diff --git a/ci/Dockerfile b/ci/Dockerfile
new file mode 100644
index 0000000..b3c35c1
--- /dev/null
+++ b/ci/Dockerfile
@@ -0,0 +1,15 @@
+FROM fedora:29
+
+RUN useradd -l -u 3000018 jenkins
+
+RUN dnf install -y \
+	ansible \
+	krb5-workstation \
+	openssh-clients \
+	python3-dns \
+	python3-netaddr \
+	--
+
+COPY default-realm.krb5.conf /etc/krb5.conf.d/default-realm.conf
+
+ENV LANG=en_US.UTF-8
diff --git a/ci/default-realm.krb5.conf b/ci/default-realm.krb5.conf
new file mode 100644
index 0000000..90f0fff
--- /dev/null
+++ b/ci/default-realm.krb5.conf
@@ -0,0 +1,2 @@
+[libdefaults]
+default_realm = PYROCUFFLINK.BLUE
diff --git a/ci/radius.jenkinsfile b/ci/radius.jenkinsfile
index aa3b752..5689c2a 100644
--- a/ci/radius.jenkinsfile
+++ b/ci/radius.jenkinsfile
@@ -2,13 +2,29 @@
 
 pipeline {
     agent {
-        label 'ansible'
+        dockerfile {
+            dir 'ci'
+            args '''\
+            -v /etc/ssh/ssh_known_hosts:/etc/ssh/ssh_known_hosts:ro
+            '''
+        }
     }
 
+    options {
+        lock 'cfgpol'
+        timeout(time: 1, unit: 'HOURS')
+    }
+
+
     triggers {
         cron 'H H * * *'
     }
 
+
+    environment {
+        KRB5CCNAME = "${WORKSPACE}/.krb5cc"
+    }
+
     stages {
         stage('kinit') {
             steps {