Runner updated and eurovote

modules/services/gitea-runner.nix

@@ -8,8 +8,8 @@
 # nested containers on a Pi 4.
 #
 # The service uses DynamicUser=true so there is no persistent system user.
-# nix/git/bash are available in jobs via the system PATH inherited from the
-# service environment.
+# Job step PATH is controlled by hostPackages (not the service PATH).
+# nix is not in the NixOS module's default hostPackages and must be added.
 #
 # Setup (one-time):
 #   1. In Gitea: Site Administration → Actions → Runners → Create Runner Token
@@ -61,8 +61,12 @@ in
       tokenFile = config.sops.secrets."gitea/runner_token".path;
       name      = cfg.name;
       labels    = cfg.labels;
-      # nix/git/bash are accessible via the system PATH (/run/current-system/sw/bin/)
-      # without any extra configuration — the runner inherits it as a system user.
+      # hostPackages controls the PATH available to job steps (host executor).
+      # nix is not in the default list so must be added explicitly.
+      hostPackages = with pkgs; [
+        bash coreutils curl gawk gitMinimal gnused nodejs wget
+        nix
+      ];
     };
   };
 }