diff --git a/.forgejo/workflows/installer.yaml b/.forgejo/workflows/installer.yaml
new file mode 100644
index 0000000..743d1ff
--- /dev/null
+++ b/.forgejo/workflows/installer.yaml
@@ -0,0 +1,63 @@
+# title: install
+# desc: generate a guix installer image
+# adapted from https://github.com/SystemCrafters/guix-installer/
+
+name: installer
+
+on:
+  push:
+    branches:
+      - main
+
+jobs:
+  build:
+    runs-on: docker
+
+    container:
+      image: alpine:3.21
+      options: "--cap-add=all" # needed for guix
+
+    steps:
+      - name: Install dependencies
+        run: |
+          apk add --no-cache git nodejs
+
+      - name: Git checkout
+        uses: actions/checkout@v4
+
+      - name: Guix cache
+        uses: actions/cache/restore@v4
+        with:
+          path: ~/.cache/guix
+          key: guix-cache-${{ github.sha }}
+          restore-keys: |
+            guix-cache-
+
+      - name: Install guix
+        run: |
+          apk add --no-cache guix openrc
+
+          cat <<EOF > /etc/init.d/guix-daemon
+          #!/sbin/openrc-run
+          start(){ guix-daemon --build-users-group=guixbuild & }
+          EOF
+          chmod +x /etc/init.d/guix-daemon
+
+          rc-update add guix-daemon
+          openrc boot
+
+      - name: Build ISO
+        run: |
+          ./scripts/build-installer
+
+      - name: Guix cache save
+        uses: actions/cache/save@v4
+        with:
+          path: ~/.cache/guix
+          key: guix-cache-${{ github.sha }}
+
+      - name: Save artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: installer
+          path: guix-installer-*.iso
diff --git a/channels.scm b/channels.scm
index 2cc48a0..0c256cd 100644
--- a/channels.scm
+++ b/channels.scm
@@ -3,7 +3,7 @@
         (url "https://git.savannah.gnu.org/git/guix.git")
         (branch "master")
         (commit
-          "a9003b8e6b40b59c9545ae87bb441d3549630db7")
+          "2b32a3809883a9b0fc38a79886921f1a53e00425")
         (introduction
           (make-channel-introduction
             "9edb3f66fd807b096b48283debdcddccfea34bad"
@@ -14,7 +14,7 @@
         (url "https://gitlab.com/nonguix/nonguix.git")
         (branch "master")
         (commit
-          "5a7e61a0a5bc191d8558a845bd724a0d41e0afbd")
+          "10e3c2bcaedaba121eec0e255d366a080082cf0a")
         (introduction
           (make-channel-introduction
             "897c1a470da759236cc11798f4e0a5f7d4d59fbc"
@@ -25,7 +25,7 @@
         (url "https://g.freya.cat/freya/sakura")
         (branch "main")
         (commit
-          "3caf3d17b1e5e76f1bf948e6799085b27d204bed")
+          "db9a1e89bf4d730232c5c8ab705a1bab01262a25")
         (introduction
           (make-channel-introduction
             "8fb2f9c2fa414754c41c1c73665e3e73e12693ab"
diff --git a/scripts/build-installer b/scripts/build-installer
index 10cd84c..05d03da 100755
--- a/scripts/build-installer
+++ b/scripts/build-installer
@@ -3,7 +3,7 @@ retry="$(dirname $0)/guix-retry"
 repo="$(realpath "$(dirname $0)/..")"
 extra_args=""
 
-if [ ! -d /gnu/store ]; then
+if [ -f /usr/local/bin ]; then
 # we are likely in a non guix system
 # just for building the installer
 # make sure to authorize the substitute