ci: use ubuntu-24.04 runners

Github actions runner-images install buildah from the distro. 22.04
has an ancient version and is known not to work.

Bump to the latest 24.04 runners and at the same time, drop the
BUILDAH_RUNTIME override.

Signed-off-by: Mikko Ylinen <[email protected]>

Author: mythi

.github/workflows/lib-build.yaml

@@ -9,7 +9,7 @@ permissions:
 jobs:
   image:
     name: Build image
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     strategy:
       matrix:
         image:

.github/workflows/lib-codeql.yaml

@@ -10,7 +10,7 @@ permissions:
 jobs:
   analyze:
     name: Analysis
-    runs-on: 'ubuntu-22.04'
+    runs-on: ubuntu-24.04
     timeout-minutes: 360
 
     permissions:

.github/workflows/lib-publish.yaml

@@ -15,7 +15,7 @@ permissions:
 jobs:
   image:
     name: Build image
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     strategy:
       fail-fast: false
       matrix:

.github/workflows/lib-scorecard.yaml

@@ -9,7 +9,7 @@ permissions:
 jobs:
   analysis:
     name: Analysis
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
 
     permissions:
       security-events: write

.github/workflows/lib-trivy.yaml

@@ -27,7 +27,7 @@ jobs:
   trivy-scan-deployments:
     name: Scan deployments
     if: ${{ inputs.deployments }}
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
     - name: Checkout
       uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
@@ -45,7 +45,7 @@ jobs:
   trivy-scan-dockerfiles:
     name: Scan Dockerfiles
     if: ${{ inputs.dockerfiles }}
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
     - name: Checkout
       uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
@@ -58,7 +58,7 @@ jobs:
         severity: CRITICAL,HIGH
 
   trivy-scan-licenses:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     name: Scan licenses
     steps:
     - name: Checkout
@@ -75,7 +75,7 @@ jobs:
   trivy-scan-vulns:
     permissions:
       security-events: write
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     name: Scan vulnerabilities
     steps:
     - name: Checkout

.github/workflows/lib-validate.yaml

@@ -8,7 +8,7 @@ permissions:
 jobs:
   docs:
     name: Check docs are buildable
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
     - name: Install dependencies
       run: |
@@ -32,7 +32,7 @@ jobs:
     permissions:
       pull-requests: read # for golangci/golangci-lint-action to fetch pull requests
     name: lint
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
       - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5
@@ -46,7 +46,7 @@ jobs:
           args: -v --timeout 5m
   build:
     name: Build and check device plugins
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
       - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5
@@ -63,7 +63,7 @@ jobs:
       #  run: bash <(curl -s https://codecov.io/bash)
   envtest:
     name: Test APIs using envtest
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     strategy:
       matrix:
         version:

.github/workflows/release.yaml

@@ -10,7 +10,7 @@ permissions:
 jobs:
   tag_fix:
     name: Prepare image tag
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     outputs:
       fixed_tag: ${{ steps.fix.outputs.tag }}
     env:

build/docker/build-image.sh

@@ -33,7 +33,7 @@ BUILD_ARGS="${BUILD_ARGS} --build-arg FINAL_BASE=gcr.io/distroless/static"
 if [ -z "${BUILDER}" -o "${BUILDER}" = 'docker' -o "${BUILDER}" = 'podman' ] ; then
     ${BUILDER} build --pull -t ${IMG}:${TAG} ${BUILD_ARGS} -f ${DOCKERFILE} .
 elif [ "${BUILDER}" = 'buildah' ] ; then
-    BUILDAH_RUNTIME=runc buildah bud --pull-always -t ${IMG}:${TAG} ${BUILD_ARGS} -f ${DOCKERFILE} .
+    buildah bud --pull-always -t ${IMG}:${TAG} ${BUILD_ARGS} -f ${DOCKERFILE} .
 else
     (>&2 echo "Unknown builder ${BUILDER}")
     exit 1

demo/build-image.sh

@@ -20,7 +20,7 @@ TAG=${TAG:-devel}
 if [ -z "$BUILDER" -o "$BUILDER" = 'docker' -o "$BUILDER" = 'podman' ] ; then
     ${BUILDER} build --pull -t ${IMG}:${TAG} "$CWD/$DIR/"
 elif [ "$BUILDER" = 'buildah' ] ; then
-    BUILDAH_RUNTIME=runc buildah bud --pull-always -t ${IMG}:${TAG} "$CWD/$DIR/"
+    buildah bud --pull-always -t ${IMG}:${TAG} "$CWD/$DIR/"
 else
     (>&2 echo "Unknown builder $BUILDER")
     exit 1