diff --git a/.gitea/workflows/analysis.yml b/.gitea/workflows/analysis.yml
index 2294f41..973d6d3 100644
--- a/.gitea/workflows/analysis.yml
+++ b/.gitea/workflows/analysis.yml
@@ -3,7 +3,7 @@ on: [push]
 jobs:
   build:
     name: Build Nix targets
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@v5
       - name: Install dependencies for Nix setup action
diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 78155d9..028a5bb 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -7,7 +7,7 @@ on:
 jobs:
   build:
     name: build hive configuration
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@v5
       - name: Install dependencies for Nix setup action
diff --git a/modules/gitea/thea/default.nix b/modules/gitea/thea/default.nix
index 620d0c1..3862f0d 100644
--- a/modules/gitea/thea/default.nix
+++ b/modules/gitea/thea/default.nix
@@ -20,12 +20,7 @@ in{
       url = nodes.sin.config.services.gitea.settings.server.ROOT_URL;
       token = "uEDPBW6Z9oItAKRtloVwis0LkPbD4OmV2w5esOhW";
       labels = [
-        # provide a debian base with nodejs for actions
-        "debian-latest:docker://node:20-bullseye"
-        # fake the ubuntu name, because node provides no ubuntu builds
-        "ubuntu-latest:docker://node:20-bullseye"
-        # provide native execution on the host
-        #"native:host"
+        "ubuntu-22.04:docker://docker.gitea.com/runner-images:ubuntu-22.04"
       ]
       ;
     };