diff --git a/.forgejo/workflows/build.yml b/.forgejo/workflows/build.yml
index 12982f6..736388b 100644
--- a/.forgejo/workflows/build.yml
+++ b/.forgejo/workflows/build.yml
@@ -55,7 +55,9 @@ jobs:
               # Use the fast kernel overlay driver instead of fuse-overlayfs
               # (we are privileged, so this works — and is ~50x faster on
               # the millions of small files in the OSTree base)
-              sed -i "s|^mount_program|#mount_program|" /etc/containers/storage.conf || true
+              sed -i -E -e "s|^[[:space:]]*mount_program|#mount_program|" \
+                        -e "s|^[[:space:]]*mountopt.*|mountopt = \"nodev\"|" \
+                /etc/containers/storage.conf || true
               mkdir -p /src && tar -xf - -C /src && cd /src
               buildah build -f Containerfile \
                 --build-arg BASE_IMAGE="$BASE_IMAGE" \