diff --git a/pkg/kubectl/util/BUILD b/pkg/kubectl/util/BUILD
index aa82e750aa..58209d598a 100644
--- a/pkg/kubectl/util/BUILD
+++ b/pkg/kubectl/util/BUILD
@@ -14,6 +14,7 @@ go_library(
     tags = ["automanaged"],
     visibility = ["//build/visible_to:pkg_kubectl_util_CONSUMERS"],
     deps = [
+        "//vendor/golang.org/x/sys/unix:go_default_library",
         "//vendor/k8s.io/apimachinery/pkg/apis/meta/v1:go_default_library",
         "//vendor/k8s.io/apimachinery/pkg/runtime:go_default_library",
     ],
diff --git a/pkg/kubectl/util/term/BUILD b/pkg/kubectl/util/term/BUILD
index 7f977b0190..2a22b3ead7 100644
--- a/pkg/kubectl/util/term/BUILD
+++ b/pkg/kubectl/util/term/BUILD
@@ -21,6 +21,7 @@ go_library(
         "//pkg/util/interrupt:go_default_library",
         "//vendor/github.com/docker/docker/pkg/term:go_default_library",
         "//vendor/github.com/mitchellh/go-wordwrap:go_default_library",
+        "//vendor/golang.org/x/sys/unix:go_default_library",
         "//vendor/k8s.io/apimachinery/pkg/util/runtime:go_default_library",
         "//vendor/k8s.io/client-go/tools/remotecommand:go_default_library",
     ],
diff --git a/pkg/kubectl/util/term/resizeevents.go b/pkg/kubectl/util/term/resizeevents.go
index 75e9690df7..e3476f978d 100644
--- a/pkg/kubectl/util/term/resizeevents.go
+++ b/pkg/kubectl/util/term/resizeevents.go
@@ -21,8 +21,8 @@ package term
 import (
 	"os"
 	"os/signal"
-	"syscall"
 
+	"golang.org/x/sys/unix"
 	"k8s.io/apimachinery/pkg/util/runtime"
 	"k8s.io/client-go/tools/remotecommand"
 )
@@ -35,7 +35,7 @@ func monitorResizeEvents(fd uintptr, resizeEvents chan<- remotecommand.TerminalS
 		defer runtime.HandleCrash()
 
 		winch := make(chan os.Signal, 1)
-		signal.Notify(winch, syscall.SIGWINCH)
+		signal.Notify(winch, unix.SIGWINCH)
 		defer signal.Stop(winch)
 
 		for {
diff --git a/pkg/kubectl/util/umask.go b/pkg/kubectl/util/umask.go
index 35ccce50bd..93e14473c2 100644
--- a/pkg/kubectl/util/umask.go
+++ b/pkg/kubectl/util/umask.go
@@ -19,9 +19,9 @@ limitations under the License.
 package util
 
 import (
-	"syscall"
+	"golang.org/x/sys/unix"
 )
 
 func Umask(mask int) (old int, err error) {
-	return syscall.Umask(mask), nil
+	return unix.Umask(mask), nil
 }
diff --git a/pkg/kubelet/eviction/BUILD b/pkg/kubelet/eviction/BUILD
index 49be3c216b..ec9cb61fd7 100644
--- a/pkg/kubelet/eviction/BUILD
+++ b/pkg/kubelet/eviction/BUILD
@@ -72,6 +72,7 @@ go_library(
         "//pkg/kubelet/util/format:go_default_library",
         "//pkg/quota/evaluator/core:go_default_library",
         "//vendor/github.com/golang/glog:go_default_library",
+        "//vendor/golang.org/x/sys/unix:go_default_library",
         "//vendor/k8s.io/api/core/v1:go_default_library",
         "//vendor/k8s.io/apimachinery/pkg/api/resource:go_default_library",
         "//vendor/k8s.io/apimachinery/pkg/apis/meta/v1:go_default_library",
diff --git a/pkg/kubelet/eviction/threshold_notifier_linux.go b/pkg/kubelet/eviction/threshold_notifier_linux.go
index 2c196452f0..ef6fb3d2f4 100644
--- a/pkg/kubelet/eviction/threshold_notifier_linux.go
+++ b/pkg/kubelet/eviction/threshold_notifier_linux.go
@@ -25,9 +25,9 @@ import "C"
 
 import (
 	"fmt"
-	"syscall"
 
