fix(ci): prioritize PPA chromium over snap wrapper and pass explicit chrome path to lhci

.gitea/workflows/deploy.yml

@@ -358,29 +358,28 @@ jobs:
             echo "🎯 Debian detected - installing native chromium"
             apt-get install -y chromium
           else
-            echo "🎯 Ubuntu detected - adding xtradeb PPA for native chromium (non-snap)"
+            echo "🎯 Ubuntu detected - adding xtradeb PPA"
             mkdir -p /etc/apt/keyrings
-            # Robust key fetch with retries and fallback servers
-            for server in "hkp://keyserver.ubuntu.com:80" "hkp://keyserver.ubuntu.com:11371"; do
-              echo "Trying keyserver: $server"
-              if gpg --homedir /tmp --no-default-keyring --keyring /tmp/xtradeb-temp.gpg --keyserver "$server" --recv-keys 290D73D2240900B5; then
-                gpg --homedir /tmp --no-default-keyring --keyring /tmp/xtradeb-temp.gpg --export > /etc/apt/keyrings/xtradeb.gpg
-                break
-              fi
-            done
             
-            if [ -f /etc/apt/keyrings/xtradeb.gpg ]; then
-              echo "deb [signed-by=/etc/apt/keyrings/xtradeb.gpg] http://ppa.launchpad.net/xtradeb/apps/ubuntu $CODENAME main" > /etc/apt/sources.list.d/xtradeb-ppa.list
-              apt-get update
-              apt-get install -y chromium || apt-get install -y chromium-browser
-            else
-              echo "⚠️ Could not fetch GPG key, trying fallback install..."
-              apt-get install -y chromium || apt-get install -y chromium-browser
-            fi
+            # Use direct HTTPS fetch for GPG key (most reliable in Docker)
+            wget -qO- "https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x290d73d2240900b5" | gpg --dearmor > /etc/apt/keyrings/xtradeb.gpg || true
+            
+            echo "deb [signed-by=/etc/apt/keyrings/xtradeb.gpg] http://ppa.launchpad.net/xtradeb/apps/ubuntu $CODENAME main" > /etc/apt/sources.list.d/xtradeb-ppa.list
+            
+            # PRIORITY PINNING: Force Apt to use the PPA version over the Snap-filler
+            printf "Package: *\nPin: release o=LP-PPA-xtradeb-apps\nPin-Priority: 1001\n" > /etc/apt/preferences.d/xtradeb
+            
+            apt-get update
+            apt-get install -y --allow-downgrades chromium || apt-get install -y chromium-browser
           fi
           
-          # Ensure consistent paths for Lighthouse
-          [ -f /usr/bin/chromium ] && ln -sf /usr/bin/chromium /usr/bin/chromium-browser || true
+          # Force clean paths (remove existing dead links/files if they are snap wrappers)
+          rm -f /usr/bin/google-chrome /usr/bin/chromium-browser
+          [ -f /usr/bin/chromium ] && ln -sf /usr/bin/chromium /usr/bin/google-chrome
+          [ -f /usr/bin/chromium ] && ln -sf /usr/bin/chromium /usr/bin/chromium-browser
+          
+          echo "✅ Binary check:"
+          ls -l /usr/bin/chromium* /usr/bin/google-chrome || true
         continue-on-error: true
 
       - name: 🧪 Run PageSpeed (Lighthouse)