diff --git a/.gitea/workflows/build-ci-python.yml b/.gitea/workflows/build-ci-python.yml
index 87af163..a66b0b9 100644
--- a/.gitea/workflows/build-ci-python.yml
+++ b/.gitea/workflows/build-ci-python.yml
@@ -24,6 +24,13 @@ env:
 jobs:
   build:
     runs-on: ubuntu-latest
+    # Nur dieser Build-Job bekommt Docker-Zugriff: der Host-Socket wird in den
+    # Job-Container gemountet (build-push-action redet damit mit dem Host-Daemon).
+    # Der Runner muss /var/run/docker.sock in valid_volumes erlauben (deploy-CICD,
+    # ansible/setup-cicd-runner.yml, Issue #11).
+    container:
+      image: catthehacker/ubuntu:act-22.04
+      options: -v /var/run/docker.sock:/var/run/docker.sock
     steps:
       - uses: actions/checkout@v4