workflows: switch to Fedora container for tests and coverage

Use Fedora container instead of Ubuntu for the coverage and test jobs.
This allows installing CRIU directly from the distribution without
needing a PPA.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Signed-off-by: Adrian Reber <areber@redhat.com>

Author: adrianreber

.github/workflows/coverage.yml

@@ -8,6 +8,9 @@ permissions:
 jobs:
   coverage:
     runs-on: ubuntu-latest
+    container:
+      image: fedora:latest
+      options: --privileged
     steps:
       - name: checkout
         uses: actions/checkout@v4
@@ -16,13 +19,9 @@ jobs:
           fetch-depth: 0
       - name: Install tools
         run: |
-          sudo apt-get install -qqy bats iptables iproute2 jq
-          # Add PPA for CRIU
-          sudo add-apt-repository ppa:criu/ppa
-          sudo apt-get update
-          sudo apt-get install -qqy criu
+          dnf install -y bats iptables iproute jq criu golang make
       - name: Run make coverage
-        run: sudo -E make coverage
+        run: make coverage
 
       - name: Upload coverage reports to Codecov
         uses: codecov/codecov-action@v4

.github/workflows/tests.yml

@@ -8,27 +8,23 @@ permissions:
 jobs:
   test:
     runs-on: ubuntu-latest
+    container:
+      image: fedora:latest
+      options: --privileged
     steps:
       - uses: actions/checkout@v4
-      - name: Install Go
-        uses: actions/setup-go@v5
-        with:
-          check-latest: true
       - name: Install tools
         run: |
-          # Add PPA for CRIU
-          sudo add-apt-repository ppa:criu/ppa
-          sudo apt-get update
-          sudo apt-get install -qqy shellcheck bats criu asciidoctor iptables iproute2 kmod jq bash bash-completion zsh fish
-          sudo modprobe -va ip_tables ip6table_filter nf_conntrack nf_conntrack_netlink
+          dnf install -y golang make ShellCheck bats criu rubygem-asciidoctor iptables iproute kmod jq bash bash-completion zsh fish
+          modprobe -va ip_tables ip6table_filter nf_conntrack nf_conntrack_netlink
       - name: Run make shellcheck
         run: make shellcheck
       - name: Run make all
         run: make all
       - name: Run make test
-        run: sudo -E make test
+        run: make test
       - name: Run make test-junit
-        run: sudo -E make test-junit
+        run: make test-junit
       - name: Upload Test Results
         # To display test results from forked repositories they need to
         # be uploaded and then analyzed.