diff --git a/.github/workflows/custom-actions/build-packager/action.yaml b/.github/workflows/custom-actions/build-packager/action.yaml
index 0193927139..2dfa34192c 100644
--- a/.github/workflows/custom-actions/build-packager/action.yaml
+++ b/.github/workflows/custom-actions/build-packager/action.yaml
@@ -63,6 +63,11 @@ runs:
       shell: bash
       run: |
         echo "::group::Sync gclient"
+        BUILD_CONFIG="${{ inputs.build_type }}-${{ inputs.lib_type }}"
+        if [[ "$BUILD_CONFIG" == "Release-static" && "${{ runner.os }}" == "Linux" ]]; then
+          # For static release builds, set these two additional flags for fully static binaries.
+          export GYP_DEFINES="$GYP_DEFINES disable_fatal_linker_warnings=1 static_link_binaries=1"
+        fi
         gclient sync
         echo "::endgroup::"
 
@@ -81,11 +86,32 @@ runs:
           echo "Skipping artifacts for $BUILD_CONFIG."
           exit 0
         fi
+        if [[ "${{ runner.os }}" == "Linux" ]]; then
+          echo "::group::Check for static executables"
+          (
+            cd src/out/Release${{ inputs.build_type_suffix }}
+            # Prove that we built static executables on Linux.  First, check that
+            # the executables exist, and fail if they do not.  Then check "ldd",
+            # which will fail if the executable is not dynamically linked.  If
+            # "ldd" succeeds, we fail the workflow.  Finally, we call "true" so
+            # that the last executed statement will be a success, and the step
+            # won't be failed if we get that far.
+            ls packager mpd_generator >/dev/null || exit 1
+            ldd packager 2>&1 && exit 1
+            ldd mpd_generator 2>&1 && exit 1
+            true
+          )
+          echo "::endgroup::"
+        fi
         echo "::group::Prepare artifacts folder"
         mkdir artifacts
         ARTIFACTS="$GITHUB_WORKSPACE/artifacts"
         cd src/out/Release${{ inputs.build_type_suffix }}
         echo "::endgroup::"
+        echo "::group::Strip executables"
+        strip packager${{ inputs.exe_ext }}
+        strip mpd_generator${{ inputs.exe_ext }}
+        echo "::endgroup::"
         echo "::group::Copy packager"
         cp packager${{ inputs.exe_ext }} \
             $ARTIFACTS/packager-${{ inputs.os_name }}${{ inputs.exe_ext }}
diff --git a/packager/common.gypi b/packager/common.gypi
index f5689a04d0..a370e8c7e6 100644
--- a/packager/common.gypi
+++ b/packager/common.gypi
@@ -12,12 +12,18 @@
       'shaka_code%': 0,
       # musl is a lightweight C standard library used in Alpine Linux.
       'musl%': 0,
+      # This is a flag from build/common.gypi to allow linker warnings.
+      # This may be necessary with static_link_binaries=1.
+      'disable_fatal_linker_warnings%': '0',
       'libpackager_type%': 'static_library',
+      'static_link_binaries%': '0',
     },
 
     'shaka_code%': '<(shaka_code)',
     'musl%': '<(musl)',
+    'disable_fatal_linker_warnings%': '<(disable_fatal_linker_warnings)',
     'libpackager_type%': '<(libpackager_type)',
+    'static_link_binaries%': '<(static_link_binaries)',
 
     'conditions': [
       ['shaka_code==1', {
@@ -41,11 +47,11 @@
     ],
   },
   'target_defaults': {
-    # These defines make the contents of base/mac/foundation_util.h compile
-    # against the standard OSX SDK, by renaming Chrome's opaque type and using
-    # the real OSX type.  This was not necessary before we switched away from
-    # using hermetic copies of clang and the sysroot to build.
     'defines': [
+      # These defines make the contents of base/mac/foundation_util.h compile
+      # against the standard OSX SDK, by renaming Chrome's opaque type and
+      # using the real OSX type.  This was not necessary before we switched
+      # away from using hermetic copies of clang and the sysroot to build.
       'OpaqueSecTrustRef=__SecACL',
       'OpaqueSecTrustedApplicationRef=__SecTrustedApplication',
     ],
@@ -122,6 +128,22 @@
           '-Werror',
         ],
       }],
+      ['static_link_binaries==1', {
+        'conditions': [
+          ['OS=="linux"', {
+            'defines': [
+              # Even when we are not using musl or uClibc, pretending to use
+              # uClibc on Linux is the only way to disable certain Chromium
+              # base features, such as hooking into malloc.  Hooking into
+              # malloc, in turn, fails when we are linking statically.
+              '__UCLIBC__',
+            ],
+          }],
+        ],
+        'ldflags': [
+          '-static',
+        ],
+      }],
     ],
   },
 }