diff --git a/pkgs/default.nix b/pkgs/default.nix
index f2b6069..7636c9b 100644
--- a/pkgs/default.nix
+++ b/pkgs/default.nix
@@ -20,4 +20,5 @@ with final; {
   ps-signal-desktop = writeShellScriptBin "signal-desktop" (import ./ps-signal-desktop.nix final);
 
   scan2paperless = writeShellScriptBin "scan2paperless" (import ./scan2paperless.nix final);
+  drone-docker-runner = writeShellScriptBin "drone-docker-runner" (import ./drone-docker-runner.nix final);
 }
diff --git a/pkgs/drone-docker-runner.nix b/pkgs/drone-docker-runner.nix
new file mode 100644
index 0000000..7d09853
--- /dev/null
+++ b/pkgs/drone-docker-runner.nix
@@ -0,0 +1,32 @@
+self: with self; ''
+  case $1 in
+    start)
+      ${self.docker}/bin/docker run --detach \
+        --volume=/var/run/docker.sock:/var/run/docker.sock \
+        --env=DRONE_RPC_PROTO=$DRONE_RPC_PROTO \
+        --env=DRONE_RPC_HOST=$DRONE_RPC_HOST \
+        --env=DRONE_RPC_SECRET=$(${self.libsecret}/bin/secret-tool lookup drone rpc-secret) \
+        --env=DRONE_RUNNER_CAPACITY=4 \
+        --env=DRONE_RUNNER_NAME=$(${self.inetutils}/bin/hostname) \
+        --publish=3000:3000 \
+        --restart=always \
+        --name=drone-runner \
+        drone/drone-runner-docker:1
+      ;;
+
+    stop)
+      ${self.docker}/bin/docker stop drone-runner
+      ${self.docker}/bin/docker rm drone-runner
+      ;;
+
+    logs)
+      ${self.docker}/bin/docker logs drone-runner
+      ;;
+
+    *)
+      echo "Usage: drone-docker-runner <start|stop|logs>"
+      exit 1;
+      ;;
+  esac
+
+''