diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 05f5275..0c1d927 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -131,16 +131,30 @@ jobs:
 
   lsposed:
     runs-on: ubuntu-latest
-    container:
-      image: ghcr.io/${{ github.repository }}/ci:latest
-      credentials:
-        username: ${{ github.actor }}
-        password: ${{ secrets.GITHUB_TOKEN }}
     steps:
       - uses: actions/checkout@v4
 
-      - name: Mark workspace safe
-        run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
+      - name: Set up JDK 17
+        uses: actions/setup-java@v4
+        with:
+          distribution: temurin
+          java-version: '17'
+
+      - name: Set up Gradle
+        uses: gradle/actions/setup-gradle@v4
+
+      - name: Install Rust + cargo-ndk
+        run: |
+          curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --default-toolchain stable --profile minimal
+          . "$HOME/.cargo/env"
+          rustup target add aarch64-linux-android
+          cargo install cargo-ndk --locked
+
+      - name: Set up Android NDK
+        uses: nttld/setup-ndk@v1
+        id: ndk
+        with:
+          ndk-version: r28b
 
       - name: Set up keystore
         env:
@@ -148,9 +162,9 @@ jobs:
           KEYSTORE_PASSWORD: ${{ secrets.ANDROID_KEYSTORE_PASSWORD }}
           KEY_ALIAS: ${{ secrets.ANDROID_KEY_ALIAS }}
         run: |
-          KEYSTORE_PATH="$GITHUB_WORKSPACE/lsposed/release.jks"
+          KEYSTORE_PATH="${{ github.workspace }}/lsposed/release.jks"
           echo "$KEYSTORE_BASE64" | base64 --decode > "$KEYSTORE_PATH"
-          cat > "$GITHUB_WORKSPACE/lsposed/keystore.properties" <<EOF
+          cat > lsposed/keystore.properties <<EOF
           password=$KEYSTORE_PASSWORD
           keyAlias=$KEY_ALIAS
           storeFile=$KEYSTORE_PATH
@@ -158,7 +172,9 @@ jobs:
 
       - name: Build APK
         run: |
-          cd "$GITHUB_WORKSPACE/lsposed" && ./gradlew --no-daemon assembleRelease
+          . "$HOME/.cargo/env"
+          export ANDROID_NDK_HOME=${{ steps.ndk.outputs.ndk-path }}
+          cd lsposed && ./gradlew --no-daemon assembleRelease
           cp app/build/outputs/apk/release/app-release.apk "$GITHUB_WORKSPACE/vpnhide-lsposed.apk"
 
       - name: Upload artifact