images: Move ubuntu-stable to noble devel series

The current devel series will become 24.04 LTS, thus a major/important
release again. Let's avoid repeating a regression catastrophe like 23.10
mantic, and start testing on it early, so that we have a chance to fix
up everything by the final release.

Disable -proposed for noble, as that has all the broken bits.

Add message filters for AppArmor regressions, and copy naughties which
now apply to 24.04.

images/scripts/debian.setup

@@ -138,7 +138,8 @@ Pin-Priority: 10
 EOF
 fi
 
-if [ "${IMAGE#ubuntu}" != "$IMAGE" ]; then
+# HACK while ubuntu-stable == current noble devel: don't enable -proposed, that's broken by definition
+if [ "${IMAGE#ubuntu}" != "$IMAGE" ] && [ "$RELEASE" != "noble" ]; then
     echo "deb http://archive.ubuntu.com/ubuntu ${RELEASE}-proposed main restricted universe" > /etc/apt/sources.list.d/proposed.list
     cat <<EOF > /etc/apt/preferences.d/all-proposed
 Package: *

images/scripts/ubuntu-stable.bootstrap

@@ -15,4 +15,9 @@ fi
 # release name is the last part of the URL
 rel=${rel##*/}
 
+# noble will become 24.04 LTS, so let's test it before the release so that we can fix issues in time
+if [ "$rel" = "mantic" ]; then
+    rel="noble"
+fi
+
 exec $(dirname $0)/lib/cloudimage.bootstrap "$1" "https://cloud-images.ubuntu.com/daily/server/$rel/current/$rel-server-cloudimg-amd64.img"

machine/machine_core/machine.py

@@ -230,6 +230,10 @@ def allowed_messages(self):
             )
             allowed.append("Error importing insights.client.*newest.egg: No module named 'insights'")
 
+        if self.image == "ubuntu-stable":
+            # https://launchpad.net/bugs/2056739
+            allowed.append('audit.* apparmor="DENIED".* name="/etc/gnutls/config".*')
+
         return allowed
 
     def get_admin_group(self):

naughty/ubuntu-stable/5106-journalctl-since-until-behaviour-change

@@ -0,0 +1,5 @@
+Traceback (most recent call last):
+  File "*", line *, in testEvents
+*
+testlib.Error: timeout
+wait_js_cond(ph_is_present(".cockpit-log-message:contains('Created slice cockpittest.slice.')")): Uncaught (in promise) Error: condition did not become true

naughty/ubuntu-stable/5106-journalctl-since-until-behaviour-change-2

@@ -0,0 +1,4 @@
+Traceback (most recent call last):
+  File "*", line *, in testRebootAndTime
+*
+        *"January 1, 2037"*"check-journal"*"BEFORE BOOT"* condition did not become true

naughty/ubuntu-stable/5364-apparmor-sysfs-zoned

@@ -0,0 +1 @@
+apparmor="DENIED" operation="open" class="file" profile="libvirt*" name="/sys/*/queue/zoned" * comm="qemu-system-x86" requested_mask="r" denied_mask="r"

naughty/ubuntu-stable/5419-w-segfault

@@ -0,0 +1,7 @@
+warning: Unexpected error when getting logged in accounts*
+*
+Traceback (most recent call last):
+  File "test/verify/check-users", line *, in testUserPasswords
+    b.wait_visible("#account-groups-helper")
+*
+testlib.Error: timeout

naughty/ubuntu-stable/5419-w-segfault-2

@@ -0,0 +1,8 @@
+warning: Unexpected error when getting logged in accounts*
+*
+Traceback (most recent call last):
+  File "test/verify/check-users", line *, in testGroups
+    selectGroupFromMenu("testgroup0", enabled=True)
+  File "test/verify/check-users", line *, in selectGroupFromMenu
+*
+testlib.Error: timeout

naughty/ubuntu-stable/5874-lvconvert-hangs-in-kernel

@@ -0,0 +1,6 @@
+[<0>] md_stop+*
+*
+[<0>] dev_suspend+*
+*
+  File "check-storage-lvm2", line *, in testRaidRepair
+    self.dialog_wait_close()  # wait for repair to finish