ci: use ubuntu-latest, disable apparmor

.github/workflows/build-ubuntu.yml

@@ -38,7 +38,7 @@ jobs:
   build-base:
     name: Build base ${{ matrix.TAG }}
     if: "!contains(github.event.pull_request.body, '[skip build-base]')"
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-latest
     env:
       PLATFORMS: ${{ matrix.PLATFORMS }}
     strategy:
@@ -52,6 +52,9 @@ jobs:
           - 22.04
           - 20.04
     steps:
+      - name: Disable apparmor restrictions
+        run: sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
+
       - uses: actions/setup-go@v5
         with:
           go-version: '>=1.21.0'
@@ -225,7 +228,7 @@ jobs:
   build-flavours:
     name: Build ${{ matrix.TYPE }}:${{ matrix.TAG }}
     if: (!cancelled() && !failure())
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-latest
     needs: [build-base]
     env:
       PLATFORMS: ${{ matrix.PLATFORMS }}
@@ -269,6 +272,9 @@ jobs:
           - TAG: 20.04
             TYPE: go
     steps:
+      - name: Disable apparmor restrictions
+        run: sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
+
       - uses: actions/setup-go@v5
         with:
           go-version: '>=1.21.0'