&gt; Go is interesting because doesn&#x27;t use libc at all (when using the standard compiler)...except when doing some network things that NSS is useful for, when it does link against it. People who want totally static binaries pass a few additional flags to say &quot;don&#x27;t use NSS, use the Go implementation of these features&quot;...and you then end up with bugs like [2].<p>Oh god, I completely forgot about that bug. For what it&#x27;s worth, the technical reasons why Docker had to be linked statically are no longer valid and so it should be able to fix that issue. Unfortunately, &quot;os&#x2F;user&quot; is lacking some things we need within runC and Docker.