diff --git a/.bazelrc b/.bazelrc
new file mode 100644
index 00000000..0c363463
--- /dev/null
+++ b/.bazelrc
@@ -0,0 +1 @@
+common --enable_bzlmod
\ No newline at end of file
diff --git a/MODULE.bazel b/MODULE.bazel
new file mode 100644
index 00000000..50c58384
--- /dev/null
+++ b/MODULE.bazel
@@ -0,0 +1,10 @@
+module(
+    name = "envoy_build_tools",
+    version = "",
+)
+
+bazel_dep(name = "bazel_skylib", version = "1.3.0")
+# -- bazel_dep definitions -- #
+
+non_module_deps = use_extension("//:non_module_deps.bzl", "non_module_deps")
+use_repo(non_module_deps, "bazel_toolchains")
diff --git a/non_module_deps.bzl b/non_module_deps.bzl
new file mode 100644
index 00000000..465aaff4
--- /dev/null
+++ b/non_module_deps.bzl
@@ -0,0 +1,11 @@
+load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
+
+def _non_module_deps_impl(ctx):
+    http_archive(
+        name = "bazel_toolchains",
+        sha256 = "02e4f3744f1ce3f6e711e261fd322916ddd18cccd38026352f7a4c0351dbda19",
+        strip_prefix = "bazel-toolchains-5.1.2",
+        urls = ["https://github.com/bazelbuild/bazel-toolchains/archive/refs/tags/v5.1.2.tar.gz"],
+    )
+
+non_module_deps = module_extension(implementation = _non_module_deps_impl)