Add Dockerfile and workflow

.github/workflows/build.yml

@@ -0,0 +1,25 @@
+name: Build and push Filebeat rootless image
+
+on: push
+
+jobs:
+  push_to_registry:
+    name: Push Docker image to Docker Hub
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check out the repo
+        uses: actions/checkout@v3
+
+      - name: Login to GHCR
+        uses: docker/login-action@v2
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build and push Docker image
+        uses: docker/build-push-action@3b5e8027fcad23fda98b2e3ac259d8d67585f671
+        with:
+          file: ./Dockerfile
+          push: true
+          tags: ghcr.io/dnum-mi/filebeat-rootless/filebeat-rootless:6.5.4

Dockerfile

@@ -0,0 +1,7 @@
+FROM docker.io/elastic/filebeat:6.5.4
+USER root
+RUN ls
+RUN grep -rlw http /etc |while read i ;do sed -ri 's#\b80\b#8080#' ${i} ; sed -ri 's#\b443\b#6443#' ${i} ;done
+RUN find / -xdev -exec chmod -f -c g=u {} \; -exec chown -f -c 1001:root {} \; >/dev/null 2>&1
+RUN grep -w 1001 /etc/passwd ||echo "rootless:x:1001:0:root:/root:/bin/bash" >>/etc/passwd
+USER 1001