Comment # 1 on bug 1048046 from Aleksa Sarai

I think this is because all of the various upstreams you mentioned (runc,
docker, containerd) don't set those flags and thus we don't include them. I'm
also fairly sure that most Go binaries have this problem too -- so we need to
update golang-packaging as well as most of the things in
Virtualization:containers (since we're the main Go users).

@Max Have you looked at buildmode=pie before for golang-packaging?