4sokol
I've been in the IT industry since 2006: GNU/Linux, Hybrid Cloud Environments, Continuous Integration and Delivery (CI/CD), Infrastructure as Code (IaC), Configuration as Code (CaC), containers and automation. Love Linux, concepts of Open Source, FOSS and vendor-agnostic solutions. Long term open source and open standards advocate and lobbyist. Cloud-Native, Declarative resource management and GitOps follower.
Red Hat
Senior SRE
Session
This talk presents a practical, step by step walk-through of building a trusted container image using Red Hat’s cloud-native tool-chain. Starting with a local Podman build, we follow the same application through a Konflux pipeline running on OpenShift, producing a signed, immutable container image pushed to a registry. The focus is on how modern CI pipelines work in practice: image builds, provenance, and policy-ready artifacts—without introducing custom YAML or ad-hoc scripting.
Main tech stack:
- Podman (local development);
- Fedora Linux (base image);
- Konflux (Tekton pipelines);
- OpenShift (or 'crc');
- buildah (image build);
- Quay as container registry.