diff --git a/.gitea/workflows/docker-image.yml b/.gitea/workflows/docker-image.yml
index 34ed1555..215cb1a8 100644
--- a/.gitea/workflows/docker-image.yml
+++ b/.gitea/workflows/docker-image.yml
@@ -11,6 +11,8 @@ jobs:
   publish:
     name: Build and Push Docker Image
     runs-on: gitea-label
+    container:
+      image: node:24-bookworm
     env:
       NEXT_TELEMETRY_DISABLED: "1"
       SENTRY_UPLOAD_SOURCEMAPS: "0"
@@ -19,8 +21,19 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
+      - name: Setup Docker CLI
+        run: |
+          set -eu
+
+          if ! command -v docker >/dev/null 2>&1; then
+            apt-get update
+            apt-get install -y --no-install-recommends docker.io
+            rm -rf /var/lib/apt/lists/*
+          fi
+
       - name: Verify Docker
         run: |
+          node --version
           docker version
           docker info
 
diff --git a/docs/docker-image-ci.md b/docs/docker-image-ci.md
index 8653cc9b..dab99c7e 100644
--- a/docs/docker-image-ci.md
+++ b/docs/docker-image-ci.md
@@ -62,6 +62,13 @@ runs-on: gitea-label
 4. 能访问配置的镜像仓库。
 5. 支持 Docker BuildKit secret，即 `DOCKER_BUILDKIT=1 docker build --secret ...`。
 
+当前 Docker 镜像发布 workflow 会使用 `node:24-bookworm` 作为 job 容器，确保 `actions/checkout@v4` 执行时已经存在 Node.js。runner 仍然需要挂载宿主机 Docker socket：
+
+```yaml
+volumes:
+  - /var/run/docker.sock:/var/run/docker.sock
+```
+
 ## 验证方式
 
 推送到 `test` 分支后，检查 Actions 日志中是否出现：