feat: [NODE-1355] Upgrade build container to 24.04

.devcontainer/devcontainer.json

@@ -1,5 +1,5 @@
 {
-  "image": "ghcr.io/dfinity/ic-build@sha256:2c6fc0aa92ada647e42790cbdac3199b27a1407d9e90ff6e5a97a69acac24041",
+  "image": "ghcr.io/dfinity/ic-build@sha256:55f9fa3b28f66890a2f083e7c7b0a49ab2254a25a9cc0a9aa930f32f52a86d01",
   "remoteUser": "ubuntu",
   "privileged": true,
   "runArgs": [

.github/workflows-source/ci-main.yml

@@ -34,7 +34,7 @@ env:
 
 anchors:
   image: &image
-    image: ghcr.io/dfinity/ic-build@sha256:2c6fc0aa92ada647e42790cbdac3199b27a1407d9e90ff6e5a97a69acac24041
+    image: ghcr.io/dfinity/ic-build@sha256:55f9fa3b28f66890a2f083e7c7b0a49ab2254a25a9cc0a9aa930f32f52a86d01
   dind-large-setup: &dind-large-setup
     runs-on:
       labels: dind-large

.github/workflows-source/ci-pr-only.yml

@@ -18,7 +18,7 @@ env:
 
 anchors:
   image: &image
-    image: ghcr.io/dfinity/ic-build@sha256:2c6fc0aa92ada647e42790cbdac3199b27a1407d9e90ff6e5a97a69acac24041
+    image: ghcr.io/dfinity/ic-build@sha256:55f9fa3b28f66890a2f083e7c7b0a49ab2254a25a9cc0a9aa930f32f52a86d01
   dind-small-setup: &dind-small-setup
     timeout-minutes: 30
     runs-on:

.github/workflows-source/release-testing.yml

@@ -25,7 +25,7 @@ env:
 
 anchors:
   image: &image
-    image: ghcr.io/dfinity/ic-build@sha256:2c6fc0aa92ada647e42790cbdac3199b27a1407d9e90ff6e5a97a69acac24041
+    image: ghcr.io/dfinity/ic-build@sha256:55f9fa3b28f66890a2f083e7c7b0a49ab2254a25a9cc0a9aa930f32f52a86d01
   dind-large-setup: &dind-large-setup
     runs-on:
       group: zh1

.github/workflows-source/schedule-daily.yml

@@ -18,7 +18,7 @@ env:
 
 anchors:
   image: &image
-    image: ghcr.io/dfinity/ic-build@sha256:2c6fc0aa92ada647e42790cbdac3199b27a1407d9e90ff6e5a97a69acac24041
+    image: ghcr.io/dfinity/ic-build@sha256:55f9fa3b28f66890a2f083e7c7b0a49ab2254a25a9cc0a9aa930f32f52a86d01
   dind-large-setup: &dind-large-setup
     runs-on:
       group: zh1

.github/workflows-source/schedule-hourly.yml

@@ -18,7 +18,7 @@ env:
 
 anchors:
   image: &image
-    image: ghcr.io/dfinity/ic-build@sha256:2c6fc0aa92ada647e42790cbdac3199b27a1407d9e90ff6e5a97a69acac24041
+    image: ghcr.io/dfinity/ic-build@sha256:55f9fa3b28f66890a2f083e7c7b0a49ab2254a25a9cc0a9aa930f32f52a86d01
   dind-large-setup: &dind-large-setup
     runs-on:
       labels: dind-large

.github/workflows/ci-main.yml

@@ -31,7 +31,7 @@ jobs:
   bazel-test-all:
     name: Bazel Test All
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:2c6fc0aa92ada647e42790cbdac3199b27a1407d9e90ff6e5a97a69acac24041
+      image: ghcr.io/dfinity/ic-build@sha256:55f9fa3b28f66890a2f083e7c7b0a49ab2254a25a9cc0a9aa930f32f52a86d01
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp -v /ceph-s3-info:/ceph-s3-info
     timeout-minutes: 90
@@ -104,7 +104,7 @@ jobs:
     runs-on:
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:2c6fc0aa92ada647e42790cbdac3199b27a1407d9e90ff6e5a97a69acac24041
+      image: ghcr.io/dfinity/ic-build@sha256:55f9fa3b28f66890a2f083e7c7b0a49ab2254a25a9cc0a9aa930f32f52a86d01
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp -v /ceph-s3-info:/ceph-s3-info
     timeout-minutes: 90
@@ -201,7 +201,7 @@ jobs:
     runs-on:
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:2c6fc0aa92ada647e42790cbdac3199b27a1407d9e90ff6e5a97a69acac24041
+      image: ghcr.io/dfinity/ic-build@sha256:55f9fa3b28f66890a2f083e7c7b0a49ab2254a25a9cc0a9aa930f32f52a86d01
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp -v /ceph-s3-info:/ceph-s3-info
     timeout-minutes: 90
@@ -241,7 +241,7 @@ jobs:
     runs-on:
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:2c6fc0aa92ada647e42790cbdac3199b27a1407d9e90ff6e5a97a69acac24041
+      image: ghcr.io/dfinity/ic-build@sha256:55f9fa3b28f66890a2f083e7c7b0a49ab2254a25a9cc0a9aa930f32f52a86d01
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp -v /ceph-s3-info:/ceph-s3-info
     timeout-minutes: 90
@@ -281,7 +281,7 @@ jobs:
     runs-on:
       labels: dind-small
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:2c6fc0aa92ada647e42790cbdac3199b27a1407d9e90ff6e5a97a69acac24041
+      image: ghcr.io/dfinity/ic-build@sha256:55f9fa3b28f66890a2f083e7c7b0a49ab2254a25a9cc0a9aa930f32f52a86d01
     timeout-minutes: 30
     steps:
       - name: Checkout
@@ -312,7 +312,7 @@ jobs:
     runs-on:
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:2c6fc0aa92ada647e42790cbdac3199b27a1407d9e90ff6e5a97a69acac24041
+      image: ghcr.io/dfinity/ic-build@sha256:55f9fa3b28f66890a2f083e7c7b0a49ab2254a25a9cc0a9aa930f32f52a86d01
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp -v /ceph-s3-info:/ceph-s3-info
     timeout-minutes: 90
@@ -417,7 +417,7 @@ jobs:
     runs-on:
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:2c6fc0aa92ada647e42790cbdac3199b27a1407d9e90ff6e5a97a69acac24041
+      image: ghcr.io/dfinity/ic-build@sha256:55f9fa3b28f66890a2f083e7c7b0a49ab2254a25a9cc0a9aa930f32f52a86d01
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp -v /ceph-s3-info:/ceph-s3-info
     timeout-minutes: 90
@@ -456,7 +456,7 @@ jobs:
     runs-on:
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:2c6fc0aa92ada647e42790cbdac3199b27a1407d9e90ff6e5a97a69acac24041
+      image: ghcr.io/dfinity/ic-build@sha256:55f9fa3b28f66890a2f083e7c7b0a49ab2254a25a9cc0a9aa930f32f52a86d01
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp -v /ceph-s3-info:/ceph-s3-info
     timeout-minutes: 90

.github/workflows/ci-pr-only.yml

@@ -20,7 +20,7 @@ jobs:
     runs-on:
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:2c6fc0aa92ada647e42790cbdac3199b27a1407d9e90ff6e5a97a69acac24041
+      image: ghcr.io/dfinity/ic-build@sha256:55f9fa3b28f66890a2f083e7c7b0a49ab2254a25a9cc0a9aa930f32f52a86d01
       options: >-
         -e NODE_NAME
     steps:
@@ -65,7 +65,7 @@ jobs:
     runs-on:
       labels: dind-small
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:2c6fc0aa92ada647e42790cbdac3199b27a1407d9e90ff6e5a97a69acac24041
+      image: ghcr.io/dfinity/ic-build@sha256:55f9fa3b28f66890a2f083e7c7b0a49ab2254a25a9cc0a9aa930f32f52a86d01
       options: >-
         -e NODE_NAME
     steps:
@@ -103,7 +103,7 @@ jobs:
     runs-on:
       labels: dind-small
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:2c6fc0aa92ada647e42790cbdac3199b27a1407d9e90ff6e5a97a69acac24041
+      image: ghcr.io/dfinity/ic-build@sha256:55f9fa3b28f66890a2f083e7c7b0a49ab2254a25a9cc0a9aa930f32f52a86d01
       options: >-
         -e NODE_NAME
     steps:
@@ -120,7 +120,7 @@ jobs:
     runs-on:
       labels: dind-small
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:2c6fc0aa92ada647e42790cbdac3199b27a1407d9e90ff6e5a97a69acac24041
+      image: ghcr.io/dfinity/ic-build@sha256:55f9fa3b28f66890a2f083e7c7b0a49ab2254a25a9cc0a9aa930f32f52a86d01
       options: >-
         -e NODE_NAME
     timeout-minutes: 60

.github/workflows/release-testing.yml

@@ -30,7 +30,7 @@ jobs:
       group: zh1
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:2c6fc0aa92ada647e42790cbdac3199b27a1407d9e90ff6e5a97a69acac24041
+      image: ghcr.io/dfinity/ic-build@sha256:55f9fa3b28f66890a2f083e7c7b0a49ab2254a25a9cc0a9aa930f32f52a86d01
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp
     timeout-minutes: 180 # 3 hours
@@ -78,7 +78,7 @@ jobs:
       group: zh1
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:2c6fc0aa92ada647e42790cbdac3199b27a1407d9e90ff6e5a97a69acac24041
+      image: ghcr.io/dfinity/ic-build@sha256:55f9fa3b28f66890a2f083e7c7b0a49ab2254a25a9cc0a9aa930f32f52a86d01
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp
     timeout-minutes: 180 # 3 hours
@@ -126,7 +126,7 @@ jobs:
       group: zh1
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:2c6fc0aa92ada647e42790cbdac3199b27a1407d9e90ff6e5a97a69acac24041
+      image: ghcr.io/dfinity/ic-build@sha256:55f9fa3b28f66890a2f083e7c7b0a49ab2254a25a9cc0a9aa930f32f52a86d01
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp
     timeout-minutes: 90
@@ -174,7 +174,7 @@ jobs:
       group: zh1
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:2c6fc0aa92ada647e42790cbdac3199b27a1407d9e90ff6e5a97a69acac24041
+      image: ghcr.io/dfinity/ic-build@sha256:55f9fa3b28f66890a2f083e7c7b0a49ab2254a25a9cc0a9aa930f32f52a86d01
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp
     timeout-minutes: 60
@@ -222,7 +222,7 @@ jobs:
       group: zh1
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:2c6fc0aa92ada647e42790cbdac3199b27a1407d9e90ff6e5a97a69acac24041
+      image: ghcr.io/dfinity/ic-build@sha256:55f9fa3b28f66890a2f083e7c7b0a49ab2254a25a9cc0a9aa930f32f52a86d01
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp
     timeout-minutes: 180 # 3 hours
@@ -250,7 +250,7 @@ jobs:
       group: zh1
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:2c6fc0aa92ada647e42790cbdac3199b27a1407d9e90ff6e5a97a69acac24041
+      image: ghcr.io/dfinity/ic-build@sha256:55f9fa3b28f66890a2f083e7c7b0a49ab2254a25a9cc0a9aa930f32f52a86d01
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp
     timeout-minutes: 180 # 3 hours

.github/workflows/rosetta-release.yml

@@ -22,7 +22,7 @@ jobs:
     runs-on:
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:2c6fc0aa92ada647e42790cbdac3199b27a1407d9e90ff6e5a97a69acac24041
+      image: ghcr.io/dfinity/ic-build@sha256:55f9fa3b28f66890a2f083e7c7b0a49ab2254a25a9cc0a9aa930f32f52a86d01
     steps:
       - name: Checkout
         uses: actions/checkout@v4

