The most reliable way is to use Debian 11 for the build, using a container or a VM.
If you need libssl newer than in Debian 11, then use the vendored feature of openssl crate.
Another option is to build for the MUSL target, which should make binaries that work on any Linux distribution (but you may need to make sure your C dependencies are linked statically).
Do note that the allocator of musl is quite slow (especially for concurrent and parallel workloads), so if you go down this route you might want to use mimalloc or jemalloc to replace the default global allocator.
If you build for ARM64 you likely want to use mimalloc rather than jemalloc since modern ARM chips are breaking away from the traditional 4k page size, and jemalloc doesn't handle different page size between build and runtime at all.