diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-oracle-oci/files/grub.cfg b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-oracle-oci/files/grub.cfg
new file mode 100644
index 0000000000..be6c305af9
--- /dev/null
+++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-oracle-oci/files/grub.cfg
@@ -0,0 +1,8 @@
+# CoreOS Container Linux GRUB settings
+
+set oem_id="oracle-oci"
+
+set linux_console="console=ttyS0,9600"
+serial com0 --speed=9600
+terminal_input serial_com0
+terminal_output serial_com0
diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-oracle-oci/files/oem-release b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-oracle-oci/files/oem-release
new file mode 100644
index 0000000000..c3a6605e43
--- /dev/null
+++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-oracle-oci/files/oem-release
@@ -0,0 +1,5 @@
+ID=oracle-oci
+VERSION_ID=@@OEM_VERSION_ID@@
+NAME="Oracle Cloud Infrastructure"
+HOME_URL="https://cloud.oracle.com/en_US/bare-metal"
+BUG_REPORT_URL="https://issues.coreos.com"
diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-oracle-oci/files/units/oracle-oci-root-setup.service b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-oracle-oci/files/units/oracle-oci-root-setup.service
new file mode 100644
index 0000000000..5a42ced164
--- /dev/null
+++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-oracle-oci/files/units/oracle-oci-root-setup.service
@@ -0,0 +1,22 @@
+[Unit]
+Description=Configure Oracle OCI Root Disk
+ConditionPathExists=!/etc/iscsi/nodes/iqn.2015-02.oracle.boot:uefi
+
+Before=iscsid.service
+
+[Service]
+Type=oneshot
+# This starts its own iscsid until the unit finishes and systemd kills it
+# again. That's not ideal, but sequencing this unit after iscsid.service
+# has been observed to result in parameters not propagating to the kernel
+# iSCSI session (presumably due to a race with session recovery).
+ExecStart=/usr/sbin/iscsiadm -m node -o new -T iqn.2015-02.oracle.boot:uefi -p 169.254.0.2:3260,1
+# Never automatically log out of the root disk
+ExecStart=/usr/sbin/iscsiadm -m node -T iqn.2015-02.oracle.boot:uefi -o update -n node.startup -v onboot
+# Root-on-iSCSI settings from open-iscsi README
+ExecStart=/usr/sbin/iscsiadm -m node -T iqn.2015-02.oracle.boot:uefi -o update -n node.conn[0].timeo.noop_out_interval -v 0
+ExecStart=/usr/sbin/iscsiadm -m node -T iqn.2015-02.oracle.boot:uefi -o update -n node.conn[0].timeo.noop_out_timeout -v 0
+ExecStart=/usr/sbin/iscsiadm -m node -T iqn.2015-02.oracle.boot:uefi -o update -n node.session.timeo.replacement_timeout -v 86400
+
+[Install]
+RequiredBy=iscsid.service
diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-oracle-oci/metadata.xml b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-oracle-oci/metadata.xml
new file mode 100644
index 0000000000..097975e3ad
--- /dev/null
+++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-oracle-oci/metadata.xml
@@ -0,0 +1,4 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE pkgmetadata SYSTEM "http://www.gentoo.org/dtd/metadata.dtd">
+<pkgmetadata>
+</pkgmetadata>
diff --git a/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-oracle-oci/oem-oracle-oci-0.1.0.ebuild b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-oracle-oci/oem-oracle-oci-0.1.0.ebuild
new file mode 100644
index 0000000000..c3cd4d6cf6
--- /dev/null
+++ b/sdk_container/src/third_party/coreos-overlay/coreos-base/oem-oracle-oci/oem-oracle-oci-0.1.0.ebuild
@@ -0,0 +1,27 @@
+# Copyright (c) 2017 CoreOS, Inc.. All rights reserved.
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=5
+
+DESCRIPTION="OEM suite for Oracle OCI images"
+HOMEPAGE=""
+SRC_URI=""
+
+LICENSE="Apache-2.0"
+SLOT="0"
+KEYWORDS="amd64 arm64 x86"
+
+# no source directory
+S="${WORKDIR}"
+
+src_prepare() {
+	sed -e "s\\@@OEM_VERSION_ID@@\\${PVR}\\g" \
+		"${FILESDIR}/oem-release" > "${T}/oem-release" || die
+}
+
+src_install() {
+	insinto "/usr/share/oem"
+	doins "${FILESDIR}/grub.cfg"
+	doins "${T}/oem-release"
+	doins -r "${FILESDIR}/units"
+}