diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
index 54fb4a466..36361a329 100644
--- a/.github/workflows/codeql.yaml
+++ b/.github/workflows/codeql.yaml
@@ -19,7 +19,7 @@ concurrency:
 jobs:
   analyze:
     name: Analyze
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     timeout-minutes: 360
     permissions:
       security-events: write
diff --git a/.github/workflows/image.yaml b/.github/workflows/image.yaml
index c08c34209..88852f3cf 100644
--- a/.github/workflows/image.yaml
+++ b/.github/workflows/image.yaml
@@ -23,7 +23,7 @@ jobs:
       matrix:
         image: [image, nativelink-worker-init, nativelink-worker-lre-cc]
     name: Publish ${{ matrix.image }}
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     permissions:
       packages: write
       id-token: write
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index f2448dd7c..ebdbf2b93 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -17,7 +17,7 @@ concurrency:
 
 jobs:
   nativelink-dot-com-cloud-rbe-main-legacy-dockerfile-test:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     environment: production
     name: NativeLink.com Cloud / RBE on Main (Legacy Dockerfile Test)
     if: github.ref == 'refs/heads/main'
@@ -110,7 +110,7 @@ jobs:
 
   docker-compose-compiles-nativelink:
     # The type of runner that the job will run on.
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     strategy:
       matrix:
         # Which OS versions we will test on.
@@ -174,7 +174,7 @@ jobs:
         ' 2>&1 | ( ! grep '         PASSED in ' ) # If we get PASSED without (cache) it means there's a cache issue.
 
   integration-tests:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     strategy:
       matrix:
         # Which OS versions we will test on.
diff --git a/.github/workflows/pre-commit.yaml b/.github/workflows/pre-commit.yaml
index 22ca28884..6b4532e12 100644
--- a/.github/workflows/pre-commit.yaml
+++ b/.github/workflows/pre-commit.yaml
@@ -16,7 +16,7 @@ concurrency:
 
 jobs:
   pre-commit-checks:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     timeout-minutes: 20
     steps:
       - name: Checkout
diff --git a/.github/workflows/tagged_image.yaml b/.github/workflows/tagged_image.yaml
index e1b1d8f17..126129b90 100644
--- a/.github/workflows/tagged_image.yaml
+++ b/.github/workflows/tagged_image.yaml
@@ -17,7 +17,7 @@ jobs:
       fail-fast: false
       matrix:
         image: [image, nativelink-worker-init, nativelink-worker-lre-cc]
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     permissions:
       packages: write
       id-token: write
diff --git a/.github/workflows/vale.yaml b/.github/workflows/vale.yaml
index 8e16fb6b6..e205da813 100644
--- a/.github/workflows/vale.yaml
+++ b/.github/workflows/vale.yaml
@@ -12,7 +12,7 @@ concurrency:
 jobs:
   vale:
     name: vale
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     timeout-minutes: 5
     steps:
       - name: Checkout
diff --git a/deployment-examples/docker-compose/Dockerfile b/deployment-examples/docker-compose/Dockerfile
index 8270a90e0..97f99cf0c 100644
--- a/deployment-examples/docker-compose/Dockerfile
+++ b/deployment-examples/docker-compose/Dockerfile
@@ -13,7 +13,7 @@
 # limitations under the License.
 
 # Override this if you want to run on a different version of ubuntu.
-ARG OS_VERSION=22.04
+ARG OS_VERSION=24.04
 # `--compilation_mode` to pass into bazel (eg: opt, dbg, fastbuild).
 ARG OPT_LEVEL=opt
 # Additional bazel flags.
diff --git a/tools/toolchain-buck2/Dockerfile b/tools/toolchain-buck2/Dockerfile
index f4adad8bd..4e2458cb6 100644
--- a/tools/toolchain-buck2/Dockerfile
+++ b/tools/toolchain-buck2/Dockerfile
@@ -14,7 +14,7 @@
 
 # ubuntu:jammy-20240212
 # https://hub.docker.com/layers/library/ubuntu/jammy-20240212/images/sha256-9089166d0211acd54441bb6a532f69e0038287edf625d62fda94784df7f07474
-FROM ubuntu:22.04@sha256:f9d633ff6640178c2d0525017174a688e2c1aef28f0a0130b26bd5554491f0da AS dependencies
+FROM ubuntu:24.04@sha256:99c35190e22d294cdace2783ac55effc69d32896daaa265f0bbedbcde4fbe3e5 AS dependencies
 # hadolint ignore=DL3009,DL3015
 RUN apt-get update && DEBIAN_FRONTEND=noninteractive \
     apt-get install -y \
diff --git a/tools/toolchain-drake/Dockerfile b/tools/toolchain-drake/Dockerfile
index 1d16625c6..5b91d19bf 100644
--- a/tools/toolchain-drake/Dockerfile
+++ b/tools/toolchain-drake/Dockerfile
@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM ubuntu:22.04@sha256:f9d633ff6640178c2d0525017174a688e2c1aef28f0a0130b26bd5554491f0da AS dependencies
+FROM ubuntu:24.04@sha256:99c35190e22d294cdace2783ac55effc69d32896daaa265f0bbedbcde4fbe3e5 AS dependencies
 # hadolint ignore=DL3009
 RUN apt-get update && DEBIAN_FRONTEND=noninteractive \
     apt-get install --no-install-recommends -y \
diff --git a/tools/toolchain-nativelink/Dockerfile b/tools/toolchain-nativelink/Dockerfile
index 91ac59865..e91de1187 100644
--- a/tools/toolchain-nativelink/Dockerfile
+++ b/tools/toolchain-nativelink/Dockerfile
@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM ubuntu:22.04@sha256:f9d633ff6640178c2d0525017174a688e2c1aef28f0a0130b26bd5554491f0da
+FROM ubuntu:24.04@sha256:99c35190e22d294cdace2783ac55effc69d32896daaa265f0bbedbcde4fbe3e5
 
 # Set shell to bash and enable pipefail
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]