This talk presents a practical, step by step walk-through of building a trusted container image using Red Hat’s cloud-native tool-chain. Starting with a local Podman build, we follow the same application through a Konflux pipeline running on OpenShift, producing a signed, immutable container image pushed to a registry. The focus is on how modern CI pipelines work in practice: image builds, provenance, and policy-ready artifacts—without introducing custom YAML or ad-hoc scripting.

Main tech stack:
- Podman (local development);
- Fedora Linux (base image);
- Konflux (Tekton pipelines);
- OpenShift (or 'crc');
- buildah (image build);
- Quay as container registry.