diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 59e7924..4e70dca 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -39,6 +39,7 @@ jobs:
             cinc/cinc: 'cinc/cinc/**'
             doctl: 'doctl/**'
             dokken/centos-7: 'dokken/centos-7/**'
+            dokken/centos-stream-9: 'dokken/centos-stream-9/**'
             dokken/oraclelinux-7: 'dokken/oraclelinux-7/**'
             dokken/oraclelinux-8: 'dokken/oraclelinux-8/**'
             dokken/oraclelinux-9: 'dokken/oraclelinux-9/**'
diff --git a/dokken/centos-stream-9/.dockerignore b/dokken/centos-stream-9/.dockerignore
new file mode 100644
index 0000000..e96831e
--- /dev/null
+++ b/dokken/centos-stream-9/.dockerignore
@@ -0,0 +1,2 @@
+Polly.toml
+test/
diff --git a/dokken/centos-stream-9/Containerfile b/dokken/centos-stream-9/Containerfile
new file mode 100644
index 0000000..67fd741
--- /dev/null
+++ b/dokken/centos-stream-9/Containerfile
@@ -0,0 +1,64 @@
+ARG CONTAINER_REGISTRY=quay.io
+FROM $CONTAINER_REGISTRY/centos/centos:stream9
+
+LABEL \
+    org.opencontainers.image.source="https://github.com/polymathrobotics/oci" \
+    org.opencontainers.image.licenses="Apache-2.0" \
+    org.opencontainers.image.description="CentOS Stream 9 image for kitchen-dokken"
+
+# NOTE: CentOS Stream 9 is still under heavy development
+# hadolint ignore=DL3041
+RUN <<EOF
+  dnf --allowerasing  -y install \
+	binutils \
+	ca-certificates \
+	cronie \
+	curl \
+	dmidecode \
+	e2fsprogs \
+	ethtool \
+	file \
+	glibc-langpack-en \
+	gnupg2 \
+	hostname \
+	initscripts \
+	iproute \
+	iptables \
+	iputils \
+	lsof \
+	nc \
+	net-tools \
+	nmap \
+	openssl \
+	passwd \
+	procps \
+	strace \
+	sudo \
+	systemd-sysv \
+	systemd-udev \
+	tcpdump \
+	telnet \
+	util-linux \
+	vim-minimal \
+	wget \
+	libxcrypt-compat \
+	which
+  dnf upgrade -y
+  dnf clean all
+  rm -rf /var/log/*
+  find /etc/systemd/system \
+	/lib/systemd/system \
+	-path '*.wants/*' \
+	\( -name '*getty*' \
+	-or -name '*dnf-makecache*' \
+	-or -name '*kdump*' \
+	-or -name '*systemd-logind*' \
+	-or -name '*systemd-vconsole-setup*' \
+	-or -name '*systemd-readahead*' \
+	-or -name '*udev*' \) \
+	-exec rm -v {} \;
+  systemctl set-default multi-user.target
+  systemctl mask dev-hugepages.mount sys-fs-fuse-connections.mount network.service systemd-journal-flush.service	
+EOF
+
+CMD [ "/usr/lib/systemd/systemd" ]
diff --git a/dokken/centos-stream-9/Polly.toml b/dokken/centos-stream-9/Polly.toml
new file mode 100644
index 0000000..39d3465
--- /dev/null
+++ b/dokken/centos-stream-9/Polly.toml
@@ -0,0 +1,5 @@
+[container_image]
+name = "dokken-oraclelinux-9"
+tags = [ "latest" ]
+readme = "dokken/README.md"
+platforms=["linux/arm64","linux/amd64"]
diff --git a/dokken/centos-stream-9/test/controls/oraclelinux-9.rb b/dokken/centos-stream-9/test/controls/oraclelinux-9.rb
new file mode 100644
index 0000000..2ace69a
--- /dev/null
+++ b/dokken/centos-stream-9/test/controls/oraclelinux-9.rb
@@ -0,0 +1,3 @@
+describe file('/etc/os-release') do
+  its('content') { should match(/Oracle Linux Server 9/) }
+end