diff --git a/scripts/setup/machine-setup/lib/packages.sh b/scripts/setup/machine-setup/lib/packages.sh
index e15c69e8..2e14962d 100644
--- a/scripts/setup/machine-setup/lib/packages.sh
+++ b/scripts/setup/machine-setup/lib/packages.sh
@@ -96,23 +96,24 @@ pkgs_core() {
       # separate decision from removing the tool that wanted it.
       echo curl ca-certificates gnupg git jq unzip \
         apt-transport-https lsb-release software-properties-common \
-        wget zip build-essential python3 btop htop tree tmux ripgrep fd-find net-tools eza \
+        wget zip brotli build-essential python3 btop htop tree tmux ripgrep fd-find net-tools eza \
         fail2ban unattended-upgrades
       ;;
     pacman)
       echo curl ca-certificates gnupg git jq unzip \
-        wget zip base-devel python btop htop tree tmux ripgrep fd net-tools eza \
+        wget zip brotli base-devel python btop htop tree tmux ripgrep fd net-tools eza \
         fail2ban
       ;;
     dnf)
       echo curl ca-certificates gnupg2 git jq unzip \
-        wget zip python3 btop htop tree tmux ripgrep fd-find net-tools eza \
+        wget zip brotli python3 btop htop tree tmux ripgrep fd-find net-tools eza \
         fail2ban
       ;;
     brew)
       # curl, unzip and the TLS roots ship with macOS; the compilers come from
       # the Xcode command line tools, which is not a formula — see xcode_clt_*.
-      echo gnupg git jq wget btop htop tree ripgrep fd eza
+      # brotli is here because macOS ships the library but not the CLI.
+      echo gnupg git jq wget brotli btop htop tree ripgrep fd eza
       ;;
   esac
 }