try a better gitea actions runner

infrastructure/gitea/actions.deployment.yaml

@@ -12,7 +12,7 @@ spec:
         app: actions-runner
     spec:
       hostname: kube-runner
-      serviceAccountName: actions-runner
+      # serviceAccountName: actions-runner
       containers:
       - name: actions-runner
         image: actions-runner
@@ -20,7 +20,16 @@ spec:
           requests:
             memory: "128Mi"
             cpu: "500m"
+          limits:
+            memory: "2Gi"
+            cpu: "2"
         env:
+        - name: DOCKER_HOST
+          value: tcp://localhost:2376
+        - name: DOCKER_CERT_PATH
+          value: /certs/client
+        - name: DOCKER_TLS_VERIFY
+          value: "1"
         - name: GITEA_INSTANCE_URL
           value: "https://git.kluster.moll.re"
         - name: GITEA_RUNNER_REGISTRATION_TOKEN
@@ -33,7 +42,8 @@ spec:
         volumeMounts:
         - name: runner-data
           mountPath: /data
+        securityContext:
+          privileged: true
       volumes:
       - name: runner-data
         emptyDir: {}
-