Bazel: use @rules_pkg.

Change-Id: Ic98cc12717827e0ed554526a26ad76bdf5d88814
Signed-off-by: Piotr Sikora <piotrsikora@google.com>
Reviewed-on: https://nginx-review.googlesource.com/c/nginx/+/3643
Reviewed-by: Daniel Berkovitch <dbrk@google.com>
diff --git a/.bazelrc b/.bazelrc
index a477192..2b5e047 100644
--- a/.bazelrc
+++ b/.bazelrc
@@ -1,5 +1,2 @@
-# Use Python 2.x to workaround a bug in pkg_deb().
-build --host_force_python=PY2
-
 # Use CC/CXX instead of Xcode on macOS, since it doesn't work with genrule().
 build --action_env=BAZEL_USE_CPP_ONLY_TOOLCHAIN=1
diff --git a/BUILD b/BUILD
index 992b31c..b1f4c83 100644
--- a/BUILD
+++ b/BUILD
@@ -27,7 +27,7 @@
 exports_files(["LICENSE"])
 
 load(":build.bzl", "nginx_copts")
-load("@bazel_tools//tools/build_defs/pkg:pkg.bzl", "pkg_deb", "pkg_tar")
+load("@rules_pkg//:pkg.bzl", "pkg_deb", "pkg_tar")
 
 package(
     default_visibility = [
diff --git a/WORKSPACE b/WORKSPACE
index 728cd64..abb72d5 100644
--- a/WORKSPACE
+++ b/WORKSPACE
@@ -24,6 +24,22 @@
 
 workspace(name = "nginx")
 
+# @rules_pkg
+
+load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
+
+http_archive(
+    name = "rules_pkg",
+    sha256 = "352c090cc3d3f9a6b4e676cf42a6047c16824959b438895a76c2989c6d7c246a",
+    url = "https://github.com/bazelbuild/rules_pkg/releases/download/0.2.5/rules_pkg-0.2.5.tar.gz",
+)
+
+load("@rules_pkg//:deps.bzl", "rules_pkg_dependencies")
+
+rules_pkg_dependencies()
+
+# @nginx
+
 load(":build.bzl", "nginx_repositories")
 
 nginx_repositories(