# Forgejo runner setup Run forgejo runners instance inside a VM to do very dirty things but securely.

The "dirty things" is just having forgejo running in priviliged container, with direct access to the host (VM) docker socket.

Runners can easily get full access to host, but the host is a VM so it's ok

I use [incus](https://linuxcontainers.org/incus/) to create the VM. I love it, very simple, docker like interface

See launch_forgejo_runner_vm.sh for more information about the VM setup.

To setup, you still need to enter VM, and follow forgejo [runner instalation guide](https://forgejo.org/docs/next/admin/actions/runner-installation/)

It's still a little bit manual, but it's done in 30s