copy from coreos manifest