diff --git a/.github/workflows/sdk-utils.yaml b/.github/workflows/sdk-utils.yaml
new file mode 100644
index 0000000..5f5513a
--- /dev/null
+++ b/.github/workflows/sdk-utils.yaml
@@ -0,0 +1,70 @@
+name: Publish SDK Utils Container image
+
+on:
+  push:
+    paths:
+      - 'utils/**'
+  workflow_dispatch:
+    inputs:
+      publish_as_latest:
+        description: 'Should this version be tagged as latest?'
+        required: false
+        type: boolean
+        default: false
+  workflow_call:
+    inputs:
+      publish_as_latest:
+        description: 'Should this version be tagged as latest?'
+        required: false
+        type: boolean
+        default: false
+
+jobs:
+  build-and-push:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+    
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+      
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Cache Docker layers
+        uses: actions/cache@v3
+        with:
+          path: /tmp/.buildx-cache
+          key: ${{ runner.os }}-buildx-${{ github.sha }}
+          restore-keys: |
+            ${{ runner.os }}-buildx-
+
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+      
+      - name: Build and push
+        uses: docker/build-push-action@v6
+        with:
+          context: utils
+          platforms: linux/amd64,linux/arm64
+          push: true
+          tags: |
+            ghcr.io/start9labs/start-os/utils:${{ github.sha }}
+            ghcr.io/start9labs/start-os/utils:${{ github.run_number }}
+          cache-from: type=local,src=/tmp/.buildx-cache
+          cache-to: type=local,dest=/tmp/.buildx-cache,new=true
+
+      - name: Tag as latest if requested
+        if: ${{ inputs.publish_as_latest == 'true' }}
+        run: |
+          docker tag ghcr.io/start9labs/start-os/utils:${{ github.sha }} ghcr.io/start9labs/start-os/utils:latest
+          docker push ghcr.io/start9labs/start-os/utils:latest
diff --git a/utils/Dockerfile b/utils/Dockerfile
new file mode 100644
index 0000000..cf13e18
--- /dev/null
+++ b/utils/Dockerfile
@@ -0,0 +1,6 @@
+FROM debian:bookworm-slim
+
+RUN apt update && \
+    apt install --no-install-recommends -y squashfs-tools-ng && \
+    apt clean && \
+    rm -rf /var/lib/apt/lists/*