diff --git a/.github/workflows/tockloader.yml b/.github/workflows/tockloader.yml
index 70cb72a..3ab73d1 100644
--- a/.github/workflows/tockloader.yml
+++ b/.github/workflows/tockloader.yml
@@ -28,3 +28,38 @@ jobs:
         tockloader --version
         tockloader list-known-boards
 
+  nix-build:
+    runs-on: ubuntu-latest
+
+    steps:
+    - uses: actions/checkout@v4
+
+    - uses: cachix/install-nix-action@v25
+      with:
+        nix_path: nixpkgs=channel:nixos-unstable
+
+    - name: Build without unfree packages
+      run: nix-build --arg withUnfreePkgs false
+
+    - name: Run basic Tockloader commands
+      run: |
+        ./result/bin/tockloader --version
+        ./result/bin/tockloader list-known-boards
+
+    - name: Enable unfree packages in default.nix
+      run: |
+        mkdir -p $HOME/.config/nixpkgs/
+        cat >$HOME/.config/nixpkgs/config.nix <<EOF
+        {
+          allowUnfree = true;
+          segger-jlink.acceptLicense = true;
+        }
+        EOF
+
+    - name: Build with unfree packages
+      run: nix-build --arg withUnfreePkgs true
+
+    - name: Run basic Tockloader commands
+      run: |
+        ./result/bin/tockloader --version
+        ./result/bin/tockloader list-known-boards