I use this script for provisioning runners (with org-level single use access token).

https://github.com/vbem/multi-runners

The motivation is simply to have the runners share a local docker build cache rather than pushing and pulling cache from registry which is a ridiculous best practice.