diff --git a/machines/uo/attach.sh b/machines/uo/attach.sh
new file mode 100755
index 0000000..9d0b686
--- /dev/null
+++ b/machines/uo/attach.sh
@@ -0,0 +1,6 @@
+#!/bin/sh
+set -eu
+. ./lib.shs
+. machines/$mach/opts.shs
+
+nsenter --wdns=$nethorror_root $namespaces "$@"
diff --git a/machines/uo/opts.shs b/machines/uo/opts.shs
new file mode 100644
index 0000000..f0998ef
--- /dev/null
+++ b/machines/uo/opts.shs
@@ -0,0 +1,3 @@
+#!/bin/false
+
+namespaces="--net=./state/$mach/netns --mount=./state/$mach/mntns"
diff --git a/machines/uo/run-shim.sh b/machines/uo/run-shim.sh
new file mode 100755
index 0000000..2f42dd8
--- /dev/null
+++ b/machines/uo/run-shim.sh
@@ -0,0 +1,7 @@
+#!/bin/sh
+
+set -eu
+. ./lib.shs
+
+ensure_started
+attach machines/$mach/setup.sh
diff --git a/machines/uo/setup.sh b/machines/uo/setup.sh
new file mode 100755
index 0000000..3d63561
--- /dev/null
+++ b/machines/uo/setup.sh
@@ -0,0 +1,7 @@
+#!/bin/sh
+set -eu
+
+# typically: bring up the networks
+ip addr add 100.100.0.2/29 dev up_ve
+ip link set up_ve up
+
diff --git a/machines/uo/start.sh b/machines/uo/start.sh
new file mode 100755
index 0000000..97d1578
--- /dev/null
+++ b/machines/uo/start.sh
@@ -0,0 +1,10 @@
+#!/bin/sh
+set -eu
+. ./lib.shs
+. machines/$mach/opts.shs
+
+setup_statedir
+
+unshare $namespaces /bin/true # just create the namespaces
+
+veth_to_bridge up_ve vpsuplink