diff --git a/third_party/sandboxroot/mirror/BUILD.bazel b/third_party/sandboxroot/mirror/BUILD.bazel
new file mode 100644
index 0000000..ea62a45
--- /dev/null
+++ b/third_party/sandboxroot/mirror/BUILD.bazel
@@ -0,0 +1,26 @@
+load("@io_bazel_rules_go//go:def.bzl", "go_binary", "go_library")
+
+go_library(
+    name = "mirror_lib",
+    srcs = [
+        "bazeldnf.go",
+        "external.go",
+        "main.go",
+    ],
+    importpath = "source.monogon.dev/third_party/sandboxroot/mirror",
+    visibility = ["//visibility:private"],
+    deps = [
+        "//build/toolbase",
+        "@com_github_cenkalti_backoff_v4//:backoff",
+        "@com_github_spf13_cobra//:cobra",
+        "@com_google_cloud_go_storage//:storage",
+        "@io_k8s_klog_v2//:klog",
+        "@net_starlark_go//starlark",
+    ],
+)
+
+go_binary(
+    name = "mirror",
+    embed = [":mirror_lib"],
+    visibility = ["//visibility:public"],
+)