.github/workflows/schedule-daily.yml

@@ -17,7 +17,7 @@ jobs:
   bazel-test-bare-metal:
     name: Bazel Test Bare Metal
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:2c6fc0aa92ada647e42790cbdac3199b27a1407d9e90ff6e5a97a69acac24041
+      image: ghcr.io/dfinity/ic-build@sha256:55f9fa3b28f66890a2f083e7c7b0a49ab2254a25a9cc0a9aa930f32f52a86d01
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp
     timeout-minutes: 120
@@ -78,7 +78,7 @@ jobs:
       group: zh1
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:2c6fc0aa92ada647e42790cbdac3199b27a1407d9e90ff6e5a97a69acac24041
+      image: ghcr.io/dfinity/ic-build@sha256:55f9fa3b28f66890a2f083e7c7b0a49ab2254a25a9cc0a9aa930f32f52a86d01
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp
     timeout-minutes: 720 # 12 hours
@@ -125,7 +125,7 @@ jobs:
       group: zh1
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:2c6fc0aa92ada647e42790cbdac3199b27a1407d9e90ff6e5a97a69acac24041
+      image: ghcr.io/dfinity/ic-build@sha256:55f9fa3b28f66890a2f083e7c7b0a49ab2254a25a9cc0a9aa930f32f52a86d01
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp
     timeout-minutes: 20
@@ -172,7 +172,7 @@ jobs:
       group: zh1
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:2c6fc0aa92ada647e42790cbdac3199b27a1407d9e90ff6e5a97a69acac24041
+      image: ghcr.io/dfinity/ic-build@sha256:55f9fa3b28f66890a2f083e7c7b0a49ab2254a25a9cc0a9aa930f32f52a86d01
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp
     timeout-minutes: 480
@@ -224,7 +224,7 @@ jobs:
       group: zh1
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:2c6fc0aa92ada647e42790cbdac3199b27a1407d9e90ff6e5a97a69acac24041
+      image: ghcr.io/dfinity/ic-build@sha256:55f9fa3b28f66890a2f083e7c7b0a49ab2254a25a9cc0a9aa930f32f52a86d01
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp
     timeout-minutes: 60

.github/workflows/schedule-hourly.yml

@@ -19,7 +19,7 @@ jobs:
     runs-on:
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:2c6fc0aa92ada647e42790cbdac3199b27a1407d9e90ff6e5a97a69acac24041
+      image: ghcr.io/dfinity/ic-build@sha256:55f9fa3b28f66890a2f083e7c7b0a49ab2254a25a9cc0a9aa930f32f52a86d01
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp
     timeout-minutes: 120
@@ -61,7 +61,7 @@ jobs:
   bazel-system-test-hourly:
     name: Bazel System Tests Hourly
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:2c6fc0aa92ada647e42790cbdac3199b27a1407d9e90ff6e5a97a69acac24041
+      image: ghcr.io/dfinity/ic-build@sha256:55f9fa3b28f66890a2f083e7c7b0a49ab2254a25a9cc0a9aa930f32f52a86d01
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp
     timeout-minutes: 120
@@ -109,7 +109,7 @@ jobs:
     runs-on:
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:2c6fc0aa92ada647e42790cbdac3199b27a1407d9e90ff6e5a97a69acac24041
+      image: ghcr.io/dfinity/ic-build@sha256:55f9fa3b28f66890a2f083e7c7b0a49ab2254a25a9cc0a9aa930f32f52a86d01
       options: >-
         -e NODE_NAME --privileged --cgroupns host -v /cache:/cache -v /var/sysimage:/var/sysimage -v /var/tmp:/var/tmp
     timeout-minutes: 120

