diff --git a/.github/workflows/build-beebox.yaml b/.github/workflows/build-beebox.yaml
new file mode 100644
index 0000000..47e0ffa
--- /dev/null
+++ b/.github/workflows/build-beebox.yaml
@@ -0,0 +1,28 @@
+name: build-beebox
+on:
+  workflow_dispatch: # allows manual triggering
+  push:
+    branches:
+      - master
+      - update_flake_lock_action
+
+jobs:
+  build-beebox:
+    if: ${{ always() }}
+    needs: check
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v3
+
+      - uses: cachix/install-nix-action@v17
+        with:
+          extra_nix_config: |
+            max-jobs = 10
+
+      - uses: cachix/cachix-action@v10
+        with:
+          name: aciceri-fleet
+          authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
+
+      - run: nix --print-build-logs --verbose build --allow-import-from-derivation .#nixosConfigurations.beebox.config.system.build.toplevel
diff --git a/.github/workflows/build-hs.yaml b/.github/workflows/build-hs.yaml
new file mode 100644
index 0000000..998d9b4
--- /dev/null
+++ b/.github/workflows/build-hs.yaml
@@ -0,0 +1,28 @@
+name: build-hs
+on:
+  workflow_dispatch: # allows manual triggering
+  push:
+    branches:
+      - master
+      - update_flake_lock_action
+
+jobs:
+  build-hs:
+    if: ${{ always() }}
+    needs: check
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v3
+
+      - uses: cachix/install-nix-action@v17
+        with:
+          extra_nix_config: |
+            max-jobs = 10
+
+      - uses: cachix/cachix-action@v10
+        with:
+          name: aciceri-fleet
+          authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
+
+      - run: nix --print-build-logs --verbose build --allow-import-from-derivation .#nixosConfigurations.hs.config.system.build.toplevel
diff --git a/.github/workflows/build-pbp.yaml b/.github/workflows/build-pbp.yaml
new file mode 100644
index 0000000..d9b74e3
--- /dev/null
+++ b/.github/workflows/build-pbp.yaml
@@ -0,0 +1,34 @@
+name: build-pbp
+on:
+  workflow_dispatch: # allows manual triggering
+  push:
+    branches:
+      - master
+      - update_flake_lock_action
+
+jobs:
+  build-pbp:
+    if: ${{ always() }}
+    needs: check
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v3
+
+      - uses: cachix/install-nix-action@v17
+        with:
+          extra_nix_config: |
+            max-jobs = 10
+
+      - run: |
+         DEBIAN_FRONTEND=noninteractive
+         sudo apt-get update -q -y && sudo apt-get install -q -y qemu-system-aarch64 qemu-efi binfmt-support qemu-user-static
+         mkdir -p ~/.config/nix
+         sudo bash -c "echo system-features = aarch64-linux arm-linux >> /etc/nix/nix.conf"
+
+      - uses: cachix/cachix-action@v10
+        with:
+          name: aciceri-fleet
+          authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
+
+      - run: nix --print-build-logs --verbose build --allow-import-from-derivation --option system aarch64-linux --option sandbox false --extra-platforms aarch64-linux .#nixosConfigurations.pbp.config.system.build.toplevel
diff --git a/.github/workflows/build-thinkpad.yaml b/.github/workflows/build-thinkpad.yaml
new file mode 100644
index 0000000..8367f27
--- /dev/null
+++ b/.github/workflows/build-thinkpad.yaml
@@ -0,0 +1,28 @@
+name: build-thinkpad
+on:
+  workflow_dispatch: # allows manual triggering
+  push:
+    branches:
+      - master
+      - update_flake_lock_action
+
+jobs:
+  build-thinkpad:
+    if: ${{ always() }}
+    needs: check
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v3
+
+      - uses: cachix/install-nix-action@v17
+        with:
+          extra_nix_config: |
+            max-jobs = 10
+
+      - uses: cachix/cachix-action@v10
+        with:
+          name: aciceri-fleet
+          authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
+
+      - run: nix --print-build-logs --verbose build --allow-import-from-derivation .#nixosConfigurations.thinkpad.config.system.build.toplevel
diff --git a/.github/workflows/check.yaml b/.github/workflows/check.yaml
new file mode 100644
index 0000000..55050c6
--- /dev/null
+++ b/.github/workflows/check.yaml
@@ -0,0 +1,26 @@
+name: check
+on:
+  workflow_dispatch: # allows manual triggering
+  push:
+    branches:
+      - master
+      - update_flake_lock_action
+
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v3
+
+      - uses: cachix/install-nix-action@v17
+        with:
+          extra_nix_config: |
+            max-jobs = 10
+
+      - uses: cachix/cachix-action@v10
+        with:
+          name: aciceri-fleet
+          authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}'
+
+      - run: nix --print-build-logs --verbose flake check --allow-import-from-derivation --keep-going