diff --git a/.crow/build-redhat-9-amd64-single.yaml b/.crow/build-redhat-9-amd64-single.yaml
new file mode 100644
index 0000000..6443d29
--- /dev/null
+++ b/.crow/build-redhat-9-amd64-single.yaml
@@ -0,0 +1,62 @@
+when:
+  - event: manual
+    evaluate: 'task == "build-single-rhel9-amd64"'
+  # PACKAGE:
+  # TAG: # set NULL to build all versions
+
+skip_clone: true
+
+steps:
+  - name: 'Build binaries'
+    image: docker.io/devxygmbh/amd64-binaries-r-redhat-9
+    pull: true
+    environment:
+      RED_HAT_DEV_PW:
+        from_secret: RED_HAT_DEV_PW
+      HETZNER_S3_ACCESS_KEY_K3S:
+        from_secret: HETZNER_S3_ACCESS_KEY_K3S
+      HETZNER_S3_SECRET_KEY_K3S:
+        from_secret: HETZNER_S3_SECRET_KEY_K3S
+      PGPASS:
+        from_secret: PGPASS
+      GIT_RO_TOKEN:
+        from_secret: GIT_RO_TOKEN
+      GITHUB_PAT:
+        from_secret: GITHUB_PAT
+      # normal env vars
+      GIT_USER: pat-s
+      # set the location of the 'pkgcache' cache dir which persists the R package dependencies needed to install the packages themselves
+      R_PKG_CACHE_DIR: /mnt/cache/pkgcache
+      R_LIBS_USER: /mnt/cache/R-pkgs
+      CCACHE_DIR: /mnt/cache/ccache
+      PLATFORM: redhat-9
+      ARCH: amd64
+      NCPUS: 4
+      STRATEGY: sequential
+    # volumes:
+    #   - amd64-binaries-r-dep-cache-redhat-9:/mnt/cache
+    commands:
+      - git clone -q https://pat-s:$$GIT_RO_TOKEN@git.devxy.io/devxy/build-binaries.git .
+      - rm -rf /mnt/cache/R-pkgs/00LOCK-r-pkg-binaries /mnt/cache/R-pkgs/00LOCK-bincraftR /mnt/cache/R-pkgs/00LOCK-pak /mnt/cache/pkgcache/R/pkgcache /mnt/cache/pkgcache/R/pkgcache /mnt/cache/R-pkgs/pkgcache
+      - R -q -e 'pak::pak("git::https://gitlab.com/devxy/r-package-binaries/bincraftr.git")'
+      - R -q -e 'packageVersion("bincraftR")'
+      - mkdir -p /mnt/cache/pkgcache /mnt/cache/R-pkgs /mnt/cache/ccache /mnt/cache/packages
+      # Windows-only: 'RInno', 'KeyboardSimulator', 'R2PPT', 'RWinEdt', 'blatr', 'excel.link', 'spectrino', 'taskscheduleR', 'MDSGUI', 'BiplotGUI', 'R2wd', 'rFUSION', 'MediaNews'
+      - xvfb-run R -q -e "options(crayon.enabled = TRUE, Ncpus = $NCPUS, future.globals.onReference = NULL, repos = structure(c(CRAN = 'https://cran.devxy.io/$ARCH/rhel9/latest'))); progressr::handlers('cli'); progressr::handlers(global = TRUE); bincraftR::build_binary_package(\"$$PACKAGE\", tag = \"$$TAG\", debug = FALSE, force = TRUE, s3_endpoint = 'https://fsn1.your-objectstorage.com', s3_region = 'fsn1', s3_bucket = 'devxy-r-package-binaries', s3_access_key_id = Sys.getenv('HETZNER_S3_ACCESS_KEY_K3S'), s3_secret_access_key = Sys.getenv('HETZNER_S3_SECRET_KEY_K3S'), metadata_db_host = 'r-binaries.devxy.io', metadata_db_name = 'build_metadata', metadata_db_table = 'single_builds', metadata_db_user = 'r_binaries', metadata_db_password = Sys.getenv('PGPASS'), metadata_db_sslmode = 'require', metadata_db_port = 15432, archive = TRUE, upload = TRUE, store_build_metadata = TRUE, platform = 'redhat-9')"
+    backend_options:
+      kubernetes:
+        resources:
+          requests:
+            memory: 5Gi
+            cpu: 2000m
+          limits:
+            memory: 20Gi
+            cpu: 3000m
+        nodeSelector:
+          kubernetes.io/arch: amd64
+          node.kubernetes.io/instance-type: AX42
+        tolerations:
+          - key: 'CI'
+            operator: 'Equal'
+            value: 'true'
+            effect: 'NoSchedule'