diff --git a/docs/reference/dev-ci-runner.md b/docs/reference/dev-ci-runner.md
index dc24b7cb..889b56b2 100644
--- a/docs/reference/dev-ci-runner.md
+++ b/docs/reference/dev-ci-runner.md
@@ -79,7 +79,7 @@ The automatic path is intentionally single and narrow:
 4. D601 creates `/tmp/unidesk-ci/<runId>` and `/home/ubuntu/.unidesk/runs/<runId>`.
 5. D601 fetches the manifest commit from GitHub through the node-local provider-gateway WS egress proxy at `http://127.0.0.1:18789`.
 6. D601 extracts the runner with `git show <commit>:<scriptPath> > /tmp/unidesk-ci/<runId>/runner.sh` and the desired-state blob with `git show <commit>:deploy.json > /tmp/unidesk-ci/<runId>/deploy.json`.
-7. The runner parses the host-fetched `deploy.json`, requires a full-SHA `code-queue` service commit, builds or reuses a D601 Docker image for that commit, imports the image and `postgres:16-alpine` into native k3s containerd, creates the Tekton PipelineRun in `unidesk-ci`, passes the required dev service commits and Code Queue image tag as PipelineRun params, waits for completion when requested, and writes `result.json`, `launcher.log`, `runner.log`, PipelineRun JSON and pod logs under `/home/ubuntu/.unidesk/runs/<runId>/`.
+7. The runner parses the host-fetched `deploy.json`, requires a full-SHA `code-queue` service commit, builds or reuses a D601 Docker image for that commit with host networking so `127.0.0.1:18789` resolves to the node-local provider-gateway egress proxy, imports the image and `postgres:16-alpine` into native k3s containerd, creates the Tekton PipelineRun in `unidesk-ci`, passes the required dev service commits and Code Queue image tag as PipelineRun params, waits for completion when requested, and writes `result.json`, `launcher.log`, `runner.log`, PipelineRun JSON and pod logs under `/home/ubuntu/.unidesk/runs/<runId>/`.
 
 The CLI must not upload the runner script body. Tekton dev e2e must not clone the private UniDesk repo itself; repo access and desired-state extraction happen once in the D601 host launcher under the manifest commit. The submitted launcher may contain only repo, full commit, script path, run id, environment, timeout, keep-namespace and fixed workspace path settings plus the fixed fetch/execute wrapper. If k3s, Tekton or the provider egress proxy is unavailable, the run fails with visible logs; it must not fall back to an alternate deployment path.
 
diff --git a/scripts/ci/dev-e2e.sh b/scripts/ci/dev-e2e.sh
index d453073b..85f62d83 100755
--- a/scripts/ci/dev-e2e.sh
+++ b/scripts/ci/dev-e2e.sh
@@ -267,6 +267,7 @@ build_code_queue_image() {
     fi
     echo "dev_e2e_code_queue_image_build=$commit_image commit=$resolved"
     docker build \
+      --network host \
       "${base_args[@]}" \
       --build-arg HTTP_PROXY="${HTTP_PROXY:-}" \
       --build-arg HTTPS_PROXY="${HTTPS_PROXY:-}" \