diff --git a/.gitea/workflows/ui-release.yaml b/.gitea/workflows/ui-release.yaml
index e6f072f..efca94b 100644
--- a/.gitea/workflows/ui-release.yaml
+++ b/.gitea/workflows/ui-release.yaml
@@ -21,6 +21,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+        with:
+          submodules: recursive
 
       - name: Set up Go
         uses: actions/setup-go@v5
diff --git a/.gitea/workflows/ui-test.yaml b/.gitea/workflows/ui-test.yaml
index 5334a39..30bbe3d 100644
--- a/.gitea/workflows/ui-test.yaml
+++ b/.gitea/workflows/ui-test.yaml
@@ -39,6 +39,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+        with:
+          submodules: recursive
 
       - name: Set up Go
         uses: actions/setup-go@v5
diff --git a/pkg/util/fs_unix_test.go b/pkg/util/fs_unix_test.go
index a45ecb4..7777bee 100644
--- a/pkg/util/fs_unix_test.go
+++ b/pkg/util/fs_unix_test.go
@@ -4,6 +4,7 @@ package util_test
 
 import (
 	"galaxy/util"
+	"os"
 	"testing"
 
 	"github.com/stretchr/testify/assert"
@@ -16,6 +17,9 @@ func TestWritable(t *testing.T) {
 	assert.NoError(t, err, "directory writable check")
 	assert.True(t, ok, "directory should be writable")
 
+	if os.Geteuid() == 0 {
+		t.Skip("/usr/lib writability check is meaningful only for unprivileged users; root inside containers can write everywhere")
+	}
 	ok, err = util.Writable(nonWritableDir)
 	assert.NoError(t, err, "system directory writable check")
 	assert.False(t, ok, "system directory should not be writable")