From 35b8d4d7166fe4917e91bbc9f3f353ca4b86803b Mon Sep 17 00:00:00 2001
From: Leon Schuermann <leon@is.currently.online>
Date: Sat, 31 Jan 2026 15:40:01 -0500
Subject: [PATCH] GitHub actions: add Nix CI

---
 .github/workflows/tockloader.yml | 35 ++++++++++++++++++++++++++++++++
 1 file changed, 35 insertions(+)

diff --git a/.github/workflows/tockloader.yml b/.github/workflows/tockloader.yml
index 70cb72a..3ab73d1 100644
--- a/.github/workflows/tockloader.yml
+++ b/.github/workflows/tockloader.yml
@@ -28,3 +28,38 @@ jobs:
         tockloader --version
         tockloader list-known-boards
 
+  nix-build:
+    runs-on: ubuntu-latest
+
+    steps:
+    - uses: actions/checkout@v4
+
+    - uses: cachix/install-nix-action@v25
+      with:
+        nix_path: nixpkgs=channel:nixos-unstable
+
+    - name: Build without unfree packages
+      run: nix-build --arg withUnfreePkgs false
+
+    - name: Run basic Tockloader commands
+      run: |
+        ./result/bin/tockloader --version
+        ./result/bin/tockloader list-known-boards
+
+    - name: Enable unfree packages in default.nix
+      run: |
+        mkdir -p $HOME/.config/nixpkgs/
+        cat >$HOME/.config/nixpkgs/config.nix <<EOF
+        {
+          allowUnfree = true;
+          segger-jlink.acceptLicense = true;
+        }
+        EOF
+
+    - name: Build with unfree packages
+      run: nix-build --arg withUnfreePkgs true
+
+    - name: Run basic Tockloader commands
+      run: |
+        ./result/bin/tockloader --version
+        ./result/bin/tockloader list-known-boards