diff --git a/.forgejo/workflows/end-to-end.yml b/.forgejo/workflows/end-to-end.yml
index 690c814..b460f1b 100644
--- a/.forgejo/workflows/end-to-end.yml
+++ b/.forgejo/workflows/end-to-end.yml
@@ -77,6 +77,7 @@ jobs:
     steps:
       - uses: https://code.forgejo.org/actions/checkout@v4
       - uses: ./.forgejo/prepare-end-to-end
+      - run: ./end-to-end.sh prepare_dockerd
       - run: su forgejo -c "./end-to-end.sh test_actions"
       - name: full logs
         if: always()
diff --git a/README.md b/README.md
index 4b5808a..4e7ed5b 100644
--- a/README.md
+++ b/README.md
@@ -72,6 +72,10 @@ firefox 0.0.0.0:3000 # user root / admin1234
 ./end-to-end.sh actions_verify_example echo
 ./end-to-end.sh actions_teardown
 ```
+
+Note that `with-docker-tcp` requires the docker daemon listens to
+tcp://127.0.0.1:2375. See `actions/actions.sh` for how to do that.
+
 ## Running other tests locally
 
 To run and debug tests, from the root of the source directory.
diff --git a/actions/actions.sh b/actions/actions.sh
index e248f7f..321524a 100755
--- a/actions/actions.sh
+++ b/actions/actions.sh
@@ -101,6 +101,21 @@ function actions_runner_version() {
     echo $runner_version
 }
 
+function prepare_dockerd() {
+    mkdir -p /etc/systemd/system/docker.service.d
+    cat >/etc/systemd/system/docker.service.d/override.conf <<'EOF'
+[Service]
+ExecStart=
+ExecStart=/usr/sbin/dockerd -H unix:///var/run/docker.sock -H tcp://127.0.0.1:2375 --containerd=/run/containerd/containerd.sock $DOCKER_OPTS
+EOF
+    systemctl daemon-reload
+    if ! systemctl restart docker.service; then
+        journalctl --no-pager --unit docker.service
+        return 1
+    fi
+    netstat -lntp | grep 127.0.0.1:2375
+}
+
 function test_actions() {
     local versions="${1:-$RELEASE_NUMBERS}"
 
@@ -118,6 +133,13 @@ function test_actions() {
             run actions_verify_feature logs-compression
         fi
 
+        run actions_verify_example with-docker-tcp
+        if dpkg --compare-versions $runner_version gt 5.0.2; then
+            for example in with-docker-host with-docker-socket without-docker-socket; do
+                run actions_verify_example $example
+            done
+        fi
+
         if dpkg --compare-versions $version ge 7.0 && dpkg --compare-versions $runner_version gt 3.3.0; then
             for example in artifacts-v4; do
                 run actions_verify_example $example
diff --git a/actions/example-with-docker-host/.forgejo/workflows/test.yml b/actions/example-with-docker-host/.forgejo/workflows/test.yml
new file mode 100644
index 0000000..32a82a4
--- /dev/null
+++ b/actions/example-with-docker-host/.forgejo/workflows/test.yml
@@ -0,0 +1,9 @@
+on: [push]
+
+jobs:
+  build:
+    runs-on: docker
+    container:
+      image: code.forgejo.org/oci/node:20-bookworm
+    steps:
+      - run: "test -e /var/run/docker.sock"
diff --git a/actions/example-with-docker-host/runner-config.yaml b/actions/example-with-docker-host/runner-config.yaml
new file mode 100644
index 0000000..839de20
--- /dev/null
+++ b/actions/example-with-docker-host/runner-config.yaml
@@ -0,0 +1,30 @@
+
+log:
+  level: debug
+
+runner:
+  file: .runner
+  capacity: 1
+  env_file: .env
+  timeout: 3h
+  insecure: false
+  fetch_timeout: 5s
+  fetch_interval: 2s
+  labels: ["docker:docker://code.forgejo.org/oci/node:20-bookworm"]
+
+cache:
+  enabled: true
+  dir: "/srv/example/cache"
+  host: ""
+  port: 0
+
+container:
+  network: "bridge"
+  privileged: false
+  options:
+  workdir_parent:
+  valid_volumes: ["/srv/example"]
+  docker_host: "unix:///var/run/docker.sock"
+
+host:
+  workdir_parent:
diff --git a/actions/example-with-docker-host/setup.sh b/actions/example-with-docker-host/setup.sh
new file mode 100755
index 0000000..9c1f5ad
--- /dev/null
+++ b/actions/example-with-docker-host/setup.sh
@@ -0,0 +1 @@
+FORGEJO_RUNNER_CONFIG=$EXAMPLE_DIR/runner-config.yaml forgejo-runner.sh reload
diff --git a/actions/example-with-docker-host/teardown.sh b/actions/example-with-docker-host/teardown.sh
new file mode 100755
index 0000000..b410c51
