switch from ubuntu-latest to ubuntu-24.04

avoid the complicated version detection

Author: reshi-reshlet

.github/workflows/bwrap.yml

@@ -14,7 +14,7 @@ on:
 jobs:
   pass1:
     name: Run up to Linux build under bubblewrap
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - name: Install bubblewrap
         run: sudo apt install bubblewrap
@@ -26,7 +26,7 @@ jobs:
           # against a commit != HEAD with depth=1, it errors out.
           fetch-depth: 0
       - name: Work around Ubuntu 24.04 bubblewrap bug
-        run: bash .github/workflows/ubuntu_bwrap_fix.sh
+        run: sudo cp .github/workflows/bwrap.apparmor /etc/apparmor.d/bwrap && sudo systemctl reload apparmor
       - name: Query cache for sources
         id: cache
         uses: actions/cache/restore@v4
@@ -63,7 +63,7 @@ jobs:
   pass2:
     name: Run up to Python bootstrap under bubblewrap
     needs: pass1
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - name: Install bubblewrap
         run: sudo apt install bubblewrap
@@ -75,7 +75,7 @@ jobs:
           # against a commit != HEAD with depth=1, it errors out.
           fetch-depth: 0
       - name: Work around Ubuntu 24.04 bubblewrap bug
-        run: bash .github/workflows/ubuntu_bwrap_fix.sh
+        run: sudo cp .github/workflows/bwrap.apparmor /etc/apparmor.d/bwrap && sudo systemctl reload apparmor
       - name: Get pass1_image
         uses: actions/download-artifact@v4
         with:
@@ -118,7 +118,7 @@ jobs:
   pass3:
     name: Run remaining builds under bubblewrap
     needs: pass2
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - name: Install bubblewrap
         run: sudo apt install bubblewrap
@@ -130,7 +130,7 @@ jobs:
           # against a commit != HEAD with depth=1, it errors out.
           fetch-depth: 0
       - name: Work around Ubuntu 24.04 bubblewrap bug
-        run: bash .github/workflows/ubuntu_bwrap_fix.sh
+        run: sudo cp .github/workflows/bwrap.apparmor /etc/apparmor.d/bwrap && sudo systemctl reload apparmor
       - name: Get pass2_image
         uses: actions/download-artifact@v4
         with:

.github/workflows/lint.yml

@@ -30,7 +30,7 @@ jobs:
       - name: Checkout repo
         uses: actions/checkout@v3
       - name: shellcheck
-        run: shellcheck steps/helpers.sh download-distfiles.sh .github/workflows/ubuntu_bwrap_fix.sh
+        run: shellcheck steps/helpers.sh download-distfiles.sh
 
   reuse:
     name: Lint reuse information