diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index dfb8f0e..47f6b12 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -142,14 +142,19 @@ jobs:
     runs-on: ubuntu-latest
     needs: [build]
     if: github.ref == 'refs/heads/main' && github.event_name == 'push'
-    container:
-      options: --privileged -v /var/run/docker.sock:/var/run/docker.sock
     env:
       REGISTRY: ${{ env.GITEA_REGISTRY }}
       OWNER: ${{ env.GITEA_OWNER }}
     steps:
       - uses: actions/checkout@v4
 
+      - name: Configure insecure registry
+        run: |
+          # Host uses podman — configure registries.conf for HTTP access
+          sudo mkdir -p /etc/containers
+          printf '[[registry]]\nlocation = "%s"\ninsecure = true\n' "${{ env.REGISTRY }}" \
+            | sudo tee /etc/containers/registries.conf
+
       - name: Login to Gitea container registry
         run: |
           echo "${{ secrets.PACKAGES_TOKEN }}" | docker login \