diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/package.use b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/package.use
index c7cfe784d4..a72ba842a9 100644
--- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/package.use
+++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/package.use
@@ -33,5 +33,8 @@ app-shells/bash -net
 # needed by docker
 sys-libs/libseccomp static-libs
 
-# Gentoo's new hardened profile disables PIC, but open-vm-tools needs it
-app-emulation/open-vm-tools pic
+# prefer fuse3 over fuse2
+# no icu - it's used for l10n only
+# enable pam
+# no resolutionkms - we provide no graphics
+app-emulation/open-vm-tools -fuse fuse3 -icu pam -resolutionkms