diff --git a/.gitea/workflows/project-ci.yml b/.gitea/workflows/project-ci.yml
index e36490c9a..11c6f8543 100644
--- a/.gitea/workflows/project-ci.yml
+++ b/.gitea/workflows/project-ci.yml
@@ -326,18 +326,29 @@ jobs:
             patchelf \
             pkg-config \
             wget
-          bwrap --die-with-parent \
-            --unshare-all \
-            --unshare-user \
-            --disable-userns \
-            --assert-userns-disabled \
-            --cap-drop ALL \
-            --clearenv \
-            --ro-bind /usr /usr \
-            --proc /proc \
-            --dev /dev \
-            --tmpfs /tmp \
-            -- /usr/bin/true
+          bwrap_args=(
+            --die-with-parent
+            --unshare-all
+            --unshare-user
+            --disable-userns
+            --assert-userns-disabled
+            --cap-drop ALL
+            --clearenv
+            --ro-bind /usr /usr
+          )
+          for merged_path in /bin /sbin /lib /lib64; do
+            if [[ -L "${merged_path}" ]]; then
+              bwrap_args+=(--symlink "$(readlink "${merged_path}")" "${merged_path}")
+            fi
+          done
+          bwrap_args+=(
+            --proc /proc
+            --dev /dev
+            --tmpfs /tmp
+            --
+            /usr/bin/true
+          )
+          bwrap "${bwrap_args[@]}"
 
       - name: Set up Node.js 22
         uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4