entering directory '/opt/openwrt-sdk/feeds/base/package/libs/libtool'
mkdir -p /opt/openwrt-sdk/dl
SHELL= flock /opt/openwrt-sdk/tmp/.libtool-2.4.6.tar.xz.flock -c '      /opt/openwrt-sdk/scripts/download.pl "/opt/openwrt-sdk/dl" "libtool-2.4.6.tar.xz" "7c87a8c2c8c0fc9cd5019e402bed4292462d00a718a7cd5f11218153bf28b26f" "" "@GNU/libtool"    '
make[2]: Leaving directory '/opt/openwrt-sdk/feeds/base/package/libs/libtool'
time: package/feeds/base/libtool/compile#0.13#0.04#0.15
make[2]: Entering directory '/opt/openwrt-sdk/feeds/base/package/libs/wolfssl'
mkdir -p /opt/openwrt-sdk/dl
SHELL= flock /opt/openwrt-sdk/tmp/.wolfssl-4.7.0-stable.tar.gz.flock -c '       /opt/openwrt-sdk/scripts/download.pl "/opt/openwrt-sdk/dl" "wolfssl-4.7.0-stable.tar.gz" "b0e740b31d4d877d540ad50cc539a8873fc41af02bd3091c4357b403f7106e31" "" "https://github.com/wolfSSL/wolfssl/archive/v4.7.0-stable"    '
echo "libwolfssl" >> /opt/openwrt-sdk/staging_dir/target-mipsel_24kc_musl/pkginfo/wolfssl.default.install
make[2]: Leaving directory '/opt/openwrt-sdk/feeds/base/package/libs/wolfssl'
time: package/feeds/base/wolfssl/compile#0.18#0.04#0.19
make[2]: Entering directory '/opt/openwrt-sdk/feeds/base/package/system/ca-certificates'
mkdir -p /opt/openwrt-sdk/dl
SHELL= flock /opt/openwrt-sdk/tmp/.ca-certificates_20210119.tar.xz.flock -c '   /opt/openwrt-sdk/scripts/download.pl "/opt/openwrt-sdk/dl" "ca-certificates_20210119.tar.xz" "daa3afae563711c30a0586ddae4336e8e3974c2b627faaca404c4e0141b64665" "" "http://ftp.debian.org/debian/pool/main/c/ca-certificates"    '
rm -f /opt/openwrt-sdk/build_dir/target-mipsel_24kc_musl/ca-certificates-20210119/.built
touch /opt/openwrt-sdk/build_dir/target-mipsel_24kc_musl/ca-certificates-20210119/.built_check
CFLAGS="-Os -pipe -mno-branch-likely -mips32r2 -mtune=24kc -fno-caller-saves -fno-plt -fhonour-copts -Wno-error=unused-but-set-variable -Wno-error=unused-result -msoft-float -mips16 -minterlink-mips16 -ffile-prefix-map=/opt/openwrt-sdk/build_dir/target-mipsel_24kc_musl/ca-certificates-20210119=ca-certificates-20210119 -Wformat -Werror=format-security -fstack-protector -D_FORTIFY_SOURCE=1 -Wl,-z,now -Wl,-z,relro  -I/opt/openwrt-sdk/staging_dir/toolchain-mipsel_24kc_gcc-8.4.0_musl/usr/include -I/opt/openwrt-sdk/staging_dir/toolchain-mipsel_24kc_gcc-8.4.0_musl/include/fortify -I/opt/openwrt-sdk/staging_dir/toolchain-mipsel_24kc_gcc-8.4.0_musl/include " CXXFLAGS="-Os -pipe -mno-branch-likely -mips32r2 -mtune=24kc -fno-caller-saves -fno-plt -fhonour-copts -Wno-error=unused-but-set-variable -Wno-error=unused-result -msoft-float -mips16 -minterlink-mips16 -ffile-prefix-map=/opt/openwrt-sdk/build_dir/target-mipsel_24kc_musl/ca-certificates-20210119=ca-certificates-20210119 -Wformat -Werror=format-security -fstack-protector -D_FORTIFY_SOURCE=1 -Wl,-z,now -Wl,-z,relro  -I/opt/openwrt-sdk/staging_dir/toolchain-mipsel_24kc_gcc-8.4.0_musl/usr/include -I/opt/openwrt-sdk/staging_dir/toolchain-mipsel_24kc_gcc-8.4.0_musl/include/fortify -I/opt/openwrt-sdk/staging_dir/toolchain-mipsel_24kc_gcc-8.4.0_musl/include " LDFLAGS="-L/opt/openwrt-sdk/staging_dir/toolchain-mipsel_24kc_gcc-8.4.0_musl/usr/lib -L/opt/openwrt-sdk/staging_dir/toolchain-mipsel_24kc_gcc-8.4.0_musl/lib -znow -zrelro " make -j1 -C /opt/openwrt-sdk/build_dir/target-mipsel_24kc_musl/ca-certificates-20210119/work AR="mipsel-openwrt-linux-musl-gcc-ar" AS="mipsel-openwrt-linux-musl-gcc -c -Os -pipe -mno-branch-likely -mips32r2 -mtune=24kc -fno-caller-saves -fno-plt -fhonour-copts -Wno-error=unused-but-set-variable -Wno-error=unused-result -msoft-float -ffile-prefix-map=/opt/openwrt-sdk/build_dir/target-mipsel_24kc_musl/ca-certificates-20210119=ca-certificates-20210119 -Wformat -Werror=format-security -fstack-protector -D_FORTIFY_SOURCE=1 -Wl,-z,now -Wl,-z,relro" LD=mipsel-openwrt-linux-musl-ld NM="mipsel-openwrt-linux-musl-gcc-nm" CC="mipsel-openwrt-linux-musl-gcc" GCC="mipsel-openwrt-linux-musl-gcc" CXX="mipsel-openwrt-linux-musl-g++" RANLIB="mipsel-openwrt-linux-musl-gcc-ranlib" STRIP=mipsel-openwrt-linux-musl-strip OBJCOPY=mipsel-openwrt-linux-musl-objcopy OBJDUMP=mipsel-openwrt-linux-musl-objdump SIZE=mipsel-openwrt-linux-musl-size CROSS="mipsel-openwrt-linux-musl-" ARCH="mipsel" ;
make[3]: Entering directory '/opt/openwrt-sdk/build_dir/target-mipsel_24kc_musl/ca-certificates-20210119/work'
for dir in mozilla; do \
  make -C $dir all; \
done
make[4]: Entering directory '/opt/openwrt-sdk/build_dir/target-mipsel_24kc_musl/ca-certificates-20210119/work/mozilla'
python3 certdata2pem.py
/home/steven/.pyenv/libexec/pyenv: line 134: /home/steven/.pyenv/libexec/pyenv-exec: Argument list too long
make[4]: *** [Makefile:6: all] Error 126
make[4]: Leaving directory '/opt/openwrt-sdk/build_dir/target-mipsel_24kc_musl/ca-certificates-20210119/work/mozilla'
make[3]: *** [Makefile:9: all] Error 2
make[3]: Leaving directory '/opt/openwrt-sdk/build_dir/target-mipsel_24kc_musl/ca-certificates-20210119/work'
make[2]: *** [Makefile:73: /opt/openwrt-sdk/build_dir/target-mipsel_24kc_musl/ca-certificates-20210119/.built] Error 2
make[2]: Leaving directory '/opt/openwrt-sdk/feeds/base/package/system/ca-certificates'
time: package/feeds/base/ca-certificates/compile#167.67#156.12#311.75
    ERROR: package/feeds/base/ca-certificates failed to build.
make[1]: *** [package/Makefile:114: package/feeds/base/ca-certificates/compile] Error 1
make[1]: Leaving directory '/opt/openwrt-sdk'
make: *** [/opt/openwrt-sdk/include/toplevel.mk:223: package/ph-upgrade/compile] Error 2

This is a build error caused when python 3.9 is the system python (which it is in my system). Building with a pyenv with 3.8 as the python interpreter the build succeeds.

Oddly the upstream debian package this openwrt package comes from has no such issue building with python 3.9 which indicates there is some issue with the openwrt sdk build itself for this package with python 3.9.

I have opened this bug on it. https://bugs.openwrt.org/index.php?do=details&task_id=3859