 	"github.com/golang/glog"
+	"golang.org/x/sys/unix"
 )
 
 type memcgThresholdNotifier struct {
@@ -43,22 +43,22 @@ var _ ThresholdNotifier = &memcgThresholdNotifier{}
 // NewMemCGThresholdNotifier sends notifications when a cgroup threshold
 // is crossed (in either direction) for a given cgroup attribute
 func NewMemCGThresholdNotifier(path, attribute, threshold, description string, handler thresholdNotifierHandlerFunc) (ThresholdNotifier, error) {
-	watchfd, err := syscall.Open(fmt.Sprintf("%s/%s", path, attribute), syscall.O_RDONLY, 0)
+	watchfd, err := unix.Open(fmt.Sprintf("%s/%s", path, attribute), unix.O_RDONLY, 0)
 	if err != nil {
 		return nil, err
 	}
 	defer func() {
 		if err != nil {
-			syscall.Close(watchfd)
+			unix.Close(watchfd)
 		}
 	}()
-	controlfd, err := syscall.Open(fmt.Sprintf("%s/cgroup.event_control", path), syscall.O_WRONLY, 0)
+	controlfd, err := unix.Open(fmt.Sprintf("%s/cgroup.event_control", path), unix.O_WRONLY, 0)
 	if err != nil {
 		return nil, err
 	}
 	defer func() {
 		if err != nil {
-			syscall.Close(controlfd)
+			unix.Close(controlfd)
 		}
 	}()
 	efd, err := C.eventfd(0, C.EFD_CLOEXEC)
@@ -72,12 +72,12 @@ func NewMemCGThresholdNotifier(path, attribute, threshold, description string, h
 	}
 	defer func() {
 		if err != nil {
-			syscall.Close(eventfd)
+			unix.Close(eventfd)
 		}
 	}()
 	glog.V(2).Infof("eviction: setting notification threshold to %s", threshold)
 	config := fmt.Sprintf("%d %d %s", eventfd, watchfd, threshold)
-	_, err = syscall.Write(controlfd, []byte(config))
+	_, err = unix.Write(controlfd, []byte(config))
 	if err != nil {
 		return nil, err
 	}
@@ -93,7 +93,7 @@ func NewMemCGThresholdNotifier(path, attribute, threshold, description string, h
 func getThresholdEvents(eventfd int, eventCh chan<- struct{}, stopCh <-chan struct{}) {
 	for {
 		buf := make([]byte, 8)
-		_, err := syscall.Read(eventfd, buf)
+		_, err := unix.Read(eventfd, buf)
 		if err != nil {
 			return
 		}
@@ -113,9 +113,9 @@ func (n *memcgThresholdNotifier) Start(stopCh <-chan struct{}) {
 		select {
 		case <-stopCh:
 			glog.V(2).Infof("eviction: stopping threshold notifier")
-			syscall.Close(n.watchfd)
-			syscall.Close(n.controlfd)
-			syscall.Close(n.eventfd)
+			unix.Close(n.watchfd)
+			unix.Close(n.controlfd)
+			unix.Close(n.eventfd)
 			return
 		case <-eventCh:
 			glog.V(2).Infof("eviction: threshold crossed")
diff --git a/pkg/kubelet/network/kubenet/BUILD b/pkg/kubelet/network/kubenet/BUILD
index db329da358..81b8fe7a1a 100644
--- a/pkg/kubelet/network/kubenet/BUILD
+++ b/pkg/kubelet/network/kubenet/BUILD
@@ -31,6 +31,7 @@ go_library(
         "//vendor/github.com/containernetworking/cni/pkg/types/020:go_default_library",
         "//vendor/github.com/golang/glog:go_default_library",
         "//vendor/github.com/vishvananda/netlink:go_default_library",
+        "//vendor/golang.org/x/sys/unix:go_default_library",
         "//vendor/k8s.io/api/core/v1:go_default_library",
         "//vendor/k8s.io/apimachinery/pkg/util/errors:go_default_library",
         "//vendor/k8s.io/apimachinery/pkg/util/net:go_default_library",
diff --git a/pkg/kubelet/network/kubenet/kubenet_linux.go b/pkg/kubelet/network/kubenet/kubenet_linux.go
index 81aa2373b8..51ce0f9404 100644
--- a/pkg/kubelet/network/kubenet/kubenet_linux.go
+++ b/pkg/kubelet/network/kubenet/kubenet_linux.go
@@ -26,7 +26,6 @@ import (
 	"strconv"
 	"strings"
 	"sync"
-	"syscall"
 	"time"
 
