diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index dc17029..43a0dee 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -10,21 +10,20 @@ on:
 
 jobs:
   build:
-    runs-on: ubuntu-latest
-    container:
-      image: python:3.12-slim
+    runs-on: ubuntu-22.04
     steps:
-      - name: Install system dependencies
-        run: apt-get update && apt-get install -y --no-install-recommends git curl
-
       - name: Checkout
-        run: |
-          git config --global credential.helper '!f() { echo "username=token"; echo "password=${{ secrets.DEPLOY_TOKEN }}"; }; f'
-          git clone --depth 1 --branch "${{ github.ref_name }}" "${{ github.server_url }}/${{ github.repository }}.git" .
-          git checkout "${{ github.sha }}"
+        uses: actions/checkout@v4
 
-      - name: Install Python dependencies
-        run: pip install ansible ansible-bundler
+      - name: Setup Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.12'
+          cache: 'pip'
+
+      - name: Install dependencies
+        run: |
+          pip install ansible ansible-bundler
 
       - name: Verify playbook syntax
         run: |
@@ -52,5 +51,12 @@ jobs:
             -T bootstrap.run.sha256 \
             "${{ github.server_url }}/api/packages/${{ github.repository_owner }}/generic/bootstrap/latest/bootstrap.run.sha256"
 
-      # Note: actions/upload-artifact requires Node.js, which isn't in python:3.12-slim.
-      # Artifacts are already uploaded to Gitea packages above.
+      # Alternative: Upload as artifact (for manual download)
+      - name: Upload artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: bootstrap-bundle
+          path: |
+            bootstrap.run
+            bootstrap.run.sha256
+          retention-days: 90