diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
new file mode 100644
index 0000000..aed3ab9
--- /dev/null
+++ b/.github/workflows/ci.yml
@@ -0,0 +1,9 @@
+name: CI
+'on':
+  push:
+    branches:
+      - main
+  pull_request: null
+jobs:
+  ubuntu_verify_repo:
+    uses: ./.github/workflows/ci_ubuntu_verify_repo.yml
diff --git a/.github/workflows/ci_ubuntu_verify_repo.yml b/.github/workflows/ci_ubuntu_verify_repo.yml
new file mode 100644
index 0000000..9b98437
--- /dev/null
+++ b/.github/workflows/ci_ubuntu_verify_repo.yml
@@ -0,0 +1,36 @@
+name: CI ubuntu verify repo 
+'on':
+  workflow_call: null
+jobs:
+  regeneration_is_clean:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout (GitHub)
+        uses: actions/checkout@v4
+      - name: Regenerate Packages
+        run: dpkg-scanpackages --multiversion . > Packages
+        working-directory: ./ubuntu/
+      - name: Verify Packages is up to date
+        run: git diff --exit-code
+        working-directory: ./ubuntu/
+      - name: Regenerate Packages.gz
+        run: gzip -k -f Packages --no-name
+        working-directory: ./ubuntu/
+      - name: Verify Packages.gz is up to date
+        run: git diff --exit-code
+        working-directory: ./ubuntu/
+      - name: Regenerate Release file
+        run: apt-ftparchive release . > Release
+        working-directory: ./ubuntu/
+      - name: Verify Release file is up to date
+        run: git diff --exit-code
+        working-directory: ./ubuntu/
+      - name: Try to import the pubkey
+        run: gpg --import burfeind_jan-niklas.gpg
+        working-directory: ./ubuntu/
+      - name: Verify Release.gpg
+        run: gpg --verify Release.gpg Release
+        working-directory: ./ubuntu/
+      - name: Verify InRelease
+        run: gpg --verify InRelease
+        working-directory: ./ubuntu/