diff --git a/.github/workflows/cont_integration.yml b/.github/workflows/cont_integration.yml
new file mode 100644
index 0000000..5fcabac
--- /dev/null
+++ b/.github/workflows/cont_integration.yml
@@ -0,0 +1,16 @@
+on: [push, pull_request]
+
+name: CI
+
+jobs:
+
+  iso-nosb:
+    name: Build an ISO without secureboot
+    runs-on: ubuntu-latest
+    steps:
+      - name: checkout
+        uses: actions/checkout@v4
+      - name: Build
+        run: make iso-nosb
+      - name: checksum
+        run: sha256sum output/*
diff --git a/Makefile b/Makefile
index 4441efb..56da959 100644
--- a/Makefile
+++ b/Makefile
@@ -29,11 +29,6 @@ ${ISO_FILENAME_NOSB}: builder
 	@git --version
 	docker run \
 		--rm \
-		--interactive \
-		--tty \
-		--volume /run/pcscd:/run/pcscd:ro \
-		--volume /run/user/${UID}/gnupg/S.gpg-agent:/root/.gnupg/S.gpg-agent:ro \
-		--volume ${HOME}/.gnupg:/root/.gnupg:ro \
 		--volume ${PWD}/output:/home/satoshi/output \
 		--env SOURCE_DATE_EPOCH=$(shell git log -1 --format=%ct) \
 		--env TAG="$(shell git log -1 --format=%h)" \