diff --git a/.forgejo/workflows/build-image.yml b/.forgejo/workflows/build-image.yml
index 665460d..c44107b 100644
--- a/.forgejo/workflows/build-image.yml
+++ b/.forgejo/workflows/build-image.yml
@@ -5,22 +5,25 @@ jobs:
     runs-on: docker
     container:
       image: node:18-bookworm
+      volumes:
+        - /dev/fuse:/dev/fuse
     steps:
       - name: Repository Checkout
         uses: https://gitea.angry.im/actions/checkout@v3
         with:
           submodules: recursive
 
-      - name: Mask Secrets
-        run: 'echo "::add-mask::${{ secrets.FORGEJO_TOKEN }}"'
-
       - name: Setup podman
         run: |
-          id -a
           apt-get update
           apt-get install -y podman
           podman login gitea.angry.im --username PeterCxy --password ${{ secrets.FORGEJO_TOKEN }}
 
+      - name: Fixup subuid/subgid
+        run: |
+          echo 'root:1:999' > /etc/subuid
+          echo 'root:1:999' > /etc/subgid
+
       - name: Confirm Podman works
         run: podman run --rm hello-world