diff --git a/pkg/rngd/Dockerfile b/pkg/rngd/Dockerfile
index e7fb6abd0..084a2df24 100644
--- a/pkg/rngd/Dockerfile
+++ b/pkg/rngd/Dockerfile
@@ -3,6 +3,9 @@ FROM linuxkit/alpine:96ad1eb5ec262b4cd0eef574cdc0b225b502d9ee AS mirror
 RUN apk add --no-cache go gcc musl-dev linux-headers
 ENV GOPATH=/go PATH=$PATH:/go/bin
 
+# see https://github.com/golang/go/issues/23672
+ENV CGO_CFLAGS_ALLOW=(-mrdrnd|-mrdseed)
+
 COPY cmd/rngd/ /go/src/rngd/
 RUN REQUIRE_CGO=1 go-compile.sh /go/src/rngd