@d-e-s-o @ work

FWIW, I ran the same tests that we causing trouble with https://github.com/danobi/vmtest/pull/88 and there were no issues.

Can't undraft right now, but this change can probably be looked at. Please advise re: empty kernels & test failures (which I suspect are related to them as well as...

> Lemme mess around with it a bit and see if we can get away with just tweaking the CI Perhaps try setting [`LIBSECCOMP_LIB_TYPE`](https://github.com/polachok/seccomp-sys/blob/9d89b10f9faa19e8f4e952663697ec126f2e2121/build.rs#L5C43-L5C62) and [`LIBCAPNG_LINK_TYPE`](https://github.com/slp/capng/blob/25304f0b998d7a8a44d7e3b03598d73b56e2a555/build.rs#L16C36-L16C54)to `static`. Edit: Oops, sorry,...

> undefined reference to symbol '__tls_get_addr@@GLIBC_2.3' The Ubuntu managed static archives likely depend on glibc, because that's their standard `libc`. I don't think just swapping out the Rust toolchain will...

Let me take a stab at it.

> We may need to use a proper Docker container with Alpine Linux inside or something along those lines. Yeah, so just to add to that: there seems to exist...

I think I got it working with an Alpine container: ``` $ ldd /tmp/vmtest > statically linked $ file /tmp/vmtest /tmp/vmtest: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV),...

These are the steps that seem to do it for me: ```sh docker run --network host --tty --interactive rust:alpine ``` In container: ```sh apk add libcap-ng-static libseccomp-static git clang git...

> Ah yeah I think you're right. Lemme give it a shot with alpine later. I can pick this PR up if you're out before it's finished Feel free to...

Sorry, but the third commit is unreviewable. There is no explanation why anything is being done. Is it so plainly obvious why we are suddenly changing out half the implementation?...