diff --git a/build.sh b/build.sh
index 8d28f51..305cc8b 100755
--- a/build.sh
+++ b/build.sh
@@ -148,6 +148,9 @@ systemd-repart --no-pager --empty=allow --size=auto --dry-run=no --root=kde-linu
 # Create a torrent for the image
 ./torrent-create.rb "$VERSION" "$OUTPUT" "$IMG"
 
+go install -v github.com/folbricht/desync/cmd/desync@latest
+~/go/bin/desync make "$ROOTFS_EROFS.caibx" "$ROOTFS_EROFS"
+
 # TODO before accepting new uploads perform sanity checks on the artifacts (e.g. the tar being well formed)
 
 # efi images and torrents are 700, make them readable so the server can serve them
diff --git a/upload.sh b/upload.sh
index a3c8131..d3a5aad 100755
--- a/upload.sh
+++ b/upload.sh
@@ -33,8 +33,9 @@ sha256sum -- *.raw >> SHA256SUMS
 sha256sum -- *.tar.zst >> SHA256SUMS
 sha256sum -- *.torrent >> SHA256SUMS
 sha256sum -- *.erofs >> SHA256SUMS
+sha256sum -- *.caibx >> SHA256SUMS
 
 gpg --homedir="$GNUPGHOME" --output SHA256SUMS.gpg --detach-sign SHA256SUMS
 
-scp -i "$SSH_IDENTITY" ./*.efi ./*.raw ./*.tar.zst ./*.torrent ./*.erofs "$REMOTE"
+scp -i "$SSH_IDENTITY" ./*.efi ./*.raw ./*.tar.zst ./*.torrent ./*.erofs ./*.caibx "$REMOTE"
 scp -i "$SSH_IDENTITY" SHA256SUMS SHA256SUMS.gpg "$REMOTE" # upload as last artifact to finalize the upload