After testing with this branch, I've found that adding `-a` is not quite enough (as you've experienced).  We also need to explicitly `export CGO_ENABLED=0` either in make.sh or in make/binary (which is where I put it, right before the go build, to great success).  I also tested with `docker build .` and then `docker run <img> hack/make.sh binary` on the official Dockerfile in this branch with my slight changes and it worked there, too.

I'm hoping the cc to @creack is because he has more info I can use to help debug one way or the other.  I'm really excited for this pull request, in case you couldn't tell. :)