diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/package.accept_keywords b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/package.accept_keywords
index 58cace51a1..a096f6f827 100644
--- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/package.accept_keywords
+++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/arm64/package.accept_keywords
@@ -1,107 +1,40 @@
 # arm64 keywords
+# Keep these in alphabetical order.
 
-dev-libs/nspr ~arm64
-sys-apps/coreutils ~arm64
-app-text/asciidoc ~arm64
-app-admin/sudo ~arm64
-net-misc/dhcpcd ~arm64
-
-=app-editors/vim-7.4.769 ~arm64
-=sys-apps/util-linux-2.26.2 ~arm64
-=net-libs/libmicrohttpd-0.9.42 ~arm64
-=app-misc/ca-certificates-3.19.1 **
-
-=net-misc/iputils-20121221-r1 **
-
+=app-admin/sudo-1.8.16 ~arm64
+=app-text/asciidoc-8.6.9-r3 ~arm64
+=dev-cpp/gflags-2.1.2 ~arm64
 =dev-cpp/glog-0.3.1 **
-=dev-cpp/gmock-1.6.0 **
-=dev-cpp/gtest-1.6.0-r2 **
-
-dev-vcs/git ~arm64
-sys-fs/squashfs-tools ~arm64
-net-dns/dnsmasq ~arm64
-
-dev-libs/libevent ~arm64
-net-misc/ntp ~arm64
-
-net-libs/libpcap ~arm64
-=net-analyzer/nmap-7.12 ~arm64
-
-app-crypt/pinentry ~arm64
-net-analyzer/tcpdump ~arm64
-dev-libs/dbus-glib ~arm64
-sys-block/parted ~arm64
-sys-fs/btrfs-progs ~arm64
-sys-apps/gptfdisk ~arm64
-sys-apps/usbutils ~arm64
-net-misc/bridge-utils ~arm64
-net-libs/serf ~arm64
-dev-vcs/subversion ~arm64
-sys-libs/libseccomp ~arm64
-
 =dev-libs/apr-1.5.2 ~arm64
-=dev-libs/apr-util-1.5.4 ~arm64
-
-sys-process/lsof ~arm64
-
-net-fs/nfs-utils ~arm64
-
-=dev-db/sqlite-3.8.10.2 ~arm64
-
-#=sys-apps/smartmontools-9999 **
-=sys-apps/smartmontools-6.4 **
-
-=sys-devel/bison-3.0.4-r1 ~arm64
-
-=sys-fs/cryptsetup-1.6.7 **
-=sys-fs/xfsprogs-3.2.2-r1 **
-=sys-apps/i2c-tools-3.1.1-r1 **
-=sys-apps/ethtool-3.18 **
-=sys-apps/lshw-02.17b-r1 **
-=net-firewall/ebtables-2.0.10.4-r1 **
-=net-firewall/ipset-6.24 **
-=sys-fs/mdadm-3.3.2-r1 **
-=sys-apps/rng-tools-5 **
-
-=net-misc/iperf-3.0.7 **
-=dev-libs/liblinear-196-r1 **
-
-=sys-libs/libsemanage-9999 **
-=sec-policy/selinux-base-policy-9999 **
-=sys-process/audit-2.4.1-r1 **
-=sec-policy/selinux-virt-9999 **
-=app-admin/setools-3.3.8-r7 **
-=sys-libs/libselinux-9999 **
-=sec-policy/selinux-unconfined-9999 **
-=sys-apps/policycoreutils-2.4 **
-=sys-libs/libsepol-9999 **
-=sec-policy/selinux-base-9999 **
-=sys-apps/checkpolicy-9999 **
-
-=virtual/acl-0-r1 **
-=net-misc/whois-5.2.10 **
-=net-misc/socat-2.0.0_beta8 **
-=app-admin/kubelet-1.0.1-r2 **
-
-=net-wireless/wireless-tools-30_pre9 ~arm64
-=net-wireless/iw-4.0 **
-=net-libs/libmicrohttpd-0.9.44 **
-
-# required by sys-block/open-iscsi-2.0.873-r1::coreos
-=sys-fs/lsscsi-0.28 **
-
-# gnu-efi-3.0.3 has arm64 support
-=sys-boot/gnu-efi-3.0.3 **
-
-# required for GLSA 201507-22
-=sys-libs/e2fsprogs-libs-1.42.13 ~arm64
-=sys-fs/e2fsprogs-1.42.13 ~arm64
-
-# required by systemd
-=net-libs/libmicrohttpd-0.9.47 **
-
-# match versions with amd64
-=sys-fs/quota-4.02 **
-
-# https://bugs.gentoo.org/show_bug.cgi?id=585926 / CVE-2016-4971
+=dev-libs/apr-util-1.5.4-r1 ~arm64
+=dev-libs/liblinear-210-r1 ~arm64
+=dev-libs/nspr-4.12 ~arm64
+=dev-libs/nss-3.24 ~arm64
+=net-analyzer/nmap-7.12 ~arm64
+=net-analyzer/tcpdump-4.7.4-r1 ~arm64
+=net-firewall/ebtables-2.0.10.4-r1 ~arm64
+=net-firewall/ipset-6.29 ~arm64
+=net-libs/libmicrohttpd-0.9.50 **
+=net-libs/libpcap-1.7.4 ~arm64
+=net-libs/serf-1.3.8-r1 ~arm64
+=net-misc/bridge-utils-1.5 ~arm64
+=net-misc/iperf-3.1.3 **
+# net-misc/wget: https://bugs.gentoo.org/show_bug.cgi?id=585926 / CVE-2016-4971
 =net-misc/wget-1.18 **
+=net-misc/whois-5.2.12 ~arm64
+=sys-apps/ethtool-4.5 **
+=sys-apps/gptfdisk-1.0.1 ~arm64
+=sys-apps/i2c-tools-3.1.1-r1 ~arm64
+=sys-apps/lshw-02.17b-r2 **
+=sys-apps/rng-tools-5-r2 **
+=sys-apps/smartmontools-9999 **
+=sys-block/parted-3.2-r1 ~arm64
+=sys-devel/bison-3.0.4-r1 ~arm64
+=sys-fs/cryptsetup-1.7.2 **
+=sys-fs/lsscsi-0.28 **
+=sys-fs/lvm2-2.02.145-r2 ~arm64
+=sys-fs/mdadm-3.4 **
+# sys-fs/quota: match versions with amd64
+=sys-fs/quota-4.02 **
+=sys-fs/xfsprogs-3.2.2-r1 **
+=sys-process/lsof-4.89 ~arm64