diff --git a/.github/workflows/build-image.yaml b/.github/workflows/build-image.yaml
new file mode 100644
index 0000000..0e55dbb
--- /dev/null
+++ b/.github/workflows/build-image.yaml
@@ -0,0 +1,38 @@
+name: Build Docker image
+on:
+  push:
+    branches: [master]
+  pull_request:
+    branches: ["*"]
+
+env:
+  REGISTRY: ghcr.io
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v2
+
+      - name: Log in to the Container registry
+        uses: docker/login-action@f054a8b539a109f9f41c372932f1ae047eff08c9
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Construct tags / labels for an image
+        id: meta
+        uses: docker/metadata-action@98669ae865ea3cffbcbaa878cf57c20bbf1c6c38
+        with:
+          images: |
+            ${{ env.REGISTRY }}/${{ github.repository }}
+          tags: |
+            type=sha
+      - name: Build and push Docker image
+        uses: docker/build-push-action@ad44023a93711e3deb337508980b4b5e9bcdc5dc
+        with:
+          push: ${{ github.event_name == 'push' }}
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
\ No newline at end of file
diff --git a/.gitignore b/.gitignore
index 852eab1..40f9c18 100644
--- a/.gitignore
+++ b/.gitignore
@@ -9,8 +9,6 @@ erl_crash.dump
 \#*
 .\#*
 .tags*
-Dockerfile
-docker-compose.yml
 rebar3.crashdump
 /_checkouts/
 /test/policies/bundle.tar.gz
\ No newline at end of file
diff --git a/.gitmodules b/.gitmodules
deleted file mode 100644
index 2042aca..0000000
--- a/.gitmodules
+++ /dev/null
@@ -1,3 +0,0 @@
-[submodule "build-utils"]
-	path = build_utils
-	url = git@github.com:rbkmoney/build_utils
diff --git a/Dockerfile b/Dockerfile
new file mode 100644
index 0000000..9908ca9
--- /dev/null
+++ b/Dockerfile
@@ -0,0 +1,17 @@
+FROM ghcr.io/rbkmoney/build-erlang:785d48cbfa7e7f355300c08ba9edc6f0e78810cb AS builder
+RUN mkdir /build
+COPY . /build/
+WORKDIR /build
+RUN rebar3 compile
+RUN rebar3 as prod release
+
+# Keep in sync with Erlang/OTP version in build image
+FROM erlang:24.1.3.0-slim
+ENV SERVICE=bouncer
+ENV CHARSET=UTF-8
+ENV LANG=C.UTF-8
+COPY --from=builder /build/_build/prod/rel/${SERVICE} /opt/${SERVICE}
+WORKDIR /opt/${SERVICE}
+ENTRYPOINT []
+CMD /opt/${SERVICE}/bin/${SERVICE} foreground
+EXPOSE 8022
\ No newline at end of file
diff --git a/Dockerfile.sh b/Dockerfile.sh
deleted file mode 100755
index a4e8218..0000000
--- a/Dockerfile.sh
+++ /dev/null
@@ -1,24 +0,0 @@
-#!/bin/bash
-cat <<EOF
-FROM $BASE_IMAGE
-LABEL maintainer="Andrey Mayorov <a.mayorov@rbkmoney.com>"
-RUN mkdir -p /var/log/bouncer
-COPY ./_build/prod/rel/bouncer /opt/bouncer
-WORKDIR /opt/bouncer
-CMD /opt/bouncer/bin/bouncer foreground
-EXPOSE 8022
-LABEL com.rbkmoney.$SERVICE_NAME.parent=$BASE_IMAGE_NAME \
-      com.rbkmoney.$SERVICE_NAME.parent_tag=$BASE_IMAGE_TAG \
-      com.rbkmoney.$SERVICE_NAME.build_img=build \
-      com.rbkmoney.$SERVICE_NAME.build_img_tag=$BUILD_IMAGE_TAG \
-      com.rbkmoney.$SERVICE_NAME.commit_id=$(git rev-parse HEAD) \
-      com.rbkmoney.$SERVICE_NAME.commit_number=$(git rev-list --count HEAD) \
