Bare runners are real hosts; pacman -Sy in CI mutates them (and can leave a partial-sync state). Now the ephemeral container runner installs its deps as before, while the bare (aarch64/klokka) runner is only checked for libpipewire+clang and fails with a clear message if they're absent. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01GLUwWE2KmFPzhKaf67tWbx