diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index dbb2dde..a768c0f 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -3,11 +3,52 @@
 # SPDX-License-Identifier: GPL-3.0-or-later
 
 default:
-  image: archlinux:latest
-  before_script:
-    - pacman --noconfirm -Syu --needed base-devel shellcheck
+  image: "archlinux:latest"
 
-lint:
-  stage: build
+stages:
+  - lint
+  - build
+
+shellcheck:
+  stage: lint
+  before_script:
+    - pacman --noconfirm -Syu --needed make shellcheck
   script:
     - make lint
+
+.build:
+  stage: build
+  before_script:
+    - pacman -Syu --needed --noconfirm qemu-headless libisoburn
+  script:
+    - ./.gitlab/ci/build-host.sh
+  after_script:
+    - echo "image_size_megabytes{image=\"${PROFILE}\"} $(du --block-size=MiB -- output/${PROFILE}/*iso)" > metrics.txt
+  parallel:
+    matrix:
+      - PROFILE: [baseline, releng]
+  artifacts:
+    name: "output"
+    paths:
+      - "output/*/*"
+    expire_in: 2d
+    reports:
+      metrics: metrics.txt
+
+build:
+  extends: .build
+  tags:
+    - fast-single-thread
+  except:
+    - master
+    - schedules
+    - tags
+
+build:secure:
+  extends: .build
+  tags:
+    - secure
+  only:
+    - master
+    - schedules
+    - tags