diff --git a/.openclaw/skills/sure-openclaw-build-bootstrap/SKILL.md b/.openclaw/skills/sure-openclaw-build-bootstrap/SKILL.md
index a2310a961..e3a1bb919 100644
--- a/.openclaw/skills/sure-openclaw-build-bootstrap/SKILL.md
+++ b/.openclaw/skills/sure-openclaw-build-bootstrap/SKILL.md
@@ -27,6 +27,45 @@ Create a repeatable bootstrap flow that keeps the environment lean:
 6. Treat local Redis as acceptable, but avoid local Postgres data unless there is a strong reason.
 7. Re-run the audit after each material setup step.
 
+## Step 2, install only missing OS packages
+
+On the first reference host, the missing OS-level pieces were:
+
+- `build-essential`
+- `pkg-config`
+- `libpq-dev`
+- `postgresql-client`
+- `redis-server`
+- `libyaml-dev`
+- `libvips`
+- `libvips-dev`
+- `libxml2-dev`
+- `libxslt1-dev`
+- `zlib1g-dev`
+
+Install them with:
+
+```bash
+apt-get update && apt-get install -y --no-install-recommends \
+  build-essential pkg-config libpq-dev postgresql-client redis-server \
+  libyaml-dev libvips libvips-dev libxml2-dev libxslt1-dev zlib1g-dev
+```
+
+Then clean package metadata if image size matters:
+
+```bash
+apt-get clean && rm -rf /var/lib/apt/lists/*
+```
+
+After this step on the reference host:
+
+- `psql` became available
+- `redis-server` became available
+- native build tooling became available
+- Ruby and Bundler were still missing, so Rails work was still blocked on the next step
+
+Important note: `libvips-dev` pulls a large transitive dependency set on Debian Bookworm. Keep it because Sure's devcontainer references it, but treat it as the heaviest part of this OS-package step.
+
 ## Step 1, baseline audit
 
 Use the helper script first:
diff --git a/.openclaw/skills/sure-openclaw-build-bootstrap/references/baseline-environment-audit.md b/.openclaw/skills/sure-openclaw-build-bootstrap/references/baseline-environment-audit.md
index f64b45147..a659259ee 100644
--- a/.openclaw/skills/sure-openclaw-build-bootstrap/references/baseline-environment-audit.md
+++ b/.openclaw/skills/sure-openclaw-build-bootstrap/references/baseline-environment-audit.md
@@ -68,6 +68,35 @@ At baseline, the environment is incomplete for Rails work:
 7. Keep caches and dependency storage under `/root`.
 8. Record version drift when the host has a newer Node than the repo reference, but do not change it unless the repo proves sensitive to that drift.
 
+## Step 2 result, missing OS packages installed
+
+Installed on the reference host:
+
+- `build-essential`
+- `pkg-config`
+- `libpq-dev`
+- `postgresql-client`
+- `redis-server`
+- `libyaml-dev`
+- `libvips`
+- `libvips-dev`
+- `libxml2-dev`
+- `libxslt1-dev`
+- `zlib1g-dev`
+
+Re-audit result after install:
+
+- `psql`: present, `15.16`
+- `redis-server`: present, `7.0.15`
+- `gcc`, `make`, and `pkg-config`: present
+- Ruby: still missing
+- Bundler: still missing
+
+Disk effect observed on the reference host:
+
+- `/` free dropped from about `6.8G` to about `6.3G`
+- the heaviest dependency expansion came from `libvips-dev`
+
 ## Suggested follow-up audit checks after installs
 
 Preferred: