another attempt

.forgejo/workflows/runner-image.yml

@@ -24,6 +24,7 @@ jobs:
       - name: Install docker
         run: |
           nix-env -iA nixpkgs.podman
+          echo '{ "defult": [ {"type":"insecureAcceptAnything"} ] }' > /etc/containers/policy.json
 
       - name: Log into registry
         run: |
@@ -35,6 +36,8 @@ jobs:
           -t ${{ env.registry }}/${{ env.owner }}/${{ env.image }}:${{ env.tag }} 
           -f Dockerfile.default
           modules/nixos/services/development/forgejo
+        env:
+          DOCKER_BUILDKIT: 1
 
       - name: Push image
         run: |

modules/nixos/services/development/forgejo/Dockerfile.default

@@ -1,6 +1,8 @@
 FROM docker.io/nixos/nix:latest
 
-RUN nix-env -iA nixpkgs.nodejs_24
+RUN nix-env -iA nixpkgs.nodejs_24 nixpkgs.podman
+
 RUN echo "experimental-features = nix-command flakes pipe-operators" >> /etc/nix/nix.conf
+RUN echo '{ "defult": [ {"type":"insecureAcceptAnything"} ] }' >> /etc/containers/policy.json
 
 CMD ["/bin/bash"]