--- /dev/null
+++ b/actions/example-with-docker-host/teardown.sh
@@ -0,0 +1 @@
+forgejo-runner.sh reload
diff --git a/actions/example-with-docker-socket/.forgejo/workflows/test.yml b/actions/example-with-docker-socket/.forgejo/workflows/test.yml
new file mode 100644
index 0000000..32a82a4
--- /dev/null
+++ b/actions/example-with-docker-socket/.forgejo/workflows/test.yml
@@ -0,0 +1,9 @@
+on: [push]
+
+jobs:
+  build:
+    runs-on: docker
+    container:
+      image: code.forgejo.org/oci/node:20-bookworm
+    steps:
+      - run: "test -e /var/run/docker.sock"
diff --git a/actions/example-with-docker-socket/runner-config.yaml b/actions/example-with-docker-socket/runner-config.yaml
new file mode 100644
index 0000000..e09edaa
--- /dev/null
+++ b/actions/example-with-docker-socket/runner-config.yaml
@@ -0,0 +1,30 @@
+
+log:
+  level: debug
+
+runner:
+  file: .runner
+  capacity: 1
+  env_file: .env
+  timeout: 3h
+  insecure: false
+  fetch_timeout: 5s
+  fetch_interval: 2s
+  labels: ["docker:docker://code.forgejo.org/oci/node:20-bookworm"]
+
+cache:
+  enabled: true
+  dir: "/srv/example/cache"
+  host: ""
+  port: 0
+
+container:
+  network: "bridge"
+  privileged: false
+  options:
+  workdir_parent:
+  valid_volumes: ["/srv/example"]
+  docker_host: "automount"
+
+host:
+  workdir_parent:
diff --git a/actions/example-with-docker-socket/setup.sh b/actions/example-with-docker-socket/setup.sh
new file mode 100755
index 0000000..9c1f5ad
--- /dev/null
+++ b/actions/example-with-docker-socket/setup.sh
@@ -0,0 +1 @@
+FORGEJO_RUNNER_CONFIG=$EXAMPLE_DIR/runner-config.yaml forgejo-runner.sh reload
diff --git a/actions/example-with-docker-socket/teardown.sh b/actions/example-with-docker-socket/teardown.sh
new file mode 100755
index 0000000..b410c51
--- /dev/null
+++ b/actions/example-with-docker-socket/teardown.sh
@@ -0,0 +1 @@
+forgejo-runner.sh reload
diff --git a/actions/example-with-docker-tcp/.forgejo/workflows/test.yml b/actions/example-with-docker-tcp/.forgejo/workflows/test.yml
new file mode 100644
index 0000000..c33c2e7
--- /dev/null
+++ b/actions/example-with-docker-tcp/.forgejo/workflows/test.yml
@@ -0,0 +1,11 @@
+on: [push]
+
+jobs:
+  build:
+    runs-on: docker
+    container:
+      image: code.forgejo.org/oci/node:20-bookworm
+    steps:
+      - run: |
+          ! test -e /var/run/docker.sock
+          ! env | grep DOCKER_HOST
diff --git a/actions/example-with-docker-tcp/runner-config.yaml b/actions/example-with-docker-tcp/runner-config.yaml
new file mode 100644
index 0000000..730d9c8
--- /dev/null
+++ b/actions/example-with-docker-tcp/runner-config.yaml
@@ -0,0 +1,30 @@
+
+log:
+  level: debug
+
+runner:
+  file: .runner
+  capacity: 1
+  env_file: .env
+  timeout: 3h
+  insecure: false
+  fetch_timeout: 5s
+  fetch_interval: 2s
+  labels: ["docker:docker://code.forgejo.org/oci/node:20-bookworm"]
+
+cache:
+  enabled: true
+  dir: "/srv/example/cache"
+  host: ""
+  port: 0
+
+container:
+  network: "bridge"
+  privileged: false
+  options:
+  workdir_parent:
+  valid_volumes: ["/srv/example"]
+  docker_host: "tcp://127.0.0.1:2375"
+
+host:
+  workdir_parent:
diff --git a/actions/example-with-docker-tcp/setup.sh b/actions/example-with-docker-tcp/setup.sh
new file mode 100755
index 0000000..9c1f5ad
--- /dev/null
+++ b/actions/example-with-docker-tcp/setup.sh
@@ -0,0 +1 @@
+FORGEJO_RUNNER_CONFIG=$EXAMPLE_DIR/runner-config.yaml forgejo-runner.sh reload
diff --git a/actions/example-with-docker-tcp/teardown.sh b/actions/example-with-docker-tcp/teardown.sh
new file mode 100755
index 0000000..b410c51
--- /dev/null
+++ b/actions/example-with-docker-tcp/teardown.sh
@@ -0,0 +1 @@
+forgejo-runner.sh reload
diff --git a/actions/example-without-docker-socket/.forgejo/workflows/test.yml b/actions/example-without-docker-socket/.forgejo/workflows/test.yml
new file mode 100644
index 0000000..8d5c837
--- /dev/null
+++ b/actions/example-without-docker-socket/.forgejo/workflows/test.yml
@@ -0,0 +1,6 @@
+on: [push]
+jobs:
+  test:
+    runs-on: docker
+    steps:
+      - run: "! test -e /var/run/docker.sock"