diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
index 8d008a1320..5a6084503a 100644
--- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
+++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.accept_keywords
@@ -94,3 +94,5 @@ dev-util/checkbashisms
 # https://curl.haxx.se/docs/security.html
 =net-misc/curl-7.47.1 ~amd64 ~arm64
 
+# Older versions of sssd fail to build
+=sys-auth/sssd-1.13.1 ~amd64 ~arm64
diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use
index b4939ca83a..ab2ea8e639 100644
--- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use
+++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/base/package.use
@@ -58,3 +58,14 @@ sys-fs/squashfs-tools lzo xz
 
 # make the kernel version discoverable via the traditional gentoo symlink
 sys-kernel/coreos-sources symlink
+
+# set build options for ssdp
+net-nds/openldap minimal sasl
+sys-libs/glibc nscd
+net-dns/bind-tools gssapi
+
+# disable database build because otherwise it tries to generate a database in /etc
+dev-libs/cyrus-sasl kerberos -berkdb -gdbm
+
+# don't build manpages for sssd
+sys-auth/sssd -manpages -python