diff --git a/.github/workflows/container.yaml b/.github/workflows/container.yaml
new file mode 100644
index 000000000..d46c92e11
--- /dev/null
+++ b/.github/workflows/container.yaml
@@ -0,0 +1,47 @@
+name: build container
+on:
+  push:
+    branches:
+      # make binaries which may be ahead of releases to use in CI jobs
+      - "ci-bins*"
+    tags: # run this also on release candidates
+      - "[0-9]+.[0-9]+.[0-9]*"
+
+# Note: builds only Intel container at present
+
+jobs:
+  publish:
+    permissions: write-all
+    name: container-build
+    runs-on: ubuntu-latest
+    steps:
+
+      - name: Checkout
+        uses: actions/checkout@v3
+
+      - name: Docker meta
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: |
+            ghcr.io/${{ github.repository }}/libra-node
+          tags: |
+            type=sha,enable=true,priority=100,prefix=,suffix=,format=long
+
+      - name: Log in to Container Image Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build and push
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: ./container/Containerfile
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          build-args: |
+            CI_COMMIT_SHA=${{ github.sha }}
diff --git a/container/Containerfile b/container/Containerfile
new file mode 100644
index 000000000..9d0bcc4aa
--- /dev/null
+++ b/container/Containerfile
@@ -0,0 +1,14 @@
+# Built from https://github.com/rust-lang/docker-rust
+# "latest" has a Debian base
+FROM rust:latest AS builder
+
+# Install build dependencies
+RUN apt update && apt install -y build-essential lld pkg-config libssl-dev libgmp-dev clang
+
+WORKDIR /usr/libra
+COPY . .
+RUN cargo build --release
+
+FROM ubuntu:latest
+
+COPY --from=builder /usr/libra/target/release/libra /usr/libra/target/release/libra-* /usr/local/bin/