diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 591d0a7..97b5d25 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -13,19 +13,17 @@ concurrency:
 jobs:
   build:
     runs-on: ubuntu-22.04
+    container: nixpkgs/nix-flakes:nixos-24.05
     steps:
-      - uses: actions/checkout@v4
-        with:
-          persist-credentials: 'true' # Optional; should be the default
       - name: Checkout lfs
+        shell: "nix shell nixpkgs#git-lfs --command {0}"
         run: |
+          git clone --no-checkout https://oauth2:$GITHUB_TOKEN@git.qo.is/$GITHUB_REPOSITORY .
           git lfs install --local
-          AUTH=$(git config --local http.${{ github.server_url }}/.extraheader)
-          git config --local --unset http.${{ github.server_url }}/.extraheader
-          git config --local http.${{ github.server_url }}/${{ github.repository }}.git/info/lfs/objects/batch.extraheader "$AUTH"
-          git lfs pull
+          git lfs fetch $GITHUB_REF
+          git checkout --recurse-submodules $GITHUB_REF
       - name: Run Nix Build
-        uses: docker://hub.docker.com/nixpkgs/nix-flakes:nixos-24.05
+        shell: "nix shell nixpkgs#git-lfs --command {0}"
         run: nix build .
 #      - uses: actions/upload-pages-artifact@v3
 #        with: