CI: must be before install