The Gitea act_runner already bind-mounts /var/run/docker.sock into job containers when its own runner container has the socket mounted. The workflow-level mount duplicated it and act_runner aborted the job with 'Duplicate mount point: /var/run/docker.sock'.