diff --git a/config/redbear-mini.toml b/config/redbear-mini.toml
index 4f5ea68f65..c19c0e8953 100644
--- a/config/redbear-mini.toml
+++ b/config/redbear-mini.toml
@@ -90,8 +90,8 @@ iommu = {}
 # ── Standard CLI tools (from server profile) ──
 bash = {}
 bottom = {}
-#curl = {}  # suppressed: nghttp2 dependency chain fails; curl not needed for boot/recovery
-diffutils = "ignore"  # suppressed: relibc/gnulib header gaps; not needed for boot/recovery or greeter proof
+curl = {}
+diffutils = {}
 findutils = {}
 uutils-tar = {}
 bison = {}
diff --git a/local/sources/relibc b/local/sources/relibc
index 46b36d9e98..be87087be0 160000
--- a/local/sources/relibc
+++ b/local/sources/relibc
@@ -1 +1 @@
-Subproject commit 46b36d9e98f99a1e2e580336da5b7f9868e5bd1b
+Subproject commit be87087be075bec5e2487d6d4de2c0d8d7193df0
diff --git a/recipes/libs/nghttp2/recipe.toml b/recipes/libs/nghttp2/recipe.toml
index 39efe6c700..2e822f1046 100644
--- a/recipes/libs/nghttp2/recipe.toml
+++ b/recipes/libs/nghttp2/recipe.toml
@@ -10,6 +10,11 @@ template = "custom"
 script = """
 DYNAMIC_INIT
 
+# libcurl links libnghttp2.a into a shared libcurl.so, so the static archive
+# must be built with position-independent code.
+export CFLAGS="$CFLAGS -fPIC"
+export CXXFLAGS="$CXXFLAGS -fPIC"
+
 COOKBOOK_CONFIGURE_FLAGS+=(
     --enable-lib-only
 )