diff --git a/base/musl/musl.conf b/base/musl/musl.conf
index fd869db68..fdfe809de 100644
--- a/base/musl/musl.conf
+++ b/base/musl/musl.conf
@@ -47,8 +47,13 @@ musl_postinstall() {
 }
 
 musl_make_utils() {
+	# build minimal libssp_nonshared.a so we don't need libssp from gcc
+	# comes from Alpine Linux
+	gcc $CPPFLAGS $CFLAGS -c $confdir/__stack_chk_fail_local.c -o __stack_chk_fail_local.o
+	$AR r libssp_nonshared.a __stack_chk_fail_local.o
+	cp -a libssp_nonshared.a $root/$libdir/
 	# getent is needed by OpenSDE framework.
-	$CC $CPPFLAGS $CFLAGS $confdir/getent.c -o $root/$sbindir/getent	
+        gcc $CPPFLAGS $CFLAGS $confdir/getent.c -o $root/$sbindir/getent
 }
 
 # if musl is default libc
@@ -60,7 +65,7 @@ if [ "$SDECFG_LIBC" == "musl" ]; then
 		hook_add postinstall 5 'musl_postinstall'
 	fi
 	hook_add postflist 9 "rm -rf $root/$includedir/libintl.h"
-	hook_add postmake 5 'musl_make_utils'
+	hook_add postpatch 5 'musl_make_utils'
 fi
 
 # always install the headers even if already present in the sandbox