diff --git a/.github/workflows/ci_wip.yml b/.github/workflows/ci_wip.yml
index cea8205..81ffc67 100644
--- a/.github/workflows/ci_wip.yml
+++ b/.github/workflows/ci_wip.yml
@@ -22,6 +22,13 @@ jobs:
     steps:
       - name: Git checkout
         uses: actions/checkout@v3
+      
+      - name: Install Nix
+        uses: cachix/install-nix-action@v27
+        # relax sandbox due impure kontrol-service tests during build
+        with:
+          extra_nix_config: |
+            sandbox = relaxed
 
       - name: Install CLI 
         run: curl get.kardinal.dev -sL | sh