diff --git a/.gitea/workflows/dev.yaml b/.gitea/workflows/dev.yaml
index 0f15f72..badfb53 100644
--- a/.gitea/workflows/dev.yaml
+++ b/.gitea/workflows/dev.yaml
@@ -6,7 +6,17 @@ on:
       - main
 
 jobs:
+  dockerfile lint:
+    needs: build
+    runs-on: k3s
+    container:
+      image: gitea.sikorski.cloud/rogersik/hadolint:2
+    steps:
+      - uses: actions/checkout@v3
+      - run: hadolint Dockerfile
+
   build:
+    needs: [dockerfile lint]
     runs-on: docker
     steps:
       - uses: actions/checkout@v3
diff --git a/.gitea/workflows/main.yaml b/.gitea/workflows/main.yaml
index 3d388c1..9da825c 100644
--- a/.gitea/workflows/main.yaml
+++ b/.gitea/workflows/main.yaml
@@ -7,7 +7,17 @@ on:
     - cron: "0 6 * * SUN"
 
 jobs:
+  dockerfile lint:
+    needs: build
+    runs-on: k3s
+    container:
+      image: gitea.sikorski.cloud/rogersik/hadolint:2
+    steps:
+      - uses: actions/checkout@v3
+      - run: hadolint Dockerfile
+
   build:
+    needs: [dockerfile lint]
     runs-on: docker
     steps:
       - uses: actions/checkout@v3
diff --git a/.hadolint.yaml b/.hadolint.yaml
new file mode 100644
index 0000000..13dd1e5
--- /dev/null
+++ b/.hadolint.yaml
@@ -0,0 +1,4 @@
+ignored:
+  - DL3013 # https://github.com/hadolint/hadolint/wiki/DL3013 allow install latest package
+  - DL3018 # https://github.com/hadolint/hadolint/wiki/DL3018 no need to pin specific version
+  - DL3042 # https://github.com/hadolint/hadolint/wiki/DL3042 pip don't know this feature