diff --git a/packages/pynacl/meta.yaml b/packages/pynacl/meta.yaml
new file mode 100644
index 000000000..437f88de8
--- /dev/null
+++ b/packages/pynacl/meta.yaml
@@ -0,0 +1,18 @@
+package:
+  name: pynacl
+  version: 1.5.0
+  top-level:
+    - nacl
+source:
+  url: https://files.pythonhosted.org/packages/a7/22/27582568be639dfe22ddb3902225f91f2f17ceff88ce80e4db396c8986da/PyNaCl-1.5.0.tar.gz
+  sha256: 8ac7448f09ab85811607bdd21ec2464495ac8b7c66d146bf545b0f08fb9220ba
+  patches:
+    - patches/0001-Don-t-check-libsodium.patch
+requirements:
+  run:
+    - cffi
+about:
+  home: https://github.com/pyca/pynacl/
+  PyPI: https://pypi.org/project/pynacl
+  summary: Python binding to the Networking and Cryptography (NaCl) library
+  license: Apache License 2.0
diff --git a/packages/pynacl/patches/0001-Don-t-check-libsodium.patch b/packages/pynacl/patches/0001-Don-t-check-libsodium.patch
new file mode 100644
index 000000000..6ce36d056
--- /dev/null
+++ b/packages/pynacl/patches/0001-Don-t-check-libsodium.patch
@@ -0,0 +1,26 @@
+From bf250e6b263f8c4fddc1eb819ad5de85776b84f0 Mon Sep 17 00:00:00 2001
+From: Hood Chatham <roberthoodchatham@gmail.com>
+Date: Mon, 23 Jan 2023 19:29:57 -0800
+Subject: [PATCH] Don't check libsodium
+
+---
+ setup.py | 3 ---
+ 1 file changed, 3 deletions(-)
+
+diff --git a/setup.py b/setup.py
+index 505169b..de2fe67 100644
+--- a/setup.py
++++ b/setup.py
+@@ -168,9 +168,6 @@ class build_clib(_build_clib):
+         # Build the library
+         subprocess.check_call(["make"] + make_args, cwd=build_temp)
+ 
+-        # Check the build library
+-        subprocess.check_call(["make", "check"] + make_args, cwd=build_temp)
+-
+         # Install the built library
+         subprocess.check_call(["make", "install"] + make_args, cwd=build_temp)
+ 
+-- 
+2.25.1
+
diff --git a/pyodide-build/pyodide_build/pywasmcross.py b/pyodide-build/pyodide_build/pywasmcross.py
index 400f12bb7..caa4d5ddd 100755
--- a/pyodide-build/pyodide_build/pywasmcross.py
+++ b/pyodide-build/pyodide_build/pywasmcross.py
@@ -285,6 +285,8 @@ def replay_genargs_handle_argument(arg: str) -> str | None:
         # gcc flag that clang does not support
         "-Bsymbolic-functions",
         '-fno-second-underscore',
+        '-fstack-protector',  # doesn't work?
+        '-fno-strict-overflow',  # warning: argument unused during compilation
     ]:
         return None
     # fmt: on