diff --git a/.forgejo/workflows/ci.yaml b/.forgejo/workflows/ci.yaml
index d36c6e0..a6b01dd 100644
--- a/.forgejo/workflows/ci.yaml
+++ b/.forgejo/workflows/ci.yaml
@@ -9,7 +9,7 @@ env:
 
 jobs:
   check:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-latest-aarch64
     steps:
       - uses: https://github.com/docker/setup-qemu-action@v3
       - uses: actions/checkout@v4
diff --git a/.forgejo/workflows/update-flake.yaml b/.forgejo/workflows/update-flake.yaml
index bbfdb75..4e6c56c 100644
--- a/.forgejo/workflows/update-flake.yaml
+++ b/.forgejo/workflows/update-flake.yaml
@@ -4,7 +4,7 @@ on:
 
 jobs:
   update-flake:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-latest-aarch64
     steps:
       - uses: actions/checkout@v4
       - uses: https://github.com/cachix/install-nix-action@v26
diff --git a/hosts/ami/forgejo-action-runner.nix b/hosts/ami/forgejo-action-runner.nix
index 2f20807..8207891 100644
--- a/hosts/ami/forgejo-action-runner.nix
+++ b/hosts/ami/forgejo-action-runner.nix
@@ -19,7 +19,7 @@ in {
       inherit name;
       url = config.services.forgejo.settings.server.ROOT_URL;
       tokenFile = config.age.secrets.kitchen-runner-token.path;
-      labels = ["docker" "ubuntu-latest:docker://ghcr.io/catthehacker/ubuntu:act-latest"];
+      labels = ["docker-aarch64" "ubuntu-latest-aarch64:docker://ghcr.io/catthehacker/ubuntu:act-latest"];
       settings = {
         log.level = "warn";
         container.network = "host";