diff --git a/sdk_container/src/third_party/coreos-overlay/coreos/config/env/app-crypt/mit-krb5 b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/app-crypt/mit-krb5
new file mode 100644
index 0000000000..18e79e42f3
--- /dev/null
+++ b/sdk_container/src/third_party/coreos-overlay/coreos/config/env/app-crypt/mit-krb5
@@ -0,0 +1,4 @@
+# work around configure test that cannot be cross compiled :(
+export krb5_cv_attr_constructor_destructor=yes,yes
+export ac_cv_func_regcomp=yes
+export ac_cv_printf_positional=yes