update build-essential from upstream
add build-essential to the workstation role