Possible env level fix: compile statically against musl libc and run under gvisor with otherwise empty filesystem.