-      com.rbkmoney.$SERVICE_NAME.branch=$( \
-        if [ "HEAD" != $(git rev-parse --abbrev-ref HEAD) ]; then \
-          echo $(git rev-parse --abbrev-ref HEAD); \
-        elif [ -n "$BRANCH_NAME" ]; then \
-          echo $BRANCH_NAME; \
-        else \
-          echo $(git name-rev --name-only HEAD); \
-        fi)
-EOF
diff --git a/Jenkinsfile b/Jenkinsfile
deleted file mode 100644
index d771ea2..0000000
--- a/Jenkinsfile
+++ /dev/null
@@ -1,23 +0,0 @@
-#!groovy
-// -*- mode: groovy -*-
-
-def finalHook = {
-  runStage('store CT logs') {
-    archive '_build/test/logs/'
-  }
-}
-
-build('bouncer', 'docker-host', finalHook) {
-  checkoutRepo()
-  loadBuildUtils()
-
-  def pipeErlangService
-  runStage('load pipeline') {
-    env.JENKINS_LIB = "build_utils/jenkins_lib"
-    env.SH_TOOLS = "build_utils/sh"
-    pipeErlangService = load("${env.JENKINS_LIB}/pipeErlangService.groovy")
-  }
-
-  pipeErlangService.runPipe(true, false)
-
-}
diff --git a/build_utils b/build_utils
deleted file mode 160000
index a7655bc..0000000
--- a/build_utils
+++ /dev/null
@@ -1 +0,0 @@
-Subproject commit a7655bc60c877a65cdfe3d9b668021d970d88a76
diff --git a/docker-compose.sh b/docker-compose.sh
deleted file mode 100755
index b701dd4..0000000
--- a/docker-compose.sh
+++ /dev/null
@@ -1,41 +0,0 @@
-#!/bin/bash
-
-OPA_VSN="0.26.0-debug"
-OPA_IMAGE="openpolicyagent/opa:${OPA_VSN}"
-
-POLICY_DIR="/var/opa/policies"
-
-cat <<EOF
-version: '2.1'
-services:
-
-  ${SERVICE_NAME}:
-    image: ${BUILD_IMAGE}
-    volumes:
-      - .:$PWD
-      - $HOME/.cache:/home/$UNAME/.cache
-    working_dir: $PWD
-    command: /sbin/init
-    depends_on:
-      opa:
-        condition: service_healthy
-
-  opa:
-    image: ${OPA_IMAGE}
-    entrypoint: ["sh", "-c"]
-    command: ["cd ${POLICY_DIR} &&
-               /opa build . &&
-               /opa run
-                 --server
-                 --addr :8181
-                 --set decision_logs.console=true
-                 --bundle bundle.tar.gz
-               "]
-    volumes:
-      - ./test/policies:${POLICY_DIR}:rw
-    healthcheck:
-      test: ["CMD", "sh", "-c", "wget -q --tries=1 --spider http://localhost:8181/"]
-      interval: 5s
-      timeout: 1s
-      retries: 5
-EOF
diff --git a/rebar.config b/rebar.config
index 63bc4f6..af52e9f 100644
--- a/rebar.config
+++ b/rebar.config
@@ -44,6 +44,7 @@
     % Production-only deps.
     % Defined here for the sake of rebar-locking.
     {recon, "2.5.2"},
+    {iosetopts, {git, "https://github.com/valitydev/iosetopts.git", {ref, "edb445c"}}},
     {logger_logstash_formatter,
         {git, "https://github.com/rbkmoney/logger_logstash_formatter.git", {branch, "master"}}},
     {how_are_you, {git, "https://github.com/rbkmoney/how_are_you.git", {branch, "master"}}},
@@ -158,6 +159,7 @@
         %% Relx configuration
         {relx, [
             {release, {bouncer, "0.1.0"}, [
+                iosetopts,
                 % tools for introspection
                 {recon, load},
                 % debugger