How to build as a static pie binary?

[jaschiu]

With this Dockerfile:

FROM golang:alpine AS builder

ARG YQ_VERSION
RUN wget -qO - "https://github.com/mikefarah/yq/archive/refs/tags/v${YQ_VERSION}.tar.gz" | \
      tar -xzf - --strip-components 1 && \
    CGO_ENABLED=0 go build -buildmode=pie -trimpath -ldflags="-s -w" -o /usr/local/bin/yq .

FROM scratch
COPY --from=builder /usr/local/bin/yq /yq
ENTRYPOINT ["/yq"]

The resulting binary is no longer static and therefore fails to execute in the scratch container. When removing -buildmode=pie, the issue is resolved. Is this a bug in this project or go? Or is there an alternative way to still build a static PIE binary?

[jaschiu]

nevermind it's CGO_ENABLED=1 go build -buildmode=pie -trimpath -ldflags '-linkmode external -s -w -extldflags "--static-pie"' -o /usr/local/bin/yq .