diff --git a/.github/workflows/cli-ci.yml b/.github/workflows/cli-ci.yml
index b560a5670..9d223e5ac 100644
--- a/.github/workflows/cli-ci.yml
+++ b/.github/workflows/cli-ci.yml
@@ -175,8 +175,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      # The runner image carries Google's chrome apt source, whose mirror serves a stale index a
+      # few times a day ("Hash Sum mismatch") and fails the whole update; expect comes from ubuntu.
       - name: Install expect (TTY persona tests)
-        run: sudo apt-get update && sudo apt-get install -y expect
+        run: |
+          sudo rm -f /etc/apt/sources.list.d/google-chrome.list /etc/apt/sources.list.d/google-chrome.sources
+          sudo apt-get update && sudo apt-get install -y --no-install-recommends expect
       - name: Install pnpm
         run: corepack enable
       - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0