Ah, so it looks like our best bet for Gentoo is going to be to make a copy of the GOROOT (/usr/lib/go) somewhere in our build path (where we are allowed to write), and then change the GOROOT to point to our local version that's recompiled with CGO_ENABLED=0.  I can live with that solution.

LGTM. :)