diff --git a/.gitignore b/.gitignore
index 803f63c0918..fb75c169a66 100644
--- a/.gitignore
+++ b/.gitignore
@@ -79,4 +79,3 @@ rill-binary-sa.json
 sysroot/
 latest.txt
 /web-common/coverage
-package-lock.json
diff --git a/Dockerfile b/Dockerfile
new file mode 100644
index 00000000000..645e496a659
--- /dev/null
+++ b/Dockerfile
@@ -0,0 +1,16 @@
+# syntax = docker/dockerfile:1.1-experimental
+FROM ubuntu
+
+RUN apt-get update && apt-get install -y ca-certificates
+
+COPY rill /usr/local/bin
+RUN chmod 777 /usr/local/bin/rill
+
+RUN groupadd -g 1001 rill \
+    && useradd -m -u 1001 -s /bin/sh -g rill rill
+USER rill
+
+RUN rill runtime install-duckdb-extensions
+
+ENTRYPOINT ["rill"]
+CMD ["start"]