# Forgejo runner setup
Run forgejo runners instance inside a VM to do very dirty things but securely.
The "dirty things" is just having forgejo running in priviliged container, with direct access to the host (VM) docker socket.
Runners can easily get full access to host, but the host is a VM so it's ok
I use [incus](https://linuxcontainers.org/incus/) to create the VM. I love it, very simple, docker like interface
See launch_forgejo_runner_vm.sh for more information about the VM setup.
To setup, you still need to enter VM, and follow forgejo [runner instalation guide](https://forgejo.org/docs/next/admin/actions/runner-installation/)
It's still a little bit manual, but it's done in 30s