ci: several changes related to new qemu test, ansible-lint, python versions, ubuntu versions

[richm]

There is a new QEMU based test which uses the qemu/kvm capability of
github action runners. This is the basis for new bootc/image mode tests
which we will be rolling out in the near future.

ansible-lint requires that the collection path is set so that the requirements
it installs are installed in the correct place.

There has been some general github action deprecation of python versions and
ubuntu versions that we have had to fix.

Remove CONTRIBUTOR from the list of users who can trigger citest.

For more information, see

• ci: ansible-lint needs collection path; tox-lsr 3.5.1 .github#98
• ci: Run QEMU tox integration tests in GitHub workflow .github#94
• Apply a stricter policy to who can run the workflow .github#93
• ci: Remove tft trigger capability for contributors .github#92
• ci: Drop explicit "connection:" for provisioning .github#91

[martinpitt]

Yay green 💚 , so the previous failure was presumably ansible 1.16 dnf5 woes?

[martinpitt]

This test_add_rm failure is a flake and very specific to the tested image. The config looks good, clone1 is the default kernel with correct title and args:

      "ansible_facts": {
          "bootloader_facts": [
              {
                  "args": "no_timer_check console=tty1 console=ttyS0,115200n8 systemd.firstboot=off rootflags=subvol=root test=kernel",
                  "default": true,
                  "id": "f26d5dbc5ba54bfbb3c695a27d7adc47-6.14.0-63.fc42.x86_64_clone1",
                  "index": "0",
                  "initrd": "/boot/initramfs-6.14.0-63.fc42.x86_64.img_clone1",
                  "kernel": "/boot/vmlinuz-6.14.0-63.fc42.x86_64_clone1",
                  "root": "UUID=47f1b394-2df4-43ee-a671-66c16f7a8aeb",
                  "title": "Clone1"
              },
              {
                  "args": "no_timer_check console=tty1 console=ttyS0,115200n8 systemd.firstboot=off rootflags=subvol=root",
                  "default": false,
                  "id": "1031471b08b14ad5b1af48a57b33dfed-6.14.0-63.fc42.x86_64",
                  "index": "1",
                  "initrd": "/boot/initramfs-6.14.0-63.fc42.x86_64.img",
                  "kernel": "/boot/vmlinuz-6.14.0-63.fc42.x86_64",
                  "root": "UUID=47f1b394-2df4-43ee-a671-66c16f7a8aeb",
                  "title": "Fedora Linux (6.14.0-63.fc42.x86_64) 42 (Cloud Edition)"
              }
          ]
      },

and yet this assertion fails:

      "assertion": "(bootloader_facts | selectattr('title', 'defined') | selectattr('title', 'search', 'Clone1') | first).args == __default_args ~ ' test=kernel'"

The test=kernel argument is there, so I suppose __default_args has the wrong value here. Indeed __default_args is taken from the first kernel, which is just wrong -- there is no guarantee that the default kernel isn't the first option (in fact, it seems more logical to be the first option)

I can reproduce this locally with today's image, but not with the one from two days ago (I deleted it now, sorry)

[martinpitt]

I fixed the test in #137, we can rebase this PR afterwards.