.github/workflows/schedule-rust-bench.yml

@@ -24,7 +24,7 @@ jobs:
       # see linux-x86-64 runner group
       labels: rust-benchmarks
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:2c6fc0aa92ada647e42790cbdac3199b27a1407d9e90ff6e5a97a69acac24041
+      image: ghcr.io/dfinity/ic-build@sha256:55f9fa3b28f66890a2f083e7c7b0a49ab2254a25a9cc0a9aa930f32f52a86d01
       # running on bare metal machine using ubuntu user
       options: --user ubuntu -v /cache:/cache
     timeout-minutes: 720 # 12 hours

.github/workflows/schedule-weekly.yml

@@ -14,7 +14,7 @@ jobs:
     runs-on:
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:2c6fc0aa92ada647e42790cbdac3199b27a1407d9e90ff6e5a97a69acac24041
+      image: ghcr.io/dfinity/ic-build@sha256:55f9fa3b28f66890a2f083e7c7b0a49ab2254a25a9cc0a9aa930f32f52a86d01
       options: >-
         -e NODE_NAME
         -v /cache:/cache

.github/workflows/system-tests-k8s.yml

@@ -49,7 +49,7 @@ jobs:
       group: ln1
       labels: dind-large
     container:
-      image: ghcr.io/dfinity/ic-build@sha256:2c6fc0aa92ada647e42790cbdac3199b27a1407d9e90ff6e5a97a69acac24041
+      image: ghcr.io/dfinity/ic-build@sha256:55f9fa3b28f66890a2f083e7c7b0a49ab2254a25a9cc0a9aa930f32f52a86d01
       options: >-
         -e NODE_NAME -e KUBECONFIG
         --privileged --cgroupns host

.pre-commit-config.yaml

@@ -66,15 +66,10 @@ repos:
     stages: [manual]
     pass_filenames: false
 
-- repo: https://github.com/willthames/ansible-lint.git
-  rev: v4.2.0
+- repo: https://github.com/ansible/ansible-lint.git
+  rev: v24.5.0
   hooks:
     - id: ansible-lint
       always_run: false
-      files: (^|/)testnet/.+\.(yaml|yml)$
-      exclude: |
-          (?x)^(
-              testnet/tests/.*|.*/docker-compose.yml|testnet/env/shared-config\.yml
-          )$
-      # To be uncommented upon moving to new ansible-lint
-      # args: ['-i', 'testnet/ansible/.ansible-lint-ignore', 'testnet/ansible']
+      files: (^|/)testnet/ansible/.+\.(yaml|yml)$
+      args: ['-i', 'testnet/ansible/.ansible-lint-ignore', 'testnet/ansible']

WORKSPACE.bazel

@@ -50,20 +50,6 @@ distroless_register_toolchains()
 
 load("@rules_distroless//apt:index.bzl", "deb_index")
 
-# Packageset based on an Ubuntu focal snapshot, see manifest file
-# for details
-# To update, comment out the `lock` field below and run:
-#   bazel run @focal//:lock
-deb_index(
-    name = "focal",
-    lock = "//bazel:focal.lock.json",
-    manifest = "//bazel:focal.yaml",
-)
-
-load("@focal//:packages.bzl", "focal_packages")
-
-focal_packages()
-
 # Packageset based on an Ubuntu noble snapshot, see manifest file
 # for details
 # To update, comment out the `lock` field below and run:
@@ -150,13 +136,6 @@ oci_pull(
 # used in various places as base
 oci_pull(
     name = "ubuntu_base",
-    image = "docker.io/library/ubuntu@sha256:965fbcae990b0467ed5657caceaec165018ef44a4d2d46c7cdea80a9dff0d1ea",
-    platforms = ["linux/amd64"],
-)
-
-# used in various places as base
-oci_pull(
-    name = "ubuntu_noble_base",
     image = "docker.io/library/ubuntu@sha256:77d57fd89366f7d16615794a5b53e124d742404e20f035c22032233f1826bd6a",
     platforms = ["linux/amd64"],
 )