[dchest]

With CGO disabled, it only reads /etc/passwd, while the glibc getpwnam(3) can query LDAP etc.

[catlifeonmars]

That’s not the use case of the tailscale daemon though, which was using getent passwd.

To clarify: I’m not against CGO, just introducing a glibc dependency by default. I would only introduce it when I needed it.