diff --git a/Dockerfile b/Dockerfile
new file mode 100644
index 0000000000000000000000000000000000000000..78bf9c6953904814d2a138540a9bb4e8d72b930b
--- /dev/null
+++ b/Dockerfile
@@ -0,0 +1,22 @@
+FROM centos:7 as scratch
+ENV GOSU_VERSION 1.10
+RUN set -ex; \
+	\
+	yum -y install epel-release; \
+	yum -y install wget dpkg; \
+	\
+	dpkgArch="$(dpkg --print-architecture | awk -F- '{ print $NF }')"; \
+	wget -O /usr/bin/gosu "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$dpkgArch"; \
+	wget -O /tmp/gosu.asc "https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$dpkgArch.asc"; \
+	\
+# verify the signature
+	export GNUPGHOME="$(mktemp -d)"; \
+	gpg --keyserver ha.pool.sks-keyservers.net --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4; \
+	gpg --batch --verify /tmp/gosu.asc /usr/bin/gosu; \
+	\
+	chmod +x /usr/bin/gosu; \
+# verify that the binary works
+	gosu nobody true
+
+FROM centos:7
+COPY --from=scratch /usr/bin/gosu /usr/local/bin/