From a99e367a49495760fdd66d7074174e0c1f4dc7e8 Mon Sep 17 00:00:00 2001
From: Philip Peterson <1326208+philip-peterson@users.noreply.github.com>
Date: Mon, 8 Jun 2026 19:29:39 -0700
Subject: [PATCH] CI: install Docker from static binary, keep all paths under
 /tmp

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 .gitea/workflows/ci.yml | 20 ++++++++++++++++----
 1 file changed, 16 insertions(+), 4 deletions(-)

diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 7d8e8c4..e9e1ce3 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -14,11 +14,23 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
-      - name: Install and start Docker
+      - name: Install Docker from static binary
         run: |
-          apt-get update -qq && apt-get install -y --no-install-recommends docker.io
-          nohup dockerd &>/var/log/dockerd.log &
-          until docker info >/dev/null 2>&1; do sleep 1; done
+          curl -fsSL https://download.docker.com/linux/static/stable/x86_64/docker-27.5.1.tgz \
+            | tar -xz -C /tmp
+          echo "/tmp/docker" >> "$GITHUB_PATH"
+
+      - name: Start Docker daemon
+        run: |
+          mkdir -p /tmp/docker-data /tmp/docker-run
+          nohup /tmp/docker/dockerd \
+            --host=unix:///tmp/docker-run/docker.sock \
+            --data-root=/tmp/docker-data \
+            &>/tmp/dockerd.log &
+          echo "DOCKER_HOST=unix:///tmp/docker-run/docker.sock" >> "$GITHUB_ENV"
+          until /tmp/docker/docker --host=unix:///tmp/docker-run/docker.sock info >/dev/null 2>&1; do
+            sleep 1
+          done
 
       - name: Log in to registry
         run: |