From a42446985c2eafa3b8ef92f5a1344d20652535e4 Mon Sep 17 00:00:00 2001
From: Chris Kruining <c.kruining@4dotnet.nl>
Date: Thu, 4 Sep 2025 12:02:40 +0200
Subject: [PATCH] another attempt

---
 .forgejo/workflows/runner-image.yml                           | 3 +++
 modules/nixos/services/development/forgejo/Dockerfile.default | 4 +++-
 2 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/.forgejo/workflows/runner-image.yml b/.forgejo/workflows/runner-image.yml
index c07ca95..285c5ac 100644
--- a/.forgejo/workflows/runner-image.yml
+++ b/.forgejo/workflows/runner-image.yml
@@ -24,6 +24,7 @@ jobs:
       - name: Install docker
         run: |
           nix-env -iA nixpkgs.podman
+          echo '{ "defult": [ {"type":"insecureAcceptAnything"} ] }' > /etc/containers/policy.json
 
       - name: Log into registry
         run: |
@@ -35,6 +36,8 @@ jobs:
           -t ${{ env.registry }}/${{ env.owner }}/${{ env.image }}:${{ env.tag }} 
           -f Dockerfile.default
           modules/nixos/services/development/forgejo
+        env:
+          DOCKER_BUILDKIT: 1
 
       - name: Push image
         run: |
diff --git a/modules/nixos/services/development/forgejo/Dockerfile.default b/modules/nixos/services/development/forgejo/Dockerfile.default
index ce4bbac..d26212c 100644
--- a/modules/nixos/services/development/forgejo/Dockerfile.default
+++ b/modules/nixos/services/development/forgejo/Dockerfile.default
@@ -1,6 +1,8 @@
 FROM docker.io/nixos/nix:latest
 
-RUN nix-env -iA nixpkgs.nodejs_24
+RUN nix-env -iA nixpkgs.nodejs_24 nixpkgs.podman
+
 RUN echo "experimental-features = nix-command flakes pipe-operators" >> /etc/nix/nix.conf
+RUN echo '{ "defult": [ {"type":"insecureAcceptAnything"} ] }' >> /etc/containers/policy.json
 
 CMD ["/bin/bash"]
\ No newline at end of file