diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use.mask b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use.mask
index e96fa19be4..6d9a8d9d1c 100644
--- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use.mask
+++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use.mask
@@ -23,3 +23,6 @@ app-editors/nano unicode
 # libxcrypt -> glibc -> python), and also we need to update gcc to
 # version 10 or later.
 sys-libs/glibc -crypt
+
+# We don't use pip.
+dev-lang/python ensurepip