When Go user.Lookup fails

A Docker base image bump turned into a multi-day debug of Go&rsquo;s os/user package, NSS, SSSD, LDAP and GLIBC ABI. Here is what happened and what I learned. Throughout this post, alice is an admin account with a hardcoded entry in /etc/passwd , and bob is a regular user who only exists in the central LDAP directory. All details of /bin/client are fictitious for the purpose of this post. How it…