 	"github.com/containernetworking/cni/libcni"
@@ -34,6 +33,7 @@ import (
 	cnitypes020 "github.com/containernetworking/cni/pkg/types/020"
 	"github.com/golang/glog"
 	"github.com/vishvananda/netlink"
+	"golang.org/x/sys/unix"
 	"k8s.io/api/core/v1"
 	utilerrors "k8s.io/apimachinery/pkg/util/errors"
 	utilnet "k8s.io/apimachinery/pkg/util/net"
@@ -286,7 +286,7 @@ func (plugin *kubenetNetworkPlugin) clearBridgeAddressesExcept(keep *net.IPNet)
 		return
 	}
 
-	addrs, err := netlink.AddrList(bridge, syscall.AF_INET)
+	addrs, err := netlink.AddrList(bridge, unix.AF_INET)
 	if err != nil {
 		return
 	}
diff --git a/pkg/kubelet/util/BUILD b/pkg/kubelet/util/BUILD
index 876754545f..abfb849146 100644
--- a/pkg/kubelet/util/BUILD
+++ b/pkg/kubelet/util/BUILD
@@ -18,6 +18,7 @@ go_library(
     tags = ["automanaged"],
     deps = [
         "//vendor/github.com/golang/glog:go_default_library",
+        "//vendor/golang.org/x/sys/unix:go_default_library",
         "//vendor/k8s.io/apimachinery/pkg/apis/meta/v1:go_default_library",
     ],
 )
diff --git a/pkg/kubelet/util/util_linux.go b/pkg/kubelet/util/util_linux.go
index 49b5345dda..21d2c04b9b 100644
--- a/pkg/kubelet/util/util_linux.go
+++ b/pkg/kubelet/util/util_linux.go
@@ -22,10 +22,10 @@ import (
 	"fmt"
 	"net"
 	"os"
-	"syscall"
 	"time"
 
 	"github.com/golang/glog"
+	"golang.org/x/sys/unix"
 )
 
 const (
@@ -43,7 +43,7 @@ func CreateListener(endpoint string) (net.Listener, error) {
 	}
 
 	// Unlink to cleanup the previous socket file.
-	err = syscall.Unlink(addr)
+	err = unix.Unlink(addr)
 	if err != nil && !os.IsNotExist(err) {
 		return nil, fmt.Errorf("failed to unlink socket file %q: %v", addr, err)
 	}
diff --git a/pkg/proxy/userspace/BUILD b/pkg/proxy/userspace/BUILD
index 8c534022b0..624310cc23 100644
--- a/pkg/proxy/userspace/BUILD
+++ b/pkg/proxy/userspace/BUILD
@@ -29,6 +29,7 @@ go_library(
         "//pkg/util/iptables:go_default_library",
         "//pkg/util/slice:go_default_library",
         "//vendor/github.com/golang/glog:go_default_library",
+        "//vendor/golang.org/x/sys/unix:go_default_library",
         "//vendor/k8s.io/apimachinery/pkg/types:go_default_library",
         "//vendor/k8s.io/apimachinery/pkg/util/errors:go_default_library",
         "//vendor/k8s.io/apimachinery/pkg/util/net:go_default_library",
diff --git a/pkg/proxy/userspace/rlimit.go b/pkg/proxy/userspace/rlimit.go
index d3f52b6def..f8f120def5 100644
--- a/pkg/proxy/userspace/rlimit.go
+++ b/pkg/proxy/userspace/rlimit.go
@@ -18,8 +18,8 @@ limitations under the License.
 
 package userspace
 
-import "syscall"
+import "golang.org/x/sys/unix"
 
 func setRLimit(limit uint64) error {
-	return syscall.Setrlimit(syscall.RLIMIT_NOFILE, &syscall.Rlimit{Max: limit, Cur: limit})
+	return unix.Setrlimit(unix.RLIMIT_NOFILE, &unix.Rlimit{Max: limit, Cur: limit})
 }
diff --git a/pkg/util/flock/BUILD b/pkg/util/flock/BUILD
index 640563db95..2d2e6b40a8 100644
--- a/pkg/util/flock/BUILD
+++ b/pkg/util/flock/BUILD
@@ -11,6 +11,7 @@ go_library(
     name = "go_default_library",
     srcs = ["flock_unix.go"],
     tags = ["automanaged"],
+    deps = ["//vendor/golang.org/x/sys/unix:go_default_library"],
 )
 
 filegroup(
diff --git a/pkg/util/flock/flock_unix.go b/pkg/util/flock/flock_unix.go
index d59afd4bec..92d929f4e5 100644
--- a/pkg/util/flock/flock_unix.go
+++ b/pkg/util/flock/flock_unix.go
@@ -18,12 +18,12 @@ limitations under the License.
 
 package flock
 
-import "syscall"
+import "golang.org/x/sys/unix"
 
 // Acquire acquires a lock on a file for the duration of the process. This method
 // is reentrant.
 func Acquire(path string) error {
-	fd, err := syscall.Open(path, syscall.O_CREAT|syscall.O_RDWR, 0600)
+	fd, err := unix.Open(path, unix.O_CREAT|unix.O_RDWR, 0600)
 	if err != nil {
 		return err
 	}
@@ -31,5 +31,5 @@ func Acquire(path string) error {
 	// We don't need to close the fd since we should hold
 	// it until the process exits.
 
