We can use nss_wrapper-libs (in all containers, all distros as it's included since rhel-8.8.0).

nss_wrapper-libs is a separate sub-package without unnecessary footprint and we're ok with the `*.so` file only.

Similarly, gettext is installed because we need envsubst tool, and in EL10, there is a gettext-envsubst sub-package that can be installed and avoid unnecessary dependencies. This one is not part of RHEL9 or older though.