diff --git a/alpine3.9-java8/lxcfile b/alpine3.9-java8/lxcfile
index 1285d5e..6f702dc 100644
--- a/alpine3.9-java8/lxcfile
+++ b/alpine3.9-java8/lxcfile
@@ -3,5 +3,6 @@ LAYER shared/alpine3.9
 LAYER shared/alpine3.9-java8
 
 RUN EOF
-    apk --no-cache add openjdk8-jre-base
+    # nss needed due to https://github.com/docker-library/openjdk/issues/289 , https://bugs.alpinelinux.org/issues/10126
+    apk --no-cache add nss openjdk8-jre-base
 EOF