diff --git a/.github/workflows/k8s_traefik_init_setup.yml b/.github/workflows/k8s_traefik_init_setup.yml
index d973557..24b975e 100644
--- a/.github/workflows/k8s_traefik_init_setup.yml
+++ b/.github/workflows/k8s_traefik_init_setup.yml
@@ -6,10 +6,11 @@ on:
 jobs:
   bootstrap:
     runs-on: mealcraft-runners
-    container:
-      image: ubuntu:22.04
 
     steps:
+    # -----------------------------------------------------
+    # Checkout Repo
+    # -----------------------------------------------------
     - uses: actions/checkout@v4
 
     # -----------------------------------------------------
@@ -17,10 +18,10 @@ jobs:
     # -----------------------------------------------------
     - name: Install kubectl
       run: |
-        apt-get update
-        apt-get install -y ca-certificates curl
+        sudo apt-get update
+        sudo apt-get install -y ca-certificates curl
         curl -LO "https://dl.k8s.io/release/$(curl -sL https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
-        install -m 0755 kubectl /usr/local/bin/kubectl
+        sudo install -m 0755 kubectl /usr/local/bin/kubectl
 
     # -----------------------------------------------------
     # Configure kubeconfig via ARC pod token
@@ -38,15 +39,15 @@ jobs:
         kubectl config use-context runner-context
 
     # -----------------------------------------------------
-    # Install buildctl (standalone)
+    # Install buildctl (standalone BuildKit client)
     # -----------------------------------------------------
     - name: Install buildctl
       run: |
-        apt-get update && apt-get install -y curl
+        sudo apt-get update && sudo apt-get install -y curl
         curl -sSL https://github.com/moby/buildkit/releases/download/v0.12.5/buildkit-v0.12.5.linux-amd64.tar.gz -o buildkit.tar.gz
         tar -xzf buildkit.tar.gz
-        mv bin/buildctl /usr/local/bin/
-        chmod +x /usr/local/bin/buildctl
+        sudo mv bin/buildctl /usr/local/bin/
+        sudo chmod +x /usr/local/bin/buildctl
 
     # -----------------------------------------------------
     # Build & Push Docker Image (NO docker, NO buildx, NO daemon)
@@ -66,7 +67,7 @@ jobs:
           --local context="${GITHUB_WORKSPACE}/traefik" \
           --local dockerfile="${GITHUB_WORKSPACE}/traefik" \
           --opt platform=linux/amd64 \
-          --output type=registry,name=${IMAGE_SHA},push=true,registry.insecure=false,registry.auth=$AUTH
+          --output type=registry,name=${IMAGE_SHA},push=true,registry.auth=${AUTH}
 
         # Build + Push latest tag
         buildctl build \
@@ -74,7 +75,7 @@ jobs:
           --local context="${GITHUB_WORKSPACE}/traefik" \
           --local dockerfile="${GITHUB_WORKSPACE}/traefik" \
           --opt platform=linux/amd64 \
-          --output type=registry,name=${IMAGE_LATEST},push=true,registry.insecure=false,registry.auth=$AUTH
+          --output type=registry,name=${IMAGE_LATEST},push=true,registry.auth=${AUTH}
 
     # -----------------------------------------------------
     # Apply Storage Classes + PVCs