diff --git a/docker-compose.yaml b/docker-compose.yaml
new file mode 100644
index 0000000..e4cb34a
--- /dev/null
+++ b/docker-compose.yaml
@@ -0,0 +1,17 @@
+
+services:
+  build-iso:
+    build:
+      context: .
+      dockerfile: docker/Dockerfile.build
+    #this is needed for mount
+    privileged: true
+    volumes:
+      - type: bind
+        source: .
+        target: /var/opt
+        read_only: true
+      - type: bind
+        source: ./iso
+        target: /var/opt/iso
+        read_only: false
diff --git a/docker/Dockerfile.build b/docker/Dockerfile.build
new file mode 100644
index 0000000..921e31e
--- /dev/null
+++ b/docker/Dockerfile.build
@@ -0,0 +1,28 @@
+FROM debian:bookworm-slim
+
+# Install dependencies
+RUN apt-get update && apt-get install -y \
+    smartmontools \
+    lshw \
+    hwinfo \
+    dmidecode \
+    python3 \
+    pipenv \
+    sudo \
+    debootstrap \
+    && rm -rf /var/lib/apt/lists/*
+
+
+WORKDIR /var/opt
+
+#allow sudo so that deploy-workbench.sh runs
+RUN useradd -m docker && echo "docker:docker" | chpasswd && adduser docker sudo
+RUN echo "docker ALL=(ALL) NOPASSWD:ALL" >> /etc/sudoers
+
+RUN chown -R docker /var/opt/iso
+
+ENV USER=docker
+USER docker
+
+COPY ./deploy-workbench.sh ./
+ENTRYPOINT sh deploy-workbench.sh