diff --git a/pkg/ip/Dockerfile b/pkg/ip/Dockerfile
new file mode 100644
index 000000000..6bb39da54
--- /dev/null
+++ b/pkg/ip/Dockerfile
@@ -0,0 +1,19 @@
+FROM linuxkit/alpine:87a0cd10449d72f374f950004467737dbf440630 AS mirror
+RUN mkdir -p /out/etc/apk && cp -r /etc/apk/* /out/etc/apk/
+RUN apk add --no-cache --initdb -p /out \
+    alpine-baselayout \
+    bash \
+    busybox \
+    iproute2 \
+    musl \
+    wireguard-tools
+
+# Remove apk residuals
+RUN rm -rf /out/etc/apk /out/lib/apk /out/var/cache
+
+FROM scratch
+ENTRYPOINT []
+CMD []
+WORKDIR /
+COPY --from=mirror /out/ /
+LABEL org.mobyproject.config='{"capabilities": ["CAP_NET_ADMIN", "CAP_NET_RAW"]}'
diff --git a/pkg/ip/Makefile b/pkg/ip/Makefile
new file mode 100644
index 000000000..c4dcfd775
--- /dev/null
+++ b/pkg/ip/Makefile
@@ -0,0 +1,3 @@
+IMAGE=ip
+
+include ../package.mk