this is a great approach. the standard unikernel approach of cutting above libc means you have to be portable against musl (or another library) and play with your build. not the end of the world, but it doesn't seem necessary.