diff --git a/third_party/sandboxroot/regenerate.sh b/third_party/sandboxroot/regenerate.sh
index 512d305..698098f 100755
--- a/third_party/sandboxroot/regenerate.sh
+++ b/third_party/sandboxroot/regenerate.sh
@@ -29,6 +29,9 @@
   "nasm"
   "acpica-tools"
 
+  # patch tool, as used by gazelle
+  "patch"
+
   # TPM emulator for testing
   "swtpm-tools"