diff --git a/bin/.ext/.gitignore b/bin/.ext/.gitignore
index 4d0ed53a..9dda5ab7 100644
--- a/bin/.ext/.gitignore
+++ b/bin/.ext/.gitignore
@@ -20,3 +20,4 @@
 /rust-analyzer
 /tilt
 /tz
+/ubi
diff --git a/bin/.ext/Makefile b/bin/.ext/Makefile
index c78bf226..37d18be2 100644
--- a/bin/.ext/Makefile
+++ b/bin/.ext/Makefile
@@ -27,6 +27,7 @@ PANDOC_VERSION := 3.2
 RUST_ANALYZER_VERSION := 2024-08-19
 TILT_VERSION := v0.33.19
 TZ_VERSION := v0.7.0
+UBI_VERSION := v0.1.1
 
 BUILDIFIER_GITHUB := bazelbuild/buildtools
 CARGO_BINSTALL_GITHUB := cargo-bins/cargo-binstall
@@ -50,6 +51,7 @@ PANDOC_GITHUB := jgm/pandoc
 RUST_ANALYZER_GITHUB := rust-analyzer/rust-analyzer
 TILT_GITHUB := tilt-dev/tilt
 TZ_GITHUB := oz/tz
+UBI_GITHUB := houseabsolute/ubi
 
 .PHONY: update
 ## Check for updates
@@ -269,6 +271,15 @@ jira: | .ext-jira ; ln -fsT $|/$@ $@
 	$(CURL) https://github.com/$(JIRA_CLI_GITHUB)/releases/download/$(JIRA_CLI_VERSION)/jira_$(JIRA_CLI_VERSION:v%=%)_linux_x86_64.tar.gz \
 		| tar -x -z -C $@ --strip-components=2 --wildcards "*/bin/jira"
 
+# TODO: drop when https://github.com/jdx/mise/pull/2290 merged
+all: ubi
+ubi: | .ext-ubi ; ln -fsT $|/$@ $@
+.ext-ubi: .ext-ubi-$(UBI_VERSION) ; ln -fsT $< $@
+.ext-ubi-$(UBI_VERSION):
+	mkdir -p $@
+	$(CURL) https://github.com/$(UBI_GITHUB)/releases/download/$(UBI_VERSION)/ubi-Linux-x86_64-musl.tar.gz \
+		| tar -x -z -C $@ ubi
+
 .PHONY: gc
 ## Remove old versions
 gc: