diff --git a/hosts/zeke/virt.nix b/hosts/zeke/virt.nix
index b1943be..8a7d448 100644
--- a/hosts/zeke/virt.nix
+++ b/hosts/zeke/virt.nix
@@ -98,6 +98,14 @@ in
         '';
       };
     };
+
+    gitlab-runner = {
+      serviceConfig = {
+        DevicePolicy = lib.mkForce "auto";
+        User = "root";
+        DynamicUser = lib.mkForce false;
+      };
+    };
   };
 
   virtualisation = {