Update CI

Signed-off-by: FedericoBruzzone <federico.bruzzone.i@gmail.com>

Author: FedericoBruzzone

.github/workflows/ubuntu-x86.yml

@@ -24,19 +24,28 @@ jobs:
           CC: ${{ matrix.compiler.CC }}
           CXX: ${{ matrix.compiler.CXX }}
         run: |
-          wget -qO- https://apt.llvm.org/llvm-snapshot.gpg.key | sudo gpg --dearmor -o /usr/share/keyrings/llvm-keyring.gpg
+          sudo apt-get update -y
+          sudo apt-get install -y --no-install-recommends ca-certificates wget gnupg lsb-release software-properties-common python3-pip python3-setuptools
 
-          echo "deb [signed-by=/usr/share/keyrings/llvm-keyring.gpg] http://apt.llvm.org/jammy/ llvm-toolchain-jammy-21 main" | sudo tee /etc/apt/sources.list.d/llvm.list
+          # Install LLVM APT repo key using a keyring (apt-key is deprecated)
+          wget -qO- https://apt.llvm.org/llvm-snapshot.gpg.key \
+            | sudo gpg --dearmor -o /usr/share/keyrings/llvm-archive-keyring.gpg
 
-          sudo apt-get update
-          sudo apt-get install -y --fix-missing \
-            llvm-21 \
-            llvm-21-dev \
-            llvm-21-tools \
-            clang-21 \
-            python3-setuptools
+          # Add LLVM repo using signed-by (prevents legacy trusted.gpg warnings)
+          echo "deb [signed-by=/usr/share/keyrings/llvm-archive-keyring.gpg] http://apt.llvm.org/jammy/ llvm-toolchain-jammy-21 main" \
+            | sudo tee /etc/apt/sources.list.d/llvm-toolchain-jammy-21.list > /dev/null
 
-          sudo pip3 install lit
+          # The LLVM repo is snapshot-based; refresh immediately before install to reduce 404 races.
+          sudo apt-get clean
+          sudo apt-get update -y
+
+          # Install with retries; if we hit a 404 due to repo rotation, refresh indexes and retry once.
+          if ! sudo apt-get -o Acquire::Retries=5 install -y --no-install-recommends llvm-21 llvm-21-dev llvm-21-tools clang-21; then
+            sudo apt-get update -y
+            sudo apt-get -o Acquire::Retries=5 install -y --no-install-recommends llvm-21 llvm-21-dev llvm-21-tools clang-21
+          fi
+
+          sudo pip3 install --no-cache-dir lit
       - name: Build `llvm-pass-template`
         run: |
           cd $GITHUB_WORKSPACE