infra: parent_image=ubuntu:24.04

[maflcko]

This updates the parent base image to Ubuntu LTS 24.04.

This is required, because otherwise projects will have to act as a package managers and install recent packages so that their projects keep working.

• Fixes base-builder image uses Ubuntu 20.04, new version with Ubuntu 24.04 needed for fuzzing expat #13016 (expat project)
• Fixes Automake upgrade is required #12335 (automake for various projects)
• Fixes Update ossfuzz base image to newer Ubuntu (22.04 or 24.04) ? #11835 (various projects: gdal, CFlite, ...)

The last bump was done in commit 7ca0037

[maflcko]

This requires an infra build, so that projects that wish to (or require to) use the older image can be pinned to the old image.

[maflcko]

The CI failures are expected, because the libssl-dev install is skipped in the GitHub-CI infra-build

[hartwork]

@jonathanmetzman is there a chance for a version of this to be merged? What does it take?

[jonathanmetzman]

@jonathanmetzman is there a chance for a version of this to be merged? What does it take?

This will be a very long process as we may need to migrate our clusterfuzz images and all users around the same time. I think it will come next quarter.

[hartwork]

@jonathanmetzman maybe its a sign that every fuzzing project should be able to say what base image it needs, similar to what GitHub Actions is doing. If that was supported, projects could be updated one by one and there would be no risk of mask-breaking things.

PS: As if Github was knewing about our conversation about Ubuntu 20.04, they sent out this mail just today, kill Ubuntu 20.04 support in GitHub Actions for April 1, 2025 altogether:

[jonathanmetzman]

@jonathanmetzman maybe its a sign that every fuzzing project should be able to say what base image it needs, similar to what GitHub Actions is doing. If that was supported, projects could be updated one by one and there would be no risk of mask-breaking things.

PS: As if Github was knewing about our conversation about Ubuntu 20.04, they sent out this mail just today, kill Ubuntu 20.04 support in GitHub Actions for April 1, 2025 altogether:

I think you are right. We should come up with some kind of system that supports users on diverse OSes and toolchains.

[maflcko]

I am wondering how many projects are actually breaking due to this LTS bump. Imagining a future where OSS-Fuzz is shipped not with a docker image, but via some kind of package, I expect most breakage to stem from clang/llvm bumps, or python bumps (or any other OSS-Fuzz supported language). Thus, to prevent breaks due to package changes, each OSS-Fuzz language package would have to be versioned (and some array of versions should be supported)?