diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
index 2ea0443db5..2b1f0b7adf 100644
--- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
+++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
@@ -4,6 +4,15 @@
 #
 # Keywords for all packages used by Flatcar.
 
+# Gentoo upstream package stabilisation
+# (the following packages are "unstable" upstream; we're stabilising these)
+
+=app-containers/containerd-1.7.7 ~amd64 ~arm64 # NOTE this doesn't even exist upstream; Gentoo is on 1.7.6.
+=app-containers/cri-tools-1.27.0 ~amd64 ~arm64
+=app-containers/docker-24.0.6 ~amd64 ~arm64
+=app-containers/docker-cli-24.0.6 ~amd64 ~arm64
+=app-containers/runc-1.1.9 ~amd64 ~arm64
+
 # Seems to be the only available ebuild in portage-stable right now.
 =app-crypt/adcli-0.9.2 ~amd64 ~arm64
 
@@ -96,13 +105,3 @@
 
 # Accept unstable host Rust compilers.
 =virtual/rust-1.73.0 ~amd64 ~arm64
-
-
-# Gentoo upstream package stabilisation
-# (the following packages are "unstable" upstream; we're stabilising these)
-
-=app-containers/containerd-1.7.7 ~amd64 ~arm64 # NOTE this doesn't even exist upstream; Gentoo is on 1.7.6.
-=app-containers/cri-tools-1.27.0 ~amd64 ~arm64
-=app-containers/docker-24.0.6 ~amd64 ~arm64
-=app-containers/docker-cli-24.0.6 ~amd64 ~arm64
-=app-containers/runc-1.1.9 ~amd64 ~arm64