diff --git a/.forgejo/workflows/podman-demo.yml b/.forgejo/workflows/podman-demo.yml
index 850d1bf..dc08f1d 100644
--- a/.forgejo/workflows/podman-demo.yml
+++ b/.forgejo/workflows/podman-demo.yml
@@ -7,12 +7,23 @@ jobs:
 
     # Point all steps at the host's rootless Podman socket
     env:
+      # Point the client at the mounted socket
       CONTAINER_HOST: unix:///run/user/1001/podman/podman.sock
+      # Make sure podman looks in the correct runtime dir hierarchy
+      XDG_RUNTIME_DIR: /run/user/1001
 
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
 
+      - name: Debug socket perms
+        run: |
+          set -euo pipefail
+          id -u; id -g
+          ls -ld /run /run/user /run/user/1001 /run/user/1001/podman || true
+          ls -l  /run/user/1001/podman || true
+          test -S /run/user/1001/podman/podman.sock
+
       - name: Use host rootless Podman
         run: |
           set -euo pipefail