diff --git a/.gitea/workflows/deploy-cube.yml b/.gitea/workflows/deploy-cube.yml
index 18a8eb0..54a3b48 100644
--- a/.gitea/workflows/deploy-cube.yml
+++ b/.gitea/workflows/deploy-cube.yml
@@ -21,6 +21,19 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
+      - name: Debug runner identity
+        run: |
+          echo "whoami=$(whoami)"
+          id
+          echo "supplementary groups via /proc/self/status:"
+          grep -E '^(Uid|Gid|Groups)' /proc/self/status
+          echo "docker.sock:"
+          ls -l /var/run/docker.sock
+          echo "docker ps:"
+          docker ps 2>&1 | head -5 || true
+          echo "sg docker test:"
+          sg docker -c 'docker ps 2>&1 | head -3' || true
+
       - name: Resolve image tag
         id: tag
         run: |