diff --git a/.github/glibcxx_ubuntu64b_log_expected_warnings b/.github/glibcxx_ubuntu64b_log_expected_warnings
index 4a7e11096785..b380ee1047b1 100644
--- a/.github/glibcxx_ubuntu64b_log_expected_warnings
+++ b/.github/glibcxx_ubuntu64b_log_expected_warnings
@@ -196,8 +196,8 @@
 ../../libcpp/macro.cc:214:34: warning: format not a string literal and no format arguments [-Wformat-security]
 ../../libcpp/macro.cc:3811:25: warning: format not a string literal and no format arguments [-Wformat-security]
 ../../libcpp/macro.cc:3826:25: warning: format not a string literal and no format arguments [-Wformat-security]
-/home/runner/work/gccrs/gccrs/gccrs-build/x86_64-pc-linux-gnu/32/libssp/../../../../libssp/gets-chk.c:73: warning: the `gets' function is dangerous and should not be used.
-/home/runner/work/gccrs/gccrs/gccrs-build/x86_64-pc-linux-gnu/libssp/../../../libssp/gets-chk.c:73: warning: the `gets' function is dangerous and should not be used.
+/__w/gccrs/gccrs/gccrs-build/x86_64-pc-linux-gnu/32/libssp/../../../../libssp/gets-chk.c:73: warning: the `gets' function is dangerous and should not be used.
+/__w/gccrs/gccrs/gccrs-build/x86_64-pc-linux-gnu/libssp/../../../libssp/gets-chk.c:73: warning: the `gets' function is dangerous and should not be used.
 gengtype-lex.cc:357:15: warning: this statement may fall through [-Wimplicit-fallthrough=]
 gengtype-lex.cc:357:15: warning: this statement may fall through [-Wimplicit-fallthrough=]
 gengtype-lex.cc:357:15: warning: this statement may fall through [-Wimplicit-fallthrough=]
diff --git a/.github/log_expected_warnings b/.github/log_expected_warnings
index 427a2e8cc37f..b5d4907a6cda 100644
--- a/.github/log_expected_warnings
+++ b/.github/log_expected_warnings
@@ -221,8 +221,8 @@
 ../../libcpp/macro.cc:214:34: warning: format not a string literal and no format arguments [-Wformat-security]
 ../../libcpp/macro.cc:3811:25: warning: format not a string literal and no format arguments [-Wformat-security]
 ../../libcpp/macro.cc:3826:25: warning: format not a string literal and no format arguments [-Wformat-security]
-/home/runner/work/gccrs/gccrs/gccrs-build/x86_64-pc-linux-gnu/32/libssp/../../../../libssp/gets-chk.c:73: warning: the `gets' function is dangerous and should not be used.
-/home/runner/work/gccrs/gccrs/gccrs-build/x86_64-pc-linux-gnu/libssp/../../../libssp/gets-chk.c:73: warning: the `gets' function is dangerous and should not be used.
+/__w/gccrs/gccrs/gccrs-build/x86_64-pc-linux-gnu/32/libssp/../../../../libssp/gets-chk.c:73: warning: the `gets' function is dangerous and should not be used.
+/__w/gccrs/gccrs/gccrs-build/x86_64-pc-linux-gnu/libssp/../../../libssp/gets-chk.c:73: warning: the `gets' function is dangerous and should not be used.
 gengtype-lex.cc:357:15: warning: this statement may fall through [-Wimplicit-fallthrough=]
 gengtype-lex.cc:357:15: warning: this statement may fall through [-Wimplicit-fallthrough=]
 gengtype-lex.cc:357:15: warning: this statement may fall through [-Wimplicit-fallthrough=]
diff --git a/.github/workflows/ccpp.yml b/.github/workflows/ccpp.yml
index 9762a0a1acd6..8e90b50040d8 100644
--- a/.github/workflows/ccpp.yml
+++ b/.github/workflows/ccpp.yml
@@ -19,15 +19,17 @@ jobs:
       # Force locale, in particular for reproducible results re '.github/log_expected_warnings' (see below).
       LC_ALL: C.UTF-8
 
