diff --git a/.forgejo/workflows/deploy-cloudflare.yml b/.forgejo/workflows/deploy-cloudflare.yml
index d5632a0..85ee5e1 100644
--- a/.forgejo/workflows/deploy-cloudflare.yml
+++ b/.forgejo/workflows/deploy-cloudflare.yml
@@ -81,6 +81,8 @@ jobs:
         shell: bash
         run: |
           set -euo pipefail
+          install -d -m 755 "$HOME/.local/bin"
+          export PATH="$HOME/.local/bin:$PATH"
           if ! command -v cargo >/dev/null 2>&1; then
             curl -fsSL https://sh.rustup.rs | sh -s -- -y --profile minimal
             . "$HOME/.cargo/env"
@@ -89,7 +91,18 @@ jobs:
           fi
           rustup target add wasm32-unknown-unknown
           if ! command -v trunk >/dev/null 2>&1; then
-            cargo install trunk --locked
+            trunk_version="0.21.14"
+            arch="$(uname -m)"
+            case "${arch}" in
+              x86_64|amd64) trunk_target="x86_64-unknown-linux-gnu" ;;
+              aarch64|arm64) trunk_target="aarch64-unknown-linux-gnu" ;;
+              *)
+                echo "error: unsupported runner arch for trunk prebuilt binary: ${arch}"
+                exit 2
+                ;;
+            esac
+            curl -fsSL "https://github.com/trunk-rs/trunk/releases/download/v${trunk_version}/trunk-${trunk_target}.tar.gz" \
+              | tar -xz -C "$HOME/.local/bin" trunk
           fi
 
           cd apps/tauri/ui