diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..e660fd9
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1 @@
+bin/
diff --git a/.woodpecker/build.yaml b/.woodpecker/build.yaml
new file mode 100644
index 0000000..fa7f444
--- /dev/null
+++ b/.woodpecker/build.yaml
@@ -0,0 +1,9 @@
+when:
+  - event: pull_request
+
+steps:
+  - name: docker-build
+    image: woodpeckerci/plugin-docker-buildx
+    settings:
+      repo: git.unkin.net/unkin/agent-infra
+      dry_run: true
diff --git a/.woodpecker/docker.yaml b/.woodpecker/docker.yaml
new file mode 100644
index 0000000..b84ce42
--- /dev/null
+++ b/.woodpecker/docker.yaml
@@ -0,0 +1,16 @@
+when:
+  - event: tag
+    ref: refs/tags/v*
+
+steps:
+  - name: docker
+    image: woodpeckerci/plugin-docker-buildx
+    settings:
+      registry: git.unkin.net
+      repo: git.unkin.net/unkin/agent-infra
+      username: droneci
+      password:
+        from_secret: DRONECI_PASSWORD
+      tags:
+        - ${CI_COMMIT_TAG}
+        - latest
diff --git a/Dockerfile b/Dockerfile
new file mode 100644
index 0000000..8eef715
--- /dev/null
+++ b/Dockerfile
@@ -0,0 +1,16 @@
+FROM git.unkin.net/unkin/agent-base:latest
+
+USER root
+
+RUN dnf install -y \
+        kubectl \
+        kustomize \
+        helm \
+        helmfile \
+        opentofu \
+        vault \
+        consul \
+        terragrunt \
+    && dnf clean all
+
+USER agent