diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index 45fb4ac..68c84a2 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -40,8 +40,12 @@ jobs:
 
       - name: Configure Docker Socket
         run: |
-          # Detect Docker socket location (handles rootless Docker)
-          if [ -S "/run/user/$(id -u)/docker.sock" ]; then
+          # Prefer DOCKER_HOST if set (runner injects the real host socket path).
+          # This ensures pack passes the correct host path to lifecycle containers,
+          # which Podman can bind-mount without "mkdir permission denied".
+          if [ -n "$DOCKER_HOST" ]; then
+            echo "PACK_DOCKER_HOST=$DOCKER_HOST" >> $GITEA_ENV
+          elif [ -S "/run/user/$(id -u)/docker.sock" ]; then
             echo "PACK_DOCKER_HOST=unix:///run/user/$(id -u)/docker.sock" >> $GITEA_ENV
           elif [ -S "/var/run/docker.sock" ]; then
             echo "PACK_DOCKER_HOST=unix:///var/run/docker.sock" >> $GITEA_ENV