diff --git a/.gitlab/.gitignore b/.gitlab/.gitignore
index ef38d5fd85..f66ad9743b 100644
--- a/.gitlab/.gitignore
+++ b/.gitlab/.gitignore
@@ -8,6 +8,7 @@
 /innosetup
 /jom
 /llvm*
+/MacOS*
 /mingw
 /msvc*
 /ninja*
diff --git a/.gitlab/ci/env_macos_package.sh b/.gitlab/ci/env_macos_package.sh
new file mode 100644
index 0000000000..e810f63375
--- /dev/null
+++ b/.gitlab/ci/env_macos_package.sh
@@ -0,0 +1 @@
+. .gitlab/ci/macos-env.sh
diff --git a/.gitlab/ci/macos-env.sh b/.gitlab/ci/macos-env.sh
new file mode 100644
index 0000000000..1b8ad8e94e
--- /dev/null
+++ b/.gitlab/ci/macos-env.sh
@@ -0,0 +1,2 @@
+.gitlab/ci/macos.sh
+export SDKROOT="$PWD/.gitlab/MacOSX.sdk"
diff --git a/.gitlab/ci/macos.sh b/.gitlab/ci/macos.sh
new file mode 100755
index 0000000000..7e947a2df3
--- /dev/null
+++ b/.gitlab/ci/macos.sh
@@ -0,0 +1,28 @@
+#!/bin/sh
+
+set -e
+
+# This URL is only visible inside of Kitware's network.
+baseurl="https://cmake.org/files/dependencies/internal/macos"
+
+case "$(uname -s)-$(uname -m)" in
+    Darwin-*)
+        shatool="shasum -a 256"
+        sha256sum="427612880d6c40bcef2b0ecb39d92b057ee7a43ec3552fbd4449859991eb1cc6"
+        tarball="MacOSX15.5.sdk.tar.bz2"
+        ;;
+    *)
+        echo "Unrecognized platform $(uname -s)-$(uname -m)"
+        exit 1
+        ;;
+esac
+readonly shatool
+readonly sha256sum
+
+cd .gitlab
+
+echo "$sha256sum  $tarball" > macos.sha256sum
+curl -OL "$baseurl/$tarball"
+$shatool --check macos.sha256sum
+tar xjf "$tarball"
+rm "$tarball" macos.sha256sum
diff --git a/.gitlab/ci/repackage/macos.sh b/.gitlab/ci/repackage/macos.sh
new file mode 100755
index 0000000000..34990019b1
--- /dev/null
+++ b/.gitlab/ci/repackage/macos.sh
@@ -0,0 +1,8 @@
+#!/usr/bin/env bash
+
+set -e
+
+sdkPath="$(xcrun --show-sdk-path)"
+sdkVers="$(xcrun --show-sdk-version)"
+
+tar cjf "MacOSX${sdkVers}.sdk.tar.bz2" -C "${sdkPath%/*}" --no-fflags "MacOSX.sdk"