diff --git a/tools/create_base_image_arm.sh b/tools/create_base_image_arm.sh
new file mode 100755
index 0000000..ac87464
--- /dev/null
+++ b/tools/create_base_image_arm.sh
@@ -0,0 +1,206 @@
+#!/bin/bash
+
+# Copyright 2019 Google Inc. All rights reserved.
+
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+
+#     http://www.apache.org/licenses/LICENSE-2.0
+
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+source "${ANDROID_BUILD_TOP}/external/shflags/src/shflags"
+
+FLAGS_HELP="USAGE: $0 <KERNEL_DIR> [IMAGE]"
+
+FLAGS "$@" || exit $?
+eval set -- "${FLAGS_ARGV}"
+
+for arg in "$@" ; do
+	if [ -z $KERNEL_DIR ]; then
+		KERNEL_DIR=$arg
+	elif [ -z $IMAGE ]; then
+		IMAGE=$arg
+	else
+		flags_help
+		exit 1
+	fi
+done
+
+if [ -z $KERNEL_DIR ] || [ -z $IMAGE ]; then
+	flags_help
+	exit 1
+fi
+if [ -e "${IMAGE}" ]; then
+	echo "error: ${IMAGE} already exists"
+	exit 1
+fi
+if [ ! -e "${KERNEL_DIR}" ]; then
+	echo "error: can't find '${KERNEL_DIR}'. aborting..."
+	exit 1
+fi
+
+# escalate to superuser
+if [ $UID -ne 0 ]; then
+	cd ${ANDROID_BUILD_TOP}
+	. ./build/envsetup.sh
+	lunch ${TARGET_PRODUCT}-${TARGET_BUILD_VARIANT}
+	mmma external/u-boot
+	cd -
+	exec sudo -E "${0}" ${@}
+fi
+
+cd ${ANDROID_BUILD_TOP}/external/arm-trusted-firmware
+CROSS_COMPILE=aarch64-linux-gnu- make PLAT=rk3399 DEBUG=0 ERROR_DEPRECATED=1 bl31
+export BL31="${ANDROID_BUILD_TOP}/external/arm-trusted-firmware/build/rk3399/release/bl31/bl31.elf"
+cd -
+
+idbloader=`mktemp`
+cd ${ANDROID_BUILD_TOP}/external/u-boot
+make ARCH=arm CROSS_COMPILE=aarch64-linux-gnu- rock-pi-4-rk3399_defconfig
+make ARCH=arm CROSS_COMPILE=aarch64-linux-gnu- -j`nproc`
+${ANDROID_HOST_OUT}/bin/mkimage -n rk3399 -T rksd -d tpl/u-boot-tpl.bin ${idbloader}
+cat spl/u-boot-spl.bin >> ${idbloader}
+cd -
+
+${ANDROID_BUILD_TOP}/kernel/tests/net/test/build_rootfs.sh -a arm64 -s buster -n ${IMAGE}
+if [ $? -ne 0 ]; then
+	echo "error: failed to build rootfs. exiting..."
+	exit 1
+fi
+truncate -s +3G ${IMAGE}
+e2fsck -f ${IMAGE}
+resize2fs ${IMAGE}
+
+mntdir=`mktemp -d`
+if [ $? -ne 0 ]; then
+	echo "error: failed to mkdir tmp. exiting..."
+	exit 1
+fi
+mount ${IMAGE} ${mntdir}
+if [ $? != 0 ]; then
+	echo "error: unable to mount ${IMAGE} ${mntdir}"
+	exit 1
+fi
+
+cat > ${mntdir}/boot/boot.cmd << "EOF"
+load mmc ${devnum}:${distro_bootpart} 0x02080000 /boot/Image
+load mmc ${devnum}:${distro_bootpart} 0x04000000 /boot/uInitrd
+load mmc ${devnum}:${distro_bootpart} 0x01f00000 /boot/dtb/rockchip/rk3399-rock-pi-4.dtb
+setenv finduuid "part uuid mmc ${devnum}:${distro_bootpart} uuid"
+run finduuid
+setenv bootargs "earlycon=uart8250,mmio32,0xff1a0000 console=ttyS2,1500000n8 loglevel=7 root=PARTUUID=${uuid} rootwait rootfstype=ext4 sdhci.debug_quirks=0x20000000"
+booti 0x02080000 0x04000000 0x01f00000
+EOF
+${ANDROID_HOST_OUT}/bin/mkimage \
+	-C none -A arm -T script -d ${mntdir}/boot/boot.cmd ${mntdir}/boot/boot.scr
+
+cd ${KERNEL_DIR}
+export PATH=${ANDROID_BUILD_TOP}/prebuilts/clang/host/linux-x86/clang-r353983c/bin:$PATH
+export PATH=${ANDROID_BUILD_TOP}/prebuilts/gcc/linux-x86/aarch64/aarch64-linux-android-4.9/bin:$PATH
+make ARCH=arm64 CC=clang CROSS_COMPILE=aarch64-linux-androidkernel- \
+      CLANG_TRIPLE=aarch64-linux-gnu- rockpi4_defconfig
+make ARCH=arm64 CC=clang CROSS_COMPILE=aarch64-linux-androidkernel- \
+      CLANG_TRIPLE=aarch64-linux-gnu- -j`nproc`
+
+cp ${KERNEL_DIR}/arch/arm64/boot/Image ${mntdir}/boot/
+mkdir -p ${mntdir}/boot/dtb/rockchip/
+cp ${KERNEL_DIR}/arch/arm64/boot/dts/rockchip/rk3399-rock-pi-4.dtb ${mntdir}/boot/dtb/rockchip/
+cd -
+
+sudo mount -o bind /proc ${mntdir}/proc
+sudo mount -o bind /sys ${mntdir}/sys
+sudo mount -o bind /dev ${mntdir}/dev
+
+echo "Installing required packages..."
