chg: add Ubuntu 24.04 LTS

.github/workflows/tests.yml

@@ -22,7 +22,7 @@ jobs:
         name: Long
         strategy:
             matrix:
-                platform: [rockylinux9, debian12, 'opensuse15@opensuse/leap:15.5', ubuntu2204]
+                platform: [rockylinux9, debian12, 'opensuse15@opensuse/leap:15.5', ubuntu2404]
         runs-on: ubuntu-latest
         if: contains(github.event.pull_request.labels.*.name, 'tests:long')
         steps:
@@ -38,7 +38,7 @@ jobs:
         name: Full
         strategy:
             matrix:
-                platform: [rockylinux8, rockylinux9, debian10, debian11, debian12, 'opensuse15@opensuse/leap:15.5', ubuntu1604, ubuntu1804, ubuntu2004, ubuntu2204]
+                platform: [rockylinux8, rockylinux9, debian10, debian11, debian12, 'opensuse15@opensuse/leap:15.5', ubuntu1804, ubuntu2004, ubuntu2204, ubuntu2404]
         runs-on: ubuntu-latest
         if: contains(github.event.pull_request.labels.*.name, 'tests:full')
         steps:

README.md

@@ -74,7 +74,7 @@ Linux distros below are tested with each release, but as this is a security prod
 
 - Debian 12 (Bookworm), 11 (Bullseye), 10 (Buster)
 - RockyLinux 8.x, 9.x
-- Ubuntu LTS 22.04, 20.04, 18.04, 16.04
+- Ubuntu LTS 22.04, 20.04, 18.04
 - OpenSUSE Leap 15.5\*
 
 \*: Note that these versions have no out-of-the-box MFA support, as they lack packaged versions of `pamtester`, `pam-google-authenticator`, or both. Of course, you may compile those yourself.

doc/sphinx/installation/basic.rst

@@ -34,7 +34,7 @@ you are *warmly* advised to run it on the latest up-to-date stable version of yo
 
 - Debian 12 (Bookworm), 11 (Bullseye), 10 (Buster)
 - RockyLinux 8.x, 9.x
-- Ubuntu LTS 22.04, 20.04, 18.04, 16.04
+- Ubuntu LTS 24.04, 22.04, 20.04, 18.04
 - OpenSUSE Leap 15.5\*
 
 \*: Note that these versions have no out-of-the-box MFA support, as they lack packaged versions of ``pamtester``,

docker/Dockerfile.ubuntu2404

@@ -1,4 +1,4 @@
-FROM ubuntu:16.04
+FROM ubuntu:24.04
 LABEL maintainer="stephane.lesimple+bastion@ovhcloud.com"
 
 # cache builds efficiently: just copy the scripts to install packages first
@@ -32,4 +32,4 @@ RUN ["/opt/bastion/bin/admin/install","--new-install"]
 # start at entrypoint
 ENTRYPOINT /opt/bastion/docker/entrypoint.sh
 
-# TESTOPT --has-mfa=1 --has-pamtester=1 --has-piv=1
+# TESTOPT --has-mfa=1 --has-pamtester=1 --has-piv=1 --has-sk=1