diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
new file mode 100644
index 0000000..5bcca42
--- /dev/null
+++ b/.github/workflows/build.yaml
@@ -0,0 +1,17 @@
+name: build
+on:
+  push:
+  pull_request:
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    container:
+      image: ghcr.io/catthehacker/ubuntu:runner-latest
+    steps:
+      - uses: actions/checkout@v3
+      - uses: cachix/install-nix-action@v27
+      - name: run flacke check
+        run: nix flake check
+      - name: build packages
+        run: ./scripts/build-all.sh
diff --git a/scripts/build-all.sh b/scripts/build-all.sh
new file mode 100755
index 0000000..5a19515
--- /dev/null
+++ b/scripts/build-all.sh
@@ -0,0 +1,11 @@
+#!/usr/bin/env bash
+set -eo pipefail
+
+packages=$(nix flake show --json --all-systems| \
+           jq -r '.packages["x86_64-linux"] | keys[] | ".#packages.x86_64-linux.\(.)"')
+
+while IFS= read -r line; do
+    echo "building package $line"
+    nix build -L "$line"
+    echo "done building package $line"
+done <<< "$packages"