diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/rkt/files/sysusers.conf b/sdk_container/src/third_party/coreos-overlay/app-emulation/rkt/files/sysusers.conf
new file mode 100644
index 0000000000..da9db692d6
--- /dev/null
+++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/rkt/files/sysusers.conf
@@ -0,0 +1,5 @@
+# create rkt group
+g rkt 251 - -
+# add core to rkt group
+m core rkt - -
+
diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/rkt/rkt-0.16.0.ebuild b/sdk_container/src/third_party/coreos-overlay/app-emulation/rkt/rkt-0.16.0-r1.ebuild
similarity index 100%
rename from sdk_container/src/third_party/coreos-overlay/app-emulation/rkt/rkt-0.16.0.ebuild
rename to sdk_container/src/third_party/coreos-overlay/app-emulation/rkt/rkt-0.16.0-r1.ebuild
diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/rkt/rkt-9999.ebuild b/sdk_container/src/third_party/coreos-overlay/app-emulation/rkt/rkt-9999.ebuild
index c76c9dcc8f..8cde2cd03a 100644
--- a/sdk_container/src/third_party/coreos-overlay/app-emulation/rkt/rkt-9999.ebuild
+++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/rkt/rkt-9999.ebuild
@@ -129,4 +129,7 @@ src_install() {
 	systemd_dounit "${S}"/dist/init/systemd/${PN}-metadata.service
 	systemd_dounit "${S}"/dist/init/systemd/${PN}-metadata.socket
 	systemd_enable_service sockets.target ${PN}-metadata.socket
+
+	insinto /usr/lib/sysusers.d/
+	newins "${FILESDIR}"/sysusers.conf ${PN}.conf
 }