diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 1430603bc9cb1e99bf7db1e4c76470c1eea265c3..518cb2c293b796efd60cb2ca5e8d2f696d1109c0 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -3,6 +3,7 @@ stages:
   - build
   - push
   - trigger
+  - vendor
 
 variables:
   GOPATH: /go
@@ -149,3 +150,16 @@ trigger_deb:
   stage: trigger
   script:
     - "curl -X POST -F token=$RISEUP_VPN_DEB_TRIGGER_TOKEN -F ref=master https://0xacab.org/api/v4/projects/1916/trigger/pipeline"
+
+vendorize:
+  image: 0xacab.org:4567/leap/docker/bitmask-vpn:latest
+  stage: vendor
+  script:
+    - PROVIDERS="riseup" make build_all_providers
+ artifacts:
+   name: installers-$CI_COMMIT_REF_NAME
+   paths:
+     - deploy/RiseupVPN-*.exe
+     - deploy/RiseupVPN-*.pkg
+     - deploy/riseup-vpn-*.deb
+   expire_in: 1 month
diff --git a/Makefile b/Makefile
index 0023324d033be71ee104fb7c6b43656dd61b73a7..bfcb174fdd45ccfc7998b3e08a47914236d17caf 100644
--- a/Makefile
+++ b/Makefile
@@ -109,6 +109,13 @@ clean:
 	@rm -rf build/
 	@unlink branding/assets/default
 
+#########################################################################
+# build them all
+#########################################################################
+
+build_all_providers:
+	branding/scripts/build-all-providers
+
 #########################################################################
 # packaging templates
 #########################################################################
diff --git a/branding/scripts/build-all-providers b/branding/scripts/build-all-providers
new file mode 100755
index 0000000000000000000000000000000000000000..2efcfc5e20e14c7e4e4384124502ee993e5bf689
--- /dev/null
+++ b/branding/scripts/build-all-providers
@@ -0,0 +1,17 @@
+#!/bin/bash
+
+# run the build process for all the providers passed
+# on a environment variable
+
+: "${PROVIDERS:=riseup}"
+
+set -e
+
+export XBUILD=yes
+
+for _provider in $PROVIDERS; do
+    export PROVIDER=$_provider;
+    make prepare
+    make build
+    make packages
+done
diff --git a/branding/templates/makefile/Makefile b/branding/templates/makefile/Makefile
index 3e6332f4cb1dc5ac694df3d848ce07e3ac682710..39c4a50eac4e84d7b1d357c2804b277dbfda5f47 100755
--- a/branding/templates/makefile/Makefile
+++ b/branding/templates/makefile/Makefile
@@ -54,8 +54,8 @@ pkg_osx:
 	echo "[+] Building osx package..."
 	cp ../bin/darwin/bitmask-vpn dist/$(APPNAME).app/Contents/MacOS/
 	cp ../bin/darwin/bitmask-helper dist/$(APPNAME).app/Contents/MacOS/
-	chmod +x $(STAGING)/openvpn-osx
 	cp $(STAGING)/openvpn-osx dist/$(APPNAME).app/Contents/Resources/openvpn.leap
+	chmod +x dist/$(APPNAME).app/Contents/Resources/openvpn.leap
 ifeq ($(SYSTEM), Darwin)
 	osx/quickpkg --output dist/$(APPNAME)-$(VERSION)_unsigned.pkg --scripts osx/scripts/ dist/$(APPNAME).app/
 	@if [ $(BUILD_RELEASE) = no ]; then\