Static binary confirmation

[adminy]

Hi,

I was reading this post

and I found a comment about dropbear.

# These two libs are needed for dropbear, 
# even if it's built statically,
# because we don't use PAM
# and dropbear uses libnss to find user
# to authenticate against

cp -L /lib64/libnss_compat.so.2 /rootfs/lib64/
cp -L /lib64/libnss_files.so.2 /rootfs/lib64/

Does that still apply?

[mkj]

As far as I know yes - by default glibc has libnss* as dynamic libraries. The alternative would be to build against musl libc, or rebuild glibc with --enable-static-nss