diff --git a/ci/Dockerfile b/ci/Dockerfile
new file mode 100644
index 0000000..8eb85f4
--- /dev/null
+++ b/ci/Dockerfile
@@ -0,0 +1,29 @@
+FROM jenkins/inbound-agent:latest-jdk21
+
+USER root
+
+RUN apt-get update \
+    && apt-get install -y --no-install-recommends \
+        ca-certificates \
+        curl \
+        xz-utils \
+        tini \
+    && rm -rf /var/lib/apt/lists/*
+
+RUN mkdir -p /nix /etc/nix \
+    && chmod 0755 /nix \
+    && chown jenkins:jenkins /nix \
+    && printf '%s\n' \
+        'sandbox = false' \
+        'filter-syscalls = false' \
+        'experimental-features = nix-command flakes' \
+        > /etc/nix/nix.conf
+
+USER jenkins
+
+RUN curl --fail --location https://nixos.org/nix/install \
+    | sh -s -- --no-daemon
+
+ENV PATH="/home/jenkins/.nix-profile/bin:${PATH}"
+
+RUN nix --version
diff --git a/ci/Makefile b/ci/Makefile
new file mode 100644
index 0000000..b49704b
--- /dev/null
+++ b/ci/Makefile
@@ -0,0 +1,20 @@
+repo_name ?= giolekva
+podman ?= docker
+docker_flags=--provenance=false --sbom=false
+
+ifeq ($(podman), podman)
+manifest_dest=docker://docker.io/$(repo_name)/jenkins-nix-agent:latest
+endif
+
+push_arm64:
+	$(podman) build --platform linux/arm64 --tag=$(repo_name)/jenkins-nix-agent:arm64 $(docker_flags) .
+	$(podman) push $(repo_name)/jenkins-nix-agent:arm64
+
+push_amd64:
+	$(podman) build --platform linux/amd64 --tag=$(repo_name)/jenkins-nix-agent:amd64 $(docker_flags) .
+	$(podman) push $(repo_name)/jenkins-nix-agent:amd64
+
+
+push: push_arm64 push_amd64
+	$(podman) manifest create $(repo_name)/jenkins-nix-agent:latest $(repo_name)/jenkins-nix-agent:arm64 $(repo_name)/jenkins-nix-agent:amd64
+	$(podman) manifest push --purge $(repo_name)/jenkins-nix-agent:latest $(manifest_dest)