diff --git a/.forgejo/workflows/deploy.yaml b/.forgejo/workflows/deploy.yaml
index da636fb..2675853 100644
--- a/.forgejo/workflows/deploy.yaml
+++ b/.forgejo/workflows/deploy.yaml
@@ -37,7 +37,13 @@ jobs:
             nodejs \
             clang lld libc++ \
             wasi-libc wasi-libc++ wasi-libc++abi wasi-compiler-rt \
-            git curl tar rsync zstd gzip jq openssl ffmpeg gnupg cmake
+            git curl tar rsync zstd gzip jq openssl ffmpeg gnupg \
+            cmake make perl
+          # cmake/make/perl: the native server product pulls Crafter.Network,
+          # which builds msquic (ExternalBuilder::CMake) with quictls — CMake's
+          # default generator drives make, and quictls is an OpenSSL fork whose
+          # build system is perl. Dev machines have base-devel; this container
+          # does not.
           # Container runs as root; workspace may be owned by another uid.
           git config --global --add safe.directory '*'