diff --git a/.forgejo/workflows/nix.yaml b/.forgejo/workflows/nix.yaml
index a8b3069..baf96cd 100644
--- a/.forgejo/workflows/nix.yaml
+++ b/.forgejo/workflows/nix.yaml
@@ -1,7 +1,7 @@
 on: [push]
 jobs:
   test:
-    runs-on: podman
+    runs-on: nix
     steps:
       - run: nix flake check
 
diff --git a/nixos/beefcake.nix b/nixos/beefcake.nix
index b204c93..b8011b4 100644
--- a/nixos/beefcake.nix
+++ b/nixos/beefcake.nix
@@ -754,8 +754,19 @@ sudo nix run nixpkgs#ipmitool -- raw 0x30 0x30 0x02 0xff 0x00
           labels = [
             # type ":host" does not depend on docker/podman/lxc
             "podman"
+            "nix:docker://nixos/nix:2.23.3"
           ];
           tokenFile = config.sops.secrets."forgejo-runner.env".path;
+          hostPackages = with pkgs; [
+            sh
+            bash
+            coreutils
+            curl
+            gawk
+            gitMinimal
+            gnused
+            wget
+          ];
         };
       };
       services.caddy.virtualHosts."git.lyte.dev" = {