-	return syscall.Flock(fd, syscall.LOCK_EX)
+	return unix.Flock(fd, unix.LOCK_EX)
 }
diff --git a/pkg/util/mount/BUILD b/pkg/util/mount/BUILD
index 906c610f98..18b04aaf6a 100644
--- a/pkg/util/mount/BUILD
+++ b/pkg/util/mount/BUILD
@@ -21,6 +21,7 @@ go_library(
     deps = [
         "//pkg/util/exec:go_default_library",
         "//vendor/github.com/golang/glog:go_default_library",
+        "//vendor/golang.org/x/sys/unix:go_default_library",
         "//vendor/k8s.io/apimachinery/pkg/util/sets:go_default_library",
     ],
 )
diff --git a/pkg/util/mount/mount_linux.go b/pkg/util/mount/mount_linux.go
index 4c141ad5b0..d0562994c1 100644
--- a/pkg/util/mount/mount_linux.go
+++ b/pkg/util/mount/mount_linux.go
@@ -30,6 +30,7 @@ import (
 	"syscall"
 
 	"github.com/golang/glog"
+	"golang.org/x/sys/unix"
 	"k8s.io/apimachinery/pkg/util/sets"
 	utilexec "k8s.io/kubernetes/pkg/util/exec"
 )
@@ -220,14 +221,14 @@ func exclusiveOpenFailsOnDevice(pathname string) (bool, error) {
 		glog.Errorf("Path %q is not refering to a device.", pathname)
 		return false, nil
 	}
-	fd, errno := syscall.Open(pathname, syscall.O_RDONLY|syscall.O_EXCL, 0)
+	fd, errno := unix.Open(pathname, unix.O_RDONLY|unix.O_EXCL, 0)
 	// If the device is in use, open will return an invalid fd.
 	// When this happens, it is expected that Close will fail and throw an error.
-	defer syscall.Close(fd)
+	defer unix.Close(fd)
 	if errno == nil {
 		// device not in use
 		return false, nil
-	} else if errno == syscall.EBUSY {
+	} else if errno == unix.EBUSY {
 		// device is in use
 		return true, nil
 	}
diff --git a/pkg/util/rlimit/BUILD b/pkg/util/rlimit/BUILD
index ef3a84ab35..757e2e7da4 100644
--- a/pkg/util/rlimit/BUILD
+++ b/pkg/util/rlimit/BUILD
@@ -11,6 +11,7 @@ go_library(
     name = "go_default_library",
     srcs = ["rlimit_linux.go"],
     tags = ["automanaged"],
+    deps = ["//vendor/golang.org/x/sys/unix:go_default_library"],
 )
 
 filegroup(
diff --git a/pkg/util/rlimit/rlimit_linux.go b/pkg/util/rlimit/rlimit_linux.go
index d1ea855341..17e8a71317 100644
--- a/pkg/util/rlimit/rlimit_linux.go
+++ b/pkg/util/rlimit/rlimit_linux.go
@@ -19,9 +19,9 @@ limitations under the License.
 package rlimit
 
 import (
-	"syscall"
+	"golang.org/x/sys/unix"
 )
 
 func RlimitNumFiles(maxOpenFiles uint64) {
-	syscall.Setrlimit(syscall.RLIMIT_NOFILE, &syscall.Rlimit{Max: maxOpenFiles, Cur: maxOpenFiles})
+	unix.Setrlimit(unix.RLIMIT_NOFILE, &unix.Rlimit{Max: maxOpenFiles, Cur: maxOpenFiles})
 }
diff --git a/pkg/volume/BUILD b/pkg/volume/BUILD
index a2bba21754..dfd782201f 100644
--- a/pkg/volume/BUILD
+++ b/pkg/volume/BUILD
@@ -75,6 +75,7 @@ go_test(
     deps = [
         "//pkg/volume:go_default_library",
         "//pkg/volume/testing:go_default_library",
+        "//vendor/golang.org/x/sys/unix:go_default_library",
         "//vendor/k8s.io/client-go/util/testing:go_default_library",
     ],
 )
diff --git a/pkg/volume/empty_dir/BUILD b/pkg/volume/empty_dir/BUILD
index 77941555e0..c117c552d1 100644
--- a/pkg/volume/empty_dir/BUILD
+++ b/pkg/volume/empty_dir/BUILD
@@ -22,6 +22,7 @@ go_library(
         "//pkg/volume:go_default_library",
         "//pkg/volume/util:go_default_library",
         "//vendor/github.com/golang/glog:go_default_library",
+        "//vendor/golang.org/x/sys/unix:go_default_library",
         "//vendor/k8s.io/api/core/v1:go_default_library",
         "//vendor/k8s.io/apimachinery/pkg/apis/meta/v1:go_default_library",
         "//vendor/k8s.io/apimachinery/pkg/types:go_default_library",
diff --git a/pkg/volume/empty_dir/empty_dir_linux.go b/pkg/volume/empty_dir/empty_dir_linux.go
index 0902e58d38..b086429f9c 100644
--- a/pkg/volume/empty_dir/empty_dir_linux.go
+++ b/pkg/volume/empty_dir/empty_dir_linux.go
@@ -20,9 +20,9 @@ package empty_dir
 
