fix(forgejo-runners): fix docker running inside of an action job

kubernetes/main/apps/dev/forgejo-runner/app/config.yaml

@@ -17,6 +17,9 @@ data:
       capacity: 3
       # Extra environment variables to run jobs.
       envs:
+        DOCKER_HOST: tcp://localhost:2376
+        DOCKER_TLS_VERIFY: 1
+        DOCKER_CERT_PATH: /certs/client
         # A_TEST_ENV_NAME_1: a_test_env_value_1
         # A_TEST_ENV_NAME_2: a_test_env_value_2
       # Extra environment variables to run jobs from a file.
@@ -76,14 +79,14 @@ data:
       # Specifies the network to which the container will connect.
       # Could be host, bridge or the name of a custom network.
       # If it's empty, create a network automatically.
-      network: ""
+      network: host
       # Whether to create networks with IPv6 enabled. Requires the Docker daemon to be set up accordingly.
       # Only takes effect if "network" is set to "".
       enable_ipv6: false
       # Whether to use privileged mode or not when launching task containers (privileged mode is required for Docker-in-Docker).
       privileged: false
       # And other options to be used when the container is started (eg, --add-host=my.forgejo.url:host-gateway).
-      options:
+      options: -v /certs/client:/certs/client
       # The parent directory of a job's working directory.
       # If it's empty, /workspace will be used.
       workdir_parent:
@@ -96,7 +99,8 @@ data:
       # If you want to allow any volume, please use the following configuration:
       # valid_volumes:
       #   - '**'
-      valid_volumes: []
+      valid_volumes:
+        - /certs/client
       # overrides the docker client host with the specified one.
       # If "-" or "", an available docker host will automatically be found.
       # If "automount", an available docker host will automatically be found and mounted in the job container (e.g. /var/run/docker.sock).