From a01a9ee6f8f053d78dca5c108f010c64b5bc112c Mon Sep 17 00:00:00 2001
From: Kevin Longe <273747162+kvlonge@users.noreply.github.com>
Date: Wed, 11 Nov 2026 15:54:16 +0000
Subject: [PATCH] ci: install valgrind from archive.ubuntu.com when the Azure
 mirror fails

The runners' Azure Ubuntu mirror stopped resolving, so apt could not
download valgrind and Checks, tests and replay failed before any check
ran. Point apt at archive.ubuntu.com directly and retry the install up
to three times. apt still verifies the archive's signatures.
---
 .github/workflows/ci.yml | 15 ++++++++++++++-
 1 file changed, 14 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index cd96b0fbe..a6cc888e1 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -111,8 +111,21 @@ jobs:
       - name: Install development tools without the recorder
         run: uv sync --locked --no-group recorder
       # The instruction-count guard in check-ci runs its workloads under callgrind.
+      # The runner's Azure Ubuntu mirror sometimes stops resolving, so apt uses archive.ubuntu.com
+      # directly. apt still checks the archive's signatures.
       - name: Install valgrind
-        run: sudo apt-get update -q && sudo apt-get install -y -q --no-install-recommends valgrind
+        run: |
+          { sudo grep -rlE 'mirror\+file:|azure\.archive\.ubuntu\.com' /etc/apt || true; } | xargs -r sudo sed -i -E \
+            -e 's#mirror\+file:/etc/apt/apt-mirrors\.txt#http://archive.ubuntu.com/ubuntu/#g' \
+            -e 's#https?://azure\.archive\.ubuntu\.com/ubuntu/?#http://archive.ubuntu.com/ubuntu/#g'
+          for attempt in 1 2 3; do
+            if sudo apt-get update -q -o Acquire::Retries=3 &&
+              sudo apt-get install -y -q --no-install-recommends -o Acquire::Retries=3 valgrind; then
+              exit 0
+            fi
+            sleep $((attempt * 15))
+          done
+          exit 1
       # One gate build serves every step: check-ci, the Rust tests, the Python tests and the replay.
       - name: Run static checks and tests
         run: make check-merge test-python