 import (
 	"fmt"
-	"syscall"
 
 	"github.com/golang/glog"
+	"golang.org/x/sys/unix"
 	"k8s.io/kubernetes/pkg/util/mount"
 )
 
@@ -40,8 +40,8 @@ func (m *realMountDetector) GetMountMedium(path string) (storageMedium, bool, er
 	if err != nil {
 		return 0, false, fmt.Errorf("IsLikelyNotMountPoint(%q): %v", path, err)
 	}
-	buf := syscall.Statfs_t{}
-	if err := syscall.Statfs(path, &buf); err != nil {
+	buf := unix.Statfs_t{}
+	if err := unix.Statfs(path, &buf); err != nil {
 		return 0, false, fmt.Errorf("statfs(%q): %v", path, err)
 	}
 
diff --git a/pkg/volume/metrics_du_test.go b/pkg/volume/metrics_du_test.go
index 72ba784e4a..3bee08bf1e 100644
--- a/pkg/volume/metrics_du_test.go
+++ b/pkg/volume/metrics_du_test.go
@@ -22,17 +22,17 @@ import (
 	"io/ioutil"
 	"os"
 	"path/filepath"
-	"syscall"
 	"testing"
 
+	"golang.org/x/sys/unix"
 	utiltesting "k8s.io/client-go/util/testing"
 	. "k8s.io/kubernetes/pkg/volume"
 	volumetest "k8s.io/kubernetes/pkg/volume/testing"
 )
 
 func getExpectedBlockSize(path string) int64 {
-	statfs := &syscall.Statfs_t{}
-	err := syscall.Statfs(path, statfs)
+	statfs := &unix.Statfs_t{}
+	err := unix.Statfs(path, statfs)
 	if err != nil {
 		return 0
 	}
diff --git a/pkg/volume/util/BUILD b/pkg/volume/util/BUILD
index db6adb87e5..62a1814fd6 100644
--- a/pkg/volume/util/BUILD
+++ b/pkg/volume/util/BUILD
@@ -25,6 +25,7 @@ go_library(
         "//pkg/api/v1/helper:go_default_library",
         "//pkg/util/mount:go_default_library",
         "//vendor/github.com/golang/glog:go_default_library",
+        "//vendor/golang.org/x/sys/unix:go_default_library",
         "//vendor/k8s.io/api/core/v1:go_default_library",
         "//vendor/k8s.io/api/storage/v1:go_default_library",
         "//vendor/k8s.io/apimachinery/pkg/api/resource:go_default_library",
diff --git a/pkg/volume/util/fs.go b/pkg/volume/util/fs.go
index cfa7e30b4f..c756c4a184 100644
--- a/pkg/volume/util/fs.go
+++ b/pkg/volume/util/fs.go
@@ -23,7 +23,8 @@ import (
 	"fmt"
 	"os/exec"
 	"strings"
-	"syscall"
+
+	"golang.org/x/sys/unix"
 
 	"k8s.io/apimachinery/pkg/api/resource"
 )
@@ -31,8 +32,8 @@ import (
 // FSInfo linux returns (available bytes, byte capacity, byte usage, total inodes, inodes free, inode usage, error)
 // for the filesystem that path resides upon.
 func FsInfo(path string) (int64, int64, int64, int64, int64, int64, error) {
-	statfs := &syscall.Statfs_t{}
-	err := syscall.Statfs(path, statfs)
+	statfs := &unix.Statfs_t{}
+	err := unix.Statfs(path, statfs)
 	if err != nil {
 		return 0, 0, 0, 0, 0, 0, err
 	}