I normally statically link as much as possible and avoid nss, but you can make that work as well, just include it along with glibc.