diff --git a/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-02-22-enable-kerberos-for-nfsv4.md b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-02-22-enable-kerberos-for-nfsv4.md
new file mode 100644
index 0000000000..543c5735bb
--- /dev/null
+++ b/sdk_container/src/third_party/coreos-overlay/changelog/changes/2022-02-22-enable-kerberos-for-nfsv4.md
@@ -0,0 +1 @@
+- Bring in dependencies for NFS4 with Kerberos both in kernel and userspace. Tested against NFS4.1 server. [PR#1664](https://github.com/flatcar-linux/coreos-overlay/pull/1664)
diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use
index 57f2da854f..8574c56c03 100644
--- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use
+++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use
@@ -145,3 +145,7 @@ sys-apps/iproute2 elf
 # possible, because of a bunch of additional dependencies in SDK like
 # pam_sssd in baselayout.
 sys-apps/shadow su
+
+# Enable kerberos support for NFS
+net-fs/nfs-utils kerberos nfsv41 nfsv4 junction ldap libmount nfsdcld uuid
+net-libs/libtirpc kerberos
diff --git a/sdk_container/src/third_party/coreos-overlay/sys-kernel/coreos-modules/files/commonconfig-5.15 b/sdk_container/src/third_party/coreos-overlay/sys-kernel/coreos-modules/files/commonconfig-5.15
index 75da094317..a732060e0a 100644
--- a/sdk_container/src/third_party/coreos-overlay/sys-kernel/coreos-modules/files/commonconfig-5.15
+++ b/sdk_container/src/third_party/coreos-overlay/sys-kernel/coreos-modules/files/commonconfig-5.15
@@ -130,6 +130,10 @@ CONFIG_CRYPTO_FIPS=y
 CONFIG_CRYPTO_GCM=m
 CONFIG_CRYPTO_HMAC=y
 CONFIG_CRYPTO_LZO=m
+# CONFIG_RPCSEC_GSS_KRB5 requires some older crypto modules
+CONFIG_CRYPTO_LIB_DES=m
+CONFIG_CRYPTO_DES=m
+CONFIG_RPCSEC_GSS_KRB5=m
 # CONFIG_CRYPTO_MANAGER_DISABLE_TESTS is not set
 CONFIG_CRYPTO_SHA1=y
 CONFIG_CRYPTO_USER_API_HASH=m