Support local managment for embedded agent on nginx

external/yq/Dockerfile

@@ -0,0 +1,28 @@
+FROM golang:1.19.3 as builder
+
+WORKDIR /go/src/mikefarah/yq
+
+COPY . .
+
+RUN CGO_ENABLED=0 go build .
+# RUN ./scripts/test.sh -- this too often times out in the github pipeline.
+RUN ./scripts/acceptance.sh
+
+# Choose alpine as a base image to make this useful for CI, as many
+# CI tools expect an interactive shell inside the container
+FROM alpine:3 as production
+LABEL maintainer="Mike Farah <mikefarah@users.noreply.github.com>"
+
+COPY --from=builder /go/src/mikefarah/yq/yq /usr/bin/yq
+
+WORKDIR /workdir
+
+RUN set -eux; \
+  addgroup -g 1000 yq; \
+  adduser -u 1000 -G yq -s /bin/sh -h /home/yq -D yq
+
+RUN chown -R yq:yq /workdir
+
+USER yq
+
+ENTRYPOINT ["/usr/bin/yq"]