chore(ubuntu): Ubuntu 24.04 L3 Image (mozilla-releng#605)

Author: jwmoss

worker-images.yml

@@ -86,9 +86,12 @@ relsre-gw-fxci-gcp-2404-amd64-alpha:
 ubuntu-2404-headless-alpha:
   ## alpha pool that relsre can use to rebuild and test 2404 headless ubuntu images
   fxci-level1-gcp: projects/taskcluster-imaging/global/images/gw-fxci-gcp-l1-2404-amd64-headless-googlecompute-alpha
+  fxci-level3-gcp: projects/fxci-production-level3-workers/global/images/gw-fxci-gcp-l3-2404-amd64-headless-googlecompute-alpha
+
 ubuntu-2404-headless:
   ## Headless Image for Ubuntu 24.04
   fxci-level1-gcp: projects/taskcluster-imaging/global/images/gw-fxci-gcp-l1-2404-amd64-headless-googlecompute-2025-10-13
+  fxci-level3-gcp: projects/fxci-production-level3-workers/global/images/gw-fxci-gcp-l3-2404-amd64-headless-googlecompute-2025-10-27
 
 ubuntu-2404-headless-alpha-tc:
   ## alpha pool that tc can use to rebuild and test 2404 headless ubuntu images

worker-pools.yml

@@ -129,10 +129,11 @@ worker-defaults:
             wstAudience: firefoxcitc
       generic-worker/linux-d2g:
         genericWorker:
-          config:
+          config: &gw-config-d2g
             cleanUpTaskDirs: true
             disableReboots: false
             ed25519SigningKeyLocation: '/etc/generic-worker/ed25519_key'
+            enableRunTaskAsCurrentUser: false
             idleTimeoutSecs: 300  # 5 minutes
             livelogExecutable: /usr/local/bin/livelog
             numberOfTasksToRun: 0
@@ -144,9 +145,27 @@ worker-defaults:
             wstAudience: firefoxcitc
             d2gConfig:
               enableD2G: true
+              allowGPUs: false
+              allowHostSharedMemory: false
+              allowInteractive: true
+              allowKVM: false
+              allowLoopbackAudio: true
+              allowLoopbackVideo: false
               allowPrivileged: false
+      generic-worker/linux-d2g-trusted:
+        genericWorker:
+          config:
+            <<: *gw-config-d2g
+            d2gConfig:
+              enableD2G: true
+              allowGPUs: false
               allowHostSharedMemory: false
+              allowInteractive: false
               allowKVM: false
+              allowLoopbackAudio: false
+              allowLoopbackVideo: false
+              allowPrivileged: false
+            enableInteractive: false
 
 meta:
   - &default-gcp-regions [us-central1, us-west1]
@@ -426,17 +445,22 @@ pools:
     email_on_error: true
     variants:
       - pool-group: gecko-1
-    provider_id: fxci-level1-gcp
+        chain-of-trust: ''
+      - pool-group: gecko-3
+        chain-of-trust: trusted
+    provider_id:
+      by-chain-of-trust:
+        trusted: fxci-level3-gcp
+        default: fxci-level1-gcp
     config:
       minCapacity: 0
       maxCapacity: 50
       regions: *default-gcp-regions
       image: ubuntu-2404-headless-alpha
-      implementation: generic-worker/linux-d2g
+      implementation: generic-worker/linux-d2g-{chain-of-trust}
       worker-config:
         genericWorker:
           config:
-            enableInteractive: true
             headlessTasks: true
             downloadsDir: /home/generic-worker/downloads
             cachesDir: /home/generic-worker/caches
@@ -993,6 +1017,42 @@ pools:
             by-pool-group:
               gecko-[13]: 600
               default: 120
+  - pool_id: '{pool-group}/decision'
+    description: Worker for Firefox automation
+    owner: [email protected]
+    email_on_error: false
+    provider_id:
+      by-chain-of-trust:
+        trusted: fxci-level3-gcp
+        default: fxci-level1-gcp
+    variants:
+      - pool-group: gecko-1
+        chain-of-trust: ''
+      - pool-group: gecko-2
+        chain-of-trust: ''
+      - pool-group: gecko-3
+        chain-of-trust: trusted
+    config:
+      worker-config:
+        genericWorker:
+          config:
+            headlessTasks: true
+            disableNativePayloads: true
+            downloadsDir: /home/generic-worker/downloads
+            cachesDir: /home/generic-worker/caches
+      implementation: generic-worker/linux-d2g-{chain-of-trust}
+      image: ubuntu-2404-headless
+      minCapacity:
+        by-pool-group:
+          gecko-[13]: 1
+          default: 0
+      maxCapacity:
+        by-pool-group:
+          gecko-1: 40
+          gecko-3: 20
+          default: 4
+      regions: *default-gcp-regions
+      instance_types: [*c4d-standard-8]
   - pool_id: '{pool-group}/decision-gcp-{suffix}-amd-bug1990935'
     description: Decision task worker
     owner: [email protected]