gitlab-runner refuses to actually use its userns=host option making any jobs requiring privileged mode fail. Use shell executor instead.