diff --git a/.forgejo/workflows/ci.yml b/.forgejo/workflows/ci.yml
index 9307255..ef48e0d 100644
--- a/.forgejo/workflows/ci.yml
+++ b/.forgejo/workflows/ci.yml
@@ -30,7 +30,7 @@ jobs:
     runs-on: [ci]
     env:
       XDG_RUNTIME_DIR: /run/user/999
-      CONTAINER_HOST: unix:///run/user/999/podman/podman.sock
+      CONTAINER_HOST: unix:///podman-host/podman.sock
     container:
       image: git.gcdo.org/devteam/sharenet/ci-node-podman@sha256:eb0d942bd9a8cc69c63eb9ccf3877703898d676d0268cf379defdcda7e55f37f
       # options: >-
@@ -39,8 +39,8 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - run: |
-          ls -l /run/user/999/podman || true
-          test -S /run/user/999/podman/podman.sock
+          ls -l /podman-host
+          test -S /podman-host/podman.sock
           podman info --log-level=error >/dev/null
           podman ps >/dev/null
           node -v
@@ -60,8 +60,7 @@ jobs:
 
       - name: Setup ephemeral PiP container
         env:
-          PODMAN_CLIENT_IMG_DIGEST: quay.io/podman/stable:latest
-          SOCKET_PATH: /run/user/999/podman/podman.sock
+          SOCKET_PATH: /podman-host/podman.sock
         run: |
           chmod +x ./secure_pip_setup.sh
           ./secure_pip_setup.sh
@@ -142,7 +141,7 @@ jobs:
     needs: test-backend
     env:
       XDG_RUNTIME_DIR: /run/user/999
-      CONTAINER_HOST: unix:///run/user/999/podman/podman.sock
+      CONTAINER_HOST: unix:///podman-host/podman.sock
     container:
       image: git.gcdo.org/devteam/sharenet/ci-node-podman@sha256:eb0d942bd9a8cc69c63eb9ccf3877703898d676d0268cf379defdcda7e55f37f
       # options: >-
@@ -151,8 +150,8 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - run: |
-          ls -l /run/user/999/podman || true
-          test -S /run/user/999/podman/podman.sock
+          ls -l /podman-host
+          test -S /podman-host/podman.sock
           podman info --log-level=error >/dev/null
           podman ps >/dev/null
           node -v
@@ -167,8 +166,7 @@ jobs:
 
       - name: Setup ephemeral PiP container
         env:
-          PODMAN_CLIENT_IMG_DIGEST: quay.io/podman/stable:latest
-          SOCKET_PATH: /run/user/999/podman/podman.sock
+          SOCKET_PATH: /podman-host/podman.sock
         run: |
           chmod +x ./secure_pip_setup.sh
           ./secure_pip_setup.sh
@@ -206,7 +204,7 @@ jobs:
     needs: test-frontend
     env:
       XDG_RUNTIME_DIR: /run/user/999
-      CONTAINER_HOST: unix:///run/user/999/podman/podman.sock
+      CONTAINER_HOST: unix:///podman-host/podman.sock
     container:
       image: git.gcdo.org/devteam/sharenet/ci-node-podman@sha256:eb0d942bd9a8cc69c63eb9ccf3877703898d676d0268cf379defdcda7e55f37f
       # options: >-
@@ -215,8 +213,8 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - run: |
-          ls -l /run/user/999/podman || true
-          test -S /run/user/999/podman/podman.sock
+          ls -l /podman-host
+          test -S /podman-host/podman.sock
           podman info --log-level=error >/dev/null
           podman ps >/dev/null
           node -v
@@ -224,8 +222,7 @@ jobs:
 
       - name: Setup ephemeral PiP container
         env:
-          PODMAN_CLIENT_IMG_DIGEST: quay.io/podman/stable:latest
-          SOCKET_PATH: /run/user/999/podman/podman.sock
+          SOCKET_PATH: /podman-host/podman.sock
         run: |
           chmod +x ./secure_pip_setup.sh
           ./secure_pip_setup.sh
@@ -279,7 +276,7 @@ jobs:
     needs: test-frontend
     env:
       XDG_RUNTIME_DIR: /run/user/999
-      CONTAINER_HOST: unix:///run/user/999/podman/podman.sock
+      CONTAINER_HOST: unix:///podman-host/podman.sock
     container:
       image: git.gcdo.org/devteam/sharenet/ci-node-podman@sha256:eb0d942bd9a8cc69c63eb9ccf3877703898d676d0268cf379defdcda7e55f37f
       # options: >-
@@ -288,8 +285,8 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - run: |
-          ls -l /run/user/999/podman || true
-          test -S /run/user/999/podman/podman.sock
+          ls -l /podman-host
+          test -S /podman-host/podman.sock
           podman info --log-level=error >/dev/null
           podman ps >/dev/null
           node -v
@@ -297,8 +294,7 @@ jobs:
 
       - name: Setup ephemeral PiP container
         env:
-          PODMAN_CLIENT_IMG_DIGEST: quay.io/podman/stable:latest
-          SOCKET_PATH: /run/user/999/podman/podman.sock
+          SOCKET_PATH: /podman-host/podman.sock
         run: |
           chmod +x ./secure_pip_setup.sh
           ./secure_pip_setup.sh
@@ -353,7 +349,7 @@ jobs:
     if: success()
     env:
       XDG_RUNTIME_DIR: /run/user/999
-      CONTAINER_HOST: unix:///run/user/999/podman/podman.sock
+      CONTAINER_HOST: unix:///podman-host/podman.sock
     container:
       image: git.gcdo.org/devteam/sharenet/ci-node-podman@sha256:eb0d942bd9a8cc69c63eb9ccf3877703898d676d0268cf379defdcda7e55f37f
       # options: >-
@@ -362,8 +358,8 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - run: |
-          ls -l /run/user/999/podman || true
-          test -S /run/user/999/podman/podman.sock
+          ls -l /podman-host
+          test -S /podman-host/podman.sock
           podman info --log-level=error >/dev/null
           podman ps >/dev/null
           node -v