https://nix-ci.com does this by construction.