+chroot ${mntdir} /bin/bash <<EOF
+apt-get update
+apt-get install -y -f initramfs-tools u-boot-tools network-manager openssh-server sudo
+apt-get clean
+EOF
+
+echo "Turning on DHCP client..."
+cat >${mntdir}/etc/systemd/network/dhcp.network <<EOF
+[Match]
+Name=en*
+
+[Network]
+DHCP=yes
+EOF
+
+chroot ${mntdir} /bin/bash << "EOT"
+echo "Adding user vsoc-01 and groups..."
+useradd -m -G sudo -d /home/vsoc-01 --shell /bin/bash vsoc-01
+echo -e "cuttlefish\ncuttlefish" | passwd
+echo -e "cuttlefish\ncuttlefish" | passwd vsoc-01
+
+echo "Creating Initial Ramdisk..."
+update-initramfs -c -t -k "5.2.0"
+mkimage -A arm -O linux -T ramdisk -C none -a 0 -e 0 -n uInitrd -d /boot/initrd.img-5.2.0 /boot/uInitrd-5.2.0
+ln -s /boot/uInitrd-5.2.0 /boot/uInitrd
+EOT
+
+umount ${mntdir}/sys
+umount ${mntdir}/dev
+umount ${mntdir}/proc
+umount ${mntdir}
+
+# Turn on journaling
+tune2fs -O ^has_journal ${IMAGE}
+e2fsck -fy ${IMAGE} >/dev/null 2>&1
+
+# Minimize rootfs filesystem
+while true; do
+	out=`sudo resize2fs -M ${IMAGE} 2>&1`
+	if [[ $out =~ "Nothing to do" ]]; then
+		break
+	fi
+done
+
+# Minimize rootfs file size
+block_count=`sudo tune2fs -l ${IMAGE} | grep "Block count:" | sed 's/.*: *//'`
+block_size=`sudo tune2fs -l ${IMAGE} | grep "Block size:" | sed 's/.*: *//'`
+sector_size=512
+start_sector=32768
+fs_size=$(( block_count*block_size ))
+fs_sectors=$(( fs_size/sector_size ))
+part_sectors=$(( ((fs_sectors-1)/2048+1)*2048 ))  # 1MB-aligned
+end_sector=$(( start_sector+part_sectors-1 ))
+secondary_gpt_sectors=33
+fs_end=$(( (end_sector+secondary_gpt_sectors+1)*sector_size ))
+image_size=$(( part_sectors*sector_size ))
+truncate -s ${image_size} ${IMAGE}
+e2fsck -fy ${IMAGE} >/dev/null 2>&1
+
+# Create final image
+tmpimg=`mktemp`
+truncate -s ${fs_end} ${tmpimg}
+mknod -m640 /dev/loop100 b 7 100
+chown root:disk /dev/loop100
+
+# Create GPT
+sgdisk -Z -a1 ${tmpimg}
+sgdisk -a1 -n:1:64:8127 -t:1:8301 -c:1:loader1 ${tmpimg}
+sgdisk -a1 -n:2:8128:8191 -t:2:8301 -c:2:env ${tmpimg}
+sgdisk -a1 -n:3:16384:24575 -t:3:8301 -c:3:loader2 ${tmpimg}
+sgdisk -a1 -n:4:24576:32767 -t:4:8301 -c:4:trust ${tmpimg}
+sgdisk -a1 -n:5:32768:${end_sector} -A:5:set:2 -t:5:8305 -c:5:rootfs ${tmpimg}
+
+device=$(losetup -f)
+losetup ${device} ${tmpimg}
+partx -v --add ${device}
+
+# copy over data
+dd if=${idbloader} of=${device}p1
+dd if=${ANDROID_BUILD_TOP}/external/u-boot/u-boot.itb of=${device}p3
+dd if=${IMAGE} of=${device}p5 bs=1M
+
+chown $SUDO_USER:`id -ng $SUDO_USER` ${tmpimg}
+mv ${tmpimg} ${IMAGE}
+partx -v --delete ${device}
+losetup -d ${device}