commit b0a43deaff192bbdaaa35b48cc476e92ccc89b89
Author: tabledevil <tabledevil@gmail.com>
Date:   Fri Jun 12 08:30:32 2026 +0200

    Replace Alpine Dockerfile with current python:3.12-slim build
    
    From cert_docker_bot @ 78a02a5.
    This image is built and published as tabledevil/dissect by the certbot;
    the bot's release: watch on fox-it/dissect triggers rebuilds.

diff --git a/Dockerfile b/Dockerfile
new file mode 100644
index 0000000..1bd15b7
--- /dev/null
+++ b/Dockerfile
@@ -0,0 +1,22 @@
+# tabledevil/dissect — Fox-IT dissect DFIR framework (target-query, rdump, …).
+#
+# Installs the latest `dissect` meta-package from PyPI at build time; the bot's
+# release: watch on fox-it/dissect triggers the rebuild. The meta-package pulls
+# in target-query, target-shell, target-fs, rdump and the parsers/loaders.
+#
+#   docker run --rm -v /evidence:/data:ro tabledevil/dissect \
+#       target-query /data/disk.E01 -f hostname
+#   docker run --rm -it -v /evidence:/data:ro tabledevil/dissect \
+#       target-shell /data/disk.E01
+
+FROM python:3.12-slim
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+        ca-certificates libfuse2 \
+    && rm -rf /var/lib/apt/lists/*
+
+RUN pip install --no-cache-dir dissect
+
+WORKDIR /data
+ENTRYPOINT ["target-query"]
+CMD ["--help"]