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-latest
+    container: ubuntu:25.04
 
     steps:
     - uses: actions/checkout@v4
 
     - name: Install Deps
       run: |
-          sudo apt-get update;
-          sudo apt-get install -y \
+          apt-get update;
+          DEBIAN_FRONTEND=noninteractive \
+          apt-get install -y \
                   automake \
                   autoconf \
                   libtool \
@@ -40,10 +42,15 @@ jobs:
                   build-essential \
                   gcc-multilib \
                   g++-multilib \
-                  dejagnu;
+                  dejagnu \
+                  curl \
+                  nftables;
           # install Rust directly using rustup
           curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --default-toolchain=1.72.0;
 
+    - name: Disable Networking
+      run: nft add rule filter output drop
+
     - name: Make Source Read-Only
       run: chmod -R a-w ./*
 
@@ -51,6 +58,8 @@ jobs:
       run: |
            mkdir -p gccrs-build;
            cd gccrs-build;
+           # Add cargo to our path quickly
+           . "$HOME/.cargo/env";
            ../configure \
                --enable-languages=rust \
                --disable-bootstrap \
@@ -63,7 +72,7 @@ jobs:
            # Add cargo to our path quickly
            . "$HOME/.cargo/env"; \
            # Build without network access
-           unshare --net --ipc -r /bin/bash -c "make -Otarget -j $(nproc) 2>&1 | tee log ; exit \${PIPESTATUS[0]}"
+           make -Otarget -j $(nproc) 2>&1 | tee log
 
     - name: Check for new warnings
       run: |
@@ -104,15 +113,17 @@ jobs:
       # Force locale, in particular for reproducible results re '.github/log_expected_warnings' (see below).
       LC_ALL: C.UTF-8
 
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-latest
+    container: ubuntu:25.04
 
     steps:
     - uses: actions/checkout@v4
 
     - name: Install Deps
       run: |
-          sudo apt-get update;
-          sudo apt-get install -y \
+          apt-get update;
+          DEBIAN_FRONTEND=noninteractive \
+          apt-get install -y \
                   automake \
                   autoconf \
                   libtool \
@@ -125,10 +136,15 @@ jobs:
                   build-essential \
                   gcc-multilib \
                   g++-multilib \
-                  dejagnu;
+                  dejagnu \
+                  curl \
+                  nftables;
           # install Rust directly using rustup
           curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --default-toolchain=1.72.0;
 
+    - name: Disable Networking
+      run: nft add rule filter output drop
+
     - name: Make Source Read-Only
       run: chmod -R a-w ./*
 
@@ -136,6 +152,8 @@ jobs:
       run: |
            mkdir -p gccrs-build;
            cd gccrs-build;
+           # Add cargo to our path quickly
+           . "$HOME/.cargo/env";
            export CXXFLAGS="$CXXFLAGS -D_GLIBCXX_ASSERTIONS"
            ../configure \
                --enable-languages=rust \
@@ -189,15 +207,17 @@ jobs:
       # Force locale, in particular for reproducible results re '.github/log_expected_warnings' (see below).
       LC_ALL: C.UTF-8
 
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-latest
+    container: ubuntu:25.04
 
     steps:
     - uses: actions/checkout@v4
 
     - name: Install Deps
       run: |
-          sudo apt-get update;
-          sudo apt-get install -y \
+          apt-get update;
+          DEBIAN_FRONTEND=noninteractive \
+          apt-get install -y \
                   automake \
                   autoconf \
                   libtool \
@@ -210,10 +230,15 @@ jobs:
                   build-essential \
                   gcc-multilib \
                   g++-multilib \
-                  dejagnu;
+                  dejagnu \
+                  curl \
+                  nftables;
           # install Rust directly using rustup
           curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --default-toolchain=1.72.0;
 
+    - name: Disable Networking
+      run: nft add rule filter output drop
+
     - name: Make Source Read-Only
       run: chmod -R a-w ./*
 
@@ -221,6 +246,8 @@ jobs:
       run: |
            mkdir -p gccrs-build;
            cd gccrs-build;
+           # Add cargo to our path quickly
+           . "$HOME/.cargo/env";
            ../configure \
                --enable-languages=rust \
                --disable-bootstrap \