I’ll also add that I’m aware of glibc’s stance on dynamic linking from static binaries. I don’t buy the whole NSS argument. It’s easily solvable by a basic request/response protocol through some local socket. IMO that argument is just a cheap excuse to justify status quo.