diff --git a/build-all b/build-all
index 526b06a..a1e9379 100755
--- a/build-all
+++ b/build-all
@@ -42,6 +42,7 @@ build() { : \
 \
  && build   notwa-util          \
  && build   cosmo-bootstrap     \
+ && build   cosmo-all           \
  && build   cosmo-dist          \
  && build   cosmo-base          \
  && build   cosmo-kuroko        \
diff --git a/cosmo-all/Dockerfile b/cosmo-all/Dockerfile
new file mode 100644
index 0000000..0c6cd55
--- /dev/null
+++ b/cosmo-all/Dockerfile
@@ -0,0 +1,44 @@
+FROM localhost/cosmo-bootstrap AS builder
+ARG COSMO_FLAVOR=def
+ARG COSMO_REBUILD=1
+RUN : \
+ && . ./env \
+ &&  if [ "$COSMO_REBUILD" = 1 ] || [ "$flavor" != "$COSMO_FLAVOR" ] \
+    ;then : \
+     && rm -r o \
+    ;else : \
+     && mv o o.old \
+    ;fi \
+# create a mapping from flavor to mode (possibly an empty string) \
+ && { [ "$COSMO_FLAVOR" != def ] && mode="$COSMO_FLAVOR" || mode= ;} \
+ && printf '%s="%s"\n' >env \
+    commit "$commit" \
+    flavor "$COSMO_FLAVOR" \
+    mode "$mode" \
+;
+
+RUN --mount=type=cache,id=cosmo-build-all,target=/cosmopolitan/o,sharing=locked \
+    --mount=type=tmpfs,target=/tmp : \
+ && . ./env \
+ && if [ -e o.old ] \
+    ;then : \
+     && cp o.old/* o/ \
+     && rm -r o.old \
+    ;fi \
+\
+# skip some checks that are currently failing: \
+ && mkdir -p "o/$mode/test/libc/calls" \
+ && touch -d '@2222222222' "o/$mode/test/libc/calls/getgroups_test.com.runs" \
+ && touch -d '@2222222222' "o/$mode/test/libc/calls/getpriority_test.com.runs" \
+# this one can fail in nested podman: \
+ && mkdir -p "o/$mode/test/libc/stdio" \
+ && touch -d '@2222222222' "o/$mode/test/libc/stdio/tmpfile_test.com.runs" \
+\
+ && ./makeit MODE="$mode" all \
+\
+# install the binaries somewhere so we can retrieve them without mounting cache: \
+ && find o '(' -name '*.com' -o -name '*.com.dbg' ')' \
+    '!' -name '*_test.*' '!' -name 'test_*' -exec \
+    install -m0755 -t /usr/local/bin {} \
+    + \
+;