A user may experiment with build-id by e.g. adding LDFLAGS=-Wl,--build-id=sha1 to /etc/make.conf. If a user does this, the build-id note ends up added to e.g. mbr or pmbr's .text, making it too large (532 bytes). Explicitly turn off build-id for these components.
(I was the user in question.)
99% of the time assert(3) will just compile out in userspace. Does this library have any other use of assert(3) (i.e. does it expect anybody to actually compile with -DDEBUG or whatever)?