diff --git a/Cross.toml b/Cross.toml
index 0c18c32667c1..ac99c82d8520 100644
--- a/Cross.toml
+++ b/Cross.toml
@@ -1,5 +1,4 @@
-[build.env]
-passthrough = ["RUSTFLAGS"]
+[build]
 pre-build = [
     # https://aws.github.io/aws-lc-rs/requirements/linux.html
     "apt-get update",
@@ -7,6 +6,9 @@ pre-build = [
     "cargo install --force --locked bindgen-cli",
 ]
 
+[build.env]
+passthrough = ["RUSTFLAGS"]
+
 [target.x86_64-pc-windows-gnu]
 pre-build = [
     # Install NASM for rustls, which deps on aws-lc-rs by default, and it needs NASM