diff --git a/util/nixshell/toolchain.nix b/util/nixshell/toolchain.nix
new file mode 100644
index 0000000000..da252f268a
--- /dev/null
+++ b/util/nixshell/toolchain.nix
@@ -0,0 +1,20 @@
+with import <nixpkgs> {};
+
+stdenvNoCC.mkDerivation {
+	name = "coreboot-toolchain";
+
+	buildInputs = [
+		bison
+		curl
+		flex
+		git
+		gnat11
+		gnumake
+		patch
+		zlib
+	];
+
+	shellHook = ''
+		export SSL_CERT_FILE="/etc/ssl/certs/ca-certificates.crt"
+	'';
+}