diff --git a/Dockerfile b/Dockerfile
new file mode 100644
index 0000000000..109076b45e
--- /dev/null
+++ b/Dockerfile
@@ -0,0 +1,18 @@
+FROM gradle:8.11.1-jdk17-alpine AS build
+
+WORKDIR /src
+
+COPY . .
+
+RUN gradle build shadowJar proguard
+
+
+FROM gcr.io/distroless/java:11
+
+WORKDIR /data
+
+COPY --from=build /src/brut.apktool/apktool-cli/build/libs/apktool-cli.jar /
+
+USER nonroot
+
+ENTRYPOINT ["java", "-Xmx1024M", "-Dfile.encoding=utf-8", "-Djdk.util.zip.disableZip64ExtraFieldValidation=true", "-Djdk.nio.zipfs.allowDotZipEntry=true", "-jar", "/apktool-cli.jar"]
diff --git a/docker/apktool.sh b/docker/apktool.sh
new file mode 100755
index 0000000000..0ef240d069
--- /dev/null
+++ b/docker/apktool.sh
@@ -0,0 +1,5 @@
+#!/usr/bin/env bash -i -e
+
+# This one-liner simply passes the command line arguments and binds the workdir as a mount point to it
+
+docker run --rm --name apktool --platform=linux/amd64 --volume $(pwd -P):/data:rw -it apktool:latest "$@"