I use Github actions in combination with Opentofu and private Github Container registry images to maintain my private server infrastructure. While building and pushing the image was not an issue, pulling the images on the remote host using the GITHUB_TOKEN provided in actions was hard. It took me way too long to figure this out, so this is a short write up for others who might struggle.