diff --git a/examples/rhel-9/Containerfile b/examples/rhel-9/Containerfile
new file mode 100644
index 0000000..766cb26
--- /dev/null
+++ b/examples/rhel-9/Containerfile
@@ -0,0 +1,69 @@
+FROM registry.access.redhat.com/ubi9/ubi:9.3
+
+# this imitates a server groupinstall
+RUN dnf install -y --allowerasing \
+      kernel-0:5.14.0-362.24.1.el9_3 \
+      kernel-core-0:5.14.0-362.24.1.el9_3 \
+      kernel-headers-0:5.14.0-362.24.1.el9_3 \
+      kernel-modules-core-0:5.14.0-362.24.1.el9_3 \
+      python3-dnf-plugin-versionlock \
+      coreutils \
+      cpio \
+      dhclient \
+      e2fsprogs \
+      ethtool \
+      findutils \
+      initscripts \
+      ipmitool \
+      iproute \
+      ncurses \
+      net-tools \
+      NetworkManager \
+      nfs-utils \
+      openssh-clients \
+      openssh-server \
+      pciutils \
+      policycoreutils-python-utils \
+      psmisc \
+      rsync \
+      rsyslog \
+      strace \
+      selinux-policy-targeted \
+      wget \
+      which \
+      words \
+      rdma-core \
+    && dnf clean all \
+    && dnf versionlock -y \
+    kernel-0:5.14.0-362.24.1.el9_3.* \
+    kernel-core-0:5.14.0-362.24.1.el9_3.* \
+    kernel-headers-0:5.14.0-362.24.1.el9_3.* \
+    kernel-modules-core-0:5.14.0-362.24.1.el9_3.*
+
+# Unmask what RHEL masked in the ubi
+# Needed to get an actual login tty
+RUN rm -f /etc/systemd/system/systemd-logind.service \
+    && rm -f /etc/systemd/system/getty.target \
+    && rm -f /etc/systemd/system/console-getty.service \
+    && rm -f /etc/systemd/system/sys-fs-fuse-connections.mount \
+    && rm -f /etc/systemd/system/systemd-remount-fs.service \
+    && rm -f /etc/systemd/system/dev-hugepages.mount
+
+# For SELinux enabled nodes:
+
+#   The wwclient service fails to start on boot if appropriate SELinux file
+#   context label is not set for /warewulf/wwclient.
+#   Permanently assign bin_t fcontent label for wwclient binary that is
+#   deployed by wwinit overlay because warewulf runs `restorecon -R /` on node
+#   boot, clobbering any existing labels set in the overlay itself.
+#
+# RUN semanage fcontext -N -a -t bin_t /warewulf/wwclient
+
+COPY excludes /etc/warewulf/
+COPY container_exit.sh /etc/warewulf/
+
+CMD [ "/bin/echo", "-e", \
+      "This image is intended to be used with the Warewulf cluster management and", \
+      "\nprovisioning system.", \
+      "\n", \
+      "\nFor more information about Warewulf, visit https://warewulf.org" ]
diff --git a/examples/rhel-9/README.md b/examples/rhel-9/README.md
new file mode 100644
index 0000000..2a41fd4
--- /dev/null
+++ b/examples/rhel-9/README.md
@@ -0,0 +1,18 @@
+# Red Hat Enterprise Linux 9
+
+Warewulf can be used to boot a RHEL node,
+but building such an image typically requires access to a Red Hat subscription.
+This subscription can be accessed from the host environment
+by mounting subscription files.
+
+
+```
+podman build \
+    --volume=/etc/pki/entitlement:/run/secrets/entitlement:ro \
+    --volume=/etc/rhsm:/run/secrets/rhsm:ro \
+    --volume=/etc/yum.repos.d/redhat.repo:/run/secrets/redhat.repo:ro \
+    . --tag rhel:9
+```
+
+For more information,
+see https://access.redhat.com/solutions/5870841.
diff --git a/examples/rhel-9/container_exit.sh b/examples/rhel-9/container_exit.sh
new file mode 100755
index 0000000..84993a5
--- /dev/null
+++ b/examples/rhel-9/container_exit.sh
@@ -0,0 +1,6 @@
+#!/bin/sh
+set -x
+LANG=C
+LC_CTYPE=C
+export LANG LC_CTYPE
+dnf clean all
diff --git a/examples/rhel-9/excludes b/examples/rhel-9/excludes
new file mode 100644
index 0000000..bf00703
--- /dev/null
+++ b/examples/rhel-9/excludes
@@ -0,0 +1,2 @@
+/boot/
+/usr/share/GeoIP