Run the nested rootless Actions daemon with its required container privileges

Hop-State: A_06FN8AVQMJZ6K2X18A6G9X8
Hop-Proposal: R_06FN8ASRVT1DKJQJHGSYE68
Hop-Task: T_06FN8AMC0DGD5KW499HBX88
Hop-Attempt: AT_06FN8AMC0CCZXK2BZZ64DTG

.hop/records/prompts/P_06FN8AMC0CHRKDYMD9W87D8.json

@@ -0,0 +1,17 @@
+{
+  "id": "P_06FN8AMC0CHRKDYMD9W87D8",
+  "task_id": "T_06FN8AMC0DGD5KW499HBX88",
+  "attempt_id": "AT_06FN8AMC0CCZXK2BZZ64DTG",
+  "state_id": "P_06FN8AMC0CHRKDYMD9W87D8",
+  "prompt": "lets just leave it named as actions, and i think we need to let anyone use it if we are going to try and attract users.",
+  "agent_name": "codex",
+  "status": "proposed",
+  "response_summary": "Run the nested rootless Actions daemon with its required container privileges",
+  "created_at": "2026-07-12T02:31:42.33901Z",
+  "metadata": {
+    "source_tree": "dffc747dce1df9e8e16287143feab5958d727e79",
+    "git_commit": "3dbebbbf1c2b01b69baf771b3171bdc89f08a716",
+    "attempt_head": "C_06FN8AR954CQ0BKRDJJ3E0G",
+    "attempt_head_kind": "checkpoint"
+  }
+}

compose.yaml

@@ -60,9 +60,9 @@ services:
     cpus: "2.0"
     mem_limit: 4g
     pids_limit: 1024
-    security_opt:
+    # Required by rootlesskit for the nested Docker daemon. Workflow jobs run
-      - seccomp:unconfined
+    # inside that daemon and never receive the host's Docker socket.
-      - apparmor:unconfined
+    privileged: true
     volumes:
       - actions-runner-data:/data
     networks: [hopweb]